Skip to content

feat(awm): bump SDK betas and adapt to async encrypt/decrypt #258

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
zahin-mohammad merged 3 commits into from
Jul 23, 2026
Merged

feat(awm): bump SDK betas and adapt to async encrypt/decrypt #258

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
0b91a94
chore(gha): sync npm overrides in bump-version script
zahin-mohammad Jul 23, 2026
ca24992
feat(awm): bump SDK betas and adapt to async encrypt/decrypt
zahin-mohammad Jul 23, 2026
3219108
ci: pin transitive CVE fixes via npm overrides
zahin-mohammad Jul 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12,214 changes: 1,808 additions & 10,406 deletions package-lock.json
View file
Open in desktop

Large diffs are not rendered by default.

165 changes: 86 additions & 79 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,80 +30,80 @@
"@api-ts/response": "^2.1.0",
"@api-ts/superagent-wrapper": "^1.3.3",
"@api-ts/typed-express-router": "2.0.0",
"@bitgo-beta/abstract-cosmos": "1.0.1-beta.1741",
"@bitgo-beta/abstract-eth": "1.0.2-beta.2004",
"@bitgo-beta/abstract-utxo": "1.1.1-beta.2007",
"@bitgo-beta/sdk-api": "1.10.1-beta.1816",
"@bitgo-beta/sdk-coin-ada": "2.3.14-beta.1758",
"@bitgo-beta/sdk-coin-algo": "2.8.9-beta.238",
"@bitgo-beta/sdk-coin-apt": "1.0.1-beta.1200",
"@bitgo-beta/sdk-coin-arbeth": "1.0.1-beta.1613",
"@bitgo-beta/sdk-coin-asi": "1.0.1-beta.847",
"@bitgo-beta/sdk-coin-atom": "3.1.2-beta.1756",
"@bitgo-beta/sdk-coin-avaxc": "1.1.1-beta.1983",
"@bitgo-beta/sdk-coin-avaxp": "5.7.3-beta.72",
"@bitgo-beta/sdk-coin-baby": "1.0.1-beta.1099",
"@bitgo-beta/sdk-coin-bch": "1.1.1-beta.1984",
"@bitgo-beta/sdk-coin-bcha": "1.1.1-beta.1983",
"@bitgo-beta/sdk-coin-bera": "1.0.1-beta.1612",
"@bitgo-beta/sdk-coin-bld": "1.0.1-beta.1718",
"@bitgo-beta/sdk-coin-bsc": "1.0.1-beta.1983",
"@bitgo-beta/sdk-coin-bsv": "1.1.1-beta.1983",
"@bitgo-beta/sdk-coin-btc": "1.0.2-beta.1983",
"@bitgo-beta/sdk-coin-btg": "1.1.1-beta.1983",
"@bitgo-beta/sdk-coin-celo": "1.1.1-beta.1982",
"@bitgo-beta/sdk-coin-coredao": "1.0.0-beta.1191",
"@bitgo-beta/sdk-coin-coreum": "1.0.1-beta.1600",
"@bitgo-beta/sdk-coin-cronos": "1.0.1-beta.891",
"@bitgo-beta/sdk-coin-cspr": "1.2.19-beta.1756",
"@bitgo-beta/sdk-coin-dash": "1.1.1-beta.1984",
"@bitgo-beta/sdk-coin-doge": "1.0.2-beta.1984",
"@bitgo-beta/sdk-coin-dot": "2.2.8-beta.1756",
"@bitgo-beta/sdk-coin-eos": "1.3.19-beta.1754",
"@bitgo-beta/sdk-coin-etc": "1.0.2-beta.1982",
"@bitgo-beta/sdk-coin-eth": "4.4.1-beta.1768",
"@bitgo-beta/sdk-coin-ethw": "20.0.76-beta.935",
"@bitgo-beta/sdk-coin-flr": "1.0.1-beta.1098",
"@bitgo-beta/sdk-coin-hash": "1.0.1-beta.1714",
"@bitgo-beta/sdk-coin-hbar": "1.0.2-beta.1984",
"@bitgo-beta/sdk-coin-icp": "1.0.1-beta.1111",
"@bitgo-beta/sdk-coin-initia": "1.1.1-beta.870",
"@bitgo-beta/sdk-coin-injective": "1.1.3-beta.1708",
"@bitgo-beta/sdk-coin-islm": "1.0.1-beta.1611",
"@bitgo-beta/sdk-coin-ltc": "1.1.1-beta.1984",
"@bitgo-beta/sdk-coin-mon": "1.0.1-beta.927",
"@bitgo-beta/sdk-coin-near": "1.3.19-beta.1754",
"@bitgo-beta/sdk-coin-oas": "1.0.1-beta.1193",
"@bitgo-beta/sdk-coin-opeth": "1.0.1-beta.1610",
"@bitgo-beta/sdk-coin-osmo": "1.0.1-beta.1738",
"@bitgo-beta/sdk-coin-polygon": "1.0.2-beta.1983",
"@bitgo-beta/sdk-coin-polyx": "1.0.1-beta.955",
"@bitgo-beta/sdk-coin-rbtc": "1.1.1-beta.1982",
"@bitgo-beta/sdk-coin-rune": "1.0.0-beta.1222",
"@bitgo-beta/sdk-coin-sei": "1.0.1-beta.1710",
"@bitgo-beta/sdk-coin-sgb": "1.1.1-beta.1098",
"@bitgo-beta/sdk-coin-sol": "7.6.4-beta.403",
"@bitgo-beta/sdk-coin-soneium": "1.0.1-beta.907",
"@bitgo-beta/sdk-coin-stt": "1.0.1-beta.916",
"@bitgo-beta/sdk-coin-stx": "1.1.1-beta.1988",
"@bitgo-beta/sdk-coin-sui": "3.0.3-beta.1753",
"@bitgo-beta/sdk-coin-tao": "1.0.0-beta.1119",
"@bitgo-beta/sdk-coin-tia": "3.1.8-beta.725",
"@bitgo-beta/sdk-coin-ton": "1.0.1-beta.1621",
"@bitgo-beta/sdk-coin-trx": "1.0.2-beta.1987",
"@bitgo-beta/sdk-coin-vet": "1.0.1-beta.871",
"@bitgo-beta/sdk-coin-wemix": "1.0.1-beta.1091",
"@bitgo-beta/sdk-coin-world": "1.0.1-beta.917",
"@bitgo-beta/sdk-coin-xdc": "1.0.1-beta.1098",
"@bitgo-beta/sdk-coin-xlm": "2.0.5-beta.1752",
"@bitgo-beta/sdk-coin-xrp": "1.1.1-beta.1985",
"@bitgo-beta/sdk-coin-xtz": "1.1.1-beta.1986",
"@bitgo-beta/sdk-coin-zec": "1.1.1-beta.1984",
"@bitgo-beta/sdk-coin-zeta": "1.0.1-beta.1675",
"@bitgo-beta/sdk-coin-zketh": "1.0.1-beta.1540",
"@bitgo-beta/sdk-core": "8.2.1-beta.1820",
"@bitgo-beta/sdk-lib-mpc": "8.2.0-beta.1770",
"@bitgo-beta/statics": "15.1.1-beta.1782",
"@bitgo-beta/abstract-cosmos": "1.0.1-beta.1905",
"@bitgo-beta/abstract-eth": "1.0.2-beta.2150",
"@bitgo-beta/abstract-utxo": "1.1.1-beta.2153",
"@bitgo-beta/sdk-api": "1.10.1-beta.1920",
"@bitgo-beta/sdk-coin-ada": "2.3.14-beta.1918",
"@bitgo-beta/sdk-coin-algo": "2.8.9-beta.398",
"@bitgo-beta/sdk-coin-apt": "1.0.1-beta.1360",
"@bitgo-beta/sdk-coin-arbeth": "1.0.1-beta.1772",
"@bitgo-beta/sdk-coin-asi": "1.0.1-beta.1007",
"@bitgo-beta/sdk-coin-atom": "3.1.2-beta.1917",
"@bitgo-beta/sdk-coin-avaxc": "1.1.1-beta.2143",
"@bitgo-beta/sdk-coin-avaxp": "5.7.3-beta.233",
"@bitgo-beta/sdk-coin-baby": "1.0.1-beta.1260",
"@bitgo-beta/sdk-coin-bch": "1.1.1-beta.2143",
"@bitgo-beta/sdk-coin-bcha": "1.1.1-beta.2143",
"@bitgo-beta/sdk-coin-bera": "1.0.1-beta.1772",
"@bitgo-beta/sdk-coin-bld": "1.0.1-beta.1879",
"@bitgo-beta/sdk-coin-bsc": "1.0.1-beta.2142",
"@bitgo-beta/sdk-coin-bsv": "1.1.1-beta.2143",
"@bitgo-beta/sdk-coin-btc": "1.0.2-beta.2143",
"@bitgo-beta/sdk-coin-btg": "1.1.1-beta.2142",
"@bitgo-beta/sdk-coin-celo": "1.1.1-beta.2142",
"@bitgo-beta/sdk-coin-coredao": "1.0.0-beta.1351",
"@bitgo-beta/sdk-coin-coreum": "1.0.1-beta.1761",
"@bitgo-beta/sdk-coin-cronos": "1.0.1-beta.1052",
"@bitgo-beta/sdk-coin-cspr": "1.2.19-beta.1917",
"@bitgo-beta/sdk-coin-dash": "1.1.1-beta.2143",
"@bitgo-beta/sdk-coin-doge": "1.0.2-beta.2144",
"@bitgo-beta/sdk-coin-dot": "2.2.8-beta.1917",
"@bitgo-beta/sdk-coin-eos": "1.3.19-beta.1915",
"@bitgo-beta/sdk-coin-etc": "1.0.2-beta.2141",
"@bitgo-beta/sdk-coin-eth": "4.4.1-beta.1914",
"@bitgo-beta/sdk-coin-ethw": "20.0.76-beta.1080",
"@bitgo-beta/sdk-coin-flr": "1.0.1-beta.1257",
"@bitgo-beta/sdk-coin-hash": "1.0.1-beta.1875",
"@bitgo-beta/sdk-coin-hbar": "1.0.2-beta.2144",
"@bitgo-beta/sdk-coin-icp": "1.0.1-beta.1272",
"@bitgo-beta/sdk-coin-initia": "1.1.1-beta.1031",
"@bitgo-beta/sdk-coin-injective": "1.1.3-beta.1869",
"@bitgo-beta/sdk-coin-islm": "1.0.1-beta.1772",
"@bitgo-beta/sdk-coin-ltc": "1.1.1-beta.2144",
"@bitgo-beta/sdk-coin-mon": "1.0.1-beta.1087",
"@bitgo-beta/sdk-coin-near": "1.3.19-beta.1915",
"@bitgo-beta/sdk-coin-oas": "1.0.1-beta.1353",
"@bitgo-beta/sdk-coin-opeth": "1.0.1-beta.1770",
"@bitgo-beta/sdk-coin-osmo": "1.0.1-beta.1899",
"@bitgo-beta/sdk-coin-polygon": "1.0.2-beta.2143",
"@bitgo-beta/sdk-coin-polyx": "1.0.1-beta.1115",
"@bitgo-beta/sdk-coin-rbtc": "1.1.1-beta.2140",
"@bitgo-beta/sdk-coin-rune": "1.0.0-beta.1383",
"@bitgo-beta/sdk-coin-sei": "1.0.1-beta.1871",
"@bitgo-beta/sdk-coin-sgb": "1.1.1-beta.1258",
"@bitgo-beta/sdk-coin-sol": "7.6.4-beta.564",
"@bitgo-beta/sdk-coin-soneium": "1.0.1-beta.1067",
"@bitgo-beta/sdk-coin-stt": "1.0.1-beta.1075",
"@bitgo-beta/sdk-coin-stx": "1.1.1-beta.2149",
"@bitgo-beta/sdk-coin-sui": "3.0.3-beta.1914",
"@bitgo-beta/sdk-coin-tao": "1.0.0-beta.1280",
"@bitgo-beta/sdk-coin-tia": "3.1.8-beta.886",
"@bitgo-beta/sdk-coin-ton": "1.0.1-beta.1781",
"@bitgo-beta/sdk-coin-trx": "1.0.2-beta.2147",
"@bitgo-beta/sdk-coin-vet": "1.0.1-beta.1030",
"@bitgo-beta/sdk-coin-wemix": "1.0.1-beta.1249",
"@bitgo-beta/sdk-coin-world": "1.0.1-beta.1077",
"@bitgo-beta/sdk-coin-xdc": "1.0.1-beta.1258",
"@bitgo-beta/sdk-coin-xlm": "2.0.5-beta.1911",
"@bitgo-beta/sdk-coin-xrp": "1.1.1-beta.2144",
"@bitgo-beta/sdk-coin-xtz": "1.1.1-beta.2146",
"@bitgo-beta/sdk-coin-zec": "1.1.1-beta.2144",
"@bitgo-beta/sdk-coin-zeta": "1.0.1-beta.1836",
"@bitgo-beta/sdk-coin-zketh": "1.0.1-beta.1700",
"@bitgo-beta/sdk-core": "8.2.1-beta.1925",
"@bitgo-beta/sdk-lib-mpc": "8.2.0-beta.1924",
"@bitgo-beta/statics": "15.1.1-beta.1939",
"@bitgo/wasm-miniscript": "2.0.0-beta.7",
"@commitlint/config-conventional": "^19.8.1",
"@ethereumjs/tx": "^3.3.0",
Expand All @@ -122,12 +122,12 @@
"zod": "^3.25.48"
},
"overrides": {
"@bitgo-beta/sdk-core": "8.2.1-beta.1820",
"@bitgo-beta/statics": "15.1.1-beta.1782",
"@bitgo-beta/sdk-core": "8.2.1-beta.1925",
"@bitgo-beta/statics": "15.1.1-beta.1939",
"elliptic": "^6.6.1",
"expo": "^48.0.0",
"form-data": "^4.0.6",
"axios": "^1.13.5",
"axios": "^1.18.0",
"node-fetch": "^2.6.7",
"secp256k1": "^5.0.1",
"semver": "^7.5.2",
Expand All @@ -138,7 +138,7 @@
"@babel/runtime": "^7.26.10",
"got": "^12.1.0",
"store2": "^2.14.4",
"tar": "^7.5.11",
"tar": "^7.5.19",
"basic-ftp": "^5.3.0",
"flatted": "^3.4.0",
"serialize-javascript": "^7.0.3",
Expand All @@ -152,7 +152,14 @@
"glob": "^11.1.0",
"@xmldom/xmldom": "^0.9.10",
"protobufjs": "^7.6.1",
"lodash": "^4.18.0"
"lodash": "^4.18.0",
"fast-uri": "^3.1.4",
"shell-quote": "^1.9.0",
"brace-expansion@1": "^1.1.16",
"brace-expansion@2": "^2.1.2",
"brace-expansion@5": "^5.0.7",
"js-yaml@3": "^3.15.0",
"js-yaml@4": "^4.3.0"
},
"devDependencies": {
"@semantic-release/github": "^10.0.0",
Expand Down
6 changes: 6 additions & 0 deletions scripts/bump-version.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -71,6 +71,12 @@ const bumpVersion = async (packageName: BitGoBetaPackageName) => {
packageJson.resolutions[packageName] = next;
console.log(`Updating resolution for ${packageName} to ${next}...`);
}

// Update overrides if the package is in overrides (npm pins live here post yarn->npm migration)
if (packageJson.overrides && packageJson.overrides[packageName]) {
packageJson.overrides[packageName] = next;
console.log(`Updating override for ${packageName} to ${next}...`);
}
} else {
console.log(`No suitable version found for ${packageName}, keeping current version`);
}
Expand Down
4 changes: 2 additions & 2 deletions src/__tests__/api/advancedWalletManager/mpcFinalize.test.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ describe('MPC Finalize', () => {

beforeEach(() => {
bitgo = new BitGoAPI({ env: 'test' });
sinon.stub(bitgo, 'decrypt').returns(
sinon.stub(bitgo, 'decrypt').resolves(
JSON.stringify({
sourceGpgPub: USER_GPG_PUB,
sourceGpgPrv:
Expand Down Expand Up @@ -334,7 +334,7 @@ describe('MPC Finalize', () => {
* We need decrypt() to return backup-party material so the handler uses i=2, not i=1,
* and builds signing material with userYShare instead of backupYShare.
*/
sinon.stub(BitGoAPI.prototype, 'decrypt').returns(
sinon.stub(BitGoAPI.prototype, 'decrypt').resolves(
JSON.stringify({
sourceGpgPub:
'-----BEGIN PGP PUBLIC KEY BLOCK-----\n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\nB3oLcs3H7MksK2f2DcOkRnTpmEyMLg==\n=4fY3\n-----END PGP PUBLIC KEY BLOCK-----\n',
Expand Down
2 changes: 1 addition & 1 deletion src/advancedWalletManager/handlers/ecdsaMPCV2WalletGenerationFinalize.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ export async function ecdsaMPCv2Finalize(
// fetch previous state of execution
const { plaintextKey } = await keyProvider.decryptDataKey({ encryptedKey: encryptedDataKey });
const state: MpcV2RoundState = JSON.parse(
req.bitgo.decrypt({
await req.bitgo.decrypt({
input: encryptedData,
password: plaintextKey,
}),
Expand Down
2 changes: 1 addition & 1 deletion src/advancedWalletManager/handlers/ecdsaMPCV2WalletGenerationInitialize.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ export async function ecdsaMPCv2Initialize(

try {
// Encrypt the state with the plaintext key
const encryptedData = req.bitgo.encrypt({
const encryptedData = await req.bitgo.encrypt({
input: JSON.stringify(state),
password: plaintextKey,
});
Expand Down
4 changes: 2 additions & 2 deletions src/advancedWalletManager/handlers/ecdsaMPCV2WalletGenerationRound.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@ export async function ecdsaMPCv2Round(
// fetch previous state of execution
const { plaintextKey } = await keyProvider.decryptDataKey({ encryptedKey: encryptedDataKey });
const state: MpcV2RoundState = JSON.parse(
req.bitgo.decrypt({
await req.bitgo.decrypt({
input: encryptedData,
password: plaintextKey,
}),
Expand Down Expand Up @@ -139,7 +139,7 @@ export async function ecdsaMPCv2Round(
// re-encrypt state
let newEncryptedData;
try {
newEncryptedData = req.bitgo.encrypt({
newEncryptedData = await req.bitgo.encrypt({
input: JSON.stringify({
...state,
round: state.round + 1,
Expand Down
2 changes: 1 addition & 1 deletion src/advancedWalletManager/handlers/eddsaMPCWalletGenerationFinalize.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ export async function eddsaFinalize(req: AwmApiSpecRouteRequest<'v1.mpc.key.fina
// Decrypt the encrypted payload using encryptedDataKey to retrieve the previous state of computation
const decryptedDataKey = await keyProvider.decryptDataKey({ encryptedKey: encryptedDataKey });
const previousState = JSON.parse(
req.bitgo.decrypt({
await req.bitgo.decrypt({
input: encryptedData,
password: decryptedDataKey.plaintextKey,
}),
Expand Down
2 changes: 1 addition & 1 deletion src/advancedWalletManager/handlers/eddsaMPCWalletGenerationInitialize.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -101,7 +101,7 @@ export async function eddsaInitialize(
};
const { plaintextKey, encryptedKey } = await keyProvider.generateDataKey({ keyType: 'AES-256' });
try {
const encryptedPayload = req.bitgo.encrypt({
const encryptedPayload = await req.bitgo.encrypt({
input: JSON.stringify(payload),
password: plaintextKey,
});
Expand Down
Loading