@partylayer/provider 0.6.1 → 0.6.2

package/dist/index.js

@@ -220,6 +220,17 @@ function isRpcShaped(err) {
   return typeof e.message === "string" && typeof e.code === "number";
 }
 
+// src/request-validation.ts
+function validateRequestPayload(payload) {
+  if (payload === null || typeof payload !== "object" || Array.isArray(payload) || !("method" in payload) || typeof payload.method !== "string") {
+    throw new ProviderRpcError("Request must be an object with a string method", JSON_RPC_ERRORS.INVALID_REQUEST);
+  }
+  const params = "params" in payload ? payload.params : void 0;
+  if (params !== void 0 && (params === null || typeof params !== "object")) {
+    throw new ProviderRpcError("Request params must be an object or array", JSON_RPC_ERRORS.INVALID_PARAMS);
+  }
+}
+
 // src/method-router.ts
 var MethodRouter = class {
   handlers = /* @__PURE__ */ new Map();
@@ -241,6 +252,7 @@ var MethodRouter = class {
   }
   /** Route a request to the appropriate handler */
   async route(payload) {
+    validateRequestPayload(payload);
     const { method, params } = payload;
     const handler = this.handlers.get(method);
     if (!handler) {
@@ -514,7 +526,7 @@ var PartyLayerProvider = class {
 };
 
 // src/bridge.ts
-var PROVIDER_VERSION = "0.6.1" ;
+var PROVIDER_VERSION = "0.6.2" ;
 function createProviderBridge(client) {
   const eventBus = new CIP0103EventBus();
   const pendingEmitted = /* @__PURE__ */ new Set();
@@ -539,6 +551,7 @@ function createProviderBridge(client) {
   return bridge;
 }
 async function handleRequest(client, args, eventBus, pendingEmitted) {
+  validateRequestPayload(args);
   const { method, params } = args;
   try {
     switch (method) {
@@ -845,6 +858,11 @@ function createExtensionChannelProvider(options = {}) {
   }
   const provider = {
     request(args) {
+      try {
+        validateRequestPayload(args);
+      } catch (error) {
+        return Promise.reject(error);
+      }
       if (destroyed) return Promise.reject(new ProviderRpcError("Extension channel was destroyed", RPC_ERRORS.DISCONNECTED));
       if (typeof window === "undefined") {
         return Promise.reject(