@centurion_project/smart-order-router 4.31.15 → 4.31.17

package/build/module/util/security.d.ts

@@ -0,0 +1,3 @@
+export declare const isLocalOrPrivateHostname: (hostname: string) => boolean;
+export declare const assertPublicHttpsUrl: (rawUrl: string, contextLabel: string) => string;
+export declare const formatErrorForLog: (err: unknown) => Record<string, unknown>;

package/build/module/util/security.js

@@ -0,0 +1,111 @@
+import axios from 'axios';
+import net from 'net';
+const LOOPBACK_HOSTNAMES = new Set([
+    'localhost',
+    'localhost.localdomain',
+    'ip6-localhost',
+    'ip6-loopback',
+]);
+const normalizeHostname = (hostname) => {
+    return hostname.trim().toLowerCase().replace(/\.$/, '').replace(/^\[|\]$/g, '');
+};
+const isPrivateIpv4 = (ipAddress) => {
+    var _a, _b;
+    const octets = ipAddress
+        .split('.')
+        .map((octet) => Number.parseInt(octet, 10));
+    if (octets.length !== 4 || octets.some((octet) => Number.isNaN(octet))) {
+        return false;
+    }
+    const first = (_a = octets[0]) !== null && _a !== void 0 ? _a : -1;
+    const second = (_b = octets[1]) !== null && _b !== void 0 ? _b : -1;
+    return (first === 0 ||
+        first === 10 ||
+        first === 127 ||
+        (first === 169 && second === 254) ||
+        (first === 172 && second >= 16 && second <= 31) ||
+        (first === 192 && second === 168));
+};
+const isPrivateIpv6 = (ipAddress) => {
+    const normalized = ipAddress.toLowerCase();
+    if (normalized === '::1') {
+        return true;
+    }
+    if (normalized.startsWith('::ffff:')) {
+        return isPrivateIpv4(normalized.substring('::ffff:'.length));
+    }
+    return (normalized.startsWith('fc') ||
+        normalized.startsWith('fd') ||
+        normalized.startsWith('fe80:'));
+};
+export const isLocalOrPrivateHostname = (hostname) => {
+    const normalized = normalizeHostname(hostname);
+    if (!normalized) {
+        return true;
+    }
+    if (LOOPBACK_HOSTNAMES.has(normalized) ||
+        normalized.endsWith('.localhost')) {
+        return true;
+    }
+    const ipVersion = net.isIP(normalized);
+    if (ipVersion === 4) {
+        return isPrivateIpv4(normalized);
+    }
+    if (ipVersion === 6) {
+        return isPrivateIpv6(normalized);
+    }
+    return false;
+};
+export const assertPublicHttpsUrl = (rawUrl, contextLabel) => {
+    let parsedUrl;
+    try {
+        parsedUrl = new URL(rawUrl);
+    }
+    catch (_err) {
+        throw new Error(`Invalid ${contextLabel}`);
+    }
+    if (parsedUrl.protocol !== 'https:') {
+        throw new Error(`${contextLabel} must use https`);
+    }
+    if (parsedUrl.username || parsedUrl.password) {
+        throw new Error(`${contextLabel} must not include URL credentials`);
+    }
+    if (isLocalOrPrivateHostname(parsedUrl.hostname)) {
+        throw new Error(`${contextLabel} must not target localhost or private network ranges`);
+    }
+    return parsedUrl.toString();
+};
+const getUrlOrigin = (rawUrl) => {
+    if (!rawUrl) {
+        return undefined;
+    }
+    try {
+        return new URL(rawUrl).origin;
+    }
+    catch (_err) {
+        return undefined;
+    }
+};
+export const formatErrorForLog = (err) => {
+    var _a, _b, _c, _d;
+    if (axios.isAxiosError(err)) {
+        return {
+            name: err.name,
+            message: err.message,
+            code: err.code,
+            method: (_b = (_a = err.config) === null || _a === void 0 ? void 0 : _a.method) === null || _b === void 0 ? void 0 : _b.toUpperCase(),
+            origin: getUrlOrigin((_c = err.config) === null || _c === void 0 ? void 0 : _c.url),
+            status: (_d = err.response) === null || _d === void 0 ? void 0 : _d.status,
+        };
+    }
+    if (err instanceof Error) {
+        return {
+            name: err.name,
+            message: err.message,
+        };
+    }
+    return {
+        message: String(err),
+    };
+};
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@centurion_project/smart-order-router",
-  "version": "4.31.15",
-  "description": "Uniswap Smart Order Router",
+  "version": "4.31.17",
+  "description": "CenturionDEX Smart Order Router derived from the Uniswap Smart Order Router",
   "main": "build/main/index.js",
   "typings": "build/main/index.d.ts",
   "module": "build/module/index.js",
   "repository": {
     "type": "git",
-    "url": "https://github.com/Uniswap/smart-order-router.git"
+    "url": "https://github.com/CenturionDEX/centurion-dex-smart-order-router.git"
   },
   "license": "GPL",
   "keywords": [],
@@ -35,12 +35,12 @@
   "dependencies": {
     "@eth-optimism/sdk": "^3.2.2",
     "@types/brotli": "^1.3.4",
-    "@centurion_project/permit2-sdk": "1.4.0",
-    "@centurion_project/router-sdk": "2.9.0",
-    "@centurion_project/sdk-core": "7.13.0",
-    "@centurion_project/universal-router-sdk": "5.1.0",
-    "@centurion_project/v2-sdk": "4.20.2",
-    "@centurion_project/v3-sdk": "3.30.2",
+    "@centurion_project/permit2-sdk": "1.4.5",
+    "@centurion_project/router-sdk": "2.11.3",
+    "@centurion_project/sdk-core": "7.18.4",
+    "@centurion_project/universal-router-sdk": "5.9.3",
+    "@centurion_project/v2-sdk": "4.21.4",
+    "@centurion_project/v3-sdk": "3.31.4",
     "@centurion_project/v4-sdk": "2.0.0",
     "@uniswap/default-token-list": "^11.13.0",
     "@uniswap/swap-router-contracts": "^1.3.1",
@@ -77,6 +77,7 @@
     "@types/node": "^15.0.2",
     "@types/sinon": "^10.0.2",
     "@types/stats-lite": "^2.2.0",
+    "@uniswap/sdk-core": "npm:@centurion_project/sdk-core@7.18.4",
     "@typescript-eslint/eslint-plugin": "^4.0.1",
     "@typescript-eslint/parser": "^4.0.1",
     "@uniswap/v2-core": "^1.0.1",
@@ -111,13 +112,13 @@
     "jsbi": "^3.2.0"
   },
   "overrides": {
-    "@uniswap/sdk-core": "npm:@centurion_project/sdk-core@7.13.0",
-    "@uniswap/v2-sdk": "npm:@centurion_project/v2-sdk@4.20.2",
-    "@uniswap/v3-sdk": "npm:@centurion_project/v3-sdk@3.30.2",
+    "@uniswap/sdk-core": "npm:@centurion_project/sdk-core@7.18.4",
+    "@uniswap/v2-sdk": "npm:@centurion_project/v2-sdk@4.21.4",
+    "@uniswap/v3-sdk": "npm:@centurion_project/v3-sdk@3.31.4",
     "@uniswap/v4-sdk": "npm:@centurion_project/v4-sdk@2.0.0",
-    "@uniswap/router-sdk": "npm:@centurion_project/router-sdk@2.9.0",
-    "@uniswap/universal-router-sdk": "npm:@centurion_project/universal-router-sdk@5.1.0",
-    "@uniswap/permit2-sdk": "npm:@centurion_project/permit2-sdk@1.4.0"
+    "@uniswap/router-sdk": "npm:@centurion_project/router-sdk@2.11.3",
+    "@uniswap/universal-router-sdk": "npm:@centurion_project/universal-router-sdk@5.9.3",
+    "@uniswap/permit2-sdk": "npm:@centurion_project/permit2-sdk@1.4.5"
   },
   "files": [
     "build/main",