@unicitylabs/sphere-sdk 0.3.2 → 0.3.4

package/dist/core/index.d.cts

@@ -2710,7 +2710,7 @@ declare const NETWORKS: {
         readonly name: "Mainnet";
         readonly aggregatorUrl: "https://aggregator.unicity.network/rpc";
         readonly nostrRelays: readonly ["wss://relay.unicity.network", "wss://relay.damus.io", "wss://nos.lol", "wss://relay.nostr.band"];
-        readonly ipfsGateways: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+        readonly ipfsGateways: readonly ["https://unicity-ipfs1.dyndns.org"];
         readonly electrumUrl: "wss://fulcrum.alpha.unicity.network:50004";
         readonly groupRelays: readonly ["wss://sphere-relay.unicity.network"];
     };
@@ -2718,7 +2718,7 @@ declare const NETWORKS: {
         readonly name: "Testnet";
         readonly aggregatorUrl: "https://goggregator-test.unicity.network";
         readonly nostrRelays: readonly ["wss://nostr-relay.testnet.unicity.network"];
-        readonly ipfsGateways: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+        readonly ipfsGateways: readonly ["https://unicity-ipfs1.dyndns.org"];
         readonly electrumUrl: "wss://fulcrum.alpha.testnet.unicity.network:50004";
         readonly groupRelays: readonly ["wss://sphere-relay.unicity.network"];
     };
@@ -2726,7 +2726,7 @@ declare const NETWORKS: {
         readonly name: "Development";
         readonly aggregatorUrl: "https://dev-aggregator.dyndns.org/rpc";
         readonly nostrRelays: readonly ["wss://nostr-relay.testnet.unicity.network"];
-        readonly ipfsGateways: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+        readonly ipfsGateways: readonly ["https://unicity-ipfs1.dyndns.org"];
         readonly electrumUrl: "wss://fulcrum.alpha.testnet.unicity.network:50004";
         readonly groupRelays: readonly ["wss://sphere-relay.unicity.network"];
     };
@@ -2844,6 +2844,8 @@ interface SphereCreateOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Options for loading existing wallet */
 interface SphereLoadOptions {
@@ -2867,6 +2869,8 @@ interface SphereLoadOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to decrypt the wallet. Must match the password used during creation. */
+    password?: string;
 }
 /** Options for importing a wallet */
 interface SphereImportOptions {
@@ -2898,6 +2902,8 @@ interface SphereImportOptions {
     price?: PriceProvider;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic/key is stored as plaintext. */
+    password?: string;
 }
 /** L1 (ALPHA blockchain) configuration */
 interface L1Config {
@@ -2943,6 +2949,8 @@ interface SphereInitOptions {
      * - Omit/undefined: No groupchat module
      */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt/decrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Result of init operation */
 interface SphereInitResult {
@@ -2959,6 +2967,7 @@ declare class Sphere {
     private _identity;
     private _masterKey;
     private _mnemonic;
+    private _password;
     private _source;
     private _derivationMode;
     private _basePath;

package/dist/core/index.d.ts

@@ -2710,7 +2710,7 @@ declare const NETWORKS: {
         readonly name: "Mainnet";
         readonly aggregatorUrl: "https://aggregator.unicity.network/rpc";
         readonly nostrRelays: readonly ["wss://relay.unicity.network", "wss://relay.damus.io", "wss://nos.lol", "wss://relay.nostr.band"];
-        readonly ipfsGateways: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+        readonly ipfsGateways: readonly ["https://unicity-ipfs1.dyndns.org"];
         readonly electrumUrl: "wss://fulcrum.alpha.unicity.network:50004";
         readonly groupRelays: readonly ["wss://sphere-relay.unicity.network"];
     };
@@ -2718,7 +2718,7 @@ declare const NETWORKS: {
         readonly name: "Testnet";
         readonly aggregatorUrl: "https://goggregator-test.unicity.network";
         readonly nostrRelays: readonly ["wss://nostr-relay.testnet.unicity.network"];
-        readonly ipfsGateways: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+        readonly ipfsGateways: readonly ["https://unicity-ipfs1.dyndns.org"];
         readonly electrumUrl: "wss://fulcrum.alpha.testnet.unicity.network:50004";
         readonly groupRelays: readonly ["wss://sphere-relay.unicity.network"];
     };
@@ -2726,7 +2726,7 @@ declare const NETWORKS: {
         readonly name: "Development";
         readonly aggregatorUrl: "https://dev-aggregator.dyndns.org/rpc";
         readonly nostrRelays: readonly ["wss://nostr-relay.testnet.unicity.network"];
-        readonly ipfsGateways: readonly ["https://ipfs.unicity.network", "https://dweb.link", "https://ipfs.io"];
+        readonly ipfsGateways: readonly ["https://unicity-ipfs1.dyndns.org"];
         readonly electrumUrl: "wss://fulcrum.alpha.testnet.unicity.network:50004";
         readonly groupRelays: readonly ["wss://sphere-relay.unicity.network"];
     };
@@ -2844,6 +2844,8 @@ interface SphereCreateOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Options for loading existing wallet */
 interface SphereLoadOptions {
@@ -2867,6 +2869,8 @@ interface SphereLoadOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to decrypt the wallet. Must match the password used during creation. */
+    password?: string;
 }
 /** Options for importing a wallet */
 interface SphereImportOptions {
@@ -2898,6 +2902,8 @@ interface SphereImportOptions {
     price?: PriceProvider;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic/key is stored as plaintext. */
+    password?: string;
 }
 /** L1 (ALPHA blockchain) configuration */
 interface L1Config {
@@ -2943,6 +2949,8 @@ interface SphereInitOptions {
      * - Omit/undefined: No groupchat module
      */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt/decrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Result of init operation */
 interface SphereInitResult {
@@ -2959,6 +2967,7 @@ declare class Sphere {
     private _identity;
     private _masterKey;
     private _mnemonic;
+    private _password;
     private _source;
     private _derivationMode;
     private _basePath;

package/dist/core/index.js

@@ -2410,9 +2410,7 @@ var DEFAULT_AGGREGATOR_URL = "https://aggregator.unicity.network/rpc";
 var DEV_AGGREGATOR_URL = "https://dev-aggregator.dyndns.org/rpc";
 var TEST_AGGREGATOR_URL = "https://goggregator-test.unicity.network";
 var DEFAULT_IPFS_GATEWAYS = [
-  "https://ipfs.unicity.network",
-  "https://dweb.link",
-  "https://ipfs.io"
+  "https://unicity-ipfs1.dyndns.org"
 ];
 var DEFAULT_BASE_PATH = "m/44'/0'/0'";
 var DEFAULT_DERIVATION_PATH2 = `${DEFAULT_BASE_PATH}/0/0`;
@@ -9714,6 +9712,7 @@ var Sphere = class _Sphere {
   _identity = null;
   _masterKey = null;
   _mnemonic = null;
+  _password = null;
   _source = "unknown";
   _derivationMode = "bip32";
   _basePath = DEFAULT_BASE_PATH;
@@ -9813,7 +9812,8 @@ var Sphere = class _Sphere {
         tokenStorage: options.tokenStorage,
         l1: options.l1,
         price: options.price,
-        groupChat
+        groupChat,
+        password: options.password
       });
       return { sphere: sphere2, created: false };
     }
@@ -9839,7 +9839,8 @@ var Sphere = class _Sphere {
       nametag: options.nametag,
       l1: options.l1,
       price: options.price,
-      groupChat
+      groupChat,
+      password: options.password
     });
     return { sphere, created: true, generatedMnemonic };
   }
@@ -9886,6 +9887,7 @@ var Sphere = class _Sphere {
       options.price,
       groupChatConfig
     );
+    sphere._password = options.password ?? null;
     await sphere.storeMnemonic(options.mnemonic, options.derivationPath);
     await sphere.initializeIdentityFromMnemonic(options.mnemonic, options.derivationPath);
     await sphere.initializeProviders();
@@ -9919,6 +9921,7 @@ var Sphere = class _Sphere {
       options.price,
       groupChatConfig
     );
+    sphere._password = options.password ?? null;
     await sphere.loadIdentityFromStorage();
     await sphere.initializeProviders();
     await sphere.initializeModules();
@@ -9971,6 +9974,7 @@ var Sphere = class _Sphere {
       options.price,
       groupChatConfig
     );
+    sphere._password = options.password ?? null;
     if (options.mnemonic) {
       if (!_Sphere.validateMnemonic(options.mnemonic)) {
         throw new Error("Invalid mnemonic");
@@ -12149,9 +12153,20 @@ var Sphere = class _Sphere {
   // Private: Encryption
   // ===========================================================================
   encrypt(data) {
-    return encryptSimple(data, DEFAULT_ENCRYPTION_KEY);
+    if (!this._password) return data;
+    return encryptSimple(data, this._password);
   }
   decrypt(encrypted) {
+    if (this._password) {
+      try {
+        return decryptSimple(encrypted, this._password);
+      } catch {
+        return null;
+      }
+    }
+    if (validateMnemonic2(encrypted) || /^[0-9a-f]{64}$/i.test(encrypted)) {
+      return encrypted;
+    }
     try {
       return decryptSimple(encrypted, DEFAULT_ENCRYPTION_KEY);
     } catch {