@hardkas/accounts 0.12.0-rc.21 → 0.12.0-rc.23

package/dist/{authorizers-CP222OTW.js → authorizers-YESBCCTJ.js}

@@ -2,7 +2,7 @@ import {
   LazyAccountAuthorizer,
   PrivateKeyAuthorizer,
   StaticSignatureScriptAuthorizer
-} from "./chunk-E73SSWAX.js";
+} from "./chunk-PKDTLCCQ.js";
 export {
   LazyAccountAuthorizer,
   PrivateKeyAuthorizer,

package/dist/{chunk-7KKJXU73.js → chunk-2UQTGGML.js}

@@ -7,12 +7,39 @@ import { CrossWorldAccountCollisionError, AccountNetworkMismatchError } from "@h
 // src/real-accounts.ts
 import fs from "fs";
 import path from "path";
+import util from "util";
 import { writeFileAtomicSync } from "@hardkas/core";
 import {
   HARDKAS_VERSION,
   ARTIFACT_SCHEMAS,
   ARTIFACT_VERSION
 } from "@hardkas/artifacts";
+var ACCOUNT_SECRET_FIELDS = /* @__PURE__ */ new Set([
+  "privateKey",
+  "privateKeyEnv",
+  "keystoreRef"
+]);
+function redactAccountForLog(a) {
+  const out = {};
+  for (const k of Object.keys(a)) {
+    out[k] = ACCOUNT_SECRET_FIELDS.has(k) && a[k] !== void 0 ? "[REDACTED]" : a[k];
+  }
+  return out;
+}
+function attachInspectRedactor(obj) {
+  try {
+    Object.defineProperty(obj, util.inspect.custom, {
+      value(_depth, _opts, inspect) {
+        return inspect(redactAccountForLog(this), _opts);
+      },
+      enumerable: false,
+      configurable: true,
+      writable: true
+    });
+  } catch {
+  }
+  return obj;
+}
 function getDefaultRealAccountsPath(cwd) {
   const root = cwd ?? process.cwd();
   return path.join(root, ".hardkas", "accounts.real.json");
@@ -62,6 +89,9 @@ function loadRealAccountStoreSync(options) {
 `
       );
     }
+    for (const a of store.accounts) {
+      attachInspectRedactor(a);
+    }
     return store;
   } catch (e) {
     throw new Error(
@@ -403,7 +433,6 @@ function listHardkasAccounts(config, executionTarget) {
       const existing = accounts.get(name);
       const configKind = accConfig.kind === "simulated" ? "synthetic" : accConfig.kind;
       if (existing && existing.kind !== configKind) {
-        console.error(`COLLISION DETECTED for ${name}. existing:`, existing, `configKind:`, configKind);
         throw new CrossWorldAccountCollisionError({ accountId: name, worlds: [existing.kind, configKind] });
       }
       accounts.set(name, {
@@ -414,7 +443,9 @@ function listHardkasAccounts(config, executionTarget) {
       });
     }
   }
-  return Array.from(accounts.values());
+  const list = Array.from(accounts.values());
+  for (const a of list) attachInspectRedactor(a);
+  return list;
 }
 async function resolveHardkasAccountAddress(accountOrAddress, config, context = "L1") {
   if (accountOrAddress.startsWith("kaspa:") || accountOrAddress.startsWith("kaspatest:") || accountOrAddress.startsWith("kaspasim:")) {
@@ -489,6 +520,8 @@ function describeAccount(account) {
 }
 
 export {
+  redactAccountForLog,
+  attachInspectRedactor,
   getDefaultRealAccountsPath,
   createEmptyRealAccountStore,
   loadRealAccountStoreSync,

package/dist/{chunk-E73SSWAX.js → chunk-PKDTLCCQ.js}

@@ -62,7 +62,7 @@ var LazyAccountAuthorizer = class {
   accountName;
   workspaceRoot;
   async authorize(context) {
-    const { resolveHardkasAccount } = await import("./resolve-KMMTZWC3.js");
+    const { resolveHardkasAccount } = await import("./resolve-FO4P46YC.js");
     const account = await resolveHardkasAccount({
       nameOrAddress: this.accountName,
       config: { cwd: this.workspaceRoot }
@@ -74,7 +74,7 @@ var LazyAccountAuthorizer = class {
     if (!pkValue && account.keystorePath) {
       try {
         const { KeystoreManager } = await import("./keystore-CMWEKGBF.js");
-        const { DEV_ACCOUNTS_PASSWORD } = await import("./dev-accounts-BSWPKAAE.js");
+        const { DEV_ACCOUNTS_PASSWORD } = await import("./dev-accounts-JTJKQAPV.js");
         const keystore = await KeystoreManager.loadEncryptedKeystore(account.keystorePath);
         const unlock = await KeystoreManager.decryptEncryptedKeystore(keystore, DEV_ACCOUNTS_PASSWORD);
         if (unlock.success && unlock.payload) {

package/dist/{chunk-CELVD4YG.js → chunk-Q22JFUWC.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-BNF566PS.js";
 import {
   resolveHardkasAccount
-} from "./chunk-7KKJXU73.js";
+} from "./chunk-2UQTGGML.js";
 import {
   KeystoreManager
 } from "./chunk-YLG2NIAU.js";
@@ -18,7 +18,7 @@ import crypto from "crypto";
 import { deterministicCompare, getNetworkPrefix as getNetworkPrefix2 } from "@hardkas/core";
 
 // src/kaspa-wasm-signer.ts
-import { calculateContentHash } from "@hardkas/artifacts";
+import { recomputeDeclaredContentHash } from "@hardkas/artifacts";
 import { getNetworkPrefix } from "@hardkas/core";
 
 // src/wasm-transaction.ts
@@ -133,7 +133,7 @@ var KaspaWasmPrivateKeySigner = class {
       if (!pkValue && account.keystorePath) {
         try {
           const KeystoreManager2 = (await import("./keystore-CMWEKGBF.js")).KeystoreManager;
-          const DEV_ACCOUNTS_PASSWORD2 = (await import("./dev-accounts-BSWPKAAE.js")).DEV_ACCOUNTS_PASSWORD;
+          const DEV_ACCOUNTS_PASSWORD2 = (await import("./dev-accounts-JTJKQAPV.js")).DEV_ACCOUNTS_PASSWORD;
           const keystore = await KeystoreManager2.loadEncryptedKeystore(account.keystorePath);
           const unlock = await KeystoreManager2.decryptEncryptedKeystore(keystore, DEV_ACCOUNTS_PASSWORD2);
           if (unlock.success && unlock.payload) {
@@ -153,7 +153,7 @@ var KaspaWasmPrivateKeySigner = class {
         throw err;
       }
       const expectedAddress = new sdk.PrivateKey(pkValue).toKeypair().toAddress(getNetworkPrefix(plan.networkId || "simnet")).toString();
-      const { PrivateKeyAuthorizer } = await import("./authorizers-CP222OTW.js");
+      const { PrivateKeyAuthorizer } = await import("./authorizers-YESBCCTJ.js");
       const sourceInputs = plan.inputs || plan.selectedUtxos || [];
       for (let i = 0; i < numInputs; i++) {
         if (!authorizers[i]) {
@@ -313,7 +313,7 @@ var KaspaWasmPrivateKeySigner = class {
         txId: signedTx.id,
         signature: {
           // We use the txid as the signature identifier in the artifact
-          value: signedTx.id || calculateContentHash(plan)
+          value: signedTx.id || plan.contentHash || recomputeDeclaredContentHash(plan)
         }
       };
     } catch (error) {
@@ -344,6 +344,7 @@ async function ensureDevAccounts(workspaceDir) {
   await getOrCreateDevAccount(workspaceDir, 1, "bob");
   await getOrCreateDevAccount(workspaceDir, 2, "carol");
   await getOrCreateDevAccount(workspaceDir, 3, "dave");
+  await getOrCreateDevAccount(workspaceDir, 4, "erin");
 }
 async function getOrCreateDevAccount(workspaceDir, index, alias) {
   const devAccountsDir = path.join(workspaceDir, ".hardkas", "dev-accounts");

package/dist/{dev-accounts-BSWPKAAE.js → dev-accounts-JTJKQAPV.js}

@@ -4,10 +4,10 @@ import {
   ensureDevAccounts,
   getOrCreateDevAccount,
   listDevAccountsSync
-} from "./chunk-CELVD4YG.js";
+} from "./chunk-Q22JFUWC.js";
 import "./chunk-GM2BY4VS.js";
 import "./chunk-BNF566PS.js";
-import "./chunk-7KKJXU73.js";
+import "./chunk-2UQTGGML.js";
 import "./chunk-YLG2NIAU.js";
 export {
   DEV_ACCOUNTS_PASSWORD,

package/dist/index.d.ts

@@ -127,7 +127,7 @@ interface SignTxPlanResult {
     signerAddress: string;
     txId?: string;
     signedTransaction: {
-        format: "hex" | "simulated" | "unknown";
+        format: "hex" | "synthetic-authorization" | "unknown";
         payload: string;
     };
     signature?: {
@@ -626,6 +626,18 @@ declare function assertSigningNetworkAllowed(input: {
     allowMainnet?: boolean | undefined;
 }): void;
 
+/**
+ * Returns a shallow clone of an account with secret-bearing fields replaced by "[REDACTED]".
+ * Preserves `name`, `address`, `publicKey`, `createdAt`, and any other non-secret metadata.
+ */
+declare function redactAccountForLog<T extends Record<string, unknown>>(a: T): T;
+/**
+ * Attaches a self-redacting `util.inspect.custom` handler so `console.log(account)`
+ * and Node's default error formatter never surface secrets. `JSON.stringify` is
+ * NOT affected — the disk-write path in `saveRealAccountStore` still round-trips
+ * the raw store, which is why disk permissions are enforced to 0o600.
+ */
+declare function attachInspectRedactor<T extends object>(obj: T): T;
 interface RealAccountStore extends HardkasArtifactBase {
     readonly schema: "hardkas.realAccountStore.v1";
     readonly networkId: NetworkId;
@@ -913,4 +925,4 @@ declare class WalletStateStoreJson {
     nextChangeIndex(walletId: string): number;
 }
 
-export { AddressManager, type BalancedOutput, type ChainType, type CovenantFundingInput, type CovenantGenesisRequest, type CovenantTransactionResult, type CovenantTransitionRequest, type CovenantUtxo, type CreateKaspaWalletOptions, DEV_ACCOUNTS_PASSWORD, type DeriveRequest, type DerivedAddress, type EncryptedKeystoreV2, type EvmExportResult, type GeneratedKaspaDevAccount, type HardkasAccount, type HardkasAccountKind, type HardkasBaseAccount, type HardkasEvmPrivateKeyAccount, type HardkasExternalWalletAccount, type HardkasKaspaAccount, type HardkasSigner, type HardkasSignerKind, type HardkasSyntheticAccount, type HardkasTxPlanSigner, type HelperDeriveRequest, type InputAuthorization, type KaspaKeyGenerator, KaspaSdkKeyGenerator, type KaspaSdkKeyGeneratorOptions, KaspaSdkRealTxSigner, type KaspaSdkRealTxSignerOptions, type KaspaSigningBackendStatus, KaspaWasmPrivateKeySigner, type KaspaWasmSignerOptions, type KeystoreCipherParams, type KeystoreKdfParams, KeystoreManager, type KeystorePayload, type KeystoreUnlockResult, LazyAccountAuthorizer, type NetworkType, type PathRequest, PrivateKeyAuthorizer, type RealAccountStore, type RealDevAccount, type RealTxSigner, type RealTxSigningInput, type RealTxSigningResult, SILVER_SPEND_DRAFT_SCHEMA, type ScriptFundingRequest, type ScriptFundingResult, type ScriptOutput, type SignTxPlanInput, type SignTxPlanResult, type SilverContractUtxo, type SilverDraftArg, type SilverSignatureArg, type SilverSignerSlot, type SilverSpendArg, type SilverSpendDraft, type SilverSpendDraftRequest, type SilverSpendResult, type SilverSweepRequest, SimulatedSigner, StaticSignatureScriptAuthorizer, type TxInputAuthorizationContext, type TxInputAuthorizer, UnsupportedKaspaKeyGenerator, UnsupportedRealKaspaSigner, UnsupportedRealTxSigner, type WalletArtifact, type WalletClaims, type WalletCreateRequest, type WalletImportRequest, WalletManager, WalletManagerImpl, type WalletMetadata, type WalletState, WalletStateStoreJson, type WalletStateStoreOptions, type WasmInputSigner, type WasmProviderConfig, type WasmUtxoEntrySource, type WasmUtxoInput, appendToKeystoreJson, assertAccountCompatible, assertSigningNetworkAllowed, assertValueConservation, buildCovenantGenesis, buildCovenantTransition, buildScriptFunding, buildSilverSweep, createBalancedTransaction, createDevSigner, createEmptyRealAccountStore, createLocalKaspaWallet, createScriptTransaction, describeAccount, detectCapabilities, ensureDevAccounts, finalizeSilverSpend, getDefaultRealAccountsPath, getKaspaSigningBackendStatus, getOrCreateDevAccount, getRealDevAccount, getRequiredEnv, importRealDevAccount, listDevAccountsSync, listHardkasAccounts, listRealDevAccounts, loadKaspaWasm, loadKaspaWasmSync, loadOrCreateRealAccountStore, loadRealAccountStore, loadRealAccountStoreSync, planOutputsWithChange, prepareEvmAccountExport, prepareSilverSpend, removeRealDevAccount, resolveHardkasAccount, resolveHardkasAccountAddress, resolveRealAccountOrAddress, saveRealAccountStore, signSilverSpend, signTxPlanArtifact, toWasmScriptPublicKey, validateAccountName, validateAddressNetwork, validateAddressPrefix, withKeystoreLock };
+export { AddressManager, type BalancedOutput, type ChainType, type CovenantFundingInput, type CovenantGenesisRequest, type CovenantTransactionResult, type CovenantTransitionRequest, type CovenantUtxo, type CreateKaspaWalletOptions, DEV_ACCOUNTS_PASSWORD, type DeriveRequest, type DerivedAddress, type EncryptedKeystoreV2, type EvmExportResult, type GeneratedKaspaDevAccount, type HardkasAccount, type HardkasAccountKind, type HardkasBaseAccount, type HardkasEvmPrivateKeyAccount, type HardkasExternalWalletAccount, type HardkasKaspaAccount, type HardkasSigner, type HardkasSignerKind, type HardkasSyntheticAccount, type HardkasTxPlanSigner, type HelperDeriveRequest, type InputAuthorization, type KaspaKeyGenerator, KaspaSdkKeyGenerator, type KaspaSdkKeyGeneratorOptions, KaspaSdkRealTxSigner, type KaspaSdkRealTxSignerOptions, type KaspaSigningBackendStatus, KaspaWasmPrivateKeySigner, type KaspaWasmSignerOptions, type KeystoreCipherParams, type KeystoreKdfParams, KeystoreManager, type KeystorePayload, type KeystoreUnlockResult, LazyAccountAuthorizer, type NetworkType, type PathRequest, PrivateKeyAuthorizer, type RealAccountStore, type RealDevAccount, type RealTxSigner, type RealTxSigningInput, type RealTxSigningResult, SILVER_SPEND_DRAFT_SCHEMA, type ScriptFundingRequest, type ScriptFundingResult, type ScriptOutput, type SignTxPlanInput, type SignTxPlanResult, type SilverContractUtxo, type SilverDraftArg, type SilverSignatureArg, type SilverSignerSlot, type SilverSpendArg, type SilverSpendDraft, type SilverSpendDraftRequest, type SilverSpendResult, type SilverSweepRequest, SimulatedSigner, StaticSignatureScriptAuthorizer, type TxInputAuthorizationContext, type TxInputAuthorizer, UnsupportedKaspaKeyGenerator, UnsupportedRealKaspaSigner, UnsupportedRealTxSigner, type WalletArtifact, type WalletClaims, type WalletCreateRequest, type WalletImportRequest, WalletManager, WalletManagerImpl, type WalletMetadata, type WalletState, WalletStateStoreJson, type WalletStateStoreOptions, type WasmInputSigner, type WasmProviderConfig, type WasmUtxoEntrySource, type WasmUtxoInput, appendToKeystoreJson, assertAccountCompatible, assertSigningNetworkAllowed, assertValueConservation, attachInspectRedactor, buildCovenantGenesis, buildCovenantTransition, buildScriptFunding, buildSilverSweep, createBalancedTransaction, createDevSigner, createEmptyRealAccountStore, createLocalKaspaWallet, createScriptTransaction, describeAccount, detectCapabilities, ensureDevAccounts, finalizeSilverSpend, getDefaultRealAccountsPath, getKaspaSigningBackendStatus, getOrCreateDevAccount, getRealDevAccount, getRequiredEnv, importRealDevAccount, listDevAccountsSync, listHardkasAccounts, listRealDevAccounts, loadKaspaWasm, loadKaspaWasmSync, loadOrCreateRealAccountStore, loadRealAccountStore, loadRealAccountStoreSync, planOutputsWithChange, prepareEvmAccountExport, prepareSilverSpend, redactAccountForLog, removeRealDevAccount, resolveHardkasAccount, resolveHardkasAccountAddress, resolveRealAccountOrAddress, saveRealAccountStore, signSilverSpend, signTxPlanArtifact, toWasmScriptPublicKey, validateAccountName, validateAddressNetwork, validateAddressPrefix, withKeystoreLock };

package/dist/index.js

@@ -11,7 +11,7 @@ import {
   listDevAccountsSync,
   planOutputsWithChange,
   toWasmScriptPublicKey
-} from "./chunk-CELVD4YG.js";
+} from "./chunk-Q22JFUWC.js";
 import {
   parseWasmTxToRpc
 } from "./chunk-GM2BY4VS.js";
@@ -23,6 +23,7 @@ import {
 } from "./chunk-BNF566PS.js";
 import {
   assertAccountCompatible,
+  attachInspectRedactor,
   createEmptyRealAccountStore,
   describeAccount,
   getDefaultRealAccountsPath,
@@ -33,6 +34,7 @@ import {
   loadOrCreateRealAccountStore,
   loadRealAccountStore,
   loadRealAccountStoreSync,
+  redactAccountForLog,
   removeRealDevAccount,
   resolveHardkasAccount,
   resolveHardkasAccountAddress,
@@ -41,7 +43,7 @@ import {
   validateAccountName,
   validateAddressNetwork,
   validateAddressPrefix
-} from "./chunk-7KKJXU73.js";
+} from "./chunk-2UQTGGML.js";
 import {
   KeystoreManager
 } from "./chunk-YLG2NIAU.js";
@@ -49,7 +51,7 @@ import {
   LazyAccountAuthorizer,
   PrivateKeyAuthorizer,
   StaticSignatureScriptAuthorizer
-} from "./chunk-E73SSWAX.js";
+} from "./chunk-PKDTLCCQ.js";
 
 // src/simulated.ts
 var SimulatedSigner = class {
@@ -130,6 +132,7 @@ function getRequiredEnv(name) {
 import {
   createSimulatedSignedTxArtifact,
   calculateContentHash,
+  CURRENT_HASH_VERSION,
   HARDKAS_VERSION,
   createLineageTransition
 } from "@hardkas/artifacts";
@@ -165,7 +168,7 @@ async function signTxPlanArtifact(input) {
   if (planArtifact.mode === "simulator") {
     return createSimulatedSignedTxArtifact(
       planArtifact,
-      `simulated-signed-tx:${planArtifact.planId}`,
+      account ?? planArtifact.from.address,
       systemRuntimeContext
     );
   }
@@ -203,6 +206,7 @@ async function signTxPlanArtifact(input) {
       schema: "hardkas.signedTx",
       hardkasVersion: HARDKAS_VERSION,
       version: "1.0.0-alpha",
+      hashVersion: CURRENT_HASH_VERSION,
       status: "signed",
       createdAt: (/* @__PURE__ */ new Date()).toISOString(),
       txId: result.txId || "",
@@ -225,7 +229,7 @@ async function signTxPlanArtifact(input) {
       ...planArtifact.networkProfileRef ? { networkProfileRef: planArtifact.networkProfileRef } : {},
       ...planArtifact.assumptionRef ? { assumptionRef: planArtifact.assumptionRef } : {}
     };
-    const contentHash = calculateContentHash(artifact);
+    const contentHash = calculateContentHash(artifact, CURRENT_HASH_VERSION);
     artifact.signedId = `signed-${contentHash.slice(0, 16)}`;
     artifact.contentHash = contentHash;
     if (artifact.lineage) {
@@ -1244,6 +1248,7 @@ export {
   assertAccountCompatible,
   assertSigningNetworkAllowed,
   assertValueConservation,
+  attachInspectRedactor,
   buildCovenantGenesis,
   buildCovenantTransition,
   buildScriptFunding,
@@ -1275,6 +1280,7 @@ export {
   planOutputsWithChange,
   prepareEvmAccountExport,
   prepareSilverSpend,
+  redactAccountForLog,
   removeRealDevAccount,
   resolveHardkasAccount,
   resolveHardkasAccountAddress,

package/dist/{resolve-KMMTZWC3.js → resolve-FO4P46YC.js}

@@ -4,7 +4,7 @@ import {
   listHardkasAccounts,
   resolveHardkasAccount,
   resolveHardkasAccountAddress
-} from "./chunk-7KKJXU73.js";
+} from "./chunk-2UQTGGML.js";
 export {
   assertAccountCompatible,
   describeAccount,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hardkas/accounts",
-  "version": "0.12.0-rc.21",
+  "version": "0.12.0-rc.23",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -23,11 +23,11 @@
   ],
   "dependencies": {
     "hash-wasm": "^4.12.0",
-    "@hardkas/artifacts": "0.12.0-rc.21",
-    "@hardkas/config": "0.12.0-rc.21",
-    "@hardkas/core": "0.12.0-rc.21",
-    "@hardkas/localnet": "0.12.0-rc.21",
-    "@hardkas/tx-builder": "0.12.0-rc.21"
+    "@hardkas/core": "0.12.0-rc.23",
+    "@hardkas/artifacts": "0.12.0-rc.23",
+    "@hardkas/tx-builder": "0.12.0-rc.23",
+    "@hardkas/config": "0.12.0-rc.23",
+    "@hardkas/localnet": "0.12.0-rc.23"
   },
   "devDependencies": {
     "tsup": "^8.3.5",