w3pk 0.10.4 → 0.11.1

package/README.md

@@ -51,34 +51,29 @@ const endpoints = await w3pk.getEndpoints(1)
 - On-chain transaction sending with automatic RPC resolution (`sendTransaction`)
 - EIP-1193 provider for ethers, viem, wagmi, RainbowKit (`getEIP1193Provider`)
 - ERC-5564 stealth addresses (opt-in)
-- ZK primitives (zero-knowledge proof generation and verification)
-- Post-quantum encryption (ML-KEM-1024/Kyber NIST FIPS 203)
+- ZK primitives (zero-knowledge proof generation and verification, Baby Jubjub keys, exponential ElGamal and circuit artifact verification against onchain pins in `w3pk/zk`, passkey-bound Semaphore identities with `getSemaphoreIdentity()`, and proofs over a passkey-bound secret the app never sees with `zkProve()`)
+- Hybrid post-quantum encryption (HPKE over ML-KEM-1024 + X25519)
 - Chainlist support (2390+ networks)
 - EIP-7702 network detection (329+ networks)
-- External wallet integration (delegate MetaMask/Ledger to w3pk via EIP-7702)
 - EIP-7951 PRIMARY mode (P-256 passkey signing)
 - Build verification (IPFS CID hashing + DAO-maintained onchain registry)
 - Three-layer backup & recovery (passkey sync, encrypted backups, social recovery)
-- AI-powered host app inspection
 
 ## API
 
 ### Authentication
 
 ```typescript
-// Check for existing wallet
-const hasWallet = await w3pk.hasExistingCredential()
+// List all wallets on device
+const wallets = await w3pk.listExistingCredentials()
 
 // Register or login
-if (hasWallet) {
+if (wallets.length > 0) {
   await w3pk.login()
 } else {
   const { address, username } = await w3pk.register({ username: 'alice' })
 }
 
-// List all wallets on device
-const wallets = await w3pk.listExistingCredentials()
-
 // Logout
 await w3pk.logout()
 ```
@@ -112,7 +107,7 @@ const strictWallet = await w3pk.deriveWallet('STRICT', 'SECURE')
 console.log(mainWallet.address !== gamingWallet.address) // true
 ```
 
-**Security:** Master mnemonic is never exposed. Applications cannot access `exportMnemonic()`.
+**Security:** Master mnemonic is never exposed. No method returns it, and restores (`restoreFromBackupFile()`, `syncWalletWithPasskey()`, `recoverFromGuardians()`) return only the address.
 
 ### Message Signing
 
@@ -134,7 +129,7 @@ const eip712Sig = await w3pk.signMessage(JSON.stringify(typedData), {
   eip712PrimaryType: 'Transfer'
 })
 
-// Raw hash
+// Raw hash (always prompts for the passkey)
 const rawSig = await w3pk.signMessage(hash, {
   signingMethod: 'rawHash'
 })
@@ -218,7 +213,7 @@ const hash = await client.sendTransaction({ to: '0x...', value: parseEther('1')
 | `eth_chainId` | Returns active chain as hex |
 | `eth_sendTransaction` | Delegates to `sendTransaction()` |
 | `personal_sign` / `eth_sign` | EIP-191 message signing |
-| `eth_signTypedData_v4` | EIP-712 typed data signing |
+| `eth_signTypedData_v4` | EIP-712 typed data signing, bound to the active chain |
 | `wallet_switchEthereumChain` | Updates active chainId, emits `chainChanged` |
 
 ### Session Management
@@ -257,7 +252,7 @@ await w3pk.clearSession()
 
 **Note:** STRICT mode never allows persistent sessions.
 
-**PRF-keyed persistence:** persistent sessions are encrypted under a key derived from the WebAuthn PRF extension (an authenticator-held secret, released only during a biometric/PIN-verified assertion) and re-keyed at every real login. Authenticators without PRF support get in-memory sessions only — there is no weaker at-rest fallback. See [Security Architecture](./docs/SECURITY.md) for details.
+**PRF-keyed storage:** the wallet stored on the device and persistent sessions are encrypted under keys derived from the WebAuthn PRF extension (an authenticator-held secret, released only during a biometric/PIN-verified assertion), so storage alone can't decrypt them. Authenticators without PRF support keep no wallet on the device and get in-memory sessions only: the wallet comes back from a backup on the next visit. There is no weaker at-rest fallback. See [Security Architecture](./docs/SECURITY.md) for details.
 
 ### RPC Endpoints
 
@@ -292,13 +287,6 @@ const authorization = await w3pk.signAuthorization({
   nonce: 0n
 })
 // Returns: { chainId, address, nonce, yParity, r, s }
-
-// Delegate external wallet (MetaMask, Ledger, etc.) to w3pk account
-const auth = await w3pk.requestExternalWalletDelegation({
-  chainId: 1,
-  nonce: 0n
-})
-// User's external wallet account now controlled by w3pk WebAuthn
 ```
 
 ### EIP-7951 PRIMARY Mode
@@ -333,17 +321,30 @@ const result = await w3pk.stealth?.parseAnnouncement({
 })
 
 if (result.isForUser) {
-  console.log('Private key:', result.stealthPrivateKey)
+  console.log('Payment received at:', result.stealthAddress)
 }
 
 // Scan multiple announcements
 const myPayments = await w3pk.stealth?.scanAnnouncements(announcements)
+
+// Sign a transaction from a stealth address (broadcast it with your own RPC)
+const signedTx = await w3pk.stealth?.signTransaction(announcement, {
+  to: '0x...',
+  value: 1000000000000000n,
+  chainId: 11155111,
+  nonce: 0,
+  gasLimit: 21000n,
+  maxFeePerGas: 2000000000n,
+  maxPriorityFeePerGas: 1000000000n
+})
 ```
 
-### ML-KEM encryption
+Stealth keys are shared across origins, and w3pk never returns the spending private key or a stealth private key: it signs from stealth addresses itself.
+
+### Post-quantum encryption
 
 ```typescript
-// Encrypt with post-quantum security (NIST FIPS 203)
+// Hybrid ML-KEM-1024 + X25519 (HPKE, payload v3)
 const pubKey = await w3pk.deriveMLKemPublicKey()
 const encrypted = await w3pk.mlkemEncrypt('secret', [pubKey])
 const plaintext = await w3pk.mlkemDecrypt(encrypted)
@@ -355,48 +356,47 @@ const plaintext = await w3pk.mlkemDecrypt(encrypted)
 import { isStrongPassword } from 'w3pk'
 
 // Validate password strength
-const password = 'MyS3cur3!Password@2042'
+const password = 'violet lantern under seven bridges'
 if (!isStrongPassword(password)) {
-  throw new Error('Password must be 12+ chars with uppercase, lowercase, number, special char')
+  throw new Error('Password must be 15+ characters and not a common password')
 }
 
 // Get backup status
 const status = await w3pk.getBackupStatus()
-console.log('Security Score:', status.securityScore.total) // 0-100
+console.log('Security Score:', status.securityScore.total) // 0-70
+console.log('Next backup:', status.recommendedMode) // 'password', then 'prf'
 
-// Create encrypted backup file
-const { blob, filename } = await w3pk.createBackupFile('password', password)
+// Create encrypted backup file (BackupFile v3: Argon2id, no address in the file)
+const { blob, filename } = await w3pk.createBackupFile(password)
 
 // Setup social recovery (M-of-N guardians) - guardians store backup file fragments
-import { SocialRecoveryManager } from 'w3pk'
-const backupFileJson = await blob.text()
-const socialRecovery = new SocialRecoveryManager()
-const guardians = await socialRecovery.setupSocialRecovery(
-  backupFileJson,
-  w3pk.user.ethereumAddress,
+const { guardianShares } = await w3pk.setupSocialRecovery(
   [
     { name: 'Alice', email: 'alice@example.com' },
-    { name: 'Bob', phone: '+1234567890' },
+    { name: 'Bob' },
     { name: 'Charlie' }
   ],
-  2 // threshold
+  2, // threshold
+  password // encrypts the backup the shares rebuild
 )
 
-// Generate guardian invite
-const invite = await socialRecovery.generateGuardianInvite(guardians[0])
+// Generate guardian invite (share file, printable document, optional QR code)
+const { downloadBlob, filename, shareDocument } = await w3pk.generateGuardianInvite(guardianShares[0])
 
-// Recover from guardian shares - reconstructs encrypted backup file
-const { backupFileJson } = await socialRecovery.recoverFromGuardians([share1, share2])
-await w3pk.registerWithBackupFile(backupFileJson, password, 'username')
+// Recover from guardian share files - rebuilds and decrypts the backup
+// (logged out: the wallet stays in memory for register(); logged in: it replaces the stored one)
+const { ethereumAddress } = await w3pk.recoverFromGuardians([share1, share2], password)
 
-// Restore from backup file
+// Restore from backup file (another wallet than the logged-in one needs
+// the user's confirmation: { allowAddressChange: true })
 await w3pk.restoreFromBackupFile(encryptedData, password)
 
 // Simulate recovery scenarios
-const result = await w3pk.simulateRecoveryScenario({
-  type: 'lost-device',
-  description: 'Device lost with iCloud Keychain enabled'
-})
+import { RecoverySimulator } from 'w3pk'
+const result = await new RecoverySimulator().simulateScenario(
+  { type: 'lost-device', description: 'Device lost with iCloud Keychain enabled' },
+  await w3pk.getBackupStatus()
+)
 ```
 
 ### Build Verification
@@ -428,53 +428,6 @@ console.log('Onchain CID:', onchainCid)
 console.log('Verified:', isValid ? '✅' : '❌')
 ```
 
-### Security Inspection
-
-> **⚠️ Privacy Notice:** This optional feature sends application source code to an external API (Rukh) for AI analysis. User IP address will be visible to the API server.
-
-Analyze web3 applications to understand their transaction and signing methods:
-
-**Browser (analyze current page):**
-```typescript
-import { inspect, inspectNow } from 'w3pk'
-
-// Full inspection with custom options
-const result = await inspect({
-  appUrl: 'https://example.com',
-  rukhUrl: 'https://rukh.w3hc.org',
-  model: 'anthropic',
-  focusMode: 'transactions'
-})
-console.log(result.report)
-
-// Quick console inspection
-await inspectNow()  // Logs report directly to console
-```
-
-**Note:** Inspection API calls are sponsored by the [W3HC (Web3 Hackers Collective)](https://w3hc.org).
-
-**Node.js (analyze local files):**
-```typescript
-import { inspect, gatherCode } from 'w3pk/inspect/node'
-
-// Generate security report via Rukh API
-const report = await inspect(
-  '../my-dapp',           // App path
-  'https://rukh.w3hc.org', // Rukh API URL
-  'w3pk',                  // Context
-  'anthropic',             // Model
-  'transactions'           // Focus mode
-)
-
-// Or just gather code for analysis
-const result = await gatherCode({
-  appPath: '../my-dapp',
-  focusMode: 'transactions',
-  maxFileSizeKB: 500
-})
-console.log(`Analyzed ${result.includedFiles.length} files`)
-```
-
 ## Security & Verification
 
 ### Onchain Build Registry
@@ -493,7 +446,6 @@ Host applications should verify their installed W3PK build against this registry
 - [Integration Guidelines](./docs/INTEGRATION_GUIDELINES.md)
 - [API Reference](./docs/API_REFERENCE.md)
 - [Build Verification](./docs/BUILD_VERIFICATION.md)
-- [Security Inspection](./docs/INSPECTION.md)
 - [EIP-7951](./docs/EIP-7951.md)
 - [Security Architecture](./docs/SECURITY.md)
 - [Post-Quantum Cryptography](./docs/POST_QUANTUM.md) - Quantum-safe migration roadmap

package/dist/chainlist/index.d.mts

@@ -51,11 +51,11 @@ interface ChainlistOptions {
  */
 
 /**
- * Get RPC endpoints for a specific chain ID, excluding those that require API keys
+ * Get the HTTPS RPC endpoints for a specific chain ID, excluding those that require API keys
  *
  * @param chainId - The chain ID to get endpoints for
  * @param options - Optional configuration
- * @returns Array of RPC URLs that don't require API keys
+ * @returns Array of HTTPS RPC URLs that don't require API keys
  *
  * @example
  * ```typescript

package/dist/chainlist/index.d.ts

@@ -51,11 +51,11 @@ interface ChainlistOptions {
  */
 
 /**
- * Get RPC endpoints for a specific chain ID, excluding those that require API keys
+ * Get the HTTPS RPC endpoints for a specific chain ID, excluding those that require API keys
  *
  * @param chainId - The chain ID to get endpoints for
  * @param options - Optional configuration
- * @returns Array of RPC URLs that don't require API keys
+ * @returns Array of HTTPS RPC URLs that don't require API keys
  *
  * @example
  * ```typescript

package/dist/chainlist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/chainlist/index.ts"],"sourcesContent":["/**\n * Chainlist module for fetching RPC endpoints\n */\n\nimport type { Chain, ChainlistOptions } from \"./types\";\n\nconst DEFAULT_CHAINS_URL = \"https://chainid.network/chains.json\";\nconst DEFAULT_CACHE_DURATION = 3600000; // 1 hour\n\ninterface CacheEntry {\n  data: Chain[];\n  timestamp: number;\n}\n\nlet cache: CacheEntry | null = null;\n\n/**\n * Patterns that indicate an RPC URL requires an API key\n */\nconst API_KEY_PATTERNS = [\n  /\\$\\{[\\w_]+\\}/i, // ${INFURA_API_KEY}, ${API_KEY}, etc.\n  /\\{[\\w_]+\\}/i, // {API_KEY}, {INFURA_API_KEY}, etc.\n  /<[\\w_]+>/i, // <API_KEY>, <INFURA_API_KEY>, etc.\n  /YOUR[-_]?API[-_]?KEY/i,\n  /INSERT[-_]?API[-_]?KEY/i,\n  /API[-_]?KEY[-_]?HERE/i,\n];\n\n/**\n * Check if an RPC URL requires an API key\n */\nfunction requiresApiKey(rpcUrl: string): boolean {\n  return API_KEY_PATTERNS.some((pattern) => pattern.test(rpcUrl));\n}\n\n/**\n * Fetch all chains data from chainid.network\n */\nasync function fetchChains(\n  chainsJsonUrl: string = DEFAULT_CHAINS_URL\n): Promise<Chain[]> {\n  const response = await fetch(chainsJsonUrl);\n\n  if (!response.ok) {\n    throw new Error(\n      `Failed to fetch chains data: ${response.status} ${response.statusText}`\n    );\n  }\n\n  return await response.json();\n}\n\n/**\n * Get all chains data with caching\n */\nasync function getChainsData(options?: ChainlistOptions): Promise<Chain[]> {\n  const chainsJsonUrl = options?.chainsJsonUrl ?? DEFAULT_CHAINS_URL;\n  const cacheDuration = options?.cacheDuration ?? DEFAULT_CACHE_DURATION;\n  const now = Date.now();\n\n  // Check if cache is valid\n  if (cache && now - cache.timestamp < cacheDuration) {\n    return cache.data;\n  }\n\n  // Fetch fresh data\n  const data = await fetchChains(chainsJsonUrl);\n  cache = { data, timestamp: now };\n\n  return data;\n}\n\n/**\n * Get RPC endpoints for a specific chain ID, excluding those that require API keys\n *\n * @param chainId - The chain ID to get endpoints for\n * @param options - Optional configuration\n * @returns Array of RPC URLs that don't require API keys\n *\n * @example\n * ```typescript\n * import { getEndpoints } from 'w3pk/chainlist'\n *\n * // Get Ethereum mainnet RPCs\n * const endpoints = await getEndpoints(1)\n * console.log(endpoints)\n * // [\n * //   \"https://api.mycryptoapi.com/eth\",\n * //   \"https://cloudflare-eth.com\",\n * //   \"https://ethereum-rpc.publicnode.com\",\n * //   ...\n * // ]\n * ```\n */\nexport async function getEndpoints(\n  chainId: number,\n  options?: ChainlistOptions\n): Promise<string[]> {\n  const chains = await getChainsData(options);\n  const chain = chains.find((c) => c.chainId === chainId);\n\n  if (!chain) {\n    return [];\n  }\n\n  // Filter out RPC URLs that require API keys and websocket URLs\n  return chain.rpc.filter(\n    (rpcUrl) =>\n      !requiresApiKey(rpcUrl) &&\n      !rpcUrl.startsWith(\"wss://\") &&\n      !rpcUrl.startsWith(\"ws://\")\n  );\n}\n\n/**\n * Get all available chains\n *\n * @param options - Optional configuration\n * @returns Array of all chains\n */\nexport async function getAllChains(\n  options?: ChainlistOptions\n): Promise<Chain[]> {\n  return getChainsData(options);\n}\n\n/**\n * Get chain information by chain ID\n *\n * @param chainId - The chain ID to get information for\n * @param options - Optional configuration\n * @returns Chain information or undefined if not found\n */\nexport async function getChainById(\n  chainId: number,\n  options?: ChainlistOptions\n): Promise<Chain | undefined> {\n  const chains = await getChainsData(options);\n  return chains.find((c) => c.chainId === chainId);\n}\n\n/**\n * Clear the chains data cache\n */\nexport function clearCache(): void {\n  cache = null;\n}\n\n// Export types\nexport type { Chain, ChainlistOptions } from \"./types\";\n"],"mappings":"yaAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,gBAAAE,EAAA,iBAAAC,EAAA,iBAAAC,EAAA,iBAAAC,IAAA,eAAAC,EAAAN,GAMA,IAAMO,EAAqB,sCAQ3B,IAAIC,EAA2B,KAKzBC,EAAmB,CACvB,gBACA,cACA,YACA,wBACA,0BACA,uBACF,EAKA,SAASC,EAAeC,EAAyB,CAC/C,OAAOF,EAAiB,KAAMG,GAAYA,EAAQ,KAAKD,CAAM,CAAC,CAChE,CAKA,eAAeE,EACbC,EAAwBC,EACN,CAClB,IAAMC,EAAW,MAAM,MAAMF,CAAa,EAE1C,GAAI,CAACE,EAAS,GACZ,MAAM,IAAI,MACR,gCAAgCA,EAAS,MAAM,IAAIA,EAAS,UAAU,EACxE,EAGF,OAAO,MAAMA,EAAS,KAAK,CAC7B,CAKA,eAAeC,EAAcC,EAA8C,CACzE,IAAMJ,EAAgBI,GAAS,eAAiBH,EAC1CI,EAAgBD,GAAS,eAAiB,KAC1CE,EAAM,KAAK,IAAI,EAGrB,GAAIZ,GAASY,EAAMZ,EAAM,UAAYW,EACnC,OAAOX,EAAM,KAIf,IAAMa,EAAO,MAAMR,EAAYC,CAAa,EAC5C,OAAAN,EAAQ,CAAE,KAAAa,EAAM,UAAWD,CAAI,EAExBC,CACT,CAwBA,eAAsBC,EACpBC,EACAL,EACmB,CAEnB,IAAMM,GADS,MAAMP,EAAcC,CAAO,GACrB,KAAMO,GAAMA,EAAE,UAAYF,CAAO,EAEtD,OAAKC,EAKEA,EAAM,IAAI,OACdb,GACC,CAACD,EAAeC,CAAM,GACtB,CAACA,EAAO,WAAW,QAAQ,GAC3B,CAACA,EAAO,WAAW,OAAO,CAC9B,EATS,CAAC,CAUZ,CAQA,eAAsBe,EACpBR,EACkB,CAClB,OAAOD,EAAcC,CAAO,CAC9B,CASA,eAAsBS,EACpBJ,EACAL,EAC4B,CAE5B,OADe,MAAMD,EAAcC,CAAO,GAC5B,KAAMO,GAAMA,EAAE,UAAYF,CAAO,CACjD,CAKO,SAASK,GAAmB,CACjCpB,EAAQ,IACV","names":["chainlist_exports","__export","clearCache","getAllChains","getChainById","getEndpoints","__toCommonJS","DEFAULT_CHAINS_URL","cache","API_KEY_PATTERNS","requiresApiKey","rpcUrl","pattern","fetchChains","chainsJsonUrl","DEFAULT_CHAINS_URL","response","getChainsData","options","cacheDuration","now","data","getEndpoints","chainId","chain","c","getAllChains","getChainById","clearCache"]}
+{"version":3,"sources":["../../src/chainlist/index.ts"],"sourcesContent":["/**\n * Chainlist module for fetching RPC endpoints\n */\n\nimport type { Chain, ChainlistOptions } from \"./types\";\n\nconst DEFAULT_CHAINS_URL = \"https://chainid.network/chains.json\";\nconst DEFAULT_CACHE_DURATION = 3600000; // 1 hour\n\ninterface CacheEntry {\n  data: Chain[];\n  timestamp: number;\n}\n\nlet cache: CacheEntry | null = null;\n\n/**\n * Patterns that indicate an RPC URL requires an API key\n */\nconst API_KEY_PATTERNS = [\n  /\\$\\{[\\w_]+\\}/i, // ${INFURA_API_KEY}, ${API_KEY}, etc.\n  /\\{[\\w_]+\\}/i, // {API_KEY}, {INFURA_API_KEY}, etc.\n  /<[\\w_]+>/i, // <API_KEY>, <INFURA_API_KEY>, etc.\n  /YOUR[-_]?API[-_]?KEY/i,\n  /INSERT[-_]?API[-_]?KEY/i,\n  /API[-_]?KEY[-_]?HERE/i,\n];\n\n/**\n * Check if an RPC URL requires an API key\n */\nfunction requiresApiKey(rpcUrl: string): boolean {\n  return API_KEY_PATTERNS.some((pattern) => pattern.test(rpcUrl));\n}\n\n/**\n * Fetch all chains data from chainid.network\n */\nasync function fetchChains(\n  chainsJsonUrl: string = DEFAULT_CHAINS_URL\n): Promise<Chain[]> {\n  const response = await fetch(chainsJsonUrl);\n\n  if (!response.ok) {\n    throw new Error(\n      `Failed to fetch chains data: ${response.status} ${response.statusText}`\n    );\n  }\n\n  return await response.json();\n}\n\n/**\n * Get all chains data with caching\n */\nasync function getChainsData(options?: ChainlistOptions): Promise<Chain[]> {\n  const chainsJsonUrl = options?.chainsJsonUrl ?? DEFAULT_CHAINS_URL;\n  const cacheDuration = options?.cacheDuration ?? DEFAULT_CACHE_DURATION;\n  const now = Date.now();\n\n  // Check if cache is valid\n  if (cache && now - cache.timestamp < cacheDuration) {\n    return cache.data;\n  }\n\n  // Fetch fresh data\n  const data = await fetchChains(chainsJsonUrl);\n  cache = { data, timestamp: now };\n\n  return data;\n}\n\n/**\n * Get the HTTPS RPC endpoints for a specific chain ID, excluding those that require API keys\n *\n * @param chainId - The chain ID to get endpoints for\n * @param options - Optional configuration\n * @returns Array of HTTPS RPC URLs that don't require API keys\n *\n * @example\n * ```typescript\n * import { getEndpoints } from 'w3pk/chainlist'\n *\n * // Get Ethereum mainnet RPCs\n * const endpoints = await getEndpoints(1)\n * console.log(endpoints)\n * // [\n * //   \"https://api.mycryptoapi.com/eth\",\n * //   \"https://cloudflare-eth.com\",\n * //   \"https://ethereum-rpc.publicnode.com\",\n * //   ...\n * // ]\n * ```\n */\nexport async function getEndpoints(\n  chainId: number,\n  options?: ChainlistOptions\n): Promise<string[]> {\n  const chains = await getChainsData(options);\n  const chain = chains.find((c) => c.chainId === chainId);\n\n  if (!chain) {\n    return [];\n  }\n\n  return chain.rpc.filter(\n    (rpcUrl) => rpcUrl.startsWith(\"https://\") && !requiresApiKey(rpcUrl)\n  );\n}\n\n/**\n * Get all available chains\n *\n * @param options - Optional configuration\n * @returns Array of all chains\n */\nexport async function getAllChains(\n  options?: ChainlistOptions\n): Promise<Chain[]> {\n  return getChainsData(options);\n}\n\n/**\n * Get chain information by chain ID\n *\n * @param chainId - The chain ID to get information for\n * @param options - Optional configuration\n * @returns Chain information or undefined if not found\n */\nexport async function getChainById(\n  chainId: number,\n  options?: ChainlistOptions\n): Promise<Chain | undefined> {\n  const chains = await getChainsData(options);\n  return chains.find((c) => c.chainId === chainId);\n}\n\n/**\n * Clear the chains data cache\n */\nexport function clearCache(): void {\n  cache = null;\n}\n\n// Export types\nexport type { Chain, ChainlistOptions } from \"./types\";\n"],"mappings":"yaAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,gBAAAE,EAAA,iBAAAC,EAAA,iBAAAC,EAAA,iBAAAC,IAAA,eAAAC,EAAAN,GAMA,IAAMO,EAAqB,sCAQ3B,IAAIC,EAA2B,KAKzBC,EAAmB,CACvB,gBACA,cACA,YACA,wBACA,0BACA,uBACF,EAKA,SAASC,EAAeC,EAAyB,CAC/C,OAAOF,EAAiB,KAAMG,GAAYA,EAAQ,KAAKD,CAAM,CAAC,CAChE,CAKA,eAAeE,EACbC,EAAwBC,EACN,CAClB,IAAMC,EAAW,MAAM,MAAMF,CAAa,EAE1C,GAAI,CAACE,EAAS,GACZ,MAAM,IAAI,MACR,gCAAgCA,EAAS,MAAM,IAAIA,EAAS,UAAU,EACxE,EAGF,OAAO,MAAMA,EAAS,KAAK,CAC7B,CAKA,eAAeC,EAAcC,EAA8C,CACzE,IAAMJ,EAAgBI,GAAS,eAAiBH,EAC1CI,EAAgBD,GAAS,eAAiB,KAC1CE,EAAM,KAAK,IAAI,EAGrB,GAAIZ,GAASY,EAAMZ,EAAM,UAAYW,EACnC,OAAOX,EAAM,KAIf,IAAMa,EAAO,MAAMR,EAAYC,CAAa,EAC5C,OAAAN,EAAQ,CAAE,KAAAa,EAAM,UAAWD,CAAI,EAExBC,CACT,CAwBA,eAAsBC,EACpBC,EACAL,EACmB,CAEnB,IAAMM,GADS,MAAMP,EAAcC,CAAO,GACrB,KAAMO,GAAMA,EAAE,UAAYF,CAAO,EAEtD,OAAKC,EAIEA,EAAM,IAAI,OACdb,GAAWA,EAAO,WAAW,UAAU,GAAK,CAACD,EAAeC,CAAM,CACrE,EALS,CAAC,CAMZ,CAQA,eAAsBe,EACpBR,EACkB,CAClB,OAAOD,EAAcC,CAAO,CAC9B,CASA,eAAsBS,EACpBJ,EACAL,EAC4B,CAE5B,OADe,MAAMD,EAAcC,CAAO,GAC5B,KAAMO,GAAMA,EAAE,UAAYF,CAAO,CACjD,CAKO,SAASK,GAAmB,CACjCpB,EAAQ,IACV","names":["chainlist_exports","__export","clearCache","getAllChains","getChainById","getEndpoints","__toCommonJS","DEFAULT_CHAINS_URL","cache","API_KEY_PATTERNS","requiresApiKey","rpcUrl","pattern","fetchChains","chainsJsonUrl","DEFAULT_CHAINS_URL","response","getChainsData","options","cacheDuration","now","data","getEndpoints","chainId","chain","c","getAllChains","getChainById","clearCache"]}

package/dist/chainlist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/chainlist/index.ts"],"sourcesContent":["/**\n * Chainlist module for fetching RPC endpoints\n */\n\nimport type { Chain, ChainlistOptions } from \"./types\";\n\nconst DEFAULT_CHAINS_URL = \"https://chainid.network/chains.json\";\nconst DEFAULT_CACHE_DURATION = 3600000; // 1 hour\n\ninterface CacheEntry {\n  data: Chain[];\n  timestamp: number;\n}\n\nlet cache: CacheEntry | null = null;\n\n/**\n * Patterns that indicate an RPC URL requires an API key\n */\nconst API_KEY_PATTERNS = [\n  /\\$\\{[\\w_]+\\}/i, // ${INFURA_API_KEY}, ${API_KEY}, etc.\n  /\\{[\\w_]+\\}/i, // {API_KEY}, {INFURA_API_KEY}, etc.\n  /<[\\w_]+>/i, // <API_KEY>, <INFURA_API_KEY>, etc.\n  /YOUR[-_]?API[-_]?KEY/i,\n  /INSERT[-_]?API[-_]?KEY/i,\n  /API[-_]?KEY[-_]?HERE/i,\n];\n\n/**\n * Check if an RPC URL requires an API key\n */\nfunction requiresApiKey(rpcUrl: string): boolean {\n  return API_KEY_PATTERNS.some((pattern) => pattern.test(rpcUrl));\n}\n\n/**\n * Fetch all chains data from chainid.network\n */\nasync function fetchChains(\n  chainsJsonUrl: string = DEFAULT_CHAINS_URL\n): Promise<Chain[]> {\n  const response = await fetch(chainsJsonUrl);\n\n  if (!response.ok) {\n    throw new Error(\n      `Failed to fetch chains data: ${response.status} ${response.statusText}`\n    );\n  }\n\n  return await response.json();\n}\n\n/**\n * Get all chains data with caching\n */\nasync function getChainsData(options?: ChainlistOptions): Promise<Chain[]> {\n  const chainsJsonUrl = options?.chainsJsonUrl ?? DEFAULT_CHAINS_URL;\n  const cacheDuration = options?.cacheDuration ?? DEFAULT_CACHE_DURATION;\n  const now = Date.now();\n\n  // Check if cache is valid\n  if (cache && now - cache.timestamp < cacheDuration) {\n    return cache.data;\n  }\n\n  // Fetch fresh data\n  const data = await fetchChains(chainsJsonUrl);\n  cache = { data, timestamp: now };\n\n  return data;\n}\n\n/**\n * Get RPC endpoints for a specific chain ID, excluding those that require API keys\n *\n * @param chainId - The chain ID to get endpoints for\n * @param options - Optional configuration\n * @returns Array of RPC URLs that don't require API keys\n *\n * @example\n * ```typescript\n * import { getEndpoints } from 'w3pk/chainlist'\n *\n * // Get Ethereum mainnet RPCs\n * const endpoints = await getEndpoints(1)\n * console.log(endpoints)\n * // [\n * //   \"https://api.mycryptoapi.com/eth\",\n * //   \"https://cloudflare-eth.com\",\n * //   \"https://ethereum-rpc.publicnode.com\",\n * //   ...\n * // ]\n * ```\n */\nexport async function getEndpoints(\n  chainId: number,\n  options?: ChainlistOptions\n): Promise<string[]> {\n  const chains = await getChainsData(options);\n  const chain = chains.find((c) => c.chainId === chainId);\n\n  if (!chain) {\n    return [];\n  }\n\n  // Filter out RPC URLs that require API keys and websocket URLs\n  return chain.rpc.filter(\n    (rpcUrl) =>\n      !requiresApiKey(rpcUrl) &&\n      !rpcUrl.startsWith(\"wss://\") &&\n      !rpcUrl.startsWith(\"ws://\")\n  );\n}\n\n/**\n * Get all available chains\n *\n * @param options - Optional configuration\n * @returns Array of all chains\n */\nexport async function getAllChains(\n  options?: ChainlistOptions\n): Promise<Chain[]> {\n  return getChainsData(options);\n}\n\n/**\n * Get chain information by chain ID\n *\n * @param chainId - The chain ID to get information for\n * @param options - Optional configuration\n * @returns Chain information or undefined if not found\n */\nexport async function getChainById(\n  chainId: number,\n  options?: ChainlistOptions\n): Promise<Chain | undefined> {\n  const chains = await getChainsData(options);\n  return chains.find((c) => c.chainId === chainId);\n}\n\n/**\n * Clear the chains data cache\n */\nexport function clearCache(): void {\n  cache = null;\n}\n\n// Export types\nexport type { Chain, ChainlistOptions } from \"./types\";\n"],"mappings":"AAMA,IAAMA,EAAqB,sCAQ3B,IAAIC,EAA2B,KAKzBC,EAAmB,CACvB,gBACA,cACA,YACA,wBACA,0BACA,uBACF,EAKA,SAASC,EAAeC,EAAyB,CAC/C,OAAOF,EAAiB,KAAMG,GAAYA,EAAQ,KAAKD,CAAM,CAAC,CAChE,CAKA,eAAeE,EACbC,EAAwBC,EACN,CAClB,IAAMC,EAAW,MAAM,MAAMF,CAAa,EAE1C,GAAI,CAACE,EAAS,GACZ,MAAM,IAAI,MACR,gCAAgCA,EAAS,MAAM,IAAIA,EAAS,UAAU,EACxE,EAGF,OAAO,MAAMA,EAAS,KAAK,CAC7B,CAKA,eAAeC,EAAcC,EAA8C,CACzE,IAAMJ,EAAgBI,GAAS,eAAiBH,EAC1CI,EAAgBD,GAAS,eAAiB,KAC1CE,EAAM,KAAK,IAAI,EAGrB,GAAIZ,GAASY,EAAMZ,EAAM,UAAYW,EACnC,OAAOX,EAAM,KAIf,IAAMa,EAAO,MAAMR,EAAYC,CAAa,EAC5C,OAAAN,EAAQ,CAAE,KAAAa,EAAM,UAAWD,CAAI,EAExBC,CACT,CAwBA,eAAsBC,EACpBC,EACAL,EACmB,CAEnB,IAAMM,GADS,MAAMP,EAAcC,CAAO,GACrB,KAAMO,GAAMA,EAAE,UAAYF,CAAO,EAEtD,OAAKC,EAKEA,EAAM,IAAI,OACdb,GACC,CAACD,EAAeC,CAAM,GACtB,CAACA,EAAO,WAAW,QAAQ,GAC3B,CAACA,EAAO,WAAW,OAAO,CAC9B,EATS,CAAC,CAUZ,CAQA,eAAsBe,EACpBR,EACkB,CAClB,OAAOD,EAAcC,CAAO,CAC9B,CASA,eAAsBS,EACpBJ,EACAL,EAC4B,CAE5B,OADe,MAAMD,EAAcC,CAAO,GAC5B,KAAMO,GAAMA,EAAE,UAAYF,CAAO,CACjD,CAKO,SAASK,GAAmB,CACjCpB,EAAQ,IACV","names":["DEFAULT_CHAINS_URL","cache","API_KEY_PATTERNS","requiresApiKey","rpcUrl","pattern","fetchChains","chainsJsonUrl","DEFAULT_CHAINS_URL","response","getChainsData","options","cacheDuration","now","data","getEndpoints","chainId","chain","c","getAllChains","getChainById","clearCache"]}
+{"version":3,"sources":["../../src/chainlist/index.ts"],"sourcesContent":["/**\n * Chainlist module for fetching RPC endpoints\n */\n\nimport type { Chain, ChainlistOptions } from \"./types\";\n\nconst DEFAULT_CHAINS_URL = \"https://chainid.network/chains.json\";\nconst DEFAULT_CACHE_DURATION = 3600000; // 1 hour\n\ninterface CacheEntry {\n  data: Chain[];\n  timestamp: number;\n}\n\nlet cache: CacheEntry | null = null;\n\n/**\n * Patterns that indicate an RPC URL requires an API key\n */\nconst API_KEY_PATTERNS = [\n  /\\$\\{[\\w_]+\\}/i, // ${INFURA_API_KEY}, ${API_KEY}, etc.\n  /\\{[\\w_]+\\}/i, // {API_KEY}, {INFURA_API_KEY}, etc.\n  /<[\\w_]+>/i, // <API_KEY>, <INFURA_API_KEY>, etc.\n  /YOUR[-_]?API[-_]?KEY/i,\n  /INSERT[-_]?API[-_]?KEY/i,\n  /API[-_]?KEY[-_]?HERE/i,\n];\n\n/**\n * Check if an RPC URL requires an API key\n */\nfunction requiresApiKey(rpcUrl: string): boolean {\n  return API_KEY_PATTERNS.some((pattern) => pattern.test(rpcUrl));\n}\n\n/**\n * Fetch all chains data from chainid.network\n */\nasync function fetchChains(\n  chainsJsonUrl: string = DEFAULT_CHAINS_URL\n): Promise<Chain[]> {\n  const response = await fetch(chainsJsonUrl);\n\n  if (!response.ok) {\n    throw new Error(\n      `Failed to fetch chains data: ${response.status} ${response.statusText}`\n    );\n  }\n\n  return await response.json();\n}\n\n/**\n * Get all chains data with caching\n */\nasync function getChainsData(options?: ChainlistOptions): Promise<Chain[]> {\n  const chainsJsonUrl = options?.chainsJsonUrl ?? DEFAULT_CHAINS_URL;\n  const cacheDuration = options?.cacheDuration ?? DEFAULT_CACHE_DURATION;\n  const now = Date.now();\n\n  // Check if cache is valid\n  if (cache && now - cache.timestamp < cacheDuration) {\n    return cache.data;\n  }\n\n  // Fetch fresh data\n  const data = await fetchChains(chainsJsonUrl);\n  cache = { data, timestamp: now };\n\n  return data;\n}\n\n/**\n * Get the HTTPS RPC endpoints for a specific chain ID, excluding those that require API keys\n *\n * @param chainId - The chain ID to get endpoints for\n * @param options - Optional configuration\n * @returns Array of HTTPS RPC URLs that don't require API keys\n *\n * @example\n * ```typescript\n * import { getEndpoints } from 'w3pk/chainlist'\n *\n * // Get Ethereum mainnet RPCs\n * const endpoints = await getEndpoints(1)\n * console.log(endpoints)\n * // [\n * //   \"https://api.mycryptoapi.com/eth\",\n * //   \"https://cloudflare-eth.com\",\n * //   \"https://ethereum-rpc.publicnode.com\",\n * //   ...\n * // ]\n * ```\n */\nexport async function getEndpoints(\n  chainId: number,\n  options?: ChainlistOptions\n): Promise<string[]> {\n  const chains = await getChainsData(options);\n  const chain = chains.find((c) => c.chainId === chainId);\n\n  if (!chain) {\n    return [];\n  }\n\n  return chain.rpc.filter(\n    (rpcUrl) => rpcUrl.startsWith(\"https://\") && !requiresApiKey(rpcUrl)\n  );\n}\n\n/**\n * Get all available chains\n *\n * @param options - Optional configuration\n * @returns Array of all chains\n */\nexport async function getAllChains(\n  options?: ChainlistOptions\n): Promise<Chain[]> {\n  return getChainsData(options);\n}\n\n/**\n * Get chain information by chain ID\n *\n * @param chainId - The chain ID to get information for\n * @param options - Optional configuration\n * @returns Chain information or undefined if not found\n */\nexport async function getChainById(\n  chainId: number,\n  options?: ChainlistOptions\n): Promise<Chain | undefined> {\n  const chains = await getChainsData(options);\n  return chains.find((c) => c.chainId === chainId);\n}\n\n/**\n * Clear the chains data cache\n */\nexport function clearCache(): void {\n  cache = null;\n}\n\n// Export types\nexport type { Chain, ChainlistOptions } from \"./types\";\n"],"mappings":"AAMA,IAAMA,EAAqB,sCAQ3B,IAAIC,EAA2B,KAKzBC,EAAmB,CACvB,gBACA,cACA,YACA,wBACA,0BACA,uBACF,EAKA,SAASC,EAAeC,EAAyB,CAC/C,OAAOF,EAAiB,KAAMG,GAAYA,EAAQ,KAAKD,CAAM,CAAC,CAChE,CAKA,eAAeE,EACbC,EAAwBC,EACN,CAClB,IAAMC,EAAW,MAAM,MAAMF,CAAa,EAE1C,GAAI,CAACE,EAAS,GACZ,MAAM,IAAI,MACR,gCAAgCA,EAAS,MAAM,IAAIA,EAAS,UAAU,EACxE,EAGF,OAAO,MAAMA,EAAS,KAAK,CAC7B,CAKA,eAAeC,EAAcC,EAA8C,CACzE,IAAMJ,EAAgBI,GAAS,eAAiBH,EAC1CI,EAAgBD,GAAS,eAAiB,KAC1CE,EAAM,KAAK,IAAI,EAGrB,GAAIZ,GAASY,EAAMZ,EAAM,UAAYW,EACnC,OAAOX,EAAM,KAIf,IAAMa,EAAO,MAAMR,EAAYC,CAAa,EAC5C,OAAAN,EAAQ,CAAE,KAAAa,EAAM,UAAWD,CAAI,EAExBC,CACT,CAwBA,eAAsBC,EACpBC,EACAL,EACmB,CAEnB,IAAMM,GADS,MAAMP,EAAcC,CAAO,GACrB,KAAMO,GAAMA,EAAE,UAAYF,CAAO,EAEtD,OAAKC,EAIEA,EAAM,IAAI,OACdb,GAAWA,EAAO,WAAW,UAAU,GAAK,CAACD,EAAeC,CAAM,CACrE,EALS,CAAC,CAMZ,CAQA,eAAsBe,EACpBR,EACkB,CAClB,OAAOD,EAAcC,CAAO,CAC9B,CASA,eAAsBS,EACpBJ,EACAL,EAC4B,CAE5B,OADe,MAAMD,EAAcC,CAAO,GAC5B,KAAMO,GAAMA,EAAE,UAAYF,CAAO,CACjD,CAKO,SAASK,GAAmB,CACjCpB,EAAQ,IACV","names":["DEFAULT_CHAINS_URL","cache","API_KEY_PATTERNS","requiresApiKey","rpcUrl","pattern","fetchChains","chainsJsonUrl","DEFAULT_CHAINS_URL","response","getChainsData","options","cacheDuration","now","data","getEndpoints","chainId","chain","c","getAllChains","getChainById","clearCache"]}