@settlemint/dalp-sdk 3.1.33-release.42636987002 → 3.2.0-rc.1

package/dist/chunk-b03ycwb7.js

@@ -0,0 +1,68 @@
+// src/proxy/builder.ts
+var ROUTE_ID_DOT_OR_SLASH = /[./]/u;
+function buildIndex(table) {
+  const root = { children: new Map };
+  for (const id of Object.keys(table.routes)) {
+    let cursor = root;
+    for (const segment of id.split(ROUTE_ID_DOT_OR_SLASH)) {
+      let next = cursor.children.get(segment);
+      if (next === undefined) {
+        next = { children: new Map };
+        cursor.children.set(segment, next);
+      }
+      cursor = next;
+    }
+    cursor.routeId = id;
+  }
+  return root;
+}
+function makeNode(node, table, executor, factories, cache) {
+  const cached = cache.get(node);
+  if (cached !== undefined) {
+    return cached;
+  }
+  const route = node.routeId === undefined ? undefined : table.routes[node.routeId];
+  const id = node.routeId;
+  const target = route === undefined || id === undefined ? {} : Object.assign((input, options) => executor(route, id, input, options), {
+    queryOptions: (input, options) => factories.queryOptions(route, id, input, options),
+    mutationOptions: (options) => factories.mutationOptions(route, id, options)
+  });
+  const proxy = new Proxy(target, {
+    get(base, property, receiver) {
+      if (typeof property !== "string") {
+        return Reflect.get(base, property, receiver);
+      }
+      if (Object.hasOwn(base, property) || property in Function.prototype) {
+        return Reflect.get(base, property, receiver);
+      }
+      const child = node.children.get(property);
+      return child === undefined ? undefined : makeNode(child, table, executor, factories, cache);
+    },
+    has(base, property) {
+      return typeof property === "string" && node.children.has(property) || Reflect.has(base, property);
+    },
+    ownKeys(base) {
+      return [...new Set([...Reflect.ownKeys(base), ...node.children.keys()])];
+    },
+    getOwnPropertyDescriptor(base, property) {
+      if (typeof property === "string" && node.children.has(property)) {
+        return {
+          configurable: true,
+          enumerable: true,
+          value: makeNode(node.children.get(property), table, executor, factories, cache)
+        };
+      }
+      return Reflect.getOwnPropertyDescriptor(base, property);
+    }
+  });
+  cache.set(node, proxy);
+  return proxy;
+}
+function buildProxy(table, executor, factories) {
+  return makeNode(buildIndex(table), table, executor, factories, new Map);
+}
+function findRoute(table, id) {
+  return table.routes[id];
+}
+
+export { buildProxy, findRoute };

package/dist/chunk-crtb9edj.js

@@ -0,0 +1,29 @@
+import {
+  createDalpSdkConfigurationError2
+} from "./chunk-k3ntysxx.js";
+
+// src/url.ts
+var TRAILING_SLASHES_PATTERN = /\/+$/;
+function normalizeDalpBaseUrl(url) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch (error) {
+    throw createDalpSdkConfigurationError2({
+      message: `DALP SDK: invalid url "${url}". Provide a full URL including the protocol (e.g., "https://dalp.example.com").`,
+      why: "The SDK could not parse the configured DALP API URL.",
+      fix: 'Provide a full http:// or https:// URL, for example "https://dalp.example.com".',
+      cause: error
+    });
+  }
+  if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+    throw createDalpSdkConfigurationError2({
+      message: `DALP SDK: url must use https:// or http:// protocol, got "${parsed.protocol}".`,
+      why: `The SDK received a URL with the unsupported "${parsed.protocol}" protocol.`,
+      fix: 'Use a DALP API base URL that starts with "https://" or "http://".'
+    });
+  }
+  return `${parsed.origin}${parsed.pathname.replace(TRAILING_SLASHES_PATTERN, "")}`;
+}
+
+export { normalizeDalpBaseUrl };

package/dist/chunk-g5j1xky8.js

@@ -0,0 +1,99 @@
+// src/verify-webhook.ts
+import { Webhook as StandardWebhook } from "standardwebhooks";
+var WEBHOOK_SECRET_PREFIX_PATTERN = /^dalp_whsk_/u;
+var DEFAULT_TIMESTAMP_TOLERANCE_SECONDS = 5 * 60;
+function toStandardWebhookSecret2(secret) {
+  return secret.replace(WEBHOOK_SECRET_PREFIX_PATTERN, "");
+}
+async function verifyWebhook2(input) {
+  const headers = normalizeHeaders(input.headers);
+  const nowMillis = input.now instanceof Date ? input.now.getTime() : input.now ?? Date.now();
+  const tolerance = input.timestampToleranceSeconds ?? DEFAULT_TIMESTAMP_TOLERANCE_SECONDS;
+  if (!hasFiniteTimestamp(headers) || isOutsideTimestampTolerance(headers, nowMillis, tolerance)) {
+    return { ok: false, code: "TIMESTAMP_SKEW" };
+  }
+  const rawText = typeof input.rawBody === "string" ? input.rawBody : new TextDecoder().decode(input.rawBody);
+  const eventId = headers["webhook-id"];
+  const candidates = typeof input.secret === "string" ? [input.secret] : input.secret;
+  if (eventId === undefined || !candidates.some((candidate) => matchesSignature(candidate, rawText, headers))) {
+    return { ok: false, code: classifySignatureFailure(rawText, headers) };
+  }
+  let event;
+  try {
+    event = JSON.parse(rawText);
+  } catch {
+    return { ok: false, code: "MALFORMED_BODY" };
+  }
+  const { replayStore } = input;
+  if (replayStore === undefined) {
+    return { ok: true, event, release: () => Promise.resolve() };
+  }
+  const claimId = crypto.randomUUID();
+  let claimed;
+  try {
+    claimed = await replayStore.claim(eventId, claimId);
+  } catch {
+    await Promise.allSettled([releaseClaim(replayStore, eventId, claimId)]);
+    return { ok: false, code: "REPLAY_STORE_FAILURE" };
+  }
+  if (!claimed) {
+    return { ok: false, code: "REPLAYED_EVENT" };
+  }
+  return { ok: true, event, release: () => releaseClaim(replayStore, eventId, claimId) };
+}
+async function releaseClaim(replayStore, eventId, claimId) {
+  await replayStore.release(eventId, claimId);
+}
+function matchesSignature(secret, rawBody, headers) {
+  const eventId = headers["webhook-id"];
+  const timestamp = Number(headers["webhook-timestamp"]);
+  const signatures = headers["webhook-signature"];
+  if (eventId === undefined || !Number.isFinite(timestamp) || signatures === undefined) {
+    return false;
+  }
+  const expected = new StandardWebhook(toStandardWebhookSecret2(secret)).sign(eventId, new Date(timestamp * 1000), rawBody);
+  return signatures.split(" ").some((signature) => {
+    const left = new TextEncoder().encode(signature);
+    const right = new TextEncoder().encode(expected);
+    if (left.byteLength !== right.byteLength) {
+      return false;
+    }
+    let difference = 0;
+    for (let index = 0;index < left.byteLength; index += 1) {
+      difference |= (left[index] ?? 0) ^ (right[index] ?? 0);
+    }
+    return difference === 0;
+  });
+}
+function normalizeHeaders(input) {
+  if (input instanceof Headers) {
+    return Object.fromEntries(input.entries());
+  }
+  const headers = {};
+  for (const [key, value] of Object.entries(input)) {
+    if (value !== undefined) {
+      headers[key.toLowerCase()] = typeof value === "string" ? value : value.join(",");
+    }
+  }
+  return headers;
+}
+function hasFiniteTimestamp(headers) {
+  return Number.isFinite(Number(headers["webhook-timestamp"]));
+}
+function isOutsideTimestampTolerance(headers, nowMillis, toleranceSeconds) {
+  const timestamp = Number(headers["webhook-timestamp"]);
+  return Number.isFinite(timestamp) && Math.abs(nowMillis / 1000 - timestamp) > toleranceSeconds;
+}
+function classifySignatureFailure(rawBody, headers) {
+  try {
+    const parsed = JSON.parse(rawBody);
+    if (typeof parsed.evt_id !== "string" || parsed.evt_id !== headers["webhook-id"]) {
+      return "BODY_HASH_MISMATCH";
+    }
+  } catch {
+    return "BODY_HASH_MISMATCH";
+  }
+  return "SECRET_MISMATCH";
+}
+
+export { toStandardWebhookSecret2, verifyWebhook2 };