@swype-org/react-sdk 0.1.241 → 0.1.251

package/dist/index.cjs

@@ -2011,7 +2011,8 @@ function isGuestPreauthCompletedTransferPinPhase(phase) {
     case "one-tap-setup":
     case "token-picker":
     case "login":
-    case "otp-verify":
+    // otp-verify not pinned: after OTP, verificationTarget clears but phase can be stale until
+    // resolvePhase runs; pinning would block passkey.
     case "passkey-create":
     case "passkey-verify":
     case "data-loading":
@@ -2024,11 +2025,20 @@ function isGuestPreauthCompletedTransferPinPhase(phase) {
 }
 function resolvePhase(state) {
   const p = state.phase;
-  if (state.transfer?.status === "COMPLETED" && state.guestPreauthorizing && isGuestPreauthCompletedTransferPinPhase(p)) {
+  if (state.guestPreauthSetupCompletePending && state.privyReady && state.privyAuthenticated) {
+    return { step: "guest-setup-complete" };
+  }
+  if (state.transfer?.status === "COMPLETED" && state.guestPreauthorizing && !state.verificationTarget && isGuestPreauthCompletedTransferPinPhase(p)) {
     return p;
   }
-  if (state.transfer?.status === "COMPLETED") {
-    return { step: "completed", transfer: state.transfer };
+  if (state.transfer?.status === "COMPLETED" && state.isGuestFlow && state.guestPreauthSessionId && !state.guestPreauthorizing && !state.verificationTarget && !state.privyAuthenticated) {
+    return { step: "login" };
+  }
+  if (state.transfer?.status === "COMPLETED" && !state.verificationTarget) {
+    const needsPasskeyBootstrap = state.privyAuthenticated && !state.activeCredentialId;
+    if (!needsPasskeyBootstrap) {
+      return { step: "completed", transfer: state.transfer };
+    }
   }
   if (state.transfer?.status === "FAILED") {
     return { step: "failed", transfer: state.transfer, error: state.error ?? "Transfer failed." };
@@ -2046,10 +2056,10 @@ function resolvePhase(state) {
       accountId: null
     };
   }
-  if (p.step === "wallet-setup" && p.mobile == null) {
+  if (p.step === "wallet-setup" && p.mobile == null && state.guestPreauthorizing) {
     return p;
   }
-  if (state.isGuestFlow && state.selectedProviderId != null && !state.transfer) {
+  if (state.isGuestFlow && state.selectedProviderId != null && !state.transfer && !state.guestPreauthAccountId) {
     return { step: "guest-token-picker" };
   }
   if (p.step === "wallet-picker" && !state.creatingTransfer && !(state.mobileFlow && state.deeplinkUri)) {
@@ -2061,7 +2071,7 @@ function resolvePhase(state) {
   if (state.privyAuthenticated && !state.activeCredentialId && !state.passkeyConfigLoaded) {
     return { step: "initializing" };
   }
-  if (state.verificationTarget) {
+  if (state.verificationTarget && !state.privyAuthenticated) {
     return { step: "otp-verify", target: state.verificationTarget };
   }
   if (state.loginRequested) {
@@ -2133,13 +2143,26 @@ function createInitialState(config) {
     activePublicKey: null,
     loginRequested: false,
     guestPreauthorizing: false,
+    guestPreauthSetupCompletePending: false,
     privyReady: false,
     privyAuthenticated: false
   };
 }
 function paymentReducer(state, action) {
   const next = applyAction(state, action);
-  return { ...next, phase: resolvePhase(next) };
+  const phase = resolvePhase(next);
+  if (action.type === "CODE_SENT") {
+    console.debug("[Swype SDK] login code sent", {
+      resolvedPhase: phase.step,
+      verificationTargetKind: action.target.kind,
+      guestPreauthorizing: next.guestPreauthorizing,
+      transferStatus: next.transfer?.status ?? null,
+      isGuestFlow: next.isGuestFlow,
+      hasGuestPreauthSessionId: next.guestPreauthSessionId != null,
+      loginRequested: next.loginRequested
+    });
+  }
+  return { ...next, phase };
 }
 function applyAction(state, action) {
   switch (action.type) {
@@ -2400,13 +2423,20 @@ function applyAction(state, action) {
     case "ACCOUNT_OWNER_SET":
       return {
         ...state,
+        transfer: null,
         guestPreauthAccountId: null,
         guestPreauthSessionId: null,
         activePublicKey: null,
         error: null,
         guestPreauthorizing: false,
-        phase: { step: "one-tap-setup", action: null }
+        isGuestFlow: false,
+        selectedProviderId: null,
+        guestTransferId: null,
+        guestSessionToken: null,
+        guestPreauthSetupCompletePending: true
       };
+    case "GUEST_PREAUTH_SETUP_COMPLETE_DISMISSED":
+      return { ...state, guestPreauthSetupCompletePending: false };
     // ── User intent & error ──────────────────────────────────────
     case "SET_USER_INTENT":
       return { ...state, phase: action.intent };
@@ -2441,7 +2471,8 @@ function applyAction(state, action) {
         activePublicKey: null,
         loginRequested: false,
         oneTapLimitSavedDuringSetup: false,
-        guestPreauthorizing: false
+        guestPreauthorizing: false,
+        guestPreauthSetupCompletePending: false
       };
     case "LOGOUT":
       return {
@@ -2457,7 +2488,10 @@ function applyAction(state, action) {
       return {
         ...state,
         privyReady: action.ready,
-        privyAuthenticated: action.authenticated
+        privyAuthenticated: action.authenticated,
+        // OTP complete: Privy is source of truth; clear so resolvePhase can leave otp-verify
+        // and guest-preauth pin rules cannot re-pin a stale otp-verify phase.
+        ...action.authenticated ? { verificationTarget: null, loginRequested: false } : {}
       };
     case "SYNC_AMOUNT":
       return { ...state, amount: action.amount };
@@ -2523,7 +2557,10 @@ function screenForPhase(phase) {
     case "wallet-picker":
       return "wallet-picker";
     case "wallet-setup":
-      return phase.mobile ? "open-wallet" : "setup-status";
+      if (phase.mobile || phase.guestDesktopExtension) {
+        return "open-wallet";
+      }
+      return "setup-status";
     case "select-source":
       return phase.isDesktop ? "setup" : "select-source";
     case "one-tap-setup":
@@ -2541,6 +2578,8 @@ function screenForPhase(phase) {
     case "completed":
     case "failed":
       return "success";
+    case "guest-setup-complete":
+      return "guest-setup-complete";
   }
 }
 var MUTED = "#7fa4b0";
@@ -6010,6 +6049,60 @@ var emptyStyle = (color) => ({
   padding: "32px 0",
   lineHeight: 1.5
 });
+function GuestPreauthSetupCompleteScreen({
+  onClose,
+  onLogout
+}) {
+  const { tokens } = useBlinkConfig();
+  return /* @__PURE__ */ jsxRuntime.jsxs(
+    ScreenLayout,
+    {
+      footer: /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsx(PrimaryButton, { onClick: onClose, children: "Close" }),
+        /* @__PURE__ */ jsxRuntime.jsx(PoweredByFooter, {})
+      ] }),
+      children: [
+        /* @__PURE__ */ jsxRuntime.jsx(ScreenHeader, { onLogout }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { style: contentStyle9, children: [
+          /* @__PURE__ */ jsxRuntime.jsx(IconCircle, { variant: "success", size: 64, children: /* @__PURE__ */ jsxRuntime.jsx("svg", { width: "32", height: "32", viewBox: "0 0 24 24", fill: "none", children: /* @__PURE__ */ jsxRuntime.jsx(
+            "path",
+            {
+              d: "M9 16.17L4.83 12l-1.42 1.41L9 19 21 7l-1.41-1.41L9 16.17z",
+              fill: tokens.success
+            }
+          ) }) }),
+          /* @__PURE__ */ jsxRuntime.jsx("h2", { style: headingStyle12(tokens.text), children: "Setup complete" }),
+          /* @__PURE__ */ jsxRuntime.jsx("p", { style: subtitleStyle10(tokens.textSecondary), children: "Your account is linked and ready. You can close this window or make another deposit." })
+        ] })
+      ]
+    }
+  );
+}
+var contentStyle9 = {
+  display: "flex",
+  flexDirection: "column",
+  alignItems: "center",
+  textAlign: "center",
+  gap: 12,
+  paddingTop: 8
+};
+function headingStyle12(color) {
+  return {
+    margin: 0,
+    fontSize: 22,
+    fontWeight: 600,
+    color
+  };
+}
+function subtitleStyle10(color) {
+  return {
+    margin: 0,
+    fontSize: 15,
+    lineHeight: 1.45,
+    color,
+    maxWidth: 320
+  };
+}
 var LINK_SCREENS = /* @__PURE__ */ new Set([
   "create-passkey",
   "verify-passkey",
@@ -6311,6 +6404,14 @@ function StepRendererContent({
           onBack: handlers.onGuestBackFromTokenPicker
         }
       );
+    case "guest-setup-complete":
+      return /* @__PURE__ */ jsxRuntime.jsx(
+        GuestPreauthSetupCompleteScreen,
+        {
+          onClose: handlers.onGuestSetupCompleteClose,
+          onLogout: handlers.onLogout
+        }
+      );
     case "processing": {
       const polledStatus = pollingTransfer?.status;
       const transferPhase = state.creatingTransfer ? "creating" : polledStatus === "SENDING" || polledStatus === "SENT" ? "sent" : "verifying";
@@ -6404,7 +6505,7 @@ var PaymentErrorBoundary = class extends react.Component {
         /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M12 8v5", stroke: "#ef4444", strokeWidth: "1.5", strokeLinecap: "round" }),
         /* @__PURE__ */ jsxRuntime.jsx("circle", { cx: "12", cy: "16", r: "0.75", fill: "#ef4444" })
       ] }) }),
-      /* @__PURE__ */ jsxRuntime.jsx("h2", { style: headingStyle12, children: "Something went wrong" }),
+      /* @__PURE__ */ jsxRuntime.jsx("h2", { style: headingStyle13, children: "Something went wrong" }),
       /* @__PURE__ */ jsxRuntime.jsx("p", { style: messageStyle, children: "An unexpected error occurred. Please try again." }),
       /* @__PURE__ */ jsxRuntime.jsx("button", { type: "button", onClick: this.handleReset, style: buttonStyle3, children: "Try again" })
     ] });
@@ -6424,7 +6525,7 @@ var containerStyle9 = {
 var iconStyle3 = {
   marginBottom: 20
 };
-var headingStyle12 = {
+var headingStyle13 = {
   fontSize: "1.25rem",
   fontWeight: 700,
   color: "#1a1a1a",
@@ -6923,18 +7024,31 @@ function useSourceSelectionHandlers(dispatch, authExecutor, options) {
     [selectSourceChoices, selectSourceRecommended]
   );
   const handleConfirmSelectSource = react.useCallback(() => {
+    const guestPostPayPreauth = !!options?.guestPreauthSessionId && !!options?.isGuestFlow || !!options?.guestPreauthorizing && !!options?.isDesktop;
+    if (guestPostPayPreauth) {
+      dispatch({ type: "REQUEST_LOGIN" });
+      if (options?.guestPreauthAccountId != null) {
+        const intent = {
+          step: "wallet-setup",
+          mobile: null,
+          accountId: options.guestPreauthAccountId,
+          guestDesktopExtension: true
+        };
+        dispatch({ type: "SET_USER_INTENT", intent });
+      }
+    }
     authExecutor.resolveSelectSource({
       chainName: selectSourceChainName,
       tokenSymbol: selectSourceTokenSymbol
     });
-    if (options?.guestPreauthorizing && options?.isDesktop) {
-      dispatch({ type: "REQUEST_LOGIN" });
-    }
   }, [
     authExecutor,
     dispatch,
+    options?.guestPreauthSessionId,
+    options?.guestPreauthAccountId,
     options?.guestPreauthorizing,
     options?.isDesktop,
+    options?.isGuestFlow,
     selectSourceChainName,
     selectSourceTokenSymbol
   ]);
@@ -8311,6 +8425,10 @@ function useProcessingEffect(deps) {
   } = deps;
   react.useEffect(() => {
     if (!polling.transfer) return;
+    if (state.loginRequested || state.verificationTarget) return;
+    if (!state.transfer && (polling.transfer.status === "COMPLETED" || polling.transfer.status === "FAILED")) {
+      return;
+    }
     if (polling.transfer.status === "COMPLETED") {
       clearMobileFlowState();
       dispatch({ type: "TRANSFER_COMPLETED", transfer: polling.transfer });
@@ -8320,7 +8438,15 @@ function useProcessingEffect(deps) {
       clearMobileFlowState();
       dispatch({ type: "TRANSFER_FAILED", transfer: polling.transfer, error: "Transfer failed." });
     }
-  }, [polling.transfer, onComplete, dispatch, reloadAccounts]);
+  }, [
+    polling.transfer,
+    state.transfer,
+    state.loginRequested,
+    state.verificationTarget,
+    onComplete,
+    dispatch,
+    reloadAccounts
+  ]);
   react.useEffect(() => {
     const isProcessing = state.creatingTransfer || state.transfer != null && ["CREATED", "SENDING", "SENT"].includes(state.transfer.status);
     if (!isProcessing) {
@@ -8571,6 +8697,42 @@ function useOneTapAutoResolveEffect(deps) {
     }
   }, [pendingOneTapSetupAction, reloadAccounts, oneTapLimitSavedDuringSetup]);
 }
+
+// src/guestPreauthClaimWait.ts
+var GUEST_PREAUTH_SESSION_POLL_INTERVAL_MS = 1e3;
+var GUEST_PREAUTH_SESSION_POLL_TIMEOUT_MS = 12e4;
+async function waitForGuestPreauthAuthorizationSession(apiBaseUrl, sessionId, fetchSession, signal, options) {
+  const intervalMs = GUEST_PREAUTH_SESSION_POLL_INTERVAL_MS;
+  const timeoutMs = GUEST_PREAUTH_SESSION_POLL_TIMEOUT_MS;
+  const deadline = Date.now() + timeoutMs;
+  const sleepAbortable = (ms) => new Promise((resolve, reject) => {
+    if (signal.aborted) {
+      reject(new DOMException("Aborted", "AbortError"));
+      return;
+    }
+    const t = setTimeout(() => {
+      signal.removeEventListener("abort", onAbort);
+      resolve();
+    }, ms);
+    const onAbort = () => {
+      clearTimeout(t);
+      signal.removeEventListener("abort", onAbort);
+      reject(new DOMException("Aborted", "AbortError"));
+    };
+    signal.addEventListener("abort", onAbort, { once: true });
+  });
+  while (Date.now() < deadline) {
+    if (signal.aborted) {
+      throw new DOMException("Aborted", "AbortError");
+    }
+    const session = await fetchSession(apiBaseUrl, sessionId);
+    if (session.status === "AUTHORIZED") return;
+    await sleepAbortable(intervalMs);
+  }
+  throw new Error("Authorization session did not become AUTHORIZED in time.");
+}
+
+// src/hooks/useGuestPreauthEffect.ts
 function useGuestPreauthEffect(deps) {
   const { state, dispatch, authenticated, apiBaseUrl, reloadAccounts } = deps;
   const { getAccessToken } = reactAuth.usePrivy();
@@ -8584,12 +8746,25 @@ function useGuestPreauthEffect(deps) {
     if (!authenticated) return;
     if (!state.guestSessionToken) return;
     if (settingOwnerRef.current) return;
-    const hasActive = state.accounts.some((a) => a.wallets.some((w) => w.status === "ACTIVE"));
-    if (!hasActive) return;
     settingOwnerRef.current = true;
+    const abort = new AbortController();
     let cancelled = false;
     const setOwner = async () => {
       try {
+        if (state.guestPreauthSessionId) {
+          try {
+            await waitForGuestPreauthAuthorizationSession(
+              apiBaseUrl,
+              state.guestPreauthSessionId,
+              fetchAuthorizationSession,
+              abort.signal
+            );
+          } catch (waitErr) {
+            if (waitErr instanceof DOMException && waitErr.name === "AbortError") return;
+            throw waitErr;
+          }
+        }
+        if (cancelled) return;
         const token = await getAccessTokenRef.current();
         if (!token || cancelled) return;
         await setAccountOwner(apiBaseUrl, token, state.guestPreauthAccountId, state.guestSessionToken, {
@@ -8614,16 +8789,17 @@ function useGuestPreauthEffect(deps) {
         settingOwnerRef.current = false;
       }
     };
-    setOwner();
+    void setOwner();
     return () => {
       cancelled = true;
+      abort.abort();
     };
   }, [
     state.guestPreauthAccountId,
+    state.guestPreauthSessionId,
     state.activeCredentialId,
     state.activePublicKey,
     state.guestSessionToken,
-    state.accounts,
     authenticated,
     apiBaseUrl,
     dispatch,
@@ -8694,24 +8870,23 @@ function useGuestPreauthPhaseSyncEffect(deps) {
   ]);
 }
 function useGuestPreauthWalletSetupEffect(deps) {
-  const { state, dispatch, authExecutor, isDesktop, privyAuthenticated } = deps;
+  const { state, dispatch, authExecutor, isDesktop } = deps;
   react.useEffect(() => {
     if (!isDesktop || !state.guestPreauthorizing || !state.guestPreauthSessionId) return;
+    if (!state.guestPreauthAccountId) return;
     if (!authExecutor.executing || authExecutor.pendingSelectSource) return;
-    if (!privyAuthenticated || !state.activeCredentialId) return;
     if (state.verificationTarget) return;
-    if (state.loginRequested) return;
     const p = state.phase;
-    if (p.step === "wallet-setup" && p.mobile == null) {
-      const id = state.guestPreauthAccountId;
-      if (id != null && p.accountId === id) return;
+    if (p.step === "wallet-setup" && p.mobile == null && p.guestDesktopExtension && p.accountId === state.guestPreauthAccountId) {
+      return;
     }
     dispatch({
       type: "SET_USER_INTENT",
       intent: {
         step: "wallet-setup",
         mobile: null,
-        accountId: state.guestPreauthAccountId
+        accountId: state.guestPreauthAccountId,
+        guestDesktopExtension: true
       }
     });
   }, [
@@ -8719,14 +8894,11 @@ function useGuestPreauthWalletSetupEffect(deps) {
     state.guestPreauthorizing,
     state.guestPreauthSessionId,
     state.guestPreauthAccountId,
-    state.activeCredentialId,
     state.verificationTarget,
-    state.loginRequested,
     state.phase,
     authExecutor.executing,
     authExecutor.pendingSelectSource,
-    dispatch,
-    privyAuthenticated
+    dispatch
   ]);
 }
 function BlinkPayment(props) {
@@ -8814,6 +8986,9 @@ function BlinkPaymentInner({
     onComplete
   );
   const sourceSelection = useSourceSelectionHandlers(dispatch, authExecutor, {
+    guestPreauthSessionId: state.guestPreauthSessionId,
+    guestPreauthAccountId: state.guestPreauthAccountId,
+    isGuestFlow: state.isGuestFlow,
     guestPreauthorizing: state.guestPreauthorizing,
     isDesktop
   });
@@ -8993,8 +9168,7 @@ function BlinkPaymentInner({
     state,
     dispatch,
     authExecutor,
-    isDesktop,
-    privyAuthenticated: authenticated
+    isDesktop
   });
   const handlers = react.useMemo(() => ({
     onSendLoginCode: auth.handleSendLoginCode,
@@ -9034,7 +9208,11 @@ function BlinkPaymentInner({
     onSelectGuestToken: guestTransfer.handleSelectGuestToken,
     onGuestBackFromTokenPicker: guestTransfer.handleGuestBackFromTokenPicker,
     onLogin: () => dispatch({ type: "REQUEST_LOGIN" }),
-    onPreauthorize: provider.handlePreauthorize
+    onPreauthorize: provider.handlePreauthorize,
+    onGuestSetupCompleteClose: () => {
+      dispatch({ type: "GUEST_PREAUTH_SETUP_COMPLETE_DISMISSED" });
+      onDismiss?.();
+    }
   }), [
     auth,
     passkey,
@@ -9045,7 +9223,9 @@ function BlinkPaymentInner({
     oneTapSetup,
     guestTransfer,
     handleLogout,
-    handleNewPayment
+    handleNewPayment,
+    onDismiss,
+    dispatch
   ]);
   return /* @__PURE__ */ jsxRuntime.jsx(
     StepRenderer,