@bitgo-beta/sdk-core 8.2.1-beta.213 → 8.2.1-beta.2131

package/dist/test/unit/bitgo/wallet/safeShareWallet.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @prettier
+ *
+ * Safe-wallet SPEND sharing. Mirrors test/unit/bitgo/wallet/safeGetUserPrv.ts (sinon-stubbed,
+ * no nock) for the sharing analogue: a safe owner's children are pub-only, so the share path
+ * must re-derive the child prv from the root — never the root material.
+ */
+import 'should';
+//# sourceMappingURL=safeShareWallet.d.ts.map

package/dist/test/unit/bitgo/wallet/safeShareWallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safeShareWallet.d.ts","sourceRoot":"","sources":["../../../../../test/unit/bitgo/wallet/safeShareWallet.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,QAAQ,CAAC"}

package/dist/test/unit/bitgo/wallet/safeShareWallet.js

@@ -0,0 +1,304 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * @prettier
+ *
+ * Safe-wallet SPEND sharing. Mirrors test/unit/bitgo/wallet/safeGetUserPrv.ts (sinon-stubbed,
+ * no nock) for the sharing analogue: a safe owner's children are pub-only, so the share path
+ * must re-derive the child prv from the root — never the root material.
+ */
+require("should");
+const sinon = __importStar(require("sinon"));
+const src_1 = require("../../../../src");
+const ecdh_1 = require("../../../../src/bitgo/ecdh");
+const bitcoin_1 = require("../../../../src/bitgo/bitcoin");
+require('should-sinon');
+describe('Safe wallet spend sharing', function () {
+    const prv = 'xprv9s21ZrQH143K3hekyNj7TciR4XNYe1kMj68W2ipjJGNHETWP7o42AjDnSPgKhdZ4x8NBAvaL72RrXjuXNdmkMqLERZza73oYugGtbLFXG8g';
+    const childPath = (0, src_1.buildSafeBip44Path)(0, 'secp256k1Multisig', 123);
+    const hardened = (0, src_1.deriveSafeChildHardenedFromXprv)(prv, childPath);
+    const passphrase = 'test-passphrase';
+    const rootKeyId = 'root-key-id';
+    const SHAREE_PUB = '0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798';
+    let mockBitGo;
+    let mockBaseCoin;
+    let keychainsGetStub;
+    let encryptStub;
+    let decryptStub;
+    let createShareStub;
+    let createBulkKeySharesStub;
+    const baseWalletData = {
+        id: 'wallet-id',
+        coin: 'tbtc',
+        keys: ['user-key', 'backup-key', 'bitgo-key'],
+        type: 'hot',
+        multisigType: 'onchain',
+        enterprise: 'ent-id',
+    };
+    const childKeychain = (id) => ({
+        id,
+        pub: hardened.pub,
+        type: 'independent',
+        parent: rootKeyId,
+        derivedFromParentWithPath: childPath,
+    });
+    const publicOnlyKeychain = (id) => ({ id, pub: 'pub-' + id, type: 'independent' });
+    const rootKeychain = {
+        id: rootKeyId,
+        source: 'user',
+        encryptedPrv: `enc:${prv}`,
+        type: 'independent',
+        pub: 'root-pub',
+    };
+    beforeEach(function () {
+        keychainsGetStub = sinon.stub();
+        encryptStub = sinon.stub();
+        decryptStub = sinon.stub();
+        mockBitGo = {
+            encrypt: encryptStub,
+            decrypt: decryptStub,
+            url: sinon.stub().returns('https://test.bitgo.com/'),
+            setRequestTracer: sinon.stub(),
+            getSharingKey: sinon.stub().resolves({ userId: 'sharee-id', pubkey: SHAREE_PUB, path: 'm/0' }),
+        };
+        mockBaseCoin = {
+            getChain: sinon.stub().returns('tbtc'),
+            getFamily: sinon.stub().returns('btc'),
+            getFullName: sinon.stub().returns('Test Bitcoin'),
+            keychains: sinon.stub().returns({
+                get: keychainsGetStub,
+                getKeysForSigning: sinon.stub().resolves([]),
+            }),
+            deriveKeyWithSeed: sinon.stub(),
+            url: sinon.stub().callsFake((path) => `https://test.bitgo.com/api/v2/tbtc${path}`),
+            supportsStaking: sinon.stub().returns(false),
+            supportsTss: sinon.stub().returns(false),
+            getMPCAlgorithm: sinon.stub(),
+            keyIdsForSigning: sinon.stub().returns([0, 1, 2]),
+        };
+        keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === rootKeyId ? rootKeychain : id === 'user-key' ? childKeychain(id) : publicOnlyKeychain(id)));
+        // Reversible encrypt: `shared:<password>:<input>` so tests can verify the ECDH secret and
+        // that the payload encrypts the CHILD prv, not the root.
+        encryptStub.callsFake(({ input, password }) => Promise.resolve(`shared:${password}:${input}`));
+        decryptStub.callsFake(({ input, password }) => {
+            if (password !== passphrase)
+                return null;
+            if (typeof input === 'string' && input.startsWith('enc:'))
+                return input.slice(4);
+            return null;
+        });
+        createShareStub = sinon.stub(src_1.Wallet.prototype, 'createShare').resolves({});
+        createBulkKeySharesStub = sinon.stub(src_1.Wallet.prototype, 'createBulkKeyShares').resolves({ shares: [] });
+    });
+    afterEach(function () {
+        sinon.restore();
+    });
+    function makeWallet(overrides = {}) {
+        return new src_1.Wallet(mockBitGo, mockBaseCoin, {
+            ...baseWalletData,
+            ...overrides,
+        });
+    }
+    async function getShareOptions(wallet, params = {}) {
+        await wallet.shareWallet({
+            email: 'shareto@test.com',
+            permissions: 'spend',
+            walletPassphrase: passphrase,
+            ...params,
+        });
+        return createShareStub.firstCall.args[0];
+    }
+    describe('hot safe wallet, spend share', function () {
+        it('derives child material, uses the registered child pub, and never ships root material', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const options = await getShareOptions(wallet);
+            options.skipKeychain.should.equal(false);
+            options.keychain.should.be.ok();
+            options.keychain.pub.should.equal(hardened.pub);
+            const json = JSON.stringify(options.keychain);
+            json.should.not.containEql(prv); // root xprv never leaves
+            json.should.not.containEql('root-pub'); // root pub never leaves
+        });
+        it('the encrypted prv ECDH-decrypts (sharee side) to the CHILD prv', async function () {
+            const shareeKey = (0, bitcoin_1.makeRandomKey)();
+            const shareePub = shareeKey.publicKey.toString('hex');
+            mockBitGo.getSharingKey = sinon.stub().resolves({ userId: 'sharee-id', pubkey: shareePub, path: 'm/0' });
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const options = await getShareOptions(wallet);
+            const shareeSecret = (0, ecdh_1.getSharedSecret)(shareeKey, Buffer.from(options.keychain.fromPubKey, 'hex')).toString('hex');
+            options.keychain.encryptedPrv.should.equal(`shared:${shareeSecret}:${hardened.prv}`);
+        });
+        it('a view-only share needs no keychain and does not fetch the root', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet.shareWallet({ email: 'shareto@test.com', permissions: 'view', walletPassphrase: passphrase });
+            createShareStub.firstCall.args[0].skipKeychain.should.equal(true);
+            createShareStub.firstCall.args[0].should.have.property('keychain', undefined);
+            keychainsGetStub.notCalled.should.equal(true);
+        });
+        it('a wrong passphrase rejects with IncorrectPasswordError and posts nothing', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: 'wrong-passphrase' })
+                .should.be.rejectedWith(src_1.IncorrectPasswordError);
+            createShareStub.notCalled.should.equal(true);
+        });
+        it('a missing passphrase throws instead of silently skipKeychain', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend' })
+                .should.be.rejectedWith(/Missing walletPassphrase argument/);
+            createShareStub.notCalled.should.equal(true);
+        });
+        it('fails closed when the derived pub does not match the registered child pub', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === rootKeyId
+                ? rootKeychain
+                : id === 'user-key'
+                    ? { ...childKeychain(id), pub: 'wrong-child-pub' }
+                    : publicOnlyKeychain(id)));
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: passphrase })
+                .should.be.rejectedWith(src_1.SafeDerivedPublicKeyMismatchError);
+        });
+    });
+    describe('unsupported safe slots', function () {
+        it('TSS safe wallet throws SafeShareNotImplementedError without fetching the root', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', multisigType: 'tss' });
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: passphrase })
+                .should.be.rejectedWith(src_1.SafeShareNotImplementedError);
+            // child fetched (safe branch), root never fetched (guard fires first)
+            keychainsGetStub.calledOnce.should.equal(true);
+            keychainsGetStub.firstCall.args[0].should.deepEqual({ id: 'user-key' });
+        });
+        it('ed25519 onchain safe wallet throws SafeShareNotImplementedError', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', coin: 'txlm' });
+            mockBaseCoin.getFamily.returns('xlm');
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: passphrase })
+                .should.be.rejectedWith(src_1.SafeShareNotImplementedError);
+            keychainsGetStub.calledOnce.should.equal(true);
+        });
+    });
+    describe('regression: non-safe and sharee paths', function () {
+        it('a genuine cold wallet still yields skipKeychain', async function () {
+            const wallet = makeWallet({ type: 'cold' });
+            const options = await getShareOptions(wallet);
+            options.skipKeychain.should.equal(true);
+            options.should.have.property('keychain', undefined);
+        });
+        it('a sharee re-sharing (child has encryptedPrv) takes the ordinary path and never fetches the root', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const shareeChild = {
+                id: 'user-key',
+                pub: 'sharee-pub',
+                type: 'independent',
+                encryptedPrv: `enc:sharee-prv`,
+            };
+            keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === 'user-key' ? shareeChild : publicOnlyKeychain(id)));
+            const options = await getShareOptions(wallet);
+            options.skipKeychain.should.equal(false);
+            options.keychain.pub.should.equal('sharee-pub');
+            // root (safe-owner detour) must never be reached for a sharee with an encrypted child prv
+            keychainsGetStub
+                .getCalls()
+                .filter((c) => c.args?.[0]?.id === rootKeyId)
+                .length.should.equal(0);
+        });
+        it('a malformed safe wallet (child with no parent) fails closed instead of cold-skipping', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === 'user-key' ? publicOnlyKeychain(id) : publicOnlyKeychain(id)));
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: passphrase })
+                .should.be.rejectedWith(/safe child could not be resolved/);
+            createShareStub.notCalled.should.equal(true);
+        });
+        it('a non-safe hot wallet spend share is unchanged', async function () {
+            const wallet = makeWallet({});
+            const userKeychain = {
+                id: 'user-key',
+                pub: 'hot-pub',
+                type: 'independent',
+                encryptedPrv: `enc:hot-prv`,
+            };
+            keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === 'user-key' ? userKeychain : publicOnlyKeychain(id)));
+            const options = await getShareOptions(wallet);
+            options.skipKeychain.should.equal(false);
+            options.keychain.pub.should.equal('hot-pub');
+        });
+        it('an lnbtc wallet takes the userAuth path and never enters the safe branch', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', coin: 'lbtc' });
+            mockBaseCoin.getFamily.returns('lnbtc');
+            const safeChildSpy = sinon.spy(wallet, 'getSafeOwnerChildKeychain');
+            // stubbing the private keychain fetch so lnbtc resolves a keychain without full lightning mocks
+            sinon.stub(wallet, 'getEncryptedWalletKeychainForWalletSharing').resolves({
+                id: 'user-key',
+                pub: 'ln-pub',
+                encryptedPrv: `enc:ln-prv`,
+                type: 'independent',
+            });
+            const options = await getShareOptions(wallet);
+            options.keychain.pub.should.equal('ln-pub');
+            safeChildSpy.notCalled.should.equal(true);
+        });
+    });
+    describe('createBulkWalletShare on a safe wallet', function () {
+        const bulkParams = {
+            walletPassphrase: passphrase,
+            keyShareOptions: [
+                { userId: 'u1', pubKey: SHAREE_PUB, path: 'm/0', permissions: 'spend' },
+                { userId: 'u2', pubKey: SHAREE_PUB, path: 'm/0', permissions: 'spend' },
+            ],
+        };
+        it('derives the child once (one root decrypt) and fans it out per user', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet.createBulkWalletShare(bulkParams);
+            createBulkKeySharesStub.calledOnce.should.equal(true);
+            const options = createBulkKeySharesStub.firstCall.args[0];
+            options.length.should.equal(2);
+            options.forEach((o) => o.keychain.pub.should.equal(hardened.pub));
+            // child + root exactly once (single root decrypt)
+            const rootCalls = keychainsGetStub.getCalls().filter((c) => c.args?.[0]?.id === rootKeyId);
+            rootCalls.length.should.equal(1);
+        });
+        it('the real error propagates instead of shareOptions cannot be empty', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', multisigType: 'tss' });
+            await wallet.createBulkWalletShare(bulkParams).should.be.rejectedWith(src_1.SafeShareNotImplementedError);
+            createBulkKeySharesStub.notCalled.should.equal(true);
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/bitgo/wallet/tokenApproval.d.ts

@@ -0,0 +1,2 @@
+import 'should';
+//# sourceMappingURL=tokenApproval.d.ts.map

package/dist/test/unit/bitgo/wallet/tokenApproval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenApproval.d.ts","sourceRoot":"","sources":["../../../../../test/unit/bitgo/wallet/tokenApproval.ts"],"names":[],"mappings":"AACA,OAAO,QAAQ,CAAC"}