@entros/pulse-sdk 1.4.0 → 1.4.2

package/dist/index.d.mts

@@ -102,9 +102,9 @@ interface SubmissionResult {
 }
 /**
  * Validator-signed receipt binding (wallet, commitment, validated_at) for the
- * upcoming `mint_anchor` transaction (master-list #146 Phase 4). Returned in
- * the `/validate-features` response when the request includes
- * `commitment_new_hex` and the validator has a signing key configured.
+ * upcoming `mint_anchor` transaction. Returned in the `/validate-features`
+ * response when the request includes `commitment_new_hex` and the validator
+ * has a signing key configured.
  *
  * Wire fields are byte-identical to `entros_validation::SignedReceiptDto` and
  * the executor's local mirror at `executor-node::validation::SignedReceiptDto`.
@@ -492,12 +492,12 @@ declare function submitViaWallet(proof: SolanaProof, commitment: Uint8Array, opt
     relayerUrl?: string;
     relayerApiKey?: string;
     /**
-     * Validator-signed mint receipt (master-list #146 Phase 4). Consumed
-     * only on the first-verification path: when present, the SDK prepends
-     * an `Ed25519Program::verify` instruction so on-chain `mint_anchor`
-     * can confirm the commitment was endorsed by the configured validator.
-     * Re-verification ignores the field entirely — `update_anchor` enforces
-     * binding via the VerificationResult PDA instead.
+     * Validator-signed mint receipt. Consumed only on the first-verification
+     * path: when present, the SDK prepends an `Ed25519Program::verify`
+     * instruction so on-chain `mint_anchor` can confirm the commitment was
+     * endorsed by the configured validator. Re-verification ignores the
+     * field entirely — `update_anchor` enforces binding via the
+     * VerificationResult PDA instead.
      */
     signedReceipt?: SignedReceiptDto;
 }): Promise<SubmissionResult>;

package/dist/index.d.ts

@@ -102,9 +102,9 @@ interface SubmissionResult {
 }
 /**
  * Validator-signed receipt binding (wallet, commitment, validated_at) for the
- * upcoming `mint_anchor` transaction (master-list #146 Phase 4). Returned in
- * the `/validate-features` response when the request includes
- * `commitment_new_hex` and the validator has a signing key configured.
+ * upcoming `mint_anchor` transaction. Returned in the `/validate-features`
+ * response when the request includes `commitment_new_hex` and the validator
+ * has a signing key configured.
  *
  * Wire fields are byte-identical to `entros_validation::SignedReceiptDto` and
  * the executor's local mirror at `executor-node::validation::SignedReceiptDto`.
@@ -492,12 +492,12 @@ declare function submitViaWallet(proof: SolanaProof, commitment: Uint8Array, opt
     relayerUrl?: string;
     relayerApiKey?: string;
     /**
-     * Validator-signed mint receipt (master-list #146 Phase 4). Consumed
-     * only on the first-verification path: when present, the SDK prepends
-     * an `Ed25519Program::verify` instruction so on-chain `mint_anchor`
-     * can confirm the commitment was endorsed by the configured validator.
-     * Re-verification ignores the field entirely — `update_anchor` enforces
-     * binding via the VerificationResult PDA instead.
+     * Validator-signed mint receipt. Consumed only on the first-verification
+     * path: when present, the SDK prepends an `Ed25519Program::verify`
+     * instruction so on-chain `mint_anchor` can confirm the commitment was
+     * endorsed by the configured validator. Re-verification ignores the
+     * field entirely — `update_anchor` enforces binding via the
+     * VerificationResult PDA instead.
      */
     signedReceipt?: SignedReceiptDto;
 }): Promise<SubmissionResult>;

package/dist/index.js

@@ -1378,7 +1378,7 @@ function bytesToHex(bytes) {
 function hexToBytes(hex, expectedLen) {
   const trimmed = hex.startsWith("0x") || hex.startsWith("0X") ? hex.slice(2) : hex;
   if (trimmed.length !== expectedLen * 2) return null;
-  if (!/^[0-9a-fA-F]+$/.test(trimmed)) return null;
+  if (!/^[0-9a-f]+$/.test(trimmed)) return null;
   const out = new Uint8Array(expectedLen);
   for (let i = 0; i < expectedLen; i += 1) {
     out[i] = parseInt(trimmed.substr(i * 2, 2), 16);
@@ -1405,6 +1405,26 @@ async function buildEd25519ReceiptIx(receipt) {
 
 // src/submit/wallet.ts
 async function requestSasAttestation(wallet, walletAddress, relayerUrl, relayerApiKey, serverNonce) {
+  if (!serverNonce) {
+    sdkLog("[Entros SDK] Skipping SAS attestation: no server-issued nonce");
+    return void 0;
+  }
+  if (!wallet?.signMessage) {
+    sdkLog("[Entros SDK] Skipping SAS attestation: wallet does not support signMessage");
+    return void 0;
+  }
+  let signature;
+  let message;
+  try {
+    const timestamp = Math.floor(Date.now() / 1e3);
+    message = `Entros-ATTEST:${walletAddress}:${timestamp}`;
+    const messageBytes = new TextEncoder().encode(message);
+    const sigBytes = await wallet.signMessage(messageBytes);
+    signature = Array.from(sigBytes).map((b) => b.toString(16).padStart(2, "0")).join("");
+  } catch {
+    sdkWarn("[Entros SDK] Wallet signMessage failed, skipping SAS attestation");
+    return void 0;
+  }
   try {
     const attestHeaders = {
       "Content-Type": "application/json"
@@ -1416,21 +1436,12 @@ async function requestSasAttestation(wallet, walletAddress, relayerUrl, relayerA
     const timer = setTimeout(() => controller.abort(), 15e3);
     const baseUrl = new URL(relayerUrl);
     const attestUrl = `${baseUrl.origin}/attest`;
-    const attestBody = { wallet_address: walletAddress };
-    if (serverNonce) attestBody.nonce = serverNonce;
-    if (wallet?.signMessage) {
-      try {
-        const timestamp = Math.floor(Date.now() / 1e3);
-        const attestMessage = `Entros-ATTEST:${walletAddress}:${timestamp}`;
-        const messageBytes = new TextEncoder().encode(attestMessage);
-        const sigBytes = await wallet.signMessage(messageBytes);
-        const sigHex = Array.from(sigBytes).map((b) => b.toString(16).padStart(2, "0")).join("");
-        attestBody.signature = sigHex;
-        attestBody.message = attestMessage;
-      } catch {
-        sdkWarn("Wallet signMessage failed, skipping ownership proof");
-      }
-    }
+    const attestBody = {
+      wallet_address: walletAddress,
+      nonce: serverNonce,
+      signature,
+      message
+    };
     const attestRes = await fetch(attestUrl, {
       method: "POST",
       headers: attestHeaders,
@@ -1646,21 +1657,22 @@ async function submitViaWallet(proof, commitment, options) {
       let ed25519Ix = null;
       if (options.signedReceipt) {
         ed25519Ix = await buildEd25519ReceiptIx(options.signedReceipt);
-        if (ed25519Ix) {
-          sdkLog(
-            "[Entros SDK] Bundling validator-signed mint receipt before mint_anchor"
-          );
-        } else {
-          sdkWarn(
-            "[Entros SDK] signedReceipt provided but failed to decode; minting without binding"
-          );
+        if (!ed25519Ix) {
+          return {
+            success: false,
+            error: "Validator returned a signed receipt that failed to decode (malformed hex or wrong byte length). Refusing to mint without a valid binding. The validator service may be misconfigured \u2014 check the validation-service logs."
+          };
         }
+        sdkLog(
+          "[Entros SDK] Bundling validator-signed mint receipt before mint_anchor"
+        );
       } else {
         sdkLog(
-          "[Entros SDK] No validator receipt available; minting without binding (Phase 3 log-only)"
+          "[Entros SDK] No validator receipt available; minting without binding (on-chain check is log-only today)"
         );
       }
       const tx = new Transaction();
+      tx.add(ComputeBudgetProgram.setComputeUnitLimit({ units: 2e5 }));
       if (ed25519Ix) tx.add(ed25519Ix);
       tx.add(mintAnchorIx);
       tx.feePayer = provider.wallet.publicKey;
@@ -2125,7 +2137,11 @@ async function extractFingerprintAndValidate(sensorData, config, walletAddress,
         if (successBody.signed_receipt) {
           signedReceipt = successBody.signed_receipt;
         }
-      } catch {
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        sdkWarn(
+          `[Entros SDK] /validate-features returned 200 but body was not parseable JSON; proceeding without receipt: ${msg}`
+        );
       }
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);