@bitgo-beta/sdk-core 8.2.1-beta.202 → 8.2.1-beta.2021

package/dist/test/unit/bitgo/wallet/safeGetUserPrv.js

@@ -0,0 +1,671 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * @prettier
+ */
+require("should");
+const sinon = __importStar(require("sinon"));
+const utxo_lib_1 = require("@bitgo-beta/utxo-lib");
+const src_1 = require("../../../../src");
+const baseCoin_1 = require("../../../../src/bitgo/baseCoin");
+require('should-sinon');
+describe('WCN-1200 safe child getUserPrv root-fetch detour', function () {
+    const prv = 'xprv9s21ZrQH143K3hekyNj7TciR4XNYe1kMj68W2ipjJGNHETWP7o42AjDnSPgKhdZ4x8NBAvaL72RrXjuXNdmkMqLERZza73oYugGtbLFXG8g';
+    const softDerivedNode = baseCoin_1.BaseCoin.deriveKeyWithSeedBip32(utxo_lib_1.bip32.fromBase58(prv), '123');
+    if (!softDerivedNode.key.privateKey) {
+        throw new Error('expected deriveKeyWithSeedBip32 to return a private key');
+    }
+    const softDerivedPrv = softDerivedNode.key.toBase58();
+    const hardened = (0, src_1.deriveSafeChildHardenedFromXprv)(prv, '123');
+    const passphrase = 'test-passphrase';
+    const rootKeyId = 'root-key-id';
+    let mockBitGo;
+    let mockBaseCoin;
+    let keychainsGetStub;
+    let encryptStub;
+    let decryptStub;
+    const baseWalletData = {
+        id: 'wallet-id',
+        coin: 'tbtc',
+        keys: ['user-key', 'backup-key', 'bitgo-key'],
+        type: 'hot',
+        multisigType: 'onchain',
+        enterprise: 'ent-id',
+    };
+    beforeEach(function () {
+        keychainsGetStub = sinon.stub();
+        encryptStub = sinon.stub();
+        decryptStub = sinon.stub();
+        mockBitGo = {
+            encrypt: encryptStub,
+            decrypt: decryptStub,
+            url: sinon.stub().returns('https://test.bitgo.com/'),
+            setRequestTracer: sinon.stub(),
+        };
+        mockBaseCoin = {
+            getChain: sinon.stub().returns('tbtc'),
+            getFamily: sinon.stub().returns('btc'),
+            getFullName: sinon.stub().returns('Test Bitcoin'),
+            keychains: sinon.stub().returns({
+                get: keychainsGetStub,
+                getKeysForSigning: sinon.stub().resolves([]),
+            }),
+            deriveKeyWithSeed: sinon.stub().callsFake(({ key, seed }) => {
+                if (key === prv && seed === '123') {
+                    return { key: softDerivedPrv, derivationPath: 'm/999999/...' };
+                }
+                return { key: `derived(${key},${seed})`, derivationPath: 'm/0' };
+            }),
+            url: sinon.stub().callsFake((path) => `https://test.bitgo.com/api/v2/tbtc${path}`),
+            supportsStaking: sinon.stub().returns(false),
+            supportsTss: sinon.stub().returns(false),
+            getMPCAlgorithm: sinon.stub(),
+            keyIdsForSigning: sinon.stub().returns([0, 1, 2]),
+        };
+        decryptStub.callsFake(({ input, password }) => {
+            if (password !== passphrase) {
+                return null;
+            }
+            if (typeof input === 'string' && input.startsWith('enc:')) {
+                return input.slice(4);
+            }
+            return null;
+        });
+    });
+    afterEach(function () {
+        sinon.restore();
+    });
+    function makeWallet(overrides = {}) {
+        return new src_1.Wallet(mockBitGo, mockBaseCoin, {
+            ...baseWalletData,
+            ...overrides,
+        });
+    }
+    describe('safeDerivation', function () {
+        it('builds the hardened path from the sequential mint index', function () {
+            (0, src_1.getSafeHardenedDerivationPath)(123).should.eql("m/123'");
+            (0, src_1.getSafeHardenedDerivationPath)('0').should.eql("m/0'");
+        });
+        it('rejects a non-integer index', function () {
+            (() => (0, src_1.getSafeHardenedDerivationPath)('abc')).should.throw(/Invalid safe derivation index/);
+            (() => (0, src_1.getSafeHardenedDerivationPath)('')).should.throw(/Invalid safe derivation index/);
+            (() => (0, src_1.getSafeHardenedDerivationPath)('1e2')).should.throw(/Invalid safe derivation index/);
+        });
+        it('hardened-derives a child that differs from soft deriveKeyWithSeed', function () {
+            hardened.derivationPath.should.eql("m/123'");
+            hardened.prv.should.not.eql(softDerivedPrv);
+        });
+        it('parses derivedFromParentWithHardenedPath as m/<n> primed', function () {
+            (0, src_1.parseDerivedFromParentWithHardenedPath)("m/0'").should.eql(0);
+            (0, src_1.parseDerivedFromParentWithHardenedPath)("m/123'").should.eql(123);
+            (() => (0, src_1.parseDerivedFromParentWithHardenedPath)('m/0')).should.throw(/derivedFromParentWithHardenedPath/);
+            (() => (0, src_1.parseDerivedFromParentWithHardenedPath)('m/999999/a/b')).should.throw(/derivedFromParentWithHardenedPath/);
+            (() => (0, src_1.parseDerivedFromParentWithHardenedPath)("not-a-path'")).should.throw(/derivedFromParentWithHardenedPath/);
+            (() => (0, src_1.parseDerivedFromParentWithHardenedPath)("m/0''")).should.throw(/derivedFromParentWithHardenedPath/);
+        });
+    });
+    describe('fetchRootKeychainForSafeChild', function () {
+        it('throws when child keychain has no parent', async function () {
+            await (0, src_1.fetchRootKeychainForSafeChild)(mockBaseCoin.keychains(), {
+                id: 'child-key',
+                type: 'independent',
+                pub: 'child-pub',
+            }).should.be.rejectedWith('childKeychain.parent is required to fetch the root keychain');
+            keychainsGetStub.notCalled.should.be.true();
+        });
+        it('throws InvalidRootKeychainSourceError when root source is backup', async function () {
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'backup',
+                encryptedPrv: 'enc:root',
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            await (0, src_1.fetchRootKeychainForSafeChild)(mockBaseCoin.keychains(), {
+                id: 'child-key',
+                parent: rootKeyId,
+                type: 'independent',
+                pub: 'child-pub',
+            }).should.be.rejectedWith(src_1.InvalidRootKeychainSourceError);
+        });
+        it('returns the root keychain when source is user', async function () {
+            const root = {
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: 'enc:root',
+                type: 'independent',
+                pub: 'root-pub',
+            };
+            keychainsGetStub.resolves(root);
+            const result = await (0, src_1.fetchRootKeychainForSafeChild)(mockBaseCoin.keychains(), {
+                id: 'child-key',
+                parent: rootKeyId,
+                type: 'independent',
+                pub: 'child-pub',
+            });
+            result.should.eql(root);
+        });
+        it('throws when root keychain has no encryptedPrv', async function () {
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            await (0, src_1.fetchRootKeychainForSafeChild)(mockBaseCoin.keychains(), {
+                id: 'child-key',
+                parent: rootKeyId,
+                type: 'independent',
+                pub: 'child-pub',
+            }).should.be.rejectedWith(/does not have property encryptedPrv/);
+        });
+    });
+    describe('getUserPrv', function () {
+        it('throws when keychain has no encryptedPrv on a non-safe wallet', async function () {
+            const wallet = makeWallet();
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'pub',
+                    type: 'independent',
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith('keychain does not have property encryptedPrv');
+        });
+        it('throws for a non-safe wallet even when keychain has parent', async function () {
+            const wallet = makeWallet();
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'pub',
+                    type: 'independent',
+                    parent: rootKeyId,
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith('keychain does not have property encryptedPrv');
+            keychainsGetStub.notCalled.should.be.true();
+        });
+        it('throws for a safe wallet when keychain has no parent', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'pub',
+                    type: 'independent',
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith('keychain does not have property encryptedPrv');
+            keychainsGetStub.notCalled.should.be.true();
+        });
+        it('fetches root and hardened-derives child key for safe owner', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            const result = await wallet.getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: hardened.pub,
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithHardenedPath: "m/123'",
+                },
+                walletPassphrase: passphrase,
+            });
+            result.should.eql(hardened.prv);
+            result.should.not.eql(softDerivedPrv);
+            keychainsGetStub.calledOnceWithExactly({ id: rootKeyId }).should.be.true();
+            mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
+        });
+        it('requires derivedFromParentWithHardenedPath on the child keychain', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: hardened.pub,
+                    type: 'independent',
+                    parent: rootKeyId,
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith(/missing derivedFromParentWithHardenedPath/);
+        });
+        it('fails closed when derivedFromParentWithHardenedPath does not match the registered pub', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: hardened.pub,
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithHardenedPath: "m/0'",
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith(src_1.SafeDerivedPublicKeyMismatchError);
+        });
+        it('rejects a malformed derivedFromParentWithHardenedPath', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: hardened.pub,
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithHardenedPath: "not-a-path'",
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith(/derivedFromParentWithHardenedPath/);
+        });
+        it('fails closed for TSS safe owner instead of returning the root prv', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', multisigType: 'tss' });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'unrelated-child-pub',
+                    type: 'tss',
+                    parent: rootKeyId,
+                    derivedFromParentWithSeed: '123',
+                    commonKeychain: 'ck',
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith(src_1.SafeOwnerSigningNotImplementedError);
+            keychainsGetStub.notCalled.should.be.true();
+            mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
+        });
+        it('fails closed for ed25519 onchain safe owner instead of BIP32-deriving', async function () {
+            mockBaseCoin.getFamily.returns('xlm');
+            const wallet = makeWallet({ safe: 'safe-id-1', coin: 'txlm' });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'child-pub',
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithSeed: '123',
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith(src_1.SafeOwnerSigningNotImplementedError);
+            keychainsGetStub.notCalled.should.be.true();
+            mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
+        });
+        it('aborts locally when derived pub does not match registered child pub', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'xpub-wrong-registered-key',
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithHardenedPath: "m/123'",
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith(src_1.SafeDerivedPublicKeyMismatchError);
+        });
+        it('decrypts child encryptedPrv as-is for wallet sharee (hardened child prv)', async function () {
+            const childPrv = 'child-level-prv';
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const result = await wallet.getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'child-pub',
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithSeed: '123',
+                    encryptedPrv: `enc:${childPrv}`,
+                },
+                walletPassphrase: passphrase,
+            });
+            result.should.eql(childPrv);
+            keychainsGetStub.notCalled.should.be.true();
+            mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
+        });
+        it('does not auto-populate coldDerivationSeed when explicit prv and encryptedPrv are present', async function () {
+            const childPrv = 'child-level-prv';
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const result = await wallet.getUserPrv({
+                prv: childPrv,
+                keychain: {
+                    id: 'child-key',
+                    pub: 'child-pub',
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithSeed: '123',
+                    encryptedPrv: `enc:${childPrv}`,
+                },
+            });
+            result.should.eql(childPrv);
+            mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
+        });
+        it('still auto-populates coldDerivationSeed for SMC with params.prv and no encryptedPrv', async function () {
+            const wallet = makeWallet();
+            const result = await wallet.getUserPrv({
+                prv,
+                keychain: {
+                    id: 'smc-key',
+                    pub: 'smc-pub',
+                    type: 'independent',
+                    derivedFromParentWithSeed: '123',
+                },
+            });
+            result.should.eql(softDerivedPrv);
+            mockBaseCoin.deriveKeyWithSeed.calledOnce.should.be.true();
+        });
+        it('does not apply an explicit coldDerivationSeed after decrypting encryptedPrv', async function () {
+            const wallet = makeWallet();
+            const childPrv = prv;
+            const result = await wallet.getUserPrv({
+                keychain: {
+                    id: 'smc-key',
+                    pub: 'smc-pub',
+                    type: 'independent',
+                    encryptedPrv: `enc:${childPrv}`,
+                },
+                walletPassphrase: passphrase,
+                coldDerivationSeed: '123',
+            });
+            result.should.eql(childPrv);
+            mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
+        });
+        it('throws encryptedPrv error before walletPassphrase when both are missing', async function () {
+            const wallet = makeWallet();
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'pub',
+                    type: 'independent',
+                },
+            })
+                .should.be.rejectedWith('keychain does not have property encryptedPrv');
+        });
+    });
+    describe('getEncryptedUserKeychain', function () {
+        it('still fails for a safe owner so wallet sharing cannot obtain root material', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.resolves({
+                id: 'user-key',
+                pub: 'child-pub',
+                type: 'independent',
+                parent: rootKeyId,
+                derivedFromParentWithSeed: '123',
+            });
+            await wallet.getEncryptedUserKeychain().should.be.rejectedWith(src_1.MissingEncryptedKeychainError);
+            keychainsGetStub.called.should.be.true();
+        });
+    });
+    describe('signing guards', function () {
+        it('getUserKeyAndSignTssTransaction allows safe child keychain without encryptedPrv', async function () {
+            const wallet = makeWallet({
+                safe: 'safe-id-1',
+                multisigType: 'tss',
+                type: 'hot',
+            });
+            const childKeychain = {
+                id: 'child-key',
+                pub: 'child-pub',
+                type: 'tss',
+                parent: rootKeyId,
+                commonKeychain: 'ck',
+            };
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            mockBaseCoin.keychains.returns({
+                get: keychainsGetStub,
+                getKeysForSigning: sinon.stub().resolves([childKeychain]),
+            });
+            const signStub = sinon.stub(src_1.Wallet.prototype, 'signTransaction').resolves({ txHex: 'signed' });
+            const result = await wallet.getUserKeyAndSignTssTransaction({
+                txRequestId: 'tx-req',
+                walletPassphrase: passphrase,
+            });
+            result.should.eql({ txHex: 'signed' });
+            signStub.calledOnce.should.be.true();
+            const signArgs = signStub.firstCall.args[0];
+            signArgs.keychain.should.eql(childKeychain);
+        });
+        it('getUserKeyAndSignTssTransaction rejects wrong passphrase early for safe child wallets', async function () {
+            const wallet = makeWallet({
+                safe: 'safe-id-1',
+                multisigType: 'tss',
+                type: 'hot',
+            });
+            const childKeychain = {
+                id: 'child-key',
+                pub: 'child-pub',
+                type: 'tss',
+                parent: rootKeyId,
+                commonKeychain: 'ck',
+            };
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            mockBaseCoin.keychains.returns({
+                get: keychainsGetStub,
+                getKeysForSigning: sinon.stub().resolves([childKeychain]),
+            });
+            const signStub = sinon.stub(src_1.Wallet.prototype, 'signTransaction');
+            await wallet
+                .getUserKeyAndSignTssTransaction({
+                txRequestId: 'tx-req',
+                walletPassphrase: 'wrong-passphrase',
+            })
+                .should.be.rejectedWith(src_1.IncorrectPasswordError);
+            signStub.notCalled.should.be.true();
+            keychainsGetStub.calledOnce.should.be.true();
+        });
+        it('signTransaction does not pass the root prv into TSS signing for a safe owner', async function () {
+            const wallet = makeWallet({
+                safe: 'safe-id-1',
+                multisigType: 'tss',
+                type: 'hot',
+            });
+            const childKeychain = {
+                id: 'child-key',
+                pub: 'child-pub',
+                type: 'tss',
+                parent: rootKeyId,
+                commonKeychain: 'ck',
+            };
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            mockBaseCoin.keychains.returns({
+                get: keychainsGetStub,
+                getKeysForSigning: sinon.stub().resolves([childKeychain]),
+            });
+            mockBaseCoin.presignTransaction = sinon.stub().callsFake(async (params) => params);
+            mockBaseCoin.getMPCAlgorithm = sinon.stub().returns('eddsa');
+            const signTssStub = sinon.stub(src_1.Wallet.prototype, 'signTransactionTss').resolves({ txHex: 'signed' });
+            await wallet
+                .signTransaction({
+                walletPassphrase: passphrase,
+                txPrebuild: { txRequestId: 'tx-req' },
+            })
+                .should.be.rejectedWith(src_1.SafeOwnerSigningNotImplementedError);
+            signTssStub.notCalled.should.be.true();
+        });
+    });
+});
+describe('WCN-1200 recreateAndSignTSSTransaction safe path', function () {
+    afterEach(function () {
+        sinon.restore();
+    });
+    function makePendingApproval(wallet) {
+        const recreateTxRequest = sinon.stub().resolves({
+            apiVersion: 'lite',
+            txRequestId: 'tx-req',
+            unsignedTxs: [{ serializedTxHex: 'deadbeef', signableHex: 'ab', derivationPath: 'm/0' }],
+            transactions: [],
+        });
+        const pendingApproval = new src_1.PendingApproval({}, wallet.baseCoin, {
+            id: 'pa0',
+            txRequestId: 'tx-req',
+            info: { type: 'transactionRequest', transactionRequest: { recipients: [], coinSpecific: {} } },
+            state: 'pending',
+            creator: 'test',
+        }, wallet);
+        pendingApproval.tssUtils = { recreateTxRequest };
+        return { pendingApproval, recreateTxRequest };
+    }
+    it('uses getUserPrv for the safe owner (minter) instead of getPrv', async function () {
+        const childUserKeychain = {
+            id: 'child-key',
+            pub: 'child-pub',
+            type: 'tss',
+            parent: 'root-key-id',
+            derivedFromParentWithSeed: 'seed',
+        };
+        const getKeysForSigning = sinon.stub().resolves([childUserKeychain]);
+        const getUserPrv = sinon.stub().resolves('decryptedPrv');
+        const getPrv = sinon.stub().resolves('should-not-be-called');
+        const wallet = {
+            safeId: () => 'safe-id-1',
+            getUserPrv,
+            getPrv,
+            baseCoin: {
+                keychains: () => ({ getKeysForSigning }),
+                supportsTss: () => true,
+                getMPCAlgorithm: () => 'eddsa',
+            },
+            multisigTypeVersion: () => undefined,
+        };
+        const { pendingApproval, recreateTxRequest } = makePendingApproval(wallet);
+        const result = await pendingApproval.recreateAndSignTSSTransaction({ walletPassphrase: 'pass' }, new src_1.RequestTracer());
+        result.should.eql({ txHex: 'deadbeef' });
+        getPrv.notCalled.should.be.true();
+        getKeysForSigning.calledOnce.should.be.true();
+        getUserPrv
+            .calledOnceWithExactly({
+            keychain: childUserKeychain,
+            walletPassphrase: 'pass',
+        })
+            .should.be.true();
+        recreateTxRequest.calledOnce.should.be.true();
+    });
+    it('uses getPrv for a safe wallet sharee (child encryptedPrv already present)', async function () {
+        const childUserKeychain = {
+            id: 'child-key',
+            pub: 'child-pub',
+            type: 'tss',
+            parent: 'root-key-id',
+            derivedFromParentWithSeed: 'seed',
+            encryptedPrv: 'enc:sharee-prv',
+        };
+        const getKeysForSigning = sinon.stub().resolves([childUserKeychain]);
+        const getUserPrv = sinon.stub().resolves('should-not-be-called');
+        const getPrv = sinon.stub().resolves('sharee-prv');
+        const wallet = {
+            safeId: () => 'safe-id-1',
+            getUserPrv,
+            getPrv,
+            baseCoin: {
+                keychains: () => ({ getKeysForSigning }),
+                supportsTss: () => true,
+                getMPCAlgorithm: () => 'eddsa',
+            },
+            multisigTypeVersion: () => undefined,
+        };
+        const { pendingApproval, recreateTxRequest } = makePendingApproval(wallet);
+        const result = await pendingApproval.recreateAndSignTSSTransaction({ walletPassphrase: 'pass' }, new src_1.RequestTracer());
+        result.should.eql({ txHex: 'deadbeef' });
+        getUserPrv.notCalled.should.be.true();
+        getPrv.calledOnceWithExactly({ walletPassphrase: 'pass' }).should.be.true();
+        recreateTxRequest.calledOnce.should.be.true();
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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