@bounded-sh/server 0.0.18 → 0.0.20

package/dist/index.mjs

@@ -1,21 +1,56 @@
-import { convertRemainingAccounts, buildSetDocumentsTransaction, getConfig, init as init$1, getIdToken as getIdToken$1, live, set, setMany, setFile, get, getMany, getFiles, search, runQuery, runQueryMany, runExpression, runExpressionMany, count, aggregate, queryAggregate, subscribe, functions, ServerSessionManager, getWebhookKeysUrl } from '@bounded-sh/core';
-export * from '@bounded-sh/core';
-export { FunctionInvokeError, InsufficientBalanceError, LiveIntentError, aggregate, count, functions, get, getConfig, getFiles, getMany, invokeFunction, live, liveIntent, liveStatus, queryAggregate, runExpression, runExpressionMany, runQuery, runQueryMany, search, set, setFile, setMany, signAndSubmitTransaction, signMessage, signTransaction, subscribe } from '@bounded-sh/core';
+import { init as init$1, convertRemainingAccounts, buildSetDocumentsTransaction, live as live$1, set as set$1, setMany as setMany$1, setFile as setFile$1, get as get$1, getMany as getMany$1, getFiles as getFiles$1, search as search$1, runQuery as runQuery$1, runQueryMany as runQueryMany$1, runExpression as runExpression$1, runExpressionMany as runExpressionMany$1, count as count$1, aggregate as aggregate$1, queryAggregate as queryAggregate$1, subscribe as subscribe$1, functions as functions$1, getConfig, ServerSessionManager, getWebhookKeysUrl } from '@bounded-sh/core';
+export { FunctionInvokeError, InsufficientBalanceError, LiveIntentError, getConfig, getWebhookKeysUrl } from '@bounded-sh/core';
+import { Connection, VersionedTransaction, ComputeBudgetProgram, SystemProgram, Keypair } from '@solana/web3.js';
+import bs58 from 'bs58';
 import { Buffer as Buffer$1 } from 'buffer';
-import { Connection, VersionedTransaction, ComputeBudgetProgram, Keypair, SystemProgram } from '@solana/web3.js';
 import * as anchor from '@coral-xyz/anchor';
 import nacl from 'tweetnacl';
-import bs58 from 'bs58';
-import * as crypto from 'crypto';
 
-/* ------------------------------------------------------------- *
- * KEYPAIR ENV-VAR (only consulted when no explicit keypair is given)
- *
- * Most code should pass a keypair explicitly — `createWalletClient({ keypair })`
- * does. The env var is the fallback for the global `set/get` path. `BOUNDED_*`
- * is the canonical name (it matches the CLI's `BOUNDED_PRIVATE_KEY`).
- * ------------------------------------------------------------- */
-const ENV_VARS = ['BOUNDED_PRIVATE_KEY']; // base-58 or JSON array
+async function init(newConfig) {
+    await init$1(Object.assign(Object.assign({}, newConfig), { authProvider: null, isServer: true, skipBackendInit: true }));
+}
+
+async function getAuthProvider() {
+    throw new Error('Server auth providers are not process-global. Use createWalletClient({ keypair }) and call that client\'s methods.');
+}
+
+function explicitClientOnly(name) {
+    throw new Error(`${name} is not available as a tarobase-server top-level auth operation. ` +
+        'Use createWalletClient({ keypair }) and call the returned client method.');
+}
+async function get(..._args) { explicitClientOnly('get'); }
+async function getMany(..._args) { explicitClientOnly('getMany'); }
+async function set(..._args) { explicitClientOnly('set'); }
+async function setMany(..._args) { explicitClientOnly('setMany'); }
+async function setFile(..._args) { explicitClientOnly('setFile'); }
+async function getFiles(..._args) { explicitClientOnly('getFiles'); }
+async function search(..._args) { explicitClientOnly('search'); }
+async function queryAggregate(..._args) { explicitClientOnly('queryAggregate'); }
+async function runQuery(..._args) { explicitClientOnly('runQuery'); }
+async function runQueryMany(..._args) { explicitClientOnly('runQueryMany'); }
+async function runExpression(..._args) { explicitClientOnly('runExpression'); }
+async function runExpressionMany(..._args) { explicitClientOnly('runExpressionMany'); }
+async function signMessage(..._args) { explicitClientOnly('signMessage'); }
+async function signTransaction(..._args) { explicitClientOnly('signTransaction'); }
+async function signAndSubmitTransaction(..._args) { explicitClientOnly('signAndSubmitTransaction'); }
+async function count(..._args) { explicitClientOnly('count'); }
+async function aggregate(..._args) { explicitClientOnly('aggregate'); }
+async function subscribe(..._args) { explicitClientOnly('subscribe'); }
+async function invokeFunction(..._args) { explicitClientOnly('invokeFunction'); }
+async function liveIntent(..._args) { explicitClientOnly('liveIntent'); }
+async function liveStatus(..._args) { explicitClientOnly('liveStatus'); }
+const functions = {
+    invoke: async (..._args) => explicitClientOnly('functions.invoke'),
+};
+const live = {
+    intent: async (..._args) => explicitClientOnly('live.intent'),
+    status: async (..._args) => explicitClientOnly('live.status'),
+};
+
+async function getIdToken() {
+    throw new Error('getIdToken is not available as a tarobase-server top-level auth operation. Use createWalletClient({ keypair }) and call the returned client methods.');
+}
+
 const PRESIGNED_BLOCKHASH_ERROR = 'Server signedTransaction blockhash is stale or expired';
 const BOUNDED_PROGRAM_MAINNET = 'poof4b5pk1L9tmThvBmaABjcyjfhFGbMbQP5BXk2QZp';
 const BOUNDED_PROGRAM_DEVNET = 'taro6CvKqwrYrDc16ufYgzQ2NZcyyVKStffbtudrhRu';
@@ -35,32 +70,6 @@ const ALLOWED_BOUNDED_SET_DISCRIMINATORS = new Set([
     SET_DOCUMENTS_DISCRIMINATOR,
     SET_DOCUMENTS_V2_DISCRIMINATOR,
 ]);
-function loadKeypairFromEnv() {
-    var _a;
-    let secret;
-    let found;
-    for (const name of ENV_VARS) {
-        const v = (_a = process === null || process === void 0 ? void 0 : process.env) === null || _a === void 0 ? void 0 : _a[name];
-        if (v) {
-            secret = v;
-            found = name;
-            break;
-        }
-    }
-    if (!secret) {
-        throw new Error(`No server keypair: set ${ENV_VARS[0]} to a base58 secret key (or JSON array), ` +
-            `or pass one explicitly via createWalletClient({ keypair }).`);
-    }
-    try {
-        const secretKey = secret.trim().startsWith('[')
-            ? Uint8Array.from(JSON.parse(secret))
-            : bs58.decode(secret.trim());
-        return Keypair.fromSecretKey(secretKey);
-    }
-    catch (err) {
-        throw new Error(`Unable to parse ${found}. Ensure it is valid base58 or a JSON array.`);
-    }
-}
 /* ──────────────────────────────────────────────────────────
  * Helper – fetch getPriorityFeeEstimate
  * ──────────────────────────────────────────────────────── */
@@ -289,13 +298,15 @@ function assertAllowedServerPreInstructions(preInstructions) {
     }
 }
 class SolanaKeypairProvider {
-    constructor(rpcUrl = null, keypair) {
+    constructor(rpcUrl, serverKeypair) {
         this.rpcUrl = rpcUrl;
-        this.explicitKeypair = keypair;
+        this.serverKeypair = serverKeypair;
     }
     get keypair() {
-        var _a, _b;
-        return ((_a = this.cachedKeypair) !== null && _a !== void 0 ? _a : (this.cachedKeypair = (_b = this.explicitKeypair) !== null && _b !== void 0 ? _b : loadKeypairFromEnv()));
+        if (!this.serverKeypair) {
+            throw new Error('Server keypair is required; use createWalletClient({ keypair }) or pass a Keypair to SolanaKeypairProvider.');
+        }
+        return this.serverKeypair;
     }
     /* ----------------------------------------------------------- *
      * (Auth stubs – fill in later if needed)
@@ -610,9 +621,6 @@ class SolanaKeypairProvider {
 
 /**
  * Server-side OffchainAuthProvider wrapper for the poofnet environment.
- *
- * For signMessage, this generates a mock signature using SHA-256 hashing.
- * This is used for offchain transaction signing.
  */
 class OffchainAuthProvider {
     constructor(wrappedProvider) {
@@ -631,15 +639,8 @@ class OffchainAuthProvider {
         return this.wrappedProvider.getNativeMethods();
     }
     async signMessage(message) {
-        // Delegate to wrapped provider for real signing
         return this.wrappedProvider.signMessage(message);
     }
-    async signMessageMock(message) {
-        // Generate mock signature (SHA-256 hash of message, base64 encoded)
-        // This is used for offchain transaction signing
-        const hash = crypto.createHash('sha256').update(message).digest('base64');
-        return hash;
-    }
     async signTransaction(transaction) {
         throw new Error('Poofnet does not support real Solana transactions. Deploy your project to mainnet to use this feature.');
     }
@@ -656,44 +657,6 @@ class OffchainAuthProvider {
     }
 }
 
-let currentAuthProvider = null;
-async function getAuthProvider() {
-    var _a;
-    const config = await getConfig();
-    if (currentAuthProvider) {
-        // If provider exists but chain is "offchain" and it's not already wrapped, rewrap it
-        if (config.chain === "offchain" && !(currentAuthProvider instanceof OffchainAuthProvider)) {
-            currentAuthProvider = new OffchainAuthProvider(currentAuthProvider);
-        }
-        return currentAuthProvider;
-    }
-    currentAuthProvider = await matchAuthProvider((_a = config.rpcUrl) !== null && _a !== void 0 ? _a : null);
-    // Wrap with OffchainAuthProvider for offchain chain
-    if (config.chain === "offchain") {
-        currentAuthProvider = new OffchainAuthProvider(currentAuthProvider);
-    }
-    return currentAuthProvider;
-}
-async function matchAuthProvider(rpcUrl) {
-    return new SolanaKeypairProvider(rpcUrl);
-}
-
-let authProviderInstance = null;
-async function init(newConfig) {
-    // Initialize config first so getAuthProvider can access it
-    // Server-side skips backend init since it already has all needed config
-    await init$1(Object.assign(Object.assign({}, newConfig), { isServer: true, skipBackendInit: true }));
-    // Get the auth provider (which will wrap it if chain is "offchain")
-    authProviderInstance = await getAuthProvider();
-    // Update config with the wrapped provider
-    await init$1(Object.assign(Object.assign({}, newConfig), { authProvider: authProviderInstance, isServer: true, skipBackendInit: true }));
-}
-
-// Wrapper for getIdToken - passes isServer=true for server-side usage
-async function getIdToken() {
-    return getIdToken$1(true);
-}
-
 var __rest = (undefined && undefined.__rest) || function (s, e) {
     var t = {};
     for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
@@ -750,8 +713,8 @@ class WalletClient {
         this.sessionManager = sessionManager;
         this.address = address;
         this.live = {
-            intent: (roomPath, intent, opts = {}) => live.intent(roomPath, intent, this.mergeLiveIntentOptions(opts)),
-            status: (roomPath, opts = {}) => live.status(roomPath, Object.assign(Object.assign({}, opts), { headers: this.sanitizeHeaders(opts.headers) })),
+            intent: (roomPath, intent, opts = {}) => live$1.intent(roomPath, intent, this.mergeLiveIntentOptions(opts)),
+            status: (roomPath, opts = {}) => live$1.status(roomPath, Object.assign(Object.assign({}, opts), { headers: this.sanitizeHeaders(opts.headers) })),
         };
     }
     /* ---- Auth override helpers ---- */
@@ -800,51 +763,50 @@ class WalletClient {
     }
     /* ---- Data operations ---- */
     async set(path, document, options) {
-        return set(path, document, this.mergeSetOverrides(options));
+        return set$1(path, document, this.mergeSetOverrides(options));
     }
     async setMany(many, options) {
-        return setMany(many, this.mergeSetOverrides(options));
+        return setMany$1(many, this.mergeSetOverrides(options));
     }
     async setFile(path, file, options) {
-        return setFile(path, file, { _overrides: this.mergeReadOverrides(options === null || options === void 0 ? void 0 : options._overrides) });
+        return setFile$1(path, file, { _overrides: this.mergeReadOverrides(options === null || options === void 0 ? void 0 : options._overrides) });
     }
     async get(path, opts) {
-        return get(path, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
+        return get$1(path, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
     }
     async getMany(paths, opts) {
-        return getMany(paths, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides() }));
+        return getMany$1(paths, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides() }));
     }
     async getFiles(path, options) {
-        return getFiles(path, { _overrides: this.mergeReadOverrides(options === null || options === void 0 ? void 0 : options._overrides) });
+        return getFiles$1(path, { _overrides: this.mergeReadOverrides(options === null || options === void 0 ? void 0 : options._overrides) });
     }
     async search(path, query, opts = {}) {
-        return search(path, query, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
+        return search$1(path, query, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
     }
     async runQuery(absolutePath, queryName, queryArgs, opts) {
-        return runQuery(absolutePath, queryName, queryArgs, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
+        return runQuery$1(absolutePath, queryName, queryArgs, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
     }
     async runQueryMany(many, opts) {
-        return runQueryMany(many, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
+        return runQueryMany$1(many, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
     }
     async runExpression(expression, queryArgs, options) {
-        return runExpression(expression, queryArgs, Object.assign(Object.assign({}, options), { _overrides: this.mergeReadOverrides(options === null || options === void 0 ? void 0 : options._overrides) }));
+        return runExpression$1(expression, queryArgs, Object.assign(Object.assign({}, options), { _overrides: this.mergeReadOverrides(options === null || options === void 0 ? void 0 : options._overrides) }));
     }
     async runExpressionMany(many) {
         const ovr = this.mergeReadOverrides();
-        return runExpressionMany(many.map(m => (Object.assign(Object.assign({}, m), { _overrides: ovr }))));
+        return runExpressionMany$1(many.map(m => (Object.assign(Object.assign({}, m), { _overrides: ovr }))));
     }
     async count(path, opts = {}) {
-        return count(path, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
+        return count$1(path, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
     }
     async aggregate(path, operation, opts = {}) {
-        return aggregate(path, operation, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
+        return aggregate$1(path, operation, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
     }
     async queryAggregate(path, spec, opts = {}) {
-        return queryAggregate(path, spec, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
+        return queryAggregate$1(path, spec, Object.assign(Object.assign({}, opts), { _overrides: this.mergeReadOverrides(opts === null || opts === void 0 ? void 0 : opts._overrides) }));
     }
     /**
-     * Subscribe to real-time updates as THIS wallet's identity. Unlike the global
-     * `subscribe`, this needs no `BOUNDED_PRIVATE_KEY` env var — the WS connection
+     * Subscribe to real-time updates as THIS wallet's identity. The WS connection
      * authenticates with the wallet's own session (so read rules see the right
      * principal), and is scoped to its own connection so it never crosses another
      * identity. Accepts a bare callback or `{ onData, onError, filter, ... }`.
@@ -853,22 +815,21 @@ class WalletClient {
     async subscribe(path, options) {
         const opts = typeof options === 'function' ? { onData: options } : Object.assign({}, options);
         const ovr = this.buildOverrides();
-        return subscribe(path, Object.assign(Object.assign({}, opts), { _overrides: {
+        return subscribe$1(path, Object.assign(Object.assign({}, opts), { _overrides: {
                 _getAuthHeaders: ovr._getAuthHeaders,
                 _clearAuth: ovr._clearAuth,
                 _walletAddress: ovr._walletAddress,
             } }));
     }
     /**
-     * Invoke a deployed Bounded Function AS this wallet's identity. Unlike the
-     * top-level `functions.invoke`, this needs no `BOUNDED_PRIVATE_KEY` env var —
-     * the dispatcher sees the wallet's verified session, so the function's `auth`
-     * rule + `ctx.user` reflect this client. Returns the function's JSON; throws
+     * Invoke a deployed Bounded Function AS this wallet's identity. The dispatcher
+     * sees the wallet's verified session, so the function's `auth` rule +
+     * `ctx.user` reflect this client. Returns the function's JSON; throws
      * `FunctionInvokeError` on 401/403/404/503.
      */
     async invoke(name, args = {}, opts = {}) {
         const ovr = this.buildOverrides();
-        return functions.invoke(name, args, Object.assign(Object.assign({}, opts), { _overrides: { _getAuthHeaders: ovr._getAuthHeaders } }));
+        return functions$1.invoke(name, args, Object.assign(Object.assign({}, opts), { _overrides: { _getAuthHeaders: ovr._getAuthHeaders } }));
     }
     /* ---- Signing operations (use provider directly) ---- */
     async signMessage(message) {
@@ -1159,5 +1120,5 @@ async function verifyWebhook(rawBody, headers, opts = {}) {
     return payload;
 }
 
-export { DEFAULT_WEBHOOK_KEYS_URL, InMemoryReplayStore, WalletClient, WebhookVerificationError, clearWebhookKeyCache, clearWebhookReplayCache, createWalletClient, getAuthProvider, getIdToken, init, verifyWebhook };
+export { DEFAULT_WEBHOOK_KEYS_URL, InMemoryReplayStore, WalletClient, WebhookVerificationError, aggregate, clearWebhookKeyCache, clearWebhookReplayCache, count, createWalletClient, functions, get, getAuthProvider, getFiles, getIdToken, getMany, init, invokeFunction, live, liveIntent, liveStatus, queryAggregate, runExpression, runExpressionMany, runQuery, runQueryMany, search, set, setFile, setMany, signAndSubmitTransaction, signMessage, signTransaction, subscribe, verifyWebhook };
 //# sourceMappingURL=index.mjs.map