@unicitylabs/sphere-sdk 0.3.3 → 0.3.5

package/dist/index.d.cts

@@ -3667,6 +3667,8 @@ interface SphereCreateOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Options for loading existing wallet */
 interface SphereLoadOptions {
@@ -3690,6 +3692,8 @@ interface SphereLoadOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to decrypt the wallet. Must match the password used during creation. */
+    password?: string;
 }
 /** Options for importing a wallet */
 interface SphereImportOptions {
@@ -3721,6 +3725,8 @@ interface SphereImportOptions {
     price?: PriceProvider;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic/key is stored as plaintext. */
+    password?: string;
 }
 /** L1 (ALPHA blockchain) configuration */
 interface L1Config {
@@ -3766,6 +3772,8 @@ interface SphereInitOptions {
      * - Omit/undefined: No groupchat module
      */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt/decrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Result of init operation */
 interface SphereInitResult {
@@ -3782,6 +3790,7 @@ declare class Sphere {
     private _identity;
     private _masterKey;
     private _mnemonic;
+    private _password;
     private _source;
     private _derivationMode;
     private _basePath;

package/dist/index.d.ts

@@ -3667,6 +3667,8 @@ interface SphereCreateOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Options for loading existing wallet */
 interface SphereLoadOptions {
@@ -3690,6 +3692,8 @@ interface SphereLoadOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to decrypt the wallet. Must match the password used during creation. */
+    password?: string;
 }
 /** Options for importing a wallet */
 interface SphereImportOptions {
@@ -3721,6 +3725,8 @@ interface SphereImportOptions {
     price?: PriceProvider;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic/key is stored as plaintext. */
+    password?: string;
 }
 /** L1 (ALPHA blockchain) configuration */
 interface L1Config {
@@ -3766,6 +3772,8 @@ interface SphereInitOptions {
      * - Omit/undefined: No groupchat module
      */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt/decrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Result of init operation */
 interface SphereInitResult {
@@ -3782,6 +3790,7 @@ declare class Sphere {
     private _identity;
     private _masterKey;
     private _mnemonic;
+    private _password;
     private _source;
     private _derivationMode;
     private _basePath;

package/dist/index.js

@@ -9327,7 +9327,9 @@ function decryptTextFormatKey(encryptedKey, password) {
     const key = deriveLegacyKey(password);
     const decrypted = CryptoJS7.AES.decrypt(encryptedKey, key);
     const result = decrypted.toString(CryptoJS7.enc.Utf8);
-    return result || null;
+    if (!result) return null;
+    if (!/^[0-9a-fA-F]+$/.test(result)) return null;
+    return result;
   } catch {
     return null;
   }
@@ -9919,6 +9921,7 @@ var Sphere = class _Sphere {
   _identity = null;
   _masterKey = null;
   _mnemonic = null;
+  _password = null;
   _source = "unknown";
   _derivationMode = "bip32";
   _basePath = DEFAULT_BASE_PATH;
@@ -10018,7 +10021,8 @@ var Sphere = class _Sphere {
         tokenStorage: options.tokenStorage,
         l1: options.l1,
         price: options.price,
-        groupChat
+        groupChat,
+        password: options.password
       });
       return { sphere: sphere2, created: false };
     }
@@ -10044,7 +10048,8 @@ var Sphere = class _Sphere {
       nametag: options.nametag,
       l1: options.l1,
       price: options.price,
-      groupChat
+      groupChat,
+      password: options.password
     });
     return { sphere, created: true, generatedMnemonic };
   }
@@ -10091,6 +10096,7 @@ var Sphere = class _Sphere {
       options.price,
       groupChatConfig
     );
+    sphere._password = options.password ?? null;
     await sphere.storeMnemonic(options.mnemonic, options.derivationPath);
     await sphere.initializeIdentityFromMnemonic(options.mnemonic, options.derivationPath);
     await sphere.initializeProviders();
@@ -10124,6 +10130,7 @@ var Sphere = class _Sphere {
       options.price,
       groupChatConfig
     );
+    sphere._password = options.password ?? null;
     await sphere.loadIdentityFromStorage();
     await sphere.initializeProviders();
     await sphere.initializeModules();
@@ -10176,6 +10183,7 @@ var Sphere = class _Sphere {
       options.price,
       groupChatConfig
     );
+    sphere._password = options.password ?? null;
     if (options.mnemonic) {
       if (!_Sphere.validateMnemonic(options.mnemonic)) {
         throw new Error("Invalid mnemonic");
@@ -11143,7 +11151,7 @@ var Sphere = class _Sphere {
       await provider.initialize();
     }
     await this.reinitializeModulesForNewAddress();
-    if (this._identity.nametag) {
+    if (!newNametag) {
       await this.syncIdentityWithTransport();
     }
     if (newNametag) {
@@ -12354,9 +12362,20 @@ var Sphere = class _Sphere {
   // Private: Encryption
   // ===========================================================================
   encrypt(data) {
-    return encryptSimple(data, DEFAULT_ENCRYPTION_KEY);
+    if (!this._password) return data;
+    return encryptSimple(data, this._password);
   }
   decrypt(encrypted) {
+    if (this._password) {
+      try {
+        return decryptSimple(encrypted, this._password);
+      } catch {
+        return null;
+      }
+    }
+    if (validateMnemonic2(encrypted) || /^[0-9a-f]{64}$/i.test(encrypted)) {
+      return encrypted;
+    }
     try {
       return decryptSimple(encrypted, DEFAULT_ENCRYPTION_KEY);
     } catch {