@koralabs/kora-labs-common 6.13.0 → 6.13.2

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@koralabs/kora-labs-common",
-    "version": "6.13.0",
+    "version": "6.13.2",
     "description": "Kora Labs Common Utilities",
     "main": "index.js",
     "types": "index.d.ts",
@@ -40,7 +40,7 @@
         "@aiken-lang/merkle-patricia-forestry": "^1.2.0",
         "@aws-sdk/client-dynamodb": "^3.549.0",
         "@aws-sdk/lib-dynamodb": "^3.549.0",
-        "@cardano-sdk/core": "^0.46.15",
+        "@cardano-sdk/core": "^0.47.0",
         "@cardano-sdk/crypto": "^0.4.7",
         "@emurgo/cardano-message-signing-nodejs": "^1.1.0",
         "@types/jest": "^30.0.0",
@@ -72,7 +72,7 @@
     },
     "peerDependencies": {
         "@aiken-lang/merkle-patricia-forestry": "^1.2.0",
-        "@cardano-sdk/core": "^0.46.12",
+        "@cardano-sdk/core": "^0.46.12 || ^0.47.0",
         "@cardano-sdk/crypto": "^0.4.5",
         "bip39": "^3.1.0",
         "@emurgo/cardano-message-signing-nodejs": "^1.1.0"

package/testing/readOnlyGuard.d.ts

@@ -12,7 +12,9 @@ export declare const READ_ONLY_GUARD_ERROR = "E2E_READONLY_GUARD";
 export interface SignRequest {
     method: (typeof FUND_MOVING_METHODS)[number];
     at: number;
-    /** The exact tx CBOR the app asked to sign (first tx for signTxs). Decode it to assert what would have been signed. */
+    /** Every exact tx CBOR presented (one for signTx/submitTx, all of a CIP-103 signTxs batch). */
+    txCbors: string[];
+    /** The first of `txCbors` — the common single-tx case. */
     txCbor: string;
 }
 export interface ReadOnlyWallet {

package/testing/readOnlyGuard.js

@@ -3,21 +3,24 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.makeReadOnlyWallet = exports.READ_ONLY_GUARD_ERROR = exports.FUND_MOVING_METHODS = void 0;
 exports.FUND_MOVING_METHODS = ['signTx', 'signTxs', 'submitTx'];
 exports.READ_ONLY_GUARD_ERROR = 'E2E_READONLY_GUARD';
-const firstTxCbor = (params) => {
-    var _a, _b;
+const presentedTxCbors = (params) => {
     if (typeof params === 'string')
-        return params;
-    if (Array.isArray(params)) {
-        const first = params[0];
-        return typeof first === 'string' ? first : ((_b = (_a = first === null || first === void 0 ? void 0 : first.cbor) !== null && _a !== void 0 ? _a : first === null || first === void 0 ? void 0 : first.tx) !== null && _b !== void 0 ? _b : '');
-    }
-    return '';
+        return [params];
+    if (!Array.isArray(params))
+        return [];
+    return params.flatMap((entry) => {
+        var _a;
+        const cbor = typeof entry === 'string' ? entry : ((_a = entry === null || entry === void 0 ? void 0 : entry.cbor) !== null && _a !== void 0 ? _a : entry === null || entry === void 0 ? void 0 : entry.tx);
+        return typeof cbor === 'string' ? [cbor] : [];
+    });
 };
 const makeReadOnlyWallet = (inner) => {
     const signRequests = [];
     const guardedCall = async (method, params) => {
+        var _a;
         if (exports.FUND_MOVING_METHODS.includes(method)) {
-            signRequests.push({ method: method, at: Date.now(), txCbor: firstTxCbor(params) });
+            const txCbors = presentedTxCbors(params);
+            signRequests.push({ method: method, at: Date.now(), txCbors, txCbor: (_a = txCbors[0]) !== null && _a !== void 0 ? _a : '' });
             throw new Error(`${exports.READ_ONLY_GUARD_ERROR}: '${method}' is blocked — this suite reaches the transaction and stops; it never signs or submits.`);
         }
         return inner.call(method, params);