@hardkas/accounts 0.7.1-alpha → 0.7.4-alpha

package/dist/index.js

@@ -22,7 +22,11 @@ import { createDeterministicAccounts } from "@hardkas/localnet";
 import fs from "fs";
 import path from "path";
 import { writeFileAtomicSync } from "@hardkas/core";
-import { HARDKAS_VERSION, ARTIFACT_SCHEMAS, ARTIFACT_VERSION } from "@hardkas/artifacts";
+import {
+  HARDKAS_VERSION,
+  ARTIFACT_SCHEMAS,
+  ARTIFACT_VERSION
+} from "@hardkas/artifacts";
 function getDefaultRealAccountsPath(cwd) {
   const root = cwd ?? process.cwd();
   return path.join(root, ".hardkas", "accounts.real.json");
@@ -51,15 +55,21 @@ function loadRealAccountStoreSync(options) {
     const plaintextAccounts = store.accounts.filter((a) => a.privateKey);
     if (plaintextAccounts.length > 0) {
       const names = plaintextAccounts.map((a) => a.name).join(", ");
-      console.warn(`
-  \u26A0\uFE0F  [SECURITY WARNING] Plaintext private keys detected in legacy account store for: ${names}`);
+      console.warn(
+        `
+  \u26A0\uFE0F  [SECURITY WARNING] Plaintext private keys detected in legacy account store for: ${names}`
+      );
       console.warn(`     Location: ${filePath}`);
-      console.warn(`     Recommendation: Re-import these accounts using encrypted keystores.
-`);
+      console.warn(
+        `     Recommendation: Re-import these accounts using encrypted keystores.
+`
+      );
     }
     return store;
   } catch (e) {
-    throw new Error(`Failed to load real account store at ${filePath}: ${e instanceof Error ? e.message : String(e)}`);
+    throw new Error(
+      `Failed to load real account store at ${filePath}: ${e instanceof Error ? e.message : String(e)}`
+    );
   }
 }
 async function loadRealAccountStore(options) {
@@ -80,7 +90,9 @@ async function saveRealAccountStore(store, options) {
       mode: 384
     });
   } catch (e) {
-    throw new Error(`Failed to save real account store at ${filePath}: ${e instanceof Error ? e.message : String(e)}`);
+    throw new Error(
+      `Failed to save real account store at ${filePath}: ${e instanceof Error ? e.message : String(e)}`
+    );
   }
 }
 function validateAccountName(name) {
@@ -89,7 +101,9 @@ function validateAccountName(name) {
   }
   const nameRegex = /^[a-zA-Z0-9_-]+$/;
   if (!nameRegex.test(name)) {
-    throw new Error(`Invalid account name '${name}'. Only letters, numbers, dashes and underscores are allowed.`);
+    throw new Error(
+      `Invalid account name '${name}'. Only letters, numbers, dashes and underscores are allowed.`
+    );
   }
 }
 function validateAddressPrefix(address) {
@@ -99,7 +113,9 @@ function validateAddressPrefix(address) {
   const validPrefixes = ["kaspa:", "kaspatest:", "kaspasim:"];
   const hasValidPrefix = validPrefixes.some((prefix) => address.startsWith(prefix));
   if (!hasValidPrefix) {
-    throw new Error(`Invalid address '${address}'. Must start with one of: ${validPrefixes.join(", ")}`);
+    throw new Error(
+      `Invalid address '${address}'. Must start with one of: ${validPrefixes.join(", ")}`
+    );
   }
 }
 function importRealDevAccount(store, account) {
@@ -118,7 +134,9 @@ function importRealDevAccount(store, account) {
   };
 }
 function removeRealDevAccount(store, name) {
-  const index = store.accounts.findIndex((a) => a.name.toLowerCase() === name.toLowerCase());
+  const index = store.accounts.findIndex(
+    (a) => a.name.toLowerCase() === name.toLowerCase()
+  );
   if (index === -1) {
     throw new Error(`Account with name '${name}' not found.`);
   }
@@ -143,7 +161,9 @@ function resolveRealAccountOrAddress(store, nameOrAddress) {
   if (nameOrAddress.startsWith("kaspa:") || nameOrAddress.startsWith("kaspatest:") || nameOrAddress.startsWith("kaspasim:")) {
     return { address: nameOrAddress };
   }
-  throw new Error(`'${nameOrAddress}' is not a registered real account name and is not a valid Kaspa address.`);
+  throw new Error(
+    `'${nameOrAddress}' is not a registered real account name and is not a valid Kaspa address.`
+  );
 }
 
 // src/resolve.ts
@@ -160,7 +180,12 @@ function resolveHardkasAccount(options) {
   if (alias === "0") alias = "alice";
   if (alias === "1") alias = "bob";
   const workspaceRoot = config?.cwd || process.cwd();
-  const devAccountPath = path2.join(workspaceRoot, ".hardkas", "dev-accounts", `${alias}.json`);
+  const devAccountPath = path2.join(
+    workspaceRoot,
+    ".hardkas",
+    "dev-accounts",
+    `${alias}.json`
+  );
   if (fs2.existsSync(devAccountPath)) {
     try {
       const data = fs2.readFileSync(devAccountPath, "utf-8");
@@ -203,7 +228,9 @@ function resolveHardkasAccount(options) {
     };
   }
   const available = listHardkasAccounts(config).map((a) => a.name).join(", ");
-  throw new Error(`Unknown HardKAS account '${nameOrAddress}'. Available accounts: ${available}`);
+  throw new Error(
+    `Unknown HardKAS account '${nameOrAddress}'. Available accounts: ${available}`
+  );
 }
 function listHardkasAccounts(config) {
   const accounts = /* @__PURE__ */ new Map();
@@ -251,7 +278,9 @@ function listHardkasAccounts(config) {
   const keystoreDir = path2.join(process.cwd(), ".hardkas", "keystore");
   if (fs2.existsSync(keystoreDir)) {
     if (!config || !config.cwd) {
-      throw new Error("Workspace root/cwd is required for hermetic keystore path resolution");
+      throw new Error(
+        "Workspace root/cwd is required for hermetic keystore path resolution"
+      );
     }
     const files = fs2.readdirSync(keystoreDir);
     for (const file of files) {
@@ -286,7 +315,9 @@ function listHardkasAccounts(config) {
 function resolveHardkasAccountAddress(accountOrAddress, config, context = "L1") {
   if (accountOrAddress.startsWith("kaspa:") || accountOrAddress.startsWith("kaspatest:") || accountOrAddress.startsWith("kaspasim:")) {
     if (context === "L2") {
-      throw new Error(`Invalid L2 address provided: ${accountOrAddress}. Expected EVM address or account alias.`);
+      throw new Error(
+        `Invalid L2 address provided: ${accountOrAddress}. Expected EVM address or account alias.`
+      );
     }
     return accountOrAddress;
   }
@@ -297,7 +328,9 @@ function resolveHardkasAccountAddress(accountOrAddress, config, context = "L1")
   if (context === "L2") {
     const evmAddress = account.evmAddress;
     if (!evmAddress) {
-      throw new Error(`Account '${account.name}' does not have an EVM address configured for L2.`);
+      throw new Error(
+        `Account '${account.name}' does not have an EVM address configured for L2.`
+      );
     }
     return evmAddress;
   }
@@ -326,13 +359,19 @@ function describeAccount(account) {
 // src/evm-export.ts
 async function prepareEvmAccountExport(account, networkId, options = {}) {
   if (networkId === "mainnet" || networkId.startsWith("testnet")) {
-    throw new Error(`EVM account export is NOT allowed on network "${networkId}" for security reasons.`);
+    throw new Error(
+      `EVM account export is NOT allowed on network "${networkId}" for security reasons.`
+    );
   }
   if (networkId !== "simnet" && networkId !== "localnet") {
-    throw new Error(`EVM account export is only supported on local development networks (simnet, localnet).`);
+    throw new Error(
+      `EVM account export is only supported on local development networks (simnet, localnet).`
+    );
   }
   if (account.kind !== "evm-private-key") {
-    throw new Error(`Account "${account.name}" is not an EVM/L2 account (kind: ${account.kind}). Only explicit EVM accounts can be exported.`);
+    throw new Error(
+      `Account "${account.name}" is not an EVM/L2 account (kind: ${account.kind}). Only explicit EVM accounts can be exported.`
+    );
   }
   if (!account.address || !account.address.startsWith("0x")) {
     throw new Error(`Account "${account.name}" does not have a valid EVM address.`);
@@ -348,7 +387,9 @@ async function prepareEvmAccountExport(account, networkId, options = {}) {
       if (account.privateKeyEnv) {
         privateKey = process.env[account.privateKeyEnv];
         if (!privateKey) {
-          throw new Error(`Private key environment variable "${account.privateKeyEnv}" is not set.`);
+          throw new Error(
+            `Private key environment variable "${account.privateKeyEnv}" is not set.`
+          );
         }
       } else {
         privateKey = account.privateKey;
@@ -358,7 +399,9 @@ async function prepareEvmAccountExport(account, networkId, options = {}) {
       result.privateKey = privateKey.startsWith("0x") ? privateKey : `0x${privateKey}`;
       result.isSecret = true;
     } else {
-      throw new Error(`Private key for account "${account.name}" could not be retrieved.`);
+      throw new Error(
+        `Private key for account "${account.name}" could not be retrieved.`
+      );
     }
   }
   return result;
@@ -410,9 +453,7 @@ async function getKaspaSigningBackendStatus() {
 }
 
 // src/kaspa-wasm-signer.ts
-import {
-  calculateContentHash
-} from "@hardkas/artifacts";
+import { calculateContentHash } from "@hardkas/artifacts";
 var KaspaWasmPrivateKeySigner = class {
   constructor(options) {
     this.options = options;
@@ -440,7 +481,9 @@ var KaspaWasmPrivateKeySigner = class {
         }
         const spk = u.scriptPublicKey;
         if (!spk) {
-          throw new Error("UTXO is missing scriptPublicKey. Real signing flows must never fabricate cryptographic state.");
+          throw new Error(
+            "UTXO is missing scriptPublicKey. Real signing flows must never fabricate cryptographic state."
+          );
         }
         return new sdk.UtxoEntry(
           BigInt(u.amountSompi),
@@ -452,10 +495,7 @@ var KaspaWasmPrivateKeySigner = class {
       });
       const outputs = plan.outputs.map((o) => {
         if (!o.address) throw new Error("Output is missing address.");
-        return new sdk.PaymentOutput(
-          new sdk.Address(o.address),
-          BigInt(o.amountSompi)
-        );
+        return new sdk.PaymentOutput(new sdk.Address(o.address), BigInt(o.amountSompi));
       });
       const changeAddress = plan.change?.address ? new sdk.Address(plan.change.address) : void 0;
       const priorityFee = BigInt(plan.estimatedFeeSompi);
@@ -481,7 +521,9 @@ var KaspaWasmPrivateKeySigner = class {
         }
       };
     } catch (error) {
-      throw new Error(`Kaspa WASM signing failed: ${error instanceof Error ? error.message : String(error)}`);
+      throw new Error(
+        `Kaspa WASM signing failed: ${error instanceof Error ? error.message : String(error)}`
+      );
     }
   }
 };
@@ -526,15 +568,21 @@ async function signTxPlanArtifact(input) {
   }
   if (planArtifact.mode === "simulated") {
     if (account.kind !== "simulated") {
-      throw new Error(`Simulated plans must be signed with simulated accounts (account '${account.name}' is '${account.kind}').`);
+      throw new Error(
+        `Simulated plans must be signed with simulated accounts (account '${account.name}' is '${account.kind}').`
+      );
     }
   } else {
     if (account.kind === "simulated") {
-      throw new Error(`Real Kaspa transaction plans (mode: ${planArtifact.mode}) cannot be signed with simulated accounts.`);
+      throw new Error(
+        `Real Kaspa transaction plans (mode: ${planArtifact.mode}) cannot be signed with simulated accounts.`
+      );
     }
   }
   if (planArtifact.networkId === "mainnet" && !input.allowMainnet) {
-    throw new Error("Mainnet signing is disabled by default. Use --allow-mainnet-signing only if you understand the risks.");
+    throw new Error(
+      "Mainnet signing is disabled by default. Use --allow-mainnet-signing only if you understand the risks."
+    );
   }
   if (account.kind === "simulated") {
     return createSimulatedSignedTxArtifact(
@@ -546,7 +594,9 @@ async function signTxPlanArtifact(input) {
   if (account.kind === "kaspa-private-key") {
     const status = await getKaspaSigningBackendStatus();
     if (!status.available) {
-      throw new Error(`Real Kaspa signing is not available: ${status.error || "Unknown error"}. Ensure 'kaspa' package is installed.`);
+      throw new Error(
+        `Real Kaspa signing is not available: ${status.error || "Unknown error"}. Ensure 'kaspa' package is installed.`
+      );
     }
     const signer = new KaspaWasmPrivateKeySigner({
       account,
@@ -573,7 +623,8 @@ async function signTxPlanArtifact(input) {
       signedTransaction: {
         format: result.signedTransaction?.format === "hex" ? "hex" : "unknown",
         payload: result.signedTransaction?.payload || ""
-      }
+      },
+      ...planArtifact.workflowId ? { workflowId: planArtifact.workflowId } : {}
     };
     const contentHash = calculateContentHash2(artifact);
     artifact.signedId = `signed-${contentHash.slice(0, 16)}`;
@@ -584,7 +635,9 @@ async function signTxPlanArtifact(input) {
     throw new Error("External wallet signing is not implemented yet.");
   }
   if (account.kind === "evm-private-key") {
-    throw new Error("EVM accounts are reserved for future Igra support and cannot sign Kaspa L1 transactions.");
+    throw new Error(
+      "EVM accounts are reserved for future Igra support and cannot sign Kaspa L1 transactions."
+    );
   }
   const accountRecord = account;
   throw new Error(`Unsupported account kind for signing: ${accountRecord.kind}`);
@@ -604,7 +657,7 @@ var KaspaSdkKeyGenerator = class {
         return await rawLoader();
       } catch (e) {
         throw new Error(
-          "Kaspa SDK key generation dependency is not installed. Install/configure the supported Kaspa WASM SDK adapter. Use 'hardkas accounts real import' to add accounts manually for now."
+          "Kaspa cryptography adapter missing. Real account generation requires WASM execution.\nRun: npm install @kaspa/wallet-wasm\nUse 'hardkas accounts real import' to add accounts manually for now."
         );
       }
     };
@@ -625,9 +678,13 @@ var KaspaSdkKeyGenerator = class {
           privateKey: privateKeyStr
         };
       }
-      throw new Error("Loaded Kaspa SDK does not expose expected PrivateKey constructor.");
+      throw new Error(
+        "Loaded Kaspa SDK does not expose expected PrivateKey constructor."
+      );
     } catch (e) {
-      throw new Error(`Failed to generate account using SDK: ${e instanceof Error ? e.message : String(e)}`);
+      throw new Error(
+        `Failed to generate account using SDK: ${e instanceof Error ? e.message : String(e)}`
+      );
     }
   }
 };
@@ -661,22 +718,30 @@ var KaspaSdkRealTxSigner = class {
     try {
       sdk = await this.sdkLoader();
     } catch (e) {
-      throw new Error("Kaspa SDK real transaction signer dependency is not installed. Install/configure the supported Kaspa WASM SDK adapter.");
+      throw new Error(
+        "Kaspa SDK real transaction signer dependency is not installed. Install/configure the supported Kaspa WASM SDK adapter."
+      );
     }
     if (!sdk) {
-      throw new Error("Kaspa SDK real transaction signer dependency is not installed. Install/configure the supported Kaspa WASM SDK adapter.");
+      throw new Error(
+        "Kaspa SDK real transaction signer dependency is not installed. Install/configure the supported Kaspa WASM SDK adapter."
+      );
     }
     if (!account.privateKey) {
       throw new Error("Account has no private key available for signing.");
     }
     if (plan.from.address !== account.address) {
-      throw new Error(`Address mismatch: Plan requires ${plan.from.address}, but account has ${account.address}.`);
+      throw new Error(
+        `Address mismatch: Plan requires ${plan.from.address}, but account has ${account.address}.`
+      );
     }
     try {
       const privateKey = new sdk.PrivateKey(account.privateKey);
       const utxos = plan.inputs.map((u) => {
         if (!u.scriptPublicKey) {
-          throw new Error(`UTXO ${u.outpoint.transactionId}:${u.outpoint.index} is missing scriptPublicKey required for signing.`);
+          throw new Error(
+            `UTXO ${u.outpoint.transactionId}:${u.outpoint.index} is missing scriptPublicKey required for signing.`
+          );
         }
         const spk = u.scriptPublicKey;
         return new sdk.UtxoEntry(
@@ -688,10 +753,7 @@ var KaspaSdkRealTxSigner = class {
         );
       });
       const outputs = [
-        new sdk.PaymentOutput(
-          new sdk.Address(plan.to.address),
-          BigInt(plan.amountSompi)
-        )
+        new sdk.PaymentOutput(new sdk.Address(plan.to.address), BigInt(plan.amountSompi))
       ];
       const changeAddress = plan.change ? new sdk.Address(plan.change.address) : void 0;
       const priorityFee = BigInt(plan.estimatedFeeSompi);
@@ -714,7 +776,9 @@ var KaspaSdkRealTxSigner = class {
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       if (msg.includes("is not a constructor") || msg.includes("is not a function")) {
-        throw new Error(`Kaspa SDK signer adapter could not find required transaction signing primitives: ${msg}`);
+        throw new Error(
+          `Kaspa SDK signer adapter could not find required transaction signing primitives: ${msg}`
+        );
       }
       throw new Error(`Real transaction signing failed in Kaspa SDK: ${msg}`);
     }
@@ -748,7 +812,8 @@ var KeystoreManager = class {
    */
   static async createEncryptedKeystore(payload, password, options) {
     if (!password) throw new Error("Password cannot be empty.");
-    if (password.length < 8) throw new Error("Password must be at least 8 characters long.");
+    if (password.length < 8)
+      throw new Error("Password must be at least 8 characters long.");
     const salt = crypto.randomBytes(16);
     const nonce = crypto.randomBytes(12);
     const iterations = options.iterations || 3;
@@ -801,7 +866,10 @@ var KeystoreManager = class {
    */
   static async decryptEncryptedKeystore(keystore, password) {
     if (keystore.version !== this.KEYSTORE_FORMAT_VERSION) {
-      return { success: false, error: `Unsupported keystore version: ${keystore.version}` };
+      return {
+        success: false,
+        error: `Unsupported keystore version: ${keystore.version}`
+      };
     }
     try {
       const salt = Buffer.from(keystore.kdf.salt, "base64");
@@ -820,10 +888,7 @@ var KeystoreManager = class {
       const derivedKey = Buffer.from(derivedKeyHex, "hex");
       const decipher = crypto.createDecipheriv("aes-256-gcm", derivedKey, nonce);
       decipher.setAuthTag(tag);
-      const decrypted = Buffer.concat([
-        decipher.update(encryptedData),
-        decipher.final()
-      ]);
+      const decrypted = Buffer.concat([decipher.update(encryptedData), decipher.final()]);
       derivedKey.fill(0);
       const payload = JSON.parse(decrypted.toString("utf8"));
       return { success: true, payload };
@@ -866,7 +931,9 @@ var KeystoreManager = class {
       }
       return keystore;
     } catch (e) {
-      throw new Error(`Failed to load keystore at ${filePath}: ${e instanceof Error ? e.message : String(e)}`);
+      throw new Error(
+        `Failed to load keystore at ${filePath}: ${e instanceof Error ? e.message : String(e)}`
+      );
     }
   }
   /**
@@ -883,7 +950,9 @@ var KeystoreManager = class {
         mode: 384
       });
     } catch (e) {
-      throw new Error(`Failed to save keystore at ${filePath}: ${e instanceof Error ? e.message : String(e)}`);
+      throw new Error(
+        `Failed to save keystore at ${filePath}: ${e instanceof Error ? e.message : String(e)}`
+      );
     }
   }
 };
@@ -907,9 +976,14 @@ async function getOrCreateDevAccount(workspaceDir, index, alias) {
   const filePath = path4.join(devAccountsDir, `${alias}.json`);
   if (fs4.existsSync(filePath)) {
     const keystore2 = await KeystoreManager.loadEncryptedKeystore(filePath);
-    const unlock = await KeystoreManager.decryptEncryptedKeystore(keystore2, DEV_ACCOUNTS_PASSWORD);
+    const unlock = await KeystoreManager.decryptEncryptedKeystore(
+      keystore2,
+      DEV_ACCOUNTS_PASSWORD
+    );
     if (!unlock.success || !unlock.payload) {
-      throw new Error(`Failed to decrypt dev account ${alias}. Expected password: ${DEV_ACCOUNTS_PASSWORD}`);
+      throw new Error(
+        `Failed to decrypt dev account ${alias}. Expected password: ${DEV_ACCOUNTS_PASSWORD}`
+      );
     }
     return {
       address: unlock.payload.address,
@@ -919,15 +993,21 @@ async function getOrCreateDevAccount(workspaceDir, index, alias) {
   }
   const seedString = `${SIMNET_DETERMINISTIC_SEED}-${index}`;
   const privateKeyHex = crypto2.createHash("sha256").update(seedString).digest("hex");
-  let sdk;
+  let sdkModule;
   try {
-    sdk = await import("@kaspa/core-lib");
+    sdkModule = await import(
+      /* @vite-ignore */
+      "@kaspa/core-lib"
+    );
   } catch (e) {
-    console.warn(`
+    console.warn(
+      `
 [Warning] Kaspa SDK (@kaspa/core-lib) is not installed in the workspace.
-Could not generate dev account '${alias}'.`);
+Could not generate dev account '${alias}'.`
+    );
     return { address: "", privateKey: "", publicKey: "" };
   }
+  const sdk = sdkModule.default || sdkModule;
   const privKey = new sdk.PrivateKey(privateKeyHex);
   const pubKey = privKey.toPublicKey();
   const address = pubKey.toAddress("simnet").toString();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hardkas/accounts",
-  "version": "0.7.1-alpha",
+  "version": "0.7.4-alpha",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -17,10 +17,10 @@
   ],
   "dependencies": {
     "hash-wasm": "^4.12.0",
-    "@hardkas/artifacts": "0.7.1-alpha",
-    "@hardkas/config": "0.7.1-alpha",
-    "@hardkas/localnet": "0.7.1-alpha",
-    "@hardkas/core": "0.7.1-alpha"
+    "@hardkas/config": "0.7.4-alpha",
+    "@hardkas/artifacts": "0.7.4-alpha",
+    "@hardkas/localnet": "0.7.4-alpha",
+    "@hardkas/core": "0.7.4-alpha"
   },
   "devDependencies": {
     "tsup": "^8.3.5",