@cubist-labs/cubesigner-sdk 0.4.244 → 0.4.246

package/src/schema.ts

@@ -1664,6 +1664,19 @@ export interface paths {
      */
     get: operations["userOrgs"];
   };
+  "/v1/org/{org_id}/binance/sign/{material_id}": {
+    /**
+     * Sign Binance RPC Request
+     * @description Sign Binance RPC Request
+     *
+     * Signs a typed [`BinanceRpc`] request with the [`KeyType::Ed25519BinanceApi`]
+     * key identified by `material_id`. The signer URL-encodes the inner request,
+     * appends Binance's `recvWindow` and `timestamp` parameters, signs the
+     * resulting query, and returns the full query string ready to be submitted
+     * to Binance.
+     */
+    post: operations["binanceSign"];
+  };
   "/v1/org/{org_id}/blob/sign/{key_id}": {
     /**
      * Sign Raw Blob
@@ -1798,7 +1811,7 @@ export interface components {
        */
       omitZeroBalances?: boolean | null;
     };
-    /** @description Response for [`BinanceManager::account_info`]. */
+    /** @description Response returned by `cs_binanceAccountInfo`. */
     AccountInfoResponse: {
       /** @description Account type, e.g. `"SPOT"`. Left as `String` for forward compatibility. */
       accountType: string;
@@ -3149,6 +3162,7 @@ export interface components {
       | "BabylonRegistration"
       | "BabylonStaking"
       | "BabylonCovSign"
+      | "BinanceSign"
       | "BlobSign"
       | "BtcMessageSign"
       | "BtcSign"
@@ -3194,15 +3208,8 @@ export interface components {
       | "RpcCreateTransaction"
       | "RpcGetTransaction"
       | "RpcListTransactions"
-      | "RpcBinanceSubToMaster"
-      | "RpcBinanceSubToSub"
-      | "RpcBinanceUniversalTransfer"
-      | "RpcBinanceSubAccountAssets"
-      | "RpcBinanceAccountInfo"
-      | "RpcBinanceSubAccountTransferHistory"
-      | "RpcBinanceUniversalTransferHistory"
-      | "RpcBinanceWithdraw"
-      | "RpcBinanceWithdrawHistory"
+      | "RpcRetryTransaction"
+      | "RpcBinance"
       | "CustomChainRpcCall"
       | "EsploraApiCall"
       | "SentryApiCall"
@@ -3217,11 +3224,12 @@ export interface components {
       dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
       keyId: components["schemas"]["Id"];
       /**
+       * Format: float
        * @description Optional "receive window", i.e., for how long the request stays valid.
        * May only be specified in milliseconds, with up to three decimal places of precision.
-       * If omitted, defaults to "10000". Must not be greater than "60000".
+       * If omitted, defaults to 10000. Must not be greater than 60000.
        */
-      recvWindow?: string | null;
+      recvWindow?: number | null;
     };
     BinanceApiPropertiesPatch: {
       /** @description The Binance-issued API key string. Encrypted server-side before storage. */
@@ -3233,6 +3241,18 @@ export interface components {
       /** @description Arbitrary label. Useful for storing the corresponding API key label on the Binance side. */
       label?: string | null;
     };
+    /** @description Parameters envelope for all Binance RPC methods. */
+    BinanceDepositParams: components["schemas"]["DepositRequest"] & {
+      dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
+      keyId: components["schemas"]["Id"];
+      /**
+       * Format: float
+       * @description Optional "receive window", i.e., for how long the request stays valid.
+       * May only be specified in milliseconds, with up to three decimal places of precision.
+       * If omitted, defaults to 10000. Must not be greater than 60000.
+       */
+      recvWindow?: number | null;
+    };
     BinanceDryRunArgs: {
       /** @description The Binance API method that would have been used */
       method: string;
@@ -3240,7 +3260,7 @@ export interface components {
       url: string;
     };
     /**
-     * @description Different "dry run" modes for executing Binance requests
+     * @description Different "dry run" modes for executing Binance requests.
      * @enum {string}
      */
     BinanceDryRunMode: "NO_SIGN" | "NO_SUBMIT";
@@ -3293,94 +3313,118 @@ export interface components {
           /** @enum {string} */
           method: "cs_binanceWithdrawHistory";
           params: components["schemas"]["BinanceWithdrawHistoryParams"];
+        }
+      | {
+          /** @enum {string} */
+          method: "cs_binanceDeposit";
+          params: components["schemas"]["BinanceDepositParams"];
         };
+    /** @description Response returned by the typed `binance_sign` endpoint. */
+    BinanceSignResponse: {
+      /** @description Optional policy evaluation tree. */
+      policy_eval_tree?: unknown;
+    } & {
+      /**
+       * @description The full signed query string, ready to be submitted to Binance.
+       * Encoded as `<urlencoded params>&recvWindow=<ms>&timestamp=<ms>&signature=<urlencoded base64 sig>`.
+       */
+      signed_query: string;
+    };
     /** @description Parameters envelope for all Binance RPC methods. */
     BinanceSubAccountAssetsParams: components["schemas"]["SubAccountAssetsRequest"] & {
       dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
       keyId: components["schemas"]["Id"];
       /**
+       * Format: float
        * @description Optional "receive window", i.e., for how long the request stays valid.
        * May only be specified in milliseconds, with up to three decimal places of precision.
-       * If omitted, defaults to "10000". Must not be greater than "60000".
+       * If omitted, defaults to 10000. Must not be greater than 60000.
        */
-      recvWindow?: string | null;
+      recvWindow?: number | null;
     };
     /** @description Parameters envelope for all Binance RPC methods. */
     BinanceSubAccountTransferHistoryParams: components["schemas"]["SubAccountTransferHistoryRequest"] & {
       dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
       keyId: components["schemas"]["Id"];
       /**
+       * Format: float
        * @description Optional "receive window", i.e., for how long the request stays valid.
        * May only be specified in milliseconds, with up to three decimal places of precision.
-       * If omitted, defaults to "10000". Must not be greater than "60000".
+       * If omitted, defaults to 10000. Must not be greater than 60000.
        */
-      recvWindow?: string | null;
+      recvWindow?: number | null;
     };
     /** @description Parameters envelope for all Binance RPC methods. */
     BinanceSubToMasterParams: components["schemas"]["SubToMasterRequest"] & {
       dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
       keyId: components["schemas"]["Id"];
       /**
+       * Format: float
        * @description Optional "receive window", i.e., for how long the request stays valid.
        * May only be specified in milliseconds, with up to three decimal places of precision.
-       * If omitted, defaults to "10000". Must not be greater than "60000".
+       * If omitted, defaults to 10000. Must not be greater than 60000.
        */
-      recvWindow?: string | null;
+      recvWindow?: number | null;
     };
     /** @description Parameters envelope for all Binance RPC methods. */
     BinanceSubToSubParams: components["schemas"]["SubToSubRequest"] & {
       dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
       keyId: components["schemas"]["Id"];
       /**
+       * Format: float
        * @description Optional "receive window", i.e., for how long the request stays valid.
        * May only be specified in milliseconds, with up to three decimal places of precision.
-       * If omitted, defaults to "10000". Must not be greater than "60000".
+       * If omitted, defaults to 10000. Must not be greater than 60000.
        */
-      recvWindow?: string | null;
+      recvWindow?: number | null;
     };
     /** @description Parameters envelope for all Binance RPC methods. */
     BinanceUniversalTransferHistoryParams: components["schemas"]["UniversalTransferHistoryRequest"] & {
       dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
       keyId: components["schemas"]["Id"];
       /**
+       * Format: float
        * @description Optional "receive window", i.e., for how long the request stays valid.
        * May only be specified in milliseconds, with up to three decimal places of precision.
-       * If omitted, defaults to "10000". Must not be greater than "60000".
+       * If omitted, defaults to 10000. Must not be greater than 60000.
        */
-      recvWindow?: string | null;
+      recvWindow?: number | null;
     };
     /** @description Parameters envelope for all Binance RPC methods. */
     BinanceUniversalTransferParams: components["schemas"]["UniversalTransferRequest"] & {
       dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
       keyId: components["schemas"]["Id"];
       /**
+       * Format: float
        * @description Optional "receive window", i.e., for how long the request stays valid.
        * May only be specified in milliseconds, with up to three decimal places of precision.
-       * If omitted, defaults to "10000". Must not be greater than "60000".
+       * If omitted, defaults to 10000. Must not be greater than 60000.
        */
-      recvWindow?: string | null;
+      recvWindow?: number | null;
     };
     /** @description Parameters envelope for all Binance RPC methods. */
     BinanceWithdrawHistoryParams: components["schemas"]["WithdrawHistoryRequest"] & {
       dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
       keyId: components["schemas"]["Id"];
       /**
+       * Format: float
        * @description Optional "receive window", i.e., for how long the request stays valid.
        * May only be specified in milliseconds, with up to three decimal places of precision.
-       * If omitted, defaults to "10000". Must not be greater than "60000".
+       * If omitted, defaults to 10000. Must not be greater than 60000.
        */
-      recvWindow?: string | null;
+      recvWindow?: number | null;
     };
     /** @description Parameters envelope for all Binance RPC methods. */
     BinanceWithdrawParams: components["schemas"]["WithdrawRequest"] & {
       dryRun?: components["schemas"]["BinanceDryRunMode"] | null;
       keyId: components["schemas"]["Id"];
       /**
+       * Format: float
        * @description Optional "receive window", i.e., for how long the request stays valid.
        * May only be specified in milliseconds, with up to three decimal places of precision.
-       * If omitted, defaults to "10000". Must not be greater than "60000".
+       * If omitted, defaults to 10000. Must not be greater than 60000.
        */
-      recvWindow?: string | null;
+      recvWindow?: number | null;
     };
     /** @description A bitcoin address and its network. */
     BitcoinAddressInfo: {
@@ -4157,6 +4201,11 @@ export interface components {
           method: "cs_createTransaction";
           params: components["schemas"]["CreateTransactionRequest"];
         },
+        {
+          /** @enum {string} */
+          method: "cs_retryTransaction";
+          params: components["schemas"]["RetryTransactionRequest"];
+        },
         {
           /** @enum {string} */
           method: "cs_getTransaction";
@@ -4201,6 +4250,40 @@ export interface components {
       /** @description Custom EVM chains. */
       evm: components["schemas"]["EvmCustomChain"][];
     };
+    /**
+     * @description Parameters for `GET /sapi/v1/capital/deposit/address`.
+     *
+     * Fetches the deposit address for `coin` on the account that the signing key
+     * authenticates as. Optionally narrows the address to a specific `network`.
+     */
+    DepositRequest: {
+      /**
+       * @description Required only when `network` is `"LIGHTNING"`: the deposit amount that
+       * the returned invoice should encode, as a decimal string.
+       */
+      amount?: string | null;
+      /** @description The asset symbol whose deposit address to fetch (e.g. `"USDT"`, `"BTC"`). */
+      coin: string;
+      /**
+       * @description Network identifier (e.g. `"BSC"`, `"ETH"`). If omitted, Binance returns
+       * the address on the asset's default network.
+       */
+      network?: string | null;
+    };
+    /** @description Response returned by `cs_binanceDeposit`. */
+    DepositResponse: {
+      /** @description Deposit address. */
+      address: string;
+      /** @description Asset symbol (echoes [`DepositRequest::coin`]). */
+      coin: string;
+      /**
+       * @description Secondary address identifier required by some assets (e.g. memo for
+       * XRP, tag for XLM). Empty string when the asset does not use one.
+       */
+      tag: string;
+      /** @description Blockchain explorer URL for `address`. */
+      url: string;
+    };
     /**
      * @description Information produced by a successful deposit
      * @example {
@@ -4935,6 +5018,11 @@ export interface components {
         };
     /** @description EVM-specific transaction details. */
     EvmTransactionDetails: {
+      /**
+       * Format: int64
+       * @description The EVM chain id for the chain the transaction is submitted to.
+       */
+      chain_id: number;
       /**
        * @description The transaction hash, as submitted to the chain.
        *
@@ -4998,8 +5086,7 @@ export interface components {
       /**
        * @description Optional nonce.
        *
-       * If not specified, the sender's transaction count from the latest block is
-       * used.
+       * If not specified, the next available nonce is used.
        */
       nonce?: string | null;
     };
@@ -5035,6 +5122,17 @@ export interface components {
     ExplicitScope:
       | "sign:*"
       | "sign:ava"
+      | "sign:binance:*"
+      | "sign:binance:subToMaster"
+      | "sign:binance:subToSub"
+      | "sign:binance:universalTransfer"
+      | "sign:binance:subAccountAssets"
+      | "sign:binance:accountInfo"
+      | "sign:binance:subAccountTransferHistory"
+      | "sign:binance:universalTransferHistory"
+      | "sign:binance:withdraw"
+      | "sign:binance:withdrawHistory"
+      | "sign:binance:deposit"
       | "sign:blob"
       | "sign:diffieHellman"
       | "sign:btc:*"
@@ -5264,18 +5362,10 @@ export interface components {
       | "rpc:*"
       | "rpc:createTransaction:*"
       | "rpc:createTransaction:evm"
+      | "rpc:retryTransaction"
       | "rpc:getTransaction"
       | "rpc:listTransactions"
-      | "rpc:binance:*"
-      | "rpc:binance:subToMaster"
-      | "rpc:binance:subToSub"
-      | "rpc:binance:universalTransfer"
-      | "rpc:binance:subAccountAssets"
-      | "rpc:binance:accountInfo"
-      | "rpc:binance:subAccountTransferHistory"
-      | "rpc:binance:universalTransferHistory"
-      | "rpc:binance:withdraw"
-      | "rpc:binance:withdrawHistory";
+      | "rpc:binance";
     /**
      * @description This type specifies the interpretation of the `fee` field in Babylon
      * staking requests. If `sats`, the field is intpreted as a fixed value
@@ -5969,7 +6059,8 @@ export interface components {
       | components["schemas"]["SubAccountTransferHistoryResponse"]
       | components["schemas"]["UniversalTransferHistoryResponse"]
       | components["schemas"]["WithdrawResponse"]
-      | components["schemas"]["WithdrawHistoryResponse"];
+      | components["schemas"]["WithdrawHistoryResponse"]
+      | components["schemas"]["DepositResponse"];
     JwkSetResponse: {
       /** @description The keys included in this set */
       keys: Record<string, never>[];
@@ -6583,6 +6674,7 @@ export interface components {
       | "BabylonCovSign"
       | "BabylonRegistration"
       | "BabylonStaking"
+      | "BinanceSign"
       | "BlobSign"
       | "BtcMessageSign"
       | "BtcSign"
@@ -8300,6 +8392,11 @@ export interface components {
     RestrictedActionsMap: {
       [key: string]: components["schemas"]["MemberRole"][];
     };
+    /** @description Parameters for the [`cs_retryTransaction`](RpcMethod::RetryTransaction) method. */
+    RetryTransactionRequest: components["schemas"]["EvmTxCustomization"] & {
+      /** @description The transaction id. */
+      id: string;
+    };
     /**
      * @description List of role actions that can be restricted to a set of member roles
      * @enum {string}
@@ -8789,7 +8886,7 @@ export interface components {
       /** @description Email address of the sub-account whose balances to fetch. */
       email: string;
     };
-    /** @description Response for [`BinanceManager::sub_account_assets`]. */
+    /** @description Response returned by `cs_binanceSubAccountAssets`. */
     SubAccountAssetsResponse: {
       /**
        * @description One entry per asset held in the sub-account's spot wallet. Binance
@@ -8877,13 +8974,13 @@ export interface components {
       type?: number | null;
     };
     /**
-     * @description Response for [`BinanceManager::sub_account_transfer_history`].
+     * @description Response returned by `cs_binanceSubAccountTransferHistory`.
      *
      * Binance returns a top-level JSON array; this newtype preserves that wire
      * format while giving the response a named type in the OpenAPI schema.
      */
     SubAccountTransferHistoryResponse: components["schemas"]["SubAccountTransferHistoryEntry"][];
-    /** @description Response for [`BinanceManager::sub_to_master`] and [`BinanceManager::sub_to_sub`]. */
+    /** @description Response returned by `cs_binanceSubToMaster` and `cs_binanceSubToSub`. */
     SubAccountTransferResponse: {
       /** Format: int64 */
       txnId: number;
@@ -9393,7 +9490,7 @@ export interface components {
       /** @description Filter to transfers destined for this sub-account email. */
       toEmail?: string | null;
     };
-    /** @description Response for [`BinanceManager::universal_transfer_history`]. */
+    /** @description Response returned by `cs_binanceUniversalTransferHistory`. */
     UniversalTransferHistoryResponse: {
       /** @description Transfers in the current page. */
       result: components["schemas"]["UniversalTransferHistoryEntry"][];
@@ -9430,7 +9527,7 @@ export interface components {
       /** @description Destination sub-account email. If `None`, the destination is the master account. */
       toEmail?: string | null;
     };
-    /** @description Response for [`BinanceManager::universal_transfer`]. */
+    /** @description Response returned by `cs_binanceUniversalTransfer`. */
     UniversalTransferResponse: {
       clientTranId?: string | null;
       /** Format: int64 */
@@ -10327,7 +10424,7 @@ export interface components {
       withdrawOrderId?: string | null;
     };
     /**
-     * @description Response for [`BinanceManager::withdraw_history`].
+     * @description Response returned by `cs_binanceWithdrawHistory`.
      *
      * Binance returns a top-level JSON array; this newtype preserves that wire
      * format while giving the response a named type in the OpenAPI schema.
@@ -10378,7 +10475,7 @@ export interface components {
        */
       withdrawOrderId?: string | null;
     };
-    /** @description Response for [`BinanceManager::withdraw`]. */
+    /** @description Response returned by `cs_binanceWithdraw`. */
     WithdrawResponse: {
       /**
        * @description Binance-assigned withdrawal id. Used to look the request up later via
@@ -10511,6 +10608,21 @@ export interface components {
         };
       };
     };
+    /** @description Response returned by the typed `binance_sign` endpoint. */
+    BinanceSignResponse: {
+      content: {
+        "application/json": {
+          /** @description Optional policy evaluation tree. */
+          policy_eval_tree?: unknown;
+        } & {
+          /**
+           * @description The full signed query string, ready to be submitted to Binance.
+           * Encoded as `<urlencoded params>&recvWindow=<ms>&timestamp=<ms>&signature=<urlencoded base64 sig>`.
+           */
+          signed_query: string;
+        };
+      };
+    };
     /** @description BTC message signing response */
     BtcMessageSignResponse: {
       content: {
@@ -17865,6 +17977,47 @@ export interface operations {
       };
     };
   };
+  /**
+   * Sign Binance RPC Request
+   * @description Sign Binance RPC Request
+   *
+   * Signs a typed [`BinanceRpc`] request with the [`KeyType::Ed25519BinanceApi`]
+   * key identified by `material_id`. The signer URL-encodes the inner request,
+   * appends Binance's `recvWindow` and `timestamp` parameters, signs the
+   * resulting query, and returns the full query string ready to be submitted
+   * to Binance.
+   */
+  binanceSign: {
+    parameters: {
+      path: {
+        /**
+         * @description Name or ID of the desired Org
+         * @example Org#124dfe3e-3bbd-487d-80c0-53c55e8ab87a
+         */
+        org_id: string;
+        /** @description Material id of the Ed25519BinanceApi key */
+        material_id: string;
+      };
+    };
+    requestBody: {
+      content: {
+        "application/json": components["schemas"]["BinanceRpc"];
+      };
+    };
+    responses: {
+      200: components["responses"]["BinanceSignResponse"];
+      202: {
+        content: {
+          "application/json": components["schemas"]["AcceptedResponse"];
+        };
+      };
+      default: {
+        content: {
+          "application/json": components["schemas"]["ErrorResponse"];
+        };
+      };
+    };
+  };
   /**
    * Sign Raw Blob
    * @description Sign Raw Blob

package/src/schema_types.ts

@@ -46,6 +46,7 @@ const AllOperationKinds: Record<OperationKind, true> = {
   BabylonCovSign: true,
   BabylonRegistration: true,
   BabylonStaking: true,
+  BinanceSign: true,
   BlobSign: true,
   BtcMessageSign: true,
   BtcSign: true,

package/src/scopes.ts

@@ -30,6 +30,17 @@ export const AllScopes: Record<ExplicitScope, string> =
   "sign:btc:message:*"                          : "Allows access to the BTC message signing endpoint for any key type",
   "sign:btc:message:segwit"                     : "Allows access to the BTC message signing endpoint for segwit keys",
   "sign:btc:message:legacy"                     : "Allows access to the BTC message signing endpoint for legacy keys",
+  "sign:binance:*"                              : "Allows access to the Binance sign endpoint, without restrictions",
+  "sign:binance:accountInfo"                    : "Allows access to the Binance sign endpoint, restricted to the 'AccountInfo' operation",
+  "sign:binance:deposit"                        : "Allows access to the Binance sign endpoint, restricted to the 'Deposit' method",
+  "sign:binance:subAccountAssets"               : "Allows access to the Binance sign endpoint, restricted to the 'SubAccountAssets' operation",
+  "sign:binance:subAccountTransferHistory"      : "Allows access to the Binance sign endpoint, restricted to the 'SubAccountTransferHistory' operation",
+  "sign:binance:subToMaster"                    : "Allows access to the Binance sign endpoint, restricted to the 'SubToMaster' operation",
+  "sign:binance:subToSub"                       : "Allows access to the Binance sign endpoint, restricted to the 'SubToSub' operation",
+  "sign:binance:universalTransfer"              : "Allows access to the Binance sign endpoint, restricted to the 'UniversalTransfer' operation",
+  "sign:binance:universalTransferHistory"       : "Allows access to the Binance sign endpoint, restricted to the 'UniversalTransferHistory' operation",
+  "sign:binance:withdraw"                       : "Allows access to the Binance sign endpoint, restricted to the 'Withdraw' operation",
+  "sign:binance:withdrawHistory"                : "Allows access to the Binance sign endpoint, restricted to the 'WithdrawHistory' operation",
   "sign:babylon:*"                              : "Allows access to all Babylon endpoints",
   "sign:babylon:eots:*"                         : "Allows access to all Babylon EOTS endpoints",
   "sign:babylon:eots:nonces"                    : "Allows access to the EOTS nonce generation endpoint",
@@ -247,16 +258,8 @@ export const AllScopes: Record<ExplicitScope, string> =
   "rpc:createTransaction:evm"                   : "Allows access to the RPC API endpoint, but only for the 'cs_createTransaction' function with an EVM transaction request.",
   "rpc:getTransaction"                          : "Allows access to the RPC API endpoint, but only for the 'cs_getTransaction' function.",
   "rpc:listTransactions"                        : "Allows access to the RPC API endpoint, but only for the 'cs_listTransactions' function.",
-  "rpc:binance:*"                               : "Allows access to the RPC API endpoint, but only for the Binance methods",
-  "rpc:binance:subToMaster"                     : "Allows access to the RPC API endpoint, but only for the 'cs_binanceSubToMaster' function.",
-  "rpc:binance:subToSub"                        : "Allows access to the RPC API endpoint, but only for the 'cs_binanceSubToSub' function.",
-  "rpc:binance:universalTransfer"               : "Allows access to the RPC API endpoint, but only for the 'cs_binanceUniversalTransfer' function.",
-  "rpc:binance:subAccountAssets"                : "Allows access to the RPC API endpoint, but only for the 'cs_binanceSubAccountAssets' function.",
-  "rpc:binance:accountInfo"                     : "Allows access to the RPC API endpoint, but only for the 'cs_binanceAccountInfo' function.",
-  "rpc:binance:subAccountTransferHistory"       : "Allows access to the RPC API endpoint, but only for the 'cs_binanceSubAccountTransferHistory' function.",
-  "rpc:binance:universalTransferHistory"        : "Allows access to the RPC API endpoint, but only for the 'cs_binanceUniversalTransferHistory' function.",
-  "rpc:binance:withdraw"                        : "Allows access to the RPC API endpoint, but only for the 'cs_binanceWithdraw' function.",
-  "rpc:binance:withdrawHistory"                 : "Allows access to the RPC API endpoint, but only for the 'cs_binanceWithdrawHistory' function.",
+  "rpc:retryTransaction"                        : "Allows access to the RPC API endpoint, but only for the 'cs_retryTransaction' function",
+  "rpc:binance"                                 : "Allows access to the RPC API endpoint, but only for the 'cs_binance*' functions",
 };
 
 // Const for scope category labels

package/src/user_export.ts

@@ -27,7 +27,7 @@ export async function userExportKeygen(): Promise<CryptoKeyPair> {
 }
 
 /**
- * Get the ArrayBuffer slice represented by a Buffer
+ * Get the ArrayBuffer slice represented by a Uint8Array
  *
  * @param b The buffer to convert
  * @returns The resulting ArrayBuffer
@@ -52,7 +52,7 @@ export async function userExportDecrypt(
 
   // decrypt the export ciphertext using the HPKE one-shot API
   const tenc = new TextEncoder();
-  const tdec = new TextDecoder();
+  const tdec = new TextDecoder("utf-8");
   const info = toArrayBuffer(tenc.encode(`cubist-signer::UserExportOwner::${response.user_id}`));
   const public_key = toArrayBuffer(decodeBase64(response.ephemeral_public_key));
   const ctxt = toArrayBuffer(decodeBase64(response.encrypted_key_material));

package/src/util.ts

@@ -27,6 +27,9 @@ export function pathJoin(dir: string, file: string): string {
   return `${dir}${sep}${file}`;
 }
 
+// eslint-disable-next-line no-restricted-globals -- intentionally checking for Buffer before using it
+const nodeBuffer = typeof Buffer === "function" ? Buffer : undefined;
+
 /**
  * Browser-friendly helper for decoding a 'base64'-encoded string into a byte array.
  *
@@ -34,8 +37,8 @@ export function pathJoin(dir: string, file: string): string {
  * @returns Decoded byte array
  */
 export function decodeBase64(b64: string): Uint8Array {
-  return typeof Buffer === "function"
-    ? Buffer.from(b64, "base64")
+  return nodeBuffer
+    ? nodeBuffer.from(b64, "base64")
     : Uint8Array.from(atob(b64), (c) => c.charCodeAt(0));
 }
 
@@ -60,10 +63,9 @@ export function decodeBase64Url(b64url: string): Uint8Array {
  */
 export function encodeToBase64(buffer: Iterable<number> | ArrayBuffer): string {
   const bytes = buffer instanceof ArrayBuffer ? new Uint8Array(buffer) : new Uint8Array(buffer);
-  const b64 =
-    typeof Buffer === "function"
-      ? Buffer.from(bytes).toString("base64")
-      : btoa(bytes.reduce((s, b) => s + String.fromCharCode(b), ""));
+  const b64 = nodeBuffer
+    ? nodeBuffer.from(bytes).toString("base64")
+    : btoa(bytes.reduce((s, b) => s + String.fromCharCode(b), ""));
   return b64;
 }
 
@@ -97,6 +99,30 @@ export function delay(ms: number): Promise<void> {
  * @returns Hex string prefixed with "0x"
  */
 export function encodeToHex(message: string | Uint8Array): string {
-  const buff = typeof message === "string" ? Buffer.from(message, "utf8") : Buffer.from(message);
-  return "0x" + buff.toString("hex");
+  const bytes = typeof message === "string" ? new TextEncoder().encode(message) : message;
+  return "0x" + Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+
+/**
+ * Decodes a hex string into a byte array.
+ *
+ * @param hex The hex string to decode, with or without a "0x" prefix
+ * @returns Decoded byte array
+ */
+export function decodeFromHex(hex: string): Uint8Array {
+  const clean = hex.startsWith("0x") ? hex.slice(2) : hex;
+
+  if (clean.length % 2 !== 0) {
+    throw new Error(`Invalid hexadecimal string length, must be even: ${clean.length}`);
+  }
+
+  if (!/^[0-9a-fA-F]*$/.test(clean)) {
+    throw new Error(`Invalid hexadecimal character in: '${clean}'`);
+  }
+
+  const bytes = new Uint8Array(clean.length / 2);
+  for (let i = 0; i < bytes.length; i++) {
+    bytes[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);
+  }
+  return bytes;
 }