@waiaas/daemon 2.0.0-rc.1

package/dist/services/wc-session-service.js

@@ -0,0 +1,363 @@
+/**
+ * WcSessionService - WalletConnect SignClient lifecycle wrapper.
+ *
+ * Manages SignClient initialization, shutdown, session mapping,
+ * pairing creation, session info retrieval, and disconnect.
+ * Designed for fail-soft integration with DaemonLifecycle (Step 4c-6).
+ *
+ * Key responsibilities:
+ *   - Initialize SignClient with SQLite-backed IKeyValueStorage
+ *   - Register event listeners for session_delete / session_expire
+ *   - Maintain in-memory walletId -> session topic mapping (restored from DB on startup)
+ *   - Create WC pairings with QR code generation (createPairing)
+ *   - Manage session lifecycle (getSessionInfo, getPairingStatus, disconnectSession)
+ *
+ * @see packages/daemon/src/services/wc-storage.ts
+ * @see packages/daemon/src/infrastructure/database/migrate.ts (v16: wc_sessions table)
+ */
+import { createRequire } from 'node:module';
+import SignClientModule from '@walletconnect/sign-client';
+// ESM/CJS interop: @walletconnect/sign-client has no "import" condition in its
+// exports map, so Node.js ESM loads the CJS bundle where the actual SignClient
+// class lives at .default.
+const SignClient = SignClientModule.default ?? SignClientModule;
+import { WAIaaSError } from '@waiaas/core';
+import { SqliteKeyValueStorage } from './wc-storage.js';
+const require = createRequire(import.meta.url);
+const QRCode = require('qrcode');
+// ---------------------------------------------------------------------------
+// CAIP-2 Chain Identifiers
+// ---------------------------------------------------------------------------
+/** CAIP-2 chain identifiers for WalletConnect v2 */
+export const CAIP2_CHAIN_IDS = {
+    // Solana
+    'mainnet': 'solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp',
+    'devnet': 'solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1',
+    'testnet': 'solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3z',
+    // EVM (eip155:{chainId})
+    'ethereum-mainnet': 'eip155:1',
+    'ethereum-sepolia': 'eip155:11155111',
+    'polygon-mainnet': 'eip155:137',
+    'polygon-amoy': 'eip155:80002',
+    'arbitrum-mainnet': 'eip155:42161',
+    'arbitrum-sepolia': 'eip155:421614',
+    'optimism-mainnet': 'eip155:10',
+    'optimism-sepolia': 'eip155:11155420',
+    'base-mainnet': 'eip155:8453',
+    'base-sepolia': 'eip155:84532',
+};
+// ---------------------------------------------------------------------------
+// WcSessionService
+// ---------------------------------------------------------------------------
+export class WcSessionService {
+    signClient = null;
+    storage = null;
+    sqlite;
+    settingsService;
+    /** walletId -> session topic mapping (in-memory cache) */
+    sessionMap = new Map();
+    /** Tracking pending pairing attempts per wallet */
+    pendingPairing = new Map();
+    constructor(deps) {
+        this.sqlite = deps.sqlite;
+        this.settingsService = deps.settingsService;
+    }
+    /**
+     * Initialize SignClient with SQLite storage.
+     * No-op if walletconnect.project_id is not configured.
+     */
+    async initialize() {
+        const projectId = this.settingsService.get('walletconnect.project_id');
+        if (!projectId)
+            return;
+        const relayUrl = this.settingsService.get('walletconnect.relay_url') ||
+            'wss://relay.walletconnect.com';
+        this.storage = new SqliteKeyValueStorage(this.sqlite);
+        this.signClient = await SignClient.init({
+            projectId,
+            relayUrl,
+            storage: this.storage, // IKeyValueStorage compatible
+            metadata: {
+                name: 'WAIaaS Daemon',
+                description: 'AI Agent Wallet-as-a-Service',
+                url: 'http://localhost',
+                icons: [],
+            },
+        });
+        // Register event listeners for session lifecycle
+        this.signClient.on('session_delete', ({ topic }) => {
+            this.handleSessionDelete(topic);
+        });
+        this.signClient.on('session_expire', ({ topic }) => {
+            this.handleSessionDelete(topic);
+        });
+        // Restore existing sessions from DB -> in-memory map
+        this.restoreSessions();
+    }
+    /**
+     * Restore walletId -> topic mappings from wc_sessions table.
+     */
+    restoreSessions() {
+        const rows = this.sqlite
+            .prepare('SELECT wallet_id, topic FROM wc_sessions')
+            .all();
+        for (const row of rows) {
+            this.sessionMap.set(row.wallet_id, row.topic);
+        }
+    }
+    /**
+     * Check if a wallet has an active WC session.
+     */
+    hasActiveSession(walletId) {
+        return this.sessionMap.has(walletId);
+    }
+    /**
+     * Get the underlying SignClient instance (for route handlers / pairing).
+     * Returns null if WC is not initialized.
+     */
+    getSignClient() {
+        return this.signClient;
+    }
+    /**
+     * Get the session topic for a wallet (public accessor).
+     * Returns null if no active session exists.
+     */
+    getSessionTopic(walletId) {
+        return this.sessionMap.get(walletId) ?? null;
+    }
+    // ---------------------------------------------------------------------------
+    // Pairing / Session Management (Phase 147)
+    // ---------------------------------------------------------------------------
+    /**
+     * Create a new WC pairing for a wallet.
+     * Returns URI + QR code immediately. Session settlement happens asynchronously.
+     *
+     * @param walletId - Wallet UUID
+     * @param network - Network name (e.g., 'devnet', 'ethereum-sepolia')
+     * @param chain - Chain type ('solana' or 'ethereum')
+     */
+    async createPairing(walletId, network, chain) {
+        const signClient = this.getSignClient();
+        if (!signClient) {
+            throw new WAIaaSError('WC_NOT_CONFIGURED');
+        }
+        // Single session policy: reject if wallet already has an active session
+        if (this.hasActiveSession(walletId)) {
+            throw new WAIaaSError('WC_SESSION_EXISTS');
+        }
+        // If there's already a pending pairing for this wallet, return existing URI
+        const existing = this.pendingPairing.get(walletId);
+        if (existing && Math.floor(Date.now() / 1000) < existing.expiresAt) {
+            const qrDataUrl = await QRCode.toDataURL(existing.uri, {
+                width: 300,
+                margin: 2,
+                errorCorrectionLevel: 'M',
+            });
+            return { uri: existing.uri, qrDataUrl, expiresAt: existing.expiresAt };
+        }
+        // Resolve CAIP-2 chain ID
+        const chainId = CAIP2_CHAIN_IDS[network] ??
+            (chain === 'solana' ? `solana:${network}` : `eip155:${network}`);
+        // Determine namespace and methods
+        const namespace = chainId.split(':')[0]; // 'eip155' or 'solana'
+        const methods = namespace === 'solana'
+            ? ['solana_signTransaction', 'solana_signMessage']
+            : ['eth_sendTransaction', 'personal_sign', 'eth_signTypedData_v4'];
+        const events = namespace === 'solana'
+            ? []
+            : ['chainChanged', 'accountsChanged'];
+        const requiredNamespaces = {
+            [namespace]: {
+                chains: [chainId],
+                methods,
+                events,
+            },
+        };
+        const { uri, approval } = await signClient.connect({
+            requiredNamespaces,
+        });
+        if (!uri) {
+            throw new Error('Failed to generate pairing URI');
+        }
+        const qrDataUrl = await QRCode.toDataURL(uri, {
+            width: 300,
+            margin: 2,
+            errorCorrectionLevel: 'M',
+        });
+        const expiresAt = Math.floor(Date.now() / 1000) + 300; // 5 minutes
+        this.pendingPairing.set(walletId, { expiresAt, uri });
+        // Wait for approval in the background (do NOT await in HTTP handler)
+        this.waitForApproval(walletId, chainId, approval);
+        return { uri, qrDataUrl, expiresAt };
+    }
+    /**
+     * Background approval waiter. Saves session to DB when external wallet approves.
+     * On failure/timeout, cleans up pending pairing state.
+     */
+    waitForApproval(walletId, chainId, approval) {
+        const timeout = new Promise((_, reject) => setTimeout(() => reject(new Error('Pairing approval timeout')), 300_000));
+        Promise.race([approval(), timeout])
+            .then(async (session) => {
+            // Extract owner address from CAIP-10 accounts
+            const firstNamespace = Object.values(session.namespaces)[0];
+            const firstAccount = firstNamespace?.accounts?.[0] ?? '';
+            // CAIP-10 format: "namespace:chainId:address" -> extract address part
+            const parts = firstAccount.split(':');
+            const connectedAddress = parts.length >= 3 ? parts.slice(2).join(':') : firstAccount;
+            // Verify connected address matches registered owner
+            const wallet = this.sqlite
+                .prepare('SELECT owner_address, chain FROM wallets WHERE id = ?')
+                .get(walletId);
+            if (wallet?.owner_address && connectedAddress) {
+                const isEvm = wallet.chain === 'ethereum';
+                const matches = isEvm
+                    ? wallet.owner_address.toLowerCase() === connectedAddress.toLowerCase()
+                    : wallet.owner_address === connectedAddress;
+                if (!matches) {
+                    // Reject session: connected wallet doesn't match registered owner
+                    const signClient = this.getSignClient();
+                    if (signClient) {
+                        try {
+                            await signClient.disconnect({
+                                topic: session.topic,
+                                reason: { code: 4001, message: 'Connected wallet address does not match registered owner' },
+                            });
+                        }
+                        catch {
+                            // best effort disconnect
+                        }
+                    }
+                    this.pendingPairing.delete(walletId);
+                    return;
+                }
+            }
+            const ownerAddress = connectedAddress;
+            // Save session to DB
+            this.sqlite
+                .prepare(`INSERT OR REPLACE INTO wc_sessions (wallet_id, topic, peer_meta, chain_id, owner_address, namespaces, expiry, created_at)
+             VALUES (?, ?, ?, ?, ?, ?, ?, ?)`)
+                .run(walletId, session.topic, JSON.stringify(session.peer?.metadata ?? null), chainId, ownerAddress, JSON.stringify(session.namespaces), session.expiry, Math.floor(Date.now() / 1000));
+            // Update in-memory map
+            this.sessionMap.set(walletId, session.topic);
+            this.pendingPairing.delete(walletId);
+        })
+            .catch(() => {
+            // Timeout or rejection -- clean up pending state
+            this.pendingPairing.delete(walletId);
+        });
+    }
+    /**
+     * Get session info for a wallet from DB.
+     * Returns null if no session exists.
+     */
+    getSessionInfo(walletId) {
+        const row = this.sqlite
+            .prepare(`SELECT wallet_id, topic, peer_meta, chain_id, owner_address, expiry, created_at
+         FROM wc_sessions WHERE wallet_id = ?`)
+            .get(walletId);
+        if (!row)
+            return null;
+        let peerName = null;
+        let peerUrl = null;
+        if (row.peer_meta) {
+            try {
+                const meta = JSON.parse(row.peer_meta);
+                peerName = meta?.name ?? null;
+                peerUrl = meta?.url ?? null;
+            }
+            catch {
+                // ignore parse errors
+            }
+        }
+        return {
+            walletId: row.wallet_id,
+            topic: row.topic,
+            peerName,
+            peerUrl,
+            chainId: row.chain_id,
+            ownerAddress: row.owner_address,
+            expiry: row.expiry,
+            createdAt: row.created_at,
+        };
+    }
+    /**
+     * Get the current pairing/session status for a wallet.
+     */
+    getPairingStatus(walletId) {
+        if (this.hasActiveSession(walletId)) {
+            return 'connected';
+        }
+        const pending = this.pendingPairing.get(walletId);
+        if (pending) {
+            if (Math.floor(Date.now() / 1000) < pending.expiresAt) {
+                return 'pending';
+            }
+            // Expired pending pairing -- clean up
+            this.pendingPairing.delete(walletId);
+            return 'expired';
+        }
+        return 'none';
+    }
+    /**
+     * Disconnect a wallet's WC session.
+     * Removes from relay, DB, and in-memory map.
+     */
+    async disconnectSession(walletId) {
+        const signClient = this.getSignClient();
+        if (!signClient) {
+            throw new WAIaaSError('WC_NOT_CONFIGURED');
+        }
+        const topic = this.sessionMap.get(walletId);
+        if (!topic) {
+            throw new WAIaaSError('WC_SESSION_NOT_FOUND');
+        }
+        await signClient.disconnect({
+            topic,
+            reason: { code: 6000, message: 'User disconnected' },
+        });
+        // Clean up DB + in-memory map
+        this.handleSessionDelete(topic);
+    }
+    // ---------------------------------------------------------------------------
+    // Lifecycle
+    // ---------------------------------------------------------------------------
+    /**
+     * Gracefully shut down SignClient resources.
+     * Clears in-memory state but does NOT delete DB sessions
+     * (they'll be restored on next startup).
+     */
+    async shutdown() {
+        if (this.signClient) {
+            try {
+                // Attempt to disconnect the WebSocket relay connection
+                await this.signClient.core?.relayer?.provider?.disconnect?.();
+            }
+            catch {
+                // Ignore disconnect errors -- best effort cleanup
+            }
+            this.signClient = null;
+            this.sessionMap.clear();
+            this.pendingPairing.clear();
+        }
+        // Deactivate storage before DB close to prevent WC async callback errors
+        this.storage?.close();
+    }
+    /**
+     * Handle session deletion/expiration from WC relay.
+     * Removes from both DB and in-memory map.
+     */
+    handleSessionDelete(topic) {
+        // Remove from wc_sessions table
+        this.sqlite
+            .prepare('DELETE FROM wc_sessions WHERE topic = ?')
+            .run(topic);
+        // Remove from in-memory sessionMap
+        for (const [walletId, t] of this.sessionMap) {
+            if (t === topic) {
+                this.sessionMap.delete(walletId);
+                break;
+            }
+        }
+    }
+}
+//# sourceMappingURL=wc-session-service.js.map

package/dist/services/wc-session-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wc-session-service.js","sourceRoot":"","sources":["../../src/services/wc-session-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,gBAAgB,MAAM,4BAA4B,CAAC;AAG1D,+EAA+E;AAC/E,+EAA+E;AAC/E,2BAA2B;AAC3B,MAAM,UAAU,GACb,gBAAwB,CAAC,OAAO,IAAI,gBAAgB,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,MAAM,GAA4B,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE1D,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,oDAAoD;AACpD,MAAM,CAAC,MAAM,eAAe,GAA2B;IACrD,SAAS;IACT,SAAS,EAAE,yCAAyC;IACpD,QAAQ,EAAE,yCAAyC;IACnD,SAAS,EAAE,yCAAyC;IACpD,yBAAyB;IACzB,kBAAkB,EAAE,UAAU;IAC9B,kBAAkB,EAAE,iBAAiB;IACrC,iBAAiB,EAAE,YAAY;IAC/B,cAAc,EAAE,cAAc;IAC9B,kBAAkB,EAAE,cAAc;IAClC,kBAAkB,EAAE,eAAe;IACnC,kBAAkB,EAAE,WAAW;IAC/B,kBAAkB,EAAE,iBAAiB;IACrC,cAAc,EAAE,aAAa;IAC7B,cAAc,EAAE,cAAc;CAC/B,CAAC;AAuCF,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,OAAO,gBAAgB;IACnB,UAAU,GAA8B,IAAI,CAAC;IAC7C,OAAO,GAAiC,IAAI,CAAC;IACpC,MAAM,CAAW;IACjB,eAAe,CAAkB;IAClD,0DAA0D;IACzC,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxD,mDAAmD;IAClC,cAAc,GAAG,IAAI,GAAG,EAA8C,CAAC;IAExF,YAAY,IAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,QAAQ,GACZ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,yBAAyB,CAAC;YACnD,+BAA+B,CAAC;QAElC,IAAI,CAAC,OAAO,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEtD,IAAI,CAAC,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;YACtC,SAAS;YACT,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,OAAc,EAAE,8BAA8B;YAC5D,QAAQ,EAAE;gBACR,IAAI,EAAE,eAAe;gBACrB,WAAW,EAAE,8BAA8B;gBAC3C,GAAG,EAAE,kBAAkB;gBACvB,KAAK,EAAE,EAAE;aACV;SACF,CAAC,CAAC;QAEH,iDAAiD;QACjD,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAqB,EAAE,EAAE;YACpE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAqB,EAAE,EAAE;YACpE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,qDAAqD;QACrD,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,eAAe;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;aACrB,OAAO,CAAC,0CAA0C,CAAC;aACnD,GAAG,EAAiD,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,QAAgB;QAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED,8EAA8E;IAC9E,2CAA2C;IAC3C,8EAA8E;IAE9E;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,OAAe,EAAE,KAAa;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,WAAW,CAAC,mBAAmB,CAAC,CAAC;QAC7C,CAAC;QAED,wEAAwE;QACxE,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,WAAW,CAAC,mBAAmB,CAAC,CAAC;QAC7C,CAAC;QAED,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACnE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE;gBACrD,KAAK,EAAE,GAAG;gBACV,MAAM,EAAE,CAAC;gBACT,oBAAoB,EAAE,GAAG;aAC1B,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;QACzE,CAAC;QAED,0BAA0B;QAC1B,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC;YACtC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;QAEnE,kCAAkC;QAClC,MAAM,SAAS,GAAW,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,uBAAuB;QACzE,MAAM,OAAO,GAAG,SAAS,KAAK,QAAQ;YACpC,CAAC,CAAC,CAAC,wBAAwB,EAAE,oBAAoB,CAAC;YAClD,CAAC,CAAC,CAAC,qBAAqB,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,SAAS,KAAK,QAAQ;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;QAExC,MAAM,kBAAkB,GAA8E;YACpG,CAAC,SAAS,CAAC,EAAE;gBACX,MAAM,EAAE,CAAC,OAAO,CAAC;gBACjB,OAAO;gBACP,MAAM;aACP;SACF,CAAC;QAEF,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACjD,kBAAkB;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE;YAC5C,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,CAAC;YACT,oBAAoB,EAAE,GAAG;SAC1B,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY;QACnE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAEtD,qEAAqE;QACrE,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAElD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACvC,CAAC;IAED;;;OAGG;IACK,eAAe,CACrB,QAAgB,EAChB,OAAe,EACf,QAA4B;QAE5B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC/C,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,OAAO,CAAC,CACzE,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;aAChC,IAAI,CAAC,KAAK,EAAE,OAAY,EAAE,EAAE;YAC3B,8CAA8C;YAC9C,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAQ,CAAC;YACnE,MAAM,YAAY,GAAW,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjE,sEAAsE;YACtE,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;YAErF,oDAAoD;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;iBACvB,OAAO,CAAC,uDAAuD,CAAC;iBAChE,GAAG,CAAC,QAAQ,CAAgE,CAAC;YAEhF,IAAI,MAAM,EAAE,aAAa,IAAI,gBAAgB,EAAE,CAAC;gBAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC;gBAC1C,MAAM,OAAO,GAAG,KAAK;oBACnB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC,WAAW,EAAE;oBACvE,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,gBAAgB,CAAC;gBAE9C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,kEAAkE;oBAClE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;oBACxC,IAAI,UAAU,EAAE,CAAC;wBACf,IAAI,CAAC;4BACH,MAAM,UAAU,CAAC,UAAU,CAAC;gCAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;gCACpB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,0DAA0D,EAAE;6BAC5F,CAAC,CAAC;wBACL,CAAC;wBAAC,MAAM,CAAC;4BACP,yBAAyB;wBAC3B,CAAC;oBACH,CAAC;oBACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACrC,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,YAAY,GAAG,gBAAgB,CAAC;YAEtC,qBAAqB;YACrB,IAAI,CAAC,MAAM;iBACR,OAAO,CACN;6CACiC,CAClC;iBACA,GAAG,CACF,QAAQ,EACR,OAAO,CAAC,KAAK,EACb,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,EAC9C,OAAO,EACP,YAAY,EACZ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAClC,OAAO,CAAC,MAAM,EACd,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAC9B,CAAC;YAEJ,uBAAuB;YACvB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,iDAAiD;YACjD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,QAAgB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM;aACpB,OAAO,CACN;8CACsC,CACvC;aACA,GAAG,CAAC,QAAQ,CAQA,CAAC;QAEhB,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACvC,QAAQ,GAAG,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC;gBAC9B,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,QAAQ;YACR,OAAO;YACP,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,QAAgB;QAC/B,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,sCAAsC;YACtC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,WAAW,CAAC,mBAAmB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,WAAW,CAAC,sBAAsB,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,UAAU,CAAC,UAAU,CAAC;YAC1B,KAAK;YACL,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE;SACrD,CAAC,CAAC;QAEH,8BAA8B;QAC9B,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,8EAA8E;IAC9E,YAAY;IACZ,8EAA8E;IAE9E;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,uDAAuD;gBACvD,MAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,QAAgB,EAAE,UAAU,EAAE,EAAE,CAAC;YACzE,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;YACD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;QACD,yEAAyE;QACzE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACK,mBAAmB,CAAC,KAAa;QACvC,gCAAgC;QAChC,IAAI,CAAC,MAAM;aACR,OAAO,CAAC,yCAAyC,CAAC;aAClD,GAAG,CAAC,KAAK,CAAC,CAAC;QAEd,mCAAmC;QACnC,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5C,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjC,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/services/wc-signing-bridge.d.ts

@@ -0,0 +1,60 @@
+/**
+ * WcSigningBridge - Fire-and-forget WC signing request bridge.
+ *
+ * When an APPROVAL tier transaction is created and the wallet has an active
+ * WalletConnect session, this bridge sends a signing request to the Owner
+ * wallet (via personal_sign for EVM / solana_signMessage for Solana).
+ *
+ * On successful signature response, it verifies the signature using the
+ * existing ownerAuth verification logic (verifySIWE / Ed25519) and calls
+ * approvalWorkflow.approve() or .reject() accordingly.
+ *
+ * Key design decisions:
+ *   - Fire-and-forget: requestSignature() is called with `void` prefix,
+ *     never blocking the pipeline.
+ *   - Timeout sync: WC request expiry is derived from pending_approvals.expires_at.
+ *   - Optional dependency: Pipeline works without WcSigningBridge (checked via ctx.wcSigningBridge?.)
+ *
+ * @see packages/daemon/src/pipeline/stages.ts (stage4Wait APPROVAL branch)
+ * @see packages/daemon/src/services/wc-session-service.ts
+ * @see packages/daemon/src/workflow/approval-workflow.ts
+ */
+import type { Database } from 'better-sqlite3';
+import type { EventBus } from '@waiaas/core';
+import type { WcServiceRef } from './wc-session-service.js';
+import type { ApprovalWorkflow } from '../workflow/approval-workflow.js';
+import type { NotificationService } from '../notifications/notification-service.js';
+export interface WcSigningBridgeDeps {
+    wcServiceRef: WcServiceRef;
+    approvalWorkflow: ApprovalWorkflow;
+    sqlite: Database;
+    notificationService?: NotificationService;
+    eventBus?: EventBus;
+}
+export declare class WcSigningBridge {
+    private readonly wcServiceRef;
+    private readonly approvalWorkflow;
+    private readonly sqlite;
+    private readonly notificationService?;
+    private readonly eventBus?;
+    constructor(deps: WcSigningBridgeDeps);
+    /**
+     * Send a WC signing request to the Owner wallet (fire-and-forget).
+     *
+     * Silently returns if WC is not initialized or no session exists.
+     * On signature response: verify + approve/reject via ApprovalWorkflow.
+     * On error: reject if user-rejected, ignore if expired (approval-expired worker handles it).
+     */
+    requestSignature(walletId: string, txId: string, chain: string): Promise<void>;
+    private buildSignRequest;
+    private buildEvmSignRequest;
+    private buildSolanaSignRequest;
+    private resolveWcExpiry;
+    private handleSignatureResponse;
+    private handleEvmSignatureResponse;
+    private handleSolanaSignatureResponse;
+    private handleSignatureError;
+    private isApprovalStillPending;
+    private fallbackToTelegram;
+}
+//# sourceMappingURL=wc-signing-bridge.d.ts.map

package/dist/services/wc-signing-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wc-signing-bridge.d.ts","sourceRoot":"","sources":["../../src/services/wc-signing-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AA+DpF,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,YAAY,CAAC;IAC3B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,MAAM,EAAE,QAAQ,CAAC;IACjB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAYD,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAsB;IAC3D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAW;gBAEzB,IAAI,EAAE,mBAAmB;IAQrC;;;;;;OAMG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqEpF,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,mBAAmB;IA0B3B,OAAO,CAAC,sBAAsB;IAkB9B,OAAO,CAAC,eAAe;YAyBT,uBAAuB;YAevB,0BAA0B;IA6BxC,OAAO,CAAC,6BAA6B;IAgDrC,OAAO,CAAC,oBAAoB;IAoC5B,OAAO,CAAC,sBAAsB;IAa9B,OAAO,CAAC,kBAAkB;CAgC3B"}