@beam-network/sdk 0.2.17 → 0.2.18

package/dist/nats-control.js

@@ -7,6 +7,25 @@ export const BEAM_DEFAULT_NATS_WS_URL = "wss://nats.b1m.ai:443";
 // messages before the broker rejects them; transfer bytes never flow through NATS.
 export const BEAM_DEFAULT_MAX_PAYLOAD_BYTES = 24 * 1024 * 1024;
 export const ROUTE_RECOVERY_SIGN_MESSAGE_TYPE = "transfer.route_recovery.sign";
+function buildConnectionOptions(options) {
+    const connectionOptions = {
+        servers: options.natsUrl,
+        user: options.keyPrefix,
+        pass: options.apiKey,
+        name: `beam-sdk-${options.keyPrefix}`
+    };
+    if (options.natsUrl.startsWith("tls://")) {
+        const tlsOptions = { handshakeFirst: true };
+        try {
+            tlsOptions.servername = new URL(options.natsUrl).hostname;
+        }
+        catch {
+            // URL validation stays with the NATS client; TLS-first is still required.
+        }
+        connectionOptions.tls = tlsOptions;
+    }
+    return connectionOptions;
+}
 export class BeamTransferControl {
     environment;
     keyPrefix;
@@ -145,12 +164,11 @@ export class BeamTransferControl {
     async connection() {
         if (this.nc && !this.nc.isClosed())
             return this.nc;
-        this.nc = await connect({
-            servers: this.natsUrl,
-            user: this.keyPrefix,
-            pass: this.apiKey,
-            name: `beam-sdk-${this.keyPrefix}`
-        });
+        this.nc = await connect(buildConnectionOptions({
+            natsUrl: this.natsUrl,
+            apiKey: this.apiKey,
+            keyPrefix: this.keyPrefix
+        }));
         return this.nc;
     }
     async resolveAuthToken() {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@beam-network/sdk",
-    "version": "0.2.17",
+    "version": "0.2.18",
     "description": "TypeScript SDK for BEAM transfer creation and management.",
     "type": "module",
     "license": "MIT",