lightnode-sdk 0.7.10 → 0.7.11

package/dist/auth.d.ts

@@ -76,6 +76,7 @@ export interface SiweSession {
  */
 export declare function siweChallenge(network: NetworkId | NetworkConfig, address: `0x${string}`, opts?: {
     signal?: AbortSignal;
+    baseUrl?: string;
 }): Promise<SiweChallenge>;
 /**
  * Verify a signed SIWE message and mint a JWT bearer.
@@ -85,6 +86,7 @@ export declare function siweVerify(network: NetworkId | NetworkConfig, args: {
     signature: `0x${string}`;
 }, opts?: {
     signal?: AbortSignal;
+    baseUrl?: string;
 }): Promise<SiweVerifyResult>;
 /**
  * End-to-end SIWE sign-in: challenge -> sign -> verify -> JWT.
@@ -103,4 +105,5 @@ export declare function siweVerify(network: NetworkId | NetworkConfig, args: {
 export declare function siweSignIn(walletClient: SiweWalletClient, network: NetworkId | NetworkConfig, opts?: {
     address?: `0x${string}`;
     signal?: AbortSignal;
+    baseUrl?: string;
 }): Promise<SiweSession>;

package/dist/auth.js

@@ -21,6 +21,26 @@
  * can refresh proactively.
  */
 import { NETWORKS } from "./networks.js";
+// Same logic as gateway.ts: in a browser-like runtime the consumer-api's
+// CORS allowlist excludes most origins, so we route the SIWE handshake
+// through lightnode.app's public pass-through proxy. The proxy preserves
+// the upstream `/api/auth/{challenge,verify}` shape, so callers do not
+// have to special-case it.
+const PROXY_HOSTS = {
+    mainnet: "https://lightnode.app/api/gw/mainnet",
+    testnet: "https://lightnode.app/api/gw/testnet",
+};
+function looksLikeBrowserFetch() {
+    if (typeof window !== "undefined" && typeof document !== "undefined")
+        return true;
+    const wc = globalThis.process?.versions?.webcontainer;
+    return Boolean(wc);
+}
+function defaultSiweBase(cfg) {
+    if (looksLikeBrowserFetch())
+        return PROXY_HOSTS[cfg.id];
+    return cfg.consumerApi ?? "";
+}
 const REQUEST_TIMEOUT_MS = 15000;
 function resolveNetwork(network) {
     if (typeof network === "string") {
@@ -68,10 +88,15 @@ async function httpJson(url, init) {
  */
 export async function siweChallenge(network, address, opts = {}) {
     const cfg = resolveNetwork(network);
-    if (!cfg.consumerApi) {
-        throw new Error(`siweChallenge: network "${cfg.id}" has no consumerApi configured`);
+    // baseUrl override lets a browser caller route through a different
+    // proxy. By default the SDK auto-routes browser traffic through
+    // lightnode.app's pass-through proxy (the consumer-api's CORS allowlist
+    // excludes most origins). Server-side, we hit the consumer-api direct.
+    const base = (opts.baseUrl ?? defaultSiweBase(cfg)).replace(/\/+$/, "");
+    if (!base) {
+        throw new Error(`siweChallenge: network "${cfg.id}" has no consumerApi configured (and no baseUrl override)`);
     }
-    const url = `${cfg.consumerApi.replace(/\/+$/, "")}/api/auth/challenge?address=${address}`;
+    const url = `${base}/api/auth/challenge?address=${address}`;
     return httpJson(url, { method: "GET", signal: opts.signal });
 }
 /**
@@ -79,10 +104,11 @@ export async function siweChallenge(network, address, opts = {}) {
  */
 export async function siweVerify(network, args, opts = {}) {
     const cfg = resolveNetwork(network);
-    if (!cfg.consumerApi) {
-        throw new Error(`siweVerify: network "${cfg.id}" has no consumerApi configured`);
+    const base = (opts.baseUrl ?? defaultSiweBase(cfg)).replace(/\/+$/, "");
+    if (!base) {
+        throw new Error(`siweVerify: network "${cfg.id}" has no consumerApi configured (and no baseUrl override)`);
     }
-    const url = `${cfg.consumerApi.replace(/\/+$/, "")}/api/auth/verify`;
+    const url = `${base}/api/auth/verify`;
     const out = await httpJson(url, {
         method: "POST",
         body: { message: args.message, signature: args.signature },
@@ -125,14 +151,14 @@ export async function siweSignIn(walletClient, network, opts = {}) {
     if (!address) {
         throw new Error("siweSignIn: walletClient has no account; pass `address` explicitly");
     }
-    const { message } = await siweChallenge(cfg, address, { signal: opts.signal });
+    const { message } = await siweChallenge(cfg, address, { signal: opts.signal, baseUrl: opts.baseUrl });
     // viem's signMessage requires `account` even when one is set on the
     // client; passing it explicitly works with both wagmi and bare viem.
     const signature = await walletClient.signMessage({
         account: walletClient.account?.address ?? address,
         message,
     });
-    const verified = await siweVerify(cfg, { message, signature }, { signal: opts.signal });
+    const verified = await siweVerify(cfg, { message, signature }, { signal: opts.signal, baseUrl: opts.baseUrl });
     const token = verified.token;
     return {
         token,

package/dist/index.d.ts

@@ -134,7 +134,7 @@ export declare class LightNode {
  * (especially in registry-proxy environments like StackBlitz where lockfiles
  * may pin an older minor than the local install command suggests).
  */
-export declare const SDK_VERSION = "0.7.10";
+export declare const SDK_VERSION = "0.7.11";
 export { NETWORKS, WORKER_REGISTRY, REGISTRY_TOPICS, aggregateModelStats, aggregateWorkerStats, networkAnalytics, modelStatsCsv, workerStatsCsv, workerJobsCsv, fromWei, resolveJobTransactions, siweSignIn, siweChallenge, siweVerify, fetchWorkerModels, computeModelId as modelId, estimateJobFee, JOB_REGISTRY_CONSUMER_ABI, consumerGatewayUrl, consumerGatewayHost, GatewayClient, GatewayHttpError, prepareSession, submitPrompt, decryptResponse, generateEcdhKeyPair, crypto, runInference, runInferenceWithKey, runInferenceStream, Conversation, chat, runInferenceBatch, Agent, parseAgentOutput, workerPreflight, workerWatch, Bridge, BRIDGE_ROUTE, HYPERLANE_ROUTER_ABI, ERC20_ABI, addressToBytes32, quoteBridgeFee, bridgeableBalance, bridgeAllowance, approveBridge, bridgeTransfer, DAO, DAO_ADDRESSES, ProposalState, PROPOSAL_STATE_LABEL, VoteSupport, GOVERNOR_ABI, VOTES_ABI, OnchainModelRegistry, AIVM_MODEL_REGISTRY_ABI, BENCHMARK_REGISTRY_ABI, ModelStatus, MODEL_STATUS_LABEL, StalledWorkerError, OnChainRevertError, RelayTokenTimeoutError, GatewayAuthError, isStalledWorker, WorkerOperator, WORKER_REGISTRY_ABI, JOB_REGISTRY_OPERATOR_ABI, AI_CONFIG_ABI, JOB_STATE, decodeWorkerError, WorkerOpError, isWorkerOpError, };
 export type { BearerSource, GatewayClientOptions, SelectSessionResult, PrepareSessionResult, UploadBlobResult, SessionTokenResult } from "./gateway.js";
 export type { SessionPreparation, RunInferenceArgs, RunInferenceResult, RunInferenceWithKeyArgs, RunInferenceStreamResult } from "./inference.js";

package/dist/index.js

@@ -213,7 +213,7 @@ export class LightNode {
  * (especially in registry-proxy environments like StackBlitz where lockfiles
  * may pin an older minor than the local install command suggests).
  */
-export const SDK_VERSION = "0.7.10";
+export const SDK_VERSION = "0.7.11";
 export { NETWORKS, WORKER_REGISTRY, REGISTRY_TOPICS, aggregateModelStats, aggregateWorkerStats, networkAnalytics, modelStatsCsv, workerStatsCsv, workerJobsCsv, fromWei, 
 // v0.7.3 per-job transaction-hash resolver (lifts the upstream
 // subgraph's "block-only" Job entity to a deep-linkable Job + tx pair).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lightnode-sdk",
-  "version": "0.7.10",
+  "version": "0.7.11",
   "description": "Read-only TypeScript client for LightChain AI: workers, jobs, models, on-chain registration, and per-model network analytics. Independent, community-built (not an official LightChain package).",
   "type": "module",
   "main": "./dist/index.js",