@metamask-previews/wallet-cli 0.0.0-preview-2a8139a3e → 0.0.0-preview-b8d04f274

package/dist/commands/wallet/unlock.d.mts

@@ -1,11 +0,0 @@
-import { Command } from "@oclif/core";
-export default class WalletUnlock extends Command {
-    static description: string;
-    static examples: string[];
-    static flags: {
-        password: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        timeout: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
-    };
-    run(): Promise<void>;
-}
-//# sourceMappingURL=unlock.d.mts.map

package/dist/commands/wallet/unlock.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"unlock.d.mts","sourceRoot":"","sources":["../../../src/commands/wallet/unlock.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAS,oBAAoB;AAU7C,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,OAAO;IAC/C,OAAgB,WAAW,SAGyC;IAEpE,OAAgB,QAAQ,WAItB;IAEF,OAAgB,KAAK;;;MAanB;IAEW,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAgDlC"}

package/dist/commands/wallet/unlock.mjs

@@ -1,73 +0,0 @@
-import { isJsonRpcFailure } from "@metamask/utils";
-import { Command, Flags } from "@oclif/core";
-import { sendCommand } from "../../daemon/daemon-client.mjs";
-import { getDaemonPaths } from "../../daemon/paths.mjs";
-import { promptPassword } from "../../daemon/prompts.mjs";
-import { emptyToUndefined, makeDaemonConnectionError } from "../../daemon/utils.mjs";
-class WalletUnlock extends Command {
-    async run() {
-        const { flags } = await this.parse(WalletUnlock);
-        const { timeout: timeoutMs } = flags;
-        // `emptyToUndefined` collapses `--password ''` and `MM_WALLET_PASSWORD=''`
-        // to undefined so the prompt fires instead of sending an empty string.
-        const flagPassword = emptyToUndefined(flags.password);
-        let password;
-        try {
-            password = flagPassword ?? (await promptPassword());
-        }
-        catch (error) {
-            // Only swallow ExitPromptError (@inquirer/core's Ctrl+C signal); any
-            // other rejection (import failure, internal prompt crash) should surface.
-            if (error instanceof Error && error.name === 'ExitPromptError') {
-                return;
-            }
-            throw error;
-        }
-        const { socketPath } = getDaemonPaths(this.config.dataDir);
-        let response;
-        try {
-            response = await sendCommand({
-                socketPath,
-                method: 'call',
-                params: ['KeyringController:submitPassword', password],
-                ...(timeoutMs === undefined ? {} : { timeoutMs }),
-            });
-        }
-        catch (error) {
-            this.error(makeDaemonConnectionError(error));
-        }
-        if (isJsonRpcFailure(response)) {
-            const { code, message, data } = response.error;
-            // `isJsonRpcFailure` already validates that `data` is JSON, so
-            // `JSON.stringify` cannot throw here.
-            const dataSuffix = data === undefined || data === null
-                ? ''
-                : ` data=${JSON.stringify(data)}`;
-            this.error(`Failed to unlock: ${message} (code ${String(code)})${dataSuffix}`);
-        }
-        this.log('Wallet unlocked.');
-    }
-}
-WalletUnlock.description = 'Unlock the wallet (submits the password to KeyringController). ' +
-    'Use this after `mm daemon start` was run without `--password`, or ' +
-    'after the keyring was locked via `KeyringController:setLocked`.';
-WalletUnlock.examples = [
-    '<%= config.bin %> wallet unlock --password <pw>',
-    'MM_WALLET_PASSWORD=<pw> <%= config.bin %> wallet unlock',
-    '<%= config.bin %> wallet unlock   # prompts interactively',
-];
-WalletUnlock.flags = {
-    password: Flags.string({
-        description: 'Wallet password (testing only — use MM_WALLET_PASSWORD env var in production). ' +
-            'When omitted, the command prompts interactively.',
-        env: 'MM_WALLET_PASSWORD',
-        required: false,
-    }),
-    timeout: Flags.integer({
-        char: 't',
-        description: 'Response timeout in milliseconds',
-        required: false,
-    }),
-};
-export default WalletUnlock;
-//# sourceMappingURL=unlock.mjs.map

package/dist/commands/wallet/unlock.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"unlock.mjs","sourceRoot":"","sources":["../../../src/commands/wallet/unlock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,wBAAwB;AACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB;AAE7C,OAAO,EAAE,WAAW,EAAE,uCAAmC;AACzD,OAAO,EAAE,cAAc,EAAE,+BAA2B;AACpD,OAAO,EAAE,cAAc,EAAE,iCAA6B;AACtD,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EAC1B,+BAA2B;AAE5B,MAAqB,YAAa,SAAQ,OAAO;IA2BxC,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;QAErC,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,0EAA0E;YAC1E,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3D,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,WAAW,CAAC;gBAC3B,UAAU;gBACV,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,CAAC,kCAAkC,EAAE,QAAQ,CAAC;gBACtD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;YAC/C,+DAA+D;YAC/D,sCAAsC;YACtC,MAAM,UAAU,GACd,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;gBACjC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,CACR,qBAAqB,OAAO,UAAU,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,CACnE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC/B,CAAC;;AAzEe,wBAAW,GACzB,iEAAiE;IACjE,oEAAoE;IACpE,iEAAiE,CAAC;AAEpD,qBAAQ,GAAG;IACzB,iDAAiD;IACjD,yDAAyD;IACzD,2DAA2D;CAC5D,CAAC;AAEc,kBAAK,GAAG;IACtB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;QACrB,WAAW,EACT,iFAAiF;YACjF,kDAAkD;QACpD,GAAG,EAAE,oBAAoB;QACzB,QAAQ,EAAE,KAAK;KAChB,CAAC;IACF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;QACrB,IAAI,EAAE,GAAG;QACT,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE,KAAK;KAChB,CAAC;CACH,CAAC;eAzBiB,YAAY","sourcesContent":["import { isJsonRpcFailure } from '@metamask/utils';\nimport { Command, Flags } from '@oclif/core';\n\nimport { sendCommand } from '../../daemon/daemon-client';\nimport { getDaemonPaths } from '../../daemon/paths';\nimport { promptPassword } from '../../daemon/prompts';\nimport {\n  emptyToUndefined,\n  makeDaemonConnectionError,\n} from '../../daemon/utils';\n\nexport default class WalletUnlock extends Command {\n  static override description =\n    'Unlock the wallet (submits the password to KeyringController). ' +\n    'Use this after `mm daemon start` was run without `--password`, or ' +\n    'after the keyring was locked via `KeyringController:setLocked`.';\n\n  static override examples = [\n    '<%= config.bin %> wallet unlock --password <pw>',\n    'MM_WALLET_PASSWORD=<pw> <%= config.bin %> wallet unlock',\n    '<%= config.bin %> wallet unlock   # prompts interactively',\n  ];\n\n  static override flags = {\n    password: Flags.string({\n      description:\n        'Wallet password (testing only — use MM_WALLET_PASSWORD env var in production). ' +\n        'When omitted, the command prompts interactively.',\n      env: 'MM_WALLET_PASSWORD',\n      required: false,\n    }),\n    timeout: Flags.integer({\n      char: 't',\n      description: 'Response timeout in milliseconds',\n      required: false,\n    }),\n  };\n\n  public async run(): Promise<void> {\n    const { flags } = await this.parse(WalletUnlock);\n    const { timeout: timeoutMs } = flags;\n\n    // `emptyToUndefined` collapses `--password ''` and `MM_WALLET_PASSWORD=''`\n    // to undefined so the prompt fires instead of sending an empty string.\n    const flagPassword = emptyToUndefined(flags.password);\n    let password: string;\n    try {\n      password = flagPassword ?? (await promptPassword());\n    } catch (error) {\n      // Only swallow ExitPromptError (@inquirer/core's Ctrl+C signal); any\n      // other rejection (import failure, internal prompt crash) should surface.\n      if (error instanceof Error && error.name === 'ExitPromptError') {\n        return;\n      }\n      throw error;\n    }\n\n    const { socketPath } = getDaemonPaths(this.config.dataDir);\n\n    let response;\n    try {\n      response = await sendCommand({\n        socketPath,\n        method: 'call',\n        params: ['KeyringController:submitPassword', password],\n        ...(timeoutMs === undefined ? {} : { timeoutMs }),\n      });\n    } catch (error) {\n      this.error(makeDaemonConnectionError(error));\n    }\n\n    if (isJsonRpcFailure(response)) {\n      const { code, message, data } = response.error;\n      // `isJsonRpcFailure` already validates that `data` is JSON, so\n      // `JSON.stringify` cannot throw here.\n      const dataSuffix =\n        data === undefined || data === null\n          ? ''\n          : ` data=${JSON.stringify(data)}`;\n      this.error(\n        `Failed to unlock: ${message} (code ${String(code)})${dataSuffix}`,\n      );\n    }\n\n    this.log('Wallet unlocked.');\n  }\n}\n"]}

package/dist/daemon/secrets.cjs

@@ -1,137 +0,0 @@
-"use strict";
-var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
-    if (kind === "m") throw new TypeError("Private method is not writable");
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
-    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
-};
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _Password_value, _Srp_value;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Srp = exports.Password = void 0;
-const scure_bip39_1 = require("@metamask/scure-bip39");
-const english_1 = require("@metamask/scure-bip39/dist/wordlists/english.js");
-const REDACTED = '[redacted]';
-const VALID_SRP_WORD_COUNTS = [12, 15, 18, 21, 24];
-const INSPECT_CUSTOM = Symbol.for('nodejs.util.inspect.custom');
-const WORDLIST_SET = new Set(english_1.wordlist);
-/**
- * Opaque wrapper around a wallet password.
- *
- * Constructed via {@link Password.from}, which validates the input. The
- * underlying string is only reachable through {@link Password.unwrap}; every
- * other path (`toString`, `JSON.stringify`, `util.inspect`, template-literal
- * interpolation) yields `[redacted]`. This makes accidental logging produce a
- * harmless placeholder instead of leaking the secret.
- */
-class Password {
-    // See .from() for why this is private.
-    // eslint-disable-next-line no-restricted-syntax
-    constructor(value) {
-        _Password_value.set(this, void 0);
-        __classPrivateFieldSet(this, _Password_value, value, "f");
-    }
-    /**
-     * Wrap a non-empty string as a {@link Password}.
-     *
-     * Matches the `@metamask/keyring-controller` convention: any non-empty
-     * string is acceptable; minimum-length policy is left to the keyring.
-     *
-     * @param value - The raw password string.
-     * @returns A redacting {@link Password} wrapper.
-     * @throws If `value` is empty.
-     */
-    static from(value) {
-        if (value.length === 0) {
-            throw new Error('Password must be a non-empty string');
-        }
-        return new Password(value);
-    }
-    /**
-     * Reveal the underlying password string. Call this only at trust boundaries
-     * (e.g. handing the value to the keyring or to a child-process env var).
-     *
-     * @returns The original password string.
-     */
-    unwrap() {
-        return __classPrivateFieldGet(this, _Password_value, "f");
-    }
-    toString() {
-        return REDACTED;
-    }
-    toJSON() {
-        return REDACTED;
-    }
-    [(_Password_value = new WeakMap(), INSPECT_CUSTOM)]() {
-        return REDACTED;
-    }
-}
-exports.Password = Password;
-/**
- * Opaque wrapper around a BIP-39 secret recovery phrase.
- *
- * Constructed via {@link Srp.from}, which validates the word count
- * (12/15/18/21/24) and that every word is present in the BIP-39 English
- * wordlist. The underlying string is only reachable through {@link Srp.unwrap};
- * every other path yields `[redacted]`.
- */
-class Srp {
-    // See .from() for why this is private.
-    // eslint-disable-next-line no-restricted-syntax
-    constructor(value) {
-        _Srp_value.set(this, void 0);
-        __classPrivateFieldSet(this, _Srp_value, value, "f");
-    }
-    /**
-     * Validate and wrap a BIP-39 mnemonic phrase.
-     *
-     * Whitespace is normalized (trimmed and collapsed) before validation so that
-     * copy-pasted phrases with accidental leading/trailing/extra spaces are
-     * accepted. Catching malformed input here (rather than letting it reach
-     * `KeyringController:createNewVaultAndRestore`) produces a clearer error.
-     *
-     * @param value - The raw mnemonic string.
-     * @returns A redacting {@link Srp} wrapper containing the normalized phrase.
-     * @throws If the word count is not one of 12/15/18/21/24, if any word is
-     * not present in the BIP-39 English wordlist, or if the checksum is invalid.
-     */
-    static from(value) {
-        const words = value.trim().split(/\s+/u);
-        if (!VALID_SRP_WORD_COUNTS.includes(words.length)) {
-            throw new Error(`Secret recovery phrase must be 12, 15, 18, 21, or 24 words (got ${words.length})`);
-        }
-        for (const word of words) {
-            if (!WORDLIST_SET.has(word)) {
-                throw new Error('Secret recovery phrase contains a word not in the BIP-39 English wordlist');
-            }
-        }
-        const normalized = words.join(' ');
-        if (!(0, scure_bip39_1.validateMnemonic)(normalized, english_1.wordlist)) {
-            throw new Error('Secret recovery phrase has an invalid checksum');
-        }
-        return new Srp(normalized);
-    }
-    /**
-     * Reveal the underlying mnemonic string. Call this only at trust boundaries.
-     *
-     * @returns The original mnemonic string.
-     */
-    unwrap() {
-        return __classPrivateFieldGet(this, _Srp_value, "f");
-    }
-    toString() {
-        return REDACTED;
-    }
-    toJSON() {
-        return REDACTED;
-    }
-    [(_Srp_value = new WeakMap(), INSPECT_CUSTOM)]() {
-        return REDACTED;
-    }
-}
-exports.Srp = Srp;
-//# sourceMappingURL=secrets.cjs.map

package/dist/daemon/secrets.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.cjs","sourceRoot":"","sources":["../../src/daemon/secrets.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,uDAAyD;AACzD,6EAAwE;AAExE,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,qBAAqB,GAAsB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAEtE,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAEhE,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,kBAAQ,CAAC,CAAC;AAE5D;;;;;;;;GAQG;AACH,MAAa,QAAQ;IAGnB,uCAAuC;IACvC,gDAAgD;IAChD,YAAoB,KAAa;QAJxB,kCAAe;QAKtB,uBAAA,IAAI,mBAAU,KAAK,MAAA,CAAC;IACtB,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,CAAC,KAAa;QACvB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,MAAM;QACJ,OAAO,uBAAA,IAAI,uBAAO,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM;QACJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,mCAAC,cAAc,EAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AA/CD,4BA+CC;AAED;;;;;;;GAOG;AACH,MAAa,GAAG;IAGd,uCAAuC;IACvC,gDAAgD;IAChD,YAAoB,KAAa;QAJxB,6BAAe;QAKtB,uBAAA,IAAI,cAAU,KAAK,MAAA,CAAC;IACtB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,IAAI,CAAC,KAAa;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,mEAAmE,KAAK,CAAC,MAAM,GAAG,CACnF,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,IAAA,8BAAgB,EAAC,UAAU,EAAE,kBAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,OAAO,uBAAA,IAAI,kBAAO,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM;QACJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8BAAC,cAAc,EAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAhED,kBAgEC","sourcesContent":["import { validateMnemonic } from '@metamask/scure-bip39';\nimport { wordlist } from '@metamask/scure-bip39/dist/wordlists/english';\n\nconst REDACTED = '[redacted]';\n\nconst VALID_SRP_WORD_COUNTS: readonly number[] = [12, 15, 18, 21, 24];\n\nconst INSPECT_CUSTOM = Symbol.for('nodejs.util.inspect.custom');\n\nconst WORDLIST_SET: ReadonlySet<string> = new Set(wordlist);\n\n/**\n * Opaque wrapper around a wallet password.\n *\n * Constructed via {@link Password.from}, which validates the input. The\n * underlying string is only reachable through {@link Password.unwrap}; every\n * other path (`toString`, `JSON.stringify`, `util.inspect`, template-literal\n * interpolation) yields `[redacted]`. This makes accidental logging produce a\n * harmless placeholder instead of leaking the secret.\n */\nexport class Password {\n  readonly #value: string;\n\n  // See .from() for why this is private.\n  // eslint-disable-next-line no-restricted-syntax\n  private constructor(value: string) {\n    this.#value = value;\n  }\n\n  /**\n   * Wrap a non-empty string as a {@link Password}.\n   *\n   * Matches the `@metamask/keyring-controller` convention: any non-empty\n   * string is acceptable; minimum-length policy is left to the keyring.\n   *\n   * @param value - The raw password string.\n   * @returns A redacting {@link Password} wrapper.\n   * @throws If `value` is empty.\n   */\n  static from(value: string): Password {\n    if (value.length === 0) {\n      throw new Error('Password must be a non-empty string');\n    }\n    return new Password(value);\n  }\n\n  /**\n   * Reveal the underlying password string. Call this only at trust boundaries\n   * (e.g. handing the value to the keyring or to a child-process env var).\n   *\n   * @returns The original password string.\n   */\n  unwrap(): string {\n    return this.#value;\n  }\n\n  toString(): string {\n    return REDACTED;\n  }\n\n  toJSON(): string {\n    return REDACTED;\n  }\n\n  [INSPECT_CUSTOM](): string {\n    return REDACTED;\n  }\n}\n\n/**\n * Opaque wrapper around a BIP-39 secret recovery phrase.\n *\n * Constructed via {@link Srp.from}, which validates the word count\n * (12/15/18/21/24) and that every word is present in the BIP-39 English\n * wordlist. The underlying string is only reachable through {@link Srp.unwrap};\n * every other path yields `[redacted]`.\n */\nexport class Srp {\n  readonly #value: string;\n\n  // See .from() for why this is private.\n  // eslint-disable-next-line no-restricted-syntax\n  private constructor(value: string) {\n    this.#value = value;\n  }\n\n  /**\n   * Validate and wrap a BIP-39 mnemonic phrase.\n   *\n   * Whitespace is normalized (trimmed and collapsed) before validation so that\n   * copy-pasted phrases with accidental leading/trailing/extra spaces are\n   * accepted. Catching malformed input here (rather than letting it reach\n   * `KeyringController:createNewVaultAndRestore`) produces a clearer error.\n   *\n   * @param value - The raw mnemonic string.\n   * @returns A redacting {@link Srp} wrapper containing the normalized phrase.\n   * @throws If the word count is not one of 12/15/18/21/24, if any word is\n   * not present in the BIP-39 English wordlist, or if the checksum is invalid.\n   */\n  static from(value: string): Srp {\n    const words = value.trim().split(/\\s+/u);\n    if (!VALID_SRP_WORD_COUNTS.includes(words.length)) {\n      throw new Error(\n        `Secret recovery phrase must be 12, 15, 18, 21, or 24 words (got ${words.length})`,\n      );\n    }\n    for (const word of words) {\n      if (!WORDLIST_SET.has(word)) {\n        throw new Error(\n          'Secret recovery phrase contains a word not in the BIP-39 English wordlist',\n        );\n      }\n    }\n\n    const normalized = words.join(' ');\n    if (!validateMnemonic(normalized, wordlist)) {\n      throw new Error('Secret recovery phrase has an invalid checksum');\n    }\n    return new Srp(normalized);\n  }\n\n  /**\n   * Reveal the underlying mnemonic string. Call this only at trust boundaries.\n   *\n   * @returns The original mnemonic string.\n   */\n  unwrap(): string {\n    return this.#value;\n  }\n\n  toString(): string {\n    return REDACTED;\n  }\n\n  toJSON(): string {\n    return REDACTED;\n  }\n\n  [INSPECT_CUSTOM](): string {\n    return REDACTED;\n  }\n}\n"]}

package/dist/daemon/secrets.d.cts

@@ -1,72 +0,0 @@
-declare const INSPECT_CUSTOM: unique symbol;
-/**
- * Opaque wrapper around a wallet password.
- *
- * Constructed via {@link Password.from}, which validates the input. The
- * underlying string is only reachable through {@link Password.unwrap}; every
- * other path (`toString`, `JSON.stringify`, `util.inspect`, template-literal
- * interpolation) yields `[redacted]`. This makes accidental logging produce a
- * harmless placeholder instead of leaking the secret.
- */
-export declare class Password {
-    #private;
-    private constructor();
-    /**
-     * Wrap a non-empty string as a {@link Password}.
-     *
-     * Matches the `@metamask/keyring-controller` convention: any non-empty
-     * string is acceptable; minimum-length policy is left to the keyring.
-     *
-     * @param value - The raw password string.
-     * @returns A redacting {@link Password} wrapper.
-     * @throws If `value` is empty.
-     */
-    static from(value: string): Password;
-    /**
-     * Reveal the underlying password string. Call this only at trust boundaries
-     * (e.g. handing the value to the keyring or to a child-process env var).
-     *
-     * @returns The original password string.
-     */
-    unwrap(): string;
-    toString(): string;
-    toJSON(): string;
-    [INSPECT_CUSTOM](): string;
-}
-/**
- * Opaque wrapper around a BIP-39 secret recovery phrase.
- *
- * Constructed via {@link Srp.from}, which validates the word count
- * (12/15/18/21/24) and that every word is present in the BIP-39 English
- * wordlist. The underlying string is only reachable through {@link Srp.unwrap};
- * every other path yields `[redacted]`.
- */
-export declare class Srp {
-    #private;
-    private constructor();
-    /**
-     * Validate and wrap a BIP-39 mnemonic phrase.
-     *
-     * Whitespace is normalized (trimmed and collapsed) before validation so that
-     * copy-pasted phrases with accidental leading/trailing/extra spaces are
-     * accepted. Catching malformed input here (rather than letting it reach
-     * `KeyringController:createNewVaultAndRestore`) produces a clearer error.
-     *
-     * @param value - The raw mnemonic string.
-     * @returns A redacting {@link Srp} wrapper containing the normalized phrase.
-     * @throws If the word count is not one of 12/15/18/21/24, if any word is
-     * not present in the BIP-39 English wordlist, or if the checksum is invalid.
-     */
-    static from(value: string): Srp;
-    /**
-     * Reveal the underlying mnemonic string. Call this only at trust boundaries.
-     *
-     * @returns The original mnemonic string.
-     */
-    unwrap(): string;
-    toString(): string;
-    toJSON(): string;
-    [INSPECT_CUSTOM](): string;
-}
-export {};
-//# sourceMappingURL=secrets.d.cts.map

package/dist/daemon/secrets.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.d.cts","sourceRoot":"","sources":["../../src/daemon/secrets.ts"],"names":[],"mappings":"AAOA,QAAA,MAAM,cAAc,eAA2C,CAAC;AAIhE;;;;;;;;GAQG;AACH,qBAAa,QAAQ;;IAKnB,OAAO;IAIP;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ;IAOpC;;;;;OAKG;IACH,MAAM,IAAI,MAAM;IAIhB,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,MAAM;IAIhB,CAAC,cAAc,CAAC,IAAI,MAAM;CAG3B;AAED;;;;;;;GAOG;AACH,qBAAa,GAAG;;IAKd,OAAO;IAIP;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG;IAsB/B;;;;OAIG;IACH,MAAM,IAAI,MAAM;IAIhB,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,MAAM;IAIhB,CAAC,cAAc,CAAC,IAAI,MAAM;CAG3B"}

package/dist/daemon/secrets.d.mts

@@ -1,72 +0,0 @@
-declare const INSPECT_CUSTOM: unique symbol;
-/**
- * Opaque wrapper around a wallet password.
- *
- * Constructed via {@link Password.from}, which validates the input. The
- * underlying string is only reachable through {@link Password.unwrap}; every
- * other path (`toString`, `JSON.stringify`, `util.inspect`, template-literal
- * interpolation) yields `[redacted]`. This makes accidental logging produce a
- * harmless placeholder instead of leaking the secret.
- */
-export declare class Password {
-    #private;
-    private constructor();
-    /**
-     * Wrap a non-empty string as a {@link Password}.
-     *
-     * Matches the `@metamask/keyring-controller` convention: any non-empty
-     * string is acceptable; minimum-length policy is left to the keyring.
-     *
-     * @param value - The raw password string.
-     * @returns A redacting {@link Password} wrapper.
-     * @throws If `value` is empty.
-     */
-    static from(value: string): Password;
-    /**
-     * Reveal the underlying password string. Call this only at trust boundaries
-     * (e.g. handing the value to the keyring or to a child-process env var).
-     *
-     * @returns The original password string.
-     */
-    unwrap(): string;
-    toString(): string;
-    toJSON(): string;
-    [INSPECT_CUSTOM](): string;
-}
-/**
- * Opaque wrapper around a BIP-39 secret recovery phrase.
- *
- * Constructed via {@link Srp.from}, which validates the word count
- * (12/15/18/21/24) and that every word is present in the BIP-39 English
- * wordlist. The underlying string is only reachable through {@link Srp.unwrap};
- * every other path yields `[redacted]`.
- */
-export declare class Srp {
-    #private;
-    private constructor();
-    /**
-     * Validate and wrap a BIP-39 mnemonic phrase.
-     *
-     * Whitespace is normalized (trimmed and collapsed) before validation so that
-     * copy-pasted phrases with accidental leading/trailing/extra spaces are
-     * accepted. Catching malformed input here (rather than letting it reach
-     * `KeyringController:createNewVaultAndRestore`) produces a clearer error.
-     *
-     * @param value - The raw mnemonic string.
-     * @returns A redacting {@link Srp} wrapper containing the normalized phrase.
-     * @throws If the word count is not one of 12/15/18/21/24, if any word is
-     * not present in the BIP-39 English wordlist, or if the checksum is invalid.
-     */
-    static from(value: string): Srp;
-    /**
-     * Reveal the underlying mnemonic string. Call this only at trust boundaries.
-     *
-     * @returns The original mnemonic string.
-     */
-    unwrap(): string;
-    toString(): string;
-    toJSON(): string;
-    [INSPECT_CUSTOM](): string;
-}
-export {};
-//# sourceMappingURL=secrets.d.mts.map

package/dist/daemon/secrets.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.d.mts","sourceRoot":"","sources":["../../src/daemon/secrets.ts"],"names":[],"mappings":"AAOA,QAAA,MAAM,cAAc,eAA2C,CAAC;AAIhE;;;;;;;;GAQG;AACH,qBAAa,QAAQ;;IAKnB,OAAO;IAIP;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ;IAOpC;;;;;OAKG;IACH,MAAM,IAAI,MAAM;IAIhB,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,MAAM;IAIhB,CAAC,cAAc,CAAC,IAAI,MAAM;CAG3B;AAED;;;;;;;GAOG;AACH,qBAAa,GAAG;;IAKd,OAAO;IAIP;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG;IAsB/B;;;;OAIG;IACH,MAAM,IAAI,MAAM;IAIhB,QAAQ,IAAI,MAAM;IAIlB,MAAM,IAAI,MAAM;IAIhB,CAAC,cAAc,CAAC,IAAI,MAAM;CAG3B"}

package/dist/daemon/secrets.mjs

@@ -1,132 +0,0 @@
-var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
-    if (kind === "m") throw new TypeError("Private method is not writable");
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
-    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
-};
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _Password_value, _Srp_value;
-import { validateMnemonic } from "@metamask/scure-bip39";
-import { wordlist } from "@metamask/scure-bip39/dist/wordlists/english.js";
-const REDACTED = '[redacted]';
-const VALID_SRP_WORD_COUNTS = [12, 15, 18, 21, 24];
-const INSPECT_CUSTOM = Symbol.for('nodejs.util.inspect.custom');
-const WORDLIST_SET = new Set(wordlist);
-/**
- * Opaque wrapper around a wallet password.
- *
- * Constructed via {@link Password.from}, which validates the input. The
- * underlying string is only reachable through {@link Password.unwrap}; every
- * other path (`toString`, `JSON.stringify`, `util.inspect`, template-literal
- * interpolation) yields `[redacted]`. This makes accidental logging produce a
- * harmless placeholder instead of leaking the secret.
- */
-export class Password {
-    // See .from() for why this is private.
-    // eslint-disable-next-line no-restricted-syntax
-    constructor(value) {
-        _Password_value.set(this, void 0);
-        __classPrivateFieldSet(this, _Password_value, value, "f");
-    }
-    /**
-     * Wrap a non-empty string as a {@link Password}.
-     *
-     * Matches the `@metamask/keyring-controller` convention: any non-empty
-     * string is acceptable; minimum-length policy is left to the keyring.
-     *
-     * @param value - The raw password string.
-     * @returns A redacting {@link Password} wrapper.
-     * @throws If `value` is empty.
-     */
-    static from(value) {
-        if (value.length === 0) {
-            throw new Error('Password must be a non-empty string');
-        }
-        return new Password(value);
-    }
-    /**
-     * Reveal the underlying password string. Call this only at trust boundaries
-     * (e.g. handing the value to the keyring or to a child-process env var).
-     *
-     * @returns The original password string.
-     */
-    unwrap() {
-        return __classPrivateFieldGet(this, _Password_value, "f");
-    }
-    toString() {
-        return REDACTED;
-    }
-    toJSON() {
-        return REDACTED;
-    }
-    [(_Password_value = new WeakMap(), INSPECT_CUSTOM)]() {
-        return REDACTED;
-    }
-}
-/**
- * Opaque wrapper around a BIP-39 secret recovery phrase.
- *
- * Constructed via {@link Srp.from}, which validates the word count
- * (12/15/18/21/24) and that every word is present in the BIP-39 English
- * wordlist. The underlying string is only reachable through {@link Srp.unwrap};
- * every other path yields `[redacted]`.
- */
-export class Srp {
-    // See .from() for why this is private.
-    // eslint-disable-next-line no-restricted-syntax
-    constructor(value) {
-        _Srp_value.set(this, void 0);
-        __classPrivateFieldSet(this, _Srp_value, value, "f");
-    }
-    /**
-     * Validate and wrap a BIP-39 mnemonic phrase.
-     *
-     * Whitespace is normalized (trimmed and collapsed) before validation so that
-     * copy-pasted phrases with accidental leading/trailing/extra spaces are
-     * accepted. Catching malformed input here (rather than letting it reach
-     * `KeyringController:createNewVaultAndRestore`) produces a clearer error.
-     *
-     * @param value - The raw mnemonic string.
-     * @returns A redacting {@link Srp} wrapper containing the normalized phrase.
-     * @throws If the word count is not one of 12/15/18/21/24, if any word is
-     * not present in the BIP-39 English wordlist, or if the checksum is invalid.
-     */
-    static from(value) {
-        const words = value.trim().split(/\s+/u);
-        if (!VALID_SRP_WORD_COUNTS.includes(words.length)) {
-            throw new Error(`Secret recovery phrase must be 12, 15, 18, 21, or 24 words (got ${words.length})`);
-        }
-        for (const word of words) {
-            if (!WORDLIST_SET.has(word)) {
-                throw new Error('Secret recovery phrase contains a word not in the BIP-39 English wordlist');
-            }
-        }
-        const normalized = words.join(' ');
-        if (!validateMnemonic(normalized, wordlist)) {
-            throw new Error('Secret recovery phrase has an invalid checksum');
-        }
-        return new Srp(normalized);
-    }
-    /**
-     * Reveal the underlying mnemonic string. Call this only at trust boundaries.
-     *
-     * @returns The original mnemonic string.
-     */
-    unwrap() {
-        return __classPrivateFieldGet(this, _Srp_value, "f");
-    }
-    toString() {
-        return REDACTED;
-    }
-    toJSON() {
-        return REDACTED;
-    }
-    [(_Srp_value = new WeakMap(), INSPECT_CUSTOM)]() {
-        return REDACTED;
-    }
-}
-//# sourceMappingURL=secrets.mjs.map

package/dist/daemon/secrets.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.mjs","sourceRoot":"","sources":["../../src/daemon/secrets.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,gBAAgB,EAAE,8BAA8B;AACzD,OAAO,EAAE,QAAQ,EAAE,wDAAqD;AAExE,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,qBAAqB,GAAsB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAEtE,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAEhE,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;AAE5D;;;;;;;;GAQG;AACH,MAAM,OAAO,QAAQ;IAGnB,uCAAuC;IACvC,gDAAgD;IAChD,YAAoB,KAAa;QAJxB,kCAAe;QAKtB,uBAAA,IAAI,mBAAU,KAAK,MAAA,CAAC;IACtB,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,CAAC,KAAa;QACvB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,MAAM;QACJ,OAAO,uBAAA,IAAI,uBAAO,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM;QACJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,mCAAC,cAAc,EAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,GAAG;IAGd,uCAAuC;IACvC,gDAAgD;IAChD,YAAoB,KAAa;QAJxB,6BAAe;QAKtB,uBAAA,IAAI,cAAU,KAAK,MAAA,CAAC;IACtB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,IAAI,CAAC,KAAa;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,mEAAmE,KAAK,CAAC,MAAM,GAAG,CACnF,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,OAAO,uBAAA,IAAI,kBAAO,CAAC;IACrB,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM;QACJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8BAAC,cAAc,EAAC;QACd,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF","sourcesContent":["import { validateMnemonic } from '@metamask/scure-bip39';\nimport { wordlist } from '@metamask/scure-bip39/dist/wordlists/english';\n\nconst REDACTED = '[redacted]';\n\nconst VALID_SRP_WORD_COUNTS: readonly number[] = [12, 15, 18, 21, 24];\n\nconst INSPECT_CUSTOM = Symbol.for('nodejs.util.inspect.custom');\n\nconst WORDLIST_SET: ReadonlySet<string> = new Set(wordlist);\n\n/**\n * Opaque wrapper around a wallet password.\n *\n * Constructed via {@link Password.from}, which validates the input. The\n * underlying string is only reachable through {@link Password.unwrap}; every\n * other path (`toString`, `JSON.stringify`, `util.inspect`, template-literal\n * interpolation) yields `[redacted]`. This makes accidental logging produce a\n * harmless placeholder instead of leaking the secret.\n */\nexport class Password {\n  readonly #value: string;\n\n  // See .from() for why this is private.\n  // eslint-disable-next-line no-restricted-syntax\n  private constructor(value: string) {\n    this.#value = value;\n  }\n\n  /**\n   * Wrap a non-empty string as a {@link Password}.\n   *\n   * Matches the `@metamask/keyring-controller` convention: any non-empty\n   * string is acceptable; minimum-length policy is left to the keyring.\n   *\n   * @param value - The raw password string.\n   * @returns A redacting {@link Password} wrapper.\n   * @throws If `value` is empty.\n   */\n  static from(value: string): Password {\n    if (value.length === 0) {\n      throw new Error('Password must be a non-empty string');\n    }\n    return new Password(value);\n  }\n\n  /**\n   * Reveal the underlying password string. Call this only at trust boundaries\n   * (e.g. handing the value to the keyring or to a child-process env var).\n   *\n   * @returns The original password string.\n   */\n  unwrap(): string {\n    return this.#value;\n  }\n\n  toString(): string {\n    return REDACTED;\n  }\n\n  toJSON(): string {\n    return REDACTED;\n  }\n\n  [INSPECT_CUSTOM](): string {\n    return REDACTED;\n  }\n}\n\n/**\n * Opaque wrapper around a BIP-39 secret recovery phrase.\n *\n * Constructed via {@link Srp.from}, which validates the word count\n * (12/15/18/21/24) and that every word is present in the BIP-39 English\n * wordlist. The underlying string is only reachable through {@link Srp.unwrap};\n * every other path yields `[redacted]`.\n */\nexport class Srp {\n  readonly #value: string;\n\n  // See .from() for why this is private.\n  // eslint-disable-next-line no-restricted-syntax\n  private constructor(value: string) {\n    this.#value = value;\n  }\n\n  /**\n   * Validate and wrap a BIP-39 mnemonic phrase.\n   *\n   * Whitespace is normalized (trimmed and collapsed) before validation so that\n   * copy-pasted phrases with accidental leading/trailing/extra spaces are\n   * accepted. Catching malformed input here (rather than letting it reach\n   * `KeyringController:createNewVaultAndRestore`) produces a clearer error.\n   *\n   * @param value - The raw mnemonic string.\n   * @returns A redacting {@link Srp} wrapper containing the normalized phrase.\n   * @throws If the word count is not one of 12/15/18/21/24, if any word is\n   * not present in the BIP-39 English wordlist, or if the checksum is invalid.\n   */\n  static from(value: string): Srp {\n    const words = value.trim().split(/\\s+/u);\n    if (!VALID_SRP_WORD_COUNTS.includes(words.length)) {\n      throw new Error(\n        `Secret recovery phrase must be 12, 15, 18, 21, or 24 words (got ${words.length})`,\n      );\n    }\n    for (const word of words) {\n      if (!WORDLIST_SET.has(word)) {\n        throw new Error(\n          'Secret recovery phrase contains a word not in the BIP-39 English wordlist',\n        );\n      }\n    }\n\n    const normalized = words.join(' ');\n    if (!validateMnemonic(normalized, wordlist)) {\n      throw new Error('Secret recovery phrase has an invalid checksum');\n    }\n    return new Srp(normalized);\n  }\n\n  /**\n   * Reveal the underlying mnemonic string. Call this only at trust boundaries.\n   *\n   * @returns The original mnemonic string.\n   */\n  unwrap(): string {\n    return this.#value;\n  }\n\n  toString(): string {\n    return REDACTED;\n  }\n\n  toJSON(): string {\n    return REDACTED;\n  }\n\n  [INSPECT_CUSTOM](): string {\n    return REDACTED;\n  }\n}\n"]}