@bounded-sh/client 0.0.1 → 0.0.2

package/dist/{index-VGx-869x.js → index-BL-0ZKBl.js}

@@ -6472,7 +6472,7 @@ function getWebhookKeysUrl() {
 /**
  * True when init() configured a Bounded network (the Cloudflare-native stack).
  * Synchronous + non-blocking. Used to route reads/writes that behave differently
- * on Bounded vs the legacy Tarobase backend (e.g. `count`/`aggregate`, which on
+ * on Bounded vs the legacy backend (e.g. `count`/`aggregate`, which on
  * Bounded must use the deterministic server aggregation, not the legacy AI query).
  */
 function isBoundedNetwork() {
@@ -9327,7 +9327,7 @@ class WebSessionManager {
         // the RIGHT /session/refresh. Email overrides with humanAuthApiUrl; all
         // wallet/guest/signature flows default to authApiUrl (the bounded-auth issuer).
         const sessionIssuer = (issuer || config.authApiUrl || "").replace(/\/$/, "");
-        localStorage.setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(Object.assign({ address,
+        localStorage.setItem(this.BOUNDED_SESSION_STORAGE_KEY, JSON.stringify(Object.assign({ address,
             accessToken,
             idToken,
             refreshToken, appId: currentAppId }, (sessionIssuer ? { issuer: sessionIssuer } : {}))));
@@ -9338,7 +9338,7 @@ class WebSessionManager {
     static async getSession() {
         if (typeof window === "undefined")
             return null;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         if (!session)
             return null;
         const sessionObj = JSON.parse(session);
@@ -9362,7 +9362,7 @@ class WebSessionManager {
                     // Persist the ROTATED refresh token — the old one is now
                     // single-use spent; reusing it would revoke the family.
                     refreshed.refreshToken);
-                    const newSession = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+                    const newSession = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
                     if (!newSession)
                         return null;
                     const newObj = JSON.parse(newSession);
@@ -9386,14 +9386,14 @@ class WebSessionManager {
     static clearSession() {
         if (typeof window === "undefined")
             return;
-        localStorage.removeItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        localStorage.removeItem(this.BOUNDED_SESSION_STORAGE_KEY);
     }
     /* ------------------------------------------------------------------ */
     /* IS-AUTH                                                            */
     /* ------------------------------------------------------------------ */
     static isAuthenticated() {
         // NOTE: this remains synchronous to stay backward compatible
-        return !!localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        return !!localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
     }
     /* ------------------------------------------------------------------ */
     /* TOKEN HELPERS                                                      */
@@ -9401,13 +9401,13 @@ class WebSessionManager {
     static getIdToken() {
         if (typeof window === "undefined")
             return null;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         return session ? JSON.parse(session).idToken : null;
     }
     static getRefreshToken() {
         if (typeof window === "undefined")
             return null;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         return session ? JSON.parse(session).refreshToken : null;
     }
     /** The issuer base that minted this session (for routing silent refresh). */
@@ -9415,7 +9415,7 @@ class WebSessionManager {
         var _a;
         if (typeof window === "undefined")
             return null;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         return session ? ((_a = JSON.parse(session).issuer) !== null && _a !== void 0 ? _a : null) : null;
     }
     /* ------------------------------------------------------------------ */
@@ -9425,7 +9425,7 @@ class WebSessionManager {
         var _a;
         if (typeof window === "undefined")
             return;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         if (!session)
             return;
         const sessionObj = JSON.parse(session);
@@ -9442,10 +9442,10 @@ class WebSessionManager {
             sessionObj.refreshToken = refreshToken;
         }
         (_a = sessionObj.appId) !== null && _a !== void 0 ? _a : (sessionObj.appId = config.appId);
-        localStorage.setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
+        localStorage.setItem(this.BOUNDED_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
     }
 }
-WebSessionManager.TAROBASE_SESSION_STORAGE_KEY = "tarobase_session_storage";
+WebSessionManager.BOUNDED_SESSION_STORAGE_KEY = "bounded_session_storage";
 
 let _config = null;
 class ReactNativeSessionManager {
@@ -9538,7 +9538,7 @@ class ReactNativeSessionManager {
         // Issuer base for silent refresh (email overrides w/ humanAuthApiUrl; wallet/
         // guest default to authApiUrl). See WebSessionManager for the rationale.
         const sessionIssuer = (issuer || config.authApiUrl || "").replace(/\/$/, "");
-        this.getStorage().setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(Object.assign({ address,
+        this.getStorage().setItem(this.BOUNDED_SESSION_STORAGE_KEY, JSON.stringify(Object.assign({ address,
             accessToken,
             idToken,
             refreshToken, appId: currentAppId }, (sessionIssuer ? { issuer: sessionIssuer } : {}))));
@@ -9547,7 +9547,7 @@ class ReactNativeSessionManager {
     /* GET                                                                */
     /* ------------------------------------------------------------------ */
     static async getSession() {
-        const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         if (!session)
             return null;
         const sessionObj = JSON.parse(session);
@@ -9568,7 +9568,7 @@ class ReactNativeSessionManager {
                 const refreshed = await refreshSession(refreshToken, sessionObj.issuer);
                 if ((refreshed === null || refreshed === void 0 ? void 0 : refreshed.idToken) && (refreshed === null || refreshed === void 0 ? void 0 : refreshed.accessToken)) {
                     await this.updateIdTokenAndAccessToken(refreshed.idToken, refreshed.accessToken, refreshed.refreshToken);
-                    const newSession = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+                    const newSession = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
                     if (!newSession)
                         return null;
                     const newObj = JSON.parse(newSession);
@@ -9590,20 +9590,20 @@ class ReactNativeSessionManager {
     /* CLEAR                                                              */
     /* ------------------------------------------------------------------ */
     static clearSession() {
-        this.getStorage().removeItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        this.getStorage().removeItem(this.BOUNDED_SESSION_STORAGE_KEY);
     }
     /* ------------------------------------------------------------------ */
     /* IS-AUTH                                                            */
     /* ------------------------------------------------------------------ */
     static isAuthenticated() {
-        return !!this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        return !!this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
     }
     /* ------------------------------------------------------------------ */
     /* TOKEN HELPERS                                                      */
     /* ------------------------------------------------------------------ */
     static getIdToken() {
         try {
-            const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+            const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
             return session ? JSON.parse(session).idToken : null;
         }
         catch (_a) {
@@ -9614,7 +9614,7 @@ class ReactNativeSessionManager {
     static getIssuer() {
         var _a;
         try {
-            const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+            const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
             return session ? ((_a = JSON.parse(session).issuer) !== null && _a !== void 0 ? _a : null) : null;
         }
         catch (_b) {
@@ -9623,7 +9623,7 @@ class ReactNativeSessionManager {
     }
     static getRefreshToken() {
         try {
-            const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+            const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
             return session ? JSON.parse(session).refreshToken : null;
         }
         catch (_a) {
@@ -9635,7 +9635,7 @@ class ReactNativeSessionManager {
     /* ------------------------------------------------------------------ */
     static async updateIdTokenAndAccessToken(idToken, accessToken, refreshToken) {
         var _a;
-        const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         if (!session)
             return;
         const sessionObj = JSON.parse(session);
@@ -9651,10 +9651,10 @@ class ReactNativeSessionManager {
             sessionObj.refreshToken = refreshToken;
         }
         (_a = sessionObj.appId) !== null && _a !== void 0 ? _a : (sessionObj.appId = config.appId);
-        this.getStorage().setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
+        this.getStorage().setItem(this.BOUNDED_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
     }
 }
-ReactNativeSessionManager.TAROBASE_SESSION_STORAGE_KEY = "tarobase_session_storage";
+ReactNativeSessionManager.BOUNDED_SESSION_STORAGE_KEY = "bounded_session_storage";
 
 /**
  * Return the active CLIENT session manager for the current runtime.
@@ -10175,9 +10175,9 @@ async function buildSetDocumentsTransaction(connection, idl, anchorProvider, pay
 /*  ENV helpers                                                       */
 /* ------------------------------------------------------------------ */
 // Canonical `BOUNDED_PRIVATE_KEY` (matches the CLI); legacy
-// `TAROBASE_SOLANA_KEYPAIR` still honored. Only consulted when no explicit
+// `BOUNDED_SOLANA_KEYPAIR` still honored. Only consulted when no explicit
 // keypair was provided (createWalletClient passes one).
-const ENV_KEYPAIRS = ["BOUNDED_PRIVATE_KEY", "TAROBASE_SOLANA_KEYPAIR"];
+const ENV_KEYPAIRS = ["BOUNDED_PRIVATE_KEY", "BOUNDED_SOLANA_KEYPAIR"];
 function loadKeypairFromEnv() {
     let secret;
     let found;
@@ -10300,7 +10300,7 @@ var serverSessionManager = /*#__PURE__*/Object.freeze({
 });
 
 /**
- * Safe base64 helpers for tarobase-core.
+ * Safe base64 helpers for bounded-core.
  *
  * Uses the global atob/btoa when available (browser, RN with polyfill),
  * falls back to the 'buffer' package (Node.js / SSR / RN without polyfill).
@@ -10480,7 +10480,7 @@ axiosRetry(apiClient, {
     shouldResetTimeout: true,
     onRetry: (retryCount, error, requestConfig) => {
         var _a;
-        console.warn(`[tarobase-sdk] retry ${retryCount} for ${(_a = requestConfig.method) === null || _a === void 0 ? void 0 : _a.toUpperCase()} ${requestConfig.url} — ${error.code || error.message}`);
+        console.warn(`[bounded-sdk] retry ${retryCount} for ${(_a = requestConfig.method) === null || _a === void 0 ? void 0 : _a.toUpperCase()} ${requestConfig.url} — ${error.code || error.message}`);
     },
 });
 const refreshInFlight = new Map();
@@ -10539,8 +10539,8 @@ async function makeApiRequest(method, urlPath, data, _overrides) {
             : await createAuthHeader(config.isServer);
         const headers = Object.assign({ "Content-Type": "application/json", "X-Public-App-Id": config.appId, "X-App-Id": config.appId }, authHeader);
         if (typeof window !== "undefined" &&
-            window.CUSTOM_TAROBASE_APP_ID_HEADER) {
-            const customAppId = window.CUSTOM_TAROBASE_APP_ID_HEADER;
+            window.CUSTOM_BOUNDED_APP_ID_HEADER) {
+            const customAppId = window.CUSTOM_BOUNDED_APP_ID_HEADER;
             if (customAppId) {
                 headers["X-App-Id"] = customAppId;
             }
@@ -10799,7 +10799,7 @@ function parseAggregateValue(result) {
  * Count items in a collection path. Returns a numeric result.
  *
  * This uses the AI query engine with a count-specific prompt prefix,
- * so TaroBase will generate a $count aggregation pipeline and return
+ * so Bounded will generate a $count aggregation pipeline and return
  * just the count rather than full documents.
  *
  * IMPORTANT: This only works for collections where the read policy is "true".
@@ -11324,10 +11324,10 @@ async function setMany(many, options) {
         let documents = [];
         const pathsToInvalidate = new Set();
         for (const { path, document: documentWithReservedFields } of many) {
-            // for setting, we should remove any pieces of the document that start with 'tarobase_' as they are internal and shouldn't be updated. The API would block it if it is one of the reserved ones
+            // for setting, we should remove any pieces of the document that start with '_' as they are internal and shouldn't be updated. The API would block it if it is one of the reserved ones
             let document = documentWithReservedFields;
             if (documentWithReservedFields) {
-                document = Object.fromEntries(Object.entries(documentWithReservedFields).filter(([key]) => !key.startsWith('tarobase_')));
+                document = Object.fromEntries(Object.entries(documentWithReservedFields).filter(([key]) => !key.startsWith('_')));
             }
             const normalizedPath = path.startsWith("/") ? path.slice(1) : path;
             pathsToInvalidate.add(normalizedPath);
@@ -11451,7 +11451,7 @@ async function setMany(many, options) {
         var _a, _b, _c, _d, _e;
         // NOTE (backwards-compat revert): a program-allowlist on server-supplied
         // `preInstructions` was tried here for the audit-8 SOL-drain concern, but it
-        // broke legitimate onchain DeFi flows — tarobase routes Phoenix, Jupiter/swap,
+        // broke legitimate onchain DeFi flows — bounded routes Phoenix, Jupiter/swap,
         // SPL-Token and ATA-creation instructions through standard-path preInstructions
         // (see sol-helper remaining-accounts-extractor). A correct audit-8 fix must be
         // DeFi-aware (e.g. block ONLY a raw System Transfer/TransferWithSeed, never a
@@ -11535,10 +11535,10 @@ async function setMany(many, options) {
         const transaction = web3_js.VersionedTransaction.deserialize(txBytes);
         // Validate the transaction before signing: ensure only allowed programs
         // and no unauthorized System program instructions (e.g., SOL transfers)
-        const TAROBASE_PROGRAM = 'poof4b5pk1L9tmThvBmaABjcyjfhFGbMbQP5BXk2QZp';
+        const BOUNDED_PROGRAM = 'poof4b5pk1L9tmThvBmaABjcyjfhFGbMbQP5BXk2QZp';
         const COMPUTE_BUDGET = 'ComputeBudget111111111111111111111111111111';
         const SYSTEM_PROGRAM = '11111111111111111111111111111111';
-        const ALLOWED_PROGRAMS = new Set([TAROBASE_PROGRAM, COMPUTE_BUDGET, SYSTEM_PROGRAM]);
+        const ALLOWED_PROGRAMS = new Set([BOUNDED_PROGRAM, COMPUTE_BUDGET, SYSTEM_PROGRAM]);
         // System program instruction discriminators (first 4 bytes, little-endian u32)
         const SYSTEM_TRANSFER = 2; // Transfer instruction index
         const SYSTEM_TRANSFER_WITH_SEED = 11;
@@ -12132,8 +12132,8 @@ async function getOrCreateConnection(appId, isServer, routePath, authTokenProvid
         if (appId && appId !== config.appId) {
             wsUrl.searchParams.append('appId', appId);
         }
-        else if (typeof window !== 'undefined' && window.CUSTOM_TAROBASE_APP_ID_HEADER) {
-            wsUrl.searchParams.append('appId', window.CUSTOM_TAROBASE_APP_ID_HEADER);
+        else if (typeof window !== 'undefined' && window.CUSTOM_BOUNDED_APP_ID_HEADER) {
+            wsUrl.searchParams.append('appId', window.CUSTOM_BOUNDED_APP_ID_HEADER);
         }
         else {
             wsUrl.searchParams.append('appId', config.appId);
@@ -12993,7 +12993,7 @@ function serverTimestamp() {
 // ---------------------------------------------------------------------------
 // IDB helpers (lazy-loaded, non-blocking)
 // ---------------------------------------------------------------------------
-const IDB_NAME$1 = 'tarobase-realtime';
+const IDB_NAME$1 = 'bounded-realtime';
 const IDB_STORE$1 = 'subscriptions';
 const IDB_VERSION = 1;
 let idbPromise = null;
@@ -13431,10 +13431,10 @@ class RealtimeStore {
         const normalizedPath = path.startsWith('/') ? path.slice(1) : path;
         const collectionPath = this.getCollectionPath(normalizedPath);
         const optimisticDoc = Object.assign(Object.assign({ _id: normalizedPath, pathId: normalizedPath }, resolvedDoc), { 
-            // System timestamp field name differs by stack: the Bounded worker stamps
-            // the neutral `_updatedAt`; legacy Tarobase stamps `tarobase_updated_at`.
+            // System timestamp field name: the Bounded worker stamps the neutral
+            // `_updatedAt`; the underscore-prefixed `_updated_at` metadata mirror.
             // Match it so the optimistic doc lines up with the server's confirmation.
-            [isBoundedNetwork() ? '_updatedAt' : 'tarobase_updated_at']: Date.now() });
+            [isBoundedNetwork() ? '_updatedAt' : '_updated_at']: Date.now() });
         const sub = this.findSubscriptionByPath(collectionPath);
         let prevDoc = null;
         if (sub) {
@@ -18548,7 +18548,7 @@ let currentAuthProvider = null;
 let currentAuthMethod = null;
 let initConfig = null;
 // --- localStorage helpers: track which auth method the user last logged in with ---
-const STORED_AUTH_METHOD_KEY$1 = 'tarobase_last_auth_method';
+const STORED_AUTH_METHOD_KEY$1 = 'bounded_last_auth_method';
 function getStoredAuthMethod() {
     try {
         return getPlatform().storage.getItem(STORED_AUTH_METHOD_KEY$1);
@@ -19301,7 +19301,7 @@ async function loadDependencies() {
         const [reactModule, reactDomModule, phantomModule] = await Promise.all([
             import('react'),
             import('react-dom/client'),
-            Promise.resolve().then(function () { return require('./index-sKqrgk0t.js'); })
+            Promise.resolve().then(function () { return require('./index-BgAygrhE.js'); })
         ]);
         // Extract default export from ESM module namespace
         // Dynamic import() returns { default: Module, ...exports }, not the module directly
@@ -19491,7 +19491,7 @@ class PhantomWalletProvider {
                     };
                 }
             }, [phantom, phantom === null || phantom === void 0 ? void 0 : phantom.isConnected, phantom === null || phantom === void 0 ? void 0 : phantom.addresses, phantom === null || phantom === void 0 ? void 0 : phantom.isLoading, connect, disconnect, isDisconnecting, modal, modal.isOpened, solana, solana === null || solana === void 0 ? void 0 : solana.connected, solanaHook.isAvailable, connectError]);
-            // Auto-login: If connected but no Tarobase session, try to create one.
+            // Auto-login: If connected but no Bounded session, try to create one.
             // This handles social login callbacks where user returns from OAuth already connected.
             React.useEffect(() => {
                 const autoCreateSession = async () => {
@@ -19505,7 +19505,7 @@ class PhantomWalletProvider {
                     // and clears it on logout, so this guard is correct in both
                     // steady-state and post-logout cases.
                     try {
-                        if (getPlatform().storage.getItem('tarobase_last_auth_method') === 'mobile-wallet-adapter') {
+                        if (getPlatform().storage.getItem('bounded_last_auth_method') === 'mobile-wallet-adapter') {
                             return;
                         }
                     }
@@ -19543,7 +19543,7 @@ class PhantomWalletProvider {
                         // in flight. If MWA owns the auth method now, abort before we
                         // overwrite its session (or its in-flight session).
                         try {
-                            if (getPlatform().storage.getItem('tarobase_last_auth_method') === 'mobile-wallet-adapter') {
+                            if (getPlatform().storage.getItem('bounded_last_auth_method') === 'mobile-wallet-adapter') {
                                 return;
                             }
                         }
@@ -19551,7 +19551,7 @@ class PhantomWalletProvider {
                         await WebSessionManager.storeSession(publicKey, createSessionResult.accessToken, createSessionResult.idToken, createSessionResult.refreshToken);
                         // Mark auth method so clearIncompatibleSession() doesn't wipe this session
                         try {
-                            getPlatform().storage.setItem('tarobase_last_auth_method', 'phantom');
+                            getPlatform().storage.setItem('bounded_last_auth_method', 'phantom');
                         }
                         catch (_d) { }
                         setCurrentUser({ provider: that, address: publicKey });
@@ -19649,7 +19649,7 @@ class PhantomWalletProvider {
                         await WebSessionManager.storeSession(publicKey, createSessionResult.accessToken, createSessionResult.idToken, createSessionResult.refreshToken);
                         // Mark auth method so clearIncompatibleSession() doesn't wipe this session
                         try {
-                            getPlatform().storage.setItem('tarobase_last_auth_method', 'phantom');
+                            getPlatform().storage.setItem('bounded_last_auth_method', 'phantom');
                         }
                         catch (_b) { }
                         const user = { provider: that, address: publicKey };
@@ -20264,8 +20264,8 @@ class PhantomWalletProvider {
         try {
             const remainingAccounts = convertRemainingAccounts(solTransactionData.txArgs[0].remainingAccounts);
             let app_id = solTransactionData.appId;
-            if (typeof window !== 'undefined' && window.CUSTOM_TAROBASE_APP_ID_HEADER) {
-                app_id = window.CUSTOM_TAROBASE_APP_ID_HEADER;
+            if (typeof window !== 'undefined' && window.CUSTOM_BOUNDED_APP_ID_HEADER) {
+                app_id = window.CUSTOM_BOUNDED_APP_ID_HEADER;
             }
             if (!app_id) {
                 throw new Error("App ID is required");
@@ -20682,7 +20682,7 @@ var phantomWalletProvider = /*#__PURE__*/Object.freeze({
  * doesn't force the user back into Phantom's approval flow when the
  * underlying wallet authorization is still valid.
  */
-const MWA_AUTH_TOKEN_STORAGE_KEY = 'tarobase_mwa_auth_token';
+const MWA_AUTH_TOKEN_STORAGE_KEY = 'bounded_mwa_auth_token';
 /**
  * Detects whether the current environment is a mobile browser capable of
  * Mobile Wallet Adapter (MWA) communication.
@@ -20696,7 +20696,7 @@ function isMobileWalletAvailable() {
     return detectAndroid();
 }
 const ED25519_SIGNATURE_LENGTH = 64;
-const STORED_AUTH_METHOD_KEY = 'tarobase_last_auth_method';
+const STORED_AUTH_METHOD_KEY = 'bounded_last_auth_method';
 const MWA_AUTH_METHOD = 'mobile-wallet-adapter';
 function findMwaError(e, maxDepth = 5) {
     var _a;
@@ -20799,7 +20799,7 @@ async function withMwaAssociationRetry(fn) {
  * no `blur` event fires, the protocol's `getDetectionPromise` (3000ms
  * timeout, line 433) rejects, and we get `ERROR_WALLET_NOT_FOUND`.
  *
- * Fix: show a Tarobase-controlled modal between the two transacts. When the
+ * Fix: show a Bounded-controlled modal between the two transacts. When the
  * user taps the modal's "Sign in" button, that tap IS a fresh user
  * activation. We invoke the sign function directly inside the click handler
  * — no `await` between the tap and the call — so the activation propagates
@@ -20837,7 +20837,7 @@ async function awaitSignInGestureAndSign(theme, signFn, noResultError = 'MWA ret
         const closeColor = isDark ? '#71717a' : '#a1a1aa';
         const fontStack = '-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif';
         const overlay = document.createElement('div');
-        overlay.setAttribute('data-tarobase-mwa-gesture', 'true');
+        overlay.setAttribute('data-bounded-mwa-gesture', 'true');
         overlay.style.cssText = [
             'position: fixed',
             'inset: 0',
@@ -21202,7 +21202,7 @@ async function registerMobileWalletAdapter(config) {
     if (typeof window === 'undefined')
         return;
     try {
-        const walletStandardMobile = await Promise.resolve().then(function () { return require('./index.browser-BJZ7fYwv.js'); });
+        const walletStandardMobile = await Promise.resolve().then(function () { return require('./index.browser-D8u31irV.js'); });
         const registerMwa = walletStandardMobile.registerMwa || ((_a = walletStandardMobile.default) === null || _a === void 0 ? void 0 : _a.registerMwa);
         if (!registerMwa) {
             console.warn('[SolanaMobileWallet] registerMwa not found in @solana-mobile/wallet-standard-mobile');
@@ -21260,7 +21260,7 @@ async function registerMobileWalletAdapter(config) {
  * does.
  *
  * Notes on UX: login uses two wallet popups in succession — `standard:connect`
- * (authorize) and `solana:signMessage` (sign the Tarobase nonce). The
+ * (authorize) and `solana:signMessage` (sign the Bounded nonce). The
  * previous implementation combined both inside a single `transact` callback;
  * splitting them is the cost of going through wallet-standard, and is
  * acceptable given the alternative was broken on Seeker.
@@ -21303,9 +21303,9 @@ class SolanaMobileWalletProvider {
         // entirely via `config.appIdentity.uri`.
         const fallbackUri = hasDOM
             ? getPlatform().getLocationOrigin()
-            : 'tarobase://app';
+            : 'bounded://app';
         this.appIdentity = config.appIdentity || {
-            name: 'TaroBase App',
+            name: 'Bounded App',
             uri: fallbackUri,
         };
         this.cluster = config.cluster || 'mainnet-beta';
@@ -21341,7 +21341,7 @@ class SolanaMobileWalletProvider {
     async ensureWallet() {
         if (this.wallet)
             return this.wallet;
-        const mod = await Promise.resolve().then(function () { return require('./index.browser-BJZ7fYwv.js'); });
+        const mod = await Promise.resolve().then(function () { return require('./index.browser-D8u31irV.js'); });
         const chain = mapChainToWalletStandard(this.cluster);
         this.wallet = new mod.LocalSolanaMobileWalletAdapterWallet({
             appIdentity: this.appIdentity,
@@ -21361,7 +21361,7 @@ class SolanaMobileWalletProvider {
         return this.wallet;
     }
     /**
-     * Ensure the wallet has an active authorization. After a Tarobase session
+     * Ensure the wallet has an active authorization. After a Bounded session
      * is restored from storage on cold-start, `wallet.accounts` is empty until
      * we silently reconnect from the AuthorizationCache. If the cache is also
      * empty, fall back to interactive `login()` (which surfaces the three-stage
@@ -21472,7 +21472,7 @@ class SolanaMobileWalletProvider {
             }
             const account = auth.accounts[0];
             // account.address is base64-encoded per MWA spec; convert to
-            // the base58 form Tarobase + the rest of the SDK use.
+            // the base58 form Bounded + the rest of the SDK use.
             const base58Addr = new web3_js.PublicKey(bufferExports.Buffer.from(account.address, 'base64')).toBase58();
             // Reuse session if already valid for this address — skip the
             // signMessages roundtrip entirely.
@@ -21509,7 +21509,7 @@ class SolanaMobileWalletProvider {
             setCurrentUser(user);
             return user;
         }
-        // Create Tarobase session on the server.
+        // Create Bounded session on the server.
         if (!result.signatureBase64 || !result.messageText) {
             throw new Error('MWA login completed without signature');
         }
@@ -21538,7 +21538,7 @@ class SolanaMobileWalletProvider {
             }
             const wallet = await this.ensureWallet();
             // Quick-check: wallet may already have authorization (e.g. from a
-            // previous in-page login) and a matching Tarobase session — skip
+            // previous in-page login) and a matching Bounded session — skip
             // popups in that case.
             if (wallet.accounts.length > 0) {
                 const accountPubkey = new web3_js.PublicKey(wallet.accounts[0].publicKey);
@@ -21569,14 +21569,14 @@ class SolanaMobileWalletProvider {
             const account = accounts[0];
             const accountPubkey = new web3_js.PublicKey(account.publicKey);
             const base58Addr = accountPubkey.toBase58();
-            // If we happen to already have a matching Tarobase session, reuse it.
+            // If we happen to already have a matching Bounded session, reuse it.
             const existingSession = await getActiveSessionManager().getSession();
             if (existingSession && existingSession.address === base58Addr) {
                 const user = { provider: this, address: base58Addr };
                 setCurrentUser(user);
                 return user;
             }
-            // Wallet popup #2: sign the Tarobase nonce message.
+            // Wallet popup #2: sign the Bounded nonce message.
             //
             // We cannot call signMessageFeat.signMessage() directly here:
             // it would run as a JS continuation from the connect() resolve,
@@ -21589,7 +21589,7 @@ class SolanaMobileWalletProvider {
             // protocol's 3-second getDetectionPromise rejects with
             // ERROR_WALLET_NOT_FOUND.
             //
-            // Insert a Tarobase modal: the user's tap on "Sign in" provides a
+            // Insert a Bounded modal: the user's tap on "Sign in" provides a
             // fresh activation, and signMessage is invoked synchronously
             // inside the click handler so the activation propagates.
             // C1: fetch the nonce HERE (after connect), not before — a pre-connect
@@ -21606,7 +21606,7 @@ class SolanaMobileWalletProvider {
             }
             const { signature: sigBytes } = signResult;
             const signatureBase64 = bufferExports.Buffer.from(sigBytes).toString('base64');
-            // Create Tarobase session on the server.
+            // Create Bounded session on the server.
             const createSessionResult = await createSessionWithSignature(base58Addr, messageText, signatureBase64);
             await getActiveSessionManager().storeSession(base58Addr, createSessionResult.accessToken, createSessionResult.idToken, createSessionResult.refreshToken);
             // Auth-method marker is already 'mobile-wallet-adapter' from above.
@@ -21995,8 +21995,8 @@ class SolanaMobileWalletProvider {
         try {
             const remainingAccounts = convertRemainingAccounts(solTransactionData.txArgs[0].remainingAccounts);
             let app_id = solTransactionData.appId;
-            if (typeof window !== 'undefined' && window.CUSTOM_TAROBASE_APP_ID_HEADER) {
-                app_id = window.CUSTOM_TAROBASE_APP_ID_HEADER;
+            if (typeof window !== 'undefined' && window.CUSTOM_BOUNDED_APP_ID_HEADER) {
+                app_id = window.CUSTOM_BOUNDED_APP_ID_HEADER;
             }
             if (!app_id) {
                 throw new Error('App ID is required');
@@ -22603,8 +22603,8 @@ class PrivyWalletProvider {
         const connection = new web3_js.Connection(rpcUrl, "confirmed");
         const remainingAccounts = convertRemainingAccounts(solTransactionData.txArgs[0].remainingAccounts);
         let app_id = solTransactionData.appId;
-        if (typeof window !== 'undefined' && window.CUSTOM_TAROBASE_APP_ID_HEADER) {
-            const customAppId = window.CUSTOM_TAROBASE_APP_ID_HEADER;
+        if (typeof window !== 'undefined' && window.CUSTOM_BOUNDED_APP_ID_HEADER) {
+            const customAppId = window.CUSTOM_BOUNDED_APP_ID_HEADER;
             if (customAppId) {
                 app_id = customAppId;
             }
@@ -23215,7 +23215,7 @@ class PrivyExpoProvider {
         if (!wallet) {
             throw new Error('No embedded Solana wallet found after login. Ensure embeddedWallets.solana.createOnLogin is configured.');
         }
-        // Mint a Tarobase session by having the Privy Solana wallet sign the
+        // Mint a Bounded session by having the Privy Solana wallet sign the
         // standard SIWS challenge — identical to Phantom/MWA, so the backend mints
         // the session via the proven wallet-signature path (no Privy-specific
         // token verification needed).
@@ -23235,8 +23235,8 @@ class PrivyExpoProvider {
         const connection = new web3_js.Connection(rpcUrl, 'confirmed');
         const remainingAccounts = convertRemainingAccounts(solTransactionData.txArgs[0].remainingAccounts);
         let app_id = solTransactionData.appId;
-        if (typeof globalThis !== 'undefined' && globalThis.CUSTOM_TAROBASE_APP_ID_HEADER) {
-            app_id = globalThis.CUSTOM_TAROBASE_APP_ID_HEADER;
+        if (typeof globalThis !== 'undefined' && globalThis.CUSTOM_BOUNDED_APP_ID_HEADER) {
+            app_id = globalThis.CUSTOM_BOUNDED_APP_ID_HEADER;
         }
         if (!app_id) {
             throw new Error('App ID is required');
@@ -23390,7 +23390,7 @@ class PrivyExpoProvider {
     // Private helpers
     // -------------------------------------------------------------------
     /**
-     * Mint a Tarobase session from a Privy Solana wallet by signing the canonical
+     * Mint a Bounded session from a Privy Solana wallet by signing the canonical
      * SIWS challenge (nonce -> genSolanaMessage -> wallet.signMessage). This reuses
      * createSessionWithSignature — the exact path Phantom, the mobile wallet
      * adapter, and the guest device-key use — so the bounded /session issuer mints
@@ -23569,4 +23569,4 @@ exports.wsGet = wsGet;
 exports.wsGetMany = wsGetMany;
 exports.wsQuery = wsQuery;
 exports.wsSet = wsSet;
-//# sourceMappingURL=index-VGx-869x.js.map
+//# sourceMappingURL=index-BL-0ZKBl.js.map