@bounded-sh/core 0.0.42 → 0.0.44

package/dist/types.d.ts

@@ -56,14 +56,38 @@ export interface User {
      * prompt. `false`/absent for real (email/social/wallet) logins.
      */
     isAnonymous?: boolean;
+    /**
+     * REAL onchain EVM wallet address (resolves @user.evmAddress). Present for EVM
+     * wallet/SIWE logins; `null`/absent for Solana-wallet and email-only logins
+     * that haven't linked an EVM wallet. Canonical LOWERCASE 0x-hex — the identity
+     * layer matches case-sensitively, so it is normalized at the boundary. Derived
+     * from the idToken's `custom:evmWalletAddress` claim. For EVM wallet logins
+     * `id === evmAddress` and `address` (the Solana wallet) is null.
+     */
+    evmAddress?: string | null;
     provider: AuthProvider;
 }
 export interface EVMTransaction {
-    contractAddress: string;
-    contractAbi: string | any;
-    functionName: string;
-    value: string;
-    txArgs: any[];
+    contractAddress?: string;
+    contractAbi?: string | any;
+    functionName?: string;
+    txArgs?: any[];
+    /** Target contract (the per-chain BoundedRuntime address). */
+    to?: string;
+    /** ABI-encoded calldata (setDocuments(...)). */
+    data?: string;
+    /** Wei value to send with the call, as a decimal or 0x-hex string. Default "0". */
+    value?: string;
+    /** EIP-155 chain id the tx must execute on (used for the chain-switch guard). */
+    chainId?: number;
+    /** Optional gas limit hint (the worker's eth_estimateGas ×1.2). */
+    gas?: string;
+    /** Optional EIP-1559 max fee per gas. */
+    maxFeePerGas?: string;
+    /** Optional EIP-1559 max priority fee per gas. */
+    maxPriorityFeePerGas?: string;
+    /** Optional nonce; normally omitted so the signing wallet fills it. */
+    nonce?: number;
 }
 export interface SolTransaction {
     appId: string;

package/dist/utils/auth-api.d.ts

@@ -1,6 +1,15 @@
 export declare function genNonce(): Promise<any>;
 export declare function genAuthNonce(): Promise<any>;
-export declare function createSessionWithSignature(address: string, message: string, signature: string): Promise<any>;
+/**
+ * Exchange a wallet signature for a Bounded session at the /session issuer.
+ *
+ * @param authMethodOverride the exact /session discriminator to send (e.g. 'siwe'
+ *   for the SIWE/EVM path). When omitted the method is derived from config: an
+ *   aliased method (evm-wallet → siwe) maps through SESSION_METHOD_ALIASES, a
+ *   Solana wallet/guest method passes through verbatim, and anything else
+ *   defaults to the canonical 'phantom' the issuer accepts for a signature.
+ */
+export declare function createSessionWithSignature(address: string, message: string, signature: string, authMethodOverride?: string): Promise<any>;
 export declare function refreshSession(refreshToken: string, issuer?: string): Promise<any>;
 export declare class SessionRevokeError extends Error {
     readonly cause?: unknown;

package/dist/utils/evm/evm-transaction-validation.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Selectors derived from the canonical BoundedRuntime signatures (BoundedTypes.sol):
+ *
+ *   cast sig 'setDocuments(string,(string[],bool,(string,uint8,uint8,bytes)[])[])'
+ *     => 0x0827b094
+ *   cast sig 'setDocumentsAttested(string,(string[],bool,(string,uint8,uint8,bytes)[])[],(bytes32,uint256,uint256,uint8,bytes32,bytes32))'
+ *     => 0x87b111c4
+ *
+ * Keep the signatures beside the constants: changing either Solidity tuple is an
+ * ABI break and must deliberately update these values and the Foundry goldens.
+ */
+export declare const BOUNDED_RUNTIME_SET_DOCUMENTS_SELECTOR = "0x0827b094";
+export declare const BOUNDED_RUNTIME_SET_DOCUMENTS_ATTESTED_SELECTOR = "0x87b111c4";
+export interface EvmTransactionPolicy {
+    /** A single allowed chain. */
+    chainId?: number;
+    /** Runtime for `chainId` (single-chain shorthand). */
+    runtimeAddress?: string;
+    /** Per-chain runtime allowlist for a multi-chain signer. */
+    runtimeAddresses?: Record<string, string>;
+}
+/** Minimal structural transaction surface consumed by the canonical validator.
+ * Kept local so security-sensitive server/Worker signers do not pull the
+ * browser/client type graph merely to validate a prebuilt runtime write. */
+export interface EvmWriteTransaction {
+    to?: string;
+    data?: string;
+    value?: string;
+    chainId?: number;
+    nonce?: number;
+}
+/**
+ * Fail closed unless calldata is a byte-for-byte canonical ABI encoding of one
+ * supported BoundedRuntime write. This is the defense used by direct signer
+ * surfaces; the higher-level write validator below additionally binds app/ops.
+ */
+export declare function assertCanonicalBoundedRuntimeWriteCalldata(rawData: unknown): void;
+/** Verify the untrusted 202 payload is exactly the governed write the app asked for. */
+export declare function assertEvmTransactionMatchesWrite(transaction: EvmWriteTransaction, context: {
+    appId: string;
+    documents: Array<{
+        destinationPath: string;
+        document: any;
+    }>;
+    policy?: EvmTransactionPolicy | null;
+}): void;

package/dist/utils/evm/evm-utils.d.ts

@@ -0,0 +1,40 @@
+export interface SiweMessageOptions {
+    /**
+     * EIP-155 chain id the wallet is connected to. The verifier requires a
+     * positive safe integer; write-time chain/runtime policy is enforced
+     * separately before transaction signing. Defaults to 1 when unavailable.
+     */
+    chainId?: number;
+    /** Single-line statement (must not contain a newline). Defaults to the canonical prompt. */
+    statement?: string;
+    /** Issued-at instant. Defaults to now. */
+    issuedAt?: Date;
+    /** Expiration instant. Defaults to issuedAt + 5 min (inside the issuer's 10-min cap). */
+    expirationTime?: Date;
+    /** EIP-4361 version; the grammar fixes this at "1". */
+    version?: string;
+}
+/**
+ * Build the canonical EIP-4361 SIWE message the bounded-auth issuer verifies.
+ *
+ * @param address  the connected EVM account (lowercased into the prompt).
+ * @param nonce    single-use nonce from genAuthNonce().
+ * @param appId    the target app id (bound as the sole `bounded:app:<appId>` resource).
+ * @param domain   RFC-3986 authority of the requesting site (e.g. window.location.host).
+ * @param uri      the requesting URI; its origin is bound to the domain and actual browser Origin.
+ */
+export declare function genSiweMessage(address: string, nonce: string, appId: string, domain: string, uri: string, options?: SiweMessageOptions): string;
+/**
+ * Lowercase an EVM address to the canonical identity form. EVM addresses are
+ * case-insensitive on-chain but the identity layer (@user.evmAddress) matches
+ * case-sensitively, so every boundary normalizes to lowercase. Does not validate
+ * shape — use normalizeEvmAddress() when the input is untrusted.
+ */
+export declare function toLowerEvmAddress(address: string): string;
+/**
+ * Normalize an untrusted EVM address to canonical lowercase 0x-hex, or null when
+ * it isn't a well-formed 20-byte hex address. Mirrors the realtime-worker's
+ * normalizeEvmAddress (auth.ts) EXACTLY so a client-derived @user.evmAddress and
+ * the server-authenticated one are byte-identical (fail-closed on malformed).
+ */
+export declare function normalizeEvmAddress(raw: unknown): string | null;

package/dist/utils/server-session-manager.d.ts

@@ -19,12 +19,19 @@ export declare class ServerSessionManager {
     private session;
     private pendingSession;
     private readonly keypair;
+    private readonly sessionFactory;
     private constructor();
     /**
      * Create a session manager for a specific keypair.
      * Each instance has its own independent session cache.
      */
     static forKeypair(keypair: Keypair): ServerSessionManager;
+    /**
+     * Create an isolated server session manager for a non-Solana signer (currently
+     * EVM/SIWE). The factory must perform the signature exchange and return the
+     * canonical signer address with its tokens; no signer state becomes global.
+     */
+    static forSessionFactory(factory: () => Promise<ServerSession>): ServerSessionManager;
     private createSession;
     getSession(): Promise<ServerSession>;
     setSession(session: ServerSession): void;

package/dist/utils/utils.d.ts

@@ -11,10 +11,12 @@ export declare function getUserInfo(isServer: boolean): Promise<any>;
 export interface UserIdentity {
     /** @user.id — universal stable identity (custom:userId only). */
     id: string | null;
-    /** @user.address — REAL wallet; null for email-only logins. */
+    /** @user.address — REAL Solana wallet; null for email-only / EVM-wallet logins. */
     address: string | null;
     /** @user.email — verified lowercased email; null for wallet/SIWS logins. */
     email: string | null;
+    /** @user.evmAddress — REAL EVM wallet, canonical lowercase 0x-hex; null when unlinked. */
+    evmAddress: string | null;
 }
 /**
  * Derive { id, address, email } from an idToken's claims.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bounded-sh/core",
-  "version": "0.0.42",
+  "version": "0.0.44",
   "description": "Shared client, data-plane, and transport primitives for Bounded, the full-stack app builder and runtime for AI-built apps: policy-enforced operations, files, functions, and realtime.",
   "homepage": "https://bounded.sh/docs/sdk",
   "main": "./dist/index.js",
@@ -16,7 +16,7 @@
   "scripts": {
     "build": "rm -rf ./dist ./.rollup-tmp && tsc -p tsconfig.build.json --outDir .rollup-tmp --declarationDir .rollup-tmp --emitDeclarationOnly false && rollup -c && tsc -p tsconfig.build.json --emitDeclarationOnly --declarationDir dist && rm -rf ./.rollup-tmp",
     "watch": "rollup -c -w",
-    "test": "node src/client/run-config-network-test.mjs && node src/client/run-read-principal-test.mjs && node src/client/run-principal-collision-test.mjs && node src/client/run-row-shape-test.mjs && node src/client/run-transport-test.mjs && node src/client/run-public-export-surface-test.mjs && node src/client/run-live-auth-test.mjs && node src/client/run-live-view-principal-test.mjs && node src/client/run-subscription-auth-error-test.mjs && node src/client/run-onchain-validation-test.mjs && node src/client/websocket-auth-url.test.mjs",
+    "test": "node src/client/run-config-network-test.mjs && node src/client/run-read-principal-test.mjs && node src/client/run-principal-collision-test.mjs && node src/client/run-row-shape-test.mjs && node src/client/run-transport-test.mjs && node src/client/run-public-export-surface-test.mjs && node src/client/run-live-auth-test.mjs && node src/client/run-live-view-principal-test.mjs && node src/client/run-subscription-auth-error-test.mjs && node src/client/run-onchain-validation-test.mjs && node src/client/run-evm-dispatch-test.mjs && node src/utils/evm/run-evm-utils-test.mjs && node src/client/websocket-auth-url.test.mjs",
     "prepare": "npm run build"
   },
   "files": [
@@ -64,4 +64,4 @@
   "publishConfig": {
     "access": "public"
   }
-}
+}