@bitgo-beta/sdk-core 8.2.1-beta.212 → 8.2.1-beta.2120

package/dist/test/unit/bitgo/safe/recovery.js

@@ -0,0 +1,478 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert_1 = __importDefault(require("assert"));
+require("should");
+const sinon = __importStar(require("sinon"));
+const utxo_lib_1 = require("@bitgo-beta/utxo-lib");
+const ed25519_1 = require("@noble/curves/ed25519");
+const sjcl = __importStar(require("@bitgo-beta/sjcl"));
+const sdk_lib_mpc_1 = require("@bitgo-beta/sdk-lib-mpc");
+const keyShareEnvelope_1 = require("../../../../src/bitgo/utils/tss/keyShareEnvelope");
+const errors_1 = require("../../../../src/bitgo/errors");
+const recovery_1 = require("../../../../src/bitgo/safe/recovery");
+const src_1 = require("../../../../src");
+const eddsa_1 = require("../../../../src/bitgo/tss/eddsa/eddsa");
+const eddsaMPCv2_1 = require("../../../../src/bitgo/utils/tss/eddsa/eddsaMPCv2");
+// The ed25519 soft co-signer private halves asserted below are pinned cross-repo in the shared
+// GV1 fixture (byte-identical to wallet-platform's copy).
+const bip44Fixture = __importStar(require("./fixtures/safeBip44Vectors.json"));
+const PASSWORD = 'safe-password';
+function makeMockBitGo(decryptImpl) {
+    return {
+        decrypt: sinon.stub().callsFake(async (params) => decryptImpl(params)),
+    };
+}
+/** A fake decrypt that only recognizes the user/backup tokens; any other input (e.g. a Box C public) throws. */
+function makeDecryptMap(entries) {
+    return ({ password, input }) => {
+        password.should.equal(PASSWORD);
+        if (!(input in entries)) {
+            throw new Error(`unexpected decrypt input: ${input}`);
+        }
+        return entries[input];
+    };
+}
+function box(values) {
+    return JSON.stringify(values);
+}
+describe('decryptSafeKeycard', () => {
+    afterEach(() => {
+        sinon.restore();
+    });
+    it('decrypts onchain roots to strings and returns Box C verbatim', async () => {
+        const userBox = box({
+            secp256k1Multisig: 'enc-user-secp',
+            ed25519Multisig: 'enc-user-ed25519',
+            ecdsaMpc: 'enc-user-ecdsa',
+            eddsaMpc: 'enc-user-eddsa',
+        });
+        const backupBox = box({
+            secp256k1Multisig: 'enc-backup-secp',
+            ed25519Multisig: { prv: 'enc-backup-ed25519', chainCode: 'C'.repeat(52) },
+            ecdsaMpc: 'enc-backup-ecdsa',
+            eddsaMpc: 'enc-backup-eddsa',
+        });
+        const bitgoBox = box({
+            secp256k1Multisig: 'xpub-secp-bitgo',
+            ed25519Multisig: 'pub-ed25519-bitgo',
+            ecdsaMpc: 'common-ecdsa-bitgo',
+            eddsaMpc: 'common-eddsa-bitgo',
+        });
+        const mpcUser = (0, keyShareEnvelope_1.buildSafeMpcKeyEnvelopes)(Buffer.from('user-signing'), Buffer.from('user-reduced'), Buffer.from('user-vrf'));
+        const mpcBackup = (0, keyShareEnvelope_1.buildSafeMpcKeyEnvelopes)(Buffer.from('backup-signing'), Buffer.from('backup-reduced'), Buffer.from('backup-vrf'));
+        const bitgo = makeMockBitGo(makeDecryptMap({
+            'enc-user-secp': 'xprv-user',
+            'enc-backup-secp': 'xprv-backup',
+            'enc-user-ed25519': 'S-user-seed',
+            'enc-backup-ed25519': 'S-backup-seed',
+            'enc-user-ecdsa': mpcUser.reducedEnvelope.toString('base64'),
+            'enc-backup-ecdsa': mpcBackup.reducedEnvelope.toString('base64'),
+            'enc-user-eddsa': mpcUser.reducedEnvelope.toString('base64'),
+            'enc-backup-eddsa': mpcBackup.reducedEnvelope.toString('base64'),
+        }));
+        const result = await (0, recovery_1.decryptSafeKeycard)({
+            bitgo,
+            userKeyBox: userBox,
+            backupKeyBox: backupBox,
+            bitgoKeyBox: bitgoBox,
+            password: PASSWORD,
+        });
+        result.secp256k1Multisig.user.should.equal('xprv-user');
+        result.secp256k1Multisig.backup.should.equal('xprv-backup');
+        result.secp256k1Multisig.bitgo.should.equal('xpub-secp-bitgo');
+        result.ed25519Multisig.user.should.equal('S-user-seed');
+        result.ed25519Multisig.backup.prv.should.equal('S-backup-seed');
+        result.ed25519Multisig.backup.chainCode.should.equal('C'.repeat(52));
+        result.ed25519Multisig.bitgo.should.equal('pub-ed25519-bitgo');
+        result.ecdsaMpc.user.signing.toString('hex').should.equal(Buffer.from('user-reduced').toString('hex'));
+        result.ecdsaMpc.user.vrf.toString('hex').should.equal(Buffer.from('user-vrf').toString('hex'));
+        result.ecdsaMpc.backup.signing.toString('hex').should.equal(Buffer.from('backup-reduced').toString('hex'));
+        result.ecdsaMpc.backup.vrf.toString('hex').should.equal(Buffer.from('backup-vrf').toString('hex'));
+        result.ecdsaMpc.bitgo.should.equal('common-ecdsa-bitgo');
+        result.eddsaMpc.bitgo.should.equal('common-eddsa-bitgo');
+        // 4 slots × (user + backup) = 8 decrypts; BitGo (Box C) is never decrypted.
+        bitgo.decrypt.callCount.should.equal(8);
+    });
+    it('decrypts the seed from an object-form ed25519Multisig backup entry', async () => {
+        const userBox = box({
+            secp256k1Multisig: 'enc-user-secp',
+            ed25519Multisig: 'enc-user-ed25519',
+            ecdsaMpc: 'enc-user-ecdsa',
+            eddsaMpc: 'enc-user-eddsa',
+        });
+        const backupBox = JSON.stringify({
+            secp256k1Multisig: 'enc-backup-secp',
+            ed25519Multisig: { prv: 'enc-backup-ed25519', chainCode: 'A'.repeat(52) },
+            ecdsaMpc: 'enc-backup-ecdsa',
+            eddsaMpc: 'enc-backup-eddsa',
+        });
+        const bitgoBox = box({
+            secp256k1Multisig: 'xpub-secp-bitgo',
+            ed25519Multisig: 'pub-ed25519-bitgo',
+            ecdsaMpc: 'common-ecdsa-bitgo',
+            eddsaMpc: 'common-eddsa-bitgo',
+        });
+        const mpcUser = (0, keyShareEnvelope_1.buildSafeMpcKeyEnvelopes)(Buffer.from('user-signing'), Buffer.from('user-reduced'), Buffer.from('user-vrf'));
+        const mpcBackup = (0, keyShareEnvelope_1.buildSafeMpcKeyEnvelopes)(Buffer.from('backup-signing'), Buffer.from('backup-reduced'), Buffer.from('backup-vrf'));
+        const bitgo = makeMockBitGo(makeDecryptMap({
+            'enc-user-secp': 'xprv-user',
+            'enc-backup-secp': 'xprv-backup',
+            'enc-user-ed25519': 'S-user-seed',
+            'enc-backup-ed25519': 'S-backup-seed',
+            'enc-user-ecdsa': mpcUser.reducedEnvelope.toString('base64'),
+            'enc-backup-ecdsa': mpcBackup.reducedEnvelope.toString('base64'),
+            'enc-user-eddsa': mpcUser.reducedEnvelope.toString('base64'),
+            'enc-backup-eddsa': mpcBackup.reducedEnvelope.toString('base64'),
+        }));
+        const result = await (0, recovery_1.decryptSafeKeycard)({
+            bitgo,
+            userKeyBox: userBox,
+            backupKeyBox: backupBox,
+            bitgoKeyBox: bitgoBox,
+            password: PASSWORD,
+        });
+        result.ed25519Multisig.backup.prv.should.equal('S-backup-seed');
+        result.ed25519Multisig.backup.chainCode.should.equal('A'.repeat(52));
+    });
+    it('rejects an ed25519 chain-code entry in a non-backup slot (fail closed)', async () => {
+        const userBox = JSON.stringify({
+            secp256k1Multisig: { prv: 'enc-user-secp', chainCode: 'A'.repeat(52) },
+            ed25519Multisig: 'enc-user-ed25519',
+            ecdsaMpc: 'enc-user-ecdsa',
+            eddsaMpc: 'enc-user-eddsa',
+        });
+        await (0, recovery_1.decryptSafeKeycard)({
+            bitgo: makeMockBitGo(makeDecryptMap({})),
+            userKeyBox: userBox,
+            backupKeyBox: userBox,
+            bitgoKeyBox: userBox,
+            password: PASSWORD,
+        }).should.be.rejectedWith(/unexpected ed25519 chain-code entry/);
+    });
+    it('throws IncorrectPasswordError when decryption fails (wrong password)', async () => {
+        const userBox = box({
+            secp256k1Multisig: 'enc-user-secp',
+            ed25519Multisig: 'enc-user-ed25519',
+            ecdsaMpc: 'enc-user-ecdsa',
+            eddsaMpc: 'enc-user-eddsa',
+        });
+        const bitgo = makeMockBitGo(() => {
+            throw new Error('argon2: tag does not match');
+        });
+        await (0, recovery_1.decryptSafeKeycard)({
+            bitgo,
+            userKeyBox: userBox,
+            backupKeyBox: userBox,
+            bitgoKeyBox: userBox,
+            password: 'wrong-password',
+        }).should.be.rejectedWith(errors_1.IncorrectPasswordError);
+    });
+});
+const MPC_ROOT = { signing: Buffer.alloc(0), vrf: Buffer.alloc(0) };
+function makeRoots(secp) {
+    return {
+        secp256k1Multisig: secp,
+        ed25519Multisig: { user: 'u', backup: { prv: 'b', chainCode: 'c' }, bitgo: 'g' },
+        ecdsaMpc: { user: MPC_ROOT, backup: MPC_ROOT, bitgo: 'g' },
+        eddsaMpc: { user: MPC_ROOT, backup: MPC_ROOT, bitgo: 'g' },
+    };
+}
+describe('deriveSafeWalletKeys', () => {
+    const userRoot = utxo_lib_1.bip32.fromSeed(Buffer.from('000102030405060708090a0b0c0d0e0f', 'hex'));
+    const backupRoot = utxo_lib_1.bip32.fromSeed(Buffer.from('1f1e1d1c1b1a191817161514131211100f0e0d0c0b0a09080706050403020100', 'hex'));
+    const bitgoRoot = utxo_lib_1.bip32
+        .fromSeed(Buffer.from('2f2e2d2c2b2a292827262524232221201f1e1d1c1b1a19181716151413121110', 'hex'))
+        .neutered();
+    const roots = makeRoots({
+        user: userRoot.toBase58(),
+        backup: backupRoot.toBase58(),
+        bitgo: bitgoRoot.toBase58(),
+    });
+    it('derives the BIP44 child triplet for slot 1', async () => {
+        const result = await (0, recovery_1.deriveSafeWalletKeys)({ coin: 'btc', slot: 'secp256k1Multisig', account: 0, roots });
+        if (result.slot !== 'secp256k1Multisig') {
+            throw new Error('expected secp256k1Multisig slot');
+        }
+        result.path.should.equal("m/44'/0'/1'/0'");
+        result.keys.user.prv.should.equal(userRoot.derivePath("m/44'/0'/1'/0'").toBase58());
+        result.keys.user.pub.should.equal(userRoot.derivePath("m/44'/0'/1'/0'").neutered().toBase58());
+        result.keys.backup.prv.should.equal(backupRoot.derivePath('m/44/0/1/0').toBase58());
+        result.keys.bitgo.pub.should.equal(bitgoRoot.derivePath('m/44/0/1/0').toBase58());
+    });
+    it('varies the path with the account', async () => {
+        const result = await (0, recovery_1.deriveSafeWalletKeys)({ coin: 'btc', slot: 'secp256k1Multisig', account: 2, roots });
+        result.path.should.equal("m/44'/0'/1'/2'");
+    });
+    it('derives the ecdsaMpc child via the DKLs ceremony', async () => {
+        const [userDkg, backupDkg] = await sdk_lib_mpc_1.DklsUtils.generateDKGKeyShares();
+        const [vrfUser, vrfBackup] = await sdk_lib_mpc_1.DklsVrfUtils.generateVrfDKGKeyShares();
+        const mpcRoots = {
+            ...roots,
+            ecdsaMpc: {
+                user: { signing: userDkg.getReducedKeyShare(), vrf: vrfUser.getKeyShare() },
+                backup: { signing: backupDkg.getReducedKeyShare(), vrf: vrfBackup.getKeyShare() },
+                bitgo: 'g',
+            },
+        };
+        const result = await (0, recovery_1.deriveSafeWalletKeys)({ coin: 'eth', slot: 'ecdsaMpc', account: 0, roots: mpcRoots });
+        if (result.slot !== 'ecdsaMpc') {
+            throw new Error('expected ecdsaMpc slot');
+        }
+        result.path.should.equal("m/44'/60'/3'/0'");
+        result.keys.commonKeychain.should.be.a.String();
+        result.keys.user.should.be.a.String();
+        result.keys.backup.should.be.a.String();
+    });
+    it('derives and signs the eddsaMpc slot-4 BIP44 child', async function () {
+        const [userDkg, backupDkg, bitgoDkg] = await sdk_lib_mpc_1.MPSUtil.generateEdDsaDKGKeyShares();
+        const [vrfUser, vrfBackup, vrfBitgo] = await sdk_lib_mpc_1.MpsVrfUtils.generateVrfDKGKeyShares();
+        const mpcRoots = {
+            ...roots,
+            eddsaMpc: {
+                user: { signing: userDkg.getReducedKeyShare(), vrf: vrfUser.getKeyShare() },
+                backup: { signing: backupDkg.getReducedKeyShare(), vrf: vrfBackup.getKeyShare() },
+                bitgo: bitgoDkg.getCommonKeychain(),
+            },
+        };
+        const result = await (0, recovery_1.deriveSafeWalletKeys)({ coin: 'sol', slot: 'eddsaMpc', account: 0, roots: mpcRoots });
+        if (result.slot !== 'eddsaMpc') {
+            throw new Error('expected eddsaMpc slot');
+        }
+        result.path.should.equal("m/44'/501'/4'/0'");
+        // Play mint's user↔BitGo role locally at the same BIP44 path; no dev-minted wallet is needed.
+        const userMint = new sdk_lib_mpc_1.MpsDerive.Derive(3, 2, 0, userDkg.getKeyShare(), vrfUser.getKeyShare(), result.path);
+        const bitgoMint = new sdk_lib_mpc_1.MpsDerive.Derive(3, 2, 2, bitgoDkg.getKeyShare(), vrfBitgo.getKeyShare(), result.path);
+        const [userRound0, bitgoRound0] = await Promise.all([userMint.initDerive(), bitgoMint.initDerive()]);
+        const [userRound1] = userMint.handleIncomingMessages([bitgoRound0]);
+        const [bitgoRound1] = bitgoMint.handleIncomingMessages([userRound0]);
+        if (!userRound1 || !bitgoRound1) {
+            throw new Error('expected user and BitGo derive round-1 messages');
+        }
+        assert_1.default.deepStrictEqual(userMint.handleIncomingMessages([bitgoRound1]), []);
+        assert_1.default.deepStrictEqual(bitgoMint.handleIncomingMessages([userRound1]), []);
+        const mintedChildCommonKeychain = userMint.getCommonKeychain();
+        assert_1.default.strictEqual(bitgoMint.getCommonKeychain(), mintedChildCommonKeychain);
+        assert_1.default.strictEqual(result.keys.commonKeychain, mintedChildCommonKeychain);
+        const walletPassphrase = 'safe-recovery-passphrase';
+        const userKey = sjcl.encrypt(walletPassphrase, result.keys.user);
+        const backupKey = sjcl.encrypt(walletPassphrase, result.keys.backup);
+        const rootCommonKeychain = userDkg.getCommonKeychain();
+        await assert_1.default.rejects((0, eddsaMPCv2_1.signEddsaMpcV2RecoveryTx)({
+            message: Buffer.from('wrong keychain must fail'),
+            userKey,
+            backupKey,
+            walletPassphrase,
+            bitgoKey: rootCommonKeychain,
+            derivationPath: 'm/0',
+        }), /commonKeyChain from keycard does not match bitgoKey/);
+        const mpc = await (0, eddsa_1.getInitializedMpcInstance)();
+        for (const derivationPath of ['m/0', 'm/3']) {
+            const message = Buffer.from(`Safe EdDSA recovery ${derivationPath}`);
+            const signature = await (0, eddsaMPCv2_1.signEddsaMpcV2RecoveryTx)({
+                message,
+                userKey,
+                backupKey,
+                walletPassphrase,
+                bitgoKey: result.keys.commonKeychain,
+                derivationPath,
+            });
+            const derivedKeychain = mpc.deriveUnhardened(result.keys.commonKeychain, derivationPath);
+            const publicKeyBytes = Buffer.from(derivedKeychain.slice(0, 64), 'hex');
+            assert_1.default.strictEqual(ed25519_1.ed25519.verify(new Uint8Array(signature), new Uint8Array(message), new Uint8Array(publicKeyBytes)), true);
+        }
+    });
+    it('derives the ed25519Multisig triplet at the BIP44 path', async () => {
+        const STRKEY_SEED = 'SAAACAQDAQCQMBYIBEFAWDANBYHRAEISCMKBKFQXDAMRUGY4DUPB6NKI';
+        const backupSeed = (0, src_1.decodeEd25519StrKeySecretSeed)(STRKEY_SEED);
+        const backupRootPub = Buffer.from(ed25519_1.ed25519.getPublicKey(backupSeed));
+        const backupChainCode = Buffer.alloc(32, 0xab);
+        const ed25519Roots = {
+            ...roots,
+            ed25519Multisig: {
+                user: STRKEY_SEED,
+                backup: { prv: STRKEY_SEED, chainCode: (0, src_1.encodeEd25519ChainCode)(backupChainCode) },
+                bitgo: (0, src_1.encodeDerivableEd25519Pub)(backupRootPub, backupChainCode),
+            },
+        };
+        const result = await (0, recovery_1.deriveSafeWalletKeys)({
+            coin: 'algo',
+            slot: 'ed25519Multisig',
+            account: 0,
+            roots: ed25519Roots,
+        });
+        if (result.slot !== 'ed25519Multisig') {
+            throw new Error('expected ed25519Multisig slot');
+        }
+        result.path.should.equal("m/44'/283'/2'/0'");
+        // user: hardened SLIP-0010 child, pinned to the leaf's golden vector
+        result.keys.user.kind.should.equal('seed');
+        result.keys.user.seed.should.equal('be69531ebbab851b69aa41bb9c905afed52d26ff4278e6418609d4d60570510c');
+        result.keys.user.pub.should.equal(Buffer.from(ed25519_1.ed25519.getPublicKey(Buffer.from(result.keys.user.seed, 'hex'))).toString('hex'));
+        // backup: extended key whose public half equals the public soft-derive of root pub ‖ chain code
+        const bitgoPub = (await (0, src_1.softDeriveChildPubEd25519AtPath)(ed25519Roots.ed25519Multisig.bitgo, 'm/44/283/2/0')).toString('hex');
+        result.keys.backup.kind.should.equal('extended');
+        // Pin the private halves to the cross-repo GV1 golden vector for this path.
+        const algoSoft = bip44Fixture.ed25519Soft.vectors.find((v) => v.path === 'm/44/283/2/0');
+        if (algoSoft === undefined) {
+            throw new Error('fixture is missing the m/44/283/2/0 soft co-signer vector');
+        }
+        result.keys.backup.kL.should.equal(algoSoft.childKLHex);
+        result.keys.backup.kR.should.equal(algoSoft.childKRHex);
+        result.keys.backup.pub.should.equal(bitgoPub);
+        result.keys.bitgo.pub.should.equal(bitgoPub);
+    });
+    it('rejects a non-integer account', async () => {
+        await (0, recovery_1.deriveSafeWalletKeys)({ coin: 'btc', slot: 'secp256k1Multisig', account: 1.5, roots }).should.be.rejectedWith(/invalid account/);
+    });
+});
+describe('buildSafeRecoverKeyParams', () => {
+    afterEach(() => {
+        sinon.restore();
+    });
+    const userRoot = utxo_lib_1.bip32.fromSeed(Buffer.from('000102030405060708090a0b0c0d0e0f', 'hex'));
+    const backupRoot = utxo_lib_1.bip32.fromSeed(Buffer.from('1f1e1d1c1b1a191817161514131211100f0e0d0c0b0a09080706050403020100', 'hex'));
+    const bitgoRoot = utxo_lib_1.bip32
+        .fromSeed(Buffer.from('2f2e2d2c2b2a292827262524232221201f1e1d1c1b1a19181716151413121110', 'hex'))
+        .neutered();
+    const keys = {
+        user: { prv: userRoot.toBase58(), pub: userRoot.neutered().toBase58() },
+        backup: { prv: backupRoot.toBase58(), pub: backupRoot.neutered().toBase58() },
+        bitgo: { pub: bitgoRoot.toBase58() },
+    };
+    it('signed mode re-encrypts child xprvs under a single ephemeral passphrase', async () => {
+        const passphrases = [];
+        const encrypt = sinon.stub().callsFake(async ({ input, password, encryptionVersion }) => {
+            passphrases.push(password);
+            encryptionVersion.should.equal(1);
+            return `enc(${input})`;
+        });
+        const bitgo = { encrypt };
+        const result = await (0, recovery_1.buildSafeRecoverKeyParams)({
+            bitgo,
+            coin: 'btc',
+            slot: 'secp256k1Multisig',
+            keys,
+            mode: 'signed',
+        });
+        result.userKey.should.equal(`enc(${keys.user.prv})`);
+        result.backupKey.should.equal(`enc(${keys.backup.prv})`);
+        result.bitgoKey.should.equal(keys.bitgo.pub);
+        result.walletPassphrase.should.be.a.String();
+        passphrases.should.have.length(2);
+        passphrases[0].should.equal(passphrases[1]);
+        passphrases[0].should.equal(result.walletPassphrase);
+        encrypt.callCount.should.equal(2);
+    });
+    it('rejects non-private child keys in signed mode', async () => {
+        const bitgo = { encrypt: sinon.stub() };
+        await (0, recovery_1.buildSafeRecoverKeyParams)({
+            bitgo,
+            coin: 'btc',
+            slot: 'secp256k1Multisig',
+            keys: { user: { prv: keys.user.pub, pub: keys.user.pub }, backup: keys.backup, bitgo: keys.bitgo },
+            mode: 'signed',
+        }).should.be.rejectedWith(/must be private xprvs/);
+    });
+    it('unsigned mode returns pubs and never encrypts', async () => {
+        const encrypt = sinon.stub().callsFake(async () => {
+            throw new Error('encrypt should not be called');
+        });
+        const bitgo = { encrypt };
+        const result = await (0, recovery_1.buildSafeRecoverKeyParams)({
+            bitgo,
+            coin: 'btc',
+            slot: 'secp256k1Multisig',
+            keys,
+            mode: 'unsigned',
+        });
+        result.userKey.should.equal(keys.user.pub);
+        result.backupKey.should.equal(keys.backup.pub);
+        result.bitgoKey.should.equal(keys.bitgo.pub);
+        result.should.not.have.property('walletPassphrase');
+        encrypt.callCount.should.equal(0);
+    });
+    it('rejects unsupported slots', async () => {
+        const bitgo = { encrypt: sinon.stub() };
+        await (0, recovery_1.buildSafeRecoverKeyParams)({
+            bitgo,
+            coin: 'btc',
+            slot: 'eddsaMpc',
+            keys,
+            mode: 'signed',
+        }).should.be.rejectedWith(/not supported yet/);
+    });
+});
+describe('Safe ecdsaMpc derive → sign (gate)', function () {
+    it('derives a child, rebuilds 2-of-2 shares, and signs a message verified at m/0', async function () {
+        const [userDkg, backupDkg] = await sdk_lib_mpc_1.DklsUtils.generateDKGKeyShares();
+        const [vrfUser, vrfBackup] = await sdk_lib_mpc_1.DklsVrfUtils.generateVrfDKGKeyShares();
+        const rootCommonKeychain = sdk_lib_mpc_1.DklsTypes.getCommonKeychain(userDkg.getKeyShare());
+        const { commonKeychain, userChild, backupChild } = await sdk_lib_mpc_1.DklsVrfUtils.deriveSafeEcdsaMpcChild({
+            userRoot: { signing: userDkg.getReducedKeyShare(), vrf: vrfUser.getKeyShare() },
+            backupRoot: { signing: backupDkg.getReducedKeyShare(), vrf: vrfBackup.getKeyShare() },
+            account: 0,
+            coinType: 60,
+            safeSlotOrdinal: 3,
+        });
+        // The derived child must never be the root (the "root envelope in the child position" footgun).
+        commonKeychain.should.not.equal(rootCommonKeychain);
+        // Rebuild 2-of-2 keyshares from the derived reduced CBOR, exactly as the signer's retrofit does.
+        const toRetrofit = (b64) => {
+            const reduced = sdk_lib_mpc_1.DklsTypes.getDecodedReducedKeyShare(Buffer.from(b64, 'base64'));
+            return {
+                xShare: {
+                    x: Buffer.from(reduced.prv).toString('hex'),
+                    y: Buffer.from(reduced.pub).toString('hex'),
+                    chaincode: Buffer.from(reduced.rootChainCode).toString('hex'),
+                },
+                xiList: reduced.xList.slice(0, 2),
+            };
+        };
+        const [user2of2, backup2of2] = await sdk_lib_mpc_1.DklsUtils.generate2of2KeyShares(toRetrofit(userChild), toRetrofit(backupChild));
+        const messageHash = Buffer.from('0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 'hex');
+        const userDsg = new sdk_lib_mpc_1.DklsDsg.Dsg(user2of2.getKeyShare(), 0, 'm/0', messageHash);
+        const backupDsg = new sdk_lib_mpc_1.DklsDsg.Dsg(backup2of2.getKeyShare(), 1, 'm/0', messageHash);
+        const signatureString = sdk_lib_mpc_1.DklsUtils.verifyAndConvertDklsSignature(messageHash, (await sdk_lib_mpc_1.DklsUtils.executeTillRound(5, userDsg, backupDsg)), commonKeychain, 'm/0', undefined, false);
+        // verifyAndConvertDklsSignature recovers the pubkey from the signature and checks it against
+        // deriveUnhardened(childCK, 'm/0'); it throws on mismatch, so a returned string is proof.
+        signatureString.should.be.a.String();
+        signatureString.should.match(/^\d+:[0-9a-f]+:[0-9a-f]+:[0-9a-f]+$/);
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/bitgo/safe/rootCoin.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rootCoin.d.ts.map

package/dist/test/unit/bitgo/safe/rootCoin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rootCoin.d.ts","sourceRoot":"","sources":["../../../../../test/unit/bitgo/safe/rootCoin.ts"],"names":[],"mappings":""}

package/dist/test/unit/bitgo/safe/rootCoin.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const statics_1 = require("@bitgo-beta/statics");
+const rootCoin_1 = require("../../../../src/bitgo/safe/rootCoin");
+describe('SAFE_ROOT_SLOTS', function () {
+    it('should match the slot ordinals served from statics, in order', function () {
+        // typed as Record<RootKeyType, number>, so a slot missing from statics is a compile error
+        const ordinals = statics_1.SAFE_ROOT_SLOT_ORDINALS;
+        rootCoin_1.SAFE_ROOT_SLOTS.map((slot) => ordinals[slot]).should.deepEqual(rootCoin_1.SAFE_ROOT_SLOTS.map((_, i) => i + 1));
+        Object.keys(statics_1.SAFE_ROOT_SLOT_ORDINALS).should.deepEqual(rootCoin_1.SAFE_ROOT_SLOTS);
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/bitgo/safe/safe.d.ts

@@ -0,0 +1,2 @@
+import 'should';
+//# sourceMappingURL=safe.d.ts.map

package/dist/test/unit/bitgo/safe/safe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe.d.ts","sourceRoot":"","sources":["../../../../../test/unit/bitgo/safe/safe.ts"],"names":[],"mappings":"AACA,OAAO,QAAQ,CAAC"}