@bounded-sh/core 0.0.18 → 0.0.19

package/dist/client/functions.d.ts

@@ -5,9 +5,8 @@ export type InvokeOptions = {
     headers?: Record<string, string>;
     /**
      * @internal Auth override. The server `WalletClient.invoke` sets this so the
-     * call authenticates as that wallet's session instead of the ambient
-     * `BOUNDED_PRIVATE_KEY` keypair (which would otherwise throw when unset). App
-     * code never sets this.
+     * call authenticates as that wallet's explicit session. App code never sets
+     * this, and there is no process-global server signer fallback.
      */
     _overrides?: {
         _getAuthHeaders?: () => Promise<Record<string, string>>;

package/dist/index.js

@@ -1,8 +1,8 @@
 'use strict';
 
 var axios = require('axios');
-var web3_js = require('@solana/web3.js');
 var nacl = require('tweetnacl');
+var web3_js = require('@solana/web3.js');
 var anchor = require('@coral-xyz/anchor');
 var BN = require('bn.js');
 var ReconnectingWebSocket = require('reconnecting-websocket');
@@ -3330,231 +3330,6 @@ var sessionManager = /*#__PURE__*/Object.freeze({
     getActiveSessionManager: getActiveSessionManager
 });
 
-var safeBuffer = {exports: {}};
-
-/*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> */
-
-var hasRequiredSafeBuffer;
-
-function requireSafeBuffer () {
-	if (hasRequiredSafeBuffer) return safeBuffer.exports;
-	hasRequiredSafeBuffer = 1;
-	(function (module, exports$1) {
-		/* eslint-disable node/no-deprecated-api */
-		var buffer = requireBuffer();
-		var Buffer = buffer.Buffer;
-
-		// alternative to using Object.keys for old browsers
-		function copyProps (src, dst) {
-		  for (var key in src) {
-		    dst[key] = src[key];
-		  }
-		}
-		if (Buffer.from && Buffer.alloc && Buffer.allocUnsafe && Buffer.allocUnsafeSlow) {
-		  module.exports = buffer;
-		} else {
-		  // Copy properties from require('buffer')
-		  copyProps(buffer, exports$1);
-		  exports$1.Buffer = SafeBuffer;
-		}
-
-		function SafeBuffer (arg, encodingOrOffset, length) {
-		  return Buffer(arg, encodingOrOffset, length)
-		}
-
-		SafeBuffer.prototype = Object.create(Buffer.prototype);
-
-		// Copy static methods from Buffer
-		copyProps(Buffer, SafeBuffer);
-
-		SafeBuffer.from = function (arg, encodingOrOffset, length) {
-		  if (typeof arg === 'number') {
-		    throw new TypeError('Argument must not be a number')
-		  }
-		  return Buffer(arg, encodingOrOffset, length)
-		};
-
-		SafeBuffer.alloc = function (size, fill, encoding) {
-		  if (typeof size !== 'number') {
-		    throw new TypeError('Argument must be a number')
-		  }
-		  var buf = Buffer(size);
-		  if (fill !== undefined) {
-		    if (typeof encoding === 'string') {
-		      buf.fill(fill, encoding);
-		    } else {
-		      buf.fill(fill);
-		    }
-		  } else {
-		    buf.fill(0);
-		  }
-		  return buf
-		};
-
-		SafeBuffer.allocUnsafe = function (size) {
-		  if (typeof size !== 'number') {
-		    throw new TypeError('Argument must be a number')
-		  }
-		  return Buffer(size)
-		};
-
-		SafeBuffer.allocUnsafeSlow = function (size) {
-		  if (typeof size !== 'number') {
-		    throw new TypeError('Argument must be a number')
-		  }
-		  return buffer.SlowBuffer(size)
-		}; 
-	} (safeBuffer, safeBuffer.exports));
-	return safeBuffer.exports;
-}
-
-var src;
-var hasRequiredSrc;
-
-function requireSrc () {
-	if (hasRequiredSrc) return src;
-	hasRequiredSrc = 1;
-	// base-x encoding / decoding
-	// Copyright (c) 2018 base-x contributors
-	// Copyright (c) 2014-2018 The Bitcoin Core developers (base58.cpp)
-	// Distributed under the MIT software license, see the accompanying
-	// file LICENSE or http://www.opensource.org/licenses/mit-license.php.
-	// @ts-ignore
-	var _Buffer = requireSafeBuffer().Buffer;
-	function base (ALPHABET) {
-	  if (ALPHABET.length >= 255) { throw new TypeError('Alphabet too long') }
-	  var BASE_MAP = new Uint8Array(256);
-	  for (var j = 0; j < BASE_MAP.length; j++) {
-	    BASE_MAP[j] = 255;
-	  }
-	  for (var i = 0; i < ALPHABET.length; i++) {
-	    var x = ALPHABET.charAt(i);
-	    var xc = x.charCodeAt(0);
-	    if (BASE_MAP[xc] !== 255) { throw new TypeError(x + ' is ambiguous') }
-	    BASE_MAP[xc] = i;
-	  }
-	  var BASE = ALPHABET.length;
-	  var LEADER = ALPHABET.charAt(0);
-	  var FACTOR = Math.log(BASE) / Math.log(256); // log(BASE) / log(256), rounded up
-	  var iFACTOR = Math.log(256) / Math.log(BASE); // log(256) / log(BASE), rounded up
-	  function encode (source) {
-	    if (Array.isArray(source) || source instanceof Uint8Array) { source = _Buffer.from(source); }
-	    if (!_Buffer.isBuffer(source)) { throw new TypeError('Expected Buffer') }
-	    if (source.length === 0) { return '' }
-	        // Skip & count leading zeroes.
-	    var zeroes = 0;
-	    var length = 0;
-	    var pbegin = 0;
-	    var pend = source.length;
-	    while (pbegin !== pend && source[pbegin] === 0) {
-	      pbegin++;
-	      zeroes++;
-	    }
-	        // Allocate enough space in big-endian base58 representation.
-	    var size = ((pend - pbegin) * iFACTOR + 1) >>> 0;
-	    var b58 = new Uint8Array(size);
-	        // Process the bytes.
-	    while (pbegin !== pend) {
-	      var carry = source[pbegin];
-	            // Apply "b58 = b58 * 256 + ch".
-	      var i = 0;
-	      for (var it1 = size - 1; (carry !== 0 || i < length) && (it1 !== -1); it1--, i++) {
-	        carry += (256 * b58[it1]) >>> 0;
-	        b58[it1] = (carry % BASE) >>> 0;
-	        carry = (carry / BASE) >>> 0;
-	      }
-	      if (carry !== 0) { throw new Error('Non-zero carry') }
-	      length = i;
-	      pbegin++;
-	    }
-	        // Skip leading zeroes in base58 result.
-	    var it2 = size - length;
-	    while (it2 !== size && b58[it2] === 0) {
-	      it2++;
-	    }
-	        // Translate the result into a string.
-	    var str = LEADER.repeat(zeroes);
-	    for (; it2 < size; ++it2) { str += ALPHABET.charAt(b58[it2]); }
-	    return str
-	  }
-	  function decodeUnsafe (source) {
-	    if (typeof source !== 'string') { throw new TypeError('Expected String') }
-	    if (source.length === 0) { return _Buffer.alloc(0) }
-	    var psz = 0;
-	        // Skip and count leading '1's.
-	    var zeroes = 0;
-	    var length = 0;
-	    while (source[psz] === LEADER) {
-	      zeroes++;
-	      psz++;
-	    }
-	        // Allocate enough space in big-endian base256 representation.
-	    var size = (((source.length - psz) * FACTOR) + 1) >>> 0; // log(58) / log(256), rounded up.
-	    var b256 = new Uint8Array(size);
-	        // Process the characters.
-	    while (psz < source.length) {
-	            // Find code of next character
-	      var charCode = source.charCodeAt(psz);
-	            // Base map can not be indexed using char code
-	      if (charCode > 255) { return }
-	            // Decode character
-	      var carry = BASE_MAP[charCode];
-	            // Invalid character
-	      if (carry === 255) { return }
-	      var i = 0;
-	      for (var it3 = size - 1; (carry !== 0 || i < length) && (it3 !== -1); it3--, i++) {
-	        carry += (BASE * b256[it3]) >>> 0;
-	        b256[it3] = (carry % 256) >>> 0;
-	        carry = (carry / 256) >>> 0;
-	      }
-	      if (carry !== 0) { throw new Error('Non-zero carry') }
-	      length = i;
-	      psz++;
-	    }
-	        // Skip leading zeroes in b256.
-	    var it4 = size - length;
-	    while (it4 !== size && b256[it4] === 0) {
-	      it4++;
-	    }
-	    var vch = _Buffer.allocUnsafe(zeroes + (size - it4));
-	    vch.fill(0x00, 0, zeroes);
-	    var j = zeroes;
-	    while (it4 !== size) {
-	      vch[j++] = b256[it4++];
-	    }
-	    return vch
-	  }
-	  function decode (string) {
-	    var buffer = decodeUnsafe(string);
-	    if (buffer) { return buffer }
-	    throw new Error('Non-base' + BASE + ' character')
-	  }
-	  return {
-	    encode: encode,
-	    decodeUnsafe: decodeUnsafe,
-	    decode: decode
-	  }
-	}
-	src = base;
-	return src;
-}
-
-var bs58$1;
-var hasRequiredBs58;
-
-function requireBs58 () {
-	if (hasRequiredBs58) return bs58$1;
-	hasRequiredBs58 = 1;
-	var basex = requireSrc();
-	var ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
-
-	bs58$1 = basex(ALPHABET);
-	return bs58$1;
-}
-
-var bs58Exports = requireBs58();
-var bs58 = /*@__PURE__*/getDefaultExportFromCjs(bs58Exports);
-
 // ─────────────────────────────────────────────────────────────
 // Local implementation of getSimulationComputeUnits
 // (Replaces @solana-developers/helpers to avoid Wallet import issue in browser/ESM builds)
@@ -3812,36 +3587,7 @@ async function buildSetDocumentsTransaction(connection, idl, anchorProvider, pay
     return { tx: vTx, blockhash, lastValidBlockHeight };
 }
 
-/* ------------------------------------------------------------------ */
-/*  ENV helpers                                                       */
-/* ------------------------------------------------------------------ */
-// Canonical `BOUNDED_PRIVATE_KEY` (matches the CLI). Only consulted when no
-// explicit keypair was provided (createWalletClient passes one).
-const ENV_KEYPAIR = "BOUNDED_PRIVATE_KEY";
-const LEGACY_ENV_KEYPAIR = "BOUNDED_SOLANA_KEYPAIR";
-function loadKeypairFromEnv() {
-    if (process.env[LEGACY_ENV_KEYPAIR]) {
-        throw new Error(`${LEGACY_ENV_KEYPAIR} is no longer supported. Set ${ENV_KEYPAIR} instead, ` +
-            `or pass an explicit keypair via createWalletClient({ keypair }).`);
-    }
-    const secret = process.env[ENV_KEYPAIR];
-    if (!secret) {
-        throw new Error(`No server keypair for this top-level call. The top-level get/set/subscribe/etc. use an ` +
-            `AMBIENT session — set ${ENV_KEYPAIR} to a base-58 secret key (or JSON array) to provide one. ` +
-            `If you already created a wallet with createWalletClient({ keypair }), call ITS methods instead ` +
-            `(client.subscribe / client.set / client.get): that client is self-contained and deliberately does ` +
-            `not set the ambient session, so the top-level functions can't see it.`);
-    }
-    try {
-        const secretKey = secret.trim().startsWith("[")
-            ? Uint8Array.from(JSON.parse(secret))
-            : bs58.decode(secret.trim());
-        return web3_js.Keypair.fromSecretKey(secretKey);
-    }
-    catch (err) {
-        throw new Error(`Unable to parse ${ENV_KEYPAIR}. Ensure it is valid base-58 or JSON.`);
-    }
-}
+const NO_AMBIENT_SERVER_SESSION = "Server sessions are not process-global. Use createWalletClient({ keypair }) and call that wallet client's methods.";
 /* ------------------------------------------------------------------ */
 /* SESSION MANAGER                                                     */
 /* ------------------------------------------------------------------ */
@@ -3864,8 +3610,10 @@ class ServerSessionManager {
      * Session creation (instance method)
      * ---------------------------------------------- */
     async createSession() {
-        var _a;
-        const kp = (_a = this.keypair) !== null && _a !== void 0 ? _a : loadKeypairFromEnv();
+        if (!this.keypair) {
+            throw new Error(NO_AMBIENT_SERVER_SESSION);
+        }
+        const kp = this.keypair;
         const address = kp.publicKey.toBase58();
         /* fetch nonce from auth API */
         const nonce = await genAuthNonce();
@@ -3927,7 +3675,7 @@ class ServerSessionManager {
         return (_b = (_a = this.session) === null || _a === void 0 ? void 0 : _a.refreshToken) !== null && _b !== void 0 ? _b : null;
     }
 }
-/* The default singleton instance (reads keypair from env) */
+/* The default singleton exists only so top-level server calls fail closed. */
 ServerSessionManager.instance = new ServerSessionManager();
 
 /**
@@ -5970,7 +5718,7 @@ async function getOrCreateConnection(appId, isServer, routePath, authTokenProvid
     const roomKey = roomKeyFromRoutePath(routePath);
     // A wallet-scoped subscription (server WalletClient) gets its OWN connection
     // keyed by the wallet identity, so its WS authenticates as that wallet and
-    // never shares a connection (or token) with the ambient env identity.
+    // never shares a connection (or token) with any top-level server caller.
     const base = roomKey ? `${appId}#room#${roomKey}` : appId;
     const connKey = principalKey ? `${base}#id#${principalKey}` : base;
     let connection = connections.get(connKey);
@@ -6027,7 +5775,7 @@ async function getOrCreateConnection(appId, isServer, routePath, authTokenProvid
         }
         // Resolve auth token if available. A wallet-scoped connection resolves
         // its token from the wallet's own session (self-refreshing); all others
-        // use the ambient env/web session. The token is sent as the first WS
+        // use the browser session or fail closed for top-level server calls. The token is sent as the first WS
         // frame after open, never as a URL query parameter.
         let authToken;
         try {
@@ -6378,8 +6126,8 @@ async function subscribeV2(path, subscriptionOptions, roomRoutePath) {
     // subscribes with identical options (shared process / SSR / login-switch).
     // Per-subscription wallet override (server WalletClient.subscribe). When set,
     // the connection authenticates + caches under the wallet's identity instead of
-    // the ambient env keypair — so a `createWalletClient` caller can subscribe
-    // without setting BOUNDED_PRIVATE_KEY (and never crashes resolving it).
+    // any top-level server caller — so a `createWalletClient` caller can
+    // subscribe through its explicit wallet session.
     const overrides = subscriptionOptions._overrides;
     const authTokenProvider = (overrides === null || overrides === void 0 ? void 0 : overrides._getAuthHeaders)
         ? async () => bearerFromAuthHeaders(await overrides._getAuthHeaders()) || null
@@ -6668,7 +6416,7 @@ async function doReconnectWithNewAuth() {
         console.warn('[WS v2] Failed to clear HTTP read cache on auth change:', error);
     }
     try {
-        const { reconnectRealtimeStoreWithNewAuth } = await Promise.resolve().then(function () { return require('./realtime-store-CDLQdh7S.js'); });
+        const { reconnectRealtimeStoreWithNewAuth } = await Promise.resolve().then(function () { return require('./realtime-store-Ck_VgTcv.js'); });
         await reconnectRealtimeStoreWithNewAuth();
     }
     catch (error) {
@@ -7008,7 +6756,8 @@ async function invoke(name, args = {}, opts = {}) {
     const base = (config.functionsUrl || DEFAULT_FUNCTIONS_URL).replace(/\/$/, '');
     // Attach the caller's session token automatically (same token as data calls).
     // A wallet-scoped call (server WalletClient.invoke) resolves the token from the
-    // wallet's own session; all others use the ambient env/web session.
+    // wallet's own session; browser calls use the active web session. Top-level
+    // server calls fail closed because there is no ambient server signer.
     const authHeader = ((_a = opts._overrides) === null || _a === void 0 ? void 0 : _a._getAuthHeaders)
         ? await opts._overrides._getAuthHeaders()
         : await createAuthHeader(config.isServer);