@vue-solana/core 3.0.1 → 4.0.0-rc.1

package/README.md

@@ -44,7 +44,7 @@ Full Vue Solana docs:
 | ------------- | ----------------------------------------------------------------- |
 | Runtime       | ESM only (modern bundlers; Node needs ESM)                        |
 | TypeScript    | TypeScript 5.x recommended                                        |
-| Solana client | `@solana/kit@^8.4.0` (and `@solana/kit-plugin-rpc`)               |
+| Solana client | `@solana/kit@^8.5.0` (and `@solana/kit-plugin-rpc`)               |
 | Clusters      | `mainnet` (alias `mainnet-beta`), `devnet`, `testnet`, `localnet` |
 
 Since v3.0.0 this package is ESM only: there is no `require` export condition and no top-level `main`, so `require("@vue-solana/core")` fails with `No "exports" main defined`. Pin to `@vue-solana/core@^2` if you must stay on CommonJS.
@@ -92,6 +92,12 @@ import { installSolanaBufferPolyfill } from "@vue-solana/core/buffer-polyfill";
 installSolanaBufferPolyfill();
 ```
 
+The `buffer-polyfill` subpath needs the `buffer` package, declared as an **optional peer dependency**. Apps that use serialization must install it explicitly:
+
+```sh
+pnpm add buffer
+```
+
 ## Configuration
 
 ```ts
@@ -122,7 +128,7 @@ Supported clusters are `mainnet` (legacy alias `mainnet-beta`), `testnet`, `devn
 
 `payer` is a Kit `TransactionSigner`; `payerSecretKey` is its serializable base64 64-byte Ed25519 keypair form. Both are supported by direct core/Vue clients. A client-sent transaction requires a payer. Never put a raw secret or `payerSecretKey` in Nuxt public runtime config, and never ship a funded keypair to an end-user browser.
 
-`createSolanaClient()` composes the official `@solana/kit-plugin-rpc` stack by default: `solanaRpc()`, `rpcTransactionPlanner()`, and `rpcTransactionPlanSendingExecutor()`. The old custom fallback sender is removed. The official sender adds a fresh blockhash, resource-limit and preflight handling, signs, submits, and waits for `confirmed` commitment before the send resolves.
+`createSolanaClient()` composes the official `@solana/kit-plugin-rpc` stack by default: `solanaRpc()` followed by `rpcAirdrop()` when no `commitment` is configured (a configured `commitment` builds the same stack explicitly so it reaches the RPC layer). `solanaRpc()` installs `rpcTransactionPlanner()`, `rpcTransactionPlanSigningExecutor()`, and `rpcTransactionPlanSendingExecutor()` itself, so the client exposes RPC reads and subscriptions plus `planTransaction(s)`, `signTransaction(s)`, and `sendTransaction(s)` with no extra plugin. The old custom fallback sender is not used. Its official sending executor adds a fresh blockhash, resource-limit and preflight handling, signs with the available client signers, submits the transaction, and waits for `confirmed` commitment before the send resolves. A client send requires a `payer` signer.
 
 Use `mainnet` for Solana mainnet. This is Solana's official mainnet cluster name. The legacy `mainnet-beta` spelling is still accepted and redirects to the same endpoint.
 
@@ -145,6 +151,7 @@ Direct subpaths:
 - `@vue-solana/core/ios-wallet`
 - `@vue-solana/core/kit`
 - `@vue-solana/core/mobile-wallet`
+- `@vue-solana/core/mobile-wallet-support`
 - `@vue-solana/core/rpc`
 - `@vue-solana/core/token-accounts`
 - `@vue-solana/core/timeout`
@@ -173,6 +180,16 @@ Direct subpaths:
 | `createSolanaActionStore(fn)`                                   | Wraps an async `(signal, ...args) => Promise` function into a `{ getState, subscribe, dispatch, reset, withSignal }` store; each dispatch aborts the prior in-flight call. |
 
 The client-sent API is the official Kit `ClientWithTransactionSending` capability installed by `createSolanaClient()`. It does not use a wallet popup; `sent` is reached after the RPC executor completes its send-and-confirm operation at `confirmed` commitment. Use a `payer`, and keep funded keys in a trusted server or relayer context.
+| `registerSolanaMobileWallet(config?)` | Registers an Android Mobile Wallet Adapter wallet through `@solana-mobile/wallet-standard-mobile`. |
+| `isSolanaMobileWalletSupported()` | Android-support gate used to decide whether to lazy-load the MWA module. |
+| `getSolanaIosWallets(options?)` | Builds iOS browser wallet entries (Phantom, Solflare, Backpack) as universal links. |
+| `handleSolanaIosWalletCallback()` | Completes a pending iOS wallet deep-link callback after redirect. |
+| `adaptSolanaStandardWallet(wallet)` | Adapts a Solana Wallet Standard wallet into `SolanaWallet`. |
+| `disconnectSolanaStandardWallet(walletInfo)` | Disconnects a discovered Wallet Standard wallet through its own `standard:disconnect` feature, without adapting it. |
+| `getRegisteredSolanaWallets()` | Returns the Wallet Standard wallets currently registered in the app. |
+| `withTimeout(promise, timeoutMs, options?)` | Races a promise against a timeout, with optional abort signal. |
+| `withSolanaTimeout(promise, timeoutMs, options?)` | Solana-specific timeout wrapper with abort and error-code support. |
+| `normalizeSolanaError(error)` | Normalizes an unknown error into a `SolanaError`. |
 | `isSolanaActionAborted(error)` | Detects abort errors from superseded action dispatches. |
 
 ## Wallet Interface
@@ -194,6 +211,8 @@ const wallet: SolanaWallet = {
 
 Browser extension wallets discovered through the Solana Wallet Standard are adapted into `SolanaWallet`. Android Mobile Wallet Adapter is registered through `@solana-mobile/wallet-standard-mobile` and then adapted through the same Wallet Standard adapter on supported Android Chrome clients. iOS browser wallet entries for Phantom, Solflare, and Backpack are adapted through wallet-specific universal links. Wallet capability metadata exposes whether each wallet supports message signing, transaction signing, and sign-and-send flows. You can also provide a custom object that implements `SolanaWallet` for tests or custom adapters.
 
+The Wallet Standard adapter verifies the signature a wallet returns from `signMessage` / `signIn` against the account's public key before resolving, where Ed25519 (WebCrypto) is available. A signature over the wrong bytes or from a different account rejects with `INVALID_SIGNATURE`. This is a best-effort, client-side guard — it is skipped where Ed25519 is unavailable — so server-side verification remains mandatory for auth flows.
+
 Current wallet support:
 
 - Browser extension wallets through Wallet Standard packages.
@@ -214,6 +233,24 @@ For complete runnable Vue and Nuxt examples that use this package through the fr
 - <a href="https://vue-solana-docs.vercel.app/examples/vue-vite" target="_blank" rel="noopener noreferrer"><code>examples/vue-vite</code></a>
 - <a href="https://vue-solana-docs.vercel.app/examples/nuxt" target="_blank" rel="noopener noreferrer"><code>examples/nuxt</code></a>
 
+## Bundle size and lean imports
+
+The root barrel (`@vue-solana/core`) intentionally re-exports the full `@solana/kit` mirror so apps do not need to install Kit directly. It is therefore roughly `117 KB` (minified) and is appropriate for most application code.
+
+Size-sensitive entries can avoid pulling the whole mirror by importing the narrow subpaths instead of the root:
+
+- `@vue-solana/core/address`
+- `@vue-solana/core/errors`
+- `@vue-solana/core/timeout`
+- `@vue-solana/core/clusters`
+- `@vue-solana/core/rpc`
+- `@vue-solana/core/types`
+- `@vue-solana/core/kit` (when you explicitly want the Kit surface)
+
+Avoid importing `@vue-solana/core/ios-wallet` or `@vue-solana/core/mobile-wallet` from lean code paths: they own `tweetnacl` and the Mobile Wallet Adapter protocol graph respectively. The `@vue-solana/core/mobile-wallet-support` subpath ships only the Android-support gate used to decide whether to lazy-load the MWA module.
+
+A repository-level guard (`scripts/check-lean-imports.mjs`, run via `pnpm size:packages`) verifies that these lean entries stay free of the heavy iOS/mobile-wallet edges. Add any new lean entrypoint there before publishing it. The same script walks every `packages/vue/dist/*.mjs` static import graph: the Vue root may reach the iOS wallet entry (known, tracked debt), but no Vue subpath may, and `mobile-wallet`, `qrcode`, `@solana-mobile/*`, and `buffer` must stay behind dynamic imports or their dedicated subpaths.
+
 ## AI Agent Skill
 
 If you use an AI coding agent, install the Vue Solana Agent Skill for package selection, setup patterns, wallet flow guidance, Solana-specific gotchas, and verification commands:

package/dist/action.d.ts

@@ -1,5 +1,4 @@
 import { ReactiveActionState, ReactiveActionStore } from '@solana/kit';
-export { isAbortError } from '@solana/kit';
 
 /**
  * Framework-agnostic action state machine for Solana async work.
@@ -21,8 +20,16 @@ declare function createSolanaActionStore<TArgs extends readonly unknown[], TResu
  * Snapshot shape bridged into reactive state by framework composables.
  */
 type SolanaActionState<TResult> = ReactiveActionState<TResult>;
-
+/**
+ * Detects abort errors from superseded action dispatches (Kit's
+ * `isAbortError`). Canonical name for this package.
+ */
 declare function isSolanaActionAborted(error: unknown): boolean;
+/**
+ * @deprecated Use {@link isSolanaActionAborted}. Kept as an alias for
+ * compatibility with earlier `@solana/kit` consumers.
+ */
+declare const isAbortError: typeof isSolanaActionAborted;
 
-export { createSolanaActionStore, isSolanaActionAborted };
+export { createSolanaActionStore, isAbortError, isSolanaActionAborted };
 export type { SolanaActionState, SolanaActionStore };

package/dist/action.mjs

@@ -1,11 +1,11 @@
-import { createReactiveActionStore, isAbortError } from '@solana/kit';
-export { isAbortError } from '@solana/kit';
+import { createReactiveActionStore, isAbortError as isAbortError$1 } from '@solana/kit';
 
 function createSolanaActionStore(fn) {
   return createReactiveActionStore(fn);
 }
 function isSolanaActionAborted(error) {
-  return isAbortError(error);
+  return isAbortError$1(error);
 }
+const isAbortError = isSolanaActionAborted;
 
-export { createSolanaActionStore, isSolanaActionAborted };
+export { createSolanaActionStore, isAbortError, isSolanaActionAborted };

package/dist/address.d.ts

@@ -1,9 +1,14 @@
 import { Address } from '@solana/kit';
 
 type AddressInput = Address | string | null | undefined;
+/**
+ * An address, ref-like `{ value }`, or getter — nested arbitrarily, since a
+ * getter may return a ref and a ref may hold a getter. `parseAddress`
+ * unwraps recursively; falsy values (`null`, `undefined`, `""`) mean absent.
+ */
 type MaybeAddressInput = AddressInput | {
-    value: AddressInput;
-} | (() => AddressInput);
+    value: MaybeAddressInput;
+} | (() => MaybeAddressInput);
 /**
  * Parse a Solana address from a Kit `Address`, string, ref, or getter.
  *

package/dist/address.mjs

@@ -20,12 +20,18 @@ function toAddressInput(value) {
     return null;
   }
   if (typeof value === "function") {
-    return value();
+    return toAddressInput(value());
   }
   if (typeof value === "string") {
     return value;
   }
-  return value.value;
+  if (typeof value === "object" && value !== null && "value" in value) {
+    return toAddressInput(value.value);
+  }
+  throw createSolanaError(
+    "INVALID_ADDRESS",
+    "Invalid Solana address: expected an address string, ref, getter, null, or undefined"
+  );
 }
 
 export { parseAddress };

package/dist/clusters.d.ts

@@ -1,4 +1,4 @@
-import { c as SolanaCluster } from './shared/core.C9vxHRXl.js';
+import { c as SolanaCluster } from './shared/core.BhF1J_tt.js';
 import '@solana/kit-plugin-rpc';
 import '@solana/kit';
 

package/dist/clusters.mjs

@@ -1,3 +1,5 @@
+import { createSolanaError } from './errors.mjs';
+
 const DEFAULT_CLUSTER = "devnet";
 const CLUSTER_ENDPOINTS = {
   mainnet: "https://api.mainnet.solana.com",
@@ -20,7 +22,14 @@ function getClusterWebSocketEndpoint(cluster = DEFAULT_CLUSTER) {
   return CLUSTER_WEBSOCKET_ENDPOINTS[cluster];
 }
 function getWebSocketEndpoint(endpoint) {
-  const url = new URL(endpoint);
+  let url;
+  try {
+    url = new URL(endpoint);
+  } catch (cause) {
+    throw createSolanaError("INVALID_INPUT", `Invalid Solana RPC endpoint: ${endpoint}`, {
+      cause
+    });
+  }
   if (url.protocol === "https:") {
     url.protocol = "wss:";
   } else if (url.protocol === "http:") {

package/dist/errors.d.ts

@@ -1,4 +1,4 @@
-type SolanaErrorCode = "NO_WALLET_SELECTED" | "WALLET_NOT_CONNECTED" | "WALLET_FEATURE_UNSUPPORTED" | "USER_REJECTED" | "INVALID_ADDRESS" | "TRANSACTION_TIMEOUT" | "RPC_FAILURE" | "STORAGE_FAILURE" | "INVALID_INPUT" | "DECRYPTION_FAILED";
+type SolanaErrorCode = "NO_WALLET_SELECTED" | "WALLET_NOT_CONNECTED" | "WALLET_FEATURE_UNSUPPORTED" | "WALLET_FAILURE" | "USER_REJECTED" | "INVALID_ADDRESS" | "TRANSACTION_TIMEOUT" | "TRANSACTION_NOT_FOUND" | "TRANSACTION_FAILED" | "RPC_FAILURE" | "STORAGE_FAILURE" | "INVALID_INPUT" | "DECRYPTION_FAILED" | "REDIRECT_TIMEOUT" | "MISSING_CLIENT_CAPABILITY" | "INVALID_SIGNATURE";
 interface SolanaErrorOptions {
     cause?: unknown;
     feature?: string;

package/dist/errors.mjs

@@ -13,7 +13,10 @@ function createSolanaError(code, message, options) {
   return new SolanaError(code, message, options);
 }
 function isSolanaError(error) {
-  return error instanceof SolanaError;
+  if (error instanceof SolanaError) {
+    return true;
+  }
+  return typeof error === "object" && error !== null && (error.name === "SolanaError" || error.name === "SolanaWalletError" || error.name === "MissingClientCapabilityError" || error.name === "PartialSignAndSendError") && typeof error.code === "string";
 }
 function normalizeSolanaError(cause, fallbackCode, fallbackMessage, options = {}) {
   if (isSolanaError(cause)) {

package/dist/index.d.ts

@@ -1,21 +1,14 @@
-/// <reference path="../types/buffer.d.ts" />
-export { SolanaActionState, SolanaActionStore, createSolanaActionStore, isSolanaActionAborted } from './action.js';
+export { SolanaActionState, SolanaActionStore, createSolanaActionStore, isAbortError, isSolanaActionAborted } from './action.js';
 export { DEFAULT_CLUSTER, getClusterEndpoint, getClusterWebSocketEndpoint, getWebSocketEndpoint } from './clusters.js';
 export { AddressInput, MaybeAddressInput, parseAddress } from './address.js';
-export { installSolanaBufferPolyfill } from './buffer-polyfill.js';
 export { SolanaError, SolanaErrorCode, SolanaErrorOptions, createSolanaError, isSolanaError, normalizeSolanaError } from './errors.js';
-export { C as ConfirmTransactionOptions, S as SendTransactionOptions, a as SolanaChain, b as SolanaClient, c as SolanaCluster, d as SolanaConfig, e as SolanaContext, f as SolanaSignInAccount, g as SolanaSignInInput, h as SolanaSignInResult, i as SolanaSignMessageResult, j as SolanaTransaction, k as SolanaWallet, l as SolanaWalletInfo, T as TransactionConfirmation, m as TransactionStatus, n as createSolanaClient } from './shared/core.C9vxHRXl.js';
-export { RegisterSolanaMobileWalletOptions, SolanaMobileWalletAppIdentity, getDefaultMobileWalletAppIdentity, registerSolanaMobileWallet } from './mobile-wallet.js';
+export { C as ConfirmTransactionOptions, S as SendTransactionOptions, a as SolanaChain, b as SolanaClient, c as SolanaCluster, d as SolanaConfig, e as SolanaContext, f as SolanaSignInAccount, g as SolanaSignInInput, h as SolanaSignInResult, i as SolanaSignMessageResult, j as SolanaTransaction, k as SolanaWallet, l as SolanaWalletInfo, T as TransactionConfirmation, m as TransactionStatus, n as createSolanaClient } from './shared/core.BhF1J_tt.js';
 export { createSolanaContext } from './rpc.js';
 export { TokenAccountInfo, TokenAccountsByOwnerOptions, TokenBalanceResult, getTokenAccount, getTokenAccountsByOwner, getTokenBalance } from './token-accounts.js';
 export { confirmTransactionSignature, signAndSendTransaction } from './transaction.js';
-export { withSolanaTimeout, withTimeout } from './timeout.js';
+export { WithTimeoutOptions, withSolanaTimeout, withTimeout } from './timeout.js';
 export { SolanaWalletError, SolanaWalletErrorCode, assertWalletCanSign, assertWalletCanSignAndSendTransactions, assertWalletCanSignIn, assertWalletCanSignMessage, assertWalletCanSignTransactions, assertWalletConnected, createNoWalletSelectedError, isWalletConnected } from './wallet.js';
 export * from '@solana/kit';
-export { isAbortError } from '@solana/kit';
-export { AdaptSolanaIosWalletOptions, GetSolanaIosWalletsOptions, IosWalletCallbackResult, IosWalletInfo, IosWalletMethod, SolanaIosWalletAppIdentity, adaptSolanaIosWallet, getDefaultIosWalletAppIdentity, getDefaultIosWalletRedirectUrl, getSolanaIosWallets, handleSolanaIosWalletCallback, isIosBrowser, isSolanaIosBrowserWalletSupported, isSolanaIosWalletInfo } from './ios-wallet.js';
-export { AdaptSolanaWalletOptions, SOLANA_CHAINS, SOLANA_MOBILE_WALLET_ADAPTER_WALLET_NAME, adaptSolanaStandardWallet, getRegisteredSolanaWallets, getSolanaChain, isSolanaStandardWallet, subscribeSolanaWallets } from './wallet-standard.js';
-export { Buffer } from 'buffer/';
-export { isSolanaMobileWalletSupported } from './mobile-wallet-support.js';
+export { AdaptSolanaWalletOptions, AdaptedSolanaWallet, SOLANA_CHAINS, SOLANA_MOBILE_WALLET_ADAPTER_WALLET_NAME, adaptSolanaStandardWallet, disconnectSolanaStandardWallet, getRegisteredSolanaWallets, getSolanaChain, isSolanaStandardWallet, subscribeSolanaWallets } from './wallet-standard.js';
 import '@solana/kit-plugin-rpc';
 import '@wallet-standard/base';

package/dist/index.mjs

@@ -1,18 +1,12 @@
-export { createSolanaActionStore, isSolanaActionAborted } from './action.mjs';
+export { createSolanaActionStore, isAbortError, isSolanaActionAborted } from './action.mjs';
 export { DEFAULT_CLUSTER, getClusterEndpoint, getClusterWebSocketEndpoint, getWebSocketEndpoint } from './clusters.mjs';
 export { parseAddress } from './address.mjs';
-export { installSolanaBufferPolyfill } from './buffer-polyfill.mjs';
 export { SolanaError, createSolanaError, isSolanaError, normalizeSolanaError } from './errors.mjs';
 export { createSolanaClient } from './kit.mjs';
-export { getDefaultMobileWalletAppIdentity, registerSolanaMobileWallet } from './mobile-wallet.mjs';
 export { createSolanaContext } from './rpc.mjs';
 export { getTokenAccount, getTokenAccountsByOwner, getTokenBalance } from './token-accounts.mjs';
 export { confirmTransactionSignature, signAndSendTransaction } from './transaction.mjs';
 export { withSolanaTimeout, withTimeout } from './timeout.mjs';
 export { SolanaWalletError, assertWalletCanSign, assertWalletCanSignAndSendTransactions, assertWalletCanSignIn, assertWalletCanSignMessage, assertWalletCanSignTransactions, assertWalletConnected, createNoWalletSelectedError, isWalletConnected } from './wallet.mjs';
 export * from '@solana/kit';
-export { isAbortError } from '@solana/kit';
-export { Buffer } from 'buffer/';
-export { S as SOLANA_CHAINS, a as SOLANA_MOBILE_WALLET_ADAPTER_WALLET_NAME, b as adaptSolanaStandardWallet, g as getRegisteredSolanaWallets, c as getSolanaChain, i as isSolanaStandardWallet, s as subscribeSolanaWallets } from './shared/core.DaUlAmcN.mjs';
-export { a as adaptSolanaIosWallet, g as getDefaultIosWalletAppIdentity, b as getDefaultIosWalletRedirectUrl, c as getSolanaIosWallets, h as handleSolanaIosWalletCallback, i as isIosBrowser, d as isSolanaIosBrowserWalletSupported, e as isSolanaIosWalletInfo } from './shared/core.DJsPYgx_.mjs';
-export { isSolanaMobileWalletSupported } from './mobile-wallet-support.mjs';
+export { S as SOLANA_CHAINS, a as SOLANA_MOBILE_WALLET_ADAPTER_WALLET_NAME, b as adaptSolanaStandardWallet, d as disconnectSolanaStandardWallet, g as getRegisteredSolanaWallets, c as getSolanaChain, i as isSolanaStandardWallet, s as subscribeSolanaWallets } from './shared/core.A4I__4IR.mjs';

package/dist/ios-wallet.d.ts

@@ -1,4 +1,4 @@
-import { a as SolanaChain, c as SolanaCluster, l as SolanaWalletInfo, k as SolanaWallet } from './shared/core.C9vxHRXl.js';
+import { a as SolanaChain, c as SolanaCluster, l as SolanaWalletInfo, k as SolanaWallet } from './shared/core.BhF1J_tt.js';
 import '@solana/kit-plugin-rpc';
 import '@solana/kit';
 
@@ -8,7 +8,6 @@ interface SolanaIosWalletAppIdentity {
     icon?: string;
 }
 interface GetSolanaIosWalletsOptions {
-    appIdentity?: SolanaIosWalletAppIdentity;
     redirectUrl?: string;
     chains?: readonly SolanaChain[];
     cluster?: SolanaCluster;