@aztec/wallets 5.0.1 → 5.1.0-nightly.20260717

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -39,6 +39,13 @@ export interface OpenEncryptedEmbeddedStoresOptions {
39
39
  * @internal
40
40
  */
41
41
  export type OpenSqliteEncryptedStoreFn = (log: Logger, name: string, poolDirectory: string | undefined, encryptionKey: Uint8Array) => Promise<AztecSQLiteOPFSStore>;
42
+ /**
43
+ * Internal seam for tests to inject a fake store wiper. Defaults to removing the store's OPFS pool directory
44
+ * outright. Not part of the public API.
45
+ *
46
+ * @internal
47
+ */
48
+ export type WipeSqliteStoreFn = (poolDirectory: string | undefined) => Promise<void>;
42
49
  /**
43
50
  * Opens the PXE and wallet stores in sequence, both encrypted with keys obtained from `getEncryptionKey`.
44
51
  *
@@ -60,8 +67,8 @@ export type OpenSqliteEncryptedStoreFn = (log: Logger, name: string, poolDirecto
60
67
  * @param log - Logger for both stores.
61
68
  * @param openStore - Internal test seam. Do not pass in production code.
62
69
  */
63
- export declare function openEncryptedEmbeddedStores(config: OpenEncryptedEmbeddedStoresOptions, getEncryptionKey: () => Promise<Uint8Array>, log: Logger, openStore?: OpenSqliteEncryptedStoreFn): Promise<{
70
+ export declare function openEncryptedEmbeddedStores(config: OpenEncryptedEmbeddedStoresOptions, getEncryptionKey: () => Promise<Uint8Array>, log: Logger, openStore?: OpenSqliteEncryptedStoreFn, wipeStore?: WipeSqliteStoreFn): Promise<{
64
71
  pxeStore: AztecSQLiteOPFSStore;
65
72
  walletStore: AztecSQLiteOPFSStore;
66
73
  }>;
67
- //# sourceMappingURL=data:application/json;base64,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
74
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic3RvcmVfZW5jcnlwdGlvbi5kLnRzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL2VtYmVkZGVkL3N0b3JlX2VuY3J5cHRpb24udHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUE7Ozs7Ozs7O0dBUUc7QUFDSCxPQUFPLEtBQUssRUFBRSxNQUFNLEVBQUUsTUFBTSx1QkFBdUIsQ0FBQztBQUNwRCxPQUFPLEVBQUUsb0JBQW9CLEVBQXlCLHFCQUFxQixFQUFFLE1BQU0sNkJBQTZCLENBQUM7QUFFakgsZ0VBQWdFO0FBQ2hFLE1BQU0sTUFBTSxpQkFBaUIsR0FBRyxLQUFLLEdBQUcsUUFBUSxDQUFDO0FBRWpEOzs7R0FHRztBQUNILHFCQUFhLDZCQUE4QixTQUFRLEtBQUs7SUFDdEQsUUFBUSxDQUFDLFNBQVMsRUFBRSxpQkFBaUIsQ0FBQztJQUV0QyxZQUFZLFNBQVMsRUFBRSxpQkFBaUIsRUFBRSxJQUFJLEVBQUU7UUFBRSxLQUFLLEVBQUUscUJBQXFCLENBQUE7S0FBRSxFQUkvRTtDQUNGO0FBRUQsNkRBQTZEO0FBQzdELE1BQU0sV0FBVyxrQ0FBa0M7SUFDakQsR0FBRyxFQUFFO1FBQUUsSUFBSSxFQUFFLE1BQU0sQ0FBQztRQUFDLGFBQWEsQ0FBQyxFQUFFLE1BQU0sQ0FBQTtLQUFFLENBQUM7SUFDOUMsTUFBTSxFQUFFO1FBQUUsSUFBSSxFQUFFLE1BQU0sQ0FBQztRQUFDLGFBQWEsQ0FBQyxFQUFFLE1BQU0sQ0FBQTtLQUFFLENBQUM7Q0FDbEQ7QUFFRDs7Ozs7R0FLRztBQUNILE1BQU0sTUFBTSwwQkFBMEIsR0FBRyxDQUN2QyxHQUFHLEVBQUUsTUFBTSxFQUNYLElBQUksRUFBRSxNQUFNLEVBQ1osYUFBYSxFQUFFLE1BQU0sR0FBRyxTQUFTLEVBQ2pDLGFBQWEsRUFBRSxVQUFVLEtBQ3RCLE9BQU8sQ0FBQyxvQkFBb0IsQ0FBQyxDQUFDO0FBS25DOzs7OztHQUtHO0FBQ0gsTUFBTSxNQUFNLGlCQUFpQixHQUFHLENBQUMsYUFBYSxFQUFFLE1BQU0sR0FBRyxTQUFTLEtBQUssT0FBTyxDQUFDLElBQUksQ0FBQyxDQUFDO0FBaUJyRjs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7R0FvQkc7QUFDSCx3QkFBc0IsMkJBQTJCLENBQy9DLE1BQU0sRUFBRSxrQ0FBa0MsRUFDMUMsZ0JBQWdCLEVBQUUsTUFBTSxPQUFPLENBQUMsVUFBVSxDQUFDLEVBQzNDLEdBQUcsRUFBRSxNQUFNLEVBQ1gsU0FBUyxHQUFFLDBCQUE2QyxFQUN4RCxTQUFTLEdBQUUsaUJBQW9DLEdBQzlDLE9BQU8sQ0FBQztJQUFFLFFBQVEsRUFBRSxvQkFBb0IsQ0FBQztJQUFDLFdBQVcsRUFBRSxvQkFBb0IsQ0FBQTtDQUFFLENBQUMsQ0FXaEYifQ==
@@ -1 +1 @@
1
- {"version":3,"file":"store_encryption.d.ts","sourceRoot":"","sources":["../../src/embedded/store_encryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAE1F,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEjD;;;GAGG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAEtC,YAAY,SAAS,EAAE,iBAAiB,EAAE,IAAI,EAAE;QAAE,KAAK,EAAE,qBAAqB,CAAA;KAAE,EAI/E;CACF;AAED,6DAA6D;AAC7D,MAAM,WAAW,kCAAkC;IACjD,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED;;;;;GAKG;AACH,MAAM,MAAM,0BAA0B,GAAG,CACvC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,aAAa,EAAE,UAAU,KACtB,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAKnC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,kCAAkC,EAC1C,gBAAgB,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,EAC3C,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,0BAA6C,GACvD,OAAO,CAAC;IAAE,QAAQ,EAAE,oBAAoB,CAAC;IAAC,WAAW,EAAE,oBAAoB,CAAA;CAAE,CAAC,CAWhF"}
1
+ {"version":3,"file":"store_encryption.d.ts","sourceRoot":"","sources":["../../src/embedded/store_encryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAyB,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEjH,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEjD;;;GAGG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAEtC,YAAY,SAAS,EAAE,iBAAiB,EAAE,IAAI,EAAE;QAAE,KAAK,EAAE,qBAAqB,CAAA;KAAE,EAI/E;CACF;AAED,6DAA6D;AAC7D,MAAM,WAAW,kCAAkC;IACjD,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED;;;;;GAKG;AACH,MAAM,MAAM,0BAA0B,GAAG,CACvC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,aAAa,EAAE,UAAU,KACtB,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAKnC;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAiBrF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,kCAAkC,EAC1C,gBAAgB,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,EAC3C,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,0BAA6C,EACxD,SAAS,GAAE,iBAAoC,GAC9C,OAAO,CAAC;IAAE,QAAQ,EAAE,oBAAoB,CAAC;IAAC,WAAW,EAAE,oBAAoB,CAAA;CAAE,CAAC,CAWhF"}
@@ -6,7 +6,7 @@
6
6
  * - `storeName: 'pxe' | 'wallet'`, telling callers WHICH store failed.
7
7
  * - Cleanup: when the wallet store fails to open, ensures the already-opened PXE store is closed before the error
8
8
  * surfaces, so callers don't leak the SAH Pool's OPFS lock.
9
- */ import { AztecSQLiteOPFSStore, SqliteEncryptionError } from '@aztec/kv-store/sqlite-opfs';
9
+ */ import { AztecSQLiteOPFSStore, SqliteCorruptionError, SqliteEncryptionError } from '@aztec/kv-store/sqlite-opfs';
10
10
  /**
11
11
  * Thrown by {@link openEncryptedEmbeddedStores} when one of the two stores cannot be decrypted with the supplied
12
12
  * key. The original {@link SqliteEncryptionError} is preserved as `cause`.
@@ -21,6 +21,21 @@
21
21
  }
22
22
  }
23
23
  const defaultOpenStore = (log, name, poolDirectory, encryptionKey)=>AztecSQLiteOPFSStore.open(log, name, false, poolDirectory, encryptionKey);
24
+ /**
25
+ * Deletes a store's OPFS pool directory. Safe to call only after a *failed* open() — a live store's SAH pool holds
26
+ * a lock on the directory and the removal would reject. A store with no `poolDirectory` lives in the shared default
27
+ * pool, which we won't blow away (it would take unrelated stores with it), so wiping is a no-op there.
28
+ */ const defaultWipeStore = async (poolDirectory)=>{
29
+ if (!poolDirectory) {
30
+ return;
31
+ }
32
+ const root = await navigator.storage.getDirectory();
33
+ await root.removeEntry(poolDirectory, {
34
+ recursive: true
35
+ }).catch(()=>{
36
+ // Already gone / never created — nothing to wipe.
37
+ });
38
+ };
24
39
  /**
25
40
  * Opens the PXE and wallet stores in sequence, both encrypted with keys obtained from `getEncryptionKey`.
26
41
  *
@@ -41,10 +56,10 @@ const defaultOpenStore = (log, name, poolDirectory, encryptionKey)=>AztecSQLiteO
41
56
  * detaches on transfer, so each call must allocate).
42
57
  * @param log - Logger for both stores.
43
58
  * @param openStore - Internal test seam. Do not pass in production code.
44
- */ export async function openEncryptedEmbeddedStores(config, getEncryptionKey, log, openStore = defaultOpenStore) {
45
- const pxeStore = await openOneStore('pxe', config.pxe, getEncryptionKey, log, openStore);
59
+ */ export async function openEncryptedEmbeddedStores(config, getEncryptionKey, log, openStore = defaultOpenStore, wipeStore = defaultWipeStore) {
60
+ const pxeStore = await openOneStore('pxe', config.pxe, getEncryptionKey, log, openStore, wipeStore);
46
61
  try {
47
- const walletStore = await openOneStore('wallet', config.wallet, getEncryptionKey, log, openStore);
62
+ const walletStore = await openOneStore('wallet', config.wallet, getEncryptionKey, log, openStore, wipeStore);
48
63
  return {
49
64
  pxeStore,
50
65
  walletStore
@@ -56,7 +71,7 @@ const defaultOpenStore = (log, name, poolDirectory, encryptionKey)=>AztecSQLiteO
56
71
  throw err;
57
72
  }
58
73
  }
59
- async function openOneStore(storeName, { name, poolDirectory }, getEncryptionKey, log, openStore) {
74
+ async function openOneStore(storeName, { name, poolDirectory }, getEncryptionKey, log, openStore, wipeStore) {
60
75
  const key = await getEncryptionKey();
61
76
  try {
62
77
  return await openStore(log, name, poolDirectory, key);
@@ -66,6 +81,16 @@ async function openOneStore(storeName, { name, poolDirectory }, getEncryptionKey
66
81
  cause: err
67
82
  });
68
83
  }
84
+ if (err instanceof SqliteCorruptionError) {
85
+ // A corrupt image is unrecoverable — no key or retry against the same bytes brings it back. Self-heal
86
+ // instead of dead-ending forever: wipe the store's OPFS directory (safe — the failed open left no SAH-pool
87
+ // lock behind) and reopen a fresh, empty one, so callers see a normal first-run rather than a permanent
88
+ // "database disk image is malformed" on every open.
89
+ log.warn(`Embedded wallet '${storeName}' store is corrupt (${err.message}); wiping and reopening fresh`);
90
+ await wipeStore(poolDirectory);
91
+ // open() transferred (detached) the previous key buffer, so fetch a fresh one for the reopen.
92
+ return await openStore(log, name, poolDirectory, await getEncryptionKey());
93
+ }
69
94
  throw err;
70
95
  }
71
96
  }
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aztec/wallets",
3
3
  "homepage": "https://github.com/AztecProtocol/aztec-packages/tree/master/yarn-project/wallets",
4
- "version": "5.0.1",
4
+ "version": "5.1.0-nightly.20260717",
5
5
  "type": "module",
6
6
  "exports": {
7
7
  "./embedded": {
@@ -28,16 +28,16 @@
28
28
  "../package.common.json"
29
29
  ],
30
30
  "dependencies": {
31
- "@aztec/accounts": "5.0.1",
32
- "@aztec/aztec.js": "5.0.1",
33
- "@aztec/entrypoints": "5.0.1",
34
- "@aztec/foundation": "5.0.1",
35
- "@aztec/kv-store": "5.0.1",
36
- "@aztec/protocol-contracts": "5.0.1",
37
- "@aztec/pxe": "5.0.1",
38
- "@aztec/standard-contracts": "5.0.1",
39
- "@aztec/stdlib": "5.0.1",
40
- "@aztec/wallet-sdk": "5.0.1"
31
+ "@aztec/accounts": "5.1.0-nightly.20260717",
32
+ "@aztec/aztec.js": "5.1.0-nightly.20260717",
33
+ "@aztec/entrypoints": "5.1.0-nightly.20260717",
34
+ "@aztec/foundation": "5.1.0-nightly.20260717",
35
+ "@aztec/kv-store": "5.1.0-nightly.20260717",
36
+ "@aztec/protocol-contracts": "5.1.0-nightly.20260717",
37
+ "@aztec/pxe": "5.1.0-nightly.20260717",
38
+ "@aztec/standard-contracts": "5.1.0-nightly.20260717",
39
+ "@aztec/stdlib": "5.1.0-nightly.20260717",
40
+ "@aztec/wallet-sdk": "5.1.0-nightly.20260717"
41
41
  },
42
42
  "devDependencies": {
43
43
  "@jest/globals": "^30.0.0",
@@ -8,7 +8,7 @@
8
8
  * surfaces, so callers don't leak the SAH Pool's OPFS lock.
9
9
  */
10
10
  import type { Logger } from '@aztec/foundation/log';
11
- import { AztecSQLiteOPFSStore, SqliteEncryptionError } from '@aztec/kv-store/sqlite-opfs';
11
+ import { AztecSQLiteOPFSStore, SqliteCorruptionError, SqliteEncryptionError } from '@aztec/kv-store/sqlite-opfs';
12
12
 
13
13
  /** Which of the embedded wallet's two stores failed to open. */
14
14
  export type EmbeddedStoreName = 'pxe' | 'wallet';
@@ -49,6 +49,29 @@ export type OpenSqliteEncryptedStoreFn = (
49
49
  const defaultOpenStore: OpenSqliteEncryptedStoreFn = (log, name, poolDirectory, encryptionKey) =>
50
50
  AztecSQLiteOPFSStore.open(log, name, false, poolDirectory, encryptionKey);
51
51
 
52
+ /**
53
+ * Internal seam for tests to inject a fake store wiper. Defaults to removing the store's OPFS pool directory
54
+ * outright. Not part of the public API.
55
+ *
56
+ * @internal
57
+ */
58
+ export type WipeSqliteStoreFn = (poolDirectory: string | undefined) => Promise<void>;
59
+
60
+ /**
61
+ * Deletes a store's OPFS pool directory. Safe to call only after a *failed* open() — a live store's SAH pool holds
62
+ * a lock on the directory and the removal would reject. A store with no `poolDirectory` lives in the shared default
63
+ * pool, which we won't blow away (it would take unrelated stores with it), so wiping is a no-op there.
64
+ */
65
+ const defaultWipeStore: WipeSqliteStoreFn = async poolDirectory => {
66
+ if (!poolDirectory) {
67
+ return;
68
+ }
69
+ const root = await navigator.storage.getDirectory();
70
+ await root.removeEntry(poolDirectory, { recursive: true }).catch(() => {
71
+ // Already gone / never created — nothing to wipe.
72
+ });
73
+ };
74
+
52
75
  /**
53
76
  * Opens the PXE and wallet stores in sequence, both encrypted with keys obtained from `getEncryptionKey`.
54
77
  *
@@ -75,10 +98,11 @@ export async function openEncryptedEmbeddedStores(
75
98
  getEncryptionKey: () => Promise<Uint8Array>,
76
99
  log: Logger,
77
100
  openStore: OpenSqliteEncryptedStoreFn = defaultOpenStore,
101
+ wipeStore: WipeSqliteStoreFn = defaultWipeStore,
78
102
  ): Promise<{ pxeStore: AztecSQLiteOPFSStore; walletStore: AztecSQLiteOPFSStore }> {
79
- const pxeStore = await openOneStore('pxe', config.pxe, getEncryptionKey, log, openStore);
103
+ const pxeStore = await openOneStore('pxe', config.pxe, getEncryptionKey, log, openStore, wipeStore);
80
104
  try {
81
- const walletStore = await openOneStore('wallet', config.wallet, getEncryptionKey, log, openStore);
105
+ const walletStore = await openOneStore('wallet', config.wallet, getEncryptionKey, log, openStore, wipeStore);
82
106
  return { pxeStore, walletStore };
83
107
  } catch (err) {
84
108
  // Cleanup is best-effort — if close() itself throws (e.g. worker already dead), swallow it so the original error
@@ -94,6 +118,7 @@ async function openOneStore(
94
118
  getEncryptionKey: () => Promise<Uint8Array>,
95
119
  log: Logger,
96
120
  openStore: OpenSqliteEncryptedStoreFn,
121
+ wipeStore: WipeSqliteStoreFn,
97
122
  ): Promise<AztecSQLiteOPFSStore> {
98
123
  const key = await getEncryptionKey();
99
124
  try {
@@ -102,6 +127,16 @@ async function openOneStore(
102
127
  if (err instanceof SqliteEncryptionError && err.code === 'decrypt_failed') {
103
128
  throw new EmbeddedWalletEncryptionError(storeName, { cause: err });
104
129
  }
130
+ if (err instanceof SqliteCorruptionError) {
131
+ // A corrupt image is unrecoverable — no key or retry against the same bytes brings it back. Self-heal
132
+ // instead of dead-ending forever: wipe the store's OPFS directory (safe — the failed open left no SAH-pool
133
+ // lock behind) and reopen a fresh, empty one, so callers see a normal first-run rather than a permanent
134
+ // "database disk image is malformed" on every open.
135
+ log.warn(`Embedded wallet '${storeName}' store is corrupt (${err.message}); wiping and reopening fresh`);
136
+ await wipeStore(poolDirectory);
137
+ // open() transferred (detached) the previous key buffer, so fetch a fresh one for the reopen.
138
+ return await openStore(log, name, poolDirectory, await getEncryptionKey());
139
+ }
105
140
  throw err;
106
141
  }
107
142
  }