@tangle-network/blueprint-ui 0.1.1 → 0.3.0

package/dist/wallet/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/wallet/detectParentOrigin.ts","../../src/wallet/parentBridgeConnector.ts","../../src/wallet/parentBridgeProtocol.ts","../../src/wallet/parentBridgeProvider.ts"],"sourcesContent":["// Determine which origin to trust as the parent dapp.\n//\n// `document.referrer` is the *initial* embedder — it's set when the iframe is\n// first loaded and survives reloads (though it can be cleared by `referrerpolicy`\n// or by the embedder). The Tangle Cloud iframe wrapper deliberately omits\n// `referrerpolicy=\"no-referrer\"` so we get the embedder's origin here.\n//\n// We compare it against an allowlist of known Tangle Cloud origins. If it\n// matches, that's the parent. Otherwise the iframe is being loaded directly\n// (standalone domain visit, dev server, untrusted embedder) and the bridge\n// stays disabled — the app falls back to its normal injected/WC wallet path.\n\n/**\n * Default Tangle Cloud origins. Consumers (agent-sandbox UI,\n * trading-arena, future iframe blueprints) pass app-specific additions\n * via `extraOrigins` rather than mutating this list.\n */\nexport const TANGLE_CLOUD_ORIGINS_DEFAULT = Object.freeze([\n  'https://cloud.tangle.tools',\n  'https://develop.cloud.tangle.tools',\n  // Local dev (Vite default port for tangle-cloud + Netlify dev preview).\n  'http://localhost:4300',\n  'http://localhost:8888',\n] as const);\n\nfunction originFromReferrer(): string | null {\n  if (typeof document === 'undefined') return null;\n  const ref = document.referrer;\n  if (!ref) return null;\n  try {\n    return new URL(ref).origin;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Returns the parent origin to bridge to, or null when no trusted parent is\n * detected. Caller should skip installing the bridge connector when this\n * returns null.\n *\n * `extraOrigins` is the application's escape hatch for staging or dev\n * deploys not covered by the default list. The library deliberately does\n * not read environment variables itself (consumers may bundle for non-Vite\n * runtimes); the consuming app threads `import.meta.env.VITE_*` or\n * `process.env.*` in itself.\n *\n * Falls back to a `?parent=<origin>` query parameter when no referrer is\n * present (some browsers strip referrer from cross-origin loads). Useful\n * for dev embedding flows.\n */\nexport function detectTangleCloudParentOrigin(\n  options: { extraOrigins?: readonly string[] } = {},\n): string | null {\n  if (typeof window === 'undefined' || window.parent === window) {\n    return null;\n  }\n  const allowlist = new Set<string>([\n    ...TANGLE_CLOUD_ORIGINS_DEFAULT,\n    ...(options.extraOrigins ?? []),\n  ]);\n  const referrerOrigin = originFromReferrer();\n  if (referrerOrigin && allowlist.has(referrerOrigin)) {\n    return referrerOrigin;\n  }\n  try {\n    const url = new URL(window.location.href);\n    const explicit = url.searchParams.get('parent');\n    if (explicit && allowlist.has(explicit)) return explicit;\n  } catch {\n    // ignore\n  }\n  return null;\n}\n","// Wagmi connector that proxies wallet operations to the Tangle Cloud parent\n// dapp via the iframe postMessage bridge. Becomes the autoConnect target\n// when this app is loaded inside an iframe sandbox without a window.ethereum\n// — i.e. always, when embedded by cloud.tangle.tools.\n//\n// Architecture: the connector owns one `ParentBridgeProvider` (singleton),\n// forwards every wagmi method to it, and reflects the provider's EIP-1193\n// events back to wagmi's emitter so the rest of the dapp (ConnectKit's\n// account chip, hooks like useAccount/useChainId) reacts to parent-state\n// changes without polling.\n\nimport type { Address, Chain } from 'viem';\nimport { createConnector } from 'wagmi';\n\nimport { ParentBridgeProvider, type ParentBridgeOptions } from './parentBridgeProvider';\n\nexport type ParentBridgeConnectorOptions = ParentBridgeOptions;\n\nexport function parentBridgeConnector(options: ParentBridgeConnectorOptions) {\n  let provider: ParentBridgeProvider | undefined;\n  let installed = false;\n\n  return createConnector<ParentBridgeProvider>((config) => {\n    const ensureProvider = (): ParentBridgeProvider => {\n      if (!provider) provider = new ParentBridgeProvider(options);\n      if (!installed) {\n        provider.install();\n        installed = true;\n        // Wire the provider's EIP-1193 events to wagmi's emitter so\n        // ConnectKit and useAccount/useChainId reflect parent-state changes\n        // without polling.\n        provider.on('accountsChanged', (accounts) => {\n          config.emitter.emit('change', {\n            accounts: Array.isArray(accounts)\n              ? (accounts as readonly Address[])\n              : ([] as readonly Address[]),\n          });\n        });\n        provider.on('chainChanged', (chainIdHex) => {\n          const chainId =\n            typeof chainIdHex === 'string'\n              ? Number.parseInt(chainIdHex, 16)\n              : Number(chainIdHex);\n          if (Number.isFinite(chainId)) {\n            config.emitter.emit('change', { chainId });\n          }\n        });\n        provider.on('disconnect', () => {\n          config.emitter.emit('disconnect');\n        });\n      }\n      return provider;\n    };\n\n    return {\n      id: 'tangleParentBridge',\n      name: 'Tangle Cloud',\n      type: 'parentBridge',\n\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      async connect(): Promise<any> {\n        // wagmi v3's connect() return type is a conditional based on\n        // `withCapabilities`. We always return plain addresses; cast through\n        // `any` rather than re-implementing the type predicate.\n        const p = ensureProvider();\n        const accountsResult = (await p.request({\n          method: 'eth_requestAccounts',\n        })) as readonly Address[];\n        const chainIdHex = (await p.request({ method: 'eth_chainId' })) as string;\n        const chainId = Number.parseInt(chainIdHex, 16);\n        return {\n          accounts: accountsResult,\n          chainId: Number.isFinite(chainId) ? chainId : 0,\n        };\n      },\n\n      async disconnect() {\n        // Disconnect from the iframe's perspective is a local-only state\n        // reset — we can't ask the parent dapp to disconnect its wallet on\n        // our behalf, and a real disconnect should be initiated from the\n        // parent's UI. Tear down listeners + the message bridge so a future\n        // reconnect re-handshakes cleanly.\n        if (provider) provider.uninstall();\n        installed = false;\n        provider = undefined;\n      },\n\n      async getAccounts() {\n        const p = ensureProvider();\n        const cached = p.getCachedAccount();\n        if (cached) return [cached];\n        const accounts = (await p.request({\n          method: 'eth_accounts',\n        })) as readonly Address[];\n        return accounts;\n      },\n\n      async getChainId() {\n        const p = ensureProvider();\n        const cached = p.getCachedChainId();\n        if (cached !== null) return cached;\n        const chainIdHex = (await p.request({ method: 'eth_chainId' })) as string;\n        const chainId = Number.parseInt(chainIdHex, 16);\n        return Number.isFinite(chainId) ? chainId : 0;\n      },\n\n      async getProvider() {\n        return ensureProvider();\n      },\n\n      async isAuthorized() {\n        // Always authorized when in iframe mode — the parent dapp has\n        // already gated access by being the embedder. Returning `true`\n        // makes wagmi auto-reconnect on every page load, which is the\n        // right UX (iframe → parent wallet is always-on).\n        try {\n          const p = ensureProvider();\n          const accounts = (await p.request({\n            method: 'eth_accounts',\n          })) as readonly Address[];\n          return accounts.length > 0;\n        } catch {\n          return false;\n        }\n      },\n\n      async switchChain({ chainId }): Promise<Chain> {\n        const p = ensureProvider();\n        await p.request({\n          method: 'wallet_switchEthereumChain',\n          params: [{ chainId: `0x${chainId.toString(16)}` }],\n        });\n        const chain = config.chains.find((c) => c.id === chainId);\n        if (!chain) {\n          throw new Error(`Chain ${chainId} not configured for this app`);\n        }\n        return chain;\n      },\n\n      onAccountsChanged(accounts) {\n        config.emitter.emit('change', {\n          accounts: accounts as readonly Address[],\n        });\n      },\n      onChainChanged(chainIdHex) {\n        const chainId = Number.parseInt(chainIdHex, 16);\n        if (Number.isFinite(chainId)) {\n          config.emitter.emit('change', { chainId });\n        }\n      },\n      onDisconnect() {\n        config.emitter.emit('disconnect');\n      },\n    };\n  });\n}\n","// Tangle Cloud iframe ↔ parent dapp protocol — must mirror the parent's\n// spec at `apps/tangle-cloud/src/blueprintApps/iframe/protocol.ts`. Bump the\n// version constant in lockstep when either side adds a request kind.\n\nimport type { Address, Hex } from 'viem';\n\nexport const TANGLE_IFRAME_PROTOCOL_VERSION = '1' as const;\nexport const TANGLE_IFRAME_PROTOCOL_PREFIX = 'tangle.app.';\n\n// ─── Iframe → Parent requests ────────────────────────────────────────────────\n\nexport type HandshakeRequest = {\n  kind: 'tangle.app.handshake';\n  appId: string;\n  version: typeof TANGLE_IFRAME_PROTOCOL_VERSION;\n};\n\nexport type ReadAccountRequest = {\n  kind: 'tangle.app.readAccount';\n  correlationId: string;\n};\n\nexport type SwitchChainRequest = {\n  kind: 'tangle.app.switchChain';\n  correlationId: string;\n  chainId: number;\n};\n\nexport type SignMessageRequest = {\n  kind: 'tangle.app.signMessage';\n  correlationId: string;\n  chainId: number;\n  message: string;\n};\n\nexport type SignTransactionRequest = {\n  kind: 'tangle.app.signTransaction';\n  correlationId: string;\n  chainId: number;\n  to: Address;\n  data: Hex;\n  value?: string;\n};\n\n// ─── Parent → Iframe messages ────────────────────────────────────────────────\n\nexport type HandshakeAck = {\n  kind: 'tangle.app.handshakeAck';\n  appId: string;\n  protocolVersion: typeof TANGLE_IFRAME_PROTOCOL_VERSION;\n};\n\nexport type ResultEnvelope<T> = { correlationId: string } & (\n  | { ok: true; data: T }\n  | { ok: false; error: string }\n);\n\nexport type ReadAccountResult = {\n  kind: 'tangle.app.readAccountResult';\n} & ResultEnvelope<{ account: Address; chainId: number }>;\n\nexport type SwitchChainResult = {\n  kind: 'tangle.app.switchChainResult';\n} & ResultEnvelope<{ chainId: number }>;\n\nexport type SignMessageResult = {\n  kind: 'tangle.app.signMessageResult';\n} & ResultEnvelope<{ signature: Hex }>;\n\nexport type SignTransactionResult = {\n  kind: 'tangle.app.signTransactionResult';\n} & ResultEnvelope<{ txHash: Hex }>;\n\nexport type AccountChanged = {\n  kind: 'tangle.app.accountChanged';\n  account: Address | null;\n};\n\nexport type ChainChanged = {\n  kind: 'tangle.app.chainChanged';\n  chainId: number;\n};\n\nexport type ParentMessage =\n  | HandshakeAck\n  | ReadAccountResult\n  | SwitchChainResult\n  | SignMessageResult\n  | SignTransactionResult\n  | AccountChanged\n  | ChainChanged;\n\n// The zero address used by the parent when no wallet is connected. The parent\n// always responds to readAccount with an address; this sentinel means \"no\n// wallet\" without making the response type a union of result shapes.\nexport const NO_WALLET_ADDRESS = '0x0000000000000000000000000000000000000000';\n\n/**\n * Cryptographically-random ASCII correlation id matching the parent's\n * validator regex (`/^[\\w.\\-:]+$/`, max length 128). The connector keeps a\n * Map<correlationId, Resolver> so each request resolves independently.\n */\nexport function makeCorrelationId(prefix: string): string {\n  const random =\n    typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function'\n      ? crypto.randomUUID()\n      : Math.random().toString(36).slice(2) + Date.now().toString(36);\n  return `${prefix}.${random}`;\n}\n","// EIP-1193 provider implementation that proxies wallet calls to the parent\n// dapp via window.postMessage. The iframe doesn't talk to a wallet directly\n// — it inherits the parent's connected account + chain, and forwards signing\n// requests through the existing tangle.app.* protocol.\n//\n// This is the lowest layer of the parent-bridge stack. Wagmi sees this as a\n// regular Ethereum provider and routes `eth_accounts`, `eth_chainId`,\n// `personal_sign`, `eth_sendTransaction`, `wallet_switchEthereumChain`, etc.\n// through it.\n\nimport type { Address, Hex } from 'viem';\n\nimport {\n  makeCorrelationId,\n  NO_WALLET_ADDRESS,\n  TANGLE_IFRAME_PROTOCOL_VERSION,\n  type ParentMessage,\n} from './parentBridgeProtocol';\n\ntype EventName = 'accountsChanged' | 'chainChanged' | 'connect' | 'disconnect' | 'message';\ntype Listener = (...args: unknown[]) => void;\n\ntype PendingRequest<T> = {\n  resolve: (value: T) => void;\n  reject: (reason: Error) => void;\n  expectedKind: ParentMessage['kind'];\n};\n\nexport type ParentBridgeOptions = {\n  /**\n   * Origin of the parent dapp that hosts this iframe. The provider posts to\n   * `window.parent` with this exact origin and rejects inbound messages from\n   * any other origin. Pass `'*'` only in development; production must pin to\n   * the real parent (`https://cloud.tangle.tools` or its develop equivalent).\n   */\n  parentOrigin: string;\n  /**\n   * Stable identifier for this iframe app. The parent includes this in the\n   * handshake ack so dev tooling can correlate logs across the two windows.\n   */\n  appId: string;\n  /**\n   * Optional ms timeout for each bridged request. Defaults to 60 seconds —\n   * long enough for a user to read + approve a signing prompt in the parent.\n   */\n  requestTimeoutMs?: number;\n};\n\nconst DEFAULT_REQUEST_TIMEOUT_MS = 60_000;\n\n/**\n * Detect iframe execution context. When this returns `false` the bridge\n * connector should not be installed and the host app should fall back to its\n * normal wallet config (ConnectKit + injected/walletConnect).\n *\n * `window.parent !== window` is the most reliable signal that works across\n * sandbox-iframe contexts where direct property access to parent throws.\n */\nexport function isRunningInIframe(): boolean {\n  if (typeof window === 'undefined') return false;\n  try {\n    return window.parent !== undefined && window.parent !== window;\n  } catch {\n    // Cross-origin read of `window.parent` shouldn't throw, but be defensive.\n    return true;\n  }\n}\n\n/**\n * EIP-1193 provider backed by the Tangle Cloud iframe protocol. One instance\n * lives per iframe app; the wagmi connector owns the singleton.\n */\nexport class ParentBridgeProvider {\n  private listeners = new Map<EventName, Set<Listener>>();\n  private pending = new Map<string, PendingRequest<unknown>>();\n  private cachedAccount: Address | null = null;\n  private cachedChainId: number | null = null;\n  private handshakeAcked = false;\n  private handshakeWaiters: Array<() => void> = [];\n  private installed = false;\n\n  constructor(private readonly options: ParentBridgeOptions) {}\n\n  /**\n   * Wire up the global message listener and send the initial handshake.\n   * Idempotent — safe to call repeatedly during reconnect attempts.\n   */\n  install(): void {\n    if (this.installed || typeof window === 'undefined') return;\n    this.installed = true;\n    window.addEventListener('message', this.handleParentMessage);\n    this.postToParent({\n      kind: 'tangle.app.handshake',\n      appId: this.options.appId,\n      version: TANGLE_IFRAME_PROTOCOL_VERSION,\n    });\n  }\n\n  uninstall(): void {\n    if (!this.installed || typeof window === 'undefined') return;\n    this.installed = false;\n    window.removeEventListener('message', this.handleParentMessage);\n    // Reject every pending request so callers don't hang forever.\n    for (const [, pending] of this.pending) {\n      pending.reject(new Error('Parent bridge uninstalled'));\n    }\n    this.pending.clear();\n  }\n\n  // ── EIP-1193 surface ────────────────────────────────────────────────────\n\n  async request(req: { method: string; params?: unknown[] }): Promise<unknown> {\n    const method = req.method;\n    const params = (req.params ?? []) as unknown[];\n    switch (method) {\n      case 'eth_chainId': {\n        await this.ensureBootstrapped();\n        return this.cachedChainId !== null ? `0x${this.cachedChainId.toString(16)}` : '0x0';\n      }\n      case 'eth_accounts':\n      case 'eth_requestAccounts': {\n        await this.ensureBootstrapped();\n        return this.cachedAccount !== null ? [this.cachedAccount] : [];\n      }\n      case 'personal_sign': {\n        const [message, _signer] = params as [string, Address];\n        return this.requestSignMessage(message);\n      }\n      case 'eth_signTypedData_v4': {\n        // The current protocol doesn't carry typed-data — surface a clear\n        // error rather than silently producing a personal_sign. Publishers\n        // that need typed-data signing should upgrade the protocol.\n        throw bridgeError(\n          4200,\n          'eth_signTypedData_v4 is not supported by the parent-bridge protocol yet.',\n        );\n      }\n      case 'eth_sendTransaction': {\n        const [tx] = params as [\n          { to?: Address; data?: Hex; value?: Hex | string; chainId?: Hex | number },\n        ];\n        if (!tx?.to || !tx.data) {\n          throw bridgeError(-32602, 'eth_sendTransaction requires `to` and `data`.');\n        }\n        return this.requestSignTransaction(tx);\n      }\n      case 'wallet_switchEthereumChain': {\n        const [{ chainId }] = params as [{ chainId: Hex }];\n        const numeric = Number.parseInt(chainId, 16);\n        if (!Number.isFinite(numeric) || numeric <= 0) {\n          throw bridgeError(-32602, `Invalid chainId: ${chainId}`);\n        }\n        await this.requestSwitchChain(numeric);\n        return null;\n      }\n      case 'wallet_addEthereumChain': {\n        // The parent owns the chain registry; iframes can't add chains the\n        // dapp doesn't already know about.\n        throw bridgeError(\n          4200,\n          'wallet_addEthereumChain is not supported through the parent bridge.',\n        );\n      }\n      default:\n        throw bridgeError(4200, `Method ${method} not supported by parent bridge.`);\n    }\n  }\n\n  on(event: EventName, listener: Listener): void {\n    const set = this.listeners.get(event) ?? new Set();\n    set.add(listener);\n    this.listeners.set(event, set);\n  }\n\n  removeListener(event: EventName, listener: Listener): void {\n    this.listeners.get(event)?.delete(listener);\n  }\n\n  // ── Internal: dispatch + book-keeping ───────────────────────────────────\n\n  private postToParent(message: object): void {\n    if (typeof window === 'undefined') return;\n    try {\n      window.parent.postMessage(message, this.options.parentOrigin);\n    } catch {\n      // Cross-origin / sandboxed; parent.postMessage shouldn't actually throw\n      // but be defensive against future browser changes.\n    }\n  }\n\n  private handleParentMessage = (event: MessageEvent): void => {\n    // Origin gate first; never parse untrusted payloads.\n    if (event.origin !== this.options.parentOrigin) return;\n    const data = event.data;\n    if (typeof data !== 'object' || data === null) return;\n    const message = data as ParentMessage;\n    switch (message.kind) {\n      case 'tangle.app.handshakeAck':\n        this.handshakeAcked = true;\n        for (const resolve of this.handshakeWaiters) resolve();\n        this.handshakeWaiters = [];\n        // After ack, ask for the current account so cached state reflects\n        // reality before any consumer queries. Fire-and-forget — explicit\n        // calls (`eth_accounts`, etc.) await their own request.\n        this.sendReadAccount().catch(() => {\n          // The first read commonly races with bridge teardown in tests\n          // and isn't user-facing; swallow rather than producing unhandled\n          // rejections. Subsequent `eth_accounts` calls retry on demand.\n        });\n        return;\n      case 'tangle.app.readAccountResult':\n        this.resolvePending(message);\n        if (message.ok) {\n          this.updateAccount(\n            message.data.account === NO_WALLET_ADDRESS\n              ? null\n              : message.data.account,\n          );\n          this.updateChainId(message.data.chainId);\n        }\n        return;\n      case 'tangle.app.switchChainResult':\n        this.resolvePending(message);\n        if (message.ok) this.updateChainId(message.data.chainId);\n        return;\n      case 'tangle.app.signMessageResult':\n      case 'tangle.app.signTransactionResult':\n        this.resolvePending(message);\n        return;\n      case 'tangle.app.accountChanged':\n        this.updateAccount(message.account);\n        return;\n      case 'tangle.app.chainChanged':\n        this.updateChainId(message.chainId);\n        return;\n    }\n  };\n\n  private sendReadAccount(): Promise<{ account: Address; chainId: number }> {\n    return this.dispatch({\n      kind: 'tangle.app.readAccount',\n      expectedKind: 'tangle.app.readAccountResult',\n    }) as Promise<{ account: Address; chainId: number }>;\n  }\n\n  private requestSignMessage(message: string): Promise<Hex> {\n    const chainId = this.cachedChainId ?? 1;\n    return this.dispatch({\n      kind: 'tangle.app.signMessage',\n      expectedKind: 'tangle.app.signMessageResult',\n      payload: { chainId, message },\n    }).then((data) => (data as { signature: Hex }).signature);\n  }\n\n  private requestSignTransaction(tx: {\n    to?: Address;\n    data?: Hex;\n    value?: Hex | string;\n  }): Promise<Hex> {\n    const chainId = this.cachedChainId ?? 1;\n    const value =\n      typeof tx.value === 'string' && tx.value.startsWith('0x')\n        ? BigInt(tx.value).toString(10)\n        : typeof tx.value === 'string'\n          ? tx.value\n          : undefined;\n    return this.dispatch({\n      kind: 'tangle.app.signTransaction',\n      expectedKind: 'tangle.app.signTransactionResult',\n      payload: {\n        chainId,\n        to: tx.to as Address,\n        data: tx.data as Hex,\n        ...(value !== undefined ? { value } : {}),\n      },\n    }).then((data) => (data as { txHash: Hex }).txHash);\n  }\n\n  private requestSwitchChain(chainId: number): Promise<number> {\n    return this.dispatch({\n      kind: 'tangle.app.switchChain',\n      expectedKind: 'tangle.app.switchChainResult',\n      payload: { chainId },\n    }).then((data) => (data as { chainId: number }).chainId);\n  }\n\n  private async dispatch(req: {\n    kind: 'tangle.app.readAccount' | 'tangle.app.switchChain' | 'tangle.app.signMessage' | 'tangle.app.signTransaction';\n    expectedKind: ParentMessage['kind'];\n    payload?: Record<string, unknown>;\n  }): Promise<unknown> {\n    await this.ensureBootstrapped();\n    const correlationId = makeCorrelationId(req.kind);\n    const timeout = this.options.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;\n    return new Promise<unknown>((resolve, reject) => {\n      const timer = window.setTimeout(() => {\n        this.pending.delete(correlationId);\n        reject(bridgeError(4900, `Parent did not respond to ${req.kind} within ${timeout}ms`));\n      }, timeout);\n      this.pending.set(correlationId, {\n        resolve: (v) => {\n          window.clearTimeout(timer);\n          resolve(v);\n        },\n        reject: (e) => {\n          window.clearTimeout(timer);\n          reject(e);\n        },\n        expectedKind: req.expectedKind,\n      });\n      this.postToParent({\n        kind: req.kind,\n        correlationId,\n        ...(req.payload ?? {}),\n      });\n    });\n  }\n\n  private resolvePending(message: Extract<ParentMessage, { correlationId: string }>): void {\n    const entry = this.pending.get(message.correlationId);\n    if (!entry) return;\n    this.pending.delete(message.correlationId);\n    if (entry.expectedKind !== message.kind) {\n      entry.reject(\n        bridgeError(\n          -32000,\n          `Parent replied with ${message.kind} but ${entry.expectedKind} was expected`,\n        ),\n      );\n      return;\n    }\n    if (message.ok) {\n      entry.resolve(message.data);\n    } else {\n      entry.reject(bridgeError(4001, message.error));\n    }\n  }\n\n  private async ensureBootstrapped(): Promise<void> {\n    if (this.handshakeAcked) return;\n    this.install();\n    await new Promise<void>((resolve) => {\n      this.handshakeWaiters.push(resolve);\n      // Re-send handshake every 500ms while we wait — covers a parent that\n      // mounted after the iframe and missed the initial post.\n      const retry = window.setInterval(() => {\n        if (this.handshakeAcked) {\n          window.clearInterval(retry);\n          return;\n        }\n        this.postToParent({\n          kind: 'tangle.app.handshake',\n          appId: this.options.appId,\n          version: TANGLE_IFRAME_PROTOCOL_VERSION,\n        });\n      }, 500);\n      // Safety stop — handshake won't be re-attempted indefinitely.\n      window.setTimeout(() => window.clearInterval(retry), 10_000);\n    });\n  }\n\n  private updateAccount(next: Address | null): void {\n    if (this.cachedAccount === next) return;\n    const prev = this.cachedAccount;\n    this.cachedAccount = next;\n    if (next === null && prev !== null) {\n      this.emit('disconnect');\n      this.emit('accountsChanged', []);\n    } else if (next !== null) {\n      this.emit('accountsChanged', [next]);\n      if (prev === null) {\n        this.emit('connect', { chainId: this.cachedChainId ?? 0 });\n      }\n    }\n  }\n\n  private updateChainId(next: number): void {\n    if (this.cachedChainId === next) return;\n    this.cachedChainId = next;\n    this.emit('chainChanged', `0x${next.toString(16)}`);\n  }\n\n  private emit(event: EventName, ...args: unknown[]): void {\n    const set = this.listeners.get(event);\n    if (!set) return;\n    for (const listener of [...set]) {\n      try {\n        listener(...args);\n      } catch {\n        // Listener bugs shouldn't break the bridge.\n      }\n    }\n  }\n\n  // ── Test seams ──────────────────────────────────────────────────────────\n\n  /** Visible for tests + the connector's `getAccounts()` shortcut. */\n  getCachedAccount(): Address | null {\n    return this.cachedAccount;\n  }\n  /** Visible for tests + the connector's `getChainId()` shortcut. */\n  getCachedChainId(): number | null {\n    return this.cachedChainId;\n  }\n}\n\nfunction bridgeError(code: number, message: string): Error {\n  const err = new Error(message) as Error & { code?: number };\n  err.code = code;\n  return err;\n}\n"],"mappings":";AAiBO,IAAM,+BAA+B,OAAO,OAAO;AAAA,EACxD;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AACF,CAAU;AAEV,SAAS,qBAAoC;AAC3C,MAAI,OAAO,aAAa,YAAa,QAAO;AAC5C,QAAM,MAAM,SAAS;AACrB,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI;AACF,WAAO,IAAI,IAAI,GAAG,EAAE;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAiBO,SAAS,8BACd,UAAgD,CAAC,GAClC;AACf,MAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAC7D,WAAO;AAAA,EACT;AACA,QAAM,YAAY,oBAAI,IAAY;AAAA,IAChC,GAAG;AAAA,IACH,GAAI,QAAQ,gBAAgB,CAAC;AAAA,EAC/B,CAAC;AACD,QAAM,iBAAiB,mBAAmB;AAC1C,MAAI,kBAAkB,UAAU,IAAI,cAAc,GAAG;AACnD,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,UAAM,WAAW,IAAI,aAAa,IAAI,QAAQ;AAC9C,QAAI,YAAY,UAAU,IAAI,QAAQ,EAAG,QAAO;AAAA,EAClD,QAAQ;AAAA,EAER;AACA,SAAO;AACT;;;AC7DA,SAAS,uBAAuB;;;ACNzB,IAAM,iCAAiC;AACvC,IAAM,gCAAgC;AAwFtC,IAAM,oBAAoB;AAO1B,SAAS,kBAAkB,QAAwB;AACxD,QAAM,SACJ,OAAO,WAAW,eAAe,OAAO,OAAO,eAAe,aAC1D,OAAO,WAAW,IAClB,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,SAAS,EAAE;AAClE,SAAO,GAAG,MAAM,IAAI,MAAM;AAC5B;;;AC5DA,IAAM,6BAA6B;AAU5B,SAAS,oBAA6B;AAC3C,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,MAAI;AACF,WAAO,OAAO,WAAW,UAAa,OAAO,WAAW;AAAA,EAC1D,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;AAMO,IAAM,uBAAN,MAA2B;AAAA,EAShC,YAA6B,SAA8B;AAA9B;AAAA,EAA+B;AAAA,EAA/B;AAAA,EARrB,YAAY,oBAAI,IAA8B;AAAA,EAC9C,UAAU,oBAAI,IAAqC;AAAA,EACnD,gBAAgC;AAAA,EAChC,gBAA+B;AAAA,EAC/B,iBAAiB;AAAA,EACjB,mBAAsC,CAAC;AAAA,EACvC,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,EAQpB,UAAgB;AACd,QAAI,KAAK,aAAa,OAAO,WAAW,YAAa;AACrD,SAAK,YAAY;AACjB,WAAO,iBAAiB,WAAW,KAAK,mBAAmB;AAC3D,SAAK,aAAa;AAAA,MAChB,MAAM;AAAA,MACN,OAAO,KAAK,QAAQ;AAAA,MACpB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,YAAkB;AAChB,QAAI,CAAC,KAAK,aAAa,OAAO,WAAW,YAAa;AACtD,SAAK,YAAY;AACjB,WAAO,oBAAoB,WAAW,KAAK,mBAAmB;AAE9D,eAAW,CAAC,EAAE,OAAO,KAAK,KAAK,SAAS;AACtC,cAAQ,OAAO,IAAI,MAAM,2BAA2B,CAAC;AAAA,IACvD;AACA,SAAK,QAAQ,MAAM;AAAA,EACrB;AAAA;AAAA,EAIA,MAAM,QAAQ,KAA+D;AAC3E,UAAM,SAAS,IAAI;AACnB,UAAM,SAAU,IAAI,UAAU,CAAC;AAC/B,YAAQ,QAAQ;AAAA,MACd,KAAK,eAAe;AAClB,cAAM,KAAK,mBAAmB;AAC9B,eAAO,KAAK,kBAAkB,OAAO,KAAK,KAAK,cAAc,SAAS,EAAE,CAAC,KAAK;AAAA,MAChF;AAAA,MACA,KAAK;AAAA,MACL,KAAK,uBAAuB;AAC1B,cAAM,KAAK,mBAAmB;AAC9B,eAAO,KAAK,kBAAkB,OAAO,CAAC,KAAK,aAAa,IAAI,CAAC;AAAA,MAC/D;AAAA,MACA,KAAK,iBAAiB;AACpB,cAAM,CAAC,SAAS,OAAO,IAAI;AAC3B,eAAO,KAAK,mBAAmB,OAAO;AAAA,MACxC;AAAA,MACA,KAAK,wBAAwB;AAI3B,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,MACA,KAAK,uBAAuB;AAC1B,cAAM,CAAC,EAAE,IAAI;AAGb,YAAI,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM;AACvB,gBAAM,YAAY,QAAQ,+CAA+C;AAAA,QAC3E;AACA,eAAO,KAAK,uBAAuB,EAAE;AAAA,MACvC;AAAA,MACA,KAAK,8BAA8B;AACjC,cAAM,CAAC,EAAE,QAAQ,CAAC,IAAI;AACtB,cAAM,UAAU,OAAO,SAAS,SAAS,EAAE;AAC3C,YAAI,CAAC,OAAO,SAAS,OAAO,KAAK,WAAW,GAAG;AAC7C,gBAAM,YAAY,QAAQ,oBAAoB,OAAO,EAAE;AAAA,QACzD;AACA,cAAM,KAAK,mBAAmB,OAAO;AACrC,eAAO;AAAA,MACT;AAAA,MACA,KAAK,2BAA2B;AAG9B,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,MACA;AACE,cAAM,YAAY,MAAM,UAAU,MAAM,kCAAkC;AAAA,IAC9E;AAAA,EACF;AAAA,EAEA,GAAG,OAAkB,UAA0B;AAC7C,UAAM,MAAM,KAAK,UAAU,IAAI,KAAK,KAAK,oBAAI,IAAI;AACjD,QAAI,IAAI,QAAQ;AAChB,SAAK,UAAU,IAAI,OAAO,GAAG;AAAA,EAC/B;AAAA,EAEA,eAAe,OAAkB,UAA0B;AACzD,SAAK,UAAU,IAAI,KAAK,GAAG,OAAO,QAAQ;AAAA,EAC5C;AAAA;AAAA,EAIQ,aAAa,SAAuB;AAC1C,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI;AACF,aAAO,OAAO,YAAY,SAAS,KAAK,QAAQ,YAAY;AAAA,IAC9D,QAAQ;AAAA,IAGR;AAAA,EACF;AAAA,EAEQ,sBAAsB,CAAC,UAA8B;AAE3D,QAAI,MAAM,WAAW,KAAK,QAAQ,aAAc;AAChD,UAAM,OAAO,MAAM;AACnB,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM;AAC/C,UAAM,UAAU;AAChB,YAAQ,QAAQ,MAAM;AAAA,MACpB,KAAK;AACH,aAAK,iBAAiB;AACtB,mBAAW,WAAW,KAAK,iBAAkB,SAAQ;AACrD,aAAK,mBAAmB,CAAC;AAIzB,aAAK,gBAAgB,EAAE,MAAM,MAAM;AAAA,QAInC,CAAC;AACD;AAAA,MACF,KAAK;AACH,aAAK,eAAe,OAAO;AAC3B,YAAI,QAAQ,IAAI;AACd,eAAK;AAAA,YACH,QAAQ,KAAK,YAAY,oBACrB,OACA,QAAQ,KAAK;AAAA,UACnB;AACA,eAAK,cAAc,QAAQ,KAAK,OAAO;AAAA,QACzC;AACA;AAAA,MACF,KAAK;AACH,aAAK,eAAe,OAAO;AAC3B,YAAI,QAAQ,GAAI,MAAK,cAAc,QAAQ,KAAK,OAAO;AACvD;AAAA,MACF,KAAK;AAAA,MACL,KAAK;AACH,aAAK,eAAe,OAAO;AAC3B;AAAA,MACF,KAAK;AACH,aAAK,cAAc,QAAQ,OAAO;AAClC;AAAA,MACF,KAAK;AACH,aAAK,cAAc,QAAQ,OAAO;AAClC;AAAA,IACJ;AAAA,EACF;AAAA,EAEQ,kBAAkE;AACxE,WAAO,KAAK,SAAS;AAAA,MACnB,MAAM;AAAA,MACN,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AAAA,EAEQ,mBAAmB,SAA+B;AACxD,UAAM,UAAU,KAAK,iBAAiB;AACtC,WAAO,KAAK,SAAS;AAAA,MACnB,MAAM;AAAA,MACN,cAAc;AAAA,MACd,SAAS,EAAE,SAAS,QAAQ;AAAA,IAC9B,CAAC,EAAE,KAAK,CAAC,SAAU,KAA4B,SAAS;AAAA,EAC1D;AAAA,EAEQ,uBAAuB,IAId;AACf,UAAM,UAAU,KAAK,iBAAiB;AACtC,UAAM,QACJ,OAAO,GAAG,UAAU,YAAY,GAAG,MAAM,WAAW,IAAI,IACpD,OAAO,GAAG,KAAK,EAAE,SAAS,EAAE,IAC5B,OAAO,GAAG,UAAU,WAClB,GAAG,QACH;AACR,WAAO,KAAK,SAAS;AAAA,MACnB,MAAM;AAAA,MACN,cAAc;AAAA,MACd,SAAS;AAAA,QACP;AAAA,QACA,IAAI,GAAG;AAAA,QACP,MAAM,GAAG;AAAA,QACT,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,MACzC;AAAA,IACF,CAAC,EAAE,KAAK,CAAC,SAAU,KAAyB,MAAM;AAAA,EACpD;AAAA,EAEQ,mBAAmB,SAAkC;AAC3D,WAAO,KAAK,SAAS;AAAA,MACnB,MAAM;AAAA,MACN,cAAc;AAAA,MACd,SAAS,EAAE,QAAQ;AAAA,IACrB,CAAC,EAAE,KAAK,CAAC,SAAU,KAA6B,OAAO;AAAA,EACzD;AAAA,EAEA,MAAc,SAAS,KAIF;AACnB,UAAM,KAAK,mBAAmB;AAC9B,UAAM,gBAAgB,kBAAkB,IAAI,IAAI;AAChD,UAAM,UAAU,KAAK,QAAQ,oBAAoB;AACjD,WAAO,IAAI,QAAiB,CAAC,SAAS,WAAW;AAC/C,YAAM,QAAQ,OAAO,WAAW,MAAM;AACpC,aAAK,QAAQ,OAAO,aAAa;AACjC,eAAO,YAAY,MAAM,6BAA6B,IAAI,IAAI,WAAW,OAAO,IAAI,CAAC;AAAA,MACvF,GAAG,OAAO;AACV,WAAK,QAAQ,IAAI,eAAe;AAAA,QAC9B,SAAS,CAAC,MAAM;AACd,iBAAO,aAAa,KAAK;AACzB,kBAAQ,CAAC;AAAA,QACX;AAAA,QACA,QAAQ,CAAC,MAAM;AACb,iBAAO,aAAa,KAAK;AACzB,iBAAO,CAAC;AAAA,QACV;AAAA,QACA,cAAc,IAAI;AAAA,MACpB,CAAC;AACD,WAAK,aAAa;AAAA,QAChB,MAAM,IAAI;AAAA,QACV;AAAA,QACA,GAAI,IAAI,WAAW,CAAC;AAAA,MACtB,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEQ,eAAe,SAAkE;AACvF,UAAM,QAAQ,KAAK,QAAQ,IAAI,QAAQ,aAAa;AACpD,QAAI,CAAC,MAAO;AACZ,SAAK,QAAQ,OAAO,QAAQ,aAAa;AACzC,QAAI,MAAM,iBAAiB,QAAQ,MAAM;AACvC,YAAM;AAAA,QACJ;AAAA,UACE;AAAA,UACA,uBAAuB,QAAQ,IAAI,QAAQ,MAAM,YAAY;AAAA,QAC/D;AAAA,MACF;AACA;AAAA,IACF;AACA,QAAI,QAAQ,IAAI;AACd,YAAM,QAAQ,QAAQ,IAAI;AAAA,IAC5B,OAAO;AACL,YAAM,OAAO,YAAY,MAAM,QAAQ,KAAK,CAAC;AAAA,IAC/C;AAAA,EACF;AAAA,EAEA,MAAc,qBAAoC;AAChD,QAAI,KAAK,eAAgB;AACzB,SAAK,QAAQ;AACb,UAAM,IAAI,QAAc,CAAC,YAAY;AACnC,WAAK,iBAAiB,KAAK,OAAO;AAGlC,YAAM,QAAQ,OAAO,YAAY,MAAM;AACrC,YAAI,KAAK,gBAAgB;AACvB,iBAAO,cAAc,KAAK;AAC1B;AAAA,QACF;AACA,aAAK,aAAa;AAAA,UAChB,MAAM;AAAA,UACN,OAAO,KAAK,QAAQ;AAAA,UACpB,SAAS;AAAA,QACX,CAAC;AAAA,MACH,GAAG,GAAG;AAEN,aAAO,WAAW,MAAM,OAAO,cAAc,KAAK,GAAG,GAAM;AAAA,IAC7D,CAAC;AAAA,EACH;AAAA,EAEQ,cAAc,MAA4B;AAChD,QAAI,KAAK,kBAAkB,KAAM;AACjC,UAAM,OAAO,KAAK;AAClB,SAAK,gBAAgB;AACrB,QAAI,SAAS,QAAQ,SAAS,MAAM;AAClC,WAAK,KAAK,YAAY;AACtB,WAAK,KAAK,mBAAmB,CAAC,CAAC;AAAA,IACjC,WAAW,SAAS,MAAM;AACxB,WAAK,KAAK,mBAAmB,CAAC,IAAI,CAAC;AACnC,UAAI,SAAS,MAAM;AACjB,aAAK,KAAK,WAAW,EAAE,SAAS,KAAK,iBAAiB,EAAE,CAAC;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,cAAc,MAAoB;AACxC,QAAI,KAAK,kBAAkB,KAAM;AACjC,SAAK,gBAAgB;AACrB,SAAK,KAAK,gBAAgB,KAAK,KAAK,SAAS,EAAE,CAAC,EAAE;AAAA,EACpD;AAAA,EAEQ,KAAK,UAAqB,MAAuB;AACvD,UAAM,MAAM,KAAK,UAAU,IAAI,KAAK;AACpC,QAAI,CAAC,IAAK;AACV,eAAW,YAAY,CAAC,GAAG,GAAG,GAAG;AAC/B,UAAI;AACF,iBAAS,GAAG,IAAI;AAAA,MAClB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA,EAKA,mBAAmC;AACjC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAEA,mBAAkC;AAChC,WAAO,KAAK;AAAA,EACd;AACF;AAEA,SAAS,YAAY,MAAc,SAAwB;AACzD,QAAM,MAAM,IAAI,MAAM,OAAO;AAC7B,MAAI,OAAO;AACX,SAAO;AACT;;;AFxYO,SAAS,sBAAsB,SAAuC;AAC3E,MAAI;AACJ,MAAI,YAAY;AAEhB,SAAO,gBAAsC,CAAC,WAAW;AACvD,UAAM,iBAAiB,MAA4B;AACjD,UAAI,CAAC,SAAU,YAAW,IAAI,qBAAqB,OAAO;AAC1D,UAAI,CAAC,WAAW;AACd,iBAAS,QAAQ;AACjB,oBAAY;AAIZ,iBAAS,GAAG,mBAAmB,CAAC,aAAa;AAC3C,iBAAO,QAAQ,KAAK,UAAU;AAAA,YAC5B,UAAU,MAAM,QAAQ,QAAQ,IAC3B,WACA,CAAC;AAAA,UACR,CAAC;AAAA,QACH,CAAC;AACD,iBAAS,GAAG,gBAAgB,CAAC,eAAe;AAC1C,gBAAM,UACJ,OAAO,eAAe,WAClB,OAAO,SAAS,YAAY,EAAE,IAC9B,OAAO,UAAU;AACvB,cAAI,OAAO,SAAS,OAAO,GAAG;AAC5B,mBAAO,QAAQ,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,UAC3C;AAAA,QACF,CAAC;AACD,iBAAS,GAAG,cAAc,MAAM;AAC9B,iBAAO,QAAQ,KAAK,YAAY;AAAA,QAClC,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,MAAM;AAAA;AAAA,MAGN,MAAM,UAAwB;AAI5B,cAAM,IAAI,eAAe;AACzB,cAAM,iBAAkB,MAAM,EAAE,QAAQ;AAAA,UACtC,QAAQ;AAAA,QACV,CAAC;AACD,cAAM,aAAc,MAAM,EAAE,QAAQ,EAAE,QAAQ,cAAc,CAAC;AAC7D,cAAM,UAAU,OAAO,SAAS,YAAY,EAAE;AAC9C,eAAO;AAAA,UACL,UAAU;AAAA,UACV,SAAS,OAAO,SAAS,OAAO,IAAI,UAAU;AAAA,QAChD;AAAA,MACF;AAAA,MAEA,MAAM,aAAa;AAMjB,YAAI,SAAU,UAAS,UAAU;AACjC,oBAAY;AACZ,mBAAW;AAAA,MACb;AAAA,MAEA,MAAM,cAAc;AAClB,cAAM,IAAI,eAAe;AACzB,cAAM,SAAS,EAAE,iBAAiB;AAClC,YAAI,OAAQ,QAAO,CAAC,MAAM;AAC1B,cAAM,WAAY,MAAM,EAAE,QAAQ;AAAA,UAChC,QAAQ;AAAA,QACV,CAAC;AACD,eAAO;AAAA,MACT;AAAA,MAEA,MAAM,aAAa;AACjB,cAAM,IAAI,eAAe;AACzB,cAAM,SAAS,EAAE,iBAAiB;AAClC,YAAI,WAAW,KAAM,QAAO;AAC5B,cAAM,aAAc,MAAM,EAAE,QAAQ,EAAE,QAAQ,cAAc,CAAC;AAC7D,cAAM,UAAU,OAAO,SAAS,YAAY,EAAE;AAC9C,eAAO,OAAO,SAAS,OAAO,IAAI,UAAU;AAAA,MAC9C;AAAA,MAEA,MAAM,cAAc;AAClB,eAAO,eAAe;AAAA,MACxB;AAAA,MAEA,MAAM,eAAe;AAKnB,YAAI;AACF,gBAAM,IAAI,eAAe;AACzB,gBAAM,WAAY,MAAM,EAAE,QAAQ;AAAA,YAChC,QAAQ;AAAA,UACV,CAAC;AACD,iBAAO,SAAS,SAAS;AAAA,QAC3B,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,MAEA,MAAM,YAAY,EAAE,QAAQ,GAAmB;AAC7C,cAAM,IAAI,eAAe;AACzB,cAAM,EAAE,QAAQ;AAAA,UACd,QAAQ;AAAA,UACR,QAAQ,CAAC,EAAE,SAAS,KAAK,QAAQ,SAAS,EAAE,CAAC,GAAG,CAAC;AAAA,QACnD,CAAC;AACD,cAAM,QAAQ,OAAO,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,OAAO;AACxD,YAAI,CAAC,OAAO;AACV,gBAAM,IAAI,MAAM,SAAS,OAAO,8BAA8B;AAAA,QAChE;AACA,eAAO;AAAA,MACT;AAAA,MAEA,kBAAkB,UAAU;AAC1B,eAAO,QAAQ,KAAK,UAAU;AAAA,UAC5B;AAAA,QACF,CAAC;AAAA,MACH;AAAA,MACA,eAAe,YAAY;AACzB,cAAM,UAAU,OAAO,SAAS,YAAY,EAAE;AAC9C,YAAI,OAAO,SAAS,OAAO,GAAG;AAC5B,iBAAO,QAAQ,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,QAC3C;AAAA,MACF;AAAA,MACA,eAAe;AACb,eAAO,QAAQ,KAAK,YAAY;AAAA,MAClC;AAAA,IACF;AAAA,EACF,CAAC;AACH;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/blueprint-ui",
-  "version": "0.1.1",
+  "version": "0.3.0",
   "description": "Shared blueprint UI components, hooks, and contract utilities for Tangle Network apps",
   "license": "MIT OR Apache-2.0",
   "repository": {
@@ -12,9 +12,13 @@
     "url": "https://github.com/tangle-network/blueprint-ui/issues"
   },
   "type": "module",
-  "main": "./src/index.ts",
-  "types": "./src/index.ts",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "sideEffects": [
+    "**/*.css"
+  ],
   "files": [
+    "dist",
     "src",
     "README.md",
     "package.json",
@@ -24,15 +28,31 @@
     "access": "public"
   },
   "exports": {
-    ".": "./src/index.ts",
-    "./components": "./src/components.ts",
-    "./preset": "./src/preset.ts"
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./components": {
+      "import": "./dist/components.js",
+      "types": "./dist/components.d.ts",
+      "default": "./dist/components.js"
+    },
+    "./preset": {
+      "import": "./dist/preset.js",
+      "types": "./dist/preset.d.ts",
+      "default": "./dist/preset.js"
+    },
+    "./styles.css": "./dist/styles.css"
   },
   "scripts": {
-    "typecheck": "tsc --noEmit"
+    "build": "tsup && node scripts/build-styles.mjs",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "prepack": "npm run build"
   },
   "peerDependencies": {
-    "@tanstack/react-query": "^5.0.0",
     "@nanostores/react": "^0.7.0",
     "@radix-ui/react-dialog": "^1.1.0",
     "@radix-ui/react-select": "^2.1.0",
@@ -40,6 +60,7 @@
     "@radix-ui/react-slot": "^1.2.0",
     "@radix-ui/react-tabs": "^1.1.0",
     "@radix-ui/react-tooltip": "^1.2.0",
+    "@tanstack/react-query": "^5.0.0",
     "blo": "^2.0.0",
     "class-variance-authority": "^0.7.0",
     "clsx": "^2.1.0",
@@ -55,7 +76,7 @@
   },
   "peerDependenciesMeta": {},
   "devDependencies": {
-    "@tanstack/react-query": "^5.90.16",
+    "@iconify-json/ph": "^1.2.2",
     "@nanostores/react": "^1.0.0",
     "@radix-ui/react-dialog": "^1.1.15",
     "@radix-ui/react-select": "^2.2.6",
@@ -63,20 +84,29 @@
     "@radix-ui/react-slot": "^1.2.4",
     "@radix-ui/react-tabs": "^1.1.13",
     "@radix-ui/react-tooltip": "^1.2.8",
+    "@tanstack/react-query": "^5.90.16",
+    "@testing-library/dom": "^10.4.1",
+    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/react": "^16.3.2",
     "@types/react": "18.3.1",
     "@types/react-dom": "18.3.1",
     "blo": "^2.0.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "framer-motion": "^12.34.3",
+    "jsdom": "^29.1.1",
     "nanostores": "^1.1.0",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
     "react-router": "^7.13.0",
     "sonner": "^2.0.7",
     "tailwind-merge": "^3.5.0",
+    "tsup": "^8.5.0",
     "typescript": "^5.5.2",
+    "unocss": "^66.5.4",
+    "unocss-preset-animations": "^1.1.1",
     "viem": "^2.46.2",
+    "vitest": "^4.1.7",
     "wagmi": "^3.5.0"
   }
 }

package/src/components/forms/JobExecutionDialog.tsx

@@ -1,4 +1,6 @@
 import { useStore } from '@nanostores/react';
+import { useAccount } from 'wagmi';
+import type { Address } from 'viem';
 import type { JobDefinition } from '../../blueprints/registry';
 import { useJobForm } from '../../hooks/useJobForm';
 import { useSubmitJob } from '../../hooks/useSubmitJob';
@@ -35,18 +37,24 @@ export function JobExecutionDialog({
   onSuccess,
 }: JobExecutionDialogProps) {
   const infra = useStore(infraStore);
+  const { address } = useAccount();
   const { values, errors, onChange, validate, reset } = useJobForm(job);
   const { submitJob, status, error: txError, txHash, reset: resetTx } = useSubmitJob();
 
-  // Per-job RFQ: fetch price from operator before submission
+  // Per-job RFQ: fetch price from operator before submission.
+  // tnt-core v0.13.0 binds quotes to the future caller — only run the hook
+  // once a wallet address is available.
   const operatorRpcUrl = infra.serviceInfo?.operators?.[0]?.rpcAddress;
   const blueprintId = BigInt(infra.blueprintId || '0');
+  const ZERO: Address = '0x0000000000000000000000000000000000000000';
+  const requester: Address = (address ?? ZERO) as Address;
   const { quote, isLoading: priceLoading, isSolvingPow, formattedPrice, error: priceError } = useJobPrice(
     operatorRpcUrl,
     serviceId,
     job.id,
     blueprintId,
-    open && !!operatorRpcUrl && serviceId > 0n,
+    open && !!operatorRpcUrl && serviceId > 0n && !!address,
+    requester,
   );
 
   // Fallback price from multiplier (base rate = 0.001 TNT = 1e15 wei)

package/src/components.ts

@@ -52,3 +52,6 @@ export type { FormSection } from './components/forms/BlueprintJobForm';
 export { BlueprintJobForm } from './components/forms/BlueprintJobForm';
 export { FormSummary } from './components/forms/FormSummary';
 export { JobExecutionDialog } from './components/forms/JobExecutionDialog';
+
+// ── Blueprint Host ──
+export { BlueprintHostHero, BlueprintHostPanel } from './host';

package/src/contracts/abi.ts

@@ -98,11 +98,15 @@ export const tangleServicesAbi = [
             name: 'details',
             type: 'tuple',
             components: [
+              // tnt-core v0.13.0: `requester` is the first field of QuoteDetails.
+              // The contract enforces `requester == msg.sender` and rejects address(0).
+              { name: 'requester', type: 'address' },
               { name: 'blueprintId', type: 'uint64' },
               { name: 'ttlBlocks', type: 'uint64' },
               { name: 'totalCost', type: 'uint256' },
               { name: 'timestamp', type: 'uint64' },
               { name: 'expiry', type: 'uint64' },
+              { name: 'confidentiality', type: 'uint8' },
               {
                 name: 'securityCommitments',
                 type: 'tuple[]',
@@ -118,6 +122,14 @@ export const tangleServicesAbi = [
                   { name: 'exposureBps', type: 'uint16' },
                 ],
               },
+              {
+                name: 'resourceCommitments',
+                type: 'tuple[]',
+                components: [
+                  { name: 'kind', type: 'uint8' },
+                  { name: 'count', type: 'uint64' },
+                ],
+              },
             ],
           },
           { name: 'signature', type: 'bytes' },

package/src/contracts/chains.ts

@@ -1,13 +1,14 @@
 import { defineChain } from 'viem';
 import { mainnet } from 'viem/chains';
 import type { Address, Chain } from 'viem';
+import { getEnvVar, isDevEnv } from '../utils/env';
 
 /**
  * Resolve RPC URL for the current environment.
  * Handles local dev (hostname swap), Vite dev proxy, and remote access.
  */
 export function resolveRpcUrl(envUrl?: string): string {
-  const configured = envUrl ?? import.meta.env.VITE_RPC_URL ?? 'http://localhost:8545';
+  const configured = envUrl ?? getEnvVar('VITE_RPC_URL') ?? 'http://localhost:8545';
   if (typeof window === 'undefined') return configured;
   try {
     const rpc = new URL(configured);
@@ -15,7 +16,7 @@ export function resolveRpcUrl(envUrl?: string): string {
     const pageHost = window.location.hostname;
     const isLocalPage = pageHost === '127.0.0.1' || pageHost === 'localhost';
     // Dev-mode proxy for LAN access to local RPC
-    if (isLocalRpc && !isLocalPage && import.meta.env.DEV) {
+    if (isLocalRpc && !isLocalPage && isDevEnv()) {
       return `${window.location.origin}/rpc-proxy`;
     }
     // Non-dev LAN access: swap hostname
@@ -37,7 +38,7 @@ export interface LocalChainOptions {
 }
 
 export function createTangleLocalChain(options: LocalChainOptions = {}) {
-  const chainId = options.chainId ?? Number(import.meta.env.VITE_CHAIN_ID ?? 31337);
+  const chainId = options.chainId ?? Number(getEnvVar('VITE_CHAIN_ID') ?? 31337);
   const localRpcUrl = resolveRpcUrl(options.rpcUrl);
 
   return defineChain({

package/src/contracts/publicClient.ts

@@ -3,8 +3,9 @@ import type { PublicClient } from 'viem';
 import { atom } from 'nanostores';
 import { getNetworks, tangleLocal, type CoreAddresses } from './chains';
 import { persistedAtom } from '../stores/persistedAtom';
+import { getEnvVar } from '../utils/env';
 
-const defaultChainId = Number(import.meta.env.VITE_CHAIN_ID ?? tangleLocal.id);
+const defaultChainId = Number(getEnvVar('VITE_CHAIN_ID') ?? tangleLocal.id);
 
 export const selectedChainIdStore = persistedAtom<number>({
   key: 'bp_selected_chain',

package/src/hooks/useJobPrice.test.ts

@@ -0,0 +1,214 @@
+import { describe, it, expect, vi } from 'vitest';
+import { renderHook, waitFor } from '@testing-library/react';
+import { useJobPrice, useJobPrices, assertRequester } from './useJobPrice';
+
+vi.mock('./useQuotes', async () => {
+  const actual = await vi.importActual('./useQuotes');
+  return {
+    ...(actual as any),
+    solvePoW: vi.fn().mockResolvedValue({ proof: new Uint8Array([1, 2, 3]) }),
+  };
+});
+
+const VALID_REQUESTER = '0x1234567890123456789012345678901234567890';
+const ZERO_ADDRESS = '0x0000000000000000000000000000000000000000';
+const ALT_REQUESTER = '0xabcdefabcdefabcdefabcdefabcdefabcdefabcd';
+
+describe('assertRequester guard', () => {
+  it('throws when enabled=true and requester is zero address', () => {
+    expect(() => assertRequester(ZERO_ADDRESS, 'useJobPrice', true)).toThrow(
+      /requester.*required.*non-zero address/i,
+    );
+  });
+
+  it('does not throw when enabled=false and requester is zero address', () => {
+    expect(() => assertRequester(ZERO_ADDRESS, 'useJobPrice', false)).not.toThrow();
+  });
+
+  it('throws when enabled=true and requester is empty string', () => {
+    expect(() => assertRequester('' as `0x${string}`, 'useJobPrice', true)).toThrow(
+      /requester.*required.*non-zero address/i,
+    );
+  });
+
+  it('does not throw when enabled=true and requester is valid', () => {
+    expect(() => assertRequester(VALID_REQUESTER as `0x${string}`, 'useJobPrice', true)).not.toThrow();
+  });
+});
+
+describe('useJobPrice requester integration', () => {
+  const defaultFetchResponse = {
+    ok: true,
+    json: async () => ({
+      service_id: '1',
+      job_index: 0,
+      price: '1000',
+      timestamp: '1234567890',
+      expiry: '1234567900',
+      signature: '0xdeadbeef',
+      operator: '0xoperator',
+    }),
+  } as Response;
+
+  it('includes requester in the POST body', async () => {
+    const fetchSpy = vi.spyOn(globalThis, 'fetch').mockResolvedValue(defaultFetchResponse);
+
+    renderHook(() =>
+      useJobPrice('http://localhost:8080', 1n, 0, 1n, true, VALID_REQUESTER as `0x${string}`),
+    );
+
+    await waitFor(() => {
+      expect(fetchSpy).toHaveBeenCalledTimes(1);
+    });
+
+    const [, init] = fetchSpy.mock.calls[0];
+    const body = JSON.parse((init as RequestInit).body as string);
+    expect(body.requester).toBe(VALID_REQUESTER);
+
+    fetchSpy.mockRestore();
+  });
+
+  it('falls back to input requester when response lacks requester', async () => {
+    const fetchSpy = vi.spyOn(globalThis, 'fetch').mockResolvedValue(defaultFetchResponse);
+
+    const { result } = renderHook(() =>
+      useJobPrice('http://localhost:8080', 1n, 0, 1n, true, VALID_REQUESTER as `0x${string}`),
+    );
+
+    await waitFor(() => {
+      expect(result.current.quote).not.toBeNull();
+    });
+
+    expect(result.current.quote?.requester).toBe(VALID_REQUESTER);
+
+    fetchSpy.mockRestore();
+  });
+
+  it('uses response requester when present', async () => {
+    const fetchSpy = vi.spyOn(globalThis, 'fetch').mockResolvedValue({
+      ok: true,
+      json: async () => ({
+        service_id: '1',
+        job_index: 0,
+        price: '1000',
+        timestamp: '1234567890',
+        expiry: '1234567900',
+        signature: '0xdeadbeef',
+        operator: '0xoperator',
+        requester: ALT_REQUESTER,
+      }),
+    } as Response);
+
+    const { result } = renderHook(() =>
+      useJobPrice('http://localhost:8080', 1n, 0, 1n, true, VALID_REQUESTER as `0x${string}`),
+    );
+
+    await waitFor(() => {
+      expect(result.current.quote).not.toBeNull();
+    });
+
+    expect(result.current.quote?.requester).toBe(ALT_REQUESTER);
+
+    fetchSpy.mockRestore();
+  });
+});
+
+describe('useJobPrices requester integration', () => {
+  const defaultFetchResponse = {
+    ok: true,
+    json: async () => ({
+      service_id: '1',
+      job_index: 0,
+      price: '1000',
+      timestamp: '1234567890',
+      expiry: '1234567900',
+      signature: '0xdeadbeef',
+      operator: '0xoperator',
+    }),
+  } as Response;
+
+  const stableJobIndexes = [{ index: 0, name: 'test', multiplier: 1 }];
+
+  it('includes requester in the POST body', async () => {
+    const fetchSpy = vi.spyOn(globalThis, 'fetch').mockResolvedValue(defaultFetchResponse);
+
+    renderHook(() =>
+      useJobPrices(
+        'http://localhost:8080',
+        1n,
+        1n,
+        stableJobIndexes,
+        true,
+        VALID_REQUESTER as `0x${string}`,
+      ),
+    );
+
+    await waitFor(() => {
+      expect(fetchSpy).toHaveBeenCalledTimes(1);
+    });
+
+    const [, init] = fetchSpy.mock.calls[0];
+    const body = JSON.parse((init as RequestInit).body as string);
+    expect(body.requester).toBe(VALID_REQUESTER);
+
+    fetchSpy.mockRestore();
+  });
+
+  it('falls back to input requester when response lacks requester', async () => {
+    const fetchSpy = vi.spyOn(globalThis, 'fetch').mockResolvedValue(defaultFetchResponse);
+
+    const { result } = renderHook(() =>
+      useJobPrices(
+        'http://localhost:8080',
+        1n,
+        1n,
+        stableJobIndexes,
+        true,
+        VALID_REQUESTER as `0x${string}`,
+      ),
+    );
+
+    await waitFor(() => {
+      expect(result.current.prices.length).toBeGreaterThan(0);
+    });
+
+    expect(result.current.prices[0].quote?.requester).toBe(VALID_REQUESTER);
+
+    fetchSpy.mockRestore();
+  });
+
+  it('uses response requester when present', async () => {
+    const fetchSpy = vi.spyOn(globalThis, 'fetch').mockResolvedValue({
+      ok: true,
+      json: async () => ({
+        service_id: '1',
+        job_index: 0,
+        price: '1000',
+        timestamp: '1234567890',
+        expiry: '1234567900',
+        signature: '0xdeadbeef',
+        operator: '0xoperator',
+        requester: ALT_REQUESTER,
+      }),
+    } as Response);
+
+    const { result } = renderHook(() =>
+      useJobPrices(
+        'http://localhost:8080',
+        1n,
+        1n,
+        stableJobIndexes,
+        true,
+        VALID_REQUESTER as `0x${string}`,
+      ),
+    );
+
+    await waitFor(() => {
+      expect(result.current.prices.length).toBeGreaterThan(0);
+    });
+
+    expect(result.current.prices[0].quote?.requester).toBe(ALT_REQUESTER);
+
+    fetchSpy.mockRestore();
+  });
+});

package/src/hooks/useJobPrice.ts

@@ -18,6 +18,12 @@ import { solvePoW, formatCost } from './useQuotes';
 // ── Types ──
 
 export interface JobQuote {
+  /**
+   * Address of the account that will submit `submitJobFromQuote`.
+   * Required since tnt-core v0.13.0 — the contract enforces
+   * `requester == msg.sender` and rejects `address(0)` (no wildcard quotes).
+   */
+  requester: Address;
   serviceId: bigint;
   jobIndex: number;
   price: bigint;
@@ -59,13 +65,47 @@ function resolveOperatorRpc(raw: string): string {
 
 // ── Hook ──
 
+const ZERO_ADDRESS_LOWER = '0x0000000000000000000000000000000000000000';
+
+/**
+ * Defensive guard: throws when a consumer enables fetching but has not
+ * supplied a non-zero `requester`. Skipped when `enabled` is false so
+ * components can pass a derived value (e.g. `address ?? ZERO`) before the
+ * wallet has connected.
+ */
+export function assertRequester(requester: Address, hookName: string, enabled: boolean): void {
+  if (!enabled) return;
+  if (!requester || requester.toLowerCase() === ZERO_ADDRESS_LOWER) {
+    throw new Error(
+      `${hookName}: \`requester\` is required and must be a non-zero address when \`enabled=true\`. ` +
+        'Pass `useAccount().address` from wagmi. tnt-core v0.13.0 contracts ' +
+        'reject quotes whose requester is address(0) or != msg.sender.',
+    );
+  }
+}
+
+/**
+ * Fetches a signed `JobQuote` for `submitJobFromQuote`.
+ *
+ * @param operatorRpcUrl Operator RPC base URL (e.g. from `getOperatorPreferences`).
+ * @param serviceId      Target service id.
+ * @param jobIndex       Job index within the blueprint.
+ * @param blueprintId    Blueprint id (used for the PoW challenge domain).
+ * @param enabled        Gate to disable fetching while inputs settle.
+ * @param requester      Address that will submit `submitJobFromQuote` —
+ *                       must equal `msg.sender` at submission time. Required
+ *                       since tnt-core v0.13.0; the contract rejects
+ *                       `address(0)` and any mismatch.
+ */
 export function useJobPrice(
   operatorRpcUrl: string | undefined,
   serviceId: bigint,
   jobIndex: number,
   blueprintId: bigint,
   enabled: boolean,
+  requester: Address,
 ): UseJobPriceResult {
+  assertRequester(requester, 'useJobPrice', enabled);
   const [quote, setQuote] = useState<JobQuote | null>(null);
   const [isLoading, setIsLoading] = useState(false);
   const [isSolvingPow, setIsSolvingPow] = useState(false);
@@ -107,6 +147,9 @@ export function useJobPrice(
             job_index: jobIndex,
             proof_of_work: toHex(proof),
             challenge_timestamp: String(timestamp),
+            // tnt-core v0.13.0: operators sign `requester` into JobQuoteDetails;
+            // the contract enforces `requester == msg.sender` on submission.
+            requester,
           }),
           signal: AbortSignal.timeout(10_000),
         });
@@ -119,6 +162,7 @@ export function useJobPrice(
         if (cancelledRef.current) return;
 
         setQuote({
+          requester: ((data.requester as Address | undefined) ?? requester),
           serviceId: BigInt(data.service_id ?? serviceId),
           jobIndex: data.job_index ?? jobIndex,
           price: BigInt(data.price ?? '0'),
@@ -143,7 +187,7 @@ export function useJobPrice(
     return () => {
       cancelledRef.current = true;
     };
-  }, [operatorRpcUrl, serviceId, jobIndex, blueprintId, enabled, fetchKey]);
+  }, [operatorRpcUrl, serviceId, jobIndex, blueprintId, enabled, fetchKey, requester]);
 
   const formattedPrice = quote ? formatCost(quote.price) : '--';
 
@@ -171,13 +215,20 @@ export interface UseJobPricesResult {
   refetch: () => void;
 }
 
+/**
+ * Batch counterpart to {@link useJobPrice}. Same `requester` contract: the
+ * caller must pass `useAccount().address`; the field is required since
+ * tnt-core v0.13.0.
+ */
 export function useJobPrices(
   operatorRpcUrl: string | undefined,
   serviceId: bigint,
   blueprintId: bigint,
   jobIndexes: { index: number; name: string; multiplier: number }[],
   enabled: boolean,
+  requester: Address,
 ): UseJobPricesResult {
+  assertRequester(requester, 'useJobPrices', enabled);
   const [prices, setPrices] = useState<JobPriceEntry[]>([]);
   const [isLoading, setIsLoading] = useState(false);
   const [error, setError] = useState<string | null>(null);
@@ -214,6 +265,8 @@ export function useJobPrices(
                 job_index: job.index,
                 proof_of_work: toHex(proof),
                 challenge_timestamp: String(timestamp),
+                // tnt-core v0.13.0: see useJobPrice notes.
+                requester,
               }),
               signal: AbortSignal.timeout(10_000),
             });
@@ -237,6 +290,7 @@ export function useJobPrices(
               formattedPrice: formatCost(price),
               mode: (data.mode ?? 'flat') as 'flat' | 'dynamic' | 'free',
               quote: {
+                requester: ((data.requester as Address | undefined) ?? requester),
                 serviceId: BigInt(data.service_id ?? serviceId),
                 jobIndex: job.index,
                 price,
@@ -277,7 +331,7 @@ export function useJobPrices(
     return () => {
       cancelled = true;
     };
-  }, [operatorRpcUrl, serviceId, blueprintId, jobIndexes, enabled, fetchKey]);
+  }, [operatorRpcUrl, serviceId, blueprintId, jobIndexes, enabled, fetchKey, requester]);
 
   return { prices, isLoading, error, refetch };
 }