@pooflabs/core 0.0.38 → 0.0.39

package/dist/index.mjs

@@ -3027,31 +3027,39 @@ function loadKeypairFromEnv() {
     }
 }
 /* ------------------------------------------------------------------ */
-/*  REAL createSession()                                              */
-/* ------------------------------------------------------------------ */
-async function createSession() {
-    const kp = loadKeypairFromEnv();
-    const address = kp.publicKey.toBase58();
-    /* fetch nonce from auth API */
-    const nonce = await genAuthNonce();
-    const message = await genSolanaMessage(address, nonce);
-    /* sign the message */
-    const sigBytes = nacl.sign.detached(new TextEncoder().encode(message), kp.secretKey);
-    const signature = bufferExports.Buffer.from(sigBytes).toString("base64");
-    /* call auth API */
-    const { accessToken, idToken, refreshToken, } = await createSessionWithSignature(address, message, signature);
-    return { address, accessToken, idToken, refreshToken };
-}
-/* ------------------------------------------------------------------ */
-/* SINGLETON                                                          */
+/* SESSION MANAGER                                                     */
 /* ------------------------------------------------------------------ */
 class ServerSessionManager {
-    /* Private constructor prevents external `new` */
-    constructor() {
-        /* Private cache (lives for the life of the process) */
+    constructor(keypair) {
+        /* Private cache (lives for the life of the instance) */
         this.session = null;
         /* Coalesce concurrent getSession() calls into a single in-flight request */
         this.pendingSession = null;
+        this.keypair = keypair !== null && keypair !== void 0 ? keypair : null;
+    }
+    /**
+     * Create a session manager for a specific keypair.
+     * Each instance has its own independent session cache.
+     */
+    static forKeypair(keypair) {
+        return new ServerSessionManager(keypair);
+    }
+    /* ---------------------------------------------- *
+     * Session creation (instance method)
+     * ---------------------------------------------- */
+    async createSession() {
+        var _a;
+        const kp = (_a = this.keypair) !== null && _a !== void 0 ? _a : loadKeypairFromEnv();
+        const address = kp.publicKey.toBase58();
+        /* fetch nonce from auth API */
+        const nonce = await genAuthNonce();
+        const message = await genSolanaMessage(address, nonce);
+        /* sign the message */
+        const sigBytes = nacl.sign.detached(new TextEncoder().encode(message), kp.secretKey);
+        const signature = bufferExports.Buffer.from(sigBytes).toString("base64");
+        /* call auth API */
+        const { accessToken, idToken, refreshToken, } = await createSessionWithSignature(address, message, signature);
+        return { address, accessToken, idToken, refreshToken };
     }
     /* ---------------------------------------------- *
      * GET (lazy-fetch)
@@ -3065,7 +3073,7 @@ class ServerSessionManager {
         if (this.pendingSession !== null) {
             return this.pendingSession;
         }
-        this.pendingSession = createSession()
+        this.pendingSession = this.createSession()
             .then((session) => {
             this.session = session;
             return session;
@@ -3082,7 +3090,7 @@ class ServerSessionManager {
         this.session = session;
     }
     /* ---------------------------------------------- *
-     * CLEAR  (e.g. after logout)
+     * CLEAR  (e.g. after logout or 401 retry)
      * ---------------------------------------------- */
     clearSession() {
         this.session = null;
@@ -3103,7 +3111,7 @@ class ServerSessionManager {
         return (_b = (_a = this.session) === null || _a === void 0 ? void 0 : _a.refreshToken) !== null && _b !== void 0 ? _b : null;
     }
 }
-/* The single, shared instance */
+/* The default singleton instance (reads keypair from env) */
 ServerSessionManager.instance = new ServerSessionManager();
 
 var serverSessionManager = /*#__PURE__*/Object.freeze({
@@ -3218,7 +3226,11 @@ async function makeApiRequest(method, urlPath, data, _overrides) {
         ServerSessionManager.instance.clearSession();
     };
     async function executeRequest() {
-        const authHeader = await createAuthHeader(config.isServer);
+        // When _getAuthHeaders is provided (wallet client), use it as the sole auth source.
+        // Otherwise use the global createAuthHeader (default path).
+        const authHeader = (_overrides === null || _overrides === void 0 ? void 0 : _overrides._getAuthHeaders)
+            ? await _overrides._getAuthHeaders()
+            : await createAuthHeader(config.isServer);
         const headers = Object.assign({ "Content-Type": "application/json", "X-Public-App-Id": config.appId, "X-App-Id": config.appId }, authHeader);
         if (typeof window !== "undefined" &&
             window.CUSTOM_TAROBASE_APP_ID_HEADER) {
@@ -3247,6 +3259,13 @@ async function makeApiRequest(method, urlPath, data, _overrides) {
     }
     catch (error) {
         if (((_a = error.response) === null || _a === void 0 ? void 0 : _a.status) === 401) {
+            // Wallet client path: use client-specific retry, skip global fallback entirely
+            if (_overrides === null || _overrides === void 0 ? void 0 : _overrides._clearAuth) {
+                await _overrides._clearAuth();
+                return await executeRequest();
+                // If this throws, let it propagate — do NOT clear global ServerSessionManager
+            }
+            // Default path (no wallet client): refresh global session
             try {
                 const refreshed = await refreshAuthSessionOnce(config.appId, config.isServer);
                 if (!refreshed) {
@@ -3255,8 +3274,7 @@ async function makeApiRequest(method, urlPath, data, _overrides) {
                 return await executeRequest();
             }
             catch (_refreshError) {
-                // Server-side fallback: clear cached session and retry once to force
-                // createSession() with a fresh Cognito session.
+                // Server-side fallback: clear global session and retry once
                 if (config.isServer && !hasRetriedAfterServerSessionReset) {
                     hasRetriedAfterServerSessionReset = true;
                     await clearServerSession();
@@ -3374,6 +3392,21 @@ typeof SuppressedError === "function" ? SuppressedError : function (error, suppr
     return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
 };
 
+/**
+ * Thrown when a user's wallet doesn't have enough SOL to cover the transaction.
+ * Apps can catch this to trigger an onramp/funding flow.
+ */
+class InsufficientBalanceError extends Error {
+    constructor(address, balanceLamports, estimatedCostLamports, deficitLamports, deficitSol) {
+        super(`Insufficient balance: wallet ${address} needs ~${deficitSol.toFixed(6)} SOL more to complete this transaction.`);
+        this.name = 'InsufficientBalanceError';
+        this.address = address;
+        this.balanceLamports = balanceLamports;
+        this.estimatedCostLamports = estimatedCostLamports;
+        this.deficitLamports = deficitLamports;
+        this.deficitSol = deficitSol;
+    }
+}
 // Cache for get responses
 const getCache = {};
 // Track in-flight requests to coalesce multiple identical requests
@@ -3534,6 +3567,7 @@ async function aggregate(path, operation, opts = {}) {
     return { value: parseAggregateValue(result) };
 }
 async function get(path, opts = {}) {
+    var _a;
     try {
         let normalizedPath = path.startsWith("/") ? path.slice(1) : path;
         // Remove last '*' if it exists in the path
@@ -3543,12 +3577,13 @@ async function get(path, opts = {}) {
         if (!normalizedPath || normalizedPath.length === 0) {
             return new Error("Invalid path provided.");
         }
-        // Create cache key combining path, prompt, includeSubPaths, shape, limit, and cursor
+        // Create cache key combining path, prompt, includeSubPaths, shape, limit, cursor, and wallet
         const shapeKey = opts.shape ? JSON.stringify(opts.shape) : '';
         const includeSubPathsKey = opts.includeSubPaths ? ':subpaths' : '';
         const limitKey = opts.limit !== undefined ? `:l${opts.limit}` : '';
         const cursorKey = opts.cursor ? `:c${hashForKey$1(opts.cursor)}` : '';
-        const cacheKey = `${normalizedPath}:${opts.prompt || ''}${includeSubPathsKey}:${shapeKey}${limitKey}${cursorKey}`;
+        const walletSuffix = ((_a = opts._overrides) === null || _a === void 0 ? void 0 : _a._walletAddress) ? `:w${opts._overrides._walletAddress}` : '';
+        const cacheKey = `${normalizedPath}:${opts.prompt || ''}${includeSubPathsKey}:${shapeKey}${limitKey}${cursorKey}${walletSuffix}`;
         const now = Date.now();
         // Check for valid cache entry if not bypassing cache
         if (!opts.bypassCache && getCache[cacheKey] && now < getCache[cacheKey].expiresAt) {
@@ -3687,10 +3722,11 @@ async function set(path, document, options) {
     return result;
 }
 async function setMany(many, options) {
+    var _a, _b, _c, _d, _e, _f, _g;
     // Returns the data that was set, or undefined if the document was already set.
     try {
         const config = await getConfig();
-        const authProvider = config.authProvider;
+        const authProvider = (_b = (_a = options === null || options === void 0 ? void 0 : options._overrides) === null || _a === void 0 ? void 0 : _a.authProvider) !== null && _b !== void 0 ? _b : config.authProvider;
         if (!authProvider) {
             throw new Error('Auth provider not initialized');
         }
@@ -3721,7 +3757,18 @@ async function setMany(many, options) {
             }
             documents.push({ destinationPath, document });
         }
-        const setResponse = await makeApiRequest('PUT', `items`, { documents }, options === null || options === void 0 ? void 0 : options._overrides);
+        let setResponse;
+        try {
+            setResponse = await makeApiRequest('PUT', `items`, { documents }, options === null || options === void 0 ? void 0 : options._overrides);
+        }
+        catch (error) {
+            if ((error === null || error === void 0 ? void 0 : error.statusCode) === 402 && (error === null || error === void 0 ? void 0 : error.error) === 'INSUFFICIENT_BALANCE') {
+                const deficitLamports = Number((_c = error.deficitLamports) !== null && _c !== void 0 ? _c : 0);
+                const deficitSol = Number((_d = error.deficitSol) !== null && _d !== void 0 ? _d : deficitLamports / 1000000000);
+                throw new InsufficientBalanceError(String((_e = error.address) !== null && _e !== void 0 ? _e : ''), Number((_f = error.balanceLamports) !== null && _f !== void 0 ? _f : 0), Number((_g = error.estimatedCostLamports) !== null && _g !== void 0 ? _g : 0), deficitLamports, deficitSol);
+            }
+            throw error;
+        }
         // Invalidate caches and pending requests for affected paths
         pathsToInvalidate.forEach(path => {
             clearCacheByPrefix(path);
@@ -3762,7 +3809,7 @@ async function setMany(many, options) {
             else if (setResponse.data &&
                 typeof setResponse.data === 'object' &&
                 setResponse.data.success === true) {
-                const _a = setResponse.data, { success: _success } = _a, rest = __rest(_a, ["success"]);
+                const _h = setResponse.data, { success: _success } = _h, rest = __rest(_h, ["success"]);
                 return Object.assign(Object.assign(Object.assign({}, documents.map(d => d.document)), rest), { transactionId: null });
             }
             else {
@@ -3829,7 +3876,7 @@ async function setMany(many, options) {
         return transactionResult;
     }
     async function handleOffchainTransaction(tx, authProvider, options) {
-        var _a, _b, _c, _d, _e;
+        var _a, _b, _c, _d, _e, _f;
         const config = await getConfig();
         // 1. Sign the transaction message using mock signing for offchain transactions
         // Use signMessageMock if available (OffchainAuthProvider), otherwise fall back to signMessage
@@ -3848,32 +3895,18 @@ async function setMany(many, options) {
                 signedTransaction: bufferExports.Buffer.from(JSON.stringify(signedTx)).toString('base64')
             };
         }
-        // 4. Submit to RPC endpoint
-        // Use appId from headers if provided, otherwise fallback to config.appId
+        // 4. Submit to RPC endpoint via makeApiRequest (gets auth headers + 401 retry)
         const appId = ((_b = (_a = options === null || options === void 0 ? void 0 : options._overrides) === null || _a === void 0 ? void 0 : _a.headers) === null || _b === void 0 ? void 0 : _b['x-app-id']) || ((_d = (_c = options === null || options === void 0 ? void 0 : options._overrides) === null || _c === void 0 ? void 0 : _c.headers) === null || _d === void 0 ? void 0 : _d['X-App-Id']) || config.appId;
-        const rpcUrl = `${config.apiUrl}/app/${appId}/rpc`;
-        // Build headers, applying overrides if provided
-        const headers = {
-            'Content-Type': 'application/json',
-        };
-        if ((_e = options === null || options === void 0 ? void 0 : options._overrides) === null || _e === void 0 ? void 0 : _e.headers) {
-            Object.assign(headers, options._overrides.headers);
-        }
-        const rpcResponse = await fetch(rpcUrl, {
-            method: 'POST',
-            headers,
-            body: JSON.stringify({
-                jsonrpc: '2.0',
-                id: 1,
-                method: 'sendTransaction',
-                params: [bufferExports.Buffer.from(JSON.stringify(signedTx)).toString('base64')]
-            })
-        });
-        const result = await rpcResponse.json();
-        if (result.error) {
-            throw new Error(result.error.message);
+        const rpcResponse = await makeApiRequest('POST', `/app/${appId}/rpc`, {
+            jsonrpc: '2.0',
+            id: 1,
+            method: 'sendTransaction',
+            params: [bufferExports.Buffer.from(JSON.stringify(signedTx)).toString('base64')]
+        }, options === null || options === void 0 ? void 0 : options._overrides);
+        if ((_e = rpcResponse.data) === null || _e === void 0 ? void 0 : _e.error) {
+            throw new Error(rpcResponse.data.error.message);
         }
-        return { signature: result.result };
+        return { signature: (_f = rpcResponse.data) === null || _f === void 0 ? void 0 : _f.result };
     }
 }
 // Helper to clear cache entries by prefix
@@ -4706,5 +4739,5 @@ async function reconnectWithNewAuth() {
     return reconnectWithNewAuthV2();
 }
 
-export { ServerSessionManager, WebSessionManager, aggregate, buildSetDocumentsTransaction, clearCache, closeAllSubscriptions, convertRemainingAccounts, count, createSessionWithPrivy, createSessionWithSignature, genAuthNonce, genSolanaMessage, get, getCachedData, getConfig, getFiles, getIdToken, init, reconnectWithNewAuth, refreshSession, runExpression, runExpressionMany, runQuery, runQueryMany, set, setFile, setMany, signAndSubmitTransaction, signMessage, signSessionCreateMessage, signTransaction, subscribe };
+export { InsufficientBalanceError, ServerSessionManager, WebSessionManager, aggregate, buildSetDocumentsTransaction, clearCache, closeAllSubscriptions, convertRemainingAccounts, count, createSessionWithPrivy, createSessionWithSignature, genAuthNonce, genSolanaMessage, get, getCachedData, getConfig, getFiles, getIdToken, init, reconnectWithNewAuth, refreshSession, runExpression, runExpressionMany, runQuery, runQueryMany, set, setFile, setMany, signAndSubmitTransaction, signMessage, signSessionCreateMessage, signTransaction, subscribe };
 //# sourceMappingURL=index.mjs.map