apinow-sdk 0.28.0 → 0.28.2

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+export declare const APINOW_SDK_VERSION = "0.28.2";
 export interface CallOptions {
     method?: 'GET' | 'POST' | 'PUT' | 'DELETE';
     body?: Record<string, any>;

package/dist/index.js

@@ -2,6 +2,7 @@ import { x402Client, wrapFetchWithPayment } from '@x402/fetch';
 import { registerExactEvmScheme } from '@x402/evm/exact/client';
 import { privateKeyToAccount } from 'viem/accounts';
 const APINOW_BASE = 'https://apinow.fun';
+export const APINOW_SDK_VERSION = '0.28.2';
 function isServerConfig(c) {
     return 'privateKey' in c && typeof c.privateKey === 'string';
 }
@@ -86,10 +87,31 @@ export function createClient(config) {
     async function signAuthHeader() {
         const issuedAt = new Date().toISOString();
         const nonce = Math.random().toString(36).slice(2) + Date.now().toString(36);
-        const message = `APINow auth\naddress: ${address}\nissuedAt: ${issuedAt}\nnonce: ${nonce}`;
-        const signature = await signMessage(message);
+        // Single-line format: Chrome's fetch() rejects header values containing
+        // raw newlines ("Failed to execute 'fetch' on 'Window': Invalid value").
+        // Server parses via regex so space-separated works identically.
+        const message = `APINow auth | address: ${address} | issuedAt: ${issuedAt} | nonce: ${nonce}`;
+        const signature = String(await signMessage(message));
+        const authorization = `Bearer ${message}||${signature}||${address}`;
+        // Guard against any character that Chrome's fetch() rejects in header
+        // values — pre-throw with a readable message rather than letting the
+        // browser fail with the opaque "Invalid value" error.
+        const bad = /[\r\n\0]/;
+        if (bad.test(authorization)) {
+            const offender = bad.exec(authorization)?.[0];
+            // eslint-disable-next-line no-console
+            console.error('[apinow-sdk] bad char in Authorization header', {
+                messageLen: message.length,
+                sigLen: signature.length,
+                offenderCode: offender?.charCodeAt(0),
+                messagePreview: message.slice(0, 80),
+            });
+            throw new Error(`apinow-sdk: signed Authorization header contains a control char (code ${offender?.charCodeAt(0)}). ` +
+                `This usually means the wallet signer returned a malformed signature. ` +
+                `sigLen=${signature.length} messageLen=${message.length}`);
+        }
         return {
-            Authorization: `Bearer ${message}||${signature}||${address}`,
+            Authorization: authorization,
             'x-wallet-address': address,
         };
     }
@@ -99,15 +121,26 @@ export function createClient(config) {
      */
     async function authedFetch(url, init = {}) {
         const authHeaders = await signAuthHeader();
-        const res = await fetch(url, {
-            ...init,
-            headers: {
-                ...(init.body ? { 'Content-Type': 'application/json' } : {}),
-                ...authHeaders,
-                ...init.headers,
-            },
-        });
-        return res;
+        const headers = {
+            ...(init.body ? { 'Content-Type': 'application/json' } : {}),
+            ...authHeaders,
+            ...init.headers,
+        };
+        try {
+            return await fetch(url, { ...init, headers });
+        }
+        catch (err) {
+            // eslint-disable-next-line no-console
+            console.error('[apinow-sdk] authedFetch failed', {
+                sdkVersion: APINOW_SDK_VERSION,
+                url,
+                method: init.method || 'GET',
+                headerKeys: Object.keys(headers),
+                headerLens: Object.fromEntries(Object.entries(headers).map(([k, v]) => [k, String(v).length])),
+                err: err?.message,
+            });
+            throw err;
+        }
     }
     async function authedJson(url, init = {}) {
         const res = await authedFetch(url, init);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apinow-sdk",
-  "version": "0.28.0",
+  "version": "0.28.2",
   "description": "Pay-per-call API SDK & CLI for APINow.fun — endpoints + workflows, wraps x402 so you don't have to",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",