@bsv/wallet-toolbox-mobile 1.7.15 → 1.7.17

package/out/src/monitor/tasks/TaskUnFail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TaskUnFail.d.ts","sourceRoot":"","sources":["../../../../../src/monitor/tasks/TaskUnFail.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AAGjE;;;;;;;;;GASG;AACH,qBAAa,UAAW,SAAQ,iBAAiB;IAUtC,YAAY;IATrB,MAAM,CAAC,QAAQ,SAAW;IAE1B;;OAEG;IACH,MAAM,CAAC,QAAQ,UAAQ;gBAGrB,OAAO,EAAE,OAAO,EACT,YAAY,SAAyB;IAK9C,OAAO,CAAC,kBAAkB,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,OAAO,CAAA;KAAE;IAQ/C,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;IAwB1B,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,MAAM,SAAI,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAsB5E;;;;;;;;OAQG;IACG,SAAS,CAAC,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAuDzE"}

package/out/src/monitor/tasks/TaskUnFail.js

@@ -0,0 +1,145 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TaskUnFail = void 0;
+const sdk_1 = require("@bsv/sdk");
+const Monitor_1 = require("../Monitor");
+const WalletMonitorTask_1 = require("./WalletMonitorTask");
+const entities_1 = require("../../storage/schema/entities");
+/**
+ * Setting provenTxReq status to 'unfail' when 'invalid' will attempt to find a merklePath, and if successful:
+ *
+ * 1. set the req status to 'unmined'
+ * 2. set the referenced txs to 'unproven'
+ * 3. determine if any inputs match user's existing outputs and if so update spentBy and spendable of those outputs.
+ * 4. set the txs outputs to spendable
+ *
+ * If it fails (to find a merklePath), returns the req status to 'invalid'.
+ */
+class TaskUnFail extends WalletMonitorTask_1.WalletMonitorTask {
+    constructor(monitor, triggerMsecs = Monitor_1.Monitor.oneMinute * 10) {
+        super(monitor, TaskUnFail.taskName);
+        this.triggerMsecs = triggerMsecs;
+    }
+    trigger(nowMsecsSinceEpoch) {
+        return {
+            run: TaskUnFail.checkNow ||
+                (this.triggerMsecs > 0 && nowMsecsSinceEpoch - this.lastRunMsecsSinceEpoch > this.triggerMsecs)
+        };
+    }
+    async runTask() {
+        let log = '';
+        TaskUnFail.checkNow = false;
+        const limit = 100;
+        let offset = 0;
+        for (;;) {
+            const reqs = await this.storage.findProvenTxReqs({
+                partial: {},
+                status: ['unfail'],
+                paged: { limit, offset }
+            });
+            if (reqs.length === 0)
+                break;
+            log += `${reqs.length} reqs with status 'unfail'\n`;
+            const r = await this.unfail(reqs, 2);
+            log += `${r.log}\n`;
+            //console.log(log);
+            if (reqs.length < limit)
+                break;
+            offset += limit;
+        }
+        return log;
+    }
+    async unfail(reqs, indent = 0) {
+        let log = '';
+        for (const reqApi of reqs) {
+            const req = new entities_1.EntityProvenTxReq(reqApi);
+            log += ' '.repeat(indent);
+            log += `reqId ${reqApi.provenTxReqId} txid ${reqApi.txid}: `;
+            const r = await this.monitor.services.getMerklePath(req.txid);
+            if (r.merklePath) {
+                // 1. set the req status to 'unmined'
+                req.status = 'unmined';
+                req.attempts = 0;
+                log += `unfailed. status is now 'unmined'\n`;
+                log += await this.unfailReq(req, indent + 2);
+            }
+            else {
+                req.status = 'invalid';
+                log += `returned to status 'invalid'\n`;
+            }
+            await req.updateStorageDynamicProperties(this.storage);
+        }
+        return { log };
+    }
+    /**
+     * 2. set the referenced txs to 'unproven'
+     * 3. determine if any inputs match user's existing outputs and if so update spentBy and spendable of those outputs.
+     * 4. set the txs outputs to spendable
+     *
+     * @param req
+     * @param indent
+     * @returns
+     */
+    async unfailReq(req, indent) {
+        let log = '';
+        const storage = this.storage;
+        const services = this.monitor.services;
+        const txIds = req.notify.transactionIds || [];
+        for (const id of txIds) {
+            const bsvtx = sdk_1.Transaction.fromBinary(req.rawTx);
+            await this.storage.runAsStorageProvider(async (sp) => {
+                const spk = sp;
+                const tx = await sp.findTransactionById(id, undefined, true);
+                if (!tx) {
+                    log += ' '.repeat(indent) + `transaction ${id} was not found\n`;
+                    return;
+                }
+                await sp.updateTransaction(tx.transactionId, { status: 'unproven' });
+                tx.status = 'unproven';
+                log += ' '.repeat(indent) + `transaction ${id} status is now 'unproven'\n`;
+                let vin = -1;
+                for (const bi of bsvtx.inputs) {
+                    vin++;
+                    const is = await sp.findOutputs({
+                        partial: { userId: tx.userId, txid: bi.sourceTXID, vout: bi.sourceOutputIndex }
+                    });
+                    if (is.length !== 1) {
+                        log += ' '.repeat(indent + 2) + `input ${vin} not matched to user's outputs\n`;
+                    }
+                    else {
+                        const oi = is[0];
+                        log +=
+                            ' '.repeat(indent + 2) +
+                                `input ${vin} matched to output ${oi.outputId} updated spentBy ${tx.transactionId}\n`;
+                        await sp.updateOutput(oi.outputId, { spendable: false, spentBy: tx.transactionId });
+                    }
+                }
+                const outputs = await sp.findOutputs({ partial: { userId: tx.userId, transactionId: tx.transactionId } });
+                for (const o of outputs) {
+                    await spk.validateOutputScript(o);
+                    if (!o.lockingScript) {
+                        log += ' '.repeat(indent + 2) + `output ${o.outputId} does not have a valid locking script\n`;
+                    }
+                    else {
+                        const isUtxo = await services.isUtxo(o);
+                        if (isUtxo !== o.spendable) {
+                            log += ' '.repeat(indent + 2) + `output ${o.outputId} set to ${isUtxo ? 'spendable' : 'spent'}\n`;
+                            await sp.updateOutput(o.outputId, { spendable: isUtxo });
+                        }
+                        else {
+                            log += ' '.repeat(indent + 2) + `output ${o.outputId} unchanged\n`;
+                        }
+                    }
+                }
+            });
+        }
+        return log;
+    }
+}
+exports.TaskUnFail = TaskUnFail;
+TaskUnFail.taskName = 'UnFail';
+/**
+ * Set to true to trigger running this task
+ */
+TaskUnFail.checkNow = false;
+//# sourceMappingURL=TaskUnFail.js.map

package/out/src/monitor/tasks/TaskUnFail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TaskUnFail.js","sourceRoot":"","sources":["../../../../../src/monitor/tasks/TaskUnFail.ts"],"names":[],"mappings":";;;AAAA,kCAA6C;AAC7C,wCAAoC;AACpC,2DAAuD;AAEvD,4DAAiE;AAGjE;;;;;;;;;GASG;AACH,MAAa,UAAW,SAAQ,qCAAiB;IAQ/C,YACE,OAAgB,EACT,eAAe,iBAAO,CAAC,SAAS,GAAG,EAAE;QAE5C,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAA;QAF5B,iBAAY,GAAZ,YAAY,CAAyB;IAG9C,CAAC;IAED,OAAO,CAAC,kBAA0B;QAChC,OAAO;YACL,GAAG,EACD,UAAU,CAAC,QAAQ;gBACnB,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,YAAY,CAAC;SAClG,CAAA;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,UAAU,CAAC,QAAQ,GAAG,KAAK,CAAA;QAE3B,MAAM,KAAK,GAAG,GAAG,CAAA;QACjB,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAC/C,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,CAAC,QAAQ,CAAC;gBAClB,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;aACzB,CAAC,CAAA;YACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAK;YAC5B,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,8BAA8B,CAAA;YACnD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YACpC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAA;YACnB,mBAAmB;YACnB,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK;gBAAE,MAAK;YAC9B,MAAM,IAAI,KAAK,CAAA;QACjB,CAAC;QAED,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAwB,EAAE,MAAM,GAAG,CAAC;QAC/C,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,IAAI,4BAAiB,CAAC,MAAM,CAAC,CAAA;YACzC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACzB,GAAG,IAAI,SAAS,MAAM,CAAC,aAAa,SAAS,MAAM,CAAC,IAAI,IAAI,CAAA;YAC5D,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC7D,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;gBACjB,qCAAqC;gBACrC,GAAG,CAAC,MAAM,GAAG,SAAS,CAAA;gBACtB,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAA;gBAChB,GAAG,IAAI,qCAAqC,CAAA;gBAC5C,GAAG,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC,CAAA;YAC9C,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,GAAG,SAAS,CAAA;gBACtB,GAAG,IAAI,gCAAgC,CAAA;YACzC,CAAC;YACD,MAAM,GAAG,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACxD,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAA;IAChB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS,CAAC,GAAsB,EAAE,MAAc;QACpD,IAAI,GAAG,GAAG,EAAE,CAAA;QAEZ,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAA;QAEtC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAA;QAC7C,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,iBAAW,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC/C,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;gBACjD,MAAM,GAAG,GAAG,EAAqB,CAAA;gBACjC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;gBAC5D,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,eAAe,EAAE,kBAAkB,CAAA;oBAC/D,OAAM;gBACR,CAAC;gBACD,MAAM,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;gBACpE,EAAE,CAAC,MAAM,GAAG,UAAU,CAAA;gBACtB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,eAAe,EAAE,6BAA6B,CAAA;gBAC1E,IAAI,GAAG,GAAG,CAAC,CAAC,CAAA;gBACZ,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC9B,GAAG,EAAE,CAAA;oBACL,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC;wBAC9B,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,UAAW,EAAE,IAAI,EAAE,EAAE,CAAC,iBAAiB,EAAE;qBACjF,CAAC,CAAA;oBACF,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACpB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,SAAS,GAAG,kCAAkC,CAAA;oBAChF,CAAC;yBAAM,CAAC;wBACN,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;wBAChB,GAAG;4BACD,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;gCACtB,SAAS,GAAG,sBAAsB,EAAE,CAAC,QAAQ,oBAAoB,EAAE,CAAC,aAAa,IAAI,CAAA;wBACvF,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,aAAa,EAAE,CAAC,CAAA;oBACrF,CAAC;gBACH,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;gBACzG,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,MAAM,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAA;oBACjC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;wBACrB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,QAAQ,yCAAyC,CAAA;oBAC/F,CAAC;yBAAM,CAAC;wBACN,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;wBACvC,IAAI,MAAM,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;4BAC3B,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,QAAQ,WAAW,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,IAAI,CAAA;4BACjG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;wBAC1D,CAAC;6BAAM,CAAC;4BACN,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,QAAQ,cAAc,CAAA;wBACpE,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,GAAG,CAAA;IACZ,CAAC;;AApIH,gCAqIC;AApIQ,mBAAQ,GAAG,QAAQ,CAAA;AAE1B;;GAEG;AACI,mBAAQ,GAAG,KAAK,CAAA"}

package/out/src/monitor/tasks/WalletMonitorTask.d.ts

@@ -0,0 +1,40 @@
+import { MonitorStorage, Monitor } from '../Monitor';
+/**
+ * A monitor task performs some periodic or state triggered maintenance function
+ * on the data managed by a wallet (Bitcoin UTXO manager, aka wallet)
+ *
+ * The monitor maintains a collection of tasks.
+ *
+ * It runs each task's non-asynchronous trigger to determine if the runTask method needs to run.
+ *
+ * Tasks that need to be run are run consecutively by awaiting their async runTask override method.
+ *
+ * The monitor then waits a fixed interval before repeating...
+ *
+ * Tasks may use the monitor_events table to persist their execution history.
+ * This is done by accessing the wathman.storage object.
+ */
+export declare abstract class WalletMonitorTask {
+    monitor: Monitor;
+    name: string;
+    /**
+     * Set by monitor each time runTask completes
+     */
+    lastRunMsecsSinceEpoch: number;
+    storage: MonitorStorage;
+    constructor(monitor: Monitor, name: string);
+    /**
+     * Override to handle async task setup configuration.
+     *
+     * Called before first call to `trigger`
+     */
+    asyncSetup(): Promise<void>;
+    /**
+     * Return true if `runTask` needs to be called now.
+     */
+    abstract trigger(nowMsecsSinceEpoch: number): {
+        run: boolean;
+    };
+    abstract runTask(): Promise<string>;
+}
+//# sourceMappingURL=WalletMonitorTask.d.ts.map

package/out/src/monitor/tasks/WalletMonitorTask.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WalletMonitorTask.d.ts","sourceRoot":"","sources":["../../../../../src/monitor/tasks/WalletMonitorTask.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEpD;;;;;;;;;;;;;;GAcG;AAEH,8BAAsB,iBAAiB;IAS5B,OAAO,EAAE,OAAO;IAChB,IAAI,EAAE,MAAM;IATrB;;OAEG;IACH,sBAAsB,SAAI;IAE1B,OAAO,EAAE,cAAc,CAAA;gBAGd,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM;IAKrB;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAEjC;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,OAAO,CAAA;KAAE;IAE9D,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;CACpC"}

package/out/src/monitor/tasks/WalletMonitorTask.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WalletMonitorTask = void 0;
+/**
+ * A monitor task performs some periodic or state triggered maintenance function
+ * on the data managed by a wallet (Bitcoin UTXO manager, aka wallet)
+ *
+ * The monitor maintains a collection of tasks.
+ *
+ * It runs each task's non-asynchronous trigger to determine if the runTask method needs to run.
+ *
+ * Tasks that need to be run are run consecutively by awaiting their async runTask override method.
+ *
+ * The monitor then waits a fixed interval before repeating...
+ *
+ * Tasks may use the monitor_events table to persist their execution history.
+ * This is done by accessing the wathman.storage object.
+ */
+class WalletMonitorTask {
+    constructor(monitor, name) {
+        this.monitor = monitor;
+        this.name = name;
+        /**
+         * Set by monitor each time runTask completes
+         */
+        this.lastRunMsecsSinceEpoch = 0;
+        this.storage = monitor.storage;
+    }
+    /**
+     * Override to handle async task setup configuration.
+     *
+     * Called before first call to `trigger`
+     */
+    async asyncSetup() { }
+}
+exports.WalletMonitorTask = WalletMonitorTask;
+//# sourceMappingURL=WalletMonitorTask.js.map

package/out/src/monitor/tasks/WalletMonitorTask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WalletMonitorTask.js","sourceRoot":"","sources":["../../../../../src/monitor/tasks/WalletMonitorTask.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;;;;GAcG;AAEH,MAAsB,iBAAiB;IAQrC,YACS,OAAgB,EAChB,IAAY;QADZ,YAAO,GAAP,OAAO,CAAS;QAChB,SAAI,GAAJ,IAAI,CAAQ;QATrB;;WAEG;QACH,2BAAsB,GAAG,CAAC,CAAA;QAQxB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;IAChC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,KAAmB,CAAC;CAQrC;AA5BD,8CA4BC"}

package/out/src/sdk/CertOpsWallet.d.ts

@@ -0,0 +1,7 @@
+import { GetPublicKeyArgs, GetPublicKeyResult, OriginatorDomainNameStringUnder250Bytes, WalletDecryptArgs, WalletDecryptResult, WalletEncryptArgs, WalletEncryptResult } from '@bsv/sdk';
+export interface CertOpsWallet {
+    getPublicKey(args: GetPublicKeyArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<GetPublicKeyResult>;
+    encrypt(args: WalletEncryptArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<WalletEncryptResult>;
+    decrypt(args: WalletDecryptArgs, originator?: OriginatorDomainNameStringUnder250Bytes): Promise<WalletDecryptResult>;
+}
+//# sourceMappingURL=CertOpsWallet.d.ts.map

package/out/src/sdk/CertOpsWallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertOpsWallet.d.ts","sourceRoot":"","sources":["../../../../src/sdk/CertOpsWallet.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,uCAAuC,EACvC,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,UAAU,CAAA;AAEjB,MAAM,WAAW,aAAa;IAC5B,YAAY,CACV,IAAI,EAAE,gBAAgB,EACtB,UAAU,CAAC,EAAE,uCAAuC,GACnD,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9B,OAAO,CAAC,IAAI,EAAE,iBAAiB,EAAE,UAAU,CAAC,EAAE,uCAAuC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;IACpH,OAAO,CAAC,IAAI,EAAE,iBAAiB,EAAE,UAAU,CAAC,EAAE,uCAAuC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;CACrH"}

package/out/src/sdk/CertOpsWallet.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=CertOpsWallet.js.map

package/out/src/sdk/CertOpsWallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertOpsWallet.js","sourceRoot":"","sources":["../../../../src/sdk/CertOpsWallet.ts"],"names":[],"mappings":""}

package/out/src/sdk/PrivilegedKeyManager.d.ts

@@ -0,0 +1,125 @@
+import { PrivateKey, CreateHmacArgs, CreateHmacResult, CreateSignatureArgs, CreateSignatureResult, GetPublicKeyArgs, ProtoWallet, PubKeyHex, RevealCounterpartyKeyLinkageArgs, RevealCounterpartyKeyLinkageResult, RevealSpecificKeyLinkageArgs, RevealSpecificKeyLinkageResult, VerifyHmacArgs, VerifyHmacResult, VerifySignatureArgs, VerifySignatureResult, WalletDecryptArgs, WalletDecryptResult, WalletEncryptArgs, WalletEncryptResult } from '@bsv/sdk';
+/**
+ * PrivilegedKeyManager
+ *
+ * This class manages a privileged (i.e., very sensitive) private key, obtained from
+ * an external function (`keyGetter`), which might be backed by HSMs, secure enclaves,
+ * or other secure storage. The manager retains the key in memory only for a limited
+ * duration (`retentionPeriod`), uses XOR-based chunk-splitting obfuscation, and
+ * includes decoy data to raise the difficulty of discovering the real key in memory.
+ *
+ * IMPORTANT: While these measures raise the bar for attackers, JavaScript environments
+ * do not provide perfect in-memory secrecy.
+ */
+export declare class PrivilegedKeyManager implements ProtoWallet {
+    /**
+     * Function that will retrieve the PrivateKey from a secure environment,
+     * e.g., an HSM or secure enclave. The reason for key usage is passed in
+     * to help with user consent, auditing, and access policy checks.
+     */
+    private keyGetter;
+    /**
+     * Time (in ms) for which the obfuscated key remains in memory
+     * before being automatically destroyed.
+     */
+    private retentionPeriod;
+    /**
+     * A list of dynamically generated property names used to store
+     * real key chunks (XORed with random pads).
+     */
+    private chunkPropNames;
+    /**
+     * A list of dynamically generated property names used to store
+     * the random pads that correspond to the real key chunks.
+     */
+    private chunkPadPropNames;
+    /**
+     * A list of decoy property names that will be removed
+     * when the real key is destroyed.
+     */
+    private decoyPropNamesDestroy;
+    /**
+     * A list of decoy property names that remain in memory
+     * even after the real key is destroyed (just to cause confusion).
+     */
+    private decoyPropNamesRemain;
+    /**
+     * Handle to the timer that will remove the key from memory
+     * after the retention period. If the key is refreshed again
+     * within that period, the timer is cleared and re-set.
+     */
+    private destroyTimer;
+    /**
+     * Number of chunks to split the 32-byte key into.
+     * Adjust to increase or decrease obfuscation complexity.
+     */
+    private readonly CHUNK_COUNT;
+    /**
+     * @param keyGetter - Asynchronous function that retrieves the PrivateKey from a secure environment.
+     * @param retentionPeriod - Time in milliseconds to retain the obfuscated key in memory before zeroizing.
+     */
+    constructor(keyGetter: (reason: string) => Promise<PrivateKey>, retentionPeriod?: number);
+    /**
+     * Safely destroys the in-memory obfuscated key material by zeroizing
+     * and deleting related fields. Also destroys some (but not all) decoy
+     * properties to further confuse an attacker.
+     */
+    destroyKey(): void;
+    /**
+     * Re/sets the destruction timer that removes the key from memory
+     * after `retentionPeriod` ms. If a timer is already running, it
+     * is cleared and re-set. This ensures the key remains in memory
+     * for exactly the desired window after its most recent acquisition.
+     */
+    private scheduleKeyDestruction;
+    /**
+     * XOR-based obfuscation on a per-chunk basis.
+     * This function takes two equal-length byte arrays
+     * and returns the XOR combination.
+     */
+    private xorBytes;
+    /**
+     * Splits the 32-byte key into `this.CHUNK_COUNT` smaller chunks
+     * (mostly equal length; the last chunk picks up leftover bytes
+     * if 32 is not evenly divisible).
+     */
+    private splitKeyIntoChunks;
+    /**
+     * Reassembles the chunks from the dynamic properties, XORs them
+     * with their corresponding pads, and returns a single 32-byte
+     * Uint8Array representing the raw key.
+     */
+    private reassembleKeyFromChunks;
+    /**
+     * Generates a random property name to store key chunks or decoy data.
+     */
+    private generateRandomPropName;
+    /**
+     * Forces a PrivateKey to be represented as exactly 32 bytes, left-padding
+     * with zeros if its numeric value has fewer than 32 bytes.
+     */
+    private get32ByteRepresentation;
+    /**
+     * Returns the privileged key needed to perform cryptographic operations.
+     * Uses in-memory chunk-based obfuscation if the key was already fetched.
+     * Otherwise, it calls out to `keyGetter`, splits the 32-byte representation
+     * of the key, XORs each chunk with a random pad, and stores them under
+     * dynamic property names. Also populates new decoy properties.
+     *
+     * @param reason - The reason for why the key is needed, passed to keyGetter.
+     * @returns The PrivateKey object needed for cryptographic operations.
+     */
+    private getPrivilegedKey;
+    getPublicKey(args: GetPublicKeyArgs): Promise<{
+        publicKey: PubKeyHex;
+    }>;
+    revealCounterpartyKeyLinkage(args: RevealCounterpartyKeyLinkageArgs): Promise<RevealCounterpartyKeyLinkageResult>;
+    revealSpecificKeyLinkage(args: RevealSpecificKeyLinkageArgs): Promise<RevealSpecificKeyLinkageResult>;
+    encrypt(args: WalletEncryptArgs): Promise<WalletEncryptResult>;
+    decrypt(args: WalletDecryptArgs): Promise<WalletDecryptResult>;
+    createHmac(args: CreateHmacArgs): Promise<CreateHmacResult>;
+    verifyHmac(args: VerifyHmacArgs): Promise<VerifyHmacResult>;
+    createSignature(args: CreateSignatureArgs): Promise<CreateSignatureResult>;
+    verifySignature(args: VerifySignatureArgs): Promise<VerifySignatureResult>;
+}
+//# sourceMappingURL=PrivilegedKeyManager.d.ts.map

package/out/src/sdk/PrivilegedKeyManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PrivilegedKeyManager.d.ts","sourceRoot":"","sources":["../../../../src/sdk/PrivilegedKeyManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,WAAW,EACX,SAAS,EACT,gCAAgC,EAChC,kCAAkC,EAClC,4BAA4B,EAC5B,8BAA8B,EAC9B,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,UAAU,CAAA;AAEjB;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAqB,YAAW,WAAW;IACtD;;;;OAIG;IACH,OAAO,CAAC,SAAS,CAAyC;IAE1D;;;OAGG;IACH,OAAO,CAAC,eAAe,CAAQ;IAE/B;;;OAGG;IACH,OAAO,CAAC,cAAc,CAAe;IAErC;;;OAGG;IACH,OAAO,CAAC,iBAAiB,CAAe;IAExC;;;OAGG;IACH,OAAO,CAAC,qBAAqB,CAAe;IAE5C;;;OAGG;IACH,OAAO,CAAC,oBAAoB,CAAe;IAE3C;;;;OAIG;IACH,OAAO,CAAC,YAAY,CAAiB;IAErC;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAI;IAEhC;;;OAGG;gBACS,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,EAAE,eAAe,SAAU;IAazF;;;;OAIG;IACH,UAAU,IAAI,IAAI;IAyClB;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IAU9B;;;;OAIG;IACH,OAAO,CAAC,QAAQ;IAQhB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAa1B;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IAiC/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAM9B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAa/B;;;;;;;;;OASG;YACW,gBAAgB;IA4DxB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,SAAS,CAAA;KAAE,CAAC;IAIvE,4BAA4B,CAChC,IAAI,EAAE,gCAAgC,GACrC,OAAO,CAAC,kCAAkC,CAAC;IAMxC,wBAAwB,CAAC,IAAI,EAAE,4BAA4B,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAIrG,OAAO,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI9D,OAAO,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI9D,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI3D,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI3D,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI1E,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAGjF"}