@bitgo/sdk-core 38.18.0 → 38.20.0

package/dist/src/bitgo/webauthn/base64url.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Base64url encoding helpers.
+ *
+ * Base64url uses the same alphabet as standard base64 except `+` becomes `-`,
+ * `/` becomes `_`, and padding (`=`) is stripped. Browser WebAuthn APIs and
+ * the BitGo server both use base64url for credential IDs and PRF salts, so we
+ * normalise to it everywhere on the client to avoid mismatches caused by
+ * mixing encodings.
+ */
+/** Converts a standard base64 string (or already-base64url string) to base64url. */
+export declare function toBase64Url(s: string): string;
+/** Encodes an ArrayBuffer or Buffer as a base64url string (no padding). */
+export declare function bufferToBase64Url(buffer: ArrayBuffer | Buffer): string;
+/** Decodes a base64url string into a Buffer. */
+export declare function base64UrlToBuffer(s: string): Buffer;
+//# sourceMappingURL=base64url.d.ts.map

package/dist/src/bitgo/webauthn/base64url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64url.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/webauthn/base64url.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,oFAAoF;AACpF,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,MAAM,CAEtE;AAED,gDAAgD;AAChD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/src/bitgo/webauthn/base64url.js

@@ -0,0 +1,27 @@
+"use strict";
+/**
+ * Base64url encoding helpers.
+ *
+ * Base64url uses the same alphabet as standard base64 except `+` becomes `-`,
+ * `/` becomes `_`, and padding (`=`) is stripped. Browser WebAuthn APIs and
+ * the BitGo server both use base64url for credential IDs and PRF salts, so we
+ * normalise to it everywhere on the client to avoid mismatches caused by
+ * mixing encodings.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toBase64Url = toBase64Url;
+exports.bufferToBase64Url = bufferToBase64Url;
+exports.base64UrlToBuffer = base64UrlToBuffer;
+/** Converts a standard base64 string (or already-base64url string) to base64url. */
+function toBase64Url(s) {
+    return s.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/** Encodes an ArrayBuffer or Buffer as a base64url string (no padding). */
+function bufferToBase64Url(buffer) {
+    return toBase64Url(Buffer.from(buffer).toString('base64'));
+}
+/** Decodes a base64url string into a Buffer. */
+function base64UrlToBuffer(s) {
+    return Buffer.from(s.replace(/-/g, '+').replace(/_/g, '/'), 'base64');
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/webauthn/deriveEnterpriseSalt.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Derives an enterprise-scoped PRF salt to prevent cross-enterprise key reuse.
+ *
+ * Computes HMAC-SHA256(key=prfSalt_base64url_decoded, data=enterpriseId_utf8).
+ * The baseSalt must always come from the server — never generate it client-side.
+ *
+ * Returns base64url so the same encoding is used everywhere the salt is handled
+ * (server storage, PRF eval input, prfHelpers lookup). Mixing encodings
+ * (e.g. hex on the client, base64url on the server) caused the PRF to receive
+ * different bytes during attach vs derive in browser environments where
+ * `Buffer.toString('hex')` is unreliable.
+ *
+ * @param baseSalt - Server-provided base64url-encoded PRF salt
+ * @param enterpriseId - Enterprise identifier
+ * @returns Base64url-encoded HMAC-SHA256 digest (no padding)
+ */
+export declare function deriveEnterpriseSalt(baseSalt: string, enterpriseId: string): string;
+//# sourceMappingURL=deriveEnterpriseSalt.d.ts.map

package/dist/src/bitgo/webauthn/deriveEnterpriseSalt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deriveEnterpriseSalt.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/webauthn/deriveEnterpriseSalt.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAGnF"}

package/dist/src/bitgo/webauthn/deriveEnterpriseSalt.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveEnterpriseSalt = deriveEnterpriseSalt;
+const crypto_1 = require("crypto");
+const base64url_1 = require("./base64url");
+/**
+ * Derives an enterprise-scoped PRF salt to prevent cross-enterprise key reuse.
+ *
+ * Computes HMAC-SHA256(key=prfSalt_base64url_decoded, data=enterpriseId_utf8).
+ * The baseSalt must always come from the server — never generate it client-side.
+ *
+ * Returns base64url so the same encoding is used everywhere the salt is handled
+ * (server storage, PRF eval input, prfHelpers lookup). Mixing encodings
+ * (e.g. hex on the client, base64url on the server) caused the PRF to receive
+ * different bytes during attach vs derive in browser environments where
+ * `Buffer.toString('hex')` is unreliable.
+ *
+ * @param baseSalt - Server-provided base64url-encoded PRF salt
+ * @param enterpriseId - Enterprise identifier
+ * @returns Base64url-encoded HMAC-SHA256 digest (no padding)
+ */
+function deriveEnterpriseSalt(baseSalt, enterpriseId) {
+    const keyBytes = (0, base64url_1.base64UrlToBuffer)(baseSalt);
+    return (0, base64url_1.toBase64Url)((0, crypto_1.createHmac)('sha256', keyBytes).update(enterpriseId).digest('base64'));
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/webauthn/derivePassword.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Derives a wallet passphrase from a WebAuthn PRF result.
+ *
+ * The PRF output (ArrayBuffer) is hex-encoded and used directly as the
+ * walletPassphrase for SJCL-based encryption (bitgo.encrypt).
+ *
+ * @param prfResult - Raw PRF output from WebAuthn credential assertion
+ * @returns Lowercase hex string to use as walletPassphrase
+ */
+export declare function derivePassword(prfResult: ArrayBuffer): string;
+//# sourceMappingURL=derivePassword.d.ts.map

package/dist/src/bitgo/webauthn/derivePassword.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derivePassword.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/webauthn/derivePassword.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,WAAW,GAAG,MAAM,CAE7D"}

package/dist/src/bitgo/webauthn/derivePassword.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.derivePassword = derivePassword;
+/**
+ * Derives a wallet passphrase from a WebAuthn PRF result.
+ *
+ * The PRF output (ArrayBuffer) is hex-encoded and used directly as the
+ * walletPassphrase for SJCL-based encryption (bitgo.encrypt).
+ *
+ * @param prfResult - Raw PRF output from WebAuthn credential assertion
+ * @returns Lowercase hex string to use as walletPassphrase
+ */
+function derivePassword(prfResult) {
+    return Buffer.from(prfResult).toString('hex');
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZGVyaXZlUGFzc3dvcmQuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvYml0Z28vd2ViYXV0aG4vZGVyaXZlUGFzc3dvcmQudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFTQSx3Q0FFQztBQVhEOzs7Ozs7OztHQVFHO0FBQ0gsU0FBZ0IsY0FBYyxDQUFDLFNBQXNCO0lBQ25ELE9BQU8sTUFBTSxDQUFDLElBQUksQ0FBQyxTQUFTLENBQUMsQ0FBQyxRQUFRLENBQUMsS0FBSyxDQUFDLENBQUM7QUFDaEQsQ0FBQyIsInNvdXJjZXNDb250ZW50IjpbIi8qKlxuICogRGVyaXZlcyBhIHdhbGxldCBwYXNzcGhyYXNlIGZyb20gYSBXZWJBdXRobiBQUkYgcmVzdWx0LlxuICpcbiAqIFRoZSBQUkYgb3V0cHV0IChBcnJheUJ1ZmZlcikgaXMgaGV4LWVuY29kZWQgYW5kIHVzZWQgZGlyZWN0bHkgYXMgdGhlXG4gKiB3YWxsZXRQYXNzcGhyYXNlIGZvciBTSkNMLWJhc2VkIGVuY3J5cHRpb24gKGJpdGdvLmVuY3J5cHQpLlxuICpcbiAqIEBwYXJhbSBwcmZSZXN1bHQgLSBSYXcgUFJGIG91dHB1dCBmcm9tIFdlYkF1dGhuIGNyZWRlbnRpYWwgYXNzZXJ0aW9uXG4gKiBAcmV0dXJucyBMb3dlcmNhc2UgaGV4IHN0cmluZyB0byB1c2UgYXMgd2FsbGV0UGFzc3BocmFzZVxuICovXG5leHBvcnQgZnVuY3Rpb24gZGVyaXZlUGFzc3dvcmQocHJmUmVzdWx0OiBBcnJheUJ1ZmZlcik6IHN0cmluZyB7XG4gIHJldHVybiBCdWZmZXIuZnJvbShwcmZSZXN1bHQpLnRvU3RyaW5nKCdoZXgnKTtcbn1cbiJdfQ==

package/dist/src/bitgo/webauthn/index.d.ts

@@ -0,0 +1,5 @@
+export * from './base64url';
+export * from './deriveEnterpriseSalt';
+export * from './derivePassword';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/bitgo/webauthn/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/webauthn/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,SAAS,CAAC"}

package/dist/src/bitgo/webauthn/index.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./base64url"), exports);
+__exportStar(require("./deriveEnterpriseSalt"), exports);
+__exportStar(require("./derivePassword"), exports);
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvYml0Z28vd2ViYXV0aG4vaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLDhDQUE0QjtBQUM1Qix5REFBdUM7QUFDdkMsbURBQWlDO0FBQ2pDLDBDQUF3QiIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCAqIGZyb20gJy4vYmFzZTY0dXJsJztcbmV4cG9ydCAqIGZyb20gJy4vZGVyaXZlRW50ZXJwcmlzZVNhbHQnO1xuZXhwb3J0ICogZnJvbSAnLi9kZXJpdmVQYXNzd29yZCc7XG5leHBvcnQgKiBmcm9tICcuL3R5cGVzJztcbiJdfQ==

package/dist/src/bitgo/webauthn/types.d.ts

@@ -0,0 +1,18 @@
+export type { WebAuthnOtpDevice } from '@bitgo/public-types';
+/** Result of a WebAuthn assertion with the PRF extension. */
+export interface PasskeyAuthResult {
+    prfResult: ArrayBuffer | undefined;
+    credentialId: string;
+    otpCode: string;
+}
+/** Options for WebAuthnProvider.get(). */
+export interface PasskeyGetOptions {
+    publicKey: PublicKeyCredentialRequestOptions;
+    evalByCredential?: Record<string, string>;
+}
+/** Abstraction over the WebAuthn credential API. */
+export interface WebAuthnProvider {
+    create(options: PublicKeyCredentialCreationOptions): Promise<PublicKeyCredential>;
+    get(options: PasskeyGetOptions): Promise<PasskeyAuthResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/bitgo/webauthn/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/bitgo/webauthn/types.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,WAAW,GAAG,SAAS,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,0CAA0C;AAC1C,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,iCAAiC,CAAC;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClF,GAAG,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC7D"}

package/dist/src/bitgo/webauthn/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/bitgo/keychain/keychains.js

@@ -36,6 +36,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const sinon = __importStar(require("sinon"));
 require("should");
 const src_1 = require("../../../../src");
+const errors_1 = require("../../../../src/bitgo/errors");
 /** Slot-④ roots are generated as XLM keychains, then persisted as raw pub||chain-code base32. */
 const STRKEY_PUB = 'GA5WUJ54Z23KILLCUOUNAKTPBVZWKMQVO4O6EQ5GHLAERIMLLHNCSKYH';
 const SAFE_ID = 'safe-1';
@@ -163,4 +164,263 @@ describe('Keychains.createBackup', function () {
         });
     });
 });
-//# sourceMappingURL=data:application/json;base64,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
+describe('Keychains.updatePassword (safe mode)', function () {
+    const SAFE_ID = 'safe-123';
+    const OLD_PASSWORD = 'old-passphrase';
+    const NEW_PASSWORD = 'new-passphrase';
+    let keychains;
+    let decryptStub;
+    let sessionEncrypt;
+    let sessionDestroy;
+    let createEncryptionSession;
+    let url;
+    let put;
+    let send;
+    function sentBodies() {
+        return send.getCalls().map((call) => call.args[0]);
+    }
+    function key(id, overrides = {}) {
+        return { id, pub: `pub-${id}`, type: 'independent', encryptedPrv: `enc:prv-${id}`, ...overrides };
+    }
+    function stubListPages(pages) {
+        const listStub = sinon.stub(keychains, 'list');
+        listStub.callsFake(async (params = {}) => {
+            const pageIndex = params.prevId === undefined ? 0 : Number(params.prevId);
+            return {
+                keys: pages[pageIndex],
+                nextBatchPrevId: pageIndex + 1 < pages.length ? String(pageIndex + 1) : undefined,
+            };
+        });
+        return listStub;
+    }
+    beforeEach(function () {
+        sessionEncrypt = sinon.stub().callsFake(async (plaintext) => `enc:${plaintext}`);
+        sessionDestroy = sinon.spy();
+        createEncryptionSession = sinon.stub().resolves({ encrypt: sessionEncrypt, destroy: sessionDestroy });
+        decryptStub = sinon.stub().callsFake(async ({ input, password }) => {
+            if (password !== OLD_PASSWORD) {
+                throw new Error('incorrect password');
+            }
+            if (!input.startsWith('enc:')) {
+                throw new Error('incorrect password');
+            }
+            return input.slice('enc:'.length);
+        });
+        send = sinon.stub().returns({ result: sinon.stub().resolves({ updates: [] }) });
+        put = sinon.stub().returns({ send });
+        url = sinon.stub().callsFake((path) => path);
+        // BitGoBase and IBaseCoin are large surfaces; the tests only exercise these members.
+        const bitgo = {
+            decrypt: decryptStub,
+            createEncryptionSession,
+            encrypt: sinon.stub().resolves('new-envelope'),
+            put,
+            url,
+            setRequestTracer: sinon.stub(),
+        };
+        const baseCoin = {
+            url: sinon.stub().callsFake((path) => path),
+            generateKeyPair: sinon.stub(),
+        };
+        keychains = new src_1.Keychains(bitgo, baseCoin);
+    });
+    it('walks all pages, rotates every envelope-bearing key and persists with one batch PUT', async function () {
+        const listStub = stubListPages([
+            [key('root-ecdsa-user'), key('msig-child', { encryptedPrv: undefined })],
+            [key('root-eddsa-user'), key('mpc-child-user')],
+        ]);
+        send.returns({ result: sinon.stub().resolves({ updates: [{ keyId: 'x', updated: true }] }) });
+        const response = await keychains.updatePassword({
+            oldPassword: OLD_PASSWORD,
+            newPassword: NEW_PASSWORD,
+            safeId: SAFE_ID,
+        });
+        // the walk is safe-scoped and paginated
+        sinon.assert.calledWith(listStub.getCall(0), { limit: 500, prevId: undefined, safeId: SAFE_ID });
+        sinon.assert.calledWith(listStub.getCall(1), { limit: 500, prevId: '1', safeId: SAFE_ID });
+        // one shared session, one Argon2
+        sinon.assert.calledOnce(createEncryptionSession);
+        sinon.assert.calledWith(createEncryptionSession, NEW_PASSWORD, undefined);
+        // keychains without an encryptedPrv are skipped; every rotation carries compare-and-swap
+        const bodies = sentBodies();
+        bodies.length.should.equal(1);
+        bodies[0].updates.map((u) => u.keyId).should.deepEqual(['root-ecdsa-user', 'root-eddsa-user', 'mpc-child-user']);
+        for (const update of bodies[0].updates) {
+            update.encryptedPrv.should.equal(`enc:prv-${update.keyId}`);
+            update.expectedOldEncryptedPrv.should.equal(`enc:prv-${update.keyId}`);
+        }
+        sinon.assert.calledOnce(put);
+        sinon.assert.calledWith(url, '/key/bulk', 2);
+        // the batch response is passed through
+        response.updates.should.deepEqual([{ keyId: 'x', updated: true }]);
+        // the SDK-owned session is destroyed afterwards
+        sinon.assert.calledOnce(sessionDestroy);
+    });
+    it('fails fast on the first undecryptable envelope with zero writes', async function () {
+        stubListPages([[key('good-1'), key('stale', { encryptedPrv: 'corrupt-envelope' }), key('good-2')]]);
+        await keychains
+            .updatePassword({ oldPassword: OLD_PASSWORD, newPassword: NEW_PASSWORD, safeId: SAFE_ID })
+            .should.be.rejectedWith(/stale/);
+        sinon.assert.notCalled(put);
+        sinon.assert.calledOnce(sessionDestroy);
+    });
+    it('rejects with IncorrectPasswordError naming the offending key', async function () {
+        stubListPages([[key('stale', { encryptedPrv: 'corrupt-envelope' })]]);
+        try {
+            await keychains.updatePassword({ oldPassword: OLD_PASSWORD, newPassword: NEW_PASSWORD, safeId: SAFE_ID });
+            throw new Error('expected updatePassword to reject');
+        }
+        catch (e) {
+            e.name.should.equal('IncorrectPasswordError');
+            e.message.should.match(/failed to decrypt keychain stale with the old passphrase/);
+        }
+    });
+    it('rejects with IncorrectPasswordError when the old passphrase does not match', async function () {
+        stubListPages([[key('root-1')]]);
+        await keychains
+            .updatePassword({ oldPassword: 'totally-wrong', newPassword: NEW_PASSWORD, safeId: SAFE_ID })
+            .should.be.rejectedWith(errors_1.IncorrectPasswordError);
+        sinon.assert.notCalled(put);
+    });
+    it('re-encrypts through a caller-provided session without destroying it', async function () {
+        stubListPages([[key('root-1')]]);
+        const encryptedByCaller = [];
+        let callerDestroyed = false;
+        const callerSession = {
+            encrypt: async (plaintext) => {
+                encryptedByCaller.push(plaintext);
+                return 'caller-session-envelope';
+            },
+            decrypt: async () => '',
+            destroy: () => {
+                callerDestroyed = true;
+            },
+        };
+        await keychains.updatePassword({
+            oldPassword: OLD_PASSWORD,
+            newPassword: NEW_PASSWORD,
+            safeId: SAFE_ID,
+            encryptionSession: callerSession,
+        });
+        sinon.assert.notCalled(createEncryptionSession);
+        encryptedByCaller.should.deepEqual(['prv-root-1']);
+        callerDestroyed.should.equal(false);
+    });
+    it('passes an explicit encryptionVersion to the session factory', async function () {
+        stubListPages([[key('root-1')]]);
+        await keychains.updatePassword({
+            oldPassword: OLD_PASSWORD,
+            newPassword: NEW_PASSWORD,
+            safeId: SAFE_ID,
+            encryptionVersion: 1,
+        });
+        sinon.assert.calledOnce(createEncryptionSession);
+        sinon.assert.calledWith(createEncryptionSession, NEW_PASSWORD, 1);
+    });
+    it('chunks the batch past the server transaction budget and merges the responses', async function () {
+        const page = Array.from({ length: 501 }, (_, i) => key(`key-${i}`));
+        stubListPages([page]);
+        send.callsFake((body) => ({
+            result: sinon.stub().resolves({ updates: body.updates.map((u) => ({ keyId: u.keyId, updated: true })) }),
+        }));
+        const response = await keychains.updatePassword({
+            oldPassword: OLD_PASSWORD,
+            newPassword: NEW_PASSWORD,
+            safeId: SAFE_ID,
+        });
+        sinon.assert.calledTwice(put);
+        sentBodies()[0].updates.length.should.equal(500);
+        sentBodies()[1].updates.length.should.equal(1);
+        response.updates.length.should.equal(501);
+    });
+    it('propagates a mid-chunk failure after earlier chunks were sent and destroys the session', async function () {
+        const page = Array.from({ length: 501 }, (_, i) => key(`key-${i}`));
+        stubListPages([page]);
+        let chunkIndex = 0;
+        send.callsFake((body) => {
+            chunkIndex += 1;
+            if (chunkIndex === 2) {
+                return { result: sinon.stub().rejects(new Error('boom')) };
+            }
+            return {
+                result: sinon.stub().resolves({ updates: body.updates.map((u) => ({ keyId: u.keyId, updated: true })) }),
+            };
+        });
+        await keychains
+            .updatePassword({ oldPassword: OLD_PASSWORD, newPassword: NEW_PASSWORD, safeId: SAFE_ID })
+            .should.be.rejectedWith('boom');
+        // the first chunk went out before the second failed; the SDK-owned session is destroyed
+        sinon.assert.calledTwice(put);
+        sentBodies()[0].updates.length.should.equal(500);
+        sinon.assert.calledOnce(sessionDestroy);
+    });
+    it('rejects a chunk response missing the updates array', async function () {
+        stubListPages([[key('root-1')]]);
+        send.returns({ result: sinon.stub().resolves({ unexpected: true }) });
+        await keychains
+            .updatePassword({ oldPassword: OLD_PASSWORD, newPassword: NEW_PASSWORD, safeId: SAFE_ID })
+            .should.be.rejectedWith(/invalid key bulk update response/);
+        sinon.assert.calledOnce(sessionDestroy);
+    });
+    it('rotates nothing and issues no PUT when the safe has no encrypted keys', async function () {
+        stubListPages([[key('msig-child', { encryptedPrv: undefined }), key('placeholder', { encryptedPrv: undefined })]]);
+        const response = await keychains.updatePassword({
+            oldPassword: OLD_PASSWORD,
+            newPassword: NEW_PASSWORD,
+            safeId: SAFE_ID,
+        });
+        response.updates.should.deepEqual([]);
+        sinon.assert.notCalled(put);
+        sinon.assert.notCalled(createEncryptionSession);
+    });
+    it('rejects a non-string safeId', async function () {
+        // deliberate: proves the runtime guard rejects a non-string safeId
+        const unsafeId = 42;
+        await keychains
+            .updatePassword({ oldPassword: OLD_PASSWORD, newPassword: NEW_PASSWORD, safeId: unsafeId })
+            .should.be.rejectedWith('Expecting parameter string: safeId but found number');
+    });
+    it('keeps legacy mode write-free', async function () {
+        // getEncryptionVersion re-parses the old envelope in the legacy path, so it must be JSON
+        const legacyKey = key('user-key', { encryptedPrv: JSON.stringify({ v: 1 }) });
+        decryptStub.callsFake(async () => 'prv-user-key');
+        sinon.stub(keychains, 'list').resolves({ keys: [legacyKey], nextBatchPrevId: undefined });
+        const changedKeys = await keychains.updatePassword({ oldPassword: OLD_PASSWORD, newPassword: NEW_PASSWORD });
+        changedKeys.should.deepEqual({ 'pub-user-key': 'new-envelope' });
+        sinon.assert.notCalled(put);
+    });
+    it('keeps skipping undecryptable keys in legacy mode', async function () {
+        // getEncryptionVersion re-parses the old envelope in the legacy path, so it must be JSON
+        const goodEnvelope = JSON.stringify({ v: 1, ct: 'prv-good' });
+        decryptStub.callsFake(async ({ input }) => {
+            if (input !== goodEnvelope) {
+                throw new Error('private key is incorrect');
+            }
+            return 'prv-good';
+        });
+        sinon.stub(keychains, 'list').resolves({
+            keys: [key('bad', { encryptedPrv: 'corrupt-envelope' }), key('good', { encryptedPrv: goodEnvelope })],
+            nextBatchPrevId: undefined,
+        });
+        const changedKeys = await keychains.updatePassword({ oldPassword: OLD_PASSWORD, newPassword: NEW_PASSWORD });
+        changedKeys.should.deepEqual({ 'pub-good': 'new-envelope' });
+        sinon.assert.notCalled(put);
+    });
+});
+describe('Keychains.list safeId filter', function () {
+    it('forwards safeId as a query parameter', async function () {
+        const query = sinon.stub();
+        const chain = { query, result: sinon.stub().resolves({ keys: [] }) };
+        query.returns(chain);
+        // BitGoBase and IBaseCoin are large surfaces; the tests only exercise these members.
+        const get = sinon.stub().returns(chain);
+        // BitGoBase and IBaseCoin are large surfaces; the tests only exercise these members.
+        const bitgo = { get };
+        const baseCoin = { url: sinon.stub().callsFake((path) => path) };
+        const listKeychains = new src_1.Keychains(bitgo, baseCoin);
+        await listKeychains.list({ safeId: 'safe-123' });
+        sinon.assert.calledWith(get, '/key');
+        sinon.assert.calledWith(query, { safeId: 'safe-123' });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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