@shadow-corp/nearconnect 1.0.0

package/build/helpers/storage.js

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EncryptedStorage = exports.IndexedDBStorage = exports.MemoryStorage = exports.SessionStorage = exports.LocalStorage = void 0;
+/**
+ * localStorage adapter - persists across browser sessions
+ */
+class LocalStorage {
+    async get(key) {
+        if (typeof window === "undefined")
+            return null;
+        return localStorage.getItem(key);
+    }
+    async set(key, value) {
+        if (typeof window === "undefined")
+            return;
+        localStorage.setItem(key, value);
+    }
+    async remove(key) {
+        if (typeof window === "undefined")
+            return;
+        localStorage.removeItem(key);
+    }
+}
+exports.LocalStorage = LocalStorage;
+/**
+ * sessionStorage adapter - cleared when browser tab closes
+ */
+class SessionStorage {
+    async get(key) {
+        if (typeof window === "undefined")
+            return null;
+        return sessionStorage.getItem(key);
+    }
+    async set(key, value) {
+        if (typeof window === "undefined")
+            return;
+        sessionStorage.setItem(key, value);
+    }
+    async remove(key) {
+        if (typeof window === "undefined")
+            return;
+        sessionStorage.removeItem(key);
+    }
+}
+exports.SessionStorage = SessionStorage;
+/**
+ * Memory-only adapter - no persistence, lost on page refresh
+ */
+class MemoryStorage {
+    data = new Map();
+    async get(key) {
+        return this.data.get(key) ?? null;
+    }
+    async set(key, value) {
+        this.data.set(key, value);
+    }
+    async remove(key) {
+        this.data.delete(key);
+    }
+    clear() {
+        this.data.clear();
+    }
+}
+exports.MemoryStorage = MemoryStorage;
+/**
+ * IndexedDB adapter - for larger data, survives browser sessions
+ */
+class IndexedDBStorage {
+    dbName;
+    storeName;
+    dbPromise = null;
+    constructor(dbName = "near-connect", storeName = "storage") {
+        this.dbName = dbName;
+        this.storeName = storeName;
+    }
+    async getDB() {
+        if (typeof indexedDB === "undefined") {
+            throw new Error("IndexedDB not available");
+        }
+        if (this.dbPromise)
+            return this.dbPromise;
+        this.dbPromise = new Promise((resolve, reject) => {
+            const request = indexedDB.open(this.dbName, 1);
+            request.onerror = () => reject(request.error);
+            request.onsuccess = () => resolve(request.result);
+            request.onupgradeneeded = () => {
+                const db = request.result;
+                if (!db.objectStoreNames.contains(this.storeName)) {
+                    db.createObjectStore(this.storeName);
+                }
+            };
+        });
+        return this.dbPromise;
+    }
+    async get(key) {
+        try {
+            const db = await this.getDB();
+            return new Promise((resolve, reject) => {
+                const tx = db.transaction(this.storeName, "readonly");
+                const store = tx.objectStore(this.storeName);
+                const request = store.get(key);
+                request.onerror = () => reject(request.error);
+                request.onsuccess = () => resolve(request.result ?? null);
+            });
+        }
+        catch {
+            return null;
+        }
+    }
+    async set(key, value) {
+        const db = await this.getDB();
+        return new Promise((resolve, reject) => {
+            const tx = db.transaction(this.storeName, "readwrite");
+            const store = tx.objectStore(this.storeName);
+            const request = store.put(value, key);
+            request.onerror = () => reject(request.error);
+            request.onsuccess = () => resolve();
+        });
+    }
+    async remove(key) {
+        const db = await this.getDB();
+        return new Promise((resolve, reject) => {
+            const tx = db.transaction(this.storeName, "readwrite");
+            const store = tx.objectStore(this.storeName);
+            const request = store.delete(key);
+            request.onerror = () => reject(request.error);
+            request.onsuccess = () => resolve();
+        });
+    }
+}
+exports.IndexedDBStorage = IndexedDBStorage;
+/**
+ * Encrypted storage wrapper - encrypts data before storing
+ * Uses AES-GCM with a derived key from password
+ */
+class EncryptedStorage {
+    storage;
+    keyPromise = null;
+    password;
+    constructor(storage, password) {
+        this.storage = storage;
+        this.password = password;
+    }
+    async getKey() {
+        if (this.keyPromise)
+            return this.keyPromise;
+        this.keyPromise = (async () => {
+            const encoder = new TextEncoder();
+            const keyMaterial = await crypto.subtle.importKey("raw", encoder.encode(this.password), "PBKDF2", false, ["deriveKey"]);
+            return crypto.subtle.deriveKey({
+                name: "PBKDF2",
+                salt: encoder.encode("near-connect-salt"),
+                iterations: 100000,
+                hash: "SHA-256",
+            }, keyMaterial, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+        })();
+        return this.keyPromise;
+    }
+    async get(key) {
+        const encrypted = await this.storage.get(key);
+        if (!encrypted)
+            return null;
+        try {
+            const cryptoKey = await this.getKey();
+            const data = JSON.parse(encrypted);
+            const iv = Uint8Array.from(atob(data.iv), (c) => c.charCodeAt(0));
+            const encryptedData = Uint8Array.from(atob(data.data), (c) => c.charCodeAt(0));
+            const decrypted = await crypto.subtle.decrypt({ name: "AES-GCM", iv }, cryptoKey, encryptedData);
+            return new TextDecoder().decode(decrypted);
+        }
+        catch {
+            return null;
+        }
+    }
+    async set(key, value) {
+        const cryptoKey = await this.getKey();
+        const iv = crypto.getRandomValues(new Uint8Array(12));
+        const encrypted = await crypto.subtle.encrypt({ name: "AES-GCM", iv }, cryptoKey, new TextEncoder().encode(value));
+        const data = {
+            iv: btoa(String.fromCharCode(...iv)),
+            data: btoa(String.fromCharCode(...new Uint8Array(encrypted))),
+        };
+        await this.storage.set(key, JSON.stringify(data));
+    }
+    async remove(key) {
+        await this.storage.remove(key);
+    }
+}
+exports.EncryptedStorage = EncryptedStorage;
+//# sourceMappingURL=storage.js.map

package/build/helpers/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/helpers/storage.ts"],"names":[],"mappings":";;;AAMA;;GAEG;AACH,MAAa,YAAY;IACvB,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO;QAC1C,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO;QAC1C,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;CACF;AAfD,oCAeC;AAED;;GAEG;AACH,MAAa,cAAc;IACzB,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO;QAC1C,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO;QAC1C,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;CACF;AAfD,wCAeC;AAED;;GAEG;AACH,MAAa,aAAa;IAChB,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEzC,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;CACF;AAlBD,sCAkBC;AAED;;GAEG;AACH,MAAa,gBAAgB;IACnB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,SAAS,GAAgC,IAAI,CAAC;IAEtD,YAAY,MAAM,GAAG,cAAc,EAAE,SAAS,GAAG,SAAS;QACxD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,OAAO,SAAS,KAAK,WAAW,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAE1C,IAAI,CAAC,SAAS,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAE/C,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9C,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAElD,OAAO,CAAC,eAAe,GAAG,GAAG,EAAE;gBAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC1B,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAClD,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAE/B,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC9C,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAEtC,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9C,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAElC,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9C,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAzED,4CAyEC;AAED;;;GAGG;AACH,MAAa,gBAAgB;IACnB,OAAO,CAAc;IACrB,UAAU,GAA8B,IAAI,CAAC;IAC7C,QAAQ,CAAS;IAEzB,YAAY,OAAoB,EAAE,QAAgB;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAE5C,IAAI,CAAC,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/C,KAAK,EACL,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC7B,QAAQ,EACR,KAAK,EACL,CAAC,WAAW,CAAC,CACd,CAAC;YAEF,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;gBACzC,UAAU,EAAE,MAAM;gBAClB,IAAI,EAAE,SAAS;aAChB,EACD,WAAW,EACX,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAiC,CAAC;YAEnE,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAE/E,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EACvB,SAAS,EACT,aAAa,CACd,CAAC;YAEF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAEtD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EACvB,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAChC,CAAC;QAEF,MAAM,IAAI,GAAG;YACX,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;SAC9D,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;CACF;AApFD,4CAoFC"}

package/build/helpers/trust.d.ts

@@ -0,0 +1,157 @@
+import { WalletManifest } from "../types";
+/**
+ * Trust score components
+ */
+export interface TrustScoreComponents {
+    /** Source trust (from manifest source) */
+    sourceScore: number;
+    /** Verification status (audits, certifications) */
+    verificationScore: number;
+    /** Age/maturity of the wallet */
+    maturityScore: number;
+    /** Usage/popularity metrics */
+    popularityScore: number;
+    /** Security features enabled */
+    securityScore: number;
+    /** Transparency (open source, etc.) */
+    transparencyScore: number;
+}
+/**
+ * Trust score result
+ */
+export interface TrustScore {
+    /** Overall score 0-100 */
+    score: number;
+    /** Risk level */
+    level: TrustLevel;
+    /** Individual component scores */
+    components: TrustScoreComponents;
+    /** Warnings and recommendations */
+    warnings: TrustWarning[];
+    /** Positive trust signals */
+    signals: TrustSignal[];
+}
+/**
+ * Trust level categories
+ */
+export type TrustLevel = "high" | "medium" | "low" | "unknown";
+/**
+ * Trust warning
+ */
+export interface TrustWarning {
+    type: TrustWarningType;
+    message: string;
+    severity: "info" | "warning" | "critical";
+}
+/**
+ * Warning types
+ */
+export type TrustWarningType = "untrusted_source" | "new_wallet" | "unverified" | "excessive_permissions" | "no_audit" | "closed_source" | "sandbox_risks" | "debug_wallet" | "unknown_developer";
+/**
+ * Positive trust signal
+ */
+export interface TrustSignal {
+    type: TrustSignalType;
+    message: string;
+}
+/**
+ * Signal types
+ */
+export type TrustSignalType = "verified" | "audited" | "open_source" | "trusted_source" | "established" | "popular" | "hardware_backed" | "multi_sig";
+/**
+ * Known trusted wallet IDs and their metadata
+ */
+declare const KNOWN_WALLETS: Record<string, {
+    trusted: boolean;
+    audited?: boolean;
+    openSource?: boolean;
+    established?: boolean;
+    developer?: string;
+}>;
+/**
+ * Trust score configuration
+ */
+export interface TrustScorerOptions {
+    /** Weight for source trust (default: 0.25) */
+    sourceWeight?: number;
+    /** Weight for verification (default: 0.20) */
+    verificationWeight?: number;
+    /** Weight for maturity (default: 0.15) */
+    maturityWeight?: number;
+    /** Weight for popularity (default: 0.15) */
+    popularityWeight?: number;
+    /** Weight for security (default: 0.15) */
+    securityWeight?: number;
+    /** Weight for transparency (default: 0.10) */
+    transparencyWeight?: number;
+    /** Minimum score to be considered "trusted" */
+    trustedThreshold?: number;
+    /** Custom known wallets to add/override */
+    knownWallets?: Record<string, typeof KNOWN_WALLETS[string]>;
+}
+/**
+ * Trust scorer for wallet manifests
+ */
+export declare class TrustScorer {
+    private weights;
+    private trustedThreshold;
+    private knownWallets;
+    constructor(options?: TrustScorerOptions);
+    /**
+     * Calculate trust score for a wallet
+     */
+    score(wallet: WalletManifest, context?: {
+        fromTrustedSource?: boolean;
+        usageCount?: number;
+        firstSeenAt?: number;
+    }): TrustScore;
+    /**
+     * Score source trustworthiness
+     */
+    private scoreSource;
+    /**
+     * Score verification status
+     */
+    private scoreVerification;
+    /**
+     * Score wallet maturity
+     */
+    private scoreMaturity;
+    /**
+     * Score popularity/usage
+     */
+    private scorePopularity;
+    /**
+     * Score security features
+     */
+    private scoreSecurity;
+    /**
+     * Score transparency
+     */
+    private scoreTransparency;
+    /**
+     * Check for risky permission combinations
+     */
+    private checkRiskyPermissions;
+    /**
+     * Get trust level from score
+     */
+    private getLevel;
+    /**
+     * Check if a wallet meets the trusted threshold
+     */
+    isTrusted(wallet: WalletManifest, context?: Parameters<TrustScorer["score"]>[1]): boolean;
+    /**
+     * Get trust badge info for display
+     */
+    getBadge(score: TrustScore): {
+        label: string;
+        color: string;
+        icon: string;
+    };
+}
+/**
+ * Create a quick trust check
+ */
+export declare function quickTrustCheck(wallet: WalletManifest): TrustLevel;
+export {};

package/build/helpers/trust.js

@@ -0,0 +1,340 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TrustScorer = void 0;
+exports.quickTrustCheck = quickTrustCheck;
+/**
+ * Known trusted wallet IDs and their metadata
+ */
+const KNOWN_WALLETS = {
+    "hot-wallet": { trusted: true, audited: true, openSource: true, established: true, developer: "HOT DAO" },
+    "meteor-wallet": { trusted: true, audited: true, openSource: true, established: true, developer: "Meteor" },
+    "mynearwallet": { trusted: true, audited: true, openSource: true, established: true, developer: "MyNearWallet" },
+    "here-wallet": { trusted: true, audited: true, openSource: false, established: true, developer: "HERE" },
+    "sender-wallet": { trusted: true, audited: true, openSource: true, established: true, developer: "Sender" },
+    "near-mobile": { trusted: true, audited: true, openSource: false, established: true, developer: "NEAR Foundation" },
+    "neth": { trusted: true, audited: true, openSource: true, established: true, developer: "NETH" },
+    "bitte-wallet": { trusted: true, audited: true, openSource: false, established: false, developer: "Bitte" },
+    "ledger": { trusted: true, audited: true, openSource: false, established: true, developer: "Ledger" },
+    "wallet-connect": { trusted: true, audited: true, openSource: true, established: true, developer: "WalletConnect" },
+};
+/**
+ * Risky permission combinations
+ */
+const RISKY_PERMISSIONS = [
+    { permissions: ["storage", "cookies", "indexeddb"], risk: "high", message: "Can access all local storage data" },
+    { permissions: ["fetch", "storage"], risk: "medium", message: "Can exfiltrate stored data" },
+];
+/**
+ * Trust scorer for wallet manifests
+ */
+class TrustScorer {
+    weights;
+    trustedThreshold;
+    knownWallets;
+    constructor(options = {}) {
+        this.weights = {
+            sourceWeight: options.sourceWeight ?? 0.25,
+            verificationWeight: options.verificationWeight ?? 0.20,
+            maturityWeight: options.maturityWeight ?? 0.15,
+            popularityWeight: options.popularityWeight ?? 0.15,
+            securityWeight: options.securityWeight ?? 0.15,
+            transparencyWeight: options.transparencyWeight ?? 0.10,
+        };
+        this.trustedThreshold = options.trustedThreshold ?? 70;
+        this.knownWallets = { ...KNOWN_WALLETS, ...options.knownWallets };
+    }
+    /**
+     * Calculate trust score for a wallet
+     */
+    score(wallet, context = {}) {
+        const warnings = [];
+        const signals = [];
+        // Get known wallet data
+        const known = this.knownWallets[wallet.id];
+        // Calculate component scores
+        const components = {
+            sourceScore: this.scoreSource(wallet, context.fromTrustedSource, known, warnings, signals),
+            verificationScore: this.scoreVerification(wallet, known, warnings, signals),
+            maturityScore: this.scoreMaturity(wallet, context.firstSeenAt, known, warnings, signals),
+            popularityScore: this.scorePopularity(wallet, context.usageCount, known, signals),
+            securityScore: this.scoreSecurity(wallet, warnings, signals),
+            transparencyScore: this.scoreTransparency(wallet, known, warnings, signals),
+        };
+        // Check for debug wallet
+        if (wallet.debug) {
+            warnings.push({
+                type: "debug_wallet",
+                message: "This is a debug/development wallet - use with caution",
+                severity: "warning",
+            });
+            // Reduce all scores for debug wallets
+            Object.keys(components).forEach((key) => {
+                components[key] *= 0.5;
+            });
+        }
+        // Check for risky permission combinations
+        this.checkRiskyPermissions(wallet, warnings);
+        // Calculate weighted score
+        const score = Math.round(components.sourceScore * this.weights.sourceWeight +
+            components.verificationScore * this.weights.verificationWeight +
+            components.maturityScore * this.weights.maturityWeight +
+            components.popularityScore * this.weights.popularityWeight +
+            components.securityScore * this.weights.securityWeight +
+            components.transparencyScore * this.weights.transparencyWeight);
+        // Determine trust level
+        const level = this.getLevel(score);
+        return { score, level, components, warnings, signals };
+    }
+    /**
+     * Score source trustworthiness
+     */
+    scoreSource(wallet, fromTrustedSource, known, warnings, signals) {
+        let score = 50; // Base score
+        if (fromTrustedSource) {
+            score += 30;
+            signals.push({ type: "trusted_source", message: "From verified manifest source" });
+        }
+        else {
+            warnings.push({
+                type: "untrusted_source",
+                message: "Wallet is from an unverified source",
+                severity: "warning",
+            });
+        }
+        if (known?.trusted) {
+            score += 20;
+        }
+        return Math.min(100, Math.max(0, score));
+    }
+    /**
+     * Score verification status
+     */
+    scoreVerification(wallet, known, warnings, signals) {
+        let score = 30; // Base score
+        if (known?.audited) {
+            score += 40;
+            signals.push({ type: "audited", message: "Security audited" });
+        }
+        else {
+            warnings.push({
+                type: "no_audit",
+                message: "No known security audit",
+                severity: "info",
+            });
+        }
+        if (known?.trusted) {
+            score += 30;
+            signals.push({ type: "verified", message: "Verified wallet provider" });
+        }
+        else {
+            warnings.push({
+                type: "unverified",
+                message: "Wallet provider not verified",
+                severity: "info",
+            });
+        }
+        return Math.min(100, Math.max(0, score));
+    }
+    /**
+     * Score wallet maturity
+     */
+    scoreMaturity(wallet, firstSeenAt, known, warnings, signals) {
+        let score = 40; // Base score
+        if (known?.established) {
+            score += 40;
+            signals.push({ type: "established", message: "Established wallet with track record" });
+        }
+        else if (firstSeenAt) {
+            const ageMonths = (Date.now() - firstSeenAt) / (30 * 24 * 60 * 60 * 1000);
+            if (ageMonths > 12) {
+                score += 30;
+            }
+            else if (ageMonths > 6) {
+                score += 20;
+            }
+            else if (ageMonths > 1) {
+                score += 10;
+            }
+            else {
+                warnings.push({
+                    type: "new_wallet",
+                    message: "This is a recently added wallet",
+                    severity: "info",
+                });
+            }
+        }
+        // Version can indicate maturity
+        const version = wallet.version?.split(".") ?? [];
+        if (version.length >= 2) {
+            const major = parseInt(version[0], 10);
+            if (major >= 2)
+                score += 10;
+            else if (major >= 1)
+                score += 5;
+        }
+        return Math.min(100, Math.max(0, score));
+    }
+    /**
+     * Score popularity/usage
+     */
+    scorePopularity(wallet, usageCount, known, signals) {
+        let score = 40; // Base score
+        if (known?.established) {
+            score += 30;
+        }
+        if (usageCount !== undefined) {
+            if (usageCount > 10000) {
+                score += 30;
+                signals.push({ type: "popular", message: "Widely used wallet" });
+            }
+            else if (usageCount > 1000) {
+                score += 20;
+            }
+            else if (usageCount > 100) {
+                score += 10;
+            }
+        }
+        return Math.min(100, Math.max(0, score));
+    }
+    /**
+     * Score security features
+     */
+    scoreSecurity(wallet, warnings, signals) {
+        let score = 50; // Base score
+        // Sandbox type is generally safer
+        if (wallet.type === "sandbox") {
+            score += 20;
+        }
+        else if (wallet.type === "privileged") {
+            score += 30; // Hardware wallets
+            signals.push({ type: "hardware_backed", message: "Hardware wallet security" });
+        }
+        else if (wallet.type === "injected") {
+            // Injected can be risky
+            warnings.push({
+                type: "sandbox_risks",
+                message: "Browser extension has broader access",
+                severity: "info",
+            });
+        }
+        // Check permissions
+        const permissions = wallet.permissions ?? {};
+        const permCount = Object.keys(permissions).filter((k) => permissions[k]).length;
+        if (permCount <= 2) {
+            score += 20; // Minimal permissions is good
+        }
+        else if (permCount <= 4) {
+            score += 10;
+        }
+        else {
+            score -= 10;
+            warnings.push({
+                type: "excessive_permissions",
+                message: `Wallet requests ${permCount} permissions`,
+                severity: "warning",
+            });
+        }
+        // Multi-sig support (check for extended features)
+        const extendedFeatures = wallet.features;
+        if (extendedFeatures?.multiSig) {
+            score += 10;
+            signals.push({ type: "multi_sig", message: "Supports multi-signature" });
+        }
+        return Math.min(100, Math.max(0, score));
+    }
+    /**
+     * Score transparency
+     */
+    scoreTransparency(wallet, known, warnings, signals) {
+        let score = 50; // Base score
+        if (known?.openSource) {
+            score += 30;
+            signals.push({ type: "open_source", message: "Open source wallet" });
+        }
+        else {
+            warnings.push({
+                type: "closed_source",
+                message: "Wallet source code is not publicly available",
+                severity: "info",
+            });
+        }
+        if (known?.developer) {
+            score += 20;
+        }
+        else {
+            warnings.push({
+                type: "unknown_developer",
+                message: "Unknown wallet developer",
+                severity: "info",
+            });
+        }
+        // Website and description indicate transparency
+        if (wallet.website)
+            score += 5;
+        if (wallet.description)
+            score += 5;
+        return Math.min(100, Math.max(0, score));
+    }
+    /**
+     * Check for risky permission combinations
+     */
+    checkRiskyPermissions(wallet, warnings) {
+        if (!wallet.permissions)
+            return;
+        const enabledPerms = Object.entries(wallet.permissions)
+            .filter(([, enabled]) => enabled)
+            .map(([perm]) => perm);
+        for (const risky of RISKY_PERMISSIONS) {
+            if (risky.permissions.every((p) => enabledPerms.includes(p))) {
+                warnings.push({
+                    type: "excessive_permissions",
+                    message: risky.message,
+                    severity: risky.risk === "high" ? "critical" : "warning",
+                });
+            }
+        }
+    }
+    /**
+     * Get trust level from score
+     */
+    getLevel(score) {
+        if (score >= this.trustedThreshold)
+            return "high";
+        if (score >= 50)
+            return "medium";
+        if (score >= 25)
+            return "low";
+        return "unknown";
+    }
+    /**
+     * Check if a wallet meets the trusted threshold
+     */
+    isTrusted(wallet, context) {
+        const result = this.score(wallet, context);
+        return result.level === "high";
+    }
+    /**
+     * Get trust badge info for display
+     */
+    getBadge(score) {
+        switch (score.level) {
+            case "high":
+                return { label: "Verified", color: "#22c55e", icon: "shield-check" };
+            case "medium":
+                return { label: "Known", color: "#f59e0b", icon: "shield" };
+            case "low":
+                return { label: "Unverified", color: "#ef4444", icon: "shield-alert" };
+            default:
+                return { label: "Unknown", color: "#6b7280", icon: "shield-question" };
+        }
+    }
+}
+exports.TrustScorer = TrustScorer;
+/**
+ * Create a quick trust check
+ */
+function quickTrustCheck(wallet) {
+    const scorer = new TrustScorer();
+    return scorer.score(wallet).level;
+}
+//# sourceMappingURL=trust.js.map