@settlemint/dalp-sdk 3.1.10 → 3.1.11-main.33556892334

package/dist/chunk-q8bjy1aa.js

@@ -0,0 +1,255 @@
+// src/transport/cookie-store.ts
+var parseCookieHeader = (header) => {
+  const cookies = new Map;
+  for (const part of header.split(";")) {
+    const pair = part.trim();
+    const separator = pair.indexOf("=");
+    if (separator > 0) {
+      cookies.set(pair.slice(0, separator), pair);
+    }
+  }
+  return cookies;
+};
+var isCookieDeletion = (setCookie, now = Date.now()) => {
+  if (/\bmax-age\s*=\s*-?0+\b/iu.test(setCookie) || /\bmax-age\s*=\s*-\d+\b/iu.test(setCookie)) {
+    return true;
+  }
+  const expires = /\bexpires\s*=\s*([^;]+)/iu.exec(setCookie)?.[1];
+  if (expires === undefined) {
+    return false;
+  }
+  const parsed = Date.parse(expires.trim());
+  return !Number.isNaN(parsed) && parsed <= now;
+};
+function makeCookieStore(initialHeader = "") {
+  const cookies = parseCookieHeader(initialHeader);
+  return {
+    header: () => [...cookies.values()].join("; "),
+    isEmpty: () => cookies.size === 0,
+    setCookieHeader: (header) => {
+      cookies.clear();
+      for (const [name, pair] of parseCookieHeader(header)) {
+        cookies.set(name, pair);
+      }
+    },
+    storeSetCookieHeaders: (headers) => {
+      for (const setCookie of headers) {
+        const pair = setCookie.split(";", 1)[0]?.trim() ?? "";
+        const separator = pair.indexOf("=");
+        if (separator <= 0) {
+          continue;
+        }
+        const name = pair.slice(0, separator);
+        if (isCookieDeletion(setCookie)) {
+          cookies.delete(name);
+        } else {
+          cookies.set(name, pair);
+        }
+      }
+    }
+  };
+}
+var getSetCookieHeaders = (headers) => {
+  const { getSetCookie } = headers;
+  if (getSetCookie !== undefined) {
+    return getSetCookie.call(headers);
+  }
+  const value = headers.get("set-cookie");
+  return value === null ? [] : splitCombinedSetCookie(value);
+};
+var splitCombinedSetCookie = (value) => {
+  const cookies = [];
+  const lowered = value.toLowerCase();
+  let start = 0;
+  let inExpires = false;
+  for (let index = 0;index < value.length; index += 1) {
+    if (lowered.startsWith("expires=", index)) {
+      inExpires = true;
+    }
+    const character = value[index];
+    if (character === ";") {
+      inExpires = false;
+    }
+    if (character !== "," || inExpires) {
+      continue;
+    }
+    const next = value.slice(index + 1);
+    if (!/^\s*[\w!#$%&'*+\-.^`|~]+=/u.test(next)) {
+      continue;
+    }
+    cookies.push(value.slice(start, index).trim());
+    start = index + 1;
+  }
+  const finalCookie = value.slice(start).trim();
+  if (finalCookie.length > 0) {
+    cookies.push(finalCookie);
+  }
+  return cookies;
+};
+function createCookieStoreFetch(cookieStore, fetchImpl = globalThis.fetch) {
+  return async (input, init) => {
+    const headers = new Headers(init?.headers ?? (input instanceof Request ? input.headers : undefined));
+    if (!cookieStore.isEmpty() && !headers.has("cookie")) {
+      headers.set("cookie", cookieStore.header());
+    }
+    const response = await fetchImpl(input, { ...init, headers });
+    if (response.status < 500) {
+      cookieStore.storeSetCookieHeaders(getSetCookieHeaders(response.headers));
+    }
+    return response;
+  };
+}
+// package.json
+var package_default = {
+  name: "@settlemint/dalp-sdk",
+  version: "3.1.11-main.33556892334",
+  private: false,
+  description: "Fully typed SDK for the DALP tokenization platform API",
+  homepage: "https://settlemint.com",
+  bugs: {
+    email: "support@settlemint.com"
+  },
+  license: "SEE LICENSE IN LICENSE",
+  author: {
+    name: "SettleMint",
+    email: "support@settlemint.com",
+    url: "https://settlemint.com"
+  },
+  files: [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  type: "module",
+  sideEffects: [
+    "./src/**"
+  ],
+  exports: {
+    "./package.json": "./package.json",
+    "./runtime-exports": {
+      types: "./dist/runtime-exports.d.ts",
+      import: "./dist/runtime-exports.js",
+      default: "./dist/runtime-exports.js"
+    },
+    ".": {
+      types: "./dist/index.d.ts",
+      import: "./dist/index.js",
+      default: "./dist/index.js"
+    },
+    "./operations": {
+      types: "./dist/operations.d.ts",
+      import: "./dist/operations.js",
+      default: "./dist/operations.js"
+    },
+    "./types": {
+      types: "./dist/types.d.ts",
+      import: "./dist/types.js",
+      default: "./dist/types.js"
+    },
+    "./schemas": {
+      types: "./dist/schemas.d.ts",
+      import: "./dist/schemas.js",
+      default: "./dist/schemas.js"
+    },
+    "./scalars": {
+      types: "./dist/scalars/index.d.ts",
+      import: "./dist/scalars/index.js",
+      default: "./dist/scalars/index.js"
+    },
+    "./react-query": {
+      types: "./dist/react-query.d.ts",
+      import: "./dist/react-query.js",
+      default: "./dist/react-query.js"
+    },
+    "./auth": {
+      types: "./dist/auth.d.ts",
+      import: "./dist/auth.js",
+      default: "./dist/auth.js"
+    },
+    "./bundler": {
+      types: "./dist/bundler.d.ts",
+      import: "./dist/bundler.js",
+      default: "./dist/bundler.js"
+    },
+    "./verify-webhook": {
+      types: "./dist/verify-webhook.d.ts",
+      import: "./dist/verify-webhook.js",
+      default: "./dist/verify-webhook.js"
+    },
+    "./wait-for-transaction": {
+      types: "./dist/wait-for-transaction.d.ts",
+      import: "./dist/wait-for-transaction.js",
+      default: "./dist/wait-for-transaction.js"
+    },
+    "./sdk-error": {
+      types: "./dist/errors/sdk-error.d.ts",
+      import: "./dist/errors/sdk-error.js",
+      default: "./dist/errors/sdk-error.js"
+    },
+    "./sign-webhook-receipt": {
+      types: "./dist/sign-webhook-receipt.d.ts",
+      import: "./dist/sign-webhook-receipt.js",
+      default: "./dist/sign-webhook-receipt.js"
+    }
+  },
+  publishConfig: {
+    access: "public"
+  },
+  scripts: {
+    build: "bun scripts/build.ts && bun scripts/check-dts-portability.ts && bun scripts/ensure-dist.ts --check",
+    "ensure-dist": "bun scripts/ensure-dist.ts",
+    codegen: "bun scripts/codegen.ts",
+    publint: "publint run --strict --pack bun",
+    attw: 'archive=$(bun pm pack --destination "$PWD" --quiet | tail -n 1) && attw "$archive" --profile esm-only; code=$?; rm -f "$archive"; exit $code',
+    publish: "cp ../../LICENSE . && bun publish --tolerate-republish --ignore-scripts --tag ${TAG:-latest} --access public",
+    prepack: "cp ../../LICENSE .",
+    test: "bun test --timeout 30000 tests/unit",
+    "test:coverage": "bun test --timeout 30000 --coverage --coverage-reporter=lcov --coverage-reporter=text tests/unit",
+    lint: "oxfmt --check .",
+    typecheck: "oxlint --deny-warnings . && tsc --noEmit -p scripts/tsconfig.json",
+    "check:zero-effect": "bun scripts/check-zero-effect.ts",
+    "check:dts-portability": "bun scripts/check-dts-portability.ts",
+    "check:scalar-coverage": "bun scripts/check-scalar-coverage.ts",
+    "check:auth-coverage": "bun scripts/check-auth-coverage.ts",
+    "check:zod-integrity": "bun scripts/check-zod-integrity.ts",
+    "codegen:webhook-events-sdk": "bun scripts/generate-webhook-events-sdk.ts"
+  },
+  dependencies: {
+    "@better-auth/api-key": "1.7.2",
+    "@better-auth/passkey": "1.7.2",
+    "better-auth": "1.7.2",
+    "better-call": "1.4.0",
+    dnum: "2.17.0",
+    standardwebhooks: "1.1.0",
+    viem: "2.56.0"
+  },
+  devDependencies: {
+    "@arethetypeswrong/cli": "0.18.5",
+    "@core/schema": "workspace:*",
+    "@hey-api/openapi-ts": "0.0.0-next-20260824173136",
+    "@tanstack/react-query": "5.102.8",
+    "@tools/typescript-config": "workspace:*",
+    "@types/bun": "catalog:toolchain",
+    publint: "0.3.24",
+    typescript: "7.0.2",
+    zod: "4.5.4"
+  },
+  peerDependencies: {
+    "@tanstack/react-query": "^5.101.4",
+    zod: "^4.5.4"
+  },
+  peerDependenciesMeta: {
+    "@tanstack/react-query": {
+      optional: true
+    }
+  },
+  engines: {
+    node: ">=20"
+  }
+};
+
+// src/version.ts
+var SDK_VERSION = package_default.version;
+var SDK_USER_AGENT = `DALP SDK v${SDK_VERSION}`;
+
+export { makeCookieStore, createCookieStoreFetch, SDK_VERSION, SDK_USER_AGENT };

package/dist/chunk-r0vsftj4.js

@@ -0,0 +1,102 @@
+// src/verify-webhook.ts
+import { Webhook as StandardWebhook } from "standardwebhooks";
+var DEFAULT_TIMESTAMP_TOLERANCE_SECONDS = 5 * 60;
+function toStandardWebhookSecret(secret) {
+  return secret.replace(/^dalp_whsk_/u, "");
+}
+async function verifyWebhook(input) {
+  const headers = normalizeHeaders(input.headers);
+  const nowMillis = input.now instanceof Date ? input.now.getTime() : input.now ?? Date.now();
+  const tolerance = input.timestampToleranceSeconds ?? DEFAULT_TIMESTAMP_TOLERANCE_SECONDS;
+  if (!hasFiniteTimestamp(headers) || isOutsideTimestampTolerance(headers, nowMillis, tolerance)) {
+    return { ok: false, code: "TIMESTAMP_SKEW" };
+  }
+  const rawText = typeof input.rawBody === "string" ? input.rawBody : new TextDecoder().decode(input.rawBody);
+  const eventId = headers["webhook-id"];
+  if (eventId !== undefined && await input.replayStore?.has(eventId) === true) {
+    return { ok: false, code: "REPLAYED_EVENT" };
+  }
+  let sawMalformedBody = false;
+  let sawReplayStoreFailure = false;
+  for (const candidate of Array.isArray(input.secret) ? input.secret : [input.secret]) {
+    if (!matchesSignature(candidate, rawText, headers)) {
+      continue;
+    }
+    let event;
+    try {
+      event = JSON.parse(rawText);
+    } catch {
+      sawMalformedBody = true;
+      continue;
+    }
+    if (eventId !== undefined && input.replayStore !== undefined) {
+      try {
+        await input.replayStore.add(eventId);
+      } catch {
+        sawReplayStoreFailure = true;
+        continue;
+      }
+    }
+    return { ok: true, event };
+  }
+  if (sawReplayStoreFailure) {
+    return { ok: false, code: "REPLAY_STORE_FAILURE" };
+  }
+  if (sawMalformedBody) {
+    return { ok: false, code: "MALFORMED_BODY" };
+  }
+  return { ok: false, code: classifySignatureFailure(rawText, headers) };
+}
+function matchesSignature(secret, rawBody, headers) {
+  const eventId = headers["webhook-id"];
+  const timestamp = Number(headers["webhook-timestamp"]);
+  const signatures = headers["webhook-signature"];
+  if (eventId === undefined || !Number.isFinite(timestamp) || signatures === undefined) {
+    return false;
+  }
+  const expected = new StandardWebhook(toStandardWebhookSecret(secret)).sign(eventId, new Date(timestamp * 1000), rawBody);
+  return signatures.split(" ").some((signature) => {
+    const left = new TextEncoder().encode(signature);
+    const right = new TextEncoder().encode(expected);
+    if (left.byteLength !== right.byteLength) {
+      return false;
+    }
+    let difference = 0;
+    for (let index = 0;index < left.byteLength; index += 1) {
+      difference |= (left[index] ?? 0) ^ (right[index] ?? 0);
+    }
+    return difference === 0;
+  });
+}
+function normalizeHeaders(input) {
+  if (input instanceof Headers) {
+    return Object.fromEntries(input.entries());
+  }
+  const headers = {};
+  for (const [key, value] of Object.entries(input)) {
+    if (value !== undefined) {
+      headers[key.toLowerCase()] = typeof value === "string" ? value : value.join(",");
+    }
+  }
+  return headers;
+}
+function hasFiniteTimestamp(headers) {
+  return Number.isFinite(Number(headers["webhook-timestamp"]));
+}
+function isOutsideTimestampTolerance(headers, nowMillis, toleranceSeconds) {
+  const timestamp = Number(headers["webhook-timestamp"]);
+  return Number.isFinite(timestamp) && Math.abs(nowMillis / 1000 - timestamp) > toleranceSeconds;
+}
+function classifySignatureFailure(rawBody, headers) {
+  try {
+    const parsed = JSON.parse(rawBody);
+    if (typeof parsed.evt_id !== "string" || parsed.evt_id !== headers["webhook-id"]) {
+      return "BODY_HASH_MISMATCH";
+    }
+  } catch {
+    return "BODY_HASH_MISMATCH";
+  }
+  return "SECRET_MISMATCH";
+}
+
+export { toStandardWebhookSecret, verifyWebhook };