@swype-org/react-sdk 0.1.232 → 0.1.237

package/dist/index.d.cts

@@ -375,11 +375,12 @@ declare function updateUserConfig(apiBaseUrl: string, token: string, config: {
     defaultAllowance: number;
 }): Promise<void>;
 /**
- * Updates the user's default allowance, authenticated by session ID.
+ * Updates default allowance for the authorization session.
  * PATCH /v1/authorization-sessions/{id}/user-config
  *
- * This does not require a bearer token — the session ID itself serves
- * as proof of authorization.
+ * No bearer token — the session ID is the credential. When the session has no
+ * linked user yet (e.g. guest account setup), config is stored on the session
+ * and used as the account allowance until the user is claimed.
  */
 declare function updateUserConfigBySession(apiBaseUrl: string, sessionId: string, config: {
     defaultAllowance: number;
@@ -857,7 +858,6 @@ type PaymentPhase = {
     step: 'select-source';
     action: AuthorizationAction;
     isDesktop: boolean;
-    skipOneTapLimit?: boolean;
 } | {
     step: 'one-tap-setup';
     action: AuthorizationAction | null;

package/dist/index.d.ts

@@ -375,11 +375,12 @@ declare function updateUserConfig(apiBaseUrl: string, token: string, config: {
     defaultAllowance: number;
 }): Promise<void>;
 /**
- * Updates the user's default allowance, authenticated by session ID.
+ * Updates default allowance for the authorization session.
  * PATCH /v1/authorization-sessions/{id}/user-config
  *
- * This does not require a bearer token — the session ID itself serves
- * as proof of authorization.
+ * No bearer token — the session ID is the credential. When the session has no
+ * linked user yet (e.g. guest account setup), config is stored on the session
+ * and used as the account allowance until the user is claimed.
  */
 declare function updateUserConfigBySession(apiBaseUrl: string, sessionId: string, config: {
     defaultAllowance: number;
@@ -857,7 +858,6 @@ type PaymentPhase = {
     step: 'select-source';
     action: AuthorizationAction;
     isDesktop: boolean;
-    skipOneTapLimit?: boolean;
 } | {
     step: 'one-tap-setup';
     action: AuthorizationAction | null;

package/dist/index.js

@@ -2021,7 +2021,6 @@ function resolvePhase(state) {
   if (p.step === "token-picker" || p.step === "one-tap-setup" || p.step === "select-source" || p.step === "confirm-sign" || p.step === "guest-token-picker") {
     return p;
   }
-  if (p.step === "wallet-setup") return p;
   if (state.mobileFlow && state.deeplinkUri) {
     return {
       step: "wallet-setup",
@@ -2029,7 +2028,19 @@ function resolvePhase(state) {
       accountId: null
     };
   }
-  if (!state.activeCredentialId && !state.passkeyConfigLoaded) {
+  if (p.step === "wallet-setup" && p.mobile == null) {
+    return p;
+  }
+  if (state.isGuestFlow && state.selectedProviderId != null && !state.transfer) {
+    return { step: "guest-token-picker" };
+  }
+  if (p.step === "wallet-picker" && !state.creatingTransfer && !(state.mobileFlow && state.deeplinkUri)) {
+    return p;
+  }
+  if (!state.privyReady) {
+    return { step: "initializing" };
+  }
+  if (state.privyAuthenticated && !state.activeCredentialId && !state.passkeyConfigLoaded) {
     return { step: "initializing" };
   }
   if (state.verificationTarget) {
@@ -2047,9 +2058,6 @@ function resolvePhase(state) {
   if (state.loadingData && state.activeCredentialId && hasActiveWallet(state.accounts)) {
     return { step: "data-loading" };
   }
-  if (state.isGuestFlow && state.selectedProviderId != null && !state.transfer) {
-    return { step: "guest-token-picker" };
-  }
   if (state.activeCredentialId && !hasActiveWallet(state.accounts) && !state.mobileFlow) {
     return { step: "wallet-picker", reason: "link" };
   }
@@ -2106,7 +2114,9 @@ function createInitialState(config) {
     guestPreauthSessionId: null,
     activePublicKey: null,
     loginRequested: false,
-    guestPreauthorizing: false
+    guestPreauthorizing: false,
+    privyReady: false,
+    privyAuthenticated: false
   };
 }
 function paymentReducer(state, action) {
@@ -2336,6 +2346,17 @@ function applyAction(state, action) {
         selectedWalletId: null,
         selectedTokenSymbol: null
       };
+    case "GUEST_BACK_FROM_TOKEN_PICKER":
+      return {
+        ...state,
+        selectedProviderId: null,
+        guestTransferId: null,
+        guestSessionToken: null,
+        selectedAccountId: null,
+        selectedWalletId: null,
+        selectedTokenSymbol: null,
+        error: null
+      };
     case "GUEST_TRANSFER_COMPLETED":
       return {
         ...state,
@@ -2349,7 +2370,10 @@ function applyAction(state, action) {
       return {
         ...state,
         guestPreauthAccountId: action.accountId,
-        guestPreauthSessionId: action.sessionId ?? state.guestPreauthSessionId
+        guestPreauthSessionId: action.sessionId ?? state.guestPreauthSessionId,
+        selectedAccountId: action.accountId,
+        selectedWalletId: null,
+        selectedTokenSymbol: null
       };
     case "GUEST_PREAUTH_BEGIN":
       return { ...state, guestPreauthorizing: true, error: null };
@@ -2407,7 +2431,15 @@ function applyAction(state, action) {
           depositAmount: action.depositAmount,
           passkeyPopupNeeded: state.passkeyPopupNeeded,
           activeCredentialId: null
-        })
+        }),
+        privyReady: action.privyReady,
+        privyAuthenticated: false
+      };
+    case "SYNC_PRIVY_SESSION":
+      return {
+        ...state,
+        privyReady: action.ready,
+        privyAuthenticated: action.authenticated
       };
     case "SYNC_AMOUNT":
       return { ...state, amount: action.amount };
@@ -2475,7 +2507,6 @@ function screenForPhase(phase) {
     case "wallet-setup":
       return phase.mobile ? "open-wallet" : "setup-status";
     case "select-source":
-      if (phase.skipOneTapLimit) return "select-source";
       return phase.isDesktop ? "setup" : "select-source";
     case "one-tap-setup":
       return "setup";
@@ -6238,7 +6269,7 @@ function StepRendererContent({
           depositAmount: depositAmount ?? void 0,
           error: state.error,
           onSelect: handlers.onSelectGuestToken,
-          onBack: () => handlers.onSetPhase({ step: "wallet-picker", reason: "guest-entry" })
+          onBack: handlers.onGuestBackFromTokenPicker
         }
       );
     case "processing": {
@@ -6520,9 +6551,18 @@ function usePasskeyHandlers(dispatch, apiBaseUrl, accounts, knownCredentialIds,
   const { user, getAccessToken } = usePrivy();
   const checkingPasskeyRef = useRef(false);
   const activateExistingCredential = useCallback(async (credentialId) => {
-    dispatch({ type: "PASSKEY_ACTIVATED", credentialId });
-    window.localStorage.setItem(ACTIVE_CREDENTIAL_STORAGE_KEY, credentialId);
     const token = await getAccessToken();
+    let publicKey;
+    if (token) {
+      try {
+        const { config } = await fetchUserConfig(apiBaseUrl, token);
+        const allPasskeys = config.passkeys ?? (config.passkey ? [config.passkey] : []);
+        publicKey = allPasskeys.find((p) => p.credentialId === credentialId)?.publicKey;
+      } catch {
+      }
+    }
+    dispatch({ type: "PASSKEY_ACTIVATED", credentialId, publicKey });
+    window.localStorage.setItem(ACTIVE_CREDENTIAL_STORAGE_KEY, credentialId);
     if (token) {
       reportPasskeyActivity(apiBaseUrl, token, credentialId).catch(() => {
       });
@@ -6595,9 +6635,13 @@ function usePasskeyHandlers(dispatch, apiBaseUrl, accounts, knownCredentialIds,
         authToken: token ?? void 0,
         apiBaseUrl
       });
-      const { credentialId } = await createPasskeyViaPopup(popupOptions);
-      dispatch({ type: "PASSKEY_ACTIVATED", credentialId });
+      const { credentialId, publicKey } = await createPasskeyViaPopup(popupOptions);
+      dispatch({ type: "PASSKEY_ACTIVATED", credentialId, publicKey });
       localStorage.setItem(ACTIVE_CREDENTIAL_STORAGE_KEY, credentialId);
+      if (token) {
+        reportPasskeyActivity(apiBaseUrl, token, credentialId).catch(() => {
+        });
+      }
     } catch (err) {
       captureException(err);
       dispatch({
@@ -6613,19 +6657,25 @@ function usePasskeyHandlers(dispatch, apiBaseUrl, accounts, knownCredentialIds,
     dispatch({ type: "SET_ERROR", error: null });
     try {
       const token = await getAccessToken();
+      if (!token) throw new Error("Not authenticated");
       const matched = await findDevicePasskeyViaPopup({
         credentialIds: knownCredentialIds,
         rpId: resolvePasskeyRpId(),
-        authToken: token ?? void 0,
+        authToken: token,
         apiBaseUrl
       });
       if (matched) {
-        dispatch({ type: "PASSKEY_ACTIVATED", credentialId: matched });
-        window.localStorage.setItem(ACTIVE_CREDENTIAL_STORAGE_KEY, matched);
-        if (token) {
-          reportPasskeyActivity(apiBaseUrl, token, matched).catch(() => {
-          });
+        let publicKey;
+        try {
+          const { config } = await fetchUserConfig(apiBaseUrl, token);
+          const allPasskeys = config.passkeys ?? (config.passkey ? [config.passkey] : []);
+          publicKey = allPasskeys.find((p) => p.credentialId === matched)?.publicKey;
+        } catch {
         }
+        dispatch({ type: "PASSKEY_ACTIVATED", credentialId: matched, publicKey });
+        window.localStorage.setItem(ACTIVE_CREDENTIAL_STORAGE_KEY, matched);
+        reportPasskeyActivity(apiBaseUrl, token, matched).catch(() => {
+        });
       } else {
         dispatch({
           type: "SET_ERROR",
@@ -7674,11 +7724,15 @@ function useGuestTransferHandlers(deps) {
     };
     execute();
   }, [isGuestFlow, guestTransferId, guestSessionToken, settingSender, apiBaseUrl, wagmiConfig2, switchChainAsync, dispatch, onComplete, onError]);
+  const handleGuestBackFromTokenPicker = useCallback(() => {
+    dispatch({ type: "GUEST_BACK_FROM_TOKEN_PICKER" });
+  }, [dispatch]);
   return {
     guestTokenEntries,
     loadingBalances,
     settingSender,
-    handleSelectGuestToken
+    handleSelectGuestToken,
+    handleGuestBackFromTokenPicker
   };
 }
 function useOneTapSetupHandlers(deps) {
@@ -7688,15 +7742,24 @@ function useOneTapSetupHandlers(deps) {
     apiBaseUrl,
     authExecutor,
     selectSourceChainName,
-    selectSourceTokenSymbol
+    selectSourceTokenSymbol,
+    authorizationSessionIdForGuest
   } = deps;
   const [savingOneTapLimit, setSavingOneTapLimit] = useState(false);
   const handleSetupOneTap = useCallback(async (limit) => {
     setSavingOneTapLimit(true);
     try {
-      const token = await getAccessToken();
-      if (!token) throw new Error("Not authenticated");
-      await updateUserConfig(apiBaseUrl, token, { defaultAllowance: limit });
+      if (authorizationSessionIdForGuest) {
+        await updateUserConfigBySession(
+          apiBaseUrl,
+          authorizationSessionIdForGuest,
+          { defaultAllowance: limit }
+        );
+      } else {
+        const token = await getAccessToken();
+        if (!token) throw new Error("Not authenticated");
+        await updateUserConfig(apiBaseUrl, token, { defaultAllowance: limit });
+      }
       if (authExecutor.pendingSelectSource) {
         const action = authExecutor.pendingSelectSource;
         const recommended = action.metadata?.recommended;
@@ -7726,12 +7789,30 @@ function useOneTapSetupHandlers(deps) {
     } finally {
       setSavingOneTapLimit(false);
     }
-  }, [getAccessToken, apiBaseUrl, authExecutor, dispatch, selectSourceChainName, selectSourceTokenSymbol]);
+  }, [
+    getAccessToken,
+    apiBaseUrl,
+    authExecutor,
+    dispatch,
+    selectSourceChainName,
+    selectSourceTokenSymbol,
+    authorizationSessionIdForGuest
+  ]);
   return {
     handleSetupOneTap,
     savingOneTapLimit
   };
 }
+function usePrivySessionSyncEffect(deps) {
+  const { dispatch, ready, authenticated } = deps;
+  useEffect(() => {
+    dispatch({
+      type: "SYNC_PRIVY_SESSION",
+      ready,
+      authenticated
+    });
+  }, [dispatch, ready, authenticated]);
+}
 function useOtpEffects(deps) {
   const {
     state,
@@ -7925,7 +8006,18 @@ function usePasskeyCheckEffect(deps) {
           if (token || cancelled) break;
           await new Promise((r) => setTimeout(r, 1e3));
         }
-        if (!token || cancelled) return;
+        if (cancelled) return;
+        if (!token) {
+          dispatch({
+            type: "PASSKEY_CONFIG_LOADED",
+            knownIds: []
+          });
+          dispatch({
+            type: "SET_ERROR",
+            error: "Could not refresh your session. Try signing in again."
+          });
+          return;
+        }
         const { config } = await fetchUserConfig(apiBaseUrl, token);
         if (cancelled) return;
         const allPasskeys = config.passkeys ?? (config.passkey ? [config.passkey] : []);
@@ -7936,6 +8028,10 @@ function usePasskeyCheckEffect(deps) {
         });
         if (allPasskeys.length === 0) return;
         if (activeCredentialId && allPasskeys.some((p) => p.credentialId === activeCredentialId)) {
+          const pk = allPasskeys.find((p) => p.credentialId === activeCredentialId)?.publicKey;
+          if (pk) {
+            dispatch({ type: "PASSKEY_ACTIVATED", credentialId: activeCredentialId, publicKey: pk });
+          }
           await restoreState(activeCredentialId, token);
           return;
         }
@@ -7954,13 +8050,22 @@ function usePasskeyCheckEffect(deps) {
         }
         if (cancelled) return;
         if (matched) {
-          dispatch({ type: "PASSKEY_ACTIVATED", credentialId: matched });
+          const publicKey = allPasskeys.find((p) => p.credentialId === matched)?.publicKey;
+          dispatch({ type: "PASSKEY_ACTIVATED", credentialId: matched, publicKey });
           window.localStorage.setItem(ACTIVE_CREDENTIAL_STORAGE_KEY, matched);
           reportPasskeyActivity(apiBaseUrl, token, matched).catch(() => {
           });
           await restoreState(matched, token);
         }
-      } catch {
+      } catch (err) {
+        dispatch({
+          type: "PASSKEY_CONFIG_LOADED",
+          knownIds: []
+        });
+        dispatch({
+          type: "SET_ERROR",
+          error: err instanceof Error ? err.message : "Unable to load passkey settings."
+        });
       }
     };
     checkPasskey();
@@ -8513,19 +8618,15 @@ function useGuestPreauthPhaseSyncEffect(deps) {
       const intent = {
         step: "select-source",
         action: pending,
-        isDesktop,
-        skipOneTapLimit: true
+        isDesktop
       };
-      if (state.phase.step === "select-source") {
-        const ph = state.phase;
-        if (ph.skipOneTapLimit && ph.action.id === pending.id) {
-          return;
-        }
+      if (state.phase.step === "select-source" && state.phase.action.id === pending.id) {
+        return;
       }
       dispatch({ type: "SET_USER_INTENT", intent });
       return;
     }
-    if (state.phase.step === "select-source" && state.phase.skipOneTapLimit === true) {
+    if (state.phase.step === "select-source") {
       dispatch({ type: "SET_USER_INTENT", intent: { step: "one-tap-setup", action: null } });
     }
   }, [
@@ -8654,7 +8755,8 @@ function BlinkPaymentInner({
     apiBaseUrl,
     authExecutor,
     selectSourceChainName: sourceSelection.selectSourceChainName,
-    selectSourceTokenSymbol: sourceSelection.selectSourceTokenSymbol
+    selectSourceTokenSymbol: sourceSelection.selectSourceTokenSymbol,
+    authorizationSessionIdForGuest: state.guestPreauthSessionId
   });
   const guestTransfer = useGuestTransferHandlers({
     dispatch,
@@ -8687,13 +8789,14 @@ function BlinkPaymentInner({
     passkey.checkingPasskeyRef.current = false;
     auth.setAuthInput("");
     auth.setOtpCode("");
-    dispatch({ type: "LOGOUT", depositAmount });
-  }, [logout, polling, depositAmount, auth, passkey]);
+    dispatch({ type: "LOGOUT", depositAmount, privyReady: ready });
+  }, [logout, polling, depositAmount, auth, passkey, ready]);
   useEffect(() => {
     if (depositAmount != null) {
       dispatch({ type: "SYNC_AMOUNT", amount: depositAmount.toString() });
     }
   }, [depositAmount, dispatch]);
+  usePrivySessionSyncEffect({ dispatch, ready, authenticated });
   useOtpEffects({
     state,
     dispatch,
@@ -8827,6 +8930,7 @@ function BlinkPaymentInner({
     onSelectAuthorizedToken: provider.handleSelectAuthorizedToken,
     onAuthorizeToken: provider.handleAuthorizeToken,
     onSelectGuestToken: guestTransfer.handleSelectGuestToken,
+    onGuestBackFromTokenPicker: guestTransfer.handleGuestBackFromTokenPicker,
     onLogin: () => dispatch({ type: "REQUEST_LOGIN" }),
     onPreauthorize: provider.handlePreauthorize
   }), [