@wopr-network/platform-core 1.67.0 → 1.68.0

package/src/billing/crypto/__tests__/address-gen.test.ts

@@ -1,264 +0,0 @@
-import { HDKey } from "@scure/bip32";
-import * as bip39 from "@scure/bip39";
-
-import { privateKeyToAccount } from "viem/accounts";
-import { describe, expect, it } from "vitest";
-import { deriveAddress, deriveTreasury, isValidXpub } from "../address-gen.js";
-
-/**
- * Well-known BIP-39 test mnemonic.
- * DO NOT use in production — this is public and widely known.
- */
-const TEST_MNEMONIC = "abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about";
-const TEST_SEED = bip39.mnemonicToSeedSync(TEST_MNEMONIC);
-
-/** Derive xpub at a BIP-44 path from the test mnemonic. */
-function xpubAt(path: string): string {
-  return HDKey.fromMasterSeed(TEST_SEED).derive(path).publicExtendedKey;
-}
-
-/** Derive private key at xpub / chainIndex / addressIndex from the test mnemonic. */
-function privKeyAt(path: string, chainIndex: number, addressIndex: number): Uint8Array {
-  const child = HDKey.fromMasterSeed(TEST_SEED).derive(path).deriveChild(chainIndex).deriveChild(addressIndex);
-  if (!child.privateKey) throw new Error("No private key");
-  return child.privateKey;
-}
-
-function privKeyHex(key: Uint8Array): `0x${string}` {
-  return `0x${Array.from(key, (b) => b.toString(16).padStart(2, "0")).join("")}` as `0x${string}`;
-}
-
-// =============================================================
-// DB chain configs — must match production payment_methods rows
-// =============================================================
-
-const CHAIN_CONFIGS = [
-  { name: "bitcoin", coinType: 0, addressType: "bech32", params: { hrp: "bc" }, addrRegex: /^bc1q[a-z0-9]+$/ },
-  { name: "litecoin", coinType: 2, addressType: "bech32", params: { hrp: "ltc" }, addrRegex: /^ltc1q[a-z0-9]+$/ },
-  {
-    name: "dogecoin",
-    coinType: 3,
-    addressType: "p2pkh",
-    params: { version: "0x1e" },
-    addrRegex: /^D[a-km-zA-HJ-NP-Z1-9]+$/,
-  },
-  {
-    name: "tron",
-    coinType: 195,
-    addressType: "keccak-b58check",
-    params: { version: "0x41" },
-    addrRegex: /^T[a-km-zA-HJ-NP-Z1-9]+$/,
-  },
-  { name: "ethereum", coinType: 60, addressType: "evm", params: {}, addrRegex: /^0x[0-9a-fA-F]{40}$/ },
-] as const;
-
-// =============================================================
-// Core property: xpub-derived address == mnemonic-derived address
-// This guarantees sweep scripts can sign for pay server addresses.
-// =============================================================
-
-describe("address derivation — sweep key parity", () => {
-  for (const cfg of CHAIN_CONFIGS) {
-    const path = `m/44'/${cfg.coinType}'/0'`;
-    const xpub = xpubAt(path);
-
-    describe(cfg.name, () => {
-      it("xpub address matches format", () => {
-        const addr = deriveAddress(xpub, 0, cfg.addressType, cfg.params);
-        expect(addr).toMatch(cfg.addrRegex);
-      });
-
-      it("derives different addresses at different indices", () => {
-        const a = deriveAddress(xpub, 0, cfg.addressType, cfg.params);
-        const b = deriveAddress(xpub, 1, cfg.addressType, cfg.params);
-        expect(a).not.toBe(b);
-      });
-
-      it("is deterministic", () => {
-        const a = deriveAddress(xpub, 7, cfg.addressType, cfg.params);
-        const b = deriveAddress(xpub, 7, cfg.addressType, cfg.params);
-        expect(a).toBe(b);
-      });
-
-      it("treasury differs from deposit index 0", () => {
-        const deposit = deriveAddress(xpub, 0, cfg.addressType, cfg.params);
-        const treasury = deriveTreasury(xpub, cfg.addressType, cfg.params);
-        expect(deposit).not.toBe(treasury);
-      });
-    });
-  }
-});
-
-// =============================================================
-// Sweep key parity for EVERY chain config.
-// Proves: mnemonic → private key → public key → address == xpub → address
-// This guarantees sweep scripts can sign for pay server addresses.
-// =============================================================
-
-describe("sweep key parity — privkey derives same address as xpub", () => {
-  for (const cfg of CHAIN_CONFIGS) {
-    const path = `m/44'/${cfg.coinType}'/0'`;
-    const xpub = xpubAt(path);
-
-    describe(cfg.name, () => {
-      it("deposit addresses match at indices 0-4", () => {
-        for (let i = 0; i < 5; i++) {
-          const fromXpub = deriveAddress(xpub, i, cfg.addressType, cfg.params);
-          // Derive from privkey: get the child's public key and re-derive the address
-          const child = HDKey.fromMasterSeed(TEST_SEED).derive(path).deriveChild(0).deriveChild(i);
-          const fromPriv = deriveAddress(
-            // Use the child's public extended key — but HDKey.deriveChild on a full key
-            // produces a full key. Extract just the public key and re-derive via xpub at same index.
-            // Simpler: verify the public keys match, then the address must match.
-            xpub,
-            i,
-            cfg.addressType,
-            cfg.params,
-          );
-          // This is tautological — we need to verify from the private key side.
-          // For EVM we can use viem. For others, verify pubkey identity.
-          expect(child.publicKey).toBeDefined();
-          // The xpub's child pubkey at index i must equal the full-key's child pubkey at index i
-          const xpubChild = HDKey.fromExtendedKey(xpub).deriveChild(0).deriveChild(i);
-          const childPk = child.publicKey as Uint8Array;
-          const xpubPk = xpubChild.publicKey as Uint8Array;
-          expect(Buffer.from(childPk).toString("hex")).toBe(Buffer.from(xpubPk).toString("hex"));
-          // And the address from xpub must match
-          expect(fromXpub).toBe(fromPriv);
-        }
-      });
-
-      it("treasury pubkey matches", () => {
-        const fullKey = HDKey.fromMasterSeed(TEST_SEED).derive(path).deriveChild(1).deriveChild(0);
-        const xpubKey = HDKey.fromExtendedKey(xpub).deriveChild(1).deriveChild(0);
-        const fullPk = fullKey.publicKey as Uint8Array;
-        const xpubPk = xpubKey.publicKey as Uint8Array;
-        expect(Buffer.from(fullPk).toString("hex")).toBe(Buffer.from(xpubPk).toString("hex"));
-      });
-    });
-  }
-});
-
-// =============================================================
-// EVM: private key → viem account → address must match.
-// Strongest proof: viem can sign transactions from this key
-// and the address matches what the pay server derived.
-// =============================================================
-
-describe("EVM sweep key parity — viem account matches derived address", () => {
-  const EVM_PATH = "m/44'/60'/0'";
-  const xpub = xpubAt(EVM_PATH);
-
-  // All EVM chains share coin type 60
-  it("deposit privkey account matches at indices 0-9", () => {
-    for (let i = 0; i < 10; i++) {
-      const derivedAddr = deriveAddress(xpub, i, "evm");
-      const privKey = privKeyAt(EVM_PATH, 0, i);
-      const account = privateKeyToAccount(privKeyHex(privKey));
-      expect(account.address.toLowerCase()).toBe(derivedAddr.toLowerCase());
-    }
-  });
-
-  it("treasury privkey account matches", () => {
-    const treasuryAddr = deriveTreasury(xpub, "evm");
-    const privKey = privKeyAt(EVM_PATH, 1, 0);
-    const account = privateKeyToAccount(privKeyHex(privKey));
-    expect(account.address.toLowerCase()).toBe(treasuryAddr.toLowerCase());
-  });
-});
-
-// =============================================================
-// Tron-specific: keccak-b58check produces known test vectors
-// =============================================================
-
-describe("Tron keccak-b58check — known test vectors", () => {
-  const TRON_XPUB = xpubAt("m/44'/195'/0'");
-
-  it("index 0 produces known address", () => {
-    const addr = deriveAddress(TRON_XPUB, 0, "keccak-b58check", { version: "0x41" });
-    // Verified against TronWeb / TronLink derivation from test mnemonic
-    expect(addr).toBe("TUEZSdKsoDHQMeZwihtdoBiN46zxhGWYdH");
-  });
-
-  it("index 1 produces known address", () => {
-    const addr = deriveAddress(TRON_XPUB, 1, "keccak-b58check", { version: "0x41" });
-    expect(addr).toBe("TSeJkUh4Qv67VNFwY8LaAxERygNdy6NQZK");
-  });
-
-  it("treasury produces known address", () => {
-    const addr = deriveTreasury(TRON_XPUB, "keccak-b58check", { version: "0x41" });
-    expect(addr).toMatch(/^T[a-km-zA-HJ-NP-Z1-9]{33}$/);
-  });
-
-  it("address has correct length (34 chars)", () => {
-    for (let i = 0; i < 10; i++) {
-      const addr = deriveAddress(TRON_XPUB, i, "keccak-b58check", { version: "0x41" });
-      expect(addr.length).toBe(34);
-    }
-  });
-});
-
-// =============================================================
-// Bitcoin — known test vectors from BIP-84 test mnemonic
-// =============================================================
-
-describe("Bitcoin bech32 — known test vectors", () => {
-  const BTC_XPUB = xpubAt("m/44'/0'/0'");
-
-  it("index 0 produces valid bc1q address", () => {
-    const addr = deriveAddress(BTC_XPUB, 0, "bech32", { hrp: "bc" });
-    expect(addr).toMatch(/^bc1q[a-z0-9]{38,42}$/);
-  });
-
-  it("testnet uses tb prefix", () => {
-    const addr = deriveAddress(BTC_XPUB, 0, "bech32", { hrp: "tb" });
-    expect(addr).toMatch(/^tb1q[a-z0-9]+$/);
-  });
-});
-
-// =============================================================
-// Error handling
-// =============================================================
-
-describe("error handling", () => {
-  const ETH_XPUB = xpubAt("m/44'/60'/0'");
-  const BTC_XPUB = xpubAt("m/44'/0'/0'");
-
-  it("rejects negative index", () => {
-    expect(() => deriveAddress(ETH_XPUB, -1, "evm")).toThrow("Invalid");
-  });
-
-  it("rejects unknown address type", () => {
-    expect(() => deriveAddress(ETH_XPUB, 0, "foo")).toThrow("Unknown address type");
-  });
-
-  it("bech32 throws without hrp", () => {
-    expect(() => deriveAddress(BTC_XPUB, 0, "bech32", {})).toThrow("hrp");
-  });
-
-  it("p2pkh throws without version", () => {
-    expect(() => deriveAddress(BTC_XPUB, 0, "p2pkh", {})).toThrow("version");
-  });
-
-  it("keccak-b58check throws without version", () => {
-    expect(() => deriveAddress(BTC_XPUB, 0, "keccak-b58check", {})).toThrow("version");
-  });
-});
-
-// =============================================================
-// isValidXpub
-// =============================================================
-
-describe("isValidXpub", () => {
-  it("accepts valid xpub", () => {
-    expect(isValidXpub(xpubAt("m/44'/0'/0'"))).toBe(true);
-  });
-
-  it("rejects garbage", () => {
-    expect(isValidXpub("not-an-xpub")).toBe(false);
-  });
-
-  it("rejects empty string", () => {
-    expect(isValidXpub("")).toBe(false);
-  });
-});