@bounded-sh/client 0.0.22 → 0.0.23

package/README.md

@@ -50,13 +50,13 @@ Install the SDK via npm:
 
   
 ```bash
-npm install @tarobase/js-sdk
+npm install @bounded-sh/client
 ```
   
 
 Or with Yarn:
 ```bash
-yarn add @tarobase/js-sdk
+yarn add @bounded-sh/client
 ```
 
   
@@ -66,31 +66,38 @@ yarn add @tarobase/js-sdk
 
   
 
-Before using the SDK, initialize it with your **Application ID** and the one auth method this app intends to use. You can obtain your `appId` by creating an application on the [Tarobase Console](https://console.tarobase.com). The console also allows you to configure your application's policies, including data storage preferences (on-chain or off-chain) and data schemas.
+Before using the SDK, initialize it with your **Application ID** and the one auth method this app intends to use. Missing `authMethod` fails closed so examples do not silently select the wrong identity path. Use `authMethod: 'email'` for Bounded Auth email OTP, `authMethod: 'phantom'` for Solana wallet auth, or `authMethod: 'none'` for public unauthenticated reads only.
 
   
 ```typescript
-import { init } from '@tarobase/js-sdk';
+import { init } from '@bounded-sh/client';
 
-init({ appId: 'YOUR_APP_ID', authMethod: 'email' });
+await init({ appId: 'YOUR_APP_ID', authMethod: 'email' });
 ```  
 
 ### Authentication
 
-  
-To authenticate users, use the `login` function:
+For email OTP, initialize with `authMethod: 'email'` and call `login()` for the
+inline email-code modal. OAuth/social providers use the hosted redirect or popup
+helpers, which bind the returned token to the app id and registered redirect URI.
 
 ```typescript
-import { login } from '@tarobase/js-sdk';
+import { login, loginWithRedirect, completeLoginFromRedirect } from '@bounded-sh/client';
+
+// Email OTP:
+await login();
+
+// Hosted OAuth/social or hosted chooser:
+await loginWithRedirect({ redirectUri: 'https://yourapp.com/auth/callback', methods: ['email'] });
 
-// Start the login process
-login();
+// On your callback page, on load:
+const user = await completeLoginFromRedirect();
 ```
 
 You can also listen for authentication state changes:
   
 ```typescript
-import { onAuthStateChanged } from '@tarobase/js-sdk';
+import { onAuthStateChanged } from '@bounded-sh/client';
 
 onAuthStateChanged((user) => {
 	if (user) {
@@ -109,7 +116,7 @@ onAuthStateChanged((user) => {
 
 
 ```typescript
-import { getCurrentUser } from '@tarobase/js-sdk';
+import { getCurrentUser } from '@bounded-sh/client';
 
 const user = await getCurrentUser();
 if (user) {
@@ -123,7 +130,7 @@ if (user) {
 
 ### Set Data
 ```typescript
-import { set } from '@tarobase/js-sdk';
+import { set } from '@bounded-sh/client';
 
 const path = 'path/to/data';
 const data = { key: 'value' };
@@ -171,7 +178,7 @@ The `set` and `get` functions automatically handle whether data is stored **on-c
 ### Subscribe
 
 ```typescript
-import { subscribe } from '@tarobase/js-sdk';
+import { subscribe } from '@bounded-sh/client';
 
 // Subscribe to a single document
 const unsubscribe = await subscribe('users/123/profile', {
@@ -194,7 +201,7 @@ await unsubscribe();
 ### Get Data
 
 ```typescript
-import { get } from '@tarobase/js-sdk';
+import { get } from '@bounded-sh/client';
 
 // Read a single document
 const message = await get('messages/abc123');
@@ -223,7 +230,7 @@ console.log('Messages:', recent);
 ### Counting, Aggregation, Search, and Joins
 
 ```typescript
-import { count, aggregate, queryAggregate, search, get } from '@tarobase/js-sdk';
+import { count, aggregate, queryAggregate, search, get } from '@bounded-sh/client';
 
 // Count matching documents
 const { value: openCount } = await count('orders', { filter: { status: 'open' } });
@@ -246,7 +253,7 @@ const projects = await get('projects', { shape: { owner: {} } });
 Use `getMany` to efficiently fetch multiple documents in a single request:
 
 ```typescript
-import { getMany } from '@tarobase/js-sdk';
+import { getMany } from '@bounded-sh/client';
 
 // Fetch multiple documents at once (max 30 paths)
 const results = await getMany([

package/dist/index.js

@@ -4246,6 +4246,14 @@ function tokenField(data, snake, camel) {
     const value = (_a = data === null || data === void 0 ? void 0 : data[snake]) !== null && _a !== void 0 ? _a : data === null || data === void 0 ? void 0 : data[camel];
     return typeof value === 'string' ? value : '';
 }
+function boundedRefreshTokenField(data) {
+    for (const key of ['bounded_refresh_token', 'boundedRefreshToken', 'refreshToken']) {
+        const value = data === null || data === void 0 ? void 0 : data[key];
+        if (typeof value === 'string' && value.length > 0)
+            return value;
+    }
+    return '';
+}
 async function issuerBase() {
     const cfg = await core.getConfig();
     return (cfg.humanAuthApiUrl || 'https://auth.bounded.sh').replace(/\/$/, '');
@@ -4350,7 +4358,7 @@ async function finishGuestLinkIfPending(socialIdToken) {
             return null; // link failed -> keep the plain social session
         const upgraded = userFromIdToken(idToken);
         const accessToken = tokenField(data, 'access_token', 'accessToken') || idToken;
-        const refreshToken = tokenField(data, 'refresh_token', 'refreshToken');
+        const refreshToken = boundedRefreshTokenField(data);
         await sessionManager().storeSession(String(upgraded.address || ''), accessToken, idToken, refreshToken, base);
         setCurrentUser(upgraded);
         return upgraded;
@@ -4491,7 +4499,7 @@ async function exchangeCode(code, verifier, redirectUri) {
     if (!idToken)
         throw new Error('No id_token returned from the token endpoint');
     const accessToken = tokenField(data, 'access_token', 'accessToken') || idToken;
-    const refreshToken = tokenField(data, 'refresh_token', 'refreshToken');
+    const refreshToken = boundedRefreshTokenField(data);
     const user = userFromIdToken(idToken);
     await sessionManager().storeSession(String(user.address || ''), accessToken, idToken, refreshToken, base);
     try {