agentvault 1.0.2 → 1.0.5

package/dist/src/wallet/secure-wallet.js

@@ -0,0 +1,298 @@
+/**
+ * SecureWallet – deploy-time wallet with real cryptography
+ *
+ * Implements the three BDD scenarios:
+ *
+ *  1. Wallet creation on deploy
+ *     • Keys generated with @noble/curves (secp256k1 or Ed25519)
+ *     • Private key is IMMEDIATELY encrypted with AES-256-GCM
+ *     • Encrypted bundle stored in stable memory (encryptedState field)
+ *
+ *  2. Message signing
+ *     • Decrypts private key ephemerally, signs, zeroes memory
+ *     • Produces signatures that validate against RFC 8032 / NIST test vectors
+ *
+ *  3. Key rotation
+ *     • Old private key is zeroed from memory before new keys are generated
+ *     • New keys are encrypted and replace the previous stable-memory entry
+ */
+import * as crypto from 'node:crypto';
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { ed25519 } from '@noble/curves/ed25519';
+import { encryptSecret, decryptSecret, deriveStorageKey } from './wallet-crypto.js';
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+const SALT_BYTES = 32;
+/** Generate a fresh per-wallet salt and derive a 32-byte AES key */
+function freshKey(passphrase) {
+    const salt = crypto.randomBytes(SALT_BYTES);
+    const aesKey = deriveStorageKey(passphrase, salt);
+    return { salt, aesKey };
+}
+/** Overwrite a Buffer's contents with zeros to wipe sensitive data */
+function zeroBuffer(buf) {
+    buf.fill(0);
+}
+/** Overwrite a Uint8Array's contents with zeros */
+function zeroBytes(arr) {
+    arr.fill(0);
+}
+// ---------------------------------------------------------------------------
+// SecureWallet
+// ---------------------------------------------------------------------------
+/**
+ * SecureWallet manages an asymmetric keypair whose private key is always
+ * stored encrypted with AES-256-GCM and never persisted in plaintext.
+ *
+ * All operations that require the private key (sign, rotateKeys) accept the
+ * caller-supplied passphrase, decrypt ephemerally, operate, then zero the
+ * ephemeral buffer.
+ */
+export class SecureWallet {
+    /** Stable-memory / on-chain state – safe to serialise and store */
+    _state = null;
+    // -------------------------------------------------------------------------
+    // Scenario 1: Wallet creation on deploy
+    // -------------------------------------------------------------------------
+    /**
+     * Initialise the wallet: generate a keypair with @noble/curves and
+     * immediately encrypt the private key with AES-256-GCM.
+     *
+     * The plaintext private key exists in memory only for the duration of this
+     * call and is zeroed before the method returns.
+     *
+     * @param passphrase  - Secret used as AES key material (e.g. BIP39 mnemonic
+     *                      or randomly generated deployment secret).
+     * @param curve       - 'secp256k1' (Ethereum/Polkadot) or 'ed25519'
+     *                      (Solana/ICP/Arweave). Defaults to 'ed25519'.
+     */
+    initialize(passphrase, curve = 'ed25519') {
+        // 1. Generate raw entropy
+        const entropy = crypto.randomBytes(32);
+        // 2. Derive keypair via @noble/curves
+        let privateKeyBytes;
+        let publicKeyBytes;
+        if (curve === 'secp256k1') {
+            privateKeyBytes = secp256k1.utils.randomPrivateKey();
+            // Use our generated entropy as the private key
+            privateKeyBytes = entropy;
+            publicKeyBytes = secp256k1.getPublicKey(privateKeyBytes, true); // compressed
+        }
+        else {
+            // ed25519
+            privateKeyBytes = entropy;
+            publicKeyBytes = ed25519.getPublicKey(privateKeyBytes);
+        }
+        // 3. Encrypt the private key with AES-256-GCM immediately
+        const { salt, aesKey } = freshKey(passphrase);
+        const encryptedPrivateKey = encryptSecret(Buffer.from(privateKeyBytes).toString('hex'), aesKey);
+        // 4. Zero the plaintext private key and AES key from memory
+        zeroBytes(privateKeyBytes);
+        zeroBuffer(aesKey);
+        // 5. Build the encrypted bundle (stable-memory representation)
+        const bundle = {
+            version: 1,
+            salt: salt.toString('hex'),
+            privateKey: encryptedPrivateKey,
+        };
+        const state = {
+            curve,
+            publicKey: Buffer.from(publicKeyBytes).toString('hex'),
+            encryptedBundle: bundle,
+            createdAt: Date.now(),
+        };
+        this._state = state;
+        return { state };
+    }
+    // -------------------------------------------------------------------------
+    // Scenario 2: Message signing
+    // -------------------------------------------------------------------------
+    /**
+     * Sign an arbitrary message.
+     *
+     * The private key is decrypted ephemerally for the duration of the signing
+     * operation and zeroed before this method returns.
+     *
+     * For Ed25519:  returns a 64-byte raw signature.
+     * For secp256k1: returns a 64-byte compact (r || s) DER-free signature.
+     *
+     * @param message     - Raw message bytes to sign.
+     * @param passphrase  - Passphrase used during `initialize()`.
+     */
+    sign(message, passphrase) {
+        const state = this._requireState();
+        const { privateKeyHex, aesKey } = this._decryptPrivateKey(state.encryptedBundle, passphrase);
+        let signature;
+        try {
+            const privateKeyBytes = Buffer.from(privateKeyHex, 'hex');
+            if (state.curve === 'ed25519') {
+                signature = ed25519.sign(message, privateKeyBytes);
+            }
+            else {
+                // secp256k1 – SHA-256 the message first (standard practice)
+                const digest = crypto.createHash('sha256').update(message).digest();
+                const sig = secp256k1.sign(digest, privateKeyBytes);
+                signature = sig.toCompactRawBytes();
+            }
+            // Zero ephemeral key material
+            zeroBuffer(Buffer.from(privateKeyBytes));
+        }
+        finally {
+            zeroBuffer(aesKey);
+        }
+        return signature;
+    }
+    /**
+     * Sign a pre-hashed digest directly (useful for secp256k1 ECDSA where the
+     * caller controls hashing, e.g. for NIST test-vector validation).
+     *
+     * Only supported on secp256k1 wallets.
+     */
+    signDigest(digest, passphrase) {
+        const state = this._requireState();
+        if (state.curve !== 'secp256k1') {
+            throw new Error('signDigest is only supported for secp256k1 wallets');
+        }
+        const { privateKeyHex, aesKey } = this._decryptPrivateKey(state.encryptedBundle, passphrase);
+        let signature;
+        try {
+            const privateKeyBytes = Buffer.from(privateKeyHex, 'hex');
+            const sig = secp256k1.sign(digest, privateKeyBytes);
+            signature = sig.toCompactRawBytes();
+            zeroBuffer(Buffer.from(privateKeyBytes));
+        }
+        finally {
+            zeroBuffer(aesKey);
+        }
+        return signature;
+    }
+    /**
+     * Verify a signature against the wallet's current public key.
+     *
+     * For Ed25519 and secp256k1 this is a pure-public-key operation – no
+     * passphrase required.
+     *
+     * @param message   - Original raw message bytes.
+     * @param signature - Signature bytes returned by `sign()`.
+     */
+    verify(message, signature) {
+        const state = this._requireState();
+        const publicKeyBytes = Buffer.from(state.publicKey, 'hex');
+        if (state.curve === 'ed25519') {
+            return ed25519.verify(signature, message, publicKeyBytes);
+        }
+        else {
+            const digest = crypto.createHash('sha256').update(message).digest();
+            return secp256k1.verify(signature, digest, publicKeyBytes);
+        }
+    }
+    /**
+     * Verify a secp256k1 signature against a pre-hashed digest.
+     */
+    verifyDigest(digest, signature) {
+        const state = this._requireState();
+        if (state.curve !== 'secp256k1') {
+            throw new Error('verifyDigest is only supported for secp256k1 wallets');
+        }
+        const publicKeyBytes = Buffer.from(state.publicKey, 'hex');
+        return secp256k1.verify(signature, digest, publicKeyBytes);
+    }
+    // -------------------------------------------------------------------------
+    // Scenario 3: Key rotation
+    // -------------------------------------------------------------------------
+    /**
+     * Rotate keys: decrypt the old private key, zero it, generate new keys, and
+     * encrypt the new private key with AES-256-GCM.
+     *
+     * After this call the wallet's `publicKey` and `encryptedBundle` are updated
+     * atomically; the old key material is zeroed.
+     *
+     * @param currentPassphrase - Passphrase used to decrypt the current key.
+     * @param newPassphrase     - Passphrase to encrypt the new key.  May be the
+     *                            same as `currentPassphrase`.
+     */
+    rotateKeys(currentPassphrase, newPassphrase) {
+        const state = this._requireState();
+        // 1. Decrypt and zero the old private key
+        const { privateKeyHex, aesKey: oldAesKey } = this._decryptPrivateKey(state.encryptedBundle, currentPassphrase);
+        const oldPrivateKeyBuf = Buffer.from(privateKeyHex, 'hex');
+        zeroBuffer(oldPrivateKeyBuf);
+        zeroBuffer(oldAesKey);
+        // 2. Generate fresh key material
+        const newEntropy = crypto.randomBytes(32);
+        const newPrivateKeyBytes = newEntropy;
+        let newPublicKeyBytes;
+        if (state.curve === 'secp256k1') {
+            newPublicKeyBytes = secp256k1.getPublicKey(newPrivateKeyBytes, true);
+        }
+        else {
+            newPublicKeyBytes = ed25519.getPublicKey(newPrivateKeyBytes);
+        }
+        // 3. Encrypt new private key with AES-256-GCM using the new passphrase
+        const { salt: newSalt, aesKey: newAesKey } = freshKey(newPassphrase);
+        const encryptedNewKey = encryptSecret(Buffer.from(newPrivateKeyBytes).toString('hex'), newAesKey);
+        // 4. Zero new plaintext key material
+        zeroBytes(newPrivateKeyBytes);
+        zeroBuffer(newAesKey);
+        // 5. Atomically replace stable-memory state
+        const newBundle = {
+            version: 1,
+            salt: newSalt.toString('hex'),
+            privateKey: encryptedNewKey,
+        };
+        const newState = {
+            curve: state.curve,
+            publicKey: Buffer.from(newPublicKeyBytes).toString('hex'),
+            encryptedBundle: newBundle,
+            createdAt: state.createdAt,
+            rotatedAt: Date.now(),
+        };
+        this._state = newState;
+        return { state: newState };
+    }
+    // -------------------------------------------------------------------------
+    // Accessors
+    // -------------------------------------------------------------------------
+    /** Returns the current stable-memory state (safe to serialise). */
+    get state() {
+        return this._requireState();
+    }
+    /** True once `initialize()` has been called. */
+    get isInitialized() {
+        return this._state !== null;
+    }
+    // -------------------------------------------------------------------------
+    // Private helpers
+    // -------------------------------------------------------------------------
+    _requireState() {
+        if (!this._state) {
+            throw new Error('SecureWallet has not been initialized – call initialize() first');
+        }
+        return this._state;
+    }
+    _decryptPrivateKey(bundle, passphrase) {
+        if (!bundle.privateKey) {
+            throw new Error('No encrypted private key found in bundle');
+        }
+        const salt = Buffer.from(bundle.salt, 'hex');
+        const aesKey = deriveStorageKey(passphrase, salt);
+        const privateKeyHex = decryptSecret(bundle.privateKey, aesKey);
+        return { salt, privateKeyHex, aesKey };
+    }
+}
+// ---------------------------------------------------------------------------
+// Convenience factory
+// ---------------------------------------------------------------------------
+/**
+ * Create and immediately initialise a SecureWallet in one call.
+ *
+ * @param passphrase - Passphrase for AES-256-GCM key derivation.
+ * @param curve      - Key curve ('secp256k1' | 'ed25519', default 'ed25519').
+ */
+export function createSecureWallet(passphrase, curve = 'ed25519') {
+    const wallet = new SecureWallet();
+    const handle = wallet.initialize(passphrase, curve);
+    return { wallet, handle };
+}
+//# sourceMappingURL=secure-wallet.js.map

package/dist/src/wallet/secure-wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-wallet.js","sourceRoot":"","sources":["../../../src/wallet/secure-wallet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAmCpF,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,oEAAoE;AACpE,SAAS,QAAQ,CAAC,UAAkB;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,sEAAsE;AACtE,SAAS,UAAU,CAAC,GAAW;IAC7B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACd,CAAC;AAED,mDAAmD;AACnD,SAAS,SAAS,CAAC,GAAe;IAChC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IACvB,mEAAmE;IAC3D,MAAM,GAA6B,IAAI,CAAC;IAEhD,4EAA4E;IAC5E,wCAAwC;IACxC,4EAA4E;IAE5E;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,UAAkB,EAAE,QAAmB,SAAS;QACzD,0BAA0B;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAEvC,sCAAsC;QACtC,IAAI,eAA2B,CAAC;QAChC,IAAI,cAA0B,CAAC;QAE/B,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,eAAe,GAAG,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACrD,+CAA+C;YAC/C,eAAe,GAAG,OAAO,CAAC;YAC1B,cAAc,GAAG,SAAS,CAAC,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa;QAC/E,CAAC;aAAM,CAAC;YACN,UAAU;YACV,eAAe,GAAG,OAAO,CAAC;YAC1B,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;QACzD,CAAC;QAED,0DAA0D;QAC1D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,mBAAmB,GAAG,aAAa,CACvC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC5C,MAAM,CACP,CAAC;QAEF,4DAA4D;QAC5D,SAAS,CAAC,eAAe,CAAC,CAAC;QAC3B,UAAU,CAAC,MAAM,CAAC,CAAC;QAEnB,+DAA+D;QAC/D,MAAM,MAAM,GAAuB;YACjC,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC1B,UAAU,EAAE,mBAAmB;SAChC,CAAC;QAEF,MAAM,KAAK,GAAsB;YAC/B,KAAK;YACL,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtD,eAAe,EAAE,MAAM;YACvB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,4EAA4E;IAC5E,8BAA8B;IAC9B,4EAA4E;IAE5E;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,OAAmB,EAAE,UAAkB;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,kBAAkB,CACvD,KAAK,CAAC,eAAe,EACrB,UAAU,CACX,CAAC;QAEF,IAAI,SAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAE1D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC9B,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,4DAA4D;gBAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;gBACpE,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;gBACpD,SAAS,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACtC,CAAC;YAED,8BAA8B;YAC9B,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,MAAkB,EAAE,UAAkB;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,kBAAkB,CACvD,KAAK,CAAC,eAAe,EACrB,UAAU,CACX,CAAC;QAEF,IAAI,SAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YACpD,SAAS,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACpC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,OAAmB,EAAE,SAAqB;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAE3D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;YACpE,OAAO,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAkB,EAAE,SAAqB;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7D,CAAC;IAED,4EAA4E;IAC5E,2BAA2B;IAC3B,4EAA4E;IAE5E;;;;;;;;;;OAUG;IACH,UAAU,CAAC,iBAAyB,EAAE,aAAqB;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEnC,0CAA0C;QAC1C,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAClE,KAAK,CAAC,eAAe,EACrB,iBAAiB,CAClB,CAAC;QACF,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC3D,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC7B,UAAU,CAAC,SAAS,CAAC,CAAC;QAEtB,iCAAiC;QACjC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,kBAAkB,GAAe,UAAU,CAAC;QAClD,IAAI,iBAA6B,CAAC;QAElC,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAChC,iBAAiB,GAAG,SAAS,CAAC,YAAY,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAC/D,CAAC;QAED,uEAAuE;QACvE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;QACrE,MAAM,eAAe,GAAG,aAAa,CACnC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC/C,SAAS,CACV,CAAC;QAEF,qCAAqC;QACrC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC9B,UAAU,CAAC,SAAS,CAAC,CAAC;QAEtB,4CAA4C;QAC5C,MAAM,SAAS,GAAuB;YACpC,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC7B,UAAU,EAAE,eAAe;SAC5B,CAAC;QAEF,MAAM,QAAQ,GAAsB;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACzD,eAAe,EAAE,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAE5E,mEAAmE;IACnE,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;IAC9B,CAAC;IAED,gDAAgD;IAChD,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAC9B,CAAC;IAED,4EAA4E;IAC5E,kBAAkB;IAClB,4EAA4E;IAEpE,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,kBAAkB,CACxB,MAA0B,EAC1B,UAAkB;QAElB,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC;CACF;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,QAAmB,SAAS;IAE5B,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACpD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/dist/src/wallet/transaction-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-queue.d.ts","sourceRoot":"","sources":["../../../src/wallet/transaction-queue.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,UAAU,EACV,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,cAAc,GAAG,iBAAiB,CAAC;AAElF;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE5D;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEzF;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,iBAAiB,CAAC;QAC1B,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAC/B,QAAQ,EAAE,mBAAmB,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,KAAK,CAAM;IACnB,OAAO,CAAC,UAAU,CAAS;gBAEf,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;IAKnG;;OAEG;IACG,wBAAwB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAS9D;;;;;OAKG;IACG,0BAA0B,CAC9B,YAAY,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAClG,OAAO,CAAC,aAAa,EAAE,CAAC;IAY3B;;OAEG;YACW,kBAAkB;IA0DhC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAa1B;;OAEG;YACW,UAAU;IAQxB;;OAEG;YACW,UAAU;IAQxB;;OAEG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQhE;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAS5C;;OAEG;IACG,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAYzG;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAWtE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,GAAG,EACV,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACrD,yBAAyB,CAE3B"}

package/dist/src/wallet/transaction-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-queue.js","sourceRoot":"","sources":["../../../src/wallet/transaction-queue.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAoEH;;GAEG;AACH,MAAM,OAAO,yBAAyB;IAC5B,KAAK,CAAM;IACX,UAAU,CAAS;IAE3B,YAAY,WAAmB,EAAE,KAAU,EAAE,OAAsD;QACjG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB;QAC5B,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;YAC9D,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,0BAA0B,CAC9B,YAAmG;QAEnG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;QACtD,MAAM,OAAO,GAAoB,EAAE,CAAC;QAEpC,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAC9B,EAAqB,EACrB,YAAmG;QAEnG,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;YACjD,OAAO;gBACL,aAAa,EAAE,EAAE,CAAC,EAAE;gBACpB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,kBAAkB;gBACzB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;aACxB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;YAElD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAElD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;gBAC/C,OAAO;oBACL,aAAa,EAAE,EAAE,CAAC,EAAE;oBACpB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,gBAAgB;oBACvB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;iBACxB,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAErD,OAAO;gBACL,aAAa,EAAE,EAAE,CAAC,EAAE;gBACpB,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;aACxB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAEzE,IAAI,EAAE,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACxC,CAAC;YAED,OAAO;gBACL,aAAa,EAAE,EAAE,CAAC,EAAE;gBACpB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,OAAO;gBACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;aACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,MAAmC;QAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAE1C,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;YAC1B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG;YACnC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAQ;YAC9C,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;YAChC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;SACjC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,SAAiB;QACtD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,KAAa;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,MAAc;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,IAAY,EAAE,WAAiB;QACvD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAkB,EAClB,KAAU,EACV,OAAsD;IAEtD,OAAO,IAAI,yBAAyB,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC"}

package/dist/src/wallet/types.d.ts

@@ -4,11 +4,40 @@
 /**
  * Supported blockchain types
  */
-export type ChainType = 'cketh' | 'polkadot' | 'solana';
+export type ChainType = 'cketh' | 'polkadot' | 'solana' | 'icp' | 'arweave';
+/**
+ * AES-256-GCM encrypted ciphertext bundle
+ */
+export interface EncryptedCiphertext {
+    /** 12-byte IV as hex */
+    iv: string;
+    /** AES-256-GCM ciphertext as hex */
+    ciphertext: string;
+    /** 16-byte GCM authentication tag as hex */
+    tag: string;
+}
+/**
+ * Encrypted wallet key bundle stored at rest.
+ * The AES key is derived from the mnemonic + salt via PBKDF2-SHA256.
+ */
+export interface EncryptedKeyBundle {
+    /** Schema version for forward-compatibility */
+    version: 1;
+    /** 32-byte random per-wallet PBKDF2 salt as hex */
+    salt: string;
+    /** Encrypted private key (secp256k1 or ed25519) */
+    privateKey?: EncryptedCiphertext;
+    /** Encrypted BIP39 mnemonic */
+    mnemonic?: EncryptedCiphertext;
+}
 /**
  * Wallet creation methods
+ *
+ * 'hsm' indicates the key was generated inside a hardware secure element or
+ * Trusted Execution Environment (Ledger / Intel SGX).  No private key or
+ * mnemonic is ever present in a wallet created with this method.
  */
-export type WalletCreationMethod = 'seed' | 'private-key' | 'mnemonic';
+export type WalletCreationMethod = 'seed' | 'private-key' | 'mnemonic' | 'hsm';
 /**
  * Derivation path for BIP39 seed phrases
  */
@@ -39,6 +68,8 @@ export interface WalletData {
     creationMethod: WalletCreationMethod;
     /** Chain-specific metadata */
     chainMetadata?: Record<string, any>;
+    /** AES-256-GCM encrypted key bundle (replaces plaintext privateKey/mnemonic at rest) */
+    encryptedSecrets?: EncryptedKeyBundle;
 }
 /**
  * Wallet connection status
@@ -142,6 +173,24 @@ export interface WalletCreationOptions {
     /** Optional chain-specific metadata */
     chainMetadata?: Record<string, any>;
 }
+/**
+ * Options for creating a wallet via HSM / TEE keygen.
+ * No mnemonic or private key is supplied – the device generates them internally.
+ */
+export interface HsmWalletCreationOptions {
+    /** Agent ID to associate the wallet with. */
+    agentId: string;
+    /** Blockchain network. */
+    chain: ChainType;
+    /** HSM backend to use ('ledger' | 'sgx'). */
+    hsmBackend: 'ledger' | 'sgx';
+    /** BIP32 / SLIP10 derivation path (defaults to chain-standard path). */
+    derivationPath?: string;
+    /** Optional custom wallet ID. */
+    walletId?: string;
+    /** Backend-specific options (e.g. SGX socket path). */
+    hsmOptions?: Record<string, string>;
+}
 /**
  * Wallet storage options
  */
@@ -150,6 +199,12 @@ export interface WalletStorageOptions {
     baseDir?: string;
     /** Enable encryption */
     encrypt?: boolean;
+    /**
+     * BIP39 mnemonic used to derive the AES-256-GCM storage key via PBKDF2.
+     * When provided, private keys and mnemonics are encrypted at rest in
+     * encryptedSecrets and the plaintext fields are omitted from the file.
+     */
+    encryptionKey?: string;
 }
 /**
  * Provider configuration

package/dist/src/wallet/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/wallet/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAE5E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,+CAA+C;IAC/C,OAAO,EAAE,CAAC,CAAC;IACX,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC;AAED;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,aAAa,GAAG,UAAU,GAAG,KAAK,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,uBAAuB;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,yBAAyB;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,kBAAkB,CAAC,EAAE,cAAc,CAAC;IACpC,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,cAAc,EAAE,oBAAoB,CAAC;IACrC,8BAA8B;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpC,wFAAwF;IACxF,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,QAAQ,EAAE,GAAG,CAAC;IACd,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,4BAA4B;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC3C,sBAAsB;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,IAAI,CAAC,EAAE,GAAG,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,KAAK,EAAE,SAAS,CAAC;IACjB,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,yBAAyB;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,6BAA6B;IAC7B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4BAA4B;IAC5B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,KAAK,EAAE,SAAS,CAAC;IACjB,6CAA6C;IAC7C,UAAU,EAAE,QAAQ,GAAG,KAAK,CAAC;IAC7B,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iCAAiC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,yBAAyB;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,uBAAuB;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yBAAyB;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,4BAA4B;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/src/wallet/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/wallet/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/src/wallet/vetkeys-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vetkeys-adapter.d.ts","sourceRoot":"","sources":["../../../src/wallet/vetkeys-adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGjE;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,UAAU,CAAC;IACvB,EAAE,EAAE,UAAU,CAAC;IACf,GAAG,EAAE,UAAU,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,aAAa,GAAG,mBAAmB,CAAC;IAC1D,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,UAAU,CAAC,CAAS;gBAEhB,OAAO,GAAE,qBAA0B;IAU/C;;;;;;OAMG;IACG,aAAa,CACjB,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,eAAe,CAAC;IAuC3B;;;;;;OAMG;IACG,aAAa,CACjB,SAAS,EAAE,eAAe,EAC1B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC;IAqBlB;;;;;;;OAOG;IACG,0BAA0B,CAC9B,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,wBAAwB,CAAC;IA4DpC;;;;;;;;;;OAUG;IACG,iBAAiB,CACrB,iBAAiB,EAAE,MAAM,EAAE,EAC3B,iBAAiB,GAAE,OAAe,GACjC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA2D5E;;;;;;;;;;OAUG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,kBAAkB,EAC/B,iBAAiB,GAAE,OAAe,GACjC,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAyD9C;;;;OAIG;IACH,SAAS,IAAI;QACX,kBAAkB,EAAE,OAAO,CAAC;QAC5B,gBAAgB,EAAE,MAAM,CAAC;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,IAAI,EAAE,MAAM,GAAG,YAAY,CAAC;KAC7B;IAUD;;;;;;;OAOG;IACG,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC;CAkB9C;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,CAAC,EAAE,qBAAqB,GAC9B,cAAc,CAEhB"}

package/dist/src/wallet/vetkeys-adapter.js

@@ -4,6 +4,7 @@
  * Mock VetKeys canister integration for threshold signatures.
  * Uses local-only implementation until VetKeys canister is deployed.
  */
+import { debugLog } from '../debugging/debug-logger.js';
 /**
  * VetKeys adapter
  *
@@ -87,7 +88,7 @@ export class VetKeysAdapter {
      * @returns Threshold signature result
      */
     async initiateThresholdSignature(transactionId, wallet, request) {
-        console.log(`Initiating threshold signature for ${transactionId}...`);
+        debugLog(`Initiating threshold signature for ${transactionId}...`);
         if (this.options.threshold && this.options.threshold > 1) {
             const { VetKeysImplementation } = await import('../security/vetkeys.js');
             const client = new VetKeysImplementation({
@@ -101,7 +102,7 @@ export class VetKeysAdapter {
             }
             try {
                 const derived = await client.deriveThresholdKey(mnemonic);
-                console.log('Threshold key derived successfully');
+                debugLog('Threshold key derived successfully');
                 return {
                     transactionId,
                     success: true,
@@ -119,23 +120,13 @@ export class VetKeysAdapter {
             }
         }
         else {
-            console.log('Threshold is 1, using direct signing');
-            const { CkEthProvider, PolkadotProvider, SolanaProvider } = await import('./index.js');
-            let provider;
-            switch (wallet.chain) {
-                case 'cketh':
-                    provider = new CkEthProvider({ chain: 'cketh', rpcUrl: '', isTestnet: false });
-                    break;
-                case 'polkadot':
-                    provider = new PolkadotProvider({ chain: 'polkadot', rpcUrl: '', isTestnet: false });
-                    break;
-                case 'solana':
-                    provider = new SolanaProvider({ chain: 'solana', rpcUrl: '', isTestnet: false });
-                    break;
-                default:
-                    throw new Error(`Unsupported chain: ${wallet.chain}`);
-            }
+            debugLog('Threshold is 1, using direct signing');
+            const { createWalletProvider } = await import('./index.js');
+            const provider = createWalletProvider(wallet.chain, { isTestnet: false });
             await provider.connect();
+            if (!wallet.privateKey) {
+                throw new Error('Wallet private key not available for signing');
+            }
             const signed = await provider.signTransaction(request, wallet.privateKey);
             return {
                 transactionId,
@@ -157,7 +148,7 @@ export class VetKeysAdapter {
      * @returns Combined signature or error
      */
     async combineSignatures(partialSignatures, canisterConnected = false) {
-        console.log(`Combining ${partialSignatures.length} partial signatures...`);
+        debugLog(`Combining ${partialSignatures.length} partial signatures...`);
         const threshold = this.options.threshold ?? 2;
         if (partialSignatures.length < threshold) {
             return {
@@ -190,7 +181,7 @@ export class VetKeysAdapter {
             const crypto = await import('node:crypto');
             const combinedData = Buffer.concat(partialSignatures.map((sig) => Buffer.from(sig, 'hex')));
             const combined = crypto.createHash('sha256').update(combinedData).digest('hex');
-            console.log('Signatures combined successfully ( VetKeys canister mode)');
+            debugLog('Signatures combined successfully (VetKeys canister mode)');
             return {
                 success: true,
                 combinedSignature: combined,
@@ -215,7 +206,7 @@ export class VetKeysAdapter {
      * @returns Verification result
      */
     async verifySignature(signature, transaction, canisterConnected = false) {
-        console.log('Verifying signature...');
+        debugLog('Verifying signature...');
         if (!signature || typeof signature !== 'string') {
             return { valid: false, error: 'Signature must be a non-empty string' };
         }
@@ -229,7 +220,7 @@ export class VetKeysAdapter {
             return { valid: false, error: 'Transaction must be a valid object' };
         }
         if (!canisterConnected) {
-            console.log('Warning: VetKeys canister not connected, signature format validated only');
+            debugLog('Warning: VetKeys canister not connected, signature format validated only');
             return {
                 valid: false,
                 error: 'VetKeys canister not connected: threshold signature verification requires deployed VetKeys canister. Use single-party verification or deploy the VetKeys canister.',
@@ -248,10 +239,10 @@ export class VetKeysAdapter {
                 .digest('hex');
             const isValid = signature.includes(expectedHash.slice(0, 32));
             if (isValid) {
-                console.log('Signature verified successfully (VetKeys canister mode)');
+                debugLog('Signature verified successfully (VetKeys canister mode)');
             }
             else {
-                console.log('Signature verification failed');
+                debugLog('Signature verification failed');
             }
             return { valid: isValid };
         }
@@ -296,7 +287,7 @@ export class VetKeysAdapter {
         }
         catch (error) {
             const message = error instanceof Error ? error.message : 'Unknown error';
-            console.warn(`VetKeys canister not accessible: ${message}`);
+            debugLog(`VetKeys canister not accessible: ${message}`);
             return false;
         }
     }

package/dist/src/wallet/vetkeys-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vetkeys-adapter.js","sourceRoot":"","sources":["../../../src/wallet/vetkeys-adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAoCxD;;;;;GAKG;AACH,MAAM,OAAO,cAAc;IACjB,OAAO,CAAwB;IAC/B,UAAU,CAAU;IAE5B,YAAY,UAAiC,EAAE;QAC7C,IAAI,CAAC,OAAO,GAAG;YACb,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,CAAC;YACjC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC;YACvC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,aAAa;YACjE,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CACjB,MAAc,EACd,aAAsB;QAEtB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAE3C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAClC,IAAI,CAAC,OAAO,CAAC,mBAAmB,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,EACxF,GAAG,EACH,EAAE,CACH,CAAC;QAEF,IAAI,SAAiB,CAAC;QACtB,IAAI,GAAW,CAAC;QAEhB,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,KAAK,aAAa,EAAE,CAAC;YACvD,MAAM,GAAG,GAAG,MAAa,CAAC;YAC1B,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;gBACxB,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;gBAC1B,GAAG,CAAC,KAAK,EAAE;aACZ,CAAC,CAAC;YACH,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;gBACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;gBAC7B,MAAM,CAAC,KAAK,EAAE;aACf,CAAC,CAAC;YACH,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QAED,OAAO;YACL,EAAE,EAAE,aAAa,IAAI,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE;YAC3C,UAAU,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC;YACrC,EAAE,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC;YACtB,GAAG,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC;YACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CACjB,SAA0B,EAC1B,GAAW;QAEX,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAE3C,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CACtC,IAAI,CAAC,OAAO,CAAC,mBAAmB,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,EACxF,GAAG,EACH,SAAS,CAAC,EAAE,CACb,CAAC;QAEF,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,KAAK,aAAa,EAAE,CAAC;YACtD,QAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAClD,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,0BAA0B,CAC9B,aAAqB,EACrB,MAAkB,EAClB,OAA2B;QAE3B,QAAQ,CAAC,sCAAsC,aAAa,KAAK,CAAC,CAAC;QAEnE,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YAEzE,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC;gBACvC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;gBACvC,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB;aACtD,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAEjC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;gBAE1D,QAAQ,CAAC,oCAAoC,CAAC,CAAC;gBAE/C,OAAO;oBACL,aAAa;oBACb,OAAO,EAAE,IAAI;oBACb,iBAAiB,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;oBACrE,YAAY,EAAE,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC;iBAC3C,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,aAAa;oBACb,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;oBAC/D,YAAY,EAAE,KAAK;iBACpB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,sCAAsC,CAAC,CAAC;YAEjD,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAE1E,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;YAEzB,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAE1E,OAAO;gBACL,aAAa;gBACb,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,YAAY,EAAE,IAAI;aACnB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,iBAAiB,CACrB,iBAA2B,EAC3B,oBAA6B,KAAK;QAElC,QAAQ,CAAC,aAAa,iBAAiB,CAAC,MAAM,wBAAwB,CAAC,CAAC;QAExE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;QAE9C,IAAI,iBAAiB,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,4BAA4B,iBAAiB,CAAC,MAAM,IAAI,SAAS,WAAW;aACpF,CAAC;QACJ,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACvD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,sCAAsC,CAAC,wDAAwD;iBACvG,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,sCAAsC,CAAC,uBAAuB;iBACtE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,8JAA8J;aACtK,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAE3C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAChC,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CACxD,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEhF,QAAQ,CAAC,0DAA0D,CAAC,CAAC;YAErE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,iBAAiB,EAAE,QAAQ;aAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,eAAe,CACnB,SAAiB,EACjB,WAA+B,EAC/B,oBAA6B,KAAK;QAElC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QAEnC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;QACzE,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;QAClE,CAAC;QAED,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACvE,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,QAAQ,CAAC,0EAA0E,CAAC,CAAC;YACrF,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,oKAAoK;aAC5K,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAE3C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;gBAClC,EAAE,EAAE,WAAW,CAAC,EAAE;gBAClB,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,IAAI,EAAE,WAAW,CAAC,IAAI;aACvB,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;iBAC7C,MAAM,CAAC,YAAY,CAAC;iBACpB,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjB,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAE9D,IAAI,OAAO,EAAE,CAAC;gBACZ,QAAQ,CAAC,yDAAyD,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,+BAA+B,CAAC,CAAC;YAC5C,CAAC;YAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS;QAOP,OAAO;YACL,kBAAkB,EAAE,IAAI;YACxB,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC;YAC7C,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC;YAC5C,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,aAAa;YACtE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM;SAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,mBAAmB;QACvB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAE3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAE9C,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,QAAQ,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA+B;IAE/B,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC"}