@levrbet/shared 0.5.71 → 0.5.73

package/dist/core/config/urls.d.ts

@@ -16,6 +16,10 @@ type EnvUrls = {
     lambda: string;
     liquidationEngine: string;
     leaderboard: string;
+    /** client-v1 app base origin (e.g. revalidate target). PROD also serves on levr.bet. */
+    client: string;
+    /** Public base URL of the promo S3 bucket (deterministic name per stage). */
+    promoBucket: string;
     indexers: IndexersMap;
 };
 export declare const allUrls: Record<LevrEnv, EnvUrls>;

package/dist/core/config/urls.js

@@ -15,6 +15,8 @@ exports.allUrls = {
         lambda: "https://lambda.dev.levr.bet",
         liquidationEngine: "https://liquidation-engine.dev.levr.bet",
         leaderboard: "https://leaderboard.dev.levr.bet",
+        client: "http://localhost:3000",
+        promoBucket: "https://client-dev-promo-bucket.s3.ap-south-1.amazonaws.com",
         indexers: {
             [types_1.LevrChain.MONAD_TESTNET]: [
                 { type: indexers_types_1.LevrIndexer.ENVIO, url: "https://indexer.dev.hyperindex.xyz/a07fcc5/v1/graphql" },
@@ -33,6 +35,8 @@ exports.allUrls = {
         lambda: "https://lambda.dev.levr.bet",
         liquidationEngine: "https://liquidation-engine.dev.levr.bet",
         leaderboard: "https://leaderboard.dev.levr.bet",
+        client: "https://app.dev.levr.bet",
+        promoBucket: "https://client-dev-promo-bucket.s3.ap-south-1.amazonaws.com",
         indexers: {
             [types_1.LevrChain.MONAD_TESTNET]: [
                 { type: indexers_types_1.LevrIndexer.ENVIO, url: "https://indexer.dev.hyperindex.xyz/79ae9a8/v1/graphql" },
@@ -51,6 +55,8 @@ exports.allUrls = {
         lambda: "https://lambda.staging.levr.bet",
         liquidationEngine: "https://liquidation-engine.staging.levr.bet",
         leaderboard: "https://leaderboard.staging.levr.bet",
+        client: "https://app.staging.levr.bet",
+        promoBucket: "https://client-staging-promo-bucket.s3.ap-south-1.amazonaws.com",
         indexers: {
             [types_1.LevrChain.MONAD_MAINNET]: [
                 { type: indexers_types_1.LevrIndexer.ENVIO, url: "https://indexer.hyperindex.xyz/afda1ae/v1/graphql" },
@@ -69,6 +75,8 @@ exports.allUrls = {
         lambda: "https://lambda.api.levr.bet",
         liquidationEngine: "https://liquidation-engine.api.levr.bet",
         leaderboard: "https://leaderboard.api.levr.bet",
+        client: "https://app.levr.bet",
+        promoBucket: "https://client-prod-promo-bucket.s3.ap-south-1.amazonaws.com",
         indexers: {
             [types_1.LevrChain.MONAD_MAINNET]: [
                 { type: indexers_types_1.LevrIndexer.ENVIO, url: "https://indexer.hyperindex.xyz/ee081a3/v1/graphql" },

package/dist/core/config/urls.js.map

@@ -1 +1 @@
-{"version":3,"file":"urls.js","sourceRoot":"","sources":["../../../src/core/config/urls.ts"],"names":[],"mappings":";;;AAAA,oCAA6C;AAC7C,4DAAqD;AAmBxC,QAAA,OAAO,GAA6B;IAC7C,CAAC,eAAO,CAAC,KAAK,CAAC,EAAE;QACb,IAAI,EAAE,+BAA+B;QACrC,SAAS,EAAE,gCAAgC;QAC3C,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,uCAAuC;QACxD,gBAAgB,EAAE,uCAAuC;QACzD,OAAO,EAAE,+BAA+B;QACxC,SAAS,EAAE,gCAAgC;QAC3C,MAAM,EAAE,6BAA6B;QACrC,iBAAiB,EAAE,yCAAyC;QAC5D,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE;YACN,CAAC,iBAAS,CAAC,aAAa,CAAC,EAAE;gBACvB,EAAE,IAAI,EAAE,4BAAW,CAAC,KAAK,EAAE,GAAG,EAAE,uDAAuD,EAAE;gBACzF,EAAE,IAAI,EAAE,4BAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,wDAAwD,EAAE;aAChG;SACJ;KACJ;IACD,CAAC,eAAO,CAAC,GAAG,CAAC,EAAE;QACX,IAAI,EAAE,+BAA+B;QACrC,SAAS,EAAE,gCAAgC;QAC3C,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,uCAAuC;QACxD,gBAAgB,EAAE,uCAAuC;QACzD,OAAO,EAAE,+CAA+C,EAAE,gCAAgC;QAC1F,SAAS,EAAE,gCAAgC;QAC3C,MAAM,EAAE,6BAA6B;QACrC,iBAAiB,EAAE,yCAAyC;QAC5D,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE;YACN,CAAC,iBAAS,CAAC,aAAa,CAAC,EAAE;gBACvB,EAAE,IAAI,EAAE,4BAAW,CAAC,KAAK,EAAE,GAAG,EAAE,uDAAuD,EAAE;gBACzF,EAAE,IAAI,EAAE,4BAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,+DAA+D,EAAE;aACvG;SACJ;KACJ;IACD,CAAC,eAAO,CAAC,OAAO,CAAC,EAAE;QACf,IAAI,EAAE,mCAAmC;QACzC,SAAS,EAAE,oCAAoC;QAC/C,UAAU,EAAE,sCAAsC;QAClD,eAAe,EAAE,2CAA2C;QAC5D,gBAAgB,EAAE,2CAA2C;QAC7D,OAAO,EAAE,mDAAmD,EAAE,sCAAsC;QACpG,SAAS,EAAE,oCAAoC;QAC/C,MAAM,EAAE,iCAAiC;QACzC,iBAAiB,EAAE,6CAA6C;QAChE,WAAW,EAAE,sCAAsC;QACnD,QAAQ,EAAE;YACN,CAAC,iBAAS,CAAC,aAAa,CAAC,EAAE;gBACvB,EAAE,IAAI,EAAE,4BAAW,CAAC,KAAK,EAAE,GAAG,EAAE,mDAAmD,EAAE;gBACrF,EAAE,IAAI,EAAE,4BAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,mEAAmE,EAAE;aAC3G;SACJ;KACJ;IACD,CAAC,eAAO,CAAC,IAAI,CAAC,EAAE;QACZ,IAAI,EAAE,2BAA2B;QACjC,SAAS,EAAE,gCAAgC;QAC3C,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,uCAAuC;QACxD,gBAAgB,EAAE,uCAAuC;QACzD,OAAO,EAAE,gDAAgD,EAAE,gCAAgC;QAC3F,SAAS,EAAE,gCAAgC;QAC3C,MAAM,EAAE,6BAA6B;QACrC,iBAAiB,EAAE,yCAAyC;QAC5D,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE;YACN,CAAC,iBAAS,CAAC,aAAa,CAAC,EAAE;gBACvB,EAAE,IAAI,EAAE,4BAAW,CAAC,KAAK,EAAE,GAAG,EAAE,mDAAmD,EAAE;gBACrF,EAAE,IAAI,EAAE,4BAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,gEAAgE,EAAE;aACxG;SACJ;KACJ;CACJ,CAAA"}
+{"version":3,"file":"urls.js","sourceRoot":"","sources":["../../../src/core/config/urls.ts"],"names":[],"mappings":";;;AAAA,oCAA6C;AAC7C,4DAAqD;AAuBxC,QAAA,OAAO,GAA6B;IAC7C,CAAC,eAAO,CAAC,KAAK,CAAC,EAAE;QACb,IAAI,EAAE,+BAA+B;QACrC,SAAS,EAAE,gCAAgC;QAC3C,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,uCAAuC;QACxD,gBAAgB,EAAE,uCAAuC;QACzD,OAAO,EAAE,+BAA+B;QACxC,SAAS,EAAE,gCAAgC;QAC3C,MAAM,EAAE,6BAA6B;QACrC,iBAAiB,EAAE,yCAAyC;QAC5D,WAAW,EAAE,kCAAkC;QAC/C,MAAM,EAAE,uBAAuB;QAC/B,WAAW,EAAE,6DAA6D;QAC1E,QAAQ,EAAE;YACN,CAAC,iBAAS,CAAC,aAAa,CAAC,EAAE;gBACvB,EAAE,IAAI,EAAE,4BAAW,CAAC,KAAK,EAAE,GAAG,EAAE,uDAAuD,EAAE;gBACzF,EAAE,IAAI,EAAE,4BAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,wDAAwD,EAAE;aAChG;SACJ;KACJ;IACD,CAAC,eAAO,CAAC,GAAG,CAAC,EAAE;QACX,IAAI,EAAE,+BAA+B;QACrC,SAAS,EAAE,gCAAgC;QAC3C,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,uCAAuC;QACxD,gBAAgB,EAAE,uCAAuC;QACzD,OAAO,EAAE,+CAA+C,EAAE,gCAAgC;QAC1F,SAAS,EAAE,gCAAgC;QAC3C,MAAM,EAAE,6BAA6B;QACrC,iBAAiB,EAAE,yCAAyC;QAC5D,WAAW,EAAE,kCAAkC;QAC/C,MAAM,EAAE,0BAA0B;QAClC,WAAW,EAAE,6DAA6D;QAC1E,QAAQ,EAAE;YACN,CAAC,iBAAS,CAAC,aAAa,CAAC,EAAE;gBACvB,EAAE,IAAI,EAAE,4BAAW,CAAC,KAAK,EAAE,GAAG,EAAE,uDAAuD,EAAE;gBACzF,EAAE,IAAI,EAAE,4BAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,+DAA+D,EAAE;aACvG;SACJ;KACJ;IACD,CAAC,eAAO,CAAC,OAAO,CAAC,EAAE;QACf,IAAI,EAAE,mCAAmC;QACzC,SAAS,EAAE,oCAAoC;QAC/C,UAAU,EAAE,sCAAsC;QAClD,eAAe,EAAE,2CAA2C;QAC5D,gBAAgB,EAAE,2CAA2C;QAC7D,OAAO,EAAE,mDAAmD,EAAE,sCAAsC;QACpG,SAAS,EAAE,oCAAoC;QAC/C,MAAM,EAAE,iCAAiC;QACzC,iBAAiB,EAAE,6CAA6C;QAChE,WAAW,EAAE,sCAAsC;QACnD,MAAM,EAAE,8BAA8B;QACtC,WAAW,EAAE,iEAAiE;QAC9E,QAAQ,EAAE;YACN,CAAC,iBAAS,CAAC,aAAa,CAAC,EAAE;gBACvB,EAAE,IAAI,EAAE,4BAAW,CAAC,KAAK,EAAE,GAAG,EAAE,mDAAmD,EAAE;gBACrF,EAAE,IAAI,EAAE,4BAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,mEAAmE,EAAE;aAC3G;SACJ;KACJ;IACD,CAAC,eAAO,CAAC,IAAI,CAAC,EAAE;QACZ,IAAI,EAAE,2BAA2B;QACjC,SAAS,EAAE,gCAAgC;QAC3C,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,uCAAuC;QACxD,gBAAgB,EAAE,uCAAuC;QACzD,OAAO,EAAE,gDAAgD,EAAE,gCAAgC;QAC3F,SAAS,EAAE,gCAAgC;QAC3C,MAAM,EAAE,6BAA6B;QACrC,iBAAiB,EAAE,yCAAyC;QAC5D,WAAW,EAAE,kCAAkC;QAC/C,MAAM,EAAE,sBAAsB;QAC9B,WAAW,EAAE,8DAA8D;QAC3E,QAAQ,EAAE;YACN,CAAC,iBAAS,CAAC,aAAa,CAAC,EAAE;gBACvB,EAAE,IAAI,EAAE,4BAAW,CAAC,KAAK,EAAE,GAAG,EAAE,mDAAmD,EAAE;gBACrF,EAAE,IAAI,EAAE,4BAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,gEAAgE,EAAE;aACxG;SACJ;KACJ;CACJ,CAAA"}

package/dist/core/constants/index.d.ts

@@ -0,0 +1 @@
+export * from "./promo.constants";

package/dist/core/constants/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./promo.constants"), exports);
+//# sourceMappingURL=index.js.map

package/dist/core/constants/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/constants/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAiC"}

package/dist/core/constants/promo.constants.d.ts

@@ -0,0 +1,18 @@
+/** Default banner render width in CSS pixels (1x) */
+export declare const PROMO_BANNER_W = 387;
+/** Banner height in CSS pixels */
+export declare const PROMO_BANNER_H = 153;
+/** Minimum recommended upload width (2× / retina) */
+export declare const PROMO_RETINA_W = 774;
+/** Minimum recommended upload height (2× / retina) */
+export declare const PROMO_RETINA_H = 306;
+/** Accent / CTA colour */
+export declare const PROMO_MINT = "#1FE08C";
+/** Lightbox backdrop colour */
+export declare const PROMO_BACKDROP = "rgba(0,0,0,0.7)";
+/** Lightbox modal max-width in CSS pixels */
+export declare const PROMO_LIGHTBOX_MAXW = 750;
+/** Default value for the `width` field when not specified */
+export declare const PROMO_DEFAULT_WIDTH = 387;
+/** Maximum accepted image binary size in bytes (5 MB — admin-gated upload, not user-facing) */
+export declare const PROMO_MAX_IMAGE_BYTES: number;

package/dist/core/constants/promo.constants.js

@@ -0,0 +1,25 @@
+"use strict";
+// Promo banner visual constants (decision #11 — shared between client-v1 components
+// and the dashboard-v1 native preview so the numbers can never diverge).
+// Plain values only — no React.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROMO_MAX_IMAGE_BYTES = exports.PROMO_DEFAULT_WIDTH = exports.PROMO_LIGHTBOX_MAXW = exports.PROMO_BACKDROP = exports.PROMO_MINT = exports.PROMO_RETINA_H = exports.PROMO_RETINA_W = exports.PROMO_BANNER_H = exports.PROMO_BANNER_W = void 0;
+/** Default banner render width in CSS pixels (1x) */
+exports.PROMO_BANNER_W = 387;
+/** Banner height in CSS pixels */
+exports.PROMO_BANNER_H = 153;
+/** Minimum recommended upload width (2× / retina) */
+exports.PROMO_RETINA_W = 774;
+/** Minimum recommended upload height (2× / retina) */
+exports.PROMO_RETINA_H = 306;
+/** Accent / CTA colour */
+exports.PROMO_MINT = "#1FE08C";
+/** Lightbox backdrop colour */
+exports.PROMO_BACKDROP = "rgba(0,0,0,0.7)";
+/** Lightbox modal max-width in CSS pixels */
+exports.PROMO_LIGHTBOX_MAXW = 750;
+/** Default value for the `width` field when not specified */
+exports.PROMO_DEFAULT_WIDTH = 387;
+/** Maximum accepted image binary size in bytes (5 MB — admin-gated upload, not user-facing) */
+exports.PROMO_MAX_IMAGE_BYTES = 5 * 1024 * 1024;
+//# sourceMappingURL=promo.constants.js.map

package/dist/core/constants/promo.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promo.constants.js","sourceRoot":"","sources":["../../../src/core/constants/promo.constants.ts"],"names":[],"mappings":";AAAA,oFAAoF;AACpF,yEAAyE;AACzE,gCAAgC;;;AAEhC,qDAAqD;AACxC,QAAA,cAAc,GAAG,GAAG,CAAA;AAEjC,kCAAkC;AACrB,QAAA,cAAc,GAAG,GAAG,CAAA;AAEjC,qDAAqD;AACxC,QAAA,cAAc,GAAG,GAAG,CAAA;AAEjC,sDAAsD;AACzC,QAAA,cAAc,GAAG,GAAG,CAAA;AAEjC,0BAA0B;AACb,QAAA,UAAU,GAAG,SAAS,CAAA;AAEnC,+BAA+B;AAClB,QAAA,cAAc,GAAG,iBAAiB,CAAA;AAE/C,6CAA6C;AAChC,QAAA,mBAAmB,GAAG,GAAG,CAAA;AAEtC,6DAA6D;AAChD,QAAA,mBAAmB,GAAG,GAAG,CAAA;AAEtC,+FAA+F;AAClF,QAAA,qBAAqB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA"}

package/dist/core/index.d.ts

@@ -1,5 +1,6 @@
 export * from "./alerts";
 export * from "./config";
+export * from "./constants";
 export * from "./contracts";
 export * from "./indexers";
 export * from "./prisma";

package/dist/core/index.js

@@ -16,6 +16,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./alerts"), exports);
 __exportStar(require("./config"), exports);
+__exportStar(require("./constants"), exports);
 __exportStar(require("./contracts"), exports);
 __exportStar(require("./indexers"), exports);
 __exportStar(require("./prisma"), exports);

package/dist/core/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAwB;AACxB,2CAAwB;AACxB,8CAA2B;AAC3B,6CAA0B;AAC1B,2CAAwB;AACxB,0CAAuB;AACvB,8CAA2B;AAC3B,0CAAuB;AACvB,0CAAuB;AACvB,+CAA4B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAwB;AACxB,2CAAwB;AACxB,8CAA2B;AAC3B,8CAA2B;AAC3B,6CAA0B;AAC1B,2CAAwB;AACxB,0CAAuB;AACvB,8CAA2B;AAC3B,0CAAuB;AACvB,0CAAuB;AACvB,+CAA4B"}

package/dist/core/validators/index.d.ts

@@ -1,2 +1,3 @@
 export * from "./bytes.validators";
 export * from "./mongo.validators";
+export * from "./promo.validators";

package/dist/core/validators/index.js

@@ -16,4 +16,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./bytes.validators"), exports);
 __exportStar(require("./mongo.validators"), exports);
+__exportStar(require("./promo.validators"), exports);
 //# sourceMappingURL=index.js.map

package/dist/core/validators/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/validators/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAkC;AAClC,qDAAkC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/validators/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAkC;AAClC,qDAAkC;AAClC,qDAAkC"}

package/dist/core/validators/promo.validators.d.ts

@@ -0,0 +1,188 @@
+import { z } from "zod";
+/**
+ * Returns true when `url` is an acceptable promo destination or terms URL.
+ *
+ * Decision #6 rules (open-redirect guard included):
+ *  - Internal path: single leading "/" NOT followed by "/" or "\" (blocks //evil.com, /\evil.com)
+ *  - https URL whose host suffix-matches ".levr.bet" or equals "levr.bet"
+ *  - https URL whose host suffix-matches ".amplifyapp.com"
+ *  - localhost / 127.0.0.1 on any port, http OR https
+ *  - Everything else (including javascript:, data:, other hosts) is rejected.
+ */
+export declare function isAllowedPromoUrl(url: string): boolean;
+export declare const promoTermsBlockSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"heading">;
+    text: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"paragraph">;
+    text: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"bullets">;
+    items: z.ZodArray<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"ordered">;
+    items: z.ZodArray<z.ZodString>;
+}, z.core.$strip>], "type">;
+export type PromoTermsBlock = z.infer<typeof promoTermsBlockSchema>;
+export declare const promoTermsSchema: z.ZodObject<{
+    eyebrow: z.ZodOptional<z.ZodString>;
+    title: z.ZodString;
+    subtitle: z.ZodOptional<z.ZodString>;
+    blocks: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"heading">;
+        text: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"paragraph">;
+        text: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"bullets">;
+        items: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"ordered">;
+        items: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>], "type">>;
+}, z.core.$strip>;
+export type PromoTerms = z.infer<typeof promoTermsSchema>;
+export declare const promoConfigSchema: z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    imageKey: z.ZodString;
+    imageUrl: z.ZodString;
+    destinationUrl: z.ZodString;
+    termsUrl: z.ZodOptional<z.ZodString>;
+    hasTerms: z.ZodBoolean;
+    altText: z.ZodString;
+    width: z.ZodOptional<z.ZodNumber>;
+    activeStart: z.ZodOptional<z.ZodString>;
+    activeEnd: z.ZodOptional<z.ZodString>;
+    published: z.ZodBoolean;
+    sortOrder: z.ZodNumber;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type PromoConfig = z.infer<typeof promoConfigSchema>;
+export declare const promoRecordSchema: z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    imageKey: z.ZodString;
+    imageUrl: z.ZodString;
+    destinationUrl: z.ZodString;
+    termsUrl: z.ZodOptional<z.ZodString>;
+    hasTerms: z.ZodBoolean;
+    altText: z.ZodString;
+    width: z.ZodOptional<z.ZodNumber>;
+    activeStart: z.ZodOptional<z.ZodString>;
+    activeEnd: z.ZodOptional<z.ZodString>;
+    published: z.ZodBoolean;
+    sortOrder: z.ZodNumber;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    terms: z.ZodOptional<z.ZodObject<{
+        eyebrow: z.ZodOptional<z.ZodString>;
+        title: z.ZodString;
+        subtitle: z.ZodOptional<z.ZodString>;
+        blocks: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"heading">;
+            text: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"paragraph">;
+            text: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"bullets">;
+            items: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"ordered">;
+            items: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>], "type">>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type PromoRecord = z.infer<typeof promoRecordSchema>;
+/** Private manifest.json — full records including terms */
+export declare const promoManifestSchema: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    imageKey: z.ZodString;
+    imageUrl: z.ZodString;
+    destinationUrl: z.ZodString;
+    termsUrl: z.ZodOptional<z.ZodString>;
+    hasTerms: z.ZodBoolean;
+    altText: z.ZodString;
+    width: z.ZodOptional<z.ZodNumber>;
+    activeStart: z.ZodOptional<z.ZodString>;
+    activeEnd: z.ZodOptional<z.ZodString>;
+    published: z.ZodBoolean;
+    sortOrder: z.ZodNumber;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    terms: z.ZodOptional<z.ZodObject<{
+        eyebrow: z.ZodOptional<z.ZodString>;
+        title: z.ZodString;
+        subtitle: z.ZodOptional<z.ZodString>;
+        blocks: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"heading">;
+            text: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"paragraph">;
+            text: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"bullets">;
+            items: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"ordered">;
+            items: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>], "type">>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
+/** Public public.json — published-only, banner fields only (no terms) */
+export declare const promoPublicListSchema: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    imageKey: z.ZodString;
+    imageUrl: z.ZodString;
+    destinationUrl: z.ZodString;
+    termsUrl: z.ZodOptional<z.ZodString>;
+    hasTerms: z.ZodBoolean;
+    altText: z.ZodString;
+    width: z.ZodOptional<z.ZodNumber>;
+    activeStart: z.ZodOptional<z.ZodString>;
+    activeEnd: z.ZodOptional<z.ZodString>;
+    published: z.ZodBoolean;
+    sortOrder: z.ZodNumber;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>>;
+export declare const promoUploadInputSchema: z.ZodObject<{
+    slug: z.ZodString;
+    destinationUrl: z.ZodString;
+    termsUrl: z.ZodOptional<z.ZodString>;
+    altText: z.ZodString;
+    width: z.ZodOptional<z.ZodNumber>;
+    activeStart: z.ZodOptional<z.ZodString>;
+    activeEnd: z.ZodOptional<z.ZodString>;
+    published: z.ZodDefault<z.ZodBoolean>;
+    sortOrder: z.ZodDefault<z.ZodNumber>;
+    imageBase64: z.ZodOptional<z.ZodString>;
+    imageContentType: z.ZodOptional<z.ZodEnum<{
+        "image/jpeg": "image/jpeg";
+        "image/png": "image/png";
+    }>>;
+    terms: z.ZodOptional<z.ZodObject<{
+        eyebrow: z.ZodOptional<z.ZodString>;
+        title: z.ZodString;
+        subtitle: z.ZodOptional<z.ZodString>;
+        blocks: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"heading">;
+            text: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"paragraph">;
+            text: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"bullets">;
+            items: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            type: z.ZodLiteral<"ordered">;
+            items: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>], "type">>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type PromoUploadInput = z.infer<typeof promoUploadInputSchema>;

package/dist/core/validators/promo.validators.js

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.promoUploadInputSchema = exports.promoPublicListSchema = exports.promoManifestSchema = exports.promoRecordSchema = exports.promoConfigSchema = exports.promoTermsSchema = exports.promoTermsBlockSchema = void 0;
+exports.isAllowedPromoUrl = isAllowedPromoUrl;
+const zod_1 = require("zod");
+const promo_constants_1 = require("../constants/promo.constants");
+// ============================================================================
+// Internal helpers
+// ============================================================================
+const slugSchema = zod_1.z
+    .string()
+    .min(3, "Slug must be at least 3 characters")
+    .max(60, "Slug must be at most 60 characters")
+    .regex(/^[a-z0-9-]+$/, "Slug must contain only lowercase letters, digits, and hyphens");
+const isoDateSchema = zod_1.z.string().datetime({ message: "Must be a valid ISO 8601 datetime string" });
+/**
+ * Returns true when `url` is an acceptable promo destination or terms URL.
+ *
+ * Decision #6 rules (open-redirect guard included):
+ *  - Internal path: single leading "/" NOT followed by "/" or "\" (blocks //evil.com, /\evil.com)
+ *  - https URL whose host suffix-matches ".levr.bet" or equals "levr.bet"
+ *  - https URL whose host suffix-matches ".amplifyapp.com"
+ *  - localhost / 127.0.0.1 on any port, http OR https
+ *  - Everything else (including javascript:, data:, other hosts) is rejected.
+ */
+function isAllowedPromoUrl(url) {
+    // Internal path: starts with "/" but NOT "//" or "/\"
+    if (url.startsWith("/")) {
+        if (url.startsWith("//") || url.startsWith("/\\")) {
+            return false;
+        }
+        return true;
+    }
+    // Must be http or https for everything below
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return false;
+    }
+    const { protocol, hostname } = parsed;
+    // localhost / 127.0.0.1 — http or https allowed (dev)
+    if (protocol === "http:" || protocol === "https:") {
+        if (hostname === "localhost" || hostname === "127.0.0.1") {
+            return true;
+        }
+    }
+    // Everything else must be https
+    if (protocol !== "https:") {
+        return false;
+    }
+    // levr.bet domain (exact match or any subdomain)
+    if (hostname === "levr.bet" || hostname.endsWith(".levr.bet")) {
+        return true;
+    }
+    // Amplify preview deploys
+    if (hostname.endsWith(".amplifyapp.com")) {
+        return true;
+    }
+    return false;
+}
+const allowedPromoUrlSchema = zod_1.z.string().refine(isAllowedPromoUrl, {
+    message: "URL must be an internal path (/...), an https *.levr.bet or levr.bet URL, an https *.amplifyapp.com URL, or localhost/127.0.0.1",
+});
+// ============================================================================
+// Terms shapes
+// ============================================================================
+exports.promoTermsBlockSchema = zod_1.z.discriminatedUnion("type", [
+    zod_1.z.object({ type: zod_1.z.literal("heading"), text: zod_1.z.string() }),
+    zod_1.z.object({ type: zod_1.z.literal("paragraph"), text: zod_1.z.string() }),
+    zod_1.z.object({ type: zod_1.z.literal("bullets"), items: zod_1.z.array(zod_1.z.string()) }),
+    zod_1.z.object({ type: zod_1.z.literal("ordered"), items: zod_1.z.array(zod_1.z.string()) }),
+]);
+exports.promoTermsSchema = zod_1.z.object({
+    eyebrow: zod_1.z.string().optional(),
+    title: zod_1.z.string(),
+    subtitle: zod_1.z.string().optional(),
+    blocks: zod_1.z.array(exports.promoTermsBlockSchema),
+});
+// ============================================================================
+// Public banner entry — element of public.json
+// ============================================================================
+exports.promoConfigSchema = zod_1.z.object({
+    id: zod_1.z.string(),
+    slug: slugSchema,
+    imageKey: zod_1.z.string(),
+    imageUrl: zod_1.z.string(),
+    destinationUrl: allowedPromoUrlSchema,
+    termsUrl: allowedPromoUrlSchema.optional(),
+    hasTerms: zod_1.z.boolean(),
+    altText: zod_1.z.string().min(10, "altText must be at least 10 characters").max(200, "altText must be at most 200 characters"),
+    width: zod_1.z.number().int().min(200).max(800).optional(),
+    activeStart: isoDateSchema.optional(),
+    activeEnd: isoDateSchema.optional(),
+    published: zod_1.z.boolean(),
+    sortOrder: zod_1.z.number().int().min(0).max(999),
+    createdAt: isoDateSchema,
+    updatedAt: isoDateSchema,
+});
+// ============================================================================
+// Private manifest entry — PromoConfig + optional inline terms
+// ============================================================================
+exports.promoRecordSchema = exports.promoConfigSchema.extend({
+    terms: exports.promoTermsSchema.optional(),
+});
+// ============================================================================
+// Manifest list shapes
+// ============================================================================
+/** Private manifest.json — full records including terms */
+exports.promoManifestSchema = zod_1.z.array(exports.promoRecordSchema);
+/** Public public.json — published-only, banner fields only (no terms) */
+exports.promoPublicListSchema = zod_1.z.array(exports.promoConfigSchema);
+// ============================================================================
+// Upload input — what dashboard POSTs to the Lambda
+// ============================================================================
+const MAX_IMAGE_BYTES = promo_constants_1.PROMO_MAX_IMAGE_BYTES;
+const BASE64_REGEX = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
+exports.promoUploadInputSchema = zod_1.z.object({
+    slug: slugSchema,
+    destinationUrl: allowedPromoUrlSchema,
+    termsUrl: allowedPromoUrlSchema.optional(),
+    altText: zod_1.z.string().min(10, "altText must be at least 10 characters").max(200, "altText must be at most 200 characters"),
+    width: zod_1.z.number().int().min(200).max(800).optional(),
+    activeStart: isoDateSchema.optional(),
+    activeEnd: isoDateSchema.optional(),
+    published: zod_1.z.boolean().default(true),
+    sortOrder: zod_1.z.number().int().min(0).max(999).default(0),
+    imageBase64: zod_1.z
+        .string()
+        .refine((data) => BASE64_REGEX.test(data), "imageBase64 must be valid base64")
+        .refine((data) => Math.ceil((data.length * 3) / 4) <= MAX_IMAGE_BYTES, `Image must be at most ${MAX_IMAGE_BYTES / (1024 * 1024)}MB`)
+        .optional(),
+    imageContentType: zod_1.z.enum(["image/png", "image/jpeg"]).optional(),
+    terms: exports.promoTermsSchema.optional(),
+});
+//# sourceMappingURL=promo.validators.js.map

package/dist/core/validators/promo.validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promo.validators.js","sourceRoot":"","sources":["../../../src/core/validators/promo.validators.ts"],"names":[],"mappings":";;;;AAAA,6BAAuB;AACvB,kEAAoE;AAEpE,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,MAAM,UAAU,GAAG,OAAC;KACf,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;KAC5C,GAAG,CAAC,EAAE,EAAE,oCAAoC,CAAC;KAC7C,KAAK,CAAC,cAAc,EAAE,+DAA+D,CAAC,CAAA;AAE3F,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAA;AAElG;;;;;;;;;GASG;AACH,2BAAkC,GAAW;IACzC,sDAAsD;IACtD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,OAAO,KAAK,CAAA;QAChB,CAAC;QACD,OAAO,IAAI,CAAA;IACf,CAAC;IAED,6CAA6C;IAC7C,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACD,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAA;IAChB,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAA;IAErC,sDAAsD;IACtD,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChD,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACvD,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,gCAAgC;IAChC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,KAAK,CAAA;IAChB,CAAC;IAED,iDAAiD;IACjD,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAA;IACf,CAAC;IAED,0BAA0B;IAC1B,IAAI,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAA;IACf,CAAC;IAED,OAAO,KAAK,CAAA;AAChB,CAAC;AAED,MAAM,qBAAqB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE;IAC/D,OAAO,EACH,iIAAiI;CACxI,CAAC,CAAA;AAEF,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAElE,QAAA,qBAAqB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9D,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1D,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC5D,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACpE,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;CACvE,CAAC,CAAA;AAIW,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,QAAA,qBAAqB,CAAC;CACzC,CAAC,CAAA;AAIF,+EAA+E;AAC/E,+CAA+C;AAC/C,+EAA+E;AAElE,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,cAAc,EAAE,qBAAqB;IACrC,QAAQ,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,wCAAwC,CAAC;IACxH,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACpD,WAAW,EAAE,aAAa,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;IACtB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,SAAS,EAAE,aAAa;IACxB,SAAS,EAAE,aAAa;CAC3B,CAAC,CAAA;AAIF,+EAA+E;AAC/E,+DAA+D;AAC/D,+EAA+E;AAElE,QAAA,iBAAiB,GAAG,QAAA,iBAAiB,CAAC,MAAM,CAAC;IACtD,KAAK,EAAE,QAAA,gBAAgB,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAA;AAIF,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E,2DAA2D;AAC9C,QAAA,mBAAmB,GAAG,OAAC,CAAC,KAAK,CAAC,QAAA,iBAAiB,CAAC,CAAA;AAE7D,yEAAyE;AAC5D,QAAA,qBAAqB,GAAG,OAAC,CAAC,KAAK,CAAC,QAAA,iBAAiB,CAAC,CAAA;AAE/D,+EAA+E;AAC/E,oDAAoD;AACpD,+EAA+E;AAE/E,MAAM,eAAe,GAAG,uCAAqB,CAAA;AAC7C,MAAM,YAAY,GAAG,kEAAkE,CAAA;AAE1E,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,UAAU;IAChB,cAAc,EAAE,qBAAqB;IACrC,QAAQ,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC1C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,wCAAwC,CAAC;IACxH,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACpD,WAAW,EAAE,aAAa,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACpC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,WAAW,EAAE,OAAC;SACT,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,kCAAkC,CAAC;SAC7E,MAAM,CACH,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,eAAe,EAC7D,yBAAyB,eAAe,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAC/D;SACA,QAAQ,EAAE;IACf,gBAAgB,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChE,KAAK,EAAE,QAAA,gBAAgB,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAA"}

package/dist/server/config/urls.d.ts

@@ -9,6 +9,8 @@ export declare const urls: {
     lambda: string;
     liquidationEngine: string;
     leaderboard: string;
+    client: string;
+    promoBucket: string;
     indexers: Partial<Record<import("..").LevrChain, {
         type: import("..").LevrIndexer;
         url: string;

package/dist/server/middleware/auth/hmac.handler.js

@@ -45,8 +45,7 @@ async function validateNonce(apiKeyId, nonce) {
     }
     catch (err) {
         config_1.logger.error("Nonce validation error:", err);
-        // Fail open on Redis errors to avoid blocking legitimate requests
-        return true;
+        return false;
     }
 }
 /**
@@ -107,7 +106,7 @@ async function handleHmacAuthBase(req, options, isServiceAuth) {
     try {
         const secretKey = await services_1.cryptoService.getSecretKey(apiKeyId, apiKey.ciphertext);
         const method = req.method.toUpperCase();
-        const path = req.originalUrl.split("?")[0];
+        const path = req.originalUrl;
         const timestamp = req.header("x-request-timestamp");
         const nonce = req.header("x-request-nonce");
         if (!timestamp) {

package/dist/server/middleware/auth/hmac.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"hmac.handler.js","sourceRoot":"","sources":["../../../../src/server/middleware/auth/hmac.handler.ts"],"names":[],"mappings":";;;;;;;AAAA,2CAA8E;AAC9E,oDAA2B;AAE3B,4CAAmB;AAEnB,wCAA0D;AAC1D,yCAAyD;AACzD,qDAAqD;AACrD,6CAA4D;AAG5D;;GAEG;AACH,SAAS,cAAc,CAAC,YAAiC,EAAE,cAAmC;IAC1F,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/D,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AACxE,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,MAAc,EAAE,OAAyB;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAA;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,qBAAqB,KAAK,KAAK,CAAA,CAAC,eAAe;IAE3E,IAAI,WAAW,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,MAAM,EAAE,oBAAW,CAAC,KAAK,CAAC,CAAA;QACzC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAA;AACjB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,KAAa;IACxD,MAAM,GAAG,GAAG,cAAc,QAAQ,IAAI,KAAK,EAAE,CAAA;IAC7C,IAAI,CAAC;QACD,+EAA+E;QAC/E,MAAM,MAAM,GAAG,MAAM,2BAAkB,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QACpF,OAAO,MAAM,KAAK,IAAI,CAAA,CAAC,yDAAyD;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,eAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAA;QAC5C,kEAAkE;QAClE,OAAO,IAAI,CAAA;IACf,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,OAAyB,EAAE,aAAsB;IAC7F,6BAA6B;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAE5F,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACrD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAEhG,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAElH,MAAM,MAAM,GAAG,MAAM,+BAAgB,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC7D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAEjF,IAAI,aAAa,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACjG,CAAC;IACD,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACvG,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAC5E,CAAC;IAED,mDAAmD;IACnD,IAAI,aAAa,EAAE,CAAC;QAChB,qEAAqE;QACrE,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnE,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,+DAA+D;gBACtE,UAAU,EAAE,GAAG;aAClB,CAAA;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACvE,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,kCAAkC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,OAAO,EAAE;gBACtG,UAAU,EAAE,GAAG;aAClB,CAAA;QACL,CAAC;IACL,CAAC;IAED,kBAAkB;IAClB,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;QACjD,OAAO;YACH,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kCAAkC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACpE,UAAU,EAAE,GAAG;SAClB,CAAA;IACL,CAAC;IAED,wBAAwB;IACxB,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,wBAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;QAE/E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAA;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAA;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;QAE3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAC3F,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QACvF,CAAC;QAED,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAClC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAEnG,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,IAAA,YAAE,EAAC,IAAI,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAClF,CAAC;QAED,MAAM,WAAW,GAAG,wBAAa,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;QACrG,MAAM,WAAW,GAAG,MAAM,CAAA;QAE1B,MAAM,EAAE,GAAG,gBAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAA;QACzG,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAE/E,+BAA+B;QAC/B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QACvD,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAEjG,GAAG,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;QAC5D,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,UAA4B,CAAA;QACpD,GAAG,CAAC,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,eAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,eAAQ,CAAC,IAAI,CAAA;QACtE,GAAG,CAAC,SAAS,GAAG,MAAM,uBAAY,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAE7D,MAAM,+BAAgB,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAE3G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,eAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAA;QAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACtF,CAAC;AACL,CAAC;AAED;;GAEG;AACI,KAAK,yBAAyB,GAAY,EAAE,OAAyB;IACxE,OAAO,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;AAClD,CAAC;AAED;;GAEG;AACI,KAAK,gCAAgC,GAAY,EAAE,OAAyB;IAC/E,OAAO,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;AACjD,CAAC"}
+{"version":3,"file":"hmac.handler.js","sourceRoot":"","sources":["../../../../src/server/middleware/auth/hmac.handler.ts"],"names":[],"mappings":";;;;;;;AAAA,2CAA8E;AAC9E,oDAA2B;AAE3B,4CAAmB;AAEnB,wCAA0D;AAC1D,yCAAyD;AACzD,qDAAqD;AACrD,6CAA4D;AAG5D;;GAEG;AACH,SAAS,cAAc,CAAC,YAAiC,EAAE,cAAmC;IAC1F,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/D,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AACxE,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,MAAc,EAAE,OAAyB;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAA;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,qBAAqB,KAAK,KAAK,CAAA,CAAC,eAAe;IAE3E,IAAI,WAAW,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,MAAM,EAAE,oBAAW,CAAC,KAAK,CAAC,CAAA;QACzC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAA;AACjB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,KAAa;IACxD,MAAM,GAAG,GAAG,cAAc,QAAQ,IAAI,KAAK,EAAE,CAAA;IAC7C,IAAI,CAAC;QACD,+EAA+E;QAC/E,MAAM,MAAM,GAAG,MAAM,2BAAkB,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QACpF,OAAO,MAAM,KAAK,IAAI,CAAA,CAAC,yDAAyD;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,eAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAA;QAC5C,OAAO,KAAK,CAAA;IAChB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,OAAyB,EAAE,aAAsB;IAC7F,6BAA6B;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAE5F,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACrD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAEhG,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAElH,MAAM,MAAM,GAAG,MAAM,+BAAgB,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC7D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAEjF,IAAI,aAAa,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACjG,CAAC;IACD,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACvG,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IAC5E,CAAC;IAED,mDAAmD;IACnD,IAAI,aAAa,EAAE,CAAC;QAChB,qEAAqE;QACrE,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnE,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,+DAA+D;gBACtE,UAAU,EAAE,GAAG;aAClB,CAAA;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACvE,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,kCAAkC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,OAAO,EAAE;gBACtG,UAAU,EAAE,GAAG;aAClB,CAAA;QACL,CAAC;IACL,CAAC;IAED,kBAAkB;IAClB,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;QACjD,OAAO;YACH,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kCAAkC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACpE,UAAU,EAAE,GAAG;SAClB,CAAA;IACL,CAAC;IAED,wBAAwB;IACxB,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,wBAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;QAE/E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAA;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAA;QAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAA;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;QAE3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAC3F,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QACvF,CAAC;QAED,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QAClC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAEnG,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,IAAA,YAAE,EAAC,IAAI,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAClF,CAAC;QAED,MAAM,WAAW,GAAG,wBAAa,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;QACrG,MAAM,WAAW,GAAG,MAAM,CAAA;QAE1B,MAAM,EAAE,GAAG,gBAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAA;QACzG,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAE/E,+BAA+B;QAC/B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QACvD,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;QAEjG,GAAG,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;QAC5D,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,UAA4B,CAAA;QACpD,GAAG,CAAC,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,eAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,eAAQ,CAAC,IAAI,CAAA;QACtE,GAAG,CAAC,SAAS,GAAG,MAAM,uBAAY,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAE7D,MAAM,+BAAgB,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAE3G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,eAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAA;QAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;IACtF,CAAC;AACL,CAAC;AAED;;GAEG;AACI,KAAK,yBAAyB,GAAY,EAAE,OAAyB;IACxE,OAAO,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;AAClD,CAAC;AAED;;GAEG;AACI,KAAK,gCAAgC,GAAY,EAAE,OAAyB;IAC/E,OAAO,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;AACjD,CAAC"}

package/dist/server/services/hmac.service.js

@@ -106,21 +106,21 @@ class HmacService {
         client.interceptors.request.use((config) => {
             if (!config.sign)
                 return config; // skip if not explicitly signed
-            // Determine the pathname to sign (server expects path without query string)
+            // Determine the pathname to sign (include query string)
             // Support both absolute URLs and relative paths.
             const rawUrl = config.url || "/";
             let pathname;
             if (rawUrl.startsWith("http://") || rawUrl.startsWith("https://")) {
                 try {
-                    pathname = new URL(rawUrl).pathname;
+                    const parsed = new URL(rawUrl);
+                    pathname = parsed.pathname + parsed.search;
                 }
                 catch {
-                    // Fallback to splitting if URL parsing fails
-                    pathname = rawUrl.split("?", 2)[0] || "/";
+                    pathname = rawUrl.split("?", 2).join("?") || "/";
                 }
             }
             else {
-                pathname = rawUrl.split("?", 2)[0] || "/";
+                pathname = rawUrl;
                 if (!pathname.startsWith("/"))
                     pathname = `/${pathname}`;
             }

package/dist/server/services/hmac.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"hmac.service.js","sourceRoot":"","sources":["../../../src/server/services/hmac.service.ts"],"names":[],"mappings":";;;;;;AACA,oDAA2B;AAC3B,qCAA6C;AAC7C,6CAAoD;AACpD,qDAAgD;AAmBhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,WAAW;IAAjB;QACY,gBAAW,GAAG,KAAK,CAAA;IAmH/B,CAAC;IA/GG,IAAI;QACA,IAAI,IAAI,CAAC,WAAW;YAAE,OAAM;QAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QAEvB,MAAM,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,GAAG,aAAM,CAAC,IAAI,CAAC,0BAAiB,CAAC,CAAA;QACrF,IAAI,CAAC,eAAe,GAAG,kBAAkB,CAAA;QACzC,IAAI,CAAC,gBAAgB,GAAG,sBAAsB,CAAA;IAClD,CAAC;IAED,mBAAmB,CAAC,EAChB,QAAQ,EACR,SAAS,EACT,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,SAAS,GAAG,KAAK,GACO;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACrB,MAAM,WAAW,GAAG,KAAK,IAAI,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAEnE,MAAM,SAAS,GAAG,8BAAa,CAAC,WAAW,CAAC;YACxC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;YAC5B,IAAI;YACJ,EAAE;YACF,IAAI;YACJ,KAAK,EAAE,WAAW;YAClB,SAAS;SACZ,CAAC,CAAA;QAEF,OAAO;YACH,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,eAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,eAAQ,CAAC,IAAI;YACrE,aAAa,EAAE,QAAQ,QAAQ,IAAI,SAAS,EAAE;YAC9C,qBAAqB,EAAE,EAAE,CAAC,QAAQ,EAAE;YACpC,iBAAiB,EAAE,WAAW;SACjC,CAAA;IACL,CAAC;IAED,0BAA0B,CACtB,MACsE;QAEtE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,eAAe,CAAA;QACxD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAA;QAE3D,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAA;QACtH,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,iBAAiB,CAAC,MAAqB;QACnC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAqE,EAAE,EAAE;YACtG,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,OAAO,MAAM,CAAA,CAAC,gCAAgC;YAEhE,4EAA4E;YAC5E,iDAAiD;YACjD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,GAAG,CAAA;YAChC,IAAI,QAAgB,CAAA;YACpB,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC;oBACD,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAA;gBACvC,CAAC;gBAAC,MAAM,CAAC;oBACL,6CAA6C;oBAC7C,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAA;gBAC7C,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAA;gBACzC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAA;YAC5D,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,0BAA0B,CAAC;gBAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,KAAK;gBAC7C,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;aAC1B,CAAC,CAAA;YAEF,8DAA8D;YAC9D,MAAM,MAAM,GAAQ,MAAM,CAAC,OAAc,CAAA;YACzC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;gBAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAQ,CAAC,CAAA;YACzE,CAAC;iBAAM,CAAC;gBACJ,MAAM,CAAC,OAAO,GAAG,EAAE,GAAI,MAAM,CAAC,OAAe,EAAE,GAAG,OAAO,EAAS,CAAA;YACtE,CAAC;YAED,OAAO,MAAM,CAAA;QACjB,CAAC,CAAC,CAAA;IACN,CAAC;CACJ;AAEY,QAAA,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA"}
+{"version":3,"file":"hmac.service.js","sourceRoot":"","sources":["../../../src/server/services/hmac.service.ts"],"names":[],"mappings":";;;;;;AACA,oDAA2B;AAC3B,qCAA6C;AAC7C,6CAAoD;AACpD,qDAAgD;AAmBhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,WAAW;IAAjB;QACY,gBAAW,GAAG,KAAK,CAAA;IAmH/B,CAAC;IA/GG,IAAI;QACA,IAAI,IAAI,CAAC,WAAW;YAAE,OAAM;QAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QAEvB,MAAM,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,GAAG,aAAM,CAAC,IAAI,CAAC,0BAAiB,CAAC,CAAA;QACrF,IAAI,CAAC,eAAe,GAAG,kBAAkB,CAAA;QACzC,IAAI,CAAC,gBAAgB,GAAG,sBAAsB,CAAA;IAClD,CAAC;IAED,mBAAmB,CAAC,EAChB,QAAQ,EACR,SAAS,EACT,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,SAAS,GAAG,KAAK,GACO;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACrB,MAAM,WAAW,GAAG,KAAK,IAAI,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAEnE,MAAM,SAAS,GAAG,8BAAa,CAAC,WAAW,CAAC;YACxC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;YAC5B,IAAI;YACJ,EAAE;YACF,IAAI;YACJ,KAAK,EAAE,WAAW;YAClB,SAAS;SACZ,CAAC,CAAA;QAEF,OAAO;YACH,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,eAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,eAAQ,CAAC,IAAI;YACrE,aAAa,EAAE,QAAQ,QAAQ,IAAI,SAAS,EAAE;YAC9C,qBAAqB,EAAE,EAAE,CAAC,QAAQ,EAAE;YACpC,iBAAiB,EAAE,WAAW;SACjC,CAAA;IACL,CAAC;IAED,0BAA0B,CACtB,MACsE;QAEtE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,eAAe,CAAA;QACxD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAA;QAE3D,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAA;QACtH,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,iBAAiB,CAAC,MAAqB;QACnC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAqE,EAAE,EAAE;YACtG,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,OAAO,MAAM,CAAA,CAAC,gCAAgC;YAEhE,wDAAwD;YACxD,iDAAiD;YACjD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,GAAG,CAAA;YAChC,IAAI,QAAgB,CAAA;YACpB,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC;oBACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;oBAC9B,QAAQ,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAA;gBAC9C,CAAC;gBAAC,MAAM,CAAC;oBACL,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAA;gBACpD,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,QAAQ,GAAG,MAAM,CAAA;gBACjB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAA;YAC5D,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,0BAA0B,CAAC;gBAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,KAAK;gBAC7C,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;aAC1B,CAAC,CAAA;YAEF,8DAA8D;YAC9D,MAAM,MAAM,GAAQ,MAAM,CAAC,OAAc,CAAA;YACzC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;gBAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAQ,CAAC,CAAA;YACzE,CAAC;iBAAM,CAAC;gBACJ,MAAM,CAAC,OAAO,GAAG,EAAE,GAAI,MAAM,CAAC,OAAe,EAAE,GAAG,OAAO,EAAS,CAAA;YACtE,CAAC;YAED,OAAO,MAAM,CAAA;QACjB,CAAC,CAAC,CAAA;IACN,CAAC;CACJ;AAEY,QAAA,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA"}

package/dist/server/services/privy.service.js

@@ -49,8 +49,12 @@ class PrivyService {
             return undefined;
         const privyClient = this.getPrivyClients()[role];
         try {
-            await privyClient.utils().auth().verifyAuthToken(privyToken);
+            const verified = await privyClient.utils().auth().verifyAccessToken(privyToken);
             const user = await privyClient.users().get({ id_token: privyIdToken });
+            if (verified.user_id !== user.id) {
+                config_1.logger.warn(`Privy token subject mismatch: access_token user_id=${verified.user_id} != id_token user.id=${user.id}`);
+                return undefined;
+            }
             if (ethAddress && !this.verifyUserOwnsAddress(user, ethAddress)) {
                 config_1.logger.warn(`User ${user.id} attempted to authenticate with an unlinked address ${ethAddress}.`);
                 return undefined;

package/dist/server/services/privy.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"privy.service.js","sourceRoot":"","sources":["../../../src/server/services/privy.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yCAAoE;AACpE,4CAAmB;AACnB,2DAA6D;AAC7D,+BAA+C;AAC/C,8CAAmB;AACnB,qCAA8C;AAC9C,0DAKmC;AACnC,sCAA4C;AAS5C,MAAM,YAAY;IAAlB;QAmDI;;;WAGG;QACH,sBAAiB,GAAG,CAAC,IAAe,EAAuB,EAAE;YACzD,IAAI,OAA4B,CAAA;YAEhC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU;oBAAE,SAAQ;gBAC5E,OAAO,GAAG,OAAO,CAAC,OAAkB,CAAA;gBACpC,IAAI,OAAO,CAAC,kBAAkB,KAAK,OAAO;oBAAE,MAAK;YACrD,CAAC;YAED,OAAO,OAAO,CAAC,CAAC,CAAC,IAAA,iBAAU,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACpD,CAAC,CAAA;QAED;;WAEG;QACK,0BAAqB,GAAG,CAAC,IAAe,EAAE,eAAuB,EAAW,EAAE;YAClF,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAC5B,CAAC,OAAO,EAAE,EAAE,CACR,OAAO,CAAC,IAAI,KAAK,QAAQ;gBACzB,OAAO,CAAC,UAAU,KAAK,UAAU;gBACjC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE,CACvE,CAAA;QACL,CAAC,CAAA;IAkCL,CAAC;IA9GG,KAAK,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAe;QAC1E,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY;YAAE,OAAO,SAAS,CAAA;QAElD,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAA;QAEhD,IAAI,CAAC;YACD,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAA;YAC5D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAA;YAEtE,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;gBAC9D,eAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,uDAAuD,UAAU,GAAG,CAAC,CAAA;gBAChG,OAAO,SAAS,CAAA;YACpB,CAAC;YAED,OAAO,IAAI,CAAA;QACf,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,eAAM,CAAC,IAAI,CAAC,0CAA0C,KAAK,CAAC,OAAO,GAAG,CAAC,CAAA;YACvE,eAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvB,CAAC;IACL,CAAC;IAED;;;;OAIG;IAEG,AAAN,KAAK,CAAC,WAAW,CAAC,MAAc;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;QAEtC,gCAAgC;QAChC,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,gBAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC/D,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAA;QACzB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,2CAA2C;YAC3C,eAAM,CAAC,KAAK,CAAC,0CAA0C,MAAM,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAA;QAC5F,CAAC;QAED,iCAAiC;QACjC,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,gBAAS,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACrE,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAA;QACnC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,eAAM,CAAC,KAAK,CAAC,2CAA2C,MAAM,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAA;QAC7F,CAAC;QAED,OAAO,SAAS,CAAA;IACpB,CAAC;IA8BD;;OAEG;IACH,SAAS,CAAC,IAAI,GAAc,gBAAS,CAAC,IAAI;QACtC,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAA;IACvC,CAAC;IAGO,eAAe;QACnB,MAAM,MAAM,GAAG,aAAC,CAAC,MAAM,CAAC;YACpB,gBAAgB,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACnC,sBAAsB,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,GAAG,aAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAExE,MAAM,WAAW,GAAG,IAAI,kBAAW,CAAC;YAChC,KAAK,EAAE,wBAAY,CAAC,iBAAQ,CAAC;YAC7B,SAAS,EAAE,gBAAgB;YAC3B,kBAAkB,EAAE,kCAAsB,CAAC,iBAAQ,CAAC;SACvD,CAAC,CAAA;QAEF,MAAM,gBAAgB,GAAG,IAAI,kBAAW,CAAC;YACrC,KAAK,EAAE,8BAAkB,CAAC,iBAAQ,CAAC;YACnC,SAAS,EAAE,sBAAsB;YACjC,kBAAkB,EAAE,wCAA4B,CAAC,iBAAQ,CAAC;SAC7D,CAAC,CAAA;QAEF,OAAO;YACH,CAAC,gBAAS,CAAC,IAAI,CAAC,EAAE,WAAW;YAC7B,CAAC,gBAAS,CAAC,KAAK,CAAC,EAAE,gBAAgB;SACtC,CAAA;IACL,CAAC;CACJ;AAnFS;IADL,IAAA,oCAAe,EAAC,IAAA,YAAE,EAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB;+CAsBpD;AAsCO;IADP,IAAA,4BAAO,GAAE;mDAwBT;AAGQ,QAAA,YAAY,GAAG,IAAI,YAAY,EAAE,CAAA"}
+{"version":3,"file":"privy.service.js","sourceRoot":"","sources":["../../../src/server/services/privy.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yCAAoE;AACpE,4CAAmB;AACnB,2DAA6D;AAC7D,+BAA+C;AAC/C,8CAAmB;AACnB,qCAA8C;AAC9C,0DAKmC;AACnC,sCAA4C;AAS5C,MAAM,YAAY;IAAlB;QAwDI;;;WAGG;QACH,sBAAiB,GAAG,CAAC,IAAe,EAAuB,EAAE;YACzD,IAAI,OAA4B,CAAA;YAEhC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU;oBAAE,SAAQ;gBAC5E,OAAO,GAAG,OAAO,CAAC,OAAkB,CAAA;gBACpC,IAAI,OAAO,CAAC,kBAAkB,KAAK,OAAO;oBAAE,MAAK;YACrD,CAAC;YAED,OAAO,OAAO,CAAC,CAAC,CAAC,IAAA,iBAAU,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACpD,CAAC,CAAA;QAED;;WAEG;QACK,0BAAqB,GAAG,CAAC,IAAe,EAAE,eAAuB,EAAW,EAAE;YAClF,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAC5B,CAAC,OAAO,EAAE,EAAE,CACR,OAAO,CAAC,IAAI,KAAK,QAAQ;gBACzB,OAAO,CAAC,UAAU,KAAK,UAAU;gBACjC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE,CACvE,CAAA;QACL,CAAC,CAAA;IAkCL,CAAC;IAnHG,KAAK,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAe;QAC1E,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY;YAAE,OAAO,SAAS,CAAA;QAElD,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAA;QAEhD,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;YAC/E,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAA;YAEtE,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;gBAC/B,eAAM,CAAC,IAAI,CAAC,sDAAsD,QAAQ,CAAC,OAAO,wBAAwB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;gBACpH,OAAO,SAAS,CAAA;YACpB,CAAC;YAED,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;gBAC9D,eAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,uDAAuD,UAAU,GAAG,CAAC,CAAA;gBAChG,OAAO,SAAS,CAAA;YACpB,CAAC;YAED,OAAO,IAAI,CAAA;QACf,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,eAAM,CAAC,IAAI,CAAC,0CAA0C,KAAK,CAAC,OAAO,GAAG,CAAC,CAAA;YACvE,eAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvB,CAAC;IACL,CAAC;IAED;;;;OAIG;IAEG,AAAN,KAAK,CAAC,WAAW,CAAC,MAAc;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;QAEtC,gCAAgC;QAChC,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,gBAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC/D,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAA;QACzB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,2CAA2C;YAC3C,eAAM,CAAC,KAAK,CAAC,0CAA0C,MAAM,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAA;QAC5F,CAAC;QAED,iCAAiC;QACjC,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,gBAAS,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACrE,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAA;QACnC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,eAAM,CAAC,KAAK,CAAC,2CAA2C,MAAM,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAA;QAC7F,CAAC;QAED,OAAO,SAAS,CAAA;IACpB,CAAC;IA8BD;;OAEG;IACH,SAAS,CAAC,IAAI,GAAc,gBAAS,CAAC,IAAI;QACtC,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAA;IACvC,CAAC;IAGO,eAAe;QACnB,MAAM,MAAM,GAAG,aAAC,CAAC,MAAM,CAAC;YACpB,gBAAgB,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACnC,sBAAsB,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,GAAG,aAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAExE,MAAM,WAAW,GAAG,IAAI,kBAAW,CAAC;YAChC,KAAK,EAAE,wBAAY,CAAC,iBAAQ,CAAC;YAC7B,SAAS,EAAE,gBAAgB;YAC3B,kBAAkB,EAAE,kCAAsB,CAAC,iBAAQ,CAAC;SACvD,CAAC,CAAA;QAEF,MAAM,gBAAgB,GAAG,IAAI,kBAAW,CAAC;YACrC,KAAK,EAAE,8BAAkB,CAAC,iBAAQ,CAAC;YACnC,SAAS,EAAE,sBAAsB;YACjC,kBAAkB,EAAE,wCAA4B,CAAC,iBAAQ,CAAC;SAC7D,CAAC,CAAA;QAEF,OAAO;YACH,CAAC,gBAAS,CAAC,IAAI,CAAC,EAAE,WAAW;YAC7B,CAAC,gBAAS,CAAC,KAAK,CAAC,EAAE,gBAAgB;SACtC,CAAA;IACL,CAAC;CACJ;AAnFS;IADL,IAAA,oCAAe,EAAC,IAAA,YAAE,EAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB;+CAsBpD;AAsCO;IADP,IAAA,4BAAO,GAAE;mDAwBT;AAGQ,QAAA,YAAY,GAAG,IAAI,YAAY,EAAE,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@levrbet/shared",
-  "version": "0.5.71",
+  "version": "0.5.73",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {