@waiaas/daemon 2.0.0-rc.1

package/dist/services/kill-switch-service.d.ts

@@ -0,0 +1,118 @@
+/**
+ * KillSwitchService: 3-state machine (ACTIVE / SUSPENDED / LOCKED)
+ * with CAS (Compare-And-Swap) ACID pattern for atomic state transitions
+ * and 6-step cascade execution.
+ *
+ * State machine:
+ *   ACTIVE <---> SUSPENDED ---> LOCKED
+ *   LOCKED ----> ACTIVE
+ *
+ * Valid transitions:
+ *   ACTIVE -> SUSPENDED   (activate / suspend)
+ *   SUSPENDED -> LOCKED   (escalate)
+ *   SUSPENDED -> ACTIVE   (recover from suspended)
+ *   LOCKED -> ACTIVE      (recover from locked)
+ *
+ * Invalid transitions (rejected with 409):
+ *   ACTIVE -> LOCKED      (must escalate through SUSPENDED)
+ *   LOCKED -> SUSPENDED   (must recover to ACTIVE first)
+ *
+ * 6-step cascade (on activation):
+ *   1. Revoke all active sessions
+ *   2. Cancel in-flight transactions (PENDING/QUEUED/EXECUTING -> CANCELLED)
+ *   3. Suspend all ACTIVE wallets
+ *   4. API 503 (handled by kill-switch-guard middleware)
+ *   5. Send notification (KILL_SWITCH_ACTIVATED)
+ *   6. Insert audit log entry (severity: critical)
+ *
+ * CAS ACID pattern:
+ *   1. BEGIN IMMEDIATE (acquire exclusive lock)
+ *   2. UPDATE ... WHERE value = expectedState (CAS check)
+ *   3. If changes === 0 -> ROLLBACK (CAS failure)
+ *   4. UPSERT metadata (activated_at, activated_by)
+ *   5. COMMIT
+ *
+ * @see docs/36-killswitch-evm-freeze.md
+ */
+import type { Database } from 'better-sqlite3';
+import type { NotificationService } from '../notifications/notification-service.js';
+import type { EventBus } from '@waiaas/core';
+export interface KillSwitchStateInfo {
+    state: string;
+    activatedAt: number | null;
+    activatedBy: string | null;
+}
+export interface CascadeResult {
+    success: boolean;
+    error?: string;
+}
+export declare class KillSwitchService {
+    private sqlite;
+    private notificationService?;
+    private eventBus?;
+    constructor(opts: {
+        sqlite: Database;
+        notificationService?: NotificationService;
+        eventBus?: EventBus;
+    });
+    /** Get current kill switch state from key_value_store. */
+    getState(): KillSwitchStateInfo;
+    /**
+     * ACTIVE -> SUSPENDED transition (kill switch activation).
+     * Returns true on success, false on CAS failure (state was not ACTIVE).
+     */
+    activate(activatedBy: string): boolean;
+    /**
+     * SUSPENDED -> LOCKED transition (severity escalation).
+     * Returns true on success, false on CAS failure (state was not SUSPENDED).
+     */
+    escalate(escalatedBy: string): boolean;
+    /**
+     * SUSPENDED -> ACTIVE transition (recovery from suspended).
+     * Returns true on success, false on CAS failure (state was not SUSPENDED).
+     */
+    recoverFromSuspended(): boolean;
+    /**
+     * LOCKED -> ACTIVE transition (recovery from locked).
+     * Returns true on success, false on CAS failure (state was not LOCKED).
+     */
+    recoverFromLocked(): boolean;
+    /**
+     * Ensure kill_switch_state key exists in key_value_store.
+     * Sets to ACTIVE if not present. Safe to call on every startup.
+     */
+    ensureInitialized(): void;
+    /**
+     * Activate kill switch with 6-step cascade.
+     * CAS activate() + executeCascade() on success.
+     */
+    activateWithCascade(activatedBy: string): CascadeResult;
+    /**
+     * Escalate kill switch with notification + audit log.
+     * CAS escalate() + notification/audit on success.
+     */
+    escalateWithCascade(escalatedBy: string): CascadeResult;
+    /**
+     * Execute the 6-step cascade after kill switch activation.
+     *
+     * Steps:
+     *   1. Revoke all active sessions (SET revoked_at)
+     *   2. Cancel in-flight transactions (PENDING/QUEUED/EXECUTING -> CANCELLED)
+     *   3. Suspend all ACTIVE wallets
+     *   4. API 503 -- handled by middleware (no action needed here)
+     *   5. Send notification (KILL_SWITCH_ACTIVATED)
+     *   6. Insert audit log entry
+     */
+    executeCascade(activatedBy: string): Promise<void>;
+    /**
+     * CAS transition with metadata set (for activate/escalate).
+     * Sets activated_at and activated_by on success.
+     */
+    private casTransition;
+    /**
+     * CAS transition with metadata clear (for recovery).
+     * Clears activated_at and activated_by on success.
+     */
+    private casTransitionWithClear;
+}
+//# sourceMappingURL=kill-switch-service.d.ts.map

package/dist/services/kill-switch-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-switch-service.d.ts","sourceRoot":"","sources":["../../src/services/kill-switch-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAM7C,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAW;IACzB,OAAO,CAAC,mBAAmB,CAAC,CAAsB;IAClD,OAAO,CAAC,QAAQ,CAAC,CAAW;gBAEhB,IAAI,EAAE;QAChB,MAAM,EAAE,QAAQ,CAAC;QACjB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;QAC1C,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACrB;IAMD,0DAA0D;IAC1D,QAAQ,IAAI,mBAAmB;IAoB/B;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAItC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAItC;;;OAGG;IACH,oBAAoB,IAAI,OAAO;IAI/B;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAI5B;;;OAGG;IACH,iBAAiB,IAAI,IAAI;IAazB;;;OAGG;IACH,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa;IAgBvD;;;OAGG;IACH,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa;IA8CvD;;;;;;;;;;OAUG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4ExD;;;OAGG;IACH,OAAO,CAAC,aAAa;IA+CrB;;;OAGG;IACH,OAAO,CAAC,sBAAsB;CAoC/B"}

package/dist/services/kill-switch-service.js

@@ -0,0 +1,291 @@
+/**
+ * KillSwitchService: 3-state machine (ACTIVE / SUSPENDED / LOCKED)
+ * with CAS (Compare-And-Swap) ACID pattern for atomic state transitions
+ * and 6-step cascade execution.
+ *
+ * State machine:
+ *   ACTIVE <---> SUSPENDED ---> LOCKED
+ *   LOCKED ----> ACTIVE
+ *
+ * Valid transitions:
+ *   ACTIVE -> SUSPENDED   (activate / suspend)
+ *   SUSPENDED -> LOCKED   (escalate)
+ *   SUSPENDED -> ACTIVE   (recover from suspended)
+ *   LOCKED -> ACTIVE      (recover from locked)
+ *
+ * Invalid transitions (rejected with 409):
+ *   ACTIVE -> LOCKED      (must escalate through SUSPENDED)
+ *   LOCKED -> SUSPENDED   (must recover to ACTIVE first)
+ *
+ * 6-step cascade (on activation):
+ *   1. Revoke all active sessions
+ *   2. Cancel in-flight transactions (PENDING/QUEUED/EXECUTING -> CANCELLED)
+ *   3. Suspend all ACTIVE wallets
+ *   4. API 503 (handled by kill-switch-guard middleware)
+ *   5. Send notification (KILL_SWITCH_ACTIVATED)
+ *   6. Insert audit log entry (severity: critical)
+ *
+ * CAS ACID pattern:
+ *   1. BEGIN IMMEDIATE (acquire exclusive lock)
+ *   2. UPDATE ... WHERE value = expectedState (CAS check)
+ *   3. If changes === 0 -> ROLLBACK (CAS failure)
+ *   4. UPSERT metadata (activated_at, activated_by)
+ *   5. COMMIT
+ *
+ * @see docs/36-killswitch-evm-freeze.md
+ */
+const KV_KEY_STATE = 'kill_switch_state';
+const KV_KEY_ACTIVATED_AT = 'kill_switch_activated_at';
+const KV_KEY_ACTIVATED_BY = 'kill_switch_activated_by';
+export class KillSwitchService {
+    sqlite;
+    notificationService;
+    eventBus;
+    constructor(opts) {
+        this.sqlite = opts.sqlite;
+        this.notificationService = opts.notificationService;
+        this.eventBus = opts.eventBus;
+    }
+    /** Get current kill switch state from key_value_store. */
+    getState() {
+        const stateRow = this.sqlite
+            .prepare('SELECT value FROM key_value_store WHERE key = ?')
+            .get(KV_KEY_STATE);
+        const atRow = this.sqlite
+            .prepare('SELECT value FROM key_value_store WHERE key = ?')
+            .get(KV_KEY_ACTIVATED_AT);
+        const byRow = this.sqlite
+            .prepare('SELECT value FROM key_value_store WHERE key = ?')
+            .get(KV_KEY_ACTIVATED_BY);
+        return {
+            state: stateRow?.value ?? 'ACTIVE',
+            activatedAt: atRow?.value ? parseInt(atRow.value, 10) : null,
+            activatedBy: byRow?.value ?? null,
+        };
+    }
+    /**
+     * ACTIVE -> SUSPENDED transition (kill switch activation).
+     * Returns true on success, false on CAS failure (state was not ACTIVE).
+     */
+    activate(activatedBy) {
+        return this.casTransition('ACTIVE', 'SUSPENDED', activatedBy);
+    }
+    /**
+     * SUSPENDED -> LOCKED transition (severity escalation).
+     * Returns true on success, false on CAS failure (state was not SUSPENDED).
+     */
+    escalate(escalatedBy) {
+        return this.casTransition('SUSPENDED', 'LOCKED', escalatedBy);
+    }
+    /**
+     * SUSPENDED -> ACTIVE transition (recovery from suspended).
+     * Returns true on success, false on CAS failure (state was not SUSPENDED).
+     */
+    recoverFromSuspended() {
+        return this.casTransitionWithClear('SUSPENDED', 'ACTIVE');
+    }
+    /**
+     * LOCKED -> ACTIVE transition (recovery from locked).
+     * Returns true on success, false on CAS failure (state was not LOCKED).
+     */
+    recoverFromLocked() {
+        return this.casTransitionWithClear('LOCKED', 'ACTIVE');
+    }
+    /**
+     * Ensure kill_switch_state key exists in key_value_store.
+     * Sets to ACTIVE if not present. Safe to call on every startup.
+     */
+    ensureInitialized() {
+        const now = Math.floor(Date.now() / 1000);
+        this.sqlite
+            .prepare('INSERT OR IGNORE INTO key_value_store (key, value, updated_at) VALUES (?, ?, ?)')
+            .run(KV_KEY_STATE, 'ACTIVE', now);
+    }
+    // -----------------------------------------------------------------------
+    // Cascade methods
+    // -----------------------------------------------------------------------
+    /**
+     * Activate kill switch with 6-step cascade.
+     * CAS activate() + executeCascade() on success.
+     */
+    activateWithCascade(activatedBy) {
+        const success = this.activate(activatedBy);
+        if (!success) {
+            const current = this.getState();
+            return {
+                success: false,
+                error: `Kill switch is already ${current.state}`,
+            };
+        }
+        // Execute cascade (fire-and-forget for async parts like notifications)
+        void this.executeCascade(activatedBy);
+        return { success: true };
+    }
+    /**
+     * Escalate kill switch with notification + audit log.
+     * CAS escalate() + notification/audit on success.
+     */
+    escalateWithCascade(escalatedBy) {
+        const success = this.escalate(escalatedBy);
+        if (!success) {
+            const current = this.getState();
+            return {
+                success: false,
+                error: `Cannot escalate from ${current.state} (must be SUSPENDED)`,
+            };
+        }
+        // Step: Send escalation notification
+        void this.notificationService?.notify('KILL_SWITCH_ESCALATED', 'system', { escalatedBy });
+        // Step: Audit log
+        const now = Math.floor(Date.now() / 1000);
+        try {
+            this.sqlite
+                .prepare('INSERT INTO audit_log (timestamp, event_type, actor, details, severity) VALUES (?, ?, ?, ?, ?)')
+                .run(now, 'KILL_SWITCH_ESCALATED', escalatedBy, JSON.stringify({ action: 'kill_switch_escalated', escalatedBy }), 'critical');
+        }
+        catch {
+            // Best-effort audit logging
+        }
+        // EventBus emit
+        this.eventBus?.emit('kill-switch:state-changed', {
+            state: 'LOCKED',
+            previousState: 'SUSPENDED',
+            activatedBy: escalatedBy,
+            timestamp: now,
+        });
+        return { success: true };
+    }
+    /**
+     * Execute the 6-step cascade after kill switch activation.
+     *
+     * Steps:
+     *   1. Revoke all active sessions (SET revoked_at)
+     *   2. Cancel in-flight transactions (PENDING/QUEUED/EXECUTING -> CANCELLED)
+     *   3. Suspend all ACTIVE wallets
+     *   4. API 503 -- handled by middleware (no action needed here)
+     *   5. Send notification (KILL_SWITCH_ACTIVATED)
+     *   6. Insert audit log entry
+     */
+    async executeCascade(activatedBy) {
+        const now = Math.floor(Date.now() / 1000);
+        // Step 1: Revoke all active sessions
+        try {
+            this.sqlite
+                .prepare('UPDATE sessions SET revoked_at = ? WHERE revoked_at IS NULL')
+                .run(now);
+        }
+        catch {
+            // Best-effort: continue cascade even if step fails
+        }
+        // Step 2: Cancel in-flight transactions
+        try {
+            this.sqlite
+                .prepare("UPDATE transactions SET status = 'CANCELLED', error = 'Kill switch activated' WHERE status IN ('PENDING', 'QUEUED', 'EXECUTING')")
+                .run();
+        }
+        catch {
+            // Best-effort
+        }
+        // Step 3: Suspend all ACTIVE wallets
+        try {
+            this.sqlite
+                .prepare("UPDATE wallets SET status = 'SUSPENDED', suspended_at = ?, suspension_reason = 'Kill switch activated' WHERE status = 'ACTIVE'")
+                .run(now);
+        }
+        catch {
+            // Best-effort
+        }
+        // Step 4: API 503 is handled by killSwitchGuard middleware
+        // (KillSwitchService state is SUSPENDED/LOCKED -> middleware blocks)
+        // Step 5: Send notification
+        void this.notificationService?.notify('KILL_SWITCH_ACTIVATED', 'system', { activatedBy });
+        // Step 6: Audit log
+        try {
+            this.sqlite
+                .prepare('INSERT INTO audit_log (timestamp, event_type, actor, details, severity) VALUES (?, ?, ?, ?, ?)')
+                .run(now, 'KILL_SWITCH_ACTIVATED', activatedBy, JSON.stringify({ action: 'kill_switch_activated', activatedBy }), 'critical');
+        }
+        catch {
+            // Best-effort audit logging
+        }
+        // EventBus emit
+        this.eventBus?.emit('kill-switch:state-changed', {
+            state: 'SUSPENDED',
+            previousState: 'ACTIVE',
+            activatedBy,
+            timestamp: now,
+        });
+    }
+    // -----------------------------------------------------------------------
+    // CAS transition internals
+    // -----------------------------------------------------------------------
+    /**
+     * CAS transition with metadata set (for activate/escalate).
+     * Sets activated_at and activated_by on success.
+     */
+    casTransition(expectedState, newState, actorName) {
+        const now = Math.floor(Date.now() / 1000);
+        try {
+            this.sqlite.exec('BEGIN IMMEDIATE');
+            const result = this.sqlite
+                .prepare('UPDATE key_value_store SET value = ?, updated_at = ? WHERE key = ? AND value = ?')
+                .run(newState, now, KV_KEY_STATE, expectedState);
+            if (result.changes === 0) {
+                this.sqlite.exec('ROLLBACK');
+                return false;
+            }
+            // UPSERT activated_at
+            this.sqlite
+                .prepare('INSERT INTO key_value_store (key, value, updated_at) VALUES (?, ?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at')
+                .run(KV_KEY_ACTIVATED_AT, String(now), now);
+            // UPSERT activated_by
+            this.sqlite
+                .prepare('INSERT INTO key_value_store (key, value, updated_at) VALUES (?, ?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at')
+                .run(KV_KEY_ACTIVATED_BY, actorName, now);
+            this.sqlite.exec('COMMIT');
+            return true;
+        }
+        catch (err) {
+            try {
+                this.sqlite.exec('ROLLBACK');
+            }
+            catch {
+                /* best effort */
+            }
+            throw err;
+        }
+    }
+    /**
+     * CAS transition with metadata clear (for recovery).
+     * Clears activated_at and activated_by on success.
+     */
+    casTransitionWithClear(expectedState, newState) {
+        const now = Math.floor(Date.now() / 1000);
+        try {
+            this.sqlite.exec('BEGIN IMMEDIATE');
+            const result = this.sqlite
+                .prepare('UPDATE key_value_store SET value = ?, updated_at = ? WHERE key = ? AND value = ?')
+                .run(newState, now, KV_KEY_STATE, expectedState);
+            if (result.changes === 0) {
+                this.sqlite.exec('ROLLBACK');
+                return false;
+            }
+            // Clear activated_at and activated_by
+            this.sqlite
+                .prepare('DELETE FROM key_value_store WHERE key IN (?, ?)')
+                .run(KV_KEY_ACTIVATED_AT, KV_KEY_ACTIVATED_BY);
+            this.sqlite.exec('COMMIT');
+            return true;
+        }
+        catch (err) {
+            try {
+                this.sqlite.exec('ROLLBACK');
+            }
+            catch {
+                /* best effort */
+            }
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=kill-switch-service.js.map

package/dist/services/kill-switch-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-switch-service.js","sourceRoot":"","sources":["../../src/services/kill-switch-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAMH,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AACvD,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAavD,MAAM,OAAO,iBAAiB;IACpB,MAAM,CAAW;IACjB,mBAAmB,CAAuB;IAC1C,QAAQ,CAAY;IAE5B,YAAY,IAIX;QACC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,0DAA0D;IAC1D,QAAQ;QACN,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM;aACzB,OAAO,CAAC,iDAAiD,CAAC;aAC1D,GAAG,CAAC,YAAY,CAAkC,CAAC;QAEtD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM;aACtB,OAAO,CAAC,iDAAiD,CAAC;aAC1D,GAAG,CAAC,mBAAmB,CAAkC,CAAC;QAE7D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM;aACtB,OAAO,CAAC,iDAAiD,CAAC;aAC1D,GAAG,CAAC,mBAAmB,CAAkC,CAAC;QAE7D,OAAO;YACL,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,QAAQ;YAClC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;YAC5D,WAAW,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI;SAClC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,WAAmB;QAC1B,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAChE,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,WAAmB;QAC1B,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAChE,CAAC;IAED;;;OAGG;IACH,oBAAoB;QAClB,OAAO,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAED;;;OAGG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,iBAAiB;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;aACR,OAAO,CACN,iFAAiF,CAClF;aACA,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,0EAA0E;IAC1E,kBAAkB;IAClB,0EAA0E;IAE1E;;;OAGG;IACH,mBAAmB,CAAC,WAAmB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,0BAA0B,OAAO,CAAC,KAAK,EAAE;aACjD,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,KAAK,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAEtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,WAAmB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,wBAAwB,OAAO,CAAC,KAAK,sBAAsB;aACnE,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,KAAK,IAAI,CAAC,mBAAmB,EAAE,MAAM,CACnC,uBAAuB,EACvB,QAAQ,EACR,EAAE,WAAW,EAAE,CAChB,CAAC;QAEF,kBAAkB;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,CAAC,MAAM;iBACR,OAAO,CACN,gGAAgG,CACjG;iBACA,GAAG,CACF,GAAG,EACH,uBAAuB,EACvB,WAAW,EACX,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,WAAW,EAAE,CAAC,EAChE,UAAU,CACX,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QAED,gBAAgB;QAChB,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,2BAA2B,EAAE;YAC/C,KAAK,EAAE,QAAQ;YACf,aAAa,EAAE,WAAW;YAC1B,WAAW,EAAE,WAAW;YACxB,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,qCAAqC;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM;iBACR,OAAO,CACN,6DAA6D,CAC9D;iBACA,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM;iBACR,OAAO,CACN,kIAAkI,CACnI;iBACA,GAAG,EAAE,CAAC;QACX,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QAED,qCAAqC;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM;iBACR,OAAO,CACN,gIAAgI,CACjI;iBACA,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QAED,2DAA2D;QAC3D,qEAAqE;QAErE,4BAA4B;QAC5B,KAAK,IAAI,CAAC,mBAAmB,EAAE,MAAM,CACnC,uBAAuB,EACvB,QAAQ,EACR,EAAE,WAAW,EAAE,CAChB,CAAC;QAEF,oBAAoB;QACpB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM;iBACR,OAAO,CACN,gGAAgG,CACjG;iBACA,GAAG,CACF,GAAG,EACH,uBAAuB,EACvB,WAAW,EACX,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,WAAW,EAAE,CAAC,EAChE,UAAU,CACX,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QAED,gBAAgB;QAChB,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,2BAA2B,EAAE;YAC/C,KAAK,EAAE,WAAW;YAClB,aAAa,EAAE,QAAQ;YACvB,WAAW;YACX,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,2BAA2B;IAC3B,0EAA0E;IAE1E;;;OAGG;IACK,aAAa,CACnB,aAAqB,EACrB,QAAgB,EAChB,SAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;iBACvB,OAAO,CACN,kFAAkF,CACnF;iBACA,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;YAEnD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC7B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,sBAAsB;YACtB,IAAI,CAAC,MAAM;iBACR,OAAO,CACN,+JAA+J,CAChK;iBACA,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAE9C,sBAAsB;YACtB,IAAI,CAAC,MAAM;iBACR,OAAO,CACN,+JAA+J,CAChK;iBACA,GAAG,CAAC,mBAAmB,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YAE5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,sBAAsB,CAC5B,aAAqB,EACrB,QAAgB;QAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;iBACvB,OAAO,CACN,kFAAkF,CACnF;iBACA,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;YAEnD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC7B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,sCAAsC;YACtC,IAAI,CAAC,MAAM;iBACR,OAAO,CAAC,iDAAiD,CAAC;iBAC1D,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;YAEjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/services/monitoring/balance-monitor-service.d.ts

@@ -0,0 +1,65 @@
+/**
+ * BalanceMonitorService: periodic native-token balance check for all active wallets.
+ *
+ * Checks all ACTIVE wallets at a configurable interval (default 5 minutes).
+ * When a wallet's native balance drops below the chain-specific threshold,
+ * a LOW_BALANCE notification is sent via NotificationService.
+ *
+ * Features:
+ *   - Chain-specific thresholds (SOL 0.01, ETH 0.005)
+ *   - 24-hour cooldown to prevent duplicate alerts (BMON-03)
+ *   - Recovery detection: re-alert if balance recovers then drops again (BMON-04)
+ *   - Per-wallet error isolation: one wallet failure does not block others
+ *   - Runtime configuration updates (updateConfig)
+ *
+ * @see BMON-01, BMON-02, BMON-03, BMON-04, BMON-05, BMON-06 requirements
+ */
+import type { Database } from 'better-sqlite3';
+import type { AdapterPool } from '../../infrastructure/adapter-pool.js';
+import type { NotificationService } from '../../notifications/notification-service.js';
+export interface BalanceMonitorConfig {
+    checkIntervalSec: number;
+    lowBalanceThresholdSol: number;
+    lowBalanceThresholdEth: number;
+    cooldownHours: number;
+    enabled: boolean;
+}
+export declare const DEFAULT_BALANCE_MONITOR_CONFIG: BalanceMonitorConfig;
+export declare class BalanceMonitorService {
+    private sqlite;
+    private adapterPool;
+    private rpcConfig;
+    private notificationService?;
+    private config;
+    private lastNotified;
+    private checkTimer;
+    constructor(opts: {
+        sqlite: Database;
+        adapterPool: AdapterPool;
+        config: {
+            rpc: Record<string, string>;
+        };
+        notificationService?: NotificationService;
+        monitorConfig?: Partial<BalanceMonitorConfig>;
+    });
+    /** Start periodic balance checking. */
+    start(): void;
+    /** Stop periodic balance checking. */
+    stop(): void;
+    /** Check balances of all ACTIVE wallets. */
+    checkAllWallets(): Promise<void>;
+    private checkWallet;
+    private getThreshold;
+    private shouldNotify;
+    private notifyLowBalance;
+    private markRecovered;
+    /** Update configuration at runtime (e.g., from Admin Settings). */
+    updateConfig(config: Partial<BalanceMonitorConfig>): void;
+    /** Get current monitoring status for debugging. */
+    getStatus(): {
+        enabled: boolean;
+        config: BalanceMonitorConfig;
+        trackedWallets: number;
+    };
+}
+//# sourceMappingURL=balance-monitor-service.d.ts.map

package/dist/services/monitoring/balance-monitor-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance-monitor-service.d.ts","sourceRoot":"","sources":["../../../src/services/monitoring/balance-monitor-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAExE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAMvF,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,eAAO,MAAM,8BAA8B,EAAE,oBAM5C,CAAC;AAuBF,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAW;IACzB,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,SAAS,CAAyB;IAC1C,OAAO,CAAC,mBAAmB,CAAC,CAAsB;IAClD,OAAO,CAAC,MAAM,CAAuB;IAGrC,OAAO,CAAC,YAAY,CAAkC;IAGtD,OAAO,CAAC,UAAU,CAA+C;gBAErD,IAAI,EAAE;QAChB,MAAM,EAAE,QAAQ,CAAC;QACjB,WAAW,EAAE,WAAW,CAAC;QACzB,MAAM,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC;QACxC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;QAC1C,aAAa,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;KAC/C;IAYD,uCAAuC;IACvC,KAAK,IAAI,IAAI;IAQb,sCAAsC;IACtC,IAAI,IAAI,IAAI;IAWZ,4CAA4C;IACtC,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;YAoBxB,WAAW;IAsCzB,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,gBAAgB;IAuBxB,OAAO,CAAC,aAAa;IAarB,mEAAmE;IACnE,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,IAAI;IA6BzD,mDAAmD;IACnD,SAAS,IAAI;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,oBAAoB,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC;KACxB;CAOF"}