@totemsdk/chain-provider 0.1.4 → 0.1.5

package/dist/providers/hosted.js

@@ -12,9 +12,25 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HostedProvider = void 0;
+function sanitizeRpcParam(value, name) {
+    if (value.length > 1024) {
+        throw new Error(`RPC parameter ${name} exceeds maximum length (1024)`);
+    }
+    if (/[\x00-\x1f\x7f]/.test(value)) {
+        throw new Error(`RPC parameter ${name} contains control characters`);
+    }
+    const trimmed = value.trim();
+    if (trimmed.length === 0) {
+        throw new Error(`RPC parameter ${name} is empty after trimming`);
+    }
+    return trimmed;
+}
 class HostedProvider {
     constructor(config) {
         this.baseUrl = config.baseUrl.replace(/\/$/, '');
+        if (!this.baseUrl.startsWith('https://')) {
+            throw new Error('HostedProvider requires HTTPS — credentials sent via x-api-key header');
+        }
         this.apiKey = config.apiKey;
         this.timeoutMs = config.timeoutMs ?? 30000;
     }
@@ -105,7 +121,8 @@ class HostedProvider {
     }
     async getCoin(coinId) {
         try {
-            const coins = await this.rpc(`coins coinid:${coinId}`);
+            const clean = sanitizeRpcParam(coinId, 'coinId');
+            const coins = await this.rpc(`coins coinid:${clean}`);
             const u = Array.isArray(coins) ? coins[0] : null;
             if (!u)
                 return null;
@@ -131,7 +148,8 @@ class HostedProvider {
      * Get MMR proof for a coin via Minima `coinproof` RPC command.
      */
     async getProof(coinId) {
-        const data = await this.rpc(`coinproof coinid:${coinId}`);
+        const clean = sanitizeRpcParam(coinId, 'coinId');
+        const data = await this.rpc(`coinproof coinid:${clean}`);
         return { coinid: coinId, data };
     }
     /**
@@ -150,7 +168,8 @@ class HostedProvider {
      * Get token info via Minima `tokens tokenid:X` RPC command.
      */
     async getToken(tokenId) {
-        const data = await this.rpc(`tokens tokenid:${tokenId}`);
+        const clean = sanitizeRpcParam(tokenId, 'tokenId');
+        const data = await this.rpc(`tokens tokenid:${clean}`);
         const t = Array.isArray(data) ? data[0] : data;
         if (!t)
             throw new Error(`Token not found: ${tokenId}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@totemsdk/chain-provider",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Unified ChainStateProvider interface for Totem SDK — Hosted, PureMinima, Composite",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -11,22 +11,27 @@
       "import": "./dist/index.js"
     }
   },
+  "scripts": {
+    "build": "tsc",
+    "prepare": "tsc",
+    "clean": "rm -rf dist",
+    "test": "jest --passWithNoTests"
+  },
   "files": [
     "dist",
     "README.md",
     "LICENSE"
   ],
   "dependencies": {
-    "@totemsdk/core": "1.1.0",
-    "@totemsdk/pureminima-rpc": "0.1.3"
+    "@totemsdk/core": "^1.1.0",
+    "@totemsdk/pureminima-rpc": "^0.1.3"
   },
   "devDependencies": {
-    "@noble/hashes": "^2.2.0",
-    "@types/jest": "^29.0.0",
+    "@types/jest": "^30.0.0",
     "@types/node": "^20.0.0",
-    "jest": "^29.0.0",
+    "jest": "^30.4.2",
     "ts-jest": "^29.0.0",
-    "typescript": "^5.0.0"
+    "typescript": "^7.0.2"
   },
   "engines": {
     "node": ">=18.0.0"
@@ -36,13 +41,13 @@
   },
   "license": "MIT",
   "author": "Totem SDK",
-  "homepage": "https://totemsdk.com",
+  "homepage": "https://totem.ing",
   "bugs": {
-    "url": "https://github.com/MrGheek/axia-totem/issues"
+    "url": "https://github.com/totem-sdk/totem-sdk/issues"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/MrGheek/axia-totem.git",
+    "url": "git+https://github.com/totem-sdk/totem-sdk.git",
     "directory": "packages/totem-sdk/packages/chain-provider"
   },
   "keywords": [
@@ -59,10 +64,5 @@
     "provider",
     "chain-data",
     "strategy-pattern"
-  ],
-  "scripts": {
-    "build": "tsc",
-    "clean": "rm -rf dist",
-    "test": "jest --passWithNoTests"
-  }
-}
+  ]
+}

package/dist/providers/lookup.d.ts

@@ -1,20 +0,0 @@
-/**
- * LookupNodeProvider — stub.
- *
- * Full implementation lives in @totemsdk/lookup-client which replaces this
- * stub once the lookup node package is available.
- */
-import type { ChainStateProvider, CoinsQuery, Coin, MMRProof, ChainTip, TokenInfo, TokenSearchQuery, BroadcastResult } from '../types.js';
-export declare class LookupNodeNotImplementedError extends Error {
-    constructor();
-}
-export declare class LookupNodeProvider implements ChainStateProvider {
-    getCoins(_query: CoinsQuery): Promise<Coin[]>;
-    getCoin(_coinId: string): Promise<Coin | null>;
-    getProof(_coinId: string): Promise<MMRProof>;
-    getTip(): Promise<ChainTip>;
-    getToken(_tokenId: string): Promise<TokenInfo>;
-    searchTokens(_query: TokenSearchQuery): Promise<TokenInfo[]>;
-    getTokensByCreator(_address: string): Promise<TokenInfo[]>;
-    broadcastTxPoW(_txpowHex: string): Promise<BroadcastResult>;
-}

package/dist/providers/lookup.js

@@ -1,45 +0,0 @@
-"use strict";
-/**
- * LookupNodeProvider — stub.
- *
- * Full implementation lives in @totemsdk/lookup-client which replaces this
- * stub once the lookup node package is available.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LookupNodeProvider = exports.LookupNodeNotImplementedError = void 0;
-class LookupNodeNotImplementedError extends Error {
-    constructor() {
-        super('LookupNodeProvider is not yet implemented. ' +
-            'Install @totemsdk/lookup-client and use LookupClientProvider instead. ' +
-            'See https://github.com/Totem/totem-sdk for setup instructions.');
-        this.name = 'LookupNodeNotImplementedError';
-    }
-}
-exports.LookupNodeNotImplementedError = LookupNodeNotImplementedError;
-class LookupNodeProvider {
-    getCoins(_query) {
-        throw new LookupNodeNotImplementedError();
-    }
-    getCoin(_coinId) {
-        throw new LookupNodeNotImplementedError();
-    }
-    getProof(_coinId) {
-        throw new LookupNodeNotImplementedError();
-    }
-    getTip() {
-        throw new LookupNodeNotImplementedError();
-    }
-    getToken(_tokenId) {
-        throw new LookupNodeNotImplementedError();
-    }
-    searchTokens(_query) {
-        throw new LookupNodeNotImplementedError();
-    }
-    getTokensByCreator(_address) {
-        throw new LookupNodeNotImplementedError();
-    }
-    broadcastTxPoW(_txpowHex) {
-        throw new LookupNodeNotImplementedError();
-    }
-}
-exports.LookupNodeProvider = LookupNodeProvider;