@veridex/sdk 1.1.1 → 1.1.3

package/dist/index.mjs

@@ -61,10 +61,10 @@ import {
 } from "./chunk-CSU4IV2F.mjs";
 import {
   AvalancheClient
-} from "./chunk-PEGOXMBU.mjs";
+} from "./chunk-6JULIESG.mjs";
 import {
   EVMClient
-} from "./chunk-YBN2VC6E.mjs";
+} from "./chunk-E5HHE7IW.mjs";
 import {
   CONSISTENCY_LEVELS,
   GUARDIAN_CONFIG,
@@ -7730,6 +7730,12 @@ function validateSessionConfig(config) {
       "INVALID_CONFIG" /* INVALID_CONFIG */
     );
   }
+  if (config.maxValue === 0n && config.allowUnboundedMaxValue !== true) {
+    throw new SessionError(
+      'Session maxValue=0 means "no per-tx limit" \u2014 the vault daily cap is then the only bound. This is a foot-gun: a compromised session key can drain the vault up to that cap. Pass a non-zero maxValue, or set allowUnboundedMaxValue:true if you have verified the vault daily cap and accept the residual risk.',
+      "INVALID_CONFIG" /* INVALID_CONFIG */
+    );
+  }
 }
 
 // src/sessions/storage.ts
@@ -8275,7 +8281,8 @@ var SessionManager = class {
       maxValue: config.maxValue ?? 0n,
       autoRefresh: config.autoRefresh ?? true,
       refreshBuffer: config.refreshBuffer ?? DEFAULT_REFRESH_BUFFER,
-      chainScopes: config.chainScopes ?? []
+      chainScopes: config.chainScopes ?? [],
+      allowUnboundedMaxValue: config.allowUnboundedMaxValue ?? false
     };
     validateSessionConfig(this.config);
     this.debug = managerConfig?.debug ?? false;