@bounded-sh/core 0.0.1 → 0.0.2

package/dist/index.mjs

@@ -75,7 +75,7 @@ function getWebhookKeysUrl() {
 /**
  * True when init() configured a Bounded network (the Cloudflare-native stack).
  * Synchronous + non-blocking. Used to route reads/writes that behave differently
- * on Bounded vs the legacy Tarobase backend (e.g. `count`/`aggregate`, which on
+ * on Bounded vs the legacy backend (e.g. `count`/`aggregate`, which on
  * Bounded must use the deterministic server aggregation, not the legacy AI query).
  */
 function isBoundedNetwork() {
@@ -2930,7 +2930,7 @@ class WebSessionManager {
         // the RIGHT /session/refresh. Email overrides with humanAuthApiUrl; all
         // wallet/guest/signature flows default to authApiUrl (the bounded-auth issuer).
         const sessionIssuer = (issuer || config.authApiUrl || "").replace(/\/$/, "");
-        localStorage.setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(Object.assign({ address,
+        localStorage.setItem(this.BOUNDED_SESSION_STORAGE_KEY, JSON.stringify(Object.assign({ address,
             accessToken,
             idToken,
             refreshToken, appId: currentAppId }, (sessionIssuer ? { issuer: sessionIssuer } : {}))));
@@ -2941,7 +2941,7 @@ class WebSessionManager {
     static async getSession() {
         if (typeof window === "undefined")
             return null;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         if (!session)
             return null;
         const sessionObj = JSON.parse(session);
@@ -2965,7 +2965,7 @@ class WebSessionManager {
                     // Persist the ROTATED refresh token — the old one is now
                     // single-use spent; reusing it would revoke the family.
                     refreshed.refreshToken);
-                    const newSession = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+                    const newSession = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
                     if (!newSession)
                         return null;
                     const newObj = JSON.parse(newSession);
@@ -2989,14 +2989,14 @@ class WebSessionManager {
     static clearSession() {
         if (typeof window === "undefined")
             return;
-        localStorage.removeItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        localStorage.removeItem(this.BOUNDED_SESSION_STORAGE_KEY);
     }
     /* ------------------------------------------------------------------ */
     /* IS-AUTH                                                            */
     /* ------------------------------------------------------------------ */
     static isAuthenticated() {
         // NOTE: this remains synchronous to stay backward compatible
-        return !!localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        return !!localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
     }
     /* ------------------------------------------------------------------ */
     /* TOKEN HELPERS                                                      */
@@ -3004,13 +3004,13 @@ class WebSessionManager {
     static getIdToken() {
         if (typeof window === "undefined")
             return null;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         return session ? JSON.parse(session).idToken : null;
     }
     static getRefreshToken() {
         if (typeof window === "undefined")
             return null;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         return session ? JSON.parse(session).refreshToken : null;
     }
     /** The issuer base that minted this session (for routing silent refresh). */
@@ -3018,7 +3018,7 @@ class WebSessionManager {
         var _a;
         if (typeof window === "undefined")
             return null;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         return session ? ((_a = JSON.parse(session).issuer) !== null && _a !== void 0 ? _a : null) : null;
     }
     /* ------------------------------------------------------------------ */
@@ -3028,7 +3028,7 @@ class WebSessionManager {
         var _a;
         if (typeof window === "undefined")
             return;
-        const session = localStorage.getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = localStorage.getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         if (!session)
             return;
         const sessionObj = JSON.parse(session);
@@ -3045,10 +3045,10 @@ class WebSessionManager {
             sessionObj.refreshToken = refreshToken;
         }
         (_a = sessionObj.appId) !== null && _a !== void 0 ? _a : (sessionObj.appId = config.appId);
-        localStorage.setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
+        localStorage.setItem(this.BOUNDED_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
     }
 }
-WebSessionManager.TAROBASE_SESSION_STORAGE_KEY = "tarobase_session_storage";
+WebSessionManager.BOUNDED_SESSION_STORAGE_KEY = "bounded_session_storage";
 
 let _config = null;
 class ReactNativeSessionManager {
@@ -3141,7 +3141,7 @@ class ReactNativeSessionManager {
         // Issuer base for silent refresh (email overrides w/ humanAuthApiUrl; wallet/
         // guest default to authApiUrl). See WebSessionManager for the rationale.
         const sessionIssuer = (issuer || config.authApiUrl || "").replace(/\/$/, "");
-        this.getStorage().setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(Object.assign({ address,
+        this.getStorage().setItem(this.BOUNDED_SESSION_STORAGE_KEY, JSON.stringify(Object.assign({ address,
             accessToken,
             idToken,
             refreshToken, appId: currentAppId }, (sessionIssuer ? { issuer: sessionIssuer } : {}))));
@@ -3150,7 +3150,7 @@ class ReactNativeSessionManager {
     /* GET                                                                */
     /* ------------------------------------------------------------------ */
     static async getSession() {
-        const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         if (!session)
             return null;
         const sessionObj = JSON.parse(session);
@@ -3171,7 +3171,7 @@ class ReactNativeSessionManager {
                 const refreshed = await refreshSession(refreshToken, sessionObj.issuer);
                 if ((refreshed === null || refreshed === void 0 ? void 0 : refreshed.idToken) && (refreshed === null || refreshed === void 0 ? void 0 : refreshed.accessToken)) {
                     await this.updateIdTokenAndAccessToken(refreshed.idToken, refreshed.accessToken, refreshed.refreshToken);
-                    const newSession = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+                    const newSession = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
                     if (!newSession)
                         return null;
                     const newObj = JSON.parse(newSession);
@@ -3193,20 +3193,20 @@ class ReactNativeSessionManager {
     /* CLEAR                                                              */
     /* ------------------------------------------------------------------ */
     static clearSession() {
-        this.getStorage().removeItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        this.getStorage().removeItem(this.BOUNDED_SESSION_STORAGE_KEY);
     }
     /* ------------------------------------------------------------------ */
     /* IS-AUTH                                                            */
     /* ------------------------------------------------------------------ */
     static isAuthenticated() {
-        return !!this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        return !!this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
     }
     /* ------------------------------------------------------------------ */
     /* TOKEN HELPERS                                                      */
     /* ------------------------------------------------------------------ */
     static getIdToken() {
         try {
-            const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+            const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
             return session ? JSON.parse(session).idToken : null;
         }
         catch (_a) {
@@ -3217,7 +3217,7 @@ class ReactNativeSessionManager {
     static getIssuer() {
         var _a;
         try {
-            const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+            const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
             return session ? ((_a = JSON.parse(session).issuer) !== null && _a !== void 0 ? _a : null) : null;
         }
         catch (_b) {
@@ -3226,7 +3226,7 @@ class ReactNativeSessionManager {
     }
     static getRefreshToken() {
         try {
-            const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+            const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
             return session ? JSON.parse(session).refreshToken : null;
         }
         catch (_a) {
@@ -3238,7 +3238,7 @@ class ReactNativeSessionManager {
     /* ------------------------------------------------------------------ */
     static async updateIdTokenAndAccessToken(idToken, accessToken, refreshToken) {
         var _a;
-        const session = this.getStorage().getItem(this.TAROBASE_SESSION_STORAGE_KEY);
+        const session = this.getStorage().getItem(this.BOUNDED_SESSION_STORAGE_KEY);
         if (!session)
             return;
         const sessionObj = JSON.parse(session);
@@ -3254,10 +3254,10 @@ class ReactNativeSessionManager {
             sessionObj.refreshToken = refreshToken;
         }
         (_a = sessionObj.appId) !== null && _a !== void 0 ? _a : (sessionObj.appId = config.appId);
-        this.getStorage().setItem(this.TAROBASE_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
+        this.getStorage().setItem(this.BOUNDED_SESSION_STORAGE_KEY, JSON.stringify(sessionObj));
     }
 }
-ReactNativeSessionManager.TAROBASE_SESSION_STORAGE_KEY = "tarobase_session_storage";
+ReactNativeSessionManager.BOUNDED_SESSION_STORAGE_KEY = "bounded_session_storage";
 
 /**
  * Return the active CLIENT session manager for the current runtime.
@@ -3778,9 +3778,9 @@ async function buildSetDocumentsTransaction(connection, idl, anchorProvider, pay
 /*  ENV helpers                                                       */
 /* ------------------------------------------------------------------ */
 // Canonical `BOUNDED_PRIVATE_KEY` (matches the CLI); legacy
-// `TAROBASE_SOLANA_KEYPAIR` still honored. Only consulted when no explicit
+// `BOUNDED_SOLANA_KEYPAIR` still honored. Only consulted when no explicit
 // keypair was provided (createWalletClient passes one).
-const ENV_KEYPAIRS = ["BOUNDED_PRIVATE_KEY", "TAROBASE_SOLANA_KEYPAIR"];
+const ENV_KEYPAIRS = ["BOUNDED_PRIVATE_KEY", "BOUNDED_SOLANA_KEYPAIR"];
 function loadKeypairFromEnv() {
     let secret;
     let found;
@@ -3903,7 +3903,7 @@ var serverSessionManager = /*#__PURE__*/Object.freeze({
 });
 
 /**
- * Safe base64 helpers for tarobase-core.
+ * Safe base64 helpers for bounded-core.
  *
  * Uses the global atob/btoa when available (browser, RN with polyfill),
  * falls back to the 'buffer' package (Node.js / SSR / RN without polyfill).
@@ -4083,7 +4083,7 @@ axiosRetry(apiClient, {
     shouldResetTimeout: true,
     onRetry: (retryCount, error, requestConfig) => {
         var _a;
-        console.warn(`[tarobase-sdk] retry ${retryCount} for ${(_a = requestConfig.method) === null || _a === void 0 ? void 0 : _a.toUpperCase()} ${requestConfig.url} — ${error.code || error.message}`);
+        console.warn(`[bounded-sdk] retry ${retryCount} for ${(_a = requestConfig.method) === null || _a === void 0 ? void 0 : _a.toUpperCase()} ${requestConfig.url} — ${error.code || error.message}`);
     },
 });
 const refreshInFlight = new Map();
@@ -4142,8 +4142,8 @@ async function makeApiRequest(method, urlPath, data, _overrides) {
             : await createAuthHeader(config.isServer);
         const headers = Object.assign({ "Content-Type": "application/json", "X-Public-App-Id": config.appId, "X-App-Id": config.appId }, authHeader);
         if (typeof window !== "undefined" &&
-            window.CUSTOM_TAROBASE_APP_ID_HEADER) {
-            const customAppId = window.CUSTOM_TAROBASE_APP_ID_HEADER;
+            window.CUSTOM_BOUNDED_APP_ID_HEADER) {
+            const customAppId = window.CUSTOM_BOUNDED_APP_ID_HEADER;
             if (customAppId) {
                 headers["X-App-Id"] = customAppId;
             }
@@ -4402,7 +4402,7 @@ function parseAggregateValue(result) {
  * Count items in a collection path. Returns a numeric result.
  *
  * This uses the AI query engine with a count-specific prompt prefix,
- * so TaroBase will generate a $count aggregation pipeline and return
+ * so Bounded will generate a $count aggregation pipeline and return
  * just the count rather than full documents.
  *
  * IMPORTANT: This only works for collections where the read policy is "true".
@@ -4927,10 +4927,10 @@ async function setMany(many, options) {
         let documents = [];
         const pathsToInvalidate = new Set();
         for (const { path, document: documentWithReservedFields } of many) {
-            // for setting, we should remove any pieces of the document that start with 'tarobase_' as they are internal and shouldn't be updated. The API would block it if it is one of the reserved ones
+            // for setting, we should remove any pieces of the document that start with '_' as they are internal and shouldn't be updated. The API would block it if it is one of the reserved ones
             let document = documentWithReservedFields;
             if (documentWithReservedFields) {
-                document = Object.fromEntries(Object.entries(documentWithReservedFields).filter(([key]) => !key.startsWith('tarobase_')));
+                document = Object.fromEntries(Object.entries(documentWithReservedFields).filter(([key]) => !key.startsWith('_')));
             }
             const normalizedPath = path.startsWith("/") ? path.slice(1) : path;
             pathsToInvalidate.add(normalizedPath);
@@ -5054,7 +5054,7 @@ async function setMany(many, options) {
         var _a, _b, _c, _d, _e;
         // NOTE (backwards-compat revert): a program-allowlist on server-supplied
         // `preInstructions` was tried here for the audit-8 SOL-drain concern, but it
-        // broke legitimate onchain DeFi flows — tarobase routes Phoenix, Jupiter/swap,
+        // broke legitimate onchain DeFi flows — bounded routes Phoenix, Jupiter/swap,
         // SPL-Token and ATA-creation instructions through standard-path preInstructions
         // (see sol-helper remaining-accounts-extractor). A correct audit-8 fix must be
         // DeFi-aware (e.g. block ONLY a raw System Transfer/TransferWithSeed, never a
@@ -5138,10 +5138,10 @@ async function setMany(many, options) {
         const transaction = VersionedTransaction.deserialize(txBytes);
         // Validate the transaction before signing: ensure only allowed programs
         // and no unauthorized System program instructions (e.g., SOL transfers)
-        const TAROBASE_PROGRAM = 'poof4b5pk1L9tmThvBmaABjcyjfhFGbMbQP5BXk2QZp';
+        const BOUNDED_PROGRAM = 'poof4b5pk1L9tmThvBmaABjcyjfhFGbMbQP5BXk2QZp';
         const COMPUTE_BUDGET = 'ComputeBudget111111111111111111111111111111';
         const SYSTEM_PROGRAM = '11111111111111111111111111111111';
-        const ALLOWED_PROGRAMS = new Set([TAROBASE_PROGRAM, COMPUTE_BUDGET, SYSTEM_PROGRAM]);
+        const ALLOWED_PROGRAMS = new Set([BOUNDED_PROGRAM, COMPUTE_BUDGET, SYSTEM_PROGRAM]);
         // System program instruction discriminators (first 4 bytes, little-endian u32)
         const SYSTEM_TRANSFER = 2; // Transfer instruction index
         const SYSTEM_TRANSFER_WITH_SEED = 11;
@@ -5735,8 +5735,8 @@ async function getOrCreateConnection(appId, isServer, routePath, authTokenProvid
         if (appId && appId !== config.appId) {
             wsUrl.searchParams.append('appId', appId);
         }
-        else if (typeof window !== 'undefined' && window.CUSTOM_TAROBASE_APP_ID_HEADER) {
-            wsUrl.searchParams.append('appId', window.CUSTOM_TAROBASE_APP_ID_HEADER);
+        else if (typeof window !== 'undefined' && window.CUSTOM_BOUNDED_APP_ID_HEADER) {
+            wsUrl.searchParams.append('appId', window.CUSTOM_BOUNDED_APP_ID_HEADER);
         }
         else {
             wsUrl.searchParams.append('appId', config.appId);
@@ -6596,7 +6596,7 @@ function serverTimestamp() {
 // ---------------------------------------------------------------------------
 // IDB helpers (lazy-loaded, non-blocking)
 // ---------------------------------------------------------------------------
-const IDB_NAME = 'tarobase-realtime';
+const IDB_NAME = 'bounded-realtime';
 const IDB_STORE = 'subscriptions';
 const IDB_VERSION = 1;
 let idbPromise = null;
@@ -7034,10 +7034,10 @@ class RealtimeStore {
         const normalizedPath = path.startsWith('/') ? path.slice(1) : path;
         const collectionPath = this.getCollectionPath(normalizedPath);
         const optimisticDoc = Object.assign(Object.assign({ _id: normalizedPath, pathId: normalizedPath }, resolvedDoc), { 
-            // System timestamp field name differs by stack: the Bounded worker stamps
-            // the neutral `_updatedAt`; legacy Tarobase stamps `tarobase_updated_at`.
+            // System timestamp field name: the Bounded worker stamps the neutral
+            // `_updatedAt`; the underscore-prefixed `_updated_at` metadata mirror.
             // Match it so the optimistic doc lines up with the server's confirmation.
-            [isBoundedNetwork() ? '_updatedAt' : 'tarobase_updated_at']: Date.now() });
+            [isBoundedNetwork() ? '_updatedAt' : '_updated_at']: Date.now() });
         const sub = this.findSubscriptionByPath(collectionPath);
         let prevDoc = null;
         if (sub) {