@xyo-network/xl1-cli 1.17.3 → 1.17.7

package/dist/cli-min.mjs

@@ -76789,10 +76789,20 @@ var boundWitnessArrayPropertyContains = (bw, prop, value) => {
   return bw[prop]?.includes(value);
 };
 
+// src/lib/util/boundWitnessArrayPropertyContainsAll.ts
+var boundWitnessArrayPropertyContainsAll = (bw, prop, values) => {
+  return values.every((v) => bw[prop]?.includes(v));
+};
+
 // src/lib/addresses/addressesContains.ts
 var addressesContains = (bw, address) => {
   return boundWitnessArrayPropertyContains(bw, "addresses", address);
 };
+
+// src/lib/payloadHashes/payloadHashesContainsAll.ts
+var payloadHashesContainsAll = (bw, payloadHashes) => {
+  return boundWitnessArrayPropertyContainsAll(bw, "payload_hashes", payloadHashes);
+};
 var validateArraysSameLength = (a, b, message = "Array length mismatch") => {
   return a.length == b.length ? [] : [new Error(`${message} []`)];
 };
@@ -302056,6 +302066,19 @@ var validateBridgeEstimateExact = /* @__PURE__ */ __name$3(async (intent, transf
   if (await PayloadBuilder.dataHash(expectedTransferStatic) !== await PayloadBuilder.dataHash(actualTransferStatic)) return false;
   return true;
 }, "validateBridgeEstimateExact");
+var validateBridgeTransaction = /* @__PURE__ */ __name$3(async (signedTxBw, intent, transfer, config) => {
+  const { srcAddress } = intent;
+  const errors = await new BoundWitnessValidator(signedTxBw).validate();
+  if (isDefined(errors) && errors.length > 0) return false;
+  const sender = asAddress(srcAddress, true);
+  if (!addressesContains(signedTxBw, sender)) return false;
+  const hashes = await PayloadBuilder.hashes([
+    intent,
+    transfer
+  ]);
+  if (!payloadHashesContainsAll(signedTxBw, hashes)) return false;
+  return true;
+}, "validateBridgeTransaction");
 
 // src/server/routes/bridge/routeDefinitions/routes/bridgeToRemote.ts
 var makeBridgeToRemoteRoute = /* @__PURE__ */ __name$3((config) => {
@@ -302078,8 +302101,12 @@ var makeBridgeToRemoteRoute = /* @__PURE__ */ __name$3((config) => {
     path: "/bridge/chains/:chainId/bridgeToRemote",
     handlers: validateRequest2(async (req, res) => {
       const [signedTxBw, bridgeIntent, transfer] = req.body;
-      const { srcAddress } = bridgeIntent;
       const { node } = req.app;
+      const transactionValid = await validateBridgeTransaction(signedTxBw, bridgeIntent, transfer, config);
+      if (!transactionValid) {
+        res.status(400).send();
+        return;
+      }
       const estimateValid = await validateBridgeEstimateExact(bridgeIntent, transfer, config);
       if (!estimateValid) {
         res.status(400).send();
@@ -311055,7 +311082,7 @@ var waitForHostPort = /* @__PURE__ */ __name((host, port) => {
 
 // src/runCLI.ts
 var configuration;
-var version = isDefined("1.17.2") ? "1.17.2" : "unknown";
+var version = isDefined("1.17.6") ? "1.17.6" : "unknown";
 var getContextFromConfig = /* @__PURE__ */ __name(async (configuration2) => {
   const logger = initLogger(configuration2);
   const orchestrator = await Orchestrator.create({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xyo-network/xl1-cli",
-  "version": "1.17.3",
+  "version": "1.17.7",
   "description": "XYO Layer One CLI",
   "homepage": "https://xylabs.com",
   "bugs": {
@@ -64,8 +64,8 @@
     "@rollup/plugin-node-resolve": "^16.0.3",
     "@xylabs/sdk-js": "~5.0.51",
     "@xylabs/telemetry": "~5.0.51",
-    "@xylabs/ts-scripts-yarn3": "~7.2.8",
-    "@xylabs/tsconfig": "~7.2.8",
+    "@xylabs/ts-scripts-yarn3": "~7.2.30",
+    "@xylabs/tsconfig": "~7.2.30",
     "@xylabs/vitest-extended": "~5.0.51",
     "@xyo-network/account-model": "~5.2.17",
     "@xyo-network/archivist-lmdb": "~5.2.17",
@@ -75,7 +75,7 @@
     "@xyo-network/payload-model": "~5.2.17",
     "@xyo-network/wallet": "~5.2.17",
     "@xyo-network/wallet-model": "~5.2.17",
-    "@xyo-network/xl1-cli-lib": "~1.17.3",
+    "@xyo-network/xl1-cli-lib": "~1.17.7",
     "@xyo-network/xl1-protocol": "~1.14.17",
     "async-mutex": "~0.5.0",
     "dotenv": "~17.2.3",