@bounded-sh/core 0.0.1

package/dist/utils/utils.d.ts

@@ -0,0 +1,41 @@
+export declare function getMessageStatement(): Promise<string>;
+export declare function createAuthHeader(isServer: boolean): Promise<{
+    Authorization: string;
+} | null>;
+export declare function getUserInfo(isServer: boolean): Promise<any>;
+/**
+ * The identity fields exposed on the SDK `User` object, derived from a verified
+ * idToken. Mirrors the realtime-worker's auth.ts so the client surfaces exactly
+ * the same { id, address, email } the backend authenticates as.
+ */
+export interface UserIdentity {
+    /** @user.id — universal stable identity (custom:userId, else custom:walletAddress). */
+    id: string | null;
+    /** @user.address — REAL wallet; null for email-only logins. */
+    address: string | null;
+    /** @user.email — verified lowercased email; null for wallet/SIWS logins. */
+    email: string | null;
+}
+/**
+ * Derive { id, address, email } from an idToken's claims.
+ *
+ * Mirrors the realtime-worker auth.ts identity resolution so the client-side
+ * `user` object matches what the backend authenticates as:
+ *   - id  = custom:userId when present, else custom:walletAddress (the fallback
+ *           keeps wallet/SIWS tokens — which omit userId — AND legacy Better Auth
+ *           tokens — which put the account id in custom:walletAddress — working).
+ *   - address = custom:walletAddress only (a REAL wallet). NEVER falls back to the
+ *           identity: an opaque id is not a spendable onchain address. null for
+ *           email-only sessions.
+ *   - email = the token's `email` claim, lowercased to match the canonical form
+ *           policy equality compares against. null when absent (wallet/SIWS).
+ *
+ * Returns all-null when the token can't be decoded (caller treats as no identity).
+ */
+export declare function deriveUserIdentityFromIdToken(idToken: string | null | undefined): UserIdentity;
+export declare function getIdToken(isServer: boolean): Promise<string | null>;
+export declare function getRefreshToken(isServer: boolean): Promise<string | null>;
+/** The auth issuer base that minted the active client session, so a refresh POSTs
+ *  to the right /session/refresh. Undefined on the server (keypair, no refresh). */
+export declare function getSessionIssuer(isServer: boolean): string | undefined;
+export declare function updateIdTokenAndAccessToken(idToken: string, accessToken: string, isServer?: boolean, refreshToken?: string): Promise<void>;

package/dist/utils/web-session-manager.d.ts

@@ -0,0 +1,20 @@
+export declare class WebSessionManager {
+    private static TAROBASE_SESSION_STORAGE_KEY;
+    /**
+     * Decode a base64url-encoded string (used by JWT payloads).
+     * Normalises base64url → standard base64 before calling browser atob().
+     */
+    private static decodeBase64Url;
+    static storeSession(address: string, accessToken: string, idToken: string, refreshToken: string, issuer?: string): Promise<void>;
+    static getSession(): Promise<{
+        address: string;
+        session: any;
+    } | null>;
+    static clearSession(): void;
+    static isAuthenticated(): boolean;
+    static getIdToken(): string | null;
+    static getRefreshToken(): string | null;
+    /** The issuer base that minted this session (for routing silent refresh). */
+    static getIssuer(): string | null;
+    static updateIdTokenAndAccessToken(idToken: string, accessToken: string, refreshToken?: string): Promise<void>;
+}

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "@bounded-sh/core",
+  "version": "0.0.1",
+  "description": "Core functionality for Poof SDK",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "rm -rf ./dist ./.rollup-tmp && tsc -p tsconfig.build.json --outDir .rollup-tmp --declarationDir .rollup-tmp --emitDeclarationOnly false && rollup -c && tsc -p tsconfig.build.json --emitDeclarationOnly --declarationDir dist && rm -rf ./.rollup-tmp",
+    "watch": "rollup -c -w",
+    "test": "node src/client/run-read-principal-test.mjs",
+    "prepare": "npm run build"
+  },
+  "files": [
+    "dist"
+  ],
+  "keywords": [
+    "sdk",
+    "api",
+    "poof",
+    "web3",
+    "onchain",
+    "blockchain",
+    "solana",
+    "ai",
+    "server",
+    "node",
+    "typescript",
+    "core"
+  ],
+  "author": "Poof.new",
+  "license": "MIT",
+  "devDependencies": {
+    "@rollup/plugin-commonjs": "28.0.9",
+    "@rollup/plugin-json": "6.1.0",
+    "@rollup/plugin-node-resolve": "15.3.1",
+    "@types/bn.js": "5.2.0",
+    "@types/bs58": "4.0.4",
+    "rollup": "4.55.1",
+    "rollup-plugin-peer-deps-external": "2.2.4",
+    "rollup-plugin-typescript2": "0.36.0",
+    "typescript": "5.9.3"
+  },
+  "dependencies": {
+    "@coral-xyz/anchor": "0.31.1",
+    "@solana/spl-token": "0.4.14",
+    "@solana/web3.js": "1.98.4",
+    "@types/lodash": "4.17.21",
+    "axios": "1.15.2",
+    "axios-retry": "4.5.0",
+    "bn.js": "5.2.2",
+    "buffer": "6.0.3",
+    "lodash": "4.17.21",
+    "reconnecting-websocket": "4.4.0",
+    "tweetnacl": "1.0.3"
+  },
+  "packageManager": "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e",
+  "publishConfig": {
+    "access": "public"
+  }
+}