@medialane/sdk 0.85.9 → 0.85.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +81 -80
- package/dist/index.cjs +177 -0
- package/dist/index.cjs.map +1 -1
- package/dist/index.d.cts +16 -1
- package/dist/index.d.ts +16 -1
- package/dist/index.js +172 -1
- package/dist/index.js.map +1 -1
- package/package.json +1 -1
package/dist/index.d.cts
CHANGED
|
@@ -401,6 +401,16 @@ interface FailoverFetchOptions {
|
|
|
401
401
|
}
|
|
402
402
|
declare function createFailoverFetch(urls: string[], options?: FailoverFetchOptions): typeof fetch;
|
|
403
403
|
|
|
404
|
+
declare const DEFAULT_STARKNET_RPC_METHODS: readonly string[];
|
|
405
|
+
interface RpcProxyConfig {
|
|
406
|
+
rpcUrls: string[];
|
|
407
|
+
allowedMethods?: readonly string[];
|
|
408
|
+
backendUrl: string;
|
|
409
|
+
apiKey: string | undefined;
|
|
410
|
+
checkRateLimit: (ip: string) => boolean;
|
|
411
|
+
}
|
|
412
|
+
declare function createRpcProxyHandler(config: RpcProxyConfig): (req: Request) => Promise<Response>;
|
|
413
|
+
|
|
404
414
|
type AssetAttribute = {
|
|
405
415
|
trait_type: string;
|
|
406
416
|
value: string;
|
|
@@ -436,4 +446,9 @@ interface BuildAssetMetadataInput {
|
|
|
436
446
|
declare const RESERVED_TRAITS: Set<string>;
|
|
437
447
|
declare function buildAssetMetadata(input: BuildAssetMetadataInput): AssetMetadata;
|
|
438
448
|
|
|
439
|
-
|
|
449
|
+
declare function isValidIpfsCidPath(cidPath: string): boolean;
|
|
450
|
+
declare const IPFS_SAFE_CONTENT_TYPE_PREFIXES: readonly ["image/jpeg", "image/png", "image/gif", "image/webp", "image/avif", "image/svg+xml", "video/", "audio/", "model/", "font/", "application/json", "application/octet-stream"];
|
|
451
|
+
declare function resolveSafeImageContentType(contentType: string): string;
|
|
452
|
+
declare const MAX_IPFS_GATEWAY_RESPONSE_BYTES: number;
|
|
453
|
+
|
|
454
|
+
export { type AssetAttribute, type AssetMetadata, type BuildAssetMetadataInput, Chain, DEFAULT_CURRENCY, DEFAULT_STARKNET_RPC_METHODS, type FailoverFetchOptions, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IPFS_GATEWAY_RESPONSE_BYTES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, type RpcProxyConfig, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, ServiceCapability, ServiceDefinition, type ServiceId, type SupportedToken, type SupportedTokenSymbol, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createFailoverFetch, createRpcProxyHandler, encodeU256, formatAmount, getListableTokens, getService, getServicesByCapability, getTokenByAddress, getTokenBySymbol, hasCapability, isServiceId, isTransientRpcError, isValidIpfsCidPath, listServices, normalizeAddress, normalizeHash, parseAmount, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt };
|
package/dist/index.d.ts
CHANGED
|
@@ -401,6 +401,16 @@ interface FailoverFetchOptions {
|
|
|
401
401
|
}
|
|
402
402
|
declare function createFailoverFetch(urls: string[], options?: FailoverFetchOptions): typeof fetch;
|
|
403
403
|
|
|
404
|
+
declare const DEFAULT_STARKNET_RPC_METHODS: readonly string[];
|
|
405
|
+
interface RpcProxyConfig {
|
|
406
|
+
rpcUrls: string[];
|
|
407
|
+
allowedMethods?: readonly string[];
|
|
408
|
+
backendUrl: string;
|
|
409
|
+
apiKey: string | undefined;
|
|
410
|
+
checkRateLimit: (ip: string) => boolean;
|
|
411
|
+
}
|
|
412
|
+
declare function createRpcProxyHandler(config: RpcProxyConfig): (req: Request) => Promise<Response>;
|
|
413
|
+
|
|
404
414
|
type AssetAttribute = {
|
|
405
415
|
trait_type: string;
|
|
406
416
|
value: string;
|
|
@@ -436,4 +446,9 @@ interface BuildAssetMetadataInput {
|
|
|
436
446
|
declare const RESERVED_TRAITS: Set<string>;
|
|
437
447
|
declare function buildAssetMetadata(input: BuildAssetMetadataInput): AssetMetadata;
|
|
438
448
|
|
|
439
|
-
|
|
449
|
+
declare function isValidIpfsCidPath(cidPath: string): boolean;
|
|
450
|
+
declare const IPFS_SAFE_CONTENT_TYPE_PREFIXES: readonly ["image/jpeg", "image/png", "image/gif", "image/webp", "image/avif", "image/svg+xml", "video/", "audio/", "model/", "font/", "application/json", "application/octet-stream"];
|
|
451
|
+
declare function resolveSafeImageContentType(contentType: string): string;
|
|
452
|
+
declare const MAX_IPFS_GATEWAY_RESPONSE_BYTES: number;
|
|
453
|
+
|
|
454
|
+
export { type AssetAttribute, type AssetMetadata, type BuildAssetMetadataInput, Chain, DEFAULT_CURRENCY, DEFAULT_STARKNET_RPC_METHODS, type FailoverFetchOptions, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IPFS_GATEWAY_RESPONSE_BYTES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, type RpcProxyConfig, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, ServiceCapability, ServiceDefinition, type ServiceId, type SupportedToken, type SupportedTokenSymbol, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createFailoverFetch, createRpcProxyHandler, encodeU256, formatAmount, getListableTokens, getService, getServicesByCapability, getTokenByAddress, getTokenBySymbol, hasCapability, isServiceId, isTransientRpcError, isValidIpfsCidPath, listServices, normalizeAddress, normalizeHash, parseAmount, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt };
|
package/dist/index.js
CHANGED
|
@@ -1279,6 +1279,151 @@ function createFailoverFetch(urls, options = {}) {
|
|
|
1279
1279
|
return failover;
|
|
1280
1280
|
}
|
|
1281
1281
|
|
|
1282
|
+
// src/server/rpc-proxy.ts
|
|
1283
|
+
var DEFAULT_STARKNET_RPC_METHODS = [
|
|
1284
|
+
"starknet_call",
|
|
1285
|
+
"starknet_addInvokeTransaction",
|
|
1286
|
+
"starknet_getTransactionReceipt",
|
|
1287
|
+
"starknet_getTransactionStatus",
|
|
1288
|
+
"starknet_getTransactionByHash",
|
|
1289
|
+
"starknet_getTransaction",
|
|
1290
|
+
"starknet_getBlockWithReceipts",
|
|
1291
|
+
"starknet_estimateFee",
|
|
1292
|
+
"starknet_getNonce",
|
|
1293
|
+
"starknet_simulateTransactions",
|
|
1294
|
+
"starknet_specVersion",
|
|
1295
|
+
"starknet_chainId",
|
|
1296
|
+
"starknet_blockNumber",
|
|
1297
|
+
"starknet_blockHashAndNumber",
|
|
1298
|
+
"starknet_getClassAt",
|
|
1299
|
+
"starknet_getClass",
|
|
1300
|
+
"starknet_getClassHashAt",
|
|
1301
|
+
"starknet_getStorageAt",
|
|
1302
|
+
"starknet_getBlockWithTxHashes",
|
|
1303
|
+
"starknet_getBlockWithTxs",
|
|
1304
|
+
"starknet_getEvents"
|
|
1305
|
+
];
|
|
1306
|
+
function isAllowedMethod(body, allowed) {
|
|
1307
|
+
if (Array.isArray(body)) {
|
|
1308
|
+
return body.every((item) => isAllowedMethod(item, allowed));
|
|
1309
|
+
}
|
|
1310
|
+
if (body && typeof body === "object") {
|
|
1311
|
+
const method = body.method;
|
|
1312
|
+
return typeof method === "string" && allowed.has(method);
|
|
1313
|
+
}
|
|
1314
|
+
return false;
|
|
1315
|
+
}
|
|
1316
|
+
function extractMethod(body) {
|
|
1317
|
+
if (Array.isArray(body)) return "batch";
|
|
1318
|
+
if (body && typeof body === "object") {
|
|
1319
|
+
const method = body.method;
|
|
1320
|
+
if (typeof method === "string") return method;
|
|
1321
|
+
}
|
|
1322
|
+
return "unknown";
|
|
1323
|
+
}
|
|
1324
|
+
function isSameOrigin(req) {
|
|
1325
|
+
const origin = req.headers.get("origin");
|
|
1326
|
+
if (!origin) return true;
|
|
1327
|
+
const host = req.headers.get("host");
|
|
1328
|
+
try {
|
|
1329
|
+
return new URL(origin).host === host;
|
|
1330
|
+
} catch {
|
|
1331
|
+
return false;
|
|
1332
|
+
}
|
|
1333
|
+
}
|
|
1334
|
+
function rpcError(code, message, status = 200, id = null) {
|
|
1335
|
+
return Response.json({ jsonrpc: "2.0", error: { code, message }, id }, { status });
|
|
1336
|
+
}
|
|
1337
|
+
async function billRpcCall(backendUrl, apiKey, method) {
|
|
1338
|
+
if (!apiKey) {
|
|
1339
|
+
console.error("[rpc-proxy] no API key configured \u2014 refusing to bill/forward");
|
|
1340
|
+
return false;
|
|
1341
|
+
}
|
|
1342
|
+
try {
|
|
1343
|
+
const res = await fetch(`${backendUrl.replace(/\/$/, "")}/v1/rpc/meter`, {
|
|
1344
|
+
method: "POST",
|
|
1345
|
+
headers: { "Content-Type": "application/json", "x-api-key": apiKey },
|
|
1346
|
+
body: JSON.stringify({ method })
|
|
1347
|
+
});
|
|
1348
|
+
return res.ok;
|
|
1349
|
+
} catch (err) {
|
|
1350
|
+
console.error("[rpc-proxy] billing call failed", { err: err instanceof Error ? err.message : String(err) });
|
|
1351
|
+
return false;
|
|
1352
|
+
}
|
|
1353
|
+
}
|
|
1354
|
+
function createRpcProxyHandler(config) {
|
|
1355
|
+
const allowed = new Set(config.allowedMethods ?? DEFAULT_STARKNET_RPC_METHODS);
|
|
1356
|
+
return async function handleRpcProxy(req) {
|
|
1357
|
+
if (!isSameOrigin(req)) {
|
|
1358
|
+
return rpcError(-32600, "Cross-origin requests are not allowed", 403);
|
|
1359
|
+
}
|
|
1360
|
+
const ip = req.headers.get("x-forwarded-for")?.split(",")[0].trim() ?? "unknown";
|
|
1361
|
+
if (!config.checkRateLimit(ip)) {
|
|
1362
|
+
return rpcError(-32005, "Too many requests", 429);
|
|
1363
|
+
}
|
|
1364
|
+
let body;
|
|
1365
|
+
try {
|
|
1366
|
+
body = await req.json();
|
|
1367
|
+
} catch {
|
|
1368
|
+
return rpcError(-32700, "Parse error");
|
|
1369
|
+
}
|
|
1370
|
+
if (!isAllowedMethod(body, allowed)) {
|
|
1371
|
+
const method2 = !Array.isArray(body) && body && typeof body === "object" ? String(body.method ?? "<unknown>") : "<batch or invalid>";
|
|
1372
|
+
return rpcError(-32601, `Method not allowed: ${method2}`);
|
|
1373
|
+
}
|
|
1374
|
+
const method = extractMethod(body);
|
|
1375
|
+
if (!await billRpcCall(config.backendUrl, config.apiKey, method)) {
|
|
1376
|
+
return rpcError(-32003, "Insufficient credits or billing unavailable \u2014 RPC call not forwarded", 402);
|
|
1377
|
+
}
|
|
1378
|
+
let lastError = "No RPC upstream configured";
|
|
1379
|
+
for (const rpcUrl of config.rpcUrls) {
|
|
1380
|
+
try {
|
|
1381
|
+
const response = await fetch(rpcUrl, {
|
|
1382
|
+
method: "POST",
|
|
1383
|
+
headers: { "Content-Type": "application/json" },
|
|
1384
|
+
body: JSON.stringify(body)
|
|
1385
|
+
});
|
|
1386
|
+
const text = await response.text();
|
|
1387
|
+
const upstream = rpcUrl.split("/")[2];
|
|
1388
|
+
if (!text) {
|
|
1389
|
+
lastError = `Upstream RPC returned empty body (HTTP ${response.status})`;
|
|
1390
|
+
console.warn("[rpc-proxy] upstream returned empty body", { status: response.status, upstream });
|
|
1391
|
+
continue;
|
|
1392
|
+
}
|
|
1393
|
+
try {
|
|
1394
|
+
const data = JSON.parse(text);
|
|
1395
|
+
if (isTransientRpcError({ status: response.status, body: data })) {
|
|
1396
|
+
const errObj = data.error;
|
|
1397
|
+
lastError = `Upstream RPC returned transient JSON-RPC error: ${String(errObj?.message ?? "(no message)")}`;
|
|
1398
|
+
console.warn("[rpc-proxy] upstream returned transient JSON-RPC error", {
|
|
1399
|
+
upstream,
|
|
1400
|
+
code: errObj?.code,
|
|
1401
|
+
message: errObj?.message
|
|
1402
|
+
});
|
|
1403
|
+
continue;
|
|
1404
|
+
}
|
|
1405
|
+
return Response.json(data, { status: 200 });
|
|
1406
|
+
} catch {
|
|
1407
|
+
lastError = `Upstream RPC returned non-JSON (HTTP ${response.status})`;
|
|
1408
|
+
console.warn("[rpc-proxy] upstream returned non-JSON", {
|
|
1409
|
+
status: response.status,
|
|
1410
|
+
upstream,
|
|
1411
|
+
bodyPreview: text.slice(0, 200)
|
|
1412
|
+
});
|
|
1413
|
+
continue;
|
|
1414
|
+
}
|
|
1415
|
+
} catch (err) {
|
|
1416
|
+
lastError = `Upstream RPC unreachable: ${err instanceof Error ? err.message : "unknown error"}`;
|
|
1417
|
+
console.warn("[rpc-proxy] upstream fetch failed", {
|
|
1418
|
+
upstream: rpcUrl.split("/")[2],
|
|
1419
|
+
err: err instanceof Error ? err.message : String(err)
|
|
1420
|
+
});
|
|
1421
|
+
}
|
|
1422
|
+
}
|
|
1423
|
+
return rpcError(-32603, lastError);
|
|
1424
|
+
};
|
|
1425
|
+
}
|
|
1426
|
+
|
|
1282
1427
|
// src/metadata.ts
|
|
1283
1428
|
var RESERVED_TRAITS = /* @__PURE__ */ new Set([
|
|
1284
1429
|
"Creator",
|
|
@@ -1333,6 +1478,32 @@ function buildAssetMetadata(input) {
|
|
|
1333
1478
|
};
|
|
1334
1479
|
}
|
|
1335
1480
|
|
|
1336
|
-
|
|
1481
|
+
// src/utils/ipfs-gateway.ts
|
|
1482
|
+
var CID_PATH_PATTERN = /^(Qm[1-9A-HJ-NP-Za-km-z]{44,}|b[a-z2-7]{58,})(\/[\w.\-/]*)?$/;
|
|
1483
|
+
function isValidIpfsCidPath(cidPath) {
|
|
1484
|
+
if (!CID_PATH_PATTERN.test(cidPath)) return false;
|
|
1485
|
+
if (cidPath.split("/").includes("..")) return false;
|
|
1486
|
+
return true;
|
|
1487
|
+
}
|
|
1488
|
+
var IPFS_SAFE_CONTENT_TYPE_PREFIXES = [
|
|
1489
|
+
"image/jpeg",
|
|
1490
|
+
"image/png",
|
|
1491
|
+
"image/gif",
|
|
1492
|
+
"image/webp",
|
|
1493
|
+
"image/avif",
|
|
1494
|
+
"image/svg+xml",
|
|
1495
|
+
"video/",
|
|
1496
|
+
"audio/",
|
|
1497
|
+
"model/",
|
|
1498
|
+
"font/",
|
|
1499
|
+
"application/json",
|
|
1500
|
+
"application/octet-stream"
|
|
1501
|
+
];
|
|
1502
|
+
function resolveSafeImageContentType(contentType) {
|
|
1503
|
+
return IPFS_SAFE_CONTENT_TYPE_PREFIXES.some((p) => contentType.startsWith(p)) ? contentType : "application/octet-stream";
|
|
1504
|
+
}
|
|
1505
|
+
var MAX_IPFS_GATEWAY_RESPONSE_BYTES = 25 * 1024 * 1024;
|
|
1506
|
+
|
|
1507
|
+
export { ApiClient, CHAINS, DEFAULT_CHAIN, DEFAULT_CURRENCY, DEFAULT_STARKNET_RPC_METHODS, FeeConfigSchema, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IPFS_GATEWAY_RESPONSE_BYTES, MedialaneApiError, OPEN_LICENSES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createFailoverFetch, createRpcProxyHandler, encodeU256, formatAmount, getCoordinates, getListableTokens, getService, getServicesByCapability, getStarknetCoordinates, getTokenByAddress, getTokenBySymbol, hasCapability, isServiceId, isTransientRpcError, isValidIpfsCidPath, listServices, normalizeAddress, normalizeHash, parseAmount, resolveConfig, resolveFeeConfig, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt };
|
|
1337
1508
|
//# sourceMappingURL=index.js.map
|
|
1338
1509
|
//# sourceMappingURL=index.js.map
|