@swype-org/deposit 0.3.14 → 0.3.16

package/dist/react.cjs

@@ -93,6 +93,24 @@ function parseCloseRequest(data) {
   }
   return { type: "blink:close-request" };
 }
+function parseIframeReady(data) {
+  if (!data || typeof data !== "object") {
+    return null;
+  }
+  const msg = data;
+  if (msg.type !== "blink:iframe-ready") {
+    return null;
+  }
+  return { type: "blink:iframe-ready" };
+}
+function buildSignedPayloadMessage(merchantId, payload, signature) {
+  return {
+    type: "blink:signed-payload",
+    merchantId,
+    payload,
+    signature
+  };
+}
 
 // src/walletBridge/discover.ts
 function createWalletDiscoverer() {
@@ -233,7 +251,13 @@ var ALLOWED_RPC_METHODS = /* @__PURE__ */ new Set([
   "wallet_addEthereumChain",
   "wallet_switchEthereumChain",
   "wallet_sendCalls",
-  "wallet_watchAsset"
+  "wallet_watchAsset",
+  // EIP-2255: lets the SDK revoke the dApp's `eth_accounts` grant before
+  // re-prompting on "+ Add wallet" / back-from-setup, so MetaMask shows the
+  // account picker instead of silently reusing the previously-permitted
+  // account. Wallets that don't implement it return method-not-supported,
+  // which the SDK swallows.
+  "wallet_revokePermissions"
 ]);
 var FORWARDED_PROVIDER_EVENTS = [
   "accountsChanged",
@@ -921,30 +945,16 @@ var Deposit = class {
   async runSignerFlow(request, requestId, onComplete, onError) {
     try {
       const webviewBaseUrl = this.config.webviewBaseUrl ?? DEFAULT_WEBVIEW_BASE_URL;
+      this.hostedOrigin = this.config.hostedFlowOrigin ?? new URL(webviewBaseUrl).origin;
       this.log("Calling signer", {
         signer: typeof this.config.signer === "string" ? this.config.signer : "<function>"
       });
       const signerRequest = buildSignerRequest(request, webviewBaseUrl);
-      const signerResponse = await callSigner(
-        this.config.signer,
-        signerRequest,
-        this.config.signerTimeoutMs
-      );
-      this.lastSignerResponse = signerResponse;
-      this.log("Signer responded", { merchantId: signerResponse.merchantId });
-      if (this.requestId !== requestId) {
-        this.log("Request superseded after signer response");
-        return;
-      }
-      const hostedUrl = new URL(webviewBaseUrl);
-      hostedUrl.searchParams.set("merchantId", signerResponse.merchantId);
-      hostedUrl.searchParams.set("payload", signerResponse.payload);
-      hostedUrl.searchParams.set("signature", signerResponse.signature);
-      const targetUrl = hostedUrl.toString();
-      this.hostedOrigin = this.config.hostedFlowOrigin ?? hostedUrl.origin;
-      const iframeHandle = createIframe(targetUrl, this.config.containerElement);
-      this.iframe = iframeHandle;
-      iframeHandle.onClose(() => {
+      const preloadUrl = new URL(webviewBaseUrl);
+      preloadUrl.searchParams.set("preload", "true");
+      const preloadIframe = createIframe(preloadUrl.toString(), this.config.containerElement);
+      this.iframe = preloadIframe;
+      preloadIframe.onClose(() => {
         onError(
           new DepositError(
             "DEPOSIT_DISMISSED",
@@ -954,9 +964,60 @@ var Deposit = class {
         this.cleanup();
         this.emit("close");
       });
-      this.startMessageListener(iframeHandle, onComplete);
-      this.setStatus("iframe-active");
-      this.log("Iframe opened with hosted flow", { url: targetUrl });
+      const signerPromise = callSigner(
+        this.config.signer,
+        signerRequest,
+        this.config.signerTimeoutMs
+      );
+      const iframeReadyPromise = this.waitForIframeReady(preloadIframe);
+      const [signerResponse, iframeReady] = await Promise.all([
+        signerPromise,
+        iframeReadyPromise
+      ]);
+      this.lastSignerResponse = signerResponse;
+      this.log("Signer responded", { merchantId: signerResponse.merchantId });
+      if (this.requestId !== requestId || preloadIframe.isClosed()) {
+        this.log("Request superseded or iframe dismissed during signer call");
+        return;
+      }
+      if (iframeReady) {
+        const contentWindow = preloadIframe.contentWindow;
+        if (contentWindow) {
+          contentWindow.postMessage(
+            buildSignedPayloadMessage(
+              signerResponse.merchantId,
+              signerResponse.payload,
+              signerResponse.signature
+            ),
+            this.hostedOrigin
+          );
+        }
+        this.startMessageListener(preloadIframe, onComplete);
+        this.setStatus("iframe-active");
+        this.log("Payload delivered via postMessage (preload path)");
+      } else {
+        preloadIframe.destroy();
+        const hostedUrl = new URL(webviewBaseUrl);
+        hostedUrl.searchParams.set("merchantId", signerResponse.merchantId);
+        hostedUrl.searchParams.set("payload", signerResponse.payload);
+        hostedUrl.searchParams.set("signature", signerResponse.signature);
+        const targetUrl = hostedUrl.toString();
+        const iframeHandle = createIframe(targetUrl, this.config.containerElement);
+        this.iframe = iframeHandle;
+        iframeHandle.onClose(() => {
+          onError(
+            new DepositError(
+              "DEPOSIT_DISMISSED",
+              "The deposit was dismissed before the transfer completed."
+            )
+          );
+          this.cleanup();
+          this.emit("close");
+        });
+        this.startMessageListener(iframeHandle, onComplete);
+        this.setStatus("iframe-active");
+        this.log("Iframe opened with hosted flow (fallback path)", { url: targetUrl });
+      }
     } catch (err) {
       if (this.requestId !== requestId) return;
       this.log("Signer flow failed", { error: err instanceof Error ? err.message : String(err) });
@@ -972,6 +1033,25 @@ var Deposit = class {
       }
     }
   }
+  waitForIframeReady(iframeHandle) {
+    return new Promise((resolve) => {
+      const handler = (event) => {
+        if (event.origin !== this.hostedOrigin) return;
+        if (event.source !== iframeHandle.contentWindow) return;
+        if (parseIframeReady(event.data)) {
+          window.removeEventListener("message", handler);
+          clearTimeout(timeout);
+          resolve(true);
+        }
+      };
+      window.addEventListener("message", handler);
+      const timeout = setTimeout(() => {
+        window.removeEventListener("message", handler);
+        this.log("Iframe ready timeout \u2014 falling back to URL params");
+        resolve(false);
+      }, 2e3);
+    });
+  }
   startMessageListener(iframeHandle, onComplete) {
     const handler = (event) => {
       if (this.hostedOrigin && event.origin !== this.hostedOrigin) {