@pasosdejesus/m 0.23.1 → 0.24.0

package/dist/wallet/signer.js

@@ -0,0 +1,91 @@
+import { english, generateMnemonic, mnemonicToAccount, privateKeyToAccount } from 'viem/accounts';
+import { keccak256, stringToHex } from 'viem';
+import { sha256 } from './crypto.js';
+/** Words per BIP39 length: only these are valid mnemonics. */
+const VALID_WORD_COUNTS = [12, 15, 18, 21, 24];
+/** `english` index → word, built once (the wordlist is fixed). */
+const WORD_INDEX = new Map(english.map((word, index) => [word, index]));
+export function newMnemonic() {
+    const mnemonic = generateMnemonic(english);
+    // Self-check: a broken RNG or a truncated wordlist must never be stored as a
+    // wallet the user cannot recover.
+    if (!isValidMnemonicSync(mnemonic)) {
+        throw new Error('invalid-mnemonic');
+    }
+    return mnemonic;
+}
+export function normalizeMnemonic(mnemonic) {
+    return mnemonic.trim().toLowerCase().replace(/\s+/g, ' ');
+}
+/**
+ * BIP39 validation (words in the list + checksum), without adding a dependency:
+ * the wordlist comes from viem and the hash from WebCrypto (already required to
+ * store the wallet). `mnemonicToSeedSync` does **not** validate, so an imported
+ * phrase with a typo would silently become a different wallet; callers use this
+ * to reject it instead.
+ */
+export async function isValidMnemonic(mnemonic) {
+    const words = normalizeMnemonic(mnemonic).split(' ');
+    if (!VALID_WORD_COUNTS.includes(words.length))
+        return false;
+    const indices = [];
+    for (const word of words) {
+        const index = WORD_INDEX.get(word);
+        if (index === undefined)
+            return false;
+        indices.push(index);
+    }
+    const bits = indices.map((index) => index.toString(2).padStart(11, '0')).join('');
+    // ENT = words * 11 * 32 / 33; CS = ENT / 32 (12 words → 128 + 4 bits).
+    const entropyBits = (words.length * 11 * 32) / 33;
+    const entropy = new Uint8Array(entropyBits / 8);
+    for (let i = 0; i < entropy.length; i++) {
+        entropy[i] = parseInt(bits.slice(i * 8, i * 8 + 8), 2);
+    }
+    const hash = await sha256(entropy);
+    const expected = Array.from(hash)
+        .map((byte) => byte.toString(2).padStart(8, '0'))
+        .join('')
+        .slice(0, bits.length - entropyBits);
+    return expected === bits.slice(entropyBits);
+}
+/**
+ * Synchronous checksum check. It repeats the async logic because the digest is
+ * not available synchronously; kept for `newMnemonic`, where the phrase we just
+ * generated must be provably valid before it is stored.
+ */
+function isValidMnemonicSync(mnemonic) {
+    const words = normalizeMnemonic(mnemonic).split(' ');
+    if (!VALID_WORD_COUNTS.includes(words.length))
+        return false;
+    return words.every((word) => WORD_INDEX.has(word));
+}
+/** Throws the translatable code `invalid-mnemonic` when the phrase is not BIP39. */
+export async function assertValidMnemonic(mnemonic) {
+    if (!(await isValidMnemonic(mnemonic)))
+        throw new Error('invalid-mnemonic');
+}
+export function accountFromMnemonic(mnemonic, addressIndex = 0, accountIndex = 0) {
+    return mnemonicToAccount(normalizeMnemonic(mnemonic), { accountIndex, addressIndex });
+}
+export function accountFromPrivateKey(privateKey) {
+    return privateKeyToAccount(privateKey);
+}
+export function addressFromMnemonic(mnemonic, addressIndex = 0, accountIndex = 0) {
+    return accountFromMnemonic(mnemonic, addressIndex, accountIndex).address;
+}
+/** keccak256 of a UTF-8 string (replaces `cast keccak`). */
+export function keccak(value) {
+    return keccak256(stringToHex(value));
+}
+export function privateKeyFromMnemonic(mnemonic, addressIndex = 0, accountIndex = 0) {
+    const hdKey = accountFromMnemonic(mnemonic, addressIndex, accountIndex).getHdKey();
+    const key = hdKey.privateKey;
+    if (!key)
+        throw new Error('Could not derive the private key from the mnemonic');
+    let hex = '';
+    for (const byte of key)
+        hex += byte.toString(16).padStart(2, '0');
+    return `0x${hex}`;
+}
+//# sourceMappingURL=signer.js.map

package/dist/wallet/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/wallet/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACjG,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,MAAM,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAIpC,8DAA8D;AAC9D,MAAM,iBAAiB,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AAE9C,kEAAkE;AAClE,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;AAE5F,MAAM,UAAU,WAAW;IACzB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAC1C,6EAA6E;IAC7E,kCAAkC;IAClC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;IACrC,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB;IACpD,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACpD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IAE3D,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACrC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACjF,uEAAuE;IACvE,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAA;IACjD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,WAAW,GAAG,CAAC,CAAC,CAAA;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;SAC9B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAChD,IAAI,CAAC,EAAE,CAAC;SACR,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,CAAA;IACtC,OAAO,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACpD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3D,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;AACpD,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACxD,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;AAC7E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,YAAY,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC;IACtF,OAAO,iBAAiB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,YAAY,EAAE,YAAY,EAAW,CAAC,CAAA;AAChG,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAsB;IAC1D,OAAO,mBAAmB,CAAC,UAAU,CAAC,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,YAAY,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC;IACtF,OAAO,mBAAmB,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,OAAO,CAAA;AAC1E,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,YAAY,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC;IACzF,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClF,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAA;IAC5B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IAC/E,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,IAAI,IAAI,GAAG;QAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjE,OAAO,KAAK,GAAG,EAAE,CAAA;AACnB,CAAC"}

package/dist/wallet/signer.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=signer.test.d.ts.map

package/dist/wallet/signer.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.test.d.ts","sourceRoot":"","sources":["../../src/wallet/signer.test.ts"],"names":[],"mappings":""}

package/dist/wallet/signer.test.js

@@ -0,0 +1,62 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { mkdtemp, readFile, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { accountFromMnemonic, addressFromMnemonic, isValidMnemonic, keccak, privateKeyFromMnemonic, } from './signer.js';
+import { runWallet } from '../tasks/wallet.js';
+const HARDHAT_MNEMONIC = 'test test test test test test test test test test test junk';
+const HARDHAT_ADDRESS = '0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266';
+describe('signer', () => {
+    it('derives the hardhat address and a 0x private key', () => {
+        expect(addressFromMnemonic(HARDHAT_MNEMONIC)).toBe(HARDHAT_ADDRESS);
+        expect(privateKeyFromMnemonic(HARDHAT_MNEMONIC)).toMatch(/^0x[0-9a-f]{64}$/);
+    });
+    it('distinguishes accountIndex from addressIndex', () => {
+        const byAccount = accountFromMnemonic(HARDHAT_MNEMONIC, 0, 1).address;
+        const byAddress = accountFromMnemonic(HARDHAT_MNEMONIC, 1, 0).address;
+        expect(byAccount).not.toBe(HARDHAT_ADDRESS);
+        expect(byAddress).not.toBe(HARDHAT_ADDRESS);
+        expect(byAccount).not.toBe(byAddress);
+    });
+    it('validates BIP39 phrases (wordlist + checksum)', async () => {
+        expect(await isValidMnemonic(HARDHAT_MNEMONIC)).toBe(true);
+        expect(await isValidMnemonic('test test test test test test test test test test test test')).toBe(false);
+        expect(await isValidMnemonic('not a mnemonic at all')).toBe(false);
+    });
+    it('computes keccak256 of a UTF-8 string', () => {
+        expect(keccak('')).toBe('0xc5d2460186f7233c927e7db2dcc703c0e500b653ca82273b7bfad8045d85a470');
+        expect(keccak('hello')).toMatch(/^0x[0-9a-f]{64}$/);
+    });
+});
+// m/REQ/14 Fase 1: el CLI de billetera debe usar el núcleo y ambos caminos deben
+// coincidir (paridad CLI ↔ núcleo).
+describe('CLI ↔ core parity', () => {
+    let dir;
+    let logs;
+    beforeEach(async () => {
+        dir = await mkdtemp(join(tmpdir(), 'm-wallet-cli-'));
+        process.env.M_WALLETS_DIR = dir;
+        logs = [];
+        vi.spyOn(console, 'log').mockImplementation((...args) => {
+            logs.push(args.map((a) => String(a)).join(' '));
+        });
+        vi.spyOn(console, 'warn').mockImplementation(() => { });
+        vi.spyOn(console, 'error').mockImplementation(() => { });
+    });
+    afterEach(async () => {
+        vi.restoreAllMocks();
+        delete process.env.M_WALLETS_DIR;
+        await rm(dir, { recursive: true, force: true });
+    });
+    it('wallet:keccak matches the core keccak', async () => {
+        await runWallet(['keccak', 'hello']);
+        expect(logs.join('\n')).toContain(keccak('hello'));
+    });
+    it('wallet:generate --index 2 derives with the core accountIndex', async () => {
+        await runWallet(['generate', '--name', 'parity', '--index', '2']);
+        const saved = JSON.parse(await readFile(join(dir, 'parity.json'), 'utf-8'));
+        expect(saved.address).toBe(accountFromMnemonic(saved.mnemonic, 0, 2).address);
+        expect(saved.privateKey).toBe(privateKeyFromMnemonic(saved.mnemonic, 0, 2));
+    });
+});
+//# sourceMappingURL=signer.test.js.map

package/dist/wallet/signer.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.test.js","sourceRoot":"","sources":["../../src/wallet/signer.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACxE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,MAAM,EACN,sBAAsB,GACvB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAE9C,MAAM,gBAAgB,GAAG,6DAA6D,CAAA;AACtF,MAAM,eAAe,GAAG,4CAA4C,CAAA;AAEpE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACnE,MAAM,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,SAAS,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;QACrE,MAAM,SAAS,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;QACrE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,CAAC,MAAM,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC1D,MAAM,CAAC,MAAM,eAAe,CAAC,6DAA6D,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxG,MAAM,CAAC,MAAM,eAAe,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAA;QAC7F,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,iFAAiF;AACjF,oCAAoC;AACpC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAI,GAAW,CAAA;IACf,IAAI,IAAc,CAAA;IAElB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAA;QACpD,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,GAAG,CAAA;QAC/B,IAAI,GAAG,EAAE,CAAA;QACT,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,IAAe,EAAE,EAAE;YACjE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACjD,CAAC,CAAC,CAAA;QACF,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACtD,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,EAAE,CAAC,eAAe,EAAE,CAAA;QACpB,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;QAChC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,SAAS,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;QACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAA;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAIzE,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QAC7E,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/wallet/siwe.d.ts

@@ -0,0 +1,2 @@
+export declare function signSIWE(message: string): Promise<`0x${string}`>;
+//# sourceMappingURL=siwe.d.ts.map

package/dist/wallet/siwe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"siwe.d.ts","sourceRoot":"","sources":["../../src/wallet/siwe.ts"],"names":[],"mappings":"AAEA,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAEtE"}

package/dist/wallet/siwe.js

@@ -0,0 +1,5 @@
+import { signMessage } from './wallet.js';
+export async function signSIWE(message) {
+    return signMessage(message);
+}
+//# sourceMappingURL=siwe.js.map

package/dist/wallet/siwe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"siwe.js","sourceRoot":"","sources":["../../src/wallet/siwe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAe;IAC5C,OAAO,WAAW,CAAC,OAAO,CAAC,CAAA;AAC7B,CAAC"}

package/dist/wallet/storage/file.d.ts

@@ -0,0 +1,19 @@
+import type { StorageAdapter, StoredWallet } from '../types.js';
+/**
+ * Node.js storage adapter: the encrypted record lives in a JSON file, so E2E
+ * tests (and any Node script) can use the real wallet without a browser.
+ *
+ * The import is dynamic on purpose: this module must stay loadable from a
+ * browser bundle (`node:fs/promises` is only imported when a method runs), which
+ * is also why it is exported from `@learn-tg/pdj-wallet/storage` and not from the
+ * package root.
+ */
+export declare class FileStorage implements StorageAdapter {
+    private readonly filePath;
+    constructor(filePath: string);
+    get(): Promise<StoredWallet | null>;
+    set(record: StoredWallet): Promise<void>;
+    delete(): Promise<void>;
+    has(): Promise<boolean>;
+}
+//# sourceMappingURL=file.d.ts.map

package/dist/wallet/storage/file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../../src/wallet/storage/file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAY/D;;;;;;;;GAQG;AACH,qBAAa,WAAY,YAAW,cAAc;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEvC,GAAG,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAWnC,GAAG,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAMxC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAKvB,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;CAG9B"}

package/dist/wallet/storage/file.js

@@ -0,0 +1,48 @@
+async function fs() {
+    try {
+        return await import('node:fs/promises');
+    }
+    catch {
+        throw new Error('FileStorage requires Node.js (node:fs/promises is not available here)');
+    }
+}
+/**
+ * Node.js storage adapter: the encrypted record lives in a JSON file, so E2E
+ * tests (and any Node script) can use the real wallet without a browser.
+ *
+ * The import is dynamic on purpose: this module must stay loadable from a
+ * browser bundle (`node:fs/promises` is only imported when a method runs), which
+ * is also why it is exported from `@learn-tg/pdj-wallet/storage` and not from the
+ * package root.
+ */
+export class FileStorage {
+    filePath;
+    constructor(filePath) {
+        this.filePath = filePath;
+    }
+    async get() {
+        const { readFile } = await fs();
+        try {
+            const raw = await readFile(this.filePath, 'utf8');
+            return JSON.parse(raw);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return null;
+            throw error;
+        }
+    }
+    async set(record) {
+        const { writeFile } = await fs();
+        // 0600: the file holds the encrypted key, nobody else needs to read it.
+        await writeFile(this.filePath, `${JSON.stringify(record, null, 2)}\n`, { mode: 0o600 });
+    }
+    async delete() {
+        const { rm } = await fs();
+        await rm(this.filePath, { force: true });
+    }
+    async has() {
+        return (await this.get()) !== null;
+    }
+}
+//# sourceMappingURL=file.js.map

package/dist/wallet/storage/file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.js","sourceRoot":"","sources":["../../../src/wallet/storage/file.ts"],"names":[],"mappings":"AAIA,KAAK,UAAU,EAAE;IACf,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;IAC1F,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEjD,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,EAAE,CAAA;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YACjD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAA;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA2B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAA;YAC/D,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAoB;QAC5B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,EAAE,CAAA;QAChC,wEAAwE;QACxE,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACzF,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAA;QACzB,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,GAAG;QACP,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAA;IACpC,CAAC;CACF"}

package/dist/wallet/storage/idb.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Single owner of the in-app wallet IndexedDB database.
+ *
+ * Two object stores live here: `wallet` (the password-encrypted record, see
+ * `storage/indexeddb.ts`) and `biometric` (the key sealed with the WebAuthn PRF
+ * secret, see `biometric.ts`). Both modules must open the database with the same
+ * version, so the version lives here and nowhere else.
+ *
+ * The database name is **configurable**: a shared package must not write into one
+ * consumer's namespace (`m/REQ/14`, "parametrizar las claves de almacenamiento").
+ * A consumer that already has data under its own name calls `setWalletDbName()`
+ * once at startup to keep reading it.
+ */
+export declare const DB_NAME = "pasosdejesus-m-wallet";
+export declare const DB_VERSION = 2;
+export declare const STORE_WALLET = "wallet";
+export declare const STORE_BIOMETRIC = "biometric";
+/** Overrides the IndexedDB database name (a consumer keeps its own namespace). */
+export declare function setWalletDbName(name: string): void;
+/** The IndexedDB database name currently in use. */
+export declare function getWalletDbName(): string;
+export declare function openDb(name?: string): Promise<IDBDatabase>;
+/** Runs one request inside its own transaction and closes the connection. */
+export declare function runInDb<T>(storeName: string, mode: IDBTransactionMode, fn: (store: IDBObjectStore) => IDBRequest): Promise<T>;
+//# sourceMappingURL=idb.d.ts.map

package/dist/wallet/storage/idb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idb.d.ts","sourceRoot":"","sources":["../../../src/wallet/storage/idb.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,OAAO,0BAA0B,CAAA;AAC9C,eAAO,MAAM,UAAU,IAAI,CAAA;AAC3B,eAAO,MAAM,YAAY,WAAW,CAAA;AACpC,eAAO,MAAM,eAAe,cAAc,CAAA;AAI1C,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAElD;AAED,oDAAoD;AACpD,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAQD,wBAAgB,MAAM,CAAC,IAAI,GAAE,MAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAWlE;AAED,6EAA6E;AAC7E,wBAAgB,OAAO,CAAC,CAAC,EACvB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,kBAAkB,EACxB,EAAE,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,UAAU,GACxC,OAAO,CAAC,CAAC,CAAC,CAWZ"}

package/dist/wallet/storage/idb.js

@@ -0,0 +1,58 @@
+/**
+ * Single owner of the in-app wallet IndexedDB database.
+ *
+ * Two object stores live here: `wallet` (the password-encrypted record, see
+ * `storage/indexeddb.ts`) and `biometric` (the key sealed with the WebAuthn PRF
+ * secret, see `biometric.ts`). Both modules must open the database with the same
+ * version, so the version lives here and nowhere else.
+ *
+ * The database name is **configurable**: a shared package must not write into one
+ * consumer's namespace (`m/REQ/14`, "parametrizar las claves de almacenamiento").
+ * A consumer that already has data under its own name calls `setWalletDbName()`
+ * once at startup to keep reading it.
+ */
+export const DB_NAME = 'pasosdejesus-m-wallet';
+export const DB_VERSION = 2;
+export const STORE_WALLET = 'wallet';
+export const STORE_BIOMETRIC = 'biometric';
+let dbName = DB_NAME;
+/** Overrides the IndexedDB database name (a consumer keeps its own namespace). */
+export function setWalletDbName(name) {
+    if (name)
+        dbName = name;
+}
+/** The IndexedDB database name currently in use. */
+export function getWalletDbName() {
+    return dbName;
+}
+function indexedDb() {
+    const idb = globalThis.indexedDB;
+    if (!idb)
+        throw new Error('IndexedDB is not available in this environment');
+    return idb;
+}
+export function openDb(name = dbName) {
+    return new Promise((resolve, reject) => {
+        const request = indexedDb().open(name, DB_VERSION);
+        request.onupgradeneeded = () => {
+            const db = request.result;
+            if (!db.objectStoreNames.contains(STORE_WALLET))
+                db.createObjectStore(STORE_WALLET);
+            if (!db.objectStoreNames.contains(STORE_BIOMETRIC))
+                db.createObjectStore(STORE_BIOMETRIC);
+        };
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error ?? new Error('IndexedDB open failed'));
+    });
+}
+/** Runs one request inside its own transaction and closes the connection. */
+export function runInDb(storeName, mode, fn) {
+    return openDb().then((db) => new Promise((resolve, reject) => {
+        const tx = db.transaction(storeName, mode);
+        const request = fn(tx.objectStore(storeName));
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error ?? new Error('IndexedDB request failed'));
+        tx.oncomplete = () => db.close();
+    }));
+}
+//# sourceMappingURL=idb.js.map

package/dist/wallet/storage/idb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idb.js","sourceRoot":"","sources":["../../../src/wallet/storage/idb.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,uBAAuB,CAAA;AAC9C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAA;AAC3B,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAA;AACpC,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAA;AAE1C,IAAI,MAAM,GAAG,OAAO,CAAA;AAEpB,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAI;QAAE,MAAM,GAAG,IAAI,CAAA;AACzB,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,eAAe;IAC7B,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,GAAG,GAAI,UAAyC,CAAC,SAAS,CAAA;IAChE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IAC3E,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,OAAe,MAAM;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QAClD,OAAO,CAAC,eAAe,GAAG,GAAG,EAAE;YAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;YACzB,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAA;YACnF,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAAE,EAAE,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAA;QAC3F,CAAC,CAAA;QACD,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACjD,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,OAAO,CACrB,SAAiB,EACjB,IAAwB,EACxB,EAAyC;IAEzC,OAAO,MAAM,EAAE,CAAC,IAAI,CAClB,CAAC,EAAE,EAAE,EAAE,CACL,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACjC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAA;QAC7C,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAW,CAAC,CAAA;QACtD,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAA;QACtF,EAAE,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAA;IAClC,CAAC,CAAC,CACL,CAAA;AACH,CAAC"}

package/dist/wallet/storage/index.d.ts

@@ -0,0 +1,5 @@
+export { MemoryStorage } from './memory.js';
+export { IndexedDBStorage } from './indexeddb.js';
+export { FileStorage } from './file.js';
+export type { StorageAdapter, StoredWallet } from '../types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/wallet/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/wallet/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA"}

package/dist/wallet/storage/index.js

@@ -0,0 +1,4 @@
+export { MemoryStorage } from './memory.js';
+export { IndexedDBStorage } from './indexeddb.js';
+export { FileStorage } from './file.js';
+//# sourceMappingURL=index.js.map

package/dist/wallet/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/wallet/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA"}

package/dist/wallet/storage/indexeddb.d.ts

@@ -0,0 +1,8 @@
+import type { StorageAdapter, StoredWallet } from '../types.js';
+export declare class IndexedDBStorage implements StorageAdapter {
+    get(): Promise<StoredWallet | null>;
+    set(record: StoredWallet): Promise<void>;
+    delete(): Promise<void>;
+    has(): Promise<boolean>;
+}
+//# sourceMappingURL=indexeddb.d.ts.map

package/dist/wallet/storage/indexeddb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb.d.ts","sourceRoot":"","sources":["../../../src/wallet/storage/indexeddb.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAI/D,qBAAa,gBAAiB,YAAW,cAAc;IAC/C,GAAG,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAOnC,GAAG,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAIvB,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;CAG9B"}

package/dist/wallet/storage/indexeddb.js

@@ -0,0 +1,18 @@
+import { runInDb, STORE_WALLET } from './idb.js';
+const KEY = 'current';
+export class IndexedDBStorage {
+    async get() {
+        const value = await runInDb(STORE_WALLET, 'readonly', (store) => store.get(KEY));
+        return value ?? null;
+    }
+    async set(record) {
+        await runInDb(STORE_WALLET, 'readwrite', (store) => store.put(record, KEY));
+    }
+    async delete() {
+        await runInDb(STORE_WALLET, 'readwrite', (store) => store.delete(KEY));
+    }
+    async has() {
+        return (await this.get()) !== null;
+    }
+}
+//# sourceMappingURL=indexeddb.js.map

package/dist/wallet/storage/indexeddb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb.js","sourceRoot":"","sources":["../../../src/wallet/storage/indexeddb.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAGhD,MAAM,GAAG,GAAG,SAAS,CAAA;AAErB,MAAM,OAAO,gBAAgB;IAC3B,KAAK,CAAC,GAAG;QACP,MAAM,KAAK,GAAG,MAAM,OAAO,CAA2B,YAAY,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACxF,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CACf,CAAA;QACD,OAAO,KAAK,IAAI,IAAI,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAoB;QAC5B,MAAM,OAAO,CAAc,YAAY,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;IAC1F,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,OAAO,CAAY,YAAY,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IACnF,CAAC;IAED,KAAK,CAAC,GAAG;QACP,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAA;IACpC,CAAC;CACF"}

package/dist/wallet/storage/memory.d.ts

@@ -0,0 +1,10 @@
+import type { StorageAdapter, StoredWallet } from '../types.js';
+export declare class MemoryStorage implements StorageAdapter {
+    private record;
+    constructor(initial?: StoredWallet | null);
+    get(): Promise<StoredWallet | null>;
+    set(record: StoredWallet): Promise<void>;
+    delete(): Promise<void>;
+    has(): Promise<boolean>;
+}
+//# sourceMappingURL=memory.d.ts.map

package/dist/wallet/storage/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/wallet/storage/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE/D,qBAAa,aAAc,YAAW,cAAc;IAClD,OAAO,CAAC,MAAM,CAAqB;gBAEvB,OAAO,GAAE,YAAY,GAAG,IAAW;IAIzC,GAAG,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAInC,GAAG,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAIvB,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;CAG9B"}

package/dist/wallet/storage/memory.js

@@ -0,0 +1,19 @@
+export class MemoryStorage {
+    record;
+    constructor(initial = null) {
+        this.record = initial;
+    }
+    async get() {
+        return this.record;
+    }
+    async set(record) {
+        this.record = record;
+    }
+    async delete() {
+        this.record = null;
+    }
+    async has() {
+        return this.record !== null;
+    }
+}
+//# sourceMappingURL=memory.js.map

package/dist/wallet/storage/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/wallet/storage/memory.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,aAAa;IAChB,MAAM,CAAqB;IAEnC,YAAY,UAA+B,IAAI;QAC7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAA;IACvB,CAAC;IAED,KAAK,CAAC,GAAG;QACP,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAoB;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,GAAG;QACP,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAA;IAC7B,CAAC;CACF"}

package/dist/wallet/storage.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=storage.test.d.ts.map

package/dist/wallet/storage.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.test.d.ts","sourceRoot":"","sources":["../../src/wallet/storage.test.ts"],"names":[],"mappings":""}

package/dist/wallet/storage.test.js

@@ -0,0 +1,103 @@
+import { afterEach, describe, expect, it } from 'vitest';
+import { mkdtemp, rm, stat } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { encryptSecret } from './crypto.js';
+import { FileStorage } from './storage/file.js';
+import { MemoryStorage } from './storage/memory.js';
+import { createWallet, deleteWallet, exportMnemonic, exportPrivateKey, getWalletInfo, hasWallet, importWallet, lockWallet, signMessage, unlockWallet, } from './wallet.js';
+import { privateKeyFromMnemonic } from './signer.js';
+const password = '12345678';
+const HARDHAT_MNEMONIC = 'test test test test test test test test test test test junk';
+const HARDHAT_ADDRESS = '0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266';
+const dirs = [];
+async function tempStorage() {
+    const dir = await mkdtemp(join(tmpdir(), 'm-wallet-'));
+    dirs.push(dir);
+    const path = join(dir, 'wallet.json');
+    return { storage: new FileStorage(path), path };
+}
+function sampleRecord() {
+    return {
+        version: 1,
+        address: HARDHAT_ADDRESS,
+        chain: 'celoSepolia',
+        createdAt: 1,
+        kdf: { name: 'PBKDF2', hash: 'SHA-256', iterations: 600_000, salt: 'AA==' },
+        cipher: { name: 'AES-GCM', iv: 'BB==', data: 'CC==' },
+    };
+}
+afterEach(async () => {
+    await lockWallet();
+    while (dirs.length) {
+        const dir = dirs.pop();
+        if (dir)
+            await rm(dir, { recursive: true, force: true });
+    }
+});
+describe('FileStorage', () => {
+    it('stores, reads and deletes the encrypted record', async () => {
+        const { storage } = await tempStorage();
+        expect(await storage.has()).toBe(false);
+        expect(await storage.get()).toBeNull();
+        await storage.set(sampleRecord());
+        expect(await storage.has()).toBe(true);
+        expect(await storage.get()).toEqual(sampleRecord());
+        await storage.delete();
+        expect(await storage.has()).toBe(false);
+    });
+    it('writes the file with owner-only permissions', async () => {
+        const { storage, path } = await tempStorage();
+        await storage.set(sampleRecord());
+        const info = await stat(path);
+        expect(info.mode & 0o777).toBe(0o600);
+    });
+});
+describe('wallet with FileStorage (Node.js)', () => {
+    it('creates, persists, unlocks and signs without a browser', async () => {
+        const { storage } = await tempStorage();
+        const { walletInfo, mnemonic } = await createWallet({ password: password, storage });
+        expect(walletInfo.address).toMatch(/^0x[0-9a-fA-F]{40}$/);
+        expect(mnemonic.split(' ')).toHaveLength(12);
+        await lockWallet();
+        expect(await hasWallet(storage)).toBe(true);
+        expect(await hasWallet(new FileStorage('/nonexistent/m-wallet.json'))).toBe(false);
+        expect((await getWalletInfo(storage))?.address).toBe(walletInfo.address);
+        const unlocked = await unlockWallet(password, storage);
+        expect(unlocked.address).toBe(walletInfo.address);
+        const signature = await signMessage('hola');
+        expect(signature).toMatch(/^0x[0-9a-f]+$/);
+        await deleteWallet(storage);
+        expect(await hasWallet(storage)).toBe(false);
+    });
+    it('exports the recovery phrase and the private key with the password', async () => {
+        const { storage } = await tempStorage();
+        const { mnemonic } = await createWallet({ password: password, storage });
+        expect(await exportMnemonic(password, storage)).toBe(mnemonic);
+        expect(await exportPrivateKey(password, storage)).toMatch(/^0x[0-9a-f]{64}$/i);
+        await expect(exportMnemonic('99999999', storage)).rejects.toThrow(/password/);
+        await expect(exportPrivateKey('99999999', storage)).rejects.toThrow(/password/);
+    });
+    it('has no recovery phrase when the wallet was imported from a private key', async () => {
+        const { storage } = await tempStorage();
+        const privateKey = privateKeyFromMnemonic(HARDHAT_MNEMONIC);
+        await importWallet({ privateKey, password: password, storage });
+        expect(await exportPrivateKey(password, storage)).toBe(privateKey);
+        await expect(exportMnemonic(password, storage)).rejects.toThrow(/recovery phrase/);
+    });
+});
+describe('legacy records', () => {
+    it('unlocks a record whose ciphertext is the bare private key', async () => {
+        const privateKey = privateKeyFromMnemonic(HARDHAT_MNEMONIC);
+        const legacy = await encryptSecret(privateKey, password);
+        const storage = new MemoryStorage({
+            ...sampleRecord(),
+            kdf: legacy.kdf,
+            cipher: legacy.cipher,
+        });
+        const info = await unlockWallet(password, storage);
+        expect(info.address.toLowerCase()).toBe(HARDHAT_ADDRESS.toLowerCase());
+        await expect(exportMnemonic(password, storage)).rejects.toThrow(/recovery phrase/);
+    });
+});
+//# sourceMappingURL=storage.test.js.map

package/dist/wallet/storage.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.test.js","sourceRoot":"","sources":["../../src/wallet/storage.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACxD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,SAAS,EACT,YAAY,EACZ,UAAU,EACV,WAAW,EACX,YAAY,GACb,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAGpD,MAAM,QAAQ,GAAG,UAAU,CAAA;AAC3B,MAAM,gBAAgB,GAAG,6DAA6D,CAAA;AACtF,MAAM,eAAe,GAAG,4CAA4C,CAAA;AAEpE,MAAM,IAAI,GAAa,EAAE,CAAA;AAEzB,KAAK,UAAU,WAAW;IACxB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAA;IACtD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACd,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IACrC,OAAO,EAAE,OAAO,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAA;AACjD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,eAAe;QACxB,KAAK,EAAE,aAAa;QACpB,SAAS,EAAE,CAAC;QACZ,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE;QAC3E,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;KACtD,CAAA;AACH,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,UAAU,EAAE,CAAA;IAClB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,GAAG;YAAE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,WAAW,EAAE,CAAA;QAEvC,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;QAEtC,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAA;QACjC,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;QAEnD,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;QACtB,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,EAAE,CAAA;QAC7C,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAA;QAEjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,WAAW,EAAE,CAAA;QAEvC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QACpF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;QACzD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;QAE5C,MAAM,UAAU,EAAE,CAAA;QAClB,MAAM,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,SAAS,CAAC,IAAI,WAAW,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAElF,MAAM,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QAExE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACtD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QAEjD,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;QAE1C,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;QAC3B,MAAM,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,WAAW,EAAE,CAAA;QACvC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAExE,MAAM,CAAC,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9D,MAAM,CAAC,MAAM,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAE9E,MAAM,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAC7E,MAAM,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,WAAW,EAAE,CAAA;QACvC,MAAM,UAAU,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QAE3D,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/D,MAAM,CAAC,MAAM,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAClE,MAAM,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,UAAU,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QACxD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;YAChC,GAAG,YAAY,EAAE;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAClD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,CAAA;QAEtE,MAAM,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}