@pasosdejesus/m 0.23.0 → 0.24.0

package/dist/wallet/types.d.ts

@@ -0,0 +1,69 @@
+export type ChainName = 'celo' | 'celoSepolia';
+export declare const CHAIN_IDS: Record<ChainName, number>;
+export declare const DEFAULT_CHAIN: ChainName;
+export interface WalletInfo {
+    address: `0x${string}`;
+    chain: ChainName;
+    createdAt: number;
+}
+export interface StoredWallet {
+    version: 1;
+    address: `0x${string}`;
+    chain: ChainName;
+    createdAt: number;
+    kdf: {
+        name: 'PBKDF2';
+        hash: 'SHA-256';
+        iterations: number;
+        salt: string;
+    };
+    cipher: {
+        name: 'AES-GCM';
+        iv: string;
+        data: string;
+    };
+}
+export interface StorageAdapter {
+    get(): Promise<StoredWallet | null>;
+    set(record: StoredWallet): Promise<void>;
+    delete(): Promise<void>;
+    has(): Promise<boolean>;
+}
+export interface CreateWalletOptions {
+    password: string;
+    chain?: ChainName;
+    storage?: StorageAdapter;
+}
+export interface ImportWalletOptions {
+    mnemonic?: string;
+    privateKey?: `0x${string}`;
+    password: string;
+    chain?: ChainName;
+    storage?: StorageAdapter;
+}
+export interface InAppWallet {
+    address: `0x${string}`;
+    chain: ChainName;
+    createdAt: number;
+    account: {
+        address: `0x${string}`;
+        signMessage(args: {
+            message: string | {
+                raw: `0x${string}`;
+            };
+        }): Promise<`0x${string}`>;
+        signTransaction(tx: Record<string, unknown>): Promise<`0x${string}`>;
+        signTypedData(typedData: Record<string, unknown>): Promise<`0x${string}`>;
+    };
+}
+export interface Eip1193RequestArgs {
+    method: string;
+    params?: unknown[] | Record<string, unknown>;
+}
+export type Eip1193Provider = {
+    request(args: Eip1193RequestArgs): Promise<unknown>;
+    on?(event: string, handler: (...args: unknown[]) => void): void;
+    removeListener?(event: string, handler: (...args: unknown[]) => void): void;
+    isPdJWallet?: true;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/wallet/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/wallet/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,aAAa,CAAA;AAE9C,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAG/C,CAAA;AAED,eAAO,MAAM,aAAa,EAAE,SAAyB,CAAA;AAErD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,MAAM,EAAE,CAAA;IACtB,KAAK,EAAE,SAAS,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,CAAC,CAAA;IACV,OAAO,EAAE,KAAK,MAAM,EAAE,CAAA;IACtB,KAAK,EAAE,SAAS,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE;QACH,IAAI,EAAE,QAAQ,CAAA;QACd,IAAI,EAAE,SAAS,CAAA;QACf,UAAU,EAAE,MAAM,CAAA;QAClB,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;IACD,MAAM,EAAE;QACN,IAAI,EAAE,SAAS,CAAA;QACf,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;CACF;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IACnC,GAAG,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,OAAO,CAAC,EAAE,cAAc,CAAA;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,KAAK,MAAM,EAAE,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,OAAO,CAAC,EAAE,cAAc,CAAA;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,KAAK,MAAM,EAAE,CAAA;IACtB,KAAK,EAAE,SAAS,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE;QACP,OAAO,EAAE,KAAK,MAAM,EAAE,CAAA;QACtB,WAAW,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,MAAM,GAAG;gBAAE,GAAG,EAAE,KAAK,MAAM,EAAE,CAAA;aAAE,CAAA;SAAE,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAA;QACvF,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAA;QACpE,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAA;KAC1E,CAAA;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC7C;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnD,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAA;IAC/D,cAAc,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAA;IAC3E,WAAW,CAAC,EAAE,IAAI,CAAA;CACnB,CAAA"}

package/dist/wallet/types.js

@@ -0,0 +1,6 @@
+export const CHAIN_IDS = {
+    celo: 42220,
+    celoSepolia: 11142220,
+};
+export const DEFAULT_CHAIN = 'celoSepolia';
+//# sourceMappingURL=types.js.map

package/dist/wallet/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/wallet/types.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,SAAS,GAA8B;IAClD,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,QAAQ;CACtB,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAc,aAAa,CAAA"}

package/dist/wallet/wallet.d.ts

@@ -0,0 +1,81 @@
+import { accountFromPrivateKey, type PrivateKey } from './signer.js';
+import { type ChainName, type CreateWalletOptions, type ImportWalletOptions, type StorageAdapter, type WalletInfo } from './types.js';
+interface UnlockedState {
+    privateKey: PrivateKey;
+    account: ReturnType<typeof accountFromPrivateKey>;
+    info: WalletInfo;
+}
+/**
+ * Accepted secret (R-#251): a password/passphrase of at least 8 printable
+ * characters. Nothing is in production yet, so the old 6-digit PIN is not
+ * supported (discarded feature). `unlockWallet` does not validate: this guards
+ * creation, import, export and the biometric seal.
+ */
+export declare function isValidPassword(password: string): boolean;
+export declare function createWallet(options: CreateWalletOptions): Promise<{
+    walletInfo: WalletInfo;
+    mnemonic: string;
+}>;
+export declare function importWallet(options: ImportWalletOptions): Promise<WalletInfo>;
+export declare function unlockWallet(password: string, storage?: StorageAdapter): Promise<WalletInfo>;
+/**
+ * Layer L2 (https://github.com/pasosdeJesus/learn.tg/issues/246): registers a
+ * passkey and stores the private key **sealed with its PRF secret**, so the user
+ * can unlock with Face ID / fingerprint instead of typing the password. The
+ * password record is untouched and keeps working as fallback and recovery.
+ *
+ * Throws `no-webauthn`, `no-prf` or the WebAuthn error when the device cannot do
+ * it; callers degrade silently.
+ */
+export declare function enableBiometricUnlock(password: string, storage?: StorageAdapter): Promise<{
+    address: string;
+}>;
+/** Whether this device has a sealed key waiting for a biometric unlock. */
+export declare function hasBiometricUnlock(storage?: StorageAdapter): Promise<boolean>;
+/**
+ * Unlocks with one user-verified WebAuthn gesture. Throws `auth-failed` when the
+ * assertion, the PRF result or the ciphertext does not check out, and
+ * `no-biometric` when there is nothing sealed for this wallet.
+ */
+export declare function unlockWithBiometric(storage?: StorageAdapter): Promise<WalletInfo>;
+/** Forgets the biometric unlock (the password keeps working). */
+export declare function disableBiometricUnlock(): Promise<void>;
+/**
+ * Generation bumped on every lock (R-#246 §14 item 3). The provider captures it
+ * before asking for the gesture and aborts the signature if it changed meanwhile:
+ * a transaction approved before the wallet locked must not be broadcast after.
+ */
+export declare function currentLockEpoch(): number;
+export declare function lockWallet(): Promise<void>;
+export declare function deleteWallet(storage?: StorageAdapter): Promise<void>;
+export declare function hasWallet(storage?: StorageAdapter): Promise<boolean>;
+export declare function getWalletInfo(storage?: StorageAdapter): Promise<WalletInfo | null>;
+/**
+ * Cambia la red de la billetera in-app (Celo Sepolia ↔ Celo).
+ *
+ * La llave es la misma en cualquier red: lo único que cambia es la red que la billetera
+ * declara (`eth_chainId`, `net_version` y el `chainId` de las transacciones). Antes la
+ * billetera quedaba atada a la red con la que se creó y `wallet_switchEthereumChain`
+ * respondía 4902, así que una billetera creada en el sitio de desarrollo (Celo Sepolia) no
+ * podía pagar en producción (Celo); reporte del operador, 2026-09-27.
+ *
+ * No toca el secreto cifrado (el sello biométrico sigue válido: solo cubre `cipher`/`kdf`).
+ */
+export declare function setWalletChain(chain: ChainName, storage?: StorageAdapter): Promise<WalletInfo>;
+/**
+ * password-protected export. Both read the stored record with the password and have no
+ * side effects on the session (the wallet may stay locked). The caller is
+ * responsible for whatever it does with the secret.
+ */
+export declare function exportPrivateKey(password: string, storage?: StorageAdapter): Promise<`0x${string}`>;
+export declare function exportMnemonic(password: string, storage?: StorageAdapter): Promise<string>;
+export declare function isUnlocked(): boolean;
+export declare function getUnlockedAccount(): UnlockedState['account'] | null;
+export declare function getUnlockedInfo(): WalletInfo | null;
+export declare function signMessage(message: string | {
+    raw: `0x${string}`;
+}): Promise<`0x${string}`>;
+export declare function signTypedData(typedData: Parameters<UnlockedState['account']['signTypedData']>[0]): Promise<`0x${string}`>;
+export declare function signTransaction(transaction: Parameters<UnlockedState['account']['signTransaction']>[0]): Promise<`0x${string}`>;
+export {};
+//# sourceMappingURL=wallet.d.ts.map

package/dist/wallet/wallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../../src/wallet/wallet.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,qBAAqB,EAKrB,KAAK,UAAU,EAChB,MAAM,aAAa,CAAA;AACpB,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EAEnB,KAAK,UAAU,EAChB,MAAM,YAAY,CAAA;AAEnB,UAAU,aAAa;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,OAAO,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAA;IACjD,IAAI,EAAE,UAAU,CAAA;CACjB;AA4FD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAKzD;AA2CD,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAQvD;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAepF;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAelG;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAyCpH;AAED,2EAA2E;AAC3E,wBAAsB,kBAAkB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAMnF;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CA2BvF;AAED,iEAAiE;AACjE,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAI5D;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAKhD;AAED,wBAAsB,YAAY,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAS1E;AAED,wBAAsB,SAAS,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAG1E;AAED,wBAAsB,aAAa,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAKxF;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAUpG;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAOzG;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAUhG;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED,wBAAgB,kBAAkB,IAAI,aAAa,CAAC,SAAS,CAAC,GAAG,IAAI,CAEpE;AAED,wBAAgB,eAAe,IAAI,UAAU,GAAG,IAAI,CAEnD;AAOD,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,KAAK,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAElG;AAED,wBAAsB,aAAa,CACjC,SAAS,EAAE,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,GAClE,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAExB;AAED,wBAAsB,eAAe,CACnC,WAAW,EAAE,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,GACtE,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAExB"}

package/dist/wallet/wallet.js

@@ -0,0 +1,358 @@
+import { decryptSecret, encryptSecret, fromBase64, calibrateIterations, KDF_ITERATIONS_FLOOR } from './crypto.js';
+import { IndexedDBStorage } from './storage/indexeddb.js';
+import { forgetBiometricCredential, newPrfSalt, readBiometricRecord, sealWithPrfSecret, unsealWithPrfSecret, wipePrfSecret, writeBiometricRecord, } from './biometric.js';
+import { clearUserVerification, createPrfCredential, detectPlatformSupport, evaluatePrf } from './web-authn.js';
+import { accountFromPrivateKey, assertValidMnemonic, newMnemonic, normalizeMnemonic, privateKeyFromMnemonic, } from './signer.js';
+import { CHAIN_IDS, DEFAULT_CHAIN, } from './types.js';
+function serializeSecret(privateKey, mnemonic) {
+    const secret = mnemonic
+        ? { v: 1, privateKey, mnemonic }
+        : { v: 1, privateKey };
+    return JSON.stringify(secret);
+}
+function parseSecret(plaintext) {
+    // Compatibility: records created before this format stored the bare key.
+    if (!plaintext.trimStart().startsWith('{')) {
+        return { v: 1, privateKey: plaintext };
+    }
+    const parsed = JSON.parse(plaintext);
+    if (!parsed.privateKey)
+        throw new Error('Corrupted wallet data');
+    return { v: 1, privateKey: parsed.privateKey, mnemonic: parsed.mnemonic };
+}
+async function decryptRecord(record, password) {
+    const plaintext = await decryptSecret({ kdf: record.kdf, cipher: record.cipher }, password);
+    return parseSecret(plaintext);
+}
+let unlocked = null;
+/**
+ * Work factor for this device, measured once per session (R-#251). The count is
+ * stored in the record, so it is only needed when writing one.
+ */
+let calibratedIterations = null;
+async function targetIterations() {
+    if (calibratedIterations !== null)
+        return calibratedIterations;
+    try {
+        calibratedIterations = await calibrateIterations();
+    }
+    catch {
+        calibratedIterations = KDF_ITERATIONS_FLOOR;
+    }
+    return calibratedIterations;
+}
+/**
+ * R-#251: si el registro quedó con un factor de trabajo por debajo del que este
+ * dispositivo puede sostener, se vuelve a cifrar al desbloquear (el texto plano está
+ * en memoria justo entonces). Nunca impide desbloquear.
+ */
+async function upgradeRecordIfNeeded(adapter, record, secret, password) {
+    try {
+        const target = await targetIterations();
+        if (!Number.isFinite(record.kdf.iterations) || record.kdf.iterations >= target)
+            return;
+        const upgraded = await encryptSecret(serializeSecret(secret.privateKey, secret.mnemonic), password, target);
+        await adapter.set(buildRecord(record.address, record.chain, record.createdAt, upgraded));
+    }
+    catch {
+        // el registro anterior sigue siendo válido y desbloqueable
+    }
+}
+function browserStorage() {
+    const idb = globalThis.indexedDB;
+    if (!idb) {
+        throw new Error('No storage available: pass a StorageAdapter (IndexedDBStorage is only available in the browser)');
+    }
+    return new IndexedDBStorage();
+}
+function resolveStorage(storage) {
+    return storage ?? browserStorage();
+}
+/**
+ * Accepted secret (R-#251): a password/passphrase of at least 8 printable
+ * characters. Nothing is in production yet, so the old 6-digit PIN is not
+ * supported (discarded feature). `unlockWallet` does not validate: this guards
+ * creation, import, export and the biometric seal.
+ */
+export function isValidPassword(password) {
+    if (typeof password !== 'string')
+        return false;
+    if (password.trim().length < 8)
+        return false;
+    // Sin caracteres de control.
+    return !/[\u0000-\u001f\u007f]/.test(password);
+}
+function assertPassword(password) {
+    if (!isValidPassword(password)) {
+        throw new Error('The password must have at least 8 characters');
+    }
+}
+function assertChain(chain) {
+    const value = chain ?? DEFAULT_CHAIN;
+    if (!(value in CHAIN_IDS))
+        throw new Error(`Unsupported chain: ${String(chain)}`);
+    return value;
+}
+function buildRecord(address, chain, createdAt, secret) {
+    return { version: 1, address, chain, createdAt, kdf: secret.kdf, cipher: secret.cipher };
+}
+async function persist(storage, privateKey, chain, password, mnemonic) {
+    const account = accountFromPrivateKey(privateKey);
+    const createdAt = Date.now();
+    const secret = await encryptSecret(serializeSecret(privateKey, mnemonic), password, await targetIterations());
+    const info = { address: account.address, chain, createdAt };
+    await storage.set(buildRecord(info.address, chain, createdAt, secret));
+    unlocked = { privateKey, account, info };
+    return info;
+}
+export async function createWallet(options) {
+    assertPassword(options.password);
+    const chain = assertChain(options.chain);
+    const storage = resolveStorage(options.storage);
+    const mnemonic = newMnemonic();
+    const privateKey = privateKeyFromMnemonic(mnemonic);
+    const walletInfo = await persist(storage, privateKey, chain, options.password, mnemonic);
+    return { walletInfo, mnemonic };
+}
+export async function importWallet(options) {
+    assertPassword(options.password);
+    if (!options.mnemonic && !options.privateKey) {
+        throw new Error('Provide a mnemonic or a private key');
+    }
+    const chain = assertChain(options.chain);
+    const storage = resolveStorage(options.storage);
+    const mnemonic = options.mnemonic ? normalizeMnemonic(options.mnemonic) : undefined;
+    // `mnemonicToSeedSync` does not validate: a phrase with a typo would become a
+    // different (and empty) wallet without any warning.
+    if (mnemonic)
+        await assertValidMnemonic(mnemonic);
+    const privateKey = mnemonic
+        ? privateKeyFromMnemonic(mnemonic)
+        : options.privateKey;
+    return persist(storage, privateKey, chain, options.password, mnemonic);
+}
+export async function unlockWallet(password, storage) {
+    const adapter = resolveStorage(storage);
+    const record = await adapter.get();
+    if (!record)
+        throw new Error('There is no in-app wallet to unlock');
+    const secret = await decryptRecord(record, password);
+    const privateKey = secret.privateKey;
+    const account = accountFromPrivateKey(privateKey);
+    if (account.address.toLowerCase() !== record.address.toLowerCase()) {
+        throw new Error('The stored wallet does not match the decrypted key');
+    }
+    const info = { address: record.address, chain: record.chain, createdAt: record.createdAt };
+    unlocked = { privateKey, account, info };
+    // R-#251: re-cifrado silencioso si el registro quedó por debajo del objetivo.
+    await upgradeRecordIfNeeded(adapter, record, secret, password);
+    return info;
+}
+/**
+ * Layer L2 (https://github.com/pasosdeJesus/learn.tg/issues/246): registers a
+ * passkey and stores the private key **sealed with its PRF secret**, so the user
+ * can unlock with Face ID / fingerprint instead of typing the password. The
+ * password record is untouched and keeps working as fallback and recovery.
+ *
+ * Throws `no-webauthn`, `no-prf` or the WebAuthn error when the device cannot do
+ * it; callers degrade silently.
+ */
+export async function enableBiometricUnlock(password, storage) {
+    assertPassword(password);
+    const adapter = resolveStorage(storage);
+    const record = await adapter.get();
+    if (!record)
+        throw new Error('There is no in-app wallet to seal');
+    const support = await detectPlatformSupport();
+    if (!support.webauthn || !support.userVerifying)
+        throw new Error('no-webauthn');
+    // The password is required on purpose: the passkey must wrap a key the user owns.
+    const { privateKey } = await decryptRecord(record, password);
+    if (accountFromPrivateKey(privateKey).address.toLowerCase() !== record.address.toLowerCase()) {
+        throw new Error('The stored wallet does not match the decrypted key');
+    }
+    const credential = await createPrfCredential(record.address);
+    if (!credential.prfEnabled)
+        throw new Error('no-prf');
+    const prfSalt = newPrfSalt();
+    const prfSecret = await evaluatePrf(credential.credentialId, prfSalt);
+    if (!prfSecret) {
+        throw new Error('no-prf');
+    }
+    try {
+        const sealed = await sealWithPrfSecret(prfSecret, prfSalt, privateKey, {
+            address: record.address,
+            credentialId: credential.credentialId,
+        });
+        await writeBiometricRecord(sealed);
+    }
+    finally {
+        wipePrfSecret(prfSecret);
+    }
+    // El password ya se verificó: dejar la billetera lista evita pedirlo dos veces.
+    const account = accountFromPrivateKey(privateKey);
+    unlocked = {
+        privateKey,
+        account,
+        info: { address: record.address, chain: record.chain, createdAt: record.createdAt },
+    };
+    return { address: record.address };
+}
+/** Whether this device has a sealed key waiting for a biometric unlock. */
+export async function hasBiometricUnlock(storage) {
+    const sealed = await readBiometricRecord().catch(() => null);
+    if (!sealed)
+        return false;
+    const adapter = resolveStorage(storage);
+    const record = await adapter.get().catch(() => null);
+    return !!record && record.address.toLowerCase() === sealed.address.toLowerCase();
+}
+/**
+ * Unlocks with one user-verified WebAuthn gesture. Throws `auth-failed` when the
+ * assertion, the PRF result or the ciphertext does not check out, and
+ * `no-biometric` when there is nothing sealed for this wallet.
+ */
+export async function unlockWithBiometric(storage) {
+    const sealed = await readBiometricRecord().catch(() => null);
+    if (!sealed)
+        throw new Error('no-biometric');
+    const adapter = resolveStorage(storage);
+    const record = await adapter.get();
+    if (!record || record.address.toLowerCase() !== sealed.address.toLowerCase()) {
+        throw new Error('no-biometric');
+    }
+    const prfSecret = await evaluatePrf(sealed.credentialId, fromBase64(sealed.prfSalt));
+    if (!prfSecret)
+        throw new Error('auth-failed');
+    let privateKey;
+    try {
+        privateKey = await unsealWithPrfSecret(prfSecret, sealed);
+    }
+    finally {
+        wipePrfSecret(prfSecret);
+    }
+    const account = accountFromPrivateKey(privateKey);
+    if (account.address.toLowerCase() !== record.address.toLowerCase()) {
+        throw new Error('auth-failed');
+    }
+    const info = { address: record.address, chain: record.chain, createdAt: record.createdAt };
+    unlocked = { privateKey, account, info };
+    return info;
+}
+/** Forgets the biometric unlock (the password keeps working). */
+export async function disableBiometricUnlock() {
+    // R-#246 §14 item 1: además de borrar el sello, se avisa al autenticador para que
+    // la passkey no quede huérfana en la lista del sistema.
+    await forgetBiometricCredential();
+}
+let lockEpoch = 0;
+/**
+ * Generation bumped on every lock (R-#246 §14 item 3). The provider captures it
+ * before asking for the gesture and aborts the signature if it changed meanwhile:
+ * a transaction approved before the wallet locked must not be broadcast after.
+ */
+export function currentLockEpoch() {
+    return lockEpoch;
+}
+export async function lockWallet() {
+    lockEpoch++;
+    unlocked = null;
+    // Un bloqueo vuelve a pedir el gesto en el próximo movimiento de fondos.
+    clearUserVerification();
+}
+export async function deleteWallet(storage) {
+    const adapter = resolveStorage(storage);
+    await adapter.delete();
+    lockEpoch++;
+    unlocked = null;
+    clearUserVerification();
+    // The sealed copy belongs to a wallet that no longer exists (and the passkey is
+    // signalled as gone, R-#246 §14 item 1).
+    await forgetBiometricCredential();
+}
+export async function hasWallet(storage) {
+    const adapter = resolveStorage(storage);
+    return adapter.has();
+}
+export async function getWalletInfo(storage) {
+    const adapter = resolveStorage(storage);
+    const record = await adapter.get();
+    if (!record)
+        return null;
+    return { address: record.address, chain: record.chain, createdAt: record.createdAt };
+}
+/**
+ * Cambia la red de la billetera in-app (Celo Sepolia ↔ Celo).
+ *
+ * La llave es la misma en cualquier red: lo único que cambia es la red que la billetera
+ * declara (`eth_chainId`, `net_version` y el `chainId` de las transacciones). Antes la
+ * billetera quedaba atada a la red con la que se creó y `wallet_switchEthereumChain`
+ * respondía 4902, así que una billetera creada en el sitio de desarrollo (Celo Sepolia) no
+ * podía pagar en producción (Celo); reporte del operador, 2026-09-27.
+ *
+ * No toca el secreto cifrado (el sello biométrico sigue válido: solo cubre `cipher`/`kdf`).
+ */
+export async function setWalletChain(chain, storage) {
+    const adapter = resolveStorage(storage);
+    const record = await adapter.get();
+    if (!record)
+        throw new Error('There is no in-app wallet');
+    const nextChain = assertChain(chain);
+    const info = { address: record.address, chain: nextChain, createdAt: record.createdAt };
+    if (record.chain !== nextChain)
+        await adapter.set({ ...record, chain: nextChain });
+    // La sesión desbloqueada tiene que ver la red nueva sin volver a desbloquear.
+    if (unlocked)
+        unlocked = { ...unlocked, info };
+    return info;
+}
+/**
+ * password-protected export. Both read the stored record with the password and have no
+ * side effects on the session (the wallet may stay locked). The caller is
+ * responsible for whatever it does with the secret.
+ */
+export async function exportPrivateKey(password, storage) {
+    assertPassword(password);
+    const adapter = resolveStorage(storage);
+    const record = await adapter.get();
+    if (!record)
+        throw new Error('There is no in-app wallet to export');
+    const secret = await decryptRecord(record, password);
+    return secret.privateKey;
+}
+export async function exportMnemonic(password, storage) {
+    assertPassword(password);
+    const adapter = resolveStorage(storage);
+    const record = await adapter.get();
+    if (!record)
+        throw new Error('There is no in-app wallet to export');
+    const secret = await decryptRecord(record, password);
+    if (!secret.mnemonic) {
+        throw new Error('This wallet was imported from a private key: it has no recovery phrase');
+    }
+    return secret.mnemonic;
+}
+export function isUnlocked() {
+    return unlocked !== null;
+}
+export function getUnlockedAccount() {
+    return unlocked?.account ?? null;
+}
+export function getUnlockedInfo() {
+    return unlocked?.info ?? null;
+}
+function requireUnlocked() {
+    if (!unlocked)
+        throw new Error('The in-app wallet is locked');
+    return unlocked;
+}
+export async function signMessage(message) {
+    return requireUnlocked().account.signMessage({ message });
+}
+export async function signTypedData(typedData) {
+    return requireUnlocked().account.signTypedData(typedData);
+}
+export async function signTransaction(transaction) {
+    return requireUnlocked().account.signTransaction(transaction);
+}
+//# sourceMappingURL=wallet.js.map

package/dist/wallet/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../src/wallet/wallet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACjH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EACL,yBAAyB,EACzB,UAAU,EACV,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,oBAAoB,GACrB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC/G,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,sBAAsB,GAEvB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,SAAS,EACT,aAAa,GAOd,MAAM,YAAY,CAAA;AAmBnB,SAAS,eAAe,CAAC,UAAsB,EAAE,QAAiB;IAChE,MAAM,MAAM,GAAiB,QAAQ;QACnC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE;QAChC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAA;IACxB,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;AAC/B,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB;IACpC,yEAAyE;IACzE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,SAAuB,EAAE,CAAA;IACtD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA0B,CAAA;IAC7D,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAChE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;AAC3E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAoB,EAAE,QAAgB;IACjE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAA;IAC3F,OAAO,WAAW,CAAC,SAAS,CAAC,CAAA;AAC/B,CAAC;AAED,IAAI,QAAQ,GAAyB,IAAI,CAAA;AAEzC;;;GAGG;AACH,IAAI,oBAAoB,GAAkB,IAAI,CAAA;AAE9C,KAAK,UAAU,gBAAgB;IAC7B,IAAI,oBAAoB,KAAK,IAAI;QAAE,OAAO,oBAAoB,CAAA;IAC9D,IAAI,CAAC;QACH,oBAAoB,GAAG,MAAM,mBAAmB,EAAE,CAAA;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB,GAAG,oBAAoB,CAAA;IAC7C,CAAC;IACD,OAAO,oBAAoB,CAAA;AAC7B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAClC,OAAuB,EACvB,MAAoB,EACpB,MAAoB,EACpB,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAA;QACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM;YAAE,OAAM;QACtF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,EACnD,QAAQ,EACR,MAAM,CACP,CAAA;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,GAAG,GAAI,UAAsC,CAAC,SAAS,CAAA;IAC7D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAA;IACH,CAAC;IACD,OAAO,IAAI,gBAAgB,EAAE,CAAA;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,OAAwB;IAC9C,OAAO,OAAO,IAAI,cAAc,EAAE,CAAA;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC9C,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5C,6BAA6B;IAC7B,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACjE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAA4B;IAC/C,MAAM,KAAK,GAAG,KAAK,IAAI,aAAa,CAAA;IACpC,IAAI,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACjF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,WAAW,CAClB,OAAsB,EACtB,KAAgB,EAChB,SAAiB,EACjB,MAAoE;IAEpE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;AAC1F,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,OAAuB,EACvB,UAAsB,EACtB,KAAgB,EAChB,QAAgB,EAChB,QAAiB;IAEjB,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC5B,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,EACrC,QAAQ,EACR,MAAM,gBAAgB,EAAE,CACzB,CAAA;IACD,MAAM,IAAI,GAAe,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;IACvE,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;IACtE,QAAQ,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACxC,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAA4B;IAE5B,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,MAAM,UAAU,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IACnD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IACxF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B;IAC7D,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACnF,8EAA8E;IAC9E,oDAAoD;IACpD,IAAI,QAAQ;QAAE,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IACjD,MAAM,UAAU,GAAG,QAAQ;QACzB,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC;QAClC,CAAC,CAAE,OAAO,CAAC,UAAyB,CAAA;IACtC,OAAO,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,OAAwB;IAC3E,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAA;IAClC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IACpC,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;IACjD,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IACD,MAAM,IAAI,GAAe,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAA;IACtG,QAAQ,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACxC,8EAA8E;IAC9E,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC9D,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAgB,EAAE,OAAwB;IACpF,cAAc,CAAC,QAAQ,CAAC,CAAA;IACxB,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAA;IAClC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IAEjE,MAAM,OAAO,GAAG,MAAM,qBAAqB,EAAE,CAAA;IAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;IAE/E,kFAAkF;IAClF,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC5D,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC5D,IAAI,CAAC,UAAU,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;IAErD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACrE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC3B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE;YACrE,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,UAAU,CAAC,YAAY;SACtC,CAAC,CAAA;QACF,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAA;IACpC,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,SAAS,CAAC,CAAA;IAC1B,CAAC;IAED,gFAAgF;IAChF,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;IACjD,QAAQ,GAAG;QACT,UAAU;QACV,OAAO;QACP,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;KACpF,CAAA;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;AACpC,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAwB;IAC/D,MAAM,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IACpD,OAAO,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAA;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAwB;IAChE,MAAM,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC5D,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;IAE5C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAA;IAClC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;IACjC,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IACpF,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;IAE9C,IAAI,UAAyB,CAAA;IAC7B,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAC3D,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,SAAS,CAAC,CAAA;IAC1B,CAAC;IAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;IACjD,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;IAChC,CAAC;IACD,MAAM,IAAI,GAAe,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAA;IACtG,QAAQ,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACxC,OAAO,IAAI,CAAA;AACb,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,kFAAkF;IAClF,wDAAwD;IACxD,MAAM,yBAAyB,EAAE,CAAA;AACnC,CAAC;AAED,IAAI,SAAS,GAAG,CAAC,CAAA;AAEjB;;;;GAIG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,SAAS,EAAE,CAAA;IACX,QAAQ,GAAG,IAAI,CAAA;IACf,yEAAyE;IACzE,qBAAqB,EAAE,CAAA;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAwB;IACzD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IACtB,SAAS,EAAE,CAAA;IACX,QAAQ,GAAG,IAAI,CAAA;IACf,qBAAqB,EAAE,CAAA;IACvB,gFAAgF;IAChF,yCAAyC;IACzC,MAAM,yBAAyB,EAAE,CAAA;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAwB;IACtD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACvC,OAAO,OAAO,CAAC,GAAG,EAAE,CAAA;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAwB;IAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAA;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAA;AACtF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAgB,EAAE,OAAwB;IAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAA;IAClC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IACzD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IACpC,MAAM,IAAI,GAAe,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAA;IACnG,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IAClF,8EAA8E;IAC9E,IAAI,QAAQ;QAAE,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAA;IAC9C,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,OAAwB;IAC/E,cAAc,CAAC,QAAQ,CAAC,CAAA;IACxB,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAA;IAClC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACpD,OAAO,MAAM,CAAC,UAAU,CAAA;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAwB;IAC7E,cAAc,CAAC,QAAQ,CAAC,CAAA;IACxB,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAA;IAClC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,QAAQ,KAAK,IAAI,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,QAAQ,EAAE,OAAO,IAAI,IAAI,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,QAAQ,EAAE,IAAI,IAAI,IAAI,CAAA;AAC/B,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IAC7D,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAwC;IACxE,OAAO,eAAe,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAA2B,CAAA;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAmE;IAEnE,OAAO,eAAe,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,SAAkB,CAA2B,CAAA;AAC9F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAuE;IAEvE,OAAO,eAAe,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,WAAoB,CAA2B,CAAA;AAClG,CAAC"}

package/dist/wallet/wallet.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=wallet.test.d.ts.map

package/dist/wallet/wallet.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.test.d.ts","sourceRoot":"","sources":["../../src/wallet/wallet.test.ts"],"names":[],"mappings":""}