@lerna-labs/hydra-sdk 1.0.0-beta.25 → 1.0.0-beta.26

package/dist/index.d.ts

@@ -11,5 +11,5 @@ export { getAdmin } from './mesh/get-admin.js';
 export { createMultisigAddress, createNativeScript } from './mesh/native-script.js';
 export { submitTx } from './tx3/submit-tx.js';
 export { chunkString } from './utils/chunk-string.js';
-export { bufferToAscii, bufferToHex, verifySignature } from './utils/verify-signature.js';
+export { BECH32_DECODE_LIMIT, bufferToAscii, bufferToHex, decodeBech32Address, verifySignature, } from './utils/verify-signature.js';
 export { CommitArgs, UTxORef, Wrangler } from './wrangler.js';

package/dist/index.js

@@ -7,5 +7,5 @@ export { getAdmin } from './mesh/get-admin.js';
 export { createMultisigAddress, createNativeScript } from './mesh/native-script.js';
 export { submitTx } from './tx3/submit-tx.js';
 export { chunkString } from './utils/chunk-string.js';
-export { bufferToAscii, bufferToHex, verifySignature } from './utils/verify-signature.js';
+export { BECH32_DECODE_LIMIT, bufferToAscii, bufferToHex, decodeBech32Address, verifySignature, } from './utils/verify-signature.js';
 export { Wrangler } from './wrangler.js';

package/dist/utils/verify-signature.d.ts

@@ -1,7 +1,22 @@
+import { Buffer } from 'node:buffer';
 /** Convert a buffer-like value to a hex string. */
 export declare const bufferToHex: (buffer: Uint8Array | string) => string;
 /** Convert a buffer-like value to an ASCII string. */
 export declare const bufferToAscii: (buffer: Uint8Array | string) => string;
+/**
+ * Character limit used for bech32 decoding. The library defaults to 90, which truncates
+ * Cardano base addresses (payment + staking) that are commonly 103+ characters. We raise
+ * the ceiling well above any realistic Cardano encoding (addr, stake, drep, pool, cc_*).
+ */
+export declare const BECH32_DECODE_LIMIT = 1023;
+/**
+ * Decode a Cardano bech32 string (addr, stake, pool, drep, cc_*) with a character
+ * limit high enough to accommodate base addresses that include a staking component.
+ */
+export declare function decodeBech32Address(address: string): {
+    prefix: string;
+    addressBytes: Buffer;
+};
 /**
  * Verify a CIP-30 COSE_Sign1 signature against an expected message and address.
  *

package/dist/utils/verify-signature.js

@@ -8,6 +8,20 @@ import { chunkString } from './chunk-string.js';
 export const bufferToHex = (buffer) => Buffer.from(buffer).toString('hex');
 /** Convert a buffer-like value to an ASCII string. */
 export const bufferToAscii = (buffer) => Buffer.from(buffer).toString('ascii');
+/**
+ * Character limit used for bech32 decoding. The library defaults to 90, which truncates
+ * Cardano base addresses (payment + staking) that are commonly 103+ characters. We raise
+ * the ceiling well above any realistic Cardano encoding (addr, stake, drep, pool, cc_*).
+ */
+export const BECH32_DECODE_LIMIT = 1023;
+/**
+ * Decode a Cardano bech32 string (addr, stake, pool, drep, cc_*) with a character
+ * limit high enough to accommodate base addresses that include a staking component.
+ */
+export function decodeBech32Address(address) {
+    const { words, prefix } = bech32.decode(address, BECH32_DECODE_LIMIT);
+    return { prefix, addressBytes: Buffer.from(bech32.fromWords(words)) };
+}
 /**
  * Verify a CIP-30 COSE_Sign1 signature against an expected message and address.
  *
@@ -23,8 +37,7 @@ export function verifySignature(signature, message, signingAddress, signatureKey
         const signatureBytes = coseSign1.signature();
         const [, , , payload1] = cbor.decode(bufferToHex(coseSign1.signed_data().to_bytes()));
         const signaturePayloadAscii = bufferToAscii(payload1);
-        const { words, prefix } = bech32.decode(signingAddress);
-        const addressBytes = Buffer.from(bech32.fromWords(words));
+        const { prefix, addressBytes } = decodeBech32Address(signingAddress);
         const coseSigKey = cbor.decode(signatureKey);
         const cosePublicKey = coseSigKey.get(-2);
         const sigKey = CSL.PublicKey.from_bytes(cosePublicKey);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lerna-labs/hydra-sdk",
-  "version": "1.0.0-beta.25",
+  "version": "1.0.0-beta.26",
   "description": "TypeScript SDK for managing Cardano Hydra Heads — lifecycle, UTxO queries, wallet management, transaction submission, and signature verification",
   "keywords": [
     "cardano",