fix(caip): add input validation to createCaip10AccountId

packages/caip/src/caips/caip-10.test.ts

@@ -20,4 +20,19 @@ describe("createCaip10AccountId", () => {
       "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp:FNoGHiv7DKPLXHfuhiEWpJ8qYitawGkuaYwfYkuvFk1P",
     )
   })
+
+  it("throws for invalid chain ID", () => {
+    expect(() =>
+      createCaip10AccountId(
+        "bad" as any,
+        "0x1234567890123456789012345678901234567890",
+      ),
+    ).toThrow("Invalid CAIP-2 chain ID")
+  })
+
+  it("throws for invalid account address", () => {
+    expect(() => createCaip10AccountId("eip155:1", "")).toThrow(
+      "Invalid CAIP-10 account address",
+    )
+  })
 })

packages/caip/src/caips/caip-10.ts

@@ -1,5 +1,6 @@
 import {
   caip2ChainIdPattern,
+  caip2ChainIdRegex,
   type Caip2ChainId,
   type Caip2ChainIdParts,
 } from "./caip-2"
@@ -37,6 +38,12 @@ export function createCaip10AccountId(
   chainId: Caip2ChainId,
   address: string,
 ): Caip10AccountId {
+  if (!caip2ChainIdRegex.test(chainId)) {
+    throw new Error(`Invalid CAIP-2 chain ID: ${chainId}`)
+  }
+  if (!caip10AccountAddressRegex.test(address)) {
+    throw new Error(`Invalid CAIP-10 account address: ${address}`)
+  }
   return `${chainId}:${address}`
 }