@pasosdejesus/m 0.23.1 → 0.25.0

package/dist/wallet/wallet.test.js

@@ -0,0 +1,150 @@
+import { beforeEach, describe, expect, it } from 'vitest';
+import { verifyMessage } from 'viem';
+import { createWallet, deleteWallet, getWalletInfo, hasWallet, importWallet, isUnlocked, isValidPassword, lockWallet, signMessage, setWalletChain, unlockWallet, } from './wallet.js';
+import { MemoryStorage } from './storage/memory.js';
+import { KDF_ITERATIONS_FLOOR, encryptSecret } from './crypto.js';
+import { privateKeyFromMnemonic, isValidMnemonic } from './signer.js';
+import { signSIWE } from './siwe.js';
+const HARDHAT_MNEMONIC = 'test test test test test test test test test test test junk';
+const HARDHAT_ADDRESS = '0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266';
+const password = '12345678';
+describe('wallet', () => {
+    let storage;
+    beforeEach(async () => {
+        storage = new MemoryStorage();
+        await lockWallet();
+    });
+    it('creates a wallet with a fresh mnemonic and stores it encrypted', async () => {
+        const { walletInfo, mnemonic } = await createWallet({ password: password, storage });
+        expect(mnemonic.split(' ')).toHaveLength(12);
+        expect(walletInfo.address).toMatch(/^0x[0-9a-fA-F]{40}$/);
+        expect(walletInfo.chain).toBe('celoSepolia');
+        expect(await hasWallet(storage)).toBe(true);
+        expect(isUnlocked()).toBe(true);
+        const record = await storage.get();
+        expect(record?.cipher.data).not.toContain(mnemonic);
+        expect(record?.address).toBe(walletInfo.address);
+    });
+    it('rejects a password shorter than 8 characters', async () => {
+        await expect(createWallet({ password: '123', storage })).rejects.toThrow(/at least 8 characters/i);
+        await expect(createWallet({ password: 'short', storage })).rejects.toThrow(/at least 8 characters/i);
+        await expect(createWallet({ password: '123456', storage })).rejects.toThrow(/at least 8 characters/i);
+    });
+    it('upgrades the work factor of an old record when it is unlocked', async () => {
+        const legacy = new MemoryStorage();
+        const secret = await encryptSecret(JSON.stringify({ v: 1, privateKey: privateKeyFromMnemonic(HARDHAT_MNEMONIC) }), password, 1000);
+        await legacy.set({
+            version: 1,
+            address: HARDHAT_ADDRESS,
+            chain: 'celoSepolia',
+            createdAt: Date.now(),
+            kdf: secret.kdf,
+            cipher: secret.cipher,
+        });
+        expect((await unlockWallet(password, legacy)).address).toBe(HARDHAT_ADDRESS);
+        const upgraded = await legacy.get();
+        expect(upgraded.kdf.iterations).toBeGreaterThanOrEqual(KDF_ITERATIONS_FLOOR);
+        await lockWallet();
+        expect((await unlockWallet(password, legacy)).address).toBe(HARDHAT_ADDRESS);
+    });
+    it('accepts a passphrase of 8+ characters and unlocks with it', async () => {
+        const { walletInfo } = await createWallet({ password: 'correct horse', storage });
+        expect(walletInfo.address).toMatch(/^0x[a-fA-F0-9]{40}$/);
+        await lockWallet();
+        const unlocked = await unlockWallet('correct horse', storage);
+        expect(unlocked.address).toBe(walletInfo.address);
+    });
+    it('isValidPassword accepts 8+ character secrets only', () => {
+        expect(isValidPassword('12345678')).toBe(true);
+        expect(isValidPassword('correct horse')).toBe(true);
+        expect(isValidPassword('123456')).toBe(false);
+        expect(isValidPassword('short')).toBe(false);
+        expect(isValidPassword('  short  ')).toBe(false);
+    });
+    it('imports a known mnemonic and derives the expected address', async () => {
+        const info = await importWallet({ mnemonic: HARDHAT_MNEMONIC, password: password, storage });
+        expect(info.address).toBe(HARDHAT_ADDRESS);
+        await lockWallet();
+        expect(await hasWallet(storage)).toBe(true);
+        const unlocked = await unlockWallet(password, storage);
+        expect(unlocked.address).toBe(HARDHAT_ADDRESS);
+    });
+    it('rejects a mnemonic that is not BIP39', async () => {
+        const typo = 'test test test test test test test test test test test tset';
+        await expect(importWallet({ mnemonic: typo, password: password, storage })).rejects.toThrow(/invalid-mnemonic/);
+        expect(await hasWallet(storage)).toBe(false);
+        const badChecksum = 'test test test test test test test test test test test test';
+        await expect(importWallet({ mnemonic: badChecksum, password: password, storage })).rejects.toThrow(/invalid-mnemonic/);
+        await expect(importWallet({ mnemonic: HARDHAT_MNEMONIC.split(' ').slice(0, 11).join(' '), password: password, storage })).rejects.toThrow(/invalid-mnemonic/);
+    });
+    it('accepts the phrases it generates and a valid 24-word phrase', async () => {
+        const { mnemonic } = await createWallet({ password: password, storage });
+        expect(await isValidMnemonic(mnemonic)).toBe(true);
+        expect(await isValidMnemonic(`  ${HARDHAT_MNEMONIC.toUpperCase()}  `)).toBe(true);
+        expect(await isValidMnemonic('abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon art')).toBe(true);
+        expect(await isValidMnemonic('not a mnemonic at all')).toBe(false);
+    });
+    it('reports the wallet info without unlocking', async () => {
+        await importWallet({ mnemonic: HARDHAT_MNEMONIC, password: password, storage });
+        await lockWallet();
+        const info = await getWalletInfo(storage);
+        expect(info?.address).toBe(HARDHAT_ADDRESS);
+        expect(isUnlocked()).toBe(false);
+    });
+    it('rejects a wrong password when unlocking', async () => {
+        await importWallet({ mnemonic: HARDHAT_MNEMONIC, password: password, storage });
+        await lockWallet();
+        await expect(unlockWallet('99999999', storage)).rejects.toThrow(/Wrong password/i);
+    });
+    it('signs messages only while unlocked', async () => {
+        await importWallet({ mnemonic: HARDHAT_MNEMONIC, password: password, storage });
+        const signature = await signMessage('hello');
+        expect(signature).toMatch(/^0x[0-9a-f]{130}$/i);
+        expect(await verifyMessage({ address: HARDHAT_ADDRESS, message: 'hello', signature })).toBe(true);
+        await lockWallet();
+        await expect(signMessage('hello')).rejects.toThrow(/locked/i);
+    });
+    it('signs SIWE messages that verify against the wallet address', async () => {
+        await importWallet({ mnemonic: HARDHAT_MNEMONIC, password: password, storage });
+        const message = [
+            'learn.tg:9001 wants you to sign in with your Ethereum account:',
+            HARDHAT_ADDRESS,
+            '',
+            'Sign in to Learn Through Games.',
+            '',
+            'URI: https://learn.tg:9001',
+            'Version: 1',
+            'Chain ID: 11142220',
+            'Nonce: 12345678',
+            'Issued At: 2026-09-15T00:00:00.000Z',
+        ].join('\n');
+        const signature = await signSIWE(message);
+        expect(await verifyMessage({ address: HARDHAT_ADDRESS, message, signature })).toBe(true);
+    });
+    it('switches the declared chain without invalidating the secret', async () => {
+        await importWallet({ mnemonic: HARDHAT_MNEMONIC, password: password, storage });
+        expect((await getWalletInfo(storage))?.chain).toBe('celoSepolia');
+        const info = await setWalletChain('celo', storage);
+        expect(info.chain).toBe('celo');
+        expect((await getWalletInfo(storage))?.chain).toBe('celo');
+        expect(await signMessage('hola')).toMatch(/^0x/);
+        await lockWallet();
+        const unlocked = await unlockWallet(password, storage);
+        expect(unlocked.address).toBe(HARDHAT_ADDRESS);
+        expect(unlocked.chain).toBe('celo');
+    });
+    it('rejects an unsupported chain and a switch with no wallet', async () => {
+        await importWallet({ mnemonic: HARDHAT_MNEMONIC, password: password, storage });
+        await expect(setWalletChain('optimism', storage)).rejects.toThrow(/unsupported chain/i);
+        await expect(setWalletChain('celo', new MemoryStorage())).rejects.toThrow(/no in-app wallet/i);
+    });
+    it('deletes the wallet and locks it', async () => {
+        await importWallet({ mnemonic: HARDHAT_MNEMONIC, password: password, storage });
+        await deleteWallet(storage);
+        expect(await hasWallet(storage)).toBe(false);
+        expect(await getWalletInfo(storage)).toBeNull();
+        expect(isUnlocked()).toBe(false);
+        await expect(unlockWallet(password, storage)).rejects.toThrow(/no in-app wallet/i);
+    });
+});
+//# sourceMappingURL=wallet.test.js.map

package/dist/wallet/wallet.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.test.js","sourceRoot":"","sources":["../../src/wallet/wallet.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAA;AACpC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,SAAS,EACT,YAAY,EACZ,UAAU,EACV,eAAe,EACf,UAAU,EACV,WAAW,EACX,cAAc,EACd,YAAY,GACb,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACjE,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEpC,MAAM,gBAAgB,GAAG,6DAA6D,CAAA;AACtF,MAAM,eAAe,GAAG,4CAA4C,CAAA;AACpE,MAAM,QAAQ,GAAG,UAAU,CAAA;AAE3B,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,IAAI,OAAsB,CAAA;IAE1B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAI,aAAa,EAAE,CAAA;QAC7B,MAAM,UAAU,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QACpF,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;QAC5C,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;QACzD,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAA;QAClC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACnD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtE,wBAAwB,CACzB,CAAA;QACD,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACxE,wBAAwB,CACzB,CAAA;QACD,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACzE,wBAAwB,CACzB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAA;QAClC,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAC9E,QAAQ,EACR,IAAI,CACL,CAAA;QACD,MAAM,MAAM,CAAC,GAAG,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,eAAe;YACxB,KAAK,EAAE,aAAa;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAA;QAEF,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAE5E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAA;QACnC,MAAM,CAAC,QAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAA;QAC7E,MAAM,UAAU,EAAE,CAAA;QAClB,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAA;QACjF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;QACzD,MAAM,UAAU,EAAE,CAAA;QAClB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;QAC7D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9C,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnD,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7C,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC5F,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC1C,MAAM,UAAU,EAAE,CAAA;QAClB,MAAM,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACtD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,IAAI,GAAG,6DAA6D,CAAA;QAC1E,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QAC/G,MAAM,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAE5C,MAAM,WAAW,GAAG,6DAA6D,CAAA;QACjF,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QAEtH,MAAM,MAAM,CACV,YAAY,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAC5G,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QACxE,MAAM,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,MAAM,eAAe,CAAC,KAAK,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjF,MAAM,CAAC,MAAM,eAAe,CAAC,6LAA6L,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvO,MAAM,CAAC,MAAM,eAAe,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,MAAM,UAAU,EAAE,CAAA;QAClB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAA;QACzC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC3C,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,MAAM,UAAU,EAAE,CAAA;QAClB,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QAC5C,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,aAAa,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjG,MAAM,UAAU,EAAE,CAAA;QAClB,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,MAAM,OAAO,GAAG;YACd,gEAAgE;YAChE,eAAe;YACf,EAAE;YACF,iCAAiC;YACjC,EAAE;YACF,4BAA4B;YAC5B,YAAY;YACZ,oBAAoB;YACpB,iBAAiB;YACjB,qCAAqC;SACtC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACZ,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,aAAa,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,MAAM,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAEjE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAClD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC/B,MAAM,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1D,MAAM,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAEhD,MAAM,UAAU,EAAE,CAAA;QAClB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACtD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC9C,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,MAAM,MAAM,CAAC,cAAc,CAAC,UAAmB,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAChG,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAChG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;QAC3B,MAAM,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC/C,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/wallet/web-authn.d.ts

@@ -0,0 +1,78 @@
+/** Overrides the WebAuthn relying-party display name. */
+export declare function setRpName(name: string): void;
+/**
+ * Ventana de gracia de la verificación del usuario (decisión del operador,
+ * 2026-09-20). Una vez que el usuario verificó con el dispositivo (gesto L1 o
+ * desbloqueo L2), un movimiento de fondos **a un destino ya conocido** no vuelve a
+ * pedir el gesto dentro de esta ventana. Es deliberadamente corta: 15 minutos.
+ *
+ * Además, un **destino nuevo siempre exige el gesto** (ver `destinations.ts`),
+ * aunque la ventana esté abierta: eso frena el drenaje automatizado/hostil a una
+ * dirección que el usuario nunca usó.
+ *
+ * Compromiso explícito: en un dispositivo desbloqueado y robado, dentro de la
+ * ventana se puede mover dinero a direcciones ya usadas sin gesto. La clave/PIN
+ * nunca se guarda y los 12 palabras siguen siendo la recuperación.
+ */
+export declare const USER_VERIFICATION_GRACE_MS: number;
+/** Records that the user just verified (called on a successful assertion/PRF). */
+export declare function markUserVerified(now?: number): void;
+/** Forgets the verification (called when the wallet locks or is deleted). */
+export declare function clearUserVerification(): void;
+/** Whether a user verification happened within the grace window. */
+export declare function hasRecentUserVerification(windowMs?: number, now?: number): boolean;
+export interface PlatformSupport {
+    /** `navigator.credentials` with WebAuthn is present at all. */
+    webauthn: boolean;
+    /** The device can verify the user (Face ID, fingerprint, device password). */
+    userVerifying: boolean;
+    /** Whether the engine advertises the `prf` extension (may be unknown). */
+    prf: boolean | null;
+}
+export declare function toArrayBuffer(bytes: Uint8Array): ArrayBuffer;
+/** Reports what the device can do, never throwing. */
+export declare function detectPlatformSupport(): Promise<PlatformSupport>;
+export interface PrfCredential {
+    credentialId: string;
+    /** The authenticator accepted the `prf` extension for this credential. */
+    prfEnabled: boolean;
+}
+/**
+ * Creates a discoverable platform credential with the `prf` extension. The
+ * credential is stored by the password manager / device, exactly like a passkey,
+ * and can be removed by the user from there.
+ */
+export declare function createPrfCredential(userName: string): Promise<PrfCredential>;
+/**
+ * Evaluates the PRF for `salt` and returns its 32-byte secret, asking the user to
+ * verify (Face ID / fingerprint / device password). Returns `null` when the
+ * authenticator does not provide a result instead of throwing.
+ */
+export declare function evaluatePrf(credentialId: string, salt: Uint8Array): Promise<Uint8Array | null>;
+/**
+ * Layer L1: asks the user to verify **with the device** (Face ID / fingerprint /
+ * device password) before a sensitive operation, and returns the assertion. It does not
+ * need the `prf` extension: any user-verified assertion is enough. Throws
+ * `no-webauthn` when there is no platform authenticator and `NotAllowedError` when
+ * the user cancels.
+ */
+export declare function assertUserVerification(credentialId: string, { timeoutMs }?: {
+    timeoutMs?: number;
+}): Promise<void>;
+/** HKDF(PRF secret) → AES-GCM key that wraps the wallet key. */ export declare function deriveWrappingKey(prfSecret: Uint8Array, hkdfSalt: Uint8Array): Promise<CryptoKey>;
+/**
+ * Tells the authenticator that a passkey is gone (R-#246 §14 item 1, adopted from
+ * Rabby: `signalUnknownCredential`). Without it, disabling the biometric unlock or
+ * deleting the wallet left the passkey orphaned in the OS list until the user
+ * removed it by hand.
+ *
+ * Best effort: the API only exists in Chrome 132+ and must never break the caller.
+ */
+export declare function signalUnknownCredential(credentialId: string, rpId?: string): Promise<void>;
+/**
+ * True when a WebAuthn/signing failure means "the user cancelled" (R-#246 §14
+ * item 4). We used to match only `NotAllowedError`, so an abort surfaced as an
+ * unknown error.
+ */
+export declare function isUserCancelledError(error: unknown): boolean;
+//# sourceMappingURL=web-authn.d.ts.map

package/dist/wallet/web-authn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-authn.d.ts","sourceRoot":"","sources":["../../src/wallet/web-authn.ts"],"names":[],"mappings":"AAeA,yDAAyD;AACzD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAE5C;AAID;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,0BAA0B,QAAiB,CAAA;AAIxD,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAmB,GAAG,IAAI,CAE/D;AAED,6EAA6E;AAC7E,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED,oEAAoE;AACpE,wBAAgB,yBAAyB,CACvC,QAAQ,GAAE,MAAmC,EAC7C,GAAG,GAAE,MAAmB,GACvB,OAAO,CAET;AAED,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,QAAQ,EAAE,OAAO,CAAA;IACjB,8EAA8E;IAC9E,aAAa,EAAE,OAAO,CAAA;IACtB,0EAA0E;IAC1E,GAAG,EAAE,OAAO,GAAG,IAAI,CAAA;CACpB;AASD,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CAE5D;AAUD,sDAAsD;AACtD,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,eAAe,CAAC,CAmCtE;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,0EAA0E;IAC1E,UAAU,EAAE,OAAO,CAAA;CACpB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAsClF;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA2BpG;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,EAAE,SAAsB,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,gEAAgE,CAAA,wBAAsB,iBAAiB,CACrG,SAAS,EAAE,UAAU,EACrB,QAAQ,EAAE,UAAU,GACnB,OAAO,CAAC,SAAS,CAAC,CAkBpB;AAQD;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE,MAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAK5D"}

package/dist/wallet/web-authn.js

@@ -0,0 +1,250 @@
+/**
+ * WebAuthn helpers for the in-app wallet (layers L1/L2 of
+ * https://github.com/pasosdeJesus/learn.tg/issues/246).
+ *
+ * Measured on real phones (2026-09-18): `PublicKeyCredential` and the `prf`
+ * extension exist in Chrome/Brave for Android and in Safari (18+), and do **not**
+ * exist in the in-app browsers of Rabby, MetaMask, OneKey and OKX. Every function
+ * here is therefore optional and must degrade silently: nothing may throw just
+ * because the device has no platform authenticator.
+ */
+import { fromBase64, toBase64 } from './crypto.js';
+const TIMEOUT_MS = 120_000;
+/** Relying-party display name (a consumer overrides it with `setRpName`). */
+let rpName = 'Pasos de Jesús';
+/** Overrides the WebAuthn relying-party display name. */
+export function setRpName(name) {
+    if (name)
+        rpName = name;
+}
+/** HKDF info string: separates this use of a PRF secret from any other. */
+const HKDF_INFO = 'learn.tg/pdj-wallet/prf/v1';
+/**
+ * Ventana de gracia de la verificación del usuario (decisión del operador,
+ * 2026-09-20). Una vez que el usuario verificó con el dispositivo (gesto L1 o
+ * desbloqueo L2), un movimiento de fondos **a un destino ya conocido** no vuelve a
+ * pedir el gesto dentro de esta ventana. Es deliberadamente corta: 15 minutos.
+ *
+ * Además, un **destino nuevo siempre exige el gesto** (ver `destinations.ts`),
+ * aunque la ventana esté abierta: eso frena el drenaje automatizado/hostil a una
+ * dirección que el usuario nunca usó.
+ *
+ * Compromiso explícito: en un dispositivo desbloqueado y robado, dentro de la
+ * ventana se puede mover dinero a direcciones ya usadas sin gesto. La clave/PIN
+ * nunca se guarda y los 12 palabras siguen siendo la recuperación.
+ */
+export const USER_VERIFICATION_GRACE_MS = 15 * 60 * 1000;
+let lastUserVerificationAt = 0;
+/** Records that the user just verified (called on a successful assertion/PRF). */
+export function markUserVerified(now = Date.now()) {
+    lastUserVerificationAt = now;
+}
+/** Forgets the verification (called when the wallet locks or is deleted). */
+export function clearUserVerification() {
+    lastUserVerificationAt = 0;
+}
+/** Whether a user verification happened within the grace window. */
+export function hasRecentUserVerification(windowMs = USER_VERIFICATION_GRACE_MS, now = Date.now()) {
+    return lastUserVerificationAt > 0 && now - lastUserVerificationAt < windowMs;
+}
+function credentials() {
+    const c = globalThis.navigator;
+    return c?.credentials ?? null;
+}
+export function toArrayBuffer(bytes) {
+    return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+}
+function randomBytes(length) {
+    const cryptoObj = globalThis.crypto;
+    if (!cryptoObj?.getRandomValues)
+        throw new Error('crypto.getRandomValues is not available');
+    const bytes = new Uint8Array(length);
+    cryptoObj.getRandomValues(bytes);
+    return bytes;
+}
+/** Reports what the device can do, never throwing. */
+export async function detectPlatformSupport() {
+    const hasPublicKey = typeof globalThis.PublicKeyCredential !== 'undefined';
+    const container = credentials();
+    if (!hasPublicKey || !container?.create || !container.get) {
+        return { webauthn: false, userVerifying: false, prf: null };
+    }
+    let userVerifying = false;
+    const ask = PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable;
+    if (typeof ask === 'function') {
+        try {
+            userVerifying = await ask();
+        }
+        catch {
+            userVerifying = false;
+        }
+    }
+    let prf = null;
+    const caps = PublicKeyCredential.getClientCapabilities;
+    if (typeof caps === 'function') {
+        try {
+            const result = await caps();
+            // Chrome 133+ exposes 'extension:prf'; older builds expose 'extension:hmacCreateSecret'.
+            const value = result['extension:prf'] ?? result['extension:hmacCreateSecret'];
+            if (typeof value === 'boolean')
+                prf = value;
+        }
+        catch {
+            prf = null;
+        }
+    }
+    return { webauthn: true, userVerifying, prf };
+}
+/**
+ * Creates a discoverable platform credential with the `prf` extension. The
+ * credential is stored by the password manager / device, exactly like a passkey,
+ * and can be removed by the user from there.
+ */
+export async function createPrfCredential(userName) {
+    const container = credentials();
+    if (!container?.create)
+        throw new Error('WebAuthn is not available on this device');
+    const credential = (await container.create({
+        publicKey: {
+            challenge: toArrayBuffer(randomBytes(32)),
+            rp: { name: rpName },
+            user: {
+                id: toArrayBuffer(randomBytes(16)),
+                name: userName,
+                displayName: userName,
+            },
+            pubKeyCredParams: [
+                { type: 'public-key', alg: -7 },
+                { type: 'public-key', alg: -257 },
+            ],
+            authenticatorSelection: {
+                authenticatorAttachment: 'platform',
+                residentKey: 'required',
+                userVerification: 'required',
+            },
+            timeout: TIMEOUT_MS,
+            attestation: 'none',
+            extensions: { prf: {} },
+        },
+    }));
+    if (!credential)
+        throw new Error('The browser did not return a credential');
+    const results = credential.getClientExtensionResults();
+    return {
+        credentialId: toBase64(new Uint8Array(credential.rawId)),
+        prfEnabled: results?.prf?.enabled === true,
+    };
+}
+/**
+ * Evaluates the PRF for `salt` and returns its 32-byte secret, asking the user to
+ * verify (Face ID / fingerprint / device password). Returns `null` when the
+ * authenticator does not provide a result instead of throwing.
+ */
+export async function evaluatePrf(credentialId, salt) {
+    const container = credentials();
+    if (!container?.get)
+        throw new Error('WebAuthn is not available on this device');
+    const assertion = (await container.get({
+        publicKey: {
+            challenge: toArrayBuffer(randomBytes(32)),
+            allowCredentials: [
+                {
+                    type: 'public-key',
+                    id: toArrayBuffer(fromBase64(credentialId)),
+                    transports: ['internal', 'hybrid'],
+                },
+            ],
+            userVerification: 'required',
+            timeout: TIMEOUT_MS,
+            extensions: { prf: { eval: { first: toArrayBuffer(salt) } } },
+        },
+    }));
+    if (!assertion)
+        return null;
+    markUserVerified();
+    const results = assertion.getClientExtensionResults();
+    const first = results?.prf?.results?.first;
+    return first ? new Uint8Array(first) : null;
+}
+/**
+ * Layer L1: asks the user to verify **with the device** (Face ID / fingerprint /
+ * device password) before a sensitive operation, and returns the assertion. It does not
+ * need the `prf` extension: any user-verified assertion is enough. Throws
+ * `no-webauthn` when there is no platform authenticator and `NotAllowedError` when
+ * the user cancels.
+ */
+export async function assertUserVerification(credentialId, { timeoutMs = TIMEOUT_MS } = {}) {
+    const container = credentials();
+    if (!container?.get)
+        throw new Error('no-webauthn');
+    const assertion = (await container.get({
+        publicKey: {
+            challenge: toArrayBuffer(randomBytes(32)),
+            allowCredentials: [
+                {
+                    type: 'public-key',
+                    id: toArrayBuffer(fromBase64(credentialId)),
+                    transports: ['internal', 'hybrid'],
+                },
+            ],
+            userVerification: 'required',
+            timeout: timeoutMs,
+        },
+    }));
+    if (!assertion)
+        throw new Error('auth-failed');
+    markUserVerified();
+}
+/** HKDF(PRF secret) → AES-GCM key that wraps the wallet key. */ export async function deriveWrappingKey(prfSecret, hkdfSalt) {
+    const subtle = globalThis.crypto?.subtle;
+    if (!subtle)
+        throw new Error('Web Crypto (crypto.subtle) is not available');
+    const material = await subtle.importKey('raw', toArrayBuffer(prfSecret), 'HKDF', false, [
+        'deriveKey',
+    ]);
+    return subtle.deriveKey({
+        name: 'HKDF',
+        hash: 'SHA-256',
+        salt: toArrayBuffer(hkdfSalt),
+        info: toArrayBuffer(new TextEncoder().encode(HKDF_INFO)),
+    }, material, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+}
+/** rpId used by the passkeys of this wallet (the page's host). */
+function relyingPartyId() {
+    const location = globalThis.location;
+    return location?.hostname || 'localhost';
+}
+/**
+ * Tells the authenticator that a passkey is gone (R-#246 §14 item 1, adopted from
+ * Rabby: `signalUnknownCredential`). Without it, disabling the biometric unlock or
+ * deleting the wallet left the passkey orphaned in the OS list until the user
+ * removed it by hand.
+ *
+ * Best effort: the API only exists in Chrome 132+ and must never break the caller.
+ */
+export async function signalUnknownCredential(credentialId, rpId = relyingPartyId()) {
+    if (!credentialId)
+        return;
+    const signal = globalThis.PublicKeyCredential?.signalUnknownCredential;
+    if (typeof signal !== 'function')
+        return;
+    try {
+        await signal({ rpId, credentialId });
+    }
+    catch {
+        // el passkey queda huérfano, como antes de este cambio
+    }
+}
+/**
+ * True when a WebAuthn/signing failure means "the user cancelled" (R-#246 §14
+ * item 4). We used to match only `NotAllowedError`, so an abort surfaced as an
+ * unknown error.
+ */
+export function isUserCancelledError(error) {
+    const name = error?.name?.toLowerCase() ?? '';
+    if (name === 'notallowederror' || name === 'aborterror')
+        return true;
+    const message = error instanceof Error ? error.message : String(error ?? '');
+    return /cancel|abort|notallowed/i.test(message);
+}
+//# sourceMappingURL=web-authn.js.map

package/dist/wallet/web-authn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-authn.js","sourceRoot":"","sources":["../../src/wallet/web-authn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAElD,MAAM,UAAU,GAAG,OAAO,CAAA;AAC1B,6EAA6E;AAC7E,IAAI,MAAM,GAAG,gBAAgB,CAAA;AAC7B,yDAAyD;AACzD,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,IAAI;QAAE,MAAM,GAAG,IAAI,CAAA;AACzB,CAAC;AACD,2EAA2E;AAC3E,MAAM,SAAS,GAAG,4BAA4B,CAAA;AAE9C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAExD,IAAI,sBAAsB,GAAG,CAAC,CAAA;AAE9B,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;IACvD,sBAAsB,GAAG,GAAG,CAAA;AAC9B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB;IACnC,sBAAsB,GAAG,CAAC,CAAA;AAC5B,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,yBAAyB,CACvC,WAAmB,0BAA0B,EAC7C,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,OAAO,sBAAsB,GAAG,CAAC,IAAI,GAAG,GAAG,sBAAsB,GAAG,QAAQ,CAAA;AAC9E,CAAC;AAWD,SAAS,WAAW;IAClB,MAAM,CAAC,GAAI,UAAwC,CAAC,SAEvC,CAAA;IACb,OAAO,CAAC,EAAE,WAAW,IAAI,IAAI,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAgB,CAAA;AACjG,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,SAAS,GAAI,UAAkC,CAAC,MAAM,CAAA;IAC5D,IAAI,CAAC,SAAS,EAAE,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC3F,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IACpC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAChC,OAAO,KAAK,CAAA;AACd,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,YAAY,GAAG,OAAQ,UAAgD,CAAC,mBAAmB,KAAK,WAAW,CAAA;IACjH,MAAM,SAAS,GAAG,WAAW,EAAE,CAAA;IAC/B,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;QAC1D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;IAC7D,CAAC;IAED,IAAI,aAAa,GAAG,KAAK,CAAA;IACzB,MAAM,GAAG,GAAI,mBAEX,CAAC,6CAA6C,CAAA;IAChD,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,GAAG,EAAE,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,GAAG,KAAK,CAAA;QACvB,CAAC;IACH,CAAC;IAED,IAAI,GAAG,GAAmB,IAAI,CAAA;IAC9B,MAAM,IAAI,GAAI,mBAEZ,CAAC,qBAAqB,CAAA;IACxB,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAA;YAC3B,yFAAyF;YACzF,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,4BAA4B,CAAC,CAAA;YAC7E,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,GAAG,GAAG,KAAK,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,IAAI,CAAA;QACZ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,CAAA;AAC/C,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACxD,MAAM,SAAS,GAAG,WAAW,EAAE,CAAA;IAC/B,IAAI,CAAC,SAAS,EAAE,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAEnF,MAAM,UAAU,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC;QACzC,SAAS,EAAE;YACT,SAAS,EAAE,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACzC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACpB,IAAI,EAAE;gBACJ,EAAE,EAAE,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBAClC,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,QAAQ;aACtB;YACD,gBAAgB,EAAE;gBAChB,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBAC/B,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE;aAClC;YACD,sBAAsB,EAAE;gBACtB,uBAAuB,EAAE,UAAU;gBACnC,WAAW,EAAE,UAAU;gBACvB,gBAAgB,EAAE,UAAU;aAC7B;YACD,OAAO,EAAE,UAAU;YACnB,WAAW,EAAE,MAAM;YACnB,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,EAA0C;SAChE;KACF,CAAC,CAA+B,CAAA;IAEjC,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAE3E,MAAM,OAAO,GAAG,UAAU,CAAC,yBAAyB,EAEnD,CAAA;IAED,OAAO;QACL,YAAY,EAAE,QAAQ,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACxD,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI;KAC3C,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,YAAoB,EAAE,IAAgB;IACtE,MAAM,SAAS,GAAG,WAAW,EAAE,CAAA;IAC/B,IAAI,CAAC,SAAS,EAAE,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAEhF,MAAM,SAAS,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC;QACrC,SAAS,EAAE;YACT,SAAS,EAAE,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACzC,gBAAgB,EAAE;gBAChB;oBACE,IAAI,EAAE,YAAY;oBAClB,EAAE,EAAE,aAAa,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;oBAC3C,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;iBACnC;aACF;YACD,gBAAgB,EAAE,UAAU;YAC5B,OAAO,EAAE,UAAU;YACnB,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,EAA0C;SACtG;KACF,CAAC,CAA+B,CAAA;IAEjC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,gBAAgB,EAAE,CAAA;IAClB,MAAM,OAAO,GAAG,SAAS,CAAC,yBAAyB,EAElD,CAAA;IACD,MAAM,KAAK,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAA;IAC1C,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,YAAoB,EACpB,EAAE,SAAS,GAAG,UAAU,KAA6B,EAAE;IAEvD,MAAM,SAAS,GAAG,WAAW,EAAE,CAAA;IAC/B,IAAI,CAAC,SAAS,EAAE,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;IAEnD,MAAM,SAAS,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC;QACrC,SAAS,EAAE;YACT,SAAS,EAAE,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACzC,gBAAgB,EAAE;gBAChB;oBACE,IAAI,EAAE,YAAY;oBAClB,EAAE,EAAE,aAAa,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;oBAC3C,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;iBACnC;aACF;YACD,gBAAgB,EAAE,UAAU;YAC5B,OAAO,EAAE,SAAS;SACnB;KACF,CAAC,CAA+B,CAAA;IAEjC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;IAC9C,gBAAgB,EAAE,CAAA;AACpB,CAAC;AAED,gEAAgE,CAAA,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrG,SAAqB,EACrB,QAAoB;IAEpB,MAAM,MAAM,GAAI,UAAkC,CAAC,MAAM,EAAE,MAAM,CAAA;IACjE,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAC3E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;QACtF,WAAW;KACZ,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,SAAS,CACrB;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC;QAC7B,IAAI,EAAE,aAAa,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAe,CAAC;KACvE,EACD,QAAQ,EACR,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAA;AACH,CAAC;AAED,kEAAkE;AAClE,SAAS,cAAc;IACrB,MAAM,QAAQ,GAAI,UAAmD,CAAC,QAAQ,CAAA;IAC9E,OAAO,QAAQ,EAAE,QAAQ,IAAI,WAAW,CAAA;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,YAAoB,EACpB,OAAe,cAAc,EAAE;IAE/B,IAAI,CAAC,YAAY;QAAE,OAAM;IACzB,MAAM,MAAM,GACV,UAKD,CAAC,mBAAmB,EAAE,uBAAuB,CAAA;IAC9C,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAM;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,IAAI,GAAI,KAA2B,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;IACpE,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAA;IACpE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IAC5E,OAAO,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACjD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pasosdejesus/m",
-  "version": "0.23.1",
+  "version": "0.25.0",
   "description": "Motor para crear y gestionar proyectos al estilo Pasos de Jesus.",
   "author": "",
   "license": "ISC",
@@ -103,6 +103,18 @@
     "./e2e": {
       "import": "./dist/e2e/index.js",
       "types": "./dist/e2e/index.d.ts"
+    },
+    "./wallet": {
+      "import": "./dist/wallet/index.js",
+      "types": "./dist/wallet/index.d.ts"
+    },
+    "./wallet/next": {
+      "import": "./dist/wallet/next/index.js",
+      "types": "./dist/wallet/next/index.d.ts"
+    },
+    "./wallet/storage": {
+      "import": "./dist/wallet/storage/index.js",
+      "types": "./dist/wallet/storage/index.d.ts"
     }
   },
   "bin": {
@@ -118,7 +130,8 @@
     "src/shadcn_components/README.md",
     "src/test-utils/README.md",
     "src/blockchain/README.md",
-    "src/e2e/README.md"
+    "src/e2e/README.md",
+    "src/wallet/README.md"
   ],
   "dependencies": {
     "dotenv": "^17.4.2",
@@ -127,8 +140,8 @@
     "picocolors": "^1.1.1"
   },
   "optionalDependencies": {
-    "@pasosdejesus/edr": "0.1.2",
-    "@pasosdejesus/contract-test": "0.1.4"
+    "@pasosdejesus/contract-test": "0.1.4",
+    "@pasosdejesus/edr": "0.1.2"
   },
   "devDependencies": {
     "@radix-ui/react-accordion": "^1.2.12",
@@ -161,6 +174,7 @@
     "autoprefixer": "^10.5.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
+    "fake-indexeddb": "^6.2.5",
     "jsdom": "^29.1.1",
     "kysely": "^0.28.17",
     "kysely-codegen": "^0.20.0",

package/src/e2e/README.md

@@ -100,6 +100,73 @@ const page = await newPage(browser, address, timeout, true)
 // GoodDollarClaimButton, wallet interactions now work
 ```
 
+### Real-signature wallet (`m/REQ/14`)
+
+```ts
+installRealSigner(page, { privateKey, name?, typedDataName? }): Promise<RealSigner>
+injectEIP6963(page, { address, privateKey?, chainId?, walletName? }): Promise<void>  // real signer + realSigning
+setupFullWalletMock(page, { privateKey, address?, chainId?, rpcUrl?, ... }): Promise<FullWalletMock>
+fullWalletMockCode(opts): string
+```
+
+`injectEIP6963` with `privateKey` makes `personal_sign`/`eth_signTypedData_v4` return real
+EIP-191/EIP-712 signatures; without it, the mock keeps the fake `0xabab…`. `setupFullWalletMock`
+adds real `eth_sendTransaction`: with `rpcUrl` (opt-in) it signs in Node and broadcasts the raw
+transaction, and forwards reads (`eth_call`, `eth_getBalance`, `eth_getTransactionReceipt`, …) to
+that RPC. **It spends real funds**, so point it at a test network.
+
+```js
+// Real signature, fake broadcast (no rpcUrl)
+await setupFullWalletMock(page, { privateKey: process.env.PRIVATE_KEY })
+
+// Real signature + real broadcast against Celo Sepolia (spends funds)
+await setupFullWalletMock(page, { privateKey: process.env.PRIVATE_KEY, rpcUrl: process.env.RPC_URL })
+```
+
+### Local EVM node (`m/REQ/14`)
+
+```ts
+startLocalRpc({ chainId?, accounts? }): Promise<LocalRpc>  // { url, chainId, accounts, close() }
+```
+
+Hermetic E2E: a JSON-RPC node over `@pasosdejesus/edr` (optional dependency, loaded
+dynamically). The wallet signs for real and the node executes and confirms — no external
+network, no funds. Works from viem in Node **and** from a page with `setupFullWalletMock`.
+
+A runnable fixture lives in `packages/m/e2e/` (a minimal donation page + spec):
+
+```sh
+cd packages/m
+pnpm add -D puppeteer-core          # consumer devDependency, not bundled with m
+CHROME_PATH=/usr/local/bin/chromium node e2e/specs/donate.spec.mjs
+```
+
+Lessons that cost time here (see also learn.tg's `doc/e2e-testing.md`):
+
+- **Chrome needs headroom**: this VM already runs `ulimit -d` at 12G; if a cold Chrome
+  crashes, raise it (`/bin/ksh -c 'ulimit -d 7340032; exec …'`).
+- **Avoid `page.click` + `waitForFunction`** for a click handler that awaits the wallet:
+  that pair hit `Runtime.callFunctionOn timed out` (protocolTimeout). Do the click **and**
+  the wait inside one `page.evaluate(async () => { … })` (the spec does exactly that).
+- **Receipt hashes**: the local node re-signs, so `setupFullWalletMock` re-keys the receipt
+  under `keccak256(rawTransaction)` (the hash viem waits for).
+
+### Runner: retry and summary (`m/REQ/49` P3/P4)
+
+```sh
+./bin/m test:e2e --retry 2 --retry-delay 15000   # re-run failed specs (fresh WALLET_INDEX each)
+./bin/m test:e2e:summary /tmp/site.log /tmp/local.log   # compare two runs
+```
+
+- `--retry <N>` (default 0, or `E2E_RETRIES`): after the first pass, each failed spec is re-run
+  on its own up to N times; a spec is green **only by exit code**.
+- `--retry-delay <ms>` (default 15000): pause before each retry round.
+- `E2E_LOG_DIR` (default `/tmp`): the run writes `<dir>/e2e-<timestamp>.log` with one
+  `[e2e-result] <file> <ok|fail|skip>` line per spec per attempt (the machine-readable format).
+- `test:e2e:summary <log…>` reads those lines (or the human format for older logs) and prints a
+  row per spec, one column per log, marking `<-- difiere` when a spec's state changes between
+  runs (environmental vs product failure).
+
 ## Environment Variables
 
 See [doc/e2e.md](../../../../doc/e2e.md) for full reference.