Security

// ✅ CORRECT: Use signing methods
const result = await TrezorConnect.signTransaction({
  inputs: [...],
  outputs: [...]
});

// ❌ WRONG: Never try to export private keys
// There is no method to export private keys - by design!

const result = await TrezorConnect.getAddress({
  path: "m/49'/0'/0'/0/0",
  coin: 'btc',
  showOnTrezor: true  // ✅ Always true for receiving addresses
});

// ✅ Production: HTTPS required
const manifest = {
  email: '[email protected]',
  appUrl: 'https://example.com'
};

// ⚠️ Development only: HTTP acceptable for localhost
const devManifest = {
  email: '[email protected]',
  appUrl: 'http://localhost:3000'
};

function validateTransaction(tx) {
  // Validate recipient address
  if (!isValidAddress(tx.recipient, tx.coin)) {
    throw new Error('Invalid recipient address');
  }
  
  // Validate amount
  if (tx.amount <= 0) {
    throw new Error('Amount must be positive');
  }
  
  if (isNaN(tx.amount)) {
    throw new Error('Amount must be a number');
  }
  
  // Check for suspicious amounts
  if (tx.amount > getMaxReasonableAmount(tx.coin)) {
    // Warn user about large transaction
    return confirm(
      `Large amount detected: ${tx.amount} ${tx.coin}. Continue?`
    );
  }
  
  return true;
}

async function secureTransaction(params) {
  try {
    const result = await TrezorConnect.signTransaction(params);
    
    if (!result.success) {
      // Log detailed error for debugging
      console.error('Transaction failed:', result.payload);
      
      // Show user-friendly message (don't leak internals)
      showUserMessage(
        'Transaction failed. Please check your device and try again.'
      );
      
      return null;
    }
    
    return result.payload;
  } catch (error) {
    // Log error but don't expose details to user
    console.error('Unexpected error:', error);
    showUserMessage('An unexpected error occurred.');
    return null;
  }
}

function sanitizeAddress(address) {
  // Remove whitespace
  address = address.trim();
  
  // Remove common copy-paste artifacts
  address = address.replace(/\s+/g, '');
  
  // Validate format
  if (!isValidAddressFormat(address)) {
    throw new Error('Invalid address format');
  }
  
  return address;
}

function sanitizeAmount(amount) {
  // Convert to number
  const num = parseFloat(amount);
  
  // Validate
  if (isNaN(num) || num <= 0) {
    throw new Error('Invalid amount');
  }
  
  // Prevent floating point precision issues
  return Math.round(num * 100000000) / 100000000;
}