phantasma-sdk-ts 0.2.0-rc.10 → 0.2.0-rc.11

package/dist/core/types/Carbon/Blockchain/Modules/Builders/TokenMetadataBuilder.d.ts

@@ -1,4 +1,7 @@
 export declare class TokenMetadataBuilder {
+    private static readonly iconDataUriPrefixPattern;
+    private static readonly base64PayloadPattern;
     static buildAndSerialize(fields?: Record<string, string>): Uint8Array;
+    private static validateIcon;
 }
 //# sourceMappingURL=TokenMetadataBuilder.d.ts.map

package/dist/core/types/Carbon/Blockchain/Modules/Builders/TokenMetadataBuilder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TokenMetadataBuilder.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/types/Carbon/Blockchain/Modules/Builders/TokenMetadataBuilder.ts"],"names":[],"mappings":"AAGA,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,UAAU;CA2BtE"}
+{"version":3,"file":"TokenMetadataBuilder.d.ts","sourceRoot":"","sources":["../../../../../../../src/core/types/Carbon/Blockchain/Modules/Builders/TokenMetadataBuilder.ts"],"names":[],"mappings":"AAGA,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CACF;IAC9C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAA4B;IAExE,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,UAAU;IA8BrE,OAAO,CAAC,MAAM,CAAC,YAAY;CAiC5B"}

package/dist/core/types/Carbon/Blockchain/Modules/Builders/TokenMetadataBuilder.js

@@ -13,6 +13,7 @@ class TokenMetadataBuilder {
         if (missing.length > 0) {
             throw new Error(`Token metadata is missing required fields: ${missing.join(', ')}`);
         }
+        this.validateIcon(fields['icon']);
         const metadataFields = [];
         for (const [key, value] of Object.entries(fields)) {
             metadataFields.push(Vm_1.VmNamedDynamicVariable.from(key, Vm_1.VmType.String, value));
@@ -23,5 +24,37 @@ class TokenMetadataBuilder {
         struct.write(wMetadata);
         return wMetadata.toUint8Array();
     }
+    static validateIcon(icon) {
+        const candidate = icon?.trim();
+        if (!candidate || candidate.length === 0) {
+            throw new Error('Token metadata icon must be a base64-encoded data URI (PNG, JPEG, or SVG)');
+        }
+        if (!this.iconDataUriPrefixPattern.test(candidate)) {
+            throw new Error('Token metadata icon must be a base64-encoded data URI (PNG, JPEG, or SVG)');
+        }
+        const payload = candidate.slice(candidate.indexOf(',') + 1).trim();
+        if (!payload) {
+            throw new Error('Token metadata icon must include a non-empty base64 payload');
+        }
+        if (!this.base64PayloadPattern.test(payload) || payload.length % 4 !== 0) {
+            throw new Error('Token metadata icon payload is not valid base64');
+        }
+        try {
+            const decoded = Buffer.from(payload, 'base64');
+            if (decoded.length === 0) {
+                throw new Error('Token metadata icon must include a non-empty base64 payload');
+            }
+            const normalizedPayload = decoded.toString('base64').replace(/=+$/, '');
+            const normalizedInput = payload.replace(/=+$/, '');
+            if (normalizedPayload !== normalizedInput) {
+                throw new Error('Token metadata icon payload is not valid base64');
+            }
+        }
+        catch (err) {
+            throw new Error('Token metadata icon payload is not valid base64');
+        }
+    }
 }
 exports.TokenMetadataBuilder = TokenMetadataBuilder;
+TokenMetadataBuilder.iconDataUriPrefixPattern = /^data:image\/(png|jpeg|svg\+xml);base64,/i;
+TokenMetadataBuilder.base64PayloadPattern = /^[A-Za-z0-9+/]+={0,2}$/;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phantasma-sdk-ts",
-  "version": "0.2.0-rc.10",
+  "version": "0.2.0-rc.11",
   "description": "Javascript SDK for interacting with the Phantasma Chain",
   "author": "Phantasma Team",
   "main": "dist/index.js",