@waiaas/daemon 2.0.0-rc.1

package/dist/api/routes/actions.js

@@ -0,0 +1,291 @@
+/**
+ * Action routes: POST /v1/actions/:provider/:action, GET /v1/actions/providers.
+ *
+ * POST /v1/actions/:provider/:action:
+ *   - Requires sessionAuth (applied at server level in createApp())
+ *   - Resolves action parameters via ActionProviderRegistry.executeResolve()
+ *   - Injects the resulting ContractCallRequest into the existing 6-stage pipeline
+ *   - Returns 201 with txId (same pattern as POST /v1/transactions/send)
+ *
+ * GET /v1/actions/providers:
+ *   - Requires sessionAuth
+ *   - Lists registered action providers with their actions and API key status
+ *
+ * @see docs/62-action-provider-architecture.md
+ */
+import { OpenAPIHono, createRoute, z } from '@hono/zod-openapi';
+import { eq } from 'drizzle-orm';
+import { WAIaaSError } from '@waiaas/core';
+import { resolveRpcUrl } from '../../infrastructure/adapter-pool.js';
+import { wallets, transactions } from '../../infrastructure/database/schema.js';
+import { stage1Validate, stage2Auth, stage3Policy, stage4Wait, stage5Execute, stage6Confirm, } from '../../pipeline/stages.js';
+import { resolveNetwork } from '../../pipeline/network-resolver.js';
+import { TxSendResponseSchema, buildErrorResponses, openApiValidationHook, } from './openapi-schemas.js';
+// ---------------------------------------------------------------------------
+// OpenAPI Response Schemas
+// ---------------------------------------------------------------------------
+const ActionDefinitionResponseSchema = z.object({
+    name: z.string(),
+    description: z.string(),
+    chain: z.string(),
+    riskLevel: z.string(),
+    defaultTier: z.string(),
+});
+const ProviderResponseSchema = z.object({
+    name: z.string(),
+    description: z.string(),
+    version: z.string(),
+    chains: z.array(z.string()),
+    mcpExpose: z.boolean(),
+    requiresApiKey: z.boolean(),
+    hasApiKey: z.boolean(),
+    actions: z.array(ActionDefinitionResponseSchema),
+});
+const ProvidersListResponseSchema = z
+    .object({
+    providers: z.array(ProviderResponseSchema),
+})
+    .openapi('ProvidersListResponse');
+const ActionExecuteRequestSchema = z
+    .object({
+    params: z.record(z.unknown()).optional().default({}),
+    network: z.string().optional(),
+})
+    .openapi('ActionExecuteRequest');
+// ---------------------------------------------------------------------------
+// Route definitions
+// ---------------------------------------------------------------------------
+const listProvidersRoute = createRoute({
+    method: 'get',
+    path: '/actions/providers',
+    tags: ['Actions'],
+    summary: 'List registered action providers',
+    responses: {
+        200: {
+            description: 'Registered action providers with their actions',
+            content: { 'application/json': { schema: ProvidersListResponseSchema } },
+        },
+    },
+});
+const executeActionRoute = createRoute({
+    method: 'post',
+    path: '/actions/{provider}/{action}',
+    tags: ['Actions'],
+    summary: 'Execute an action via provider',
+    description: 'Resolve action parameters into a ContractCallRequest and execute through the 6-stage pipeline.',
+    request: {
+        params: z.object({
+            provider: z.string(),
+            action: z.string(),
+        }),
+        body: {
+            content: {
+                'application/json': { schema: ActionExecuteRequestSchema },
+            },
+        },
+    },
+    responses: {
+        201: {
+            description: 'Action submitted to pipeline',
+            content: { 'application/json': { schema: TxSendResponseSchema } },
+        },
+        ...buildErrorResponses([
+            'ACTION_NOT_FOUND',
+            'API_KEY_REQUIRED',
+            'ACTION_VALIDATION_FAILED',
+            'ACTION_RESOLVE_FAILED',
+            'ACTION_RETURN_INVALID',
+            'WALLET_NOT_FOUND',
+        ]),
+    },
+});
+// ---------------------------------------------------------------------------
+// Route factory
+// ---------------------------------------------------------------------------
+/**
+ * Create action route sub-router.
+ *
+ * GET  /actions/providers -> list registered providers + actions
+ * POST /actions/:provider/:action -> resolve + pipeline execution
+ */
+export function actionRoutes(deps) {
+    const router = new OpenAPIHono({ defaultHook: openApiValidationHook });
+    // -------------------------------------------------------------------------
+    // GET /actions/providers
+    // -------------------------------------------------------------------------
+    router.openapi(listProvidersRoute, async (c) => {
+        const providerMetadataList = deps.registry.listProviders();
+        const providers = providerMetadataList.map((meta) => {
+            const providerActions = deps.registry.listActions(meta.name);
+            return {
+                name: meta.name,
+                description: meta.description,
+                version: meta.version,
+                chains: meta.chains,
+                mcpExpose: meta.mcpExpose,
+                requiresApiKey: meta.requiresApiKey,
+                hasApiKey: deps.apiKeyStore.has(meta.name),
+                actions: providerActions.map((a) => ({
+                    name: a.action.name,
+                    description: a.action.description,
+                    chain: a.action.chain,
+                    riskLevel: a.action.riskLevel,
+                    defaultTier: a.action.defaultTier,
+                })),
+            };
+        });
+        return c.json({ providers }, 200);
+    });
+    // -------------------------------------------------------------------------
+    // POST /actions/:provider/:action
+    // -------------------------------------------------------------------------
+    router.openapi(executeActionRoute, async (c) => {
+        const { provider, action } = c.req.valid('param');
+        const body = c.req.valid('json');
+        const actionKey = `${provider}/${action}`;
+        // 1. Look up action entry
+        const entry = deps.registry.getAction(actionKey);
+        if (!entry) {
+            throw new WAIaaSError('ACTION_NOT_FOUND', {
+                message: `Action '${actionKey}' not found`,
+                details: { provider, action },
+            });
+        }
+        // 2. Check API key requirement
+        if (entry.provider.metadata.requiresApiKey) {
+            if (!deps.apiKeyStore.has(entry.provider.metadata.name)) {
+                throw new WAIaaSError('API_KEY_REQUIRED', {
+                    message: `Admin > Settings에서 ${entry.provider.metadata.name} API 키를 설정하세요`,
+                    details: { provider: entry.provider.metadata.name },
+                });
+            }
+        }
+        // 3. Extract session context (set by sessionAuth middleware)
+        const walletId = c.get('walletId');
+        const sessionId = c.get('sessionId');
+        // 4. Look up wallet
+        const wallet = await deps.db.select().from(wallets).where(eq(wallets.id, walletId)).get();
+        if (!wallet) {
+            throw new WAIaaSError('WALLET_NOT_FOUND', {
+                message: `Wallet '${walletId}' not found`,
+            });
+        }
+        if (wallet.status === 'TERMINATED') {
+            throw new WAIaaSError('WALLET_TERMINATED');
+        }
+        // 5. Build ActionContext
+        const actionContext = {
+            walletAddress: wallet.publicKey,
+            chain: wallet.chain,
+            walletId,
+            sessionId,
+        };
+        // 6. Execute resolve via registry (validates input + return value)
+        let contractCall;
+        try {
+            contractCall = await deps.registry.executeResolve(actionKey, body.params ?? {}, actionContext);
+        }
+        catch (err) {
+            // Re-throw WAIaaSError as-is (ACTION_VALIDATION_FAILED, ACTION_RETURN_INVALID, etc.)
+            if (err instanceof WAIaaSError)
+                throw err;
+            // Wrap unexpected errors as ACTION_RESOLVE_FAILED
+            throw new WAIaaSError('ACTION_RESOLVE_FAILED', {
+                message: `Action resolve failed: ${err instanceof Error ? err.message : 'Unknown error'}`,
+                details: { actionKey },
+                cause: err instanceof Error ? err : undefined,
+            });
+        }
+        // 7. Resolve network: body.network > wallet.defaultNetwork > environment default
+        let resolvedNetwork;
+        try {
+            resolvedNetwork = resolveNetwork(body.network, wallet.defaultNetwork, wallet.environment, wallet.chain);
+        }
+        catch (err) {
+            if (err instanceof Error && err.message.includes('environment')) {
+                throw new WAIaaSError('ENVIRONMENT_NETWORK_MISMATCH', {
+                    message: err.message,
+                });
+            }
+            throw new WAIaaSError('ACTION_VALIDATION_FAILED', {
+                message: err instanceof Error ? err.message : 'Network validation failed',
+            });
+        }
+        // 8. Resolve adapter from pool
+        const rpcUrl = resolveRpcUrl(deps.config.rpc, wallet.chain, resolvedNetwork);
+        const adapter = await deps.adapterPool.resolve(wallet.chain, resolvedNetwork, rpcUrl);
+        // 9. Build pipeline context (inject ContractCallRequest as the request)
+        const ctx = {
+            db: deps.db,
+            adapter,
+            keyStore: deps.keyStore,
+            policyEngine: deps.policyEngine,
+            masterPassword: deps.masterPassword,
+            walletId,
+            wallet: {
+                publicKey: wallet.publicKey,
+                chain: wallet.chain,
+                environment: wallet.environment,
+                defaultNetwork: wallet.defaultNetwork ?? null,
+            },
+            resolvedNetwork,
+            request: contractCall, // ContractCallRequest with type: 'CONTRACT_CALL'
+            txId: '', // stage1Validate will assign
+            sessionId,
+            sqlite: deps.sqlite,
+            delayQueue: deps.delayQueue,
+            approvalWorkflow: deps.approvalWorkflow,
+            config: {
+                policy_defaults_delay_seconds: deps.config.security.policy_defaults_delay_seconds,
+                policy_defaults_approval_timeout: deps.config.security.policy_defaults_approval_timeout,
+            },
+            notificationService: deps.notificationService,
+            priceOracle: deps.priceOracle,
+            settingsService: deps.settingsService,
+        };
+        // 10. Stage 1: Validate + DB INSERT (synchronous -- assigns ctx.txId)
+        await stage1Validate(ctx);
+        // Return 201 immediately with txId
+        const response = c.json({
+            id: ctx.txId,
+            status: 'PENDING',
+        }, 201);
+        // 11. Stages 2-6 run asynchronously (fire-and-forget)
+        void (async () => {
+            try {
+                await stage2Auth(ctx);
+                await stage3Policy(ctx);
+                await stage4Wait(ctx);
+                await stage5Execute(ctx);
+                await stage6Confirm(ctx);
+            }
+            catch (error) {
+                // PIPELINE_HALTED is intentional -- transaction is QUEUED
+                if (error instanceof WAIaaSError && error.code === 'PIPELINE_HALTED') {
+                    return;
+                }
+                // If stages 2-6 fail, mark as FAILED
+                try {
+                    const tx = await deps.db
+                        .select()
+                        .from(transactions)
+                        .where(eq(transactions.id, ctx.txId))
+                        .get();
+                    if (tx && tx.status !== 'CONFIRMED' && tx.status !== 'FAILED' && tx.status !== 'CANCELLED') {
+                        const errorMessage = error instanceof Error ? error.message : 'Pipeline execution failed';
+                        await deps.db
+                            .update(transactions)
+                            .set({ status: 'FAILED', error: errorMessage })
+                            .where(eq(transactions.id, ctx.txId));
+                    }
+                }
+                catch {
+                    // Swallow DB update errors in background
+                }
+            }
+        })();
+        return response;
+    });
+    return router;
+}
+//# sourceMappingURL=actions.js.map

package/dist/api/routes/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../../src/api/routes/actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAO3C,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAIrE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EACL,cAAc,EACd,UAAU,EACV,YAAY,EACZ,UAAU,EACV,aAAa,EACb,aAAa,GACd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAOpE,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAwB9B,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;CACjD,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;CAC3C,CAAC;KACD,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEpC,MAAM,0BAA0B,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAEnC,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,MAAM,kBAAkB,GAAG,WAAW,CAAC;IACrC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,CAAC,SAAS,CAAC;IACjB,OAAO,EAAE,kCAAkC;IAC3C,SAAS,EAAE;QACT,GAAG,EAAE;YACH,WAAW,EAAE,gDAAgD;YAC7D,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE;SACzE;KACF;CACF,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,WAAW,CAAC;IACrC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,8BAA8B;IACpC,IAAI,EAAE,CAAC,SAAS,CAAC;IACjB,OAAO,EAAE,gCAAgC;IACzC,WAAW,EACT,gGAAgG;IAClG,OAAO,EAAE;QACP,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;YACf,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;SACnB,CAAC;QACF,IAAI,EAAE;YACJ,OAAO,EAAE;gBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE;aAC3D;SACF;KACF;IACD,SAAS,EAAE;QACT,GAAG,EAAE;YACH,WAAW,EAAE,8BAA8B;YAC3C,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE;SAClE;QACD,GAAG,mBAAmB,CAAC;YACrB,kBAAkB;YAClB,kBAAkB;YAClB,0BAA0B;YAC1B,uBAAuB;YACvB,uBAAuB;YACvB,kBAAkB;SACnB,CAAC;KACH;CACF,CAAC,CAAC;AAEH,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAqB;IAChD,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAEvE,4EAA4E;IAC5E,yBAAyB;IACzB,4EAA4E;IAE5E,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,oBAAoB,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAE3D,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAClD,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7D,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC1C,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI;oBACnB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;oBACjC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK;oBACrB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS;oBAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;iBAClC,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,kCAAkC;IAClC,4EAA4E;IAE5E,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC;QAE1C,0BAA0B;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE;gBACxC,OAAO,EAAE,WAAW,SAAS,aAAa;gBAC1C,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;aAC9B,CAAC,CAAC;QACL,CAAC;QAED,+BAA+B;QAC/B,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE;oBACxC,OAAO,EAAE,sBAAsB,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,eAAe;oBAC1E,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAmB,CAAW,CAAC;QACtD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAoB,CAAuB,CAAC;QAEpE,oBAAoB;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1F,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE;gBACxC,OAAO,EAAE,WAAW,QAAQ,aAAa;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACnC,MAAM,IAAI,WAAW,CAAC,mBAAmB,CAAC,CAAC;QAC7C,CAAC;QAED,yBAAyB;QACzB,MAAM,aAAa,GAAG;YACpB,aAAa,EAAE,MAAM,CAAC,SAAS;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAkB;YAChC,QAAQ;YACR,SAAS;SACV,CAAC;QAEF,mEAAmE;QACnE,IAAI,YAAY,CAAC;QACjB,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAC/C,SAAS,EACT,IAAI,CAAC,MAAM,IAAI,EAAE,EACjB,aAAa,CACd,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qFAAqF;YACrF,IAAI,GAAG,YAAY,WAAW;gBAAE,MAAM,GAAG,CAAC;YAC1C,kDAAkD;YAClD,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE;gBAC7C,OAAO,EAAE,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;gBACzF,OAAO,EAAE,EAAE,SAAS,EAAE;gBACtB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,iFAAiF;QACjF,IAAI,eAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,eAAe,GAAG,cAAc,CAC9B,IAAI,CAAC,OAAkC,EACvC,MAAM,CAAC,cAAoC,EAC3C,MAAM,CAAC,WAA8B,EACrC,MAAM,CAAC,KAAkB,CAC1B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,WAAW,CAAC,8BAA8B,EAAE;oBACpD,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,WAAW,CAAC,0BAA0B,EAAE;gBAChD,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B;aAC1E,CAAC,CAAC;QACL,CAAC;QAED,+BAA+B;QAC/B,MAAM,MAAM,GAAG,aAAa,CAC1B,IAAI,CAAC,MAAM,CAAC,GAAwC,EACpD,MAAM,CAAC,KAAK,EACZ,eAAe,CAChB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAC5C,MAAM,CAAC,KAAkB,EACzB,eAA8B,EAC9B,MAAM,CACP,CAAC;QAEF,wEAAwE;QACxE,MAAM,GAAG,GAAoB;YAC3B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,QAAQ;YACR,MAAM,EAAE;gBACN,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;aAC9C;YACD,eAAe;YACf,OAAO,EAAE,YAAY,EAAE,iDAAiD;YACxE,IAAI,EAAE,EAAE,EAAE,6BAA6B;YACvC,SAAS;YACT,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,MAAM,EAAE;gBACN,6BAA6B,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,6BAA6B;gBACjF,gCAAgC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gCAAgC;aACxF;YACD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC;QAEF,sEAAsE;QACtE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QAE1B,mCAAmC;QACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CACrB;YACE,EAAE,EAAE,GAAG,CAAC,IAAI;YACZ,MAAM,EAAE,SAAS;SAClB,EACD,GAAG,CACJ,CAAC;QAEF,sDAAsD;QACtD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;gBACtB,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;gBACxB,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;gBACtB,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;gBACzB,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,0DAA0D;gBAC1D,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBACrE,OAAO;gBACT,CAAC;gBAED,qCAAqC;gBACrC,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;yBACrB,MAAM,EAAE;yBACR,IAAI,CAAC,YAAY,CAAC;yBAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;yBACpC,GAAG,EAAE,CAAC;oBAET,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,WAAW,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBAC3F,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;wBAC1F,MAAM,IAAI,CAAC,EAAE;6BACV,MAAM,CAAC,YAAY,CAAC;6BACpB,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;6BAC9C,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC1C,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,yCAAyC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/api/routes/admin.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Admin route handlers: 22 daemon administration endpoints.
+ *
+ * GET    /admin/status              - Daemon health/uptime/version (masterAuth)
+ * POST   /admin/kill-switch         - Activate kill switch (masterAuth)
+ * GET    /admin/kill-switch         - Get kill switch state (public)
+ * POST   /admin/recover             - Deactivate kill switch (masterAuth)
+ * POST   /admin/shutdown            - Graceful daemon shutdown (masterAuth)
+ * POST   /admin/rotate-secret       - Rotate JWT secret (masterAuth)
+ * GET    /admin/notifications/status - Notification channel status (masterAuth)
+ * POST   /admin/notifications/test   - Send test notification (masterAuth)
+ * GET    /admin/notifications/log    - Query notification logs (masterAuth)
+ * GET    /admin/settings            - Get all settings (masterAuth)
+ * PUT    /admin/settings            - Update settings (masterAuth)
+ * POST   /admin/settings/test-rpc   - Test RPC connectivity (masterAuth)
+ * GET    /admin/oracle-status       - Oracle cache/source/cross-validation status (masterAuth)
+ * GET    /admin/api-keys            - List Action Provider API key status (masterAuth)
+ * PUT    /admin/api-keys/:provider  - Set or update API key (masterAuth)
+ * DELETE /admin/api-keys/:provider  - Delete API key (masterAuth)
+ * GET    /admin/forex/rates         - Forex exchange rates for display currency (masterAuth)
+ * GET    /admin/telegram-users          - List Telegram bot users (masterAuth)
+ * PUT    /admin/telegram-users/:chatId  - Update Telegram user role (masterAuth)
+ * DELETE /admin/telegram-users/:chatId  - Delete Telegram user (masterAuth)
+ *
+ * @see docs/37-rest-api-complete-spec.md
+ * @see docs/36-killswitch-evm-freeze.md
+ */
+import { OpenAPIHono } from '@hono/zod-openapi';
+import type { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
+import type { Database as SQLiteDatabase } from 'better-sqlite3';
+import type { IPriceOracle, IForexRateService } from '@waiaas/core';
+import type { JwtSecretManager } from '../../infrastructure/jwt/jwt-secret-manager.js';
+import type * as schema from '../../infrastructure/database/schema.js';
+import type { NotificationService } from '../../notifications/notification-service.js';
+import type { DaemonConfig } from '../../infrastructure/config/loader.js';
+import type { SettingsService } from '../../infrastructure/settings/index.js';
+import type { AdapterPool } from '../../infrastructure/adapter-pool.js';
+import type { ApiKeyStore } from '../../infrastructure/action/api-key-store.js';
+import type { ActionProviderRegistry } from '../../infrastructure/action/action-provider-registry.js';
+import type { KillSwitchService } from '../../services/kill-switch-service.js';
+export interface KillSwitchState {
+    state: string;
+    activatedAt: number | null;
+    activatedBy: string | null;
+}
+export interface AdminRouteDeps {
+    db: BetterSQLite3Database<typeof schema>;
+    jwtSecretManager?: JwtSecretManager;
+    getKillSwitchState: () => KillSwitchState;
+    setKillSwitchState: (state: string, activatedBy?: string) => void;
+    killSwitchService?: KillSwitchService;
+    requestShutdown?: () => void;
+    startTime: number;
+    version: string;
+    adminTimeout: number;
+    notificationService?: NotificationService;
+    notificationConfig?: DaemonConfig['notifications'];
+    settingsService?: SettingsService;
+    onSettingsChanged?: (changedKeys: string[]) => void;
+    adapterPool?: AdapterPool | null;
+    daemonConfig?: DaemonConfig;
+    priceOracle?: IPriceOracle;
+    oracleConfig?: {
+        coingeckoApiKeyConfigured: boolean;
+        crossValidationThreshold: number;
+    };
+    apiKeyStore?: ApiKeyStore;
+    actionProviderRegistry?: ActionProviderRegistry;
+    forexRateService?: IForexRateService;
+    sqlite?: SQLiteDatabase;
+}
+/**
+ * Create admin route sub-router.
+ *
+ * GET    /admin/status              - Daemon health info (masterAuth)
+ * POST   /admin/kill-switch         - Activate kill switch (masterAuth)
+ * GET    /admin/kill-switch         - Get kill switch state (public)
+ * POST   /admin/recover             - Deactivate kill switch (masterAuth)
+ * POST   /admin/shutdown            - Graceful shutdown (masterAuth)
+ * POST   /admin/rotate-secret       - Rotate JWT secret (masterAuth)
+ * GET    /admin/notifications/status - Notification channel status (masterAuth)
+ * POST   /admin/notifications/test   - Send test notification (masterAuth)
+ * GET    /admin/notifications/log    - Query notification logs (masterAuth)
+ * GET    /admin/settings            - Get all settings (masterAuth)
+ * PUT    /admin/settings            - Update settings (masterAuth)
+ * POST   /admin/settings/test-rpc   - Test RPC connectivity (masterAuth)
+ * GET    /admin/oracle-status       - Oracle cache/source/cross-validation status (masterAuth)
+ * GET    /admin/api-keys            - List Action Provider API key status (masterAuth)
+ * PUT    /admin/api-keys/:provider  - Set or update API key (masterAuth)
+ * DELETE /admin/api-keys/:provider  - Delete API key (masterAuth)
+ * GET    /admin/forex/rates             - Forex exchange rates (masterAuth)
+ * GET    /admin/wallets/:id/balance      - Wallet native+token balance (masterAuth)
+ * GET    /admin/wallets/:id/transactions - Wallet transaction history (masterAuth)
+ * GET    /admin/telegram-users          - List Telegram bot users (masterAuth)
+ * PUT    /admin/telegram-users/:chatId  - Update Telegram user role (masterAuth)
+ * DELETE /admin/telegram-users/:chatId  - Delete Telegram user (masterAuth)
+ */
+export declare function adminRoutes(deps: AdminRouteDeps): OpenAPIHono;
+//# sourceMappingURL=admin.d.ts.map

package/dist/api/routes/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../src/api/routes/admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,WAAW,EAAkB,MAAM,mBAAmB,CAAC;AAEhE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,KAAK,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEjE,OAAO,KAAK,EAAsF,YAAY,EAAE,iBAAiB,EAAgB,MAAM,cAAc,CAAC;AAEtK,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAEvF,OAAO,KAAK,KAAK,MAAM,MAAM,yCAAyC,CAAC;AACvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAE9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAExE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yDAAyD,CAAC;AACtG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AA4B/E,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC;IACzC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,kBAAkB,EAAE,MAAM,eAAe,CAAC;IAC1C,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAClE,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,kBAAkB,CAAC,EAAE,YAAY,CAAC,eAAe,CAAC,CAAC;IACnD,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IACpD,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B,YAAY,CAAC,EAAE;QAAE,yBAAyB,EAAE,OAAO,CAAC;QAAC,wBAAwB,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IAChD,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;IACrC,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AA6gBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,cAAc,GAAG,WAAW,CA49B7D"}