@bounded-sh/server 0.0.51 → 0.0.53-next.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -43,6 +43,13 @@ export interface VerifyWebhookOptions {
43
43
  maxSkewSeconds?: number;
44
44
  /** In-memory key cache TTL in milliseconds. Default 300_000 (5 min). */
45
45
  cacheTtlMs?: number;
46
+ /**
47
+ * Negative-cache TTL in milliseconds for unknown key ids: how long a forced
48
+ * keys-endpoint refresh is suppressed for an X-Bounded-Key-Id that no fetch
49
+ * could resolve (audit U-053). A genuinely rotated key waits at most this
50
+ * long. Default 60_000 (60s).
51
+ */
52
+ unknownKeyTtlMs?: number;
46
53
  /** Override the fetch implementation (mainly for tests). */
47
54
  fetchImpl?: typeof fetch;
48
55
  /** Override "now" (epoch ms), mainly for tests. */
@@ -68,7 +75,7 @@ export declare class WebhookVerificationError extends Error {
68
75
  export type WebhookHeaders = Record<string, string | string[] | undefined> | {
69
76
  get(name: string): string | null;
70
77
  };
71
- /** Clear the in-memory key cache (mainly for tests). */
78
+ /** Clear the in-memory key caches, including the unknown-key negative cache (mainly for tests). */
72
79
  export declare function clearWebhookKeyCache(): void;
73
80
  /**
74
81
  * A simple in-memory {@link WebhookReplayStore}. Records seen event ids until
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@bounded-sh/server",
3
- "version": "0.0.51",
3
+ "version": "0.0.53-next.0",
4
4
  "description": "Node and server SDK for Bounded, the full-stack app builder and runtime for AI-built apps: keypair-authenticated data, files and search, functions, realtime, webhook verification, and atomic writes.",
5
5
  "homepage": "https://bounded.sh/docs/sdk",
6
6
  "main": "./dist/index.js",
@@ -50,7 +50,7 @@
50
50
  "typescript": "5.9.3"
51
51
  },
52
52
  "dependencies": {
53
- "@bounded-sh/core": "0.0.51",
53
+ "@bounded-sh/core": "0.0.53-next.0",
54
54
  "@coral-xyz/anchor": "0.31.1",
55
55
  "@solana/web3.js": "1.98.4",
56
56
  "axios": "1.18.1",