@bounded-sh/core 0.0.93 → 0.0.95

package/dist/{index-BjLa1c_O.js → index-D-dJjY-Q.js}

@@ -4133,7 +4133,7 @@ class ServerSessionManager {
         const sessionConfig = (_a = this.sessionConfig) !== null && _a !== void 0 ? _a : undefined;
         /* fetch nonce from auth API (bound to the snapshotted app+issuer) */
         const nonce = await genAuthNonce(sessionConfig);
-        const { genSolanaMessage } = await Promise.resolve().then(function () { return require('./solana-message-DY0FVgHp.js'); });
+        const { genSolanaMessage } = await Promise.resolve().then(function () { return require('./solana-message-Cww3s9HW.js'); });
         const message = await genSolanaMessage(address, nonce, sessionConfig === null || sessionConfig === void 0 ? void 0 : sessionConfig.appId);
         /* sign the message */
         const sigBytes = nacl.sign.detached(new TextEncoder().encode(message), kp.secretKey);
@@ -6918,7 +6918,7 @@ async function doReconnectWithNewAuth() {
         console.warn('[WS v2] Failed to clear HTTP read cache on auth change:', error);
     }
     try {
-        const { reconnectRealtimeStoreWithNewAuth } = await Promise.resolve().then(function () { return require('./realtime-store-O-5CDrGm.js'); });
+        const { reconnectRealtimeStoreWithNewAuth } = await Promise.resolve().then(function () { return require('./realtime-store-Dytq73zO.js'); });
         await reconnectRealtimeStoreWithNewAuth();
     }
     catch (error) {
@@ -8368,7 +8368,7 @@ async function setMany(many, options) {
                         'Nothing was signed or submitted.');
                 }
                 const solanaChain = workerChain;
-                const { handlePreBuiltTransaction, buildExpectedWriteIntent } = await Promise.resolve().then(function () { return require('./solana-operations-DSAWnjWi.js'); });
+                const { handlePreBuiltTransaction, buildExpectedWriteIntent } = await Promise.resolve().then(function () { return require('./solana-operations-SR1En23U.js'); });
                 // OA-0001: derive the expected intent from OUR OWN request (the one
                 // ground truth a tampered builder response cannot change) so the
                 // validator can reject any transaction whose operation semantics
@@ -9853,10 +9853,84 @@ function toMillis(seconds) {
 
 /** SIWS message creation is async already, so its onchain module can be lazy. */
 async function genSolanaMessage(address, nonce) {
-    const implementation = await Promise.resolve().then(function () { return require('./solana-message-DY0FVgHp.js'); });
+    const implementation = await Promise.resolve().then(function () { return require('./solana-message-Cww3s9HW.js'); });
     return implementation.genSolanaMessage(address, nonce);
 }
 
+// solana-sign-in-message.ts - the Sign In With Solana (SIWS) text the BROWSER lane signs.
+//
+// The legacy genSolanaMessage text stamps `Domain: server` / `Origin: server`, so a
+// signature over it proves who owns the wallet and nothing about which page asked. The
+// issuer used to compensate with the request's Origin header, which any non-browser client
+// can forge (SEC-01): an attacker's backend relayed a signature phished on a fake page with
+// `Origin: https://auth.bounded.sh` and minted the victim's session. The standard SIWS text
+// carries the requesting page's host in its first line. Bounded leaves that host unset, so a
+// wallet implementing the Wallet Standard `solana:signIn` feature fills it from the page that
+// asked (spec-following wallets bind a page-supplied one to that page too), and the issuer
+// refuses any other host for the request's Origin, so a fake page cannot obtain a signature
+// that mints for another site. The issuer now
+// requires this format on every request that carries an Origin header and checks the signed
+// domain against that header; the legacy text stays for the origin-less lane (CLI keypairs,
+// the server SDK, React Native, realtime agents).
+//
+// The layout is the SIWS ABNF exactly as @solana/wallet-standard-util 1.1.3 emits it
+// (lib/esm/signIn.js createSignInMessageText, lines 116-175): the domain line, the address,
+// a blank line, the statement, a blank line, then the present fields in the fixed order
+// URI, Version, Chain ID, Nonce, Issued At, Expiration Time, Not Before, Request ID,
+// Resources. A wallet rendering our sign-in request and a guest device key rendering it here
+// therefore sign byte-identical text for the same fields, and the issuer parses one grammar.
+const SOLANA_SIGN_IN_STATEMENT = "Sign in to this Bounded app with your Solana wallet.";
+const SOLANA_SIGN_IN_VERSION = "1";
+const SOLANA_SIGN_IN_VALIDITY_MS = 5 * 60 * 1000;
+function createSolanaSignInRequest(appId, nonce, now = Date.now()) {
+    return {
+        statement: SOLANA_SIGN_IN_STATEMENT,
+        version: SOLANA_SIGN_IN_VERSION,
+        nonce,
+        issuedAt: new Date(now).toISOString(),
+        expirationTime: new Date(now + SOLANA_SIGN_IN_VALIDITY_MS).toISOString(),
+        requestId: appId,
+    };
+}
+/**
+ * The sign-in request for the app the SDK is configured for. Reads the SAME global config
+ * appId as genAuthNonce and createSessionWithSignature, so the signed app id equals the app
+ * the session is minted for; a snapshotted appIdOverride binds a wallet client created
+ * against another app (the same contract genSolanaMessage keeps).
+ */
+async function genSolanaSignInRequest(nonce, appIdOverride) {
+    const appId = appIdOverride !== null && appIdOverride !== void 0 ? appIdOverride : (await getConfig()).appId;
+    return createSolanaSignInRequest(appId, nonce);
+}
+function createSolanaSignInMessageText(fields) {
+    return `${fields.domain} wants you to sign in with your Solana account:\n${fields.address}\n\n` +
+        `${fields.statement}\n\n` +
+        `Version: ${fields.version}\n` +
+        `Nonce: ${fields.nonce}\n` +
+        `Issued At: ${fields.issuedAt}\n` +
+        `Expiration Time: ${fields.expirationTime}\n` +
+        `Request ID: ${fields.requestId}`;
+}
+/**
+ * The full sign-in text for a signer that is not a wallet (a browser guest device key),
+ * which therefore stamps the page host itself.
+ */
+async function genSolanaSignInMessage(address, nonce, domain, appIdOverride) {
+    return createSolanaSignInMessageText(Object.assign(Object.assign({}, (await genSolanaSignInRequest(nonce, appIdOverride))), { domain, address }));
+}
+/**
+ * The host a browser page signs in as: `location.host`, the hostname plus any non-default
+ * port, which is exactly what the issuer compares the Origin header's host against. Null
+ * off-browser (Node, React Native), where the caller stays on the origin-less legacy lane.
+ */
+function browserSignInDomain() {
+    var _a;
+    if (typeof window === "undefined")
+        return null;
+    const host = (_a = window.location) === null || _a === void 0 ? void 0 : _a.host;
+    return typeof host === "string" && host ? host : null;
+}
+
 // ---------------------------------------------------------------------------
 // functions.ts -- Bounded Functions client (the imperative escape hatch).
 //
@@ -10341,12 +10415,14 @@ exports.MIN_QUERY_POLL_INTERVAL_MS = MIN_QUERY_POLL_INTERVAL_MS;
 exports.RATE_LIMIT_EVENT_NAME = RATE_LIMIT_EVENT_NAME;
 exports.ReactNativeSessionManager = ReactNativeSessionManager;
 exports.SOLANA_MAX_SUPPORTED_TRANSACTION_VERSION = SOLANA_MAX_SUPPORTED_TRANSACTION_VERSION;
+exports.SOLANA_SIGN_IN_STATEMENT = SOLANA_SIGN_IN_STATEMENT;
 exports.ScopedClientReadOnlyError = ScopedClientReadOnlyError;
 exports.ServerSessionManager = ServerSessionManager;
 exports.SessionEnvironmentError = SessionEnvironmentError;
 exports.UNSUPPORTED_ENVIRONMENT_CODE = UNSUPPORTED_ENVIRONMENT_CODE;
 exports.WebSessionManager = WebSessionManager;
 exports.aggregate = aggregate;
+exports.browserSignInDomain = browserSignInDomain;
 exports.bufferExports = bufferExports;
 exports.canonicalizeArgs = canonicalizeArgs;
 exports.canonicalizeResult = canonicalizeResult;
@@ -10356,6 +10432,8 @@ exports.closeAllSubscriptions = closeAllSubscriptions;
 exports.count = count;
 exports.createClient = createClient;
 exports.createSessionWithSignature = createSessionWithSignature;
+exports.createSolanaSignInMessageText = createSolanaSignInMessageText;
+exports.createSolanaSignInRequest = createSolanaSignInRequest;
 exports.defineLiveModule = defineLiveModule;
 exports.deriveDecline = deriveDecline;
 exports.deriveUserIdentityFromIdToken = deriveUserIdentityFromIdToken;
@@ -10366,6 +10444,8 @@ exports.functions = functions;
 exports.genAuthNonce = genAuthNonce;
 exports.genSiweMessage = genSiweMessage;
 exports.genSolanaMessage = genSolanaMessage;
+exports.genSolanaSignInMessage = genSolanaSignInMessage;
+exports.genSolanaSignInRequest = genSolanaSignInRequest;
 exports.get = get;
 exports.getActiveSessionManager = getActiveSessionManager;
 exports.getCachedData = getCachedData;
@@ -10416,4 +10496,4 @@ exports.toMillis = toMillis;
 exports.toSeconds = toSeconds;
 exports.waitForSetResult = waitForSetResult;
 exports.withEffects = withEffects;
-//# sourceMappingURL=index-BjLa1c_O.js.map
+//# sourceMappingURL=index-D-dJjY-Q.js.map