@rhinestone/1auth 0.7.4 → 0.7.6

package/dist/index.js

@@ -35,6 +35,7 @@ __export(index_exports, {
   ETHEREUM_MESSAGE_PREFIX: () => ETHEREUM_MESSAGE_PREFIX,
   OneAuthClient: () => OneAuthClient,
   createCrossChainPermission: () => createCrossChainPermission,
+  createOneAuthConnection: () => createOneAuthConnection,
   createOneAuthProvider: () => createOneAuthProvider,
   createPasskeyAccount: () => createPasskeyAccount,
   createPasskeyWalletClient: () => createPasskeyWalletClient,
@@ -53,7 +54,7 @@ __export(index_exports, {
   getTokenDecimals: () => getTokenDecimals,
   getTokenSymbol: () => getTokenSymbol,
   hashCalls: () => hashCalls,
-  hashMessage: () => hashMessage2,
+  hashMessage: () => hashMessage,
   isTestnet: () => isTestnet,
   isTokenAddressSupported: () => isTokenAddressSupported,
   resolveTokenAddress: () => resolveTokenAddress,
@@ -965,7 +966,6 @@ var OneAuthClient = class {
    * call — the modal shows the appropriate flow based on whether the user
    * has a passkey registered.
    *
-   * @param options.username - Pre-fill the username field
    * @param options.theme - Override the theme for this modal invocation
    * @param options.oauthEnabled - Set to false to hide OAuth sign-in buttons
    * @param options.flow - Force the login or account-creation route instead
@@ -977,7 +977,7 @@ var OneAuthClient = class {
    * const result = await client.authWithModal();
    *
    * if (result.success) {
-   *   console.log('Signed in as:', result.user?.username);
+   *   console.log('Signed in as:', result.user?.address);
    *   console.log('Address:', result.user?.address); // typed `0x${string}`
    * } else if (result.error?.code === 'USER_CANCELLED') {
    *   // User closed the modal
@@ -995,7 +995,6 @@ var OneAuthClient = class {
    * is creating a login session, for example after an app-level "Log in"
    * button. The result intentionally matches {@link authWithModal}.
    *
-   * @param options.username - Optional account hint for the sign-in ceremony
    * @param options.theme - Override the theme for this modal invocation
    * @returns {@link AuthResult} with user details and typed address
    */
@@ -1025,8 +1024,7 @@ var OneAuthClient = class {
    */
   async openAuthModal(options) {
     const telemetry = this.createTelemetryOperation("auth", {
-      flow: options?.flow ?? "auto",
-      hasUsernameHint: !!options?.username
+      flow: options?.flow ?? "auto"
     });
     const dialogUrl = this.getDialogUrl();
     const requestId = this.createDialogRequestId();
@@ -1037,12 +1035,12 @@ var OneAuthClient = class {
     if (this.config.clientId) {
       params.set("clientId", this.config.clientId);
     }
-    if (options?.username) {
-      params.set("username", options.username);
-    }
     if (options?.oauthEnabled === false) {
       params.set("oauth", "0");
     }
+    if (options?.eoaConnect) {
+      params.set("eoaConnect", "1");
+    }
     if (options?.flow === "create-account") {
       params.set("switch", "1");
     }
@@ -1111,7 +1109,7 @@ var OneAuthClient = class {
    * const result = await client.connectWithModal();
    *
    * if (result.success) {
-   *   console.log('Connected as:', result.user?.username);
+   *   console.log('Connected as:', result.user?.address);
    * } else if (result.action === 'switch') {
    *   // User needs to sign in first
    *   const authResult = await client.authWithModal();
@@ -1196,14 +1194,14 @@ var OneAuthClient = class {
    * `{ success: false, action: "cancel", error: { code: "USER_CANCELLED", … } }`.
    *
    * @param options - Forwarded to whichever underlying modal is shown.
-   *   `username` and `oauthEnabled` only apply to the auth-modal fallback path.
+   *   `oauthEnabled` only applies to the auth-modal fallback path.
    * @returns A {@link ConnectResult} discriminated union.
    *
    * @example
    * ```typescript
    * const result = await client.connect();
    * if (result.success) {
-   *   console.log("Connected as", result.user?.username ?? result.user?.address);
+   *   console.log("Connected as", result.user?.address);
    * }
    * ```
    */
@@ -1218,9 +1216,12 @@ var OneAuthClient = class {
         return {
           success: true,
           user: {
-            username: authResult.user.username,
             address: authResult.user.address
           },
+          // Preserve the signer type from the auth modal — a wallet-picked
+          // (EOA) signup must not be silently normalized to "passkey", or the
+          // provider would route its transactions through intents.
+          signerType: authResult.signerType ?? "passkey",
           autoConnected: false
         };
       }
@@ -1388,17 +1389,17 @@ var OneAuthClient = class {
       targetChains: normalizeGrantTargetChains(options).join(","),
       sponsor: options.sponsor !== false
     });
-    if (!options.username && !options.accountAddress) {
+    if (!options.accountAddress) {
       this.emitTelemetry("grant_permission.failed", telemetry, {
         outcome: "failure",
         errorCode: "INVALID_OPTIONS",
-        errorMessage: "Either username or accountAddress is required"
+        errorMessage: "accountAddress is required"
       });
       return {
         success: false,
         error: {
           code: "INVALID_OPTIONS",
-          message: "Either username or accountAddress is required"
+          message: "accountAddress is required"
         }
       };
     }
@@ -1462,7 +1463,6 @@ var OneAuthClient = class {
       mode: "iframe",
       clientId: this.config.clientId,
       grant: cloneGrantPayload({
-        username: options.username,
         accountAddress: options.accountAddress,
         targetChain: targetChains[0],
         targetChains,
@@ -1517,17 +1517,16 @@ var OneAuthClient = class {
    * not send `clientId` for this lookup because grants are origin-scoped.
    */
   async listSessionGrants(options) {
-    if (!options.username && !options.accountAddress) {
+    if (!options.accountAddress) {
       return {
         success: false,
         error: {
           code: "INVALID_OPTIONS",
-          message: "Either username or accountAddress is required"
+          message: "accountAddress is required"
         }
       };
     }
     const params = new URLSearchParams();
-    if (options.username) params.set("username", options.username);
     if (options.accountAddress) params.set("accountAddress", options.accountAddress);
     if (options.includeRevoked) params.set("includeRevoked", "true");
     try {
@@ -1580,7 +1579,7 @@ var OneAuthClient = class {
    * if (result.success && result.challenge) {
    *   // Verify signature server-side
    *   const isValid = await verifyOnServer(
-   *     result.user?.username,
+   *     result.user?.address,
    *     result.challenge.signature,
    *     result.challenge.signedHash
    *   );
@@ -1611,15 +1610,14 @@ var OneAuthClient = class {
       return authResult;
     }
     const accountAddress = authResult.user?.address;
-    const username = authResult.user?.username;
-    if (!accountAddress && !username) {
+    if (!accountAddress) {
       const result2 = {
         success: false,
         user: authResult.user,
         signerType: authResult.signerType,
         error: {
           code: "AUTHENTICATE_USER_MISSING",
-          message: "Authentication succeeded but no username or account address was returned for challenge signing"
+          message: "Authentication succeeded but no account address was returned for challenge signing"
         }
       };
       this.emitTelemetry("auth.failed", telemetry, {
@@ -1629,7 +1627,6 @@ var OneAuthClient = class {
       return result2;
     }
     const signResult = await this.signMessage({
-      username,
       accountAddress,
       message: options.challenge,
       description: "Verify your identity",
@@ -1697,7 +1694,6 @@ var OneAuthClient = class {
     const ready = await this.waitForDialogReady(dialog, iframe, cleanup, {
       mode: "iframe",
       challenge: options.challenge,
-      username: options.username,
       accountAddress: options.accountAddress,
       description: options.description,
       transaction: options.transaction,
@@ -1749,7 +1745,7 @@ var OneAuthClient = class {
    * @example
    * ```typescript
    * const result = await client.sendIntent({
-   *   username: 'alice',
+   *   accountAddress: '0x...',
    *   targetChain: 8453, // Base
    *   calls: [
    *     {
@@ -1767,7 +1763,7 @@ var OneAuthClient = class {
    * ```
    */
   async sendIntent(options) {
-    const { username, accountAddress, targetChain } = options;
+    const { accountAddress, targetChain } = options;
     const calls = capCallLabels(options.calls);
     const sponsor = options.sponsor !== false;
     const telemetry = this.createTelemetryOperation("intent", {
@@ -1792,11 +1788,11 @@ var OneAuthClient = class {
         }
       };
     }
-    if (!username && !accountAddress) {
+    if (!accountAddress) {
       this.emitTelemetry("intent.completed", telemetry, {
         outcome: "failure",
         errorCode: "INVALID_OPTIONS",
-        errorMessage: "Either username or accountAddress is required"
+        errorMessage: "accountAddress is required"
       });
       return {
         success: false,
@@ -1804,7 +1800,7 @@ var OneAuthClient = class {
         status: "failed",
         error: {
           code: "INVALID_OPTIONS",
-          message: "Either username or accountAddress is required"
+          message: "accountAddress is required"
         }
       };
     }
@@ -1954,7 +1950,6 @@ var OneAuthClient = class {
     }
     let accessToken = accessTokenResult.ok ? accessTokenResult.accessToken : "";
     const requestBody = {
-      username,
       accountAddress,
       targetChain,
       calls,
@@ -2196,7 +2191,6 @@ var OneAuthClient = class {
             chainId: targetChain,
             transaction: prepareResponse.transaction,
             challenge: prepareResponse.challenge,
-            username,
             accountAddress: prepareResponse.accountAddress,
             originMessages: prepareResponse.originMessages,
             tokenRequests: serializedTokenRequests,
@@ -2251,7 +2245,6 @@ var OneAuthClient = class {
         signingMode: "transaction",
         calls,
         chainId: targetChain,
-        username,
         accountAddress: options.accountAddress,
         tokenRequests: serializedTokenRequests,
         telemetry: this.telemetryPayload(telemetry)
@@ -2327,7 +2320,6 @@ var OneAuthClient = class {
           chainId: targetChain,
           transaction: prepareResponse.transaction,
           challenge: prepareResponse.challenge,
-          username,
           accountAddress: prepareResponse.accountAddress,
           originMessages: prepareResponse.originMessages,
           tokenRequests: serializedTokenRequests,
@@ -2722,7 +2714,7 @@ var OneAuthClient = class {
    * @example
    * ```typescript
    * const result = await client.sendBatchIntent({
-   *   username: 'alice',
+   *   accountAddress: '0x...',
    *   intents: [
    *     {
    *       targetChain: 8453, // Base
@@ -2759,11 +2751,11 @@ var OneAuthClient = class {
         error: "Batch intents are not supported for EOA sessions. Use the connected wallet's native RPC instead."
       };
     }
-    if (!options.username && !options.accountAddress) {
+    if (!options.accountAddress) {
       this.emitTelemetry("batch.completed", telemetry, {
         outcome: "failure",
         errorCode: "INVALID_OPTIONS",
-        errorMessage: "Either username or accountAddress is required"
+        errorMessage: "accountAddress is required"
       });
       return {
         success: false,
@@ -2828,7 +2820,6 @@ var OneAuthClient = class {
       moduleInstall: intent.moduleInstall
     }));
     const requestBody = {
-      ...options.username && { username: options.username },
       ...options.accountAddress && { accountAddress: options.accountAddress },
       intents: serializedIntents,
       auth: { accessToken },
@@ -2954,7 +2945,6 @@ var OneAuthClient = class {
         batchFailedIntents: prepareResponse.failedIntents,
         challenge: prepareResponse.challenge,
         binding: prepareResponse.binding,
-        username: options.username,
         accountAddress: prepareResponse.accountAddress,
         userId: prepareResponse.userId,
         expiresAt: prepareResponse.expiresAt,
@@ -2973,7 +2963,6 @@ var OneAuthClient = class {
           calls: JSON.stringify(intent.calls)
           // No: transaction, intentOp, expiresAt, originMessages
         })),
-        username: options.username,
         accountAddress: options.accountAddress,
         telemetry: this.telemetryPayload(telemetry)
       };
@@ -2998,7 +2987,6 @@ var OneAuthClient = class {
         batchFailedIntents: prepareResponse.failedIntents,
         challenge: prepareResponse.challenge,
         binding: prepareResponse.binding,
-        username: options.username,
         accountAddress: prepareResponse.accountAddress,
         userId: prepareResponse.userId,
         expiresAt: prepareResponse.expiresAt,
@@ -4050,7 +4038,7 @@ var OneAuthClient = class {
    * ```typescript
    * // Sign a login challenge
    * const result = await client.signMessage({
-   *   username: 'alice',
+   *   accountAddress: '0x...',
    *   message: `Sign in to MyApp\nTimestamp: ${Date.now()}\nNonce: ${crypto.randomUUID()}`,
    *   description: 'Verify your identity to continue',
    * });
@@ -4112,7 +4100,6 @@ var OneAuthClient = class {
       mode: "iframe",
       message: options.message,
       challenge: options.challenge || options.message,
-      username: options.username,
       accountAddress: options.accountAddress,
       description: options.description,
       metadata: options.metadata,
@@ -4172,7 +4159,7 @@ var OneAuthClient = class {
    * ```typescript
    * // Sign an ERC-2612 Permit
    * const result = await client.signTypedData({
-   *   username: 'alice',
+   *   accountAddress: '0x...',
    *   domain: {
    *     name: 'Dai Stablecoin',
    *     version: '1',
@@ -4261,7 +4248,6 @@ var OneAuthClient = class {
         message: options.message
       },
       challenge: signedHash,
-      username: options.username,
       accountAddress: options.accountAddress,
       description: options.description,
       telemetry: this.telemetryPayload(telemetry)
@@ -4526,11 +4512,14 @@ var OneAuthClient = class {
     return this.fetchSigningResult(requestId);
   }
   /**
-   * Fetch passkeys for a user from the auth provider
+   * Fetch passkeys for a user from the auth provider.
+   *
+   * The account address is the sole identity; the backend `resolveUserWhere`
+   * accepts an address as a globally-unique path identifier.
    */
-  async getPasskeys(username) {
+  async getPasskeys(accountAddress) {
     const response = await fetch(
-      `${this.config.providerUrl}/api/users/${encodeURIComponent(username)}/passkeys`,
+      `${this.config.providerUrl}/api/users/${encodeURIComponent(accountAddress)}/passkeys`,
       {
         headers: this.config.clientId ? { "x-client-id": this.config.clientId } : {}
       }
@@ -4551,7 +4540,7 @@ var OneAuthClient = class {
    * them by `requestId` without relying on URL parameters alone. This avoids
    * exposing potentially large challenge payloads in query strings.
    *
-   * @param options - The signing options (challenge, username, description, etc.).
+   * @param options - The signing options (challenge, accountAddress, description, etc.).
    * @param mode - How the dialog will be opened (`"popup"`, `"redirect"`, or `"embed"`).
    * @param redirectUrl - Only required for `"redirect"` mode; the URL the dialog
    *   will navigate back to after signing.
@@ -4568,7 +4557,6 @@ var OneAuthClient = class {
         },
         body: JSON.stringify({
           ...this.config.clientId && { clientId: this.config.clientId },
-          username: options.username,
           accountAddress: options.accountAddress,
           challenge: options.challenge,
           description: options.description,
@@ -4896,6 +4884,7 @@ var OneAuthClient = class {
     iframe.setAttribute(
       "allow",
       [
+        "payment",
         `publickey-credentials-get ${hostUrl.origin}`,
         `publickey-credentials-create ${hostUrl.origin}`,
         "clipboard-write",
@@ -5060,7 +5049,6 @@ var OneAuthClient = class {
               success: true,
               user: {
                 id: data.data?.user?.id,
-                username: data.data?.username,
                 address: data.data?.address
               },
               signerType: data.data?.signerType ?? "passkey"
@@ -5114,7 +5102,6 @@ var OneAuthClient = class {
               success: true,
               user: {
                 id: data.data?.user?.id,
-                username: data.data?.username,
                 address: data.data?.address
               },
               signerType: data.data?.signerType ?? "passkey"
@@ -5146,7 +5133,7 @@ var OneAuthClient = class {
    *
    * The connect flow is a lightweight "are you still you?" confirmation that
    * does not require a new passkey ceremony. On success, the dialog returns the
-   * user's username, address, and an `autoConnected` flag indicating whether the
+   * user's address and an `autoConnected` flag indicating whether the
    * user had previously enabled auto-connect (in which case no UI was shown).
    *
    * On failure with `action: "switch"`, the caller should redirect to the full
@@ -5170,9 +5157,12 @@ var OneAuthClient = class {
             resolve({
               success: true,
               user: {
-                username: data.data?.username,
                 address: data.data?.address
               },
+              // Carry the signer type through so the SDK/provider can route EOA
+              // sessions to the connected wallet (plain tx, no intents) instead
+              // of defaulting to passkey intents. Absent = legacy passkey.
+              signerType: data.data?.signerType ?? "passkey",
               autoConnected: data.data?.autoConnected
             });
           } else {
@@ -5616,12 +5606,14 @@ function createOneAuthProvider(options) {
   let chainId = options.chainId;
   const storageKey = options.storageKey || DEFAULT_STORAGE_KEY;
   const listeners = /* @__PURE__ */ new Map();
+  let sessionOverride;
   const emit = (event, ...args) => {
     const set = listeners.get(event);
     if (!set) return;
     for (const listener of set) listener(...args);
   };
   const getStoredUser = () => {
+    if (sessionOverride !== void 0) return sessionOverride;
     if (typeof window === "undefined") return null;
     try {
       const raw = localStorage.getItem(storageKey);
@@ -5641,21 +5633,6 @@ function createOneAuthProvider(options) {
     if (typeof window === "undefined") return;
     localStorage.removeItem(storageKey);
   };
-  const resolveAccountAddress = async (username) => {
-    const clientId = client.getClientId();
-    const response = await fetch(
-      `${client.getProviderUrl()}/api/users/${encodeURIComponent(username)}/account`,
-      {
-        headers: clientId ? { "x-client-id": clientId } : {}
-      }
-    );
-    if (!response.ok) {
-      const data2 = await response.json().catch(() => ({}));
-      throw new Error(data2.error || "Failed to resolve account address");
-    }
-    const data = await response.json();
-    return data.address;
-  };
   const connect = async () => {
     const stored = getStoredUser();
     if (stored) {
@@ -5665,25 +5642,39 @@ function createOneAuthProvider(options) {
     if (!authResult.success) {
       throw new Error(authResult.error?.message || "Authentication failed");
     }
-    const username = authResult.user?.username;
-    let address = authResult.user?.address;
+    const address = authResult.user?.address;
     const signerType = authResult.signerType;
-    if (!address && username) {
-      address = await resolveAccountAddress(username);
-    }
     if (!address) {
       throw new Error("No account address available");
     }
-    setStoredUser({ username, address, signerType });
+    setStoredUser({ address, signerType });
     emit("accountsChanged", [address]);
     emit("connect", { chainId: (0, import_viem5.numberToHex)(chainId) });
     return [address];
   };
   const disconnect = async () => {
+    sessionOverride = void 0;
     clearStoredUser();
     emit("accountsChanged", []);
     emit("disconnect");
   };
+  const setSession = (session) => {
+    if (!session) {
+      sessionOverride = void 0;
+      clearStoredUser();
+      emit("accountsChanged", []);
+      emit("disconnect");
+      return;
+    }
+    sessionOverride = {
+      address: session.address,
+      signerType: session.signerType,
+      connectorId: session.connectorId
+    };
+    setStoredUser(sessionOverride);
+    emit("accountsChanged", [session.address]);
+    emit("connect", { chainId: (0, import_viem5.numberToHex)(chainId) });
+  };
   const ensureUser = async () => {
     const stored = getStoredUser();
     if (stored) return stored;
@@ -5788,11 +5779,10 @@ function createOneAuthProvider(options) {
   ]);
   const signMessage = async (message) => {
     const user = await ensureUser();
-    if (!user.username && !user.address) {
-      throw new Error("Username or address required for signing.");
+    if (!user.address) {
+      throw new Error("Account address required for signing.");
     }
     const result = await client.signMessage({
-      username: user.username || void 0,
       accountAddress: user.address,
       message
     });
@@ -5803,12 +5793,11 @@ function createOneAuthProvider(options) {
   };
   const signTypedData = async (typedData) => {
     const user = await ensureUser();
-    if (!user.username && !user.address) {
-      throw new Error("Username or address required for signing.");
+    if (!user.address) {
+      throw new Error("Account address required for signing.");
     }
     const data = typeof typedData === "string" ? JSON.parse(typedData) : typedData;
     const result = await client.signTypedData({
-      username: user.username || void 0,
       accountAddress: user.address,
       domain: data.domain,
       types: data.types,
@@ -5821,7 +5810,6 @@ function createOneAuthProvider(options) {
     return encodeWebAuthnSignature(result.signature);
   };
   const resolveIntentPayload = (payload) => ({
-    username: payload.username,
     accountAddress: payload.accountAddress,
     targetChain: payload.targetChain,
     calls: payload.calls,
@@ -5896,10 +5884,49 @@ function createOneAuthProvider(options) {
     }
     return list;
   };
+  const eoaBatches = /* @__PURE__ */ new Map();
+  const sendCallsEoa = async (params, address) => {
+    const validated = injectEoaSigner("wallet_sendCalls", params, address);
+    const payload = Array.isArray(validated) ? validated[0] : {};
+    const calls = Array.isArray(payload.calls) ? payload.calls : [];
+    if (!calls.length) throw new Error("No calls provided");
+    const batchChainId = payload.chainId;
+    const hashes = [];
+    for (const raw of calls) {
+      const call = raw || {};
+      const tx = { from: address, to: call.to };
+      if (call.data !== void 0) tx.data = call.data;
+      if (call.value !== void 0) tx.value = call.value;
+      const callChain = call.chainId ?? batchChainId;
+      if (callChain !== void 0) tx.chainId = callChain;
+      const hash = await forwardToWallet("eth_sendTransaction", [tx], address);
+      hashes.push(String(hash));
+    }
+    const id = hashes[hashes.length - 1];
+    eoaBatches.set(id, hashes);
+    return id;
+  };
+  const getCallsStatusEoa = (callsId) => {
+    if (!callsId || typeof callsId !== "string") {
+      throw new Error("callsId is required");
+    }
+    const hashes = eoaBatches.get(callsId) ?? [callsId];
+    return {
+      status: "CONFIRMED",
+      receipts: hashes.map((transactionHash) => ({ transactionHash }))
+    };
+  };
   const request = async ({ method, params }) => {
     if (EOA_FORWARDED_METHODS.has(method)) {
       const user = await ensureUser();
       if (user.signerType === "eoa") {
+        if (method === "wallet_sendCalls") {
+          return sendCallsEoa(params, user.address);
+        }
+        if (method === "wallet_getCallsStatus") {
+          const list = Array.isArray(params) ? params : [];
+          return getCallsStatusEoa(list[0]);
+        }
         return forwardToWallet(
           method,
           injectEoaSigner(method, params, user.address),
@@ -5964,7 +5991,6 @@ function createOneAuthProvider(options) {
         const tokenRequests = normalizeTokenRequests(tx.tokenRequests);
         const txSourceChainId = parseChainId(tx.sourceChainId);
         return sendIntent({
-          username: user.username || void 0,
           accountAddress: user.address,
           targetChain,
           calls,
@@ -5982,7 +6008,6 @@ function createOneAuthProvider(options) {
         const sourceChainId = parseChainId(payload.sourceChainId);
         if (!calls.length) throw new Error("No calls provided");
         return sendIntent({
-          username: user.username || void 0,
           accountAddress: user.address,
           targetChain,
           calls,
@@ -6118,15 +6143,97 @@ function createOneAuthProvider(options) {
       set.delete(listener);
       if (set.size === 0) listeners.delete(event);
     },
-    disconnect
+    disconnect,
+    setSession
   };
 }
 
+// src/connection.ts
+var DEFAULT_CHAIN_ID = 8453;
+function readStoredSession(storageKey, provider, chainId) {
+  if (typeof window === "undefined") return null;
+  try {
+    const raw = localStorage.getItem(storageKey);
+    if (!raw) return null;
+    const parsed = JSON.parse(raw);
+    if (!parsed?.address) return null;
+    return {
+      // Absent signerType = legacy passkey session (backwards compatible).
+      signerType: parsed.signerType === "eoa" ? "eoa" : "passkey",
+      address: parsed.address,
+      provider,
+      chainId,
+      autoConnected: false
+    };
+  } catch {
+    return null;
+  }
+}
+function createOneAuthConnection(config) {
+  const {
+    defaultChainId,
+    storageKey: storageKeyOption,
+    closeOn,
+    waitForHash,
+    hashTimeoutMs,
+    hashIntervalMs,
+    eoaConnect: eoaConnectConfig,
+    ...clientConfig
+  } = config;
+  const client = "client" in config && config.client ? config.client : new OneAuthClient(clientConfig);
+  const chainId = defaultChainId ?? DEFAULT_CHAIN_ID;
+  const storageKey = storageKeyOption ?? "1auth-user";
+  const provider = createOneAuthProvider({
+    client,
+    chainId,
+    storageKey,
+    closeOn,
+    waitForHash,
+    hashTimeoutMs,
+    hashIntervalMs
+  });
+  const getSession = () => readStoredSession(storageKey, provider, chainId);
+  const connect = async (options) => {
+    const eoaConnect = options?.eoaConnect ?? eoaConnectConfig ?? false;
+    const result = await client.connect({ ...options, eoaConnect });
+    if (!result.success || !result.user?.address) {
+      const error = result.error ?? {
+        code: "USER_CANCELLED",
+        message: "Connection was cancelled"
+      };
+      throw Object.assign(new Error(error.message), { code: error.code });
+    }
+    const signerType = result.signerType === "eoa" ? "eoa" : "passkey";
+    provider.setSession({ address: result.user.address, signerType });
+    return {
+      signerType,
+      address: result.user.address,
+      provider,
+      chainId,
+      autoConnected: result.autoConnected ?? false
+    };
+  };
+  const disconnect = async () => {
+    await provider.disconnect();
+  };
+  const subscribe = (listener) => {
+    const onAccountsChanged = (...args) => {
+      const accounts = args[0];
+      listener(
+        accounts && accounts.length > 0 ? getSession() : null
+      );
+    };
+    provider.on("accountsChanged", onAccountsChanged);
+    return () => provider.removeListener("accountsChanged", onAccountsChanged);
+  };
+  return { client, provider, connect, getSession, disconnect, subscribe };
+}
+
 // src/account.ts
 var import_viem6 = require("viem");
 var import_accounts = require("viem/accounts");
 function createPasskeyAccount(client, params) {
-  const { address, username } = params;
+  const { address } = params;
   const normalizeMessage = (message) => {
     if (typeof message === "string") return message;
     const raw = message.raw;
@@ -6143,7 +6250,6 @@ function createPasskeyAccount(client, params) {
     address,
     signMessage: async ({ message }) => {
       const result = await client.signMessage({
-        username: username || void 0,
         accountAddress: address,
         message: normalizeMessage(message)
       });
@@ -6179,7 +6285,6 @@ function createPasskeyAccount(client, params) {
         ])
       );
       const result = await client.signTypedData({
-        username: username || void 0,
         accountAddress: address,
         domain,
         types: normalizedTypes,
@@ -6194,7 +6299,6 @@ function createPasskeyAccount(client, params) {
   });
   return {
     ...account,
-    ...username ? { username } : {},
     accountAddress: address
   };
 }
@@ -6202,9 +6306,12 @@ function createPasskeyAccount(client, params) {
 // src/walletClient/index.ts
 var import_viem7 = require("viem");
 var import_accounts2 = require("viem/accounts");
+function formatSignableMessage(message) {
+  if (typeof message === "string") return message;
+  return typeof message.raw === "string" ? message.raw : (0, import_viem7.toHex)(message.raw);
+}
 function createPasskeyWalletClient(config) {
   const identity = {
-    ...config.username ? { username: config.username } : {},
     accountAddress: config.accountAddress
   };
   const provider = new OneAuthClient({
@@ -6217,20 +6324,10 @@ function createPasskeyWalletClient(config) {
     sponsorship: config.sponsorship
   });
   const signMessageImpl = async (message) => {
-    const hash = (0, import_viem7.hashMessage)(message);
-    const result = await provider.signWithModal({
-      challenge: hash,
+    const result = await provider.signMessage({
       ...identity,
-      description: "Sign message",
-      transaction: {
-        actions: [
-          {
-            type: "custom",
-            label: "Sign Message",
-            sublabel: typeof message === "string" ? message.slice(0, 50) + (message.length > 50 ? "..." : "") : "Raw message"
-          }
-        ]
-      }
+      message: formatSignableMessage(message),
+      description: "Sign message"
     });
     if (!result.success) {
       throw new Error(result.error?.message || "Signing failed");
@@ -6299,7 +6396,6 @@ function createPasskeyWalletClient(config) {
       abi: call.abi
     }));
     return {
-      ...config.username ? { username: config.username } : {},
       accountAddress: config.accountAddress,
       targetChain,
       calls: intentCalls
@@ -6383,21 +6479,19 @@ function generateId() {
   return `${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
 }
 function getStorageKey(identity) {
-  const key = identity?.accountAddress || identity?.username;
+  const key = identity?.accountAddress;
   return key ? `1auth_batch_queue_${key.toLowerCase()}` : "1auth_batch_queue_anonymous";
 }
 function resolveIdentity(passedIdentity, providerIdentity) {
   if (typeof passedIdentity === "string") {
-    return { username: passedIdentity, accountAddress: providerIdentity.accountAddress };
+    return { accountAddress: passedIdentity };
   }
   return {
-    username: passedIdentity?.username ?? providerIdentity.username,
     accountAddress: passedIdentity?.accountAddress ?? providerIdentity.accountAddress
   };
 }
 function BatchQueueProvider({
   client,
-  username,
   accountAddress,
   children
 }) {
@@ -6406,8 +6500,8 @@ function BatchQueueProvider({
   const [isSigning, setIsSigning] = React.useState(false);
   const [animationTrigger, setAnimationTrigger] = React.useState(0);
   const providerIdentity = React.useMemo(
-    () => ({ username, accountAddress }),
-    [username, accountAddress]
+    () => ({ accountAddress }),
+    [accountAddress]
   );
   const batchChainId = queue.length > 0 ? queue[0].targetChain : null;
   React.useEffect(() => {
@@ -6473,14 +6567,14 @@ function BatchQueueProvider({
       };
     }
     const signer = resolveIdentity(identity, providerIdentity);
-    if (!signer.username && !signer.accountAddress) {
+    if (!signer.accountAddress) {
       return {
         success: false,
         intentId: "",
         status: "failed",
         error: {
           code: "MISSING_IDENTITY",
-          message: "Batch signing requires an accountAddress or username"
+          message: "Batch signing requires an accountAddress"
         }
       };
     }
@@ -6489,7 +6583,6 @@ function BatchQueueProvider({
     setIsSigning(true);
     try {
       const result = await client.sendIntent({
-        username: signer.username,
         accountAddress: signer.accountAddress,
         targetChain,
         calls
@@ -6823,14 +6916,14 @@ function BatchQueueWidget({ onSignAll }) {
 // src/verify.ts
 var import_viem8 = require("viem");
 var ETHEREUM_MESSAGE_PREFIX = "Ethereum Signed Message:\n";
-function hashMessage2(message) {
+function hashMessage(message) {
   const messageBytes = (0, import_viem8.toBytes)(message);
   const prefixed = ETHEREUM_MESSAGE_PREFIX + messageBytes.length.toString() + message;
   return (0, import_viem8.keccak256)((0, import_viem8.toBytes)(prefixed));
 }
 function verifyMessageHash(message, signedHash) {
   if (!signedHash) return false;
-  const expectedHash = hashMessage2(message);
+  const expectedHash = hashMessage(message);
   return expectedHash.toLowerCase() === signedHash.toLowerCase();
 }
 // Annotate the CommonJS export names for ESM import in node:
@@ -6840,6 +6933,7 @@ function verifyMessageHash(message, signedHash) {
   ETHEREUM_MESSAGE_PREFIX,
   OneAuthClient,
   createCrossChainPermission,
+  createOneAuthConnection,
   createOneAuthProvider,
   createPasskeyAccount,
   createPasskeyWalletClient,