@phantom/embedded-provider-core 1.0.2 → 1.0.4

package/dist/index.mjs

@@ -1,6 +1,6 @@
 // src/embedded-provider.ts
 import { base64urlEncode, stringToBase64url } from "@phantom/base64url";
-import { AddressType, PhantomClient, SpendingLimitError } from "@phantom/client";
+import { AddressType, PhantomClient, SpendingLimitError, isAuthenticationError } from "@phantom/client";
 import {
   parseSignMessageResponse,
   parseTransactionResponse,
@@ -24,21 +24,19 @@ var EmbeddedSolanaChain = class {
   constructor(provider) {
     this.provider = provider;
     this.currentNetworkId = NetworkId.SOLANA_MAINNET;
-    this._connected = false;
     this._publicKey = null;
     this.eventEmitter = new EventEmitter();
     this.setupEventListeners();
     this.syncInitialState();
   }
-  // Wallet adapter compliant properties
-  get connected() {
-    return this._connected;
-  }
   get publicKey() {
     return this._publicKey;
   }
+  get isConnected() {
+    return this._publicKey !== null;
+  }
   ensureConnected() {
-    if (!this.provider.isConnected()) {
+    if (!this.isConnected) {
       throw new Error("Solana chain not available. Ensure SDK is connected.");
     }
   }
@@ -96,7 +94,7 @@ var EmbeddedSolanaChain = class {
     const solanaAddr = addresses.find((a) => a.addressType === "Solana");
     if (!solanaAddr)
       throw new Error("No Solana address found");
-    this.updateConnectionState(true, solanaAddr.address);
+    this._publicKey = solanaAddr.address;
     return Promise.resolve({ publicKey: solanaAddr.address });
   }
   async disconnect() {
@@ -106,41 +104,25 @@ var EmbeddedSolanaChain = class {
     this.currentNetworkId = network === "mainnet" ? NetworkId.SOLANA_MAINNET : NetworkId.SOLANA_DEVNET;
     return Promise.resolve();
   }
-  getPublicKey() {
-    if (!this.provider.isConnected())
-      return Promise.resolve(null);
-    const addresses = this.provider.getAddresses();
-    const solanaAddr = addresses.find((a) => a.addressType === "Solana");
-    return Promise.resolve(solanaAddr?.address || null);
-  }
-  isConnected() {
-    return this._connected && this.provider.isConnected();
-  }
   setupEventListeners() {
     this.provider.on("connect", (data) => {
       const solanaAddress = data.addresses?.find((addr) => addr.addressType === "Solana");
       if (solanaAddress) {
-        this.updateConnectionState(true, solanaAddress.address);
+        this._publicKey = solanaAddress.address;
         this.eventEmitter.emit("connect", solanaAddress.address);
       }
     });
     this.provider.on("disconnect", () => {
-      this.updateConnectionState(false, null);
+      this._publicKey = null;
       this.eventEmitter.emit("disconnect");
     });
   }
   syncInitialState() {
-    if (this.provider.isConnected()) {
-      const addresses = this.provider.getAddresses();
-      const solanaAddress = addresses.find((a) => a.addressType === "Solana");
-      if (solanaAddress) {
-        this.updateConnectionState(true, solanaAddress.address);
-      }
-    }
-  }
-  updateConnectionState(connected, publicKey) {
-    this._connected = connected;
-    this._publicKey = publicKey;
+    if (!this.provider.isConnected())
+      return;
+    const addresses = this.provider.getAddresses();
+    const solanaAddr = addresses.find((a) => a.addressType === "Solana");
+    this._publicKey = solanaAddr?.address || null;
   }
   // Event methods for interface compliance
   on(event, listener) {
@@ -158,16 +140,11 @@ var EmbeddedEthereumChain = class {
   constructor(provider) {
     this.provider = provider;
     this.currentNetworkId = NetworkId2.ETHEREUM_MAINNET;
-    this._connected = false;
     this._accounts = [];
     this.eventEmitter = new EventEmitter2();
     this.setupEventListeners();
     this.syncInitialState();
   }
-  // EIP-1193 compliant properties
-  get connected() {
-    return this._connected;
-  }
   get chainId() {
     const chainId = networkIdToChainId(this.currentNetworkId) || 1;
     return `0x${chainId.toString(16)}`;
@@ -191,7 +168,7 @@ var EmbeddedEthereumChain = class {
     }
     const addresses = this.provider.getAddresses();
     const ethAddresses = addresses.filter((a) => a.addressType === "Ethereum").map((a) => a.address);
-    this.updateConnectionState(true, ethAddresses);
+    this.updateConnectionState(ethAddresses);
     return Promise.resolve(ethAddresses);
   }
   async disconnect() {
@@ -257,19 +234,19 @@ var EmbeddedEthereumChain = class {
     return this.request({ method: "eth_accounts" });
   }
   isConnected() {
-    return this._connected && this.provider.isConnected();
+    return this.provider.isConnected() && this._accounts.length > 0;
   }
   setupEventListeners() {
     this.provider.on("connect", (data) => {
       const ethAddresses = data.addresses?.filter((addr) => addr.addressType === "Ethereum")?.map((addr) => addr.address) || [];
       if (ethAddresses.length > 0) {
-        this.updateConnectionState(true, ethAddresses);
+        this.updateConnectionState(ethAddresses);
         this.eventEmitter.emit("connect", { chainId: this.chainId });
         this.eventEmitter.emit("accountsChanged", ethAddresses);
       }
     });
     this.provider.on("disconnect", () => {
-      this.updateConnectionState(false, []);
+      this.updateConnectionState([]);
       this.eventEmitter.emit("disconnect", { code: 4900, message: "Provider disconnected" });
       this.eventEmitter.emit("accountsChanged", []);
     });
@@ -279,12 +256,11 @@ var EmbeddedEthereumChain = class {
       const addresses = this.provider.getAddresses();
       const ethAddresses = addresses.filter((a) => a.addressType === "Ethereum").map((a) => a.address);
       if (ethAddresses.length > 0) {
-        this.updateConnectionState(true, ethAddresses);
+        this.updateConnectionState(ethAddresses);
       }
     }
   }
-  updateConnectionState(connected, accounts) {
-    this._connected = connected;
+  updateConnectionState(accounts) {
     this._accounts = accounts;
   }
   async handleEmbeddedRequest(args) {
@@ -512,7 +488,8 @@ var EmbeddedProvider = class {
     });
     if (session.status !== "completed") {
       const urlSessionId = this.urlParamsAccessor.getParam("session_id");
-      if (session.status === "pending" && !urlSessionId) {
+      const urlCode = this.urlParamsAccessor.getParam("code");
+      if (session.status === "pending" && !urlSessionId && !urlCode) {
         this.logger.warn("EMBEDDED_PROVIDER", "Session mismatch detected - pending session without redirect context", {
           sessionId: session.sessionId,
           status: session.status
@@ -585,7 +562,7 @@ var EmbeddedProvider = class {
     }
     this.logger.log("EMBEDDED_PROVIDER", "No completed session found, checking for redirect resume");
     if (this.authProvider.resumeAuthFromRedirect) {
-      const authResult = this.authProvider.resumeAuthFromRedirect(session.authProvider);
+      const authResult = await this.authProvider.resumeAuthFromRedirect(session.authProvider);
       if (authResult) {
         this.logger.info("EMBEDDED_PROVIDER", "Resuming from redirect", {
           walletId: authResult.walletId,
@@ -748,7 +725,7 @@ var EmbeddedProvider = class {
             authenticatorName: `auth-${shortPubKey}`,
             authenticatorKind: "keypair",
             publicKey: base64urlPublicKey,
-            algorithm: "Ed25519",
+            algorithm: this.stamper.algorithm,
             expiresInMs
           }
         ]
@@ -864,6 +841,21 @@ var EmbeddedProvider = class {
       });
     }
   }
+  /**
+   * Handles errors from signing operations.
+   * Disconnects the user if the server returns a 401/403 (revoked or expired authenticator).
+   */
+  async handleSigningError(error) {
+    if (isAuthenticationError(error)) {
+      this.logger.warn("EMBEDDED_PROVIDER", "Authenticator rejected by server (401/403), disconnecting", { error });
+      await this.disconnect(false);
+      throw new Error("Authenticator revoked");
+    }
+    if (error instanceof SpendingLimitError) {
+      this.emit("spending_limit_reached", { error });
+    }
+    throw error;
+  }
   async signMessage(params) {
     if (!this.client || !this.walletId) {
       throw new Error("Not connected");
@@ -880,7 +872,7 @@ var EmbeddedProvider = class {
       message: params.message,
       networkId: params.networkId,
       derivationIndex
-    });
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Message signed successfully", {
       walletId: this.walletId,
       message: params.message
@@ -913,7 +905,7 @@ var EmbeddedProvider = class {
       message: base64UrlMessage,
       networkId: params.networkId,
       derivationIndex
-    });
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Message signed successfully", {
       walletId: this.walletId,
       message: params.message
@@ -936,7 +928,7 @@ var EmbeddedProvider = class {
       typedData: params.typedData,
       networkId: params.networkId,
       derivationIndex
-    });
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Typed data signed successfully", {
       walletId: this.walletId
     });
@@ -973,7 +965,7 @@ var EmbeddedProvider = class {
       networkId: params.networkId,
       derivationIndex,
       account
-    });
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Transaction signed successfully", {
       walletId: this.walletId,
       networkId: params.networkId,
@@ -1006,21 +998,13 @@ var EmbeddedProvider = class {
     if (!account) {
       throw new Error(`No address found for network ${params.networkId}`);
     }
-    let rawResponse;
-    try {
-      rawResponse = await this.client.signAndSendTransaction({
-        walletId: this.walletId,
-        transaction: transactionPayload,
-        networkId: params.networkId,
-        derivationIndex,
-        account
-      });
-    } catch (error) {
-      if (error instanceof SpendingLimitError) {
-        this.emit("spending_limit_reached", { error });
-      }
-      throw error;
-    }
+    const rawResponse = await this.client.signAndSendTransaction({
+      walletId: this.walletId,
+      transaction: transactionPayload,
+      networkId: params.networkId,
+      derivationIndex,
+      account
+    }).catch((error) => this.handleSigningError(error));
     this.logger.info("EMBEDDED_PROVIDER", "Transaction signed and sent successfully", {
       walletId: this.walletId,
       networkId: params.networkId,
@@ -1204,8 +1188,9 @@ var EmbeddedProvider = class {
       // OAuth session management - defaults to allowing refresh unless user explicitly logged out
       clearPreviousSession: shouldClearPreviousSession,
       // true only after logout
-      allowRefresh: !shouldClearPreviousSession
+      allowRefresh: !shouldClearPreviousSession,
       // false only after logout
+      algorithm: this.stamper.algorithm
     });
     if (authResult && "walletId" in authResult) {
       this.logger.info("EMBEDDED_PROVIDER", "Authentication completed after redirect", {
@@ -1218,6 +1203,7 @@ var EmbeddedProvider = class {
       tempSession.authProvider = authResult.provider || tempSession.authProvider;
       tempSession.accountDerivationIndex = authResult.accountDerivationIndex;
       tempSession.authUserId = authResult.authUserId;
+      tempSession.bearerToken = authResult.bearerToken;
       tempSession.status = "completed";
       tempSession.lastUsed = Date.now();
       if (authResult.expiresInMs > 0) {
@@ -1247,6 +1233,7 @@ var EmbeddedProvider = class {
     session.organizationId = authResult.organizationId;
     session.accountDerivationIndex = authResult.accountDerivationIndex;
     session.authUserId = authResult.authUserId;
+    session.bearerToken = authResult.bearerToken;
     session.status = "completed";
     session.lastUsed = Date.now();
     if (authResult.expiresInMs > 0) {
@@ -1316,7 +1303,8 @@ var EmbeddedProvider = class {
         organizationId: session.organizationId,
         headers: {
           ...this.platform.analyticsHeaders || {},
-          ...session.authUserId ? { "x-auth-user-id": session.authUserId } : {}
+          ...session.authUserId ? { "x-auth-user-id": session.authUserId } : {},
+          ...session.bearerToken ? { Authorization: session.bearerToken } : {}
         }
       },
       this.stamper