@secondlayer/sdk 6.25.0 → 6.26.0

package/dist/index.d.ts

@@ -988,6 +988,16 @@ type IndexEventBase = {
 	tx_index: number
 	event_index: number
 	contract_id: string | null
+	/** Submitting-transaction context, present only when `txContext: true` was
+	*  requested. `tx_sender` is the real tx sender — distinct from a transfer's
+	*  asset `sender`, and the only place a `print` event's sender is available.
+	*  Lets a consumer build per-event tx context without a `/v1/index/transactions`
+	*  call per event. */
+	tx_sender?: string | null
+	tx_type?: string | null
+	tx_status?: string | null
+	tx_contract_id?: string | null
+	tx_function_name?: string | null
 };
 type IndexFtTransfer = IndexEventBase & {
 	event_type: "ft_transfer"
@@ -1084,6 +1094,11 @@ type EventsListParams = {
 	/** Restrict to contracts conforming to a trait/standard (e.g. "sip-010").
 	*  Mutually exclusive with contractId; contract-keyed event types only. */
 	trait?: string
+	/** Join the submitting transaction into each event — populates `tx_sender`,
+	*  `tx_type`, `tx_status`, `tx_contract_id`, `tx_function_name`. Off by default.
+	*  Avoids a `/v1/index/transactions` call per event; for `print` events it's
+	*  the only source of the submitting sender. */
+	txContext?: boolean
 };
 type EventsWalkParams = Omit<EventsListParams, "limit"> & {
 	batchSize?: number
@@ -2304,8 +2319,13 @@ type WebhookHeaderInput = HeaderLookup | StandardWebhooksHeaders | Record<string
 *
 * The signed content is `${id}.${timestamp}.${rawBody}` HMAC-SHA256 with the
 * signing secret. Secrets returned by `sl subscriptions create` (or
-* `rotate-secret`) carry a `whsec_` prefix and are base64-decoded after the
-* prefix is stripped, matching the Svix / Standard Webhooks convention.
+* `rotate-secret`) are a bare 64-character hex string used directly as the
+* HMAC key (its UTF-8 bytes) — this helper handles that. A `whsec_`-prefixed
+* base64 secret (the Svix convention) is also accepted and base64-decoded after
+* the prefix is stripped. Note: because the issued secret is bare hex (no
+* `whsec_` prefix), a generic Svix / Standard Webhooks library will base64-
+* decode it and derive the wrong key — verify with this helper (or with
+* {@link verifySecondlayerSignature}, the format-agnostic ed25519 path).
 *
 * @param rawBody         The raw request body as a string. NEVER pass
 *                        `JSON.stringify(req.body)` — re-stringifying drops
@@ -2319,9 +2339,10 @@ type WebhookHeaderInput = HeaderLookup | StandardWebhooksHeaders | Record<string
 *                        a header value by name. Header name matching is
 *                        case-insensitive.
 * @param secret          The signing secret returned by
-*                        `sl subscriptions create` / `rotateSecret`. Pass it
-*                        through verbatim — the helper handles the `whsec_`
-*                        prefix.
+*                        `sl subscriptions create` / `rotateSecret` (a bare
+*                        64-char hex string). Pass it through verbatim — the
+*                        helper accepts both bare hex and `whsec_`-prefixed
+*                        base64 secrets.
 * @param toleranceSeconds Max age of `webhook-timestamp` in seconds. Default
 *                         300 (5 min) per the Standard Webhooks spec.
 * @returns true if every header is present, the timestamp is within

package/dist/index.js

@@ -768,6 +768,7 @@ class Index extends BaseClient {
         recipient: params.recipient,
         trait: params.trait,
         toHeight: params.toHeight,
+        txContext: params.txContext,
         cursor,
         fromHeight,
         limit
@@ -904,7 +905,8 @@ class Index extends BaseClient {
       recipient: params.recipient,
       from_height: params.fromHeight,
       to_height: params.toHeight,
-      trait: params.trait
+      trait: params.trait,
+      tx_context: params.txContext ? "true" : undefined
     })}`);
   }
   async* walkEvents(params) {
@@ -2515,5 +2517,5 @@ export {
   ApiError
 };
 
-//# debugId=9B0B41D8F5C2671064756E2164756E21
+//# debugId=997EE849532E462E64756E2164756E21
 //# sourceMappingURL=index.js.map