@dfx.swiss/wallet 0.0.0-stage → 0.1.1-beta.0

package/README.md

@@ -1,3 +1,40 @@
-# Temporary Holding Version
+# @dfx.swiss/wallet
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Self-custodial wallet core of the [DFX.swiss](https://dfx.swiss) app: a 12-word seed derived from a passkey (WebAuthn PRF),
+Bitcoin, EVM and Spark accounts on that seed, and the flows that connect the wallet to the DFX API. Keys stay on the
+device; the DFX API never receives them and cannot sign.
+
+> **Status:** under construction. The public API is not stable yet and changes without notice until `1.0.0`.
+
+## Installation
+
+```bash
+npm install @dfx.swiss/wallet
+```
+
+The package ships ES2020 ES modules for browsers and needs no Node polyfills. It does not depend on the Breez SDK or
+WalletConnect.
+
+## Environments
+
+The app build selects the environment (`'prd'`, `'dev'` or `'loc'`). The WebAuthn RP ID, the DFX login message prefix
+and the networks follow from it and are compiled-in constants:
+
+| Environment | RP ID               | Login message prefix | Bitcoin  | EVM chains | Spark   |
+| ----------- | ------------------- | -------------------- | -------- | ---------- | ------- |
+| `prd`       | `app.dfx.swiss`     | none                 | mainnet  | mainnets   | mainnet |
+| `dev`       | `dev.app.dfx.swiss` | `[dev]_`             | testnet4 | testnets   | mainnet |
+| `loc`       | `localhost`         | `[loc]_`             | testnet4 | testnets   | mainnet |
+
+```typescript
+import { RP_IDS, SIGN_MESSAGE_PREFIX, WALLET_NETWORKS } from '@dfx.swiss/wallet';
+
+RP_IDS.prd; // 'app.dfx.swiss'
+SIGN_MESSAGE_PREFIX.dev; // '[dev]_'
+WALLET_NETWORKS.dev.bitcoin; // 'testnet4'
+```
+
+## Local storage
+
+Local wallet data (never secrets) is kept in IndexedDB (`dfx-wallet`) through the `KeyValueStore` interface;
+`MemoryKeyValueStore` serves tests and platforms without IndexedDB.

package/dist/config/environment.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Deployment environment of the DFX app that hosts the wallet. It is compiled into the app build and never
+ * taken from the server, the URL or user input: the RP ID and the login message prefix follow from it.
+ */
+export type WalletEnv = 'prd' | 'dev' | 'loc';
+export declare const WALLET_ENVS: readonly WalletEnv[];
+export declare function isWalletEnv(value: unknown): value is WalletEnv;
+/**
+ * WebAuthn relying-party ID per environment. The RP ID is the app host, never the apex `dfx.swiss`. DEV is the
+ * existing DEV Pages host `dev.app.dfx.swiss`, a subdomain of the production host: WebAuthn RP scope only
+ * grows downward, so a DEV passkey (rpId `dev.app.dfx.swiss`) can never satisfy a PRD ceremony, which pins
+ * `app.dfx.swiss`, and every ceremony always passes its own environment's RP ID. A passkey is bound to its
+ * RP ID forever, so these values must never change for an existing environment.
+ */
+export declare const RP_IDS: Readonly<Record<WalletEnv, string>>;
+/**
+ * Prefix of the DFX login message per environment, identical to the DFX API, which computes
+ * `this.environment === Environment.PRD ? '' : `[${this.environment}]_`` (DFX API source
+ * `src/config/config.ts:410`, environment values `src/config/config.ts:37-41`) and puts it in front of both
+ * login templates (`auth.signMessage` and `auth.signMessageGeneral`, `src/config/config.ts:440-445`).
+ */
+export declare const SIGN_MESSAGE_PREFIX: Readonly<Record<WalletEnv, string>>;
+export type BitcoinNetwork = 'mainnet' | 'testnet4';
+/** Spark runs on mainnet in every DFX environment. */
+export type SparkNetwork = 'mainnet';
+export type EvmNetworkKind = 'mainnet' | 'testnet';
+export interface WalletNetworks {
+    /** Bitcoin network of the BIP-84 account (mainnet coin type 0', testnet4 coin type 1'). */
+    bitcoin: BitcoinNetwork;
+    /** Spark network of the Breez SDK. */
+    spark: SparkNetwork;
+    /** Kind of EVM chains the wallet supports in this environment. */
+    evm: EvmNetworkKind;
+}
+/**
+ * Networks per environment, matching the chain list rule of the DFX API: PRD uses Bitcoin mainnet and EVM
+ * mainnets only; DEV and LOC use Bitcoin testnet4 and EVM test chains only; Spark is mainnet everywhere.
+ */
+export declare const WALLET_NETWORKS: Readonly<Record<WalletEnv, Readonly<WalletNetworks>>>;
+//# sourceMappingURL=environment.d.ts.map

package/dist/config/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/config/environment.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAE9C,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAAkD,CAAC;AAE/F,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAIrD,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAIlE,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,CAAC;AAEpD,sDAAsD;AACtD,MAAM,MAAM,YAAY,GAAG,SAAS,CAAC;AAErC,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,2FAA2F;IAC3F,OAAO,EAAE,cAAc,CAAC;IACxB,sCAAsC;IACtC,KAAK,EAAE,YAAY,CAAC;IACpB,kEAAkE;IAClE,GAAG,EAAE,cAAc,CAAC;CACrB;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC,CAIhF,CAAC"}

package/dist/config/environment.js

@@ -0,0 +1,37 @@
+export const WALLET_ENVS = Object.freeze(['prd', 'dev', 'loc']);
+export function isWalletEnv(value) {
+    return typeof value === 'string' && WALLET_ENVS.includes(value);
+}
+/**
+ * WebAuthn relying-party ID per environment. The RP ID is the app host, never the apex `dfx.swiss`. DEV is the
+ * existing DEV Pages host `dev.app.dfx.swiss`, a subdomain of the production host: WebAuthn RP scope only
+ * grows downward, so a DEV passkey (rpId `dev.app.dfx.swiss`) can never satisfy a PRD ceremony, which pins
+ * `app.dfx.swiss`, and every ceremony always passes its own environment's RP ID. A passkey is bound to its
+ * RP ID forever, so these values must never change for an existing environment.
+ */
+export const RP_IDS = Object.freeze({
+    prd: 'app.dfx.swiss',
+    dev: 'dev.app.dfx.swiss',
+    loc: 'localhost',
+});
+/**
+ * Prefix of the DFX login message per environment, identical to the DFX API, which computes
+ * `this.environment === Environment.PRD ? '' : `[${this.environment}]_`` (DFX API source
+ * `src/config/config.ts:410`, environment values `src/config/config.ts:37-41`) and puts it in front of both
+ * login templates (`auth.signMessage` and `auth.signMessageGeneral`, `src/config/config.ts:440-445`).
+ */
+export const SIGN_MESSAGE_PREFIX = Object.freeze({
+    prd: '',
+    dev: '[dev]_',
+    loc: '[loc]_',
+});
+/**
+ * Networks per environment, matching the chain list rule of the DFX API: PRD uses Bitcoin mainnet and EVM
+ * mainnets only; DEV and LOC use Bitcoin testnet4 and EVM test chains only; Spark is mainnet everywhere.
+ */
+export const WALLET_NETWORKS = Object.freeze({
+    prd: Object.freeze({ bitcoin: 'mainnet', spark: 'mainnet', evm: 'mainnet' }),
+    dev: Object.freeze({ bitcoin: 'testnet4', spark: 'mainnet', evm: 'testnet' }),
+    loc: Object.freeze({ bitcoin: 'testnet4', spark: 'mainnet', evm: 'testnet' }),
+});
+//# sourceMappingURL=environment.js.map

package/dist/config/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../src/config/environment.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,WAAW,GAAyB,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAU,CAAC,CAAC;AAE/F,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,WAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,MAAM,GAAwC,MAAM,CAAC,MAAM,CAAC;IACvE,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,WAAW;CACjB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAwC,MAAM,CAAC,MAAM,CAAC;IACpF,GAAG,EAAE,EAAE;IACP,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;CACd,CAAC,CAAC;AAkBH;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0D,MAAM,CAAC,MAAM,CAAC;IAClG,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC5E,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC7E,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;CAC9E,CAAC,CAAC"}

package/dist/derivation/bitcoin-keys.d.ts

@@ -0,0 +1,20 @@
+import type { Versions } from '@scure/bip32';
+import type { BitcoinNetwork } from '../config/environment';
+/** BIP-84 chain: 0 = receive (external), 1 = change (internal). */
+export type BitcoinChain = 0 | 1;
+/** BIP-44 coin type per network: mainnet 0', every test network 1'. */
+export declare const BITCOIN_COIN_TYPE: Readonly<Record<BitcoinNetwork, number>>;
+/** BIP-32 serialization versions (xpub/xprv, tpub/tprv). */
+export declare const BITCOIN_BIP32_VERSIONS: Readonly<Record<BitcoinNetwork, Readonly<Versions>>>;
+/** Segwit address HRP per network (BIP-173). */
+export declare const BITCOIN_HRP: Readonly<Record<BitcoinNetwork, string>>;
+/** BIP-84 account 0: `m/84'/0'/0'` on mainnet, `m/84'/1'/0'` on testnet4. */
+export declare function bitcoinAccountPath(network: BitcoinNetwork): string;
+export declare function bitcoinAddressPath(network: BitcoinNetwork, chain: BitcoinChain, index: number): string;
+export declare function hash160(data: Uint8Array): Uint8Array;
+/** Native segwit v0 P2WPKH address (`bc1q…` / `tb1q…`) of a compressed public key. */
+export declare function p2wpkhAddress(publicKey: Uint8Array, network: BitcoinNetwork): string;
+export declare function checkChain(chain: number): asserts chain is BitcoinChain;
+/** Non-hardened BIP-32 child index. */
+export declare function checkIndex(index: number): void;
+//# sourceMappingURL=bitcoin-keys.d.ts.map

package/dist/derivation/bitcoin-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitcoin-keys.d.ts","sourceRoot":"","sources":["../../src/derivation/bitcoin-keys.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAI5D,mEAAmE;AACnE,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,CAAC;AAEjC,uEAAuE;AACvE,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAA8C,CAAC;AAEtH,4DAA4D;AAC5D,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAGtF,CAAC;AAEH,gDAAgD;AAChD,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAoD,CAAC;AAEtH,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAElE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAItG;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAEpD;AAED,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAKpF;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAEvE;AAED,uCAAuC;AACvC,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAI9C"}

package/dist/derivation/bitcoin-keys.js

@@ -0,0 +1,50 @@
+import { ripemd160 } from '@noble/hashes/legacy';
+import { sha256 } from '@noble/hashes/sha2';
+import { bech32 } from '@scure/base';
+import { isBytes } from '../util/bytes';
+import { WalletError } from '../util/errors';
+/** BIP-44 coin type per network: mainnet 0', every test network 1'. */
+export const BITCOIN_COIN_TYPE = Object.freeze({ mainnet: 0, testnet4: 1 });
+/** BIP-32 serialization versions (xpub/xprv, tpub/tprv). */
+export const BITCOIN_BIP32_VERSIONS = Object.freeze({
+    mainnet: Object.freeze({ private: 0x0488ade4, public: 0x0488b21e }),
+    testnet4: Object.freeze({ private: 0x04358394, public: 0x043587cf }),
+});
+/** Segwit address HRP per network (BIP-173). */
+export const BITCOIN_HRP = Object.freeze({ mainnet: 'bc', testnet4: 'tb' });
+/** BIP-84 account 0: `m/84'/0'/0'` on mainnet, `m/84'/1'/0'` on testnet4. */
+export function bitcoinAccountPath(network) {
+    return `m/84'/${coinType(network)}'/0'`;
+}
+export function bitcoinAddressPath(network, chain, index) {
+    checkChain(chain);
+    checkIndex(index);
+    return `${bitcoinAccountPath(network)}/${chain}/${index}`;
+}
+export function hash160(data) {
+    return ripemd160(sha256(data));
+}
+/** Native segwit v0 P2WPKH address (`bc1q…` / `tb1q…`) of a compressed public key. */
+export function p2wpkhAddress(publicKey, network) {
+    if (!isBytes(publicKey) || publicKey.length !== 33 || (publicKey[0] !== 0x02 && publicKey[0] !== 0x03)) {
+        throw new WalletError('invalid-public-key', 'P2WPKH needs a 33-byte compressed public key');
+    }
+    return bech32.encode(BITCOIN_HRP[network], [0, ...bech32.toWords(hash160(publicKey))]);
+}
+export function checkChain(chain) {
+    if (chain !== 0 && chain !== 1)
+        throw new WalletError('invalid-derivation-path', `Invalid BIP-84 chain: ${chain}`);
+}
+/** Non-hardened BIP-32 child index. */
+export function checkIndex(index) {
+    if (!Number.isSafeInteger(index) || index < 0 || index >= 0x80000000) {
+        throw new WalletError('invalid-derivation-path', `Invalid address index: ${index}`);
+    }
+}
+function coinType(network) {
+    const coin = BITCOIN_COIN_TYPE[network];
+    if (coin === undefined)
+        throw new WalletError('invalid-network', `Unknown Bitcoin network: ${network}`);
+    return coin;
+}
+//# sourceMappingURL=bitcoin-keys.js.map

package/dist/derivation/bitcoin-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitcoin-keys.js","sourceRoot":"","sources":["../../src/derivation/bitcoin-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAK7C,uEAAuE;AACvE,MAAM,CAAC,MAAM,iBAAiB,GAA6C,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AAEtH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,sBAAsB,GAAyD,MAAM,CAAC,MAAM,CAAC;IACxG,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACnE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;CACrE,CAAC,CAAC;AAEH,gDAAgD;AAChD,MAAM,CAAC,MAAM,WAAW,GAA6C,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAEtH,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,OAAuB;IACxD,OAAO,SAAS,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAuB,EAAE,KAAmB,EAAE,KAAa;IAC5F,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAgB;IACtC,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,SAAqB,EAAE,OAAuB;IAC1E,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,8CAA8C,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,yBAAyB,KAAK,EAAE,CAAC,CAAC;AACrH,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,UAAU,EAAE,CAAC;QACrE,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,0BAA0B,KAAK,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,OAAuB;IACvC,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,4BAA4B,OAAO,EAAE,CAAC,CAAC;IACxG,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/derivation/evm-keys.d.ts

@@ -0,0 +1,8 @@
+export type EvmAddress = `0x${string}`;
+/** MetaMask account path: `m/44'/60'/0'/0/i`, always derived from the master node. */
+export declare function evmAddressPath(index: number): string;
+/** EIP-55 address of a secp256k1 public key (33 bytes compressed or 65 bytes uncompressed). */
+export declare function evmAddressFromPublicKey(publicKey: Uint8Array): EvmAddress;
+/** EIP-55 mixed-case checksum spelling of a 20-byte hex address (input case is ignored). */
+export declare function toChecksumAddress(address: string): EvmAddress;
+//# sourceMappingURL=evm-keys.d.ts.map

package/dist/derivation/evm-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-keys.d.ts","sourceRoot":"","sources":["../../src/derivation/evm-keys.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,UAAU,GAAG,KAAK,MAAM,EAAE,CAAC;AAEvC,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED,+FAA+F;AAC/F,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,CAMzE;AAED,4FAA4F;AAC5F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAW7D"}

package/dist/derivation/evm-keys.js

@@ -0,0 +1,32 @@
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { keccak_256 } from '@noble/hashes/sha3';
+import { bytesToHex, isBytes, utf8ToBytes } from '../util/bytes';
+import { WalletError } from '../util/errors';
+import { checkIndex } from './bitcoin-keys';
+/** MetaMask account path: `m/44'/60'/0'/0/i`, always derived from the master node. */
+export function evmAddressPath(index) {
+    checkIndex(index);
+    return `m/44'/60'/0'/0/${index}`;
+}
+/** EIP-55 address of a secp256k1 public key (33 bytes compressed or 65 bytes uncompressed). */
+export function evmAddressFromPublicKey(publicKey) {
+    if (!isBytes(publicKey) || (publicKey.length !== 33 && publicKey.length !== 65)) {
+        throw new WalletError('invalid-public-key', 'Expected a 33- or 65-byte secp256k1 public key');
+    }
+    const uncompressed = secp256k1.ProjectivePoint.fromHex(publicKey).toRawBytes(false);
+    return toChecksumAddress(`0x${bytesToHex(keccak_256(uncompressed.subarray(1)).subarray(-20))}`);
+}
+/** EIP-55 mixed-case checksum spelling of a 20-byte hex address (input case is ignored). */
+export function toChecksumAddress(address) {
+    if (typeof address !== 'string' || !/^0x[0-9a-fA-F]{40}$/.test(address)) {
+        throw new WalletError('invalid-evm-address', 'Expected a 0x-prefixed 20-byte hex address');
+    }
+    const lower = address.slice(2).toLowerCase();
+    const hash = bytesToHex(keccak_256(utf8ToBytes(lower)));
+    let result = '0x';
+    for (let i = 0; i < lower.length; i++) {
+        result += parseInt(hash[i], 16) >= 8 ? lower[i].toUpperCase() : lower[i];
+    }
+    return result;
+}
+//# sourceMappingURL=evm-keys.js.map

package/dist/derivation/evm-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-keys.js","sourceRoot":"","sources":["../../src/derivation/evm-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAI5C,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,UAAU,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,kBAAkB,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,uBAAuB,CAAC,SAAqB;IAC3D,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,gDAAgD,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,YAAY,GAAG,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpF,OAAO,iBAAiB,CAAC,KAAK,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,4CAA4C,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,MAAoB,CAAC;AAC9B,CAAC"}

package/dist/derivation/keyring.d.ts

@@ -0,0 +1,68 @@
+import type { BitcoinNetwork } from '../config/environment';
+import { BitcoinChain } from './bitcoin-keys';
+import { EvmAddress } from './evm-keys';
+import { SPARK_IDENTITY_PATH } from './spark-keys';
+export interface KeyRingOptions {
+    bitcoinNetwork: BitcoinNetwork;
+}
+export interface BitcoinAccountInfo {
+    path: string;
+    /** Account extended public key (xpub on mainnet, tpub on testnet4). */
+    xpub: string;
+    /** Master key fingerprint, 8 lowercase hex characters. */
+    fingerprint: string;
+}
+export interface BitcoinAddressInfo {
+    path: string;
+    address: string;
+    publicKey: Uint8Array;
+}
+export interface SparkIdentityInfo {
+    path: typeof SPARK_IDENTITY_PATH;
+    publicKey: Uint8Array;
+    address: string;
+}
+/** A key the wallet signs with; package-internal (see `withPrivateKey`). */
+export type KeyPath = {
+    family: 'evm';
+    index: number;
+} | {
+    family: 'bitcoin';
+    chain: BitcoinChain;
+    index: number;
+} | {
+    family: 'spark';
+};
+/**
+ * The unlocked keys of one wallet. Every path is derived from the master node (BIP-84 Bitcoin account 0,
+ * MetaMask EVM accounts, Spark identity of account 1); address derivation uses public account nodes only.
+ */
+export declare class KeyRing {
+    readonly bitcoinNetwork: BitcoinNetwork;
+    private nodes?;
+    private constructor();
+    static fromMnemonic(mnemonic: string, options: KeyRingOptions): KeyRing;
+    get wiped(): boolean;
+    /** EVM account `m/44'/60'/0'/0/index`; index 0 is the seed check address. */
+    evm(index: number): {
+        path: string;
+        address: EvmAddress;
+    };
+    bitcoinAccount(): BitcoinAccountInfo;
+    /** BIP-84 P2WPKH address of the receive (0) or change (1) chain. */
+    bitcoinAddress(chain: BitcoinChain, index: number): BitcoinAddressInfo;
+    /** Spark identity key `m/8797555'/1'/0'` and its plain mainnet `spark1` address. */
+    sparkIdentity(): SparkIdentityInfo;
+    /** The mnemonic, only for the export screen and the Spark client. */
+    mnemonic(): string;
+    /** Drops all key material; every later call throws. */
+    wipe(): void;
+    private publicNodes;
+    private secret;
+}
+/**
+ * Package-internal signing access: derives the private key of `path`, passes it to the synchronous `use` and
+ * wipes it afterwards. Not exported from the package index.
+ */
+export declare function withPrivateKey<T>(keys: KeyRing, path: KeyPath, use: (privateKey: Uint8Array) => T): T;
+//# sourceMappingURL=keyring.d.ts.map

package/dist/derivation/keyring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring.d.ts","sourceRoot":"","sources":["../../src/derivation/keyring.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D,OAAO,EAEL,YAAY,EAMb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAA2C,MAAM,YAAY,CAAC;AACjF,OAAO,EAAsB,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGvE,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,cAAc,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,mBAAmB,CAAC;IACjC,SAAS,EAAE,UAAU,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,4EAA4E;AAC5E,MAAM,MAAM,OAAO,GACf;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC;AAmBxB;;;GAGG;AACH,qBAAa,OAAO;IAClB,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,OAAO,CAAC,KAAK,CAAC,CAAc;IAE5B,OAAO;IAaP,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO;IAWvE,IAAI,KAAK,IAAI,OAAO,CAEnB;IAED,6EAA6E;IAC7E,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,UAAU,CAAA;KAAE;IAKzD,cAAc,IAAI,kBAAkB;IASpC,oEAAoE;IACpE,cAAc,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB;IAYtE,oFAAoF;IACpF,aAAa,IAAI,iBAAiB;IAYlC,qEAAqE;IACrE,QAAQ,IAAI,MAAM;IAIlB,uDAAuD;IACvD,IAAI,IAAI,IAAI;IAUZ,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,MAAM;CAKf;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,CAiBrG"}

package/dist/derivation/keyring.js

@@ -0,0 +1,150 @@
+import { HDKey } from '@scure/bip32';
+import { wipeBytes } from '../util/bytes';
+import { WalletError } from '../util/errors';
+import { BITCOIN_BIP32_VERSIONS, bitcoinAccountPath, bitcoinAddressPath, checkChain, checkIndex, p2wpkhAddress, } from './bitcoin-keys';
+import { evmAddressFromPublicKey, evmAddressPath } from './evm-keys';
+import { encodeSparkAddress, SPARK_IDENTITY_PATH } from './spark-keys';
+import { normalizeMnemonicV1, seedFromMnemonic } from './v1';
+// Secrets live outside the instance, so nothing reachable from a KeyRing object exposes key material.
+const secrets = new WeakMap();
+/**
+ * The unlocked keys of one wallet. Every path is derived from the master node (BIP-84 Bitcoin account 0,
+ * MetaMask EVM accounts, Spark identity of account 1); address derivation uses public account nodes only.
+ */
+export class KeyRing {
+    constructor(secret, bitcoinNetwork) {
+        this.bitcoinNetwork = bitcoinNetwork;
+        secrets.set(this, secret);
+        const bitcoinAccount = neutered(secret.master.derive(bitcoinAccountPath(bitcoinNetwork)));
+        this.nodes = {
+            bitcoinAccount,
+            bitcoinChains: [bitcoinAccount.deriveChild(0), bitcoinAccount.deriveChild(1)],
+            evmChain: neutered(secret.master.derive("m/44'/60'/0'/0")),
+            fingerprint: secret.master.fingerprint.toString(16).padStart(8, '0'),
+        };
+    }
+    static fromMnemonic(mnemonic, options) {
+        const network = options?.bitcoinNetwork;
+        if (!network || !BITCOIN_BIP32_VERSIONS[network]) {
+            throw new WalletError('invalid-network', `Unknown Bitcoin network: ${network}`);
+        }
+        const normalized = normalizeMnemonicV1(mnemonic);
+        const seed = seedFromMnemonic(normalized);
+        const master = HDKey.fromMasterSeed(seed, BITCOIN_BIP32_VERSIONS[network]);
+        return new KeyRing({ mnemonic: normalized, seed, master }, network);
+    }
+    get wiped() {
+        return this.nodes === undefined;
+    }
+    /** EVM account `m/44'/60'/0'/0/index`; index 0 is the seed check address. */
+    evm(index) {
+        const path = evmAddressPath(index);
+        return { path, address: evmAddressFromPublicKey(publicKeyOf(this.publicNodes().evmChain.deriveChild(index))) };
+    }
+    bitcoinAccount() {
+        const nodes = this.publicNodes();
+        return {
+            path: bitcoinAccountPath(this.bitcoinNetwork),
+            xpub: nodes.bitcoinAccount.publicExtendedKey,
+            fingerprint: nodes.fingerprint,
+        };
+    }
+    /** BIP-84 P2WPKH address of the receive (0) or change (1) chain. */
+    bitcoinAddress(chain, index) {
+        checkChain(chain);
+        checkIndex(index);
+        const nodes = this.publicNodes();
+        const publicKey = publicKeyOf(nodes.bitcoinChains[chain].deriveChild(index));
+        return {
+            path: bitcoinAddressPath(this.bitcoinNetwork, chain, index),
+            address: p2wpkhAddress(publicKey, this.bitcoinNetwork),
+            publicKey,
+        };
+    }
+    /** Spark identity key `m/8797555'/1'/0'` and its plain mainnet `spark1` address. */
+    sparkIdentity() {
+        const nodes = this.publicNodes();
+        if (!nodes.spark) {
+            const node = this.secret().master.derive(SPARK_IDENTITY_PATH);
+            const publicKey = publicKeyOf(node);
+            node.wipePrivateData();
+            nodes.spark = { path: SPARK_IDENTITY_PATH, publicKey, address: encodeSparkAddress(publicKey) };
+        }
+        const { path, publicKey, address } = nodes.spark;
+        return { path, publicKey: publicKey.slice(), address };
+    }
+    /** The mnemonic, only for the export screen and the Spark client. */
+    mnemonic() {
+        return this.secret().mnemonic;
+    }
+    /** Drops all key material; every later call throws. */
+    wipe() {
+        const secret = secrets.get(this);
+        if (secret) {
+            secret.master.wipePrivateData();
+            wipeBytes(secret.seed);
+            secrets.delete(this);
+        }
+        this.nodes = undefined;
+    }
+    publicNodes() {
+        if (!this.nodes)
+            throw wipedError();
+        return this.nodes;
+    }
+    secret() {
+        const secret = secrets.get(this);
+        if (!secret)
+            throw wipedError();
+        return secret;
+    }
+}
+/**
+ * Package-internal signing access: derives the private key of `path`, passes it to the synchronous `use` and
+ * wipes it afterwards. Not exported from the package index.
+ */
+export function withPrivateKey(keys, path, use) {
+    const secret = secrets.get(keys);
+    if (!secret)
+        throw wipedError();
+    const node = secret.master.derive(keyPathString(keys.bitcoinNetwork, path));
+    const privateKey = node.privateKey?.slice();
+    node.wipePrivateData();
+    if (!privateKey)
+        throw new WalletError('key-unavailable', 'No private key for this path');
+    try {
+        const result = use(privateKey);
+        if (result instanceof Promise)
+            throw new WalletError('async-key-use', 'Private keys may only be used synchronously');
+        return result;
+    }
+    finally {
+        wipeBytes(privateKey);
+    }
+}
+function keyPathString(network, path) {
+    switch (path?.family) {
+        case 'evm':
+            return evmAddressPath(path.index);
+        case 'bitcoin':
+            return bitcoinAddressPath(network, path.chain, path.index);
+        case 'spark':
+            return SPARK_IDENTITY_PATH;
+        default:
+            throw new WalletError('invalid-derivation-path', 'Unknown key family');
+    }
+}
+function neutered(node) {
+    const publicNode = HDKey.fromExtendedKey(node.publicExtendedKey, node.versions);
+    node.wipePrivateData();
+    return publicNode;
+}
+function publicKeyOf(node) {
+    if (!node.publicKey)
+        throw new WalletError('key-unavailable', 'No public key for this path');
+    return node.publicKey;
+}
+function wipedError() {
+    return new WalletError('keyring-wiped', 'The key ring has been wiped');
+}
+//# sourceMappingURL=keyring.js.map

package/dist/derivation/keyring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring.js","sourceRoot":"","sources":["../../src/derivation/keyring.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EACL,sBAAsB,EAEtB,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAc,uBAAuB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,MAAM,CAAC;AA8C7D,sGAAsG;AACtG,MAAM,OAAO,GAAG,IAAI,OAAO,EAAoB,CAAC;AAEhD;;;GAGG;AACH,MAAM,OAAO,OAAO;IAIlB,YAAoB,MAAe,EAAE,cAA8B;QACjE,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE1B,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,KAAK,GAAG;YACX,cAAc;YACd,aAAa,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC7E,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC1D,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,QAAgB,EAAE,OAAuB;QAC3D,MAAM,OAAO,GAAG,OAAO,EAAE,cAAc,CAAC;QACxC,IAAI,CAAC,OAAO,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,4BAA4B,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,OAAO,IAAI,OAAO,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;IAClC,CAAC;IAED,6EAA6E;IAC7E,GAAG,CAAC,KAAa;QACf,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACjH,CAAC;IAED,cAAc;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC;YAC7C,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,iBAAiB;YAC5C,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,cAAc,CAAC,KAAmB,EAAE,KAAa;QAC/C,UAAU,CAAC,KAAK,CAAC,CAAC;QAClB,UAAU,CAAC,KAAK,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,OAAO;YACL,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC;YAC3D,OAAO,EAAE,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC;YACtD,SAAS;SACV,CAAC;IACJ,CAAC;IAED,oFAAoF;IACpF,aAAa;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAC9D,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,KAAK,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QACjG,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC;IACzD,CAAC;IAED,qEAAqE;IACrE,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,uDAAuD;IACvD,IAAI;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAChC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,UAAU,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,MAAM;QACZ,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM;YAAE,MAAM,UAAU,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAI,IAAa,EAAE,IAAa,EAAE,GAAkC;IAChG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,MAAM,UAAU,EAAE,CAAC;IAEhC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;IAC5C,IAAI,CAAC,eAAe,EAAE,CAAC;IACvB,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,8BAA8B,CAAC,CAAC;IAE1F,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,IAAI,MAAM,YAAY,OAAO;YAC3B,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,6CAA6C,CAAC,CAAC;QACxF,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAuB,EAAE,IAAa;IAC3D,QAAQ,IAAI,EAAE,MAAM,EAAE,CAAC;QACrB,KAAK,KAAK;YACR,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,SAAS;YACZ,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,KAAK,OAAO;YACV,OAAO,mBAAmB,CAAC;QAC7B;YACE,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAW;IAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChF,IAAI,CAAC,eAAe,EAAE,CAAC;IACvB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,IAAW;IAC9B,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC,SAAS,CAAC;AACxB,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,IAAI,WAAW,CAAC,eAAe,EAAE,6BAA6B,CAAC,CAAC;AACzE,CAAC"}

package/dist/derivation/public-data.d.ts

@@ -0,0 +1,26 @@
+import type { BitcoinNetwork } from '../config/environment';
+import type { EvmAddress } from './evm-keys';
+import type { KeyRing } from './keyring';
+/**
+ * Public data of a seed, cached per origin after a successful seed check so that addresses render while the
+ * wallet is locked. Contains no secret.
+ */
+export interface SeedPublicData {
+    seedCheckAddress: EvmAddress;
+    evm: {
+        index: number;
+        address: EvmAddress;
+    }[];
+    bitcoin: {
+        network: BitcoinNetwork;
+        xpub: string;
+        fingerprint: string;
+        receive0: string;
+    };
+    spark: {
+        identityPubkey: string;
+        address: string;
+    };
+}
+export declare function seedPublicData(keys: KeyRing, evmIndexes?: readonly number[]): SeedPublicData;
+//# sourceMappingURL=public-data.d.ts.map

package/dist/derivation/public-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-data.d.ts","sourceRoot":"","sources":["../../src/derivation/public-data.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gBAAgB,EAAE,UAAU,CAAC;IAC7B,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,UAAU,CAAA;KAAE,EAAE,CAAC;IAC9C,OAAO,EAAE;QAAE,OAAO,EAAE,cAAc,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1F,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACpD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,GAAE,SAAS,MAAM,EAAQ,GAAG,cAAc,CAiBjG"}

package/dist/derivation/public-data.js

@@ -0,0 +1,19 @@
+import { bytesToHex } from '../util/bytes';
+export function seedPublicData(keys, evmIndexes = [0]) {
+    const indexes = Array.from(new Set([0, ...evmIndexes])).sort((a, b) => a - b);
+    const evm = indexes.map((index) => ({ index, address: keys.evm(index).address }));
+    const account = keys.bitcoinAccount();
+    const spark = keys.sparkIdentity();
+    return {
+        seedCheckAddress: evm[0].address,
+        evm,
+        bitcoin: {
+            network: keys.bitcoinNetwork,
+            xpub: account.xpub,
+            fingerprint: account.fingerprint,
+            receive0: keys.bitcoinAddress(0, 0).address,
+        },
+        spark: { identityPubkey: bytesToHex(spark.publicKey), address: spark.address },
+    };
+}
+//# sourceMappingURL=public-data.js.map

package/dist/derivation/public-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-data.js","sourceRoot":"","sources":["../../src/derivation/public-data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAgB3C,MAAM,UAAU,cAAc,CAAC,IAAa,EAAE,aAAgC,CAAC,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;IAEnC,OAAO;QACL,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO;QAChC,GAAG;QACH,OAAO,EAAE;YACP,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO;SAC5C;QACD,KAAK,EAAE,EAAE,cAAc,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;KAC/E,CAAC;AACJ,CAAC"}

package/dist/derivation/seed-check.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Seed check: the derived EVM index-0 address must equal the stored seed check address (server value at login or
+ * the per-origin cache). Case-insensitive; anything that is not a 20-byte hex address never matches.
+ */
+export declare function seedCheck(derivedEvm0: string, expected: string): boolean;
+//# sourceMappingURL=seed-check.d.ts.map

package/dist/derivation/seed-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-check.d.ts","sourceRoot":"","sources":["../../src/derivation/seed-check.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIxE"}

package/dist/derivation/seed-check.js

@@ -0,0 +1,13 @@
+const EVM_ADDRESS = /^0x[0-9a-fA-F]{40}$/;
+/**
+ * Seed check: the derived EVM index-0 address must equal the stored seed check address (server value at login or
+ * the per-origin cache). Case-insensitive; anything that is not a 20-byte hex address never matches.
+ */
+export function seedCheck(derivedEvm0, expected) {
+    if (typeof derivedEvm0 !== 'string' || typeof expected !== 'string')
+        return false;
+    if (!EVM_ADDRESS.test(derivedEvm0) || !EVM_ADDRESS.test(expected))
+        return false;
+    return derivedEvm0.toLowerCase() === expected.toLowerCase();
+}
+//# sourceMappingURL=seed-check.js.map

package/dist/derivation/seed-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-check.js","sourceRoot":"","sources":["../../src/derivation/seed-check.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAE1C;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,WAAmB,EAAE,QAAgB;IAC7D,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClF,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,OAAO,WAAW,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC"}

package/dist/derivation/spark-keys.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Spark identity key: Spark SDK default derivation on the main mnemonic, mainnet account 1 (Breez SDK Spark
+ * `defaultExternalSigners(mnemonic, null, 'mainnet', 1)`). Pinned by the known-answer vectors.
+ */
+export declare const SPARK_IDENTITY_PATH: "m/8797555'/1'/0'";
+/** Plain mainnet Spark address: bech32m(`spark`, 0x0a 0x21 ‖ identity public key), no invoice fields. */
+export declare function encodeSparkAddress(publicKey: Uint8Array): string;
+/**
+ * Strict decoder for plain mainnet Spark addresses: lowercase, HRP `spark`, payload exactly 0x0a 0x21 followed by
+ * a valid compressed secp256k1 point. Invoice addresses, other networks and raw-key payloads are refused.
+ * Returns the 33-byte identity public key.
+ */
+export declare function decodeSparkAddress(address: string): Uint8Array;
+//# sourceMappingURL=spark-keys.d.ts.map

package/dist/derivation/spark-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spark-keys.d.ts","sourceRoot":"","sources":["../../src/derivation/spark-keys.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAG,kBAA2B,CAAC;AAW/D,yGAAyG;AACzG,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAGhE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CA0B9D"}