@pasosdejesus/m 0.23.1 → 0.24.0

package/dist/wallet/biometric.js

@@ -0,0 +1,88 @@
+/**
+ * Layer L2 of https://github.com/pasosdeJesus/learn.tg/issues/246: the wallet key
+ * sealed with the WebAuthn **PRF** secret.
+ *
+ * The private key is never written in plaintext. The stored record only holds the
+ * ciphertext plus the (non-secret) salts and the credential id; the key that opens
+ * it can only be produced by the authenticator, after the user verifies (Face ID /
+ * fingerprint / device password). The password-encrypted record of `wallet.ts` is untouched
+ * and remains the recovery path.
+ */
+import { fromBase64, toBase64, wipe } from './crypto.js';
+import { runInDb, STORE_BIOMETRIC } from './storage/idb.js';
+import { deriveWrappingKey, signalUnknownCredential, toArrayBuffer } from './web-authn.js';
+const KEY = 'current';
+const IV_BYTES = 12;
+export const PRF_SALT_BYTES = 32;
+export const HKDF_SALT_BYTES = 16;
+async function subtle() {
+    const c = globalThis.crypto?.subtle;
+    if (!c)
+        throw new Error('Web Crypto (crypto.subtle) is not available');
+    return c;
+}
+function randomBytes(length) {
+    const c = globalThis.crypto;
+    if (!c?.getRandomValues)
+        throw new Error('crypto.getRandomValues is not available');
+    const bytes = new Uint8Array(length);
+    c.getRandomValues(bytes);
+    return bytes;
+}
+export async function readBiometricRecord() {
+    const value = await runInDb(STORE_BIOMETRIC, 'readonly', (store) => store.get(KEY));
+    return value ?? null;
+}
+export async function writeBiometricRecord(record) {
+    await runInDb(STORE_BIOMETRIC, 'readwrite', (store) => store.put(record, KEY));
+}
+export async function deleteBiometricRecord() {
+    await runInDb(STORE_BIOMETRIC, 'readwrite', (store) => store.delete(KEY));
+}
+/**
+ * Drops the sealed copy **and** tells the authenticator the passkey is gone
+ * (R-#246 §14 item 1). Used when the user turns the gesture off or deletes the
+ * wallet: before this, the orphan passkey stayed in the OS list.
+ */
+export async function forgetBiometricCredential() {
+    const record = await readBiometricRecord().catch(() => null);
+    if (record?.credentialId)
+        await signalUnknownCredential(record.credentialId);
+    await deleteBiometricRecord().catch(() => undefined);
+}
+/** Encrypts `privateKey` with the key derived from the PRF secret of `prfSalt`. */
+export async function sealWithPrfSecret(prfSecret, prfSalt, privateKey, { address, credentialId }) {
+    const hkdfSalt = randomBytes(HKDF_SALT_BYTES);
+    const iv = randomBytes(IV_BYTES);
+    const key = await deriveWrappingKey(prfSecret, hkdfSalt);
+    const data = await (await subtle()).encrypt({ name: 'AES-GCM', iv: toArrayBuffer(iv) }, key, toArrayBuffer(new TextEncoder().encode(privateKey)));
+    return {
+        v: 1,
+        address,
+        credentialId,
+        prfSalt: toBase64(prfSalt),
+        hkdfSalt: toBase64(hkdfSalt),
+        iv: toBase64(iv),
+        data: toBase64(new Uint8Array(data)),
+        createdAt: Date.now(),
+    };
+}
+/** Decrypts the sealed key with the PRF secret. Throws `auth-failed` on failure. */
+export async function unsealWithPrfSecret(prfSecret, record) {
+    const key = await deriveWrappingKey(prfSecret, fromBase64(record.hkdfSalt));
+    try {
+        const plain = await (await subtle()).decrypt({ name: 'AES-GCM', iv: toArrayBuffer(fromBase64(record.iv)) }, key, toArrayBuffer(fromBase64(record.data)));
+        return new TextDecoder().decode(plain);
+    }
+    catch {
+        throw new Error('auth-failed');
+    }
+}
+export function wipePrfSecret(secret) {
+    wipe(secret);
+}
+/** Fresh salt for a `prf.eval` call; stored next to the sealed record. */
+export function newPrfSalt() {
+    return randomBytes(PRF_SALT_BYTES);
+}
+//# sourceMappingURL=biometric.js.map

package/dist/wallet/biometric.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"biometric.js","sourceRoot":"","sources":["../../src/wallet/biometric.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AACxD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAE1F,MAAM,GAAG,GAAG,SAAS,CAAA;AACrB,MAAM,QAAQ,GAAG,EAAE,CAAA;AACnB,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAA;AAChC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAA;AAcjC,KAAK,UAAU,MAAM;IACnB,MAAM,CAAC,GAAI,UAAkC,CAAC,MAAM,EAAE,MAAM,CAAA;IAC5D,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IACtE,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,CAAC,GAAI,UAAkC,CAAC,MAAM,CAAA;IACpD,IAAI,CAAC,CAAC,EAAE,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IACpC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IACxB,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,KAAK,GAAG,MAAM,OAAO,CAA8B,eAAe,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAC9F,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CACf,CAAA;IACD,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAuB;IAChE,MAAM,OAAO,CAAc,eAAe,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;AAC7F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,OAAO,CAAY,eAAe,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;AACtF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC5D,IAAI,MAAM,EAAE,YAAY;QAAE,MAAM,uBAAuB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC5E,MAAM,qBAAqB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;AACtD,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAqB,EACrB,OAAmB,EACnB,UAAyB,EACzB,EAAE,OAAO,EAAE,YAAY,EAA6C;IAEpE,MAAM,QAAQ,GAAG,WAAW,CAAC,eAAe,CAAC,CAAA;IAC7C,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;IAChC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,OAAO,CACzC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC,EAAE,EAC1C,GAAG,EACH,aAAa,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CACpD,CAAA;IACD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,OAAO;QACP,YAAY;QACZ,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;QAC1B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;QAC5B,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChB,IAAI,EAAE,QAAQ,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAqB,EACrB,MAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC3E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,OAAO,CAC1C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,EAC7D,GAAG,EACH,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CACvC,CAAA;QACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAkB,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;IAChC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAqC;IACjE,IAAI,CAAC,MAAM,CAAC,CAAA;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,UAAU;IACxB,OAAO,WAAW,CAAC,cAAc,CAAC,CAAA;AACpC,CAAC"}

package/dist/wallet/biometric.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=biometric.test.d.ts.map

package/dist/wallet/biometric.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"biometric.test.d.ts","sourceRoot":"","sources":["../../src/wallet/biometric.test.ts"],"names":[],"mappings":""}

package/dist/wallet/biometric.test.js

@@ -0,0 +1,44 @@
+import { beforeAll, beforeEach, describe, expect, it } from 'vitest';
+import { installIndexedDB, mockWebAuthn } from '../test-utils/wallet-mocks.js';
+import { MemoryStorage } from './storage/memory.js';
+import { createWallet, deleteWallet, hasBiometricUnlock, lockWallet, unlockWithBiometric, enableBiometricUnlock, disableBiometricUnlock, } from './wallet.js';
+import { deleteBiometricRecord, readBiometricRecord } from './biometric.js';
+const password = '12345678';
+beforeAll(async () => {
+    await installIndexedDB();
+});
+describe('biometric unlock (L2) with mocked WebAuthn', () => {
+    let storage;
+    beforeEach(async () => {
+        storage = new MemoryStorage();
+        await lockWallet();
+        await deleteBiometricRecord().catch(() => undefined);
+        mockWebAuthn();
+    });
+    it('seals the key with the PRF secret and re-opens it with one gesture', async () => {
+        const { walletInfo } = await createWallet({ password, storage });
+        const { address } = await enableBiometricUnlock(password, storage);
+        expect(address).toBe(walletInfo.address);
+        expect(await hasBiometricUnlock(storage)).toBe(true);
+        const sealed = await readBiometricRecord();
+        expect(sealed?.address).toBe(walletInfo.address);
+        // El secreto no queda en claro en el registro.
+        expect(JSON.stringify(sealed)).not.toContain('privateKey');
+        await lockWallet();
+        const unlocked = await unlockWithBiometric(storage);
+        expect(unlocked.address).toBe(walletInfo.address);
+    });
+    it('forgets the sealed copy when the biometric unlock is disabled', async () => {
+        await createWallet({ password, storage });
+        await enableBiometricUnlock(password, storage);
+        await disableBiometricUnlock();
+        expect(await hasBiometricUnlock(storage)).toBe(false);
+    });
+    it('cleans the sealed copy when the wallet is deleted', async () => {
+        await createWallet({ password, storage });
+        await enableBiometricUnlock(password, storage);
+        await deleteWallet(storage);
+        expect(await readBiometricRecord().catch(() => null)).toBeNull();
+    });
+});
+//# sourceMappingURL=biometric.test.js.map

package/dist/wallet/biometric.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"biometric.test.js","sourceRoot":"","sources":["../../src/wallet/biometric.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAE3E,MAAM,QAAQ,GAAG,UAAU,CAAA;AAE3B,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,gBAAgB,EAAE,CAAA;AAC1B,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,IAAI,OAAsB,CAAA;IAE1B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAI,aAAa,EAAE,CAAA;QAC7B,MAAM,UAAU,EAAE,CAAA;QAClB,MAAM,qBAAqB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACpD,YAAY,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAEhE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAClE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEpD,MAAM,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAA;QAC1C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QAChD,+CAA+C;QAC/C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAE1D,MAAM,UAAU,EAAE,CAAA;QAClB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAA;QACnD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QACzC,MAAM,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC9C,MAAM,sBAAsB,EAAE,CAAA;QAC9B,MAAM,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QACzC,MAAM,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC9C,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;QAC3B,MAAM,CAAC,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/wallet/crypto.d.ts

@@ -0,0 +1,42 @@
+/** Default work factor (R-#251). */
+export declare const KDF_ITERATIONS = 600000;
+/** Never below the historical value: an old record must not get weaker. */
+export declare const KDF_ITERATIONS_FLOOR = 600000;
+/** Ceiling so a slow phone cannot hang when calibrating (R-#251). */
+export declare const KDF_ITERATIONS_CEILING = 5000000;
+/** Target cost of one derivation on the device (R-#251). */
+export declare const KDF_BUDGET_MS = 400;
+/**
+ * Accepted secret (R-#251): NFKD + trim, so a leading/trailing space or a composed
+ * accent does not lock the user out of their own wallet. Idempotent.
+ */
+export declare function normalizePassword(password: string): string;
+export declare function toBase64(bytes: Uint8Array): string;
+export declare function fromBase64(value: string): Uint8Array;
+export interface EncryptedSecret {
+    kdf: {
+        name: 'PBKDF2';
+        hash: 'SHA-256';
+        iterations: number;
+        salt: string;
+    };
+    cipher: {
+        name: 'AES-GCM';
+        iv: string;
+        data: string;
+    };
+}
+export declare function encryptSecret(plaintext: string, password: string, iterations?: number): Promise<EncryptedSecret>;
+/**
+ * Picks the PBKDF2 work factor for this device (R-#251): measures the floor and
+ * scales it to `budgetMs`, clamped to [floor, ceiling]. The count lives in the
+ * record, so a device that chose 2 M and another that chose 600 k keep working.
+ *
+ * `measure` is injectable so tests do not depend on the machine's speed.
+ */
+export declare function calibrateIterations(measure?: (iterations: number) => Promise<number>, budgetMs?: number): Promise<number>;
+export declare function decryptSecret(secret: EncryptedSecret, password: string): Promise<string>;
+export declare function wipe(bytes: Uint8Array | null | undefined): void;
+/** SHA-256 over bytes. Used by the BIP39 checksum of `isValidMnemonic`. */
+export declare function sha256(bytes: Uint8Array): Promise<Uint8Array>;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/wallet/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/wallet/crypto.ts"],"names":[],"mappings":"AAIA,oCAAoC;AACpC,eAAO,MAAM,cAAc,SAAoB,CAAA;AAC/C,2EAA2E;AAC3E,eAAO,MAAM,oBAAoB,SAAoB,CAAA;AACrD,qEAAqE;AACrE,eAAO,MAAM,sBAAsB,UAAY,CAAA;AAC/C,4DAA4D;AAC5D,eAAO,MAAM,aAAa,MAAM,CAAA;AAEhC;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1D;AAsBD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIlD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAKpD;AAwBD,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,IAAI,EAAE,SAAS,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1E,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,UAAU,GAAE,MAA0B,GACrC,OAAO,CAAC,eAAe,CAAC,CAe1B;AAUD;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,GAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAqB,EACpE,QAAQ,GAAE,MAAsB,GAC/B,OAAO,CAAC,MAAM,CAAC,CAajB;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB9F;AAED,wBAAgB,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAE/D;AAED,2EAA2E;AAC3E,wBAAsB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAGnE"}

package/dist/wallet/crypto.js

@@ -0,0 +1,127 @@
+const PBKDF2_ITERATIONS = 600_000;
+const SALT_BYTES = 16;
+const IV_BYTES = 12;
+/** Default work factor (R-#251). */
+export const KDF_ITERATIONS = PBKDF2_ITERATIONS;
+/** Never below the historical value: an old record must not get weaker. */
+export const KDF_ITERATIONS_FLOOR = PBKDF2_ITERATIONS;
+/** Ceiling so a slow phone cannot hang when calibrating (R-#251). */
+export const KDF_ITERATIONS_CEILING = 5_000_000;
+/** Target cost of one derivation on the device (R-#251). */
+export const KDF_BUDGET_MS = 400;
+/**
+ * Accepted secret (R-#251): NFKD + trim, so a leading/trailing space or a composed
+ * accent does not lock the user out of their own wallet. Idempotent.
+ */
+export function normalizePassword(password) {
+    return typeof password === 'string' ? password.normalize('NFKD').trim() : '';
+}
+function subtle() {
+    const c = globalThis.crypto;
+    if (!c?.subtle) {
+        throw new Error('Web Crypto (crypto.subtle) is not available; Node 18+ or a secure browser context is required');
+    }
+    return c.subtle;
+}
+function randomBytes(length) {
+    const c = globalThis.crypto;
+    if (!c?.getRandomValues) {
+        throw new Error('crypto.getRandomValues is not available');
+    }
+    const bytes = new Uint8Array(length);
+    c.getRandomValues(bytes);
+    return bytes;
+}
+export function toBase64(bytes) {
+    let binary = '';
+    for (const b of bytes)
+        binary += String.fromCharCode(b);
+    return btoa(binary);
+}
+export function fromBase64(value) {
+    const binary = atob(value);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++)
+        bytes[i] = binary.charCodeAt(i);
+    return bytes;
+}
+async function deriveKey(password, salt, iterations) {
+    const material = await subtle().importKey('raw', new TextEncoder().encode(password), 'PBKDF2', false, ['deriveKey']);
+    return subtle().deriveKey({
+        name: 'PBKDF2',
+        salt: salt,
+        iterations,
+        hash: 'SHA-256',
+    }, material, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+}
+export async function encryptSecret(plaintext, password, iterations = PBKDF2_ITERATIONS) {
+    const salt = randomBytes(SALT_BYTES);
+    const iv = randomBytes(IV_BYTES);
+    const count = Number.isFinite(iterations) && iterations > 0 ? Math.floor(iterations) : PBKDF2_ITERATIONS;
+    const key = await deriveKey(normalizePassword(password), salt, count);
+    const data = await subtle().encrypt({ name: 'AES-GCM', iv: iv }, key, new TextEncoder().encode(plaintext));
+    return {
+        kdf: { name: 'PBKDF2', hash: 'SHA-256', iterations: count, salt: toBase64(salt) },
+        cipher: { name: 'AES-GCM', iv: toBase64(iv), data: toBase64(new Uint8Array(data)) },
+    };
+}
+/** One derivation with a throwaway salt, used to measure the device cost. */
+async function measureDerivation(iterations) {
+    const salt = randomBytes(SALT_BYTES);
+    const started = Date.now();
+    await deriveKey('calibration-only', salt, iterations);
+    return Date.now() - started;
+}
+/**
+ * Picks the PBKDF2 work factor for this device (R-#251): measures the floor and
+ * scales it to `budgetMs`, clamped to [floor, ceiling]. The count lives in the
+ * record, so a device that chose 2 M and another that chose 600 k keep working.
+ *
+ * `measure` is injectable so tests do not depend on the machine's speed.
+ */
+export async function calibrateIterations(measure = measureDerivation, budgetMs = KDF_BUDGET_MS) {
+    let floorMs = 0;
+    try {
+        floorMs = await measure(KDF_ITERATIONS_FLOOR);
+    }
+    catch {
+        return KDF_ITERATIONS_FLOOR;
+    }
+    if (!Number.isFinite(floorMs) || floorMs <= 0)
+        return KDF_ITERATIONS_FLOOR;
+    const projected = Math.floor((KDF_ITERATIONS_FLOOR * budgetMs) / floorMs);
+    if (!Number.isFinite(projected) || projected < KDF_ITERATIONS_FLOOR) {
+        return KDF_ITERATIONS_FLOOR;
+    }
+    return Math.min(KDF_ITERATIONS_CEILING, projected);
+}
+export async function decryptSecret(secret, password) {
+    const salt = fromBase64(secret.kdf.salt);
+    const iv = fromBase64(secret.cipher.iv);
+    // R-#251: primero con la clave normalizada (NFKD + trim) y, si el registro se
+    // cifró con la clave tal cual la escribió el usuario, con esa misma. Así una clave
+    // con un espacio o un acento compuesto sigue abriendo la billetera.
+    const normalized = normalizePassword(password);
+    const candidates = normalized === password ? [password] : [normalized, password];
+    for (const candidate of candidates) {
+        const key = await deriveKey(candidate, salt, secret.kdf.iterations);
+        try {
+            const plain = await subtle().decrypt({ name: 'AES-GCM', iv: iv }, key, fromBase64(secret.cipher.data));
+            return new TextDecoder().decode(plain);
+        }
+        catch {
+            // se prueba la siguiente variante
+        }
+    }
+    throw new Error('Wrong password or corrupted wallet data');
+}
+export function wipe(bytes) {
+    if (bytes)
+        bytes.fill(0);
+}
+/** SHA-256 over bytes. Used by the BIP39 checksum of `isValidMnemonic`. */
+export async function sha256(bytes) {
+    const digest = await subtle().digest('SHA-256', bytes);
+    return new Uint8Array(digest);
+}
+//# sourceMappingURL=crypto.js.map

package/dist/wallet/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/wallet/crypto.ts"],"names":[],"mappings":"AAAA,MAAM,iBAAiB,GAAG,OAAO,CAAA;AACjC,MAAM,UAAU,GAAG,EAAE,CAAA;AACrB,MAAM,QAAQ,GAAG,EAAE,CAAA;AAEnB,oCAAoC;AACpC,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAAA;AAC/C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAA;AACrD,qEAAqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAA;AAC/C,4DAA4D;AAC5D,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAA;AAEhC;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC9E,CAAC;AAED,SAAS,MAAM;IACb,MAAM,CAAC,GAAI,UAAkC,CAAC,MAAM,CAAA;IACpD,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAA;IACH,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAA;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,CAAC,GAAI,UAAkC,CAAC,MAAM,CAAA;IACpD,IAAI,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IACpC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IACxB,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAiB;IACxC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACvD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IACvE,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAgB,EAAE,UAAkB;IAC7E,MAAM,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CACvC,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAA2B,EAC5D,QAAQ,EACR,KAAK,EACL,CAAC,WAAW,CAAC,CACd,CAAA;IACD,OAAO,MAAM,EAAE,CAAC,SAAS,CACvB;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,IAA8B;QACpC,UAAU;QACV,IAAI,EAAE,SAAS;KAChB,EACD,QAAQ,EACR,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAA;AACH,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,QAAgB,EAChB,aAAqB,iBAAiB;IAEtC,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;IACpC,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;IAChC,MAAM,KAAK,GACT,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAA;IAC5F,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IACrE,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,OAAO,CACjC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAA4B,EAAE,EACrD,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAA2B,CAC9D,CAAA;IACD,OAAO;QACL,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE;QACjF,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE;KACpF,CAAA;AACH,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC1B,MAAM,SAAS,CAAC,kBAAkB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;IACrD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAA;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAmD,iBAAiB,EACpE,WAAmB,aAAa;IAEhC,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,oBAAoB,CAAA;IAC7B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,oBAAoB,CAAA;IAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,oBAAoB,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,CAAA;IACzE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,oBAAoB,EAAE,CAAC;QACpE,OAAO,oBAAoB,CAAA;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAA;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAuB,EAAE,QAAgB;IAC3E,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACvC,8EAA8E;IAC9E,mFAAmF;IACnF,oEAAoE;IACpE,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,UAAU,GAAG,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAChF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACnE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC,OAAO,CAClC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAA4B,EAAE,EACrD,GAAG,EACH,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CACzD,CAAA;YACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;AAC5D,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,KAAoC;IACvD,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC1B,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAiB;IAC5C,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,KAA+B,CAAC,CAAA;IAChF,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;AAC/B,CAAC"}

package/dist/wallet/crypto.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=crypto.test.d.ts.map

package/dist/wallet/crypto.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.test.d.ts","sourceRoot":"","sources":["../../src/wallet/crypto.test.ts"],"names":[],"mappings":""}

package/dist/wallet/crypto.test.js

@@ -0,0 +1,34 @@
+import { describe, expect, it } from 'vitest';
+import { KDF_ITERATIONS, decryptSecret, encryptSecret, fromBase64, toBase64 } from './crypto.js';
+describe('crypto', () => {
+    it('round-trips a secret with the password', async () => {
+        const secret = await encryptSecret('0x' + 'ab'.repeat(32), '123456');
+        expect(secret.kdf.name).toBe('PBKDF2');
+        expect(secret.kdf.hash).toBe('SHA-256');
+        expect(secret.kdf.iterations).toBe(KDF_ITERATIONS);
+        expect(secret.cipher.name).toBe('AES-GCM');
+        expect(secret.kdf.salt).not.toBe('');
+        expect(secret.cipher.iv).not.toBe('');
+        expect(secret.cipher.data).not.toContain('ab'.repeat(32));
+        await expect(decryptSecret(secret, '123456')).resolves.toBe('0x' + 'ab'.repeat(32));
+    });
+    it('uses 600,000 PBKDF2 iterations', () => {
+        expect(KDF_ITERATIONS).toBe(600_000);
+    });
+    it('uses a fresh salt and IV per encryption', async () => {
+        const first = await encryptSecret('secret', '123456');
+        const second = await encryptSecret('secret', '123456');
+        expect(first.kdf.salt).not.toBe(second.kdf.salt);
+        expect(first.cipher.iv).not.toBe(second.cipher.iv);
+        expect(first.cipher.data).not.toBe(second.cipher.data);
+    });
+    it('rejects a wrong password', async () => {
+        const secret = await encryptSecret('secret', '123456');
+        await expect(decryptSecret(secret, '654321')).rejects.toThrow(/Wrong password/i);
+    });
+    it('round-trips base64 helpers', () => {
+        const bytes = new Uint8Array([0, 1, 2, 250, 255]);
+        expect(Array.from(fromBase64(toBase64(bytes)))).toEqual([0, 1, 2, 250, 255]);
+    });
+});
+//# sourceMappingURL=crypto.test.js.map

package/dist/wallet/crypto.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.test.js","sourceRoot":"","sources":["../../src/wallet/crypto.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEhG,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;QACpE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAClD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACrD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACtD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACtD,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QACjD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/wallet/destinations.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Destinations this wallet has already sent funds to (R-#253).
+ *
+ * A **new** destination always requires the device gesture, even inside the grace
+ * window of `USER_VERIFICATION_GRACE_MS`: that stops an automated or hostile flow
+ * from draining the wallet to an address the user never used. Repeated transfers to
+ * a known address stay silent within the window.
+ *
+ * Stored per wallet address in `localStorage` (not a secret; only addresses), with
+ * an in-memory fallback when `localStorage` is unavailable (private mode, Node).
+ */
+/** Overrides the storage-key prefix (a consumer keeps its own namespace). */
+export declare function setDestinationsPrefix(value: string): void;
+/** Whether the wallet has already sent funds to `destination`. */
+export declare function isKnownDestination(wallet: string, destination: string): boolean;
+/** Records `destination` for `wallet` after a successful transfer. */
+export declare function rememberDestination(wallet: string, destination: string): void;
+/** Forgets every destination (tests, and when the wallet is deleted). */
+export declare function clearDestinations(wallet?: string): void;
+//# sourceMappingURL=destinations.d.ts.map

package/dist/wallet/destinations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destinations.d.ts","sourceRoot":"","sources":["../../src/wallet/destinations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAEzD;AA+BD,kEAAkE;AAClE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAG/E;AAED,sEAAsE;AACtE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAc7E;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAiBvD"}

package/dist/wallet/destinations.js

@@ -0,0 +1,98 @@
+/**
+ * Destinations this wallet has already sent funds to (R-#253).
+ *
+ * A **new** destination always requires the device gesture, even inside the grace
+ * window of `USER_VERIFICATION_GRACE_MS`: that stops an automated or hostile flow
+ * from draining the wallet to an address the user never used. Repeated transfers to
+ * a known address stay silent within the window.
+ *
+ * Stored per wallet address in `localStorage` (not a secret; only addresses), with
+ * an in-memory fallback when `localStorage` is unavailable (private mode, Node).
+ */
+/** Namespace of the `localStorage` keys (a consumer sets its own with `setDestinationsPrefix`). */
+let prefix = 'pasosdejesus-m-wallet.destinations.';
+/** Overrides the storage-key prefix (a consumer keeps its own namespace). */
+export function setDestinationsPrefix(value) {
+    if (value)
+        prefix = value;
+}
+/** Cap so the list cannot grow without bound. */
+const MAX_DESTINATIONS = 200;
+const memory = new Map();
+function storage() {
+    try {
+        return globalThis.localStorage ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+function load(wallet) {
+    const key = wallet.toLowerCase();
+    const cached = memory.get(key);
+    if (cached)
+        return cached;
+    const set = new Set();
+    const raw = storage()?.getItem(prefix + key);
+    if (raw) {
+        try {
+            for (const item of JSON.parse(raw))
+                set.add(String(item).toLowerCase());
+        }
+        catch {
+            // Lista corrupta: se empieza de cero (sólo provoca pedir el gesto de nuevo).
+        }
+    }
+    memory.set(key, set);
+    return set;
+}
+/** Whether the wallet has already sent funds to `destination`. */
+export function isKnownDestination(wallet, destination) {
+    if (!wallet || !destination)
+        return false;
+    return load(wallet).has(destination.toLowerCase());
+}
+/** Records `destination` for `wallet` after a successful transfer. */
+export function rememberDestination(wallet, destination) {
+    if (!wallet || !destination)
+        return;
+    const set = load(wallet);
+    set.add(destination.toLowerCase());
+    while (set.size > MAX_DESTINATIONS) {
+        const first = set.values().next().value;
+        if (first === undefined)
+            break;
+        set.delete(first);
+    }
+    try {
+        storage()?.setItem(prefix + wallet.toLowerCase(), JSON.stringify([...set]));
+    }
+    catch {
+        // Sin persistencia: queda sólo en memoria (se pedirá el gesto tras recargar).
+    }
+}
+/** Forgets every destination (tests, and when the wallet is deleted). */
+export function clearDestinations(wallet) {
+    if (wallet) {
+        memory.delete(wallet.toLowerCase());
+    }
+    else {
+        memory.clear();
+    }
+    const s = storage();
+    if (!s)
+        return;
+    try {
+        for (let i = s.length - 1; i >= 0; i -= 1) {
+            const key = s.key(i);
+            if (!key?.startsWith(prefix))
+                continue;
+            if (!wallet || key === prefix + wallet.toLowerCase())
+                s.removeItem(key);
+        }
+    }
+    catch {
+        // Nada que limpiar.
+    }
+}
+//# sourceMappingURL=destinations.js.map

package/dist/wallet/destinations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destinations.js","sourceRoot":"","sources":["../../src/wallet/destinations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,mGAAmG;AACnG,IAAI,MAAM,GAAG,qCAAqC,CAAA;AAClD,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,IAAI,KAAK;QAAE,MAAM,GAAG,KAAK,CAAA;AAC3B,CAAC;AACD,iDAAiD;AACjD,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAA;AAE7C,SAAS,OAAO;IACd,IAAI,CAAC;QACH,OAAQ,UAAyC,CAAC,YAAY,IAAI,IAAI,CAAA;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,MAAc;IAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,MAAM,GAAG,GAAG,OAAO,EAAE,EAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAA;IAC5C,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa;gBAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,6EAA6E;QAC/E,CAAC;IACH,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACpB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,WAAmB;IACpE,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IACzC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAA;AACpD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,WAAmB;IACrE,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW;QAAE,OAAM;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IACxB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAA;IAClC,OAAO,GAAG,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;QACvC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAK;QAC9B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAC/C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;IACrC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,EAAE,CAAA;IAChB,CAAC;IACD,MAAM,CAAC,GAAG,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC,CAAC;QAAE,OAAM;IACd,IAAI,CAAC;QACH,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAQ;YACtC,IAAI,CAAC,MAAM,IAAI,GAAG,KAAK,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE;gBAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QACzE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;AACH,CAAC"}

package/dist/wallet/destinations.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=destinations.test.d.ts.map

package/dist/wallet/destinations.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destinations.test.d.ts","sourceRoot":"","sources":["../../src/wallet/destinations.test.ts"],"names":[],"mappings":""}

package/dist/wallet/destinations.test.js

@@ -0,0 +1,34 @@
+import { beforeEach, describe, expect, it } from 'vitest';
+import { clearDestinations, isKnownDestination, rememberDestination, setDestinationsPrefix, } from './destinations.js';
+const WALLET = '0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266';
+const OTHER = '0x70997970C51812dc3A010C7d01b50e0d17dc79C8';
+describe('destinations (R-#253)', () => {
+    beforeEach(() => {
+        setDestinationsPrefix('m-wallet-test.destinations.');
+        clearDestinations();
+    });
+    it('treats an unseen address as new', () => {
+        expect(isKnownDestination(WALLET, OTHER)).toBe(false);
+    });
+    it('remembers an address, case-insensitively', () => {
+        rememberDestination(WALLET, OTHER);
+        expect(isKnownDestination(WALLET, OTHER)).toBe(true);
+        expect(isKnownDestination(WALLET, OTHER.toLowerCase())).toBe(true);
+    });
+    it('keeps the list per wallet', () => {
+        rememberDestination(WALLET, OTHER);
+        expect(isKnownDestination('0x0000000000000000000000000000000000000001', OTHER)).toBe(false);
+    });
+    it('is false for empty input', () => {
+        expect(isKnownDestination('', OTHER)).toBe(false);
+        expect(isKnownDestination(WALLET, '')).toBe(false);
+    });
+    it('clears one wallet without touching the others', () => {
+        rememberDestination(WALLET, OTHER);
+        rememberDestination('0x0000000000000000000000000000000000000001', OTHER);
+        clearDestinations(WALLET);
+        expect(isKnownDestination(WALLET, OTHER)).toBe(false);
+        expect(isKnownDestination('0x0000000000000000000000000000000000000001', OTHER)).toBe(true);
+    });
+});
+//# sourceMappingURL=destinations.test.js.map

package/dist/wallet/destinations.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destinations.test.js","sourceRoot":"","sources":["../../src/wallet/destinations.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,mBAAmB,CAAA;AAE1B,MAAM,MAAM,GAAG,4CAA4C,CAAA;AAC3D,MAAM,KAAK,GAAG,4CAA4C,CAAA;AAE1D,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,UAAU,CAAC,GAAG,EAAE;QACd,qBAAqB,CAAC,6BAA6B,CAAC,CAAA;QACpD,iBAAiB,EAAE,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpD,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,kBAAkB,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACjD,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAClC,mBAAmB,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAA;QACxE,iBAAiB,CAAC,MAAM,CAAC,CAAA;QACzB,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrD,MAAM,CAAC,kBAAkB,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/wallet/external-provider.d.ts

@@ -0,0 +1,33 @@
+import type { Eip1193Provider } from './types.js';
+export interface AnnouncedProvider {
+    uuid: string;
+    name: string;
+    rdns: string;
+    icon?: string;
+    provider: Eip1193Provider;
+}
+export interface ExternalProviderState {
+    provider: Eip1193Provider | null;
+    announced: AnnouncedProvider[];
+    /** De dónde salió el proveedor elegido (`window.ethereum`, EIP-6963 o ninguno). */
+    source: ExternalProviderSource;
+    /** rdns del anuncio elegido; `null` si es `window.ethereum`. */
+    rdns: string | null;
+}
+export type ExternalProviderSource = 'window.ethereum' | 'eip6963' | null;
+/** Suscribe un listener (para `useSyncExternalStore` del consumidor). */
+export declare function subscribeExternalProvider(listener: () => void): () => void;
+/** Snapshot actual del store (para `useSyncExternalStore`). */
+export declare function getExternalProviderSnapshot(): ExternalProviderState;
+/** Effective injected provider, or `null` (also callable outside React). */
+export declare function getExternalProvider(): Eip1193Provider | null;
+/**
+ * Valor para `wallet_source` cuando la sesión se inicia con una billetera inyectada:
+ * `eip6963:<rdns>` si llegó por anuncio, `window.ethereum` si es el objeto clásico y
+ * `unknown` si todavía no hay proveedor.
+ */
+export declare function externalWalletSource(): string;
+export declare function getAnnouncedProviders(): AnnouncedProvider[];
+/** Test-only: forgets the listeners and the chosen provider. */
+export declare function resetExternalProviderForTests(): void;
+//# sourceMappingURL=external-provider.d.ts.map

package/dist/wallet/external-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-provider.d.ts","sourceRoot":"","sources":["../../src/wallet/external-provider.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,eAAe,CAAA;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAA;IAChC,SAAS,EAAE,iBAAiB,EAAE,CAAA;IAC9B,mFAAmF;IACnF,MAAM,EAAE,sBAAsB,CAAA;IAC9B,gEAAgE;IAChE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB;AAED,MAAM,MAAM,sBAAsB,GAAG,iBAAiB,GAAG,SAAS,GAAG,IAAI,CAAA;AAuEzE,yEAAyE;AACzE,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAM1E;AAED,+DAA+D;AAC/D,wBAAgB,2BAA2B,IAAI,qBAAqB,CAInE;AAED,4EAA4E;AAC5E,wBAAgB,mBAAmB,IAAI,eAAe,GAAG,IAAI,CAI5D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AAED,wBAAgB,qBAAqB,IAAI,iBAAiB,EAAE,CAG3D;AAED,gEAAgE;AAChE,wBAAgB,6BAA6B,IAAI,IAAI,CAIpD"}