@bounded-sh/core 0.0.69 → 0.0.70

package/dist/{index-B3aNfGi6.mjs → index-Csf_2uZF.mjs}

@@ -4043,7 +4043,7 @@ class ServerSessionManager {
         const sessionConfig = (_a = this.sessionConfig) !== null && _a !== void 0 ? _a : undefined;
         /* fetch nonce from auth API (bound to the snapshotted app+issuer) */
         const nonce = await genAuthNonce(sessionConfig);
-        const { genSolanaMessage } = await import('./solana-message-AXfv2U1S.mjs');
+        const { genSolanaMessage } = await import('./solana-message-BFqre_Oi.mjs');
         const message = await genSolanaMessage(address, nonce, sessionConfig === null || sessionConfig === void 0 ? void 0 : sessionConfig.appId);
         /* sign the message */
         const sigBytes = nacl.sign.detached(new TextEncoder().encode(message), kp.secretKey);
@@ -5404,6 +5404,35 @@ async function getWsAuthToken(isServer) {
         throw rememberAmbientAuthFailure(normalizeAuthExpiredError(error, 'Authentication expired and refresh failed'));
     }
 }
+/**
+ * The server refused the token sent on the auth frame: its error frame arrives
+ * while the auth ack is still pending, just before the 1008 close. Local expiry
+ * had vouched for that exact token (unexpired but invalid - e.g. a rotated
+ * issuer key), so re-sending it would only be refused again. Force a genuinely
+ * new one: a definitive issuer rejection clears the session inside the shared
+ * helper (firing notifySessionCleared, which signs the UI out), a successful
+ * refresh commits a new token - and the ordinary reconnect loop picks up either
+ * outcome on its own. Fresh token: authenticates. No token: connects
+ * anonymously and public reads replay instead of erroring forever.
+ */
+async function recoverFromServerAuthRejection(connection) {
+    const rejected = connection.pendingAuthToken;
+    if (!rejected)
+        return;
+    // One forced refresh per distinct rejected token value: a transiently
+    // unreachable issuer must not turn the reconnect loop into a refresh storm.
+    if (connection.serverRejectedAuthToken === rejected)
+        return;
+    connection.serverRejectedAuthToken = rejected;
+    try {
+        await getFreshAuthToken(connection.isServer, { force: true });
+    }
+    catch (_a) {
+        // Every failure mode is already handled inside the helper: a dead
+        // session was cleared (auth listeners notified), a transient refresh
+        // failure keeps the session and the latch above stops the storm.
+    }
+}
 async function getConnectionAuthToken(isServer, authTokenProvider, anonymous) {
     // A read-only scoped instance connects anonymously: no auth frame, and it
     // must never read (or refresh) the ambient global session - that session
@@ -5727,6 +5756,8 @@ async function getOrCreateConnectionOnce(appId, isServer, routePath, authTokenPr
         authFailure: null,
         source,
         anonymous,
+        isServer,
+        serverRejectedAuthToken: null,
     };
     connections.set(connKey, connection);
     // URL provider for reconnection with fresh tokens
@@ -5992,6 +6023,16 @@ function handleServerMessage(connection, message) {
         }
         case 'error': {
             console.error('[WS v2] Server error:', message.code, message.message);
+            // The auth frame was just refused: while the auth ack is pending the
+            // server sends no other error frame, and this one is immediately
+            // followed by its 1008 close. Kick the forced-refresh recovery - the
+            // ordinary reconnect loop then re-auths with a fresh token or, once a
+            // definitively dead session is cleared, connects anonymously so
+            // public reads still replay. Ambient connections only: wallet-scoped
+            // connections refresh through their own provider.
+            if (connection.isAuthenticating && connection.pendingAuthToken && !connection.authTokenProvider && !connection.anonymous) {
+                void recoverFromServerAuthRejection(connection);
+            }
             // Build an Error that ALSO carries the stable `code` as a structured
             // field (not just string-interpolated into the message) so callers can
             // branch on it — e.g. `catch (e) { if (e.code === 'invariant_violation') }`
@@ -6775,7 +6816,7 @@ async function doReconnectWithNewAuth() {
         console.warn('[WS v2] Failed to clear HTTP read cache on auth change:', error);
     }
     try {
-        const { reconnectRealtimeStoreWithNewAuth } = await import('./realtime-store-i8pxSuZE.mjs');
+        const { reconnectRealtimeStoreWithNewAuth } = await import('./realtime-store-ByP5wYsa.mjs');
         await reconnectRealtimeStoreWithNewAuth();
     }
     catch (error) {
@@ -8218,7 +8259,7 @@ async function setMany(many, options) {
                         'Nothing was signed or submitted.');
                 }
                 const solanaChain = workerChain;
-                const { handlePreBuiltTransaction } = await import('./solana-operations-Bte92rmq.mjs');
+                const { handlePreBuiltTransaction } = await import('./solana-operations-ByMDnjog.mjs');
                 const solanaOutcome = await handlePreBuiltTransaction(curTx, authProvider, options, expectedWritePaths);
                 // `shouldSubmitTx: false` signed WITHOUT sending — no signature exists,
                 // and there is nothing to mirror, so no synchronization is attempted.
@@ -9659,7 +9700,7 @@ function toMillis(seconds) {
 
 /** SIWS message creation is async already, so its onchain module can be lazy. */
 async function genSolanaMessage(address, nonce) {
-    const implementation = await import('./solana-message-AXfv2U1S.mjs');
+    const implementation = await import('./solana-message-BFqre_Oi.mjs');
     return implementation.genSolanaMessage(address, nonce);
 }
 
@@ -10135,4 +10176,4 @@ function defineLiveModule(mod) {
 }
 
 export { getSessionGeneration as $, closeAllSubscriptions as A, clearCache as B, getCachedData as C, reconnectWithNewAuth as D, createClient as E, subscribeQuery as F, closeAllQuerySubscriptions as G, canonicalizeArgs as H, InsufficientBalanceError as I, canonicalizeResult as J, DEFAULT_QUERY_POLL_INTERVAL_MS as K, BoundedDeclineError as L, MIN_QUERY_POLL_INTERVAL_MS as M, deriveDecline as N, dispatchDeclineEvent as O, DECLINE_EVENT_NAME as P, dispatchRateLimitEvent as Q, RATE_LIMIT_EVENT_NAME as R, ScopedClientReadOnlyError as S, hasActiveConnection as T, increment as U, serverTimestamp as V, now as W, toSeconds as X, toMillis as Y, getIdToken as Z, deriveUserIdentityFromIdToken as _, getWebhookKeysUrl as a, WebSessionManager as a0, ReactNativeSessionManager as a1, getActiveSessionManager as a2, onSessionCleared as a3, SessionEnvironmentError as a4, UNSUPPORTED_ENVIRONMENT_CODE as a5, AUTH_CHANGED_CODE as a6, AUTH_EXPIRED_CODE as a7, isAuthExpiredError as a8, getFreshAuthToken as a9, ServerSessionManager as aa, createSessionWithSignature as ab, refreshSession as ac, revokeSession as ad, signSessionCreateMessage as ae, genAuthNonce as af, genSolanaMessage as ag, genSiweMessage as ah, normalizeEvmAddress as ai, toLowerEvmAddress as aj, functions as ak, invoke as al, FunctionInvokeError as am, live as an, intent as ao, status as ap, subscribeView as aq, LiveIntentError as ar, withEffects as as, isEffectResult as at, defineLiveModule as au, EFFECT_INTENT_ADDRESS as av, bufferExports as b, getConfiguredAppId as c, get as d, getMany as e, docId as f, getConfig as g, setMany as h, init as i, setFile as j, getFiles as k, search as l, runQueryMany as m, runExpression as n, runExpressionMany as o, signMessage as p, queryAggregate as q, runQuery as r, set as s, signTransaction as t, signAndSubmitTransaction as u, count as v, aggregate as w, reconcileSetResult as x, waitForSetResult as y, subscribe as z };
-//# sourceMappingURL=index-B3aNfGi6.mjs.map
+//# sourceMappingURL=index-Csf_2uZF.mjs.map