@bounded-sh/core 0.0.94 → 0.0.95

package/dist/{index-DM016I43.mjs → index-BDW82Uxu.mjs}

@@ -4131,7 +4131,7 @@ class ServerSessionManager {
         const sessionConfig = (_a = this.sessionConfig) !== null && _a !== void 0 ? _a : undefined;
         /* fetch nonce from auth API (bound to the snapshotted app+issuer) */
         const nonce = await genAuthNonce(sessionConfig);
-        const { genSolanaMessage } = await import('./solana-message-CmvedcGr.mjs');
+        const { genSolanaMessage } = await import('./solana-message-j1s9osZD.mjs');
         const message = await genSolanaMessage(address, nonce, sessionConfig === null || sessionConfig === void 0 ? void 0 : sessionConfig.appId);
         /* sign the message */
         const sigBytes = nacl.sign.detached(new TextEncoder().encode(message), kp.secretKey);
@@ -6916,7 +6916,7 @@ async function doReconnectWithNewAuth() {
         console.warn('[WS v2] Failed to clear HTTP read cache on auth change:', error);
     }
     try {
-        const { reconnectRealtimeStoreWithNewAuth } = await import('./realtime-store-zORqBwjW.mjs');
+        const { reconnectRealtimeStoreWithNewAuth } = await import('./realtime-store-DTS5OLm2.mjs');
         await reconnectRealtimeStoreWithNewAuth();
     }
     catch (error) {
@@ -8366,7 +8366,7 @@ async function setMany(many, options) {
                         'Nothing was signed or submitted.');
                 }
                 const solanaChain = workerChain;
-                const { handlePreBuiltTransaction, buildExpectedWriteIntent } = await import('./solana-operations-D_e7AMhd.mjs');
+                const { handlePreBuiltTransaction, buildExpectedWriteIntent } = await import('./solana-operations-da26Ject.mjs');
                 // OA-0001: derive the expected intent from OUR OWN request (the one
                 // ground truth a tampered builder response cannot change) so the
                 // validator can reject any transaction whose operation semantics
@@ -9851,10 +9851,84 @@ function toMillis(seconds) {
 
 /** SIWS message creation is async already, so its onchain module can be lazy. */
 async function genSolanaMessage(address, nonce) {
-    const implementation = await import('./solana-message-CmvedcGr.mjs');
+    const implementation = await import('./solana-message-j1s9osZD.mjs');
     return implementation.genSolanaMessage(address, nonce);
 }
 
+// solana-sign-in-message.ts - the Sign In With Solana (SIWS) text the BROWSER lane signs.
+//
+// The legacy genSolanaMessage text stamps `Domain: server` / `Origin: server`, so a
+// signature over it proves who owns the wallet and nothing about which page asked. The
+// issuer used to compensate with the request's Origin header, which any non-browser client
+// can forge (SEC-01): an attacker's backend relayed a signature phished on a fake page with
+// `Origin: https://auth.bounded.sh` and minted the victim's session. The standard SIWS text
+// carries the requesting page's host in its first line. Bounded leaves that host unset, so a
+// wallet implementing the Wallet Standard `solana:signIn` feature fills it from the page that
+// asked (spec-following wallets bind a page-supplied one to that page too), and the issuer
+// refuses any other host for the request's Origin, so a fake page cannot obtain a signature
+// that mints for another site. The issuer now
+// requires this format on every request that carries an Origin header and checks the signed
+// domain against that header; the legacy text stays for the origin-less lane (CLI keypairs,
+// the server SDK, React Native, realtime agents).
+//
+// The layout is the SIWS ABNF exactly as @solana/wallet-standard-util 1.1.3 emits it
+// (lib/esm/signIn.js createSignInMessageText, lines 116-175): the domain line, the address,
+// a blank line, the statement, a blank line, then the present fields in the fixed order
+// URI, Version, Chain ID, Nonce, Issued At, Expiration Time, Not Before, Request ID,
+// Resources. A wallet rendering our sign-in request and a guest device key rendering it here
+// therefore sign byte-identical text for the same fields, and the issuer parses one grammar.
+const SOLANA_SIGN_IN_STATEMENT = "Sign in to this Bounded app with your Solana wallet.";
+const SOLANA_SIGN_IN_VERSION = "1";
+const SOLANA_SIGN_IN_VALIDITY_MS = 5 * 60 * 1000;
+function createSolanaSignInRequest(appId, nonce, now = Date.now()) {
+    return {
+        statement: SOLANA_SIGN_IN_STATEMENT,
+        version: SOLANA_SIGN_IN_VERSION,
+        nonce,
+        issuedAt: new Date(now).toISOString(),
+        expirationTime: new Date(now + SOLANA_SIGN_IN_VALIDITY_MS).toISOString(),
+        requestId: appId,
+    };
+}
+/**
+ * The sign-in request for the app the SDK is configured for. Reads the SAME global config
+ * appId as genAuthNonce and createSessionWithSignature, so the signed app id equals the app
+ * the session is minted for; a snapshotted appIdOverride binds a wallet client created
+ * against another app (the same contract genSolanaMessage keeps).
+ */
+async function genSolanaSignInRequest(nonce, appIdOverride) {
+    const appId = appIdOverride !== null && appIdOverride !== void 0 ? appIdOverride : (await getConfig()).appId;
+    return createSolanaSignInRequest(appId, nonce);
+}
+function createSolanaSignInMessageText(fields) {
+    return `${fields.domain} wants you to sign in with your Solana account:\n${fields.address}\n\n` +
+        `${fields.statement}\n\n` +
+        `Version: ${fields.version}\n` +
+        `Nonce: ${fields.nonce}\n` +
+        `Issued At: ${fields.issuedAt}\n` +
+        `Expiration Time: ${fields.expirationTime}\n` +
+        `Request ID: ${fields.requestId}`;
+}
+/**
+ * The full sign-in text for a signer that is not a wallet (a browser guest device key),
+ * which therefore stamps the page host itself.
+ */
+async function genSolanaSignInMessage(address, nonce, domain, appIdOverride) {
+    return createSolanaSignInMessageText(Object.assign(Object.assign({}, (await genSolanaSignInRequest(nonce, appIdOverride))), { domain, address }));
+}
+/**
+ * The host a browser page signs in as: `location.host`, the hostname plus any non-default
+ * port, which is exactly what the issuer compares the Origin header's host against. Null
+ * off-browser (Node, React Native), where the caller stays on the origin-less legacy lane.
+ */
+function browserSignInDomain() {
+    var _a;
+    if (typeof window === "undefined")
+        return null;
+    const host = (_a = window.location) === null || _a === void 0 ? void 0 : _a.host;
+    return typeof host === "string" && host ? host : null;
+}
+
 // ---------------------------------------------------------------------------
 // functions.ts -- Bounded Functions client (the imperative escape hatch).
 //
@@ -10326,5 +10400,5 @@ function defineLiveModule(mod) {
     return mod;
 }
 
-export { getIdToken as $, subscribe as A, closeAllSubscriptions as B, clearCache as C, getCachedData as D, reconnectWithNewAuth as E, createClient as F, ScopedClientReadOnlyError as G, subscribeQuery as H, InsufficientBalanceError as I, closeAllQuerySubscriptions as J, canonicalizeArgs as K, canonicalizeResult as L, DEFAULT_QUERY_POLL_INTERVAL_MS as M, MIN_QUERY_POLL_INTERVAL_MS as N, BoundedDeclineError as O, deriveDecline as P, dispatchDeclineEvent as Q, DECLINE_EVENT_NAME as R, SOLANA_MAX_SUPPORTED_TRANSACTION_VERSION as S, dispatchRateLimitEvent as T, RATE_LIMIT_EVENT_NAME as U, hasActiveConnection as V, increment as W, serverTimestamp as X, now as Y, toSeconds as Z, toMillis as _, getTransactionJson as a, deriveUserIdentityFromIdToken as a0, getSessionGeneration as a1, WebSessionManager as a2, ReactNativeSessionManager as a3, getActiveSessionManager as a4, onSessionCleared as a5, SessionEnvironmentError as a6, UNSUPPORTED_ENVIRONMENT_CODE as a7, AUTH_CHANGED_CODE as a8, AUTH_EXPIRED_CODE as a9, isAuthExpiredError as aa, getFreshAuthToken as ab, ServerSessionManager as ac, createSessionWithSignature as ad, refreshSession as ae, revokeSession as af, signSessionCreateMessage as ag, genAuthNonce as ah, genSolanaMessage as ai, genSiweMessage as aj, normalizeEvmAddress as ak, toLowerEvmAddress as al, functions as am, invoke as an, FunctionInvokeError as ao, live as ap, intent as aq, status as ar, subscribeView as as, LiveIntentError as at, withEffects as au, isEffectResult as av, defineLiveModule as aw, EFFECT_INTENT_ADDRESS as ax, bufferExports as b, getWebhookKeysUrl as c, getConfiguredAppId as d, get as e, getMany as f, getConfig as g, docId as h, init as i, setMany as j, setFile as k, getFiles as l, search as m, runQueryMany as n, runExpression as o, runExpressionMany as p, queryAggregate as q, runQuery as r, set as s, signMessage as t, signTransaction as u, signAndSubmitTransaction as v, count as w, aggregate as x, reconcileSetResult as y, waitForSetResult as z };
-//# sourceMappingURL=index-DM016I43.mjs.map
+export { getIdToken as $, subscribe as A, closeAllSubscriptions as B, clearCache as C, getCachedData as D, reconnectWithNewAuth as E, createClient as F, ScopedClientReadOnlyError as G, subscribeQuery as H, InsufficientBalanceError as I, closeAllQuerySubscriptions as J, canonicalizeArgs as K, canonicalizeResult as L, DEFAULT_QUERY_POLL_INTERVAL_MS as M, MIN_QUERY_POLL_INTERVAL_MS as N, BoundedDeclineError as O, deriveDecline as P, dispatchDeclineEvent as Q, DECLINE_EVENT_NAME as R, SOLANA_MAX_SUPPORTED_TRANSACTION_VERSION as S, dispatchRateLimitEvent as T, RATE_LIMIT_EVENT_NAME as U, hasActiveConnection as V, increment as W, serverTimestamp as X, now as Y, toSeconds as Z, toMillis as _, getTransactionJson as a, deriveUserIdentityFromIdToken as a0, getSessionGeneration as a1, WebSessionManager as a2, ReactNativeSessionManager as a3, getActiveSessionManager as a4, onSessionCleared as a5, SessionEnvironmentError as a6, UNSUPPORTED_ENVIRONMENT_CODE as a7, AUTH_CHANGED_CODE as a8, AUTH_EXPIRED_CODE as a9, withEffects as aA, isEffectResult as aB, defineLiveModule as aC, EFFECT_INTENT_ADDRESS as aD, isAuthExpiredError as aa, getFreshAuthToken as ab, ServerSessionManager as ac, createSessionWithSignature as ad, refreshSession as ae, revokeSession as af, signSessionCreateMessage as ag, genAuthNonce as ah, genSolanaMessage as ai, createSolanaSignInRequest as aj, createSolanaSignInMessageText as ak, genSolanaSignInRequest as al, genSolanaSignInMessage as am, browserSignInDomain as an, SOLANA_SIGN_IN_STATEMENT as ao, genSiweMessage as ap, normalizeEvmAddress as aq, toLowerEvmAddress as ar, functions as as, invoke as at, FunctionInvokeError as au, live as av, intent as aw, status as ax, subscribeView as ay, LiveIntentError as az, bufferExports as b, getWebhookKeysUrl as c, getConfiguredAppId as d, get as e, getMany as f, getConfig as g, docId as h, init as i, setMany as j, setFile as k, getFiles as l, search as m, runQueryMany as n, runExpression as o, runExpressionMany as p, queryAggregate as q, runQuery as r, set as s, signMessage as t, signTransaction as u, signAndSubmitTransaction as v, count as w, aggregate as x, reconcileSetResult as y, waitForSetResult as z };
+//# sourceMappingURL=index-BDW82Uxu.mjs.map