@lerna-labs/hydra-sdk 1.0.0-beta.25 → 1.0.0-beta.27

package/dist/index.d.ts

@@ -11,5 +11,5 @@ export { getAdmin } from './mesh/get-admin.js';
 export { createMultisigAddress, createNativeScript } from './mesh/native-script.js';
 export { submitTx } from './tx3/submit-tx.js';
 export { chunkString } from './utils/chunk-string.js';
-export { bufferToAscii, bufferToHex, verifySignature } from './utils/verify-signature.js';
+export { BECH32_DECODE_LIMIT, bufferToAscii, bufferToHex, decodeBech32Address, verifySignature, } from './utils/verify-signature.js';
 export { CommitArgs, UTxORef, Wrangler } from './wrangler.js';

package/dist/index.js

@@ -7,5 +7,5 @@ export { getAdmin } from './mesh/get-admin.js';
 export { createMultisigAddress, createNativeScript } from './mesh/native-script.js';
 export { submitTx } from './tx3/submit-tx.js';
 export { chunkString } from './utils/chunk-string.js';
-export { bufferToAscii, bufferToHex, verifySignature } from './utils/verify-signature.js';
+export { BECH32_DECODE_LIMIT, bufferToAscii, bufferToHex, decodeBech32Address, verifySignature, } from './utils/verify-signature.js';
 export { Wrangler } from './wrangler.js';

package/dist/ipfs/ipfs.js

@@ -35,15 +35,28 @@ export function createIpfsClient(config) {
      * @returns The CID of the wrapping IPFS directory.
      */
     async function pinDirectory(dirPath) {
-        const entries = await fs.readdir(dirPath);
         const form = new FormData();
-        for (const entry of entries) {
-            const filePath = path.join(dirPath, entry);
-            const stat = await fs.stat(filePath);
-            if (!stat.isFile())
-                continue;
-            const content = await fs.readFile(filePath, 'utf-8');
-            form.append('file', new Blob([content]), entry);
+        const collectFiles = async (rel) => {
+            const out = [];
+            const dirents = await fs.readdir(path.join(dirPath, rel), { withFileTypes: true });
+            for (const dirent of dirents) {
+                const childRel = path.join(rel, dirent.name);
+                if (dirent.isDirectory()) {
+                    out.push(...(await collectFiles(childRel)));
+                }
+                else if (dirent.isFile()) {
+                    out.push(childRel);
+                }
+            }
+            return out;
+        };
+        for (const relPath of await collectFiles('')) {
+            const buf = await fs.readFile(path.join(dirPath, relPath));
+            const content = new Uint8Array(buf).slice().buffer;
+            // Kubo reconstructs the directory tree from entry names — always
+            // use POSIX separators so Windows callers get the same CID.
+            const entryName = relPath.split(path.sep).join('/');
+            form.append('file', new Blob([content]), entryName);
         }
         const res = await fetch(`${apiUrl}/api/v0/add?pin=true&wrap-with-directory=true&recursive=true`, {
             method: 'POST',

package/dist/utils/verify-signature.d.ts

@@ -1,7 +1,22 @@
+import { Buffer } from 'node:buffer';
 /** Convert a buffer-like value to a hex string. */
 export declare const bufferToHex: (buffer: Uint8Array | string) => string;
 /** Convert a buffer-like value to an ASCII string. */
 export declare const bufferToAscii: (buffer: Uint8Array | string) => string;
+/**
+ * Character limit used for bech32 decoding. The library defaults to 90, which truncates
+ * Cardano base addresses (payment + staking) that are commonly 103+ characters. We raise
+ * the ceiling well above any realistic Cardano encoding (addr, stake, drep, pool, cc_*).
+ */
+export declare const BECH32_DECODE_LIMIT = 1023;
+/**
+ * Decode a Cardano bech32 string (addr, stake, pool, drep, cc_*) with a character
+ * limit high enough to accommodate base addresses that include a staking component.
+ */
+export declare function decodeBech32Address(address: string): {
+    prefix: string;
+    addressBytes: Buffer;
+};
 /**
  * Verify a CIP-30 COSE_Sign1 signature against an expected message and address.
  *

package/dist/utils/verify-signature.js

@@ -8,6 +8,20 @@ import { chunkString } from './chunk-string.js';
 export const bufferToHex = (buffer) => Buffer.from(buffer).toString('hex');
 /** Convert a buffer-like value to an ASCII string. */
 export const bufferToAscii = (buffer) => Buffer.from(buffer).toString('ascii');
+/**
+ * Character limit used for bech32 decoding. The library defaults to 90, which truncates
+ * Cardano base addresses (payment + staking) that are commonly 103+ characters. We raise
+ * the ceiling well above any realistic Cardano encoding (addr, stake, drep, pool, cc_*).
+ */
+export const BECH32_DECODE_LIMIT = 1023;
+/**
+ * Decode a Cardano bech32 string (addr, stake, pool, drep, cc_*) with a character
+ * limit high enough to accommodate base addresses that include a staking component.
+ */
+export function decodeBech32Address(address) {
+    const { words, prefix } = bech32.decode(address, BECH32_DECODE_LIMIT);
+    return { prefix, addressBytes: Buffer.from(bech32.fromWords(words)) };
+}
 /**
  * Verify a CIP-30 COSE_Sign1 signature against an expected message and address.
  *
@@ -23,8 +37,7 @@ export function verifySignature(signature, message, signingAddress, signatureKey
         const signatureBytes = coseSign1.signature();
         const [, , , payload1] = cbor.decode(bufferToHex(coseSign1.signed_data().to_bytes()));
         const signaturePayloadAscii = bufferToAscii(payload1);
-        const { words, prefix } = bech32.decode(signingAddress);
-        const addressBytes = Buffer.from(bech32.fromWords(words));
+        const { prefix, addressBytes } = decodeBech32Address(signingAddress);
         const coseSigKey = cbor.decode(signatureKey);
         const cosePublicKey = coseSigKey.get(-2);
         const sigKey = CSL.PublicKey.from_bytes(cosePublicKey);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lerna-labs/hydra-sdk",
-  "version": "1.0.0-beta.25",
+  "version": "1.0.0-beta.27",
   "description": "TypeScript SDK for managing Cardano Hydra Heads — lifecycle, UTxO queries, wallet management, transaction submission, and signature verification",
   "keywords": [
     "cardano",