@toon-protocol/connector 1.7.1

package/dist/wallet/suspicious-activity-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suspicious-activity-detector.js","sourceRoot":"","sources":["../../src/wallet/suspicious-activity-detector.ts"],"names":[],"mappings":";;;AA8BA,MAAa,0BAA0B;IAC7B,MAAM,CAAkB;IACxB,MAAM,CAAS;IACf,cAAc,CAAwB;IACtC,kBAAkB,CAAyC;IAG3D,MAAM,CAAU,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAGnD,MAAM,CAAU,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAExE,YAAY,MAAuB,EAAE,MAAc;QACjD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,EAAE,CAAC;QAChC,IAAI,CAAC,kBAAkB,GAAG,IAAI,GAAG,EAAE,CAAC;IACtC,CAAC;IASD,kBAAkB,CAAC,OAAe;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,0BAA0B,CAAC,iBAAiB,CAAC;QAGvE,IAAI,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAGxD,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC;QAGzD,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;QAE5E,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;gBACE,OAAO;gBACP,YAAY,EAAE,UAAU,CAAC,MAAM;gBAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB;gBAC5C,WAAW,EAAE,CAAC;aACf,EACD,wBAAwB,CACzB,CAAC;QACJ,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAYD,yBAAyB,CAAC,OAAe,EAAE,MAAc,EAAE,KAAa;QACtE,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAGhE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;gBACE,OAAO;gBACP,KAAK;gBACL,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC1B,EACD,0CAA0C,CAC3C,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,IAAI,YAAY,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QAE1E,IAAI,iBAAiB,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QACzE,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAGnC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QAE9D,MAAM,SAAS,GAAG,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC;QAEpE,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;gBACE,OAAO;gBACP,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACzB,KAAK;gBACL,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBACrB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;gBACzB,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;aAClC,EACD,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAQD,oBAAoB,CAAC,OAAe;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,0BAA0B,CAAC,iBAAiB,CAAC;QAEvE,IAAI,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAGxD,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC;QAGzD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAErB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;IAUD,iBAAiB,CAAC,OAAe,EAAE,MAAc,EAAE,KAAa;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,eAAe,GAAG,GAAG,GAAG,0BAA0B,CAAC,oBAAoB,CAAC;QAE9E,IAAI,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAG9D,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,GAAG,eAAe,CAAC,CAAC;QAG3E,YAAY,CAAC,IAAI,CAAC;YAChB,MAAM;YACN,KAAK;YACL,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACrD,CAAC;IAOD,KAAK;QACH,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACpE,CAAC;;AApLH,gEAqLC"}

package/dist/wallet/treasury-wallet.d.ts

@@ -0,0 +1,20 @@
+import type { Provider } from 'ethers';
+export interface Transaction {
+    hash: string;
+    to: string;
+    value?: string;
+}
+export declare class TreasuryWallet {
+    private evmWallet;
+    private evmProvider;
+    evmAddress: string;
+    private noncePromise;
+    private evmPrivateKey;
+    constructor(evmPrivateKey: string, evmProvider: Provider);
+    private ensureEvmInitialized;
+    private getNextNonce;
+    sendETH(to: string, amount: bigint): Promise<Transaction>;
+    sendERC20(to: string, tokenAddress: string, amount: bigint): Promise<Transaction>;
+    getBalance(token: string): Promise<bigint>;
+}
+//# sourceMappingURL=treasury-wallet.d.ts.map

package/dist/wallet/treasury-wallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"treasury-wallet.d.ts","sourceRoot":"","sources":["../../src/wallet/treasury-wallet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAiB/C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAYD,qBAAa,cAAc;IACzB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,WAAW,CAAW;IACvB,UAAU,EAAE,MAAM,CAAM;IAC/B,OAAO,CAAC,YAAY,CAAgC;IACpD,OAAO,CAAC,aAAa,CAAS;gBAQlB,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ;YAgB1C,oBAAoB;IAwBlC,OAAO,CAAC,YAAY;IAgBd,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IA0DzD,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IA+CjF,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CA0BjD"}

package/dist/wallet/treasury-wallet.js

@@ -0,0 +1,151 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TreasuryWallet = void 0;
+const tslib_1 = require("tslib");
+const pino_1 = tslib_1.__importDefault(require("pino"));
+const optional_require_1 = require("../utils/optional-require");
+const logger = (0, pino_1.default)({ name: 'treasury-wallet' });
+const ERC20_ABI = [
+    'function transfer(address to, uint256 amount) returns (bool)',
+    'function balanceOf(address owner) view returns (uint256)',
+];
+class TreasuryWallet {
+    evmWallet = null;
+    evmProvider;
+    evmAddress = '';
+    noncePromise = null;
+    evmPrivateKey;
+    constructor(evmPrivateKey, evmProvider) {
+        if (!evmPrivateKey) {
+            throw new Error('Treasury private key is required');
+        }
+        this.evmPrivateKey = evmPrivateKey;
+        this.evmProvider = evmProvider;
+        logger.info('Treasury wallet config stored (wallet initialization deferred)');
+    }
+    async ensureEvmInitialized() {
+        if (this.evmWallet)
+            return this.evmWallet;
+        try {
+            const { ethers } = await (0, optional_require_1.requireOptional)('ethers', 'EVM settlement');
+            this.evmWallet = new ethers.Wallet(this.evmPrivateKey, this.evmProvider);
+            this.evmAddress = this.evmWallet.address;
+            logger.info('EVM wallet initialized', { evmAddress: this.evmAddress });
+            return this.evmWallet;
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.includes('is required for')) {
+                throw error;
+            }
+            logger.error('Failed to initialize EVM wallet', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw new Error('Failed to initialize treasury EVM wallet');
+        }
+    }
+    getNextNonce() {
+        this.noncePromise = this.noncePromise
+            ? this.noncePromise.then(async (prevNonce) => prevNonce + 1)
+            : this.evmProvider.getTransactionCount(this.evmAddress, 'pending');
+        return this.noncePromise;
+    }
+    async sendETH(to, amount) {
+        try {
+            const { ethers } = await (0, optional_require_1.requireOptional)('ethers', 'EVM settlement');
+            const evmWallet = await this.ensureEvmInitialized();
+            if (!ethers.isAddress(to)) {
+                throw new Error(`Invalid EVM address: ${to}`);
+            }
+            const nonce = await this.getNextNonce();
+            const feeData = await this.evmProvider.getFeeData();
+            const tx = await evmWallet.sendTransaction({
+                to,
+                value: amount,
+                nonce,
+                gasLimit: 21000,
+                maxFeePerGas: feeData.maxFeePerGas ?? undefined,
+                maxPriorityFeePerGas: feeData.maxPriorityFeePerGas ?? undefined,
+            });
+            logger.info('ETH sent', {
+                to,
+                amount: amount.toString(),
+                txHash: tx.hash,
+                nonce,
+            });
+            return {
+                hash: tx.hash,
+                to: tx.to ?? to,
+                value: amount.toString(),
+            };
+        }
+        catch (error) {
+            logger.error('Failed to send ETH', {
+                to,
+                amount: amount.toString(),
+                error: error instanceof Error ? error.message : String(error),
+            });
+            this.noncePromise = null;
+            throw error;
+        }
+    }
+    async sendERC20(to, tokenAddress, amount) {
+        try {
+            const { ethers } = await (0, optional_require_1.requireOptional)('ethers', 'EVM settlement');
+            const evmWallet = await this.ensureEvmInitialized();
+            if (!ethers.isAddress(to)) {
+                throw new Error(`Invalid recipient address: ${to}`);
+            }
+            if (!ethers.isAddress(tokenAddress)) {
+                throw new Error(`Invalid token address: ${tokenAddress}`);
+            }
+            const tokenContract = new ethers.Contract(tokenAddress, ERC20_ABI, evmWallet);
+            const tx = await tokenContract.transfer(to, amount);
+            logger.info('ERC20 sent', {
+                to,
+                tokenAddress,
+                amount: amount.toString(),
+                txHash: tx.hash,
+            });
+            return {
+                hash: tx.hash,
+                to,
+            };
+        }
+        catch (error) {
+            logger.error('Failed to send ERC20', {
+                to,
+                tokenAddress,
+                amount: amount.toString(),
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw error;
+        }
+    }
+    async getBalance(token) {
+        try {
+            const { ethers } = await (0, optional_require_1.requireOptional)('ethers', 'EVM settlement');
+            await this.ensureEvmInitialized();
+            if (token === 'ETH' || token.toLowerCase() === 'eth') {
+                const balance = await this.evmProvider.getBalance(this.evmAddress);
+                return balance;
+            }
+            else {
+                if (!ethers.isAddress(token)) {
+                    throw new Error(`Invalid token address: ${token}`);
+                }
+                const tokenContract = new ethers.Contract(token, ERC20_ABI, this.evmProvider);
+                const balance = await tokenContract.balanceOf(this.evmAddress);
+                return balance;
+            }
+        }
+        catch (error) {
+            logger.error('Failed to get balance', {
+                token,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw error;
+        }
+    }
+}
+exports.TreasuryWallet = TreasuryWallet;
+//# sourceMappingURL=treasury-wallet.js.map

package/dist/wallet/treasury-wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"treasury-wallet.js","sourceRoot":"","sources":["../../src/wallet/treasury-wallet.ts"],"names":[],"mappings":";;;;AACA,wDAAwB;AACxB,gEAA4D;AAE5D,MAAM,MAAM,GAAG,IAAA,cAAI,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAKjD,MAAM,SAAS,GAAG;IAChB,8DAA8D;IAC9D,0DAA0D;CAC3D,CAAC;AAqBF,MAAa,cAAc;IACjB,SAAS,GAAkB,IAAI,CAAC;IAChC,WAAW,CAAW;IACvB,UAAU,GAAW,EAAE,CAAC;IACvB,YAAY,GAA2B,IAAI,CAAC;IAC5C,aAAa,CAAS;IAQ9B,YAAY,aAAqB,EAAE,WAAqB;QAEtD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAGD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAE/B,MAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;IAChF,CAAC;IAKO,KAAK,CAAC,oBAAoB;QAChC,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,kCAAe,EAA0B,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC9F,IAAI,CAAC,SAAS,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACzE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAEzC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACxE,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC9C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAKO,YAAY;QAElB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY;YACnC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAErE,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IASD,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,MAAc;QACtC,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,kCAAe,EAA0B,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC9F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAGpD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;YAChD,CAAC;YAGD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAGxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;YAGpD,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC;gBACzC,EAAE;gBACF,KAAK,EAAE,MAAM;gBACb,KAAK;gBACL,QAAQ,EAAE,KAAK;gBACf,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;gBAC/C,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,SAAS;aAChE,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE;gBACtB,EAAE;gBACF,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACzB,MAAM,EAAE,EAAE,CAAC,IAAI;gBACf,KAAK;aACN,CAAC,CAAC;YAEH,OAAO;gBACL,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE;gBACf,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE;aACzB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBACjC,EAAE;gBACF,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACzB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YAEH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAUD,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,YAAoB,EAAE,MAAc;QAC9D,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,kCAAe,EAA0B,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC9F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAGpD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,0BAA0B,YAAY,EAAE,CAAC,CAAC;YAC5D,CAAC;YAGD,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAG9E,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,QAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAErD,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE;gBACxB,EAAE;gBACF,YAAY;gBACZ,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACzB,MAAM,EAAE,EAAE,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,OAAO;gBACL,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,EAAE;aACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;gBACnC,EAAE;gBACF,YAAY;gBACZ,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACzB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAQD,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,kCAAe,EAA0B,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC9F,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAElC,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;gBAErD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACnE,OAAO,OAAO,CAAC;YACjB,CAAC;iBAAM,CAAC;gBAEN,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC9E,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,SAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChE,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;gBACpC,KAAK;gBACL,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAxMD,wCAwMC"}

package/dist/wallet/wallet-authentication.d.ts

@@ -0,0 +1,31 @@
+import type { Logger } from 'pino';
+export interface AuthConfig {
+    method: 'password' | '2fa' | 'hsm';
+    passwordMinLength: number;
+    totpEnabled: boolean;
+    totpSecret?: string;
+}
+export interface PasswordHash {
+    hash: Buffer;
+    salt: Buffer;
+    iterations: number;
+}
+export declare class UnauthorizedError extends Error {
+    constructor(operation: string);
+}
+export declare class WalletAuthenticationManager {
+    private config;
+    private logger;
+    private passwordHash?;
+    private totpSecret?;
+    private static readonly PBKDF2_ITERATIONS;
+    private static readonly PBKDF2_KEY_LENGTH;
+    private static readonly PBKDF2_DIGEST;
+    constructor(config: AuthConfig, logger: Logger);
+    setPassword(password: string): Promise<void>;
+    authenticatePassword(password: string): Promise<boolean>;
+    authenticate2FA(token: string): Promise<boolean>;
+    authenticateHSM(): Promise<boolean>;
+    authenticate(credentials: string): Promise<boolean>;
+}
+//# sourceMappingURL=wallet-authentication.d.ts.map

package/dist/wallet/wallet-authentication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-authentication.d.ts","sourceRoot":"","sources":["../../src/wallet/wallet-authentication.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAKnC,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,GAAG,KAAK,GAAG,KAAK,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAKD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAKD,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,SAAS,EAAE,MAAM;CAI9B;AAMD,qBAAa,2BAA2B;IACtC,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,UAAU,CAAC,CAAS;IAG5B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAU;IACnD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAM;IAC/C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAY;gBAErC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM;IAqBxC,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmC5C,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwCxD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4ChD,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAkBnC,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAa1D"}

package/dist/wallet/wallet-authentication.js

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WalletAuthenticationManager = exports.UnauthorizedError = void 0;
+const crypto_1 = require("crypto");
+class UnauthorizedError extends Error {
+    constructor(operation) {
+        super(`Unauthorized access to ${operation}: authentication required`);
+        this.name = 'UnauthorizedError';
+    }
+}
+exports.UnauthorizedError = UnauthorizedError;
+class WalletAuthenticationManager {
+    config;
+    logger;
+    passwordHash;
+    totpSecret;
+    static PBKDF2_ITERATIONS = 100000;
+    static PBKDF2_KEY_LENGTH = 32;
+    static PBKDF2_DIGEST = 'sha256';
+    constructor(config, logger) {
+        this.config = config;
+        this.logger = logger;
+        if (config.method === '2fa' && !config.totpSecret) {
+            throw new Error('TOTP secret required when 2FA authentication enabled');
+        }
+        if (config.method === '2fa') {
+            this.totpSecret = config.totpSecret;
+        }
+    }
+    async setPassword(password) {
+        if (password.length < this.config.passwordMinLength) {
+            throw new Error(`Password must be at least ${this.config.passwordMinLength} characters long`);
+        }
+        const salt = (0, crypto_1.randomBytes)(32);
+        const hash = (0, crypto_1.pbkdf2Sync)(password, salt, WalletAuthenticationManager.PBKDF2_ITERATIONS, WalletAuthenticationManager.PBKDF2_KEY_LENGTH, WalletAuthenticationManager.PBKDF2_DIGEST);
+        this.passwordHash = {
+            hash,
+            salt,
+            iterations: WalletAuthenticationManager.PBKDF2_ITERATIONS,
+        };
+        this.logger.info({ method: 'password' }, 'Password authentication configured');
+    }
+    async authenticatePassword(password) {
+        if (!this.passwordHash) {
+            this.logger.warn('Password authentication attempted but no password configured');
+            return false;
+        }
+        try {
+            const hash = (0, crypto_1.pbkdf2Sync)(password, this.passwordHash.salt, this.passwordHash.iterations, WalletAuthenticationManager.PBKDF2_KEY_LENGTH, WalletAuthenticationManager.PBKDF2_DIGEST);
+            const isValid = (0, crypto_1.timingSafeEqual)(hash, this.passwordHash.hash);
+            if (isValid) {
+                this.logger.info({ method: 'password' }, 'Password authentication successful');
+            }
+            else {
+                this.logger.warn({ method: 'password' }, 'Password authentication failed');
+            }
+            return isValid;
+        }
+        catch (error) {
+            this.logger.error({ error, method: 'password' }, 'Password authentication error');
+            return false;
+        }
+    }
+    async authenticate2FA(token) {
+        if (!this.totpSecret) {
+            this.logger.warn('2FA authentication attempted but no TOTP secret configured');
+            return false;
+        }
+        try {
+            if (!/^\d{6}$/.test(token)) {
+                this.logger.warn({ method: '2fa' }, '2FA token invalid format (expected 6 digits)');
+                return false;
+            }
+            this.logger.info({ method: '2fa' }, '2FA authentication requested (placeholder implementation)');
+            this.logger.warn({ method: '2fa' }, '2FA not implemented in MVP - authentication failed');
+            return false;
+        }
+        catch (error) {
+            this.logger.error({ error, method: '2fa' }, '2FA authentication error');
+            return false;
+        }
+    }
+    async authenticateHSM() {
+        this.logger.info({ method: 'hsm' }, 'HSM authentication requested (not implemented - Epic 12)');
+        return false;
+    }
+    async authenticate(credentials) {
+        switch (this.config.method) {
+            case 'password':
+                return this.authenticatePassword(credentials);
+            case '2fa':
+                return this.authenticate2FA(credentials);
+            case 'hsm':
+                return this.authenticateHSM();
+            default:
+                this.logger.error({ method: this.config.method }, 'Unknown authentication method');
+                return false;
+        }
+    }
+}
+exports.WalletAuthenticationManager = WalletAuthenticationManager;
+//# sourceMappingURL=wallet-authentication.js.map

package/dist/wallet/wallet-authentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-authentication.js","sourceRoot":"","sources":["../../src/wallet/wallet-authentication.ts"],"names":[],"mappings":";;;AAQA,mCAAkE;AAyBlE,MAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,SAAiB;QAC3B,KAAK,CAAC,0BAA0B,SAAS,2BAA2B,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAMD,MAAa,2BAA2B;IAC9B,MAAM,CAAa;IACnB,MAAM,CAAS;IACf,YAAY,CAAgB;IAC5B,UAAU,CAAU;IAGpB,MAAM,CAAU,iBAAiB,GAAG,MAAM,CAAC;IAC3C,MAAM,CAAU,iBAAiB,GAAG,EAAE,CAAC;IACvC,MAAM,CAAU,aAAa,GAAG,QAAQ,CAAC;IAEjD,YAAY,MAAkB,EAAE,MAAc;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAGrB,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACtC,CAAC;IACH,CAAC;IASD,KAAK,CAAC,WAAW,CAAC,QAAgB;QAEhC,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,MAAM,CAAC,iBAAiB,kBAAkB,CAAC,CAAC;QAChG,CAAC;QAGD,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;QAG7B,MAAM,IAAI,GAAG,IAAA,mBAAU,EACrB,QAAQ,EACR,IAAI,EACJ,2BAA2B,CAAC,iBAAiB,EAC7C,2BAA2B,CAAC,iBAAiB,EAC7C,2BAA2B,CAAC,aAAa,CAC1C,CAAC;QAGF,IAAI,CAAC,YAAY,GAAG;YAClB,IAAI;YACJ,IAAI;YACJ,UAAU,EAAE,2BAA2B,CAAC,iBAAiB;SAC1D,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,oCAAoC,CAAC,CAAC;IACjF,CAAC;IASD,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QACzC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YACjF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YAEH,MAAM,IAAI,GAAG,IAAA,mBAAU,EACrB,QAAQ,EACR,IAAI,CAAC,YAAY,CAAC,IAAI,EACtB,IAAI,CAAC,YAAY,CAAC,UAAU,EAC5B,2BAA2B,CAAC,iBAAiB,EAC7C,2BAA2B,CAAC,aAAa,CAC1C,CAAC;YAGF,MAAM,OAAO,GAAG,IAAA,wBAAe,EAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAE9D,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,oCAAoC,CAAC,CAAC;YACjF,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,gCAAgC,CAAC,CAAC;YAC7E,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,+BAA+B,CAAC,CAAC;YAClF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAUD,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YAC/E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YAEH,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,8CAA8C,CAAC,CAAC;gBACpF,OAAO,KAAK,CAAC;YACf,CAAC;YAID,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,2DAA2D,CAC5D,CAAC;YAWF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,oDAAoD,CAAC,CAAC;YAC1F,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,0BAA0B,CAAC,CAAC;YACxE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IASD,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,0DAA0D,CAAC,CAAC;QAOhG,OAAO,KAAK,CAAC;IACf,CAAC;IASD,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3B,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;YAChD,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3C,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC;YAChC;gBACE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,+BAA+B,CAAC,CAAC;gBACnF,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;;AArLH,kEAsLC"}

package/dist/wallet/wallet-db-schema.d.ts

@@ -0,0 +1,11 @@
+export declare const AGENT_WALLETS_TABLE_SCHEMA = "\nCREATE TABLE IF NOT EXISTS agent_wallets (\n  agent_id TEXT PRIMARY KEY,           -- Unique agent identifier\n  derivation_index INTEGER UNIQUE NOT NULL,  -- BIP-44 index (prevents collisions)\n  evm_address TEXT NOT NULL,           -- Ethereum/Base L2 address\n  created_at INTEGER NOT NULL,         -- Unix timestamp\n  metadata TEXT                        -- JSON-serialized optional metadata\n);\n";
+export declare const AGENT_WALLETS_INDEXES: string[];
+export declare const AGENT_BALANCES_TABLE_SCHEMA = "\nCREATE TABLE IF NOT EXISTS agent_balances (\n  id INTEGER PRIMARY KEY AUTOINCREMENT,\n  agent_id TEXT NOT NULL,              -- References agent_wallets.agent_id\n  chain TEXT NOT NULL,                 -- 'evm'\n  token TEXT NOT NULL,                 -- Token identifier\n  balance TEXT NOT NULL,               -- Balance as string (bigint serialized)\n  timestamp INTEGER NOT NULL           -- Unix timestamp\n);\n";
+export declare const AGENT_BALANCES_INDEXES: string[];
+export declare const WALLET_LIFECYCLE_TABLE_SCHEMA = "\nCREATE TABLE IF NOT EXISTS wallet_lifecycle (\n  agent_id TEXT PRIMARY KEY,           -- References agent_wallets.agent_id\n  state TEXT NOT NULL,                 -- Current lifecycle state\n  created_at INTEGER NOT NULL,         -- Unix timestamp (wallet created)\n  activated_at INTEGER,                -- Unix timestamp (wallet activated)\n  suspended_at INTEGER,                -- Unix timestamp (wallet suspended)\n  archived_at INTEGER,                 -- Unix timestamp (wallet archived)\n  last_activity INTEGER,               -- Unix timestamp (last transaction)\n  total_transactions INTEGER NOT NULL, -- Total transaction count\n  total_volume TEXT,                   -- JSON: { token: volume_string }\n  suspension_reason TEXT               -- Reason for suspension (if applicable)\n);\n";
+export declare const WALLET_LIFECYCLE_INDEXES: string[];
+export declare const WALLET_ARCHIVES_TABLE_SCHEMA = "\nCREATE TABLE IF NOT EXISTS wallet_archives (\n  agent_id TEXT PRIMARY KEY,           -- Archived agent identifier\n  wallet_data TEXT NOT NULL,           -- JSON-serialized AgentWallet\n  balances TEXT NOT NULL,              -- JSON: { \"chain:token\": balance_string }\n  lifecycle_data TEXT NOT NULL,        -- JSON-serialized WalletLifecycleRecord\n  archived_at INTEGER NOT NULL         -- Unix timestamp (archived)\n);\n";
+export declare const WALLET_ARCHIVES_INDEXES: string[];
+export declare const AGENT_CHANNELS_TABLE_SCHEMA = "\nCREATE TABLE IF NOT EXISTS agent_channels (\n  agent_id TEXT NOT NULL,              -- Agent identifier\n  channel_id TEXT PRIMARY KEY,         -- On-chain channel ID (EVM: bytes32)\n  chain TEXT NOT NULL,                 -- 'evm'\n  peer_id TEXT NOT NULL,               -- Peer agent identifier\n  token TEXT NOT NULL,                 -- Token symbol (EVM: USDC/DAI)\n  opened_at INTEGER NOT NULL,          -- Unix timestamp (channel opened)\n  last_activity_at INTEGER,            -- Unix timestamp (last payment)\n  closed_at INTEGER                    -- Unix timestamp (channel closed, NULL if active)\n);\n";
+export declare const AGENT_CHANNELS_INDEXES: string[];
+//# sourceMappingURL=wallet-db-schema.d.ts.map

package/dist/wallet/wallet-db-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-db-schema.d.ts","sourceRoot":"","sources":["../../src/wallet/wallet-db-schema.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,0BAA0B,yZAQtC,CAAC;AAEF,eAAO,MAAM,qBAAqB,UAGjC,CAAC;AASF,eAAO,MAAM,2BAA2B,saASvC,CAAC;AAEF,eAAO,MAAM,sBAAsB,UAGlC,CAAC;AASF,eAAO,MAAM,6BAA6B,syBAazC,CAAC;AAEF,eAAO,MAAM,wBAAwB,UAGpC,CAAC;AASF,eAAO,MAAM,4BAA4B,gbAQxC,CAAC;AAEF,eAAO,MAAM,uBAAuB,UAEnC,CAAC;AASF,eAAO,MAAM,2BAA2B,2mBAWvC,CAAC;AAEF,eAAO,MAAM,sBAAsB,UAKlC,CAAC"}

package/dist/wallet/wallet-db-schema.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGENT_CHANNELS_INDEXES = exports.AGENT_CHANNELS_TABLE_SCHEMA = exports.WALLET_ARCHIVES_INDEXES = exports.WALLET_ARCHIVES_TABLE_SCHEMA = exports.WALLET_LIFECYCLE_INDEXES = exports.WALLET_LIFECYCLE_TABLE_SCHEMA = exports.AGENT_BALANCES_INDEXES = exports.AGENT_BALANCES_TABLE_SCHEMA = exports.AGENT_WALLETS_INDEXES = exports.AGENT_WALLETS_TABLE_SCHEMA = void 0;
+exports.AGENT_WALLETS_TABLE_SCHEMA = `
+CREATE TABLE IF NOT EXISTS agent_wallets (
+  agent_id TEXT PRIMARY KEY,           -- Unique agent identifier
+  derivation_index INTEGER UNIQUE NOT NULL,  -- BIP-44 index (prevents collisions)
+  evm_address TEXT NOT NULL,           -- Ethereum/Base L2 address
+  created_at INTEGER NOT NULL,         -- Unix timestamp
+  metadata TEXT                        -- JSON-serialized optional metadata
+);
+`;
+exports.AGENT_WALLETS_INDEXES = [
+    'CREATE INDEX IF NOT EXISTS idx_derivation_index ON agent_wallets(derivation_index);',
+    'CREATE INDEX IF NOT EXISTS idx_evm_address ON agent_wallets(evm_address);',
+];
+exports.AGENT_BALANCES_TABLE_SCHEMA = `
+CREATE TABLE IF NOT EXISTS agent_balances (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  agent_id TEXT NOT NULL,              -- References agent_wallets.agent_id
+  chain TEXT NOT NULL,                 -- 'evm'
+  token TEXT NOT NULL,                 -- Token identifier
+  balance TEXT NOT NULL,               -- Balance as string (bigint serialized)
+  timestamp INTEGER NOT NULL           -- Unix timestamp
+);
+`;
+exports.AGENT_BALANCES_INDEXES = [
+    'CREATE INDEX IF NOT EXISTS idx_agent_balances_lookup ON agent_balances(agent_id, chain, token);',
+    'CREATE INDEX IF NOT EXISTS idx_agent_balances_timestamp ON agent_balances(timestamp);',
+];
+exports.WALLET_LIFECYCLE_TABLE_SCHEMA = `
+CREATE TABLE IF NOT EXISTS wallet_lifecycle (
+  agent_id TEXT PRIMARY KEY,           -- References agent_wallets.agent_id
+  state TEXT NOT NULL,                 -- Current lifecycle state
+  created_at INTEGER NOT NULL,         -- Unix timestamp (wallet created)
+  activated_at INTEGER,                -- Unix timestamp (wallet activated)
+  suspended_at INTEGER,                -- Unix timestamp (wallet suspended)
+  archived_at INTEGER,                 -- Unix timestamp (wallet archived)
+  last_activity INTEGER,               -- Unix timestamp (last transaction)
+  total_transactions INTEGER NOT NULL, -- Total transaction count
+  total_volume TEXT,                   -- JSON: { token: volume_string }
+  suspension_reason TEXT               -- Reason for suspension (if applicable)
+);
+`;
+exports.WALLET_LIFECYCLE_INDEXES = [
+    'CREATE INDEX IF NOT EXISTS idx_lifecycle_state ON wallet_lifecycle(state);',
+    'CREATE INDEX IF NOT EXISTS idx_lifecycle_last_activity ON wallet_lifecycle(last_activity);',
+];
+exports.WALLET_ARCHIVES_TABLE_SCHEMA = `
+CREATE TABLE IF NOT EXISTS wallet_archives (
+  agent_id TEXT PRIMARY KEY,           -- Archived agent identifier
+  wallet_data TEXT NOT NULL,           -- JSON-serialized AgentWallet
+  balances TEXT NOT NULL,              -- JSON: { "chain:token": balance_string }
+  lifecycle_data TEXT NOT NULL,        -- JSON-serialized WalletLifecycleRecord
+  archived_at INTEGER NOT NULL         -- Unix timestamp (archived)
+);
+`;
+exports.WALLET_ARCHIVES_INDEXES = [
+    'CREATE INDEX IF NOT EXISTS idx_archives_archived_at ON wallet_archives(archived_at);',
+];
+exports.AGENT_CHANNELS_TABLE_SCHEMA = `
+CREATE TABLE IF NOT EXISTS agent_channels (
+  agent_id TEXT NOT NULL,              -- Agent identifier
+  channel_id TEXT PRIMARY KEY,         -- On-chain channel ID (EVM: bytes32)
+  chain TEXT NOT NULL,                 -- 'evm'
+  peer_id TEXT NOT NULL,               -- Peer agent identifier
+  token TEXT NOT NULL,                 -- Token symbol (EVM: USDC/DAI)
+  opened_at INTEGER NOT NULL,          -- Unix timestamp (channel opened)
+  last_activity_at INTEGER,            -- Unix timestamp (last payment)
+  closed_at INTEGER                    -- Unix timestamp (channel closed, NULL if active)
+);
+`;
+exports.AGENT_CHANNELS_INDEXES = [
+    'CREATE INDEX IF NOT EXISTS idx_channels_agent_id ON agent_channels(agent_id);',
+    'CREATE INDEX IF NOT EXISTS idx_channels_chain ON agent_channels(chain);',
+    'CREATE INDEX IF NOT EXISTS idx_channels_peer_id ON agent_channels(peer_id);',
+    'CREATE INDEX IF NOT EXISTS idx_channels_closed_at ON agent_channels(closed_at);',
+];
+//# sourceMappingURL=wallet-db-schema.js.map

package/dist/wallet/wallet-db-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-db-schema.js","sourceRoot":"","sources":["../../src/wallet/wallet-db-schema.ts"],"names":[],"mappings":";;;AAQa,QAAA,0BAA0B,GAAG;;;;;;;;CAQzC,CAAC;AAEW,QAAA,qBAAqB,GAAG;IACnC,qFAAqF;IACrF,2EAA2E;CAC5E,CAAC;AASW,QAAA,2BAA2B,GAAG;;;;;;;;;CAS1C,CAAC;AAEW,QAAA,sBAAsB,GAAG;IACpC,iGAAiG;IACjG,uFAAuF;CACxF,CAAC;AASW,QAAA,6BAA6B,GAAG;;;;;;;;;;;;;CAa5C,CAAC;AAEW,QAAA,wBAAwB,GAAG;IACtC,4EAA4E;IAC5E,4FAA4F;CAC7F,CAAC;AASW,QAAA,4BAA4B,GAAG;;;;;;;;CAQ3C,CAAC;AAEW,QAAA,uBAAuB,GAAG;IACrC,sFAAsF;CACvF,CAAC;AASW,QAAA,2BAA2B,GAAG;;;;;;;;;;;CAW1C,CAAC;AAEW,QAAA,sBAAsB,GAAG;IACpC,+EAA+E;IAC/E,yEAAyE;IACzE,6EAA6E;IAC7E,iFAAiF;CAClF,CAAC"}

package/dist/wallet/wallet-security.d.ts

@@ -0,0 +1,58 @@
+import type { Logger } from 'pino';
+import type Database from 'better-sqlite3';
+export interface SpendingLimits {
+    maxTransactionSize: bigint;
+    dailyLimit: bigint;
+    monthlyLimit: bigint;
+}
+export interface SecurityConfig {
+    authentication: {
+        method: 'password' | '2fa' | 'hsm';
+        passwordMinLength: number;
+        totpEnabled: boolean;
+    };
+    rateLimits: {
+        walletCreation: number;
+        fundingRequests: number;
+    };
+    spendingLimits: {
+        default: SpendingLimits;
+        perAgent: Record<string, SpendingLimits>;
+    };
+    fraudDetection: {
+        rapidFundingThreshold: number;
+        unusualTransactionStdDev: number;
+    };
+}
+export interface FraudCheckResult {
+    detected: boolean;
+    reason?: string;
+    score?: number;
+}
+export interface FraudDetector {
+    analyzeTransaction(params: {
+        agentId: string;
+        amount: bigint;
+        token: string;
+        timestamp: number;
+    }): Promise<FraudCheckResult>;
+}
+export interface AuditLogger {
+    auditLog(operation: string, agentId: string, details: Record<string, unknown>): Promise<void>;
+}
+export declare class SpendingLimitExceededError extends Error {
+    constructor(limitType: string, limit: bigint, attempted: bigint);
+}
+export declare class WalletSecurityManager {
+    private config;
+    private fraudDetector;
+    private logger;
+    private db?;
+    constructor(config: SecurityConfig, fraudDetector: FraudDetector, logger: Logger, db?: Database.Database);
+    sanitizeWalletData<T>(wallet: T): T;
+    getSpendingLimits(agentId: string): Promise<SpendingLimits>;
+    getDailySpending(agentId: string, token: string): Promise<bigint>;
+    getMonthlySpending(agentId: string, token: string): Promise<bigint>;
+    validateTransaction(agentId: string, amount: bigint, token: string): Promise<boolean>;
+}
+//# sourceMappingURL=wallet-security.d.ts.map

package/dist/wallet/wallet-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-security.d.ts","sourceRoot":"","sources":["../../src/wallet/wallet-security.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAO3C,MAAM,WAAW,cAAc;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAKD,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE;QACd,MAAM,EAAE,UAAU,GAAG,KAAK,GAAG,KAAK,CAAC;QACnC,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,UAAU,EAAE;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,cAAc,EAAE;QACd,OAAO,EAAE,cAAc,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;KAC1C,CAAC;IACF,cAAc,EAAE;QACd,qBAAqB,EAAE,MAAM,CAAC;QAC9B,wBAAwB,EAAE,MAAM,CAAC;KAClC,CAAC;CACH;AAKD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAKD,MAAM,WAAW,aAAa;IAC5B,kBAAkB,CAAC,MAAM,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC/B;AAKD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/F;AAKD,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAIhE;AAMD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,EAAE,CAAC,CAAoB;gBAG7B,MAAM,EAAE,cAAc,EACtB,aAAa,EAAE,aAAa,EAC5B,MAAM,EAAE,MAAM,EACd,EAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ;IAgBxB,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC;IAgC7B,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAmB3D,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmCjE,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAqCnE,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAmF5F"}