@bitgo-beta/sdk-core 8.2.1-beta.214 → 8.2.1-beta.2140

package/dist/test/unit/bitgo/wallet/safeGetUserPrv.js

@@ -0,0 +1,651 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * @prettier
+ */
+require("should");
+const sinon = __importStar(require("sinon"));
+const utxo_lib_1 = require("@bitgo-beta/utxo-lib");
+const src_1 = require("../../../../src");
+const baseCoin_1 = require("../../../../src/bitgo/baseCoin");
+require('should-sinon');
+describe('WCN-1200 safe child getUserPrv root-fetch detour', function () {
+    const prv = 'xprv9s21ZrQH143K3hekyNj7TciR4XNYe1kMj68W2ipjJGNHETWP7o42AjDnSPgKhdZ4x8NBAvaL72RrXjuXNdmkMqLERZza73oYugGtbLFXG8g';
+    const softDerivedNode = baseCoin_1.BaseCoin.deriveKeyWithSeedBip32(utxo_lib_1.bip32.fromBase58(prv), '123');
+    if (!softDerivedNode.key.privateKey) {
+        throw new Error('expected deriveKeyWithSeedBip32 to return a private key');
+    }
+    const softDerivedPrv = softDerivedNode.key.toBase58();
+    const childPath = (0, src_1.buildSafeBip44Path)(0, 'secp256k1Multisig', 123);
+    const hardened = (0, src_1.deriveSafeChildHardenedFromXprv)(prv, childPath);
+    const passphrase = 'test-passphrase';
+    const rootKeyId = 'root-key-id';
+    let mockBitGo;
+    let mockBaseCoin;
+    let keychainsGetStub;
+    let encryptStub;
+    let decryptStub;
+    const baseWalletData = {
+        id: 'wallet-id',
+        coin: 'tbtc',
+        keys: ['user-key', 'backup-key', 'bitgo-key'],
+        type: 'hot',
+        multisigType: 'onchain',
+        enterprise: 'ent-id',
+    };
+    beforeEach(function () {
+        keychainsGetStub = sinon.stub();
+        encryptStub = sinon.stub();
+        decryptStub = sinon.stub();
+        mockBitGo = {
+            encrypt: encryptStub,
+            decrypt: decryptStub,
+            url: sinon.stub().returns('https://test.bitgo.com/'),
+            setRequestTracer: sinon.stub(),
+        };
+        mockBaseCoin = {
+            getChain: sinon.stub().returns('tbtc'),
+            getFamily: sinon.stub().returns('btc'),
+            getFullName: sinon.stub().returns('Test Bitcoin'),
+            keychains: sinon.stub().returns({
+                get: keychainsGetStub,
+                getKeysForSigning: sinon.stub().resolves([]),
+            }),
+            deriveKeyWithSeed: sinon.stub().callsFake(({ key, seed }) => {
+                if (key === prv && seed === '123') {
+                    return { key: softDerivedPrv, derivationPath: 'm/999999/...' };
+                }
+                return { key: `derived(${key},${seed})`, derivationPath: 'm/0' };
+            }),
+            url: sinon.stub().callsFake((path) => `https://test.bitgo.com/api/v2/tbtc${path}`),
+            supportsStaking: sinon.stub().returns(false),
+            supportsTss: sinon.stub().returns(false),
+            getMPCAlgorithm: sinon.stub(),
+            keyIdsForSigning: sinon.stub().returns([0, 1, 2]),
+        };
+        decryptStub.callsFake(({ input, password }) => {
+            if (password !== passphrase) {
+                return null;
+            }
+            if (typeof input === 'string' && input.startsWith('enc:')) {
+                return input.slice(4);
+            }
+            return null;
+        });
+    });
+    afterEach(function () {
+        sinon.restore();
+    });
+    function makeWallet(overrides = {}) {
+        return new src_1.Wallet(mockBitGo, mockBaseCoin, {
+            ...baseWalletData,
+            ...overrides,
+        });
+    }
+    describe('fetchRootKeychainForSafeChild', function () {
+        it('throws when child keychain has no parent', async function () {
+            await (0, src_1.fetchRootKeychainForSafeChild)(mockBaseCoin.keychains(), {
+                id: 'child-key',
+                type: 'independent',
+                pub: 'child-pub',
+            }).should.be.rejectedWith('childKeychain.parent is required to fetch the root keychain');
+            keychainsGetStub.notCalled.should.be.true();
+        });
+        it('throws InvalidRootKeychainSourceError when root source is backup', async function () {
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'backup',
+                encryptedPrv: 'enc:root',
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            await (0, src_1.fetchRootKeychainForSafeChild)(mockBaseCoin.keychains(), {
+                id: 'child-key',
+                parent: rootKeyId,
+                type: 'independent',
+                pub: 'child-pub',
+            }).should.be.rejectedWith(src_1.InvalidRootKeychainSourceError);
+        });
+        it('returns the root keychain when source is user', async function () {
+            const root = {
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: 'enc:root',
+                type: 'independent',
+                pub: 'root-pub',
+            };
+            keychainsGetStub.resolves(root);
+            const result = await (0, src_1.fetchRootKeychainForSafeChild)(mockBaseCoin.keychains(), {
+                id: 'child-key',
+                parent: rootKeyId,
+                type: 'independent',
+                pub: 'child-pub',
+            });
+            result.should.eql(root);
+        });
+        it('throws when root keychain has no encryptedPrv', async function () {
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            await (0, src_1.fetchRootKeychainForSafeChild)(mockBaseCoin.keychains(), {
+                id: 'child-key',
+                parent: rootKeyId,
+                type: 'independent',
+                pub: 'child-pub',
+            }).should.be.rejectedWith(/does not have property encryptedPrv/);
+        });
+    });
+    describe('getUserPrv', function () {
+        it('throws when keychain has no encryptedPrv on a non-safe wallet', async function () {
+            const wallet = makeWallet();
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'pub',
+                    type: 'independent',
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith('keychain does not have property encryptedPrv');
+        });
+        it('throws for a non-safe wallet even when keychain has parent', async function () {
+            const wallet = makeWallet();
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'pub',
+                    type: 'independent',
+                    parent: rootKeyId,
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith('keychain does not have property encryptedPrv');
+            keychainsGetStub.notCalled.should.be.true();
+        });
+        it('throws for a safe wallet when keychain has no parent', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'pub',
+                    type: 'independent',
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith('keychain does not have property encryptedPrv');
+            keychainsGetStub.notCalled.should.be.true();
+        });
+        it('fetches root and hardened-derives child key for safe owner', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            const result = await wallet.getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: hardened.pub,
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithPath: childPath,
+                },
+                walletPassphrase: passphrase,
+            });
+            result.should.eql(hardened.prv);
+            result.should.not.eql(softDerivedPrv);
+            keychainsGetStub.calledOnceWithExactly({ id: rootKeyId }).should.be.true();
+            mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
+        });
+        it('requires derivedFromParentWithPath on the child keychain', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: hardened.pub,
+                    type: 'independent',
+                    parent: rootKeyId,
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith(/missing derivedFromParentWithPath/);
+        });
+        it('fails closed when derivedFromParentWithPath does not match the registered pub', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: hardened.pub,
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithPath: "m/44'/0'/1'/0'",
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith(src_1.SafeDerivedPublicKeyMismatchError);
+        });
+        for (const storedPath of ["not-a-path'", "m/123'", 'm/44/0/1/123']) {
+            it(`rejects a non-BIP44 derivedFromParentWithPath ${JSON.stringify(storedPath)}`, async function () {
+                const wallet = makeWallet({ safe: 'safe-id-1' });
+                keychainsGetStub.resolves({
+                    id: rootKeyId,
+                    source: 'user',
+                    encryptedPrv: `enc:${prv}`,
+                    type: 'independent',
+                    pub: 'root-pub',
+                });
+                await wallet
+                    .getUserPrv({
+                    keychain: {
+                        id: 'child-key',
+                        pub: hardened.pub,
+                        type: 'independent',
+                        parent: rootKeyId,
+                        derivedFromParentWithPath: storedPath,
+                    },
+                    walletPassphrase: passphrase,
+                })
+                    .should.be.rejectedWith(/derivedFromParentWithPath/);
+            });
+        }
+        it('fails closed for TSS safe owner instead of returning the root prv', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', multisigType: 'tss' });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'unrelated-child-pub',
+                    type: 'tss',
+                    parent: rootKeyId,
+                    derivedFromParentWithSeed: '123',
+                    commonKeychain: 'ck',
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith(src_1.SafeOwnerSigningNotImplementedError);
+            keychainsGetStub.notCalled.should.be.true();
+            mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
+        });
+        it('fails closed for ed25519 onchain safe owner instead of BIP32-deriving', async function () {
+            mockBaseCoin.getFamily.returns('xlm');
+            const wallet = makeWallet({ safe: 'safe-id-1', coin: 'txlm' });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'child-pub',
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithSeed: '123',
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith(src_1.SafeOwnerSigningNotImplementedError);
+            keychainsGetStub.notCalled.should.be.true();
+            mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
+        });
+        it('aborts locally when derived pub does not match registered child pub', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'xpub-wrong-registered-key',
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithPath: childPath,
+                },
+                walletPassphrase: passphrase,
+            })
+                .should.be.rejectedWith(src_1.SafeDerivedPublicKeyMismatchError);
+        });
+        it('decrypts child encryptedPrv as-is for wallet sharee (hardened child prv)', async function () {
+            const childPrv = 'child-level-prv';
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const result = await wallet.getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'child-pub',
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithSeed: '123',
+                    encryptedPrv: `enc:${childPrv}`,
+                },
+                walletPassphrase: passphrase,
+            });
+            result.should.eql(childPrv);
+            keychainsGetStub.notCalled.should.be.true();
+            mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
+        });
+        it('does not auto-populate coldDerivationSeed when explicit prv and encryptedPrv are present', async function () {
+            const childPrv = 'child-level-prv';
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const result = await wallet.getUserPrv({
+                prv: childPrv,
+                keychain: {
+                    id: 'child-key',
+                    pub: 'child-pub',
+                    type: 'independent',
+                    parent: rootKeyId,
+                    derivedFromParentWithSeed: '123',
+                    encryptedPrv: `enc:${childPrv}`,
+                },
+            });
+            result.should.eql(childPrv);
+            mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
+        });
+        it('still auto-populates coldDerivationSeed for SMC with params.prv and no encryptedPrv', async function () {
+            const wallet = makeWallet();
+            const result = await wallet.getUserPrv({
+                prv,
+                keychain: {
+                    id: 'smc-key',
+                    pub: 'smc-pub',
+                    type: 'independent',
+                    derivedFromParentWithSeed: '123',
+                },
+            });
+            result.should.eql(softDerivedPrv);
+            mockBaseCoin.deriveKeyWithSeed.calledOnce.should.be.true();
+        });
+        it('does not apply an explicit coldDerivationSeed after decrypting encryptedPrv', async function () {
+            const wallet = makeWallet();
+            const childPrv = prv;
+            const result = await wallet.getUserPrv({
+                keychain: {
+                    id: 'smc-key',
+                    pub: 'smc-pub',
+                    type: 'independent',
+                    encryptedPrv: `enc:${childPrv}`,
+                },
+                walletPassphrase: passphrase,
+                coldDerivationSeed: '123',
+            });
+            result.should.eql(childPrv);
+            mockBaseCoin.deriveKeyWithSeed.notCalled.should.be.true();
+        });
+        it('throws encryptedPrv error before walletPassphrase when both are missing', async function () {
+            const wallet = makeWallet();
+            await wallet
+                .getUserPrv({
+                keychain: {
+                    id: 'child-key',
+                    pub: 'pub',
+                    type: 'independent',
+                },
+            })
+                .should.be.rejectedWith('keychain does not have property encryptedPrv');
+        });
+    });
+    describe('getEncryptedUserKeychain', function () {
+        it('still fails for a safe owner so wallet sharing cannot obtain root material', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.resolves({
+                id: 'user-key',
+                pub: 'child-pub',
+                type: 'independent',
+                parent: rootKeyId,
+                derivedFromParentWithSeed: '123',
+            });
+            await wallet.getEncryptedUserKeychain().should.be.rejectedWith(src_1.MissingEncryptedKeychainError);
+            keychainsGetStub.called.should.be.true();
+        });
+    });
+    describe('signing guards', function () {
+        it('getUserKeyAndSignTssTransaction allows safe child keychain without encryptedPrv', async function () {
+            const wallet = makeWallet({
+                safe: 'safe-id-1',
+                multisigType: 'tss',
+                type: 'hot',
+            });
+            const childKeychain = {
+                id: 'child-key',
+                pub: 'child-pub',
+                type: 'tss',
+                parent: rootKeyId,
+                commonKeychain: 'ck',
+            };
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            mockBaseCoin.keychains.returns({
+                get: keychainsGetStub,
+                getKeysForSigning: sinon.stub().resolves([childKeychain]),
+            });
+            const signStub = sinon.stub(src_1.Wallet.prototype, 'signTransaction').resolves({ txHex: 'signed' });
+            const result = await wallet.getUserKeyAndSignTssTransaction({
+                txRequestId: 'tx-req',
+                walletPassphrase: passphrase,
+            });
+            result.should.eql({ txHex: 'signed' });
+            signStub.calledOnce.should.be.true();
+            const signArgs = signStub.firstCall.args[0];
+            signArgs.keychain.should.eql(childKeychain);
+        });
+        it('getUserKeyAndSignTssTransaction rejects wrong passphrase early for safe child wallets', async function () {
+            const wallet = makeWallet({
+                safe: 'safe-id-1',
+                multisigType: 'tss',
+                type: 'hot',
+            });
+            const childKeychain = {
+                id: 'child-key',
+                pub: 'child-pub',
+                type: 'tss',
+                parent: rootKeyId,
+                commonKeychain: 'ck',
+            };
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            mockBaseCoin.keychains.returns({
+                get: keychainsGetStub,
+                getKeysForSigning: sinon.stub().resolves([childKeychain]),
+            });
+            const signStub = sinon.stub(src_1.Wallet.prototype, 'signTransaction');
+            await wallet
+                .getUserKeyAndSignTssTransaction({
+                txRequestId: 'tx-req',
+                walletPassphrase: 'wrong-passphrase',
+            })
+                .should.be.rejectedWith(src_1.IncorrectPasswordError);
+            signStub.notCalled.should.be.true();
+            keychainsGetStub.calledOnce.should.be.true();
+        });
+        it('signTransaction does not pass the root prv into TSS signing for a safe owner', async function () {
+            const wallet = makeWallet({
+                safe: 'safe-id-1',
+                multisigType: 'tss',
+                type: 'hot',
+            });
+            const childKeychain = {
+                id: 'child-key',
+                pub: 'child-pub',
+                type: 'tss',
+                parent: rootKeyId,
+                commonKeychain: 'ck',
+            };
+            keychainsGetStub.resolves({
+                id: rootKeyId,
+                source: 'user',
+                encryptedPrv: `enc:${prv}`,
+                type: 'independent',
+                pub: 'root-pub',
+            });
+            mockBaseCoin.keychains.returns({
+                get: keychainsGetStub,
+                getKeysForSigning: sinon.stub().resolves([childKeychain]),
+            });
+            mockBaseCoin.presignTransaction = sinon.stub().callsFake(async (params) => params);
+            mockBaseCoin.getMPCAlgorithm = sinon.stub().returns('eddsa');
+            const signTssStub = sinon.stub(src_1.Wallet.prototype, 'signTransactionTss').resolves({ txHex: 'signed' });
+            await wallet
+                .signTransaction({
+                walletPassphrase: passphrase,
+                txPrebuild: { txRequestId: 'tx-req' },
+            })
+                .should.be.rejectedWith(src_1.SafeOwnerSigningNotImplementedError);
+            signTssStub.notCalled.should.be.true();
+        });
+    });
+});
+describe('WCN-1200 recreateAndSignTSSTransaction safe path', function () {
+    afterEach(function () {
+        sinon.restore();
+    });
+    function makePendingApproval(wallet) {
+        const recreateTxRequest = sinon.stub().resolves({
+            apiVersion: 'lite',
+            txRequestId: 'tx-req',
+            unsignedTxs: [{ serializedTxHex: 'deadbeef', signableHex: 'ab', derivationPath: 'm/0' }],
+            transactions: [],
+        });
+        const pendingApproval = new src_1.PendingApproval({}, wallet.baseCoin, {
+            id: 'pa0',
+            txRequestId: 'tx-req',
+            info: { type: 'transactionRequest', transactionRequest: { recipients: [], coinSpecific: {} } },
+            state: 'pending',
+            creator: 'test',
+        }, wallet);
+        pendingApproval.tssUtils = { recreateTxRequest };
+        return { pendingApproval, recreateTxRequest };
+    }
+    it('uses getUserPrv for the safe owner (minter) instead of getPrv', async function () {
+        const childUserKeychain = {
+            id: 'child-key',
+            pub: 'child-pub',
+            type: 'tss',
+            parent: 'root-key-id',
+            derivedFromParentWithSeed: 'seed',
+        };
+        const getKeysForSigning = sinon.stub().resolves([childUserKeychain]);
+        const getUserPrv = sinon.stub().resolves('decryptedPrv');
+        const getPrv = sinon.stub().resolves('should-not-be-called');
+        const wallet = {
+            safeId: () => 'safe-id-1',
+            getUserPrv,
+            getPrv,
+            baseCoin: {
+                keychains: () => ({ getKeysForSigning }),
+                supportsTss: () => true,
+                getMPCAlgorithm: () => 'eddsa',
+            },
+            multisigTypeVersion: () => undefined,
+        };
+        const { pendingApproval, recreateTxRequest } = makePendingApproval(wallet);
+        const result = await pendingApproval.recreateAndSignTSSTransaction({ walletPassphrase: 'pass' }, new src_1.RequestTracer());
+        result.should.eql({ txHex: 'deadbeef' });
+        getPrv.notCalled.should.be.true();
+        getKeysForSigning.calledOnce.should.be.true();
+        getUserPrv
+            .calledOnceWithExactly({
+            keychain: childUserKeychain,
+            walletPassphrase: 'pass',
+        })
+            .should.be.true();
+        recreateTxRequest.calledOnce.should.be.true();
+    });
+    it('uses getPrv for a safe wallet sharee (child encryptedPrv already present)', async function () {
+        const childUserKeychain = {
+            id: 'child-key',
+            pub: 'child-pub',
+            type: 'tss',
+            parent: 'root-key-id',
+            derivedFromParentWithSeed: 'seed',
+            encryptedPrv: 'enc:sharee-prv',
+        };
+        const getKeysForSigning = sinon.stub().resolves([childUserKeychain]);
+        const getUserPrv = sinon.stub().resolves('should-not-be-called');
+        const getPrv = sinon.stub().resolves('sharee-prv');
+        const wallet = {
+            safeId: () => 'safe-id-1',
+            getUserPrv,
+            getPrv,
+            baseCoin: {
+                keychains: () => ({ getKeysForSigning }),
+                supportsTss: () => true,
+                getMPCAlgorithm: () => 'eddsa',
+            },
+            multisigTypeVersion: () => undefined,
+        };
+        const { pendingApproval, recreateTxRequest } = makePendingApproval(wallet);
+        const result = await pendingApproval.recreateAndSignTSSTransaction({ walletPassphrase: 'pass' }, new src_1.RequestTracer());
+        result.should.eql({ txHex: 'deadbeef' });
+        getUserPrv.notCalled.should.be.true();
+        getPrv.calledOnceWithExactly({ walletPassphrase: 'pass' }).should.be.true();
+        recreateTxRequest.calledOnce.should.be.true();
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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