@bitgo/sdk-core 38.12.1 → 38.15.0

package/dist/test/unit/bitgo/wallet/safeShareWallet.js

@@ -0,0 +1,303 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * @prettier
+ *
+ * Safe-wallet SPEND sharing. Mirrors test/unit/bitgo/wallet/safeGetUserPrv.ts (sinon-stubbed,
+ * no nock) for the sharing analogue: a safe owner's children are pub-only, so the share path
+ * must re-derive the child prv from the root — never the root material.
+ */
+require("should");
+const sinon = __importStar(require("sinon"));
+const src_1 = require("../../../../src");
+const ecdh_1 = require("../../../../src/bitgo/ecdh");
+const bitcoin_1 = require("../../../../src/bitgo/bitcoin");
+require('should-sinon');
+describe('Safe wallet spend sharing', function () {
+    const prv = 'xprv9s21ZrQH143K3hekyNj7TciR4XNYe1kMj68W2ipjJGNHETWP7o42AjDnSPgKhdZ4x8NBAvaL72RrXjuXNdmkMqLERZza73oYugGtbLFXG8g';
+    const hardened = (0, src_1.deriveSafeChildHardenedFromXprv)(prv, '123');
+    const passphrase = 'test-passphrase';
+    const rootKeyId = 'root-key-id';
+    const SHAREE_PUB = '0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798';
+    let mockBitGo;
+    let mockBaseCoin;
+    let keychainsGetStub;
+    let encryptStub;
+    let decryptStub;
+    let createShareStub;
+    let createBulkKeySharesStub;
+    const baseWalletData = {
+        id: 'wallet-id',
+        coin: 'tbtc',
+        keys: ['user-key', 'backup-key', 'bitgo-key'],
+        type: 'hot',
+        multisigType: 'onchain',
+        enterprise: 'ent-id',
+    };
+    const childKeychain = (id) => ({
+        id,
+        pub: hardened.pub,
+        type: 'independent',
+        parent: rootKeyId,
+        derivedFromParentWithPath: "m/123'",
+    });
+    const publicOnlyKeychain = (id) => ({ id, pub: 'pub-' + id, type: 'independent' });
+    const rootKeychain = {
+        id: rootKeyId,
+        source: 'user',
+        encryptedPrv: `enc:${prv}`,
+        type: 'independent',
+        pub: 'root-pub',
+    };
+    beforeEach(function () {
+        keychainsGetStub = sinon.stub();
+        encryptStub = sinon.stub();
+        decryptStub = sinon.stub();
+        mockBitGo = {
+            encrypt: encryptStub,
+            decrypt: decryptStub,
+            url: sinon.stub().returns('https://test.bitgo.com/'),
+            setRequestTracer: sinon.stub(),
+            getSharingKey: sinon.stub().resolves({ userId: 'sharee-id', pubkey: SHAREE_PUB, path: 'm/0' }),
+        };
+        mockBaseCoin = {
+            getChain: sinon.stub().returns('tbtc'),
+            getFamily: sinon.stub().returns('btc'),
+            getFullName: sinon.stub().returns('Test Bitcoin'),
+            keychains: sinon.stub().returns({
+                get: keychainsGetStub,
+                getKeysForSigning: sinon.stub().resolves([]),
+            }),
+            deriveKeyWithSeed: sinon.stub(),
+            url: sinon.stub().callsFake((path) => `https://test.bitgo.com/api/v2/tbtc${path}`),
+            supportsStaking: sinon.stub().returns(false),
+            supportsTss: sinon.stub().returns(false),
+            getMPCAlgorithm: sinon.stub(),
+            keyIdsForSigning: sinon.stub().returns([0, 1, 2]),
+        };
+        keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === rootKeyId ? rootKeychain : id === 'user-key' ? childKeychain(id) : publicOnlyKeychain(id)));
+        // Reversible encrypt: `shared:<password>:<input>` so tests can verify the ECDH secret and
+        // that the payload encrypts the CHILD prv, not the root.
+        encryptStub.callsFake(({ input, password }) => Promise.resolve(`shared:${password}:${input}`));
+        decryptStub.callsFake(({ input, password }) => {
+            if (password !== passphrase)
+                return null;
+            if (typeof input === 'string' && input.startsWith('enc:'))
+                return input.slice(4);
+            return null;
+        });
+        createShareStub = sinon.stub(src_1.Wallet.prototype, 'createShare').resolves({});
+        createBulkKeySharesStub = sinon.stub(src_1.Wallet.prototype, 'createBulkKeyShares').resolves({ shares: [] });
+    });
+    afterEach(function () {
+        sinon.restore();
+    });
+    function makeWallet(overrides = {}) {
+        return new src_1.Wallet(mockBitGo, mockBaseCoin, {
+            ...baseWalletData,
+            ...overrides,
+        });
+    }
+    async function getShareOptions(wallet, params = {}) {
+        await wallet.shareWallet({
+            email: 'shareto@test.com',
+            permissions: 'spend',
+            walletPassphrase: passphrase,
+            ...params,
+        });
+        return createShareStub.firstCall.args[0];
+    }
+    describe('hot safe wallet, spend share', function () {
+        it('derives child material, uses the registered child pub, and never ships root material', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const options = await getShareOptions(wallet);
+            options.skipKeychain.should.equal(false);
+            options.keychain.should.be.ok();
+            options.keychain.pub.should.equal(hardened.pub);
+            const json = JSON.stringify(options.keychain);
+            json.should.not.containEql(prv); // root xprv never leaves
+            json.should.not.containEql('root-pub'); // root pub never leaves
+        });
+        it('the encrypted prv ECDH-decrypts (sharee side) to the CHILD prv', async function () {
+            const shareeKey = (0, bitcoin_1.makeRandomKey)();
+            const shareePub = shareeKey.publicKey.toString('hex');
+            mockBitGo.getSharingKey = sinon.stub().resolves({ userId: 'sharee-id', pubkey: shareePub, path: 'm/0' });
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const options = await getShareOptions(wallet);
+            const shareeSecret = (0, ecdh_1.getSharedSecret)(shareeKey, Buffer.from(options.keychain.fromPubKey, 'hex')).toString('hex');
+            options.keychain.encryptedPrv.should.equal(`shared:${shareeSecret}:${hardened.prv}`);
+        });
+        it('a view-only share needs no keychain and does not fetch the root', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet.shareWallet({ email: 'shareto@test.com', permissions: 'view', walletPassphrase: passphrase });
+            createShareStub.firstCall.args[0].skipKeychain.should.equal(true);
+            createShareStub.firstCall.args[0].should.have.property('keychain', undefined);
+            keychainsGetStub.notCalled.should.equal(true);
+        });
+        it('a wrong passphrase rejects with IncorrectPasswordError and posts nothing', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: 'wrong-passphrase' })
+                .should.be.rejectedWith(src_1.IncorrectPasswordError);
+            createShareStub.notCalled.should.equal(true);
+        });
+        it('a missing passphrase throws instead of silently skipKeychain', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend' })
+                .should.be.rejectedWith(/Missing walletPassphrase argument/);
+            createShareStub.notCalled.should.equal(true);
+        });
+        it('fails closed when the derived pub does not match the registered child pub', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === rootKeyId
+                ? rootKeychain
+                : id === 'user-key'
+                    ? { ...childKeychain(id), pub: 'wrong-child-pub', derivedFromParentWithPath: "m/123'" }
+                    : publicOnlyKeychain(id)));
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: passphrase })
+                .should.be.rejectedWith(src_1.SafeDerivedPublicKeyMismatchError);
+        });
+    });
+    describe('unsupported safe slots', function () {
+        it('TSS safe wallet throws SafeShareNotImplementedError without fetching the root', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', multisigType: 'tss' });
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: passphrase })
+                .should.be.rejectedWith(src_1.SafeShareNotImplementedError);
+            // child fetched (safe branch), root never fetched (guard fires first)
+            keychainsGetStub.calledOnce.should.equal(true);
+            keychainsGetStub.firstCall.args[0].should.deepEqual({ id: 'user-key' });
+        });
+        it('ed25519 onchain safe wallet throws SafeShareNotImplementedError', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', coin: 'txlm' });
+            mockBaseCoin.getFamily.returns('xlm');
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: passphrase })
+                .should.be.rejectedWith(src_1.SafeShareNotImplementedError);
+            keychainsGetStub.calledOnce.should.equal(true);
+        });
+    });
+    describe('regression: non-safe and sharee paths', function () {
+        it('a genuine cold wallet still yields skipKeychain', async function () {
+            const wallet = makeWallet({ type: 'cold' });
+            const options = await getShareOptions(wallet);
+            options.skipKeychain.should.equal(true);
+            options.should.have.property('keychain', undefined);
+        });
+        it('a sharee re-sharing (child has encryptedPrv) takes the ordinary path and never fetches the root', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const shareeChild = {
+                id: 'user-key',
+                pub: 'sharee-pub',
+                type: 'independent',
+                encryptedPrv: `enc:sharee-prv`,
+            };
+            keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === 'user-key' ? shareeChild : publicOnlyKeychain(id)));
+            const options = await getShareOptions(wallet);
+            options.skipKeychain.should.equal(false);
+            options.keychain.pub.should.equal('sharee-pub');
+            // root (safe-owner detour) must never be reached for a sharee with an encrypted child prv
+            keychainsGetStub
+                .getCalls()
+                .filter((c) => c.args?.[0]?.id === rootKeyId)
+                .length.should.equal(0);
+        });
+        it('a malformed safe wallet (child with no parent) fails closed instead of cold-skipping', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === 'user-key' ? publicOnlyKeychain(id) : publicOnlyKeychain(id)));
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: passphrase })
+                .should.be.rejectedWith(/safe child could not be resolved/);
+            createShareStub.notCalled.should.equal(true);
+        });
+        it('a non-safe hot wallet spend share is unchanged', async function () {
+            const wallet = makeWallet({});
+            const userKeychain = {
+                id: 'user-key',
+                pub: 'hot-pub',
+                type: 'independent',
+                encryptedPrv: `enc:hot-prv`,
+            };
+            keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === 'user-key' ? userKeychain : publicOnlyKeychain(id)));
+            const options = await getShareOptions(wallet);
+            options.skipKeychain.should.equal(false);
+            options.keychain.pub.should.equal('hot-pub');
+        });
+        it('an lnbtc wallet takes the userAuth path and never enters the safe branch', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', coin: 'lbtc' });
+            mockBaseCoin.getFamily.returns('lnbtc');
+            const safeChildSpy = sinon.spy(wallet, 'getSafeOwnerChildKeychain');
+            // stubbing the private keychain fetch so lnbtc resolves a keychain without full lightning mocks
+            sinon.stub(wallet, 'getEncryptedWalletKeychainForWalletSharing').resolves({
+                id: 'user-key',
+                pub: 'ln-pub',
+                encryptedPrv: `enc:ln-prv`,
+                type: 'independent',
+            });
+            const options = await getShareOptions(wallet);
+            options.keychain.pub.should.equal('ln-pub');
+            safeChildSpy.notCalled.should.equal(true);
+        });
+    });
+    describe('createBulkWalletShare on a safe wallet', function () {
+        const bulkParams = {
+            walletPassphrase: passphrase,
+            keyShareOptions: [
+                { userId: 'u1', pubKey: SHAREE_PUB, path: 'm/0', permissions: 'spend' },
+                { userId: 'u2', pubKey: SHAREE_PUB, path: 'm/0', permissions: 'spend' },
+            ],
+        };
+        it('derives the child once (one root decrypt) and fans it out per user', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet.createBulkWalletShare(bulkParams);
+            createBulkKeySharesStub.calledOnce.should.equal(true);
+            const options = createBulkKeySharesStub.firstCall.args[0];
+            options.length.should.equal(2);
+            options.forEach((o) => o.keychain.pub.should.equal(hardened.pub));
+            // child + root exactly once (single root decrypt)
+            const rootCalls = keychainsGetStub.getCalls().filter((c) => c.args?.[0]?.id === rootKeyId);
+            rootCalls.length.should.equal(1);
+        });
+        it('the real error propagates instead of shareOptions cannot be empty', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', multisigType: 'tss' });
+            await wallet.createBulkWalletShare(bulkParams).should.be.rejectedWith(src_1.SafeShareNotImplementedError);
+            createBulkKeySharesStub.notCalled.should.equal(true);
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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