@anywalletkit/extension-kit 0.1.1 → 0.1.3

package/dist/index.js

@@ -40,6 +40,22 @@ var VAULT_DEFAULT_ITERATIONS = 6e5;
 var VAULT_SCRYPT = { N: 1 << 17, r: 8, p: 1 };
 var VAULT_MIN_SCRYPT = { N: 1 << 14, r: 8, p: 1 };
 var VAULT_MIN_PASSWORD_LENGTH = 8;
+var VAULT_LIMITS = Object.freeze({
+  /** scrypt cost: 2^20 × 16 = 2 GiB is the most any envelope may ask for. */
+  scrypt: Object.freeze({ N: 1 << 20, r: 16, p: 4 }),
+  /** PBKDF2-SHA256 iterations (v1 envelopes). */
+  iterations: 5e6,
+  /** Sealed secrets in one vault. */
+  secrets: 1e3,
+  /** Registered passkeys. */
+  passkeys: 32,
+  /** Plaintext bytes of one secret (`setSecret`). */
+  secretBytes: 16 * 1024,
+  /** base64 characters of one sealed box (iv or data). */
+  boxChars: 32 * 1024,
+  /** JSON characters of the whole envelope. */
+  envelopeChars: 4 * 1024 * 1024
+});
 var SALT_BYTES = 32;
 var IV_BYTES = 12;
 var DEK_BYTES = 32;
@@ -51,6 +67,8 @@ var aadSecret = (id) => `forgewallet-vault/secret/${id}`;
 var HKDF_INFO = "forgewallet-vault/2/passkey";
 var Vault = class {
   _storage;
+  /** Every read-modify-write of the envelope runs here, one after another (a parallel write would drop the other's change). */
+  _queue = Promise.resolve();
   _kdf;
   _iterations;
   _scrypt;
@@ -63,10 +81,11 @@ var Vault = class {
     this._scrypt = options.scrypt ?? VAULT_SCRYPT;
     this._onProgress = options.onProgress;
     this._crypto = options.crypto ?? globalThis.crypto;
-    if (!Number.isInteger(this._iterations) || this._iterations < VAULT_MIN_ITERATIONS) {
-      throw new VaultError(`PBKDF2 iterations must be an integer \u2265 ${VAULT_MIN_ITERATIONS}`, "invalid-input");
+    if (!Number.isInteger(this._iterations) || this._iterations < VAULT_MIN_ITERATIONS || this._iterations > VAULT_LIMITS.iterations) {
+      throw new VaultError(`PBKDF2 iterations must be an integer from ${VAULT_MIN_ITERATIONS} to ${VAULT_LIMITS.iterations}`, "invalid-input");
     }
     if (!isStrongScrypt(this._scrypt)) throw new VaultError(`scrypt cost must be at least N=${VAULT_MIN_SCRYPT.N} r=${VAULT_MIN_SCRYPT.r} p=${VAULT_MIN_SCRYPT.p} (N a power of two)`, "invalid-input");
+    if (!isBoundedScrypt(this._scrypt)) throw new VaultError(`scrypt cost must be at most N=${VAULT_LIMITS.scrypt.N} r=${VAULT_LIMITS.scrypt.r} p=${VAULT_LIMITS.scrypt.p}`, "invalid-input");
   }
   async exists() {
     return await this._storage.get() !== null;
@@ -85,10 +104,12 @@ var Vault = class {
    */
   async create(password) {
     requirePassword(password, VAULT_MIN_PASSWORD_LENGTH);
-    if (await this.exists()) throw new VaultError("A vault already exists; unlock it or reset explicitly.", "exists");
-    const dek = this._random(DEK_BYTES);
-    await this._storage.set(await this._sealEnvelope(password, dek, {}, [], Date.now()));
-    return dek;
+    return this._exclusive(async () => {
+      if (await this.exists()) throw new VaultError("A vault already exists; unlock it or reset explicitly.", "exists");
+      const dek = this._random(DEK_BYTES);
+      await this._write(await this._sealEnvelope(password, dek, {}, [], Date.now()));
+      return dek;
+    });
   }
   /**
    * Derive the KEK from `password`, unseal and return the DEK. `wrong-password` on
@@ -97,6 +118,9 @@ var Vault = class {
    */
   async unlock(password) {
     requirePassword(password);
+    return this._exclusive(() => this._unlock(password));
+  }
+  async _unlock(password) {
     const envelope = await this._load();
     if (isEnvelopeV1(envelope)) {
       if (envelope.kdf.iterations < VAULT_MIN_ITERATIONS) throw new VaultError(`The vault's KDF (${envelope.kdf.iterations} iterations) is below the floor this build accepts.`, "weak-kdf");
@@ -104,7 +128,7 @@ var Vault = class {
       const dek = await this._open(kek2, envelope.dek, aadDekV1(envelope.kdf), "wrong-password");
       if (this._kdf === "scrypt") {
         const next = await this._sealEnvelope(password, dek, envelope.secrets, [], envelope.createdAt);
-        await this._storage.set(isEnvelopeV2(next) ? { ...next, upgradedAt: Date.now() } : next);
+        await this._write(isEnvelopeV2(next) ? { ...next, upgradedAt: Date.now() } : next);
       }
       return dek;
     }
@@ -115,15 +139,18 @@ var Vault = class {
   /** Re-wrap the DEK under a new password (fresh salt, current KDF). Secrets and passkeys are untouched. */
   async changePassword(oldPassword, newPassword) {
     requirePassword(newPassword, VAULT_MIN_PASSWORD_LENGTH);
-    const dek = await this.unlock(oldPassword);
-    try {
-      const envelope = await this._load();
-      const passkeys = isEnvelopeV2(envelope) ? envelope.passkeys : [];
-      const next = await this._sealEnvelope(newPassword, dek, envelope.secrets, passkeys, envelope.createdAt);
-      await this._storage.set(isEnvelopeV2(envelope) && envelope.upgradedAt !== void 0 && isEnvelopeV2(next) ? { ...next, upgradedAt: envelope.upgradedAt } : next);
-    } finally {
-      zeroize(dek);
-    }
+    requirePassword(oldPassword);
+    return this._exclusive(async () => {
+      const dek = await this._unlock(oldPassword);
+      try {
+        const envelope = await this._load();
+        const passkeys = isEnvelopeV2(envelope) ? envelope.passkeys : [];
+        const next = await this._sealEnvelope(newPassword, dek, envelope.secrets, passkeys, envelope.createdAt);
+        await this._write(isEnvelopeV2(envelope) && envelope.upgradedAt !== void 0 && isEnvelopeV2(next) ? { ...next, upgradedAt: envelope.upgradedAt } : next);
+      } finally {
+        zeroize(dek);
+      }
+    });
   }
   // ---- passkeys (v2) ----
   /** Public view of the registered passkeys (ids, labels; whether each can verify assertions). */
@@ -149,21 +176,24 @@ var Vault = class {
     try {
       requireId(passkey.id);
       if (passkey.prf.length !== PRF_BYTES) throw new VaultError(`A PRF output is ${PRF_BYTES} bytes.`, "invalid-input");
-      const envelope = await this._load();
-      if (!isEnvelopeV2(envelope)) throw new VaultError("Unlock with the password once so the vault is upgraded before adding a passkey.", "unsupported-envelope");
-      if (envelope.passkeys.some((p) => p.id === passkey.id)) throw new VaultError("This passkey is already registered.", "exists");
-      await this._requireDek(dek, envelope);
-      const key = await this._derivePasskeyKek(passkey.prf, passkey.id);
-      const entry = { id: passkey.id, label: passkey.label.slice(0, 64), createdAt: Date.now(), dek: await this._seal(key, dek, aadPasskey(passkey.id)) };
-      if (passkey.publicKey && passkey.alg !== void 0) {
-        entry.publicKey = passkey.publicKey;
-        entry.alg = passkey.alg;
-      }
-      await this._storage.set({ ...envelope, passkeys: [...envelope.passkeys, entry] });
+      await this._exclusive(() => this._addPasskey(dek, passkey));
     } finally {
       zeroize(passkey.prf);
     }
   }
+  async _addPasskey(dek, passkey) {
+    const envelope = await this._load();
+    if (!isEnvelopeV2(envelope)) throw new VaultError("Unlock with the password once so the vault is upgraded before adding a passkey.", "unsupported-envelope");
+    if (envelope.passkeys.some((p) => p.id === passkey.id)) throw new VaultError("This passkey is already registered.", "exists");
+    await this._requireDek(dek, envelope);
+    const key = await this._derivePasskeyKek(passkey.prf, passkey.id);
+    const entry = { id: passkey.id, label: passkey.label.slice(0, 64), createdAt: Date.now(), dek: await this._seal(key, dek, aadPasskey(passkey.id)) };
+    if (passkey.publicKey && passkey.alg !== void 0) {
+      entry.publicKey = passkey.publicKey;
+      entry.alg = passkey.alg;
+    }
+    await this._write({ ...envelope, passkeys: [...envelope.passkeys, entry] });
+  }
   /** Unseal the DEK with a passkey's PRF output. `wrong-password` when the box does not open, `missing` when the id is unknown. */
   async unlockWithPasskey(id, prf) {
     try {
@@ -181,9 +211,11 @@ var Vault = class {
   }
   async removePasskey(id) {
     requireId(id);
-    const envelope = await this._load();
-    if (!isEnvelopeV2(envelope)) return;
-    await this._storage.set({ ...envelope, passkeys: envelope.passkeys.filter((p) => p.id !== id) });
+    return this._exclusive(async () => {
+      const envelope = await this._load();
+      if (!isEnvelopeV2(envelope)) return;
+      await this._write({ ...envelope, passkeys: envelope.passkeys.filter((p) => p.id !== id) });
+    });
   }
   // ---- secrets ----
   async listSecretIds() {
@@ -193,10 +225,16 @@ var Vault = class {
   /** Seal `secret` under the DEK as `sourceId` (overwrites an entry with the same id). */
   async setSecret(dek, sourceId, secret) {
     requireId(sourceId);
-    const envelope = await this._load();
+    if (secret.length > VAULT_LIMITS.secretBytes) throw new VaultError(`A secret is at most ${VAULT_LIMITS.secretBytes} bytes.`, "invalid-input");
     const key = await this._importDek(dek);
-    const box = await this._seal(key, secret, aadSecret(sourceId));
-    await this._storage.set({ ...envelope, secrets: { ...envelope.secrets, [sourceId]: box } });
+    return this._exclusive(async () => {
+      const envelope = await this._load();
+      if (!(sourceId in envelope.secrets) && Object.keys(envelope.secrets).length >= VAULT_LIMITS.secrets) {
+        throw new VaultError(`A vault holds at most ${VAULT_LIMITS.secrets} secrets.`, "invalid-input");
+      }
+      const box = await this._seal(key, secret, aadSecret(sourceId));
+      await this._write({ ...envelope, secrets: { ...envelope.secrets, [sourceId]: box } });
+    });
   }
   /** Unseal one secret. `null` when the id is unknown; the caller zeroizes the result after use. */
   async getSecret(dek, sourceId) {
@@ -209,15 +247,29 @@ var Vault = class {
   }
   async deleteSecret(sourceId) {
     requireId(sourceId);
-    const envelope = await this._load();
-    if (!(sourceId in envelope.secrets)) return;
-    const secrets = { ...envelope.secrets };
-    delete secrets[sourceId];
-    await this._storage.set({ ...envelope, secrets });
+    return this._exclusive(async () => {
+      const envelope = await this._load();
+      if (!(sourceId in envelope.secrets)) return;
+      const secrets = { ...envelope.secrets };
+      delete secrets[sourceId];
+      await this._write({ ...envelope, secrets });
+    });
   }
   /** Remove the whole vault. The explicit destructive flow only (back up → wipe → create). */
   async destroy() {
-    await this._storage.clear();
+    return this._exclusive(() => this._storage.clear());
+  }
+  // ---- serialized writes ----
+  _exclusive(fn) {
+    const run = this._queue.then(fn);
+    this._queue = run.catch(() => void 0);
+    return run;
+  }
+  /** Store an envelope this build will open again (bounds checked before it is written). */
+  async _write(envelope) {
+    const problem = envelopeProblem(envelope);
+    if (problem) throw new VaultError(`The vault would exceed its limits (${problem}); nothing was written.`, "invalid-input");
+    await this._storage.set(envelope);
   }
   // ---- crypto ----
   _random(n) {
@@ -293,6 +345,8 @@ var Vault = class {
     const envelope = await this._storage.get();
     if (!envelope) throw new VaultError("No vault in this storage area.", "missing");
     if (!isEnvelopeV1(envelope) && !isEnvelopeV2(envelope)) throw new VaultError("Unsupported vault envelope.", "unsupported-envelope");
+    const problem = envelopeProblem(envelope);
+    if (problem) throw new VaultError(`The vault envelope is outside the limits this build opens (${problem}).`, "unsupported-envelope");
     return envelope;
   }
 };
@@ -311,6 +365,22 @@ function isEnvelopeV2(x) {
 function isBox(x) {
   return typeof x === "object" && x !== null && typeof x.iv === "string" && typeof x.data === "string";
 }
+function isBoundedScrypt(c) {
+  return c.N <= VAULT_LIMITS.scrypt.N && c.r <= VAULT_LIMITS.scrypt.r && c.p <= VAULT_LIMITS.scrypt.p;
+}
+function envelopeProblem(e) {
+  if (e.v === 1 && e.kdf.iterations > VAULT_LIMITS.iterations) return `PBKDF2 iterations ${e.kdf.iterations} > ${VAULT_LIMITS.iterations}`;
+  if (e.v === 2 && !isBoundedScrypt(e.kdf)) return `scrypt N=${e.kdf.N} r=${e.kdf.r} p=${e.kdf.p} above N=${VAULT_LIMITS.scrypt.N} r=${VAULT_LIMITS.scrypt.r} p=${VAULT_LIMITS.scrypt.p}`;
+  const secrets = Object.values(e.secrets);
+  if (secrets.length > VAULT_LIMITS.secrets) return `${secrets.length} secrets > ${VAULT_LIMITS.secrets}`;
+  const passkeys = e.v === 2 ? e.passkeys : [];
+  if (passkeys.length > VAULT_LIMITS.passkeys) return `${passkeys.length} passkeys > ${VAULT_LIMITS.passkeys}`;
+  for (const box of [e.dek, ...secrets, ...passkeys.map((p) => p.dek)]) {
+    if (box.iv.length > VAULT_LIMITS.boxChars || box.data.length > VAULT_LIMITS.boxChars) return `a sealed box above ${VAULT_LIMITS.boxChars} characters`;
+  }
+  if (JSON.stringify(e).length > VAULT_LIMITS.envelopeChars) return `envelope above ${VAULT_LIMITS.envelopeChars} characters`;
+  return null;
+}
 function isStrongScrypt(c) {
   return Number.isInteger(c.N) && c.N >= VAULT_MIN_SCRYPT.N && (c.N & c.N - 1) === 0 && Number.isInteger(c.r) && c.r >= VAULT_MIN_SCRYPT.r && Number.isInteger(c.p) && c.p >= VAULT_MIN_SCRYPT.p;
 }
@@ -355,6 +425,13 @@ var Session = class {
   _alarm;
   _now;
   _onLock = /* @__PURE__ */ new Set();
+  /**
+   * Every operation on the stored record runs here, one after another: a `touch` that read the
+   * record before a `lock` removed it would otherwise write it back and undo the lock.
+   */
+  _queue = Promise.resolve();
+  /** Bumped by every lock; a `touch` writes only when no lock happened since it read the record. */
+  _epoch = 0;
   constructor(options) {
     this._storage = options.storage;
     this._alarms = options.alarms;
@@ -370,20 +447,19 @@ var Session = class {
   /** Store the DEK and arm the auto-lock. The caller's copy is zeroized. */
   async unlock(dek) {
     if (dek.length !== 32) throw new VaultError("Vault key must be 32 bytes.", "invalid-input");
-    const expiresAt = this._expiry();
-    await this._storage.set(this._key, { key: toBase64(dek), expiresAt });
-    zeroize2(dek);
-    await this._arm(expiresAt);
+    return this._serial(async () => {
+      const expiresAt = this._expiry();
+      await this._storage.set(this._key, { key: toBase64(dek), expiresAt });
+      zeroize2(dek);
+      await this._arm(expiresAt);
+    });
   }
   /** Forget the DEK and cancel the alarm. Safe to call when already locked. */
   async lock() {
-    const was = await this._storage.get(this._key);
-    await this._storage.remove(this._key);
-    await this._alarms.clear(this._alarm);
-    if (was !== void 0 && was !== null) for (const cb of this._onLock) cb();
+    return this._serial(() => this._lockNow());
   }
   async isUnlocked() {
-    return await this._read() !== null;
+    return this._serial(async () => await this._read() !== null);
   }
   /**
    * The DEK for one operation (zeroize it after). `locked` when there is none or the
@@ -391,17 +467,22 @@ var Session = class {
    * a missed alarm cannot keep the key alive.
    */
   async getKey() {
-    const record = await this._read();
-    if (!record) throw new VaultError("Wallet is locked.", "locked");
-    return fromBase64(record.key);
+    return this._serial(async () => {
+      const record = await this._read();
+      if (!record) throw new VaultError("Wallet is locked.", "locked");
+      return fromBase64(record.key);
+    });
   }
   /** User activity: push the auto-lock out again. No-op when locked. */
   async touch() {
-    const record = await this._read();
-    if (!record) return;
-    const expiresAt = this._expiry();
-    await this._storage.set(this._key, { ...record, expiresAt });
-    await this._arm(expiresAt);
+    return this._serial(async () => {
+      const epoch = this._epoch;
+      const record = await this._read();
+      if (!record || epoch !== this._epoch) return;
+      const expiresAt = this._expiry();
+      await this._storage.set(this._key, { ...record, expiresAt });
+      await this._arm(expiresAt);
+    });
   }
   get autoLockMs() {
     return this._autoLockMs;
@@ -416,6 +497,19 @@ var Session = class {
     this._onLock.add(callback);
     return () => this._onLock.delete(callback);
   }
+  _serial(fn) {
+    const run = this._queue.then(fn);
+    this._queue = run.catch(() => void 0);
+    return run;
+  }
+  /** The lock itself; callers are already in the queue. */
+  async _lockNow() {
+    this._epoch++;
+    const was = await this._storage.get(this._key);
+    await this._storage.remove(this._key);
+    await this._alarms.clear(this._alarm);
+    if (was !== void 0 && was !== null) for (const cb of this._onLock) cb();
+  }
   _expiry() {
     return this._autoLockMs > 0 ? this._now() + this._autoLockMs : Number.POSITIVE_INFINITY;
   }
@@ -427,7 +521,7 @@ var Session = class {
     const raw = await this._storage.get(this._key);
     if (!raw || typeof raw.key !== "string" || typeof raw.expiresAt !== "number") return null;
     if (raw.expiresAt <= this._now()) {
-      await this.lock();
+      await this._lockNow();
       return null;
     }
     return raw;
@@ -1074,6 +1168,7 @@ function memoryApprovalWindow() {
 }
 
 // src/router.ts
+import { UserRejectedError } from "@anywalletkit/core";
 var RouterError = class _RouterError extends Error {
   code;
   data;
@@ -1087,11 +1182,35 @@ var RouterError = class _RouterError extends Error {
     return new _RouterError(e.code, e.message, e.data);
   }
 };
-function toRelayError(e) {
-  if (e instanceof RouterError) return e.data === void 0 ? { code: e.code, message: e.message } : { code: e.code, message: e.message, data: e.data };
-  if (e instanceof ReviewDeclined) return { code: e.code, message: e.message };
-  const code = typeof e?.code === "number" ? e.code : RELAY_ERRORS.internal;
-  return { code, message: e instanceof Error ? e.message : String(e) };
+var PROVIDER_CODES = /* @__PURE__ */ new Set([4001, 4100, 4200, 4900, 4901, 4902]);
+var isNodeCode = (code) => typeof code === "number" && Number.isInteger(code) && (code === 3 || code >= -32768 && code <= -32e3);
+var URL_RE = /\b[a-z][a-z0-9+.-]*:\/\/[^\s"'<>()]+/gi;
+var pageText = (text) => text.replace(URL_RE, "[url]").split("\n")[0].slice(0, 300);
+var isHexData = (v) => typeof v === "string" && /^0x[0-9a-fA-F]*$/.test(v) && v.length <= 2 + 2 * 8192;
+function nodeError(e) {
+  for (let cur = e, depth = 0; cur && typeof cur === "object" && depth < 8; cur = cur.cause, depth++) {
+    const o = cur;
+    if (o.name === "RpcRequestError" && isNodeCode(o.code)) {
+      const text = typeof o.details === "string" && o.details ? o.details : typeof o.shortMessage === "string" ? o.shortMessage : "RPC error";
+      return { code: o.code, message: pageText(text), ...isHexData(o.data) ? { data: o.data } : {} };
+    }
+  }
+  if (!(e instanceof Error) && typeof e === "object" && e !== null) {
+    const o = e;
+    if (isNodeCode(o.code) && typeof o.message === "string") return { code: o.code, message: pageText(o.message), ...isHexData(o.data) ? { data: o.data } : {} };
+  }
+  return void 0;
+}
+function toRelayError(e, options = {}) {
+  if (e instanceof RouterError) return e.data === void 0 ? { code: e.code, message: pageText(e.message) } : { code: e.code, message: pageText(e.message), data: e.data };
+  if (e instanceof ReviewDeclined) return { code: e.code, message: pageText(e.message) };
+  if (e instanceof UserRejectedError) return { code: RELAY_ERRORS.userRejected, message: pageText(e.message) };
+  const node = nodeError(e);
+  if (node) return node;
+  const code = e?.code;
+  if (e instanceof Error && typeof code === "number" && PROVIDER_CODES.has(code)) return { code, message: pageText(e.message) };
+  options.log?.(e);
+  return { code: RELAY_ERRORS.internal, message: "Internal error" };
 }
 var READ_METHODS = /* @__PURE__ */ new Set([
   "eth_blockNumber",
@@ -1344,6 +1463,10 @@ function describeSiwe(text, ctx) {
 }
 
 // src/signing.ts
+var safeNonce = (n) => {
+  if (n < 0n || n > BigInt(Number.MAX_SAFE_INTEGER)) throw new Error(`The RPC returned an impossible nonce (${n}).`);
+  return Number(n.toString());
+};
 var ADDRESS = /^0x[0-9a-fA-F]{40}$/;
 var HEX = /^0x([0-9a-fA-F]{2})*$/;
 var lc = (s) => s.toLowerCase();
@@ -1439,13 +1562,13 @@ async function prepareTransaction(deps, network, from, tx) {
   const base = block?.baseFeePerGas != null ? big(block.baseFeePerGas) : null;
   if (base === null) {
     const gasPrice = big(await deps.rpc(network, "eth_gasPrice", []));
-    return { chainId: network.chainId, nonce: Number(big(nonceHex)), gasLimit: hex(gasLimit), gasPrice: hex(gasPrice), maxFee: (gasLimit * gasPrice).toString() };
+    return { chainId: network.chainId, nonce: safeNonce(big(nonceHex)), gasLimit: hex(gasLimit), gasPrice: hex(gasPrice), maxFee: (gasLimit * gasPrice).toString() };
   }
   const floor = deps.tipFloor?.(network.chainId) ?? MIN_TIP_WEI;
   const nodeTip = await deps.rpc(network, "eth_maxPriorityFeePerGas", []).then(big).catch(() => 0n);
   const tip = nodeTip > floor ? nodeTip : floor;
   const maxFeePerGas = base * 2n + tip;
-  return { chainId: network.chainId, nonce: Number(big(nonceHex)), gasLimit: hex(gasLimit), maxFeePerGas: hex(maxFeePerGas), maxPriorityFeePerGas: hex(tip), maxFee: (gasLimit * maxFeePerGas).toString() };
+  return { chainId: network.chainId, nonce: safeNonce(big(nonceHex)), gasLimit: hex(gasLimit), maxFeePerGas: hex(maxFeePerGas), maxPriorityFeePerGas: hex(tip), maxFee: (gasLimit * maxFeePerGas).toString() };
 }
 function createSignHandler(deps) {
   return async ({ origin, network, method, params, accounts }) => {
@@ -2201,6 +2324,7 @@ export {
   TRON_PROVIDERS,
   TonConnectError,
   VAULT_DEFAULT_ITERATIONS,
+  VAULT_LIMITS,
   VAULT_MIN_ITERATIONS,
   VAULT_MIN_PASSWORD_LENGTH,
   VAULT_MIN_SCRYPT,