@phantom/browser-sdk 1.0.5 → 1.0.7

package/README.md

@@ -985,6 +985,46 @@ function toggleDebug(enabled: boolean) {
 }
 ```
 
+## Dapp-Sponsored Transactions (presignTransaction)
+
+Pass `presignTransaction` directly to `signAndSendTransaction` for calls that need co-signing. Calls without it proceed normally — it is never applied globally.
+
+> **Important:** Phantom embedded wallets do not accept pre-signed transactions. If your use case requires a second signer (e.g. your app as the fee payer), that signing must happen via this option, after Phantom has constructed and validated the transaction. This restriction does not apply to injected providers (e.g. the Phantom browser extension).
+
+> **Note:** `presignTransaction` only fires for Solana transactions via the embedded provider. EVM transactions and injected providers are unaffected.
+
+### Transaction format
+
+The `transaction` string is **base64url-encoded** (URL-safe base64 without `=` padding, using `-` and `_` instead of `+` and `/`).
+
+The SDK exports `base64urlDecode` and `base64urlEncode` utilities:
+
+```ts
+import { base64urlDecode, base64urlEncode } from "@phantom/browser-sdk";
+```
+
+### Example: Dapp fee payer
+
+```ts
+import { base64urlDecode, base64urlEncode } from "@phantom/browser-sdk";
+import { Keypair, VersionedTransaction } from "@solana/web3.js";
+
+const feePayerKeypair = Keypair.fromSecretKey(/* your fee payer secret key */);
+
+// This call co-signs as fee payer
+const result = await sdk.solana.signAndSendTransaction(transaction, {
+  presignTransaction: async (tx, context) => {
+    const txBytes = base64urlDecode(tx);
+    const versionedTx = VersionedTransaction.deserialize(txBytes);
+    versionedTx.sign([feePayerKeypair]);
+    return base64urlEncode(versionedTx.serialize());
+  },
+});
+
+// This call has no co-signer
+const result2 = await sdk.solana.signAndSendTransaction(otherTransaction);
+```
+
 ## Transaction Examples
 
 ### Solana Transactions

package/dist/index.d.ts

@@ -1,12 +1,13 @@
 import { EmbeddedProviderConfig, EmbeddedProviderAuthType, ConnectResult as ConnectResult$1, WalletAddress, EmbeddedProviderEvent, EventCallback } from '@phantom/embedded-provider-core';
 export { ConnectErrorEventData, ConnectEventData, ConnectStartEventData, DisconnectEventData, EmbeddedProviderEvent, EmbeddedProviderEventMap, EventCallback, SignAndSendTransactionParams, SignMessageParams, SignMessageResult, SignedTransaction, WalletAddress } from '@phantom/embedded-provider-core';
 import { IEthereumChain, ISolanaChain } from '@phantom/chain-interfaces';
-export { EthTransactionRequest, IEthereumChain, ISolanaChain } from '@phantom/chain-interfaces';
+export { EthTransactionRequest, IEthereumChain, ISolanaChain, SignAndSendTransactionOptions } from '@phantom/chain-interfaces';
 import { AddressType } from '@phantom/client';
-export { AddressType } from '@phantom/client';
+export { AddressType, PresignTransactionContext } from '@phantom/client';
 import { AutoConfirmEnableParams, AutoConfirmResult, AutoConfirmSupportedChainsResult } from '@phantom/browser-injected-sdk/auto-confirm';
 export { AutoConfirmEnableParams, AutoConfirmResult, AutoConfirmSupportedChainsResult } from '@phantom/browser-injected-sdk/auto-confirm';
 export { NetworkId, PHANTOM_ICON } from '@phantom/constants';
+export { base64urlDecode, base64urlEncode } from '@phantom/base64url';
 
 declare enum DebugLevel {
     ERROR = 0,

package/dist/index.js

@@ -34,8 +34,10 @@ __export(src_exports, {
   BrowserSDK: () => BrowserSDK,
   DebugCategory: () => DebugCategory,
   DebugLevel: () => DebugLevel,
-  NetworkId: () => import_constants7.NetworkId,
-  PHANTOM_ICON: () => import_constants8.PHANTOM_ICON,
+  NetworkId: () => import_constants8.NetworkId,
+  PHANTOM_ICON: () => import_constants9.PHANTOM_ICON,
+  base64urlDecode: () => import_base64url2.base64urlDecode,
+  base64urlEncode: () => import_base64url2.base64urlEncode,
   debug: () => debug,
   detectBrowser: () => detectBrowser,
   getBrowserDisplayName: () => getBrowserDisplayName,
@@ -2764,7 +2766,7 @@ var BrowserAuthProvider = class {
         // OAuth session management - defaults to allow refresh unless explicitly clearing after logout
         clear_previous_session: (phantomOptions.clearPreviousSession ?? false).toString(),
         allow_refresh: (phantomOptions.allowRefresh ?? true).toString(),
-        sdk_version: "1.0.5",
+        sdk_version: "1.0.7",
         sdk_type: "browser",
         platform: detectBrowser().name,
         algorithm: phantomOptions.algorithm || import_constants3.DEFAULT_AUTHENTICATOR_ALGORITHM
@@ -2965,14 +2967,14 @@ var Auth2AuthProvider = class {
       const description = this.urlParamsAccessor.getParam("error_description");
       throw new Error(`Auth2 callback error: ${description ?? error}`);
     }
-    const { idToken, bearerToken, authUserId, expiresInMs } = await (0, import_auth2.exchangeAuthCode)({
+    const { idToken, bearerToken, authUserId, expiresInMs, refreshToken } = await (0, import_auth2.exchangeAuthCode)({
       authApiBaseUrl: this.auth2ProviderOptions.authApiBaseUrl,
       clientId: this.auth2ProviderOptions.clientId,
       redirectUri: this.auth2ProviderOptions.redirectUri,
       code,
       codeVerifier
     });
-    await this.stamper.setIdToken(idToken);
+    await this.stamper.setTokens({ idToken, bearerToken, refreshToken, expiresInMs });
     await this.storage.saveSession({
       ...session,
       status: "completed",
@@ -2999,19 +3001,27 @@ var Auth2AuthProvider = class {
 var import_bs582 = __toESM(require("bs58"));
 var import_base64url = require("@phantom/base64url");
 var import_sdk_types = require("@phantom/sdk-types");
+var import_auth22 = require("@phantom/auth2");
+var import_constants4 = require("@phantom/constants");
 var STORE_NAME = "crypto-keys";
 var ACTIVE_KEY = "auth2-p256-signing-key";
 var Auth2Stamper = class {
   /**
    * @param dbName - IndexedDB database name (use a unique name per app to
    *   avoid key collisions with other stampers, e.g. `phantom-auth2-<appId>`).
+   * @param refreshConfig - When provided, the stamper will automatically refresh
+   *   the id_token using the refresh_token before it expires.
    */
-  constructor(dbName) {
+  constructor(dbName, refreshConfig) {
     this.dbName = dbName;
+    this.refreshConfig = refreshConfig;
     this.db = null;
     this._keyPair = null;
     this._keyInfo = null;
     this._idToken = null;
+    this._bearerToken = null;
+    this._refreshToken = null;
+    this._tokenExpiresAt = null;
     this.algorithm = import_sdk_types.Algorithm.secp256r1;
     this.type = "OIDC";
   }
@@ -3024,6 +3034,15 @@ var Auth2Stamper = class {
       if (stored.idToken) {
         this._idToken = stored.idToken;
       }
+      if (stored.bearerToken) {
+        this._bearerToken = stored.bearerToken;
+      }
+      if (stored.refreshToken) {
+        this._refreshToken = stored.refreshToken;
+      }
+      if (stored.tokenExpiresAt) {
+        this._tokenExpiresAt = stored.tokenExpiresAt;
+      }
       return this._keyInfo;
     }
     return this.generateAndStore();
@@ -3035,19 +3054,61 @@ var Auth2Stamper = class {
     return this._keyPair;
   }
   /**
-   * Arms the stamper with the OIDC id token for subsequent KMS stamp() calls.
+   * Returns the current token state (refreshing proactively if near expiry),
+   * or null if no token has been set yet.
+   */
+  async getTokens() {
+    if (this.refreshConfig && this._refreshToken && this._tokenExpiresAt !== null && Date.now() >= this._tokenExpiresAt - import_constants4.TOKEN_REFRESH_BUFFER_MS) {
+      const refreshed = await (0, import_auth22.refreshToken)({
+        authApiBaseUrl: this.refreshConfig.authApiBaseUrl,
+        clientId: this.refreshConfig.clientId,
+        redirectUri: this.refreshConfig.redirectUri,
+        refreshToken: this._refreshToken
+      });
+      await this.setTokens(refreshed);
+    }
+    if (!this._idToken || !this._bearerToken) {
+      return null;
+    }
+    return {
+      idToken: this._idToken,
+      bearerToken: this._bearerToken,
+      refreshToken: this._refreshToken ?? void 0
+    };
+  }
+  /**
+   * Arms the stamper with the OIDC token data for subsequent KMS stamp() calls.
+   *
+   * Persists the tokens to IndexedDB alongside the key pair so that
+   * auto-connect can restore them on the next page load without a new login.
    *
-   * Persists the token to IndexedDB alongside the key pair so that
-   * auto-connect can restore it on the next page load without a new login.
+   * @param refreshToken - When provided alongside a `refreshConfig`, enables
+   *   silent token refresh before the token expires.
+   * @param expiresInMs - Token lifetime in milliseconds (from `expires_in * 1000`).
+   *   Used to compute the absolute expiry time for proactive refresh.
    */
-  async setIdToken(idToken) {
+  async setTokens({
+    idToken,
+    bearerToken,
+    refreshToken,
+    expiresInMs
+  }) {
     if (!this.db) {
       await this.openDB();
     }
     this._idToken = idToken;
+    this._bearerToken = bearerToken;
+    this._refreshToken = refreshToken ?? null;
+    this._tokenExpiresAt = expiresInMs != null ? Date.now() + expiresInMs : null;
     const existing = await this.loadRecord();
     if (existing) {
-      await this.storeRecord({ ...existing, idToken });
+      await this.storeRecord({
+        ...existing,
+        idToken,
+        bearerToken,
+        refreshToken,
+        tokenExpiresAt: this._tokenExpiresAt ?? void 0
+      });
     }
   }
   async stamp(params) {
@@ -3080,6 +3141,9 @@ var Auth2Stamper = class {
     this._keyPair = null;
     this._keyInfo = null;
     this._idToken = null;
+    this._bearerToken = null;
+    this._refreshToken = null;
+    this._tokenExpiresAt = null;
   }
   // Auth2 doesn't use key rotation; provide minimal no-op implementations.
   async rotateKeyPair() {
@@ -3276,28 +3340,32 @@ var BrowserPhantomAppProvider = class {
 
 // src/providers/embedded/adapters/logger.ts
 var BrowserLogger = class {
-  info(category, message, data) {
-    debug.info(category, message, data);
+  info(message, ...args) {
+    debug.info(message, args.length > 0 ? String(args[0]) : "", args[1]);
   }
-  warn(category, message, data) {
-    debug.warn(category, message, data);
+  warn(message, ...args) {
+    debug.warn(message, args.length > 0 ? String(args[0]) : "", args[1]);
   }
-  error(category, message, data) {
-    debug.error(category, message, data);
+  error(message, ...args) {
+    debug.error(message, args.length > 0 ? String(args[0]) : "", args[1]);
   }
-  log(category, message, data) {
-    debug.log(category, message, data);
+  debug(message, ...args) {
+    debug.log(message, args.length > 0 ? String(args[0]) : "", args[1]);
   }
 };
 
 // src/providers/embedded/index.ts
-var import_constants4 = require("@phantom/constants");
+var import_constants5 = require("@phantom/constants");
 var EmbeddedProvider = class extends import_embedded_provider_core.EmbeddedProvider {
   constructor(config) {
     debug.log(DebugCategory.EMBEDDED_PROVIDER, "Initializing Browser EmbeddedProvider", { config });
     const urlParamsAccessor = new BrowserURLParamsAccessor();
     const storage = new BrowserStorage();
-    const stamper = config.unstable__auth2Options ? new Auth2Stamper(`phantom-auth2-${config.appId}`) : new import_indexed_db_stamper.IndexedDbStamper({
+    const stamper = config.unstable__auth2Options ? new Auth2Stamper(`phantom-auth2-${config.appId}`, {
+      authApiBaseUrl: config.unstable__auth2Options.authApiBaseUrl,
+      clientId: config.unstable__auth2Options.clientId,
+      redirectUri: config.authOptions?.redirectUrl ?? ""
+    }) : new import_indexed_db_stamper.IndexedDbStamper({
       dbName: `phantom-embedded-sdk-${config.appId}`,
       storeName: "crypto-keys",
       keyName: "signing-key"
@@ -3328,13 +3396,13 @@ var EmbeddedProvider = class extends import_embedded_provider_core.EmbeddedProvi
       name: platformName,
       // Use detected browser name and version for identification
       analyticsHeaders: {
-        [import_constants4.ANALYTICS_HEADERS.SDK_TYPE]: "browser",
-        [import_constants4.ANALYTICS_HEADERS.PLATFORM]: "ext-sdk",
-        [import_constants4.ANALYTICS_HEADERS.PLATFORM_VERSION]: version,
-        [import_constants4.ANALYTICS_HEADERS.CLIENT]: browserName,
-        [import_constants4.ANALYTICS_HEADERS.APP_ID]: config.appId,
-        [import_constants4.ANALYTICS_HEADERS.WALLET_TYPE]: config.embeddedWalletType,
-        [import_constants4.ANALYTICS_HEADERS.SDK_VERSION]: "1.0.5"
+        [import_constants5.ANALYTICS_HEADERS.SDK_TYPE]: "browser",
+        [import_constants5.ANALYTICS_HEADERS.PLATFORM]: "ext-sdk",
+        [import_constants5.ANALYTICS_HEADERS.PLATFORM_VERSION]: version,
+        [import_constants5.ANALYTICS_HEADERS.CLIENT]: browserName,
+        [import_constants5.ANALYTICS_HEADERS.APP_ID]: config.appId,
+        [import_constants5.ANALYTICS_HEADERS.WALLET_TYPE]: config.embeddedWalletType,
+        [import_constants5.ANALYTICS_HEADERS.SDK_VERSION]: "1.0.7"
         // Replaced at build time
       }
     };
@@ -3351,7 +3419,7 @@ var EmbeddedProvider = class extends import_embedded_provider_core.EmbeddedProvi
 
 // src/ProviderManager.ts
 var import_embedded_provider_core2 = require("@phantom/embedded-provider-core");
-var import_constants5 = require("@phantom/constants");
+var import_constants6 = require("@phantom/constants");
 
 // src/utils/auth-callback.ts
 function isAuthFailureCallback(searchParams) {
@@ -3742,8 +3810,8 @@ var ProviderManager = class {
       if (!this.config.appId) {
         throw new Error("appId is required for embedded provider");
       }
-      const apiBaseUrl = this.config.apiBaseUrl || import_constants5.DEFAULT_WALLET_API_URL;
-      const authUrl = this.config.authOptions?.authUrl || import_constants5.DEFAULT_AUTH_URL;
+      const apiBaseUrl = this.config.apiBaseUrl || import_constants6.DEFAULT_WALLET_API_URL;
+      const authUrl = this.config.authOptions?.authUrl || import_constants6.DEFAULT_AUTH_URL;
       provider = new EmbeddedProvider({
         apiBaseUrl,
         appId: this.config.appId,
@@ -3753,7 +3821,7 @@ var ProviderManager = class {
           redirectUrl: this.config.authOptions?.redirectUrl || this.getValidatedCurrentUrl()
         },
         unstable__auth2Options: this.config.unstable__auth2Options,
-        embeddedWalletType: embeddedWalletType || import_constants5.DEFAULT_EMBEDDED_WALLET_TYPE,
+        embeddedWalletType: embeddedWalletType || import_constants6.DEFAULT_EMBEDDED_WALLET_TYPE,
         addressTypes: this.config.addressTypes || [import_client.AddressType.solana]
       });
     } else {
@@ -3789,7 +3857,7 @@ var ProviderManager = class {
 
 // src/BrowserSDK.ts
 var import_embedded_provider_core3 = require("@phantom/embedded-provider-core");
-var import_constants6 = require("@phantom/constants");
+var import_constants7 = require("@phantom/constants");
 var BROWSER_SDK_PROVIDER_TYPES = [
   ...import_embedded_provider_core3.EMBEDDED_PROVIDER_AUTH_TYPES,
   "injected",
@@ -3825,7 +3893,7 @@ var BrowserSDK = class {
       });
       throw new Error("appId is required when using embedded providers (google, apple, phantom, etc.)");
     }
-    const embeddedWalletType = config.embeddedWalletType || import_constants6.DEFAULT_EMBEDDED_WALLET_TYPE;
+    const embeddedWalletType = config.embeddedWalletType || import_constants7.DEFAULT_EMBEDDED_WALLET_TYPE;
     if (!["app-wallet", "user-wallet"].includes(embeddedWalletType)) {
       debug.error(DebugCategory.BROWSER_SDK, "Invalid embeddedWalletType", {
         embeddedWalletType: config.embeddedWalletType
@@ -4100,6 +4168,7 @@ var BrowserSDK = class {
 };
 
 // src/index.ts
-var import_constants7 = require("@phantom/constants");
-var import_client5 = require("@phantom/client");
 var import_constants8 = require("@phantom/constants");
+var import_client5 = require("@phantom/client");
+var import_base64url2 = require("@phantom/base64url");
+var import_constants9 = require("@phantom/constants");

package/dist/index.mjs

@@ -2714,7 +2714,7 @@ var BrowserAuthProvider = class {
         // OAuth session management - defaults to allow refresh unless explicitly clearing after logout
         clear_previous_session: (phantomOptions.clearPreviousSession ?? false).toString(),
         allow_refresh: (phantomOptions.allowRefresh ?? true).toString(),
-        sdk_version: "1.0.5",
+        sdk_version: "1.0.7",
         sdk_type: "browser",
         platform: detectBrowser().name,
         algorithm: phantomOptions.algorithm || DEFAULT_AUTHENTICATOR_ALGORITHM
@@ -2920,14 +2920,14 @@ var Auth2AuthProvider = class {
       const description = this.urlParamsAccessor.getParam("error_description");
       throw new Error(`Auth2 callback error: ${description ?? error}`);
     }
-    const { idToken, bearerToken, authUserId, expiresInMs } = await exchangeAuthCode({
+    const { idToken, bearerToken, authUserId, expiresInMs, refreshToken } = await exchangeAuthCode({
       authApiBaseUrl: this.auth2ProviderOptions.authApiBaseUrl,
       clientId: this.auth2ProviderOptions.clientId,
       redirectUri: this.auth2ProviderOptions.redirectUri,
       code,
       codeVerifier
     });
-    await this.stamper.setIdToken(idToken);
+    await this.stamper.setTokens({ idToken, bearerToken, refreshToken, expiresInMs });
     await this.storage.saveSession({
       ...session,
       status: "completed",
@@ -2954,19 +2954,27 @@ var Auth2AuthProvider = class {
 import bs582 from "bs58";
 import { base64urlEncode } from "@phantom/base64url";
 import { Algorithm } from "@phantom/sdk-types";
+import { refreshToken as refreshTokenRequest } from "@phantom/auth2";
+import { TOKEN_REFRESH_BUFFER_MS } from "@phantom/constants";
 var STORE_NAME = "crypto-keys";
 var ACTIVE_KEY = "auth2-p256-signing-key";
 var Auth2Stamper = class {
   /**
    * @param dbName - IndexedDB database name (use a unique name per app to
    *   avoid key collisions with other stampers, e.g. `phantom-auth2-<appId>`).
+   * @param refreshConfig - When provided, the stamper will automatically refresh
+   *   the id_token using the refresh_token before it expires.
    */
-  constructor(dbName) {
+  constructor(dbName, refreshConfig) {
     this.dbName = dbName;
+    this.refreshConfig = refreshConfig;
     this.db = null;
     this._keyPair = null;
     this._keyInfo = null;
     this._idToken = null;
+    this._bearerToken = null;
+    this._refreshToken = null;
+    this._tokenExpiresAt = null;
     this.algorithm = Algorithm.secp256r1;
     this.type = "OIDC";
   }
@@ -2979,6 +2987,15 @@ var Auth2Stamper = class {
       if (stored.idToken) {
         this._idToken = stored.idToken;
       }
+      if (stored.bearerToken) {
+        this._bearerToken = stored.bearerToken;
+      }
+      if (stored.refreshToken) {
+        this._refreshToken = stored.refreshToken;
+      }
+      if (stored.tokenExpiresAt) {
+        this._tokenExpiresAt = stored.tokenExpiresAt;
+      }
       return this._keyInfo;
     }
     return this.generateAndStore();
@@ -2990,19 +3007,61 @@ var Auth2Stamper = class {
     return this._keyPair;
   }
   /**
-   * Arms the stamper with the OIDC id token for subsequent KMS stamp() calls.
+   * Returns the current token state (refreshing proactively if near expiry),
+   * or null if no token has been set yet.
+   */
+  async getTokens() {
+    if (this.refreshConfig && this._refreshToken && this._tokenExpiresAt !== null && Date.now() >= this._tokenExpiresAt - TOKEN_REFRESH_BUFFER_MS) {
+      const refreshed = await refreshTokenRequest({
+        authApiBaseUrl: this.refreshConfig.authApiBaseUrl,
+        clientId: this.refreshConfig.clientId,
+        redirectUri: this.refreshConfig.redirectUri,
+        refreshToken: this._refreshToken
+      });
+      await this.setTokens(refreshed);
+    }
+    if (!this._idToken || !this._bearerToken) {
+      return null;
+    }
+    return {
+      idToken: this._idToken,
+      bearerToken: this._bearerToken,
+      refreshToken: this._refreshToken ?? void 0
+    };
+  }
+  /**
+   * Arms the stamper with the OIDC token data for subsequent KMS stamp() calls.
    *
-   * Persists the token to IndexedDB alongside the key pair so that
-   * auto-connect can restore it on the next page load without a new login.
+   * Persists the tokens to IndexedDB alongside the key pair so that
+   * auto-connect can restore them on the next page load without a new login.
+   *
+   * @param refreshToken - When provided alongside a `refreshConfig`, enables
+   *   silent token refresh before the token expires.
+   * @param expiresInMs - Token lifetime in milliseconds (from `expires_in * 1000`).
+   *   Used to compute the absolute expiry time for proactive refresh.
    */
-  async setIdToken(idToken) {
+  async setTokens({
+    idToken,
+    bearerToken,
+    refreshToken,
+    expiresInMs
+  }) {
     if (!this.db) {
       await this.openDB();
     }
     this._idToken = idToken;
+    this._bearerToken = bearerToken;
+    this._refreshToken = refreshToken ?? null;
+    this._tokenExpiresAt = expiresInMs != null ? Date.now() + expiresInMs : null;
     const existing = await this.loadRecord();
     if (existing) {
-      await this.storeRecord({ ...existing, idToken });
+      await this.storeRecord({
+        ...existing,
+        idToken,
+        bearerToken,
+        refreshToken,
+        tokenExpiresAt: this._tokenExpiresAt ?? void 0
+      });
     }
   }
   async stamp(params) {
@@ -3035,6 +3094,9 @@ var Auth2Stamper = class {
     this._keyPair = null;
     this._keyInfo = null;
     this._idToken = null;
+    this._bearerToken = null;
+    this._refreshToken = null;
+    this._tokenExpiresAt = null;
   }
   // Auth2 doesn't use key rotation; provide minimal no-op implementations.
   async rotateKeyPair() {
@@ -3231,17 +3293,17 @@ var BrowserPhantomAppProvider = class {
 
 // src/providers/embedded/adapters/logger.ts
 var BrowserLogger = class {
-  info(category, message, data) {
-    debug.info(category, message, data);
+  info(message, ...args) {
+    debug.info(message, args.length > 0 ? String(args[0]) : "", args[1]);
   }
-  warn(category, message, data) {
-    debug.warn(category, message, data);
+  warn(message, ...args) {
+    debug.warn(message, args.length > 0 ? String(args[0]) : "", args[1]);
   }
-  error(category, message, data) {
-    debug.error(category, message, data);
+  error(message, ...args) {
+    debug.error(message, args.length > 0 ? String(args[0]) : "", args[1]);
   }
-  log(category, message, data) {
-    debug.log(category, message, data);
+  debug(message, ...args) {
+    debug.log(message, args.length > 0 ? String(args[0]) : "", args[1]);
   }
 };
 
@@ -3252,7 +3314,11 @@ var EmbeddedProvider = class extends CoreEmbeddedProvider {
     debug.log(DebugCategory.EMBEDDED_PROVIDER, "Initializing Browser EmbeddedProvider", { config });
     const urlParamsAccessor = new BrowserURLParamsAccessor();
     const storage = new BrowserStorage();
-    const stamper = config.unstable__auth2Options ? new Auth2Stamper(`phantom-auth2-${config.appId}`) : new IndexedDbStamper({
+    const stamper = config.unstable__auth2Options ? new Auth2Stamper(`phantom-auth2-${config.appId}`, {
+      authApiBaseUrl: config.unstable__auth2Options.authApiBaseUrl,
+      clientId: config.unstable__auth2Options.clientId,
+      redirectUri: config.authOptions?.redirectUrl ?? ""
+    }) : new IndexedDbStamper({
       dbName: `phantom-embedded-sdk-${config.appId}`,
       storeName: "crypto-keys",
       keyName: "signing-key"
@@ -3289,7 +3355,7 @@ var EmbeddedProvider = class extends CoreEmbeddedProvider {
         [ANALYTICS_HEADERS.CLIENT]: browserName,
         [ANALYTICS_HEADERS.APP_ID]: config.appId,
         [ANALYTICS_HEADERS.WALLET_TYPE]: config.embeddedWalletType,
-        [ANALYTICS_HEADERS.SDK_VERSION]: "1.0.5"
+        [ANALYTICS_HEADERS.SDK_VERSION]: "1.0.7"
         // Replaced at build time
       }
     };
@@ -4059,6 +4125,7 @@ var BrowserSDK = class {
 // src/index.ts
 import { NetworkId } from "@phantom/constants";
 import { AddressType as AddressType4 } from "@phantom/client";
+import { base64urlEncode as base64urlEncode2, base64urlDecode } from "@phantom/base64url";
 import { PHANTOM_ICON as PHANTOM_ICON3 } from "@phantom/constants";
 export {
   AddressType4 as AddressType,
@@ -4067,6 +4134,8 @@ export {
   DebugLevel,
   NetworkId,
   PHANTOM_ICON3 as PHANTOM_ICON,
+  base64urlDecode,
+  base64urlEncode2 as base64urlEncode,
   debug,
   detectBrowser,
   getBrowserDisplayName,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phantom/browser-sdk",
-  "version": "1.0.5",
+  "version": "1.0.7",
   "description": "Browser SDK for Phantom Wallet",
   "repository": {
     "type": "git",
@@ -33,16 +33,16 @@
     "prettier": "prettier --write \"src/**/*.{ts,tsx}\""
   },
   "dependencies": {
-    "@phantom/auth2": "^1.0.1",
-    "@phantom/base64url": "^1.0.5",
-    "@phantom/browser-injected-sdk": "^1.0.5",
-    "@phantom/chain-interfaces": "^1.0.5",
-    "@phantom/client": "^1.0.5",
-    "@phantom/constants": "^1.0.5",
-    "@phantom/embedded-provider-core": "^1.0.5",
-    "@phantom/indexed-db-stamper": "^1.0.5",
-    "@phantom/parsers": "^1.0.5",
-    "@phantom/sdk-types": "^1.0.5",
+    "@phantom/auth2": "^1.0.2",
+    "@phantom/base64url": "^1.0.7",
+    "@phantom/browser-injected-sdk": "^1.0.7",
+    "@phantom/chain-interfaces": "^1.0.7",
+    "@phantom/client": "^1.0.7",
+    "@phantom/constants": "^1.0.7",
+    "@phantom/embedded-provider-core": "^1.0.7",
+    "@phantom/indexed-db-stamper": "^1.0.7",
+    "@phantom/parsers": "^1.0.7",
+    "@phantom/sdk-types": "^1.0.7",
     "axios": "^1.10.0",
     "bs58": "^6.0.0",
     "buffer": "^6.0.3",