@bounded-sh/core 0.0.66 → 0.0.68

package/dist/client/decline.d.ts

@@ -9,10 +9,10 @@ export interface DeclineBoundary {
     field?: string;
     /** Stable reason when one boundary type has multiple rejection modes. */
     cause?: 'cap_exceeded' | 'append_only_update' | 'append_only_delete';
-    cap?: number;
+    cap?: number | string;
     windowSeconds?: number;
-    current?: number;
-    attempted?: number;
+    current?: number | string;
+    attempted?: number | string;
     [key: string]: unknown;
 }
 /**

package/dist/client/subscribe-query.d.ts

@@ -45,7 +45,18 @@ type ResolvedIdentity = {
     bucket: string;
     token: string | null;
 };
-/** Deterministic key-sorted serialization of query args. */
+/**
+ * Deterministic key-sorted serialization of query args, canonicalizing the EXACT
+ * JSON wire representation the request serializer sends. Args are first projected
+ * through `JSON.parse(JSON.stringify(...))` so `toJSON` runs (a `Date` becomes its
+ * ISO string, not `{}`) and functions/`undefined` are dropped exactly as the wire
+ * does, then key-sorted with null-prototype objects so an own `__proto__` key
+ * round-trips as a property. This makes the dedupe key match what the server
+ * actually receives, so two subscriptions can share a poller only when their wire
+ * inputs are identical. Cyclic structures and other values the wire cannot
+ * serialize (e.g. `BigInt`) are rejected by `JSON.stringify` here, exactly as they
+ * would be on the wire.
+ */
 export declare function canonicalizeArgs(args: any): string;
 /**
  * Deterministic key-sorted serialization of a query RESULT for change detection.

package/dist/{index-TyXiW4Uf.mjs → index-C9h-Bnjk.mjs}

@@ -4043,7 +4043,7 @@ class ServerSessionManager {
         const sessionConfig = (_a = this.sessionConfig) !== null && _a !== void 0 ? _a : undefined;
         /* fetch nonce from auth API (bound to the snapshotted app+issuer) */
         const nonce = await genAuthNonce(sessionConfig);
-        const { genSolanaMessage } = await import('./solana-message-DXXwC95Z.mjs');
+        const { genSolanaMessage } = await import('./solana-message-ngQQt80s.mjs');
         const message = await genSolanaMessage(address, nonce, sessionConfig === null || sessionConfig === void 0 ? void 0 : sessionConfig.appId);
         /* sign the message */
         const sigBytes = nacl.sign.detached(new TextEncoder().encode(message), kp.secretKey);
@@ -6775,7 +6775,7 @@ async function doReconnectWithNewAuth() {
         console.warn('[WS v2] Failed to clear HTTP read cache on auth change:', error);
     }
     try {
-        const { reconnectRealtimeStoreWithNewAuth } = await import('./realtime-store-CpbnXM7q.mjs');
+        const { reconnectRealtimeStoreWithNewAuth } = await import('./realtime-store-B_Szs6F3.mjs');
         await reconnectRealtimeStoreWithNewAuth();
     }
     catch (error) {
@@ -8717,7 +8717,7 @@ async function setMany(many, options) {
                         'Nothing was signed or submitted.');
                 }
                 const solanaChain = workerChain;
-                const { handlePreBuiltTransaction } = await import('./solana-operations-ChHG25O0.mjs');
+                const { handlePreBuiltTransaction } = await import('./solana-operations-B0Q9UOHR.mjs');
                 const solanaOutcome = await handlePreBuiltTransaction(curTx, authProvider, options, expectedWritePaths);
                 // `shouldSubmitTx: false` signed WITHOUT sending — no signature exists,
                 // and there is nothing to mirror, so no synchronization is attempted.
@@ -9615,9 +9615,40 @@ function sortDeep(value) {
     }
     return value;
 }
-/** Deterministic key-sorted serialization of query args. */
+/**
+ * Key-sorted deep copy that mirrors the JSON wire form byte-for-byte. Unlike
+ * `sortDeep`, it assigns into NULL-PROTOTYPE objects so an own `__proto__` key is
+ * kept as an ordinary JSON property instead of being swallowed by
+ * `Object.prototype`'s `__proto__` setter (which would mutate the prototype and
+ * drop the property, diverging from what `JSON.stringify` actually emits).
+ */
+function sortDeepWire(value) {
+    if (Array.isArray(value))
+        return value.map(sortDeepWire);
+    if (value && typeof value === 'object') {
+        const out = Object.create(null);
+        for (const k of Object.keys(value).sort())
+            out[k] = sortDeepWire(value[k]);
+        return out;
+    }
+    return value;
+}
+/**
+ * Deterministic key-sorted serialization of query args, canonicalizing the EXACT
+ * JSON wire representation the request serializer sends. Args are first projected
+ * through `JSON.parse(JSON.stringify(...))` so `toJSON` runs (a `Date` becomes its
+ * ISO string, not `{}`) and functions/`undefined` are dropped exactly as the wire
+ * does, then key-sorted with null-prototype objects so an own `__proto__` key
+ * round-trips as a property. This makes the dedupe key match what the server
+ * actually receives, so two subscriptions can share a poller only when their wire
+ * inputs are identical. Cyclic structures and other values the wire cannot
+ * serialize (e.g. `BigInt`) are rejected by `JSON.stringify` here, exactly as they
+ * would be on the wire.
+ */
 function canonicalizeArgs(args) {
-    return JSON.stringify(sortDeep(args !== null && args !== void 0 ? args : null));
+    var _a;
+    const wire = JSON.parse((_a = JSON.stringify(args !== null && args !== void 0 ? args : null)) !== null && _a !== void 0 ? _a : 'null');
+    return JSON.stringify(sortDeepWire(wire));
 }
 /**
  * Deterministic key-sorted serialization of a query RESULT for change detection.
@@ -10221,7 +10252,7 @@ function toMillis(seconds) {
 
 /** SIWS message creation is async already, so its onchain module can be lazy. */
 async function genSolanaMessage(address, nonce) {
-    const implementation = await import('./solana-message-DXXwC95Z.mjs');
+    const implementation = await import('./solana-message-ngQQt80s.mjs');
     return implementation.genSolanaMessage(address, nonce);
 }
 
@@ -10291,7 +10322,14 @@ async function invoke(name, args = {}, opts = {}) {
     const controller = new AbortController();
     const timeoutMs = (_e = opts.timeoutMs) !== null && _e !== void 0 ? _e : 60000;
     const timer = setTimeout(() => controller.abort(), timeoutMs);
+    // `fetch` resolves as soon as the response HEADERS arrive, not when the body
+    // has been received, so the abort timer must stay armed across `res.text()`
+    // too. Clearing it in a `finally` that covers both the fetch AND the body read
+    // means a dispatcher/network that returns headers then stalls (or drip-feeds)
+    // the body is torn down at `timeoutMs` instead of leaving `invoke` pending
+    // forever and accumulating open connections (DS3-0432).
     let res;
+    let text;
     try {
         res = await fetch(`${base}/invoke`, {
             method: 'POST',
@@ -10299,17 +10337,18 @@ async function invoke(name, args = {}, opts = {}) {
             body: JSON.stringify({ appId: config.appId, functionName: name, args }),
             signal: controller.signal,
         });
+        text = await res.text();
     }
     catch (err) {
-        clearTimeout(timer);
         if ((err === null || err === void 0 ? void 0 : err.name) === 'AbortError') {
             throw new FunctionInvokeError(`Function "${name}" invocation timed out after ${timeoutMs}ms`);
         }
         throw new FunctionInvokeError(`Failed to reach the functions dispatcher: ${(_f = err === null || err === void 0 ? void 0 : err.message) !== null && _f !== void 0 ? _f : String(err)}`);
     }
-    clearTimeout(timer);
+    finally {
+        clearTimeout(timer);
+    }
     let body = null;
-    const text = await res.text();
     if (text) {
         try {
             body = JSON.parse(text);
@@ -10688,5 +10727,5 @@ function defineLiveModule(mod) {
     return mod;
 }
 
-export { WebSessionManager as $, closeAllSubscriptions as A, clearCache as B, getCachedData as C, reconnectWithNewAuth as D, createClient as E, subscribeQuery as F, closeAllQuerySubscriptions as G, canonicalizeArgs as H, InsufficientBalanceError as I, canonicalizeResult as J, DEFAULT_QUERY_POLL_INTERVAL_MS as K, BoundedDeclineError as L, MIN_QUERY_POLL_INTERVAL_MS as M, deriveDecline as N, dispatchDeclineEvent as O, DECLINE_EVENT_NAME as P, dispatchRateLimitEvent as Q, RATE_LIMIT_EVENT_NAME as R, ScopedClientReadOnlyError as S, hasActiveConnection as T, increment as U, serverTimestamp as V, now as W, toSeconds as X, toMillis as Y, getIdToken as Z, deriveUserIdentityFromIdToken as _, getWebhookKeysUrl as a, ReactNativeSessionManager as a0, getActiveSessionManager as a1, onSessionCleared as a2, SessionEnvironmentError as a3, UNSUPPORTED_ENVIRONMENT_CODE as a4, AUTH_CHANGED_CODE as a5, AUTH_EXPIRED_CODE as a6, isAuthExpiredError as a7, ServerSessionManager as a8, createSessionWithSignature as a9, refreshSession as aa, revokeSession as ab, signSessionCreateMessage as ac, genAuthNonce as ad, genSolanaMessage as ae, genSiweMessage as af, normalizeEvmAddress as ag, toLowerEvmAddress as ah, assertCanonicalBoundedRuntimeWriteCalldata as ai, assertEvmTransactionMatchesWrite as aj, BOUNDED_RUNTIME_SET_DOCUMENTS_SELECTOR as ak, BOUNDED_RUNTIME_SET_DOCUMENTS_ATTESTED_SELECTOR as al, functions as am, invoke as an, FunctionInvokeError as ao, live as ap, intent as aq, status as ar, subscribeView as as, LiveIntentError as at, withEffects as au, isEffectResult as av, defineLiveModule as aw, EFFECT_INTENT_ADDRESS as ax, bufferExports as b, getConfiguredAppId as c, get as d, getMany as e, docId as f, getConfig as g, setMany as h, init as i, setFile as j, getFiles as k, search as l, runQueryMany as m, runExpression as n, runExpressionMany as o, signMessage as p, queryAggregate as q, runQuery as r, set as s, signTransaction as t, signAndSubmitTransaction as u, count as v, aggregate as w, reconcileSetResult as x, waitForSetResult as y, subscribe as z };
-//# sourceMappingURL=index-TyXiW4Uf.mjs.map
+export { getSessionGeneration as $, closeAllSubscriptions as A, clearCache as B, getCachedData as C, reconnectWithNewAuth as D, createClient as E, subscribeQuery as F, closeAllQuerySubscriptions as G, canonicalizeArgs as H, InsufficientBalanceError as I, canonicalizeResult as J, DEFAULT_QUERY_POLL_INTERVAL_MS as K, BoundedDeclineError as L, MIN_QUERY_POLL_INTERVAL_MS as M, deriveDecline as N, dispatchDeclineEvent as O, DECLINE_EVENT_NAME as P, dispatchRateLimitEvent as Q, RATE_LIMIT_EVENT_NAME as R, ScopedClientReadOnlyError as S, hasActiveConnection as T, increment as U, serverTimestamp as V, now as W, toSeconds as X, toMillis as Y, getIdToken as Z, deriveUserIdentityFromIdToken as _, getWebhookKeysUrl as a, WebSessionManager as a0, ReactNativeSessionManager as a1, getActiveSessionManager as a2, onSessionCleared as a3, SessionEnvironmentError as a4, UNSUPPORTED_ENVIRONMENT_CODE as a5, AUTH_CHANGED_CODE as a6, AUTH_EXPIRED_CODE as a7, isAuthExpiredError as a8, getFreshAuthToken as a9, ServerSessionManager as aa, createSessionWithSignature as ab, refreshSession as ac, revokeSession as ad, signSessionCreateMessage as ae, genAuthNonce as af, genSolanaMessage as ag, genSiweMessage as ah, normalizeEvmAddress as ai, toLowerEvmAddress as aj, assertCanonicalBoundedRuntimeWriteCalldata as ak, assertEvmTransactionMatchesWrite as al, BOUNDED_RUNTIME_SET_DOCUMENTS_SELECTOR as am, BOUNDED_RUNTIME_SET_DOCUMENTS_ATTESTED_SELECTOR as an, functions as ao, invoke as ap, FunctionInvokeError as aq, live as ar, intent as as, status as at, subscribeView as au, LiveIntentError as av, withEffects as aw, isEffectResult as ax, defineLiveModule as ay, EFFECT_INTENT_ADDRESS as az, bufferExports as b, getConfiguredAppId as c, get as d, getMany as e, docId as f, getConfig as g, setMany as h, init as i, setFile as j, getFiles as k, search as l, runQueryMany as m, runExpression as n, runExpressionMany as o, signMessage as p, queryAggregate as q, runQuery as r, set as s, signTransaction as t, signAndSubmitTransaction as u, count as v, aggregate as w, reconcileSetResult as x, waitForSetResult as y, subscribe as z };
+//# sourceMappingURL=index-C9h-Bnjk.mjs.map