@medialane/sdk 0.39.0 → 0.40.0

package/dist/index.cjs

@@ -5625,10 +5625,10 @@ function normalizeEvm(address) {
   const m = /^0x([0-9a-fA-F]{40})$/.exec(address);
   if (!m) throw new Error(`Invalid ETHEREUM/BASE address: "${address}"`);
   const lower = m[1].toLowerCase();
-  const hash2 = sha3_js.keccak_256(new TextEncoder().encode(lower));
+  const hash4 = sha3_js.keccak_256(new TextEncoder().encode(lower));
   let out = "0x";
   for (let i = 0; i < 40; i++) {
-    const nibble = hash2[i >> 1] >> (i % 2 === 0 ? 4 : 0) & 15;
+    const nibble = hash4[i >> 1] >> (i % 2 === 0 ? 4 : 0) & 15;
     out += nibble >= 8 ? lower[i].toUpperCase() : lower[i];
   }
   return out;
@@ -5642,12 +5642,12 @@ function normalizeSolana(address) {
     throw new Error(`Invalid SOLANA address: "${address}"`);
   }
 }
-function normalizeHash(hash2) {
+function normalizeHash(hash4) {
   try {
-    const hex = starknet.num.toHex(BigInt(hash2));
+    const hex = starknet.num.toHex(BigInt(hash4));
     return "0x" + hex.slice(2).padStart(64, "0").toLowerCase();
   } catch {
-    throw new Error(`Invalid hash: "${hash2}"`);
+    throw new Error(`Invalid hash: "${hash4}"`);
   }
 }
 function shortenAddress(chain, address, chars = 4) {
@@ -6730,6 +6730,135 @@ var MedialaneClient = class {
   }
 };
 
+// src/admin-auth/types.ts
+var ADMIN_SCOPE = "admin-api";
+function adminRequestDigest(req) {
+  return starknet.hash.computePoseidonHashOnElements([
+    starknet.hash.starknetKeccak(req.method.toUpperCase()),
+    starknet.hash.starknetKeccak(req.path),
+    starknet.hash.starknetKeccak(req.body ?? ""),
+    starknet.num.toBigInt(req.nonce),
+    BigInt(req.ts)
+  ]);
+}
+function signAdminRequest(sessionPrivateKey, req) {
+  const digest = adminRequestDigest(req);
+  return starknet.ec.starkCurve.sign(digest, sessionPrivateKey).toCompactHex();
+}
+function verifyAdminRequestSig(sessionPublicKey, req, sig) {
+  try {
+    return starknet.ec.starkCurve.verify(sig, adminRequestDigest(req), sessionPublicKey);
+  } catch {
+    return false;
+  }
+}
+function buildAdminSessionTypedData(p) {
+  return {
+    types: {
+      StarknetDomain: [
+        { name: "name", type: "shortstring" },
+        { name: "version", type: "shortstring" },
+        { name: "chainId", type: "shortstring" },
+        { name: "revision", type: "shortstring" }
+      ],
+      AdminSession: [
+        { name: "sessionKeyHash", type: "felt" },
+        { name: "scope", type: "shortstring" },
+        { name: "issuedAt", type: "felt" },
+        { name: "expiresAt", type: "felt" }
+      ]
+    },
+    primaryType: "AdminSession",
+    domain: { name: "Medialane Admin", version: "1", chainId: p.chainId ?? "SN_MAIN", revision: "1" },
+    message: {
+      sessionKeyHash: p.sessionKeyHash,
+      scope: p.scope,
+      issuedAt: String(p.issuedAt),
+      expiresAt: String(p.expiresAt)
+    }
+  };
+}
+function sessionKeyHashOf(sessionPublicKey) {
+  return starknet.num.toHex(starknet.hash.starknetKeccak(sessionPublicKey));
+}
+async function createAdminSessionGrant(signTypedData, opts) {
+  const priv = starknet.ec.starkCurve.utils.randomPrivateKey();
+  const sessionPrivateKey = "0x" + starknet.encode.buf2hex(priv);
+  const sessionPublicKey = "0x" + starknet.encode.buf2hex(starknet.ec.starkCurve.getPublicKey(sessionPrivateKey, false));
+  const sessionKeyHash = sessionKeyHashOf(sessionPublicKey);
+  const nowSec = Math.floor((opts.now?.() ?? Date.now()) / 1e3);
+  const issuedAt = nowSec;
+  const expiresAt = nowSec + (opts.ttlSeconds ?? 7200);
+  const data = buildAdminSessionTypedData({ sessionKeyHash, scope: ADMIN_SCOPE, issuedAt, expiresAt, chainId: opts.chainId });
+  const walletSig = await signTypedData(data);
+  const grant = {
+    wallet: opts.wallet,
+    chain: opts.chain ?? "STARKNET",
+    sessionPublicKey,
+    sessionKeyHash,
+    scope: ADMIN_SCOPE,
+    issuedAt,
+    expiresAt,
+    walletSig
+  };
+  return { grant, sessionPrivateKey };
+}
+
+// src/admin-auth/headers.ts
+var ADMIN_HEADERS = {
+  grant: "x-ml-admin-grant",
+  sig: "x-ml-admin-sig",
+  nonce: "x-ml-admin-nonce",
+  ts: "x-ml-admin-ts"
+};
+function b64urlEncode(s) {
+  const bytes = new TextEncoder().encode(s);
+  let bin = "";
+  for (const b of bytes) bin += String.fromCharCode(b);
+  return btoa(bin).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function b64urlDecode(s) {
+  const pad = s.length % 4 ? "=".repeat(4 - s.length % 4) : "";
+  const bin = atob(s.replace(/-/g, "+").replace(/_/g, "/") + pad);
+  const bytes = Uint8Array.from(bin, (c) => c.charCodeAt(0));
+  return new TextDecoder().decode(bytes);
+}
+function randomNonce() {
+  const b = new Uint8Array(16);
+  crypto.getRandomValues(b);
+  let hex = "";
+  for (const x of b) hex += x.toString(16).padStart(2, "0");
+  return "0x" + hex;
+}
+function encodeAdminHeaders(session, reqInit) {
+  const nonce = randomNonce();
+  const ts = Math.floor((reqInit.now?.() ?? Date.now()) / 1e3);
+  const req = { method: reqInit.method, path: reqInit.path, body: reqInit.body ?? "", nonce, ts };
+  const sig = signAdminRequest(session.sessionPrivateKey, req);
+  return {
+    [ADMIN_HEADERS.grant]: b64urlEncode(JSON.stringify(session.grant)),
+    [ADMIN_HEADERS.sig]: sig,
+    [ADMIN_HEADERS.nonce]: nonce,
+    [ADMIN_HEADERS.ts]: String(ts)
+  };
+}
+function parseAdminHeaders(get) {
+  const rawGrant = get(ADMIN_HEADERS.grant);
+  const sig = get(ADMIN_HEADERS.sig);
+  const nonce = get(ADMIN_HEADERS.nonce);
+  const tsRaw = get(ADMIN_HEADERS.ts);
+  if (!rawGrant || !sig || !nonce || !tsRaw) return null;
+  try {
+    const grant = JSON.parse(b64urlDecode(rawGrant));
+    if (!grant.wallet || !grant.sessionPublicKey || !grant.sessionKeyHash || !Array.isArray(grant.walletSig) || typeof grant.expiresAt !== "number") return null;
+    const ts = Number(tsRaw);
+    if (!Number.isFinite(ts)) return null;
+    return { grant, sig, nonce, ts };
+  } catch {
+    return null;
+  }
+}
+
 // src/types/api.ts
 var OPEN_LICENSES = ["CC0", "CC BY", "CC BY-SA", "CC BY-NC"];
 
@@ -6979,6 +7108,8 @@ function getServicesByCapability(cap) {
   );
 }
 
+exports.ADMIN_HEADERS = ADMIN_HEADERS;
+exports.ADMIN_SCOPE = ADMIN_SCOPE;
 exports.ApiClient = ApiClient;
 exports.CHAINS = CHAINS;
 exports.COIN_MAX_SUPPLY = MAX_SUPPLY;
@@ -7036,8 +7167,10 @@ exports.PUBLIC_RPC_FALLBACKS = PUBLIC_RPC_FALLBACKS;
 exports.PopService = PopService;
 exports.SUPPORTED_TOKENS = SUPPORTED_TOKENS;
 exports.VALIDATED_EKUBO_PARAMS = VALIDATED_EKUBO_PARAMS;
+exports.adminRequestDigest = adminRequestDigest;
 exports.build1155CancellationTypedData = build1155CancellationTypedData;
 exports.build1155OrderTypedData = build1155OrderTypedData;
+exports.buildAdminSessionTypedData = buildAdminSessionTypedData;
 exports.buildCancellationTypedData = buildCancellationTypedData;
 exports.buildCreateCreatorCoinCall = buildCreateCreatorCoinCall;
 exports.buildFeeCall = buildFeeCall;
@@ -7045,7 +7178,9 @@ exports.buildLaunchOnEkuboCalls = buildLaunchOnEkuboCalls;
 exports.buildOrderTypedData = buildOrderTypedData;
 exports.buybackQuoteRaw = buybackQuoteRaw;
 exports.coinToRaw = toRaw;
+exports.createAdminSessionGrant = createAdminSessionGrant;
 exports.createFailoverFetch = createFailoverFetch;
+exports.encodeAdminHeaders = encodeAdminHeaders;
 exports.encodeByteArray = encodeByteArray;
 exports.fdvHuman = fdvHuman;
 exports.formatAmount = formatAmount;
@@ -7061,16 +7196,21 @@ exports.isTransientRpcError = isTransientRpcError;
 exports.listServices = listServices;
 exports.normalizeAddress = normalizeAddress;
 exports.normalizeHash = normalizeHash;
+exports.parseAdminHeaders = parseAdminHeaders;
 exports.parseAmount = parseAmount;
 exports.parseCreatorCoinCreated = parseCreatorCoinCreated;
+exports.randomNonce = randomNonce;
 exports.resolveConfig = resolveConfig;
 exports.resolveFeeConfig = resolveFeeConfig;
+exports.sessionKeyHashOf = sessionKeyHashOf;
 exports.shortenAddress = shortenAddress;
+exports.signAdminRequest = signAdminRequest;
 exports.stringifyBigInts = stringifyBigInts;
 exports.teamCoinsRaw = teamCoinsRaw;
 exports.u256ToBigInt = u256ToBigInt;
 exports.validateCoinName = validateName;
 exports.validateCoinSupply = validateSupply;
 exports.validateCoinSymbol = validateSymbol;
+exports.verifyAdminRequestSig = verifyAdminRequestSig;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map