@medialane/sdk 0.89.0 → 0.91.0

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { R as ResolvedFeeConfig, S as ServiceDefinition, a as ServiceCapability } from './services-vwXIiRBm.cjs';
-export { A as AcceptSponsorshipBidIntentParams, b as AcceptSponsorshipProposalIntentParams, c as ActivityType, d as ApiActivitiesQuery, e as ApiActivity, f as ApiActivityPrice, g as ApiAdminCollectionClaim, h as ApiAppSource, i as ApiBusinessProvisioning, j as ApiChain, k as ApiCheckoutIntentResult, l as ApiClient, m as ApiCoin, n as ApiCoinsQuery, o as ApiCollection, p as ApiCollectionClaim, q as ApiCollectionProfile, r as ApiCollectionSlugClaim, s as ApiCollectionsQuery, t as ApiComment, u as ApiCounterOffersQuery, v as ApiCreatorListResult, w as ApiCreatorProfile, x as ApiIntent, y as ApiIntentCreated, z as ApiKeyStatus, B as ApiMeta, C as ApiMetadataSignedUrl, D as ApiMetadataUpload, E as ApiOrder, F as ApiOrderConsideration, G as ApiOrderOffer, H as ApiOrderPrice, I as ApiOrderTokenMeta, J as ApiOrderTxHash, K as ApiOrdersQuery, L as ApiPointEvent, M as ApiPortalKey, N as ApiPortalKeyCreated, O as ApiPortalMe, P as ApiPublicRemix, Q as ApiRemixOffer, T as ApiRemixOfferPrice, U as ApiRemixOffersQuery, V as ApiResponse, W as ApiRewardsBadge, X as ApiRewardsBatchEntry, Y as ApiRewardsConfig, Z as ApiRewardsLeaderboardEntry, _ as ApiRewardsLevel, $ as ApiSearchCollectionResult, a0 as ApiSearchCreatorResult, a1 as ApiSearchResult, a2 as ApiSearchTokenResult, a3 as ApiToken, a4 as ApiTokenBalance, a5 as ApiTokenMetadata, a6 as ApiUsageDay, a7 as ApiUserRewards, a8 as ApiUserWallet, a9 as ApiWalletActivity, aa as ApiWebhookCreated, ab as ApiWebhookEndpoint, ac as AutoRemixOfferParams, ad as CancelOrderIntentParams, ae as ChainFilter, af as ClaimConditions, ag as CollectionServiceId, ah as CollectionSort, ai as CollectionTokensSort, aj as ConfirmRemixOfferParams, ak as ConfirmSelfRemixParams, al as ConsiderationItem, am as CreateCheckoutIntentParams, an as CreateCoinIntentParams, ao as CreateCollectionIntentParams, ap as CreateCounterOfferIntentParams, aq as CreateDropParams, ar as CreateListingIntentParams, as as CreateMembershipParams, at as CreateMintIntentParams, au as CreatePopCollectionParams, av as CreateRemixOfferParams, aw as CreateSponsorshipOfferIntentParams, ax as CreateSponsorshipOfferParams, ay as CreateSponsorshipProposalIntentParams, az as CreateTicketParams, aA as CreateTierIntentParams, aB as CreateWebhookParams, aC as DropMintStatus, aD as EnforcementDeclaration, aE as FactoryFamilyServiceId, aF as FeeConfig, aG as FeeConfigSchema, aH as FulfillOrderIntentParams, aI as IPType, aJ as IntentCall, aK as IntentStatus, aL as IntentType, aM as IpAttribute, aN as IpNftMetadata, aO as LaunchCoinIntentParams, aP as MakeOfferIntentParams, aQ as MedialaneApiError, aR as MedialaneConfig, aS as MedialaneErrorCode, aT as MintMembershipsParams, aU as MintTicketsParams, aV as OPEN_LICENSES, aW as OfferItem, aX as OpenLicense, aY as Order, aZ as OrderDetails, a_ as OrderParameters, a$ as OrderStatus, b0 as PlaceSponsorshipBidIntentParams, b1 as PopBatchEligibilityItem, b2 as PopClaimStatus, b3 as PopEventType, b4 as ProposeSponsorshipParams, b5 as RejectSponsorshipProposalIntentParams, b6 as RemixOfferStatus, b7 as ResolvedConfig, b8 as RetractSponsorshipBidIntentParams, b9 as RetryOptions, ba as ServiceEventDeclaration, bb as SetSponsorshipOfferOpenIntentParams, bc as SortOrder, bd as TenantPlan, be as TierServiceId, bf as TxResult, bg as WebhookEventType, bh as WebhookStatus, bi as WithdrawSponsorshipProposalIntentParams, bj as resolveConfig, bk as resolveFeeConfig } from './services-vwXIiRBm.cjs';
+import { R as ResolvedFeeConfig, S as ServiceDefinition, a as ServiceCapability } from './services-D3M9dJZg.cjs';
+export { A as AcceptSponsorshipBidIntentParams, b as AcceptSponsorshipProposalIntentParams, c as ActivityType, d as ApiActivitiesQuery, e as ApiActivity, f as ApiActivityPrice, g as ApiAdminCollectionClaim, h as ApiAppSource, i as ApiBusinessProvisioning, j as ApiChain, k as ApiCheckoutIntentResult, l as ApiClient, m as ApiCoin, n as ApiCoinsQuery, o as ApiCollection, p as ApiCollectionClaim, q as ApiCollectionProfile, r as ApiCollectionSlugClaim, s as ApiCollectionsQuery, t as ApiComment, u as ApiCounterOffersQuery, v as ApiCreatorListResult, w as ApiCreatorProfile, x as ApiIntent, y as ApiIntentCreated, z as ApiKeyStatus, B as ApiMeta, C as ApiMetadataSignedUrl, D as ApiMetadataUpload, E as ApiOrder, F as ApiOrderConsideration, G as ApiOrderOffer, H as ApiOrderPrice, I as ApiOrderTokenMeta, J as ApiOrderTxHash, K as ApiOrdersQuery, L as ApiPointEvent, M as ApiPortalKey, N as ApiPortalKeyCreated, O as ApiPortalMe, P as ApiPublicRemix, Q as ApiRemixOffer, T as ApiRemixOfferPrice, U as ApiRemixOffersQuery, V as ApiResponse, W as ApiRewardsBadge, X as ApiRewardsBatchEntry, Y as ApiRewardsConfig, Z as ApiRewardsLeaderboardEntry, _ as ApiRewardsLevel, $ as ApiSearchCollectionResult, a0 as ApiSearchCreatorResult, a1 as ApiSearchResult, a2 as ApiSearchTokenResult, a3 as ApiToken, a4 as ApiTokenBalance, a5 as ApiTokenMetadata, a6 as ApiUsageDay, a7 as ApiUserRewards, a8 as ApiUserWallet, a9 as ApiWalletActivity, aa as ApiWebhookCreated, ab as ApiWebhookEndpoint, ac as AutoRemixOfferParams, ad as CancelOrderIntentParams, ae as ChainFilter, af as CheckoutIntentItem, ag as ClaimConditions, ah as CollectionServiceId, ai as CollectionSort, aj as CollectionTokensSort, ak as ConfirmRemixOfferParams, al as ConfirmSelfRemixParams, am as ConsiderationItem, an as CreateCheckoutIntentParams, ao as CreateCoinIntentParams, ap as CreateCollectionIntentParams, aq as CreateCounterOfferIntentParams, ar as CreateDropParams, as as CreateListingIntentParams, at as CreateMembershipParams, au as CreateMintIntentParams, av as CreatePopCollectionParams, aw as CreateRemixOfferParams, ax as CreateSponsorshipOfferIntentParams, ay as CreateSponsorshipOfferParams, az as CreateSponsorshipProposalIntentParams, aA as CreateTicketParams, aB as CreateTierIntentParams, aC as CreateWebhookParams, aD as DropMintStatus, aE as EnforcementDeclaration, aF as FactoryFamilyServiceId, aG as FeeConfig, aH as FeeConfigSchema, aI as FulfillOrderIntentParams, aJ as IPType, aK as IntentCall, aL as IntentStatus, aM as IntentType, aN as IpAttribute, aO as IpNftMetadata, aP as LaunchCoinIntentParams, aQ as MakeOfferIntentParams, aR as MedialaneApiError, aS as MedialaneConfig, aT as MedialaneErrorCode, aU as MintMembershipsParams, aV as MintTicketsParams, aW as OPEN_LICENSES, aX as OfferItem, aY as OpenLicense, aZ as Order, a_ as OrderDetails, a$ as OrderParameters, b0 as OrderStatus, b1 as PlaceSponsorshipBidIntentParams, b2 as PopBatchEligibilityItem, b3 as PopClaimStatus, b4 as PopEventType, b5 as ProposeSponsorshipParams, b6 as RejectSponsorshipProposalIntentParams, b7 as RemixOfferStatus, b8 as ResolvedConfig, b9 as RetractSponsorshipBidIntentParams, ba as RetryOptions, bb as ServiceEventDeclaration, bc as SetSponsorshipOfferOpenIntentParams, bd as SortOrder, be as TenantPlan, bf as TierServiceId, bg as TxResult, bh as WebhookEventType, bi as WebhookStatus, bj as WithdrawSponsorshipProposalIntentParams, bk as resolveConfig, bl as resolveFeeConfig } from './services-D3M9dJZg.cjs';
 import { C as Chain } from './types-nPIXtCF5.cjs';
 export { A as AdapterTxResult, a as AssetRef, b as CHAINS, c as ChainCoordinates, d as CoordinatesByChain, e as CreateCollectionInput, D as DEFAULT_CHAIN, E as EvmCoordinates, I as IssuanceAdapter, M as MintInput, O as OrderRef, R as RegisterOrderParams, S as SolanaCoordinates, f as StarknetCoordinates, g as StellarCoordinates, V as VenueAdapter, h as getCoordinates, i as getStarknetCoordinates } from './types-nPIXtCF5.cjs';
 import 'zod';
@@ -426,6 +426,17 @@ interface BackendProxyConfig {
 }
 declare function createBackendProxyHandler(config: BackendProxyConfig): (req: Request) => Promise<Response>;
 
+declare const ALLOWED_IMAGE_CONTENT_TYPES: Set<string>;
+declare const MAX_IMAGE_REDIRECTS = 5;
+declare const MAX_IMAGE_PROXY_BYTES: number;
+declare function isPrivateHost(hostname: string): boolean;
+declare function validateUrl(raw: string): {
+    url: URL;
+} | {
+    error: string;
+    status: number;
+};
+
 interface BackendMetadataConfig {
     backendUrl: string;
     apiKey: string;
@@ -507,4 +518,4 @@ declare const IPFS_SAFE_CONTENT_TYPE_PREFIXES: readonly ["image/jpeg", "image/pn
 declare function resolveSafeImageContentType(contentType: string): string;
 declare const MAX_IPFS_GATEWAY_RESPONSE_BYTES: number;
 
-export { type AssetAttribute, type AssetMetadata, type BackendMetadataConfig, type BackendProxyConfig, type BackendUploadResult, type BuildAssetMetadataInput, Chain, DEFAULT_CURRENCY, type FailoverFetchOptions, type FeeEnv, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IPFS_GATEWAY_RESPONSE_BYTES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, type RemixPolicy, type RemixPolicyInput, ResolvedFeeConfig, type RpcProxyConfig, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, ServiceCapability, ServiceDefinition, type ServiceId, type SupportedToken, type SupportedTokenSymbol, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createBackendProxyHandler, createFailoverFetch, createRateLimiter, createRpcProxyHandler, encodeU256, formatAmount, getBackendSignedUrl, getDerivativesTerm, getListableTokens, getService, getServicesByCapability, getTokenByAddress, getTokenBySymbol, hasCapability, isSameOrigin, isServiceId, isTransientRpcError, isValidIpfsCidPath, listServices, normalizeAddress, normalizeHash, parseAmount, requestIp, resolveAppFeeConfig, resolveRemixPolicy, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt, uploadDirectoryToBackend, uploadFileToBackend, uploadJsonToBackend };
+export { ALLOWED_IMAGE_CONTENT_TYPES, type AssetAttribute, type AssetMetadata, type BackendMetadataConfig, type BackendProxyConfig, type BackendUploadResult, type BuildAssetMetadataInput, Chain, DEFAULT_CURRENCY, type FailoverFetchOptions, type FeeEnv, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IMAGE_PROXY_BYTES, MAX_IMAGE_REDIRECTS, MAX_IPFS_GATEWAY_RESPONSE_BYTES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, type RemixPolicy, type RemixPolicyInput, ResolvedFeeConfig, type RpcProxyConfig, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, ServiceCapability, ServiceDefinition, type ServiceId, type SupportedToken, type SupportedTokenSymbol, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createBackendProxyHandler, createFailoverFetch, createRateLimiter, createRpcProxyHandler, encodeU256, formatAmount, getBackendSignedUrl, getDerivativesTerm, getListableTokens, getService, getServicesByCapability, getTokenByAddress, getTokenBySymbol, hasCapability, isPrivateHost, isSameOrigin, isServiceId, isTransientRpcError, isValidIpfsCidPath, listServices, normalizeAddress, normalizeHash, parseAmount, requestIp, resolveAppFeeConfig, resolveRemixPolicy, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt, uploadDirectoryToBackend, uploadFileToBackend, uploadJsonToBackend, validateUrl };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { R as ResolvedFeeConfig, S as ServiceDefinition, a as ServiceCapability } from './services-CELm1bdL.js';
-export { A as AcceptSponsorshipBidIntentParams, b as AcceptSponsorshipProposalIntentParams, c as ActivityType, d as ApiActivitiesQuery, e as ApiActivity, f as ApiActivityPrice, g as ApiAdminCollectionClaim, h as ApiAppSource, i as ApiBusinessProvisioning, j as ApiChain, k as ApiCheckoutIntentResult, l as ApiClient, m as ApiCoin, n as ApiCoinsQuery, o as ApiCollection, p as ApiCollectionClaim, q as ApiCollectionProfile, r as ApiCollectionSlugClaim, s as ApiCollectionsQuery, t as ApiComment, u as ApiCounterOffersQuery, v as ApiCreatorListResult, w as ApiCreatorProfile, x as ApiIntent, y as ApiIntentCreated, z as ApiKeyStatus, B as ApiMeta, C as ApiMetadataSignedUrl, D as ApiMetadataUpload, E as ApiOrder, F as ApiOrderConsideration, G as ApiOrderOffer, H as ApiOrderPrice, I as ApiOrderTokenMeta, J as ApiOrderTxHash, K as ApiOrdersQuery, L as ApiPointEvent, M as ApiPortalKey, N as ApiPortalKeyCreated, O as ApiPortalMe, P as ApiPublicRemix, Q as ApiRemixOffer, T as ApiRemixOfferPrice, U as ApiRemixOffersQuery, V as ApiResponse, W as ApiRewardsBadge, X as ApiRewardsBatchEntry, Y as ApiRewardsConfig, Z as ApiRewardsLeaderboardEntry, _ as ApiRewardsLevel, $ as ApiSearchCollectionResult, a0 as ApiSearchCreatorResult, a1 as ApiSearchResult, a2 as ApiSearchTokenResult, a3 as ApiToken, a4 as ApiTokenBalance, a5 as ApiTokenMetadata, a6 as ApiUsageDay, a7 as ApiUserRewards, a8 as ApiUserWallet, a9 as ApiWalletActivity, aa as ApiWebhookCreated, ab as ApiWebhookEndpoint, ac as AutoRemixOfferParams, ad as CancelOrderIntentParams, ae as ChainFilter, af as ClaimConditions, ag as CollectionServiceId, ah as CollectionSort, ai as CollectionTokensSort, aj as ConfirmRemixOfferParams, ak as ConfirmSelfRemixParams, al as ConsiderationItem, am as CreateCheckoutIntentParams, an as CreateCoinIntentParams, ao as CreateCollectionIntentParams, ap as CreateCounterOfferIntentParams, aq as CreateDropParams, ar as CreateListingIntentParams, as as CreateMembershipParams, at as CreateMintIntentParams, au as CreatePopCollectionParams, av as CreateRemixOfferParams, aw as CreateSponsorshipOfferIntentParams, ax as CreateSponsorshipOfferParams, ay as CreateSponsorshipProposalIntentParams, az as CreateTicketParams, aA as CreateTierIntentParams, aB as CreateWebhookParams, aC as DropMintStatus, aD as EnforcementDeclaration, aE as FactoryFamilyServiceId, aF as FeeConfig, aG as FeeConfigSchema, aH as FulfillOrderIntentParams, aI as IPType, aJ as IntentCall, aK as IntentStatus, aL as IntentType, aM as IpAttribute, aN as IpNftMetadata, aO as LaunchCoinIntentParams, aP as MakeOfferIntentParams, aQ as MedialaneApiError, aR as MedialaneConfig, aS as MedialaneErrorCode, aT as MintMembershipsParams, aU as MintTicketsParams, aV as OPEN_LICENSES, aW as OfferItem, aX as OpenLicense, aY as Order, aZ as OrderDetails, a_ as OrderParameters, a$ as OrderStatus, b0 as PlaceSponsorshipBidIntentParams, b1 as PopBatchEligibilityItem, b2 as PopClaimStatus, b3 as PopEventType, b4 as ProposeSponsorshipParams, b5 as RejectSponsorshipProposalIntentParams, b6 as RemixOfferStatus, b7 as ResolvedConfig, b8 as RetractSponsorshipBidIntentParams, b9 as RetryOptions, ba as ServiceEventDeclaration, bb as SetSponsorshipOfferOpenIntentParams, bc as SortOrder, bd as TenantPlan, be as TierServiceId, bf as TxResult, bg as WebhookEventType, bh as WebhookStatus, bi as WithdrawSponsorshipProposalIntentParams, bj as resolveConfig, bk as resolveFeeConfig } from './services-CELm1bdL.js';
+import { R as ResolvedFeeConfig, S as ServiceDefinition, a as ServiceCapability } from './services-DTkc0lLx.js';
+export { A as AcceptSponsorshipBidIntentParams, b as AcceptSponsorshipProposalIntentParams, c as ActivityType, d as ApiActivitiesQuery, e as ApiActivity, f as ApiActivityPrice, g as ApiAdminCollectionClaim, h as ApiAppSource, i as ApiBusinessProvisioning, j as ApiChain, k as ApiCheckoutIntentResult, l as ApiClient, m as ApiCoin, n as ApiCoinsQuery, o as ApiCollection, p as ApiCollectionClaim, q as ApiCollectionProfile, r as ApiCollectionSlugClaim, s as ApiCollectionsQuery, t as ApiComment, u as ApiCounterOffersQuery, v as ApiCreatorListResult, w as ApiCreatorProfile, x as ApiIntent, y as ApiIntentCreated, z as ApiKeyStatus, B as ApiMeta, C as ApiMetadataSignedUrl, D as ApiMetadataUpload, E as ApiOrder, F as ApiOrderConsideration, G as ApiOrderOffer, H as ApiOrderPrice, I as ApiOrderTokenMeta, J as ApiOrderTxHash, K as ApiOrdersQuery, L as ApiPointEvent, M as ApiPortalKey, N as ApiPortalKeyCreated, O as ApiPortalMe, P as ApiPublicRemix, Q as ApiRemixOffer, T as ApiRemixOfferPrice, U as ApiRemixOffersQuery, V as ApiResponse, W as ApiRewardsBadge, X as ApiRewardsBatchEntry, Y as ApiRewardsConfig, Z as ApiRewardsLeaderboardEntry, _ as ApiRewardsLevel, $ as ApiSearchCollectionResult, a0 as ApiSearchCreatorResult, a1 as ApiSearchResult, a2 as ApiSearchTokenResult, a3 as ApiToken, a4 as ApiTokenBalance, a5 as ApiTokenMetadata, a6 as ApiUsageDay, a7 as ApiUserRewards, a8 as ApiUserWallet, a9 as ApiWalletActivity, aa as ApiWebhookCreated, ab as ApiWebhookEndpoint, ac as AutoRemixOfferParams, ad as CancelOrderIntentParams, ae as ChainFilter, af as CheckoutIntentItem, ag as ClaimConditions, ah as CollectionServiceId, ai as CollectionSort, aj as CollectionTokensSort, ak as ConfirmRemixOfferParams, al as ConfirmSelfRemixParams, am as ConsiderationItem, an as CreateCheckoutIntentParams, ao as CreateCoinIntentParams, ap as CreateCollectionIntentParams, aq as CreateCounterOfferIntentParams, ar as CreateDropParams, as as CreateListingIntentParams, at as CreateMembershipParams, au as CreateMintIntentParams, av as CreatePopCollectionParams, aw as CreateRemixOfferParams, ax as CreateSponsorshipOfferIntentParams, ay as CreateSponsorshipOfferParams, az as CreateSponsorshipProposalIntentParams, aA as CreateTicketParams, aB as CreateTierIntentParams, aC as CreateWebhookParams, aD as DropMintStatus, aE as EnforcementDeclaration, aF as FactoryFamilyServiceId, aG as FeeConfig, aH as FeeConfigSchema, aI as FulfillOrderIntentParams, aJ as IPType, aK as IntentCall, aL as IntentStatus, aM as IntentType, aN as IpAttribute, aO as IpNftMetadata, aP as LaunchCoinIntentParams, aQ as MakeOfferIntentParams, aR as MedialaneApiError, aS as MedialaneConfig, aT as MedialaneErrorCode, aU as MintMembershipsParams, aV as MintTicketsParams, aW as OPEN_LICENSES, aX as OfferItem, aY as OpenLicense, aZ as Order, a_ as OrderDetails, a$ as OrderParameters, b0 as OrderStatus, b1 as PlaceSponsorshipBidIntentParams, b2 as PopBatchEligibilityItem, b3 as PopClaimStatus, b4 as PopEventType, b5 as ProposeSponsorshipParams, b6 as RejectSponsorshipProposalIntentParams, b7 as RemixOfferStatus, b8 as ResolvedConfig, b9 as RetractSponsorshipBidIntentParams, ba as RetryOptions, bb as ServiceEventDeclaration, bc as SetSponsorshipOfferOpenIntentParams, bd as SortOrder, be as TenantPlan, bf as TierServiceId, bg as TxResult, bh as WebhookEventType, bi as WebhookStatus, bj as WithdrawSponsorshipProposalIntentParams, bk as resolveConfig, bl as resolveFeeConfig } from './services-DTkc0lLx.js';
 import { C as Chain } from './types-nPIXtCF5.js';
 export { A as AdapterTxResult, a as AssetRef, b as CHAINS, c as ChainCoordinates, d as CoordinatesByChain, e as CreateCollectionInput, D as DEFAULT_CHAIN, E as EvmCoordinates, I as IssuanceAdapter, M as MintInput, O as OrderRef, R as RegisterOrderParams, S as SolanaCoordinates, f as StarknetCoordinates, g as StellarCoordinates, V as VenueAdapter, h as getCoordinates, i as getStarknetCoordinates } from './types-nPIXtCF5.js';
 import 'zod';
@@ -426,6 +426,17 @@ interface BackendProxyConfig {
 }
 declare function createBackendProxyHandler(config: BackendProxyConfig): (req: Request) => Promise<Response>;
 
+declare const ALLOWED_IMAGE_CONTENT_TYPES: Set<string>;
+declare const MAX_IMAGE_REDIRECTS = 5;
+declare const MAX_IMAGE_PROXY_BYTES: number;
+declare function isPrivateHost(hostname: string): boolean;
+declare function validateUrl(raw: string): {
+    url: URL;
+} | {
+    error: string;
+    status: number;
+};
+
 interface BackendMetadataConfig {
     backendUrl: string;
     apiKey: string;
@@ -507,4 +518,4 @@ declare const IPFS_SAFE_CONTENT_TYPE_PREFIXES: readonly ["image/jpeg", "image/pn
 declare function resolveSafeImageContentType(contentType: string): string;
 declare const MAX_IPFS_GATEWAY_RESPONSE_BYTES: number;
 
-export { type AssetAttribute, type AssetMetadata, type BackendMetadataConfig, type BackendProxyConfig, type BackendUploadResult, type BuildAssetMetadataInput, Chain, DEFAULT_CURRENCY, type FailoverFetchOptions, type FeeEnv, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IPFS_GATEWAY_RESPONSE_BYTES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, type RemixPolicy, type RemixPolicyInput, ResolvedFeeConfig, type RpcProxyConfig, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, ServiceCapability, ServiceDefinition, type ServiceId, type SupportedToken, type SupportedTokenSymbol, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createBackendProxyHandler, createFailoverFetch, createRateLimiter, createRpcProxyHandler, encodeU256, formatAmount, getBackendSignedUrl, getDerivativesTerm, getListableTokens, getService, getServicesByCapability, getTokenByAddress, getTokenBySymbol, hasCapability, isSameOrigin, isServiceId, isTransientRpcError, isValidIpfsCidPath, listServices, normalizeAddress, normalizeHash, parseAmount, requestIp, resolveAppFeeConfig, resolveRemixPolicy, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt, uploadDirectoryToBackend, uploadFileToBackend, uploadJsonToBackend };
+export { ALLOWED_IMAGE_CONTENT_TYPES, type AssetAttribute, type AssetMetadata, type BackendMetadataConfig, type BackendProxyConfig, type BackendUploadResult, type BuildAssetMetadataInput, Chain, DEFAULT_CURRENCY, type FailoverFetchOptions, type FeeEnv, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IMAGE_PROXY_BYTES, MAX_IMAGE_REDIRECTS, MAX_IPFS_GATEWAY_RESPONSE_BYTES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, type RemixPolicy, type RemixPolicyInput, ResolvedFeeConfig, type RpcProxyConfig, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, ServiceCapability, ServiceDefinition, type ServiceId, type SupportedToken, type SupportedTokenSymbol, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createBackendProxyHandler, createFailoverFetch, createRateLimiter, createRpcProxyHandler, encodeU256, formatAmount, getBackendSignedUrl, getDerivativesTerm, getListableTokens, getService, getServicesByCapability, getTokenByAddress, getTokenBySymbol, hasCapability, isPrivateHost, isSameOrigin, isServiceId, isTransientRpcError, isValidIpfsCidPath, listServices, normalizeAddress, normalizeHash, parseAmount, requestIp, resolveAppFeeConfig, resolveRemixPolicy, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt, uploadDirectoryToBackend, uploadFileToBackend, uploadJsonToBackend, validateUrl };

package/dist/index.js

@@ -1379,6 +1379,66 @@ function createRpcProxyHandler(config) {
   return createBackendProxyHandler({ ...config, path: "/v1/rpc" });
 }
 
+// src/server/ssrf-guard.ts
+var ALLOWED_IMAGE_CONTENT_TYPES = /* @__PURE__ */ new Set([
+  "image/jpeg",
+  "image/jpg",
+  "image/png",
+  "image/gif",
+  "image/webp",
+  "image/svg+xml",
+  "image/avif",
+  "image/bmp",
+  "image/tiff"
+]);
+var MAX_IMAGE_REDIRECTS = 5;
+var MAX_IMAGE_PROXY_BYTES = 15 * 1024 * 1024;
+function isPrivateHost(hostname) {
+  const h = hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (h === "localhost" || h === "127.0.0.1" || h === "0.0.0.0") return true;
+  if (/^\d+$/.test(h)) {
+    const n = parseInt(h, 10);
+    if (n === 2130706433 || n === 0 || n >= 2886729728 && n <= 2887778303 || n >= 3232235520 && n <= 3232301055 || n >= 167772160 && n <= 184549375 || n >= 2851995648 && n <= 2852061183) return true;
+  }
+  if (/^0x[0-9a-f]+$/i.test(h)) {
+    const n = parseInt(h, 16);
+    if (n === 2130706433 || n === 0 || n >= 2886729728 && n <= 2887778303 || n >= 3232235520 && n <= 3232301055 || n >= 167772160 && n <= 184549375 || n >= 2851995648 && n <= 2852061183) return true;
+  }
+  if (/^0\d+\.\d+\.\d+\.\d+$/.test(h)) return true;
+  if (h === "::1" || /^0*:0*:0*:0*:0*:0*:0*:0*1$/.test(h)) return true;
+  const v4mapped = h.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/i);
+  if (v4mapped) return isPrivateHost(v4mapped[1]);
+  if (/^10\./.test(h)) return true;
+  if (/^172\.(1[6-9]|2\d|3[01])\./.test(h)) return true;
+  if (/^192\.168\./.test(h)) return true;
+  if (/^169\.254\./.test(h)) return true;
+  if (/^100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\./.test(h)) return true;
+  if (/^fe80:/i.test(h)) return true;
+  if (/^f[cd][0-9a-f]{2}:/i.test(h)) return true;
+  if (h.endsWith(".local")) return true;
+  if (h === "metadata.google.internal") return true;
+  if (h === "metadata.azure.internal") return true;
+  return false;
+}
+function validateUrl(raw) {
+  let parsed;
+  try {
+    parsed = new URL(raw);
+  } catch {
+    return { error: "Invalid url", status: 400 };
+  }
+  if (parsed.protocol !== "https:") {
+    return { error: "Only https URLs allowed", status: 400 };
+  }
+  if (parsed.username || parsed.password) {
+    return { error: "URL credentials not allowed", status: 400 };
+  }
+  if (isPrivateHost(parsed.hostname)) {
+    return { error: "URL not allowed", status: 400 };
+  }
+  return { url: parsed };
+}
+
 // src/server/backend-metadata.ts
 function endpoint(config, path) {
   return `${config.backendUrl.replace(/\/$/, "")}/v1/metadata/${path}`;
@@ -1521,6 +1581,6 @@ function resolveSafeImageContentType(contentType) {
 }
 var MAX_IPFS_GATEWAY_RESPONSE_BYTES = 25 * 1024 * 1024;
 
-export { ApiClient, CHAINS, DEFAULT_CHAIN, DEFAULT_CURRENCY, FeeConfigSchema, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IPFS_GATEWAY_RESPONSE_BYTES, MedialaneApiError, OPEN_LICENSES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createBackendProxyHandler, createFailoverFetch, createRateLimiter, createRpcProxyHandler, encodeU256, formatAmount, getBackendSignedUrl, getCoordinates, getDerivativesTerm, getListableTokens, getService, getServicesByCapability, getStarknetCoordinates, getTokenByAddress, getTokenBySymbol, hasCapability, isSameOrigin, isServiceId, isTransientRpcError, isValidIpfsCidPath, listServices, normalizeAddress, normalizeHash, parseAmount, requestIp, resolveAppFeeConfig, resolveConfig, resolveFeeConfig, resolveRemixPolicy, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt, uploadDirectoryToBackend, uploadFileToBackend, uploadJsonToBackend };
+export { ALLOWED_IMAGE_CONTENT_TYPES, ApiClient, CHAINS, DEFAULT_CHAIN, DEFAULT_CURRENCY, FeeConfigSchema, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IMAGE_PROXY_BYTES, MAX_IMAGE_REDIRECTS, MAX_IPFS_GATEWAY_RESPONSE_BYTES, MedialaneApiError, OPEN_LICENSES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createBackendProxyHandler, createFailoverFetch, createRateLimiter, createRpcProxyHandler, encodeU256, formatAmount, getBackendSignedUrl, getCoordinates, getDerivativesTerm, getListableTokens, getService, getServicesByCapability, getStarknetCoordinates, getTokenByAddress, getTokenBySymbol, hasCapability, isPrivateHost, isSameOrigin, isServiceId, isTransientRpcError, isValidIpfsCidPath, listServices, normalizeAddress, normalizeHash, parseAmount, requestIp, resolveAppFeeConfig, resolveConfig, resolveFeeConfig, resolveRemixPolicy, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt, uploadDirectoryToBackend, uploadFileToBackend, uploadJsonToBackend, validateUrl };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map