@bsv/wallet-toolbox-client 2.4.4 → 2.4.20

package/out/src/CWIStyleWalletManager.js

@@ -1,1966 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CWIStyleWalletManager = exports.OverlayUMPTokenInteractor = exports.UMPTokenLookupError = exports.DEFAULT_PROFILE_ID = exports.MAX_STATE_SNAPSHOT_BYTES = exports.PBKDF2_MAX_ITERATIONS = exports.KDF_MAX_HASH_LENGTH = exports.ARGON2ID_MAX_PARALLELISM = exports.ARGON2ID_MAX_MEMORY_KIB = exports.ARGON2ID_MAX_ITERATIONS = exports.ARGON2ID_DEFAULT_HASH_LENGTH = exports.ARGON2ID_DEFAULT_PARALLELISM = exports.ARGON2ID_DEFAULT_MEMORY_KIB = exports.ARGON2ID_DEFAULT_ITERATIONS = exports.PBKDF2_NUM_ROUNDS = void 0;
-const sdk_1 = require("@bsv/sdk");
-const hash_wasm_1 = require("hash-wasm");
-const PrivilegedKeyManager_1 = require("./sdk/PrivilegedKeyManager");
-/**
- * Number of rounds used in PBKDF2 for deriving password keys.
- */
-exports.PBKDF2_NUM_ROUNDS = 7777;
-/**
- * Default Argon2id parameters for password-key derivation (UMP v3).
- */
-exports.ARGON2ID_DEFAULT_ITERATIONS = 7;
-exports.ARGON2ID_DEFAULT_MEMORY_KIB = 131072;
-exports.ARGON2ID_DEFAULT_PARALLELISM = 1;
-exports.ARGON2ID_DEFAULT_HASH_LENGTH = 32;
-exports.ARGON2ID_MAX_ITERATIONS = 20;
-exports.ARGON2ID_MAX_MEMORY_KIB = 262144;
-exports.ARGON2ID_MAX_PARALLELISM = 16;
-exports.KDF_MAX_HASH_LENGTH = 64;
-exports.PBKDF2_MAX_ITERATIONS = 10_000_000;
-exports.MAX_STATE_SNAPSHOT_BYTES = 16 * 1024 * 1024;
-function isPositiveIntegerInRange(value, maximum) {
-    return typeof value === 'number' && Number.isInteger(value) && value > 0 && value <= maximum;
-}
-function isValidKdfConfig(kdf) {
-    if (kdf == null)
-        return false;
-    if (!isPositiveIntegerInRange(kdf.iterations, kdf.algorithm === 'argon2id' ? exports.ARGON2ID_MAX_ITERATIONS : exports.PBKDF2_MAX_ITERATIONS)) {
-        return false;
-    }
-    if (kdf.algorithm === 'pbkdf2-sha512') {
-        return kdf.hashLength === undefined || isPositiveIntegerInRange(kdf.hashLength, exports.KDF_MAX_HASH_LENGTH);
-    }
-    if (kdf.algorithm !== 'argon2id')
-        return false;
-    return isPositiveIntegerInRange(kdf.memoryKiB, exports.ARGON2ID_MAX_MEMORY_KIB) &&
-        isPositiveIntegerInRange(kdf.parallelism, exports.ARGON2ID_MAX_PARALLELISM) &&
-        isPositiveIntegerInRange(kdf.hashLength, exports.KDF_MAX_HASH_LENGTH);
-}
-function isLikelyDerSignatureField(field) {
-    if (!field || field.length < 8 || field.length > 80) {
-        return false;
-    }
-    if (field[0] !== 0x30) {
-        return false;
-    }
-    const declaredLen = field[1];
-    return declaredLen === field.length - 2;
-}
-function stripVerifiedPushDropSignature(fields, lockingPublicKey) {
-    if (fields.length <= 11) {
-        return fields;
-    }
-    const protocolFieldCount = fields.length - 1;
-    const trailingField = fields[protocolFieldCount];
-    if (!trailingField || !isLikelyDerSignatureField(trailingField)) {
-        return fields;
-    }
-    try {
-        let dataLength = 0;
-        for (let i = 0; i < protocolFieldCount; i++) {
-            dataLength += fields[i].length;
-        }
-        const dataToVerify = new Array(dataLength);
-        let writeOffset = 0;
-        for (let i = 0; i < protocolFieldCount; i++) {
-            const field = fields[i];
-            for (const byte of field) {
-                dataToVerify[writeOffset++] = byte;
-            }
-        }
-        const signature = sdk_1.Signature.fromDER(trailingField);
-        if (signature.verify(dataToVerify, lockingPublicKey)) {
-            return fields.slice(0, protocolFieldCount);
-        }
-    }
-    catch {
-        return fields;
-    }
-    return fields;
-}
-/**
- * PBKDF-2 that prefers WebCrypto and falls back to hash-wasm.
- *
- * @param passwordBytes   Raw password bytes.
- * @param salt            Salt bytes.
- * @param iterations      Number of rounds.
- * @param keyLen          Desired key length in bytes.
- * @param hash            Digest algorithm (default "sha512").
- * @returns               Derived key bytes.
- */
-async function pbkdf2NativeOrWasm(passwordBytes, salt, iterations, keyLen, hash = 'sha512') {
-    // ----- fast-path: WebCrypto (both browser & recent Node expose globalThis.crypto.subtle)
-    const subtle = globalThis?.crypto?.subtle;
-    if (subtle != null) {
-        try {
-            const baseKey = await subtle.importKey('raw', new Uint8Array(passwordBytes), { name: 'PBKDF2' }, 
-            /* extractable */ false, ['deriveBits']);
-            const bits = await subtle.deriveBits({
-                name: 'PBKDF2',
-                salt: new Uint8Array(salt),
-                iterations,
-                hash: hash.toUpperCase()
-            }, baseKey, keyLen * 8);
-            return Array.from(new Uint8Array(bits));
-        }
-        catch {
-            // WebCrypto is unavailable or refused the algorithm (e.g. non-secure context, old
-            // Safari).  Fall through to the pure-JS hash-wasm implementation below.
-        }
-    }
-    const hashFunction = hash === 'sha256' ? (0, hash_wasm_1.createSHA256)() : (0, hash_wasm_1.createSHA512)();
-    const derived = await (0, hash_wasm_1.pbkdf2)({
-        password: new Uint8Array(passwordBytes),
-        salt: new Uint8Array(salt),
-        iterations,
-        hashLength: keyLen,
-        hashFunction,
-        outputType: 'binary'
-    });
-    return Array.from(derived);
-}
-/**
- * Derives the password key from a password using the KDF specified in the UMP token.
- * For legacy tokens (no KDF metadata), uses PBKDF2 with fixed rounds (7777).
- * For v3 tokens, uses the algorithm specified in passwordKdf metadata.
- *
- * @param token          The UMP token containing KDF metadata and salt.
- * @param passwordBytes  Raw password bytes.
- * @param overrideKdf    Optional KDF config to override token/default settings.
- * @returns              Derived password key bytes.
- */
-async function derivePasswordKey(token, passwordBytes, overrideKdf) {
-    const kdf = overrideKdf || token.passwordKdf;
-    if (kdf != null && !isValidKdfConfig(kdf)) {
-        throw new Error('UMP token contains unsupported or unsafe KDF parameters.');
-    }
-    // Legacy token or explicit PBKDF2 request
-    if ((kdf == null) || kdf.algorithm === 'pbkdf2-sha512') {
-        return await pbkdf2NativeOrWasm(passwordBytes, token.passwordSalt, kdf?.iterations ?? exports.PBKDF2_NUM_ROUNDS, 32, 'sha512');
-    }
-    // Argon2id path (UMP v3)
-    if (kdf.algorithm === 'argon2id') {
-        const iterations = kdf.iterations ?? exports.ARGON2ID_DEFAULT_ITERATIONS;
-        const memorySize = kdf.memoryKiB ?? exports.ARGON2ID_DEFAULT_MEMORY_KIB;
-        const parallelism = kdf.parallelism ?? exports.ARGON2ID_DEFAULT_PARALLELISM;
-        const hashLength = kdf.hashLength ?? exports.ARGON2ID_DEFAULT_HASH_LENGTH;
-        const hash = await (0, hash_wasm_1.argon2id)({
-            password: new Uint8Array(passwordBytes),
-            salt: new Uint8Array(token.passwordSalt),
-            iterations,
-            memorySize,
-            parallelism,
-            hashLength,
-            outputType: 'binary'
-        });
-        return Array.from(hash);
-    }
-    throw new Error(`Unsupported KDF algorithm: ${kdf.algorithm}`);
-}
-/**
- * Unique Identifier for the default profile (16 zero bytes).
- */
-exports.DEFAULT_PROFILE_ID = [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0];
-function isByteArrayOfLength(value, length) {
-    return Array.isArray(value) &&
-        value.length === length &&
-        value.every(byte => Number.isInteger(byte) && byte >= 0 && byte <= 255);
-}
-function isValidProfile(value) {
-    if (value == null || typeof value !== 'object')
-        return false;
-    const profile = value;
-    return typeof profile.name === 'string' &&
-        profile.name.length > 0 &&
-        profile.name.length <= 250 &&
-        isByteArrayOfLength(profile.id, 16) &&
-        isByteArrayOfLength(profile.primaryPad, 32) &&
-        isByteArrayOfLength(profile.privilegedPad, 32) &&
-        typeof profile.createdAt === 'number' &&
-        Number.isFinite(profile.createdAt) &&
-        profile.createdAt >= 0;
-}
-/**
- * Raised when UMP absence cannot be established authoritatively.
- *
- * Callers must offer retry/recovery rather than treating this error as a new
- * account. Diagnostics contain counts only and never hashes, keys, or tokens.
- */
-class UMPTokenLookupError extends Error {
-    reason;
-    diagnostics;
-    code = 'WERR_UMP_LOOKUP_INDETERMINATE';
-    constructor(reason, diagnostics, options) {
-        super('Unable to determine whether the wallet account already exists. Retry or use account recovery.', options);
-        this.reason = reason;
-        this.diagnostics = diagnostics;
-        this.name = 'UMPTokenLookupError';
-    }
-}
-exports.UMPTokenLookupError = UMPTokenLookupError;
-/**
- * @class OverlayUMPTokenInteractor
- *
- * A concrete implementation of the UMPTokenInteractor interface that interacts
- * with Overlay Services and the UMP (User Management Protocol) topic. This class
- * is responsible for:
- *
- * 1) Locating UMP tokens via overlay lookups (ls_users).
- * 2) Creating and publishing new or updated UMP token outputs on-chain under
- *    the "tm_users" topic.
- * 3) Consuming (spending) an old token if provided.
- */
-class OverlayUMPTokenInteractor {
-    /**
-     * A `LookupResolver` instance used to query overlay networks.
-     */
-    resolver;
-    /**
-     * A SHIP broadcaster that can be used to publish updated UMP tokens
-     * under the `tm_users` topic to overlay service peers.
-     */
-    broadcaster;
-    telemetry;
-    /**
-     * Construct a new OverlayUMPTokenInteractor.
-     *
-     * @param resolver     A LookupResolver instance for performing overlay queries (ls_users).
-     * @param broadcaster  A SHIPBroadcaster instance for sharing new or updated tokens across the `tm_users` overlay.
-     */
-    constructor(resolver = new sdk_1.LookupResolver(), broadcaster = new sdk_1.SHIPBroadcaster(['tm_users']), telemetry) {
-        this.resolver = resolver;
-        this.broadcaster = broadcaster;
-        this.telemetry = new sdk_1.Telemetry(telemetry);
-    }
-    /**
-     * Finds a UMP token on-chain by the given presentation key hash, if it exists.
-     * Uses the ls_users overlay service to perform the lookup.
-     *
-     * @param hash The 32-byte SHA-256 hash of the presentation key.
-     * @returns A UMPToken object (including currentOutpoint) if found, otherwise undefined.
-     */
-    async findByPresentationKeyHash(hash) {
-        return await this.findToken({
-            service: 'ls_users',
-            query: { presentationHash: sdk_1.Utils.toHex(hash) }
-        }, 'presentation');
-    }
-    /**
-     * Finds a UMP token on-chain by the given recovery key hash, if it exists.
-     * Uses the ls_users overlay service to perform the lookup.
-     *
-     * @param hash The 32-byte SHA-256 hash of the recovery key.
-     * @returns A UMPToken object (including currentOutpoint) if found, otherwise undefined.
-     */
-    async findByRecoveryKeyHash(hash) {
-        return await this.findToken({
-            service: 'ls_users',
-            query: { recoveryHash: sdk_1.Utils.toHex(hash) }
-        }, 'recovery');
-    }
-    async findToken(question, lookupKind) {
-        const correlationId = this.telemetry.enabled === true ? this.telemetry.createCorrelationId() : undefined;
-        const startedAt = Date.now();
-        this.telemetry.capture({
-            name: 'wallet-toolbox.ump.lookup.started',
-            component: 'wallet-toolbox.ump',
-            severity: 'debug',
-            correlationId,
-            attributes: { lookupKind }
-        });
-        let resolution;
-        try {
-            resolution = await this.resolver.queryDetailed(question, undefined, {
-                waitForAllHosts: true,
-                correlationId
-            });
-        }
-        catch (error) {
-            const diagnostics = this.emptyLookupDiagnostics(correlationId);
-            this.captureLookupFailure(lookupKind, 'lookup-unavailable', diagnostics, startedAt, error);
-            throw new UMPTokenLookupError('lookup-unavailable', diagnostics, { cause: error });
-        }
-        const diagnostics = this.toLookupDiagnostics(resolution);
-        if (resolution.answer.outputs.length === 0) {
-            const authoritative = resolution.progress.isFinal &&
-                resolution.progress.hostCount > 0 &&
-                resolution.progress.completedHosts === resolution.progress.hostCount &&
-                resolution.progress.successfulHosts === resolution.progress.hostCount &&
-                resolution.progress.emptyHosts === resolution.progress.hostCount &&
-                resolution.progress.failedHosts === 0 &&
-                resolution.progress.rejectedHosts === 0 &&
-                resolution.progress.freeformHosts === 0;
-            if (!authoritative) {
-                this.captureLookupFailure(lookupKind, 'lookup-incomplete', diagnostics, startedAt);
-                throw new UMPTokenLookupError('lookup-incomplete', diagnostics);
-            }
-            this.telemetry.capture({
-                name: 'wallet-toolbox.ump.lookup.completed',
-                component: 'wallet-toolbox.ump',
-                severity: 'info',
-                correlationId: diagnostics.correlationId,
-                attributes: {
-                    lookupKind,
-                    result: 'not-found',
-                    durationMs: Date.now() - startedAt,
-                    ...this.lookupDiagnosticAttributes(diagnostics)
-                }
-            });
-            return undefined;
-        }
-        const tokens = this.parseLookupAnswers(resolution.answer);
-        const expectedHash = question.query[lookupKind === 'presentation' ? 'presentationHash' : 'recoveryHash'].toLowerCase();
-        const everyOutputValidAndMatching = tokens.length === resolution.answer.outputs.length &&
-            tokens.every(token => sdk_1.Utils.toHex(lookupKind === 'presentation' ? token.presentationHash : token.recoveryHash).toLowerCase() === expectedHash);
-        if (!everyOutputValidAndMatching || tokens.length === 0) {
-            this.captureLookupFailure(lookupKind, 'token-malformed', diagnostics, startedAt);
-            throw new UMPTokenLookupError('token-malformed', diagnostics);
-        }
-        if (tokens.length !== 1) {
-            const reason = 'token-ambiguous';
-            this.captureLookupFailure(lookupKind, reason, diagnostics, startedAt);
-            throw new UMPTokenLookupError(reason, diagnostics);
-        }
-        this.telemetry.capture({
-            name: 'wallet-toolbox.ump.lookup.completed',
-            component: 'wallet-toolbox.ump',
-            severity: 'info',
-            correlationId: diagnostics.correlationId,
-            attributes: {
-                lookupKind,
-                result: 'found',
-                durationMs: Date.now() - startedAt,
-                ...this.lookupDiagnosticAttributes(diagnostics)
-            }
-        });
-        return tokens[0];
-    }
-    emptyLookupDiagnostics(correlationId) {
-        return {
-            hostCount: 0,
-            completedHosts: 0,
-            successfulHosts: 0,
-            emptyHosts: 0,
-            failedHosts: 0,
-            rejectedHosts: 0,
-            freeformHosts: 0,
-            outputCount: 0,
-            ...(correlationId !== undefined ? { correlationId } : {})
-        };
-    }
-    toLookupDiagnostics(resolution) {
-        const progress = resolution.progress;
-        return {
-            hostCount: progress.hostCount,
-            completedHosts: progress.completedHosts,
-            successfulHosts: progress.successfulHosts,
-            emptyHosts: progress.emptyHosts,
-            failedHosts: progress.failedHosts,
-            rejectedHosts: progress.rejectedHosts,
-            freeformHosts: progress.freeformHosts,
-            outputCount: resolution.answer.outputs.length,
-            ...(progress.correlationId !== undefined ? { correlationId: progress.correlationId } : {})
-        };
-    }
-    lookupDiagnosticAttributes(diagnostics) {
-        return {
-            hostCount: diagnostics.hostCount,
-            completedHosts: diagnostics.completedHosts,
-            successfulHosts: diagnostics.successfulHosts,
-            emptyHosts: diagnostics.emptyHosts,
-            failedHosts: diagnostics.failedHosts,
-            rejectedHosts: diagnostics.rejectedHosts,
-            freeformHosts: diagnostics.freeformHosts,
-            outputCount: diagnostics.outputCount
-        };
-    }
-    captureLookupFailure(lookupKind, reason, diagnostics, startedAt, error) {
-        this.telemetry.capture({
-            name: 'wallet-toolbox.ump.lookup.indeterminate',
-            component: 'wallet-toolbox.ump',
-            severity: 'warn',
-            correlationId: diagnostics.correlationId,
-            attributes: {
-                lookupKind,
-                reason,
-                durationMs: Date.now() - startedAt,
-                ...this.lookupDiagnosticAttributes(diagnostics)
-            },
-            error
-        });
-    }
-    /**
-     * Creates or updates (replaces) a UMP token on-chain. If `oldTokenToConsume` is provided,
-     * it is spent in the same transaction that creates the new token output. The new token is
-     * then broadcast and published under the `tm_users` topic using a SHIP broadcast, ensuring
-     * overlay participants see the updated token.
-     *
-     * @param wallet            The wallet used to build and sign the transaction (MUST be operating under the DEFAULT profile).
-     * @param adminOriginator   The domain/FQDN of the administrative originator (wallet operator).
-     * @param token             The new UMPToken to create on-chain.
-     * @param oldTokenToConsume Optionally, an existing token to consume/spend in the same transaction.
-     * @returns The outpoint of the newly created UMP token (e.g. "abcd1234...ef.0").
-     */
-    async buildAndSend(wallet, // This wallet MUST be the one built for the default profile
-    adminOriginator, token, oldTokenToConsume) {
-        // 1) Construct the data fields and PushDrop locking script for the new UMP token.
-        const fields = this.buildUMPTokenFields(token);
-        const script = await new sdk_1.PushDrop(wallet, adminOriginator).lock(fields, [2, 'admin user management token'], '1', 'self', 
-        /* forSelf= */ true, 
-        /* includeSignature= */ true);
-        const tokenOutput = [{ lockingScript: script.toHex(), satoshis: 1, outputDescription: 'New UMP token output' }];
-        // 2) Resolve the old-token input (if provided) and create the action.
-        const { resolvedOldToken, inputToken } = await this.resolveOldTokenInput(oldTokenToConsume);
-        const inputs = resolvedOldToken?.currentOutpoint
-            ? [{ outpoint: resolvedOldToken.currentOutpoint, unlockingScriptLength: 73, inputDescription: 'Consume old UMP token' }]
-            : [];
-        const createResult = await this.createUMPAction(wallet, adminOriginator, inputs, tokenOutput, inputToken, resolvedOldToken);
-        // 3) If the wallet fully processed it (no signable tx), broadcast and return.
-        if (!createResult.signableTransaction) {
-            return await this.broadcastFinishedUMPAction(createResult);
-        }
-        // 4) Sign and broadcast: with old token input or without.
-        const reference = createResult.signableTransaction.reference;
-        const partialTx = sdk_1.Transaction.fromBEEF(createResult.signableTransaction.tx);
-        if (resolvedOldToken?.currentOutpoint) {
-            return await this.signAndBroadcastWithOldToken(wallet, adminOriginator, reference, partialTx);
-        }
-        return await this.signAndBroadcastNewToken(wallet, adminOriginator, reference);
-    }
-    /** Assembles the ordered number[][] fields array from a UMPToken. */
-    buildUMPTokenFields(token) {
-        const fields = [];
-        fields[0] = token.passwordSalt;
-        fields[1] = token.passwordPresentationPrimary;
-        fields[2] = token.passwordRecoveryPrimary;
-        fields[3] = token.presentationRecoveryPrimary;
-        fields[4] = token.passwordPrimaryPrivileged;
-        fields[5] = token.presentationRecoveryPrivileged;
-        fields[6] = token.presentationHash;
-        fields[7] = token.recoveryHash;
-        fields[8] = token.presentationKeyEncrypted;
-        fields[9] = token.passwordKeyEncrypted;
-        fields[10] = token.recoveryKeyEncrypted;
-        if (token.profilesEncrypted != null)
-            fields[11] = token.profilesEncrypted;
-        if (token.umpVersion === 3 && token.passwordKdf != null) {
-            const vi = (token.profilesEncrypted == null) ? 11 : 12;
-            fields[vi] = [token.umpVersion];
-            fields[vi + 1] = sdk_1.Utils.toArray(token.passwordKdf.algorithm, 'utf8');
-            const kdfParams = { iterations: token.passwordKdf.iterations };
-            if (token.passwordKdf.memoryKiB !== undefined)
-                kdfParams.memoryKiB = token.passwordKdf.memoryKiB;
-            if (token.passwordKdf.parallelism !== undefined)
-                kdfParams.parallelism = token.passwordKdf.parallelism;
-            if (token.passwordKdf.hashLength !== undefined)
-                kdfParams.hashLength = token.passwordKdf.hashLength;
-            fields[vi + 2] = sdk_1.Utils.toArray(JSON.stringify(kdfParams), 'utf8');
-        }
-        return fields;
-    }
-    /** Looks up the old token on the overlay; returns undefined resolved token if not found. */
-    async resolveOldTokenInput(oldTokenToConsume) {
-        if (!oldTokenToConsume?.currentOutpoint)
-            return { resolvedOldToken: undefined, inputToken: undefined };
-        const inputToken = await this.findByOutpoint(oldTokenToConsume.currentOutpoint);
-        if (inputToken == null) {
-            throw new Error('The previous UMP token could not be resolved; refusing to publish a duplicate token.');
-        }
-        return { resolvedOldToken: oldTokenToConsume, inputToken };
-    }
-    /** Creates the UMP action without dropping a required old-token input on failure. */
-    async createUMPAction(wallet, adminOriginator, inputs, outputs, inputToken, resolvedOldToken) {
-        try {
-            return await wallet.createAction({
-                description: (resolvedOldToken == null) ? 'Create new UMP token' : 'Renew UMP token (consume old, create new)',
-                inputs,
-                outputs,
-                inputBEEF: inputToken?.beef,
-                options: { randomizeOutputs: false, acceptDelayedBroadcast: false }
-            }, adminOriginator);
-        }
-        catch (error) {
-            this.telemetry.capture({
-                name: 'wallet-toolbox.ump.action.failed',
-                component: 'wallet-toolbox.ump',
-                severity: 'error',
-                attributes: {
-                    operation: resolvedOldToken == null ? 'create' : 'renew',
-                    oldTokenInputRequired: resolvedOldToken != null
-                },
-                error
-            });
-            throw error;
-        }
-    }
-    /** Handles a fully-finalized (no signable tx) createAction result — broadcasts and returns outpoint. */
-    async broadcastFinishedUMPAction(createResult) {
-        const finalTxid = createResult.txid || (createResult.tx != null ? sdk_1.Transaction.fromAtomicBEEF(createResult.tx).id('hex') : undefined);
-        if (!finalTxid)
-            throw new Error('No signableTransaction and no final TX found.');
-        if (createResult.tx == null)
-            throw new Error('No final TX data to broadcast.');
-        const broadcastTx = sdk_1.Transaction.fromAtomicBEEF(createResult.tx);
-        const result = await this.broadcaster.broadcast(broadcastTx);
-        this.assertSuccessfulBroadcast(result, 'create-finalized');
-        return `${finalTxid}.0`;
-    }
-    /** Signs the old-token input and broadcasts — used during UMP token renewal. */
-    async signAndBroadcastWithOldToken(wallet, adminOriginator, reference, partialTx) {
-        const unlocker = new sdk_1.PushDrop(wallet, adminOriginator).unlock([2, 'admin user management token'], '1', 'self');
-        const unlockingScript = await unlocker.sign(partialTx, 0);
-        const signResult = await wallet.signAction({ reference, spends: { 0: { unlockingScript: unlockingScript.toHex() } } }, adminOriginator);
-        const finalTxid = signResult.txid || ((signResult.tx == null) ? '' : sdk_1.Transaction.fromAtomicBEEF(signResult.tx).id('hex'));
-        if (!finalTxid)
-            throw new Error('Could not finalize transaction for renewed UMP token.');
-        if (signResult.tx == null)
-            throw new Error('Final transaction data missing after signing renewed UMP token.');
-        const result = await this.broadcaster.broadcast(sdk_1.Transaction.fromAtomicBEEF(signResult.tx));
-        this.assertSuccessfulBroadcast(result, 'renew');
-        return `${finalTxid}.0`;
-    }
-    /** Signs without input spending and broadcasts — used when creating a brand-new UMP token. */
-    async signAndBroadcastNewToken(wallet, adminOriginator, reference) {
-        const signResult = await wallet.signAction({ reference, spends: {} }, adminOriginator);
-        const finalTxid = signResult.txid || ((signResult.tx == null) ? '' : sdk_1.Transaction.fromAtomicBEEF(signResult.tx).id('hex'));
-        if (!finalTxid)
-            throw new Error('Failed to finalize new UMP token transaction.');
-        if (signResult.tx == null)
-            throw new Error('Final transaction data missing after signing new UMP token.');
-        const result = await this.broadcaster.broadcast(sdk_1.Transaction.fromAtomicBEEF(signResult.tx));
-        this.assertSuccessfulBroadcast(result, 'create');
-        return `${finalTxid}.0`;
-    }
-    assertSuccessfulBroadcast(result, operation) {
-        const succeeded = result.status === 'success';
-        this.telemetry.capture({
-            name: succeeded
-                ? 'wallet-toolbox.ump.broadcast.completed'
-                : 'wallet-toolbox.ump.broadcast.failed',
-            component: 'wallet-toolbox.ump',
-            severity: succeeded ? 'info' : 'error',
-            attributes: {
-                operation,
-                outcome: result.status,
-                ...(result.status === 'error' ? { code: result.code } : {})
-            }
-        });
-        if (!succeeded) {
-            throw new Error(`UMP token broadcast failed (${result.code}).`);
-        }
-    }
-    /**
-     * Attempts to parse a LookupAnswer from the UMP lookup service. If successful,
-     * extracts the token fields from the resulting transaction and constructs
-     * a UMPToken object.
-     *
-     * @param answer The LookupAnswer returned by a query to ls_users.
-     * @returns The parsed UMPToken or `undefined` if none found/decodable.
-     */
-    parseLookupAnswer(answer) {
-        return this.parseLookupAnswers(answer)[0];
-    }
-    parseLookupAnswers(answer) {
-        if (answer.type !== 'output-list' || answer.outputs.length === 0)
-            return [];
-        const tokens = [];
-        for (const output of answer.outputs) {
-            const token = this.parseLookupOutput(output);
-            if (token != null)
-                tokens.push(token);
-        }
-        return tokens;
-    }
-    parseLookupOutput(output) {
-        try {
-            const tx = sdk_1.Transaction.fromBEEF(output.beef);
-            const txOutput = tx.outputs[output.outputIndex];
-            if (txOutput == null)
-                return undefined;
-            const decoded = sdk_1.PushDrop.decode(txOutput.lockingScript);
-            if (decoded.fields == null || decoded.fields.length < 11 || decoded.fields.length > 16) {
-                return undefined;
-            }
-            const protocolFields = stripVerifiedPushDropSignature(decoded.fields, decoded.lockingPublicKey);
-            if (protocolFields.length < 11 ||
-                protocolFields.slice(0, 11).some(field => field.length === 0 || field.length > exports.MAX_STATE_SNAPSHOT_BYTES)) {
-                return undefined;
-            }
-            const hasV3MetadataWithProfiles = protocolFields.length >= 15 && protocolFields[12]?.length === 1 && protocolFields[12][0] === 3;
-            const hasV3MetadataWithoutProfiles = protocolFields.length >= 14 && protocolFields[11]?.length === 1 && protocolFields[11][0] === 3;
-            const kdfVersionFieldIndex = hasV3MetadataWithProfiles ? 12 : (hasV3MetadataWithoutProfiles ? 11 : -1);
-            const token = {
-                passwordSalt: protocolFields[0],
-                passwordPresentationPrimary: protocolFields[1],
-                passwordRecoveryPrimary: protocolFields[2],
-                presentationRecoveryPrimary: protocolFields[3],
-                passwordPrimaryPrivileged: protocolFields[4],
-                presentationRecoveryPrivileged: protocolFields[5],
-                presentationHash: protocolFields[6],
-                recoveryHash: protocolFields[7],
-                presentationKeyEncrypted: protocolFields[8],
-                passwordKeyEncrypted: protocolFields[9],
-                recoveryKeyEncrypted: protocolFields[10],
-                currentOutpoint: `${tx.id('hex')}.${output.outputIndex}`
-            };
-            if (token.presentationHash.length !== 32 || token.recoveryHash.length !== 32)
-                return undefined;
-            const hasProfilesField = hasV3MetadataWithProfiles || (!hasV3MetadataWithoutProfiles && protocolFields[11] != null);
-            if (hasProfilesField && protocolFields[11].length > 0) {
-                if (protocolFields[11].length > exports.MAX_STATE_SNAPSHOT_BYTES)
-                    return undefined;
-                token.profilesEncrypted = protocolFields[11];
-            }
-            if (kdfVersionFieldIndex !== -1) {
-                const kdfAlgorithmField = protocolFields[kdfVersionFieldIndex + 1];
-                const kdfParamsField = protocolFields[kdfVersionFieldIndex + 2];
-                if (kdfAlgorithmField == null || kdfParamsField == null || kdfParamsField.length > 1024) {
-                    return undefined;
-                }
-                const kdfParams = JSON.parse(sdk_1.Utils.toUTF8(kdfParamsField));
-                const passwordKdf = {
-                    algorithm: sdk_1.Utils.toUTF8(kdfAlgorithmField),
-                    iterations: kdfParams.iterations,
-                    memoryKiB: kdfParams.memoryKiB,
-                    parallelism: kdfParams.parallelism,
-                    hashLength: kdfParams.hashLength
-                };
-                if (!isValidKdfConfig(passwordKdf))
-                    return undefined;
-                token.umpVersion = 3;
-                token.passwordKdf = passwordKdf;
-            }
-            return token;
-        }
-        catch {
-            return undefined;
-        }
-    }
-    /**
-     * Finds by outpoint for unlocking / spending previous tokens.
-     * @param outpoint The outpoint we are searching by
-     * @returns The result so that we can use it to unlock the transaction
-     */
-    async findByOutpoint(outpoint) {
-        const correlationId = this.telemetry.enabled === true ? this.telemetry.createCorrelationId() : undefined;
-        const startedAt = Date.now();
-        let resolution;
-        try {
-            resolution = await this.resolver.queryDetailed({
-                service: 'ls_users',
-                query: {
-                    outpoint
-                }
-            }, undefined, {
-                waitForAllHosts: true,
-                correlationId
-            });
-        }
-        catch (error) {
-            const diagnostics = this.emptyLookupDiagnostics(correlationId);
-            this.captureLookupFailure('outpoint', 'lookup-unavailable', diagnostics, startedAt, error);
-            throw new UMPTokenLookupError('lookup-unavailable', diagnostics, { cause: error });
-        }
-        if (resolution.answer.outputs.length === 0) {
-            const p = resolution.progress;
-            const authoritative = p.isFinal &&
-                p.hostCount > 0 &&
-                p.completedHosts === p.hostCount &&
-                p.successfulHosts === p.hostCount &&
-                p.emptyHosts === p.hostCount &&
-                p.failedHosts === 0 &&
-                p.rejectedHosts === 0 &&
-                p.freeformHosts === 0;
-            if (!authoritative) {
-                const diagnostics = this.toLookupDiagnostics(resolution);
-                this.captureLookupFailure('outpoint', 'lookup-incomplete', diagnostics, startedAt);
-                throw new UMPTokenLookupError('lookup-incomplete', diagnostics);
-            }
-            return undefined;
-        }
-        return resolution.answer.outputs[0];
-    }
-}
-exports.OverlayUMPTokenInteractor = OverlayUMPTokenInteractor;
-/**
- * Manages a "CWI-style" wallet that uses a UMP token and a
- * multi-key authentication scheme (password, presentation key, and recovery key),
- * supporting multiple user profiles under a single account.
- */
-class CWIStyleWalletManager {
-    /**
-     * Whether the user is currently authenticated (i.e., root keys are available).
-     */
-    authenticated;
-    /**
-     * Resolves once the optional snapshot (if provided to the constructor) has been
-     * fully loaded and the wallet is ready to accept calls.
-     * When no snapshot is provided this resolves immediately.
-     * Await `ready` before calling wallet methods after constructing with a snapshot.
-     */
-    get ready() {
-        if (this._readyInit === undefined) {
-            this._readyInit = this._init();
-        }
-        return this._readyInit;
-    }
-    _readyInit;
-    _initSnapshot;
-    /**
-     * The domain name of the administrative originator (wallet operator / vendor, or your own).
-     */
-    adminOriginator;
-    /**
-     * The system that locates and publishes UMP tokens on-chain.
-     */
-    UMPTokenInteractor;
-    /**
-     * Privacy-bounded diagnostic channel for wallet state transitions.
-     */
-    telemetry;
-    /**
-     * A function called to persist the newly generated recovery key.
-     * It should generally trigger a UI prompt where the user is asked to write it down.
-     */
-    recoveryKeySaver;
-    /**
-     * Asks the user to enter their password, for a given reason.
-     * The test function can be used to see if the password is correct before resolving.
-     * Only resolve with the correct password or reject with an error.
-     * Resolving with an incorrect password will throw an error.
-     */
-    passwordRetriever;
-    /**
-     * Optional function to fund a new Wallet after the new-user flow.
-     */
-    newWalletFunder;
-    /**
-     * Builds the underlying wallet for a specific profile.
-     */
-    walletBuilder;
-    /**
-     * Current mode of authentication.
-     */
-    authenticationMode = 'presentation-key-and-password';
-    /**
-     * Indicates new user or existing user flow.
-     */
-    authenticationFlow = 'unknown';
-    /**
-     * The current UMP token in use.
-     */
-    currentUMPToken;
-    /**
-     * Temporarily retained presentation key.
-     */
-    presentationKey;
-    /**
-     * Temporarily retained recovery key.
-     */
-    recoveryKey;
-    /**
-     * The user's *root* primary key, derived from authentication factors.
-     */
-    rootPrimaryKey;
-    /**
-     * The currently active profile ID (null or DEFAULT_PROFILE_ID means default profile).
-     */
-    activeProfileId = exports.DEFAULT_PROFILE_ID;
-    /**
-     * List of loaded non-default profiles.
-     */
-    profiles = [];
-    /**
-     * The underlying wallet instance for the *active* profile.
-     */
-    underlying;
-    /**
-     * Privileged key manager associated with the *root* keys, aware of the active profile.
-     */
-    rootPrivilegedKeyManager;
-    /**
-     * KDF configuration for new UMP tokens. Defaults to Argon2id for v3 tokens.
-     */
-    kdfConfig;
-    /**
-     * Constructs a new CWIStyleWalletManager.
-     *
-     * @param adminOriginator   The domain name of the administrative originator.
-     * @param walletBuilder     A function that can build an underlying wallet instance for a profile.
-     * @param interactor        An instance of UMPTokenInteractor.
-     * @param recoveryKeySaver  A function to persist a new recovery key.
-     * @param passwordRetriever A function to request the user's password.
-     * @param newWalletFunder   Optional function to fund a new wallet.
-     * @param stateSnapshot     Optional previously saved state snapshot.
-     * @param kdfConfig         Optional KDF configuration for new UMP tokens.
-     */
-    constructor(adminOriginator, walletBuilder, interactor, recoveryKeySaver, passwordRetriever, newWalletFunder, stateSnapshot, kdfConfig, telemetry) {
-        this.adminOriginator = adminOriginator;
-        this.walletBuilder = walletBuilder;
-        this.telemetry = new sdk_1.Telemetry(telemetry);
-        this.UMPTokenInteractor = interactor ?? new OverlayUMPTokenInteractor(undefined, undefined, telemetry);
-        this.recoveryKeySaver = recoveryKeySaver;
-        this.passwordRetriever = passwordRetriever;
-        this.authenticated = false;
-        this.newWalletFunder = newWalletFunder;
-        // Initialize KDF config with Argon2id defaults for v3 tokens
-        const kdfAlgorithm = kdfConfig?.algorithm ?? 'argon2id';
-        this.kdfConfig = {
-            algorithm: kdfAlgorithm,
-            iterations: kdfConfig?.iterations ??
-                (kdfAlgorithm === 'argon2id' ? exports.ARGON2ID_DEFAULT_ITERATIONS : exports.PBKDF2_NUM_ROUNDS),
-            memoryKiB: kdfConfig?.memoryKiB ?? exports.ARGON2ID_DEFAULT_MEMORY_KIB,
-            parallelism: kdfConfig?.parallelism ?? exports.ARGON2ID_DEFAULT_PARALLELISM,
-            hashLength: kdfConfig?.hashLength ?? exports.ARGON2ID_DEFAULT_HASH_LENGTH
-        };
-        if (!isValidKdfConfig(this.kdfConfig)) {
-            throw new Error('Unsupported or unsafe KDF configuration.');
-        }
-        // Store snapshot for lazy init; callers await ready before calling wallet methods.
-        this._initSnapshot = stateSnapshot;
-    }
-    async _init() {
-        if (this._initSnapshot !== undefined) {
-            this.telemetry.capture({
-                name: 'wallet-toolbox.snapshot.initialization.started',
-                component: 'wallet-toolbox.cwi-manager',
-                severity: 'debug'
-            });
-            try {
-                await this.loadSnapshot(this._initSnapshot);
-                this.telemetry.capture({
-                    name: 'wallet-toolbox.snapshot.initialization.completed',
-                    component: 'wallet-toolbox.cwi-manager',
-                    severity: 'info'
-                });
-            }
-            catch (error) {
-                this.telemetry.capture({
-                    name: 'wallet-toolbox.snapshot.initialization.failed',
-                    component: 'wallet-toolbox.cwi-manager',
-                    severity: 'error',
-                    error
-                });
-                throw error;
-            }
-        }
-    }
-    // --- Authentication Methods ---
-    /**
-     * Provides the presentation key.
-     */
-    async providePresentationKey(key) {
-        if (this.authenticated) {
-            throw new Error('User is already authenticated');
-        }
-        if (this.authenticationMode === 'recovery-key-and-password') {
-            throw new Error('Presentation key is not needed in this mode');
-        }
-        if (key.length !== 32 || key.some(byte => !Number.isInteger(byte) || byte < 0 || byte > 255)) {
-            throw new TypeError('Presentation key must contain exactly 32 bytes.');
-        }
-        this.authenticationFlow = 'unknown';
-        const hash = sdk_1.Hash.sha256(key);
-        const startedAt = Date.now();
-        this.telemetry.capture({
-            name: 'wallet-toolbox.authentication.account-lookup.started',
-            component: 'wallet-toolbox.cwi-manager',
-            severity: 'debug',
-            attributes: { lookupKind: 'presentation' }
-        });
-        let token;
-        try {
-            token = await this.UMPTokenInteractor.findByPresentationKeyHash(hash);
-        }
-        catch (error) {
-            this.telemetry.capture({
-                name: 'wallet-toolbox.authentication.account-lookup.failed',
-                component: 'wallet-toolbox.cwi-manager',
-                severity: 'warn',
-                attributes: {
-                    lookupKind: 'presentation',
-                    durationMs: Date.now() - startedAt
-                },
-                error
-            });
-            throw error;
-        }
-        if (token == null) {
-            // No token found -> New user
-            this.authenticationFlow = 'new-user';
-            this.presentationKey = key;
-        }
-        else {
-            // Found token -> existing user
-            this.authenticationFlow = 'existing-user';
-            this.presentationKey = key;
-            this.currentUMPToken = token;
-        }
-        this.telemetry.capture({
-            name: 'wallet-toolbox.authentication.account-lookup.completed',
-            component: 'wallet-toolbox.cwi-manager',
-            severity: 'info',
-            attributes: {
-                lookupKind: 'presentation',
-                accountStatus: this.authenticationFlow,
-                durationMs: Date.now() - startedAt
-            }
-        });
-    }
-    /**
-     * Provides the password.
-     */
-    async providePassword(password) {
-        if (this.authenticated)
-            throw new Error('User is already authenticated');
-        if (this.authenticationMode === 'presentation-key-and-recovery-key') {
-            throw new Error('Password is not needed in this mode');
-        }
-        if (this.authenticationFlow === 'unknown') {
-            throw new Error('Determine account status with a presentation or recovery key before providing a password.');
-        }
-        if (this.authenticationFlow === 'existing-user') {
-            await this.handleExistingUserPassword(password);
-        }
-        else {
-            await this.handleNewUserPassword(password);
-        }
-    }
-    /** Handles the password step for an existing user — derives keys, sets up infrastructure. */
-    async handleExistingUserPassword(password) {
-        if (this.currentUMPToken == null)
-            throw new Error('Provide presentation or recovery key first.');
-        const derivedPasswordKey = await derivePasswordKey(this.currentUMPToken, sdk_1.Utils.toArray(password, 'utf8'));
-        let rootPrimaryKey;
-        let rootPrivilegedKey;
-        if (this.authenticationMode === 'presentation-key-and-password') {
-            if (this.presentationKey == null)
-                throw new Error('No presentation key found!');
-            rootPrimaryKey = new sdk_1.SymmetricKey(this.XOR(this.presentationKey, derivedPasswordKey))
-                .decrypt(this.currentUMPToken.passwordPresentationPrimary);
-        }
-        else {
-            // 'recovery-key-and-password'
-            if (this.recoveryKey == null)
-                throw new Error('No recovery key found!');
-            const primaryDecryptionKey = this.XOR(this.recoveryKey, derivedPasswordKey);
-            rootPrimaryKey = new sdk_1.SymmetricKey(primaryDecryptionKey).decrypt(this.currentUMPToken.passwordRecoveryPrimary);
-            rootPrivilegedKey = new sdk_1.SymmetricKey(this.XOR(rootPrimaryKey, derivedPasswordKey))
-                .decrypt(this.currentUMPToken.passwordPrimaryPrivileged);
-        }
-        await this.setupRootInfrastructure(rootPrimaryKey, rootPrivilegedKey);
-        await this.switchProfile(this.activeProfileId);
-    }
-    /** Handles the password step for a new user — generates keys, builds UMP token, publishes on-chain. */
-    async handleNewUserPassword(password) {
-        if (this.authenticationMode !== 'presentation-key-and-password') {
-            throw new Error('New-user flow requires presentation key and password mode.');
-        }
-        if (this.presentationKey == null)
-            throw new Error('No presentation key provided for new-user flow.');
-        // Generate new keys/salt
-        const recoveryKey = (0, sdk_1.Random)(32);
-        await this.recoveryKeySaver(recoveryKey);
-        const passwordSalt = (0, sdk_1.Random)(32);
-        const passwordKey = await derivePasswordKey({ passwordSalt, passwordKdf: this.kdfConfig }, sdk_1.Utils.toArray(password, 'utf8'));
-        const rootPrimaryKey = (0, sdk_1.Random)(32);
-        const rootPrivilegedKey = (0, sdk_1.Random)(32);
-        // Build XOR-combined symmetric keys
-        const presentationPassword = new sdk_1.SymmetricKey(this.XOR(this.presentationKey, passwordKey));
-        const presentationRecovery = new sdk_1.SymmetricKey(this.XOR(this.presentationKey, recoveryKey));
-        const recoveryPassword = new sdk_1.SymmetricKey(this.XOR(recoveryKey, passwordKey));
-        const primaryPassword = new sdk_1.SymmetricKey(this.XOR(rootPrimaryKey, passwordKey));
-        const tempPrivilegedKeyManager = new PrivilegedKeyManager_1.PrivilegedKeyManager(async () => new sdk_1.PrivateKey(rootPrivilegedKey));
-        const wrapKey = async (plaintext) => (await tempPrivilegedKeyManager.encrypt({ plaintext, protocolID: [2, 'admin key wrapping'], keyID: '1' })).ciphertext;
-        // Build new UMP token (v3 with KDF metadata, no profiles initially)
-        const newToken = {
-            passwordSalt,
-            passwordPresentationPrimary: presentationPassword.encrypt(rootPrimaryKey),
-            passwordRecoveryPrimary: recoveryPassword.encrypt(rootPrimaryKey),
-            presentationRecoveryPrimary: presentationRecovery.encrypt(rootPrimaryKey),
-            passwordPrimaryPrivileged: primaryPassword.encrypt(rootPrivilegedKey),
-            presentationRecoveryPrivileged: presentationRecovery.encrypt(rootPrivilegedKey),
-            presentationHash: sdk_1.Hash.sha256(this.presentationKey),
-            recoveryHash: sdk_1.Hash.sha256(recoveryKey),
-            presentationKeyEncrypted: await wrapKey(this.presentationKey),
-            passwordKeyEncrypted: await wrapKey(passwordKey),
-            recoveryKeyEncrypted: await wrapKey(recoveryKey),
-            profilesEncrypted: undefined,
-            umpVersion: 3,
-            passwordKdf: this.kdfConfig
-        };
-        this.currentUMPToken = newToken;
-        await this.setupRootInfrastructure(rootPrimaryKey);
-        await this.switchProfile(exports.DEFAULT_PROFILE_ID);
-        // Fund the *default* wallet if funder provided
-        if ((this.newWalletFunder != null) && (this.underlying != null)) {
-            try {
-                await this.newWalletFunder(this.presentationKey, this.underlying, this.adminOriginator);
-            }
-            catch (error) {
-                this.telemetry.capture({
-                    name: 'wallet-toolbox.authentication.new-wallet-funding.failed',
-                    component: 'wallet-toolbox.cwi-manager',
-                    severity: 'error',
-                    error: new Error('New wallet funding failed.')
-                });
-                const message = error instanceof Error ? error.message : String(error);
-                throw new Error(`Failed to fund new wallet before publishing UMP token: ${message}`, { cause: error });
-            }
-        }
-        if (this.underlying == null)
-            throw new Error('Default profile wallet not built before attempting to publish UMP token.');
-        this.currentUMPToken.currentOutpoint = await this.UMPTokenInteractor.buildAndSend(this.underlying, this.adminOriginator, newToken);
-    }
-    /**
-     * Provides the recovery key.
-     */
-    async provideRecoveryKey(recoveryKey) {
-        if (this.authenticated) {
-            throw new Error('Already authenticated');
-        }
-        if (this.authenticationFlow === 'new-user' && this.authenticationMode !== 'recovery-key-and-password') {
-            throw new Error('Do not submit recovery key in new-user flow');
-        }
-        if (this.authenticationMode === 'presentation-key-and-password') {
-            throw new Error('No recovery key required in this mode');
-        }
-        if (recoveryKey.length !== 32 || recoveryKey.some(byte => !Number.isInteger(byte) || byte < 0 || byte > 255)) {
-            throw new TypeError('Recovery key must contain exactly 32 bytes.');
-        }
-        if (this.authenticationMode === 'recovery-key-and-password') {
-            // Wait for password
-            const hash = sdk_1.Hash.sha256(recoveryKey);
-            const token = await this.UMPTokenInteractor.findByRecoveryKeyHash(hash);
-            if (token == null)
-                throw new Error('No user found with this recovery key');
-            this.authenticationFlow = 'existing-user';
-            this.recoveryKey = recoveryKey;
-            this.currentUMPToken = token;
-        }
-        else {
-            // 'presentation-key-and-recovery-key'
-            if (this.presentationKey == null)
-                throw new Error('Provide the presentation key first');
-            if (this.currentUMPToken == null)
-                throw new Error('Current UMP token not found');
-            const xorKey = this.XOR(this.presentationKey, recoveryKey);
-            const rootPrimaryKey = new sdk_1.SymmetricKey(xorKey).decrypt(this.currentUMPToken.presentationRecoveryPrimary);
-            const rootPrivilegedKey = new sdk_1.SymmetricKey(xorKey).decrypt(this.currentUMPToken.presentationRecoveryPrivileged);
-            // Build root infrastructure, load profiles, switch to default
-            await this.setupRootInfrastructure(rootPrimaryKey, rootPrivilegedKey);
-            await this.switchProfile(this.activeProfileId);
-        }
-    }
-    // --- State Management Methods ---
-    /**
-     * Saves the current wallet state (root key, UMP token, active profile) into an encrypted snapshot.
-     * Version 2 format: [1 byte version=2] + [32 byte snapshot key] + [16 byte activeProfileId] + [encrypted payload]
-     * Encrypted Payload: [32 byte rootPrimaryKey] + [varint token length + serialized UMP token]
-     *
-     * @returns Encrypted snapshot bytes.
-     */
-    saveSnapshot() {
-        if ((this.rootPrimaryKey == null) || (this.currentUMPToken == null)) {
-            throw new Error('No root primary key or current UMP token set');
-        }
-        const snapshotKey = (0, sdk_1.Random)(32);
-        const snapshotPreimageWriter = new sdk_1.Utils.Writer();
-        // Write root primary key
-        snapshotPreimageWriter.write(this.rootPrimaryKey);
-        // Write serialized UMP token (must have outpoint)
-        if (!this.currentUMPToken.currentOutpoint) {
-            throw new Error('UMP token cannot be saved without a current outpoint.');
-        }
-        const serializedToken = this.serializeUMPToken(this.currentUMPToken);
-        snapshotPreimageWriter.writeVarIntNum(serializedToken.length);
-        snapshotPreimageWriter.write(serializedToken);
-        // Encrypt the payload
-        const snapshotPreimage = snapshotPreimageWriter.toArray();
-        const snapshotPayload = new sdk_1.SymmetricKey(snapshotKey).encrypt(snapshotPreimage);
-        // Build final snapshot (Version 2)
-        const snapshotWriter = new sdk_1.Utils.Writer();
-        snapshotWriter.writeUInt8(2); // Version
-        snapshotWriter.write(snapshotKey);
-        snapshotWriter.write(this.activeProfileId); // Active profile ID
-        snapshotWriter.write(snapshotPayload); // Encrypted data
-        const snapshot = snapshotWriter.toArray();
-        if (snapshot.length > exports.MAX_STATE_SNAPSHOT_BYTES) {
-            throw new Error('Snapshot exceeds the maximum supported size.');
-        }
-        this.telemetry.capture({
-            name: 'wallet-toolbox.snapshot.saved',
-            component: 'wallet-toolbox.cwi-manager',
-            severity: 'info',
-            attributes: {
-                formatVersion: 2,
-                profileCount: this.profiles.length
-            }
-        });
-        return snapshot;
-    }
-    /**
-     * Loads a previously saved state snapshot. Restores root key, UMP token, profiles, and active profile.
-     * Handles Version 1 (legacy) and Version 2 formats.
-     *
-     * @param snapshot Encrypted snapshot bytes.
-     */
-    async loadSnapshot(snapshot) {
-        try {
-            if (snapshot.length === 0 ||
-                snapshot.length > exports.MAX_STATE_SNAPSHOT_BYTES ||
-                snapshot.some(byte => !Number.isInteger(byte) || byte < 0 || byte > 255)) {
-                throw new Error('Snapshot is empty, oversized, or contains invalid bytes.');
-            }
-            const reader = new sdk_1.Utils.Reader(snapshot);
-            const version = reader.readUInt8();
-            let snapshotKey;
-            let encryptedPayload;
-            let activeProfileId = exports.DEFAULT_PROFILE_ID; // Default for V1
-            if (version === 1) {
-                snapshotKey = reader.read(32);
-                encryptedPayload = reader.read();
-            }
-            else if (version === 2) {
-                snapshotKey = reader.read(32);
-                activeProfileId = reader.read(16); // Read active profile ID
-                encryptedPayload = reader.read();
-            }
-            else {
-                throw new Error(`Unsupported snapshot version: ${version}`);
-            }
-            // Decrypt payload
-            const decryptedPayload = new sdk_1.SymmetricKey(snapshotKey).decrypt(encryptedPayload);
-            const payloadReader = new sdk_1.Utils.Reader(decryptedPayload);
-            // Read root primary key
-            const rootPrimaryKey = payloadReader.read(32);
-            // Read serialized UMP token
-            const tokenLen = payloadReader.readVarIntNum();
-            const tokenBytes = payloadReader.read(tokenLen);
-            const token = this.deserializeUMPToken(tokenBytes);
-            // Assign loaded data
-            this.currentUMPToken = token;
-            // Setup root infrastructure, load profiles, and switch to the loaded active profile
-            await this.setupRootInfrastructure(rootPrimaryKey); // Will automatically load profiles
-            await this.switchProfile(activeProfileId); // Switch to the profile saved in the snapshot
-            this.authenticationFlow = 'existing-user'; // Loading implies existing user
-            this.telemetry.capture({
-                name: 'wallet-toolbox.snapshot.loaded',
-                component: 'wallet-toolbox.cwi-manager',
-                severity: 'info',
-                attributes: {
-                    formatVersion: version,
-                    profileCount: this.profiles.length
-                }
-            });
-        }
-        catch (error) {
-            this.destroy(); // Clear state on error
-            this.telemetry.capture({
-                name: 'wallet-toolbox.snapshot.load-failed',
-                component: 'wallet-toolbox.cwi-manager',
-                severity: 'error',
-                error
-            });
-            const message = error instanceof Error ? error.message : 'Unknown error';
-            throw new Error(`Failed to load snapshot: ${message}`, { cause: error });
-        }
-    }
-    async syncUMPToken() {
-        if (!this.authenticated || (this.currentUMPToken == null) || (this.rootPrimaryKey == null)) {
-            throw new Error('Wallet not authenticated or missing UMP token.');
-        }
-        const currentToken = this.currentUMPToken;
-        let refreshed;
-        if (currentToken.presentationHash && (currentToken.presentationHash.length > 0)) {
-            refreshed = await this.UMPTokenInteractor.findByPresentationKeyHash(currentToken.presentationHash);
-        }
-        if ((refreshed == null) && currentToken.recoveryHash && (currentToken.recoveryHash.length > 0)) {
-            refreshed = await this.UMPTokenInteractor.findByRecoveryKeyHash(currentToken.recoveryHash);
-        }
-        if (refreshed == null) {
-            return false;
-        }
-        if (refreshed.currentOutpoint &&
-            currentToken.currentOutpoint &&
-            refreshed.currentOutpoint === currentToken.currentOutpoint) {
-            return false;
-        }
-        this.currentUMPToken = refreshed;
-        await this.setupRootInfrastructure(this.rootPrimaryKey);
-        this.saveSnapshot();
-        return true;
-    }
-    /**
-     * Destroys the wallet state, clearing keys, tokens, and profiles.
-     */
-    destroy() {
-        this.underlying = undefined;
-        this.rootPrivilegedKeyManager = undefined;
-        this.authenticated = false;
-        this.rootPrimaryKey = undefined;
-        this.currentUMPToken = undefined;
-        this.presentationKey = undefined;
-        this.recoveryKey = undefined;
-        this.profiles = [];
-        this.activeProfileId = exports.DEFAULT_PROFILE_ID;
-        this.authenticationMode = 'presentation-key-and-password';
-        this.authenticationFlow = 'unknown';
-    }
-    // --- Profile Management Methods ---
-    /**
-     * Lists all available profiles, including the default profile.
-     * @returns Array of profile info objects, including an 'active' flag.
-     */
-    listProfiles() {
-        if (!this.authenticated) {
-            throw new Error('Not authenticated.');
-        }
-        const profileList = [
-            // Default profile
-            {
-                id: exports.DEFAULT_PROFILE_ID,
-                name: 'default',
-                createdAt: null, // Default profile doesn't have a creation timestamp in the same way
-                active: this.activeProfileId.every(x => x === 0),
-                identityKey: new sdk_1.PrivateKey(this.rootPrimaryKey).toPublicKey().toString()
-            },
-            // Other profiles
-            ...this.profiles.map(p => ({
-                id: p.id,
-                name: p.name,
-                createdAt: p.createdAt,
-                active: this.activeProfileId.every((x, i) => x === p.id[i]),
-                identityKey: new sdk_1.PrivateKey(this.XOR(this.rootPrimaryKey, p.primaryPad)).toPublicKey().toString()
-            }))
-        ];
-        return profileList;
-    }
-    /**
-     * Adds a new profile with the given name.
-     * Generates necessary pads and updates the UMP token.
-     * Does not switch to the new profile automatically.
-     *
-     * @param name The desired name for the new profile.
-     * @returns The ID of the newly created profile.
-     */
-    async addProfile(name) {
-        if (!this.authenticated || (this.rootPrimaryKey == null) || (this.currentUMPToken == null) || (this.rootPrivilegedKeyManager == null)) {
-            throw new Error('Wallet not fully initialized or authenticated.');
-        }
-        // Ensure name is unique (including 'default')
-        if (name === 'default' || this.profiles.some(p => p.name.toLowerCase() === name.toLowerCase())) {
-            throw new Error(`Profile name "${name}" is already in use.`);
-        }
-        const newProfile = {
-            name,
-            id: (0, sdk_1.Random)(16),
-            primaryPad: (0, sdk_1.Random)(32),
-            privilegedPad: (0, sdk_1.Random)(32),
-            createdAt: Math.floor(Date.now() / 1000)
-        };
-        this.profiles.push(newProfile);
-        // Update the UMP token with the new profile list
-        await this.updateAuthFactors(this.currentUMPToken.passwordSalt, 
-        // Need to re-derive/decrypt factors needed for re-encryption
-        await this.getFactor('passwordKey'), await this.getFactor('presentationKey'), await this.getFactor('recoveryKey'), this.rootPrimaryKey, await this.getFactor('privilegedKey'), // Get ROOT privileged key
-        this.profiles // Pass the updated profile list
-        );
-        return newProfile.id;
-    }
-    /**
-     * Deletes a profile by its ID.
-     * Cannot delete the default profile. If the active profile is deleted,
-     * it switches back to the default profile.
-     *
-     * @param profileId The 16-byte ID of the profile to delete.
-     */
-    async deleteProfile(profileId) {
-        if (!this.authenticated || (this.rootPrimaryKey == null) || (this.currentUMPToken == null) || (this.rootPrivilegedKeyManager == null)) {
-            throw new Error('Wallet not fully initialized or authenticated.');
-        }
-        if (profileId.every(x => x === 0)) {
-            throw new Error('Cannot delete the default profile.');
-        }
-        const profileIndex = this.profiles.findIndex(p => p.id.every((x, i) => x === profileId[i]));
-        if (profileIndex === -1) {
-            throw new Error('Profile not found.');
-        }
-        // Remove the profile
-        this.profiles.splice(profileIndex, 1);
-        // If the deleted profile was active, switch to default
-        if (this.activeProfileId.every((x, i) => x === profileId[i])) {
-            await this.switchProfile(exports.DEFAULT_PROFILE_ID); // This rebuilds the wallet
-        }
-        // Update the UMP token
-        await this.updateAuthFactors(this.currentUMPToken.passwordSalt, await this.getFactor('passwordKey'), await this.getFactor('presentationKey'), await this.getFactor('recoveryKey'), this.rootPrimaryKey, await this.getFactor('privilegedKey'), // Get ROOT privileged key
-        this.profiles // Pass updated list
-        );
-    }
-    /**
-     * Switches the active profile. This re-derives keys and rebuilds the underlying wallet.
-     *
-     * @param profileId The 16-byte ID of the profile to switch to (use DEFAULT_PROFILE_ID for default).
-     */
-    async switchProfile(profileId) {
-        if (!this.authenticated || (this.rootPrimaryKey == null) || (this.rootPrivilegedKeyManager == null)) {
-            throw new Error('Cannot switch profile: Wallet not authenticated or root keys missing.');
-        }
-        let profilePrimaryKey;
-        let profilePrivilegedPad; // Pad for the target profile
-        if (profileId.every(x => x === 0)) {
-            // Switching to default profile
-            profilePrimaryKey = this.rootPrimaryKey;
-            profilePrivilegedPad = undefined; // No pad for default
-            this.activeProfileId = exports.DEFAULT_PROFILE_ID;
-        }
-        else {
-            // Switching to a non-default profile
-            const profile = this.profiles.find(p => p.id.every((x, i) => x === profileId[i]));
-            if (profile == null) {
-                throw new Error('Profile not found.');
-            }
-            profilePrimaryKey = this.XOR(this.rootPrimaryKey, profile.primaryPad);
-            profilePrivilegedPad = profile.privilegedPad;
-            this.activeProfileId = profileId;
-        }
-        // Create a *profile-specific* PrivilegedKeyManager.
-        // It uses the ROOT manager internally but applies the profile's pad.
-        const profilePrivilegedKeyManager = new PrivilegedKeyManager_1.PrivilegedKeyManager(async (reason) => {
-            // Request the ROOT privileged key using the root manager
-            const rootPrivileged = await this.rootPrivilegedKeyManager.getPrivilegedKey(reason);
-            const rootPrivilegedBytes = rootPrivileged.toArray();
-            // Apply the profile's pad if applicable
-            const profilePrivilegedBytes = (profilePrivilegedPad == null)
-                ? rootPrivilegedBytes
-                : this.XOR(rootPrivilegedBytes, profilePrivilegedPad);
-            return new sdk_1.PrivateKey(profilePrivilegedBytes);
-        });
-        // Build the underlying wallet for the specific profile
-        this.underlying = await this.walletBuilder(profilePrimaryKey, profilePrivilegedKeyManager, // Pass the profile-specific manager
-        this.activeProfileId // Pass the ID of the profile being activated
-        );
-    }
-    // --- Key Management Methods ---
-    /**
-     * Changes the user's password. Re-wraps keys and updates the UMP token.
-     */
-    async changePassword(newPassword) {
-        if (!this.authenticated || (this.currentUMPToken == null) || (this.rootPrimaryKey == null) || (this.rootPrivilegedKeyManager == null)) {
-            throw new Error('Not authenticated or missing required data.');
-        }
-        const passwordSalt = (0, sdk_1.Random)(32);
-        // Preserve current token's KDF metadata (or use manager's kdfConfig for legacy tokens)
-        const kdfToUse = this.currentUMPToken.passwordKdf ?? this.kdfConfig;
-        const tempTokenForKdf = {
-            passwordSalt,
-            passwordKdf: kdfToUse
-        };
-        const newPasswordKey = await derivePasswordKey(tempTokenForKdf, sdk_1.Utils.toArray(newPassword, 'utf8'));
-        // Decrypt existing factors needed for re-encryption, using the *root* privileged key manager
-        const recoveryKey = await this.getFactor('recoveryKey');
-        const presentationKey = await this.getFactor('presentationKey');
-        const rootPrivilegedKey = await this.getFactor('privilegedKey'); // Get ROOT privileged key
-        await this.updateAuthFactors(passwordSalt, newPasswordKey, presentationKey, recoveryKey, this.rootPrimaryKey, rootPrivilegedKey, // Pass the explicitly fetched root key
-        this.profiles // Preserve existing profiles
-        );
-    }
-    /**
-     * Retrieves the current recovery key. Requires privileged access.
-     */
-    async getRecoveryKey() {
-        if (!this.authenticated || (this.currentUMPToken == null) || (this.rootPrivilegedKeyManager == null)) {
-            throw new Error('Not authenticated or missing required data.');
-        }
-        return await this.getFactor('recoveryKey');
-    }
-    /**
-     * Changes the user's recovery key. Prompts user to save the new key.
-     */
-    async changeRecoveryKey() {
-        if (!this.authenticated || (this.currentUMPToken == null) || (this.rootPrimaryKey == null) || (this.rootPrivilegedKeyManager == null)) {
-            throw new Error('Not authenticated or missing required data.');
-        }
-        // Decrypt existing factors needed
-        const passwordKey = await this.getFactor('passwordKey');
-        const presentationKey = await this.getFactor('presentationKey');
-        const rootPrivilegedKey = await this.getFactor('privilegedKey'); // Get ROOT privileged key
-        // Generate and save new recovery key
-        const newRecoveryKey = (0, sdk_1.Random)(32);
-        await this.recoveryKeySaver(newRecoveryKey);
-        await this.updateAuthFactors(this.currentUMPToken.passwordSalt, passwordKey, presentationKey, newRecoveryKey, // Use the new key
-        this.rootPrimaryKey, rootPrivilegedKey, this.profiles // Preserve profiles
-        );
-    }
-    /**
-     * Changes the user's presentation key.
-     */
-    async changePresentationKey(newPresentationKey) {
-        if (!this.authenticated || (this.currentUMPToken == null) || (this.rootPrimaryKey == null) || (this.rootPrivilegedKeyManager == null)) {
-            throw new Error('Not authenticated or missing required data.');
-        }
-        if (newPresentationKey.length !== 32) {
-            throw new Error('Presentation key must be 32 bytes.');
-        }
-        // Decrypt existing factors
-        const recoveryKey = await this.getFactor('recoveryKey');
-        const passwordKey = await this.getFactor('passwordKey');
-        const rootPrivilegedKey = await this.getFactor('privilegedKey'); // Get ROOT privileged key
-        await this.updateAuthFactors(this.currentUMPToken.passwordSalt, passwordKey, newPresentationKey, // Use the new key
-        recoveryKey, this.rootPrimaryKey, rootPrivilegedKey, this.profiles // Preserve profiles
-        );
-        // Update the temporarily stored key if it was set
-        if (this.presentationKey != null) {
-            this.presentationKey = newPresentationKey;
-        }
-    }
-    // --- Internal Helper Methods ---
-    /**
-     * Performs XOR operation on two byte arrays.
-     */
-    XOR(n1, n2) {
-        if (n1.length !== n2.length) {
-            // Provide more context in error
-            throw new Error(`XOR length mismatch: ${n1.length} vs ${n2.length}`);
-        }
-        const r = new Array(n1.length);
-        for (let i = 0; i < n1.length; i++) {
-            r[i] = n1[i] ^ n2[i];
-        }
-        return r;
-    }
-    /**
-     * Helper to decrypt a specific factor (key) stored encrypted in the UMP token.
-     * Requires the root privileged key manager.
-     * @param factorName Name of the factor to decrypt ('passwordKey', 'presentationKey', 'recoveryKey', 'privilegedKey').
-     * @param getRoot If true and factorName is 'privilegedKey', returns the root privileged key bytes directly.
-     * @returns The decrypted key bytes.
-     */
-    async getFactor(factorName) {
-        if (!this.authenticated || (this.currentUMPToken == null) || (this.rootPrivilegedKeyManager == null)) {
-            throw new Error(`Cannot get factor "${factorName}": Wallet not ready.`);
-        }
-        const protocolID = [2, 'admin key wrapping']; // Protocol used for encrypting factors
-        const keyID = '1'; // Key ID used
-        try {
-            switch (factorName) {
-                case 'passwordKey':
-                    return (await this.rootPrivilegedKeyManager.decrypt({
-                        ciphertext: this.currentUMPToken.passwordKeyEncrypted,
-                        protocolID,
-                        keyID
-                    })).plaintext;
-                case 'presentationKey':
-                    return (await this.rootPrivilegedKeyManager.decrypt({
-                        ciphertext: this.currentUMPToken.presentationKeyEncrypted,
-                        protocolID,
-                        keyID
-                    })).plaintext;
-                case 'recoveryKey':
-                    return (await this.rootPrivilegedKeyManager.decrypt({
-                        ciphertext: this.currentUMPToken.recoveryKeyEncrypted,
-                        protocolID,
-                        keyID
-                    })).plaintext;
-                case 'privilegedKey': {
-                    // This needs careful handling based on whether the ROOT or PROFILE key is needed.
-                    // This helper is mostly used for UMP updates, which need the ROOT key.
-                    // We retrieve the PrivateKey object first.
-                    const pk = await this.rootPrivilegedKeyManager.getPrivilegedKey('UMP token update', true); // Force retrieval of root key
-                    return pk.toArray(); // Return bytes
-                }
-                default:
-                    throw new Error(`Unknown factor name: ${factorName}`);
-            }
-        }
-        catch (error) {
-            this.telemetry.capture({
-                name: 'wallet-toolbox.authentication.factor-decryption.failed',
-                component: 'wallet-toolbox.cwi-manager',
-                severity: 'error',
-                attributes: { factor: factorName },
-                error
-            });
-            const message = error instanceof Error ? error.message : 'Unknown error';
-            throw new Error(`Failed to decrypt factor "${factorName}": ${message}`, { cause: error });
-        }
-    }
-    /**
-     * Recomputes UMP token fields with updated factors and profiles, then publishes the update.
-     * This operation requires the *root* privileged key and the *default* profile wallet.
-     */
-    async updateAuthFactors(passwordSalt, passwordKey, presentationKey, recoveryKey, rootPrimaryKey, rootPrivilegedKey, // Explicitly pass the root key bytes
-    profiles // Pass current/new profiles list
-    ) {
-        if (!this.authenticated || (this.rootPrimaryKey == null) || (this.currentUMPToken == null)) {
-            throw new Error('Wallet is not properly authenticated or missing data for update.');
-        }
-        // Ensure we have the OLD token to consume
-        const oldTokenToConsume = { ...this.currentUMPToken };
-        if (!oldTokenToConsume.currentOutpoint) {
-            throw new Error('Cannot update UMP token: Old token has no outpoint.');
-        }
-        // Derive symmetrical encryption keys using XOR for the *root* keys
-        const presentationPassword = new sdk_1.SymmetricKey(this.XOR(presentationKey, passwordKey));
-        const presentationRecovery = new sdk_1.SymmetricKey(this.XOR(presentationKey, recoveryKey));
-        const recoveryPassword = new sdk_1.SymmetricKey(this.XOR(recoveryKey, passwordKey));
-        const primaryPassword = new sdk_1.SymmetricKey(this.XOR(rootPrimaryKey, passwordKey)); // Use rootPrimaryKey
-        // Build a temporary privileged key manager using the explicit ROOT privileged key
-        const tempRootPrivilegedKeyManager = new PrivilegedKeyManager_1.PrivilegedKeyManager(async () => new sdk_1.PrivateKey(rootPrivilegedKey));
-        // Encrypt profiles if provided
-        let profilesEncrypted;
-        if ((profiles != null) && profiles.length > 0) {
-            const profilesJson = JSON.stringify(profiles);
-            const profilesBytes = sdk_1.Utils.toArray(profilesJson, 'utf8');
-            profilesEncrypted = new sdk_1.SymmetricKey(rootPrimaryKey).encrypt(profilesBytes);
-        }
-        // Construct the new UMP token data.
-        // IMPORTANT: For non-password updates (e.g. add/remove profile), preserve legacy
-        // KDF layout exactly. Upgrading legacy tokens to v3 here would require re-deriving
-        // passwordKey from plaintext password, which we do not have in this code path.
-        const kdfMetadata = this.currentUMPToken.passwordKdf;
-        const newTokenData = {
-            passwordSalt,
-            passwordPresentationPrimary: presentationPassword.encrypt(rootPrimaryKey),
-            passwordRecoveryPrimary: recoveryPassword.encrypt(rootPrimaryKey),
-            presentationRecoveryPrimary: presentationRecovery.encrypt(rootPrimaryKey),
-            passwordPrimaryPrivileged: primaryPassword.encrypt(rootPrivilegedKey),
-            presentationRecoveryPrivileged: presentationRecovery.encrypt(rootPrivilegedKey),
-            presentationHash: sdk_1.Hash.sha256(presentationKey),
-            recoveryHash: sdk_1.Hash.sha256(recoveryKey),
-            presentationKeyEncrypted: (await tempRootPrivilegedKeyManager.encrypt({
-                plaintext: presentationKey,
-                protocolID: [2, 'admin key wrapping'],
-                keyID: '1'
-            })).ciphertext,
-            passwordKeyEncrypted: (await tempRootPrivilegedKeyManager.encrypt({
-                plaintext: passwordKey,
-                protocolID: [2, 'admin key wrapping'],
-                keyID: '1'
-            })).ciphertext,
-            recoveryKeyEncrypted: (await tempRootPrivilegedKeyManager.encrypt({
-                plaintext: recoveryKey,
-                protocolID: [2, 'admin key wrapping'],
-                keyID: '1'
-            })).ciphertext,
-            profilesEncrypted, // Add encrypted profiles
-            ...(kdfMetadata == null
-                ? {}
-                : {
-                    umpVersion: 3,
-                    passwordKdf: kdfMetadata
-                })
-            // currentOutpoint will be set after publishing
-        };
-        // We need the wallet built for the DEFAULT profile to publish the UMP token.
-        // If the current active profile is not default, temporarily switch, publish, then switch back.
-        const currentActiveId = this.activeProfileId;
-        let walletToUse = this.underlying;
-        if (!currentActiveId.every(x => x === 0)) {
-            this.telemetry.capture({
-                name: 'wallet-toolbox.ump.profile-switch.started',
-                component: 'wallet-toolbox.cwi-manager',
-                severity: 'debug',
-                attributes: { reason: 'token-update' }
-            });
-            await this.switchProfile(exports.DEFAULT_PROFILE_ID); // This rebuilds this.underlying
-            walletToUse = this.underlying;
-        }
-        if (walletToUse == null) {
-            throw new Error('Default profile wallet could not be activated for UMP token update.');
-        }
-        // Publish the new token on-chain, consuming the old one
-        try {
-            newTokenData.currentOutpoint = await this.UMPTokenInteractor.buildAndSend(walletToUse, this.adminOriginator, newTokenData, oldTokenToConsume // Consume the previous token
-            );
-            // Update the manager's state
-            this.currentUMPToken = newTokenData;
-            // Profiles are already updated in this.profiles if they were passed in
-        }
-        finally {
-            // Switch back if we temporarily switched
-            if (!currentActiveId.every(x => x === 0)) {
-                await this.switchProfile(currentActiveId);
-                this.telemetry.capture({
-                    name: 'wallet-toolbox.ump.profile-switch.completed',
-                    component: 'wallet-toolbox.cwi-manager',
-                    severity: 'debug',
-                    attributes: { reason: 'token-update' }
-                });
-            }
-        }
-    }
-    /**
-     * Serializes a UMP token to binary format (Version 3 with KDF metadata, Version 2 with profiles).
-     * V3 Layout: [1 byte version=3] + [11 * (varint len + bytes) for standard fields] + [1 byte profile_flag] + [IF flag=1 THEN varint len + profile bytes] + [1 byte kdf_flag] + [IF flag=1 THEN kdf metadata] + [varint len + outpoint bytes]
-     */
-    serializeUMPToken(token) {
-        if (!token.currentOutpoint) {
-            throw new Error('Token must have outpoint for serialization');
-        }
-        const writer = new sdk_1.Utils.Writer();
-        const hasKdfMetadata = token.umpVersion === 3 && token.passwordKdf;
-        writer.writeUInt8(hasKdfMetadata ? 3 : 2); // Version 3 for KDF, 2 for legacy
-        const writeArray = (arr) => {
-            writer.writeVarIntNum(arr.length);
-            writer.write(arr);
-        };
-        // Write standard fields in specific order
-        writeArray(token.passwordSalt); // 0
-        writeArray(token.passwordPresentationPrimary); // 1
-        writeArray(token.passwordRecoveryPrimary); // 2
-        writeArray(token.presentationRecoveryPrimary); // 3
-        writeArray(token.passwordPrimaryPrivileged); // 4
-        writeArray(token.presentationRecoveryPrivileged); // 5
-        writeArray(token.presentationHash); // 6
-        writeArray(token.recoveryHash); // 7
-        writeArray(token.presentationKeyEncrypted); // 8
-        writeArray(token.passwordKeyEncrypted); // 9
-        writeArray(token.recoveryKeyEncrypted); // 10
-        // Write optional profiles field
-        if ((token.profilesEncrypted != null) && token.profilesEncrypted.length > 0) {
-            writer.writeUInt8(1); // Flag indicating profiles present
-            writeArray(token.profilesEncrypted);
-        }
-        else {
-            writer.writeUInt8(0); // Flag indicating no profiles
-        }
-        // V3: Write KDF metadata
-        if (hasKdfMetadata) {
-            writer.writeUInt8(1); // Flag indicating KDF metadata present
-            writer.writeUInt8(token.umpVersion); // On-chain UMP version
-            const algorithmBytes = sdk_1.Utils.toArray(token.passwordKdf.algorithm, 'utf8');
-            writeArray(algorithmBytes);
-            // Serialize KDF params as JSON
-            const kdfParams = {
-                iterations: token.passwordKdf.iterations
-            };
-            if (token.passwordKdf.memoryKiB !== undefined) {
-                kdfParams.memoryKiB = token.passwordKdf.memoryKiB;
-            }
-            if (token.passwordKdf.parallelism !== undefined) {
-                kdfParams.parallelism = token.passwordKdf.parallelism;
-            }
-            if (token.passwordKdf.hashLength !== undefined) {
-                kdfParams.hashLength = token.passwordKdf.hashLength;
-            }
-            const kdfParamsBytes = sdk_1.Utils.toArray(JSON.stringify(kdfParams), 'utf8');
-            writeArray(kdfParamsBytes);
-        }
-        else if (writer.toArray()[0] === 3) {
-            // Version 3 without KDF metadata (shouldn't happen, but handle gracefully)
-            writer.writeUInt8(0); // Flag indicating no KDF metadata
-        }
-        // Write outpoint string
-        const outpointBytes = sdk_1.Utils.toArray(token.currentOutpoint, 'utf8');
-        writer.writeVarIntNum(outpointBytes.length);
-        writer.write(outpointBytes);
-        return writer.toArray();
-    }
-    /**
-     * Deserializes a UMP token from binary format (Handles Version 1, 2, and 3).
-     */
-    deserializeUMPToken(bin) {
-        const reader = new sdk_1.Utils.Reader(bin);
-        const version = reader.readUInt8();
-        if (version !== 1 && version !== 2 && version !== 3) {
-            throw new Error(`Unsupported UMP token serialization version: ${version}`);
-        }
-        const readArray = () => {
-            const length = reader.readVarIntNum();
-            if (length <= 0 || length > exports.MAX_STATE_SNAPSHOT_BYTES) {
-                throw new Error('UMP token field exceeds allowed bounds.');
-            }
-            return reader.read(length);
-        };
-        // Read standard fields (order matches serialization)
-        const passwordSalt = readArray(); // 0
-        const passwordPresentationPrimary = readArray(); // 1
-        const passwordRecoveryPrimary = readArray(); // 2
-        const presentationRecoveryPrimary = readArray(); // 3
-        const passwordPrimaryPrivileged = readArray(); // 4
-        const presentationRecoveryPrivileged = readArray(); // 5
-        const presentationHash = readArray(); // 6
-        const recoveryHash = readArray(); // 7
-        const presentationKeyEncrypted = readArray(); // 8
-        const passwordKeyEncrypted = readArray(); // 9
-        const recoveryKeyEncrypted = readArray(); // 10
-        // Read optional profiles (V2 and V3)
-        let profilesEncrypted;
-        if (version >= 2) {
-            const profilesFlag = reader.readUInt8();
-            if (profilesFlag === 1) {
-                profilesEncrypted = readArray();
-            }
-        }
-        // Read KDF metadata (V3 only)
-        let umpVersion;
-        let passwordKdf;
-        if (version === 3) {
-            const kdfFlag = reader.readUInt8();
-            if (kdfFlag === 1) {
-                umpVersion = reader.readUInt8(); // On-chain UMP version
-                const algorithmBytes = readArray();
-                const algorithm = sdk_1.Utils.toUTF8(algorithmBytes);
-                const kdfParamsBytes = readArray();
-                const kdfParamsJson = sdk_1.Utils.toUTF8(kdfParamsBytes);
-                const kdfParams = JSON.parse(kdfParamsJson);
-                passwordKdf = {
-                    algorithm,
-                    iterations: kdfParams.iterations,
-                    memoryKiB: kdfParams.memoryKiB,
-                    parallelism: kdfParams.parallelism,
-                    hashLength: kdfParams.hashLength
-                };
-                if (!isValidKdfConfig(passwordKdf)) {
-                    throw new Error('Serialized UMP token contains unsupported or unsafe KDF parameters.');
-                }
-            }
-        }
-        // Read outpoint string
-        const outpointLen = reader.readVarIntNum();
-        const outpointBytes = reader.read(outpointLen);
-        const currentOutpoint = sdk_1.Utils.toUTF8(outpointBytes);
-        if (currentOutpoint.length > 128 || !/^[^\s.:]+[.:][0-9]+$/.test(currentOutpoint)) {
-            throw new Error('Serialized UMP token contains an invalid outpoint.');
-        }
-        const token = {
-            passwordSalt,
-            passwordPresentationPrimary,
-            passwordRecoveryPrimary,
-            presentationRecoveryPrimary,
-            passwordPrimaryPrivileged,
-            presentationRecoveryPrivileged,
-            presentationHash,
-            recoveryHash,
-            presentationKeyEncrypted,
-            passwordKeyEncrypted,
-            recoveryKeyEncrypted,
-            profilesEncrypted,
-            currentOutpoint,
-            umpVersion,
-            passwordKdf
-        };
-        return token;
-    }
-    /**
-     * Sets up the root key infrastructure after authentication or loading from snapshot.
-     * Initializes the root primary key, root privileged key manager, loads profiles,
-     * and sets the authenticated flag. Does NOT switch profile initially.
-     *
-     * @param rootPrimaryKey      The user's root primary key (32 bytes).
-     * @param ephemeralRootPrivilegedKey Optional root privileged key (e.g., during recovery flows).
-     */
-    async setupRootInfrastructure(rootPrimaryKey, ephemeralRootPrivilegedKey) {
-        if (this.currentUMPToken == null) {
-            throw new Error('A UMP token must exist before setting up root infrastructure!');
-        }
-        this.rootPrimaryKey = rootPrimaryKey;
-        // Store ephemeral key if provided, for one-time use by the manager
-        let oneTimePrivilegedKey = (ephemeralRootPrivilegedKey == null)
-            ? undefined
-            : new sdk_1.PrivateKey(ephemeralRootPrivilegedKey);
-        // Create the ROOT PrivilegedKeyManager
-        this.rootPrivilegedKeyManager = new PrivilegedKeyManager_1.PrivilegedKeyManager(async (reason) => {
-            // 1. Use one-time key if available (for recovery)
-            if (oneTimePrivilegedKey != null) {
-                const tempKey = oneTimePrivilegedKey;
-                oneTimePrivilegedKey = undefined; // Consume it
-                return tempKey;
-            }
-            // 2. Otherwise, derive from password
-            const password = await this.passwordRetriever(reason, async (passwordCandidate) => {
-                try {
-                    const derivedPasswordKey = await derivePasswordKey(this.currentUMPToken, sdk_1.Utils.toArray(passwordCandidate, 'utf8'));
-                    const privilegedDecryptor = this.XOR(this.rootPrimaryKey, derivedPasswordKey);
-                    const decryptedPrivileged = new sdk_1.SymmetricKey(privilegedDecryptor).decrypt(this.currentUMPToken.passwordPrimaryPrivileged);
-                    return !!decryptedPrivileged; // Test passes if decryption works
-                }
-                catch (_intentionallyIgnored) {
-                    // Decryption failure means the password candidate is wrong — this is the
-                    // expected rejection path for an incorrect password.  Returning false causes
-                    // the password-retriever loop to prompt the user again rather than crashing.
-                    return false;
-                }
-            });
-            // Decrypt the root privileged key using the confirmed password (with token-driven KDF)
-            const derivedPasswordKey = await derivePasswordKey(this.currentUMPToken, sdk_1.Utils.toArray(password, 'utf8'));
-            const privilegedDecryptor = this.XOR(this.rootPrimaryKey, derivedPasswordKey);
-            const rootPrivilegedBytes = new sdk_1.SymmetricKey(privilegedDecryptor).decrypt(this.currentUMPToken.passwordPrimaryPrivileged);
-            return new sdk_1.PrivateKey(rootPrivilegedBytes); // Return the ROOT key object
-        });
-        // Decrypt and load profiles if present in the token
-        this.profiles = []; // Clear existing profiles before loading
-        if ((this.currentUMPToken.profilesEncrypted != null) && this.currentUMPToken.profilesEncrypted.length > 0) {
-            try {
-                const decryptedProfileBytes = new sdk_1.SymmetricKey(rootPrimaryKey).decrypt(this.currentUMPToken.profilesEncrypted);
-                const profilesJson = sdk_1.Utils.toUTF8(decryptedProfileBytes);
-                const profiles = JSON.parse(profilesJson);
-                if (!Array.isArray(profiles) || profiles.length > 1000 || !profiles.every(isValidProfile)) {
-                    throw new Error('Decrypted profile data is invalid or exceeds supported bounds.');
-                }
-                this.profiles = profiles;
-            }
-            catch (error) {
-                this.profiles = [];
-                this.telemetry.capture({
-                    name: 'wallet-toolbox.profile.load-failed',
-                    component: 'wallet-toolbox.cwi-manager',
-                    severity: 'error',
-                    error
-                });
-                const message = error instanceof Error ? error.message : 'Unknown error';
-                throw new Error(`Failed to load profiles: ${message}`, { cause: error });
-            }
-        }
-        this.authenticated = true;
-        // Note: We don't call switchProfile here anymore.
-        // It's called by the auth methods (providePassword/provideRecoveryKey) or loadSnapshot after this.
-    }
-    /*
-     * ---------------------------------------------------------------------------------------
-     * Standard WalletInterface methods proxying to the *active* underlying wallet.
-     * Includes authentication checks and admin originator protection.
-     * ---------------------------------------------------------------------------------------
-     */
-    checkAuthAndUnderlying(originator) {
-        if (!this.authenticated) {
-            throw new Error('User is not authenticated.');
-        }
-        if (this.underlying == null) {
-            // This might happen if authentication succeeded but profile switching failed
-            throw new Error('Underlying wallet for the active profile is not initialized.');
-        }
-        if (originator === this.adminOriginator) {
-            throw new Error('External applications are not allowed to use the admin originator.');
-        }
-    }
-    // Example proxy method (repeat pattern for all others)
-    async getPublicKey(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.getPublicKey(args, originator);
-    }
-    async revealCounterpartyKeyLinkage(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.revealCounterpartyKeyLinkage(args, originator);
-    }
-    async revealSpecificKeyLinkage(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.revealSpecificKeyLinkage(args, originator);
-    }
-    async encrypt(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.encrypt(args, originator);
-    }
-    async decrypt(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.decrypt(args, originator);
-    }
-    async createHmac(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.createHmac(args, originator);
-    }
-    async verifyHmac(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.verifyHmac(args, originator);
-    }
-    async createSignature(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.createSignature(args, originator);
-    }
-    async verifySignature(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.verifySignature(args, originator);
-    }
-    async createAction(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.createAction(args, originator);
-    }
-    async signAction(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.signAction(args, originator);
-    }
-    async abortAction(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.abortAction(args, originator);
-    }
-    async listActions(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.listActions(args, originator);
-    }
-    async internalizeAction(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.internalizeAction(args, originator);
-    }
-    async listOutputs(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.listOutputs(args, originator);
-    }
-    async relinquishOutput(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.relinquishOutput(args, originator);
-    }
-    async acquireCertificate(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.acquireCertificate(args, originator);
-    }
-    async listCertificates(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.listCertificates(args, originator);
-    }
-    async proveCertificate(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.proveCertificate(args, originator);
-    }
-    async relinquishCertificate(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.relinquishCertificate(args, originator);
-    }
-    async discoverByIdentityKey(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.discoverByIdentityKey(args, originator);
-    }
-    async discoverByAttributes(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.discoverByAttributes(args, originator);
-    }
-    async isAuthenticated(_, originator) {
-        if (!this.authenticated) {
-            throw new Error('User is not authenticated.');
-        }
-        if (originator === this.adminOriginator) {
-            throw new Error('External applications are not allowed to use the admin originator.');
-        }
-        return { authenticated: true };
-    }
-    async waitForAuthentication(_, originator) {
-        if (originator === this.adminOriginator) {
-            throw new Error('External applications are not allowed to use the admin originator.');
-        }
-        while (!this.authenticated || (this.underlying == null)) {
-            await new Promise(resolve => setTimeout(resolve, 100));
-        }
-        return await this.underlying.waitForAuthentication({}, originator);
-    }
-    async getHeight(_, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.getHeight({}, originator);
-    }
-    async getHeaderForHeight(args, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.getHeaderForHeight(args, originator);
-    }
-    async getNetwork(_, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.getNetwork({}, originator);
-    }
-    async getVersion(_, originator) {
-        this.checkAuthAndUnderlying(originator);
-        return await this.underlying.getVersion({}, originator);
-    }
-}
-exports.CWIStyleWalletManager = CWIStyleWalletManager;
-//# sourceMappingURL=CWIStyleWalletManager.js.map