@bounded-sh/client 0.0.1 → 0.0.2

package/dist/{index.native-B5IBOdv_.js → index.native-NgHStPq0.js}

@@ -6469,7 +6469,7 @@ function getWebhookKeysUrl() {
 /**
  * True when init() configured a Bounded network (the Cloudflare-native stack).
  * Synchronous + non-blocking. Used to route reads/writes that behave differently
- * on Bounded vs the legacy Tarobase backend (e.g. `count`/`aggregate`, which on
+ * on Bounded vs the legacy backend (e.g. `count`/`aggregate`, which on
  * Bounded must use the deterministic server aggregation, not the legacy AI query).
  */
 function isBoundedNetwork() {
@@ -9324,7 +9324,7 @@ class WebSessionManager {
         // the RIGHT /session/refresh. Email overrides with humanAuthApiUrl; all
         // wallet/guest/signature flows default to authApiUrl (the bounded-auth issuer).
         const sessionIssuer = (issuer || config.authApiUrl || "").replace(/\/$/, "");
-        localStorage.setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(Object.assign({ address,
+        localStorage.setItem(this.BOUNDED_SESSION_STORAGE_KEY, JSON.stringify(Object.assign({ address,
             accessToken,
             idToken,
             refreshToken, appId: currentAppId }, (sessionIssuer ? { issuer: sessionIssuer } : {}))));
@@ -9335,7 +9335,7 @@ class WebSessionManager {
     static async getSession() {
         if (typeof window === "undefined")
             return null;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         if (!session)
             return null;
         const sessionObj = JSON.parse(session);
@@ -9359,7 +9359,7 @@ class WebSessionManager {
                     // Persist the ROTATED refresh token — the old one is now
                     // single-use spent; reusing it would revoke the family.
                     refreshed.refreshToken);
-                    const newSession = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+                    const newSession = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
                     if (!newSession)
                         return null;
                     const newObj = JSON.parse(newSession);
@@ -9383,14 +9383,14 @@ class WebSessionManager {
     static clearSession() {
         if (typeof window === "undefined")
             return;
-        localStorage.removeItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        localStorage.removeItem(this.BOUNDED_SESSION_STORAGE_KEY);
     }
     /* ------------------------------------------------------------------ */
     /* IS-AUTH                                                            */
     /* ------------------------------------------------------------------ */
     static isAuthenticated() {
         // NOTE: this remains synchronous to stay backward compatible
-        return !!localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        return !!localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
     }
     /* ------------------------------------------------------------------ */
     /* TOKEN HELPERS                                                      */
@@ -9398,13 +9398,13 @@ class WebSessionManager {
     static getIdToken() {
         if (typeof window === "undefined")
             return null;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         return session ? JSON.parse(session).idToken : null;
     }
     static getRefreshToken() {
         if (typeof window === "undefined")
             return null;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         return session ? JSON.parse(session).refreshToken : null;
     }
     /** The issuer base that minted this session (for routing silent refresh). */
@@ -9412,7 +9412,7 @@ class WebSessionManager {
         var _a;
         if (typeof window === "undefined")
             return null;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         return session ? ((_a = JSON.parse(session).issuer) !== null && _a !== void 0 ? _a : null) : null;
     }
     /* ------------------------------------------------------------------ */
@@ -9422,7 +9422,7 @@ class WebSessionManager {
         var _a;
         if (typeof window === "undefined")
             return;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         if (!session)
             return;
         const sessionObj = JSON.parse(session);
@@ -9439,10 +9439,10 @@ class WebSessionManager {
             sessionObj.refreshToken = refreshToken;
         }
         (_a = sessionObj.appId) !== null && _a !== void 0 ? _a : (sessionObj.appId = config.appId);
-        localStorage.setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
+        localStorage.setItem(this.BOUNDED_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
     }
 }
-WebSessionManager.TAROBASE_SESSION_STORAGE_KEY = "tarobase_session_storage";
+WebSessionManager.BOUNDED_SESSION_STORAGE_KEY = "bounded_session_storage";
 
 let _config = null;
 class ReactNativeSessionManager {
@@ -9535,7 +9535,7 @@ class ReactNativeSessionManager {
         // Issuer base for silent refresh (email overrides w/ humanAuthApiUrl; wallet/
         // guest default to authApiUrl). See WebSessionManager for the rationale.
         const sessionIssuer = (issuer || config.authApiUrl || "").replace(/\/$/, "");
-        this.getStorage().setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(Object.assign({ address,
+        this.getStorage().setItem(this.BOUNDED_SESSION_STORAGE_KEY, JSON.stringify(Object.assign({ address,
             accessToken,
             idToken,
             refreshToken, appId: currentAppId }, (sessionIssuer ? { issuer: sessionIssuer } : {}))));
@@ -9544,7 +9544,7 @@ class ReactNativeSessionManager {
     /* GET                                                                */
     /* ------------------------------------------------------------------ */
     static async getSession() {
-        const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         if (!session)
             return null;
         const sessionObj = JSON.parse(session);
@@ -9565,7 +9565,7 @@ class ReactNativeSessionManager {
                 const refreshed = await refreshSession(refreshToken, sessionObj.issuer);
                 if ((refreshed === null || refreshed === void 0 ? void 0 : refreshed.idToken) && (refreshed === null || refreshed === void 0 ? void 0 : refreshed.accessToken)) {
                     await this.updateIdTokenAndAccessToken(refreshed.idToken, refreshed.accessToken, refreshed.refreshToken);
-                    const newSession = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+                    const newSession = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
                     if (!newSession)
                         return null;
                     const newObj = JSON.parse(newSession);
@@ -9587,20 +9587,20 @@ class ReactNativeSessionManager {
     /* CLEAR                                                              */
     /* ------------------------------------------------------------------ */
     static clearSession() {
-        this.getStorage().removeItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        this.getStorage().removeItem(this.BOUNDED_SESSION_STORAGE_KEY);
     }
     /* ------------------------------------------------------------------ */
     /* IS-AUTH                                                            */
     /* ------------------------------------------------------------------ */
     static isAuthenticated() {
-        return !!this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        return !!this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
     }
     /* ------------------------------------------------------------------ */
     /* TOKEN HELPERS                                                      */
     /* ------------------------------------------------------------------ */
     static getIdToken() {
         try {
-            const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+            const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
             return session ? JSON.parse(session).idToken : null;
         }
         catch (_a) {
@@ -9611,7 +9611,7 @@ class ReactNativeSessionManager {
     static getIssuer() {
         var _a;
         try {
-            const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+            const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
             return session ? ((_a = JSON.parse(session).issuer) !== null && _a !== void 0 ? _a : null) : null;
         }
         catch (_b) {
@@ -9620,7 +9620,7 @@ class ReactNativeSessionManager {
     }
     static getRefreshToken() {
         try {
-            const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+            const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
             return session ? JSON.parse(session).refreshToken : null;
         }
         catch (_a) {
@@ -9632,7 +9632,7 @@ class ReactNativeSessionManager {
     /* ------------------------------------------------------------------ */
     static async updateIdTokenAndAccessToken(idToken, accessToken, refreshToken) {
         var _a;
-        const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         if (!session)
             return;
         const sessionObj = JSON.parse(session);
@@ -9648,10 +9648,10 @@ class ReactNativeSessionManager {
             sessionObj.refreshToken = refreshToken;
         }
         (_a = sessionObj.appId) !== null && _a !== void 0 ? _a : (sessionObj.appId = config.appId);
-        this.getStorage().setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
+        this.getStorage().setItem(this.BOUNDED_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
     }
 }
-ReactNativeSessionManager.TAROBASE_SESSION_STORAGE_KEY = "tarobase_session_storage";
+ReactNativeSessionManager.BOUNDED_SESSION_STORAGE_KEY = "bounded_session_storage";
 
 /**
  * Return the active CLIENT session manager for the current runtime.
@@ -10172,9 +10172,9 @@ async function buildSetDocumentsTransaction(connection, idl, anchorProvider, pay
 /*  ENV helpers                                                       */
 /* ------------------------------------------------------------------ */
 // Canonical `BOUNDED_PRIVATE_KEY` (matches the CLI); legacy
-// `TAROBASE_SOLANA_KEYPAIR` still honored. Only consulted when no explicit
+// `BOUNDED_SOLANA_KEYPAIR` still honored. Only consulted when no explicit
 // keypair was provided (createWalletClient passes one).
-const ENV_KEYPAIRS = ["BOUNDED_PRIVATE_KEY", "TAROBASE_SOLANA_KEYPAIR"];
+const ENV_KEYPAIRS = ["BOUNDED_PRIVATE_KEY", "BOUNDED_SOLANA_KEYPAIR"];
 function loadKeypairFromEnv() {
     let secret;
     let found;
@@ -10297,7 +10297,7 @@ var serverSessionManager = /*#__PURE__*/Object.freeze({
 });
 
 /**
- * Safe base64 helpers for tarobase-core.
+ * Safe base64 helpers for bounded-core.
  *
  * Uses the global atob/btoa when available (browser, RN with polyfill),
  * falls back to the 'buffer' package (Node.js / SSR / RN without polyfill).
@@ -10477,7 +10477,7 @@ axiosRetry(apiClient, {
     shouldResetTimeout: true,
     onRetry: (retryCount, error, requestConfig) => {
         var _a;
-        console.warn(`[tarobase-sdk] retry ${retryCount} for ${(_a = requestConfig.method) === null || _a === void 0 ? void 0 : _a.toUpperCase()} ${requestConfig.url} — ${error.code || error.message}`);
+        console.warn(`[bounded-sdk] retry ${retryCount} for ${(_a = requestConfig.method) === null || _a === void 0 ? void 0 : _a.toUpperCase()} ${requestConfig.url} — ${error.code || error.message}`);
     },
 });
 const refreshInFlight = new Map();
@@ -10536,8 +10536,8 @@ async function makeApiRequest(method, urlPath, data, _overrides) {
             : await createAuthHeader(config.isServer);
         const headers = Object.assign({ "Content-Type": "application/json", "X-Public-App-Id": config.appId, "X-App-Id": config.appId }, authHeader);
         if (typeof window !== "undefined" &&
-            window.CUSTOM_TAROBASE_APP_ID_HEADER) {
-            const customAppId = window.CUSTOM_TAROBASE_APP_ID_HEADER;
+            window.CUSTOM_BOUNDED_APP_ID_HEADER) {
+            const customAppId = window.CUSTOM_BOUNDED_APP_ID_HEADER;
             if (customAppId) {
                 headers["X-App-Id"] = customAppId;
             }
@@ -10796,7 +10796,7 @@ function parseAggregateValue(result) {
  * Count items in a collection path. Returns a numeric result.
  *
  * This uses the AI query engine with a count-specific prompt prefix,
- * so TaroBase will generate a $count aggregation pipeline and return
+ * so Bounded will generate a $count aggregation pipeline and return
  * just the count rather than full documents.
  *
  * IMPORTANT: This only works for collections where the read policy is "true".
@@ -11321,10 +11321,10 @@ async function setMany(many, options) {
         let documents = [];
         const pathsToInvalidate = new Set();
         for (const { path, document: documentWithReservedFields } of many) {
-            // for setting, we should remove any pieces of the document that start with 'tarobase_' as they are internal and shouldn't be updated. The API would block it if it is one of the reserved ones
+            // for setting, we should remove any pieces of the document that start with '_' as they are internal and shouldn't be updated. The API would block it if it is one of the reserved ones
             let document = documentWithReservedFields;
             if (documentWithReservedFields) {
-                document = Object.fromEntries(Object.entries(documentWithReservedFields).filter(([key]) => !key.startsWith('tarobase_')));
+                document = Object.fromEntries(Object.entries(documentWithReservedFields).filter(([key]) => !key.startsWith('_')));
             }
             const normalizedPath = path.startsWith("/") ? path.slice(1) : path;
             pathsToInvalidate.add(normalizedPath);
@@ -11448,7 +11448,7 @@ async function setMany(many, options) {
         var _a, _b, _c, _d, _e;
         // NOTE (backwards-compat revert): a program-allowlist on server-supplied
         // `preInstructions` was tried here for the audit-8 SOL-drain concern, but it
-        // broke legitimate onchain DeFi flows — tarobase routes Phoenix, Jupiter/swap,
+        // broke legitimate onchain DeFi flows — bounded routes Phoenix, Jupiter/swap,
         // SPL-Token and ATA-creation instructions through standard-path preInstructions
         // (see sol-helper remaining-accounts-extractor). A correct audit-8 fix must be
         // DeFi-aware (e.g. block ONLY a raw System Transfer/TransferWithSeed, never a
@@ -11532,10 +11532,10 @@ async function setMany(many, options) {
         const transaction = web3_js.VersionedTransaction.deserialize(txBytes);
         // Validate the transaction before signing: ensure only allowed programs
         // and no unauthorized System program instructions (e.g., SOL transfers)
-        const TAROBASE_PROGRAM = 'poof4b5pk1L9tmThvBmaABjcyjfhFGbMbQP5BXk2QZp';
+        const BOUNDED_PROGRAM = 'poof4b5pk1L9tmThvBmaABjcyjfhFGbMbQP5BXk2QZp';
         const COMPUTE_BUDGET = 'ComputeBudget111111111111111111111111111111';
         const SYSTEM_PROGRAM = '11111111111111111111111111111111';
-        const ALLOWED_PROGRAMS = new Set([TAROBASE_PROGRAM, COMPUTE_BUDGET, SYSTEM_PROGRAM]);
+        const ALLOWED_PROGRAMS = new Set([BOUNDED_PROGRAM, COMPUTE_BUDGET, SYSTEM_PROGRAM]);
         // System program instruction discriminators (first 4 bytes, little-endian u32)
         const SYSTEM_TRANSFER = 2; // Transfer instruction index
         const SYSTEM_TRANSFER_WITH_SEED = 11;
@@ -12129,8 +12129,8 @@ async function getOrCreateConnection(appId, isServer, routePath, authTokenProvid
         if (appId && appId !== config.appId) {
             wsUrl.searchParams.append('appId', appId);
         }
-        else if (typeof window !== 'undefined' && window.CUSTOM_TAROBASE_APP_ID_HEADER) {
-            wsUrl.searchParams.append('appId', window.CUSTOM_TAROBASE_APP_ID_HEADER);
+        else if (typeof window !== 'undefined' && window.CUSTOM_BOUNDED_APP_ID_HEADER) {
+            wsUrl.searchParams.append('appId', window.CUSTOM_BOUNDED_APP_ID_HEADER);
         }
         else {
             wsUrl.searchParams.append('appId', config.appId);
@@ -12990,7 +12990,7 @@ function serverTimestamp() {
 // ---------------------------------------------------------------------------
 // IDB helpers (lazy-loaded, non-blocking)
 // ---------------------------------------------------------------------------
-const IDB_NAME$1 = 'tarobase-realtime';
+const IDB_NAME$1 = 'bounded-realtime';
 const IDB_STORE$1 = 'subscriptions';
 const IDB_VERSION = 1;
 let idbPromise = null;
@@ -13428,10 +13428,10 @@ class RealtimeStore {
         const normalizedPath = path.startsWith('/') ? path.slice(1) : path;
         const collectionPath = this.getCollectionPath(normalizedPath);
         const optimisticDoc = Object.assign(Object.assign({ _id: normalizedPath, pathId: normalizedPath }, resolvedDoc), { 
-            // System timestamp field name differs by stack: the Bounded worker stamps
-            // the neutral `_updatedAt`; legacy Tarobase stamps `tarobase_updated_at`.
+            // System timestamp field name: the Bounded worker stamps the neutral
+            // `_updatedAt`; the underscore-prefixed `_updated_at` metadata mirror.
             // Match it so the optimistic doc lines up with the server's confirmation.
-            [isBoundedNetwork() ? '_updatedAt' : 'tarobase_updated_at']: Date.now() });
+            [isBoundedNetwork() ? '_updatedAt' : '_updated_at']: Date.now() });
         const sub = this.findSubscriptionByPath(collectionPath);
         let prevDoc = null;
         if (sub) {
@@ -18545,7 +18545,7 @@ let currentAuthProvider = null;
 let currentAuthMethod = null;
 let initConfig = null;
 // --- localStorage helpers: track which auth method the user last logged in with ---
-const STORED_AUTH_METHOD_KEY = 'tarobase_last_auth_method';
+const STORED_AUTH_METHOD_KEY = 'bounded_last_auth_method';
 function getStoredAuthMethod() {
     try {
         return getPlatform().storage.getItem(STORED_AUTH_METHOD_KEY);
@@ -18593,17 +18593,17 @@ function clearIncompatibleSession() {
 // Lazy loaders for web-only providers.
 // Using dynamic import() ensures Metro (RN) never resolves these modules.
 async function loadPhantomWalletProvider() {
-    const mod = await Promise.resolve().then(function () { return require('./phantom-wallet-provider-CDLyxrih.js'); });
+    const mod = await Promise.resolve().then(function () { return require('./phantom-wallet-provider-Dy48LSdU.js'); });
     return { PhantomWalletProvider: mod.PhantomWalletProvider };
 }
 // Web Privy provider (depends on react-dom + @privy-io/react-auth). Lazy so Metro
 // never bundles it into the RN build — RN uses the @privy-io/expo provider instead.
 async function loadPrivyWalletProvider() {
-    const mod = await Promise.resolve().then(function () { return require('./privy-wallet-provider-DiHHTDbZ.js'); });
+    const mod = await Promise.resolve().then(function () { return require('./privy-wallet-provider-CiKtBJ5M.js'); });
     return mod.PrivyWalletProvider;
 }
 async function loadSolanaMobileWalletProvider() {
-    const mod = await Promise.resolve().then(function () { return require('./solana-mobile-wallet-provider-BYMfFjZb.js'); });
+    const mod = await Promise.resolve().then(function () { return require('./solana-mobile-wallet-provider-k_YdrTJZ.js'); });
     return mod.SolanaMobileWalletProvider;
 }
 async function hotSwapToMWAProvider(config) {
@@ -19323,7 +19323,7 @@ class PrivyExpoProvider {
         if (!wallet) {
             throw new Error('No embedded Solana wallet found after login. Ensure embeddedWallets.solana.createOnLogin is configured.');
         }
-        // Mint a Tarobase session by having the Privy Solana wallet sign the
+        // Mint a Bounded session by having the Privy Solana wallet sign the
         // standard SIWS challenge — identical to Phantom/MWA, so the backend mints
         // the session via the proven wallet-signature path (no Privy-specific
         // token verification needed).
@@ -19343,8 +19343,8 @@ class PrivyExpoProvider {
         const connection = new web3_js.Connection(rpcUrl, 'confirmed');
         const remainingAccounts = convertRemainingAccounts(solTransactionData.txArgs[0].remainingAccounts);
         let app_id = solTransactionData.appId;
-        if (typeof globalThis !== 'undefined' && globalThis.CUSTOM_TAROBASE_APP_ID_HEADER) {
-            app_id = globalThis.CUSTOM_TAROBASE_APP_ID_HEADER;
+        if (typeof globalThis !== 'undefined' && globalThis.CUSTOM_BOUNDED_APP_ID_HEADER) {
+            app_id = globalThis.CUSTOM_BOUNDED_APP_ID_HEADER;
         }
         if (!app_id) {
             throw new Error('App ID is required');
@@ -19498,7 +19498,7 @@ class PrivyExpoProvider {
     // Private helpers
     // -------------------------------------------------------------------
     /**
-     * Mint a Tarobase session from a Privy Solana wallet by signing the canonical
+     * Mint a Bounded session from a Privy Solana wallet by signing the canonical
      * SIWS challenge (nonce -> genSolanaMessage -> wallet.signMessage). This reuses
      * createSessionWithSignature — the exact path Phantom, the mobile wallet
      * adapter, and the guest device-key use — so the bounded /session issuer mints
@@ -19681,4 +19681,4 @@ exports.wsGet = wsGet;
 exports.wsGetMany = wsGetMany;
 exports.wsQuery = wsQuery;
 exports.wsSet = wsSet;
-//# sourceMappingURL=index.native-B5IBOdv_.js.map
+//# sourceMappingURL=index.native-NgHStPq0.js.map