@polymarket/clob-client-v2 1.0.4 → 1.0.5

package/dist/index.cjs

@@ -257,16 +257,31 @@ var buildClobEip712Signature = async (signer, chainId, timestamp, nonce, address
 };
 
 // src/signing/hmac.ts
+var decodeBase64Secret = (secret) => {
+  const normalized = secret.replace(/-/g, "+").replace(/_/g, "/");
+  const padded = normalized + "=".repeat((4 - normalized.length % 4) % 4);
+  const binary = atob(padded);
+  const buffer = new ArrayBuffer(binary.length);
+  const bytes = new Uint8Array(buffer);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+  return bytes;
+};
 var buildPolyHmacSignature = async (secret, timestamp, method, requestPath, body) => {
+  if (!secret) {
+    throw new Error("buildPolyHmacSignature: secret is empty");
+  }
+  if (!globalThis.crypto?.subtle) {
+    throw new Error(
+      "buildPolyHmacSignature: globalThis.crypto.subtle is unavailable. Requires Node >=20 or a secure browser context (HTTPS or localhost)."
+    );
+  }
   let message = timestamp + method + requestPath;
   if (body !== void 0) {
     message += body;
   }
-  const binarySecret = atob(secret);
-  const keyBytes = new Uint8Array(binarySecret.length);
-  for (let i = 0; i < binarySecret.length; i++) {
-    keyBytes[i] = binarySecret.charCodeAt(i);
-  }
+  const keyBytes = decodeBase64Secret(secret);
   const key = await globalThis.crypto.subtle.importKey(
     "raw",
     keyBytes,
@@ -1078,6 +1093,11 @@ var decimalPlaces = (num) => {
   return arr[1].length;
 };
 var generateOrderBookSummaryHash = async (orderbook) => {
+  if (!globalThis.crypto?.subtle) {
+    throw new Error(
+      "generateOrderBookSummaryHash: globalThis.crypto.subtle is unavailable. Requires Node >=20 or a secure browser context (HTTPS or localhost)."
+    );
+  }
   orderbook.hash = "";
   const data = new TextEncoder().encode(JSON.stringify(orderbook));
   const hashBuffer = await globalThis.crypto.subtle.digest("SHA-1", data);