BIP32-Ed25519 derivation used Node's crypto module (SHA-512, SHA-256,
HMAC-SHA512), bn.js and Buffer, which tie the published build to Node.
Replace them with the synchronous @noble/hashes functions, bigint arithmetic
via @noble/curves' byte helpers, and plain Uint8Array. fromSeed now accepts
any Uint8Array (a Buffer still works).

Key derivation, signatures and ECDH outputs are byte-identical. signData and
signAlgoTransaction now return a plain Uint8Array at runtime instead of a
Buffer (as in 1.x); the README's breaking changes list this.

bn.js is no longer a dependency. tsconfig.build.json sets "types": [] so the
published build fails to compile if it uses Node globals or built-ins, and CI
now runs pnpm build, since pnpm test compiles with Node types available.

README: the index-validation entry no longer mentions Buffer writes, lists
account among the validated arguments, and notes that fractional indexes
were silently truncated in 1.x.

- Note v5.3.0+ for rekeyed accounts and v5.4.0+ for appSecret in the
  guide, README, Supported Wallets and Signing Data
- State which rekeyed accounts the passkey signs for, and that it can't
  sign as one key of a multisig
- Document what withAppSecret returns and its `failed` case when the
  session locks mid-request
- Say plainly that users can export a recovery phrase, and link the
  use-wallet-ui react-passkey and vue-passkey examples

- Note v5.3.0+ for rekeyed accounts and v5.4.0+ for appSecret in the
  guide, README, Supported Wallets and Signing Data
- State which rekeyed accounts the passkey signs for, and that it can't
  sign as one key of a multisig
- Document what withAppSecret returns and its `failed` case when the
  session locks mid-request
- Say plainly that users can export a recovery phrase, and link the
  use-wallet-ui react-passkey and vue-passkey examples

- deriveKey rejects an unknown derivationType with a RangeError instead of
  silently falling back to Khovratovich. This catches a leftover 1.x
  `metadata` argument that now binds to the 6th parameter in plain JS.
- Context-based methods (keyGen, signData, signAlgoTransaction, ECDH) reject
  keyIndex outside [0, 2^31), so a hardened-range value can no longer
  silently produce a hardened child while being documented as a soft one.
- Move FIRST_HARDENED_INDEX and MAX_INDEX_EXCLUSIVE to src/constants.ts,
  shared by bip32-ed25519 and x.hd.wallet.api.crypto instead of duplicated.
  The module is not re-exported from index, so the public API is unchanged.
- Tests cover both new RangeErrors and the README breaking changes mention
  the keyIndex/derivationType validation.

Follow-up to the previous commit, from review.

Derivation:
- harden() rejects levels outside [0, 2^31) with a RangeError, and
  deriveChildNodePrivate/deriveChildNodePublic reject indexes outside
  [0, 2^32) with a clear message instead of a RangeError from
  Buffer.writeUInt32LE deep inside the derivation. Tests cover both.

Build and test:
- tsconfig.json is build-only ("types": ["node"]); the jest types moved to
  a new tsconfig.spec.json, which the test scripts and ts-jest now use. The
  published build no longer needs @types/jest.
- "prepack" runs the build, so packing right after a test run can't ship
  the specs and src/test-utils that tests leave in dist.
- CI drops its redundant "Compile TypeScript" step; pnpm test already
  compiles (and type-checks) as its first step.

Docs and test helpers:
- README breaking changes now say that non-TX protocol payloads (MX,
  Program, ProgData, ...) must be signed with signData, that index misuse
  throws a RangeError, and which deep import path the exports map blocks.
- Comment why @parcel/watcher builds are denied, and why the test helper
  clamps the X25519 scalar (libsodium parity, not needed by noble).
- Keep the original failure as the cause of secretbox's "decryption failed".

No pnpm-lock.yaml change: a from-scratch resolve with pnpm 12.3.4 (what
pnpm/action-setup installs) is identical to the committed lockfile, and
pnpm install --frozen-lockfile leaves it untouched.

Fix audit 2026-11-12 findings (AW-2026-101..124)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>