@bounded-sh/core 0.0.42 → 0.0.46

package/dist/solana-operations-C_aie1aF.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana-operations-C_aie1aF.js","sources":["../.rollup-tmp/client/solana-operations.js"],"sourcesContent":["import { Buffer } from 'buffer';\nimport { getConfig } from './config';\nconst BOUNDED_PROGRAM_MAINNET = ['poof', '4b5pk1L9tmThvBmaABjcyjfhFGbMbQP5BXk2QZp'].join('');\nconst BOUNDED_PROGRAM_DEVNET = ['taro', '6CvKqwrYrDc16ufYgzQ2NZcyyVKStffbtudrhRu'].join('');\nconst COMPUTE_BUDGET_PROGRAM = 'ComputeBudget111111111111111111111111111111';\nconst SYSTEM_PROGRAM_ID = '11111111111111111111111111111111';\nconst ALLOWED_SERVER_TX_PROGRAMS = new Set([\n    BOUNDED_PROGRAM_MAINNET,\n    BOUNDED_PROGRAM_DEVNET,\n    COMPUTE_BUDGET_PROGRAM,\n    SYSTEM_PROGRAM_ID,\n]);\nconst SET_DOCUMENTS_DISCRIMINATOR = '79,46,72,73,24,79,66,245';\nconst SET_DOCUMENTS_V2_DISCRIMINATOR = '22,236,242,185,145,61,26,39';\nconst ALLOWED_BOUNDED_SET_DISCRIMINATORS = new Set([\n    SET_DOCUMENTS_DISCRIMINATOR,\n    SET_DOCUMENTS_V2_DISCRIMINATOR,\n]);\nclass BorshCursor {\n    constructor(data, offset, label) {\n        this.data = data;\n        this.offset = offset;\n        this.label = label;\n    }\n    requireBytes(length, field) {\n        if (this.offset + length > this.data.length) {\n            throw new Error(`${this.label} has malformed Bounded instruction data while reading ${field}`);\n        }\n    }\n    readU8(field) { this.requireBytes(1, field); return this.data[this.offset++]; }\n    readU32(field) {\n        this.requireBytes(4, field);\n        const value = this.data[this.offset] | (this.data[this.offset + 1] << 8) |\n            (this.data[this.offset + 2] << 16) | (this.data[this.offset + 3] << 24);\n        this.offset += 4;\n        return value >>> 0;\n    }\n    skip(length, field) { this.requireBytes(length, field); this.offset += length; }\n    readString(field) {\n        const length = this.readU32(`${field} length`);\n        this.requireBytes(length, field);\n        const raw = this.data.slice(this.offset, this.offset + length);\n        this.offset += length;\n        return Buffer.from(raw).toString('utf8');\n    }\n    skipBytes(field) { this.skip(this.readU32(`${field} length`), field); }\n    isAtEnd() { return this.offset === this.data.length; }\n}\nfunction skipBoundedFieldValue(cursor) {\n    const option = cursor.readU8('operation value option');\n    if (option === 0)\n        return;\n    if (option !== 1)\n        throw new Error('Server transaction has malformed Bounded field value option');\n    const variant = cursor.readU8('operation value variant');\n    if (variant === 0 || variant === 1)\n        cursor.skip(8, 'operation numeric value');\n    else if (variant === 2)\n        cursor.skip(1, 'operation bool value');\n    else if (variant === 3)\n        cursor.readString('operation string value');\n    else if (variant === 4)\n        cursor.skip(32, 'operation address value');\n    else\n        throw new Error(`Server transaction has unsupported Bounded field value variant: ${variant}`);\n}\nfunction normalizeOnchainPath(path) {\n    let normalized = path.startsWith('/') ? path.slice(1) : path;\n    if (normalized.endsWith('*') && normalized.length > 1)\n        normalized = normalized.slice(0, -1);\n    if (normalized.endsWith('/'))\n        normalized = normalized.slice(0, -1);\n    return normalized;\n}\nfunction parseBoundedSetDocumentsInstruction(data, label) {\n    if (data.length < 8)\n        throw new Error(`${label} has malformed Bounded instruction data`);\n    const discriminator = Array.from(data.slice(0, 8)).join(',');\n    if (!ALLOWED_BOUNDED_SET_DISCRIMINATORS.has(discriminator)) {\n        throw new Error(`${label} contains unsupported Bounded instruction`);\n    }\n    const isV2 = discriminator === SET_DOCUMENTS_V2_DISCRIMINATOR;\n    const cursor = new BorshCursor(data, 8, label);\n    const appId = cursor.readString('appId');\n    const documentPaths = [];\n    const documentCount = cursor.readU32('documents length');\n    for (let i = 0; i < documentCount; i++) {\n        documentPaths.push(normalizeOnchainPath(cursor.readString('document path')));\n        const operationCount = cursor.readU32('operations length');\n        for (let j = 0; j < operationCount; j++) {\n            cursor.readString('operation key');\n            skipBoundedFieldValue(cursor);\n            cursor.skip(1, 'operation kind');\n        }\n    }\n    const deletePaths = [];\n    const deleteCount = cursor.readU32('delete paths length');\n    for (let i = 0; i < deleteCount; i++)\n        deletePaths.push(normalizeOnchainPath(cursor.readString('delete path')));\n    const txDataCount = cursor.readU32('txData length');\n    for (let i = 0; i < txDataCount; i++) {\n        cursor.readString('txData plugin function key');\n        cursor.skipBytes('txData bytes');\n        if (isV2)\n            cursor.skipBytes('txData raIndices');\n        else\n            cursor.skip(cursor.readU32('txData raIndices length') * 8, 'txData raIndices');\n    }\n    const simulate = cursor.readU8('simulate');\n    if (simulate !== 0 && simulate !== 1)\n        throw new Error(`${label} has malformed Bounded simulate flag`);\n    if (!cursor.isAtEnd())\n        throw new Error(`${label} has trailing Bounded instruction data`);\n    return { appId, documentPaths, deletePaths };\n}\nfunction assertSamePathSet(label, expectedPaths, actualPaths) {\n    const expected = new Set(expectedPaths.map(normalizeOnchainPath).filter(Boolean));\n    const actual = new Set(actualPaths.map(normalizeOnchainPath).filter(Boolean));\n    const missing = [...expected].filter(path => !actual.has(path));\n    const extra = [...actual].filter(path => !expected.has(path));\n    if (missing.length || extra.length) {\n        const details = [missing.length ? `missing paths: ${missing.join(', ')}` : '', extra.length ? `unexpected paths: ${extra.join(', ')}` : '']\n            .filter(Boolean).join('; ');\n        throw new Error(`${label} Bounded instruction paths do not match requested write paths (${details})`);\n    }\n}\nfunction deserializeAndValidateServerTransaction(serializedTransaction, VersionedTransactionClass, options) {\n    var _a;\n    const transaction = VersionedTransactionClass.deserialize(Buffer.from(serializedTransaction, 'base64'));\n    const { label, expectedAppId, expectedWritePaths } = options;\n    const accountKeys = transaction.message.staticAccountKeys;\n    let boundedInstructionCount = 0;\n    const actualWritePaths = [];\n    for (const ix of transaction.message.compiledInstructions) {\n        if (ix.programIdIndex >= accountKeys.length)\n            throw new Error(`${label} has program ID in lookup table (not allowed)`);\n        const programId = accountKeys[ix.programIdIndex].toBase58();\n        if (!ALLOWED_SERVER_TX_PROGRAMS.has(programId))\n            throw new Error(`${label} contains unauthorized program: ${programId}`);\n        const data = ix.data instanceof Uint8Array ? ix.data : Buffer.from((_a = ix.data) !== null && _a !== void 0 ? _a : []);\n        if (programId === SYSTEM_PROGRAM_ID)\n            throw new Error(`${label} contains unauthorized System Program instruction`);\n        if (programId === BOUNDED_PROGRAM_MAINNET || programId === BOUNDED_PROGRAM_DEVNET) {\n            boundedInstructionCount++;\n            const parsed = parseBoundedSetDocumentsInstruction(data, label);\n            if (parsed.appId !== expectedAppId)\n                throw new Error(`${label} Bounded instruction appId does not match configured appId`);\n            actualWritePaths.push(...parsed.documentPaths, ...parsed.deletePaths);\n        }\n    }\n    if (boundedInstructionCount !== 1)\n        throw new Error(`${label} must contain exactly one Bounded set-documents instruction`);\n    assertSamePathSet(label, expectedWritePaths, actualWritePaths);\n    return transaction;\n}\nfunction isHexString(value) {\n    if (typeof value !== 'string')\n        return false;\n    const testValue = value.startsWith('-') ? value.slice(1) : value;\n    return /^(0x)?[0-9a-fA-F]+$/.test(testValue);\n}\nexport async function handleSolanaTransaction(tx, authProvider, options, expectedWritePaths) {\n    var _a, _b, _c, _d, _e;\n    const chainSdk = await import(\"@solana/web3.js\");\n    const { PublicKey, SystemProgram, TransactionInstruction, VersionedTransaction } = chainSdk;\n    const solTransactionData = {\n        remainingAccounts: tx.remainingAccounts,\n        setDocumentData: tx.transactionArgs.setDocumentData,\n        deletePaths: tx.transactionArgs.deletePaths,\n        idl: tx.idl,\n        txData: (_b = (_a = tx.txData) === null || _a === void 0 ? void 0 : _a.map((txData) => ({\n            pluginFunctionKey: txData.pluginFunctionKey,\n            txData: Buffer.from(txData.txData),\n            raIndices: (() => {\n                const raw = txData.raIndices;\n                if (raw == null)\n                    return Buffer.alloc(0);\n                if (Buffer.isBuffer(raw))\n                    return raw;\n                if (raw instanceof Uint8Array)\n                    return Buffer.from(raw);\n                const arrayLike = Array.isArray(raw) ? raw :\n                    raw && typeof raw === 'object' && Array.isArray(raw.data) ? raw.data :\n                        (() => { throw new Error(`raIndices has unexpected shape: ${typeof raw}`); })();\n                return Buffer.from(arrayLike.map((raIndex) => {\n                    const value = isHexString(raIndex) ? parseInt(raIndex, 16) : Number(raIndex);\n                    if (!Number.isInteger(value) || value < 0 || value > 255) {\n                        throw new Error(`raIndex ${raIndex} is not a valid u8 (must be integer in 0..255)`);\n                    }\n                    return value;\n                }));\n            })(),\n        }))) !== null && _b !== void 0 ? _b : [],\n    };\n    const config = await getConfig();\n    if (tx.signedTransaction) {\n        deserializeAndValidateServerTransaction(tx.signedTransaction, VersionedTransaction, {\n            label: 'Server signedTransaction', expectedAppId: config.appId, expectedWritePaths,\n        });\n    }\n    const solTransaction = {\n        appId: config.appId,\n        txArgs: [solTransactionData],\n        lutKey: (_c = tx.lutAddress) !== null && _c !== void 0 ? _c : null,\n        additionalLutAddresses: tx.additionalLutAddresses,\n        network: tx.network,\n        preInstructions: (_e = (_d = tx.preInstructions) === null || _d === void 0 ? void 0 : _d.map((ix, index) => {\n            var _a;\n            const keys = (_a = ix.keys) === null || _a === void 0 ? void 0 : _a.map((key) => ({ pubkey: new PublicKey(key.pubkey), isSigner: key.isSigner, isWritable: key.isWritable }));\n            const programId = ix.programId === SYSTEM_PROGRAM_ID ? SystemProgram.programId : new PublicKey(ix.programId);\n            const instruction = new TransactionInstruction({ keys, programId, data: Buffer.from(ix.data) });\n            if (instruction.programId.equals(SystemProgram.programId)) {\n                throw new Error(`Server preInstruction[${index}] contains unauthorized System Program preInstruction`);\n            }\n            return instruction;\n        })) !== null && _e !== void 0 ? _e : [],\n        signedTransaction: tx.signedTransaction,\n    };\n    return authProvider.runTransaction(undefined, solTransaction, options);\n}\nexport async function handlePreBuiltTransaction(tx, authProvider, options, expectedWritePaths) {\n    var _a, _b, _c;\n    const { Connection, VersionedTransaction } = await import(\"@solana/web3.js\");\n    const config = await getConfig();\n    const transaction = deserializeAndValidateServerTransaction(tx.serializedTransaction, VersionedTransaction, {\n        label: 'Pre-built transaction', expectedAppId: config.appId, expectedWritePaths,\n    });\n    const shouldSubmit = (options === null || options === void 0 ? void 0 : options.shouldSubmitTx) !== false;\n    const rpcUrl = (_a = config.rpcUrl) === null || _a === void 0 ? void 0 : _a.trim();\n    if (shouldSubmit && !rpcUrl)\n        throw new Error(`Pre-built Solana transaction submission requires init({ rpcUrl }) for ${tx.network}`);\n    const signedTx = await authProvider.signTransaction(transaction);\n    const rawTx = signedTx.serialize();\n    if (!shouldSubmit) {\n        return { transactionSignature: '', signedTransaction: Buffer.from(rawTx).toString('base64'), blockNumber: 0, gasUsed: '0' };\n    }\n    const connection = new Connection(rpcUrl, 'confirmed');\n    const signature = await connection.sendRawTransaction(rawTx, { skipPreflight: false, maxRetries: 3 });\n    const confirmation = await connection.confirmTransaction({\n        signature, blockhash: tx.blockhash, lastValidBlockHeight: tx.lastValidBlockHeight,\n    }, 'confirmed');\n    return {\n        transactionSignature: signature,\n        signedTransaction: Buffer.from(rawTx).toString('base64'),\n        blockNumber: (_c = (_b = confirmation.context) === null || _b === void 0 ? void 0 : _b.slot) !== null && _c !== void 0 ? _c : 0,\n        gasUsed: '0',\n    };\n}\n"],"names":["Buffer","getConfig","index"],"mappings":";;;;;;;;AAEA,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5F,MAAM,sBAAsB,GAAG,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3F,MAAM,sBAAsB,GAAG,6CAA6C;AAC5E,MAAM,iBAAiB,GAAG,kCAAkC;AAC5D,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;AAC3C,IAAI,uBAAuB;AAC3B,IAAI,sBAAsB;AAC1B,IAAI,sBAAsB;AAC1B,IAAI,iBAAiB;AACrB,CAAC,CAAC;AACF,MAAM,2BAA2B,GAAG,0BAA0B;AAC9D,MAAM,8BAA8B,GAAG,6BAA6B;AACpE,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAAC;AACnD,IAAI,2BAA2B;AAC/B,IAAI,8BAA8B;AAClC,CAAC,CAAC;AACF,MAAM,WAAW,CAAC;AAClB,IAAI,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;AACrC,QAAQ,IAAI,CAAC,IAAI,GAAG,IAAI;AACxB,QAAQ,IAAI,CAAC,MAAM,GAAG,MAAM;AAC5B,QAAQ,IAAI,CAAC,KAAK,GAAG,KAAK;AAC1B,IAAI;AACJ,IAAI,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE;AAChC,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;AACrD,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,sDAAsD,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1G,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAClF,IAAI,OAAO,CAAC,KAAK,EAAE;AACnB,QAAQ,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC;AACnC,QAAQ,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;AAChF,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACnF,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC;AACxB,QAAQ,OAAO,KAAK,KAAK,CAAC;AAC1B,IAAI;AACJ,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;AACnF,IAAI,UAAU,CAAC,KAAK,EAAE;AACtB,QAAQ,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACtD,QAAQ,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;AACxC,QAAQ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;AACtE,QAAQ,IAAI,CAAC,MAAM,IAAI,MAAM;AAC7B,QAAQ,OAAOA,0BAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AAChD,IAAI;AACJ,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1E,IAAI,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACzD;AACA,SAAS,qBAAqB,CAAC,MAAM,EAAE;AACvC,IAAI,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC;AAC1D,IAAI,IAAI,MAAM,KAAK,CAAC;AACpB,QAAQ;AACR,IAAI,IAAI,MAAM,KAAK,CAAC;AACpB,QAAQ,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC;AACtF,IAAI,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC;AAC5D,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC;AACtC,QAAQ,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,yBAAyB,CAAC;AACjD,SAAS,IAAI,OAAO,KAAK,CAAC;AAC1B,QAAQ,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,sBAAsB,CAAC;AAC9C,SAAS,IAAI,OAAO,KAAK,CAAC;AAC1B,QAAQ,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC;AACnD,SAAS,IAAI,OAAO,KAAK,CAAC;AAC1B,QAAQ,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,yBAAyB,CAAC;AAClD;AACA,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,gEAAgE,EAAE,OAAO,CAAC,CAAC,CAAC;AACrG;AACA,SAAS,oBAAoB,CAAC,IAAI,EAAE;AACpC,IAAI,IAAI,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI;AAChE,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;AACzD,QAAQ,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5C,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;AAChC,QAAQ,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5C,IAAI,OAAO,UAAU;AACrB;AACA,SAAS,mCAAmC,CAAC,IAAI,EAAE,KAAK,EAAE;AAC1D,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;AACvB,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC1E,IAAI,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AAChE,IAAI,IAAI,CAAC,kCAAkC,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE;AAChE,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,yCAAyC,CAAC,CAAC;AAC5E,IAAI;AACJ,IAAI,MAAM,IAAI,GAAG,aAAa,KAAK,8BAA8B;AACjE,IAAI,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC;AAClD,IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;AAC5C,IAAI,MAAM,aAAa,GAAG,EAAE;AAC5B,IAAI,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC;AAC5D,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE;AAC5C,QAAQ,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;AACpF,QAAQ,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;AAClE,QAAQ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC,EAAE,EAAE;AACjD,YAAY,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;AAC9C,YAAY,qBAAqB,CAAC,MAAM,CAAC;AACzC,YAAY,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,gBAAgB,CAAC;AAC5C,QAAQ;AACR,IAAI;AACJ,IAAI,MAAM,WAAW,GAAG,EAAE;AAC1B,IAAI,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC;AAC7D,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE;AACxC,QAAQ,WAAW,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;AAChF,IAAI,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;AACvD,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE;AAC1C,QAAQ,MAAM,CAAC,UAAU,CAAC,4BAA4B,CAAC;AACvD,QAAQ,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC;AACxC,QAAQ,IAAI,IAAI;AAChB,YAAY,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC;AAChD;AACA,YAAY,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE,kBAAkB,CAAC;AAC1F,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;AAC9C,IAAI,IAAI,QAAQ,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC;AACxC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACvE,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;AACzB,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,sCAAsC,CAAC,CAAC;AACzE,IAAI,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE;AAChD;AACA,SAAS,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE;AAC9D,IAAI,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrF,IAAI,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACjF,IAAI,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACnE,IAAI,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjE,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE;AACxC,QAAQ,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE;AAClJ,aAAa,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AACvC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,+DAA+D,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAC7G,IAAI;AACJ;AACA,SAAS,uCAAuC,CAAC,qBAAqB,EAAE,yBAAyB,EAAE,OAAO,EAAE;AAC5G,IAAI,IAAI,EAAE;AACV,IAAI,MAAM,WAAW,GAAG,yBAAyB,CAAC,WAAW,CAACA,0BAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AAC3G,IAAI,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,GAAG,OAAO;AAChE,IAAI,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,iBAAiB;AAC7D,IAAI,IAAI,uBAAuB,GAAG,CAAC;AACnC,IAAI,MAAM,gBAAgB,GAAG,EAAE;AAC/B,IAAI,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,oBAAoB,EAAE;AAC/D,QAAQ,IAAI,EAAE,CAAC,cAAc,IAAI,WAAW,CAAC,MAAM;AACnD,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,6CAA6C,CAAC,CAAC;AACpF,QAAQ,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;AACnE,QAAQ,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC;AACtD,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,gCAAgC,EAAE,SAAS,CAAC,CAAC,CAAC;AACnF,QAAQ,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,YAAY,UAAU,GAAG,EAAE,CAAC,IAAI,GAAGA,0BAAM,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC;AAC9H,QAAQ,IAAI,SAAS,KAAK,iBAAiB;AAC3C,YAAY,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACxF,QAAQ,IAAI,SAAS,KAAK,uBAAuB,IAAI,SAAS,KAAK,sBAAsB,EAAE;AAC3F,YAAY,uBAAuB,EAAE;AACrC,YAAY,MAAM,MAAM,GAAG,mCAAmC,CAAC,IAAI,EAAE,KAAK,CAAC;AAC3E,YAAY,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa;AAC9C,gBAAgB,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,0DAA0D,CAAC,CAAC;AACrG,YAAY,gBAAgB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;AACjF,QAAQ;AACR,IAAI;AACJ,IAAI,IAAI,uBAAuB,KAAK,CAAC;AACrC,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,2DAA2D,CAAC,CAAC;AAC9F,IAAI,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,CAAC;AAClE,IAAI,OAAO,WAAW;AACtB;AACA,SAAS,WAAW,CAAC,KAAK,EAAE;AAC5B,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;AACjC,QAAQ,OAAO,KAAK;AACpB,IAAI,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK;AACpE,IAAI,OAAO,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC;AAChD;AACO,eAAe,uBAAuB,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE;AAC7F,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;AAC1B,IAAI,MAAM,QAAQ,GAAG,MAAM,OAAO,iBAAiB,CAAC;AACpD,IAAI,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,GAAG,QAAQ;AAC/F,IAAI,MAAM,kBAAkB,GAAG;AAC/B,QAAQ,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;AAC/C,QAAQ,eAAe,EAAE,EAAE,CAAC,eAAe,CAAC,eAAe;AAC3D,QAAQ,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW;AACnD,QAAQ,GAAG,EAAE,EAAE,CAAC,GAAG;AACnB,QAAQ,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,MAAM;AAChG,YAAY,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;AACvD,YAAY,MAAM,EAAEA,0BAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;AAC9C,YAAY,SAAS,EAAE,CAAC,MAAM;AAC9B,gBAAgB,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS;AAC5C,gBAAgB,IAAI,GAAG,IAAI,IAAI;AAC/B,oBAAoB,OAAOA,0BAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1C,gBAAgB,IAAIA,0BAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;AACxC,oBAAoB,OAAO,GAAG;AAC9B,gBAAgB,IAAI,GAAG,YAAY,UAAU;AAC7C,oBAAoB,OAAOA,0BAAM,CAAC,IAAI,CAAC,GAAG,CAAC;AAC3C,gBAAgB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG;AAC1D,oBAAoB,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI;AACxF,wBAAwB,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,gCAAgC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG;AACvG,gBAAgB,OAAOA,0BAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK;AAC9D,oBAAoB,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;AAChG,oBAAoB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE;AAC9E,wBAAwB,MAAM,IAAI,KAAK,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,8CAA8C,CAAC,CAAC;AAC3G,oBAAoB;AACpB,oBAAoB,OAAO,KAAK;AAChC,gBAAgB,CAAC,CAAC,CAAC;AACnB,YAAY,CAAC,GAAG;AAChB,SAAS,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,EAAE;AAChD,KAAK;AACL,IAAI,MAAM,MAAM,GAAG,MAAMC,eAAS,EAAE;AACpC,IAAI,IAAI,EAAE,CAAC,iBAAiB,EAAE;AAC9B,QAAQ,uCAAuC,CAAC,EAAE,CAAC,iBAAiB,EAAE,oBAAoB,EAAE;AAC5F,YAAY,KAAK,EAAE,0BAA0B,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE,kBAAkB;AAC9F,SAAS,CAAC;AACV,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,KAAK,EAAE,MAAM,CAAC,KAAK;AAC3B,QAAQ,MAAM,EAAE,CAAC,kBAAkB,CAAC;AACpC,QAAQ,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,UAAU,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,IAAI;AAC1E,QAAQ,sBAAsB,EAAE,EAAE,CAAC,sBAAsB;AACzD,QAAQ,OAAO,EAAE,EAAE,CAAC,OAAO;AAC3B,QAAQ,eAAe,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,eAAe,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAEC,OAAK,KAAK;AACpH,YAAY,IAAI,EAAE;AAClB,YAAY,MAAM,IAAI,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AACzL,YAAY,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,KAAK,iBAAiB,GAAG,aAAa,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC;AACxH,YAAY,MAAM,WAAW,GAAG,IAAI,sBAAsB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAEF,0BAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3G,YAAY,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE;AACvE,gBAAgB,MAAM,IAAI,KAAK,CAAC,CAAC,sBAAsB,EAAEE,OAAK,CAAC,qDAAqD,CAAC,CAAC;AACtH,YAAY;AACZ,YAAY,OAAO,WAAW;AAC9B,QAAQ,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,EAAE;AAC/C,QAAQ,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;AAC/C,KAAK;AACL,IAAI,OAAO,YAAY,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC;AAC1E;AACO,eAAe,yBAAyB,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE;AAC/F,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE;AAClB,IAAI,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,GAAG,MAAM,OAAO,iBAAiB,CAAC;AAChF,IAAI,MAAM,MAAM,GAAG,MAAMD,eAAS,EAAE;AACpC,IAAI,MAAM,WAAW,GAAG,uCAAuC,CAAC,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,EAAE;AAChH,QAAQ,KAAK,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE,kBAAkB;AACvF,KAAK,CAAC;AACN,IAAI,MAAM,YAAY,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,MAAM,KAAK;AAC7G,IAAI,MAAM,MAAM,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,EAAE;AACtF,IAAI,IAAI,YAAY,IAAI,CAAC,MAAM;AAC/B,QAAQ,MAAM,IAAI,KAAK,CAAC,CAAC,sEAAsE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9G,IAAI,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,WAAW,CAAC;AACpE,IAAI,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE;AACtC,IAAI,IAAI,CAAC,YAAY,EAAE;AACvB,QAAQ,OAAO,EAAE,oBAAoB,EAAE,EAAE,EAAE,iBAAiB,EAAED,0BAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE;AACnI,IAAI;AACJ,IAAI,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC;AAC1D,IAAI,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AACzG,IAAI,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC;AAC7D,QAAQ,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,oBAAoB,EAAE,EAAE,CAAC,oBAAoB;AACzF,KAAK,EAAE,WAAW,CAAC;AACnB,IAAI,OAAO;AACX,QAAQ,oBAAoB,EAAE,SAAS;AACvC,QAAQ,iBAAiB,EAAEA,0BAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAChE,QAAQ,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,YAAY,CAAC,OAAO,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,MAAM,GAAG,EAAE,GAAG,CAAC;AACvI,QAAQ,OAAO,EAAE,GAAG;AACpB,KAAK;AACL;;;;;"}

package/dist/types.d.ts

@@ -1,5 +1,5 @@
-import { PublicKey, TransactionInstruction, Transaction, VersionedTransaction } from "@solana/web3.js";
-import { SetOptions } from "./client/operations";
+import type { PublicKey, TransactionInstruction, Transaction, VersionedTransaction } from "@solana/web3.js";
+import type { SetOptions } from "./client/operations";
 export interface AuthProvider {
     login(): Promise<User | null>;
     runTransaction(evmTransactionData?: EVMTransaction, solTransactionData?: SolTransaction, options?: SetOptions): Promise<TransactionResult>;
@@ -56,14 +56,38 @@ export interface User {
      * prompt. `false`/absent for real (email/social/wallet) logins.
      */
     isAnonymous?: boolean;
+    /**
+     * REAL onchain EVM wallet address (resolves @user.evmAddress). Present for EVM
+     * wallet/SIWE logins; `null`/absent for Solana-wallet and email-only logins
+     * that haven't linked an EVM wallet. Canonical LOWERCASE 0x-hex — the identity
+     * layer matches case-sensitively, so it is normalized at the boundary. Derived
+     * from the idToken's `custom:evmWalletAddress` claim. For EVM wallet logins
+     * `id === evmAddress` and `address` (the Solana wallet) is null.
+     */
+    evmAddress?: string | null;
     provider: AuthProvider;
 }
 export interface EVMTransaction {
-    contractAddress: string;
-    contractAbi: string | any;
-    functionName: string;
-    value: string;
-    txArgs: any[];
+    contractAddress?: string;
+    contractAbi?: string | any;
+    functionName?: string;
+    txArgs?: any[];
+    /** Target contract (the per-chain BoundedRuntime address). */
+    to?: string;
+    /** ABI-encoded calldata (setDocuments(...)). */
+    data?: string;
+    /** Wei value to send with the call, as a decimal or 0x-hex string. Default "0". */
+    value?: string;
+    /** EIP-155 chain id the tx must execute on (used for the chain-switch guard). */
+    chainId?: number;
+    /** Optional gas limit hint (the worker's eth_estimateGas ×1.2). */
+    gas?: string;
+    /** Optional EIP-1559 max fee per gas. */
+    maxFeePerGas?: string;
+    /** Optional EIP-1559 max priority fee per gas. */
+    maxPriorityFeePerGas?: string;
+    /** Optional nonce; normally omitted so the signing wallet fills it. */
+    nonce?: number;
 }
 export interface SolTransaction {
     appId: string;

package/dist/utils/api.d.ts

@@ -3,4 +3,5 @@ export declare function makeApiRequest(method: string, urlPath: string, data?: a
     _getAuthHeaders?: () => Promise<Record<string, string>>;
     _clearAuth?: () => Promise<void>;
     timeout?: number;
+    signal?: AbortSignal;
 }): Promise<any>;

package/dist/utils/auth-api.d.ts

@@ -1,6 +1,15 @@
 export declare function genNonce(): Promise<any>;
 export declare function genAuthNonce(): Promise<any>;
-export declare function createSessionWithSignature(address: string, message: string, signature: string): Promise<any>;
+/**
+ * Exchange a wallet signature for a Bounded session at the /session issuer.
+ *
+ * @param authMethodOverride the exact /session discriminator to send (e.g. 'siwe'
+ *   for the SIWE/EVM path). When omitted the method is derived from config: an
+ *   aliased method (evm-wallet → siwe) maps through SESSION_METHOD_ALIASES, a
+ *   Solana wallet/guest method passes through verbatim, and anything else
+ *   defaults to the canonical 'phantom' the issuer accepts for a signature.
+ */
+export declare function createSessionWithSignature(address: string, message: string, signature: string, authMethodOverride?: string): Promise<any>;
 export declare function refreshSession(refreshToken: string, issuer?: string): Promise<any>;
 export declare class SessionRevokeError extends Error {
     readonly cause?: unknown;

package/dist/utils/evm/evm-transaction-validation.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Selectors derived from the canonical BoundedRuntime signatures (BoundedTypes.sol):
+ *
+ *   cast sig 'setDocuments(string,(string[],bool,(string,uint8,uint8,bytes)[])[])'
+ *     => 0x0827b094
+ *   cast sig 'setDocumentsAttested(string,(string[],bool,(string,uint8,uint8,bytes)[])[],(bytes32,uint256,uint256,uint8,bytes32,bytes32))'
+ *     => 0x87b111c4
+ *
+ * Keep the signatures beside the constants: changing either Solidity tuple is an
+ * ABI break and must deliberately update these values and the Foundry goldens.
+ */
+export declare const BOUNDED_RUNTIME_SET_DOCUMENTS_SELECTOR = "0x0827b094";
+export declare const BOUNDED_RUNTIME_SET_DOCUMENTS_ATTESTED_SELECTOR = "0x87b111c4";
+export interface EvmTransactionPolicy {
+    /** A single allowed chain. */
+    chainId?: number;
+    /** Runtime for `chainId` (single-chain shorthand). */
+    runtimeAddress?: string;
+    /** Per-chain runtime allowlist for a multi-chain signer. */
+    runtimeAddresses?: Record<string, string>;
+}
+/** Minimal structural transaction surface consumed by the canonical validator.
+ * Kept local so security-sensitive server/Worker signers do not pull the
+ * browser/client type graph merely to validate a prebuilt runtime write. */
+export interface EvmWriteTransaction {
+    to?: string;
+    data?: string;
+    value?: string;
+    chainId?: number;
+    nonce?: number;
+}
+/**
+ * Fail closed unless calldata is a byte-for-byte canonical ABI encoding of one
+ * supported BoundedRuntime write. This is the defense used by direct signer
+ * surfaces; the higher-level write validator below additionally binds app/ops.
+ */
+export declare function assertCanonicalBoundedRuntimeWriteCalldata(rawData: unknown): void;
+/** Verify the untrusted 202 payload is exactly the governed write the app asked for. */
+export declare function assertEvmTransactionMatchesWrite(transaction: EvmWriteTransaction, context: {
+    appId: string;
+    documents: Array<{
+        destinationPath: string;
+        document: any;
+    }>;
+    policy?: EvmTransactionPolicy | null;
+}): void;

package/dist/utils/evm/evm-utils.d.ts

@@ -0,0 +1,40 @@
+export interface SiweMessageOptions {
+    /**
+     * EIP-155 chain id the wallet is connected to. The verifier requires a
+     * positive safe integer; write-time chain/runtime policy is enforced
+     * separately before transaction signing. Defaults to 1 when unavailable.
+     */
+    chainId?: number;
+    /** Single-line statement (must not contain a newline). Defaults to the canonical prompt. */
+    statement?: string;
+    /** Issued-at instant. Defaults to now. */
+    issuedAt?: Date;
+    /** Expiration instant. Defaults to issuedAt + 5 min (inside the issuer's 10-min cap). */
+    expirationTime?: Date;
+    /** EIP-4361 version; the grammar fixes this at "1". */
+    version?: string;
+}
+/**
+ * Build the canonical EIP-4361 SIWE message the bounded-auth issuer verifies.
+ *
+ * @param address  the connected EVM account (lowercased into the prompt).
+ * @param nonce    single-use nonce from genAuthNonce().
+ * @param appId    the target app id (bound as the sole `bounded:app:<appId>` resource).
+ * @param domain   RFC-3986 authority of the requesting site (e.g. window.location.host).
+ * @param uri      the requesting URI; its origin is bound to the domain and actual browser Origin.
+ */
+export declare function genSiweMessage(address: string, nonce: string, appId: string, domain: string, uri: string, options?: SiweMessageOptions): string;
+/**
+ * Lowercase an EVM address to the canonical identity form. EVM addresses are
+ * case-insensitive on-chain but the identity layer (@user.evmAddress) matches
+ * case-sensitively, so every boundary normalizes to lowercase. Does not validate
+ * shape — use normalizeEvmAddress() when the input is untrusted.
+ */
+export declare function toLowerEvmAddress(address: string): string;
+/**
+ * Normalize an untrusted EVM address to canonical lowercase 0x-hex, or null when
+ * it isn't a well-formed 20-byte hex address. Mirrors the realtime-worker's
+ * normalizeEvmAddress (auth.ts) EXACTLY so a client-derived @user.evmAddress and
+ * the server-authenticated one are byte-identical (fail-closed on malformed).
+ */
+export declare function normalizeEvmAddress(raw: unknown): string | null;

package/dist/utils/server-session-manager.d.ts

@@ -1,4 +1,4 @@
-import { Keypair } from "@solana/web3.js";
+import type { Keypair } from "@solana/web3.js";
 /**
  * Server-side SessionManager
  * --------------------------
@@ -19,12 +19,19 @@ export declare class ServerSessionManager {
     private session;
     private pendingSession;
     private readonly keypair;
+    private readonly sessionFactory;
     private constructor();
     /**
      * Create a session manager for a specific keypair.
      * Each instance has its own independent session cache.
      */
     static forKeypair(keypair: Keypair): ServerSessionManager;
+    /**
+     * Create an isolated server session manager for a non-Solana signer (currently
+     * EVM/SIWE). The factory must perform the signature exchange and return the
+     * canonical signer address with its tokens; no signer state becomes global.
+     */
+    static forSessionFactory(factory: () => Promise<ServerSession>): ServerSessionManager;
     private createSession;
     getSession(): Promise<ServerSession>;
     setSession(session: ServerSession): void;

package/dist/utils/sol/sol-accessors.d.ts

@@ -0,0 +1,29 @@
+import type { Connection, PublicKey, Transaction, TransactionInstruction, VersionedTransaction } from "@solana/web3.js";
+import type { AnchorProvider } from "@coral-xyz/anchor";
+import type { TxData } from "./sol-utils";
+export type RemainingAccount = {
+    pubkey: PublicKey;
+    isWritable: boolean;
+    isSigner: boolean;
+};
+/** Load the Anchor/Web3 transaction builder only when an onchain write uses it. */
+export declare function buildSetDocumentsTransaction(connection: Connection, idl: any, programProvider: AnchorProvider, payerPublicKey: PublicKey, args: {
+    app_id: string;
+    documents: {
+        path: string;
+        operations: {
+            key: string;
+            value: any;
+            operation: number;
+        }[];
+    }[];
+    delete_paths: string[];
+    txData: TxData[];
+}, remainingAccounts: RemainingAccount[], lutKey: PublicKey | null, preInstructions: TransactionInstruction[], simulate: boolean, additionalLutAddresses?: string[]): Promise<{
+    tx: VersionedTransaction | Transaction;
+    blockhash: string;
+    lastValidBlockHeight: number;
+}>;
+/** SIWS message creation is async already, so its onchain module can be lazy. */
+export declare function genSolanaMessage(address: string, nonce: string): Promise<string>;
+export declare function convertRemainingAccounts(remainingAccounts: any[]): RemainingAccount[];

package/dist/utils/sol/sol-utils.d.ts

@@ -1,5 +1,5 @@
-import { Connection, PublicKey, Transaction, TransactionInstruction, VersionedTransaction } from "@solana/web3.js";
-import * as anchor from "@coral-xyz/anchor";
+import type { Connection, PublicKey, Transaction, TransactionInstruction, VersionedTransaction } from "@solana/web3.js";
+import type { AnchorProvider } from "@coral-xyz/anchor";
 export type RemainingAccount = {
     pubkey: PublicKey;
     isWritable: boolean;
@@ -10,14 +10,8 @@ export type TxData = {
     txData: Buffer;
     raIndices: Buffer;
 };
-export declare function genSolanaMessage(address: string, nonce: string): Promise<string>;
 export declare function isHexString(value: unknown): boolean;
-export declare function convertRemainingAccounts(remainingAccounts: any[]): {
-    pubkey: PublicKey;
-    isWritable: boolean;
-    isSigner: boolean;
-}[];
-export declare function buildSetDocumentsTransaction(connection: Connection, idl: any, anchorProvider: anchor.AnchorProvider, payerPublicKey: PublicKey, args: {
+export declare function buildSetDocumentsTransaction(connection: Connection, idl: any, programProvider: AnchorProvider, payerPublicKey: PublicKey, args: {
     app_id: string;
     documents: {
         path: string;

package/dist/utils/sol/solana-message.d.ts

@@ -0,0 +1 @@
+export declare function genSolanaMessage(address: string, nonce: string): Promise<string>;

package/dist/utils/utils.d.ts

@@ -11,10 +11,12 @@ export declare function getUserInfo(isServer: boolean): Promise<any>;
 export interface UserIdentity {
     /** @user.id — universal stable identity (custom:userId only). */
     id: string | null;
-    /** @user.address — REAL wallet; null for email-only logins. */
+    /** @user.address — REAL Solana wallet; null for email-only / EVM-wallet logins. */
     address: string | null;
     /** @user.email — verified lowercased email; null for wallet/SIWS logins. */
     email: string | null;
+    /** @user.evmAddress — REAL EVM wallet, canonical lowercase 0x-hex; null when unlinked. */
+    evmAddress: string | null;
 }
 /**
  * Derive { id, address, email } from an idToken's claims.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bounded-sh/core",
-  "version": "0.0.42",
+  "version": "0.0.46",
   "description": "Shared client, data-plane, and transport primitives for Bounded, the full-stack app builder and runtime for AI-built apps: policy-enforced operations, files, functions, and realtime.",
   "homepage": "https://bounded.sh/docs/sdk",
   "main": "./dist/index.js",
@@ -16,7 +16,7 @@
   "scripts": {
     "build": "rm -rf ./dist ./.rollup-tmp && tsc -p tsconfig.build.json --outDir .rollup-tmp --declarationDir .rollup-tmp --emitDeclarationOnly false && rollup -c && tsc -p tsconfig.build.json --emitDeclarationOnly --declarationDir dist && rm -rf ./.rollup-tmp",
     "watch": "rollup -c -w",
-    "test": "node src/client/run-config-network-test.mjs && node src/client/run-read-principal-test.mjs && node src/client/run-principal-collision-test.mjs && node src/client/run-row-shape-test.mjs && node src/client/run-transport-test.mjs && node src/client/run-public-export-surface-test.mjs && node src/client/run-live-auth-test.mjs && node src/client/run-live-view-principal-test.mjs && node src/client/run-subscription-auth-error-test.mjs && node src/client/run-onchain-validation-test.mjs && node src/client/websocket-auth-url.test.mjs",
+    "test": "node src/client/run-config-network-test.mjs && node src/client/run-read-principal-test.mjs && node src/client/run-principal-collision-test.mjs && node src/client/run-abortable-read-test.mjs && node src/utils/run-api-abort-test.mjs && node src/utils/run-api-transient-get-retry-test.mjs && node src/client/run-row-shape-test.mjs && node src/client/run-transport-test.mjs && node src/client/run-public-export-surface-test.mjs && node src/client/run-live-auth-test.mjs && node src/client/run-live-view-principal-test.mjs && node src/client/run-subscription-auth-error-test.mjs && node src/client/run-subscription-confirmation-retry-test.mjs && node src/client/subscription-handoff-grace.source.test.mjs && node src/client/run-onchain-validation-test.mjs && node src/client/run-evm-dispatch-test.mjs && node src/utils/evm/run-evm-utils-test.mjs && node src/client/websocket-auth-url.test.mjs",
     "prepare": "npm run build"
   },
   "files": [
@@ -64,4 +64,4 @@
   "publishConfig": {
     "access": "public"
   }
-}
+}