@bitgo-beta/sdk-core 8.2.1-beta.21 → 8.2.1-beta.2100

package/dist/src/bitgo/utils/siws.js

@@ -0,0 +1,171 @@
+"use strict";
+/**
+ * Canonical SIWS (Sign In With Solana) message validator.
+ *
+ * Exact JS mirror of the firmware's validate_sol_message (hsm-firmware src/bg/sol.c,
+ * DEFI-945) as also mirrored in hsm-api validateSiwsMessage (DEFI-946). Shared by
+ * sdk-coin-sol, Wallet Platform, and bitgo-ui; hsm-api keeps its own bytes-based copy.
+ * Any change here must land identically in all layers, including firmware.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateSiwsMessage = validateSiwsMessage;
+const SIWS_SUFFIX = ' wants you to sign in with your Solana account:';
+const SIWS_FIELD_LABELS = [
+    'URI: ',
+    'Version: ',
+    'Chain ID: ',
+    'Nonce: ',
+    'Issued At: ',
+    'Expiration Time: ',
+    'Not Before: ',
+    'Request ID: ',
+    'Resources:',
+];
+const SIWS_CHAIN_IDS = [
+    'mainnet',
+    'testnet',
+    'devnet',
+    'localnet',
+    'solana:mainnet',
+    'solana:testnet',
+    'solana:devnet',
+];
+const SIWS_FIELD_URI = 0;
+const SIWS_FIELD_VERSION = 1;
+const SIWS_FIELD_CHAIN_ID = 2;
+const SIWS_FIELD_NONCE = 3;
+const SIWS_FIELD_ISSUED_AT = 4;
+const SIWS_FIELD_EXPIRATION_TIME = 5;
+const SIWS_FIELD_NOT_BEFORE = 6;
+const SIWS_FIELD_REQUEST_ID = 7;
+const SIWS_FIELD_RESOURCES = 8;
+// A lone surrogate cannot be encoded as UTF-8; Buffer.from would silently replace it
+// with U+FFFD and the signed bytes would no longer match the caller's text.
+const LONE_SURROGATE_PATTERN = /(?:[\uD800-\uDBFF](?![\uDC00-\uDFFF]))|(?:(?:^|[^\uD800-\uDBFF])[\uDC00-\uDFFF])/;
+function isSiwsBase58Address(line) {
+    return line.length >= 32 && line.length <= 44 && /^[1-9A-HJ-NP-Za-km-z]+$/.test(line);
+}
+function isSiwsAlnum(value) {
+    return value.length >= 8 && /^[a-zA-Z0-9]+$/.test(value);
+}
+function isSiwsDatetime(value) {
+    const match = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d+))?(Z|[+-]\d{2}:\d{2})$/.exec(value);
+    if (!match) {
+        return false;
+    }
+    const month = parseInt(match[2], 10);
+    const day = parseInt(match[3], 10);
+    const hour = parseInt(match[4], 10);
+    const minute = parseInt(match[5], 10);
+    const second = parseInt(match[6], 10);
+    if (month < 1 || month > 12 || day < 1 || day > 31 || hour > 23 || minute > 59 || second > 60) {
+        return false;
+    }
+    if (match[8] === 'Z') {
+        return true;
+    }
+    const offsetHour = parseInt(match[8].substring(1, 3), 10);
+    const offsetMinute = parseInt(match[8].substring(4, 6), 10);
+    return offsetHour <= 23 && offsetMinute <= 59;
+}
+/**
+ * Validates a SIWS message per the Sign In With Solana ABNF grammar: the domain-bound
+ * sign-in template where the statement and every advanced field is optional (any
+ * subset, in canonical order, with strict value checks). Throws when the message is
+ * not strict UTF-8-representable or not a well-formed SIWS message; returns silently
+ * otherwise.
+ */
+function validateSiwsMessage(message) {
+    const invalid = () => {
+        throw new Error('message is not a valid SIWS message');
+    };
+    if (LONE_SURROGATE_PATTERN.test(message)) {
+        throw new Error('message is not valid UTF-8');
+    }
+    const lines = message.replace(/\n+$/, '').split('\n');
+    if (lines.length < 2 || !lines[0].endsWith(SIWS_SUFFIX) || lines[0].length === SIWS_SUFFIX.length) {
+        invalid();
+    }
+    if (!isSiwsBase58Address(lines[1]) || (lines.length >= 3 && lines[2] !== '')) {
+        invalid();
+    }
+    let hasField = false;
+    let inFields = false;
+    let inResources = false;
+    let requireFields = false;
+    let lastField = -1;
+    for (let i = 3; i < lines.length; i++) {
+        const line = lines[i];
+        if (line === '') {
+            if (inFields || inResources || requireFields) {
+                invalid();
+            }
+            requireFields = true;
+            continue;
+        }
+        if (inResources) {
+            if (!line.startsWith('- ')) {
+                invalid();
+            }
+            continue;
+        }
+        let field = -1;
+        for (let f = 0; f < SIWS_FIELD_LABELS.length; f++) {
+            if (line.startsWith(SIWS_FIELD_LABELS[f])) {
+                field = f;
+                break;
+            }
+        }
+        if (field === -1) {
+            if (inFields || requireFields) {
+                invalid();
+            }
+            continue;
+        }
+        if (hasField && field <= lastField) {
+            invalid();
+        }
+        hasField = true;
+        lastField = field;
+        inFields = true;
+        requireFields = false;
+        const value = line.substring(SIWS_FIELD_LABELS[field].length);
+        switch (field) {
+            case SIWS_FIELD_VERSION:
+                if (value !== '1') {
+                    invalid();
+                }
+                break;
+            case SIWS_FIELD_CHAIN_ID:
+                if (!SIWS_CHAIN_IDS.includes(value)) {
+                    invalid();
+                }
+                break;
+            case SIWS_FIELD_NONCE:
+                if (!isSiwsAlnum(value)) {
+                    invalid();
+                }
+                break;
+            case SIWS_FIELD_ISSUED_AT:
+            case SIWS_FIELD_EXPIRATION_TIME:
+            case SIWS_FIELD_NOT_BEFORE:
+                if (!isSiwsDatetime(value)) {
+                    invalid();
+                }
+                break;
+            case SIWS_FIELD_URI:
+            case SIWS_FIELD_REQUEST_ID:
+                if (value === '') {
+                    invalid();
+                }
+                break;
+            case SIWS_FIELD_RESOURCES:
+                if (value !== '') {
+                    invalid();
+                }
+                inResources = true;
+                break;
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/utils/transactionUtils.d.ts

@@ -0,0 +1,9 @@
+import { ITransactionRecipient } from '../baseCoin';
+export declare function transactionRecipientsMatch(recipient1: ITransactionRecipient, recipient2: ITransactionRecipient): {
+    addressMatch: boolean;
+    amountMatch: boolean;
+    memoMatch: boolean;
+    tokenMatch: boolean;
+    exactMatch: boolean;
+};
+//# sourceMappingURL=transactionUtils.d.ts.map

package/dist/src/bitgo/utils/transactionUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactionUtils.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/utils/transactionUtils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,qBAAqB,EAAE,UAAU,EAAE,qBAAqB;;;;;;EAyB9G"}

package/dist/src/bitgo/utils/transactionUtils.js

@@ -0,0 +1,29 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.transactionRecipientsMatch = transactionRecipientsMatch;
+const bignumber_js_1 = __importDefault(require("bignumber.js"));
+function transactionRecipientsMatch(recipient1, recipient2) {
+    const address1 = recipient1.address;
+    const address2 = recipient2.address;
+    const amount1 = new bignumber_js_1.default(recipient1.amount);
+    const amount2 = new bignumber_js_1.default(recipient2.amount);
+    const tokenName1 = recipient1.tokenName;
+    const tokenName2 = recipient2.tokenName;
+    const memo1 = recipient1.memo;
+    const memo2 = recipient2.memo;
+    const addressMatch = address1 === address2;
+    const amountMatch = amount1.isEqualTo(amount2);
+    const memoMatch = memo1 === memo2;
+    const tokenMatch = tokenName1 === tokenName2;
+    return {
+        addressMatch,
+        amountMatch,
+        memoMatch,
+        tokenMatch,
+        exactMatch: addressMatch && amountMatch && memoMatch && tokenMatch,
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/utils/triple.d.ts

@@ -1,3 +1,3 @@
-export declare type Triple<T> = [T, T, T];
+export type Triple<T> = [T, T, T];
 export declare function isTriple<T>(arr: T[]): arr is Triple<T>;
 //# sourceMappingURL=triple.d.ts.map

package/dist/src/bitgo/utils/triple.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"triple.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/utils/triple.ts"],"names":[],"mappings":"AAAA,oBAAY,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAElC,wBAAgB,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAEtD"}
+{"version":3,"file":"triple.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/utils/triple.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAElC,wBAAgB,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAEtD"}

package/dist/src/bitgo/utils/triple.js

@@ -1,8 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isTriple = void 0;
+exports.isTriple = isTriple;
 function isTriple(arr) {
     return arr.length === 3;
 }
-exports.isTriple = isTriple;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHJpcGxlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL2JpdGdvL3V0aWxzL3RyaXBsZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFFQSxTQUFnQixRQUFRLENBQUksR0FBUTtJQUNsQyxPQUFPLEdBQUcsQ0FBQyxNQUFNLEtBQUssQ0FBQyxDQUFDO0FBQzFCLENBQUM7QUFGRCw0QkFFQyIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCB0eXBlIFRyaXBsZTxUPiA9IFtULCBULCBUXTtcblxuZXhwb3J0IGZ1bmN0aW9uIGlzVHJpcGxlPFQ+KGFycjogVFtdKTogYXJyIGlzIFRyaXBsZTxUPiB7XG4gIHJldHVybiBhcnIubGVuZ3RoID09PSAzO1xufVxuIl19
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHJpcGxlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL2JpdGdvL3V0aWxzL3RyaXBsZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUVBLDRCQUVDO0FBRkQsU0FBZ0IsUUFBUSxDQUFJLEdBQVE7SUFDbEMsT0FBTyxHQUFHLENBQUMsTUFBTSxLQUFLLENBQUMsQ0FBQztBQUMxQixDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiZXhwb3J0IHR5cGUgVHJpcGxlPFQ+ID0gW1QsIFQsIFRdO1xuXG5leHBvcnQgZnVuY3Rpb24gaXNUcmlwbGU8VD4oYXJyOiBUW10pOiBhcnIgaXMgVHJpcGxlPFQ+IHtcbiAgcmV0dXJuIGFyci5sZW5ndGggPT09IDM7XG59XG4iXX0=

package/dist/src/bitgo/utils/tss/addressVerification.d.ts

@@ -0,0 +1,62 @@
+import { TssVerifyAddressOptions } from '../../baseCoin/iBaseCoin';
+/**
+ * Extracts and validates the commonKeychain from keychains array.
+ * For MPC wallets, all keychains should have the same commonKeychain.
+ *
+ * @param keychains - Array of keychains containing commonKeychain
+ * @returns The validated commonKeychain
+ * @throws {Error} if keychains are missing, empty, or have mismatched commonKeychains
+ */
+export declare function extractCommonKeychain(keychains: TssVerifyAddressOptions['keychains']): string;
+/**
+ * Verifies if an address belongs to a wallet using EdDSA TSS MPC derivation.
+ * This is a common implementation for EdDSA-based MPC coins (SOL, DOT, SUI, TON, IOTA, etc.)
+ *
+ * @param params - Verification options including keychains, address, and derivation index
+ * @param isValidAddress - Coin-specific function to validate address format
+ * @param getAddressFromPublicKey - Coin-specific function to convert public key to address
+ * @returns true if the address matches the derived address, false otherwise
+ * @throws {InvalidAddressError} if the address is invalid
+ * @throws {Error} if required parameters are missing or invalid
+ */
+export declare function verifyEddsaTssWalletAddress(params: TssVerifyAddressOptions, isValidAddress: (address: string) => boolean, getAddressFromPublicKey: (publicKey: string) => string): Promise<boolean>;
+/**
+ * Options for deriving an MPC wallet address. This is the subset of
+ * {@link TssVerifyAddressOptions} needed to *produce* an address (no `address` to check),
+ * plus the key curve.
+ */
+export type DeriveMPCWalletAddressOptions = Pick<TssVerifyAddressOptions, 'keychains' | 'index' | 'derivedFromParentWithSeed' | 'multisigTypeVersion'> & {
+    keyCurve: 'secp256k1' | 'ed25519';
+};
+/**
+ * Derives a wallet address using TSS/MPC HD derivation from the commonKeychain,
+ * using public key material only (no private keys, no network access).
+ * Shared by EdDSA- and ECDSA-based MPC coins.
+ *
+ * This is the derivation half of {@link verifyMPCWalletAddress}: it *produces* the address
+ * rather than comparing it against a candidate, so the two can never diverge.
+ *
+ * @param params - keychains (commonKeychain), derivation index, optional seed/version, and keyCurve
+ * @param getAddressFromPublicKey - Coin-specific function to convert public key to address
+ * @returns the derived address and the HD derivation path used to derive it
+ * @throws {Error} if required parameters are missing or invalid
+ */
+export declare function deriveMPCWalletAddress(params: DeriveMPCWalletAddressOptions, getAddressFromPublicKey: (publicKey: string) => string): Promise<{
+    address: string;
+    derivationPath: string;
+}>;
+/**
+ * Verifies if an address belongs to a wallet using ECDSA TSS MPC derivation.
+ * This is a common implementation for ECDSA-based MPC coins (ETH, BTC, etc.)
+ *
+ * @param params - Verification options including keychains, address, and derivation index
+ * @param isValidAddress - Coin-specific function to validate address format
+ * @param getAddressFromPublicKey - Coin-specific function to convert public key to address
+ * @returns true if the address matches the derived address, false otherwise
+ * @throws {InvalidAddressError} if the address is invalid
+ * @throws {Error} if required parameters are missing or invalid
+ */
+export declare function verifyMPCWalletAddress(params: TssVerifyAddressOptions & {
+    keyCurve: 'secp256k1' | 'ed25519';
+}, isValidAddress: (address: string) => boolean, getAddressFromPublicKey: (publicKey: string) => string): Promise<boolean>;
+//# sourceMappingURL=addressVerification.d.ts.map

package/dist/src/bitgo/utils/tss/addressVerification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addressVerification.d.ts","sourceRoot":"","sources":["../../../../../src/bitgo/utils/tss/addressVerification.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAInE;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,uBAAuB,CAAC,WAAW,CAAC,GAAG,MAAM,CAe7F;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,uBAAuB,EAC/B,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,EAC5C,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GACrD,OAAO,CAAC,OAAO,CAAC,CAElB;AAED;;;;GAIG;AACH,MAAM,MAAM,6BAA6B,GAAG,IAAI,CAC9C,uBAAuB,EACvB,WAAW,GAAG,OAAO,GAAG,2BAA2B,GAAG,qBAAqB,CAC5E,GAAG;IACF,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,6BAA6B,EACrC,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GACrD,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC,CAmBtD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,uBAAuB,GAAG;IAChC,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAC;CACnC,EACD,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,EAC5C,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GACrD,OAAO,CAAC,OAAO,CAAC,CAUlB"}

package/dist/src/bitgo/utils/tss/addressVerification.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractCommonKeychain = extractCommonKeychain;
+exports.verifyEddsaTssWalletAddress = verifyEddsaTssWalletAddress;
+exports.deriveMPCWalletAddress = deriveMPCWalletAddress;
+exports.verifyMPCWalletAddress = verifyMPCWalletAddress;
+const sdk_lib_mpc_1 = require("@bitgo-beta/sdk-lib-mpc");
+const mpc_1 = require("../../../account-lib/mpc");
+const errors_1 = require("../../errors");
+const tss_1 = require("../../tss");
+/**
+ * Extracts and validates the commonKeychain from keychains array.
+ * For MPC wallets, all keychains should have the same commonKeychain.
+ *
+ * @param keychains - Array of keychains containing commonKeychain
+ * @returns The validated commonKeychain
+ * @throws {Error} if keychains are missing, empty, or have mismatched commonKeychains
+ */
+function extractCommonKeychain(keychains) {
+    if (!keychains?.length) {
+        throw new Error('missing required param keychains');
+    }
+    const commonKeychain = keychains[0].commonKeychain;
+    if (!commonKeychain) {
+        throw new Error('missing required param commonKeychain');
+    }
+    // Verify all keychains have the same commonKeychain
+    if (keychains.find((kc) => kc.commonKeychain !== commonKeychain))
+        throw new Error('all keychains must have the same commonKeychain for MPC coins');
+    return commonKeychain;
+}
+/**
+ * Verifies if an address belongs to a wallet using EdDSA TSS MPC derivation.
+ * This is a common implementation for EdDSA-based MPC coins (SOL, DOT, SUI, TON, IOTA, etc.)
+ *
+ * @param params - Verification options including keychains, address, and derivation index
+ * @param isValidAddress - Coin-specific function to validate address format
+ * @param getAddressFromPublicKey - Coin-specific function to convert public key to address
+ * @returns true if the address matches the derived address, false otherwise
+ * @throws {InvalidAddressError} if the address is invalid
+ * @throws {Error} if required parameters are missing or invalid
+ */
+async function verifyEddsaTssWalletAddress(params, isValidAddress, getAddressFromPublicKey) {
+    return verifyMPCWalletAddress({ ...params, keyCurve: 'ed25519' }, isValidAddress, getAddressFromPublicKey);
+}
+/**
+ * Derives a wallet address using TSS/MPC HD derivation from the commonKeychain,
+ * using public key material only (no private keys, no network access).
+ * Shared by EdDSA- and ECDSA-based MPC coins.
+ *
+ * This is the derivation half of {@link verifyMPCWalletAddress}: it *produces* the address
+ * rather than comparing it against a candidate, so the two can never diverge.
+ *
+ * @param params - keychains (commonKeychain), derivation index, optional seed/version, and keyCurve
+ * @param getAddressFromPublicKey - Coin-specific function to convert public key to address
+ * @returns the derived address and the HD derivation path used to derive it
+ * @throws {Error} if required parameters are missing or invalid
+ */
+async function deriveMPCWalletAddress(params, getAddressFromPublicKey) {
+    const { keychains, index, derivedFromParentWithSeed } = params;
+    const commonKeychain = extractCommonKeychain(keychains);
+    // Compute derivation path:
+    // - For SMC wallets with derivedFromParentWithSeed, compute prefix and use: {prefix}/{index}
+    // - For other wallets, use simple path: m/{index}
+    const prefix = derivedFromParentWithSeed ? (0, sdk_lib_mpc_1.getDerivationPath)(derivedFromParentWithSeed.toString()) : undefined;
+    const derivationPath = prefix ? `${prefix}/${index}` : `m/${index}`;
+    const MPC = params.keyCurve === 'secp256k1' ? new mpc_1.Ecdsa() : await tss_1.EDDSAMethods.getInitializedMpcInstance();
+    const derivedPublicKey = MPC.deriveUnhardened(commonKeychain, derivationPath);
+    // secp256k1 expects 33 bytes; ed25519 expects 32 bytes
+    const publicKeySize = params.keyCurve === 'secp256k1' ? 33 : 32;
+    const publicKeyOnly = Buffer.from(derivedPublicKey, 'hex').subarray(0, publicKeySize).toString('hex');
+    return { address: getAddressFromPublicKey(publicKeyOnly), derivationPath };
+}
+/**
+ * Verifies if an address belongs to a wallet using ECDSA TSS MPC derivation.
+ * This is a common implementation for ECDSA-based MPC coins (ETH, BTC, etc.)
+ *
+ * @param params - Verification options including keychains, address, and derivation index
+ * @param isValidAddress - Coin-specific function to validate address format
+ * @param getAddressFromPublicKey - Coin-specific function to convert public key to address
+ * @returns true if the address matches the derived address, false otherwise
+ * @throws {InvalidAddressError} if the address is invalid
+ * @throws {Error} if required parameters are missing or invalid
+ */
+async function verifyMPCWalletAddress(params, isValidAddress, getAddressFromPublicKey) {
+    const { address } = params;
+    if (!isValidAddress(address)) {
+        throw new errors_1.InvalidAddressError(`invalid address: ${address}`);
+    }
+    const { address: expectedAddress } = await deriveMPCWalletAddress(params, getAddressFromPublicKey);
+    return address === expectedAddress;
+}
+//# sourceMappingURL=data:application/json;base64,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