wative-core 2.2.1 → 2.4.0

package/dist/{svm-DieFbh9k.d.ts → svm-B_c0L-rJ.d.cts}

@@ -1,4 +1,4 @@
-import { c as Address, F as SvmTxBuildParams, D as SvmTransaction } from './workspace-CamTHxso.js';
+import { c as Address, G as SvmTxBuildParams, F as SvmTransaction } from './workspace-DdaY7sWa.cjs';
 
 interface SvmInstruction {
     readonly programId: string;
@@ -56,4 +56,4 @@ declare class Program {
     call(from: Address, instructionName: string, args: Readonly<Record<string, unknown>>, accounts: Readonly<Record<string, string>>, opts?: Partial<SvmTxBuildParams>): SvmTransaction;
 }
 
-export { ASSOCIATED_TOKEN_PROGRAM_ID as A, NATIVE_SOL_MINT as N, Program as P, type SvmInstruction as S, TOKEN_2022_PROGRAM_ID as T, TOKEN_PROGRAM_ID as a, splTokenEncodeInstruction as s };
+export { ASSOCIATED_TOKEN_PROGRAM_ID as A, NATIVE_SOL_MINT as N, Program as P, type SvmInstruction as S, TOKEN_2022_PROGRAM_ID as T, type SplTokenAccountSet as a, type SplTokenArgs as b, TOKEN_PROGRAM_ID as c, splTokenEncodeInstruction as s };

package/dist/{svm-CCzqNAWM.d.cts → svm-Ca4Xyw0Y.d.ts}

@@ -1,4 +1,4 @@
-import { c as Address, F as SvmTxBuildParams, D as SvmTransaction } from './workspace-CamTHxso.cjs';
+import { c as Address, G as SvmTxBuildParams, F as SvmTransaction } from './workspace-DdaY7sWa.js';
 
 interface SvmInstruction {
     readonly programId: string;
@@ -56,4 +56,4 @@ declare class Program {
     call(from: Address, instructionName: string, args: Readonly<Record<string, unknown>>, accounts: Readonly<Record<string, string>>, opts?: Partial<SvmTxBuildParams>): SvmTransaction;
 }
 
-export { ASSOCIATED_TOKEN_PROGRAM_ID as A, NATIVE_SOL_MINT as N, Program as P, type SvmInstruction as S, TOKEN_2022_PROGRAM_ID as T, TOKEN_PROGRAM_ID as a, splTokenEncodeInstruction as s };
+export { ASSOCIATED_TOKEN_PROGRAM_ID as A, NATIVE_SOL_MINT as N, Program as P, type SvmInstruction as S, TOKEN_2022_PROGRAM_ID as T, type SplTokenAccountSet as a, type SplTokenArgs as b, TOKEN_PROGRAM_ID as c, splTokenEncodeInstruction as s };

package/dist/{workspace-CamTHxso.d.cts → workspace-DdaY7sWa.d.cts}

@@ -128,6 +128,8 @@ interface RecordInit<T> {
     readonly password?: string;
     readonly decrypt?: (ciphertext: Uint8Array, password: string) => Uint8Array;
     readonly persist?: (value: T, password: string) => Promise<void>;
+    
+    readonly requireLiveSession?: () => void;
 }
 declare class Record$1<T> {
     #private;
@@ -163,11 +165,13 @@ declare abstract class Provider {
     
     initialize(): Promise<void>;
     
-    passwordTanren(userInputPassword: string, salt: Uint8Array): Uint8Array;
+    protected _hasRawAccountData(): Promise<boolean>;
     abstract close(): Promise<void>;
 }
 
-type WativeErrorCode = "WORKSPACE_LOCKED" | "ACCOUNT_LOCKED" | "RECORD_LOCKED" | "BAD_PASSWORD" | "WEAK_PASSWORD" | "RECORD_NOT_FOUND" | "PROVIDER_IO" | "PERMISSION_DENIED" | "DISK_FULL" | "PARAMETER_ERROR" | "DECRYPT_FAILED" | "ENCRYPT_FAILED" | "ALGORITHM_IRREVERSIBLE" | "INVALID_MNEMONIC" | "INVALID_PRIVATE_KEY" | "UNSUPPORTED_NETWORK" | "TX_BUILD_FAILED" | "TX_SIGN_FAILED" | "TX_SUBMIT_FAILED" | "TX_TIMEOUT" | "TX_DROPPED" | "RPC_UNREACHABLE" | "STORAGE_NOT_DURABLE" | "UNSUPPORTED_OP";
+type WativeErrorCode = "WORKSPACE_LOCKED" | "ACCOUNT_LOCKED" | "RECORD_LOCKED" | "BAD_PASSWORD" | "WEAK_PASSWORD" | "RECORD_NOT_FOUND" | "PROVIDER_IO" | "PERMISSION_DENIED" | "DISK_FULL" | "PARAMETER_ERROR" | "DECRYPT_FAILED" | "ENCRYPT_FAILED" | "ALGORITHM_IRREVERSIBLE" | "INVALID_MNEMONIC" | "INVALID_PRIVATE_KEY" | "UNSUPPORTED_NETWORK" | "TX_BUILD_FAILED" | "TX_SIGN_FAILED" | "TX_SUBMIT_FAILED" | "TX_TIMEOUT" | "TX_DROPPED" | "TX_ABORTED" | "RPC_UNREACHABLE"
+
+ | "RPC_REJECTED" | "STORAGE_NOT_DURABLE" | "UNSUPPORTED_OP";
 interface WativeErrorOpts {
     readonly cause?: unknown;
     readonly details?: Record<string, unknown>;
@@ -179,7 +183,7 @@ declare class WativeError extends Error {
     constructor(code: WativeErrorCode, message: string, opts?: WativeErrorOpts);
 }
 
-type TransactionStatus = "draft" | "signed" | "submitted" | "pending" | "mined" | "confirmed" | "finalized" | "failed" | "dropped" | "timeout";
+type TransactionStatus = "draft" | "signed" | "submitted" | "pending" | "mined" | "confirmed" | "finalized" | "failed" | "dropped" | "aborted" | "timeout";
 
 declare const EvmTxType: {
     readonly Legacy: 0;
@@ -592,9 +596,18 @@ declare class Account {
     
     _persistInternal(): Promise<void>;
     
+    
+    _isAttached(): boolean;
+    _setAttached(attached: boolean): void;
+    
     _dropWallet(wallet: Wallet): Promise<void>;
     
     _enqueueMutation<T>(fn: () => Promise<T>): Promise<T>;
+    
+    _restoreUnlockPassword(pwd: string | null): void;
+    
+    
+    _wipeWalletKeys(...wallets: Wallet[]): void;
 }
 interface AccountCollection extends ReadonlyArray<Account> {
     create(displayName: string, password: string, secret: string, defaultNetwork?: NetworkLike, opts?: {
@@ -701,9 +714,15 @@ declare class Workspace {
     accounts: AccountCollection;
     networks: NetworkCollection;
     
+    _registerLiveAccount(account: Account): void;
+    
+    _releaseAccount(account: Account): void;
+    
     _enqueueNetworkMutation<T>(fn: () => Promise<T>): Promise<T>;
     private constructor();
     get locked(): boolean;
+    
+    get damagedAccountSlugs(): ReadonlyArray<string>;
     get rootDescriptor(): string;
     
     static open(providerOrRoot?: Provider | string | OpenOptions, password?: string, create?: boolean): Promise<Workspace>;
@@ -734,4 +753,4 @@ declare class Workspace {
     } | null;
 }
 
-export { Account as A, type SvmAddress as B, type ChainId as C, SvmTransaction as D, type EvmAddress as E, type SvmTxBuildParams as F, type TransactionReceipt as G, type TransactionStateChange as H, type TransactionStatus as I, type TransactionTracker as J, type WalletCollection as K, type LogLevel as L, WativeError as M, Network as N, type WativeErrorCode as O, Provider as P, type WativeErrorOpts as Q, Record$1 as R, type Settling as S, type Transaction as T, Workspace as U, type WorkspaceConfig as V, Wallet as W, newMnemonic as X, type ContainerState as Y, type AccountCollection as a, type AccountOrgType as b, Address as c, Asset as d, type AssetBalance as e, type AssetCollection as f, type AssetId as g, type AssetInitObject as h, type ChainVM as i, ConsoleSink as j, type EvmRawTx as k, EvmTransaction as l, type EvmTxBuildParams as m, EvmTxType as n, type LogRecord as o, type LogSink as p, Logger as q, type LoggerConfig as r, type NetworkCollection as s, type NetworkInit as t, type NetworkLike as u, type RecordInit as v, type RecordType as w, type SimulationResult as x, type SinkConfig as y, type Slug as z };
+export { Account as A, type Slug as B, type ChainId as C, type SvmAddress as D, type EvmAddress as E, SvmTransaction as F, type SvmTxBuildParams as G, type TransactionReceipt as H, type TransactionStateChange as I, type TransactionStatus as J, type TransactionTracker as K, type LogLevel as L, type WalletCollection as M, Network as N, type OpenOptions as O, Provider as P, WativeError as Q, Record$1 as R, type Settling as S, type Transaction as T, type WativeErrorCode as U, type WativeErrorOpts as V, Wallet as W, Workspace as X, type WorkspaceConfig as Y, newMnemonic as Z, type AccountCollection as a, type AccountOrgType as b, Address as c, Asset as d, type AssetBalance as e, type AssetCollection as f, type AssetId as g, type AssetInitObject as h, type ChainVM as i, ConsoleSink as j, type ContainerState as k, type EvmRawTx as l, EvmTransaction as m, type EvmTxBuildParams as n, EvmTxType as o, type LogRecord as p, type LogSink as q, Logger as r, type LoggerConfig as s, type NetworkCollection as t, type NetworkInit as u, type NetworkLike as v, type RecordInit as w, type RecordType as x, type SimulationResult as y, type SinkConfig as z };

package/dist/{workspace-CamTHxso.d.ts → workspace-DdaY7sWa.d.ts}

@@ -128,6 +128,8 @@ interface RecordInit<T> {
     readonly password?: string;
     readonly decrypt?: (ciphertext: Uint8Array, password: string) => Uint8Array;
     readonly persist?: (value: T, password: string) => Promise<void>;
+    
+    readonly requireLiveSession?: () => void;
 }
 declare class Record$1<T> {
     #private;
@@ -163,11 +165,13 @@ declare abstract class Provider {
     
     initialize(): Promise<void>;
     
-    passwordTanren(userInputPassword: string, salt: Uint8Array): Uint8Array;
+    protected _hasRawAccountData(): Promise<boolean>;
     abstract close(): Promise<void>;
 }
 
-type WativeErrorCode = "WORKSPACE_LOCKED" | "ACCOUNT_LOCKED" | "RECORD_LOCKED" | "BAD_PASSWORD" | "WEAK_PASSWORD" | "RECORD_NOT_FOUND" | "PROVIDER_IO" | "PERMISSION_DENIED" | "DISK_FULL" | "PARAMETER_ERROR" | "DECRYPT_FAILED" | "ENCRYPT_FAILED" | "ALGORITHM_IRREVERSIBLE" | "INVALID_MNEMONIC" | "INVALID_PRIVATE_KEY" | "UNSUPPORTED_NETWORK" | "TX_BUILD_FAILED" | "TX_SIGN_FAILED" | "TX_SUBMIT_FAILED" | "TX_TIMEOUT" | "TX_DROPPED" | "RPC_UNREACHABLE" | "STORAGE_NOT_DURABLE" | "UNSUPPORTED_OP";
+type WativeErrorCode = "WORKSPACE_LOCKED" | "ACCOUNT_LOCKED" | "RECORD_LOCKED" | "BAD_PASSWORD" | "WEAK_PASSWORD" | "RECORD_NOT_FOUND" | "PROVIDER_IO" | "PERMISSION_DENIED" | "DISK_FULL" | "PARAMETER_ERROR" | "DECRYPT_FAILED" | "ENCRYPT_FAILED" | "ALGORITHM_IRREVERSIBLE" | "INVALID_MNEMONIC" | "INVALID_PRIVATE_KEY" | "UNSUPPORTED_NETWORK" | "TX_BUILD_FAILED" | "TX_SIGN_FAILED" | "TX_SUBMIT_FAILED" | "TX_TIMEOUT" | "TX_DROPPED" | "TX_ABORTED" | "RPC_UNREACHABLE"
+
+ | "RPC_REJECTED" | "STORAGE_NOT_DURABLE" | "UNSUPPORTED_OP";
 interface WativeErrorOpts {
     readonly cause?: unknown;
     readonly details?: Record<string, unknown>;
@@ -179,7 +183,7 @@ declare class WativeError extends Error {
     constructor(code: WativeErrorCode, message: string, opts?: WativeErrorOpts);
 }
 
-type TransactionStatus = "draft" | "signed" | "submitted" | "pending" | "mined" | "confirmed" | "finalized" | "failed" | "dropped" | "timeout";
+type TransactionStatus = "draft" | "signed" | "submitted" | "pending" | "mined" | "confirmed" | "finalized" | "failed" | "dropped" | "aborted" | "timeout";
 
 declare const EvmTxType: {
     readonly Legacy: 0;
@@ -592,9 +596,18 @@ declare class Account {
     
     _persistInternal(): Promise<void>;
     
+    
+    _isAttached(): boolean;
+    _setAttached(attached: boolean): void;
+    
     _dropWallet(wallet: Wallet): Promise<void>;
     
     _enqueueMutation<T>(fn: () => Promise<T>): Promise<T>;
+    
+    _restoreUnlockPassword(pwd: string | null): void;
+    
+    
+    _wipeWalletKeys(...wallets: Wallet[]): void;
 }
 interface AccountCollection extends ReadonlyArray<Account> {
     create(displayName: string, password: string, secret: string, defaultNetwork?: NetworkLike, opts?: {
@@ -701,9 +714,15 @@ declare class Workspace {
     accounts: AccountCollection;
     networks: NetworkCollection;
     
+    _registerLiveAccount(account: Account): void;
+    
+    _releaseAccount(account: Account): void;
+    
     _enqueueNetworkMutation<T>(fn: () => Promise<T>): Promise<T>;
     private constructor();
     get locked(): boolean;
+    
+    get damagedAccountSlugs(): ReadonlyArray<string>;
     get rootDescriptor(): string;
     
     static open(providerOrRoot?: Provider | string | OpenOptions, password?: string, create?: boolean): Promise<Workspace>;
@@ -734,4 +753,4 @@ declare class Workspace {
     } | null;
 }
 
-export { Account as A, type SvmAddress as B, type ChainId as C, SvmTransaction as D, type EvmAddress as E, type SvmTxBuildParams as F, type TransactionReceipt as G, type TransactionStateChange as H, type TransactionStatus as I, type TransactionTracker as J, type WalletCollection as K, type LogLevel as L, WativeError as M, Network as N, type WativeErrorCode as O, Provider as P, type WativeErrorOpts as Q, Record$1 as R, type Settling as S, type Transaction as T, Workspace as U, type WorkspaceConfig as V, Wallet as W, newMnemonic as X, type ContainerState as Y, type AccountCollection as a, type AccountOrgType as b, Address as c, Asset as d, type AssetBalance as e, type AssetCollection as f, type AssetId as g, type AssetInitObject as h, type ChainVM as i, ConsoleSink as j, type EvmRawTx as k, EvmTransaction as l, type EvmTxBuildParams as m, EvmTxType as n, type LogRecord as o, type LogSink as p, Logger as q, type LoggerConfig as r, type NetworkCollection as s, type NetworkInit as t, type NetworkLike as u, type RecordInit as v, type RecordType as w, type SimulationResult as x, type SinkConfig as y, type Slug as z };
+export { Account as A, type Slug as B, type ChainId as C, type SvmAddress as D, type EvmAddress as E, SvmTransaction as F, type SvmTxBuildParams as G, type TransactionReceipt as H, type TransactionStateChange as I, type TransactionStatus as J, type TransactionTracker as K, type LogLevel as L, type WalletCollection as M, Network as N, type OpenOptions as O, Provider as P, WativeError as Q, Record$1 as R, type Settling as S, type Transaction as T, type WativeErrorCode as U, type WativeErrorOpts as V, Wallet as W, Workspace as X, type WorkspaceConfig as Y, newMnemonic as Z, type AccountCollection as a, type AccountOrgType as b, Address as c, Asset as d, type AssetBalance as e, type AssetCollection as f, type AssetId as g, type AssetInitObject as h, type ChainVM as i, ConsoleSink as j, type ContainerState as k, type EvmRawTx as l, EvmTransaction as m, type EvmTxBuildParams as n, EvmTxType as o, type LogRecord as p, type LogSink as q, Logger as r, type LoggerConfig as s, type NetworkCollection as t, type NetworkInit as u, type NetworkLike as v, type RecordInit as w, type RecordType as x, type SimulationResult as y, type SinkConfig as z };

package/examples/15-package-resolution.test.cjs

@@ -11,7 +11,16 @@
 const test = require("node:test");
 const assert = require("node:assert");
 
-const SUBPATHS = ["wative-core", "wative-core/artifacts/evm", "wative-core/artifacts/svm"];
+// "wative-core/node" is where HybridProviderV3 lives after the breaking
+// refactor that folded NodeHybridProvider into it. It was missing here, so the
+// subpath carrying the release's headline feature was the one subpath nothing
+// resolved.
+const SUBPATHS = [
+  "wative-core",
+  "wative-core/node",
+  "wative-core/artifacts/evm",
+  "wative-core/artifacts/svm",
+];
 
 test("every declared subpath resolves by bare name under require(), to the CJS build", () => {
   for (const specifier of SUBPATHS) {
@@ -25,6 +34,183 @@ test("every declared subpath resolves by bare name under require(), to the CJS b
   }
 });
 
+// A type used in a public signature but not exported is invisible to a
+// TypeScript consumer, who then cannot name what the method returns. That is not
+// visible from JavaScript, so it is asserted against the emitted declarations.
+//
+// Two things this used to get wrong, both of which let a real regression ship:
+//
+//   1. It opened ONLY `dist/index.node.d.cts` — the node+require artifact. The
+//      root subpath emits THREE declaration files (browser/default, node+import,
+//      node+require), and `ContainerState` is the return type of the universal
+//      `Provider.inspectContainer()`. Deleting its export from the browser
+//      artifact alone left this green while every bundler consumer got TS2305.
+//      The artifact list is now derived from the `exports` map itself, so a new
+//      subpath or condition is covered the day it is added rather than the day
+//      someone remembers.
+//
+//   2. It asserted `\bName\b` — bare presence anywhere in the file. A name also
+//      appears in an import specifier, in another type's signature, or in a
+//      comment, so the assertion held whether or not the name was EXPORTED. It
+//      now parses the export clauses and checks membership in the exported set.
+// Keyed by ARTIFACT, not by subpath: the browser and node root builds export
+// legitimately different sets (the node one adds the filesystem provider), so a
+// per-subpath map cannot express "required here, absent there" and would either
+// under-check the node build or falsely fail the browser one.
+//
+// ⚠️ This list is HAND-MAINTAINED, and that is the remaining weakness. The
+// checks below make the ORACLE strong — every declared artifact, and exported
+// rather than merely mentioned — but the INPUT is still a list someone has to
+// remember to extend. `OpenOptions` and `PasswordCheckContext` were both TS2305
+// in a shipped release precisely because nothing derived this list from the
+// public signatures. Deriving it (a referenced-but-not-exported set difference
+// over the emitted declarations) is the real fix and is not done here.
+const EXPECTED_EXPORTS = {
+  "./dist/index.d.ts": ["ContainerState", "Argon2BackendInfo", "OpenOptions", "PasswordCheckContext"],
+  "./dist/index.node.d.ts": [
+    "ContainerState",
+    "Argon2BackendInfo",
+    "OpenOptions",
+    "PasswordCheckContext",
+    // The node root re-exports the filesystem provider surface. `exports.test.ts`
+    // pins this as a deliberate contract, and `18-envelope-v3.test.cjs` reaches
+    // `HybridProviderV3` through the ROOT specifier, not the ./node subpath.
+    "HybridProviderV3",
+    "HybridProvider",
+    "FileSink",
+    "FileSinkOptions",
+  ],
+  "./dist/index.node.d.cts": [
+    "ContainerState",
+    "Argon2BackendInfo",
+    "OpenOptions",
+    "PasswordCheckContext",
+    "HybridProviderV3",
+    "HybridProvider",
+    "FileSink",
+    "FileSinkOptions",
+  ],
+  "./dist/node/index.d.ts": ["HybridProviderV3", "HybridProvider", "FileSink", "FileSinkOptions"],
+  "./dist/node/index.d.cts": ["HybridProviderV3", "HybridProvider", "FileSink", "FileSinkOptions"],
+};
+
+// The `exports` map declares 10 `types` entries across 9 distinct files
+// (`./dist/index.d.ts` is reached by both the `browser` and `default`
+// conditions). Both totals are asserted EXACTLY rather than as floors: a floor
+// tolerates a gap, so deleting `exports["./node"].require.types` would drop the
+// CJS declarations for the subpath carrying the headline feature and still pass.
+// 32 = 4 (index.d.ts, counted twice — browser and default both resolve to it)
+//    + 8 + 8 (the two node root artifacts) + 4 + 4 (the ./node subpath pair).
+// The artifacts/{evm,svm} pairs contribute none; they are checked for existence
+// and non-emptiness only.
+const EXPECTED_ARTIFACTS = 10;
+const EXPECTED_ASSERTIONS = 32;
+
+// tsup re-exports rather than re-declares: `export { k as ContainerState } from
+// './chunk.cjs'`. The public name is what follows `as`, or the whole entry when
+// there is no alias. Direct `export declare class X` forms are collected too.
+//
+// Two shapes the two builds do NOT agree on, both of which must be handled or
+// the check reports a false regression: the browser artifact writes inline type
+// modifiers (`type Argon2BackendInfo`) where the node artifact writes the bare
+// name, and a name colliding with a lib type is emitted aliased (`Record$1 as
+// Record`). Strip the modifier first, then resolve the alias.
+function exportedNames(dts) {
+  const names = new Set();
+  for (const m of dts.matchAll(/export\s*(?:type\s*)?\{([^}]*)\}/g)) {
+    for (const entry of m[1].split(",")) {
+      const trimmed = entry.trim().replace(/^type\s+/, "");
+      if (!trimmed) continue;
+      const parts = trimmed.split(/\s+as\s+/);
+      names.add(parts[parts.length - 1].trim());
+    }
+  }
+  for (const m of dts.matchAll(
+    /export\s+(?:declare\s+)?(?:abstract\s+)?(?:class|interface|type|const|function|enum)\s+([A-Za-z_$][\w$]*)/g,
+  )) {
+    names.add(m[1]);
+  }
+  return names;
+}
+
+// Every `types` file the exports map can resolve, as [subpath, condition, file].
+function declaredTypeArtifacts(exportsMap) {
+  const out = [];
+  const walk = (subpath, node, condition) => {
+    if (typeof node === "string") return;
+    for (const [key, value] of Object.entries(node)) {
+      if (key === "types" && typeof value === "string") {
+        out.push({ subpath, condition: condition || "default", file: value });
+      } else if (value && typeof value === "object") {
+        walk(subpath, value, condition ? `${condition}.${key}` : key);
+      }
+    }
+  };
+  for (const [subpath, node] of Object.entries(exportsMap)) walk(subpath, node, "");
+  return out;
+}
+
+test("every type named by a public signature is exported from every artifact that declares it", () => {
+  const fs = require("node:fs");
+  const path = require("node:path");
+  // Resolve the package under test by NAME, not by `__dirname/..`. This file
+  // runs in two layouts: in the release checkout (examples/ beside dist/, where
+  // `..` is the package root) and copied FLAT into a scratch consumer dir that
+  // installed the tarball (where `..` is the scratch dir's parent and holds no
+  // package.json at all). The second layout is what CI's "published" job uses,
+  // and `__dirname/..` made this test throw ENOENT there — so that job has
+  // never been able to pass. The exports map declares "./package.json", so this
+  // resolves in both.
+  const root = path.dirname(require.resolve("wative-core/package.json"));
+  const pkg = JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8"));
+  const artifacts = declaredTypeArtifacts(pkg.exports);
+
+  // If the exports map stops declaring types, this test would otherwise pass by
+  // checking nothing at all — the same vacuity it exists to prevent.
+  assert.strictEqual(
+    artifacts.length,
+    EXPECTED_ARTIFACTS,
+    `the exports map declares ${artifacts.length} types entries, expected exactly ${EXPECTED_ARTIFACTS}. ` +
+      `A condition lost its "types" (consumers fall back to "could not find a declaration file"), ` +
+      `or a subpath was added and needs an entry in EXPECTED_EXPORTS.`,
+  );
+
+  // Counting `types` entries alone cannot see a subpath that declares NONE: the
+  // total is unchanged, so the exact-count assertion above passes while the new
+  // subpath ships with no declarations at all and its consumers get "could not
+  // find a declaration file". Every subpath with conditions must produce at
+  // least one.
+  for (const [subpath, node] of Object.entries(pkg.exports)) {
+    if (typeof node === "string") continue; // "./package.json" — a file, not a type surface
+    assert.ok(
+      artifacts.some((a) => a.subpath === subpath),
+      `subpath "${subpath}" declares no "types" under any condition — TypeScript consumers get no declarations for it`,
+    );
+  }
+
+  let checked = 0;
+  for (const { subpath, condition, file } of artifacts) {
+    const abs = path.join(root, file);
+    assert.ok(fs.existsSync(abs), `${subpath} (${condition}) declares types "${file}", which does not exist`);
+    const names = exportedNames(fs.readFileSync(abs, "utf8"));
+    assert.ok(names.size > 0, `${file} exports nothing — the declaration emit is empty or malformed`);
+    for (const name of EXPECTED_EXPORTS[file] || []) {
+      assert.ok(
+        names.has(name),
+        `${name} appears in a public signature of "${subpath}" but is not exported from ${file}`,
+      );
+      checked++;
+    }
+  }
+  // Exact, for the same reason as the artifact count: a floor here would let a
+  // whole artifact's expectations be deleted without the suite noticing.
+  assert.strictEqual(
+    checked,
+    EXPECTED_ASSERTIONS,
+    `made ${checked} name/artifact assertions, expected exactly ${EXPECTED_ASSERTIONS}`,
+  );
+});
+
 test("bare-name require() exposes the documented entry points", () => {
   const core = require("wative-core");
   for (const name of ["Workspace", "Network", "Asset", "Provider", "WativeError"]) {

package/examples/18-envelope-v3.test.cjs

@@ -0,0 +1,106 @@
+// 18 — HybridProviderV3 and the v3 envelope, through the published package.
+//
+// This file exists because the publish gate could not see the release's
+// headline feature at all. Every other example opens a workspace with
+// `Workspace.open({ path })`, which uses the default provider and writes v2, so
+// disabling v3 in all four built bundles — making `HybridProviderV3` silently
+// write v2 records — passed the entire 54-test suite. The same mutation fails
+// the source suite loudly, so the gap was exactly at the packaging boundary,
+// which is the one thing this gate exists to cover.
+//
+// The subpath `wative-core/node` also re-exports the class; that resolution is
+// covered by example 15.
+
+const test = require("node:test");
+const assert = require("node:assert");
+const { mkdtempSync, readFileSync, readdirSync, statSync } = require("node:fs");
+const { tmpdir } = require("node:os");
+const { join } = require("node:path");
+
+// Both from the SAME entry point, which is what the README documents and what
+// the cross-entry-point guard enforces: each entry is its own bundle with its
+// own class identities, so a Workspace from one cannot accept a provider from
+// the other. `wative-core/node` re-exports the provider classes but not
+// Workspace, so pairing them comes from here.
+const { Workspace, HybridProviderV3 } = require("wative-core");
+
+const MNEMONIC =
+  "abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about";
+const PW = "v3-example-password";
+
+/** Envelope version byte of every record under `root`. */
+function versions(root) {
+  const out = {};
+  const walk = (dir, prefix) => {
+    for (const name of readdirSync(dir)) {
+      const p = join(dir, name);
+      if (statSync(p).isDirectory()) walk(p, `${prefix}${name}/`);
+      else out[`${prefix}${name}`] = readFileSync(p)[0];
+    }
+  };
+  walk(root, "");
+  return out;
+}
+
+test("HybridProviderV3 writes v3 records, and they all share one salt", async () => {
+  const root = mkdtempSync(join(tmpdir(), "wative-v3-example-"));
+  const ws = await Workspace.open(new HybridProviderV3(root), PW, true);
+  const acc = await ws.accounts.create("V3 Desk", PW, MNEMONIC);
+  await acc.deriveWallets(3);
+  await ws.lock();
+
+  const byFile = versions(root);
+  const names = Object.keys(byFile);
+  assert.ok(names.length >= 5, `expected several records, got ${names.length}`);
+  for (const name of names) {
+    assert.strictEqual(
+      byFile[name],
+      3,
+      `${name} is a v${byFile[name]} envelope — HybridProviderV3 silently degraded to v2`,
+    );
+  }
+
+  // The container salt is the 16 bytes after the version byte. v3's whole point
+  // is that every record shares it, which is what collapses N derivations into
+  // one; v2 mints a fresh salt per record, so this is also what distinguishes
+  // the two formats beyond the version byte alone.
+  const saltOf = (rel) => readFileSync(join(root, rel)).subarray(1, 17).toString("hex");
+  const salts = new Set(names.map(saltOf));
+  assert.strictEqual(salts.size, 1, `expected one container salt, got ${salts.size}`);
+});
+
+test("a v3 container reopens and yields the original secrets", async () => {
+  const root = mkdtempSync(join(tmpdir(), "wative-v3-example-"));
+  let ws = await Workspace.open(new HybridProviderV3(root), PW, true);
+  const created = await ws.accounts.create("V3 Desk", PW, MNEMONIC);
+  await created.deriveWallets(2);
+  const expected = created.wallets.map((w) => w.addresses.map((a) => a.publicKey).join(","));
+  await ws.lock();
+
+  ws = await Workspace.open(new HybridProviderV3(root), PW);
+  const acc = ws.accounts.bySlug(created.slug);
+  assert.ok(acc, "account did not survive the reopen");
+  await acc.tryUnlock(PW);
+  assert.strictEqual(acc.dumpMnemonic(), MNEMONIC);
+  assert.deepStrictEqual(
+    acc.wallets.map((w) => w.addresses.map((a) => a.publicKey).join(",")),
+    expected,
+  );
+  await ws.lock();
+});
+
+test("a wrong password is rejected, and does not damage the container", async () => {
+  const root = mkdtempSync(join(tmpdir(), "wative-v3-example-"));
+  let ws = await Workspace.open(new HybridProviderV3(root), PW, true);
+  await ws.accounts.create("V3 Desk", PW, MNEMONIC);
+  await ws.lock();
+
+  await assert.rejects(
+    () => Workspace.open(new HybridProviderV3(root), "not-the-password"),
+    (e) => e.code === "BAD_PASSWORD",
+  );
+
+  ws = await Workspace.open(new HybridProviderV3(root), PW);
+  assert.strictEqual(ws.accounts.length, 1);
+  await ws.lock();
+});

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "wative-core",
-  "version": "2.2.1",
-  "description": "Hyperscale crypto wallet management library \u2014 multi-workspace, multi-chain, originally designed for on-chain market makers",
+  "version": "2.4.0",
+  "description": "Hyperscale crypto wallet management library — multi-workspace, multi-chain, originally designed for on-chain market makers",
   "type": "module",
   "main": "./dist/index.node.cjs",
   "module": "./dist/index.node.js",
@@ -100,5 +100,8 @@
     "micro-ed25519-hdkey": "0.1.2",
     "tslib": "2.6.2",
     "tweetnacl": "1.0.3"
+  },
+  "optionalDependencies": {
+    "@node-rs/argon2": "^2.0.2"
   }
-}
+}