@dfx.swiss/wallet 0.0.0-stage → 0.1.1-beta.0

package/dist/util/emitter.js

@@ -0,0 +1,53 @@
+/**
+ * Minimal typed event emitter. A throwing listener neither stops the other listeners nor the emitting code;
+ * its error goes to `onListenerError`, by default rethrown asynchronously so that it still surfaces.
+ */
+export class Emitter {
+    constructor(onListenerError = rethrowAsync) {
+        this.onListenerError = onListenerError;
+        this.listeners = new Map();
+    }
+    /** Registers a listener and returns a function that removes it. */
+    on(event, listener) {
+        let set = this.listeners.get(event);
+        if (!set) {
+            set = new Set();
+            this.listeners.set(event, set);
+        }
+        set.add(listener);
+        return () => this.off(event, listener);
+    }
+    off(event, listener) {
+        const set = this.listeners.get(event);
+        if (!set)
+            return;
+        set.delete(listener);
+        if (set.size === 0)
+            this.listeners.delete(event);
+    }
+    emit(event, payload) {
+        const set = this.listeners.get(event);
+        if (!set)
+            return;
+        for (const listener of Array.from(set)) {
+            try {
+                listener(payload);
+            }
+            catch (error) {
+                this.onListenerError(error);
+            }
+        }
+    }
+    listenerCount(event) {
+        return this.listeners.get(event)?.size ?? 0;
+    }
+    removeAllListeners() {
+        this.listeners.clear();
+    }
+}
+function rethrowAsync(error) {
+    setTimeout(() => {
+        throw error;
+    }, 0);
+}
+//# sourceMappingURL=emitter.js.map

package/dist/util/emitter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../src/util/emitter.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,OAAO;IAGlB,YAA6B,kBAA4C,YAAY;QAAxD,oBAAe,GAAf,eAAe,CAAyC;QAFpE,cAAS,GAAG,IAAI,GAAG,EAAoC,CAAC;IAEe,CAAC;IAEzF,mEAAmE;IACnE,EAAE,CAAyB,KAAQ,EAAE,QAA6B;QAChE,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,GAAG,CAAyB,KAAQ,EAAE,QAA6B;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrB,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,CAAyB,KAAQ,EAAE,OAAkB;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,aAAa,CAAC,KAAmB;QAC/B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,kBAAkB;QAChB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,KAAK,CAAC;IACd,CAAC,EAAE,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/util/errors.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Base class of every error the wallet throws. `code` is a stable machine-readable identifier that callers
+ * may branch on; `message` is for logs and diagnostics and never contains secrets.
+ */
+export declare class WalletError extends Error {
+    readonly code: string;
+    constructor(code: string, message?: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare function isWalletError(error: unknown, code?: string): error is WalletError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/util/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/util/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAK1E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,IAAI,WAAW,CAEjF"}

package/dist/util/errors.js

@@ -0,0 +1,15 @@
+/**
+ * Base class of every error the wallet throws. `code` is a stable machine-readable identifier that callers
+ * may branch on; `message` is for logs and diagnostics and never contains secrets.
+ */
+export class WalletError extends Error {
+    constructor(code, message, options) {
+        super(message ?? code, options);
+        this.name = new.target.name;
+        this.code = code;
+    }
+}
+export function isWalletError(error, code) {
+    return error instanceof WalletError && (code === undefined || error.code === code);
+}
+//# sourceMappingURL=errors.js.map

package/dist/util/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/util/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGpC,YAAY,IAAY,EAAE,OAAgB,EAAE,OAA6B;QACvE,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,IAAa;IACzD,OAAO,KAAK,YAAY,WAAW,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACrF,CAAC"}

package/dist/util/jwt.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Decodes the payload of a JWT without verifying it. The wallet only reads claims of tokens it received from
+ * the DFX API over TLS (e.g. expiry, account, passkey credential); it never trusts them for key decisions.
+ */
+export declare function decodeJwtPayload<T extends object = Record<string, unknown>>(token: string): T;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/util/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/util/jwt.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,CAe7F"}

package/dist/util/jwt.js

@@ -0,0 +1,23 @@
+import { base64UrlDecode, bytesToUtf8 } from './bytes';
+import { WalletError } from './errors';
+/**
+ * Decodes the payload of a JWT without verifying it. The wallet only reads claims of tokens it received from
+ * the DFX API over TLS (e.g. expiry, account, passkey credential); it never trusts them for key decisions.
+ */
+export function decodeJwtPayload(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3 || !parts[1])
+        throw new WalletError('invalid-jwt', 'Malformed JWT');
+    let payload;
+    try {
+        payload = JSON.parse(bytesToUtf8(base64UrlDecode(parts[1])));
+    }
+    catch (error) {
+        throw new WalletError('invalid-jwt', 'Malformed JWT payload', { cause: error });
+    }
+    if (typeof payload !== 'object' || payload === null || Array.isArray(payload)) {
+        throw new WalletError('invalid-jwt', 'JWT payload is not an object');
+    }
+    return payload;
+}
+//# sourceMappingURL=jwt.js.map

package/dist/util/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/util/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAA6C,KAAa;IACxF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAE3F,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,aAAa,EAAE,uBAAuB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,WAAW,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,OAAY,CAAC;AACtB,CAAC"}

package/dist/util/kv-store.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Persistent key-value storage for local wallet data (never secrets). Entries are grouped in namespaces, e.g.
+ * one per wallet and data kind, so several wallets on one device stay separated. Values must be
+ * structured-cloneable; they are stored and returned as copies.
+ */
+export interface KeyValueStore {
+    get<T = unknown>(namespace: string, key: string): Promise<T | undefined>;
+    set(namespace: string, key: string, value: unknown): Promise<void>;
+    delete(namespace: string, key: string): Promise<void>;
+    /** Keys of a namespace in ascending order. */
+    keys(namespace: string): Promise<string[]>;
+    /** Removes every entry of a namespace. */
+    clear(namespace: string): Promise<void>;
+}
+export declare const WALLET_DB_NAME = "dfx-wallet";
+/** In-memory store for tests, server-side rendering and browsers without IndexedDB. */
+export declare class MemoryKeyValueStore implements KeyValueStore {
+    private readonly data;
+    get<T = unknown>(namespace: string, key: string): Promise<T | undefined>;
+    set(namespace: string, key: string, value: unknown): Promise<void>;
+    delete(namespace: string, key: string): Promise<void>;
+    keys(namespace: string): Promise<string[]>;
+    clear(namespace: string): Promise<void>;
+}
+export interface IndexedDbKeyValueStoreOptions {
+    /** Database name, default `dfx-wallet`. */
+    name?: string;
+    /** IndexedDB implementation, default `globalThis.indexedDB`. */
+    indexedDB?: IDBFactory;
+    /** Key range constructor of the same implementation, default `globalThis.IDBKeyRange`. */
+    keyRange?: typeof IDBKeyRange;
+}
+/** IndexedDB store: one object store with compound keys `[namespace, key]`. */
+export declare class IndexedDbKeyValueStore implements KeyValueStore {
+    private readonly name;
+    private readonly factory?;
+    private readonly keyRange?;
+    private db?;
+    constructor(options?: IndexedDbKeyValueStoreOptions);
+    get<T = unknown>(namespace: string, key: string): Promise<T | undefined>;
+    set(namespace: string, key: string, value: unknown): Promise<void>;
+    delete(namespace: string, key: string): Promise<void>;
+    keys(namespace: string): Promise<string[]>;
+    clear(namespace: string): Promise<void>;
+    private namespaceRange;
+    private open;
+    private run;
+}
+/** IndexedDB store when the platform has IndexedDB, otherwise an in-memory store. */
+export declare function createDefaultKeyValueStore(): KeyValueStore;
+//# sourceMappingURL=kv-store.d.ts.map

package/dist/util/kv-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kv-store.d.ts","sourceRoot":"","sources":["../../src/util/kv-store.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IACzE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,8CAA8C;IAC9C,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,0CAA0C;IAC1C,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED,eAAO,MAAM,cAAc,eAAe,CAAC;AAK3C,uFAAuF;AACvF,qBAAa,mBAAoB,YAAW,aAAa;IACvD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA2C;IAE1D,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAMxE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAWlE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOrD,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAK1C,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAI9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,OAAO,WAAW,CAAC;CAC/B;AAED,+EAA+E;AAC/E,qBAAa,sBAAuB,YAAW,aAAa;IAC1D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAa;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAqB;IAC/C,OAAO,CAAC,EAAE,CAAC,CAAuB;gBAEtB,OAAO,GAAE,6BAAkC;IAMjD,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAKxE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrD,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAO1C,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,IAAI;YA+BE,GAAG;CAclB;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,IAAI,aAAa,CAE1D"}

package/dist/util/kv-store.js

@@ -0,0 +1,133 @@
+import { WalletError } from './errors';
+export const WALLET_DB_NAME = 'dfx-wallet';
+const DB_VERSION = 1;
+const OBJECT_STORE = 'kv';
+/** In-memory store for tests, server-side rendering and browsers without IndexedDB. */
+export class MemoryKeyValueStore {
+    constructor() {
+        this.data = new Map();
+    }
+    async get(namespace, key) {
+        checkKey(namespace, key);
+        const entries = this.data.get(namespace);
+        return entries?.has(key) ? structuredClone(entries.get(key)) : undefined;
+    }
+    async set(namespace, key, value) {
+        checkKey(namespace, key);
+        const copy = structuredClone(value);
+        let entries = this.data.get(namespace);
+        if (!entries) {
+            entries = new Map();
+            this.data.set(namespace, entries);
+        }
+        entries.set(key, copy);
+    }
+    async delete(namespace, key) {
+        checkKey(namespace, key);
+        const entries = this.data.get(namespace);
+        entries?.delete(key);
+        if (entries?.size === 0)
+            this.data.delete(namespace);
+    }
+    async keys(namespace) {
+        checkNamespace(namespace);
+        return Array.from(this.data.get(namespace)?.keys() ?? []).sort();
+    }
+    async clear(namespace) {
+        checkNamespace(namespace);
+        this.data.delete(namespace);
+    }
+}
+/** IndexedDB store: one object store with compound keys `[namespace, key]`. */
+export class IndexedDbKeyValueStore {
+    constructor(options = {}) {
+        this.name = options.name ?? WALLET_DB_NAME;
+        this.factory = options.indexedDB ?? globalThis.indexedDB;
+        this.keyRange = options.keyRange ?? globalThis.IDBKeyRange;
+    }
+    async get(namespace, key) {
+        checkKey(namespace, key);
+        return (await this.run('readonly', (store) => store.get([namespace, key])));
+    }
+    async set(namespace, key, value) {
+        checkKey(namespace, key);
+        await this.run('readwrite', (store) => store.put(value, [namespace, key]));
+    }
+    async delete(namespace, key) {
+        checkKey(namespace, key);
+        await this.run('readwrite', (store) => store.delete([namespace, key]));
+    }
+    async keys(namespace) {
+        checkNamespace(namespace);
+        const range = this.namespaceRange(namespace);
+        const keys = await this.run('readonly', (store) => store.getAllKeys(range));
+        return keys.map((compound) => compound[1]);
+    }
+    async clear(namespace) {
+        checkNamespace(namespace);
+        const range = this.namespaceRange(namespace);
+        await this.run('readwrite', (store) => store.delete(range));
+    }
+    // [namespace] sorts before every [namespace, key], and an array sorts after every string, so
+    // [namespace, []] is an upper bound for all string keys of the namespace.
+    namespaceRange(namespace) {
+        if (!this.keyRange)
+            throw new WalletError('storage-unavailable', 'IDBKeyRange is not available');
+        return this.keyRange.bound([namespace], [namespace, []]);
+    }
+    open() {
+        if (!this.db) {
+            const factory = this.factory;
+            const db = new Promise((resolve, reject) => {
+                if (!factory)
+                    throw new WalletError('storage-unavailable', 'IndexedDB is not available');
+                const request = factory.open(this.name, DB_VERSION);
+                request.onupgradeneeded = () => {
+                    if (!request.result.objectStoreNames.contains(OBJECT_STORE))
+                        request.result.createObjectStore(OBJECT_STORE);
+                };
+                request.onsuccess = () => {
+                    const opened = request.result;
+                    // Let a newer version in another tab upgrade the database; the next call reopens it.
+                    opened.onversionchange = () => {
+                        opened.close();
+                        this.db = undefined;
+                    };
+                    resolve(opened);
+                };
+                request.onerror = () => reject(new WalletError('storage-unavailable', 'IndexedDB could not be opened', { cause: request.error }));
+            });
+            // A failed open is retried on the next call.
+            db.catch(() => {
+                if (this.db === db)
+                    this.db = undefined;
+            });
+            this.db = db;
+        }
+        return this.db;
+    }
+    async run(mode, operation) {
+        const db = await this.open();
+        return new Promise((resolve, reject) => {
+            const transaction = db.transaction(OBJECT_STORE, mode);
+            const request = operation(transaction.objectStore(OBJECT_STORE));
+            transaction.oncomplete = () => resolve(request.result);
+            transaction.onerror = () => reject(new WalletError('storage-failed', 'IndexedDB request failed', { cause: request.error ?? transaction.error }));
+            transaction.onabort = () => reject(new WalletError('storage-failed', 'IndexedDB transaction aborted', { cause: transaction.error }));
+        });
+    }
+}
+/** IndexedDB store when the platform has IndexedDB, otherwise an in-memory store. */
+export function createDefaultKeyValueStore() {
+    return typeof globalThis.indexedDB !== 'undefined' ? new IndexedDbKeyValueStore() : new MemoryKeyValueStore();
+}
+function checkNamespace(namespace) {
+    if (typeof namespace !== 'string' || !namespace)
+        throw new WalletError('invalid-storage-key', 'Empty namespace');
+}
+function checkKey(namespace, key) {
+    checkNamespace(namespace);
+    if (typeof key !== 'string')
+        throw new WalletError('invalid-storage-key', 'Key must be a string');
+}
+//# sourceMappingURL=kv-store.js.map

package/dist/util/kv-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kv-store.js","sourceRoot":"","sources":["../../src/util/kv-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAiBvC,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC;AAE3C,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,uFAAuF;AACvF,MAAM,OAAO,mBAAmB;IAAhC;QACmB,SAAI,GAAG,IAAI,GAAG,EAAgC,CAAC;IAmClE,CAAC;IAjCC,KAAK,CAAC,GAAG,CAAc,SAAiB,EAAE,GAAW;QACnD,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,GAAW,EAAE,KAAc;QACtD,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAW;QACzC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,OAAO,EAAE,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,cAAc,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB;QAC3B,cAAc,CAAC,SAAS,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;CACF;AAWD,+EAA+E;AAC/E,MAAM,OAAO,sBAAsB;IAMjC,YAAY,UAAyC,EAAE;QACrD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC;QACzD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAC,WAAW,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,SAAiB,EAAE,GAAW;QACnD,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzB,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAkB,CAAC;IAC/F,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,GAAW,EAAE,KAAc;QACtD,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAW;QACzC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,cAAc,CAAC,SAAS,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAE,QAA6B,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB;QAC3B,cAAc,CAAC,SAAS,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,6FAA6F;IAC7F,0EAA0E;IAClE,cAAc,CAAC,SAAiB;QACtC,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,8BAA8B,CAAC,CAAC;QACjG,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,GAAG,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACtD,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,4BAA4B,CAAC,CAAC;gBAEzF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBACpD,OAAO,CAAC,eAAe,GAAG,GAAG,EAAE;oBAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC;wBAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;gBAC9G,CAAC,CAAC;gBACF,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE;oBACvB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;oBAC9B,qFAAqF;oBACrF,MAAM,CAAC,eAAe,GAAG,GAAG,EAAE;wBAC5B,MAAM,CAAC,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC;oBACtB,CAAC,CAAC;oBACF,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC,CAAC;gBACF,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CACrB,MAAM,CAAC,IAAI,WAAW,CAAC,qBAAqB,EAAE,+BAA+B,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC9G,CAAC,CAAC,CAAC;YACH,6CAA6C;YAC7C,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;gBACZ,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;oBAAE,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC;YAC1C,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,GAAG,CAAI,IAAwB,EAAE,SAAmD;QAChG,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;YACjE,WAAW,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvD,WAAW,CAAC,OAAO,GAAG,GAAG,EAAE,CACzB,MAAM,CACJ,IAAI,WAAW,CAAC,gBAAgB,EAAE,0BAA0B,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,CAC7G,CAAC;YACJ,WAAW,CAAC,OAAO,GAAG,GAAG,EAAE,CACzB,MAAM,CAAC,IAAI,WAAW,CAAC,gBAAgB,EAAE,+BAA+B,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7G,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,qFAAqF;AACrF,MAAM,UAAU,0BAA0B;IACxC,OAAO,OAAO,UAAU,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,mBAAmB,EAAE,CAAC;AAChH,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACvC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,CAAC;AACnH,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiB,EAAE,GAAW;IAC9C,cAAc,CAAC,SAAS,CAAC,CAAC;IAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,sBAAsB,CAAC,CAAC;AACpG,CAAC"}

package/dist/util/random.d.ts

@@ -0,0 +1,3 @@
+/** Cryptographically secure random bytes from the platform CSPRNG (Web Crypto). */
+export declare function randomBytes(length: number): Uint8Array;
+//# sourceMappingURL=random.d.ts.map

package/dist/util/random.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"random.d.ts","sourceRoot":"","sources":["../../src/util/random.ts"],"names":[],"mappings":"AAKA,mFAAmF;AACnF,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAatD"}

package/dist/util/random.js

@@ -0,0 +1,18 @@
+import { WalletError } from './errors';
+// crypto.getRandomValues fills at most 65536 bytes per call.
+const MAX_CHUNK = 65536;
+/** Cryptographically secure random bytes from the platform CSPRNG (Web Crypto). */
+export function randomBytes(length) {
+    if (!Number.isSafeInteger(length) || length < 0)
+        throw new RangeError(`Invalid random byte length: ${length}`);
+    const crypto = globalThis.crypto;
+    if (typeof crypto?.getRandomValues !== 'function') {
+        throw new WalletError('csprng-unavailable', 'crypto.getRandomValues is not available');
+    }
+    const bytes = new Uint8Array(length);
+    for (let offset = 0; offset < length; offset += MAX_CHUNK) {
+        crypto.getRandomValues(bytes.subarray(offset, Math.min(offset + MAX_CHUNK, length)));
+    }
+    return bytes;
+}
+//# sourceMappingURL=random.js.map

package/dist/util/random.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"random.js","sourceRoot":"","sources":["../../src/util/random.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,6DAA6D;AAC7D,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB,mFAAmF;AACnF,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;IAE/G,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,IAAI,OAAO,MAAM,EAAE,eAAe,KAAK,UAAU,EAAE,CAAC;QAClD,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,yCAAyC,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAC1D,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -1,6 +1,44 @@
 {
+  "private": false,
   "name": "@dfx.swiss/wallet",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1-beta.0",
+  "description": "Self-custodial passkey seed wallet core for the DFX.swiss app (Bitcoin, EVM, Spark)",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/DFXswiss/packages.git"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc -b ./tsconfig.build.json",
+    "clean": "rm -rf ./dist/ && rm -rf ./tsconfig.build.tsbuildinfo",
+    "test": "jest",
+    "lint": "eslint src --ext .ts",
+    "lint:fix": "eslint src --ext .ts --fix",
+    "format": "prettier --write src",
+    "format:check": "prettier --check src",
+    "pack": "npm pack"
+  },
+  "dependencies": {
+    "@dfx.swiss/core": "^0.7.6-beta.0",
+    "@noble/curves": "~1.9.1",
+    "@noble/hashes": "~1.8.0",
+    "@scure/base": "~1.2.5",
+    "@scure/bip32": "1.7.0",
+    "@scure/bip39": "1.6.0"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.5.14",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.4.9",
+    "typescript": "^5.7.0"
+  }
+}