@unicitylabs/sphere-sdk 0.3.3 → 0.3.5

package/dist/core/index.d.cts

@@ -2844,6 +2844,8 @@ interface SphereCreateOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Options for loading existing wallet */
 interface SphereLoadOptions {
@@ -2867,6 +2869,8 @@ interface SphereLoadOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to decrypt the wallet. Must match the password used during creation. */
+    password?: string;
 }
 /** Options for importing a wallet */
 interface SphereImportOptions {
@@ -2898,6 +2902,8 @@ interface SphereImportOptions {
     price?: PriceProvider;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic/key is stored as plaintext. */
+    password?: string;
 }
 /** L1 (ALPHA blockchain) configuration */
 interface L1Config {
@@ -2943,6 +2949,8 @@ interface SphereInitOptions {
      * - Omit/undefined: No groupchat module
      */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt/decrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Result of init operation */
 interface SphereInitResult {
@@ -2959,6 +2967,7 @@ declare class Sphere {
     private _identity;
     private _masterKey;
     private _mnemonic;
+    private _password;
     private _source;
     private _derivationMode;
     private _basePath;

package/dist/core/index.d.ts

@@ -2844,6 +2844,8 @@ interface SphereCreateOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Options for loading existing wallet */
 interface SphereLoadOptions {
@@ -2867,6 +2869,8 @@ interface SphereLoadOptions {
     network?: NetworkType;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to decrypt the wallet. Must match the password used during creation. */
+    password?: string;
 }
 /** Options for importing a wallet */
 interface SphereImportOptions {
@@ -2898,6 +2902,8 @@ interface SphereImportOptions {
     price?: PriceProvider;
     /** Group chat configuration (NIP-29). Omit to disable groupchat. */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt the wallet. If omitted, mnemonic/key is stored as plaintext. */
+    password?: string;
 }
 /** L1 (ALPHA blockchain) configuration */
 interface L1Config {
@@ -2943,6 +2949,8 @@ interface SphereInitOptions {
      * - Omit/undefined: No groupchat module
      */
     groupChat?: GroupChatModuleConfig | boolean;
+    /** Optional password to encrypt/decrypt the wallet. If omitted, mnemonic is stored as plaintext. */
+    password?: string;
 }
 /** Result of init operation */
 interface SphereInitResult {
@@ -2959,6 +2967,7 @@ declare class Sphere {
     private _identity;
     private _masterKey;
     private _mnemonic;
+    private _password;
     private _source;
     private _derivationMode;
     private _basePath;

package/dist/core/index.js

@@ -9120,7 +9120,9 @@ function decryptTextFormatKey(encryptedKey, password) {
     const key = deriveLegacyKey(password);
     const decrypted = CryptoJS7.AES.decrypt(encryptedKey, key);
     const result = decrypted.toString(CryptoJS7.enc.Utf8);
-    return result || null;
+    if (!result) return null;
+    if (!/^[0-9a-fA-F]+$/.test(result)) return null;
+    return result;
   } catch {
     return null;
   }
@@ -9712,6 +9714,7 @@ var Sphere = class _Sphere {
   _identity = null;
   _masterKey = null;
   _mnemonic = null;
+  _password = null;
   _source = "unknown";
   _derivationMode = "bip32";
   _basePath = DEFAULT_BASE_PATH;
@@ -9811,7 +9814,8 @@ var Sphere = class _Sphere {
         tokenStorage: options.tokenStorage,
         l1: options.l1,
         price: options.price,
-        groupChat
+        groupChat,
+        password: options.password
       });
       return { sphere: sphere2, created: false };
     }
@@ -9837,7 +9841,8 @@ var Sphere = class _Sphere {
       nametag: options.nametag,
       l1: options.l1,
       price: options.price,
-      groupChat
+      groupChat,
+      password: options.password
     });
     return { sphere, created: true, generatedMnemonic };
   }
@@ -9884,6 +9889,7 @@ var Sphere = class _Sphere {
       options.price,
       groupChatConfig
     );
+    sphere._password = options.password ?? null;
     await sphere.storeMnemonic(options.mnemonic, options.derivationPath);
     await sphere.initializeIdentityFromMnemonic(options.mnemonic, options.derivationPath);
     await sphere.initializeProviders();
@@ -9917,6 +9923,7 @@ var Sphere = class _Sphere {
       options.price,
       groupChatConfig
     );
+    sphere._password = options.password ?? null;
     await sphere.loadIdentityFromStorage();
     await sphere.initializeProviders();
     await sphere.initializeModules();
@@ -9969,6 +9976,7 @@ var Sphere = class _Sphere {
       options.price,
       groupChatConfig
     );
+    sphere._password = options.password ?? null;
     if (options.mnemonic) {
       if (!_Sphere.validateMnemonic(options.mnemonic)) {
         throw new Error("Invalid mnemonic");
@@ -10936,7 +10944,7 @@ var Sphere = class _Sphere {
       await provider.initialize();
     }
     await this.reinitializeModulesForNewAddress();
-    if (this._identity.nametag) {
+    if (!newNametag) {
       await this.syncIdentityWithTransport();
     }
     if (newNametag) {
@@ -12147,9 +12155,20 @@ var Sphere = class _Sphere {
   // Private: Encryption
   // ===========================================================================
   encrypt(data) {
-    return encryptSimple(data, DEFAULT_ENCRYPTION_KEY);
+    if (!this._password) return data;
+    return encryptSimple(data, this._password);
   }
   decrypt(encrypted) {
+    if (this._password) {
+      try {
+        return decryptSimple(encrypted, this._password);
+      } catch {
+        return null;
+      }
+    }
+    if (validateMnemonic2(encrypted) || /^[0-9a-f]{64}$/i.test(encrypted)) {
+      return encrypted;
+    }
     try {
       return decryptSimple(encrypted, DEFAULT_ENCRYPTION_KEY);
     } catch {