Update archiver/relay/solana-relay/staking to @audius/sdk ^15.3.1

[dylanjeffers]

Summary

Rebased onto current main. Bumps the four pedalboard plugins still on the old @audius/sdk onto ^15.3.1, matching the version anti-abuse-oracle already runs in prod (PR #34).

Plugin	Before	After
archiver	10.0.0	^15.3.1
relay	10.0.0	^15.3.1
solana-relay	15.1.0	^15.3.1
staking	10.0.0	^15.3.1

Source migrations the new SDK requires

• archiver: bare sdk() now exposes only the generated TracksApi, which doesn't include getTrackDownloadUrl. Switch apps/archiver/src/sdk.ts to createSdkWithServices so the extended TracksApi (with getTrackDownloadUrl) is wired up.

• relay:

  • Migrate sdk() → createSdkWithServices so audiusSdk.services.entityManager (decodeManageEntity / recoverSigner) keeps working. Switch the AudiusSdk type alias to AudiusSdkWithServices.
  • services.entityManager is now typed as optional on AudiusSdkWithServices but is always populated in practice by the SDK's default services — add ! assertions at the call sites (coreRelay.ts, middleware/rateLimiter.ts, middleware/validator.ts, utils.ts, validate.ts).
  • Drop the 'staging' environment value (no longer accepted by the SDK) by routing stage to 'production'. The sandbox script uses the new apiEndpoint override to point at staging discovery.
  • users.updateProfile is gone in 15.3.1 — sandbox switches to the equivalent users.updateUser({ id, userId, metadata }) shape.

• solana-relay, staking: package.json bump only. The SDK types in solana-relay source (FirstBuyQuoteResponse, RelayRequestBody) are still exported; staking has no @audius/sdk imports in src/.

Intentionally NOT included

• trending-challenge-rewards: stays at 14.1.0. The bump to 15.3.1 with createSdkWithServices was tried in 044f0e2 and explicitly reverted in 2d9f65d. The revert reason isn't documented in the revert commit message, so honoring the revert.
• anti-abuse-oracle: already at ^15.3.1 on main (PR chore(aao): bump @audius/sdk to 15.3.1 to fix lodash ESM crash #34). The original PR Update archiver/relay/solana-relay/staking to @audius/sdk ^15.3.1 #20 AAO changes targeted the pre-migration source that no longer exists (the AAO was migrated into pedalboard from the apps monorepo in PR feat: migrate anti-abuse oracle from apps to pedalboard #29 with a completely different source layout).

Pre-existing main-branch issues not addressed here

• apps/relay/src/middleware/logging.ts(21,5) has a pino Logger<never> type incompatibility, introduced by the node 24 upgrade / pino pin commits — present on main with or without this change. Relay was also dropped from CI in PR Drop mri and relay from CI; remove mri source #15, so this hasn't been blocking anyone.
• viem / abitype .d.ts syntax errors under node_modules are flagged by the apps' TS 5.0.4 — same as on main.

Test plan

• npm install resolves all four plugins to @audius/sdk@15.3.1
• tsc --noEmit on archiver, solana-relay, staking source is clean
• relay tsc errors are reduced from ~10 to 1 (the pre-existing pino issue); all services does not exist on UsersApi errors that exist on plain main are gone with this change
• Smoke test the relay against a stage discovery node to confirm decodeManageEntity / recoverSigner paths still work end-to-end
• Once merged, monitor archiver getTrackDownloadUrl calls — the switch to createSdkWithServices is required to expose that endpoint

---

🤖 Generated with Claude Code