@unicitylabs/sphere-sdk 0.3.2 → 0.3.4

package/dist/index.d.cts

@@ -3443,7 +3443,7 @@ declare const TEST_AGGREGATOR_URL: "https://goggregator-test.unicity.network";
 /** Default aggregator request timeout (ms) */
 declare const DEFAULT_AGGREGATOR_TIMEOUT = 30000;
 /** Default IPFS gateways */
-declare const DEFAULT_IPFS_GATEWAYS: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+declare const DEFAULT_IPFS_GATEWAYS: readonly ["https://unicity-ipfs1.dyndns.org"];
 /** Unicity IPFS bootstrap peers */
 declare const DEFAULT_IPFS_BOOTSTRAP_PEERS: readonly ["/dns4/unicity-ipfs2.dyndns.org/tcp/4001/p2p/12D3KooWLNi5NDPPHbrfJakAQqwBqymYTTwMQXQKEWuCrJNDdmfh", "/dns4/unicity-ipfs3.dyndns.org/tcp/4001/p2p/12D3KooWQ4aujVE4ShLjdusNZBdffq3TbzrwT2DuWZY9H1Gxhwn6", "/dns4/unicity-ipfs4.dyndns.org/tcp/4001/p2p/12D3KooWJ1ByPfUzUrpYvgxKU8NZrR8i6PU1tUgMEbQX9Hh2DEn1", "/dns4/unicity-ipfs5.dyndns.org/tcp/4001/p2p/12D3KooWB1MdZZGHN5B8TvWXntbycfe7Cjcz7n6eZ9eykZadvmDv"];
 /** Default BIP32 derivation path (full path with chain/index) */
@@ -3469,7 +3469,7 @@ declare const NETWORKS: {
         readonly name: "Mainnet";
         readonly aggregatorUrl: "https://aggregator.unicity.network/rpc";
         readonly nostrRelays: readonly ["wss://relay.unicity.network", "wss://relay.damus.io", "wss://nos.lol", "wss://relay.nostr.band"];
-        readonly ipfsGateways: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+        readonly ipfsGateways: readonly ["https://unicity-ipfs1.dyndns.org"];
         readonly electrumUrl: "wss://fulcrum.alpha.unicity.network:50004";
         readonly groupRelays: readonly ["wss://sphere-relay.unicity.network"];
     };
@@ -3477,7 +3477,7 @@ declare const NETWORKS: {
         readonly name: "Testnet";
         readonly aggregatorUrl: "https://goggregator-test.unicity.network";
         readonly nostrRelays: readonly ["wss://nostr-relay.testnet.unicity.network"];
-        readonly ipfsGateways: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+        readonly ipfsGateways: readonly ["https://unicity-ipfs1.dyndns.org"];
         readonly electrumUrl: "wss://fulcrum.alpha.testnet.unicity.network:50004";
         readonly groupRelays: readonly ["wss://sphere-relay.unicity.network"];
     };
@@ -3485,7 +3485,7 @@ declare const NETWORKS: {
         readonly name: "Development";
         readonly aggregatorUrl: "https://dev-aggregator.dyndns.org/rpc";
         readonly nostrRelays: readonly ["wss://nostr-relay.testnet.unicity.network"];
-        readonly ipfsGateways: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+        readonly ipfsGateways: readonly ["https://unicity-ipfs1.dyndns.org"];
         readonly electrumUrl: "wss://fulcrum.alpha.testnet.unicity.network:50004";
         readonly groupRelays: readonly ["wss://sphere-relay.unicity.network"];
     };
@@ -3667,6 +3667,8 @@ interface SphereCreateOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Options for loading existing wallet */
 interface SphereLoadOptions {
@@ -3690,6 +3692,8 @@ interface SphereLoadOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to decrypt the wallet. Must match the password used during creation. */
+    password?: string;
 }
 /** Options for importing a wallet */
 interface SphereImportOptions {
@@ -3721,6 +3725,8 @@ interface SphereImportOptions {
     price?: PriceProvider;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic/key is stored as plaintext. */
+    password?: string;
 }
 /** L1 (ALPHA blockchain) configuration */
 interface L1Config {
@@ -3766,6 +3772,8 @@ interface SphereInitOptions {
      * - Omit/undefined: No groupchat module
      */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt/decrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Result of init operation */
 interface SphereInitResult {
@@ -3782,6 +3790,7 @@ declare class Sphere {
     private _identity;
     private _masterKey;
     private _mnemonic;
+    private _password;
     private _source;
     private _derivationMode;
     private _basePath;

package/dist/index.d.ts

@@ -3443,7 +3443,7 @@ declare const TEST_AGGREGATOR_URL: "https://goggregator-test.unicity.network";
 /** Default aggregator request timeout (ms) */
 declare const DEFAULT_AGGREGATOR_TIMEOUT = 30000;
 /** Default IPFS gateways */
-declare const DEFAULT_IPFS_GATEWAYS: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+declare const DEFAULT_IPFS_GATEWAYS: readonly ["https://unicity-ipfs1.dyndns.org"];
 /** Unicity IPFS bootstrap peers */
 declare const DEFAULT_IPFS_BOOTSTRAP_PEERS: readonly ["/dns4/unicity-ipfs2.dyndns.org/tcp/4001/p2p/12D3KooWLNi5NDPPHbrfJakAQqwBqymYTTwMQXQKEWuCrJNDdmfh", "/dns4/unicity-ipfs3.dyndns.org/tcp/4001/p2p/12D3KooWQ4aujVE4ShLjdusNZBdffq3TbzrwT2DuWZY9H1Gxhwn6", "/dns4/unicity-ipfs4.dyndns.org/tcp/4001/p2p/12D3KooWJ1ByPfUzUrpYvgxKU8NZrR8i6PU1tUgMEbQX9Hh2DEn1", "/dns4/unicity-ipfs5.dyndns.org/tcp/4001/p2p/12D3KooWB1MdZZGHN5B8TvWXntbycfe7Cjcz7n6eZ9eykZadvmDv"];
 /** Default BIP32 derivation path (full path with chain/index) */
@@ -3469,7 +3469,7 @@ declare const NETWORKS: {
         readonly name: "Mainnet";
         readonly aggregatorUrl: "https://aggregator.unicity.network/rpc";
         readonly nostrRelays: readonly ["wss://relay.unicity.network", "wss://relay.damus.io", "wss://nos.lol", "wss://relay.nostr.band"];
-        readonly ipfsGateways: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+        readonly ipfsGateways: readonly ["https://unicity-ipfs1.dyndns.org"];
         readonly electrumUrl: "wss://fulcrum.alpha.unicity.network:50004";
         readonly groupRelays: readonly ["wss://sphere-relay.unicity.network"];
     };
@@ -3477,7 +3477,7 @@ declare const NETWORKS: {
         readonly name: "Testnet";
         readonly aggregatorUrl: "https://goggregator-test.unicity.network";
         readonly nostrRelays: readonly ["wss://nostr-relay.testnet.unicity.network"];
-        readonly ipfsGateways: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+        readonly ipfsGateways: readonly ["https://unicity-ipfs1.dyndns.org"];
         readonly electrumUrl: "wss://fulcrum.alpha.testnet.unicity.network:50004";
         readonly groupRelays: readonly ["wss://sphere-relay.unicity.network"];
     };
@@ -3485,7 +3485,7 @@ declare const NETWORKS: {
         readonly name: "Development";
         readonly aggregatorUrl: "https://dev-aggregator.dyndns.org/rpc";
         readonly nostrRelays: readonly ["wss://nostr-relay.testnet.unicity.network"];
-        readonly ipfsGateways: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+        readonly ipfsGateways: readonly ["https://unicity-ipfs1.dyndns.org"];
         readonly electrumUrl: "wss://fulcrum.alpha.testnet.unicity.network:50004";
         readonly groupRelays: readonly ["wss://sphere-relay.unicity.network"];
     };
@@ -3667,6 +3667,8 @@ interface SphereCreateOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Options for loading existing wallet */
 interface SphereLoadOptions {
@@ -3690,6 +3692,8 @@ interface SphereLoadOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to decrypt the wallet. Must match the password used during creation. */
+    password?: string;
 }
 /** Options for importing a wallet */
 interface SphereImportOptions {
@@ -3721,6 +3725,8 @@ interface SphereImportOptions {
     price?: PriceProvider;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic/key is stored as plaintext. */
+    password?: string;
 }
 /** L1 (ALPHA blockchain) configuration */
 interface L1Config {
@@ -3766,6 +3772,8 @@ interface SphereInitOptions {
      * - Omit/undefined: No groupchat module
      */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt/decrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Result of init operation */
 interface SphereInitResult {
@@ -3782,6 +3790,7 @@ declare class Sphere {
     private _identity;
     private _masterKey;
     private _mnemonic;
+    private _password;
     private _source;
     private _derivationMode;
     private _basePath;

package/dist/index.js

@@ -2580,9 +2580,7 @@ var DEV_AGGREGATOR_URL = "https://dev-aggregator.dyndns.org/rpc";
 var TEST_AGGREGATOR_URL = "https://goggregator-test.unicity.network";
 var DEFAULT_AGGREGATOR_TIMEOUT = 3e4;
 var DEFAULT_IPFS_GATEWAYS = [
-  "https://ipfs.unicity.network",
-  "https://dweb.link",
-  "https://ipfs.io"
+  "https://unicity-ipfs1.dyndns.org"
 ];
 var DEFAULT_IPFS_BOOTSTRAP_PEERS = [
   "/dns4/unicity-ipfs2.dyndns.org/tcp/4001/p2p/12D3KooWLNi5NDPPHbrfJakAQqwBqymYTTwMQXQKEWuCrJNDdmfh",
@@ -9921,6 +9919,7 @@ var Sphere = class _Sphere {
   _identity = null;
   _masterKey = null;
   _mnemonic = null;
+  _password = null;
   _source = "unknown";
   _derivationMode = "bip32";
   _basePath = DEFAULT_BASE_PATH;
@@ -10020,7 +10019,8 @@ var Sphere = class _Sphere {
         tokenStorage: options.tokenStorage,
         l1: options.l1,
         price: options.price,
-        groupChat
+        groupChat,
+        password: options.password
       });
       return { sphere: sphere2, created: false };
     }
@@ -10046,7 +10046,8 @@ var Sphere = class _Sphere {
       nametag: options.nametag,
       l1: options.l1,
       price: options.price,
-      groupChat
+      groupChat,
+      password: options.password
     });
     return { sphere, created: true, generatedMnemonic };
   }
@@ -10093,6 +10094,7 @@ var Sphere = class _Sphere {
       options.price,
       groupChatConfig
     );
+    sphere._password = options.password ?? null;
     await sphere.storeMnemonic(options.mnemonic, options.derivationPath);
     await sphere.initializeIdentityFromMnemonic(options.mnemonic, options.derivationPath);
     await sphere.initializeProviders();
@@ -10126,6 +10128,7 @@ var Sphere = class _Sphere {
       options.price,
       groupChatConfig
     );
+    sphere._password = options.password ?? null;
     await sphere.loadIdentityFromStorage();
     await sphere.initializeProviders();
     await sphere.initializeModules();
@@ -10178,6 +10181,7 @@ var Sphere = class _Sphere {
       options.price,
       groupChatConfig
     );
+    sphere._password = options.password ?? null;
     if (options.mnemonic) {
       if (!_Sphere.validateMnemonic(options.mnemonic)) {
         throw new Error("Invalid mnemonic");
@@ -12356,9 +12360,20 @@ var Sphere = class _Sphere {
   // Private: Encryption
   // ===========================================================================
   encrypt(data) {
-    return encryptSimple(data, DEFAULT_ENCRYPTION_KEY);
+    if (!this._password) return data;
+    return encryptSimple(data, this._password);
   }
   decrypt(encrypted) {
+    if (this._password) {
+      try {
+        return decryptSimple(encrypted, this._password);
+      } catch {
+        return null;
+      }
+    }
+    if (validateMnemonic2(encrypted) || /^[0-9a-f]{64}$/i.test(encrypted)) {
+      return encrypted;
+    }
     try {
       return decryptSimple(encrypted, DEFAULT_ENCRYPTION_KEY);
     } catch {