@rhea-finance/confidential-swap 0.3.4 → 0.3.6

package/dist/index.cjs

@@ -600,6 +600,17 @@ function validateSigned(unsigned, signed, identity) {
 }
 
 // src/api.ts
+function toMultiPayload(data) {
+  if (data.standard !== "tip191") return data;
+  if (data.signature.startsWith("secp256k1:")) {
+    const bytes2 = import_base4.base58.decode(data.signature.slice("secp256k1:".length));
+    responseAssert(bytes2.length === 65 && bytes2[64] <= 1, "Invalid TIP-191 signature.");
+    return data;
+  }
+  const bytes = import_base4.base16.decode(normalizeSecpSignature(data.signature).slice(2).toUpperCase());
+  bytes[64] = bytes[64] - 27;
+  return { ...data, signature: `secp256k1:${import_base4.base58.encode(bytes)}` };
+}
 function record(value) {
   responseAssert(value && typeof value === "object" && !Array.isArray(value), "Expected an object response.");
   return value;
@@ -646,7 +657,7 @@ var HttpConfidentialApi = class {
   proxy;
   indexer;
   appFees;
-  async request(url, method = "GET", body, token, signal) {
+  async request(url, method = "GET", body, token, signal, accessHeader = "authentication") {
     throwIfAborted(signal);
     const timeout = AbortSignal.timeout(this.config.requestTimeoutMs ?? 3e4);
     const combined = signal ? AbortSignal.any([signal, timeout]) : timeout;
@@ -657,8 +668,7 @@ var HttpConfidentialApi = class {
         headers: {
           Accept: "application/json",
           ...body !== void 0 ? { "Content-Type": "application/json" } : {},
-          // ...(token ? { authorization: `Bearer ${token}` } : {}),
-          ...token ? { authentication: `Bearer ${token}` } : {}
+          ...token ? { [accessHeader]: `Bearer ${token}` } : {}
         },
         ...body !== void 0 ? { body: JSON.stringify(body) } : {}
       });
@@ -725,7 +735,7 @@ var HttpConfidentialApi = class {
     return { accessToken: r.accessToken, refreshToken, expiresAt: this.now() + r.expiresIn * 1e3, refreshExpiresAt };
   }
   async authenticate(data, signal) {
-    return this.session(await this.request(`${this.proxy}/auth/authenticate`, "POST", { signedData: data }, void 0, signal));
+    return this.session(await this.request(`${this.proxy}/auth/authenticate`, "POST", { signedData: toMultiPayload(data) }, void 0, signal));
   }
   async refresh(session, signal) {
     return this.session(await this.request(`${this.proxy}/auth/refresh`, "POST", { refreshToken: session.refreshToken }, void 0, signal), session);
@@ -741,7 +751,14 @@ var HttpConfidentialApi = class {
     });
   }
   async getBalances(token, signal) {
-    const data = record(await this.request(`${this.direct}/account/balances`, "GET", void 0, text(token, "Access token"), signal));
+    const data = record(await this.request(
+      `${this.direct}/account/balances`,
+      "GET",
+      void 0,
+      text(token, "Access token"),
+      signal,
+      "authorization"
+    ));
     responseAssert(Array.isArray(data.balances), "Invalid balances.");
     return data.balances.map((b) => {
       const r = record(b);
@@ -784,7 +801,7 @@ var HttpConfidentialApi = class {
     return data.intent;
   }
   async submitIntent(signedData, signal) {
-    const data = record(await this.request(`${this.proxy}/submit-intent`, "POST", { type: "swap_transfer", signedData }, void 0, signal));
+    const data = record(await this.request(`${this.proxy}/submit-intent`, "POST", { type: "swap_transfer", signedData: toMultiPayload(signedData) }, void 0, signal));
     return text(data.intentHash, "Intent hash");
   }
   async privateRequest(path, method, body, token, signal) {
@@ -800,7 +817,7 @@ var HttpConfidentialApi = class {
     const data = record(await this.privateRequest(
       "withdraws",
       "POST",
-      request,
+      { ...request, withdraws: request.withdraws.map((row) => ({ ...row, signed_payload: toMultiPayload(row.signed_payload) })) },
       this.config.withdrawAuthorization === "bearer" ? token : void 0,
       signal
     ));