@bounded-sh/core 0.0.120 → 0.0.121-openapps.0

package/dist/{index-D93TEYGf.mjs → index-YTbWpM1m.mjs}

@@ -2,6 +2,30 @@ import axios from 'axios';
 import nacl from 'tweetnacl';
 import ReconnectingWebSocket from 'reconnecting-websocket';
 
+// Each shared platform host's openapps.xyz name (the monorepo's
+// packages/cdk/cloudflare/shared/openapps-twin-hosts.ts): the same name on
+// openapps.xyz, with dev-api (an alias of platform) answering as platform. Both names reach the same
+// service, users and signing keys. A page served on openapps.xyz talks to the
+// openapps.xyz names; tokens keep the bounded.sh issuer either way.
+const BOUNDED_HOST = /^(wss?|https):\/\/(auth|wallet-auth|realtime|functions|dev-api|platform)(-staging)?\.bounded\.sh(\/?)$/;
+const TWIN_HOST = /^(https):\/\/(auth|wallet-auth)(-staging)?\.openapps\.xyz\/?$/;
+/** True in a browser page served on openapps.xyz or one of its subdomains. */
+function onOpenAppsPage() {
+    const host = typeof location !== 'undefined' && typeof location.hostname === 'string' ? location.hostname : '';
+    return host === 'openapps.xyz' || host.endsWith('.openapps.xyz');
+}
+/** The openapps.xyz name of a platform URL, or the URL unchanged. */
+function openAppsTwinUrl(url) {
+    return url.replace(BOUNDED_HOST, (_, scheme, name, staging = '', slash) => `${scheme}://${name === 'dev-api' ? 'platform' : name}${staging}.openapps.xyz${slash}`);
+}
+/**
+ * The issuer a token from this auth base carries: the bounded.sh name for an
+ * openapps.xyz auth host, else the base itself. Without a trailing slash.
+ */
+function canonicalIssuer(url) {
+    return url.replace(TWIN_HOST, '$1://$2$3.bounded.sh').replace(/\/+$/, '');
+}
+
 // The pristine default config. `clientConfig` (the module global) starts as a
 // copy of this and is mutated by init(); createClient() resolves fresh scoped
 // configs from this pristine template so a scoped instance never inherits a
@@ -88,7 +112,8 @@ function getWebhookKeysUrl() {
  * app's shared-key-signed delivery.
  */
 function getConfiguredSessionNamespace() {
-    return JSON.stringify([(clientConfig.humanAuthApiUrl || "https://auth.bounded.sh").replace(/\/$/, ""), clientConfig.appId]);
+    // Keyed by the issuer, not the host, so a session survives a page moving to the openapps.xyz names.
+    return JSON.stringify([canonicalIssuer(clientConfig.humanAuthApiUrl || "https://auth.bounded.sh"), clientConfig.appId]);
 }
 function getConfiguredAppId() {
     return clientConfig.appId || undefined;
@@ -124,7 +149,13 @@ function resolveClientConfig(base, newConfig) {
         throw new Error(`Unsupported Bounded network "${String(newConfig.network)}". Expected bounded, bounded-staging, or bounded-production.`);
     }
     const preset = newConfig.network ? BOUNDED_NETWORKS[newConfig.network] : {};
-    return Object.assign(Object.assign(Object.assign({}, base), preset), newConfig);
+    const resolved = Object.assign(Object.assign(Object.assign({}, base), preset), newConfig);
+    return onOpenAppsPage() ? withOpenAppsHosts(resolved) : resolved;
+}
+// A page on openapps.xyz reaches every platform service through its openapps.xyz name, so the
+// browser never talks to a bounded.sh host there. Same services, users and keys.
+function withOpenAppsHosts(config) {
+    return Object.assign(Object.assign({}, config), { wsApiUrl: openAppsTwinUrl(config.wsApiUrl), apiUrl: openAppsTwinUrl(config.apiUrl), authApiUrl: openAppsTwinUrl(config.authApiUrl), humanAuthApiUrl: config.humanAuthApiUrl && openAppsTwinUrl(config.humanAuthApiUrl), functionsUrl: config.functionsUrl && openAppsTwinUrl(config.functionsUrl), devApiUrl: config.devApiUrl && openAppsTwinUrl(config.devApiUrl) });
 }
 function init(newConfig) {
     return new Promise((resolve, reject) => {
@@ -521,9 +552,12 @@ function recordRefreshOutcome(key, err, now = Date.now()) {
 function resolveIssuerBase(issuer, cfg) {
     const norm = (u) => (u || '').replace(/\/$/, '');
     const allow = [norm(cfg.authApiUrl), norm(cfg.humanAuthApiUrl)].filter(Boolean);
-    const want = norm(issuer);
-    if (want && allow.includes(want))
-        return want;
+    // Matched by issuer, so a session minted on a bounded.sh name refreshes through the
+    // configured openapps.xyz name of the same issuer (and the other way round).
+    const want = issuer ? canonicalIssuer(issuer) : '';
+    const match = want && allow.find((base) => canonicalIssuer(base) === want);
+    if (match)
+        return match;
     return norm(cfg.authApiUrl);
 }
 // #062: key the auth client by its baseURL. The old single memoized client froze the FIRST
@@ -4305,7 +4339,7 @@ class ServerSessionManager {
         const sessionConfig = (_a = this.sessionConfig) !== null && _a !== void 0 ? _a : undefined;
         /* fetch nonce from auth API (bound to the snapshotted app+issuer) */
         const nonce = await genAuthNonce(sessionConfig);
-        const { genSolanaMessage } = await import('./solana-message-DqKp-y53.mjs');
+        const { genSolanaMessage } = await import('./solana-message-Bv2o7Vm3.mjs');
         const message = await genSolanaMessage(address, nonce, sessionConfig === null || sessionConfig === void 0 ? void 0 : sessionConfig.appId);
         /* sign the message */
         const sigBytes = nacl.sign.detached(new TextEncoder().encode(message), kp.secretKey);
@@ -7677,7 +7711,7 @@ async function doReconnectWithNewAuth() {
         console.warn('[WS v2] Failed to clear HTTP read cache on auth change:', error);
     }
     try {
-        const { reconnectRealtimeStoreWithNewAuth } = await import('./realtime-store-FObAdw-J.mjs');
+        const { reconnectRealtimeStoreWithNewAuth } = await import('./realtime-store-BCi4-Yi2.mjs');
         await reconnectRealtimeStoreWithNewAuth();
     }
     catch (error) {
@@ -8896,7 +8930,7 @@ function buildRequestedDocuments(documents) {
 /** Best-effort readback, including a failure to load its lazy implementation. */
 async function attemptMirrorSync(paths, options, transactionSignature) {
     try {
-        const mirror = await import('./mirror-sync-DPMtQC3A.mjs');
+        const mirror = await import('./mirror-sync-T_kCyCI2.mjs');
         return await mirror.attemptMirrorSync(paths, options, transactionSignature);
     }
     catch (error) {
@@ -9166,7 +9200,7 @@ async function completePreparedWrite(setResponse, documents, config, authProvide
             if (typeof curTx.serializedTransaction !== 'string' || typeof curTx.poofnetIntentId !== 'string') {
                 throw new Error('Unsupported 202 transaction shape: a poofnet write needs serializedTransaction and poofnetIntentId');
             }
-            const { signPoofnetTransaction, buildExpectedWriteIntent } = await import('./solana-operations-cwcuTNyk.mjs');
+            const { signPoofnetTransaction, buildExpectedWriteIntent } = await import('./solana-operations-CBRlxkRp.mjs');
             const signedTransaction = await signPoofnetTransaction(curTx.serializedTransaction, authProvider, options, buildExpectedWriteIntent(documents));
             // Signing-only, exactly as on a real chain: signed and NOT committed.
             if ((options === null || options === void 0 ? void 0 : options.shouldSubmitTx) === false) {
@@ -9204,7 +9238,7 @@ async function completePreparedWrite(setResponse, documents, config, authProvide
                     'Nothing was signed or submitted.');
             }
             const solanaChain = workerChain;
-            const { handlePreBuiltTransaction, buildExpectedWriteIntent } = await import('./solana-operations-cwcuTNyk.mjs');
+            const { handlePreBuiltTransaction, buildExpectedWriteIntent } = await import('./solana-operations-CBRlxkRp.mjs');
             // OA-0001: derive the expected intent from OUR OWN request (the one
             // ground truth a tampered builder response cannot change) so the
             // validator can reject any transaction whose operation semantics
@@ -9262,7 +9296,7 @@ async function completePreparedWrite(setResponse, documents, config, authProvide
     catch (error) {
         // The blockhash died before the send: the RPC refused the bytes in preflight, so nothing
         // entered the network. The worker builds a fresh one and the wallet signs it again.
-        if (rebuilds.expiry && (await import('./solana-operations-cwcuTNyk.mjs')).isExpiredBlockhashRejection(error))
+        if (rebuilds.expiry && (await import('./solana-operations-CBRlxkRp.mjs')).isExpiredBlockhashRejection(error))
             return { rebuild: 'expiry' };
         // The Solana lane tags its own broadcast and on-chain failures; anything
         // untagged from it, and every poofnet step before the commit PUT, failed
@@ -11103,7 +11137,7 @@ function toMillis(seconds) {
 
 /** SIWS message creation is async already, so its onchain module can be lazy. */
 async function genSolanaMessage(address, nonce) {
-    const implementation = await import('./solana-message-DqKp-y53.mjs');
+    const implementation = await import('./solana-message-Bv2o7Vm3.mjs');
     return implementation.genSolanaMessage(address, nonce);
 }
 
@@ -11653,4 +11687,4 @@ function defineLiveModule(mod) {
 }
 
 export { dispatchDeclineEvent as $, aggregate as A, reconcileSetResult as B, waitForSetResult as C, isWriteNotApplied as D, writeNotAppliedPhase as E, subscribe as F, closeAllSubscriptions as G, clearCache as H, InsufficientBalanceError as I, getCachedData as J, reconnectWithNewAuth as K, createClient as L, exchangeAppToken as M, clearAppTokenCache as N, createAppTokenAuthHeaders as O, AppTokenExchangeError as P, setWithVenueGrant as Q, resolveVenueRpcUrl as R, ScopedClientReadOnlyError as S, subscribeQuery as T, closeAllQuerySubscriptions as U, canonicalizeArgs as V, canonicalizeResult as W, DEFAULT_QUERY_POLL_INTERVAL_MS as X, MIN_QUERY_POLL_INTERVAL_MS as Y, BoundedDeclineError as Z, deriveDecline as _, markWriteNotApplied as a, DECLINE_EVENT_NAME as a0, dispatchRateLimitEvent as a1, RATE_LIMIT_EVENT_NAME as a2, hasActiveConnection as a3, increment as a4, serverTimestamp as a5, now as a6, toSeconds as a7, toMillis as a8, getIdToken as a9, browserSignInDomain as aA, SOLANA_SIGN_IN_STATEMENT as aB, genSiweMessage as aC, normalizeEvmAddress as aD, toLowerEvmAddress as aE, functions as aF, invoke as aG, FunctionInvokeError as aH, live as aI, intent as aJ, status as aK, subscribeView as aL, LiveIntentError as aM, withEffects as aN, isEffectResult as aO, defineLiveModule as aP, EFFECT_INTENT_ADDRESS as aQ, deriveUserIdentityFromIdToken as aa, getSessionGeneration as ab, WebSessionManager as ac, ReactNativeSessionManager as ad, getActiveSessionManager as ae, onSessionCleared as af, announceSessionChange as ag, onSessionChange as ah, SESSION_SIGNAL_CHANNEL as ai, SessionEnvironmentError as aj, UNSUPPORTED_ENVIRONMENT_CODE as ak, AUTH_CHANGED_CODE as al, AUTH_EXPIRED_CODE as am, isAuthExpiredError as an, getFreshAuthToken as ao, ServerSessionManager as ap, createSessionWithSignature as aq, refreshSession as ar, revokeSession as as, signSessionCreateMessage as at, genAuthNonce as au, genSolanaMessage as av, createSolanaSignInRequest as aw, createSolanaSignInMessageText as ax, genSolanaSignInRequest as ay, genSolanaSignInMessage as az, bufferExports as b, confirmSignature as c, getWebhookKeysUrl as d, getConfiguredAppId as e, get as f, getConfig as g, getMany as h, init as i, docId as j, setMany as k, setFile as l, makeApiRequest as m, getFiles as n, search as o, runQueryMany as p, queryAggregate as q, runQuery as r, set as s, runExpression as t, runExpressionMany as u, signMessage as v, signTransaction as w, signAndSubmitTransaction as x, prepareToSign as y, count as z };
-//# sourceMappingURL=index-D93TEYGf.mjs.map
+//# sourceMappingURL=index-YTbWpM1m.mjs.map