@chipi-stack/backend 14.13.0 → 14.13.1

package/dist/index.js

@@ -89,7 +89,7 @@ function hashCall(call) {
   return poseidonSpan([
     CALL_TYPE_HASH_REV1,
     toBigInt(call.contractAddress),
-    toBigInt(starknet.hash.getSelectorFromName(call.entrypoint)),
+    toBigInt(starknet.hash.getSelector(call.entrypoint)),
     calldataHash
   ]);
 }
@@ -572,7 +572,7 @@ function serializeExecuteFromOutsideV2Calldata(params) {
   out.push(BigInt(oe.calls.length));
   for (const call of oe.calls) {
     out.push(BigInt(call.contractAddress));
-    out.push(BigInt(starknet.hash.getSelectorFromName(call.entrypoint)));
+    out.push(BigInt(starknet.hash.getSelector(call.entrypoint)));
     const callData = Array.isArray(call.calldata) ? call.calldata : [];
     out.push(BigInt(callData.length));
     for (const datum of callData) {
@@ -1952,9 +1952,9 @@ var ChipiTransactions = class {
   /**
    * Get on-chain transaction status
    */
-  async getTransactionStatus(hash9, bearerToken) {
+  async getTransactionStatus(hash10, bearerToken) {
     return this.client.get({
-      endpoint: `${shared.API_ENDPOINTS.TRANSACTIONS}/${hash9}/status`,
+      endpoint: `${shared.API_ENDPOINTS.TRANSACTIONS}/${hash10}/status`,
       bearerToken
     });
   }
@@ -2124,6 +2124,42 @@ var ChipiSkus = class {
 
 // src/sessions.ts
 init_encryption2();
+var FIELD_PRIME = 2n ** 251n + 17n * 2n ** 192n + 1n;
+var HEX_FELT = /^0x[0-9a-fA-F]{1,64}$/;
+var DECIMAL_FELT = /^\d+$/;
+var CAIRO_IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_]*$/;
+function normalizeEntrypoints(entrypoints) {
+  return entrypoints.map((entry) => {
+    const value = String(entry).trim();
+    if (HEX_FELT.test(value) || DECIMAL_FELT.test(value)) {
+      const felt = BigInt(value);
+      if (felt >= FIELD_PRIME) {
+        throw new shared.ChipiSessionError(
+          `Session entrypoint ${value} is not a valid felt (>= field prime).`,
+          shared.SESSION_ERRORS.SESSION_ENTRYPOINT_NOT_ALLOWED
+        );
+      }
+      return starknet.num.toHex(felt);
+    }
+    if (CAIRO_IDENTIFIER.test(value)) {
+      return starknet.hash.getSelectorFromName(value);
+    }
+    throw new shared.ChipiSessionError(
+      `Session entrypoint "${value}" is neither a selector (0x\u2026) nor a function name.`,
+      shared.SESSION_ERRORS.SESSION_ENTRYPOINT_NOT_ALLOWED
+    );
+  });
+}
+function decodeSessionData(result, nowSeconds) {
+  const validUntil = Number(BigInt(result[0]));
+  const maxCalls = Number(BigInt(result[1]));
+  const callsUsed = Number(BigInt(result[2]));
+  const remainingCalls = Math.max(maxCalls - callsUsed, 0);
+  const isActive = validUntil !== 0 && nowSeconds <= validUntil && remainingCalls > 0;
+  return { isActive, validUntil, remainingCalls, allowedEntrypoints: [] };
+}
+
+// src/sessions.ts
 var ChipiSessions = class {
   constructor(client) {
     this.client = client;
@@ -2263,13 +2299,14 @@ var ChipiSessions = class {
         maxCalls: sessionConfig.maxCalls,
         allowedEntrypoints: sessionConfig.allowedEntrypoints.length
       });
+      const allowedEntrypoints = normalizeEntrypoints(sessionConfig.allowedEntrypoints);
       const calldata = [
         sessionConfig.sessionPublicKey,
         starknet.num.toHex(sessionConfig.validUntil),
         starknet.num.toHex(sessionConfig.maxCalls),
         // Array: first element is length, then elements
-        starknet.num.toHex(sessionConfig.allowedEntrypoints.length),
-        ...sessionConfig.allowedEntrypoints
+        starknet.num.toHex(allowedEntrypoints.length),
+        ...allowedEntrypoints
       ];
       const txHash = await executePaymasterTransaction({
         params: {
@@ -2419,11 +2456,10 @@ var ChipiSessions = class {
           allowedEntrypoints: []
         };
       }
-      const isActive = resultArray[0] === "0x1";
-      const validUntil = Number(BigInt(resultArray[1]));
-      const remainingCalls = Number(BigInt(resultArray[2]));
-      const entrypointsLen = Number(BigInt(resultArray[3]));
-      const allowedEntrypoints = resultArray.slice(4, 4 + entrypointsLen);
+      const { isActive, validUntil, remainingCalls, allowedEntrypoints } = decodeSessionData(
+        resultArray,
+        Math.floor(Date.now() / 1e3)
+      );
       const sessionData = {
         isActive,
         validUntil,
@@ -2434,7 +2470,8 @@ var ChipiSessions = class {
         isActive,
         validUntil: new Date(validUntil * 1e3).toISOString(),
         remainingCalls,
-        allowedEntrypointsCount: allowedEntrypoints.length
+        // The struct carries the whitelist length, not the selectors.
+        allowedEntrypointsLen: Number(BigInt(resultArray[3]))
       });
       return sessionData;
     } catch (error) {
@@ -3586,8 +3623,8 @@ var ChipiSDK = class {
   /**
    * Get on-chain transaction status (supports polling for confirmation)
    */
-  async getTransactionStatus(hash9, bearerToken) {
-    return this.transactions.getTransactionStatus(hash9, this.resolveBearerToken(bearerToken));
+  async getTransactionStatus(hash10, bearerToken) {
+    return this.transactions.getTransactionStatus(hash10, this.resolveBearerToken(bearerToken));
   }
   /**
    * Prepare a wallet upgrade (e.g., READY → CHIPI or CHIPI v29 → v33).