@hardkas/accounts 0.8.19-alpha → 0.9.0-alpha

package/dist/index.js

@@ -52,6 +52,17 @@ function loadRealAccountStoreSync(options) {
   try {
     const data = fs.readFileSync(filePath, "utf-8");
     const store = JSON.parse(data);
+    for (const a of store.accounts) {
+      if ("privateKey" in a && a.privateKey !== void 0) {
+        if (a.privateKey === null || a.privateKey === "" || a.privateKey === "[object Object]" || typeof a.privateKey === "object" || typeof a.privateKey === "string" && a.privateKey.includes("__wbg_ptr") || typeof a.privateKey === "object" && "__wbg_ptr" in a.privateKey) {
+          const err = new Error(
+            "CORRUPTED_PRIVATE_KEY_SERIALIZATION: This account was generated by a broken alpha and must be regenerated. The private key was not recoverably stored."
+          );
+          err.code = "CORRUPTED_PRIVATE_KEY_SERIALIZATION";
+          throw err;
+        }
+      }
+    }
     const plaintextAccounts = store.accounts.filter((a) => a.privateKey);
     if (plaintextAccounts.length > 0) {
       const names = plaintextAccounts.map((a) => a.name).join(", ");
@@ -899,6 +910,11 @@ var KaspaWasmPrivateKeySigner = class {
       err.code = "DEV_ACCOUNT_KEY_UNAVAILABLE";
       throw err;
     }
+    if (typeof pkValue !== "string" || pkValue.trim() === "" || !/^[0-9a-fA-F]{64}$/.test(pkValue)) {
+      const err = new Error("INVALID_PRIVATE_KEY_MATERIAL: Private key must be a valid 64-character hex string.");
+      err.code = "INVALID_PRIVATE_KEY_MATERIAL";
+      throw err;
+    }
     try {
       const privateKey = new sdk.PrivateKey(pkValue);
       const utxos = plan.inputs.map((u) => {
@@ -1118,8 +1134,11 @@ var KaspaSdkKeyGenerator = class {
         const privKey = new sdk.PrivateKey(hex);
         const kp = privKey.toKeypair();
         const address = kp.toAddress(network).toString();
-        const privateKeyStr = kp.privateKey;
-        const publicKeyStr = kp.publicKey;
+        const privateKeyStr = typeof kp.privateKey === "object" ? hex : kp.privateKey;
+        const publicKeyStr = typeof kp.publicKey === "object" ? kp.publicKey.toString() : kp.publicKey;
+        if (typeof privateKeyStr !== "string" || !/^[0-9a-f]{64}$/i.test(privateKeyStr)) {
+          throw new Error("Generated private key is not a valid 64-character hex string.");
+        }
         return {
           address,
           publicKey: publicKeyStr,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hardkas/accounts",
-  "version": "0.8.19-alpha",
+  "version": "0.9.0-alpha",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -19,10 +19,10 @@
   "dependencies": {
     "hash-wasm": "^4.12.0",
     "kaspa-wasm": "0.13.0",
-    "@hardkas/config": "0.8.19-alpha",
-    "@hardkas/artifacts": "0.8.19-alpha",
-    "@hardkas/core": "0.8.19-alpha",
-    "@hardkas/localnet": "0.8.19-alpha"
+    "@hardkas/artifacts": "0.9.0-alpha",
+    "@hardkas/config": "0.9.0-alpha",
+    "@hardkas/core": "0.9.0-alpha",
+    "@hardkas/localnet": "0.9.0-alpha"
   },
   "devDependencies": {
     "tsup": "^8.3.5",