@bsv/wallet-toolbox-client 2.4.4 → 2.4.20

package/out/rolldown-runtime-D7D4PA-g.mjs

@@ -0,0 +1,13 @@
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
+export { __exportAll as t };

package/package.json

@@ -1,16 +1,48 @@
 {
   "name": "@bsv/wallet-toolbox-client",
-  "version": "2.4.4",
-  "description": "Client only Wallet Storage",
-  "main": "./out/src/index.client.js",
-  "types": "./out/src/index.client.d.ts",
+  "version": "2.4.20",
+  "type": "module",
+  "sideEffects": false,
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "description": "Browser-safe BRC-100 wallet, storage, signer, and services components",
+  "main": "./out/index.client.cjs",
+  "module": "./out/index.client.mjs",
+  "browser": "./out/index.client.mjs",
+  "types": "./out/index.client.d.cts",
+  "exports": {
+    ".": {
+      "browser": {
+        "types": "./out/index.client.d.mts",
+        "default": "./out/index.client.mjs"
+      },
+      "import": {
+        "types": "./out/index.client.d.mts",
+        "default": "./out/index.client.mjs"
+      },
+      "require": {
+        "types": "./out/index.client.d.cts",
+        "default": "./out/index.client.cjs"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "out",
+    "README.md",
+    "LICENSE.txt"
+  ],
   "repository": {
     "type": "git",
     "url": "git+https://github.com/bsv-blockchain/ts-stack.git",
     "directory": "packages/wallet/wallet-toolbox/client"
   },
   "author": "Tone Engel",
-  "license": "SEE LICENSE IN license.md",
+  "license": "SEE LICENSE IN LICENSE.txt",
   "keywords": [
     "bsv",
     "wallet",
@@ -33,11 +65,26 @@
     }
   },
   "devDependencies": {
-    "@types/node": "^26.1.1",
-    "typescript": "^6.0.3",
-    "@bsv/sdk": "^2.2.0"
+    "@bsv/sdk": "^2.2.15",
+    "@types/node": "^26.1.2",
+    "@typescript/native": "npm:typescript@7.0.2",
+    "@vitest/coverage-v8": "4.1.10",
+    "esbuild": "0.28.1",
+    "oxlint": "^1.76.0",
+    "tsdown": "0.22.14",
+    "typescript": "npm:@typescript/typescript6@6.0.2",
+    "vite": "8.1.5",
+    "vitest": "^4.1.10"
   },
   "scripts": {
-    "build": "tsc --build ../tsconfig.client.json"
+    "build": "tsdown --config tsdown.config.ts",
+    "format:check": "pnpm --workspace-root exec prettier --check \"packages/wallet/wallet-toolbox/src/index.client.ts\" \"packages/wallet/wallet-toolbox/src/services/chaintracker/chaintracks/index.{client,mobile}.ts\" \"packages/wallet/wallet-toolbox/src/services/chaintracker/chaintracks/Api/BlockHeaderApi.ts\" \"packages/wallet/wallet-toolbox/client/**/*.{json,md,ts}\"",
+    "lint": "pnpm --workspace-root exec oxlint packages/wallet/wallet-toolbox/src/index.client.ts packages/wallet/wallet-toolbox/src/services/chaintracker/chaintracks/index.client.ts packages/wallet/wallet-toolbox/src/services/chaintracker/chaintracks/index.mobile.ts packages/wallet/wallet-toolbox/src/services/chaintracker/chaintracks/Api/BlockHeaderApi.ts packages/wallet/wallet-toolbox/client/test packages/wallet/wallet-toolbox/client/tsdown.config.ts packages/wallet/wallet-toolbox/client/vitest.config.ts --deny-warnings",
+    "pack:check": "node ../../../../scripts/check-package-artifact.mjs . --exports Wallet,WalletSigner,WalletStorageManager,StorageClient,StorageIdb,Services,SetupClient,WalletPermissionsManager,WalletSettingsManager,sdk",
+    "test": "vitest run",
+    "test:browser": "node ../../../../scripts/check-wallet-toolbox-platform.mjs browser",
+    "test:coverage": "vitest run --coverage",
+    "test:watch": "vitest",
+    "typecheck": "tsc --project tsconfig.typecheck.json"
   }
 }

package/out/src/CWIStyleWalletManager.d.ts

@@ -1,564 +0,0 @@
-import { AbortActionArgs, AbortActionResult, AcquireCertificateArgs, AcquireCertificateResult, AuthenticatedResult, CreateActionArgs, CreateActionResult, CreateHmacArgs, CreateHmacResult, CreateSignatureArgs, CreateSignatureResult, DiscoverByAttributesArgs, DiscoverByIdentityKeyArgs, DiscoverCertificatesResult, GetHeaderArgs, GetHeaderResult, GetHeightResult, GetNetworkResult, GetPublicKeyArgs, GetPublicKeyResult, GetVersionResult, InternalizeActionArgs, InternalizeActionResult, ListActionsArgs, ListActionsResult, ListCertificatesArgs, ListCertificatesResult, ListOutputsArgs, ListOutputsResult, OriginatorDomainNameStringUnder250Bytes, ProveCertificateArgs, ProveCertificateResult, RelinquishCertificateArgs, RelinquishCertificateResult, RelinquishOutputArgs, RelinquishOutputResult, RevealCounterpartyKeyLinkageArgs, RevealCounterpartyKeyLinkageResult, RevealSpecificKeyLinkageArgs, RevealSpecificKeyLinkageResult, SignActionArgs, SignActionResult, VerifyHmacArgs, VerifyHmacResult, VerifySignatureArgs, VerifySignatureResult, WalletDecryptArgs, WalletDecryptResult, WalletEncryptArgs, WalletEncryptResult, WalletInterface, OutpointString, LookupResolver, SHIPBroadcaster, Telemetry, TelemetryConfig } from '@bsv/sdk';
-import { PrivilegedKeyManager } from './sdk/PrivilegedKeyManager';
-/**
- * Number of rounds used in PBKDF2 for deriving password keys.
- */
-export declare const PBKDF2_NUM_ROUNDS = 7777;
-/**
- * Default Argon2id parameters for password-key derivation (UMP v3).
- */
-export declare const ARGON2ID_DEFAULT_ITERATIONS = 7;
-export declare const ARGON2ID_DEFAULT_MEMORY_KIB = 131072;
-export declare const ARGON2ID_DEFAULT_PARALLELISM = 1;
-export declare const ARGON2ID_DEFAULT_HASH_LENGTH = 32;
-export declare const ARGON2ID_MAX_ITERATIONS = 20;
-export declare const ARGON2ID_MAX_MEMORY_KIB = 262144;
-export declare const ARGON2ID_MAX_PARALLELISM = 16;
-export declare const KDF_MAX_HASH_LENGTH = 64;
-export declare const PBKDF2_MAX_ITERATIONS = 10000000;
-export declare const MAX_STATE_SNAPSHOT_BYTES: number;
-/**
- * Unique Identifier for the default profile (16 zero bytes).
- */
-export declare const DEFAULT_PROFILE_ID: number[];
-/**
- * Describes the structure of a user profile within the wallet.
- */
-export interface Profile {
-    /**
-     * User-defined name for the profile.
-     */
-    name: string;
-    /**
-     * Unique 16-byte identifier for the profile.
-     */
-    id: number[];
-    /**
-     * 32-byte random pad XOR'd with the root primary key to derive the profile's primary key.
-     */
-    primaryPad: number[];
-    /**
-     * 32-byte random pad XOR'd with the root privileged key to derive the profile's privileged key.
-     */
-    privilegedPad: number[];
-    /**
-     * Timestamp (seconds since epoch) when the profile was created.
-     */
-    createdAt: number;
-}
-/**
- * Describes the structure of a User Management Protocol (UMP) token.
- */
-export interface UMPToken {
-    /**
-     * Root Primary key encrypted by the XOR of the password and presentation keys.
-     */
-    passwordPresentationPrimary: number[];
-    /**
-     * Root Primary key encrypted by the XOR of the password and recovery keys.
-     */
-    passwordRecoveryPrimary: number[];
-    /**
-     * Root Primary key encrypted by the XOR of the presentation and recovery keys.
-     */
-    presentationRecoveryPrimary: number[];
-    /**
-     * Root Privileged key encrypted by the XOR of the password and primary keys.
-     */
-    passwordPrimaryPrivileged: number[];
-    /**
-     * Root Privileged key encrypted by the XOR of the presentation and recovery keys.
-     */
-    presentationRecoveryPrivileged: number[];
-    /**
-     * Hash of the presentation key.
-     */
-    presentationHash: number[];
-    /**
-     * PBKDF2 salt used in conjunction with the password to derive the password key.
-     */
-    passwordSalt: number[];
-    /**
-     * Hash of the recovery key.
-     */
-    recoveryHash: number[];
-    /**
-     * A copy of the presentation key encrypted with the root privileged key.
-     */
-    presentationKeyEncrypted: number[];
-    /**
-     * A copy of the recovery key encrypted with the root privileged key.
-     */
-    recoveryKeyEncrypted: number[];
-    /**
-     * A copy of the password key encrypted with the root privileged key.
-     */
-    passwordKeyEncrypted: number[];
-    /**
-     * Optional field containing the encrypted profile data.
-     * JSON string -> Encrypted Bytes using root privileged key.
-     */
-    profilesEncrypted?: number[];
-    /**
-     * On-chain UMP protocol version (3 for tokens with KDF metadata).
-     */
-    umpVersion?: number;
-    /**
-     * Password-based key derivation function metadata.
-     * Present for UMP v3 tokens; absent for legacy tokens.
-     */
-    passwordKdf?: {
-        algorithm: 'pbkdf2-sha512' | 'argon2id';
-        iterations: number;
-        memoryKiB?: number;
-        parallelism?: number;
-        hashLength?: number;
-    };
-    /**
-     * Describes the token's location on-chain, if it's already been published.
-     */
-    currentOutpoint?: OutpointString;
-}
-/**
- * Configuration options for KDF (Key Derivation Function) used in UMP tokens.
- */
-export interface KdfConfig {
-    /**
-     * Algorithm to use for new UMP tokens.
-     */
-    algorithm?: 'pbkdf2-sha512' | 'argon2id';
-    /**
-     * Number of iterations/rounds.
-     */
-    iterations?: number;
-    /**
-     * Memory size in KiB (Argon2id only).
-     */
-    memoryKiB?: number;
-    /**
-     * Degree of parallelism (Argon2id only).
-     */
-    parallelism?: number;
-    /**
-     * Hash output length in bytes.
-     */
-    hashLength?: number;
-}
-/**
- * Describes a system capable of finding and updating UMP tokens on the blockchain.
- */
-export interface UMPTokenInteractor {
-    /**
-     * Locates the latest valid copy of a UMP token (including its outpoint)
-     * based on the presentation key hash.
-     *
-     * @param hash The hash of the presentation key.
-     * @returns The UMP token if found; otherwise, undefined.
-     * @throws Implementations should throw when absence cannot be established authoritatively.
-     */
-    findByPresentationKeyHash: (hash: number[]) => Promise<UMPToken | undefined>;
-    /**
-     * Locates the latest valid copy of a UMP token (including its outpoint)
-     * based on the recovery key hash.
-     *
-     * @param hash The hash of the recovery key.
-     * @returns The UMP token if found; otherwise, undefined.
-     * @throws Implementations should throw when absence cannot be established authoritatively.
-     */
-    findByRecoveryKeyHash: (hash: number[]) => Promise<UMPToken | undefined>;
-    /**
-     * Creates (and optionally consumes the previous version of) a UMP token on-chain.
-     *
-     * @param wallet            The wallet that might be used to create a new token (MUST be operating under the DEFAULT profile).
-     * @param adminOriginator   The domain name of the administrative originator.
-     * @param token             The new UMP token to create.
-     * @param oldTokenToConsume If provided, the old token that must be consumed in the same transaction.
-     * @returns                 The newly created outpoint.
-     */
-    buildAndSend: (wallet: WalletInterface, // This wallet MUST be the one built for the default profile
-    adminOriginator: OriginatorDomainNameStringUnder250Bytes, token: UMPToken, oldTokenToConsume?: UMPToken) => Promise<OutpointString>;
-}
-export interface UMPTokenLookupDiagnostics {
-    hostCount: number;
-    completedHosts: number;
-    successfulHosts: number;
-    emptyHosts: number;
-    failedHosts: number;
-    rejectedHosts: number;
-    freeformHosts: number;
-    outputCount: number;
-    correlationId?: string;
-}
-export type UMPTokenLookupFailureReason = 'lookup-unavailable' | 'lookup-incomplete' | 'token-malformed' | 'token-ambiguous';
-/**
- * Raised when UMP absence cannot be established authoritatively.
- *
- * Callers must offer retry/recovery rather than treating this error as a new
- * account. Diagnostics contain counts only and never hashes, keys, or tokens.
- */
-export declare class UMPTokenLookupError extends Error {
-    readonly reason: UMPTokenLookupFailureReason;
-    readonly diagnostics: UMPTokenLookupDiagnostics;
-    readonly code = "WERR_UMP_LOOKUP_INDETERMINATE";
-    constructor(reason: UMPTokenLookupFailureReason, diagnostics: UMPTokenLookupDiagnostics, options?: {
-        cause?: unknown;
-    });
-}
-/**
- * @class OverlayUMPTokenInteractor
- *
- * A concrete implementation of the UMPTokenInteractor interface that interacts
- * with Overlay Services and the UMP (User Management Protocol) topic. This class
- * is responsible for:
- *
- * 1) Locating UMP tokens via overlay lookups (ls_users).
- * 2) Creating and publishing new or updated UMP token outputs on-chain under
- *    the "tm_users" topic.
- * 3) Consuming (spending) an old token if provided.
- */
-export declare class OverlayUMPTokenInteractor implements UMPTokenInteractor {
-    /**
-     * A `LookupResolver` instance used to query overlay networks.
-     */
-    private readonly resolver;
-    /**
-     * A SHIP broadcaster that can be used to publish updated UMP tokens
-     * under the `tm_users` topic to overlay service peers.
-     */
-    private readonly broadcaster;
-    private readonly telemetry;
-    /**
-     * Construct a new OverlayUMPTokenInteractor.
-     *
-     * @param resolver     A LookupResolver instance for performing overlay queries (ls_users).
-     * @param broadcaster  A SHIPBroadcaster instance for sharing new or updated tokens across the `tm_users` overlay.
-     */
-    constructor(resolver?: LookupResolver, broadcaster?: SHIPBroadcaster, telemetry?: TelemetryConfig);
-    /**
-     * Finds a UMP token on-chain by the given presentation key hash, if it exists.
-     * Uses the ls_users overlay service to perform the lookup.
-     *
-     * @param hash The 32-byte SHA-256 hash of the presentation key.
-     * @returns A UMPToken object (including currentOutpoint) if found, otherwise undefined.
-     */
-    findByPresentationKeyHash(hash: number[]): Promise<UMPToken | undefined>;
-    /**
-     * Finds a UMP token on-chain by the given recovery key hash, if it exists.
-     * Uses the ls_users overlay service to perform the lookup.
-     *
-     * @param hash The 32-byte SHA-256 hash of the recovery key.
-     * @returns A UMPToken object (including currentOutpoint) if found, otherwise undefined.
-     */
-    findByRecoveryKeyHash(hash: number[]): Promise<UMPToken | undefined>;
-    private findToken;
-    private emptyLookupDiagnostics;
-    private toLookupDiagnostics;
-    private lookupDiagnosticAttributes;
-    private captureLookupFailure;
-    /**
-     * Creates or updates (replaces) a UMP token on-chain. If `oldTokenToConsume` is provided,
-     * it is spent in the same transaction that creates the new token output. The new token is
-     * then broadcast and published under the `tm_users` topic using a SHIP broadcast, ensuring
-     * overlay participants see the updated token.
-     *
-     * @param wallet            The wallet used to build and sign the transaction (MUST be operating under the DEFAULT profile).
-     * @param adminOriginator   The domain/FQDN of the administrative originator (wallet operator).
-     * @param token             The new UMPToken to create on-chain.
-     * @param oldTokenToConsume Optionally, an existing token to consume/spend in the same transaction.
-     * @returns The outpoint of the newly created UMP token (e.g. "abcd1234...ef.0").
-     */
-    buildAndSend(wallet: WalletInterface, // This wallet MUST be the one built for the default profile
-    adminOriginator: OriginatorDomainNameStringUnder250Bytes, token: UMPToken, oldTokenToConsume?: UMPToken): Promise<OutpointString>;
-    /** Assembles the ordered number[][] fields array from a UMPToken. */
-    private buildUMPTokenFields;
-    /** Looks up the old token on the overlay; returns undefined resolved token if not found. */
-    private resolveOldTokenInput;
-    /** Creates the UMP action without dropping a required old-token input on failure. */
-    private createUMPAction;
-    /** Handles a fully-finalized (no signable tx) createAction result — broadcasts and returns outpoint. */
-    private broadcastFinishedUMPAction;
-    /** Signs the old-token input and broadcasts — used during UMP token renewal. */
-    private signAndBroadcastWithOldToken;
-    /** Signs without input spending and broadcasts — used when creating a brand-new UMP token. */
-    private signAndBroadcastNewToken;
-    private assertSuccessfulBroadcast;
-    /**
-     * Attempts to parse a LookupAnswer from the UMP lookup service. If successful,
-     * extracts the token fields from the resulting transaction and constructs
-     * a UMPToken object.
-     *
-     * @param answer The LookupAnswer returned by a query to ls_users.
-     * @returns The parsed UMPToken or `undefined` if none found/decodable.
-     */
-    private parseLookupAnswer;
-    private parseLookupAnswers;
-    private parseLookupOutput;
-    /**
-     * Finds by outpoint for unlocking / spending previous tokens.
-     * @param outpoint The outpoint we are searching by
-     * @returns The result so that we can use it to unlock the transaction
-     */
-    private findByOutpoint;
-}
-/**
- * Manages a "CWI-style" wallet that uses a UMP token and a
- * multi-key authentication scheme (password, presentation key, and recovery key),
- * supporting multiple user profiles under a single account.
- */
-export declare class CWIStyleWalletManager implements WalletInterface {
-    /**
-     * Whether the user is currently authenticated (i.e., root keys are available).
-     */
-    authenticated: boolean;
-    /**
-     * Resolves once the optional snapshot (if provided to the constructor) has been
-     * fully loaded and the wallet is ready to accept calls.
-     * When no snapshot is provided this resolves immediately.
-     * Await `ready` before calling wallet methods after constructing with a snapshot.
-     */
-    get ready(): Promise<void>;
-    private _readyInit?;
-    private readonly _initSnapshot?;
-    /**
-     * The domain name of the administrative originator (wallet operator / vendor, or your own).
-     */
-    private readonly adminOriginator;
-    /**
-     * The system that locates and publishes UMP tokens on-chain.
-     */
-    private readonly UMPTokenInteractor;
-    /**
-     * Privacy-bounded diagnostic channel for wallet state transitions.
-     */
-    protected readonly telemetry: Telemetry;
-    /**
-     * A function called to persist the newly generated recovery key.
-     * It should generally trigger a UI prompt where the user is asked to write it down.
-     */
-    private readonly recoveryKeySaver;
-    /**
-     * Asks the user to enter their password, for a given reason.
-     * The test function can be used to see if the password is correct before resolving.
-     * Only resolve with the correct password or reject with an error.
-     * Resolving with an incorrect password will throw an error.
-     */
-    private readonly passwordRetriever;
-    /**
-     * Optional function to fund a new Wallet after the new-user flow.
-     */
-    private readonly newWalletFunder?;
-    /**
-     * Builds the underlying wallet for a specific profile.
-     */
-    private readonly walletBuilder;
-    /**
-     * Current mode of authentication.
-     */
-    authenticationMode: 'presentation-key-and-password' | 'presentation-key-and-recovery-key' | 'recovery-key-and-password';
-    /**
-     * Indicates new user or existing user flow.
-     */
-    authenticationFlow: 'unknown' | 'new-user' | 'existing-user';
-    /**
-     * The current UMP token in use.
-     */
-    private currentUMPToken?;
-    /**
-     * Temporarily retained presentation key.
-     */
-    private presentationKey?;
-    /**
-     * Temporarily retained recovery key.
-     */
-    private recoveryKey?;
-    /**
-     * The user's *root* primary key, derived from authentication factors.
-     */
-    private rootPrimaryKey?;
-    /**
-     * The currently active profile ID (null or DEFAULT_PROFILE_ID means default profile).
-     */
-    private activeProfileId;
-    /**
-     * List of loaded non-default profiles.
-     */
-    private profiles;
-    /**
-     * The underlying wallet instance for the *active* profile.
-     */
-    private underlying?;
-    /**
-     * Privileged key manager associated with the *root* keys, aware of the active profile.
-     */
-    private rootPrivilegedKeyManager?;
-    /**
-     * KDF configuration for new UMP tokens. Defaults to Argon2id for v3 tokens.
-     */
-    private readonly kdfConfig;
-    /**
-     * Constructs a new CWIStyleWalletManager.
-     *
-     * @param adminOriginator   The domain name of the administrative originator.
-     * @param walletBuilder     A function that can build an underlying wallet instance for a profile.
-     * @param interactor        An instance of UMPTokenInteractor.
-     * @param recoveryKeySaver  A function to persist a new recovery key.
-     * @param passwordRetriever A function to request the user's password.
-     * @param newWalletFunder   Optional function to fund a new wallet.
-     * @param stateSnapshot     Optional previously saved state snapshot.
-     * @param kdfConfig         Optional KDF configuration for new UMP tokens.
-     */
-    constructor(adminOriginator: OriginatorDomainNameStringUnder250Bytes, walletBuilder: (profilePrimaryKey: number[], profilePrivilegedKeyManager: PrivilegedKeyManager, profileId: number[]) => Promise<WalletInterface>, interactor: UMPTokenInteractor | undefined, recoveryKeySaver: (key: number[]) => Promise<true>, passwordRetriever: (reason: string, test: (passwordCandidate: string) => boolean | Promise<boolean>) => Promise<string>, newWalletFunder?: (presentationKey: number[], wallet: WalletInterface, // Default profile wallet
-    adminOriginator: OriginatorDomainNameStringUnder250Bytes) => Promise<void>, stateSnapshot?: number[], kdfConfig?: KdfConfig, telemetry?: TelemetryConfig);
-    private _init;
-    /**
-     * Provides the presentation key.
-     */
-    providePresentationKey(key: number[]): Promise<void>;
-    /**
-     * Provides the password.
-     */
-    providePassword(password: string): Promise<void>;
-    /** Handles the password step for an existing user — derives keys, sets up infrastructure. */
-    private handleExistingUserPassword;
-    /** Handles the password step for a new user — generates keys, builds UMP token, publishes on-chain. */
-    private handleNewUserPassword;
-    /**
-     * Provides the recovery key.
-     */
-    provideRecoveryKey(recoveryKey: number[]): Promise<void>;
-    /**
-     * Saves the current wallet state (root key, UMP token, active profile) into an encrypted snapshot.
-     * Version 2 format: [1 byte version=2] + [32 byte snapshot key] + [16 byte activeProfileId] + [encrypted payload]
-     * Encrypted Payload: [32 byte rootPrimaryKey] + [varint token length + serialized UMP token]
-     *
-     * @returns Encrypted snapshot bytes.
-     */
-    saveSnapshot(): number[];
-    /**
-     * Loads a previously saved state snapshot. Restores root key, UMP token, profiles, and active profile.
-     * Handles Version 1 (legacy) and Version 2 formats.
-     *
-     * @param snapshot Encrypted snapshot bytes.
-     */
-    loadSnapshot(snapshot: number[]): Promise<void>;
-    syncUMPToken(): Promise<boolean>;
-    /**
-     * Destroys the wallet state, clearing keys, tokens, and profiles.
-     */
-    destroy(): void;
-    /**
-     * Lists all available profiles, including the default profile.
-     * @returns Array of profile info objects, including an 'active' flag.
-     */
-    listProfiles(): Array<{
-        id: number[];
-        name: string;
-        createdAt: number | null;
-        active: boolean;
-        identityKey: string;
-    }>;
-    /**
-     * Adds a new profile with the given name.
-     * Generates necessary pads and updates the UMP token.
-     * Does not switch to the new profile automatically.
-     *
-     * @param name The desired name for the new profile.
-     * @returns The ID of the newly created profile.
-     */
-    addProfile(name: string): Promise<number[]>;
-    /**
-     * Deletes a profile by its ID.
-     * Cannot delete the default profile. If the active profile is deleted,
-     * it switches back to the default profile.
-     *
-     * @param profileId The 16-byte ID of the profile to delete.
-     */
-    deleteProfile(profileId: number[]): Promise<void>;
-    /**
-     * Switches the active profile. This re-derives keys and rebuilds the underlying wallet.
-     *
-     * @param profileId The 16-byte ID of the profile to switch to (use DEFAULT_PROFILE_ID for default).
-     */
-    switchProfile(profileId: number[]): Promise<void>;
-    /**
-     * Changes the user's password. Re-wraps keys and updates the UMP token.
-     */
-    changePassword(newPassword: string): Promise<void>;
-    /**
-     * Retrieves the current recovery key. Requires privileged access.
-     */
-    getRecoveryKey(): Promise<number[]>;
-    /**
-     * Changes the user's recovery key. Prompts user to save the new key.
-     */
-    changeRecoveryKey(): Promise<void>;
-    /**
-     * Changes the user's presentation key.
-     */
-    changePresentationKey(newPresentationKey: number[]): Promise<void>;
-    /**
-     * Performs XOR operation on two byte arrays.
-     */
-    private XOR;
-    /**
-     * Helper to decrypt a specific factor (key) stored encrypted in the UMP token.
-     * Requires the root privileged key manager.
-     * @param factorName Name of the factor to decrypt ('passwordKey', 'presentationKey', 'recoveryKey', 'privilegedKey').
-     * @param getRoot If true and factorName is 'privilegedKey', returns the root privileged key bytes directly.
-     * @returns The decrypted key bytes.
-     */
-    private getFactor;
-    /**
-     * Recomputes UMP token fields with updated factors and profiles, then publishes the update.
-     * This operation requires the *root* privileged key and the *default* profile wallet.
-     */
-    private updateAuthFactors;
-    /**
-     * Serializes a UMP token to binary format (Version 3 with KDF metadata, Version 2 with profiles).
-     * V3 Layout: [1 byte version=3] + [11 * (varint len + bytes) for standard fields] + [1 byte profile_flag] + [IF flag=1 THEN varint len + profile bytes] + [1 byte kdf_flag] + [IF flag=1 THEN kdf metadata] + [varint len + outpoint bytes]
-     */
-    private serializeUMPToken;
-    /**
-     * Deserializes a UMP token from binary format (Handles Version 1, 2, and 3).
-     */
-    private deserializeUMPToken;
-    /**
-     * Sets up the root key infrastructure after authentication or loading from snapshot.
-     * Initializes the root primary key, root privileged key manager, loads profiles,
-     * and sets the authenticated flag. Does NOT switch profile initially.
-     *
-     * @param rootPrimaryKey      The user's root primary key (32 bytes).
-     * @param ephemeralRootPrivilegedKey Optional root privileged key (e.g., during recovery flows).
-     */
-    private setupRootInfrastructure;
-    private checkAuthAndUnderlying;
-    getPublicKey(args: GetPublicKeyArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<GetPublicKeyResult>;
-    revealCounterpartyKeyLinkage(args: RevealCounterpartyKeyLinkageArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<RevealCounterpartyKeyLinkageResult>;
-    revealSpecificKeyLinkage(args: RevealSpecificKeyLinkageArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<RevealSpecificKeyLinkageResult>;
-    encrypt(args: WalletEncryptArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<WalletEncryptResult>;
-    decrypt(args: WalletDecryptArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<WalletDecryptResult>;
-    createHmac(args: CreateHmacArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<CreateHmacResult>;
-    verifyHmac(args: VerifyHmacArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<VerifyHmacResult>;
-    createSignature(args: CreateSignatureArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<CreateSignatureResult>;
-    verifySignature(args: VerifySignatureArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<VerifySignatureResult>;
-    createAction(args: CreateActionArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<CreateActionResult>;
-    signAction(args: SignActionArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<SignActionResult>;
-    abortAction(args: AbortActionArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<AbortActionResult>;
-    listActions(args: ListActionsArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<ListActionsResult>;
-    internalizeAction(args: InternalizeActionArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<InternalizeActionResult>;
-    listOutputs(args: ListOutputsArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<ListOutputsResult>;
-    relinquishOutput(args: RelinquishOutputArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<RelinquishOutputResult>;
-    acquireCertificate(args: AcquireCertificateArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<AcquireCertificateResult>;
-    listCertificates(args: ListCertificatesArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<ListCertificatesResult>;
-    proveCertificate(args: ProveCertificateArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<ProveCertificateResult>;
-    relinquishCertificate(args: RelinquishCertificateArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<RelinquishCertificateResult>;
-    discoverByIdentityKey(args: DiscoverByIdentityKeyArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<DiscoverCertificatesResult>;
-    discoverByAttributes(args: DiscoverByAttributesArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<DiscoverCertificatesResult>;
-    isAuthenticated(_: {}, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<AuthenticatedResult>;
-    waitForAuthentication(_: {}, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<AuthenticatedResult>;
-    getHeight(_: {}, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<GetHeightResult>;
-    getHeaderForHeight(args: GetHeaderArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<GetHeaderResult>;
-    getNetwork(_: {}, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<GetNetworkResult>;
-    getVersion(_: {}, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<GetVersionResult>;
-}
-//# sourceMappingURL=CWIStyleWalletManager.d.ts.map