@actioncodes/protocol 1.0.2 → 1.1.0

package/dist/adapters/base.d.ts

@@ -65,5 +65,15 @@ export declare abstract class BaseChainAdapter<T = any> {
      * @returns True if the code signature is valid
      */
     abstract verifyCodeSignature(actionCode: ActionCode): boolean;
+    /**
+     * Sign the transaction with the protocol key using a callback approach
+     * This method should be implemented by each chain-specific adapter to handle
+     * the chain's specific signing mechanism asynchronously
+     * @param tx - Chain-specific transaction to sign
+     * @param protocolPrivateKey - Private key or Keypair object depending on the chain
+     * @param signCallback - Callback function that performs the actual signing
+     * @returns Promise that resolves to the signed transaction
+     */
+    abstract signWithProtocolKey(actionCode: ActionCode, key: any): Promise<ActionCode>;
 }
 //# sourceMappingURL=base.d.ts.map

package/dist/adapters/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/adapters/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC;;;GAGG;AACH,8BAAsB,gBAAgB,CAAC,CAAC,GAAG,GAAG;IAC1C,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEhC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,GAAG,GAAG;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,GAAG,IAAI;IAE7C;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO;IAEjF;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAE3D;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,cAAc,GAAE,MAAkB,GAAG,OAAO;IA8B1F;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO;IAErF;;;;;;OAMG;IACH,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAE,MAA6B,GAAG,MAAM;IAIvG;;;;;;OAMG;IACH,QAAQ,CAAC,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO;CAChE"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/adapters/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC;;;GAGG;AACH,8BAAsB,gBAAgB,CAAC,CAAC,GAAG,GAAG;IAC1C,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEhC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,GAAG,GAAG;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,cAAc,GAAG,IAAI;IAE7C;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO;IAEjF;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAE3D;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,cAAc,GAAE,MAAkB,GAAG,OAAO;IA8B1F;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO;IAErF;;;;;;OAMG;IACH,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAE,MAA6B,GAAG,MAAM;IAIvG;;;;;;OAMG;IACH,QAAQ,CAAC,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO;IAE7D;;;;;;;;OAQG;IACH,QAAQ,CAAC,mBAAmB,CACxB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,GAAG,GACT,OAAO,CAAC,UAAU,CAAC;CACzB"}

package/dist/adapters/solana/solana.d.ts

@@ -1,4 +1,4 @@
-import { Transaction, TransactionInstruction, VersionedTransaction } from '@solana/web3.js';
+import { Transaction, TransactionInstruction, VersionedTransaction, Keypair } from '@solana/web3.js';
 import { ProtocolMetaV1 } from '../../meta';
 import { BaseChainAdapter } from '../base';
 import { ActionCode } from '../../actioncode';
@@ -82,5 +82,11 @@ export declare class SolanaAdapter extends BaseChainAdapter<SolanaTransaction> {
      */
     validateFromBase64(base64String: string, authorities: string[], expectedPrefix?: string): boolean;
     verifyCodeSignature(actionCode: ActionCode): boolean;
+    /**
+     * Sign the transaction with the protocol key using a callback approach
+     * @param signCallback - Callback function that performs the actual signing
+     * @returns Promise that resolves to the signed transaction
+     */
+    signWithProtocolKey(actionCode: ActionCode, key: Keypair): Promise<ActionCode>;
 }
 //# sourceMappingURL=solana.d.ts.map

package/dist/adapters/solana/solana.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"solana.d.ts","sourceRoot":"","sources":["../../../src/adapters/solana/solana.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,WAAW,EACX,sBAAsB,EACtB,oBAAoB,EAGvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAsB,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,oBAAoB,CAAC;AAEnE;;;GAGG;AACH,qBAAa,aAAc,SAAQ,gBAAgB,CAAC,iBAAiB,CAAC;IAClE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAmB;IAE1D,QAAQ,CAAC,KAAK,YAAY;IAE1B;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,cAAc,GAAG,sBAAsB;IAKpD;;;;OAIG;IACH,MAAM,CAAC,EAAE,EAAE,iBAAiB,GAAG,cAAc,GAAG,IAAI;IAWpD;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,cAAc,GAAE,MAAkB,GAAG,OAAO;IAInG;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAWlE;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAqB/B;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAUlC;;OAEG;IACH,OAAO,CAAC,eAAe;IAuBvB;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAMhC;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAenC;;;;;OAKG;IACH,SAAS,CAAC,4BAA4B,CAAC,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO;IAqB5F;;;;OAIG;IACH,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAgB7D;;;;;;OAMG;IACH,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,cAAc,GAAE,MAAkB,GAAG,OAAO;IAiBrG,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO;CAY9D"}
+{"version":3,"file":"solana.d.ts","sourceRoot":"","sources":["../../../src/adapters/solana/solana.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,WAAW,EACX,sBAAsB,EACtB,oBAAoB,EAGpB,OAAO,EACV,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAsB,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,oBAAoB,CAAC;AAEnE;;;GAGG;AACH,qBAAa,aAAc,SAAQ,gBAAgB,CAAC,iBAAiB,CAAC;IAClE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAmB;IAE1D,QAAQ,CAAC,KAAK,YAAY;IAE1B;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,cAAc,GAAG,sBAAsB;IAKpD;;;;OAIG;IACH,MAAM,CAAC,EAAE,EAAE,iBAAiB,GAAG,cAAc,GAAG,IAAI;IAWpD;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,cAAc,GAAE,MAAkB,GAAG,OAAO;IAInG;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAWlE;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAqB/B;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAUlC;;OAEG;IACH,OAAO,CAAC,eAAe;IAuBvB;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAMhC;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAenC;;;;;OAKG;IACH,SAAS,CAAC,4BAA4B,CAAC,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO;IA6B5F;;;;OAIG;IACH,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAgB7D;;;;;;OAMG;IACH,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,cAAc,GAAE,MAAkB,GAAG,OAAO;IAiBrG,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO;IAa3D;;;;OAIG;IACG,mBAAmB,CACrB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,OAAO,GACb,OAAO,CAAC,UAAU,CAAC;CAkCzB"}

package/dist/adapters/solana/solana.js

@@ -199,6 +199,12 @@ class SolanaAdapter extends base_1.BaseChainAdapter {
         if (!decodedMeta) {
             return false;
         }
+        if (!meta.iss) {
+            return false;
+        }
+        if (!this.hasIssuerSignature(tx, meta.iss)) {
+            return false;
+        }
         // Cross-check the decoded meta with the provided meta
         return (decodedMeta.version === meta.version &&
             decodedMeta.prefix === meta.prefix &&
@@ -265,6 +271,39 @@ class SolanaAdapter extends base_1.BaseChainAdapter {
             return false;
         }
     }
+    /**
+     * Sign the transaction with the protocol key using a callback approach
+     * @param signCallback - Callback function that performs the actual signing
+     * @returns Promise that resolves to the signed transaction
+     */
+    async signWithProtocolKey(actionCode, key) {
+        try {
+            if (!actionCode.transaction?.transaction) {
+                throw new Error('No transaction found');
+            }
+            const tx = web3_js_1.Transaction.from(buffer_1.Buffer.from(actionCode.transaction.transaction, 'base64'));
+            tx.partialSign(key);
+            const meta = this.decode(tx);
+            if (!meta) {
+                throw new Error('Invalid transaction, protocol meta not found');
+            }
+            if (!this.validateTransactionIntegrity(tx, meta)) {
+                throw new Error('Invalid transaction, transaction integrity not valid');
+            }
+            const newActionCode = Object.assign({}, actionCode, {
+                transaction: {
+                    ...actionCode.transaction,
+                    transaction: buffer_1.Buffer.from(tx.serialize({
+                        requireAllSignatures: false
+                    })).toString('base64'),
+                }
+            });
+            return newActionCode;
+        }
+        catch (error) {
+            throw new Error(`Failed to sign transaction with protocol key: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+    }
 }
 exports.SolanaAdapter = SolanaAdapter;
 SolanaAdapter.MEMO_PROGRAM_ID = spl_memo_1.MEMO_PROGRAM_ID;

package/dist/codegen.d.ts

@@ -10,19 +10,19 @@ export declare class CodeGenerator {
      */
     static validatePrefix(prefix: string): boolean;
     /**
-     * Validate generated code format
+     * Validate generated code format (prefix + exactly 8 digits)
      * @param code - The code to validate
      * @returns True if code is valid, false otherwise
      */
     static validateCodeFormat(code: string): boolean;
     /**
-     * Validate that a code without prefix is exactly 8 digits and only numbers
-     * @param code - The code to validate
-     * @returns True if code is valid, false otherwise
+     * Validate that the numeric part of a code is exactly 8 digits
+     * @param code - The code to validate (can include prefix)
+     * @returns True if numeric part is valid, false otherwise
      */
     static validateCodeDigits(code: string): boolean;
     /**
-     * Normalize prefix - convert "DEFAULT" to empty string, validate others
+     * Normalize prefix - convert PROTOCOL_CODE_PREFIX to empty string, validate others
      * @param prefix - The prefix to normalize
      * @returns Normalized prefix
      * @throws Error if prefix is invalid
@@ -31,7 +31,7 @@ export declare class CodeGenerator {
     /**
      * Generate a deterministic 8-digit code based on public key, prefix, and timestamp
      * @param pubkey - Solana wallet public key (base58)
-     * @param prefix - Optional namespace prefix (default: "DEFAULT")
+     * @param prefix - Optional namespace prefix (default: PROTOCOL_CODE_PREFIX)
      * @param timestamp - UNIX timestamp in milliseconds (defaults to now)
      * @returns Object containing code, issuedAt, and expiresAt timestamps
      * @throws Error if generated code is invalid
@@ -44,7 +44,7 @@ export declare class CodeGenerator {
     /**
      * Derive the full SHA-256 hash for storage or encryption key generation
      * @param pubkey - Solana wallet public key (base58)
-     * @param prefix - Optional namespace prefix (default: "DEFAULT")
+     * @param prefix - Optional namespace prefix (default: PROTOCOL_CODE_PREFIX)
      * @param timestamp - UNIX timestamp in milliseconds (defaults to now)
      * @returns Full SHA-256 hash string
      */
@@ -53,16 +53,16 @@ export declare class CodeGenerator {
      * Get the expected code for a given public key and timestamp
      * @param pubkey - Solana wallet public key (base58)
      * @param timestamp - UNIX timestamp in milliseconds
-     * @param prefix - Optional namespace prefix (default: "DEFAULT")
-     * @returns 8-digit numeric string
+     * @param prefix - Optional namespace prefix (default: PROTOCOL_CODE_PREFIX)
+     * @returns Full code string with prefix + 8 digits
      */
     static getExpectedCode(pubkey: string, timestamp: number, prefix?: string): string;
     /**
      * Validate if a code matches the expected code for a given public key and timestamp
-     * @param code - The code to validate
+     * @param code - The code to validate (can include prefix)
      * @param pubkey - Solana wallet public key (base58)
      * @param timestamp - UNIX timestamp in milliseconds
-     * @param prefix - Optional namespace prefix (default: "DEFAULT")
+     * @param prefix - Optional namespace prefix (default: PROTOCOL_CODE_PREFIX)
      * @returns True if code matches expected code and timestamp is valid
      */
     static validateCode(code: string, pubkey: string, timestamp: number, prefix?: string): boolean;

package/dist/codegen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codegen.d.ts","sourceRoot":"","sources":["../src/codegen.ts"],"names":[],"mappings":"AAGA,qBAAa,aAAa;IACtB,MAAM,CAAC,cAAc,SAAY;IACjC,MAAM,CAAC,WAAW,SAAe;IACjC,MAAM,CAAC,iBAAiB,SAAqB;IAC7C,MAAM,CAAC,iBAAiB,SAAqB;IAE7C;;;;OAIG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAM9C;;;;OAIG;IACH,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAMhD;;;;OAIG;IACH,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAMhD;;;;;OAKG;IACH,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAQ9C;;;;;;;OAOG;IACH,MAAM,CAAC,YAAY,CACf,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,MAAkB,EAC1B,SAAS,GAAE,MAAmB,GAC/B;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IA8BxD;;;;;;OAMG;IACH,MAAM,CAAC,cAAc,CACjB,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,MAAkB,EAC1B,SAAS,CAAC,EAAE,MAAM,GACnB,MAAM;IAQT;;;;;;OAMG;IACH,MAAM,CAAC,eAAe,CAClB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAAkB,GAC3B,MAAM;IAIT;;;;;;;OAOG;IACH,MAAM,CAAC,YAAY,CACf,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAAkB,GAC3B,OAAO;IAgBV;;;;OAIG;IACH,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;CAGtD"}
+{"version":3,"file":"codegen.d.ts","sourceRoot":"","sources":["../src/codegen.ts"],"names":[],"mappings":"AAGA,qBAAa,aAAa;IACtB,MAAM,CAAC,cAAc,SAAY;IACjC,MAAM,CAAC,WAAW,SAAe;IACjC,MAAM,CAAC,iBAAiB,SAAqB;IAC7C,MAAM,CAAC,iBAAiB,SAAqB;IAE7C;;;;OAIG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAM9C;;;;OAIG;IACH,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAoChD;;;;OAIG;IACH,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAkChD;;;;;OAKG;IACH,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAQ9C;;;;;;;OAOG;IACH,MAAM,CAAC,YAAY,CACf,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,MAA6B,EACrC,SAAS,GAAE,MAAmB,GAC/B;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAiCxD;;;;;;OAMG;IACH,MAAM,CAAC,cAAc,CACjB,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,MAA6B,EACrC,SAAS,CAAC,EAAE,MAAM,GACnB,MAAM;IAQT;;;;;;OAMG;IACH,MAAM,CAAC,eAAe,CAClB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAA6B,GACtC,MAAM;IAIT;;;;;;;OAOG;IACH,MAAM,CAAC,YAAY,CACf,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAA6B,GACtC,OAAO;IAgBV;;;;OAIG;IACH,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;CAGtD"}

package/dist/codegen.js

@@ -10,59 +10,109 @@ class CodeGenerator {
      * @returns True if prefix is valid, false otherwise
      */
     static validatePrefix(prefix) {
-        if (prefix === "DEFAULT")
+        if (prefix === constants_1.PROTOCOL_CODE_PREFIX)
             return true;
         if (prefix.length < this.MIN_PREFIX_LENGTH || prefix.length > this.MAX_PREFIX_LENGTH)
             return false;
         return /^[A-Za-z]+$/.test(prefix);
     }
     /**
-     * Validate generated code format
+     * Validate generated code format (prefix + exactly 8 digits)
      * @param code - The code to validate
      * @returns True if code is valid, false otherwise
      */
     static validateCodeFormat(code) {
         if (!code || typeof code !== 'string')
             return false;
-        if (code.length !== this.CODE_DIGITS)
+        // Code must be exactly prefix length + 8 digits
+        if (code.length < this.CODE_DIGITS)
             return false;
-        return /^\d+$/.test(code);
+        // Find where the numeric part starts (last 8 characters)
+        const numericPart = code.slice(-this.CODE_DIGITS);
+        const prefixPart = code.slice(0, -this.CODE_DIGITS);
+        // Numeric part must be exactly 8 digits, no more, no less
+        if (numericPart.length !== this.CODE_DIGITS)
+            return false;
+        if (!/^[0-9]{8}$/.test(numericPart))
+            return false;
+        // If there's a prefix part, validate it
+        if (prefixPart.length > 0) {
+            // Normalize the prefix for validation
+            const normalizedPrefix = prefixPart.toUpperCase();
+            if (normalizedPrefix === constants_1.PROTOCOL_CODE_PREFIX) {
+                // DEFAULT prefix is valid but should be empty in normalized form
+                return true;
+            }
+            // Check prefix length and format
+            if (normalizedPrefix.length < this.MIN_PREFIX_LENGTH ||
+                normalizedPrefix.length > this.MAX_PREFIX_LENGTH) {
+                return false;
+            }
+            // Prefix must contain only letters
+            if (!/^[A-Za-z]+$/.test(normalizedPrefix))
+                return false;
+        }
+        return true;
     }
     /**
-     * Validate that a code without prefix is exactly 8 digits and only numbers
-     * @param code - The code to validate
-     * @returns True if code is valid, false otherwise
+     * Validate that the numeric part of a code is exactly 8 digits
+     * @param code - The code to validate (can include prefix)
+     * @returns True if numeric part is valid, false otherwise
      */
     static validateCodeDigits(code) {
         if (!code || typeof code !== 'string')
             return false;
-        if (code.length !== constants_1.CODE_LENGTH)
+        if (code.length < constants_1.CODE_LENGTH)
             return false;
-        return /^[0-9]{8}$/.test(code);
+        // For codes without prefix, the entire code must be exactly 8 digits
+        if (code.length === constants_1.CODE_LENGTH) {
+            return /^[0-9]{8}$/.test(code);
+        }
+        // For codes with prefix, the total length must be prefix + 8 digits
+        // and the last 8 characters must be digits
+        const numericPart = code.slice(-constants_1.CODE_LENGTH);
+        // Check if the numeric part is exactly 8 digits
+        if (!/^[0-9]{8}$/.test(numericPart))
+            return false;
+        // Check if the prefix part (everything before the last 8 chars) is valid
+        const prefixPart = code.slice(0, -constants_1.CODE_LENGTH);
+        if (prefixPart.length > 0) {
+            // Validate prefix format
+            const normalizedPrefix = prefixPart.toUpperCase();
+            if (normalizedPrefix === constants_1.PROTOCOL_CODE_PREFIX)
+                return true;
+            if (normalizedPrefix.length < this.MIN_PREFIX_LENGTH ||
+                normalizedPrefix.length > this.MAX_PREFIX_LENGTH) {
+                return false;
+            }
+            if (!/^[A-Za-z]+$/.test(normalizedPrefix))
+                return false;
+        }
+        return true;
     }
     /**
-     * Normalize prefix - convert "DEFAULT" to empty string, validate others
+     * Normalize prefix - convert PROTOCOL_CODE_PREFIX to empty string, validate others
      * @param prefix - The prefix to normalize
      * @returns Normalized prefix
      * @throws Error if prefix is invalid
      */
     static normalizePrefix(prefix) {
-        if (prefix === "DEFAULT")
+        if (prefix === constants_1.PROTOCOL_CODE_PREFIX)
             return "";
         if (!this.validatePrefix(prefix)) {
-            throw new Error(`Invalid prefix: ${prefix}. Must be 3-12 letters or "DEFAULT"`);
+            throw new Error(`Invalid prefix: ${prefix}. Must be 3-12 letters or "${constants_1.PROTOCOL_CODE_PREFIX}"`);
         }
         return prefix.toUpperCase();
     }
     /**
      * Generate a deterministic 8-digit code based on public key, prefix, and timestamp
      * @param pubkey - Solana wallet public key (base58)
-     * @param prefix - Optional namespace prefix (default: "DEFAULT")
+     * @param prefix - Optional namespace prefix (default: PROTOCOL_CODE_PREFIX)
      * @param timestamp - UNIX timestamp in milliseconds (defaults to now)
      * @returns Object containing code, issuedAt, and expiresAt timestamps
      * @throws Error if generated code is invalid
      */
-    static generateCode(pubkey, prefix = "DEFAULT", timestamp = Date.now()) {
+    static generateCode(pubkey, prefix = constants_1.PROTOCOL_CODE_PREFIX, timestamp = Date.now()) {
         const normalizedPrefix = this.normalizePrefix(prefix);
         const input = `${normalizedPrefix}:${pubkey}:${timestamp}`;
         const hash = (0, js_sha256_1.sha256)(input);
@@ -72,15 +122,17 @@ class CodeGenerator {
         const issuedAt = timestamp;
         const expiresAt = issuedAt + this.TIME_WINDOW_MS;
         const generatedCode = code.toString().padStart(this.CODE_DIGITS, "0");
+        // Create the full code with prefix
+        const fullCode = normalizedPrefix + generatedCode;
         // Validate the generated code
-        if (!this.validateCodeFormat(generatedCode)) {
-            throw new Error(`Generated code validation failed: ${generatedCode}`);
+        if (!this.validateCodeFormat(fullCode)) {
+            throw new Error(`Generated code validation failed: ${fullCode}`);
         }
-        if (!this.validateCodeDigits(generatedCode)) {
-            throw new Error(`Generated code must be exactly 8 digits: ${generatedCode}`);
+        if (!this.validateCodeDigits(fullCode)) {
+            throw new Error(`Generated code must be exactly 8 digits: ${fullCode}`);
         }
         return {
-            code: generatedCode,
+            code: fullCode,
             issuedAt,
             expiresAt
         };
@@ -88,11 +140,11 @@ class CodeGenerator {
     /**
      * Derive the full SHA-256 hash for storage or encryption key generation
      * @param pubkey - Solana wallet public key (base58)
-     * @param prefix - Optional namespace prefix (default: "DEFAULT")
+     * @param prefix - Optional namespace prefix (default: PROTOCOL_CODE_PREFIX)
      * @param timestamp - UNIX timestamp in milliseconds (defaults to now)
      * @returns Full SHA-256 hash string
      */
-    static deriveCodeHash(pubkey, prefix = "DEFAULT", timestamp) {
+    static deriveCodeHash(pubkey, prefix = constants_1.PROTOCOL_CODE_PREFIX, timestamp) {
         const normalizedPrefix = this.normalizePrefix(prefix);
         const ts = timestamp ?? Date.now();
         const input = `${normalizedPrefix}:${pubkey}:${ts}`;
@@ -103,21 +155,21 @@ class CodeGenerator {
      * Get the expected code for a given public key and timestamp
      * @param pubkey - Solana wallet public key (base58)
      * @param timestamp - UNIX timestamp in milliseconds
-     * @param prefix - Optional namespace prefix (default: "DEFAULT")
-     * @returns 8-digit numeric string
+     * @param prefix - Optional namespace prefix (default: PROTOCOL_CODE_PREFIX)
+     * @returns Full code string with prefix + 8 digits
      */
-    static getExpectedCode(pubkey, timestamp, prefix = "DEFAULT") {
+    static getExpectedCode(pubkey, timestamp, prefix = constants_1.PROTOCOL_CODE_PREFIX) {
         return this.generateCode(pubkey, prefix, timestamp).code;
     }
     /**
      * Validate if a code matches the expected code for a given public key and timestamp
-     * @param code - The code to validate
+     * @param code - The code to validate (can include prefix)
      * @param pubkey - Solana wallet public key (base58)
      * @param timestamp - UNIX timestamp in milliseconds
-     * @param prefix - Optional namespace prefix (default: "DEFAULT")
+     * @param prefix - Optional namespace prefix (default: PROTOCOL_CODE_PREFIX)
      * @returns True if code matches expected code and timestamp is valid
      */
-    static validateCode(code, pubkey, timestamp, prefix = "DEFAULT") {
+    static validateCode(code, pubkey, timestamp, prefix = constants_1.PROTOCOL_CODE_PREFIX) {
         // First validate the code format
         if (!this.validateCodeFormat(code)) {
             return false;

package/docs/actioncode/classes/ActionCode.md

@@ -6,7 +6,7 @@
 
 # Class: ActionCode
 
-Defined in: [actioncode.ts:32](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L32)
+Defined in: [actioncode.ts:32](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L32)
 
 ## Constructors
 
@@ -14,7 +14,7 @@ Defined in: [actioncode.ts:32](https://github.com/otaprotocol/actioncodes/blob/6
 
 > **new ActionCode**(`fields`): `ActionCode`
 
-Defined in: [actioncode.ts:33](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L33)
+Defined in: [actioncode.ts:33](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L33)
 
 #### Parameters
 
@@ -34,7 +34,7 @@ Defined in: [actioncode.ts:33](https://github.com/otaprotocol/actioncodes/blob/6
 
 > **get** **chain**(): `string`
 
-Defined in: [actioncode.ts:95](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L95)
+Defined in: [actioncode.ts:95](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L95)
 
 Get the target chain for this action code
 
@@ -52,7 +52,7 @@ Chain identifier (e.g., "solana", "evm")
 
 > **get** **code**(): `string`
 
-Defined in: [actioncode.ts:111](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L111)
+Defined in: [actioncode.ts:111](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L111)
 
 Get the action code string
 
@@ -70,7 +70,7 @@ The 8-character action code
 
 > **get** **codeHash**(): `string`
 
-Defined in: [actioncode.ts:217](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L217)
+Defined in: [actioncode.ts:217](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L217)
 
 Get the code hash for this action code
 it is also used in the protocol meta as the code id
@@ -89,7 +89,7 @@ Code hash string
 
 > **get** **description**(): `undefined` \| `string`
 
-Defined in: [actioncode.ts:151](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L151)
+Defined in: [actioncode.ts:151](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L151)
 
 Get a human-readable description of the action
 
@@ -107,7 +107,7 @@ Description string or undefined
 
 > **get** **displayString**(): `string`
 
-Defined in: [actioncode.ts:183](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L183)
+Defined in: [actioncode.ts:183](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L183)
 
 Get a human-readable display string for the action code
 
@@ -125,7 +125,7 @@ Formatted display string
 
 > **get** **encoded**(): `string`
 
-Defined in: [actioncode.ts:47](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L47)
+Defined in: [actioncode.ts:47](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L47)
 
 ##### Returns
 
@@ -139,7 +139,7 @@ Defined in: [actioncode.ts:47](https://github.com/otaprotocol/actioncodes/blob/6
 
 > **get** **expired**(): `boolean`
 
-Defined in: [actioncode.ts:87](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L87)
+Defined in: [actioncode.ts:87](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L87)
 
 Check if the action code has expired
 
@@ -157,7 +157,7 @@ True if the code has expired
 
 > **get** **json**(): [`ActionCodeFields`](../interfaces/ActionCodeFields.md)
 
-Defined in: [actioncode.ts:68](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L68)
+Defined in: [actioncode.ts:68](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L68)
 
 ##### Returns
 
@@ -171,7 +171,7 @@ Defined in: [actioncode.ts:68](https://github.com/otaprotocol/actioncodes/blob/6
 
 > **get** **metadata**(): `undefined` \| [`ActionCodeMetadata`](../interfaces/ActionCodeMetadata.md)
 
-Defined in: [actioncode.ts:143](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L143)
+Defined in: [actioncode.ts:143](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L143)
 
 Get metadata associated with this action code
 
@@ -189,7 +189,7 @@ Metadata object or undefined
 
 > **get** **params**(): `undefined` \| `Record`\<`string`, `any`\>
 
-Defined in: [actioncode.ts:159](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L159)
+Defined in: [actioncode.ts:159](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L159)
 
 Get parameters associated with this action
 
@@ -207,7 +207,7 @@ Parameters object or undefined
 
 > **get** **prefix**(): `string`
 
-Defined in: [actioncode.ts:119](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L119)
+Defined in: [actioncode.ts:119](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L119)
 
 Get the prefix used for this action code
 
@@ -225,7 +225,7 @@ Normalized prefix
 
 > **get** **pubkey**(): `string`
 
-Defined in: [actioncode.ts:127](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L127)
+Defined in: [actioncode.ts:127](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L127)
 
 Get the user's public key
 
@@ -243,7 +243,7 @@ User's public key
 
 > **get** **remainingTime**(): `number`
 
-Defined in: [actioncode.ts:78](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L78)
+Defined in: [actioncode.ts:78](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L78)
 
 Get remaining time in milliseconds until expiration
 
@@ -261,7 +261,7 @@ Remaining time in milliseconds, or 0 if expired
 
 > **get** **remainingTimeString**(): `string`
 
-Defined in: [actioncode.ts:196](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L196)
+Defined in: [actioncode.ts:196](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L196)
 
 Get a formatted time string showing remaining time
 
@@ -279,7 +279,7 @@ Human-readable time string (e.g., "1m 30s remaining")
 
 > **get** **signature**(): `string`
 
-Defined in: [actioncode.ts:175](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L175)
+Defined in: [actioncode.ts:175](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L175)
 
 Get the user's signature
 
@@ -297,7 +297,7 @@ User's signature string
 
 > **get** **status**(): [`ActionCodeStatus`](../type-aliases/ActionCodeStatus.md)
 
-Defined in: [actioncode.ts:103](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L103)
+Defined in: [actioncode.ts:103](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L103)
 
 Get the current status of the action code
 
@@ -315,7 +315,7 @@ Current status
 
 > **get** **timestamp**(): `number`
 
-Defined in: [actioncode.ts:167](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L167)
+Defined in: [actioncode.ts:167](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L167)
 
 Get the timestamp when the code was generated
 
@@ -333,7 +333,7 @@ Timestamp in milliseconds
 
 > **get** **transaction**(): `undefined` \| [`ActionCodeTransaction`](../interfaces/ActionCodeTransaction.md)
 
-Defined in: [actioncode.ts:135](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L135)
+Defined in: [actioncode.ts:135](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L135)
 
 Get the transaction data (chain-specific)
 
@@ -349,7 +349,7 @@ Transaction data or undefined
 
 > **isValid**(`protocol`): `boolean`
 
-Defined in: [actioncode.ts:51](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L51)
+Defined in: [actioncode.ts:51](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L51)
 
 #### Parameters
 
@@ -367,7 +367,7 @@ Defined in: [actioncode.ts:51](https://github.com/otaprotocol/actioncodes/blob/6
 
 > `static` **fromEncoded**(`encoded`): `ActionCode`
 
-Defined in: [actioncode.ts:42](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L42)
+Defined in: [actioncode.ts:42](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L42)
 
 #### Parameters
 
@@ -385,7 +385,7 @@ Defined in: [actioncode.ts:42](https://github.com/otaprotocol/actioncodes/blob/6
 
 > `static` **fromPayload**(`input`): `ActionCode`
 
-Defined in: [actioncode.ts:35](https://github.com/otaprotocol/actioncodes/blob/6e0359c879f763df764595dbea0cb596eff80113/src/actioncode.ts#L35)
+Defined in: [actioncode.ts:35](https://github.com/otaprotocol/actioncodes/blob/c724b443a380f5f43ae1dd1ddefb6b90efaa0aa5/src/actioncode.ts#L35)
 
 #### Parameters