@totalis/hip4-client 0.65.2 → 0.74.0

package/dist/wallet-session.d.ts

@@ -12,11 +12,18 @@ export type WalletSignInOptions = Omit<ApiClientOptions, "accessToken"> & {
     /**
      * The page's origin, defaulting to `location.origin` in a browser. Outside a
      * browser it is sent as the Origin header: a maker passes the Totalis app's
-     * origin (`https://hip4.totalis.trade`, or `https://hip4-staging.totalis.trade`
+     * origin (`https://app.totalis.trade`, or `https://hip4-staging.totalis.trade`
      * on staging), and a partner its registered origin. Send the same origin as
      * the Origin header with every request on the session's token.
      */
     readonly origin?: string;
+    /**
+     * A partner's secret server key (`tpk_v1_…`), for a partner signing its
+     * users in from its own servers: the sign-in is then rate limited per
+     * partner instead of per source address. The origin must be one the partner
+     * owns, and the wallet still signs. Server-side only.
+     */
+    readonly serverKey?: string;
 };
 /**
  * Check a sign-in challenge before the wallet signs it: the exact Totalis

package/dist/wallet-session.js

@@ -32,12 +32,14 @@ export function checkSignInChallenge(challenge, expected, now = Date.now()) {
  * with no account yet needs a partner to admit it first (ACCESS_REQUIRED).
  */
 export async function signInWithWallet(options) {
-    const { environment, signer: input, origin = globalThis.location?.origin, ...clientOptions } = options;
+    const { environment, signer: input, origin = globalThis.location?.origin, serverKey, ...clientOptions } = options;
     if (origin === undefined || origin === "")
         throw new Error("signInWithWallet needs an origin outside a browser");
+    if (serverKey !== undefined && (inBrowser() || !serverKey.startsWith("tpk_v1_")))
+        throw new Error("serverKey takes a tpk_v1 partner server key, and only on a server");
     const signer = toTotalisSigner(input);
     const address = await signer.address();
-    const client = audienceClient(environment, clientOptions);
+    const client = audienceClient(environment, serverKey === undefined ? clientOptions : { ...clientOptions, accessToken: serverKey });
     // A browser sets Origin itself and refuses a script's value.
     const originHeader = inBrowser() ? {} : { Origin: origin };
     const requestId = uuidv7();

package/examples/onboard.mjs

@@ -4,7 +4,7 @@
 // issue the quoting bot's key, fund the maker vault, and start quoting. Run it
 // again to resume: each step skips what is already done.
 //
-// Before it, once in a browser: sign up at hip4.totalis.trade with your invite
+// Before it, once in a browser: sign up at app.totalis.trade with your invite
 // code, then in Account choose Export private key. Fund that wallet on HyperEVM
 // with HYPE for gas (makers are never sponsored) and the USDC you will deposit.
 //
@@ -29,7 +29,7 @@ import { signInWithWallet } from "@totalis/hip4-client/wallet-session";
 import { startBot } from "./node-bot.mjs";
 
 /** The Totalis app's origin: a maker's wallet session signs in from it, and every request on the session sends it as Origin. */
-export const appOrigins = { production: "https://hip4.totalis.trade", staging: "https://hip4-staging.totalis.trade" };
+export const appOrigins = { production: "https://app.totalis.trade", staging: "https://hip4-staging.totalis.trade" };
 /** Public HyperEVM RPCs by chain ID; pass your own `rpcUrl` for anything heavier than onboarding. */
 const publicRpcs = { "999": "https://rpc.hyperliquid.xyz/evm", "998": "https://rpc.hyperliquid-testnet.xyz/evm" };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@totalis/hip4-client",
-  "version": "0.65.2",
+  "version": "0.74.0",
   "description": "Totalis HIP-4 SDK: typed HTTP clients, signer-agnostic typed data, a retrying request layer, pagination, a realtime stream and taker/maker flows",
   "type": "module",
   "files": [
@@ -68,6 +68,7 @@
     "test:staging-read": "npm run build && node test/staging-read-smoke.mjs",
     "test:production-read": "npm run build && node test/staging-read-smoke.mjs production",
     "test:staging-smoke": "npm run build && node test/staging-smoke.mjs",
+    "test:staging-burst": "npm run build && node test/staging-burst.mjs",
     "prepack": "npm run build",
     "release:check": "npm run check && npm test && npm pack --dry-run"
   },