@human.tech/waap-sdk 2.2.0 → 2.4.0

package/CHANGELOG.md

@@ -1,5 +1,125 @@
 # @human.tech/waap-sdk
 
+## 2.4.0
+
+### Minor Changes
+
+- 6240f2e: Add `build:bridge-page`, which generates the immutable HTML page a native
+  WebView loads to drive the SDK.
+
+  The page bundles the real `@human.tech/waap-sdk/bridge` entry, so the Flutter
+  package vendors no hand-written JavaScript and the two cannot drift.
+
+  WalletConnect/AppKit is stubbed out of that bundle. It is not a V1 native login
+  method and is reached only through `await import('@reown/…')` inside
+  `SilkWalletConnect.getInstance()`, but an IIFE bundle cannot code-split, so
+  leaving it in inlines the entire AppKit graph — viem, ox, the Coinbase and Base
+  SDKs, an icon set. That is the difference between a 140 kB page and a 4.3 MB
+  one parsed on a phone at every launch. The stub throws a legible error rather
+  than failing as an opaque module-resolution error, so the excluded path stays
+  loud.
+
+  `esbuild` becomes an explicit devDependency; it was previously only reachable
+  as a transitive dependency of `tsdown`.
+
+- a87adeb: Add `@human.tech/waap-sdk/bridge`, the shared runtime a native application's
+  WebView bridge page uses to drive the browser SDK.
+
+  This is the JavaScript half of the Flutter SDK's architecture, and it is
+  deliberately host-agnostic: the same bridge serves any native layer that can
+  install a message channel on a WebView.
+
+  The bridge page is a distinct origin from the wallet. The wallet stays in a
+  cross-origin iframe that application JavaScript cannot reach, so the native host
+  talks only to this module and never to wallet DOM, storage or credentials.
+
+  **A versioned envelope that fails closed.** Unknown protocol versions, message
+  kinds the host must never send (a `response` or `event` among them), missing or
+  non-string ids, unknown bridge methods and malformed JSON are all refused before
+  anything reaches the SDK. A failure is reported against the caller's id whenever
+  one can be recovered, so a native future rejects rather than hanging; only a
+  message with no usable id degrades to an out-of-band event.
+
+  **Exactly-once settlement.** A settled request id is retired, so a late resolve
+  or a second rejection cannot reach the host twice, and a second request reusing
+  an in-flight id is refused rather than silently replacing it.
+
+  **`evm.request` is allowlisted, and the allowlist is load-bearing.**
+  `SILK_METHOD` mixes the EIP-1193 methods with portal-admin and configuration
+  methods — `project_init`, `gastank_topup`, `gastank_update_settings`,
+  `customization_update`, `set_project`, `set_custom_config`. Forwarding the
+  escape hatch unfiltered would hand a native application a path to all of them.
+  The allowed set is enumerated rather than derived from an `eth_`/`wallet_`
+  prefix, so extending the enum cannot silently widen the native surface.
+
+  **Errors cross redacted.** Only a stable native error code, a message and any
+  EIP-1193 number are sent; the originating cause is dropped because it can carry
+  request payloads and wallet internals. The code map is exhaustive over
+  `WaaPErrorCode`, so adding an SDK code fails type-checking here rather than
+  degrading to `unknown` on a user's device.
+
+  33 tests cover the protocol rules, the allowlist against every method it admits
+  and every portal-admin method it must refuse, redaction, teardown and event
+  forwarding.
+
+### Patch Changes
+
+- 306ec08: Add `homepage` (docs) and `keywords` to package.json so the npm sidebar links to docs.waap.human.tech instead of the private silk repo.
+- ef2f368: Release the Squid onboarding latch when the wallet stops reporting progress.
+
+  `onboard()` opens with `if (isSquidReady() || activeLifecycleId) return`, and
+  `activeLifecycleId` was only ever cleared by a `waap_squid_failed` event, a
+  throw inside `onboard()`, a successful `getAccountStatus()` reconcile, or
+  `logout()`. None of those fire when an attempt simply goes silent, so an
+  integrator whose onboarding died without a terminal event was stuck:
+  `getSquidStatus()` reported `provisioning` forever, and every later `onboard()`
+  returned immediately without reaching the wallet.
+
+  An attempt that emits nothing for three minutes is now treated as failed and
+  emits `waap_squid_failed`, which updates status and frees a retry. This bounds silence rather
+  than slowness — the wallet re-posts `pending` on every network-DKG poll, so a
+  legitimately slow provision keeps resetting the timer and is never cut off.
+
+  No API change: the recovery is a plain `onboard()` call.
+
+  Bound the shared native sign-ticket request to 45 seconds. A stalled ticket
+  request previously prevented SDK and CLI Squid onboarding from reaching DKG or
+  reporting a failure.
+
+  Keep CLI TAP registration recovery within the preparation phase and inspect the
+  underlying failure, so an operation ID containing `403` cannot cause a failed
+  transaction to be replayed.
+
+## 2.3.0
+
+### Minor Changes
+
+- 96185f8: Surface a refused gas-tank charge to integrating dapps.
+
+  Squid signing is now billed against the user's WaaP gas tank, and a signature
+  whose fee cannot be covered is refused with HTTP 402 before the signature
+  happens. Previously that reached a dapp as a generic wallet failure — the
+  category a dapp retries, which is exactly wrong for an outcome only the user
+  can resolve and that retrying cannot change.
+
+  Two additions:
+
+  - `WaaPErrorCode` gains `insufficient_balance`, and `normalizeWaaPError`
+    classifies the refusal into it. A gas tank the wallet could not _reach_
+    still classifies as `wallet_error`, so the retryable case keeps its meaning
+    — mirroring the split the server draws between its 402 and its 502.
+  - Errors from the EIP-1193 provider carry a `waapCode` property alongside
+    whatever the wallet threw. The thrown value is deliberately **not** replaced:
+    wagmi and viem detect a user rejection by `code === 4001`, and normalising
+    into a `WaaPError` (whose `code` is a string) would take that away from every
+    existing integration. `waapCode` rides alongside instead, which is what makes
+    `insufficient_balance` reachable from the provider path at all — no EIP-1193
+    code expresses it.
+
+  Note for consumers doing an exhaustive `switch` over `WaaPErrorCode`: widening
+  the union is a compile error for that pattern. Comparisons against individual
+  codes are unaffected.
+
 ## 2.2.0
 
 ### Minor Changes

package/dist/SolanaProvider-CxJX9Dzo.js

@@ -0,0 +1 @@
+const e=require("./evm-64xq-c4L.js");let t=require("events");var n=class{constructor(n,r={},i,a=r){this.lastKnownConversion=`pending`,this.name=`WaaP`,this.version=`1.0.0`,this.icon=`data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA2NCA2NCI+PHJlY3Qgd2lkdGg9IjY0IiBoZWlnaHQ9IjY0IiByeD0iMTYiIGZpbGw9IiMxMTE4MmMiLz48cGF0aCBkPSJNMTYgNDhoMzJMMzIgMTZ6IiBmaWxsPSIjN2NkNGZmIi8+PC9zdmc+`,this._accounts=[],this.accountMode=`tap`,this.loginMethod=null,this._chains=[`solana:mainnet`,`solana:devnet`,`solana:testnet`],this.internalEventEmitter=new t.EventEmitter,this.changeListeners=new Set,this.initializerPromise=null,this.initializedIframeWindow=null,this.walletMessageManager=new e.h(n,e.S(r)),this.ensureIframe=i,this.iframeMounted=!i,this.initializerOptions=a,this.uiMessageManager=new e.a,this.walletMessageManager.addListener({handleResponse:e=>{this.internalEventEmitter.emit(e.id,e)},handleRequest:t=>{t.method===e.O.show_modal?this.uiMessageManager.emit(`show_modal`):t.method===e.O.hide_modal&&this.uiMessageManager.emit(`hide_modal`)},onAccountChanged:async()=>{try{let e=await this.refreshAccounts();this.notifyChange({accounts:e.accounts})}catch(e){console.error(`Failed to refresh Solana accounts:`,e),this._accounts=[],this.notifyChange({accounts:[]})}}})}destroy(){this.walletMessageManager.dispose(),this.internalEventEmitter.removeAllListeners(),this.uiMessageManager.removeAllListeners(),this.changeListeners.clear(),this._accounts=[]}ensureIframeMounted(){if(this.iframeMounted||!this.ensureIframe)return;let e=this.ensureIframe();if(!e)throw Error(`Failed to create WaaP iframe`);this.iframeMounted=!0,this.walletMessageManager.setIframeWindow(e)}async preload(){if(!this.ensureIframe)return;this.ensureIframeMounted();let t=this.walletMessageManager.getIframeWindow();if(!t)throw Error(`WaaP iframe is not mounted`);if(this.initializedIframeWindow===t&&this.initializerPromise)return this.initializerPromise;this.initializedIframeWindow=t,this.initializerPromise=e.v(t,()=>this.selectAccountMode(this.accountMode,this.initializerOptions));try{await this.initializerPromise}catch(e){throw this.initializerPromise=null,this.initializedIframeWindow=null,e}}async ensureInitialized(){await this.preload()}get chains(){return this._chains}get accounts(){return this._accounts}get features(){return{"standard:connect":{version:`1.0.0`,connect:this.connect.bind(this)},"standard:disconnect":{version:`1.0.0`,disconnect:this.disconnect.bind(this)},"standard:events":{version:`1.0.0`,on:this.on.bind(this)},"solana:signMessage":{version:`1.1.0`,signMessage:this.signStandardMessages.bind(this)},"solana:signTransaction":{version:`1.0.0`,supportedTransactionVersions:[`legacy`,0],signTransaction:this.signStandardTransactions.bind(this)},"solana:signAndSendTransaction":{version:`1.0.0`,supportedTransactionVersions:[`legacy`,0],signAndSendTransaction:this.signAndSendStandardTransactions.bind(this)}}}get ui(){return this.uiMessageManager}getAccountStatus(){return{authenticated:this.loginMethod!==null,loginMethod:this.loginMethod,activeMode:this.loginMethod?this.accountMode:null,mode:this.accountMode,conversion:this.loginMethod?this.lastKnownConversion:`not_required`,tap:null,squid:null,accounts:this._accounts[0]?{solana:this._accounts[0].address}:{}}}get session(){return{login:()=>this.login(),logout:()=>this.logout(),getLoginMethod:()=>this.getLoginMethod(),getAccountStatus:()=>this.getCanonicalAccountStatus()}}async getCanonicalAccountStatus(){await this.ensureInitialized();let t=await this.postRequestAndWait({method:e.O.waap_getAccountStatus,params:[],interactionRequired:!1});if(t.error)throw Error(t.error.message||`Failed to read WaaP status`);let n=t.data;return this.syncLoginMethodFromCanonicalStatus(n),n?.conversion&&(this.lastKnownConversion=n.conversion),n}setAccountMode(e){this.accountMode=e,this.initializerPromise=null,this.initializedIframeWindow=null}async selectAccountMode(t,n={}){await this.walletMessageManager.pingIframe(),await this.postRequestAndWait({method:e.O.set_signing_mode,params:[e.g(t,n)],interactionRequired:!1})}setLoginMethod(e){this.loginMethod=e,e===null&&(this._accounts=[],this.notifyChange({accounts:[]}))}getLoginMethod(){return this.loginMethod}async login(){await this.ensureInitialized();let t=await this.restoreSession();if(t)return t;let n=(await this.postRequestAndWait({method:e.O.login,params:[],interactionRequired:!0})).data;return n!==`waap`&&n!==`human`&&n!==`injected`&&n!==`walletconnect`?(this.loginMethod=null,null):(this.loginMethod=n,n)}async logout(){this.lastKnownConversion=`pending`,await this.ensureInitialized(),await this.postRequestAndWait({method:e.O.logout,params:[],interactionRequired:!1}),this.loginMethod=null,this._accounts=[],this.notifyChange({accounts:[]})}async refreshAccounts(){try{await this.ensureInitialized();let e=await this.postRequestAndWait({method:`solana_connect`,params:[{silent:!0}],interactionRequired:!1});if(e.error)return this._accounts=[],{accounts:[]};let t=this.normalizeAccounts(e.data?.accounts||[]);return this._accounts=t,{accounts:this._accounts}}catch{return this._accounts=[],{accounts:[]}}}normalizeAccounts(e){return e.map(e=>({address:e.address,publicKey:e.publicKey instanceof Uint8Array?e.publicKey:new Uint8Array(e.publicKey??[]),chains:e.chains??this._chains,features:e.features??[]}))}async connect(t){if(!this.loginMethod)throw new e.T(`not_authenticated`,`Not authenticated: call login() before connect().`,{operation:{chain:`solana`,method:`solana_connect`}});await this.ensureInitialized();let n=await this.postRequestAndWait({method:`solana_connect`,params:[t||{}],interactionRequired:!t?.silent,signal:t?.signal,timeoutMs:t?.timeoutMs});if(n.error)throw Error(n.error.message||`Failed to connect`);let r=this.normalizeAccounts(n.data?.accounts||[]);return this._accounts=r,this.notifyChange({accounts:this._accounts}),t?.silent||this.internalEventEmitter.emit(`connect`),this.internalEventEmitter.emit(`accountsChanged`,this._accounts.map(e=>e.address)),{accounts:this._accounts}}async restoreSession(){try{let e=await this.getCanonicalAccountStatus();if(e.authenticated&&(e.loginMethod===`waap`||e.loginMethod===`human`||e.loginMethod===`injected`||e.loginMethod===`walletconnect`))return this.loginMethod=e.loginMethod,e.loginMethod}catch{}return null}syncLoginMethodFromCanonicalStatus(e){let t=e.authenticated&&(e.loginMethod===`waap`||e.loginMethod===`human`||e.loginMethod===`injected`||e.loginMethod===`walletconnect`)?e.loginMethod:null;t!==this.loginMethod&&this.setLoginMethod(t)}async disconnect(){await this.ensureInitialized(),await this.postRequestAndWait({method:`solana_disconnect`,params:[],interactionRequired:!1}),this._accounts=[],this.notifyChange({accounts:[]})}async signMessage(e){await this.ensureInitialized();let t=e.account.address;if(!this._accounts.some(e=>e.address===t))throw Error(`Account ${t} is not connected`);let n=await this.postRequestAndWait({method:`solana_signMessage`,params:[{message:Array.from(e.message),account:t}],interactionRequired:!0,signal:e.signal,timeoutMs:e.timeoutMs});if(n.error)throw Error(n.error.message||`Failed to sign message`);return{signedMessage:new Uint8Array(n.data.signedMessage),signature:new Uint8Array(n.data.signature)}}async signTransaction(e){await this.ensureInitialized();let t=e.account.address;if(!this._accounts.some(e=>e.address===t))throw Error(`Account ${t} is not connected`);let n=this.resolveTransactionBytes(e.transaction),r=await this.postRequestAndWait({method:`solana_signTransaction`,params:[{transaction:Array.from(n),account:t,chain:e.chain,withPT:e.withPT}],interactionRequired:!0,signal:e.signal,timeoutMs:e.timeoutMs});if(r.error)throw Error(r.error.message||`Failed to sign transaction`);return{signedTransaction:new Uint8Array(r.data.signedTransaction),signature:new Uint8Array(r.data.signature)}}async signAndSendTransaction(e){await this.ensureInitialized();let t=e.account.address;if(!this._accounts.some(e=>e.address===t))throw Error(`Account ${t} is not connected`);let n=this.resolveTransactionBytes(e.transaction),r=await this.postRequestAndWait({method:`solana_signAndSendTransaction`,params:[{transaction:Array.from(n),account:t,chain:e.chain,options:e.options,withPT:e.withPT}],interactionRequired:!0,signal:e.signal,timeoutMs:e.timeoutMs});if(r.error)throw Error(r.error.message||`Failed to sign and send transaction`);return{signature:r.data.signature}}async signStandardMessages(...e){let t=[];for(let n of e){let e=await this.signMessage({account:n.account,message:n.message});t.push({...e,signatureType:`ed25519`})}return t}async signStandardTransactions(...e){let t=[];for(let n of e){let e=await this.signTransaction({account:n.account,transaction:n.transaction,chain:this.asSupportedChain(n.chain)});t.push({signedTransaction:e.signedTransaction})}return t}async signAndSendStandardTransactions(...e){let t=[];for(let n of e){let e=await this.signAndSendTransaction({account:n.account,transaction:n.transaction,chain:this.asSupportedChain(n.chain),options:this.broadcastOptions(n.options)});t.push({signature:r(e.signature)})}return t}asSupportedChain(t){if(t!==void 0){if(this._chains.includes(t))return t;throw new e.T(`unsupported_input`,`Unsupported Solana Wallet Standard chain: ${t}`,{operation:{chain:`solana`,method:`wallet_standard`}})}}broadcastOptions(t){if(t?.preflightCommitment!==void 0||t?.minContextSlot!==void 0||t?.commitment!==void 0)throw new e.T(`unsupported_input`,`WaaP does not support Wallet Standard RPC commitment options; configure the dapp RPC instead.`,{operation:{chain:`solana`,method:`wallet_standard`}});return t?{skipPreflight:t.skipPreflight,maxRetries:t.maxRetries}:void 0}async requestPermissionToken(t){await this.ensureInitialized();let n={...t,walletMode:this.accountMode},r=await this.postRequestAndWait({method:e.O.waap_requestPermissionToken,params:[n],interactionRequired:!0});if(r.error)throw Error(r.error.message||`Failed to request permission token`);return r.data}async getPermissionTokenStatus(t){return await this.ensureInitialized(),(await this.postRequestAndWait({method:e.O.waap_getPermissionTokenStatus,params:[t],interactionRequired:!1})).data}async clearPermissionToken(t){return await this.ensureInitialized(),(await this.postRequestAndWait({method:e.O.waap_clearPermissionToken,params:[t],interactionRequired:!1})).data}resolveTransactionBytes(e){if(e instanceof Uint8Array)return e;if(Array.isArray(e))return new Uint8Array(e);if(e&&typeof e.serialize==`function`){let t=e.serialize();return t instanceof Uint8Array?t:new Uint8Array(t)}throw Error(`Unsupported transaction format. Pass serialized bytes or a @solana/web3.js Transaction.`)}on(e,t){return e===`change`?(this.changeListeners.add(t),()=>{this.changeListeners.delete(t)}):(this.internalEventEmitter.on(e,t),()=>{this.internalEventEmitter.removeListener(e,t)})}removeListener(e,t){if(e===`change`){this.changeListeners.delete(t);return}this.internalEventEmitter.removeListener(e,t)}async postRequestAndWait(t){let n;try{t.interactionRequired&&e.p({layout:t.method===e.O.login?`auth`:`signing`}),n=await this.walletMessageManager.postSilkRequest({method:t.method,params:t.params,interactionRequired:t.interactionRequired});let r=await e.u({eventEmitter:this.internalEventEmitter,id:n,method:t.method,interactionRequired:t.interactionRequired,signal:t.signal,timeoutMs:t.timeoutMs,onCancel:()=>{this.walletMessageManager.cancelSilkRequest(n,t.method),t.interactionRequired&&e.f()}});if(r.error)throw Error(r.error.message);return r}catch(r){throw t.interactionRequired&&n===void 0&&e.f(),e.E(r,{chain:`solana`,method:String(t.method),requestId:n})}}notifyChange(e){Array.from(this.changeListeners).forEach(t=>{t(e)})}};function r(e){let t=[];for(let n of e){let e=`123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz`.indexOf(n);if(e<0)throw Error(`Invalid base58 transaction signature`);for(let n=0;n<t.length;n+=1)e+=t[n]*58,t[n]=e&255,e>>=8;for(;e>0;)t.push(e&255),e>>=8}let n=0;for(;n<e.length&&e[n]===`1`;)n+=1;return new Uint8Array([...Array(n).fill(0),...t.reverse()])}Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return n}});

package/dist/SolanaProvider-CygEwKg1.mjs

@@ -0,0 +1 @@
+import{E as e,O as t,S as n,T as r,a as i,f as a,g as o,h as s,p as c,u as l,v as u}from"./evm-ChOfSh-X.mjs";import{EventEmitter as d}from"events";var f=class{constructor(e,r={},a,o=r){this.lastKnownConversion=`pending`,this.name=`WaaP`,this.version=`1.0.0`,this.icon=`data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA2NCA2NCI+PHJlY3Qgd2lkdGg9IjY0IiBoZWlnaHQ9IjY0IiByeD0iMTYiIGZpbGw9IiMxMTE4MmMiLz48cGF0aCBkPSJNMTYgNDhoMzJMMzIgMTZ6IiBmaWxsPSIjN2NkNGZmIi8+PC9zdmc+`,this._accounts=[],this.accountMode=`tap`,this.loginMethod=null,this._chains=[`solana:mainnet`,`solana:devnet`,`solana:testnet`],this.internalEventEmitter=new d,this.changeListeners=new Set,this.initializerPromise=null,this.initializedIframeWindow=null,this.walletMessageManager=new s(e,n(r)),this.ensureIframe=a,this.iframeMounted=!a,this.initializerOptions=o,this.uiMessageManager=new i,this.walletMessageManager.addListener({handleResponse:e=>{this.internalEventEmitter.emit(e.id,e)},handleRequest:e=>{e.method===t.show_modal?this.uiMessageManager.emit(`show_modal`):e.method===t.hide_modal&&this.uiMessageManager.emit(`hide_modal`)},onAccountChanged:async()=>{try{let e=await this.refreshAccounts();this.notifyChange({accounts:e.accounts})}catch(e){console.error(`Failed to refresh Solana accounts:`,e),this._accounts=[],this.notifyChange({accounts:[]})}}})}destroy(){this.walletMessageManager.dispose(),this.internalEventEmitter.removeAllListeners(),this.uiMessageManager.removeAllListeners(),this.changeListeners.clear(),this._accounts=[]}ensureIframeMounted(){if(this.iframeMounted||!this.ensureIframe)return;let e=this.ensureIframe();if(!e)throw Error(`Failed to create WaaP iframe`);this.iframeMounted=!0,this.walletMessageManager.setIframeWindow(e)}async preload(){if(!this.ensureIframe)return;this.ensureIframeMounted();let e=this.walletMessageManager.getIframeWindow();if(!e)throw Error(`WaaP iframe is not mounted`);if(this.initializedIframeWindow===e&&this.initializerPromise)return this.initializerPromise;this.initializedIframeWindow=e,this.initializerPromise=u(e,()=>this.selectAccountMode(this.accountMode,this.initializerOptions));try{await this.initializerPromise}catch(e){throw this.initializerPromise=null,this.initializedIframeWindow=null,e}}async ensureInitialized(){await this.preload()}get chains(){return this._chains}get accounts(){return this._accounts}get features(){return{"standard:connect":{version:`1.0.0`,connect:this.connect.bind(this)},"standard:disconnect":{version:`1.0.0`,disconnect:this.disconnect.bind(this)},"standard:events":{version:`1.0.0`,on:this.on.bind(this)},"solana:signMessage":{version:`1.1.0`,signMessage:this.signStandardMessages.bind(this)},"solana:signTransaction":{version:`1.0.0`,supportedTransactionVersions:[`legacy`,0],signTransaction:this.signStandardTransactions.bind(this)},"solana:signAndSendTransaction":{version:`1.0.0`,supportedTransactionVersions:[`legacy`,0],signAndSendTransaction:this.signAndSendStandardTransactions.bind(this)}}}get ui(){return this.uiMessageManager}getAccountStatus(){return{authenticated:this.loginMethod!==null,loginMethod:this.loginMethod,activeMode:this.loginMethod?this.accountMode:null,mode:this.accountMode,conversion:this.loginMethod?this.lastKnownConversion:`not_required`,tap:null,squid:null,accounts:this._accounts[0]?{solana:this._accounts[0].address}:{}}}get session(){return{login:()=>this.login(),logout:()=>this.logout(),getLoginMethod:()=>this.getLoginMethod(),getAccountStatus:()=>this.getCanonicalAccountStatus()}}async getCanonicalAccountStatus(){await this.ensureInitialized();let e=await this.postRequestAndWait({method:t.waap_getAccountStatus,params:[],interactionRequired:!1});if(e.error)throw Error(e.error.message||`Failed to read WaaP status`);let n=e.data;return this.syncLoginMethodFromCanonicalStatus(n),n?.conversion&&(this.lastKnownConversion=n.conversion),n}setAccountMode(e){this.accountMode=e,this.initializerPromise=null,this.initializedIframeWindow=null}async selectAccountMode(e,n={}){await this.walletMessageManager.pingIframe(),await this.postRequestAndWait({method:t.set_signing_mode,params:[o(e,n)],interactionRequired:!1})}setLoginMethod(e){this.loginMethod=e,e===null&&(this._accounts=[],this.notifyChange({accounts:[]}))}getLoginMethod(){return this.loginMethod}async login(){await this.ensureInitialized();let e=await this.restoreSession();if(e)return e;let n=(await this.postRequestAndWait({method:t.login,params:[],interactionRequired:!0})).data;return n!==`waap`&&n!==`human`&&n!==`injected`&&n!==`walletconnect`?(this.loginMethod=null,null):(this.loginMethod=n,n)}async logout(){this.lastKnownConversion=`pending`,await this.ensureInitialized(),await this.postRequestAndWait({method:t.logout,params:[],interactionRequired:!1}),this.loginMethod=null,this._accounts=[],this.notifyChange({accounts:[]})}async refreshAccounts(){try{await this.ensureInitialized();let e=await this.postRequestAndWait({method:`solana_connect`,params:[{silent:!0}],interactionRequired:!1});if(e.error)return this._accounts=[],{accounts:[]};let t=this.normalizeAccounts(e.data?.accounts||[]);return this._accounts=t,{accounts:this._accounts}}catch{return this._accounts=[],{accounts:[]}}}normalizeAccounts(e){return e.map(e=>({address:e.address,publicKey:e.publicKey instanceof Uint8Array?e.publicKey:new Uint8Array(e.publicKey??[]),chains:e.chains??this._chains,features:e.features??[]}))}async connect(e){if(!this.loginMethod)throw new r(`not_authenticated`,`Not authenticated: call login() before connect().`,{operation:{chain:`solana`,method:`solana_connect`}});await this.ensureInitialized();let t=await this.postRequestAndWait({method:`solana_connect`,params:[e||{}],interactionRequired:!e?.silent,signal:e?.signal,timeoutMs:e?.timeoutMs});if(t.error)throw Error(t.error.message||`Failed to connect`);let n=this.normalizeAccounts(t.data?.accounts||[]);return this._accounts=n,this.notifyChange({accounts:this._accounts}),e?.silent||this.internalEventEmitter.emit(`connect`),this.internalEventEmitter.emit(`accountsChanged`,this._accounts.map(e=>e.address)),{accounts:this._accounts}}async restoreSession(){try{let e=await this.getCanonicalAccountStatus();if(e.authenticated&&(e.loginMethod===`waap`||e.loginMethod===`human`||e.loginMethod===`injected`||e.loginMethod===`walletconnect`))return this.loginMethod=e.loginMethod,e.loginMethod}catch{}return null}syncLoginMethodFromCanonicalStatus(e){let t=e.authenticated&&(e.loginMethod===`waap`||e.loginMethod===`human`||e.loginMethod===`injected`||e.loginMethod===`walletconnect`)?e.loginMethod:null;t!==this.loginMethod&&this.setLoginMethod(t)}async disconnect(){await this.ensureInitialized(),await this.postRequestAndWait({method:`solana_disconnect`,params:[],interactionRequired:!1}),this._accounts=[],this.notifyChange({accounts:[]})}async signMessage(e){await this.ensureInitialized();let t=e.account.address;if(!this._accounts.some(e=>e.address===t))throw Error(`Account ${t} is not connected`);let n=await this.postRequestAndWait({method:`solana_signMessage`,params:[{message:Array.from(e.message),account:t}],interactionRequired:!0,signal:e.signal,timeoutMs:e.timeoutMs});if(n.error)throw Error(n.error.message||`Failed to sign message`);return{signedMessage:new Uint8Array(n.data.signedMessage),signature:new Uint8Array(n.data.signature)}}async signTransaction(e){await this.ensureInitialized();let t=e.account.address;if(!this._accounts.some(e=>e.address===t))throw Error(`Account ${t} is not connected`);let n=this.resolveTransactionBytes(e.transaction),r=await this.postRequestAndWait({method:`solana_signTransaction`,params:[{transaction:Array.from(n),account:t,chain:e.chain,withPT:e.withPT}],interactionRequired:!0,signal:e.signal,timeoutMs:e.timeoutMs});if(r.error)throw Error(r.error.message||`Failed to sign transaction`);return{signedTransaction:new Uint8Array(r.data.signedTransaction),signature:new Uint8Array(r.data.signature)}}async signAndSendTransaction(e){await this.ensureInitialized();let t=e.account.address;if(!this._accounts.some(e=>e.address===t))throw Error(`Account ${t} is not connected`);let n=this.resolveTransactionBytes(e.transaction),r=await this.postRequestAndWait({method:`solana_signAndSendTransaction`,params:[{transaction:Array.from(n),account:t,chain:e.chain,options:e.options,withPT:e.withPT}],interactionRequired:!0,signal:e.signal,timeoutMs:e.timeoutMs});if(r.error)throw Error(r.error.message||`Failed to sign and send transaction`);return{signature:r.data.signature}}async signStandardMessages(...e){let t=[];for(let n of e){let e=await this.signMessage({account:n.account,message:n.message});t.push({...e,signatureType:`ed25519`})}return t}async signStandardTransactions(...e){let t=[];for(let n of e){let e=await this.signTransaction({account:n.account,transaction:n.transaction,chain:this.asSupportedChain(n.chain)});t.push({signedTransaction:e.signedTransaction})}return t}async signAndSendStandardTransactions(...e){let t=[];for(let n of e){let e=await this.signAndSendTransaction({account:n.account,transaction:n.transaction,chain:this.asSupportedChain(n.chain),options:this.broadcastOptions(n.options)});t.push({signature:p(e.signature)})}return t}asSupportedChain(e){if(e!==void 0){if(this._chains.includes(e))return e;throw new r(`unsupported_input`,`Unsupported Solana Wallet Standard chain: ${e}`,{operation:{chain:`solana`,method:`wallet_standard`}})}}broadcastOptions(e){if(e?.preflightCommitment!==void 0||e?.minContextSlot!==void 0||e?.commitment!==void 0)throw new r(`unsupported_input`,`WaaP does not support Wallet Standard RPC commitment options; configure the dapp RPC instead.`,{operation:{chain:`solana`,method:`wallet_standard`}});return e?{skipPreflight:e.skipPreflight,maxRetries:e.maxRetries}:void 0}async requestPermissionToken(e){await this.ensureInitialized();let n={...e,walletMode:this.accountMode},r=await this.postRequestAndWait({method:t.waap_requestPermissionToken,params:[n],interactionRequired:!0});if(r.error)throw Error(r.error.message||`Failed to request permission token`);return r.data}async getPermissionTokenStatus(e){return await this.ensureInitialized(),(await this.postRequestAndWait({method:t.waap_getPermissionTokenStatus,params:[e],interactionRequired:!1})).data}async clearPermissionToken(e){return await this.ensureInitialized(),(await this.postRequestAndWait({method:t.waap_clearPermissionToken,params:[e],interactionRequired:!1})).data}resolveTransactionBytes(e){if(e instanceof Uint8Array)return e;if(Array.isArray(e))return new Uint8Array(e);if(e&&typeof e.serialize==`function`){let t=e.serialize();return t instanceof Uint8Array?t:new Uint8Array(t)}throw Error(`Unsupported transaction format. Pass serialized bytes or a @solana/web3.js Transaction.`)}on(e,t){return e===`change`?(this.changeListeners.add(t),()=>{this.changeListeners.delete(t)}):(this.internalEventEmitter.on(e,t),()=>{this.internalEventEmitter.removeListener(e,t)})}removeListener(e,t){if(e===`change`){this.changeListeners.delete(t);return}this.internalEventEmitter.removeListener(e,t)}async postRequestAndWait(n){let r;try{n.interactionRequired&&c({layout:n.method===t.login?`auth`:`signing`}),r=await this.walletMessageManager.postSilkRequest({method:n.method,params:n.params,interactionRequired:n.interactionRequired});let e=await l({eventEmitter:this.internalEventEmitter,id:r,method:n.method,interactionRequired:n.interactionRequired,signal:n.signal,timeoutMs:n.timeoutMs,onCancel:()=>{this.walletMessageManager.cancelSilkRequest(r,n.method),n.interactionRequired&&a()}});if(e.error)throw Error(e.error.message);return e}catch(t){throw n.interactionRequired&&r===void 0&&a(),e(t,{chain:`solana`,method:String(n.method),requestId:r})}}notifyChange(e){Array.from(this.changeListeners).forEach(t=>{t(e)})}};function p(e){let t=[];for(let n of e){let e=`123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz`.indexOf(n);if(e<0)throw Error(`Invalid base58 transaction signature`);for(let n=0;n<t.length;n+=1)e+=t[n]*58,t[n]=e&255,e>>=8;for(;e>0;)t.push(e&255),e>>=8}let n=0;for(;n<e.length&&e[n]===`1`;)n+=1;return new Uint8Array([...Array(n).fill(0),...t.reverse()])}export{f as t};

package/dist/WaaPError-BuwfZjBk.d.mts

@@ -0,0 +1,52 @@
+//#region src/lib/preload.d.ts
+/** Any public WaaP facade that can warm the shared wallet iframe. */
+interface WaaPPreloadTarget {
+  preload(): Promise<void>;
+}
+interface WaaPIdlePreloadOptions {
+  /** Browser deadline for an idle callback. Default: 2 seconds. */
+  timeoutMs?: number;
+  /** Observes a best-effort warmup failure without making page startup fail. */
+  onError?: (error: unknown) => void;
+}
+type CancelWaaPPreload = () => void;
+/**
+ * Warm an already-created WaaP facade when the browser is idle. It never opens
+ * wallet UI, and cancellation is useful when the embedding route unmounts.
+ *
+ * Use this after the host page's LCP. For a likely immediate action (for
+ * example Connect button hover/focus), call `target.preload()` directly.
+ */
+declare const preloadWaaPOnIdle: (target: WaaPPreloadTarget, options?: WaaPIdlePreloadOptions) => CancelWaaPPreload;
+//#endregion
+//#region src/lib/WaaPError.d.ts
+/** Stable, safe error vocabulary for non-EIP-1193 SDK facades. */
+type WaaPErrorCode = 'cancelled' | 'timeout' | 'user_rejected' | 'policy_rejected' |
+/**
+ * The user's gas tank cannot cover a fee the operation is billed. Distinct
+ * from `wallet_error` because it is the user's to fix and retrying changes
+ * nothing until they top up — the same split the server draws between a 402
+ * and a 502.
+ */
+'insufficient_balance' | 'not_authenticated' | 'not_connected' | 'unsupported_input' | 'wallet_error' | 'maintenance' | 'unknown';
+type WaaPOperationMetadata = {
+  /**
+   * The chain the failed operation targeted. Declared structurally rather than
+   * as `WaaPChain` so the error vocabulary stays free of the initializer graph.
+   */
+  chain?: 'evm' | 'sui' | 'solana';
+  method?: string;
+  requestId?: string;
+};
+declare class WaaPError extends Error {
+  readonly code: WaaPErrorCode;
+  readonly operation?: WaaPOperationMetadata;
+  readonly cause?: unknown;
+  constructor(code: WaaPErrorCode, message: string, options?: {
+    cause?: unknown;
+    operation?: WaaPOperationMetadata;
+  });
+}
+declare function normalizeWaaPError(error: unknown, operation?: WaaPOperationMetadata): WaaPError;
+//#endregion
+export { CancelWaaPPreload as a, preloadWaaPOnIdle as c, normalizeWaaPError as i, WaaPErrorCode as n, WaaPIdlePreloadOptions as o, WaaPOperationMetadata as r, WaaPPreloadTarget as s, WaaPError as t };

package/dist/WaaPError-BuwfZjBk.d.ts

@@ -0,0 +1,52 @@
+//#region src/lib/preload.d.ts
+/** Any public WaaP facade that can warm the shared wallet iframe. */
+interface WaaPPreloadTarget {
+  preload(): Promise<void>;
+}
+interface WaaPIdlePreloadOptions {
+  /** Browser deadline for an idle callback. Default: 2 seconds. */
+  timeoutMs?: number;
+  /** Observes a best-effort warmup failure without making page startup fail. */
+  onError?: (error: unknown) => void;
+}
+type CancelWaaPPreload = () => void;
+/**
+ * Warm an already-created WaaP facade when the browser is idle. It never opens
+ * wallet UI, and cancellation is useful when the embedding route unmounts.
+ *
+ * Use this after the host page's LCP. For a likely immediate action (for
+ * example Connect button hover/focus), call `target.preload()` directly.
+ */
+declare const preloadWaaPOnIdle: (target: WaaPPreloadTarget, options?: WaaPIdlePreloadOptions) => CancelWaaPPreload;
+//#endregion
+//#region src/lib/WaaPError.d.ts
+/** Stable, safe error vocabulary for non-EIP-1193 SDK facades. */
+type WaaPErrorCode = 'cancelled' | 'timeout' | 'user_rejected' | 'policy_rejected' |
+/**
+ * The user's gas tank cannot cover a fee the operation is billed. Distinct
+ * from `wallet_error` because it is the user's to fix and retrying changes
+ * nothing until they top up — the same split the server draws between a 402
+ * and a 502.
+ */
+'insufficient_balance' | 'not_authenticated' | 'not_connected' | 'unsupported_input' | 'wallet_error' | 'maintenance' | 'unknown';
+type WaaPOperationMetadata = {
+  /**
+   * The chain the failed operation targeted. Declared structurally rather than
+   * as `WaaPChain` so the error vocabulary stays free of the initializer graph.
+   */
+  chain?: 'evm' | 'sui' | 'solana';
+  method?: string;
+  requestId?: string;
+};
+declare class WaaPError extends Error {
+  readonly code: WaaPErrorCode;
+  readonly operation?: WaaPOperationMetadata;
+  readonly cause?: unknown;
+  constructor(code: WaaPErrorCode, message: string, options?: {
+    cause?: unknown;
+    operation?: WaaPOperationMetadata;
+  });
+}
+declare function normalizeWaaPError(error: unknown, operation?: WaaPOperationMetadata): WaaPError;
+//#endregion
+export { CancelWaaPPreload as a, preloadWaaPOnIdle as c, normalizeWaaPError as i, WaaPErrorCode as n, WaaPIdlePreloadOptions as o, WaaPOperationMetadata as r, WaaPPreloadTarget as s, WaaPError as t };

package/dist/{WaaPError-D64X-oFe.d.ts → WalletModalController-Qh9LNwW5.d.ts}

@@ -1,4 +1,4 @@
-import { D as SilkRequestCancellation, E as SilkRequest, M as SILK_METHOD, N as SilkNotificationData, O as SilkResponse } from "./types-BmCqyQtu.js";
+import { D as SilkRequest, N as SILK_METHOD, O as SilkRequestCancellation, P as SilkNotificationData, k as SilkResponse } from "./types-x7TOncUp.js";
 //#region src/lib/WalletMessageManager.d.ts
 type PostSilkRequestArgs = {
   method: keyof typeof SILK_METHOD;
@@ -26,12 +26,25 @@ interface SquidLifecycleNotification {
  * Listener interface for WalletMessageManager
  */
 interface MessageListenerConfig {
-  handleResponse: (response: SilkResponse) => void;
-  handleRequest: (request: SilkRequest) => void;
+  /**
+   * Optional so a listener interested only in notifications does not have to
+   * pass stubs. `shouldHandleTerminalResponse` consumes the id, so a second
+   * registration with a no-op `handleResponse` would swallow the response for
+   * whichever entry the dispatcher reached first -- correct only by
+   * registration order, and silently wrong if that order ever changed.
+   */
+  handleResponse?: (response: SilkResponse) => void;
+  handleRequest?: (request: SilkRequest) => void;
   onReceiveConnectNotif?: () => void;
   onAccountChanged?: (newAccount: string) => void;
   onAsyncTxNotification?: (notification: AsyncTxNotification) => void;
   onSquidLifecycleNotification?: (notification: SquidLifecycleNotification) => void;
+  /**
+   * A native social login finished in the system browser. The wallet keeps the
+   * originating `login` request open across that hand-off, so this is the only
+   * signal that it is over.
+   */
+  onAuthComplete?: (result: 'success' | 'error') => void;
 }
 type WalletHandshakeDiagnostics = {
   walletOrigin: string;
@@ -121,48 +134,4 @@ declare const subscribeWaaPIframeLifecycle: (listener: (event: WaaPIframeLifecyc
  */
 declare const getWaaPIframeDiagnostics: () => WaaPIframeDiagnostics;
 //#endregion
-//#region src/lib/preload.d.ts
-/** Any public WaaP facade that can warm the shared wallet iframe. */
-interface WaaPPreloadTarget {
-  preload(): Promise<void>;
-}
-interface WaaPIdlePreloadOptions {
-  /** Browser deadline for an idle callback. Default: 2 seconds. */
-  timeoutMs?: number;
-  /** Observes a best-effort warmup failure without making page startup fail. */
-  onError?: (error: unknown) => void;
-}
-type CancelWaaPPreload = () => void;
-/**
- * Warm an already-created WaaP facade when the browser is idle. It never opens
- * wallet UI, and cancellation is useful when the embedding route unmounts.
- *
- * Use this after the host page's LCP. For a likely immediate action (for
- * example Connect button hover/focus), call `target.preload()` directly.
- */
-declare const preloadWaaPOnIdle: (target: WaaPPreloadTarget, options?: WaaPIdlePreloadOptions) => CancelWaaPPreload;
-//#endregion
-//#region src/lib/WaaPError.d.ts
-/** Stable, safe error vocabulary for non-EIP-1193 SDK facades. */
-type WaaPErrorCode = 'cancelled' | 'timeout' | 'user_rejected' | 'policy_rejected' | 'not_authenticated' | 'not_connected' | 'unsupported_input' | 'wallet_error' | 'maintenance' | 'unknown';
-type WaaPOperationMetadata = {
-  /**
-   * The chain the failed operation targeted. Declared structurally rather than
-   * as `WaaPChain` so the error vocabulary stays free of the initializer graph.
-   */
-  chain?: 'evm' | 'sui' | 'solana';
-  method?: string;
-  requestId?: string;
-};
-declare class WaaPError extends Error {
-  readonly code: WaaPErrorCode;
-  readonly operation?: WaaPOperationMetadata;
-  readonly cause?: unknown;
-  constructor(code: WaaPErrorCode, message: string, options?: {
-    cause?: unknown;
-    operation?: WaaPOperationMetadata;
-  });
-}
-declare function normalizeWaaPError(error: unknown, operation?: WaaPOperationMetadata): WaaPError;
-//#endregion
-export { CancelWaaPPreload as a, preloadWaaPOnIdle as c, WaaPIframeLifecyclePhase as d, getWaaPIframeDiagnostics as f, WalletMessageManager as h, normalizeWaaPError as i, WaaPIframeDiagnostics as l, PostSilkRequestArgs as m, WaaPErrorCode as n, WaaPIdlePreloadOptions as o, subscribeWaaPIframeLifecycle as p, WaaPOperationMetadata as r, WaaPPreloadTarget as s, WaaPError as t, WaaPIframeLifecycleEvent as u };
+export { subscribeWaaPIframeLifecycle as a, getWaaPIframeDiagnostics as i, WaaPIframeLifecycleEvent as n, PostSilkRequestArgs as o, WaaPIframeLifecyclePhase as r, WalletMessageManager as s, WaaPIframeDiagnostics as t };

package/dist/{WaaPError-QHdMfZW7.d.mts → WalletModalController-wIHBGOVd.d.mts}

@@ -1,4 +1,4 @@
-import { D as SilkRequestCancellation, E as SilkRequest, M as SILK_METHOD, N as SilkNotificationData, O as SilkResponse } from "./types-BmCqyQtu.mjs";
+import { D as SilkRequest, N as SILK_METHOD, O as SilkRequestCancellation, P as SilkNotificationData, k as SilkResponse } from "./types-x7TOncUp.mjs";
 //#region src/lib/WalletMessageManager.d.ts
 type PostSilkRequestArgs = {
   method: keyof typeof SILK_METHOD;
@@ -26,12 +26,25 @@ interface SquidLifecycleNotification {
  * Listener interface for WalletMessageManager
  */
 interface MessageListenerConfig {
-  handleResponse: (response: SilkResponse) => void;
-  handleRequest: (request: SilkRequest) => void;
+  /**
+   * Optional so a listener interested only in notifications does not have to
+   * pass stubs. `shouldHandleTerminalResponse` consumes the id, so a second
+   * registration with a no-op `handleResponse` would swallow the response for
+   * whichever entry the dispatcher reached first -- correct only by
+   * registration order, and silently wrong if that order ever changed.
+   */
+  handleResponse?: (response: SilkResponse) => void;
+  handleRequest?: (request: SilkRequest) => void;
   onReceiveConnectNotif?: () => void;
   onAccountChanged?: (newAccount: string) => void;
   onAsyncTxNotification?: (notification: AsyncTxNotification) => void;
   onSquidLifecycleNotification?: (notification: SquidLifecycleNotification) => void;
+  /**
+   * A native social login finished in the system browser. The wallet keeps the
+   * originating `login` request open across that hand-off, so this is the only
+   * signal that it is over.
+   */
+  onAuthComplete?: (result: 'success' | 'error') => void;
 }
 type WalletHandshakeDiagnostics = {
   walletOrigin: string;
@@ -121,48 +134,4 @@ declare const subscribeWaaPIframeLifecycle: (listener: (event: WaaPIframeLifecyc
  */
 declare const getWaaPIframeDiagnostics: () => WaaPIframeDiagnostics;
 //#endregion
-//#region src/lib/preload.d.ts
-/** Any public WaaP facade that can warm the shared wallet iframe. */
-interface WaaPPreloadTarget {
-  preload(): Promise<void>;
-}
-interface WaaPIdlePreloadOptions {
-  /** Browser deadline for an idle callback. Default: 2 seconds. */
-  timeoutMs?: number;
-  /** Observes a best-effort warmup failure without making page startup fail. */
-  onError?: (error: unknown) => void;
-}
-type CancelWaaPPreload = () => void;
-/**
- * Warm an already-created WaaP facade when the browser is idle. It never opens
- * wallet UI, and cancellation is useful when the embedding route unmounts.
- *
- * Use this after the host page's LCP. For a likely immediate action (for
- * example Connect button hover/focus), call `target.preload()` directly.
- */
-declare const preloadWaaPOnIdle: (target: WaaPPreloadTarget, options?: WaaPIdlePreloadOptions) => CancelWaaPPreload;
-//#endregion
-//#region src/lib/WaaPError.d.ts
-/** Stable, safe error vocabulary for non-EIP-1193 SDK facades. */
-type WaaPErrorCode = 'cancelled' | 'timeout' | 'user_rejected' | 'policy_rejected' | 'not_authenticated' | 'not_connected' | 'unsupported_input' | 'wallet_error' | 'maintenance' | 'unknown';
-type WaaPOperationMetadata = {
-  /**
-   * The chain the failed operation targeted. Declared structurally rather than
-   * as `WaaPChain` so the error vocabulary stays free of the initializer graph.
-   */
-  chain?: 'evm' | 'sui' | 'solana';
-  method?: string;
-  requestId?: string;
-};
-declare class WaaPError extends Error {
-  readonly code: WaaPErrorCode;
-  readonly operation?: WaaPOperationMetadata;
-  readonly cause?: unknown;
-  constructor(code: WaaPErrorCode, message: string, options?: {
-    cause?: unknown;
-    operation?: WaaPOperationMetadata;
-  });
-}
-declare function normalizeWaaPError(error: unknown, operation?: WaaPOperationMetadata): WaaPError;
-//#endregion
-export { CancelWaaPPreload as a, preloadWaaPOnIdle as c, WaaPIframeLifecyclePhase as d, getWaaPIframeDiagnostics as f, WalletMessageManager as h, normalizeWaaPError as i, WaaPIframeDiagnostics as l, PostSilkRequestArgs as m, WaaPErrorCode as n, WaaPIdlePreloadOptions as o, subscribeWaaPIframeLifecycle as p, WaaPOperationMetadata as r, WaaPPreloadTarget as s, WaaPError as t, WaaPIframeLifecycleEvent as u };
+export { subscribeWaaPIframeLifecycle as a, getWaaPIframeDiagnostics as i, WaaPIframeLifecycleEvent as n, PostSilkRequestArgs as o, WaaPIframeLifecyclePhase as r, WalletMessageManager as s, WaaPIframeDiagnostics as t };

package/dist/bridge.d.mts

@@ -0,0 +1,158 @@
+import { F as WaaPSdkPlatform, l as SilkEthereumProviderInterface, n as InitSilkOptions } from "./types-x7TOncUp.mjs";
+import { i as getWaaPIframeDiagnostics } from "./WalletModalController-wIHBGOVd.mjs";
+import { y as WaaPSolanaProviderInterface } from "./types-Bfz205sD.mjs";
+//#region src/lib/bridge/mobileBridge.d.ts
+type MobileBridgeOptions = {
+  /** Serialized outbound envelopes, host-bound. */
+  post: (message: string) => void;
+  /**
+   * Deferred so the WebView can load the bridge page before the wallet iframe
+   * is mounted, and so tests can drive a stub provider.
+   */
+  createProvider: () => SilkEthereumProviderInterface;
+  /**
+   * The Solana facade over the same wallet iframe. Optional so a host that only
+   * needs EVM -- and every existing test -- keeps working unchanged.
+   */
+  createSolanaProvider?: () => WaaPSolanaProviderInterface;
+  /**
+   * Stamped on every outbound message so the host can tell this frame apart
+   * from the cross-origin frames that share its JavaScript channel. See
+   * `BridgeResponse['token']`.
+   */
+  token?: string;
+};
+type MobileBridge = {
+  handleMessage: (raw: unknown) => void;
+  dispose: () => void;
+};
+declare const createMobileBridge: (options: MobileBridgeOptions) => MobileBridge;
+//#endregion
+//#region src/lib/bridge/evmMethods.d.ts
+/**
+ * The EIP-1193 methods `evm.request` may forward.
+ *
+ * `SILK_METHOD` is not usable as the allowlist: it also carries portal-admin
+ * and wallet-configuration methods (`project_init`, `gastank_topup`,
+ * `customization_update`, `set_project`, `set_custom_config`) that a native
+ * application must never be able to reach through the escape hatch. The list is
+ * enumerated rather than derived from an `eth_`/`wallet_` prefix so adding a
+ * method to the enum cannot silently widen the native surface.
+ */
+declare const BRIDGE_EVM_METHODS: readonly string[];
+//#endregion
+//#region src/lib/bridge/protocol.d.ts
+/**
+ * Wire protocol between a native host (Flutter/Dart) and the browser SDK
+ * running in a WebView bridge page.
+ *
+ * The host is untrusted input. Every inbound message is parsed defensively and
+ * anything that is not a well-formed request for a known method is refused
+ * without reaching the SDK.
+ */
+declare const BRIDGE_PROTOCOL_VERSION = 1;
+type BridgeMethod = 'session.login' | 'session.logout' | 'session.status' | 'evm.connect' | 'evm.request' | 'solana.connect' | 'solana.disconnect' | 'solana.accounts' | 'solana.signMessage' | 'solana.signTransaction' | 'solana.signAndSendTransaction' | 'sdk.preload' | 'sdk.destroy';
+/**
+ * Codes the Dart layer switches on. They are deliberately not the SDK's
+ * `WaaPErrorCode` values: the native surface owns its own stable vocabulary and
+ * must not break when the SDK's internal codes are extended.
+ */
+type BridgeErrorCode = 'cancelled' | 'timeout' | 'userRejected' | 'policyRejected' | 'insufficientBalance' | 'notAuthenticated' | 'notConnected' | 'unsupportedInput' | 'unsupportedMethod' | 'walletError' | 'maintenance' | 'protocolError' | 'bridgeUnavailable' | 'serializationFailed' | 'unknown';
+type BridgeError = {
+  code: BridgeErrorCode;
+  message: string;
+  /** Present only when the wallet supplied an EIP-1193 numeric code. */
+  eip1193Code?: number;
+  method?: string;
+};
+type BridgeRequest = {
+  version: number;
+  kind: 'request';
+  id: string;
+  method: BridgeMethod;
+  params?: unknown;
+};
+/**
+ * `token` authenticates the sender as the bridge page's main frame.
+ *
+ * A WebView JavaScript channel is not origin-scoped. On Android it is backed by
+ * `addJavascriptInterface`, which injects the object into *every* frame and
+ * tells the host nothing about which one called — and this page deliberately
+ * contains the wallet, cross-origin, which in turn loads third-party login
+ * frames. Any of them could otherwise post a forged `accountsChanged` or a
+ * forged `session.status` response straight to the native layer.
+ *
+ * The host mints a secret per page load and hands it to the main frame only.
+ * A cross-origin subframe cannot read a main-frame variable, so it cannot
+ * produce this value, and the host drops anything that arrives without it.
+ */
+type BridgeResponse = {
+  version: number;
+  kind: 'response';
+  id: string;
+  result?: unknown;
+  error?: BridgeError;
+  token?: string;
+};
+type BridgeEvent = {
+  version: number;
+  kind: 'event';
+  event: string;
+  data?: unknown;
+  token?: string;
+};
+type ParsedHostMessage = {
+  ok: true;
+  request: BridgeRequest;
+} | {
+  ok: false;
+  id: string | null;
+  error: BridgeError;
+};
+declare const parseHostMessage: (raw: unknown) => ParsedHostMessage;
+//#endregion
+//#region src/bridge.d.ts
+type NativeHostWindow = Window & {
+  ReactNativeWebView?: {
+    postMessage: (message: string) => void;
+  };
+  webkit?: {
+    messageHandlers?: Record<string, {
+      postMessage: (message: string) => void;
+    }>;
+  };
+  [channel: string]: unknown;
+};
+/**
+ * Resolve the host channel this WebView exposes. `channel` names the JavaScript
+ * interface on Android and the message handler on iOS; both are installed by
+ * the native layer before the page loads.
+ */
+declare const resolveNativeHostPost: (channel?: string, scope?: NativeHostWindow) => ((message: string) => void) | null;
+type StartMobileBridgeOptions = {
+  init?: InitSilkOptions;
+  channel?: string;
+  post?: (message: string) => void;
+  /**
+   * Secret the host minted for this page load, echoed on every outbound
+   * message. The channel is shared with every frame in the WebView, including
+   * the cross-origin wallet; this is what distinguishes this frame from them.
+   */
+  token?: string;
+  /**
+   * The SDK actually facing the integrator. This bundle is compiled into
+   * `waap-sdk-flutter`, so a Flutter session would otherwise report itself as
+   * the web SDK, at the web SDK's version. Attribution only.
+   */
+  sdkPlatform?: WaaPSdkPlatform;
+  sdkVersion?: string;
+};
+/**
+ * Wire the bridge to the WebView host and begin accepting host messages.
+ *
+ * Throws when no host channel is present rather than falling back to a no-op:
+ * a silently deaf bridge would leave every native call pending forever.
+ */
+declare const startMobileBridge: (options?: StartMobileBridgeOptions) => MobileBridge;
+//#endregion
+export { BRIDGE_EVM_METHODS, BRIDGE_PROTOCOL_VERSION, type BridgeError, type BridgeErrorCode, type BridgeEvent, type BridgeMethod, type BridgeRequest, type BridgeResponse, type MobileBridge, type MobileBridgeOptions, StartMobileBridgeOptions, createMobileBridge, getWaaPIframeDiagnostics, parseHostMessage, resolveNativeHostPost, startMobileBridge };