lightnode-sdk 0.7.10 → 0.7.12

package/dist/auth.d.ts

@@ -76,6 +76,7 @@ export interface SiweSession {
  */
 export declare function siweChallenge(network: NetworkId | NetworkConfig, address: `0x${string}`, opts?: {
     signal?: AbortSignal;
+    baseUrl?: string;
 }): Promise<SiweChallenge>;
 /**
  * Verify a signed SIWE message and mint a JWT bearer.
@@ -85,6 +86,7 @@ export declare function siweVerify(network: NetworkId | NetworkConfig, args: {
     signature: `0x${string}`;
 }, opts?: {
     signal?: AbortSignal;
+    baseUrl?: string;
 }): Promise<SiweVerifyResult>;
 /**
  * End-to-end SIWE sign-in: challenge -> sign -> verify -> JWT.
@@ -103,4 +105,5 @@ export declare function siweVerify(network: NetworkId | NetworkConfig, args: {
 export declare function siweSignIn(walletClient: SiweWalletClient, network: NetworkId | NetworkConfig, opts?: {
     address?: `0x${string}`;
     signal?: AbortSignal;
+    baseUrl?: string;
 }): Promise<SiweSession>;

package/dist/auth.js

@@ -21,6 +21,26 @@
  * can refresh proactively.
  */
 import { NETWORKS } from "./networks.js";
+// Same logic as gateway.ts: in a browser-like runtime the consumer-api's
+// CORS allowlist excludes most origins, so we route the SIWE handshake
+// through lightnode.app's public pass-through proxy. The proxy preserves
+// the upstream `/api/auth/{challenge,verify}` shape, so callers do not
+// have to special-case it.
+const PROXY_HOSTS = {
+    mainnet: "https://lightnode.app/api/gw/mainnet",
+    testnet: "https://lightnode.app/api/gw/testnet",
+};
+function looksLikeBrowserFetch() {
+    if (typeof window !== "undefined" && typeof document !== "undefined")
+        return true;
+    const wc = globalThis.process?.versions?.webcontainer;
+    return Boolean(wc);
+}
+function defaultSiweBase(cfg) {
+    if (looksLikeBrowserFetch())
+        return PROXY_HOSTS[cfg.id];
+    return cfg.consumerApi ?? "";
+}
 const REQUEST_TIMEOUT_MS = 15000;
 function resolveNetwork(network) {
     if (typeof network === "string") {
@@ -68,10 +88,15 @@ async function httpJson(url, init) {
  */
 export async function siweChallenge(network, address, opts = {}) {
     const cfg = resolveNetwork(network);
-    if (!cfg.consumerApi) {
-        throw new Error(`siweChallenge: network "${cfg.id}" has no consumerApi configured`);
+    // baseUrl override lets a browser caller route through a different
+    // proxy. By default the SDK auto-routes browser traffic through
+    // lightnode.app's pass-through proxy (the consumer-api's CORS allowlist
+    // excludes most origins). Server-side, we hit the consumer-api direct.
+    const base = (opts.baseUrl ?? defaultSiweBase(cfg)).replace(/\/+$/, "");
+    if (!base) {
+        throw new Error(`siweChallenge: network "${cfg.id}" has no consumerApi configured (and no baseUrl override)`);
     }
-    const url = `${cfg.consumerApi.replace(/\/+$/, "")}/api/auth/challenge?address=${address}`;
+    const url = `${base}/api/auth/challenge?address=${address}`;
     return httpJson(url, { method: "GET", signal: opts.signal });
 }
 /**
@@ -79,10 +104,11 @@ export async function siweChallenge(network, address, opts = {}) {
  */
 export async function siweVerify(network, args, opts = {}) {
     const cfg = resolveNetwork(network);
-    if (!cfg.consumerApi) {
-        throw new Error(`siweVerify: network "${cfg.id}" has no consumerApi configured`);
+    const base = (opts.baseUrl ?? defaultSiweBase(cfg)).replace(/\/+$/, "");
+    if (!base) {
+        throw new Error(`siweVerify: network "${cfg.id}" has no consumerApi configured (and no baseUrl override)`);
     }
-    const url = `${cfg.consumerApi.replace(/\/+$/, "")}/api/auth/verify`;
+    const url = `${base}/api/auth/verify`;
     const out = await httpJson(url, {
         method: "POST",
         body: { message: args.message, signature: args.signature },
@@ -125,14 +151,14 @@ export async function siweSignIn(walletClient, network, opts = {}) {
     if (!address) {
         throw new Error("siweSignIn: walletClient has no account; pass `address` explicitly");
     }
-    const { message } = await siweChallenge(cfg, address, { signal: opts.signal });
+    const { message } = await siweChallenge(cfg, address, { signal: opts.signal, baseUrl: opts.baseUrl });
     // viem's signMessage requires `account` even when one is set on the
     // client; passing it explicitly works with both wagmi and bare viem.
     const signature = await walletClient.signMessage({
         account: walletClient.account?.address ?? address,
         message,
     });
-    const verified = await siweVerify(cfg, { message, signature }, { signal: opts.signal });
+    const verified = await siweVerify(cfg, { message, signature }, { signal: opts.signal, baseUrl: opts.baseUrl });
     const token = verified.token;
     return {
         token,

package/dist/gateway.d.ts

@@ -35,6 +35,19 @@ export interface SelectSessionResult {
     disputerEncryptionKey?: string;
     nonce: number;
     expiry: number;
+    /**
+     * Opaque correlation token added by the dispatcher in May 2026
+     * (lcai-chat-v2 commit 33c70841, web-search epic / Story 16). The client
+     * MUST echo it back to `prepareSession` so a later capability-aware
+     * select cannot overwrite our pending slot. Optional for forward-compat
+     * with older dispatchers that predate the token.
+     *
+     * Without this, any concurrent activity for the same wallet produces a
+     * 409 selection_mismatch on prepare.
+     */
+    selectionId?: string;
+    /** Worker capabilities reported by the dispatcher (web-search etc.). */
+    workerCapabilities?: string[];
 }
 export interface PrepareSessionResult {
     worker: `0x${string}`;
@@ -95,6 +108,13 @@ export declare class GatewayClient {
         modelId: `0x${string}`;
         encWorkerKey: string;
         encDisputerKey: string;
+        /**
+         * Correlation token from {@link SelectSessionResult.selectionId}. Required
+         * by the May 2026 dispatcher to avoid 409 selection_mismatch when a newer
+         * select for the same wallet has overwritten the pending slot.
+         */
+        selectionId?: string;
+        requiredCapabilities?: string[];
     }): Promise<PrepareSessionResult>;
     /** Protected: upload an encrypted prompt blob; returns the EIP-4844 blob hash. */
     uploadBlob(base64Data: string): Promise<UploadBlobResult>;

package/dist/index.d.ts

@@ -134,7 +134,7 @@ export declare class LightNode {
  * (especially in registry-proxy environments like StackBlitz where lockfiles
  * may pin an older minor than the local install command suggests).
  */
-export declare const SDK_VERSION = "0.7.10";
+export declare const SDK_VERSION = "0.7.12";
 export { NETWORKS, WORKER_REGISTRY, REGISTRY_TOPICS, aggregateModelStats, aggregateWorkerStats, networkAnalytics, modelStatsCsv, workerStatsCsv, workerJobsCsv, fromWei, resolveJobTransactions, siweSignIn, siweChallenge, siweVerify, fetchWorkerModels, computeModelId as modelId, estimateJobFee, JOB_REGISTRY_CONSUMER_ABI, consumerGatewayUrl, consumerGatewayHost, GatewayClient, GatewayHttpError, prepareSession, submitPrompt, decryptResponse, generateEcdhKeyPair, crypto, runInference, runInferenceWithKey, runInferenceStream, Conversation, chat, runInferenceBatch, Agent, parseAgentOutput, workerPreflight, workerWatch, Bridge, BRIDGE_ROUTE, HYPERLANE_ROUTER_ABI, ERC20_ABI, addressToBytes32, quoteBridgeFee, bridgeableBalance, bridgeAllowance, approveBridge, bridgeTransfer, DAO, DAO_ADDRESSES, ProposalState, PROPOSAL_STATE_LABEL, VoteSupport, GOVERNOR_ABI, VOTES_ABI, OnchainModelRegistry, AIVM_MODEL_REGISTRY_ABI, BENCHMARK_REGISTRY_ABI, ModelStatus, MODEL_STATUS_LABEL, StalledWorkerError, OnChainRevertError, RelayTokenTimeoutError, GatewayAuthError, isStalledWorker, WorkerOperator, WORKER_REGISTRY_ABI, JOB_REGISTRY_OPERATOR_ABI, AI_CONFIG_ABI, JOB_STATE, decodeWorkerError, WorkerOpError, isWorkerOpError, };
 export type { BearerSource, GatewayClientOptions, SelectSessionResult, PrepareSessionResult, UploadBlobResult, SessionTokenResult } from "./gateway.js";
 export type { SessionPreparation, RunInferenceArgs, RunInferenceResult, RunInferenceWithKeyArgs, RunInferenceStreamResult } from "./inference.js";

package/dist/index.js

@@ -213,7 +213,7 @@ export class LightNode {
  * (especially in registry-proxy environments like StackBlitz where lockfiles
  * may pin an older minor than the local install command suggests).
  */
-export const SDK_VERSION = "0.7.10";
+export const SDK_VERSION = "0.7.12";
 export { NETWORKS, WORKER_REGISTRY, REGISTRY_TOPICS, aggregateModelStats, aggregateWorkerStats, networkAnalytics, modelStatsCsv, workerStatsCsv, workerJobsCsv, fromWei, 
 // v0.7.3 per-job transaction-hash resolver (lifts the upstream
 // subgraph's "block-only" Job entity to a deep-linkable Job + tx pair).

package/dist/inference.js

@@ -107,10 +107,18 @@ export async function prepareSession(gateway, modelTag) {
             const encDisputer = selected.disputerEncryptionKey
                 ? await encryptSessionKey(sessionKey, await importPublicKey(decodePublicKey(selected.disputerEncryptionKey)))
                 : new Uint8Array(0);
+            // ROOT-CAUSE FIX (lcai-chat-v2 commit 33c70841, May 2026): echo the
+            // dispatcher's selectionId from selectSession back into prepareSession.
+            // Without this, the dispatcher's pending-slot tracker matches against
+            // the LATEST select for our wallet, so any concurrent activity (other
+            // tab, other dApp signed into the same wallet) produces 409
+            // selection_mismatch. Threading it makes the prepare bind to the
+            // selection we actually got.
             const prepared = await gateway.prepareSession({
                 modelId: id,
                 encWorkerKey: bytesToBase64(encWorker),
                 encDisputerKey: bytesToBase64(encDisputer),
+                ...(selected.selectionId ? { selectionId: selected.selectionId } : {}),
             });
             return {
                 sessionKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lightnode-sdk",
-  "version": "0.7.10",
+  "version": "0.7.12",
   "description": "Read-only TypeScript client for LightChain AI: workers, jobs, models, on-chain registration, and per-model network analytics. Independent, community-built (not an official LightChain package).",
   "type": "module",
   "main": "./dist/index.js",