@hardkas/accounts 0.8.14-alpha → 0.8.16-alpha

package/dist/index.d.ts

@@ -249,6 +249,8 @@ interface RealDevAccount {
     readonly publicKey?: string;
     /** @deprecated Use keystoreRef for encrypted storage. Plaintext keys in this field are considered legacy/unsafe. */
     readonly privateKey?: string;
+    /** Environment variable name containing the private key */
+    readonly privateKeyEnv?: string;
     /** Reference to the encrypted keystore file in .hardkas/keystore/ */
     readonly keystoreRef?: string;
     readonly createdAt: string;
@@ -278,6 +280,7 @@ declare function importRealDevAccount(store: RealAccountStore, account: {
     readonly address: string;
     readonly publicKey?: string;
     readonly privateKey?: string;
+    readonly privateKeyEnv?: string;
     readonly keystoreRef?: string;
 }): RealAccountStore;
 declare function removeRealDevAccount(store: RealAccountStore, name: string): RealAccountStore;

package/dist/index.js

@@ -214,7 +214,9 @@ function resolveHardkasAccount(options) {
       name: realAcc.name,
       kind: "kaspa-private-key",
       // Assuming Kaspa for now, could be extensible
-      address: realAcc.address
+      address: realAcc.address,
+      ...realAcc.privateKeyEnv ? { privateKeyEnv: realAcc.privateKeyEnv } : {},
+      ...realAcc.privateKey ? { privateKey: realAcc.privateKey } : {}
     };
   }
   const detAccounts = createDeterministicAccounts();
@@ -271,7 +273,9 @@ function listHardkasAccounts(config) {
       accounts.set(realAcc.name, {
         name: realAcc.name,
         kind: "kaspa-private-key",
-        address: realAcc.address
+        address: realAcc.address,
+        ...realAcc.privateKeyEnv ? { privateKeyEnv: realAcc.privateKeyEnv } : {},
+        ...realAcc.privateKey ? { privateKey: realAcc.privateKey } : {}
       });
     }
   }
@@ -523,7 +527,13 @@ var KaspaWasmPrivateKeySigner = class {
       mode: plan.mode,
       allowMainnet: this.options.allowMainnet
     });
-    const pkValue = account.privateKeyEnv ? process.env[account.privateKeyEnv] : void 0;
+    let pkValue = account.privateKeyEnv ? process.env[account.privateKeyEnv] : void 0;
+    if (!pkValue && account.privateKey) {
+      if (plan.networkId === "mainnet") {
+        throw new Error(`Mainnet guard: Unsafe plaintext privateKey fallback is forbidden on mainnet for account '${account.name}'. Use privateKeyEnv instead.`);
+      }
+      pkValue = account.privateKey;
+    }
     if (!pkValue) {
       throw new Error(`Missing required private key for account '${account.name}'.`);
     }
@@ -688,7 +698,11 @@ async function signTxPlanArtifact(input) {
         payload: result.signedTransaction?.payload || ""
       },
       lineage: createLineageTransition(planArtifact, "hardkas.signedTx"),
-      ...planArtifact.workflowId ? { workflowId: planArtifact.workflowId } : {}
+      ...planArtifact.workflowId ? { workflowId: planArtifact.workflowId } : {},
+      ...planArtifact.assumptionLevel ? { assumptionLevel: planArtifact.assumptionLevel } : {},
+      ...planArtifact.policyRefs ? { policyRefs: planArtifact.policyRefs } : {},
+      ...planArtifact.networkProfileRef ? { networkProfileRef: planArtifact.networkProfileRef } : {},
+      ...planArtifact.assumptionRef ? { assumptionRef: planArtifact.assumptionRef } : {}
     };
     const contentHash = calculateContentHash2(artifact);
     artifact.signedId = `signed-${contentHash.slice(0, 16)}`;
@@ -1224,28 +1238,74 @@ async function getOrCreateDevAccount(workspaceDir, index, alias) {
   }
   const seedString = `${SIMNET_DETERMINISTIC_SEED}-${index}`;
   const privateKeyHex = crypto2.createHash("sha256").update(seedString).digest("hex");
-  let sdkModule;
+  const network = "simnet";
+  const isSimnet = ["simnet", "kaspasim", "local"].includes(network);
+  let address = "";
+  let privateKey = "";
+  let publicKey = "";
   try {
-    sdkModule = await import(
-      /* @vite-ignore */
-      "@kaspa/core-lib"
-    );
+    if (isSimnet) {
+      let kaspaWasm;
+      try {
+        kaspaWasm = await import(
+          /* @vite-ignore */
+          "kaspa-wasm"
+        );
+      } catch (e) {
+        console.warn(`
+[Warning] kaspa-wasm is not installed. Required for simnet.`);
+        return { address: "", privateKey: "", publicKey: "" };
+      }
+      const privKey = new kaspaWasm.PrivateKey(privateKeyHex);
+      const kp = privKey.toKeypair();
+      address = kp.toAddress(network).toString();
+      publicKey = kp.publicKey;
+      privateKey = kp.privateKey;
+    } else {
+      let sdkModule;
+      try {
+        sdkModule = await import(
+          /* @vite-ignore */
+          "@kaspa/core-lib"
+        );
+      } catch (e) {
+        console.warn(`
+[Warning] @kaspa/core-lib is not installed.`);
+        return { address: "", privateKey: "", publicKey: "" };
+      }
+      const sdk = sdkModule.default || sdkModule;
+      if (typeof sdk.initRuntime === "function") {
+        await sdk.initRuntime();
+      }
+      const privKey = new sdk.PrivateKey(privateKeyHex);
+      const pubKey = privKey.toPublicKey();
+      try {
+        address = pubKey.toAddress(network).toString();
+      } catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        if (msg.includes("Second argument must be") || msg.includes("Unsupported")) {
+          const err = new Error("DEV_ACCOUNT_BACKEND_UNSUPPORTED_NETWORK");
+          err.code = "DEV_ACCOUNT_BACKEND_UNSUPPORTED_NETWORK";
+          throw err;
+        }
+        throw e;
+      }
+      publicKey = pubKey.toString();
+      privateKey = privKey.toString();
+    }
   } catch (e) {
-    console.warn(
-      `
-[Warning] Kaspa SDK (@kaspa/core-lib) is not installed in the workspace.
-Could not generate dev account '${alias}'.`
-    );
+    if (e.message === "DEV_ACCOUNT_BACKEND_UNSUPPORTED_NETWORK") {
+      throw e;
+    }
+    console.warn(`
+[Warning] Could not generate dev account '${alias}'.
+${e.message}`);
     return { address: "", privateKey: "", publicKey: "" };
   }
-  const sdk = sdkModule.default || sdkModule;
-  const privKey = new sdk.PrivateKey(privateKeyHex);
-  const pubKey = privKey.toPublicKey();
-  const address = pubKey.toAddress("simnet").toString();
   const accountData = {
     address,
-    privateKey: privKey.toString(),
-    publicKey: pubKey.toString()
+    privateKey,
+    publicKey
   };
   if (!fs4.existsSync(devAccountsDir)) {
     await fs4.promises.mkdir(devAccountsDir, { recursive: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hardkas/accounts",
-  "version": "0.8.14-alpha",
+  "version": "0.8.16-alpha",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -19,10 +19,10 @@
   "dependencies": {
     "hash-wasm": "^4.12.0",
     "kaspa-wasm": "0.13.0",
-    "@hardkas/artifacts": "0.8.14-alpha",
-    "@hardkas/config": "0.8.14-alpha",
-    "@hardkas/core": "0.8.14-alpha",
-    "@hardkas/localnet": "0.8.14-alpha"
+    "@hardkas/artifacts": "0.8.16-alpha",
+    "@hardkas/config": "0.8.16-alpha",
+    "@hardkas/core": "0.8.16-alpha",
+    "@hardkas/localnet": "0.8.16-alpha"
   },
   "devDependencies": {
     "tsup": "^8.3.5",