@stellar/stellar-sdk 14.6.1 → 15.0.1

package/lib/bindings/client.js

@@ -65,7 +65,7 @@ var ClientGenerator = exports.ClientGenerator = function () {
       var name = (0, _utils.sanitizeIdentifier)(func.name().toString());
       var inputs = func.inputs().map(function (input) {
         return {
-          name: input.name().toString(),
+          name: (0, _utils.sanitizeIdentifier)(input.name().toString()),
           type: (0, _utils.parseTypeFromTypeDef)(input.type(), true)
         };
       });
@@ -77,7 +77,7 @@ var ClientGenerator = exports.ClientGenerator = function () {
   }, {
     key: "generateFromJSONMethod",
     value: function generateFromJSONMethod(func) {
-      var name = func.name().toString();
+      var name = (0, _utils.sanitizeIdentifier)(func.name().toString());
       var outputType = func.outputs().length > 0 ? (0, _utils.parseTypeFromTypeDef)(func.outputs()[0]) : "void";
       return "  ".concat(name, " : this.txFromJSON<").concat(outputType, ">");
     }
@@ -90,7 +90,7 @@ var ClientGenerator = exports.ClientGenerator = function () {
       }
       var inputs = constructorFunc.inputs().map(function (input) {
         return {
-          name: input.name().toString(),
+          name: (0, _utils.sanitizeIdentifier)(input.name().toString()),
           type: (0, _utils.parseTypeFromTypeDef)(input.type(), true)
         };
       });

package/lib/bindings/types.js

@@ -82,7 +82,7 @@ var TypeGenerator = exports.TypeGenerator = function () {
       var name = (0, _utils.sanitizeIdentifier)(struct.name().toString());
       var doc = (0, _utils.formatJSDocComment)(struct.doc().toString() || "Struct: ".concat(name), 0);
       var fields = struct.fields().map(function (field) {
-        var fieldName = field.name().toString();
+        var fieldName = (0, _utils.sanitizeIdentifier)(field.name().toString());
         var fieldType = (0, _utils.parseTypeFromTypeDef)(field.type());
         var fieldDoc = (0, _utils.formatJSDocComment)(field.doc().toString(), 2);
         return "".concat(fieldDoc, "  ").concat(fieldName, ": ").concat(fieldType, ";");
@@ -100,9 +100,9 @@ var TypeGenerator = exports.TypeGenerator = function () {
       });
       var caseTypes = cases.map(function (c) {
         if (c.types.length > 0) {
-          return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  { tag: \"").concat(c.name, "\"; values: readonly [").concat(c.types.join(", "), "] }");
+          return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  { tag: \"").concat((0, _utils.escapeStringLiteral)(c.name), "\"; values: readonly [").concat(c.types.join(", "), "] }");
         }
-        return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  { tag: \"").concat(c.name, "\"; values: void }");
+        return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  { tag: \"").concat((0, _utils.escapeStringLiteral)(c.name), "\"; values: void }");
       }).join(" |\n");
       return "".concat(doc, " export type ").concat(name, " =\n").concat(caseTypes, ";");
     }
@@ -112,7 +112,7 @@ var TypeGenerator = exports.TypeGenerator = function () {
       var name = (0, _utils.sanitizeIdentifier)(enumEntry.name().toString());
       var doc = (0, _utils.formatJSDocComment)(enumEntry.doc().toString() || "Enum: ".concat(name), 0);
       var members = enumEntry.cases().map(function (enumCase) {
-        var caseName = enumCase.name().toString();
+        var caseName = (0, _utils.sanitizeIdentifier)(enumCase.name().toString());
         var caseValue = enumCase.value();
         var caseDoc = enumCase.doc().toString() || "Enum Case: ".concat(caseName);
         return "".concat((0, _utils.formatJSDocComment)(caseDoc, 2), "  ").concat(caseName, " = ").concat(caseValue);
@@ -129,7 +129,7 @@ var TypeGenerator = exports.TypeGenerator = function () {
         return _this3.generateEnumCase(enumCase);
       });
       var members = cases.map(function (c) {
-        return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  ").concat(c.value, " : { message: \"").concat(c.name, "\" }");
+        return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  ").concat(c.value, " : { message: \"").concat((0, _utils.escapeStringLiteral)(c.name), "\" }");
       }).join(",\n");
       return "".concat(doc, "export const ").concat(name, " = {\n").concat(members, "\n}");
     }

package/lib/bindings/utils.d.ts

@@ -6,6 +6,10 @@ export declare function isNameReserved(name: string): boolean;
  * @returns The sanitized identifier
  */
 export declare function sanitizeIdentifier(identifier: string): string;
+/**
+ * Escape a string for safe interpolation inside a double-quoted JavaScript string literal.
+ */
+export declare function escapeStringLiteral(str: string): string;
 /**
  * Generate TypeScript type from XDR type definition
  */

package/lib/bindings/utils.js

@@ -3,6 +3,7 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
+exports.escapeStringLiteral = escapeStringLiteral;
 exports.formatImports = formatImports;
 exports.formatJSDocComment = formatJSDocComment;
 exports.generateTypeImports = generateTypeImports;
@@ -22,13 +23,20 @@ function isNameReserved(name) {
   return reservedNames.includes(name);
 }
 function sanitizeIdentifier(identifier) {
-  if (isNameReserved(identifier)) {
-    return identifier + "_";
+  var sanitized = identifier.replace(/[^a-zA-Z0-9_$]/g, "_");
+  if (isNameReserved(sanitized)) {
+    return sanitized + "_";
   }
-  if (/^\d/.test(identifier)) {
-    return "_" + identifier;
+  if (/^\d/.test(sanitized)) {
+    return "_" + sanitized;
   }
-  return identifier;
+  if (sanitized === "" || /^_+$/.test(sanitized)) {
+    return "_unnamed";
+  }
+  return sanitized;
+}
+function escapeStringLiteral(str) {
+  return str.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
 }
 function parseTypeFromTypeDef(typeDef) {
   var isFunctionInput = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : false;

package/lib/contract/assembled_transaction.d.ts

@@ -301,6 +301,11 @@ export declare class AssembledTransaction<T> {
      * transaction. This only works with transactions that have been simulated.
      */
     toJSON(): string;
+    /**
+     * Validate that a built transaction is a single invokeContract operation
+     * targeting the expected contract, and return the parsed InvokeContractArgs.
+     */
+    private static validateInvokeContractOp;
     static fromJSON<T>(options: Omit<AssembledTransactionOptions<T>, "args">, { tx, simulationResult, simulationTransactionData, }: {
         tx: XDR_BASE64;
         simulationResult: {

package/lib/contract/assembled_transaction.js

@@ -598,6 +598,38 @@ var AssembledTransaction = exports.AssembledTransaction = function () {
       return restoreFootprint;
     }())
   }], [{
+    key: "validateInvokeContractOp",
+    value: function validateInvokeContractOp(built, expectedContractId) {
+      if (built.operations.length !== 1) {
+        throw new Error("Transaction envelope must contain exactly one operation.");
+      }
+      var operation = built.operations[0];
+      if (operation.type !== "invokeHostFunction") {
+        throw new Error("Transaction envelope does not contain an invokeHostFunction operation.");
+      }
+      var invokeOp = operation;
+      if (invokeOp.func.switch().name !== "hostFunctionTypeInvokeContract") {
+        throw new Error("Transaction envelope does not contain an invokeContract host function.");
+      }
+      var invokeContractArgs = invokeOp.func.value();
+      var contractAddress;
+      var functionName;
+      try {
+        contractAddress = invokeContractArgs.contractAddress();
+        functionName = invokeContractArgs.functionName().toString("utf-8");
+      } catch (_unused) {
+        throw new Error("Could not extract contract address or method name from the transaction envelope.");
+      }
+      if (!contractAddress || !functionName) {
+        throw new Error("Could not extract contract address or method name from the transaction envelope.");
+      }
+      var xdrContractId = _stellarBase.Address.fromScAddress(contractAddress).toString();
+      if (xdrContractId !== expectedContractId) {
+        throw new Error("Transaction envelope targets contract ".concat(xdrContractId, ", but this Client is configured for ").concat(expectedContractId, "."));
+      }
+      return invokeContractArgs;
+    }
+  }, {
     key: "fromJSON",
     value: function fromJSON(options, _ref10) {
       var tx = _ref10.tx,
@@ -605,6 +637,11 @@ var AssembledTransaction = exports.AssembledTransaction = function () {
         simulationTransactionData = _ref10.simulationTransactionData;
       var txn = new AssembledTransaction(options);
       txn.built = _stellarBase.TransactionBuilder.fromXDR(tx, options.networkPassphrase);
+      var invokeContractArgs = AssembledTransaction.validateInvokeContractOp(txn.built, options.contractId);
+      var xdrMethod = invokeContractArgs.functionName().toString("utf-8");
+      if (xdrMethod !== options.method) {
+        throw new Error("Transaction envelope calls method '".concat(xdrMethod, "', but the provided method is '").concat(options.method, "'."));
+      }
       txn.simulationResult = {
         auth: simulationResult.auth.map(function (a) {
           return _stellarBase.xdr.SorobanAuthorizationEntry.fromXDR(a, "base64");
@@ -617,17 +654,9 @@ var AssembledTransaction = exports.AssembledTransaction = function () {
   }, {
     key: "fromXDR",
     value: function fromXDR(options, encodedXDR, spec) {
-      var _operation$func;
       var envelope = _stellarBase.xdr.TransactionEnvelope.fromXDR(encodedXDR, "base64");
       var built = _stellarBase.TransactionBuilder.fromXDR(envelope, options.networkPassphrase);
-      var operation = built.operations[0];
-      if (!(operation !== null && operation !== void 0 && (_operation$func = operation.func) !== null && _operation$func !== void 0 && _operation$func.value) || typeof operation.func.value !== "function") {
-        throw new Error("Could not extract the method from the transaction envelope.");
-      }
-      var invokeContractArgs = operation.func.value();
-      if (!(invokeContractArgs !== null && invokeContractArgs !== void 0 && invokeContractArgs.functionName)) {
-        throw new Error("Could not extract the method name from the transaction envelope.");
-      }
+      var invokeContractArgs = AssembledTransaction.validateInvokeContractOp(built, options.contractId);
       var method = invokeContractArgs.functionName().toString("utf-8");
       var txn = new AssembledTransaction(_objectSpread(_objectSpread({}, options), {}, {
         method: method,

package/lib/horizon/horizon_axios_client.js

@@ -16,7 +16,7 @@ function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t =
 function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
 function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
 function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
-var version = exports.version = "14.6.1";
+var version = exports.version = "15.0.1";
 var SERVER_TIME_MAP = exports.SERVER_TIME_MAP = {};
 function toSeconds(ms) {
   return Math.floor(ms / 1000);

package/lib/minimal/bindings/client.js

@@ -65,7 +65,7 @@ var ClientGenerator = exports.ClientGenerator = function () {
       var name = (0, _utils.sanitizeIdentifier)(func.name().toString());
       var inputs = func.inputs().map(function (input) {
         return {
-          name: input.name().toString(),
+          name: (0, _utils.sanitizeIdentifier)(input.name().toString()),
           type: (0, _utils.parseTypeFromTypeDef)(input.type(), true)
         };
       });
@@ -77,7 +77,7 @@ var ClientGenerator = exports.ClientGenerator = function () {
   }, {
     key: "generateFromJSONMethod",
     value: function generateFromJSONMethod(func) {
-      var name = func.name().toString();
+      var name = (0, _utils.sanitizeIdentifier)(func.name().toString());
       var outputType = func.outputs().length > 0 ? (0, _utils.parseTypeFromTypeDef)(func.outputs()[0]) : "void";
       return "  ".concat(name, " : this.txFromJSON<").concat(outputType, ">");
     }
@@ -90,7 +90,7 @@ var ClientGenerator = exports.ClientGenerator = function () {
       }
       var inputs = constructorFunc.inputs().map(function (input) {
         return {
-          name: input.name().toString(),
+          name: (0, _utils.sanitizeIdentifier)(input.name().toString()),
           type: (0, _utils.parseTypeFromTypeDef)(input.type(), true)
         };
       });

package/lib/minimal/bindings/types.js

@@ -82,7 +82,7 @@ var TypeGenerator = exports.TypeGenerator = function () {
       var name = (0, _utils.sanitizeIdentifier)(struct.name().toString());
       var doc = (0, _utils.formatJSDocComment)(struct.doc().toString() || "Struct: ".concat(name), 0);
       var fields = struct.fields().map(function (field) {
-        var fieldName = field.name().toString();
+        var fieldName = (0, _utils.sanitizeIdentifier)(field.name().toString());
         var fieldType = (0, _utils.parseTypeFromTypeDef)(field.type());
         var fieldDoc = (0, _utils.formatJSDocComment)(field.doc().toString(), 2);
         return "".concat(fieldDoc, "  ").concat(fieldName, ": ").concat(fieldType, ";");
@@ -100,9 +100,9 @@ var TypeGenerator = exports.TypeGenerator = function () {
       });
       var caseTypes = cases.map(function (c) {
         if (c.types.length > 0) {
-          return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  { tag: \"").concat(c.name, "\"; values: readonly [").concat(c.types.join(", "), "] }");
+          return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  { tag: \"").concat((0, _utils.escapeStringLiteral)(c.name), "\"; values: readonly [").concat(c.types.join(", "), "] }");
         }
-        return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  { tag: \"").concat(c.name, "\"; values: void }");
+        return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  { tag: \"").concat((0, _utils.escapeStringLiteral)(c.name), "\"; values: void }");
       }).join(" |\n");
       return "".concat(doc, " export type ").concat(name, " =\n").concat(caseTypes, ";");
     }
@@ -112,7 +112,7 @@ var TypeGenerator = exports.TypeGenerator = function () {
       var name = (0, _utils.sanitizeIdentifier)(enumEntry.name().toString());
       var doc = (0, _utils.formatJSDocComment)(enumEntry.doc().toString() || "Enum: ".concat(name), 0);
       var members = enumEntry.cases().map(function (enumCase) {
-        var caseName = enumCase.name().toString();
+        var caseName = (0, _utils.sanitizeIdentifier)(enumCase.name().toString());
         var caseValue = enumCase.value();
         var caseDoc = enumCase.doc().toString() || "Enum Case: ".concat(caseName);
         return "".concat((0, _utils.formatJSDocComment)(caseDoc, 2), "  ").concat(caseName, " = ").concat(caseValue);
@@ -129,7 +129,7 @@ var TypeGenerator = exports.TypeGenerator = function () {
         return _this3.generateEnumCase(enumCase);
       });
       var members = cases.map(function (c) {
-        return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  ").concat(c.value, " : { message: \"").concat(c.name, "\" }");
+        return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  ").concat(c.value, " : { message: \"").concat((0, _utils.escapeStringLiteral)(c.name), "\" }");
       }).join(",\n");
       return "".concat(doc, "export const ").concat(name, " = {\n").concat(members, "\n}");
     }

package/lib/minimal/bindings/utils.d.ts

@@ -6,6 +6,10 @@ export declare function isNameReserved(name: string): boolean;
  * @returns The sanitized identifier
  */
 export declare function sanitizeIdentifier(identifier: string): string;
+/**
+ * Escape a string for safe interpolation inside a double-quoted JavaScript string literal.
+ */
+export declare function escapeStringLiteral(str: string): string;
 /**
  * Generate TypeScript type from XDR type definition
  */

package/lib/minimal/bindings/utils.js

@@ -3,6 +3,7 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
+exports.escapeStringLiteral = escapeStringLiteral;
 exports.formatImports = formatImports;
 exports.formatJSDocComment = formatJSDocComment;
 exports.generateTypeImports = generateTypeImports;
@@ -22,13 +23,20 @@ function isNameReserved(name) {
   return reservedNames.includes(name);
 }
 function sanitizeIdentifier(identifier) {
-  if (isNameReserved(identifier)) {
-    return identifier + "_";
+  var sanitized = identifier.replace(/[^a-zA-Z0-9_$]/g, "_");
+  if (isNameReserved(sanitized)) {
+    return sanitized + "_";
   }
-  if (/^\d/.test(identifier)) {
-    return "_" + identifier;
+  if (/^\d/.test(sanitized)) {
+    return "_" + sanitized;
   }
-  return identifier;
+  if (sanitized === "" || /^_+$/.test(sanitized)) {
+    return "_unnamed";
+  }
+  return sanitized;
+}
+function escapeStringLiteral(str) {
+  return str.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
 }
 function parseTypeFromTypeDef(typeDef) {
   var isFunctionInput = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : false;

package/lib/minimal/contract/assembled_transaction.d.ts

@@ -301,6 +301,11 @@ export declare class AssembledTransaction<T> {
      * transaction. This only works with transactions that have been simulated.
      */
     toJSON(): string;
+    /**
+     * Validate that a built transaction is a single invokeContract operation
+     * targeting the expected contract, and return the parsed InvokeContractArgs.
+     */
+    private static validateInvokeContractOp;
     static fromJSON<T>(options: Omit<AssembledTransactionOptions<T>, "args">, { tx, simulationResult, simulationTransactionData, }: {
         tx: XDR_BASE64;
         simulationResult: {

package/lib/minimal/contract/assembled_transaction.js

@@ -598,6 +598,38 @@ var AssembledTransaction = exports.AssembledTransaction = function () {
       return restoreFootprint;
     }())
   }], [{
+    key: "validateInvokeContractOp",
+    value: function validateInvokeContractOp(built, expectedContractId) {
+      if (built.operations.length !== 1) {
+        throw new Error("Transaction envelope must contain exactly one operation.");
+      }
+      var operation = built.operations[0];
+      if (operation.type !== "invokeHostFunction") {
+        throw new Error("Transaction envelope does not contain an invokeHostFunction operation.");
+      }
+      var invokeOp = operation;
+      if (invokeOp.func.switch().name !== "hostFunctionTypeInvokeContract") {
+        throw new Error("Transaction envelope does not contain an invokeContract host function.");
+      }
+      var invokeContractArgs = invokeOp.func.value();
+      var contractAddress;
+      var functionName;
+      try {
+        contractAddress = invokeContractArgs.contractAddress();
+        functionName = invokeContractArgs.functionName().toString("utf-8");
+      } catch (_unused) {
+        throw new Error("Could not extract contract address or method name from the transaction envelope.");
+      }
+      if (!contractAddress || !functionName) {
+        throw new Error("Could not extract contract address or method name from the transaction envelope.");
+      }
+      var xdrContractId = _stellarBase.Address.fromScAddress(contractAddress).toString();
+      if (xdrContractId !== expectedContractId) {
+        throw new Error("Transaction envelope targets contract ".concat(xdrContractId, ", but this Client is configured for ").concat(expectedContractId, "."));
+      }
+      return invokeContractArgs;
+    }
+  }, {
     key: "fromJSON",
     value: function fromJSON(options, _ref10) {
       var tx = _ref10.tx,
@@ -605,6 +637,11 @@ var AssembledTransaction = exports.AssembledTransaction = function () {
         simulationTransactionData = _ref10.simulationTransactionData;
       var txn = new AssembledTransaction(options);
       txn.built = _stellarBase.TransactionBuilder.fromXDR(tx, options.networkPassphrase);
+      var invokeContractArgs = AssembledTransaction.validateInvokeContractOp(txn.built, options.contractId);
+      var xdrMethod = invokeContractArgs.functionName().toString("utf-8");
+      if (xdrMethod !== options.method) {
+        throw new Error("Transaction envelope calls method '".concat(xdrMethod, "', but the provided method is '").concat(options.method, "'."));
+      }
       txn.simulationResult = {
         auth: simulationResult.auth.map(function (a) {
           return _stellarBase.xdr.SorobanAuthorizationEntry.fromXDR(a, "base64");
@@ -617,17 +654,9 @@ var AssembledTransaction = exports.AssembledTransaction = function () {
   }, {
     key: "fromXDR",
     value: function fromXDR(options, encodedXDR, spec) {
-      var _operation$func;
       var envelope = _stellarBase.xdr.TransactionEnvelope.fromXDR(encodedXDR, "base64");
       var built = _stellarBase.TransactionBuilder.fromXDR(envelope, options.networkPassphrase);
-      var operation = built.operations[0];
-      if (!(operation !== null && operation !== void 0 && (_operation$func = operation.func) !== null && _operation$func !== void 0 && _operation$func.value) || typeof operation.func.value !== "function") {
-        throw new Error("Could not extract the method from the transaction envelope.");
-      }
-      var invokeContractArgs = operation.func.value();
-      if (!(invokeContractArgs !== null && invokeContractArgs !== void 0 && invokeContractArgs.functionName)) {
-        throw new Error("Could not extract the method name from the transaction envelope.");
-      }
+      var invokeContractArgs = AssembledTransaction.validateInvokeContractOp(built, options.contractId);
       var method = invokeContractArgs.functionName().toString("utf-8");
       var txn = new AssembledTransaction(_objectSpread(_objectSpread({}, options), {}, {
         method: method,

package/lib/minimal/horizon/horizon_axios_client.js

@@ -16,7 +16,7 @@ function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t =
 function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
 function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
 function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
-var version = exports.version = "14.6.1";
+var version = exports.version = "15.0.1";
 var SERVER_TIME_MAP = exports.SERVER_TIME_MAP = {};
 function toSeconds(ms) {
   return Math.floor(ms / 1000);

package/lib/minimal/rpc/axios.js

@@ -12,7 +12,7 @@ function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t =
 function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
 function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
 function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
-var version = exports.version = "14.6.1";
+var version = exports.version = "15.0.1";
 function createHttpClient(headers) {
   return (0, _httpClient.create)({
     headers: _objectSpread(_objectSpread({}, headers), {}, {

package/lib/minimal/webauth/challenge_transaction.js

@@ -98,7 +98,7 @@ function readChallengeTx(challengeTx, serverAccountID, networkPassphrase, homeDo
   }
   var _transaction$operatio = _toArray(transaction.operations),
     operation = _transaction$operatio[0],
-    subsequentOperations = _transaction$operatio.slice(1);
+    subsequentOperations = _arrayLikeToArray(_transaction$operatio).slice(1);
   if (!operation.source) {
     throw new _errors.InvalidChallengeError("The transaction's operation should contain a source account");
   }

package/lib/no-axios/bindings/client.js

@@ -65,7 +65,7 @@ var ClientGenerator = exports.ClientGenerator = function () {
       var name = (0, _utils.sanitizeIdentifier)(func.name().toString());
       var inputs = func.inputs().map(function (input) {
         return {
-          name: input.name().toString(),
+          name: (0, _utils.sanitizeIdentifier)(input.name().toString()),
           type: (0, _utils.parseTypeFromTypeDef)(input.type(), true)
         };
       });
@@ -77,7 +77,7 @@ var ClientGenerator = exports.ClientGenerator = function () {
   }, {
     key: "generateFromJSONMethod",
     value: function generateFromJSONMethod(func) {
-      var name = func.name().toString();
+      var name = (0, _utils.sanitizeIdentifier)(func.name().toString());
       var outputType = func.outputs().length > 0 ? (0, _utils.parseTypeFromTypeDef)(func.outputs()[0]) : "void";
       return "  ".concat(name, " : this.txFromJSON<").concat(outputType, ">");
     }
@@ -90,7 +90,7 @@ var ClientGenerator = exports.ClientGenerator = function () {
       }
       var inputs = constructorFunc.inputs().map(function (input) {
         return {
-          name: input.name().toString(),
+          name: (0, _utils.sanitizeIdentifier)(input.name().toString()),
           type: (0, _utils.parseTypeFromTypeDef)(input.type(), true)
         };
       });

package/lib/no-axios/bindings/types.js

@@ -82,7 +82,7 @@ var TypeGenerator = exports.TypeGenerator = function () {
       var name = (0, _utils.sanitizeIdentifier)(struct.name().toString());
       var doc = (0, _utils.formatJSDocComment)(struct.doc().toString() || "Struct: ".concat(name), 0);
       var fields = struct.fields().map(function (field) {
-        var fieldName = field.name().toString();
+        var fieldName = (0, _utils.sanitizeIdentifier)(field.name().toString());
         var fieldType = (0, _utils.parseTypeFromTypeDef)(field.type());
         var fieldDoc = (0, _utils.formatJSDocComment)(field.doc().toString(), 2);
         return "".concat(fieldDoc, "  ").concat(fieldName, ": ").concat(fieldType, ";");
@@ -100,9 +100,9 @@ var TypeGenerator = exports.TypeGenerator = function () {
       });
       var caseTypes = cases.map(function (c) {
         if (c.types.length > 0) {
-          return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  { tag: \"").concat(c.name, "\"; values: readonly [").concat(c.types.join(", "), "] }");
+          return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  { tag: \"").concat((0, _utils.escapeStringLiteral)(c.name), "\"; values: readonly [").concat(c.types.join(", "), "] }");
         }
-        return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  { tag: \"").concat(c.name, "\"; values: void }");
+        return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  { tag: \"").concat((0, _utils.escapeStringLiteral)(c.name), "\"; values: void }");
       }).join(" |\n");
       return "".concat(doc, " export type ").concat(name, " =\n").concat(caseTypes, ";");
     }
@@ -112,7 +112,7 @@ var TypeGenerator = exports.TypeGenerator = function () {
       var name = (0, _utils.sanitizeIdentifier)(enumEntry.name().toString());
       var doc = (0, _utils.formatJSDocComment)(enumEntry.doc().toString() || "Enum: ".concat(name), 0);
       var members = enumEntry.cases().map(function (enumCase) {
-        var caseName = enumCase.name().toString();
+        var caseName = (0, _utils.sanitizeIdentifier)(enumCase.name().toString());
         var caseValue = enumCase.value();
         var caseDoc = enumCase.doc().toString() || "Enum Case: ".concat(caseName);
         return "".concat((0, _utils.formatJSDocComment)(caseDoc, 2), "  ").concat(caseName, " = ").concat(caseValue);
@@ -129,7 +129,7 @@ var TypeGenerator = exports.TypeGenerator = function () {
         return _this3.generateEnumCase(enumCase);
       });
       var members = cases.map(function (c) {
-        return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  ").concat(c.value, " : { message: \"").concat(c.name, "\" }");
+        return "".concat((0, _utils.formatJSDocComment)(c.doc, 2), "  ").concat(c.value, " : { message: \"").concat((0, _utils.escapeStringLiteral)(c.name), "\" }");
       }).join(",\n");
       return "".concat(doc, "export const ").concat(name, " = {\n").concat(members, "\n}");
     }

package/lib/no-axios/bindings/utils.d.ts

@@ -6,6 +6,10 @@ export declare function isNameReserved(name: string): boolean;
  * @returns The sanitized identifier
  */
 export declare function sanitizeIdentifier(identifier: string): string;
+/**
+ * Escape a string for safe interpolation inside a double-quoted JavaScript string literal.
+ */
+export declare function escapeStringLiteral(str: string): string;
 /**
  * Generate TypeScript type from XDR type definition
  */

package/lib/no-axios/bindings/utils.js

@@ -3,6 +3,7 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
+exports.escapeStringLiteral = escapeStringLiteral;
 exports.formatImports = formatImports;
 exports.formatJSDocComment = formatJSDocComment;
 exports.generateTypeImports = generateTypeImports;
@@ -22,13 +23,20 @@ function isNameReserved(name) {
   return reservedNames.includes(name);
 }
 function sanitizeIdentifier(identifier) {
-  if (isNameReserved(identifier)) {
-    return identifier + "_";
+  var sanitized = identifier.replace(/[^a-zA-Z0-9_$]/g, "_");
+  if (isNameReserved(sanitized)) {
+    return sanitized + "_";
   }
-  if (/^\d/.test(identifier)) {
-    return "_" + identifier;
+  if (/^\d/.test(sanitized)) {
+    return "_" + sanitized;
   }
-  return identifier;
+  if (sanitized === "" || /^_+$/.test(sanitized)) {
+    return "_unnamed";
+  }
+  return sanitized;
+}
+function escapeStringLiteral(str) {
+  return str.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
 }
 function parseTypeFromTypeDef(typeDef) {
   var isFunctionInput = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : false;

package/lib/no-axios/contract/assembled_transaction.d.ts

@@ -301,6 +301,11 @@ export declare class AssembledTransaction<T> {
      * transaction. This only works with transactions that have been simulated.
      */
     toJSON(): string;
+    /**
+     * Validate that a built transaction is a single invokeContract operation
+     * targeting the expected contract, and return the parsed InvokeContractArgs.
+     */
+    private static validateInvokeContractOp;
     static fromJSON<T>(options: Omit<AssembledTransactionOptions<T>, "args">, { tx, simulationResult, simulationTransactionData, }: {
         tx: XDR_BASE64;
         simulationResult: {

package/lib/no-axios/contract/assembled_transaction.js

@@ -598,6 +598,38 @@ var AssembledTransaction = exports.AssembledTransaction = function () {
       return restoreFootprint;
     }())
   }], [{
+    key: "validateInvokeContractOp",
+    value: function validateInvokeContractOp(built, expectedContractId) {
+      if (built.operations.length !== 1) {
+        throw new Error("Transaction envelope must contain exactly one operation.");
+      }
+      var operation = built.operations[0];
+      if (operation.type !== "invokeHostFunction") {
+        throw new Error("Transaction envelope does not contain an invokeHostFunction operation.");
+      }
+      var invokeOp = operation;
+      if (invokeOp.func.switch().name !== "hostFunctionTypeInvokeContract") {
+        throw new Error("Transaction envelope does not contain an invokeContract host function.");
+      }
+      var invokeContractArgs = invokeOp.func.value();
+      var contractAddress;
+      var functionName;
+      try {
+        contractAddress = invokeContractArgs.contractAddress();
+        functionName = invokeContractArgs.functionName().toString("utf-8");
+      } catch (_unused) {
+        throw new Error("Could not extract contract address or method name from the transaction envelope.");
+      }
+      if (!contractAddress || !functionName) {
+        throw new Error("Could not extract contract address or method name from the transaction envelope.");
+      }
+      var xdrContractId = _stellarBase.Address.fromScAddress(contractAddress).toString();
+      if (xdrContractId !== expectedContractId) {
+        throw new Error("Transaction envelope targets contract ".concat(xdrContractId, ", but this Client is configured for ").concat(expectedContractId, "."));
+      }
+      return invokeContractArgs;
+    }
+  }, {
     key: "fromJSON",
     value: function fromJSON(options, _ref10) {
       var tx = _ref10.tx,
@@ -605,6 +637,11 @@ var AssembledTransaction = exports.AssembledTransaction = function () {
         simulationTransactionData = _ref10.simulationTransactionData;
       var txn = new AssembledTransaction(options);
       txn.built = _stellarBase.TransactionBuilder.fromXDR(tx, options.networkPassphrase);
+      var invokeContractArgs = AssembledTransaction.validateInvokeContractOp(txn.built, options.contractId);
+      var xdrMethod = invokeContractArgs.functionName().toString("utf-8");
+      if (xdrMethod !== options.method) {
+        throw new Error("Transaction envelope calls method '".concat(xdrMethod, "', but the provided method is '").concat(options.method, "'."));
+      }
       txn.simulationResult = {
         auth: simulationResult.auth.map(function (a) {
           return _stellarBase.xdr.SorobanAuthorizationEntry.fromXDR(a, "base64");
@@ -617,17 +654,9 @@ var AssembledTransaction = exports.AssembledTransaction = function () {
   }, {
     key: "fromXDR",
     value: function fromXDR(options, encodedXDR, spec) {
-      var _operation$func;
       var envelope = _stellarBase.xdr.TransactionEnvelope.fromXDR(encodedXDR, "base64");
       var built = _stellarBase.TransactionBuilder.fromXDR(envelope, options.networkPassphrase);
-      var operation = built.operations[0];
-      if (!(operation !== null && operation !== void 0 && (_operation$func = operation.func) !== null && _operation$func !== void 0 && _operation$func.value) || typeof operation.func.value !== "function") {
-        throw new Error("Could not extract the method from the transaction envelope.");
-      }
-      var invokeContractArgs = operation.func.value();
-      if (!(invokeContractArgs !== null && invokeContractArgs !== void 0 && invokeContractArgs.functionName)) {
-        throw new Error("Could not extract the method name from the transaction envelope.");
-      }
+      var invokeContractArgs = AssembledTransaction.validateInvokeContractOp(built, options.contractId);
       var method = invokeContractArgs.functionName().toString("utf-8");
       var txn = new AssembledTransaction(_objectSpread(_objectSpread({}, options), {}, {
         method: method,