@layr-labs/ecloud-sdk 0.5.0 → 1.0.0-dev.2

package/dist/index.cjs

@@ -4986,7 +4986,7 @@ var CanViewAppLogsPermission = "0x2fd3f2fe";
 var CanViewSensitiveAppInfoPermission = "0x0e67b22f";
 var CanUpdateAppProfilePermission = "0x036fef61";
 function getDefaultClientId() {
-  const version = true ? "0.5.0" : "0.0.0";
+  const version = true ? "1.0.0-dev.2" : "0.0.0";
   return `ecloud-sdk/v${version}`;
 }
 var UserApiClient = class {
@@ -5804,6 +5804,12 @@ var CHAIN_ID_TO_ENVIRONMENT = {
   [SEPOLIA_CHAIN_ID.toString()]: "sepolia",
   [MAINNET_CHAIN_ID.toString()]: "mainnet-alpha"
 };
+function getApiUrlOverride() {
+  const raw = process.env.ECLOUD_API_URL;
+  if (!raw) return void 0;
+  const trimmed = raw.trim().replace(/\/+$/, "");
+  return trimmed.length > 0 ? trimmed : void 0;
+}
 function getEnvironmentConfig(environment, chainID) {
   const env = ENVIRONMENTS[environment];
   if (!env) {
@@ -5821,9 +5827,11 @@ function getEnvironmentConfig(environment, chainID) {
     }
   }
   const resolvedChainID = chainID || (environment === "sepolia" || environment === "sepolia-dev" ? SEPOLIA_CHAIN_ID : MAINNET_CHAIN_ID);
+  const apiUrlOverride = getApiUrlOverride();
   return {
     ...env,
-    chainID: BigInt(resolvedChainID)
+    chainID: BigInt(resolvedChainID),
+    ...apiUrlOverride ? { userApiServerURL: apiUrlOverride } : {}
   };
 }
 function getBillingEnvironmentConfig(build) {
@@ -5831,10 +5839,14 @@ function getBillingEnvironmentConfig(build) {
   if (!config) {
     throw new Error(`Unknown billing environment: ${build}`);
   }
+  const apiUrlOverride = getApiUrlOverride();
+  if (apiUrlOverride) {
+    return { billingApiServerURL: apiUrlOverride };
+  }
   return config;
 }
 function getBuildType() {
-  const buildTimeType = true ? "prod"?.toLowerCase() : void 0;
+  const buildTimeType = true ? "dev"?.toLowerCase() : void 0;
   const runtimeType = process.env.BUILD_TYPE?.toLowerCase();
   const buildType = buildTimeType || runtimeType;
   if (buildType === "dev") {
@@ -9318,7 +9330,10 @@ var AttestClient = class {
   constructor(config) {
     this.config = config;
   }
-  async attest() {
+  async attest(extraData) {
+    if (extraData && extraData.length > 1048576) {
+      throw new Error(`extraData exceeds 1MB limit (${extraData.length} bytes)`);
+    }
     const { publicKey, privateKey } = (0, import_node_crypto.generateKeyPairSync)("rsa", {
       modulusLength: 4096,
       publicKeyEncoding: { type: "spki", format: "pem" },
@@ -9326,8 +9341,8 @@ var AttestClient = class {
     });
     const challengeHash = (0, import_node_crypto.createHash)("sha256").update(CHALLENGE_PREFIX).update(NULL_BYTE).update(publicKey).digest();
     const socketPath = this.config.socketPath ?? DEFAULT_SOCKET_PATH;
-    const attestationBytes = await this.getAttestation(socketPath, challengeHash);
-    const attestResponse = await this.postAttest(attestationBytes, publicKey);
+    const attestationBytes = await this.getAttestation(socketPath, challengeHash, extraData);
+    const attestResponse = await this.postAttest(attestationBytes, publicKey, extraData);
     this.verifySignature(JSON.stringify(attestResponse.data), attestResponse.signature);
     const rsaPrivateKey = await crypto.subtle.importKey(
       "pkcs8",
@@ -9359,9 +9374,13 @@ var AttestClient = class {
       throw new Error("KMS response signature verification failed");
     }
   }
-  getAttestation(socketPath, challenge) {
+  getAttestation(socketPath, challenge, extraData) {
     return new Promise((resolve2, reject) => {
-      const body = JSON.stringify({ challenge: challenge.toString("base64") });
+      const requestBody = { challenge: challenge.toString("base64") };
+      if (extraData && extraData.length > 0) {
+        requestBody.extra_data = extraData.toString("base64");
+      }
+      const body = JSON.stringify(requestBody);
       const req = import_node_http.default.request(
         {
           socketPath,
@@ -9389,14 +9408,18 @@ var AttestClient = class {
       req.end();
     });
   }
-  async postAttest(attestationBytes, rsaPublicKey) {
+  async postAttest(attestationBytes, rsaPublicKey, extraData) {
     const url = `${this.config.kmsServerURL}/auth/attest`;
-    const body = JSON.stringify({
+    const requestBody = {
       version: 3,
       attestation: attestationBytes.toString("base64"),
       rsaKey: rsaPublicKey,
       audience: this.config.audience
-    });
+    };
+    if (extraData && extraData.length > 0) {
+      requestBody.extra_data = extraData.toString("base64");
+    }
+    const body = JSON.stringify(requestBody);
     const response = await fetch(url, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
@@ -9418,10 +9441,21 @@ function pemToBuffer(pem) {
 // src/client/modules/attest/jwt-provider.ts
 var JwtProvider = class {
   constructor(attestClient, bufferSeconds = 30) {
+    this.pendingExtraData = /* @__PURE__ */ new Map();
     this.attestClient = attestClient;
     this.bufferSeconds = bufferSeconds;
   }
-  async getToken() {
+  async getToken(extraData) {
+    if (extraData && extraData.length > 0) {
+      const key = extraData.toString("hex");
+      const existing = this.pendingExtraData.get(key);
+      if (existing) return existing;
+      const promise = this.attestClient.attest(extraData).finally(() => {
+        this.pendingExtraData.delete(key);
+      });
+      this.pendingExtraData.set(key, promise);
+      return promise;
+    }
     if (this.cachedToken && !this.isExpiringSoon()) {
       return this.cachedToken;
     }