# @bounded-sh/core

> Shared client, data-plane, and transport primitives for Bounded, the full-stack app builder and runtime for AI-built apps: policy-enforced operations, files, functions, and realtime.

Latest version **0.0.102** (published 2026-09-23) · MIT license · 0 weekly downloads

## Install

```sh
npm install @bounded-sh/core
pnpm add @bounded-sh/core
yarn add @bounded-sh/core
bun add @bounded-sh/core
```

## Health

**Score 70/100 (B)** — status: active.

Positive: has types; esm support; no vulnerabilities; recently updated; high maintenance score; high quality score.

Warnings: low downloads; pre 1.0.

## Facts

| | |
|---|---|
| Version | 0.0.102 |
| Published | 2026-09-23 |
| First published | 2026-06-22 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | bundled |
| Module format | ESM + CommonJS |
| Dependencies | 12 |
| Unpacked size | 3.1 MB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Author | Bounded |
| Maintainers | amitpoofdotnew, bilalpoof, prpatel05, athar-poof |
| Keywords | bounded, full-stack, app-builder, app-runtime, ai-app-builder, realtime-backend, ai-apps, policy, sdk, typescript |

## Links

- npm: https://www.npmjs.com/package/@bounded-sh/core
- Homepage: https://bounded.sh/docs/sdk
- npm.io page: https://npm.io/package/@bounded-sh/core

## Dependencies (12)

- [axios](https://npm.io/package/axios.md) 1.18.1
- [bn.js](https://npm.io/package/bn.js.md) 5.2.4
- [buffer](https://npm.io/package/buffer.md) 6.0.3
- [lodash](https://npm.io/package/lodash.md) 4.18.1
- [tweetnacl](https://npm.io/package/tweetnacl.md) 1.0.3
- [@solana/kit](https://npm.io/package/@solana/kit.md) 8.2.0
- [axios-retry](https://npm.io/package/axios-retry.md) 4.5.0
- [@types/lodash](https://npm.io/package/@types/lodash.md) 4.17.21
- [rpc-websockets](https://npm.io/package/rpc-websockets.md) 9.3.9
- [@solana/web3.js](https://npm.io/package/@solana/web3.js.md) 1.98.4
- [@coral-xyz/anchor](https://npm.io/package/@coral-xyz/anchor.md) 0.31.1
- [reconnecting-websocket](https://npm.io/package/reconnecting-websocket.md) 4.4.0

## Alternatives

- [@opentelemetry/exporter-zipkin](https://npm.io/package/@opentelemetry/exporter-zipkin.md) — 14.8M weekly downloads
- [pusher-js](https://npm.io/package/pusher-js.md) — 2.0M weekly downloads
- [browserify](https://npm.io/package/browserify.md) — 1.7M weekly downloads
- [sqs-consumer](https://npm.io/package/sqs-consumer.md) — 1.7M weekly downloads
- [@sanity/eventsource](https://npm.io/package/@sanity/eventsource.md) — 930.8K weekly downloads

## Recent versions

- 0.0.102 (latest) — 2026-09-23
- 0.0.101 (candidate-0.0.101) — 2026-09-21
- 0.0.100-performance.1 (candidate-0.0.100-performance.1) — 2026-09-13
- 0.0.100-performance.0 (candidate-0.0.100-performance.0) — 2026-09-13
- 0.0.72 (candidate-0.0.72) — 2026-08-18
- 0.0.71 (candidate-0.0.71) — 2026-08-18
- 0.0.68 (candidate-0.0.68) — 2026-08-12
- 0.0.100 — 2026-09-19
- 0.0.99 — 2026-09-15
- 0.0.98 — 2026-09-11
- 0.0.97 — 2026-09-10
- 0.0.96 — 2026-09-09
- 0.0.95 — 2026-09-08
- 0.0.94 — 2026-09-07
- 0.0.93 — 2026-09-06
- … 82 more at https://npm.io/package/@bounded-sh/core/versions

## README

# @bounded-sh/core

Core functionality for Tarobase SDKs. This package provides the shared functionality used by both the web and server SDKs.

## Installation

```bash
npm install @bounded-sh/core
```

## Usage

This package is typically not used directly, but is instead used as a dependency by `@bounded-sh/client` and `@bounded-sh/server`. If you're building a browser application, use `@bounded-sh/client`. If you're building a server application, use `@bounded-sh/server`.

## API Reference

### Core Types

```typescript
export interface ClientConfig {
  appId: string;
  apiUrl: string;
  authMethod: string;
  privyConfig?: any;
  chain?: string;
  useSessionStorage?: boolean;
}

export interface AuthProvider {
  login(): Promise<User | null>;
  signMessage(message: string): Promise<string>;
  restoreSession(): Promise<User | null>;
  logout(): Promise<void>;
  getNativeMethods(): Promise<any>;
}

export interface User {
  address: string;
  provider: AuthProvider;
}

export interface GetManyResult {
  path: string;
  data: any | null;
  error?: {
    code: 'NOT_FOUND' | 'UNAUTHORIZED' | 'INVALID_PATH';
    message: string;
  };
}
```

### Core Operations

```typescript
// Initialize the SDK
function configInit(newConfig: Partial<ClientConfig>, options?: SessionOptions): Promise<void>;

// Get the current configuration
function getConfig(): Promise<ClientConfig>;

// Data operations
function get(path: string): Promise<any>;
function getMany(paths: string[], options?: { bypassCache?: boolean }): Promise<GetManyResult[]>;
function set(path: string, data: any, options?: SetOptions): Promise<any>;
function setMany(many: { path: string; document: any }[], options?: SetOptions): Promise<any>;
function setFile(path: string, file: File, metadata?: any): Promise<any>;
function getFiles(path: string): Promise<any>;
function runQuery(queryString: string, variables?: any): Promise<any>;
function runQueryMany(queryString: string, variables?: any): Promise<any>;

// Subscription
function subscribe(path: string, options?: SubscriptionOptions): Promise<() => void>;
```

## Contributing

Please see the main repository for contribution guidelines.

---
_Source: https://npm.io/package/@bounded-sh/core · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._