@guveno/wallet-sdk 1.0.0

package/dist/signing/types.d.ts

@@ -0,0 +1,84 @@
+import type { SupportedChain, SupportedNetwork } from '../types.js';
+/** Asset details the server includes in the signing payload (base-unit conversion + ERC20 calldata). */
+export interface SigningAsset {
+    id: number;
+    key: string;
+    symbol: string;
+    type: 'native' | 'erc20';
+    decimals: number;
+    contractAddress: string | null;
+}
+export interface EthereumChainState {
+    nonce: number;
+    chainId: number;
+    maxFeePerGas: string;
+    maxPriorityFeePerGas: string;
+    gasLimit: string;
+}
+export interface BitcoinChainState {
+    utxos: Array<{
+        txid: string;
+        vout: number;
+        value: number;
+        scriptPubKey?: string;
+    }>;
+    feeRate: number;
+    changeAddress: string;
+}
+export interface XrpChainState {
+    sequence: number;
+    fee: string;
+    lastLedgerSequence: number;
+}
+export interface PolkadotChainState {
+    nonce: number;
+    genesisHash: string;
+    /** Recent block the mortal era is anchored to (with {@link eraPeriod}). */
+    blockHash: string;
+    blockNumber: number;
+    specVersion: number;
+    transactionVersion: number;
+    /** SCALE-encoded runtime metadata (hex) — used to encode the call fully offline. */
+    metadataRpc: string;
+    /** Tip in plancks (base units), as a decimal string. Usually "0". */
+    tip: string;
+    /** Mortal era length in blocks. */
+    eraPeriod: number;
+    /** Best-effort fee estimate in plancks; informational only. */
+    suggestedFee: string;
+}
+export type ChainState = EthereumChainState | BitcoinChainState | XrpChainState | PolkadotChainState;
+export interface BitcoinOutput {
+    toAddress: string;
+    amount: string;
+}
+/**
+ * Returned by `prepareWithdrawal`. Carries intent plus the chain state needed to
+ * build a signable raw transaction. `chainState` is undefined for chains whose
+ * server-side support isn't wired up yet — `signWithdrawal` rejects those.
+ */
+export interface SigningPayload {
+    withdrawalId: number;
+    chain: SupportedChain;
+    network: SupportedNetwork;
+    sourceAddress: string;
+    toAddress: string | null;
+    assetId: number;
+    /** Decimal amount in display units (e.g. "1.5"). Convert with the asset's decimals. */
+    amount: string;
+    outputs: BitcoinOutput[] | null;
+    changeAddress?: string;
+    destinationTag: number | null;
+    expiresAt: string;
+    asset: SigningAsset;
+    chainState?: ChainState;
+}
+/** Thrown when a prepared withdrawal's 15-minute signing window has elapsed. */
+export declare class WithdrawalExpiredError extends Error {
+    constructor();
+}
+/** Thrown when the chain/asset combination has no signer yet. */
+export declare class UnsupportedSigningError extends Error {
+    constructor(chain: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/signing/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/signing/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpE,wGAAwG;AACxG,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oFAAoF;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;IACZ,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,UAAU,GAAG,kBAAkB,GAAG,iBAAiB,GAAG,aAAa,GAAG,kBAAkB,CAAC;AAErG,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,gFAAgF;AAChF,qBAAa,sBAAuB,SAAQ,KAAK;;CAKhD;AAED,iEAAiE;AACjE,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,KAAK,EAAE,MAAM;CAI1B"}

package/dist/signing/types.js

@@ -0,0 +1,15 @@
+/** Thrown when a prepared withdrawal's 15-minute signing window has elapsed. */
+export class WithdrawalExpiredError extends Error {
+    constructor() {
+        super('This withdrawal has expired. Start the send again to refresh it.');
+        this.name = 'WithdrawalExpiredError';
+    }
+}
+/** Thrown when the chain/asset combination has no signer yet. */
+export class UnsupportedSigningError extends Error {
+    constructor(chain) {
+        super(`Signing on ${chain} is not available yet.`);
+        this.name = 'UnsupportedSigningError';
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/signing/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/signing/types.ts"],"names":[],"mappings":"AA+EA,gFAAgF;AAChF,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C;QACE,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,iEAAiE;AACjE,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,KAAa;QACvB,KAAK,CAAC,cAAc,KAAK,wBAAwB,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}

package/dist/storage/crypto.d.ts

@@ -0,0 +1,7 @@
+import type { EncryptedSecretEnvelope, EncryptedStoredSecretRecord, WalletGroupSecretsJson } from '../types.js';
+export declare function assertEncryptionPassword(password: string | undefined): string;
+export declare function encryptMnemonic(mnemonic: string, password: string): Promise<EncryptedSecretEnvelope>;
+export declare function decryptMnemonic(envelope: EncryptedSecretEnvelope, password: string | undefined): Promise<string>;
+export declare function encryptSecretRecord(keyId: string, mnemonic: string, password: string): Promise<EncryptedStoredSecretRecord>;
+export declare function decryptSecretsJson(secretsJson: WalletGroupSecretsJson, password: string | undefined): Promise<string>;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/storage/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/storage/crypto.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,uBAAuB,EACvB,2BAA2B,EAC3B,sBAAsB,EACvB,MAAM,aAAa,CAAC;AAErB,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAM7E;AAUD,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA4B1G;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,uBAAuB,EACjC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,CAAC,MAAM,CAAC,CAoBjB;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,2BAA2B,CAAC,CAMtC;AAED,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,sBAAsB,EACnC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,CAAC,MAAM,CAAC,CAMjB"}

package/dist/storage/crypto.js

@@ -0,0 +1,80 @@
+import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from 'node:crypto';
+import { ENCRYPTION_ALGORITHM, ENCRYPTION_KDF, SCRYPT_PARAMS } from '../constants.js';
+import { EncryptionRequiredError, ValidationError, WrongPassphraseError } from '../errors.js';
+export function assertEncryptionPassword(password) {
+    if (password == null || password.trim().length === 0) {
+        throw new EncryptionRequiredError('An encryption password is required for encrypted wallet groups.');
+    }
+    return password;
+}
+function deriveKey(password, salt) {
+    return scryptSync(password, salt, SCRYPT_PARAMS.keyLength, {
+        N: SCRYPT_PARAMS.cost,
+        r: SCRYPT_PARAMS.blockSize,
+        p: SCRYPT_PARAMS.parallelization
+    });
+}
+export async function encryptMnemonic(mnemonic, password) {
+    const encryptionPassword = assertEncryptionPassword(password);
+    const salt = randomBytes(16);
+    const iv = randomBytes(12);
+    const key = deriveKey(encryptionPassword, salt);
+    try {
+        const cipher = createCipheriv(ENCRYPTION_ALGORITHM, key, iv);
+        const ciphertext = Buffer.concat([cipher.update(mnemonic, 'utf8'), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        return {
+            algorithm: ENCRYPTION_ALGORITHM,
+            kdf: ENCRYPTION_KDF,
+            salt: salt.toString('base64'),
+            iv: iv.toString('base64'),
+            tag: tag.toString('base64'),
+            ciphertext: ciphertext.toString('base64'),
+            kdfParams: {
+                cost: SCRYPT_PARAMS.cost,
+                blockSize: SCRYPT_PARAMS.blockSize,
+                parallelization: SCRYPT_PARAMS.parallelization,
+                keyLength: SCRYPT_PARAMS.keyLength
+            }
+        };
+    }
+    finally {
+        key.fill(0);
+    }
+}
+export async function decryptMnemonic(envelope, password) {
+    const encryptionPassword = assertEncryptionPassword(password);
+    const salt = Buffer.from(envelope.salt, 'base64');
+    const iv = Buffer.from(envelope.iv, 'base64');
+    const tag = Buffer.from(envelope.tag, 'base64');
+    const ciphertext = Buffer.from(envelope.ciphertext, 'base64');
+    const key = deriveKey(encryptionPassword, salt);
+    try {
+        const decipher = createDecipheriv(ENCRYPTION_ALGORITHM, key, iv);
+        decipher.setAuthTag(tag);
+        const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+        return plaintext.toString('utf8');
+    }
+    catch (error) {
+        throw new WrongPassphraseError('Unable to decrypt the mnemonic. The encryption password may be incorrect.', {
+            cause: error
+        });
+    }
+    finally {
+        key.fill(0);
+    }
+}
+export async function encryptSecretRecord(keyId, mnemonic, password) {
+    return {
+        keyId,
+        type: 'encrypted',
+        envelope: await encryptMnemonic(mnemonic, password)
+    };
+}
+export async function decryptSecretsJson(secretsJson, password) {
+    if (secretsJson.secret.type !== 'encrypted') {
+        throw new ValidationError('Wallet secrets must be encrypted before they can be decrypted.');
+    }
+    return decryptMnemonic(secretsJson.secret.envelope, password);
+}
+//# sourceMappingURL=crypto.js.map

package/dist/storage/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/storage/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAO9F,MAAM,UAAU,wBAAwB,CAAC,QAA4B;IACnE,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,uBAAuB,CAAC,iEAAiE,CAAC,CAAC;IACvG,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,IAAY;IAC/C,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa,CAAC,SAAS,EAAE;QACzD,CAAC,EAAE,aAAa,CAAC,IAAI;QACrB,CAAC,EAAE,aAAa,CAAC,SAAS;QAC1B,CAAC,EAAE,aAAa,CAAC,eAAe;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,QAAgB;IACtE,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,oBAAoB,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEhC,OAAO;YACL,SAAS,EAAE,oBAAoB;YAC/B,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3B,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzC,SAAS,EAAE;gBACT,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,SAAS,EAAE,aAAa,CAAC,SAAS;gBAClC,eAAe,EAAE,aAAa,CAAC,eAAe;gBAC9C,SAAS,EAAE,aAAa,CAAC,SAAS;aACnC;SACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAiC,EACjC,QAA4B;IAE5B,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,oBAAoB,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACjE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,oBAAoB,CAAC,2EAA2E,EAAE;YAC1G,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa,EACb,QAAgB,EAChB,QAAgB;IAEhB,OAAO;QACL,KAAK;QACL,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmC,EACnC,QAA4B;IAE5B,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CAAC,gEAAgE,CAAC,CAAC;IAC9F,CAAC;IAED,OAAO,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAChE,CAAC"}

package/dist/storage/file-store.d.ts

@@ -0,0 +1,21 @@
+import type { StorageState, WalletStore } from '../types.js';
+export declare function resolveStorageDir(storageDir?: string): string;
+export declare class FileSystemWalletStore implements WalletStore {
+    readonly rootDir: string;
+    private readonly metadataPath;
+    private readonly secretsPath;
+    private readonly lockPath;
+    constructor(storageDir?: string);
+    read(): Promise<StorageState>;
+    mutate<T>(mutator: (state: StorageState) => Promise<{
+        result: T;
+        state: StorageState;
+    }> | {
+        result: T;
+        state: StorageState;
+    }): Promise<T>;
+    private ensureLayout;
+    private writeState;
+    private withLock;
+}
+//# sourceMappingURL=file-store.d.ts.map

package/dist/storage/file-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-store.d.ts","sourceRoot":"","sources":["../../src/storage/file-store.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,YAAY,EAGZ,WAAW,EACZ,MAAM,aAAa,CAAC;AA0JrB,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAM7D;AAED,qBAAa,qBAAsB,YAAW,WAAW;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,UAAU,CAAC,EAAE,MAAM;IAOzB,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC;IAmB7B,MAAM,CAAC,CAAC,EACZ,OAAO,EAAE,CACP,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC;QAAE,MAAM,EAAE,CAAC,CAAC;QAAC,KAAK,EAAE,YAAY,CAAA;KAAE,CAAC,GAAG;QAAE,MAAM,EAAE,CAAC,CAAC;QAAC,KAAK,EAAE,YAAY,CAAA;KAAE,GACpF,OAAO,CAAC,CAAC,CAAC;YASC,YAAY;YAIZ,UAAU;YAWV,QAAQ;CAgCvB"}

package/dist/storage/file-store.js

@@ -0,0 +1,219 @@
+import { promises as fs } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import path from 'node:path';
+import { z } from 'zod';
+import { SUPPORTED_CHAINS, SUPPORTED_NETWORKS } from '../chains.js';
+import { DEFAULT_STORAGE_DIR, DEFAULT_STORAGE_ENV_VAR, ENCRYPTION_ALGORITHM, ENCRYPTION_KDF, STORAGE_LOCK_RETRY_MS, STORAGE_LOCK_TIMEOUT_MS, STORAGE_SCHEMA_VERSION } from '../constants.js';
+import { StorageError } from '../errors.js';
+const chainSchema = z.enum(SUPPORTED_CHAINS);
+const networkSchema = z.enum(SUPPORTED_NETWORKS);
+const encryptionStatusSchema = z.object({
+    enabled: z.boolean(),
+    algorithm: z.literal(ENCRYPTION_ALGORITHM).nullable(),
+    kdf: z.literal(ENCRYPTION_KDF).nullable()
+});
+const storedWalletKeySchema = z.object({
+    id: z.uuid(),
+    fingerprint: z.string(),
+    encryption: encryptionStatusSchema,
+    createdAt: z.string(),
+    updatedAt: z.string()
+});
+const storedWalletSchema = z.object({
+    id: z.uuid(),
+    keyId: z.uuid(),
+    name: z.string(),
+    chain: chainSchema,
+    network: networkSchema,
+    nextAccountIndex: z.number().int().nonnegative(),
+    createdAt: z.string(),
+    updatedAt: z.string()
+});
+const storedWalletAddressSchema = z.object({
+    id: z.uuid(),
+    walletId: z.uuid(),
+    chain: chainSchema,
+    network: networkSchema,
+    address: z.string(),
+    derivationPath: z.string(),
+    index: z.number().int().nonnegative(),
+    label: z.string().nullable(),
+    createdAt: z.string(),
+    updatedAt: z.string()
+});
+const storedMetadataFileSchema = z.object({
+    version: z.literal(STORAGE_SCHEMA_VERSION),
+    keys: z.array(storedWalletKeySchema),
+    wallets: z.array(storedWalletSchema),
+    addresses: z.array(storedWalletAddressSchema)
+});
+const encryptedEnvelopeSchema = z.object({
+    algorithm: z.literal(ENCRYPTION_ALGORITHM),
+    kdf: z.literal(ENCRYPTION_KDF),
+    salt: z.string(),
+    iv: z.string(),
+    tag: z.string(),
+    ciphertext: z.string(),
+    kdfParams: z.object({
+        cost: z.number().int().positive(),
+        blockSize: z.number().int().positive(),
+        parallelization: z.number().int().positive(),
+        keyLength: z.number().int().positive()
+    })
+});
+const storedSecretRecordSchema = z.object({
+    keyId: z.uuid(),
+    type: z.literal('encrypted'),
+    envelope: encryptedEnvelopeSchema
+});
+const storedSecretsFileSchema = z.object({
+    version: z.literal(STORAGE_SCHEMA_VERSION),
+    keys: z.array(storedSecretRecordSchema)
+});
+function emptyMetadata() {
+    return {
+        version: STORAGE_SCHEMA_VERSION,
+        keys: [],
+        wallets: [],
+        addresses: []
+    };
+}
+function emptySecrets() {
+    return {
+        version: STORAGE_SCHEMA_VERSION,
+        keys: []
+    };
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function readRawJsonFile(filePath) {
+    try {
+        const raw = await fs.readFile(filePath, 'utf8');
+        return JSON.parse(raw);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return undefined;
+        }
+        throw error;
+    }
+}
+async function readMetadataFile(filePath) {
+    const raw = await readRawJsonFile(filePath);
+    if (raw === undefined) {
+        return emptyMetadata();
+    }
+    const parsed = storedMetadataFileSchema.safeParse(raw);
+    if (parsed.success) {
+        return parsed.data;
+    }
+    throw new StorageError(`Storage file ${filePath} is malformed.`, {
+        cause: parsed.error
+    });
+}
+async function readSecretsFile(filePath) {
+    const raw = await readRawJsonFile(filePath);
+    if (raw === undefined) {
+        return emptySecrets();
+    }
+    const parsed = storedSecretsFileSchema.safeParse(raw);
+    if (parsed.success) {
+        return parsed.data;
+    }
+    throw new StorageError(`Storage file ${filePath} is malformed.`, {
+        cause: parsed.error
+    });
+}
+async function writeJsonAtomic(filePath, value) {
+    const dir = path.dirname(filePath);
+    const tempPath = path.join(dir, `${path.basename(filePath)}.${randomUUID()}.tmp`);
+    const payload = `${JSON.stringify(value, null, 2)}\n`;
+    await fs.writeFile(tempPath, payload, { encoding: 'utf8', mode: 0o600 });
+    await fs.rename(tempPath, filePath);
+}
+export function resolveStorageDir(storageDir) {
+    if (storageDir != null) {
+        return storageDir;
+    }
+    return process.env[DEFAULT_STORAGE_ENV_VAR] ?? DEFAULT_STORAGE_DIR;
+}
+export class FileSystemWalletStore {
+    rootDir;
+    metadataPath;
+    secretsPath;
+    lockPath;
+    constructor(storageDir) {
+        this.rootDir = resolveStorageDir(storageDir);
+        this.metadataPath = path.join(this.rootDir, 'metadata.json');
+        this.secretsPath = path.join(this.rootDir, 'secrets.json');
+        this.lockPath = path.join(this.rootDir, '.storage.lock');
+    }
+    async read() {
+        await this.ensureLayout();
+        try {
+            const [metadata, secrets] = await Promise.all([
+                readMetadataFile(this.metadataPath),
+                readSecretsFile(this.secretsPath)
+            ]);
+            return { metadata, secrets };
+        }
+        catch (error) {
+            if (error instanceof StorageError) {
+                throw error;
+            }
+            throw new StorageError('Failed to read wallet storage.', { cause: error });
+        }
+    }
+    async mutate(mutator) {
+        return this.withLock(async () => {
+            const state = await this.read();
+            const outcome = await mutator(state);
+            await this.writeState(outcome.state);
+            return outcome.result;
+        });
+    }
+    async ensureLayout() {
+        await fs.mkdir(this.rootDir, { recursive: true, mode: 0o700 });
+    }
+    async writeState(state) {
+        try {
+            await Promise.all([
+                writeJsonAtomic(this.metadataPath, state.metadata),
+                writeJsonAtomic(this.secretsPath, state.secrets)
+            ]);
+        }
+        catch (error) {
+            throw new StorageError('Failed to persist wallet storage.', { cause: error });
+        }
+    }
+    async withLock(operation) {
+        await this.ensureLayout();
+        const deadline = Date.now() + STORAGE_LOCK_TIMEOUT_MS;
+        while (true) {
+            let handle;
+            try {
+                handle = await fs.open(this.lockPath, 'wx', 0o600);
+            }
+            catch (error) {
+                const code = error.code;
+                if (code !== 'EEXIST') {
+                    throw new StorageError('Failed to acquire the wallet storage lock.', { cause: error });
+                }
+                if (Date.now() >= deadline) {
+                    throw new StorageError('Timed out waiting for the wallet storage lock.');
+                }
+                await delay(STORAGE_LOCK_RETRY_MS);
+                continue;
+            }
+            try {
+                return await operation();
+            }
+            finally {
+                await handle.close();
+                await fs.unlink(this.lockPath).catch(() => undefined);
+            }
+        }
+    }
+}
+//# sourceMappingURL=file-store.js.map

package/dist/storage/file-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-store.js","sourceRoot":"","sources":["../../src/storage/file-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAQ5C,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAC7C,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAEjD,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACrD,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,UAAU,EAAE,sBAAsB;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,WAAW;IAClB,OAAO,EAAE,aAAa;IACtB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IAClB,KAAK,EAAE,WAAW;IAClB,OAAO,EAAE,aAAa;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAC9C,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACtC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;KACvC,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,QAAQ,EAAE,uBAAuB;CAClC,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;CACxC,CAAC,CAAC;AAEH,SAAS,aAAa;IACpB,OAAO;QACL,OAAO,EAAE,sBAAsB;QAC/B,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,OAAO,EAAE,sBAAsB;QAC/B,IAAI,EAAE,EAAE;KACT,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAEvD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,MAAM,IAAI,YAAY,CAAC,gBAAgB,QAAQ,gBAAgB,EAAE;QAC/D,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAEtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,MAAM,IAAI,YAAY,CAAC,gBAAgB,QAAQ,gBAAgB,EAAE;QAC/D,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAc;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAEtD,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAAmB;IACnD,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,mBAAmB,CAAC;AACrE,CAAC;AAED,MAAM,OAAO,qBAAqB;IACvB,OAAO,CAAS;IACR,YAAY,CAAS;IACrB,WAAW,CAAS;IACpB,QAAQ,CAAS;IAElC,YAAY,UAAmB;QAC7B,IAAI,CAAC,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE1B,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC5C,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC;gBACnC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;aAClC,CAAC,CAAC;YAEH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;gBAClC,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,YAAY,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAEqF;QAErF,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrC,OAAO,OAAO,CAAC,MAAM,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,KAAmB;QAC1C,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC;gBAClD,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC;aACjD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAI,SAA2B;QACnD,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAuB,CAAC;QAEtD,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC;YAEX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;gBAEnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,MAAM,IAAI,YAAY,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACzF,CAAC;gBAED,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,IAAI,YAAY,CAAC,gDAAgD,CAAC,CAAC;gBAC3E,CAAC;gBAED,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBACnC,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,OAAO,MAAM,SAAS,EAAE,CAAC;YAC3B,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,187 @@
+export type MnemonicWordCount = 12 | 24;
+export type SupportedChain = 'ethereum' | 'bitcoin' | 'xrp' | 'polkadot';
+export type SupportedNetwork = 'mainnet' | 'sepolia' | 'testnet' | 'paseo';
+export interface EncryptionStatus {
+    enabled: boolean;
+    algorithm: 'aes-256-gcm' | null;
+    kdf: 'scrypt' | null;
+}
+export interface DerivedAccount {
+    chain: SupportedChain;
+    network: SupportedNetwork;
+    address: string;
+    derivationPath: string;
+    index: number;
+    label: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface WalletGroupSummary {
+    id: string;
+    keyId: string;
+    keyFingerprint: string;
+    name: string;
+    chain: SupportedChain;
+    network: SupportedNetwork;
+    firstAddress: string;
+    addressCount: number;
+    createdAt: string;
+    updatedAt: string;
+    encryption: EncryptionStatus;
+}
+export interface WalletGroup extends WalletGroupSummary {
+    accounts: DerivedAccount[];
+}
+export interface WalletKeySummary {
+    id: string;
+    fingerprint: string;
+    walletCount: number;
+    createdAt: string;
+    updatedAt: string;
+    encryption: EncryptionStatus;
+}
+export interface WalletGroupMetadataExport {
+    version: number;
+    exportedAt: string;
+    key: WalletKeySummary;
+    wallet: WalletGroupSummary;
+    addresses: DerivedAccount[];
+}
+export interface CreateWalletGroupOptions {
+    name: string;
+    chain?: SupportedChain;
+    network?: SupportedNetwork;
+    words?: MnemonicWordCount;
+    accountLabel?: string | null;
+    encryptionPassword?: string;
+}
+export interface CreateWalletGroupResult {
+    group: WalletGroup;
+    firstAccount: DerivedAccount;
+    mnemonic: string;
+}
+export interface ImportWalletGroupOptions {
+    name: string;
+    chain?: SupportedChain;
+    network?: SupportedNetwork;
+    mnemonic: string;
+    accountLabel?: string | null;
+    encryptionPassword?: string;
+}
+export interface ImportWalletGroupResult {
+    group: WalletGroup;
+    account: DerivedAccount;
+    reusedExistingGroup: boolean;
+}
+export interface DeriveAddressOptions {
+    group: string;
+    label?: string | null;
+    encryptionPassword?: string;
+}
+export interface LabelAccountOptions {
+    group: string;
+    index: number;
+    label?: string | null;
+}
+export interface WalletManagerOptions {
+    storageDir?: string;
+    store?: WalletStore;
+}
+export interface EncryptedSecretEnvelope {
+    algorithm: 'aes-256-gcm';
+    kdf: 'scrypt';
+    salt: string;
+    iv: string;
+    tag: string;
+    ciphertext: string;
+    kdfParams: {
+        cost: number;
+        blockSize: number;
+        parallelization: number;
+        keyLength: number;
+    };
+}
+export interface EncryptedStoredSecretRecord {
+    keyId: string;
+    type: 'encrypted';
+    envelope: EncryptedSecretEnvelope;
+}
+export type StoredSecretRecord = EncryptedStoredSecretRecord;
+export interface StoredWalletKey {
+    id: string;
+    fingerprint: string;
+    encryption: EncryptionStatus;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface StoredWallet {
+    id: string;
+    keyId: string;
+    name: string;
+    chain: SupportedChain;
+    network: SupportedNetwork;
+    nextAccountIndex: number;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface StoredWalletAddress {
+    id: string;
+    walletId: string;
+    chain: SupportedChain;
+    network: SupportedNetwork;
+    address: string;
+    derivationPath: string;
+    index: number;
+    label: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface StoredMetadataFile {
+    version: number;
+    keys: StoredWalletKey[];
+    wallets: StoredWallet[];
+    addresses: StoredWalletAddress[];
+}
+export interface StoredSecretsFile {
+    version: number;
+    keys: StoredSecretRecord[];
+}
+export interface StorageState {
+    metadata: StoredMetadataFile;
+    secrets: StoredSecretsFile;
+}
+export interface WalletGroupMetadataJson {
+    version: number;
+    key: StoredWalletKey;
+    wallet: StoredWallet;
+    addresses: StoredWalletAddress[];
+}
+export interface WalletGroupSecretsJson {
+    version: number;
+    secret: EncryptedStoredSecretRecord;
+}
+export interface WalletRecordAddressExport {
+    address: string;
+    derivationPath: string;
+    accountIndex: number;
+    label: string | null;
+}
+export interface WalletGroupRecordExport {
+    groupName: string;
+    chain: SupportedChain;
+    keyFingerprint: string;
+    metadataJson: WalletGroupMetadataJson;
+    secretsJson: WalletGroupSecretsJson;
+    addresses: WalletRecordAddressExport[];
+}
+export interface WalletStore {
+    read(): Promise<StorageState>;
+    mutate<T>(mutator: (state: StorageState) => Promise<{
+        result: T;
+        state: StorageState;
+    }> | {
+        result: T;
+        state: StorageState;
+    }): Promise<T>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,CAAC;AACxC,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,KAAK,GAAG,UAAU,CAAC;AACzE,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE3E,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,aAAa,GAAG,IAAI,CAAC;IAChC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,WAAY,SAAQ,kBAAkB;IACrD,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,gBAAgB,CAAC;IACtB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,WAAW,CAAC;IACnB,YAAY,EAAE,cAAc,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,aAAa,CAAC;IACzB,GAAG,EAAE,QAAQ,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,uBAAuB,CAAC;CACnC;AAED,MAAM,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AAE7D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,eAAe,EAAE,CAAC;IACxB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,SAAS,EAAE,mBAAmB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,kBAAkB,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,eAAe,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,mBAAmB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,2BAA2B,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,cAAc,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,uBAAuB,CAAC;IACtC,WAAW,EAAE,sBAAsB,CAAC;IACpC,SAAS,EAAE,yBAAyB,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9B,MAAM,CAAC,CAAC,EACN,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,CAAC,CAAC;QAAC,KAAK,EAAE,YAAY,CAAA;KAAE,CAAC,GAAG;QAAE,MAAM,EAAE,CAAC,CAAC;QAAC,KAAK,EAAE,YAAY,CAAA;KAAE,GACjH,OAAO,CAAC,CAAC,CAAC,CAAC;CACf"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map