@ocap/tx-protocols 1.29.12 → 1.29.14

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.29.12",
+  "version": "1.29.14",
   "description": "Predefined tx pipeline sets to execute certain type of transactions",
   "type": "module",
   "main": "./lib/index.cjs",
@@ -46,34 +46,34 @@
   "author": "wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)",
   "license": "MIT",
   "dependencies": {
-    "@arcblock/did": "1.29.12",
-    "@arcblock/did-util": "1.29.12",
-    "@arcblock/jwt": "1.29.12",
-    "@arcblock/validator": "1.29.12",
-    "@arcblock/vc": "1.29.12",
+    "@arcblock/did": "1.29.14",
+    "@arcblock/did-util": "1.29.14",
+    "@arcblock/jwt": "1.29.14",
+    "@arcblock/validator": "1.29.14",
+    "@arcblock/vc": "1.29.14",
     "@blocklet/xss": "^0.3.7",
-    "@ocap/asset": "1.29.12",
-    "@ocap/client": "1.29.12",
-    "@ocap/mcrypto": "1.29.12",
-    "@ocap/merkle-tree": "1.29.12",
-    "@ocap/message": "1.29.12",
-    "@ocap/state": "1.29.12",
-    "@ocap/tx-pipeline": "1.29.12",
-    "@ocap/types": "1.29.12",
-    "@ocap/util": "1.29.12",
-    "@ocap/wallet": "1.29.12",
+    "@ocap/asset": "1.29.14",
+    "@ocap/client": "1.29.14",
+    "@ocap/mcrypto": "1.29.14",
+    "@ocap/merkle-tree": "1.29.14",
+    "@ocap/message": "1.29.14",
+    "@ocap/state": "1.29.14",
+    "@ocap/tx-pipeline": "1.29.14",
+    "@ocap/types": "1.29.14",
+    "@ocap/util": "1.29.14",
+    "@ocap/wallet": "1.29.14",
     "debug": "^4.4.3",
     "deep-diff": "^1.0.2",
     "lodash": "^4.17.23",
     "url-join": "^4.0.1"
   },
   "resolutions": {
-    "bn.js": "5.2.2",
+    "bn.js": "5.2.3",
     "elliptic": "6.5.3"
   },
   "devDependencies": {
-    "@ocap/e2e-test": "1.29.12",
-    "@ocap/statedb-memory": "1.29.12",
+    "@ocap/e2e-test": "1.29.14",
+    "@ocap/statedb-memory": "1.29.14",
     "@types/debug": "^4.1.12",
     "@types/lodash": "^4.17.16",
     "start-server-and-test": "^1.14.0"

package/tools/fixtures.ts

@@ -14,8 +14,7 @@ import { create as createVC } from '@arcblock/vc';
 import { getTestChain, closeTestChain } from '@ocap/e2e-test/fixture';
 import defaultConfigModule from '@ocap/e2e-test/config';
 
-// @ts-ignore - compiled output
-import { execute, createExecutor } from '../lib';
+import { execute, createExecutor } from '../src';
 
 const defaultConfig = cloneDeep(defaultConfigModule);
 

package/tools/test-helpers.ts

@@ -0,0 +1,82 @@
+/**
+ * Test helper utilities for IDD six-dimension testing.
+ *
+ * - assertNoSensitiveData: Data Leak detection
+ * - captureStateSnapshot / assertStateUnchanged: Data Damage verification
+ */
+
+/**
+ * Patterns that match sensitive data commonly found in blockchain SDKs.
+ * Used by Data Leak tests to verify error messages and outputs don't leak secrets.
+ */
+export const SENSITIVE_PATTERNS: { pattern: RegExp; label: string }[] = [
+  { pattern: /-----BEGIN.*PRIVATE KEY-----/, label: 'PEM private key' },
+  { pattern: /\b(mnemonic|seed\s*phrase)\b/i, label: 'mnemonic keyword' },
+  { pattern: /sk[A-Za-z0-9+/]{40,}/, label: 'base58-encoded secret key' },
+];
+
+/**
+ * Assert that a string or object does not contain sensitive data patterns.
+ * Throws if any SENSITIVE_PATTERNS match.
+ */
+export function assertNoSensitiveData(data: string | object, context = 'output'): void {
+  const str = typeof data === 'string' ? data : JSON.stringify(data);
+  for (const { pattern, label } of SENSITIVE_PATTERNS) {
+    if (pattern.test(str)) {
+      throw new Error(`Data leak detected in ${context}: matches ${label} (${pattern})`);
+    }
+  }
+}
+
+/**
+ * Capture a deep-cloned snapshot of account states for the given addresses.
+ * Returns a Map<address, state>. Addresses with no state are skipped.
+ */
+export async function captureStateSnapshot(
+  statedb: { account: { get(address: string): Promise<any> } },
+  addresses: string[]
+): Promise<Map<string, any>> {
+  const snapshot = new Map<string, any>();
+  for (const addr of addresses) {
+    const state = await statedb.account.get(addr);
+    if (state) {
+      snapshot.set(addr, JSON.parse(JSON.stringify(state)));
+    }
+  }
+  return snapshot;
+}
+
+/**
+ * Assert that account states have not changed between two snapshots.
+ * Compares by JSON serialization (deep equality).
+ *
+ * @param fields - If provided, only compare these fields on each state.
+ *                 Useful when dynamic fields (e.g. _retrievedAt) differ.
+ */
+export function assertStateUnchanged(
+  before: Map<string, any>,
+  after: Map<string, any>,
+  message = '',
+  fields?: string[]
+): void {
+  for (const [addr, beforeState] of before) {
+    const afterState = after.get(addr);
+    const pick = (obj: any) => {
+      if (!fields || !obj) return obj;
+      const result: Record<string, any> = {};
+      for (const f of fields) {
+        result[f] = obj[f];
+      }
+      return result;
+    };
+    const beforeStr = JSON.stringify(pick(beforeState));
+    const afterStr = JSON.stringify(pick(afterState));
+    if (beforeStr !== afterStr) {
+      throw new Error(
+        `State changed for ${addr}${message ? ': ' + message : ''}\n` +
+          `  before: ${beforeStr}\n` +
+          `  after:  ${afterStr}`
+      );
+    }
+  }
+}