@waiaas/daemon 2.0.0-rc.1

package/dist/services/wc-signing-bridge.js

@@ -0,0 +1,334 @@
+/**
+ * WcSigningBridge - Fire-and-forget WC signing request bridge.
+ *
+ * When an APPROVAL tier transaction is created and the wallet has an active
+ * WalletConnect session, this bridge sends a signing request to the Owner
+ * wallet (via personal_sign for EVM / solana_signMessage for Solana).
+ *
+ * On successful signature response, it verifies the signature using the
+ * existing ownerAuth verification logic (verifySIWE / Ed25519) and calls
+ * approvalWorkflow.approve() or .reject() accordingly.
+ *
+ * Key design decisions:
+ *   - Fire-and-forget: requestSignature() is called with `void` prefix,
+ *     never blocking the pipeline.
+ *   - Timeout sync: WC request expiry is derived from pending_approvals.expires_at.
+ *   - Optional dependency: Pipeline works without WcSigningBridge (checked via ctx.wcSigningBridge?.)
+ *
+ * @see packages/daemon/src/pipeline/stages.ts (stage4Wait APPROVAL branch)
+ * @see packages/daemon/src/services/wc-session-service.ts
+ * @see packages/daemon/src/workflow/approval-workflow.ts
+ */
+import { randomBytes } from 'node:crypto';
+import { createRequire } from 'node:module';
+import { createSiweMessage } from 'viem/siwe';
+import { verifySIWE } from '../api/middleware/siwe-verify.js';
+import { decodeBase58 } from '../api/middleware/address-validation.js';
+const require = createRequire(import.meta.url);
+function loadSodium() {
+    return require('sodium-native');
+}
+// ---------------------------------------------------------------------------
+// WC error code constants
+// ---------------------------------------------------------------------------
+/** WC user rejection error codes (4001 = standard, 5000 = legacy) */
+const WC_USER_REJECTED = [4001, 5000];
+/** WC request expired error code */
+const WC_REQUEST_EXPIRED = 8000;
+// ---------------------------------------------------------------------------
+// Base58 encode (Bitcoin alphabet) -- inline to avoid import of unexported fn
+// ---------------------------------------------------------------------------
+const BASE58_ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
+function encodeBase58(buf) {
+    let zeroes = 0;
+    for (let i = 0; i < buf.length && buf[i] === 0; i++) {
+        zeroes++;
+    }
+    const size = Math.ceil((buf.length * 138) / 100) + 1;
+    const b58 = new Uint8Array(size);
+    let length = 0;
+    for (let i = zeroes; i < buf.length; i++) {
+        let carry = buf[i];
+        let j = 0;
+        for (let k = size - 1; k >= 0 && (carry !== 0 || j < length); k--, j++) {
+            carry += 256 * (b58[k] ?? 0);
+            b58[k] = carry % 58;
+            carry = Math.floor(carry / 58);
+        }
+        length = j;
+    }
+    let start = size - length;
+    while (start < size && b58[start] === 0) {
+        start++;
+    }
+    let result = '1'.repeat(zeroes);
+    for (let i = start; i < size; i++) {
+        result += BASE58_ALPHABET[b58[i]];
+    }
+    return result;
+}
+// ---------------------------------------------------------------------------
+// WcSigningBridge
+// ---------------------------------------------------------------------------
+export class WcSigningBridge {
+    wcServiceRef;
+    approvalWorkflow;
+    sqlite;
+    notificationService;
+    eventBus;
+    constructor(deps) {
+        this.wcServiceRef = deps.wcServiceRef;
+        this.approvalWorkflow = deps.approvalWorkflow;
+        this.sqlite = deps.sqlite;
+        this.notificationService = deps.notificationService;
+        this.eventBus = deps.eventBus;
+    }
+    /**
+     * Send a WC signing request to the Owner wallet (fire-and-forget).
+     *
+     * Silently returns if WC is not initialized or no session exists.
+     * On signature response: verify + approve/reject via ApprovalWorkflow.
+     * On error: reject if user-rejected, ignore if expired (approval-expired worker handles it).
+     */
+    async requestSignature(walletId, txId, chain) {
+        try {
+            // Guard: WC not initialized
+            const wcService = this.wcServiceRef.current;
+            if (!wcService) {
+                this.fallbackToTelegram(walletId, txId, 'wc_not_initialized');
+                return;
+            }
+            const signClient = wcService.getSignClient();
+            if (!signClient) {
+                this.fallbackToTelegram(walletId, txId, 'wc_not_initialized');
+                return;
+            }
+            // Guard: no session for this wallet
+            const topic = wcService.getSessionTopic(walletId);
+            if (!topic) {
+                this.fallbackToTelegram(walletId, txId, 'no_wc_session');
+                return;
+            }
+            // Guard: no session info (should not happen if topic exists, but defensive)
+            const sessionInfo = wcService.getSessionInfo(walletId);
+            if (!sessionInfo) {
+                this.fallbackToTelegram(walletId, txId, 'no_session_info');
+                return;
+            }
+            const { ownerAddress, chainId } = sessionInfo;
+            // Build chain-specific signing request
+            const signRequest = this.buildSignRequest(chain, ownerAddress, txId, chainId);
+            // Update approval_channel to 'walletconnect'
+            this.sqlite
+                .prepare(`UPDATE pending_approvals SET approval_channel = 'walletconnect'
+           WHERE tx_id = ? AND approved_at IS NULL AND rejected_at IS NULL`)
+                .run(txId);
+            // Calculate WC expiry from pending_approvals.expires_at
+            const timeoutSeconds = this.resolveWcExpiry(txId);
+            // Send WC signing request
+            const result = await signClient.request({
+                topic,
+                chainId,
+                request: {
+                    method: signRequest.method,
+                    params: signRequest.params,
+                },
+                expiry: timeoutSeconds,
+            });
+            // Handle successful signature response
+            await this.handleSignatureResponse(chain, walletId, txId, signRequest.message, result, ownerAddress);
+        }
+        catch (error) {
+            // Handle WC errors (rejection, timeout, etc.)
+            this.handleSignatureError(walletId, txId, error);
+        }
+    }
+    // -------------------------------------------------------------------------
+    // Private: build chain-specific signing request
+    // -------------------------------------------------------------------------
+    buildSignRequest(chain, ownerAddress, txId, chainId) {
+        if (chain === 'ethereum') {
+            return this.buildEvmSignRequest(ownerAddress, txId, chainId);
+        }
+        return this.buildSolanaSignRequest(ownerAddress, txId);
+    }
+    buildEvmSignRequest(ownerAddress, txId, chainId) {
+        const nonce = randomBytes(16).toString('hex');
+        const numericChainId = parseInt(chainId.split(':')[1] ?? '1', 10);
+        const siweMessage = createSiweMessage({
+            domain: 'waiaas.local',
+            address: ownerAddress,
+            uri: 'http://localhost:3000',
+            version: '1',
+            chainId: numericChainId,
+            nonce,
+            statement: `Approve transaction ${txId}`,
+            expirationTime: new Date(Date.now() + 300_000),
+        });
+        // personal_sign params: [hexMessage, address]
+        const hexMessage = '0x' + Buffer.from(siweMessage, 'utf8').toString('hex');
+        const params = [hexMessage, ownerAddress];
+        return { message: siweMessage, method: 'personal_sign', params };
+    }
+    buildSolanaSignRequest(ownerAddress, txId) {
+        const message = `WAIaaS: Approve transaction ${txId}`;
+        // WC Solana spec: base58-encoded message bytes
+        const base58Message = encodeBase58(Buffer.from(message, 'utf8'));
+        const params = { message: base58Message, pubkey: ownerAddress };
+        return { message, method: 'solana_signMessage', params };
+    }
+    // -------------------------------------------------------------------------
+    // Private: resolve WC expiry from pending_approvals
+    // -------------------------------------------------------------------------
+    resolveWcExpiry(txId) {
+        try {
+            const row = this.sqlite
+                .prepare(`SELECT expires_at FROM pending_approvals
+           WHERE tx_id = ? AND approved_at IS NULL AND rejected_at IS NULL`)
+                .get(txId);
+            if (row) {
+                const now = Math.floor(Date.now() / 1000);
+                const remaining = row.expires_at - now;
+                // WC requires positive expiry; minimum 60s to avoid instant expiry
+                return Math.max(remaining, 60);
+            }
+        }
+        catch {
+            // Fallback on query error
+        }
+        return 300; // 5 minutes default
+    }
+    // -------------------------------------------------------------------------
+    // Private: handle signature response (verify + approve)
+    // -------------------------------------------------------------------------
+    async handleSignatureResponse(chain, _walletId, txId, message, result, ownerAddress) {
+        if (chain === 'ethereum') {
+            await this.handleEvmSignatureResponse(txId, message, result, ownerAddress);
+        }
+        else {
+            this.handleSolanaSignatureResponse(txId, message, result, ownerAddress);
+        }
+    }
+    async handleEvmSignatureResponse(txId, message, result, ownerAddress) {
+        // result is 0x-prefixed hex signature string
+        const signature = typeof result === 'string' ? result : '';
+        const verification = await verifySIWE({
+            message,
+            signature,
+            expectedAddress: ownerAddress,
+        });
+        if (verification.valid) {
+            try {
+                this.approvalWorkflow.approve(txId, signature);
+            }
+            catch (err) {
+                console.warn(`[WcSigningBridge] approve failed for ${txId}:`, err);
+            }
+        }
+        else {
+            console.warn(`[WcSigningBridge] EVM signature verification failed for ${txId}: ${verification.error}`);
+            // Do NOT reject -- Owner may retry via REST API or WC
+        }
+    }
+    handleSolanaSignatureResponse(txId, message, result, ownerAddress) {
+        // result is { signature: 'base58-string' } or raw string
+        const resultObj = result;
+        const sig58 = typeof resultObj === 'string'
+            ? resultObj
+            : (resultObj?.signature ?? '');
+        if (!sig58) {
+            console.warn(`[WcSigningBridge] Empty Solana signature for ${txId}`);
+            return;
+        }
+        try {
+            // Convert base58 signature to base64 (ownerAuth expects base64)
+            const signatureBytes = decodeBase58(sig58);
+            const base64Sig = signatureBytes.toString('base64');
+            // Ed25519 verification (reuse owner-auth.ts pattern)
+            const sodium = loadSodium();
+            const messageBytes = Buffer.from(message, 'utf8');
+            const publicKeyBytes = decodeBase58(ownerAddress);
+            const valid = sodium.crypto_sign_verify_detached(signatureBytes, messageBytes, publicKeyBytes);
+            if (valid) {
+                try {
+                    this.approvalWorkflow.approve(txId, base64Sig);
+                }
+                catch (err) {
+                    console.warn(`[WcSigningBridge] approve failed for ${txId}:`, err);
+                }
+            }
+            else {
+                console.warn(`[WcSigningBridge] Solana Ed25519 verification failed for ${txId}`);
+                // Do NOT reject -- Owner may retry
+            }
+        }
+        catch (err) {
+            console.warn(`[WcSigningBridge] Solana signature handling error for ${txId}:`, err);
+        }
+    }
+    // -------------------------------------------------------------------------
+    // Private: handle WC errors
+    // -------------------------------------------------------------------------
+    handleSignatureError(walletId, txId, error) {
+        const errorCode = error?.code;
+        if (typeof errorCode === 'number' && WC_USER_REJECTED.includes(errorCode)) {
+            // User rejected in wallet -- reject the approval
+            try {
+                this.approvalWorkflow.reject(txId);
+                // Update approval_channel to reflect rejection came via WC
+                this.sqlite
+                    .prepare(`UPDATE pending_approvals SET approval_channel = 'walletconnect'
+             WHERE tx_id = ? AND rejected_at IS NOT NULL`)
+                    .run(txId);
+            }
+            catch (err) {
+                console.warn(`[WcSigningBridge] reject failed for ${txId}:`, err);
+            }
+            return;
+        }
+        if (errorCode === WC_REQUEST_EXPIRED) {
+            // Request expired -- fallback to Telegram if approval still pending
+            console.warn(`[WcSigningBridge] WC request expired for ${txId}`);
+            this.fallbackToTelegram(walletId, txId, 'wc_timeout');
+            return;
+        }
+        // Other errors -- fallback to Telegram if approval still pending
+        console.warn(`[WcSigningBridge] WC signing error for ${txId}:`, error?.message ?? error);
+        this.fallbackToTelegram(walletId, txId, 'wc_error');
+    }
+    // -------------------------------------------------------------------------
+    // Private: check if approval is still pending
+    // -------------------------------------------------------------------------
+    isApprovalStillPending(txId) {
+        const row = this.sqlite
+            .prepare('SELECT 1 FROM pending_approvals WHERE tx_id = ? AND approved_at IS NULL AND rejected_at IS NULL')
+            .get(txId);
+        return !!row;
+    }
+    // -------------------------------------------------------------------------
+    // Private: fallback to Telegram channel
+    // -------------------------------------------------------------------------
+    fallbackToTelegram(walletId, txId, reason) {
+        // Only act if approval is still pending
+        if (!this.isApprovalStillPending(txId))
+            return;
+        // Update approval_channel to 'telegram'
+        this.sqlite
+            .prepare(`UPDATE pending_approvals SET approval_channel = 'telegram'
+         WHERE tx_id = ? AND approved_at IS NULL AND rejected_at IS NULL`)
+            .run(txId);
+        // Emit EventBus event
+        this.eventBus?.emit('approval:channel-switched', {
+            walletId,
+            txId,
+            fromChannel: 'walletconnect',
+            toChannel: 'telegram',
+            reason,
+            timestamp: Math.floor(Date.now() / 1000),
+        });
+        // Send channel-switched notification
+        void this.notificationService?.notify('APPROVAL_CHANNEL_SWITCHED', walletId, { from_channel: 'walletconnect', to_channel: 'telegram', reason }, { txId });
+        console.log(`[WcSigningBridge] Fallback to Telegram for ${txId}: ${reason}`);
+    }
+}
+//# sourceMappingURL=wc-signing-bridge.js.map

package/dist/services/wc-signing-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wc-signing-bridge.js","sourceRoot":"","sources":["../../src/services/wc-signing-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAOvE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,eAAe,CAAiB,CAAC;AAClD,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,qEAAqE;AACrE,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACtC,oCAAoC;AACpC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAE9E,MAAM,eAAe,GAAG,4DAA4D,CAAC;AAErF,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,MAAM,EAAE,CAAC;IACX,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,IAAI,KAAK,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YACvE,KAAK,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;YACpB,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,GAAG,CAAC,CAAC;IACb,CAAC;IAED,IAAI,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC;IAC1B,OAAO,KAAK,GAAG,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,KAAK,EAAE,CAAC;IACV,CAAC;IAED,IAAI,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAoBD,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,OAAO,eAAe;IACT,YAAY,CAAe;IAC3B,gBAAgB,CAAmB;IACnC,MAAM,CAAW;IACjB,mBAAmB,CAAuB;IAC1C,QAAQ,CAAY;IAErC,YAAY,IAAyB;QACnC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,IAAY,EAAE,KAAa;QAClE,IAAI,CAAC;YACH,4BAA4B;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YACD,MAAM,UAAU,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YAED,oCAAoC;YACpC,MAAM,KAAK,GAAG,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;gBACzD,OAAO;YACT,CAAC;YAED,4EAA4E;YAC5E,MAAM,WAAW,GAAG,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YAED,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;YAE9C,uCAAuC;YACvC,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAE9E,6CAA6C;YAC7C,IAAI,CAAC,MAAM;iBACR,OAAO,CACN;2EACiE,CAClE;iBACA,GAAG,CAAC,IAAI,CAAC,CAAC;YAEb,wDAAwD;YACxD,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAElD,0BAA0B;YAC1B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;gBACtC,KAAK;gBACL,OAAO;gBACP,OAAO,EAAE;oBACP,MAAM,EAAE,WAAW,CAAC,MAAM;oBAC1B,MAAM,EAAE,WAAW,CAAC,MAAM;iBAC3B;gBACD,MAAM,EAAE,cAAc;aACvB,CAAC,CAAC;YAEH,uCAAuC;YACvC,MAAM,IAAI,CAAC,uBAAuB,CAChC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CACjE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,8CAA8C;YAC9C,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,gDAAgD;IAChD,4EAA4E;IAEpE,gBAAgB,CACtB,KAAa,EACb,YAAoB,EACpB,IAAY,EACZ,OAAe;QAEf,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAEO,mBAAmB,CACzB,YAAoB,EACpB,IAAY,EACZ,OAAe;QAEf,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAElE,MAAM,WAAW,GAAG,iBAAiB,CAAC;YACpC,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,YAA6B;YACtC,GAAG,EAAE,uBAAuB;YAC5B,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,cAAc;YACvB,KAAK;YACL,SAAS,EAAE,uBAAuB,IAAI,EAAE;YACxC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;SAC/C,CAAC,CAAC;QAEH,8CAA8C;QAC9C,MAAM,UAAU,GAAG,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAE1C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;IACnE,CAAC;IAEO,sBAAsB,CAC5B,YAAoB,EACpB,IAAY;QAEZ,MAAM,OAAO,GAAG,+BAA+B,IAAI,EAAE,CAAC;QAEtD,+CAA+C;QAC/C,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAEhE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC3D,CAAC;IAED,4EAA4E;IAC5E,oDAAoD;IACpD,4EAA4E;IAEpE,eAAe,CAAC,IAAY;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM;iBACpB,OAAO,CACN;2EACiE,CAClE;iBACA,GAAG,CAAC,IAAI,CAAuC,CAAC;YAEnD,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;gBAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACvC,mEAAmE;gBACnE,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;QACD,OAAO,GAAG,CAAC,CAAC,oBAAoB;IAClC,CAAC;IAED,4EAA4E;IAC5E,wDAAwD;IACxD,4EAA4E;IAEpE,KAAK,CAAC,uBAAuB,CACnC,KAAa,EACb,SAAiB,EACjB,IAAY,EACZ,OAAe,EACf,MAAe,EACf,YAAoB;QAEpB,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,6BAA6B,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACtC,IAAY,EACZ,OAAe,EACf,MAAe,EACf,YAAoB;QAEpB,6CAA6C;QAC7C,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAE3D,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC;YACpC,OAAO;YACP,SAAS;YACT,eAAe,EAAE,YAAY;SAC9B,CAAC,CAAC;QAEH,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,wCAAwC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CACV,2DAA2D,IAAI,KAAK,YAAY,CAAC,KAAK,EAAE,CACzF,CAAC;YACF,sDAAsD;QACxD,CAAC;IACH,CAAC;IAEO,6BAA6B,CACnC,IAAY,EACZ,OAAe,EACf,MAAe,EACf,YAAoB;QAEpB,yDAAyD;QACzD,MAAM,SAAS,GAAG,MAAyC,CAAC;QAC5D,MAAM,KAAK,GAAG,OAAO,SAAS,KAAK,QAAQ;YACzC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QAEjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,gDAAgD,IAAI,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,gEAAgE;YAChE,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEpD,qDAAqD;YACrD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,cAAc,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;YAElD,MAAM,KAAK,GAAG,MAAM,CAAC,2BAA2B,CAAC,cAAc,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;YAE/F,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACjD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC,wCAAwC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,4DAA4D,IAAI,EAAE,CAAC,CAAC;gBACjF,mCAAmC;YACrC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,yDAAyD,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,4BAA4B;IAC5B,4EAA4E;IAEpE,oBAAoB,CAAC,QAAgB,EAAE,IAAY,EAAE,KAAU;QACrE,MAAM,SAAS,GAAG,KAAK,EAAE,IAAI,CAAC;QAE9B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1E,iDAAiD;YACjD,IAAI,CAAC;gBACH,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnC,2DAA2D;gBAC3D,IAAI,CAAC,MAAM;qBACR,OAAO,CACN;yDAC6C,CAC9C;qBACA,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,uCAAuC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;YACpE,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;YACrC,oEAAoE;YACpE,OAAO,CAAC,IAAI,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,iEAAiE;QACjE,OAAO,CAAC,IAAI,CAAC,0CAA0C,IAAI,GAAG,EAAE,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC;QACzF,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC;IAED,4EAA4E;IAC5E,8CAA8C;IAC9C,4EAA4E;IAEpE,sBAAsB,CAAC,IAAY;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM;aACpB,OAAO,CACN,iGAAiG,CAClG;aACA,GAAG,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,CAAC,CAAC,GAAG,CAAC;IACf,CAAC;IAED,4EAA4E;IAC5E,wCAAwC;IACxC,4EAA4E;IAEpE,kBAAkB,CAAC,QAAgB,EAAE,IAAY,EAAE,MAAc;QACvE,wCAAwC;QACxC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC;YAAE,OAAO;QAE/C,wCAAwC;QACxC,IAAI,CAAC,MAAM;aACR,OAAO,CACN;yEACiE,CAClE;aACA,GAAG,CAAC,IAAI,CAAC,CAAC;QAEb,sBAAsB;QACtB,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,2BAA2B,EAAE;YAC/C,QAAQ;YACR,IAAI;YACJ,WAAW,EAAE,eAAe;YAC5B,SAAS,EAAE,UAAU;YACrB,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;SACzC,CAAC,CAAC;QAEH,qCAAqC;QACrC,KAAK,IAAI,CAAC,mBAAmB,EAAE,MAAM,CACnC,2BAA2B,EAC3B,QAAQ,EACR,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,EACjE,EAAE,IAAI,EAAE,CACT,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,8CAA8C,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;CACF"}

package/dist/services/wc-storage.d.ts

@@ -0,0 +1,32 @@
+/**
+ * SQLite-backed IKeyValueStorage implementation for WalletConnect SDK.
+ *
+ * Replaces the default FileSystemStorage to ensure WC session/pairing data
+ * is persisted in the WAIaaS SQLite database (data/waiaas.db). This guarantees
+ * session survival across daemon restarts and Docker container recreation.
+ *
+ * All data is stored in the `wc_store` table (created by DB v16 migration).
+ *
+ * @see packages/daemon/src/infrastructure/database/migrate.ts (v16)
+ */
+import type { Database } from 'better-sqlite3';
+export interface IKeyValueStorage {
+    getKeys(): Promise<string[]>;
+    getEntries<T = any>(): Promise<[string, T][]>;
+    getItem<T = any>(key: string): Promise<T | undefined>;
+    setItem<T = any>(key: string, value: T): Promise<void>;
+    removeItem(key: string): Promise<void>;
+}
+export declare class SqliteKeyValueStorage implements IKeyValueStorage {
+    private readonly sqlite;
+    private closed;
+    constructor(sqlite: Database);
+    /** Mark storage as closed so subsequent WC SDK callbacks are silently ignored. */
+    close(): void;
+    getKeys(): Promise<string[]>;
+    getEntries<T = any>(): Promise<[string, T][]>;
+    getItem<T = any>(key: string): Promise<T | undefined>;
+    setItem<T = any>(key: string, value: T): Promise<void>;
+    removeItem(key: string): Promise<void>;
+}
+//# sourceMappingURL=wc-storage.d.ts.map

package/dist/services/wc-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wc-storage.d.ts","sourceRoot":"","sources":["../../src/services/wc-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAO/C,MAAM,WAAW,gBAAgB;IAC/B,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7B,UAAU,CAAC,CAAC,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAMD,qBAAa,qBAAsB,YAAW,gBAAgB;IAGhD,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,MAAM,CAAS;gBAEM,MAAM,EAAE,QAAQ;IAE7C,kFAAkF;IAClF,KAAK,IAAI,IAAI;IAIP,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAQ5B,UAAU,CAAC,CAAC,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;IAQ7C,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAQrD,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOtD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAM7C"}

package/dist/services/wc-storage.js

@@ -0,0 +1,64 @@
+/**
+ * SQLite-backed IKeyValueStorage implementation for WalletConnect SDK.
+ *
+ * Replaces the default FileSystemStorage to ensure WC session/pairing data
+ * is persisted in the WAIaaS SQLite database (data/waiaas.db). This guarantees
+ * session survival across daemon restarts and Docker container recreation.
+ *
+ * All data is stored in the `wc_store` table (created by DB v16 migration).
+ *
+ * @see packages/daemon/src/infrastructure/database/migrate.ts (v16)
+ */
+// ---------------------------------------------------------------------------
+// SqliteKeyValueStorage
+// ---------------------------------------------------------------------------
+export class SqliteKeyValueStorage {
+    sqlite;
+    closed = false;
+    constructor(sqlite) {
+        this.sqlite = sqlite;
+    }
+    /** Mark storage as closed so subsequent WC SDK callbacks are silently ignored. */
+    close() {
+        this.closed = true;
+    }
+    async getKeys() {
+        if (this.closed)
+            return [];
+        const rows = this.sqlite
+            .prepare('SELECT key FROM wc_store')
+            .all();
+        return rows.map((r) => r.key);
+    }
+    async getEntries() {
+        if (this.closed)
+            return [];
+        const rows = this.sqlite
+            .prepare('SELECT key, value FROM wc_store')
+            .all();
+        return rows.map((r) => [r.key, JSON.parse(r.value)]);
+    }
+    async getItem(key) {
+        if (this.closed)
+            return undefined;
+        const row = this.sqlite
+            .prepare('SELECT value FROM wc_store WHERE key = ?')
+            .get(key);
+        return row ? JSON.parse(row.value) : undefined;
+    }
+    async setItem(key, value) {
+        if (this.closed)
+            return;
+        this.sqlite
+            .prepare('INSERT OR REPLACE INTO wc_store (key, value) VALUES (?, ?)')
+            .run(key, JSON.stringify(value));
+    }
+    async removeItem(key) {
+        if (this.closed)
+            return;
+        this.sqlite
+            .prepare('DELETE FROM wc_store WHERE key = ?')
+            .run(key);
+    }
+}
+//# sourceMappingURL=wc-storage.js.map

package/dist/services/wc-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wc-storage.js","sourceRoot":"","sources":["../../src/services/wc-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAiBH,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,MAAM,OAAO,qBAAqB;IAGH;IAFrB,MAAM,GAAG,KAAK,CAAC;IAEvB,YAA6B,MAAgB;QAAhB,WAAM,GAAN,MAAM,CAAU;IAAG,CAAC;IAEjD,kFAAkF;IAClF,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;aACrB,OAAO,CAAC,0BAA0B,CAAC;aACnC,GAAG,EAA4B,CAAC;QACnC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;aACrB,OAAO,CAAC,iCAAiC,CAAC;aAC1C,GAAG,EAA2C,CAAC;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO,CAAU,GAAW;QAChC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM;aACpB,OAAO,CAAC,0CAA0C,CAAC;aACnD,GAAG,CAAC,GAAG,CAAkC,CAAC;QAC7C,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,OAAO,CAAU,GAAW,EAAE,KAAQ;QAC1C,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM;aACR,OAAO,CAAC,4DAA4D,CAAC;aACrE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAW;QAC1B,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM;aACR,OAAO,CAAC,oCAAoC,CAAC;aAC7C,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;CACF"}

package/dist/services/x402/payment-signer.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Payment Signer -- x402 chain-specific payment signature generation.
+ *
+ * Provides signPayment() which delegates to:
+ * - signEip3009() for EVM chains (EIP-3009 transferWithAuthorization via EIP-712 signTypedData)
+ * - signSolanaTransferChecked() for Solana chains (SPL TransferChecked partial signing)
+ *
+ * Key management follows the decrypt -> sign -> finally release pattern
+ * from sign-only.ts Step 9 and stages.ts Stage 5c.
+ *
+ * Does NOT go through IChainAdapter -- EIP-3009 is typed data signing (not tx),
+ * and Solana partial signing uses a different feePayer (facilitator, not wallet).
+ *
+ * @see packages/daemon/src/pipeline/sign-only.ts (Step 9)
+ * @see docs/32-pipeline-design.md
+ */
+import type { PaymentRequirements } from '@waiaas/core';
+/** Minimal keystore interface for payment signing. */
+export interface PaymentKeyStore {
+    decryptPrivateKey(walletId: string, masterPassword: string): Promise<Uint8Array>;
+    releaseKey(key: Uint8Array): void;
+}
+/** EIP-712 domain for USDC contracts. */
+export interface Eip712Domain {
+    name: string;
+    version: string;
+    chainId: number;
+    verifyingContract: string;
+}
+/**
+ * USDC v2 contract domain separators by CAIP-2 network identifier.
+ *
+ * Each EVM chain has a unique USDC contract with its own EIP-712 domain separator.
+ * These are the Circle native USDC v2 contracts that support EIP-3009.
+ *
+ * Source: USDC v2 contracts + EIP-3009 standard + x402 reference implementation.
+ */
+export declare const USDC_DOMAINS: Record<string, Eip712Domain>;
+/**
+ * Sign a payment based on chain-specific strategy.
+ *
+ * Key management pattern (identical to sign-only.ts Step 9):
+ * 1. Decrypt private key from keystore
+ * 2. Sign using chain-specific strategy
+ * 3. Finally block: release key (sodium_memzero)
+ *
+ * @param requirements - x402 PaymentRequirements from 402 response
+ * @param keyStore - Keystore for key decrypt/release
+ * @param walletId - Wallet ID for key lookup
+ * @param walletAddress - Wallet public address
+ * @param masterPassword - Master password for key decryption
+ * @param rpc - Solana RPC client (required for Solana chains)
+ * @returns PaymentPayload compatible with @x402/core PaymentPayloadV2Schema
+ */
+export declare function signPayment(requirements: PaymentRequirements, keyStore: PaymentKeyStore, walletId: string, walletAddress: string, masterPassword: string, rpc?: unknown): Promise<Record<string, unknown>>;
+/**
+ * Sign EVM EIP-3009 transferWithAuthorization via EIP-712 signTypedData.
+ *
+ * Uses viem's privateKeyToAccount + account.signTypedData for the EIP-712
+ * structured data signature. The signature authorizes a USDC transfer
+ * without requiring an on-chain transaction from the payer.
+ *
+ * @param requirements - Payment requirements (network, asset, amount, payTo)
+ * @param privateKey - Raw private key bytes (32 bytes for secp256k1)
+ * @param walletAddress - EVM wallet address (0x-prefixed EIP-55)
+ * @returns PaymentPayload with signature and authorization object
+ */
+export declare function signEip3009(requirements: PaymentRequirements, privateKey: Uint8Array, walletAddress: string): Promise<Record<string, unknown>>;
+/**
+ * Sign Solana SPL TransferChecked as partial signature.
+ *
+ * The feePayer is the facilitator (from requirements.extra.feePayer), set as
+ * noopSigner so only a signature slot is created. The wallet signs the
+ * transaction message with its private key.
+ *
+ * The resulting base64-encoded transaction contains:
+ * - feePayer = facilitator address (noopSigner, unsigned)
+ * - authority = wallet (signed)
+ * - TransferChecked instruction for SPL token transfer
+ *
+ * @param requirements - Payment requirements with extra.feePayer and extra.decimals
+ * @param privateKey - Raw private key bytes (32 or 64 bytes)
+ * @param walletAddress - Solana wallet address (base58)
+ * @param rpc - Solana RPC client with getLatestBlockhash method
+ * @returns PaymentPayload with base64-encoded partial-signed transaction
+ */
+export declare function signSolanaTransferChecked(requirements: PaymentRequirements, privateKey: Uint8Array, _walletAddress: string, rpc: unknown): Promise<Record<string, unknown>>;
+//# sourceMappingURL=payment-signer.d.ts.map

package/dist/services/x402/payment-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-signer.d.ts","sourceRoot":"","sources":["../../../src/services/x402/payment-signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA0BH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAMxD,sDAAsD;AACtD,MAAM,WAAW,eAAe;IAC9B,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjF,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAAC;CACnC;AAED,yCAAyC;AACzC,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAMD;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAkDrD,CAAC;AA2BF;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,WAAW,CAC/B,YAAY,EAAE,mBAAmB,EACjC,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,GAAG,CAAC,EAAE,OAAO,GACZ,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAoBlC;AAMD;;;;;;;;;;;GAWG;AACH,wBAAsB,WAAW,CAC/B,YAAY,EAAE,mBAAmB,EACjC,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAgElC;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,mBAAmB,EACjC,UAAU,EAAE,UAAU,EACtB,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA4FlC"}