@bounded-sh/server 0.0.64 → 0.0.66

package/dist/wallet-client.d.ts

@@ -1,10 +1,18 @@
 import { Transaction, VersionedTransaction, PublicKey } from '@solana/web3.js';
 import { ServerSessionManager } from '@bounded-sh/core';
-import type { AuthProvider, SetOptions, GetOptions, SearchOptions, GetManyResult, RunQueryOptions, RunExpressionOptions, RunExpressionResult, CountOptions, AggregateOptions, AggregateOperation, AggregateResult, AggregateSpec, AggregateRow, QueryAggregateOptions, RequestOverrides, EvmTransactionPolicy, SubscriptionOptions, InvokeOptions, LiveIntentOptions, LiveStatus, LiveStatusOptions } from '@bounded-sh/core';
+import type { ClientConfig, AuthProvider, SetOptions, GetOptions, SearchOptions, GetManyResult, RunQueryOptions, RunExpressionOptions, RunExpressionResult, CountOptions, AggregateOptions, AggregateOperation, AggregateResult, AggregateSpec, AggregateRow, QueryAggregateOptions, RequestOverrides, EvmTransactionPolicy, SubscriptionOptions, InvokeOptions, LiveIntentOptions, LiveStatus, LiveStatusOptions, SetResult, FileUploadResult, FileDeleteResult, ReconcileSetResultOptions, WaitForSetResultOptions } from '@bounded-sh/core';
 export declare class WalletClient {
     private readonly provider;
     private readonly sessionManager;
     readonly address: string;
+    /**
+     * Immutable snapshot of the resolved Bounded config this wallet client was
+     * created against. It is threaded (as `_config`) into every data/file/query/
+     * aggregate/function/live/websocket request so the client's app + endpoint
+     * targets can never follow a later global `init(...)` (CTA-05). Without it,
+     * core would resolve app/endpoints from the mutable process-global config.
+     */
+    private readonly config;
     private readonly evmTransactionPolicy?;
     readonly live: {
         intent: (roomPath: string, intent: unknown, opts?: LiveIntentOptions) => Promise<{
@@ -17,7 +25,7 @@ export declare class WalletClient {
             onError?: (error: any) => void;
         }) => Promise<() => Promise<void>>;
     };
-    constructor(provider: AuthProvider, sessionManager: ServerSessionManager, address: string, evmTransactionPolicy?: EvmTransactionPolicy);
+    constructor(provider: AuthProvider, sessionManager: ServerSessionManager, address: string, config: ClientConfig, evmTransactionPolicy?: EvmTransactionPolicy);
     private buildOverrides;
     /** #023: strip caller Authorization (any casing) so operations run as the isolated wallet. */
     private sanitizeHeaders;
@@ -25,14 +33,24 @@ export declare class WalletClient {
     private mergeReadOverrides;
     private mergeLiveIntentOptions;
     private mergeLiveStatusOptions;
-    set(path: string, document: any, options?: SetOptions): Promise<any>;
+    set(path: string, document: any, options?: SetOptions): Promise<SetResult>;
     setMany(many: {
         path: string;
         document: any;
-    }[], options?: SetOptions): Promise<any>;
+    }[], options?: SetOptions): Promise<SetResult>;
     setFile(path: string, file: File | null, options?: {
         _overrides?: RequestOverrides;
-    }): Promise<any>;
+    }): Promise<FileUploadResult | FileDeleteResult>;
+    /**
+     * Reconcile a `submitted` write receipt through THIS client's own provider
+     * and app binding. A bare top-level `reconcileSetResult` cannot serve a wallet
+     * client: the provider and config are private to the instance, and a later
+     * global `init()` would otherwise reconcile against the wrong app.
+     */
+    reconcileSetResult(receipt: SetResult, options?: ReconcileSetResultOptions): Promise<SetResult>;
+    /** Bounded repeat of {@link reconcileSetResult}; see `waitForSetResult`. */
+    waitForSetResult(receipt: SetResult, options?: WaitForSetResultOptions): Promise<SetResult>;
+    private mergeReconcileOptions;
     get(path: string, opts?: GetOptions): Promise<any>;
     getMany(paths: string[], opts?: {
         bypassCache?: boolean;

package/dist/webhooks.d.ts

@@ -9,6 +9,13 @@ export interface WebhookPayload {
     document: Record<string, any> | null;
     previousDocument: Record<string, any> | null;
     timestamp: number;
+    /**
+     * SHW-05: stable per-delivery id (also in the `X-Bounded-Delivery-Id` header),
+     * REUSED across every retry of one delivery. Delivery is durable + at-least-
+     * once, so dedupe on THIS - not the timestamp or signature, which change per
+     * retry. Optional so a payload signed before the field existed still verifies.
+     */
+    deliveryId?: string;
 }
 export interface WebhookPublicKey {
     id: string;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bounded-sh/server",
-    "version": "0.0.64",
+    "version": "0.0.66",
     "description": "Node and server SDK for Bounded, the full-stack app builder and runtime for AI-built apps: keypair-authenticated data, files and search, functions, realtime, webhook verification, and atomic writes.",
     "homepage": "https://bounded.sh/docs/sdk",
     "main": "./dist/index.js",
@@ -15,7 +15,7 @@
     },
     "scripts": {
         "build": "rm -rf ./dist ./.rollup-tmp && tsc -p tsconfig.build.json --outDir .rollup-tmp --declarationDir .rollup-tmp --emitDeclarationOnly false && rollup -c && tsc -p tsconfig.build.json --emitDeclarationOnly --declarationDir dist && rm -rf ./.rollup-tmp",
-        "test": "node src/auth/providers/run-solana-keypair-blockhash-test.mjs && node src/auth/providers/evm-keypair-provider.source.test.mjs && node src/run-server-global-provider-test.mjs && node --test src/webhooks.test.mjs",
+        "test": "node src/auth/providers/run-solana-keypair-blockhash-test.mjs && node src/auth/providers/evm-keypair-provider.source.test.mjs && node src/run-server-global-provider-test.mjs && node src/wallet-client-config-binding.source.test.mjs && node --test src/webhooks.test.mjs && node --test src/package-lock-core-pin.test.mjs",
         "watch": "rollup -c -w",
         "prepare": "npm run build"
     },
@@ -51,7 +51,7 @@
         "typescript": "5.9.3"
     },
     "dependencies": {
-        "@bounded-sh/core": "0.0.64",
+        "@bounded-sh/core": "0.0.66",
         "@coral-xyz/anchor": "0.31.1",
         "@solana/web3.js": "1.98.4",
         "axios": "1.18.1",