@guveno/wallet-sdk 1.0.0 → 1.0.2

package/dist/types.d.ts

@@ -1,187 +1,11 @@
 export type MnemonicWordCount = 12 | 24;
 export type SupportedChain = 'ethereum' | 'bitcoin' | 'xrp' | 'polkadot';
 export type SupportedNetwork = 'mainnet' | 'sepolia' | 'testnet' | 'paseo';
-export interface EncryptionStatus {
-    enabled: boolean;
-    algorithm: 'aes-256-gcm' | null;
-    kdf: 'scrypt' | null;
-}
-export interface DerivedAccount {
-    chain: SupportedChain;
-    network: SupportedNetwork;
-    address: string;
-    derivationPath: string;
-    index: number;
-    label: string | null;
-    createdAt: string;
-    updatedAt: string;
-}
-export interface WalletGroupSummary {
-    id: string;
-    keyId: string;
-    keyFingerprint: string;
-    name: string;
-    chain: SupportedChain;
-    network: SupportedNetwork;
-    firstAddress: string;
-    addressCount: number;
-    createdAt: string;
-    updatedAt: string;
-    encryption: EncryptionStatus;
-}
-export interface WalletGroup extends WalletGroupSummary {
-    accounts: DerivedAccount[];
-}
-export interface WalletKeySummary {
-    id: string;
-    fingerprint: string;
-    walletCount: number;
-    createdAt: string;
-    updatedAt: string;
-    encryption: EncryptionStatus;
-}
-export interface WalletGroupMetadataExport {
-    version: number;
-    exportedAt: string;
-    key: WalletKeySummary;
-    wallet: WalletGroupSummary;
-    addresses: DerivedAccount[];
-}
-export interface CreateWalletGroupOptions {
-    name: string;
-    chain?: SupportedChain;
-    network?: SupportedNetwork;
-    words?: MnemonicWordCount;
-    accountLabel?: string | null;
-    encryptionPassword?: string;
-}
-export interface CreateWalletGroupResult {
-    group: WalletGroup;
-    firstAccount: DerivedAccount;
-    mnemonic: string;
-}
-export interface ImportWalletGroupOptions {
-    name: string;
-    chain?: SupportedChain;
-    network?: SupportedNetwork;
-    mnemonic: string;
-    accountLabel?: string | null;
-    encryptionPassword?: string;
-}
-export interface ImportWalletGroupResult {
-    group: WalletGroup;
-    account: DerivedAccount;
-    reusedExistingGroup: boolean;
-}
-export interface DeriveAddressOptions {
-    group: string;
-    label?: string | null;
-    encryptionPassword?: string;
-}
-export interface LabelAccountOptions {
-    group: string;
-    index: number;
-    label?: string | null;
-}
-export interface WalletManagerOptions {
-    storageDir?: string;
-    store?: WalletStore;
-}
-export interface EncryptedSecretEnvelope {
-    algorithm: 'aes-256-gcm';
-    kdf: 'scrypt';
-    salt: string;
-    iv: string;
-    tag: string;
-    ciphertext: string;
-    kdfParams: {
-        cost: number;
-        blockSize: number;
-        parallelization: number;
-        keyLength: number;
-    };
-}
-export interface EncryptedStoredSecretRecord {
-    keyId: string;
-    type: 'encrypted';
-    envelope: EncryptedSecretEnvelope;
-}
-export type StoredSecretRecord = EncryptedStoredSecretRecord;
-export interface StoredWalletKey {
-    id: string;
-    fingerprint: string;
-    encryption: EncryptionStatus;
-    createdAt: string;
-    updatedAt: string;
-}
-export interface StoredWallet {
-    id: string;
-    keyId: string;
-    name: string;
-    chain: SupportedChain;
-    network: SupportedNetwork;
-    nextAccountIndex: number;
-    createdAt: string;
-    updatedAt: string;
-}
-export interface StoredWalletAddress {
-    id: string;
-    walletId: string;
-    chain: SupportedChain;
-    network: SupportedNetwork;
-    address: string;
-    derivationPath: string;
-    index: number;
-    label: string | null;
-    createdAt: string;
-    updatedAt: string;
-}
-export interface StoredMetadataFile {
-    version: number;
-    keys: StoredWalletKey[];
-    wallets: StoredWallet[];
-    addresses: StoredWalletAddress[];
-}
-export interface StoredSecretsFile {
-    version: number;
-    keys: StoredSecretRecord[];
-}
-export interface StorageState {
-    metadata: StoredMetadataFile;
-    secrets: StoredSecretsFile;
-}
-export interface WalletGroupMetadataJson {
-    version: number;
-    key: StoredWalletKey;
-    wallet: StoredWallet;
-    addresses: StoredWalletAddress[];
-}
-export interface WalletGroupSecretsJson {
-    version: number;
-    secret: EncryptedStoredSecretRecord;
-}
+/** A derived address pushed to the server as part of a wallet record. */
 export interface WalletRecordAddressExport {
     address: string;
     derivationPath: string;
     accountIndex: number;
     label: string | null;
 }
-export interface WalletGroupRecordExport {
-    groupName: string;
-    chain: SupportedChain;
-    keyFingerprint: string;
-    metadataJson: WalletGroupMetadataJson;
-    secretsJson: WalletGroupSecretsJson;
-    addresses: WalletRecordAddressExport[];
-}
-export interface WalletStore {
-    read(): Promise<StorageState>;
-    mutate<T>(mutator: (state: StorageState) => Promise<{
-        result: T;
-        state: StorageState;
-    }> | {
-        result: T;
-        state: StorageState;
-    }): Promise<T>;
-}
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,CAAC;AACxC,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,KAAK,GAAG,UAAU,CAAC;AACzE,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE3E,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,aAAa,GAAG,IAAI,CAAC;IAChC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,WAAY,SAAQ,kBAAkB;IACrD,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,gBAAgB,CAAC;IACtB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,WAAW,CAAC;IACnB,YAAY,EAAE,cAAc,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,aAAa,CAAC;IACzB,GAAG,EAAE,QAAQ,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,uBAAuB,CAAC;CACnC;AAED,MAAM,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AAE7D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,eAAe,EAAE,CAAC;IACxB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,SAAS,EAAE,mBAAmB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,kBAAkB,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,eAAe,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,mBAAmB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,2BAA2B,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,cAAc,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,uBAAuB,CAAC;IACtC,WAAW,EAAE,sBAAsB,CAAC;IACpC,SAAS,EAAE,yBAAyB,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9B,MAAM,CAAC,CAAC,EACN,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,CAAC,CAAC;QAAC,KAAK,EAAE,YAAY,CAAA;KAAE,CAAC,GAAG;QAAE,MAAM,EAAE,CAAC,CAAC;QAAC,KAAK,EAAE,YAAY,CAAA;KAAE,GACjH,OAAO,CAAC,CAAC,CAAC,CAAC;CACf"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,CAAC;AACxC,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,KAAK,GAAG,UAAU,CAAC;AACzE,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE3E,yEAAyE;AACzE,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB"}

package/dist/wallet-service.d.ts

@@ -0,0 +1,75 @@
+import { EncryptionSession } from './encryption-session.js';
+import type { GuvenoApiClient } from './api/client.js';
+import type { ApiPageInfo, ApiWalletAddress, ApiWalletDetail, ApiWalletSummary, ListApiAddressOptions, ListApiWalletOptions } from './api/types.js';
+import type { MnemonicWordCount, SupportedChain, SupportedNetwork, WalletRecordAddressExport } from './types.js';
+export interface WalletServiceOptions {
+    /** API client configured with a `gv_live_...` key. */
+    api: GuvenoApiClient;
+    /** Unlocked encryption session used to seal/unseal wallet secrets. */
+    session: EncryptionSession;
+}
+export interface CreateWalletOptions {
+    name: string;
+    chain: SupportedChain;
+    network: SupportedNetwork;
+    /** Recovery-phrase length. Defaults to 12. */
+    words?: MnemonicWordCount;
+    /** Label for the first derived address. */
+    label?: string | null;
+}
+export interface CreateWalletResult {
+    wallet: ApiWalletDetail;
+    firstAddress: WalletRecordAddressExport;
+    /**
+     * The generated recovery phrase. Surface it to the user once for backup; it is
+     * also recoverable later from the server (sealed) via {@link WalletService.revealMnemonic}.
+     */
+    mnemonic: string;
+}
+export interface ImportWalletOptions {
+    name: string;
+    chain: SupportedChain;
+    network: SupportedNetwork;
+    mnemonic: string;
+    label?: string | null;
+}
+export interface DeriveAddressOptions {
+    label?: string | null;
+}
+export interface DeriveAddressResult {
+    address: WalletRecordAddressExport;
+    wallet: ApiWalletDetail;
+}
+/**
+ * Server-source-of-truth wallet manager. Mirrors how the web client works: the
+ * recovery phrase is generated locally, sealed to the user's encryption key, and
+ * pushed to the server; it is re-fetched and unsealed on demand to derive
+ * addresses or reveal the phrase. Nothing authoritative is stored on disk — the
+ * server holds the wallet, its addresses, and the (sealed) secret.
+ */
+export declare class WalletService {
+    private readonly api;
+    private readonly session;
+    constructor(options: WalletServiceOptions);
+    /** Generate a new wallet, derive its first address, and register it on the server. */
+    createWallet(options: CreateWalletOptions): Promise<CreateWalletResult>;
+    /** Import an existing recovery phrase as a new server-side wallet. */
+    importWallet(options: ImportWalletOptions): Promise<ApiWalletDetail>;
+    /**
+     * Derive the next address for a wallet and register it on the server. Uses the
+     * server's `nextAccountIndex` as the source of truth, so concurrent machines
+     * stay consistent. Returns the new address and the refreshed wallet detail.
+     */
+    deriveAddress(walletId: number, options?: DeriveAddressOptions): Promise<DeriveAddressResult>;
+    /** Fetch and decrypt a wallet's recovery phrase from the server (audited server-side). */
+    revealMnemonic(walletId: number): Promise<string>;
+    listWallets(options?: ListApiWalletOptions): Promise<ApiWalletSummary[]>;
+    getWallet(walletId: number): Promise<ApiWalletDetail>;
+    listAddresses(walletId: number, options?: ListApiAddressOptions): Promise<{
+        items: ApiWalletAddress[];
+        pageInfo: ApiPageInfo;
+    }>;
+    private pushNewWallet;
+    private revealMnemonicForWallet;
+}
+//# sourceMappingURL=wallet-service.d.ts.map

package/dist/wallet-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-service.d.ts","sourceRoot":"","sources":["../src/wallet-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,EACV,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAEjH,MAAM,WAAW,oBAAoB;IACnC,sDAAsD;IACtD,GAAG,EAAE,eAAe,CAAC;IACrB,sEAAsE;IACtE,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,8CAA8C;IAC9C,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,eAAe,CAAC;IACxB,YAAY,EAAE,yBAAyB,CAAC;IACxC;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,yBAAyB,CAAC;IACnC,MAAM,EAAE,eAAe,CAAC;CACzB;AAUD;;;;;;GAMG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAkB;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;gBAEhC,OAAO,EAAE,oBAAoB;IAKzC,sFAAsF;IAChF,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAiB7E,sEAAsE;IAChE,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC;IAgB1E;;;;OAIG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAoBvG,0FAA0F;IACpF,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIjD,WAAW,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAI5E,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAIrD,aAAa,CACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC;QAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QAAC,QAAQ,EAAE,WAAW,CAAA;KAAE,CAAC;YAIlD,aAAa;YA2Bb,uBAAuB;CAItC"}

package/dist/wallet-service.js

@@ -0,0 +1,113 @@
+import { assertSupportedChain, assertSupportedNetwork } from './chains.js';
+import { deriveAddress } from './derivation.js';
+import { assertValidMnemonic, fingerprintMnemonic, generateRandomMnemonic } from './mnemonic.js';
+function normalizeLabel(label) {
+    if (label == null) {
+        return null;
+    }
+    const normalized = label.trim();
+    return normalized.length === 0 ? null : normalized;
+}
+/**
+ * Server-source-of-truth wallet manager. Mirrors how the web client works: the
+ * recovery phrase is generated locally, sealed to the user's encryption key, and
+ * pushed to the server; it is re-fetched and unsealed on demand to derive
+ * addresses or reveal the phrase. Nothing authoritative is stored on disk — the
+ * server holds the wallet, its addresses, and the (sealed) secret.
+ */
+export class WalletService {
+    api;
+    session;
+    constructor(options) {
+        this.api = options.api;
+        this.session = options.session;
+    }
+    /** Generate a new wallet, derive its first address, and register it on the server. */
+    async createWallet(options) {
+        const chain = assertSupportedChain(options.chain);
+        const network = assertSupportedNetwork(options.network);
+        const words = options.words ?? 12;
+        const mnemonic = generateRandomMnemonic(words);
+        const { wallet, firstAddress } = await this.pushNewWallet({
+            name: options.name,
+            chain,
+            network,
+            mnemonic,
+            label: options.label
+        });
+        return { wallet, firstAddress, mnemonic };
+    }
+    /** Import an existing recovery phrase as a new server-side wallet. */
+    async importWallet(options) {
+        const chain = assertSupportedChain(options.chain);
+        const network = assertSupportedNetwork(options.network);
+        const mnemonic = assertValidMnemonic(options.mnemonic);
+        const { wallet } = await this.pushNewWallet({
+            name: options.name,
+            chain,
+            network,
+            mnemonic,
+            label: options.label
+        });
+        return wallet;
+    }
+    /**
+     * Derive the next address for a wallet and register it on the server. Uses the
+     * server's `nextAccountIndex` as the source of truth, so concurrent machines
+     * stay consistent. Returns the new address and the refreshed wallet detail.
+     */
+    async deriveAddress(walletId, options = {}) {
+        const detail = await this.api.getWalletRecord(walletId);
+        const mnemonic = await this.revealMnemonicForWallet(walletId);
+        const derived = await deriveAddress(mnemonic, detail.nextAccountIndex, {
+            chain: detail.chain,
+            network: detail.network
+        });
+        const address = {
+            address: derived.address,
+            derivationPath: derived.derivationPath,
+            accountIndex: derived.index,
+            label: normalizeLabel(options.label)
+        };
+        // PATCH is additive — sending only the new address registers it without
+        // disturbing the existing ones.
+        const wallet = await this.api.updateWalletRecord(walletId, { addresses: [address] });
+        return { address, wallet };
+    }
+    /** Fetch and decrypt a wallet's recovery phrase from the server (audited server-side). */
+    async revealMnemonic(walletId) {
+        return this.revealMnemonicForWallet(walletId);
+    }
+    async listWallets(options = {}) {
+        return this.api.listWalletRecords(options);
+    }
+    async getWallet(walletId) {
+        return this.api.getWalletRecord(walletId);
+    }
+    async listAddresses(walletId, options = {}) {
+        return this.api.listWalletAddresses(walletId, options);
+    }
+    async pushNewWallet(input) {
+        const derived = await deriveAddress(input.mnemonic, 0, { chain: input.chain, network: input.network });
+        const firstAddress = {
+            address: derived.address,
+            derivationPath: derived.derivationPath,
+            accountIndex: derived.index,
+            label: normalizeLabel(input.label)
+        };
+        const wallet = await this.api.createWalletRecord({
+            name: input.name,
+            chain: input.chain,
+            network: input.network,
+            keyFingerprint: fingerprintMnemonic(input.mnemonic),
+            encryptedSecretJson: this.session.seal(input.mnemonic),
+            addresses: [firstAddress]
+        });
+        return { wallet, firstAddress };
+    }
+    async revealMnemonicForWallet(walletId) {
+        const secret = await this.api.getWalletKeySecret(walletId);
+        return this.session.unsealRecord(secret.encryptedSecretJson);
+    }
+}
+//# sourceMappingURL=wallet-service.js.map

package/dist/wallet-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-service.js","sourceRoot":"","sources":["../src/wallet-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAwDjG,SAAS,cAAc,CAAC,KAAgC;IACtD,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IACP,GAAG,CAAkB;IACrB,OAAO,CAAoB;IAE5C,YAAY,OAA6B;QACvC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,YAAY,CAAC,OAA4B;QAC7C,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,KAAK,GAAsB,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAE/C,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YACxD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK;YACL,OAAO;YACP,QAAQ;YACR,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;QAEH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,YAAY,CAAC,OAA4B;QAC7C,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEvD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK;YACL,OAAO;YACP,QAAQ;YACR,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,UAAgC,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,EAAE;YACrE,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,MAAM,OAAO,GAA8B;YACzC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,YAAY,EAAE,OAAO,CAAC,KAAK;YAC3B,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;SACrC,CAAC;QAEF,wEAAwE;QACxE,gCAAgC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,OAAO,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAAgC,EAAE;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,QAAgB,EAChB,UAAiC,EAAE;QAEnC,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,KAM3B;QACC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACvG,MAAM,YAAY,GAA8B;YAC9C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,YAAY,EAAE,OAAO,CAAC,KAAK;YAC3B,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;SACnC,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAC/C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;YACnD,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAuC;YAC5F,SAAS,EAAE,CAAC,YAAY,CAAC;SAC1B,CAAC,CAAC;QAEH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,QAAgB;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/D,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guveno/wallet-sdk",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Add secure crypto custody to your app in minutes — create and manage multi-chain wallets, automate withdrawals, and receive real-time webhooks for Bitcoin, Ethereum, XRP, and Polkadot. Built for exchanges, fintechs, and platforms.",
   "author": "Guveno LLC",
   "license": "MIT",
@@ -26,14 +26,7 @@
     "crypto",
     "custody"
   ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/hollaex/guveno-sdk.git"
-  },
-  "homepage": "https://github.com/hollaex/guveno-sdk#readme",
-  "bugs": {
-    "url": "https://github.com/hollaex/guveno-sdk/issues"
-  },
+  "homepage": "https://guveno.com",
   "files": [
     "dist",
     "README.md",

package/dist/manager.d.ts

@@ -1,28 +0,0 @@
-import type { CreateApiWalletInput } from './api/types.js';
-import type { CreateWalletGroupOptions, CreateWalletGroupResult, DeriveAddressOptions, DerivedAccount, ImportWalletGroupOptions, ImportWalletGroupResult, LabelAccountOptions, WalletGroup, WalletGroupMetadataExport, WalletGroupRecordExport, WalletGroupSummary, WalletManagerOptions, WalletStore } from './types.js';
-type EncryptionPasswordCarrier = {
-    encryptionPassword?: string;
-};
-export declare class WalletManager {
-    readonly store: WalletStore;
-    constructor(options?: WalletManagerOptions);
-    createWalletGroup(options: CreateWalletGroupOptions): Promise<CreateWalletGroupResult>;
-    importWalletGroup(options: ImportWalletGroupOptions): Promise<ImportWalletGroupResult>;
-    deriveAddress(options: DeriveAddressOptions): Promise<DerivedAccount>;
-    listWalletGroups(): Promise<WalletGroupSummary[]>;
-    getWalletGroup(groupIdentifier: string): Promise<WalletGroup>;
-    getFirstAddress(groupIdentifier: string): Promise<DerivedAccount>;
-    listDerivedAccounts(groupIdentifier: string): Promise<DerivedAccount[]>;
-    renameWalletGroup(groupIdentifier: string, newName: string): Promise<WalletGroup>;
-    labelAccount(options: LabelAccountOptions): Promise<DerivedAccount>;
-    exportWalletGroupMetadata(groupIdentifier: string): Promise<WalletGroupMetadataExport>;
-    exportWalletGroupRecord(groupIdentifier: string, options?: EncryptionPasswordCarrier): Promise<WalletGroupRecordExport>;
-    exportWalletForApi(groupIdentifier: string, options: EncryptionPasswordCarrier & {
-        recipientPublicKey: string;
-    }): Promise<CreateApiWalletInput>;
-    revealMnemonic(groupIdentifier: string, encryptionPassword?: string): Promise<string>;
-}
-export declare class EthereumWalletManager extends WalletManager {
-}
-export {};
-//# sourceMappingURL=manager.d.ts.map

package/dist/manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../src/manager.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,EACV,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EAEd,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EAQnB,WAAW,EACX,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAElB,oBAAoB,EACpB,WAAW,EACZ,MAAM,YAAY,CAAC;AAgKpB,KAAK,yBAAyB,GAAG;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AA+GF,qBAAa,aAAa;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;gBAEhB,OAAO,GAAE,oBAAyB;IAIxC,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAyDtF,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA6GtF,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC;IAiCrE,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IASjD,cAAc,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAW7D,eAAe,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAWjE,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAKvE,iBAAiB,CAAC,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAqBjF,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IA+BnE,yBAAyB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAuBtF,uBAAuB,CAC3B,eAAe,EAAE,MAAM,EACvB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,uBAAuB,CAAC;IAwC7B,kBAAkB,CACtB,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,yBAAyB,GAAG;QAAE,kBAAkB,EAAE,MAAM,CAAA;KAAE,GAClE,OAAO,CAAC,oBAAoB,CAAC;IAc1B,cAAc,CAAC,eAAe,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAW5F;AAED,qBAAa,qBAAsB,SAAQ,aAAa;CAAG"}