@bitgo-beta/sdk-core 8.2.1-beta.213 → 8.2.1-beta.2131

package/dist/src/bitgo/safe/derivableEd25519Pub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derivableEd25519Pub.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/safe/derivableEd25519Pub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAoBH,sGAAsG;AACtG,MAAM,MAAM,uBAAuB,CAAC,CAAC,IAAI;IACvC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IACf,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IACf,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;CACjB,CAAC;AAaF,oFAAoF;AACpF,wBAAsB,+BAA+B,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKzG;AAED,6EAA6E;AAC7E,wBAAsB,yBAAyB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKpG;AAED;;;;GAIG;AACH,wBAAsB,+BAA+B,CAAC,MAAM,EAAE;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAsB3C;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BlG;AAED,qFAAqF;AACrF,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,4EAA4E;AAC5E,wBAAgB,mCAAmC,CAAC,GAAG,EAAE,wBAAwB,GAAG,IAAI,CAOvF;AAED;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxE,CAAC;AAEF,yEAAyE;AACzE,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAOpF;AAED;;;;;GAKG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,qBAAqB,EAC7B,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,MAAM,CAAC,CAmBjB"}

package/dist/src/bitgo/safe/derivableEd25519Pub.js

@@ -0,0 +1,186 @@
+"use strict";
+/**
+ * Ed25519 safe-root public derivation material and Stellar user-key codecs.
+ *
+ * Safe backup and BitGo roots store raw public key (32 bytes) || raw chain code (32 bytes),
+ * encoded together as canonical unpadded RFC 4648 base32. Coin-specific public-key encodings are
+ * applied only to derived wallet children.
+ *
+ * The pure codecs + composite-pub encoding moved to @bitgo-beta/sdk-lib-safes. Only the WASM
+ * soft-derivation remains here (it needs Ed25519BIP32/Eddsa, which live in sdk-core).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.softDeriveChildPubEd25519AtPath = softDeriveChildPubEd25519AtPath;
+exports.softDeriveChildPubEd25519 = softDeriveChildPubEd25519;
+exports.softDeriveChildPrvEd25519AtPath = softDeriveChildPrvEd25519AtPath;
+exports.signEd25519Extended = signEd25519Extended;
+exports.assertValidExternalEd25519Signature = assertValidExternalEd25519Signature;
+exports.assertValidExternalEd25519Signer = assertValidExternalEd25519Signer;
+exports.signWithExternalEd25519Signer = signWithExternalEd25519Signer;
+const crypto_1 = require("crypto");
+const nacl = __importStar(require("tweetnacl"));
+const account_lib_1 = require("../../account-lib");
+const sdk_lib_safes_1 = require("@bitgo-beta/sdk-lib-safes");
+let eddsaPromise;
+function getEddsa() {
+    if (!eddsaPromise) {
+        eddsaPromise = (async () => account_lib_1.Eddsa.initialize(await account_lib_1.Ed25519BIP32.initialize()))();
+        eddsaPromise.catch(() => {
+            eddsaPromise = undefined;
+        });
+    }
+    return eddsaPromise;
+}
+/** Soft-derive an unhardened path and return the derived raw 32-byte public key. */
+async function softDeriveChildPubEd25519AtPath(compositePub, path) {
+    (0, sdk_lib_safes_1.assertBip32Path)(path, { hardened: false });
+    const { pub, chainCode } = (0, sdk_lib_safes_1.decodeDerivableEd25519Pub)(compositePub);
+    const eddsa = await getEddsa();
+    return Buffer.from(eddsa.deriveUnhardened(Buffer.concat([pub, chainCode]).toString('hex'), path).slice(0, 64), 'hex');
+}
+/** Soft-derive `m/<index>` and return the derived raw 32-byte public key. */
+async function softDeriveChildPubEd25519(compositePub, index) {
+    if (!Number.isInteger(index) || index < 0 || index > 0x7fffffff) {
+        throw new Error(`ed25519 safe co-signer derivation index must be non-hardened, got ${index}`);
+    }
+    return softDeriveChildPubEd25519AtPath(compositePub, `m/${index}`);
+}
+/**
+ * Soft-derive an ed25519 co-signer child at an unhardened path, returning the private
+ * extended-key material — the reduced-mod-L scalar `kL`, the nonce prefix `kR`, and the matching
+ * public point — from a root secret seed plus the root chain code carried on the keycard.
+ */
+async function softDeriveChildPrvEd25519AtPath(params) {
+    const { seedStrKey, chainCode, path } = params;
+    (0, sdk_lib_safes_1.assertBip32Path)(path, { hardened: false });
+    const seed = (0, sdk_lib_safes_1.decodeEd25519StrKeySecretSeed)(seedStrKey);
+    const chainCodeBuf = (0, sdk_lib_safes_1.decodeEd25519ChainCode)(chainCode);
+    const eddsa = await getEddsa();
+    const h = (0, crypto_1.createHash)('sha512').update(seed).digest();
+    const sk = (0, account_lib_1.clamp)((0, account_lib_1.bigIntFromBufferLE)(h.subarray(0, 32)));
+    const prefix = (0, account_lib_1.bigIntFromBufferBE)(h.subarray(32));
+    const pk = account_lib_1.Eddsa.curve.basePointMult(sk);
+    if (!eddsa.hdTree) {
+        throw new Error('Eddsa HD tree is not initialized');
+    }
+    const derived = eddsa.hdTree.privateDerive({ pk, sk, prefix, chaincode: (0, account_lib_1.bigIntFromBufferBE)(chainCodeBuf) }, path);
+    if (derived.prefix === undefined) {
+        throw new Error('soft derivation did not produce a nonce prefix');
+    }
+    return {
+        kL: (0, account_lib_1.bigIntToBufferLE)(derived.sk, 32),
+        kR: (0, account_lib_1.bigIntToBufferBE)(derived.prefix, 32),
+        pub: (0, account_lib_1.bigIntToBufferLE)(derived.pk, 32),
+    };
+}
+/**
+ * Sign `message` with a BIP32-Ed25519 extended key directly, without a seed.
+ *
+ * A soft-derived child has no 32-byte seed whose SHA-512 yields `(kL, kR)`, so the
+ * seed-based `nacl.sign.keyPair.fromSeed` cannot sign for it. This performs RFC 8032
+ * scalar signing straight from the reduced-mod-L scalar `kL` and the nonce prefix `kR`.
+ *
+ * @param message bytes to sign
+ * @param kL 32-byte signing scalar, reduced mod L (little-endian)
+ * @param kR 32-byte nonce prefix (big-endian)
+ * @returns 64-byte Ed25519 signature `R ‖ S`
+ */
+async function signEd25519Extended(message, kL, kR) {
+    if (kL.length !== 32) {
+        throw new Error(`Invalid Ed25519 extended key kL length: expected 32 bytes, got ${kL.length}`);
+    }
+    if (kR.length !== 32) {
+        throw new Error(`Invalid Ed25519 extended key kR length: expected 32 bytes, got ${kR.length}`);
+    }
+    await getEddsa();
+    const curve = account_lib_1.Eddsa.curve;
+    const kLInt = (0, account_lib_1.bigIntFromBufferLE)(kL);
+    const r = curve.scalarReduce((0, account_lib_1.bigIntFromBufferLE)((0, crypto_1.createHash)('sha512')
+        .update(Buffer.concat([kR, message]))
+        .digest()));
+    const R = curve.basePointMult(r);
+    const A = curve.basePointMult(kLInt);
+    const h = curve.scalarReduce((0, account_lib_1.bigIntFromBufferLE)((0, crypto_1.createHash)('sha512')
+        .update(Buffer.concat([(0, account_lib_1.bigIntToBufferLE)(R, 32), (0, account_lib_1.bigIntToBufferLE)(A, 32), message]))
+        .digest()));
+    const S = curve.scalarAdd(r, curve.scalarMult(h, kLInt));
+    return Buffer.concat([(0, account_lib_1.bigIntToBufferLE)(R, 32), (0, account_lib_1.bigIntToBufferLE)(S, 32)]);
+}
+/** Fails fast if a `ExternalEd25519Signature` has malformed hex/lengths. */
+function assertValidExternalEd25519Signature(sig) {
+    if (!/^[0-9a-f]{64}$/i.test(sig.publicKey)) {
+        throw new Error('Invalid external Ed25519 public key: expected 32 bytes (64 hex characters)');
+    }
+    if (!/^[0-9a-f]{128}$/i.test(sig.signature)) {
+        throw new Error('Invalid external Ed25519 signature: expected 64 bytes (128 hex characters)');
+    }
+}
+/** Fails fast if an `ExternalEd25519Signer` is missing or mis-shaped. */
+function assertValidExternalEd25519Signer(signer) {
+    if (!/^[0-9a-f]{64}$/i.test(signer.publicKey)) {
+        throw new Error('Invalid external Ed25519 public key: expected 32 bytes (64 hex characters)');
+    }
+    if (typeof signer.sign !== 'function') {
+        throw new Error('Invalid external Ed25519 signer: sign must be a function');
+    }
+}
+/**
+ * Calls an `ExternalEd25519Signer` over `message`, fails fast unless the signature is a valid
+ * 64-byte (128-hex) signature that verifies against the signer's advertised public key, and
+ * returns the hex signature. The cryptographic check lives here — once, shared by every coin —
+ * so no caller can inject a well-formed-but-wrong signature into a transaction.
+ */
+async function signWithExternalEd25519Signer(signer, message) {
+    assertValidExternalEd25519Signer(signer);
+    // The signer gets a defensive copy: it must not be able to mutate the authoritative transaction
+    // bytes, and the signature is verified against the original message, not whatever the signer
+    // received or modified.
+    const messageForSigner = Uint8Array.from(message);
+    const result = await signer.sign(messageForSigner);
+    if (!result || typeof result.signature !== 'string') {
+        throw new Error('Invalid external Ed25519 signer: sign must resolve to { signature: string }');
+    }
+    if (!/^[0-9a-f]{128}$/i.test(result.signature)) {
+        throw new Error('Invalid external Ed25519 signature: expected 64 bytes (128 hex characters)');
+    }
+    const signature = Buffer.from(result.signature, 'hex');
+    const publicKey = Buffer.from(signer.publicKey, 'hex');
+    if (!nacl.sign.detached.verify(message, signature, publicKey)) {
+        throw new Error('Invalid external Ed25519 signer: signature does not verify against its public key');
+    }
+    return result.signature;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/safe/iSafe.d.ts

@@ -0,0 +1,124 @@
+/**
+ * @prettier
+ *
+ * @experimental The safe client surface is experimental and may change (including breaking
+ * changes) before the public release.
+ */
+import type { FreezeSafeBody, SafeData, SafePermission, SafeRootKeys, SafeShareData, SafeShareKeychain, SafeShareState, WebAuthnOtpDevice } from '@bitgo/public-types';
+import type { EncryptionVersion } from '../../api/types';
+import type { Wallet, WalletShare } from '../wallet';
+import type { WebAuthnProvider } from '../webauthn';
+/** @experimental */
+export interface InitializeSafeOptions {
+    label: string;
+}
+/** @experimental */
+export interface UpdateSafeOptions {
+    label: string;
+}
+/**
+ * Phase 3 — the client hands back the 12 key ids it created in Phase 2.
+ * @experimental
+ */
+export interface FinalizeSafeOptions {
+    rootKeys: SafeRootKeys;
+}
+/**
+ * Sharing ONE safe wallet with a non-member rides the existing wallet-share handshake,
+ * so the result is the existing WalletShare shape.
+ */
+export type WalletShareData = WalletShare;
+export interface CreateSafeWalletOptions {
+    coin: string;
+    label: string;
+    passphrase: string;
+    type?: 'hot';
+    /**
+     * Mint scheme: `onchain` (default) uses the independent multisig root slot for the coin's
+     * curve; `tss` uses the MPC root slot. Independent of the coin's default wallet multisig type.
+     */
+    multisigType?: 'onchain' | 'tss';
+}
+interface AddSafeMemberBase {
+    permissions: SafePermission[];
+    /** required when 'spend' is included — the 4 root user keys ECDH-re-encrypted to the invitee */
+    keychains?: SafeShareKeychain[];
+    message?: string;
+    /** when true, suppress the invitation email that would otherwise be sent to `email` */
+    disableEmail?: boolean;
+}
+/** Add a member by either `userId` or `email` — exactly one is required. */
+export type AddSafeMemberOptions = (AddSafeMemberBase & {
+    userId: string;
+    email?: never;
+}) | (AddSafeMemberBase & {
+    email: string;
+    userId?: never;
+});
+export interface AddSafeWalletMemberOptions {
+    walletId: string;
+    /** required — sharing re-encrypts the user key, which needs hardened derivation from the passphrase */
+    walletPassphrase: string;
+    email?: string;
+    permissions?: string[];
+    message?: string;
+}
+export type AcceptSafeShareAsSpenderOptions = {
+    safeShareId: string;
+    userPassword: string;
+    newWalletPassphrase?: string;
+};
+export type AcceptSafeShareAsNonSpenderOptions = {
+    safeShareId: string;
+};
+export type AcceptSafeShareOptions = AcceptSafeShareAsSpenderOptions | AcceptSafeShareAsNonSpenderOptions;
+/**
+ * Register a PRF passkey on every user root of the safe. The device must be PRF-capable
+ * and already enrolled on the caller's account.
+ * @experimental
+ */
+export interface RegisterSafePasskeyOptions {
+    device: WebAuthnOtpDevice;
+    safePassphrase: string;
+    provider: WebAuthnProvider;
+    /** Encryption version for the PRF-wrapped blobs; defaults to the SDK default (mirrors wallet attach). */
+    encryptionVersion?: EncryptionVersion;
+}
+/**
+ * Remove a PRF passkey from every user root. `safePassphrase` is verified client-side
+ * (decrypts a user root) before the server is called.
+ * @experimental
+ */
+export interface RemoveSafePasskeyOptions {
+    device: WebAuthnOtpDevice;
+    safePassphrase: string;
+}
+export interface RegisterSafePasskeyResponse {
+    otpDeviceId: string;
+    updatedKeys: string[];
+}
+/**
+ * @experimental
+ */
+export interface ISafe {
+    id(): string;
+    enterpriseId(): string;
+    label(): string;
+    status(): SafeData['status'];
+    url(extra?: string): string;
+    createWallet(params: CreateSafeWalletOptions): Promise<Wallet>;
+    update(params: UpdateSafeOptions): Promise<SafeData>;
+    addMember(params: AddSafeMemberOptions): Promise<SafeData>;
+    addMemberToWallet(params: AddSafeWalletMemberOptions): Promise<WalletShareData>;
+    listShares(params?: {
+        state?: SafeShareState;
+    }): Promise<SafeShareData[]>;
+    acceptShare(params: AcceptSafeShareOptions): Promise<SafeShareData>;
+    registerPasskey(params: RegisterSafePasskeyOptions): Promise<RegisterSafePasskeyResponse>;
+    removePasskey(params: RemoveSafePasskeyOptions): Promise<void>;
+    freeze(params?: FreezeSafeBody): Promise<SafeData>;
+    archive(): Promise<SafeData>;
+    toJSON(): SafeData;
+}
+export {};
+//# sourceMappingURL=iSafe.d.ts.map

package/dist/src/bitgo/safe/iSafe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iSafe.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/safe/iSafe.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EACV,cAAc,EACd,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,oBAAoB;AACpB,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,oBAAoB;AACpB,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,YAAY,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC;AAI1C,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,KAAK,CAAC;IACb;;;OAGG;IACH,YAAY,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;CAClC;AAED,UAAU,iBAAiB;IACzB,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,gGAAgG;IAChG,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,4EAA4E;AAC5E,MAAM,MAAM,oBAAoB,GAC5B,CAAC,iBAAiB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC,GACvD,CAAC,iBAAiB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AAE5D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,uGAAuG;IACvG,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,+BAA+B,GAAG;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AACF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AACF,MAAM,MAAM,sBAAsB,GAAG,+BAA+B,GAAG,kCAAkC,CAAC;AAE1G;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,yGAAyG;IACzG,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,KAAK;IACpB,EAAE,IAAI,MAAM,CAAC;IACb,YAAY,IAAI,MAAM,CAAC;IACvB,KAAK,IAAI,MAAM,CAAC;IAChB,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,YAAY,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAGrD,SAAS,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE3D,iBAAiB,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAChF,UAAU,CAAC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,cAAc,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1E,WAAW,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,eAAe,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC1F,aAAa,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,IAAI,QAAQ,CAAC;CACpB"}

package/dist/src/bitgo/safe/iSafe.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/safe/iSafes.d.ts

@@ -0,0 +1,94 @@
+/**
+ * @prettier
+ *
+ * @experimental The safe client surface is experimental and may change (including breaking
+ * changes) before the public release.
+ */
+import type { InitializeSafeResponse } from '@bitgo/public-types';
+import { FinalizeSafeOptions, InitializeSafeOptions } from './iSafe';
+import { Safe } from './safe';
+/**
+ * Options for safe creation.
+ *
+ * v1 targets the HOT custody model only: the multisig root user/backup keys are generated locally
+ * by the SDK, encrypted with `passphrase`, and registered on BitGo; the MPC roots run the standard
+ * hot ceremonies with the same passphrase. Self-managed cold keys and custodial safes are out of
+ * scope for v1.
+ * @experimental
+ */
+export interface CreateSafeOptions {
+    label: string;
+    passphrase: string;
+}
+/**
+ * Handle returned by `initializeSafe`, threaded into the key ceremonies and finalize.
+ *
+ * `enabledRootSlots` is the server-decided (Flipt, evaluated once at initialize) set of root-key
+ * slots to generate; absent (older WP) falls back to all 4 slots.
+ * @experimental
+ */
+export interface SafeCreationHandle {
+    safeId: string;
+    enabledRootSlots?: InitializeSafeResponse['enabledRootSlots'];
+}
+/**
+ * The minted root key ids produced by `createSafeKeys`, as ordered [user, backup, bitgo]
+ * triplets for the enabled slots — exactly the payload `finalizeSafe` consumes.
+ * @experimental
+ */
+export type SafeKeys = FinalizeSafeOptions;
+/**
+ * @experimental
+ */
+export interface ListSafesOptions {
+    cursor?: string;
+    limit?: number;
+}
+/**
+ * @experimental
+ */
+export interface GetSafeOptions {
+    id: string;
+}
+/**
+ * @experimental
+ */
+export interface ISafes {
+    /**
+     * One-call convenience wrapper chaining the three creation phases:
+     * initialize → createSafeKeys (safeId-tagged ceremonies for the enabled root slots) → finalize.
+     * HOT custody only in v1.
+     * @experimental
+     */
+    generateSafe(params: CreateSafeOptions): Promise<Safe>;
+    /**
+     * Phase 1 — initialize a safe (metadata only, no key material). The server response is
+     * `{ id, status }` plus optional `enabledRootSlots` (no `label`/`enterpriseId`/`creator`/`users`/
+     * `createdAt` yet), so this returns that raw shape rather than a full `Safe`.
+     * @experimental
+     */
+    initializeSafe(params: InitializeSafeOptions): Promise<InitializeSafeResponse>;
+    /**
+     * Phase 2 — run the enabled root key ceremonies tagged with `safeId`; returns the minted key ids.
+     * @experimental
+     */
+    createSafeKeys(params: CreateSafeOptions & SafeCreationHandle): Promise<SafeKeys>;
+    /**
+     * Phase 3 — finalize a safe with the minted root key ids. Idempotent.
+     * @experimental
+     */
+    finalizeSafe(safeId: string, params: FinalizeSafeOptions): Promise<Safe>;
+    /**
+     * Archive a safe. Also the abandonment path for a stuck `initializing` safe.
+     * @experimental
+     */
+    archiveSafe(safeId: string): Promise<Safe>;
+    /** @experimental */
+    list(params?: ListSafesOptions): Promise<{
+        safes: Safe[];
+        nextCursor?: string;
+    }>;
+    /** @experimental */
+    get(params: GetSafeOptions): Promise<Safe>;
+}
+//# sourceMappingURL=iSafes.d.ts.map

package/dist/src/bitgo/safe/iSafes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iSafes.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/safe/iSafes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAE9B;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;CAC/D;AAED;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AAE3C;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB;;;;;OAKG;IACH,YAAY,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;;;;OAKG;IACH,cAAc,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/E;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,iBAAiB,GAAG,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClF;;;OAGG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE;;;OAGG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,oBAAoB;IACpB,IAAI,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjF,oBAAoB;IACpB,GAAG,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C"}

package/dist/src/bitgo/safe/iSafes.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/safe/index.d.ts

@@ -0,0 +1,8 @@
+export * from './derivableEd25519Pub';
+export * from './iSafe';
+export * from './iSafes';
+export * from './recovery';
+export * from './safe';
+export * from './safes';
+export * from '@bitgo-beta/sdk-lib-safes';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/bitgo/safe/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/safe/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,2BAA2B,CAAC"}

package/dist/src/bitgo/safe/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./derivableEd25519Pub"), exports);
+__exportStar(require("./iSafe"), exports);
+__exportStar(require("./iSafes"), exports);
+__exportStar(require("./recovery"), exports);
+__exportStar(require("./safe"), exports);
+__exportStar(require("./safes"), exports);
+__exportStar(require("@bitgo-beta/sdk-lib-safes"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvYml0Z28vc2FmZS9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7O0FBQUEsd0RBQXNDO0FBQ3RDLDBDQUF3QjtBQUN4QiwyQ0FBeUI7QUFDekIsNkNBQTJCO0FBQzNCLHlDQUF1QjtBQUN2QiwwQ0FBd0I7QUFDeEIsNERBQTBDIiwic291cmNlc0NvbnRlbnQiOlsiZXhwb3J0ICogZnJvbSAnLi9kZXJpdmFibGVFZDI1NTE5UHViJztcbmV4cG9ydCAqIGZyb20gJy4vaVNhZmUnO1xuZXhwb3J0ICogZnJvbSAnLi9pU2FmZXMnO1xuZXhwb3J0ICogZnJvbSAnLi9yZWNvdmVyeSc7XG5leHBvcnQgKiBmcm9tICcuL3NhZmUnO1xuZXhwb3J0ICogZnJvbSAnLi9zYWZlcyc7XG5leHBvcnQgKiBmcm9tICdAYml0Z28tYmV0YS9zZGstbGliLXNhZmVzJztcbiJdfQ==