@rhinestone/1auth 0.7.1 → 0.7.3

package/dist/index.d.ts

@@ -1,12 +1,12 @@
-import { O as OneAuthClient } from './client-B_CzDa_I.js';
-import { Abi, Address, LocalAccount, WalletClient, Hash, Chain } from 'viem';
+import { O as OneAuthClient } from './client-CuASptX3.js';
+import { Abi, Address, LocalAccount, WalletClient, Hash } from 'viem';
 import { Permission } from '@rhinestone/sdk';
 export { Permission } from '@rhinestone/sdk';
-import { h as IntentCall, i as SendIntentResult } from './types-U_dwxbtS.js';
-export { a7 as AssetBalance, a8 as AssetBalanceBucket, a9 as AssetsResponse, u as AuthFlow, A as AuthResult, v as AuthWithModalOptions, z as AuthenticateOptions, B as AuthenticateResult, R as BalanceRequirement, ap as BatchIntentItem, as as BatchIntentItemResult, ad as CheckConsentOptions, ae as CheckConsentResult, a0 as CloseOnStatus, y as ConnectResult, ac as ConsentData, ab as ConsentField, w as CreateAccountWithModalOptions, C as CreateCrossChainPermissionInput, r as CreateSigningRequestResponse, k as CrossChainPermit, l as CrossChainSettlementLayer, M as EIP712Domain, O as EIP712TypeField, N as EIP712Types, E as EmbedOptions, a2 as ExecuteIntentResponse, a6 as GetAssetsOptions, an as GrantPermissionContractMetadata, ah as GrantPermissionsOptions, ai as GrantPermissionsResult, a4 as IntentHistoryItem, a3 as IntentHistoryOptions, a5 as IntentHistoryResult, Z as IntentQuote, _ as IntentStatus, X as IntentTokenRequest, aj as ListSessionGrantsOptions, ak as ListSessionGrantsResult, L as LoginWithModalOptions, ax as OneAuthTelemetryAttributeValue, ay as OneAuthTelemetryAttributes, az as OneAuthTelemetryConfig, aA as OneAuthTelemetryEvent, aB as OneAuthTelemetryEventName, aC as OneAuthTelemetryFlow, aD as OneAuthTelemetryTraceContext, $ as OrchestratorStatus, t as PasskeyCredential, P as PasskeyProviderConfig, au as PrepareBatchIntentResponse, a1 as PrepareIntentResponse, at as PreparedBatchIntent, af as RequestConsentOptions, ag as RequestConsentResult, aq as SendBatchIntentOptions, ar as SendBatchIntentResult, Y as SendIntentOptions, am as SessionGrantChain, al as SessionGrantRecord, F as SignMessageOptions, G as SignMessageResult, J as SignTypedDataOptions, K as SignTypedDataResult, x as SignerType, p as SigningError, q as SigningErrorCode, m as SigningRequestOptions, s as SigningRequestStatus, n as SigningResult, D as SigningResultBase, o as SigningSuccess, ao as SmartSessionPolicy, av as SponsorshipCallbackConfig, S as SponsorshipConfig, aw as SponsorshipUrlConfig, aa as ThemeConfig, T as TransactionAction, V as TransactionDetails, Q as TransactionFees, U as UserPasskeysResponse, W as WebAuthnSignature, j as createCrossChainPermission } from './types-U_dwxbtS.js';
-export { O as OneAuthProvider, a as OneAuthProviderOptions, c as createOneAuthProvider } from './provider-Cd7Ip5L-.js';
-import { P as PasskeyWalletClientConfig, S as SendCallsParams } from './verify-BLgZzwmJ.js';
-export { E as ETHEREUM_MESSAGE_PREFIX, T as TransactionCall, e as encodeWebAuthnSignature, h as hashCalls, a as hashMessage, v as verifyMessageHash } from './verify-BLgZzwmJ.js';
+import { h as IntentCall, i as SendIntentResult } from './types-C0jKNT_t.js';
+export { a7 as AssetBalance, a8 as AssetBalanceBucket, a9 as AssetsResponse, u as AuthFlow, A as AuthResult, v as AuthWithModalOptions, z as AuthenticateOptions, B as AuthenticateResult, R as BalanceRequirement, ap as BatchIntentItem, as as BatchIntentItemResult, ad as CheckConsentOptions, ae as CheckConsentResult, a0 as CloseOnStatus, y as ConnectResult, ac as ConsentData, ab as ConsentField, w as CreateAccountWithModalOptions, C as CreateCrossChainPermissionInput, r as CreateSigningRequestResponse, k as CrossChainPermit, l as CrossChainSettlementLayer, M as EIP712Domain, O as EIP712TypeField, N as EIP712Types, E as EmbedOptions, a2 as ExecuteIntentResponse, a6 as GetAssetsOptions, an as GrantPermissionContractMetadata, ah as GrantPermissionsOptions, ai as GrantPermissionsResult, a4 as IntentHistoryItem, a3 as IntentHistoryOptions, a5 as IntentHistoryResult, Z as IntentQuote, _ as IntentStatus, X as IntentTokenRequest, aj as ListSessionGrantsOptions, ak as ListSessionGrantsResult, L as LoginWithModalOptions, ax as OneAuthTelemetryAttributeValue, ay as OneAuthTelemetryAttributes, az as OneAuthTelemetryConfig, aA as OneAuthTelemetryEvent, aB as OneAuthTelemetryEventName, aC as OneAuthTelemetryFlow, aD as OneAuthTelemetryTraceContext, $ as OrchestratorStatus, t as PasskeyCredential, P as PasskeyProviderConfig, au as PrepareBatchIntentResponse, a1 as PrepareIntentResponse, at as PreparedBatchIntent, af as RequestConsentOptions, ag as RequestConsentResult, aq as SendBatchIntentOptions, ar as SendBatchIntentResult, Y as SendIntentOptions, am as SessionGrantChain, al as SessionGrantRecord, F as SignMessageOptions, G as SignMessageResult, J as SignTypedDataOptions, K as SignTypedDataResult, x as SignerType, p as SigningError, q as SigningErrorCode, m as SigningRequestOptions, s as SigningRequestStatus, n as SigningResult, D as SigningResultBase, o as SigningSuccess, ao as SmartSessionPolicy, av as SponsorshipCallbackConfig, S as SponsorshipConfig, aw as SponsorshipUrlConfig, aa as ThemeConfig, T as TransactionAction, V as TransactionDetails, Q as TransactionFees, U as UserPasskeysResponse, W as WebAuthnSignature, j as createCrossChainPermission } from './types-C0jKNT_t.js';
+export { O as OneAuthProvider, a as OneAuthProviderOptions, c as createOneAuthProvider } from './provider-6JoziYDq.js';
+import { P as PasskeyWalletClientConfig, S as SendCallsParams } from './verify-CnOwPq78.js';
+export { C as ChainFilterOptions, E as ETHEREUM_MESSAGE_PREFIX, p as TokenConfig, T as TransactionCall, e as encodeWebAuthnSignature, b as getAllSupportedChainsAndTokens, f as getChainById, i as getChainExplorerUrl, j as getChainRpcUrl, g as getSupportedChainIds, a as getSupportedChains, d as getSupportedTokenSymbols, c as getSupportedTokens, l as getTokenAddress, n as getTokenDecimals, m as getTokenSymbol, h as hashCalls, q as hashMessage, k as isTestnet, o as isTokenAddressSupported, r as resolveTokenAddress, v as verifyMessageHash } from './verify-CnOwPq78.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as React from 'react';
 
@@ -160,7 +160,7 @@ type PasskeyWalletClient = WalletClient & {
  * const walletClient = createPasskeyWalletClient({
  *   accountAddress: '0x...',
  *   username: 'alice',
- *   providerUrl: 'https://passkey.1auth.box',
+ *   providerUrl: 'https://passkey.1auth.app',
  *   clientId: 'my-dapp',
  *   chain: baseSepolia,
  *   transport: http(),
@@ -289,45 +289,4 @@ interface BatchQueueWidgetProps {
  */
 declare function BatchQueueWidget({ onSignAll }: BatchQueueWidgetProps): react_jsx_runtime.JSX.Element | null;
 
-/**
- * @file Chain and token registry for the 1auth SDK.
- *
- * Wraps `@rhinestone/shared-configs` chain/token data and combines it with
- * viem's chain definitions to expose a filtered, testnet-aware registry.
- * Consumers can look up supported chains and tokens, resolve token addresses
- * by symbol, and retrieve chain metadata such as explorer URLs and default RPC
- * endpoints.
- *
- * Testnet inclusion is controlled by the `includeTestnets` option on each
- * function or, as a project-wide default, by the environment variables
- * `NEXT_PUBLIC_ORCHESTRATOR_USE_TESTNETS` or `ORCHESTRATOR_USE_TESTNETS`.
- */
-
-type TokenConfig = {
-    symbol: string;
-    address: Address;
-    decimals: number;
-};
-type ChainFilterOptions = {
-    includeTestnets?: boolean;
-    chainIds?: number[];
-};
-declare function getSupportedChainIds(options?: ChainFilterOptions): number[];
-declare function getSupportedChains(options?: ChainFilterOptions): Chain[];
-declare function getAllSupportedChainsAndTokens(options?: ChainFilterOptions): Array<{
-    chainId: number;
-    tokens: TokenConfig[];
-}>;
-declare function getChainById(chainId: number): Chain;
-declare function getChainExplorerUrl(chainId: number): string | undefined;
-declare function getChainRpcUrl(chainId: number): string | undefined;
-declare function getSupportedTokens(chainId: number): TokenConfig[];
-declare function getSupportedTokenSymbols(chainId: number): string[];
-declare function getTokenAddress(symbolOrAddress: string, chainId: number): Address;
-declare function getTokenDecimals(symbolOrAddress: string, chainId: number): number;
-declare function resolveTokenAddress(token: string, chainId: number): Address;
-declare function isTestnet(chainId: number): boolean;
-declare function getTokenSymbol(tokenAddress: Address, chainId: number): string;
-declare function isTokenAddressSupported(tokenAddress: Address, chainId: number): boolean;
-
-export { type BatchQueueContextValue, type BatchQueueIdentity, BatchQueueProvider, type BatchQueueProviderProps, BatchQueueWidget, type BatchQueueWidgetProps, type BatchedCall, type ChainFilterOptions, type DefinePermissionsConfig, type DefinedPermissions, IntentCall, OneAuthClient, type PasskeyAccount, type PasskeyWalletClient, PasskeyWalletClientConfig, SendCallsParams, SendIntentResult, type TokenConfig, createPasskeyAccount, createPasskeyWalletClient, definePermissions, getAllSupportedChainsAndTokens, getChainById, getChainExplorerUrl, getChainName, getChainRpcUrl, getSupportedChainIds, getSupportedChains, getSupportedTokenSymbols, getSupportedTokens, getTokenAddress, getTokenDecimals, getTokenSymbol, isTestnet, isTokenAddressSupported, resolveTokenAddress, useBatchQueue };
+export { type BatchQueueContextValue, type BatchQueueIdentity, BatchQueueProvider, type BatchQueueProviderProps, BatchQueueWidget, type BatchQueueWidgetProps, type BatchedCall, type DefinePermissionsConfig, type DefinedPermissions, IntentCall, OneAuthClient, type PasskeyAccount, type PasskeyWalletClient, PasskeyWalletClientConfig, SendCallsParams, SendIntentResult, createPasskeyAccount, createPasskeyWalletClient, definePermissions, getChainName, useBatchQueue };

package/dist/index.js

@@ -378,7 +378,7 @@ var POPUP_WIDTH = LOADING_MODAL_WIDTH;
 var POPUP_HEIGHT = 600;
 var DEFAULT_EMBED_WIDTH = `${LOADING_MODAL_WIDTH}px`;
 var DEFAULT_EMBED_HEIGHT = "500px";
-var DEFAULT_PROVIDER_URL = "https://passkey.1auth.box";
+var DEFAULT_PROVIDER_URL = "https://passkey.1auth.app";
 function currentWindowOrigin() {
   if (typeof window === "undefined") return null;
   const origin = window.location?.origin;
@@ -834,7 +834,7 @@ var OneAuthClient = class {
    * Falls back to the raw dialog URL string if URL parsing fails (e.g. during
    * unit tests with non-standard URL formats).
    *
-   * @returns The scheme + host + optional port of the dialog app (e.g. `"https://passkey.1auth.box"`).
+   * @returns The scheme + host + optional port of the dialog app (e.g. `"https://passkey.1auth.app"`).
    */
   getDialogOrigin() {
     const dialogUrl = this.getDialogUrl();
@@ -1885,7 +1885,7 @@ var OneAuthClient = class {
       };
       const handleMessage = (event) => {
         if (event.origin !== dialogOrigin) return;
-        if (event.data?.type === "PASSKEY_CLOSE") {
+        if (event.data?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           resolveClosed(iframeReadyObserved);
         }
       };
@@ -2584,7 +2584,7 @@ var OneAuthClient = class {
       const dialogOrigin2 = this.getDialogOrigin();
       const earlyCloseHandler = (event) => {
         if (event.origin !== dialogOrigin2) return;
-        if (event.data?.type === "PASSKEY_CLOSE") {
+        if (event.data?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           userClosedEarly = true;
           cleanup();
         }
@@ -3199,7 +3199,7 @@ var OneAuthClient = class {
    * @param cleanup - Idempotent teardown function that closes and removes the dialog.
    * @returns A `SigningResult` discriminated union.
    */
-  waitForIntentSigningResponse(requestId, dialog, _iframe, cleanup) {
+  waitForIntentSigningResponse(requestId, dialog, iframe, cleanup) {
     const dialogOrigin = this.getDialogOrigin();
     return new Promise((resolve) => {
       const handleMessage = (event) => {
@@ -3225,7 +3225,7 @@ var OneAuthClient = class {
               }
             });
           }
-        } else if (message?.type === "PASSKEY_CLOSE") {
+        } else if (message?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           window.removeEventListener("message", handleMessage);
           cleanup();
           resolve({
@@ -3256,12 +3256,13 @@ var OneAuthClient = class {
    *     forward to the execute endpoint.
    *
    * @param dialog - The `<dialog>` element wrapping the signing iframe.
-   * @param _iframe - Unused; kept for signature consistency with other wait helpers.
+   * @param iframe - The signing iframe; used to authenticate the source of
+   *   `PASSKEY_CLOSE` so a sibling same-origin dialog can't forge a rejection.
    * @param cleanup - Idempotent teardown that closes and removes the dialog.
    * @returns A `SigningResult` extended with an optional `signedHash` field
    *   populated when the dialog performs message signing.
    */
-  waitForSigningResponse(dialog, _iframe, cleanup) {
+  waitForSigningResponse(dialog, iframe, cleanup) {
     const dialogOrigin = this.getDialogOrigin();
     return new Promise((resolve) => {
       const handleMessage = (event) => {
@@ -3292,7 +3293,7 @@ var OneAuthClient = class {
               }
             });
           }
-        } else if (message?.type === "PASSKEY_CLOSE") {
+        } else if (message?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           window.removeEventListener("message", handleMessage);
           cleanup();
           resolve({
@@ -3375,7 +3376,7 @@ var OneAuthClient = class {
               }
             });
           }
-        } else if (message?.type === "PASSKEY_CLOSE") {
+        } else if (message?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           window.removeEventListener("message", handleMessage);
           cleanup();
           resolve({
@@ -3625,7 +3626,7 @@ var OneAuthClient = class {
               );
             }
           });
-        } else if (event.data?.type === "PASSKEY_CLOSE") {
+        } else if (event.data?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           teardown();
           cleanup();
           resolve({ ready: false });
@@ -4648,7 +4649,7 @@ var OneAuthClient = class {
             blindSigning
           }, dialogOrigin);
           resolve(true);
-        } else if (event.data?.type === "PASSKEY_CLOSE") {
+        } else if (event.data?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           teardown();
           cleanup();
           resolve(false);
@@ -5291,7 +5292,7 @@ var OneAuthClient = class {
               message: "Permission grant failed"
             }
           });
-        } else if (data?.type === "PASSKEY_CLOSE") {
+        } else if (data?.type === "PASSKEY_CLOSE" && event.source === iframe.contentWindow) {
           teardown();
           cleanup();
           resolve({