@waiaas/daemon 2.5.0 → 2.6.0-rc

package/dist/services/incoming/incoming-tx-workers.js

@@ -0,0 +1,176 @@
+/**
+ * Worker handler factories for incoming transaction lifecycle management.
+ *
+ * Provides:
+ * 1. Confirmation worker -- transitions DETECTED -> CONFIRMED based on chain-specific thresholds
+ * 2. Retention worker -- deletes records older than configurable retention_days
+ * 3. Gap recovery handler -- calls pollAll() on subscribers after reconnection
+ * 4. Cursor utilities -- read/write incoming_tx_cursors for tracking processing position
+ *
+ * All handler factories return `async () => void` functions compatible with
+ * BackgroundWorkers.register() interval pattern.
+ *
+ * @see docs/76-incoming-transaction-monitoring.md sections 2.5, 5.3
+ */
+// ── EVM Confirmation Thresholds ─────────────────────────────────────
+/**
+ * Chain-specific block confirmation thresholds for EVM networks.
+ * A DETECTED transaction is upgraded to CONFIRMED when
+ * `currentBlock - txBlockNumber >= threshold`.
+ */
+export const EVM_CONFIRMATION_THRESHOLDS = {
+    mainnet: 12,
+    sepolia: 1,
+    'polygon-mainnet': 128,
+    'polygon-amoy': 1,
+    'arbitrum-mainnet': 1,
+    'arbitrum-sepolia': 1,
+    'base-mainnet': 12,
+    'base-sepolia': 1,
+};
+/** Default threshold when network is not in EVM_CONFIRMATION_THRESHOLDS. */
+export const DEFAULT_EVM_CONFIRMATIONS = 12;
+/** Solana commitment level used for confirmation check. */
+export const SOLANA_CONFIRMATION = 'finalized';
+// ── Confirmation Worker ─────────────────────────────────────────────
+/**
+ * Creates a handler that upgrades DETECTED transactions to CONFIRMED.
+ *
+ * - Solana: calls checkSolanaFinalized(txHash). If true -> CONFIRMED.
+ * - EVM: computes `currentBlock - txBlock`. If >= threshold -> CONFIRMED.
+ * - Per-record error isolation: one failure does not block other records.
+ */
+export function createConfirmationWorkerHandler(deps) {
+    const { sqlite, getBlockNumber, checkSolanaFinalized } = deps;
+    return async () => {
+        // Query all DETECTED transactions
+        const rows = sqlite
+            .prepare(`SELECT id, tx_hash, chain, network, block_number FROM incoming_transactions WHERE status = 'DETECTED'`)
+            .all();
+        if (rows.length === 0)
+            return;
+        const updateStmt = sqlite.prepare(`UPDATE incoming_transactions SET status = 'CONFIRMED', confirmed_at = ? WHERE id = ?`);
+        // Cache EVM block numbers per network to avoid redundant RPC calls
+        const blockCache = new Map();
+        for (const row of rows) {
+            try {
+                if (row.chain === 'solana') {
+                    // Solana: check finalized commitment
+                    if (!checkSolanaFinalized)
+                        continue;
+                    const finalized = await checkSolanaFinalized(row.tx_hash);
+                    if (finalized) {
+                        const confirmedAt = Math.floor(Date.now() / 1000);
+                        updateStmt.run(confirmedAt, row.id);
+                    }
+                }
+                else if (row.chain === 'ethereum') {
+                    // EVM: compare block numbers
+                    if (!getBlockNumber || row.block_number == null)
+                        continue;
+                    const cacheKey = `${row.chain}:${row.network}`;
+                    let currentBlock = blockCache.get(cacheKey);
+                    if (currentBlock === undefined) {
+                        currentBlock = await getBlockNumber(row.chain, row.network);
+                        blockCache.set(cacheKey, currentBlock);
+                    }
+                    const threshold = EVM_CONFIRMATION_THRESHOLDS[row.network] ??
+                        DEFAULT_EVM_CONFIRMATIONS;
+                    const confirmations = currentBlock - BigInt(row.block_number);
+                    if (confirmations >= BigInt(threshold)) {
+                        const confirmedAt = Math.floor(Date.now() / 1000);
+                        updateStmt.run(confirmedAt, row.id);
+                    }
+                }
+            }
+            catch (err) {
+                // Per-record error isolation: log and continue
+                console.warn(`Confirmation check failed for tx ${row.id}:`, err);
+            }
+        }
+    };
+}
+// ── Retention Worker ────────────────────────────────────────────────
+/**
+ * Creates a handler that deletes incoming_transactions records
+ * older than the configured retention period.
+ *
+ * Uses raw SQLite DELETE for efficiency. getRetentionDays() is called
+ * each invocation to support hot-reload of the setting.
+ */
+export function createRetentionWorkerHandler(deps) {
+    const { sqlite, getRetentionDays } = deps;
+    return async () => {
+        const retentionDays = getRetentionDays();
+        const cutoff = Math.floor(Date.now() / 1000) - retentionDays * 86400;
+        const result = sqlite
+            .prepare('DELETE FROM incoming_transactions WHERE detected_at < ?')
+            .run(cutoff);
+        if (result.changes > 0) {
+            console.log(`Retention worker: deleted ${result.changes} incoming_transactions older than ${retentionDays} days`);
+        }
+    };
+}
+// ── Gap Recovery Handler ────────────────────────────────────────────
+/**
+ * Creates a handler for recovering missed transactions after reconnection.
+ *
+ * When a WebSocket reconnects, the gap between last-known cursor and current
+ * chain state needs to be filled. This handler finds the relevant subscriber
+ * and calls pollAll() to recover missed transactions.
+ */
+export function createGapRecoveryHandler(deps) {
+    const { subscribers } = deps;
+    return async (chain, network, _walletIds) => {
+        const key = `${chain}:${network}`;
+        const entry = subscribers.get(key);
+        if (!entry) {
+            // No subscriber for this chain:network -- graceful skip
+            return;
+        }
+        try {
+            await entry.subscriber.pollAll();
+        }
+        catch (err) {
+            console.warn(`Gap recovery failed for ${key}:`, err);
+        }
+    };
+}
+// ── Cursor Utilities ────────────────────────────────────────────────
+/**
+ * Save or update the processing cursor for a wallet.
+ *
+ * Uses INSERT OR REPLACE to handle both new and existing cursors.
+ * The cursor value is chain-specific:
+ * - Solana: last processed transaction signature
+ * - EVM: last processed block number (as string)
+ */
+export function updateCursor(sqlite, walletId, chain, network, cursor) {
+    const isSolana = chain === 'solana';
+    const updatedAt = Math.floor(Date.now() / 1000);
+    sqlite
+        .prepare(`INSERT OR REPLACE INTO incoming_tx_cursors (wallet_id, chain, network, last_signature, last_block_number, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?)`)
+        .run(walletId, chain, network, isSolana ? cursor : null, isSolana ? null : parseInt(cursor, 10), updatedAt);
+}
+/**
+ * Load the processing cursor for a wallet.
+ *
+ * Returns the cursor value (signature or block number as string),
+ * or null if no cursor exists for the given wallet+chain+network.
+ */
+export function loadCursor(sqlite, walletId, chain, network) {
+    const row = sqlite
+        .prepare(`SELECT last_signature, last_block_number FROM incoming_tx_cursors
+       WHERE wallet_id = ? AND chain = ? AND network = ?`)
+        .get(walletId, chain, network);
+    if (!row)
+        return null;
+    // Return whichever cursor value is present
+    if (row.last_signature)
+        return row.last_signature;
+    if (row.last_block_number != null)
+        return String(row.last_block_number);
+    return null;
+}
+//# sourceMappingURL=incoming-tx-workers.js.map

package/dist/services/incoming/incoming-tx-workers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incoming-tx-workers.js","sourceRoot":"","sources":["../../../src/services/incoming/incoming-tx-workers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,uEAAuE;AAEvE;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAA2B;IACjE,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,CAAC;IACV,iBAAiB,EAAE,GAAG;IACtB,cAAc,EAAE,CAAC;IACjB,kBAAkB,EAAE,CAAC;IACrB,kBAAkB,EAAE,CAAC;IACrB,cAAc,EAAE,EAAE;IAClB,cAAc,EAAE,CAAC;CAClB,CAAC;AAEF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C,2DAA2D;AAC3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAyB/C,uEAAuE;AAEvE;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAA4B;IAE5B,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC;IAE9D,OAAO,KAAK,IAAI,EAAE;QAChB,kCAAkC;QAClC,MAAM,IAAI,GAAG,MAAM;aAChB,OAAO,CACN,uGAAuG,CACxG;aACA,GAAG,EAMJ,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE9B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAC/B,sFAAsF,CACvF,CAAC;QAEF,mEAAmE;QACnE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC3B,qCAAqC;oBACrC,IAAI,CAAC,oBAAoB;wBAAE,SAAS;oBACpC,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBAC1D,IAAI,SAAS,EAAE,CAAC;wBACd,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;wBAClD,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBACtC,CAAC;gBACH,CAAC;qBAAM,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBACpC,6BAA6B;oBAC7B,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,YAAY,IAAI,IAAI;wBAAE,SAAS;oBAE1D,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;oBAC/C,IAAI,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAC5C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;wBAC/B,YAAY,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;wBAC5D,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;oBACzC,CAAC;oBAED,MAAM,SAAS,GACb,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC;wBACxC,yBAAyB,CAAC;oBAC5B,MAAM,aAAa,GACjB,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;oBAE1C,IAAI,aAAa,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;wBACvC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;wBAClD,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBACtC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,+CAA+C;gBAC/C,OAAO,CAAC,IAAI,CACV,oCAAoC,GAAG,CAAC,EAAE,GAAG,EAC7C,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAyB;IAEzB,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAE1C,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,aAAa,GAAG,KAAK,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM;aAClB,OAAO,CAAC,yDAAyD,CAAC;aAClE,GAAG,CAAC,MAAM,CAAC,CAAC;QAEf,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CACT,6BAA6B,MAAM,CAAC,OAAO,qCAAqC,aAAa,OAAO,CACrG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAqB;IAErB,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAE7B,OAAO,KAAK,EACV,KAAa,EACb,OAAe,EACf,UAAoB,EACpB,EAAE;QACF,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,wDAAwD;YACxD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,2BAA2B,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAgB,EAChB,QAAgB,EAChB,KAAa,EACb,OAAe,EACf,MAAc;IAEd,MAAM,QAAQ,GAAG,KAAK,KAAK,QAAQ,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAEhD,MAAM;SACH,OAAO,CACN;iCAC2B,CAC5B;SACA,GAAG,CACF,QAAQ,EACR,KAAK,EACL,OAAO,EACP,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EACxB,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,EACtC,SAAS,CACV,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CACxB,MAAgB,EAChB,QAAgB,EAChB,KAAa,EACb,OAAe;IAEf,MAAM,GAAG,GAAG,MAAM;SACf,OAAO,CACN;yDACmD,CACpD;SACA,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAElB,CAAC;IAEd,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,2CAA2C;IAC3C,IAAI,GAAG,CAAC,cAAc;QAAE,OAAO,GAAG,CAAC,cAAc,CAAC;IAClD,IAAI,GAAG,CAAC,iBAAiB,IAAI,IAAI;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/services/incoming/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Incoming transaction monitoring service module.
+ *
+ * Re-exports all public types and classes for the incoming TX subsystem.
+ */
+export { IncomingTxQueue } from './incoming-tx-queue.js';
+export { SubscriptionMultiplexer } from './subscription-multiplexer.js';
+export type { MultiplexerDeps } from './subscription-multiplexer.js';
+export { createConfirmationWorkerHandler, createRetentionWorkerHandler, createGapRecoveryHandler, updateCursor, loadCursor, EVM_CONFIRMATION_THRESHOLDS, DEFAULT_EVM_CONFIRMATIONS, SOLANA_CONFIRMATION, } from './incoming-tx-workers.js';
+export { IncomingTxMonitorService } from './incoming-tx-monitor-service.js';
+export type { IncomingTxMonitorConfig, IncomingTxMonitorDeps, SubscriberFactory } from './incoming-tx-monitor-service.js';
+export { DustAttackRule, UnknownTokenRule, LargeAmountRule, } from './safety-rules.js';
+export type { IIncomingSafetyRule, SafetyRuleContext, SuspiciousReason, } from './safety-rules.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/services/incoming/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/incoming/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,YAAY,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,wBAAwB,EACxB,YAAY,EACZ,UAAU,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,YAAY,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1H,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC"}

package/dist/services/incoming/index.js

@@ -0,0 +1,11 @@
+/**
+ * Incoming transaction monitoring service module.
+ *
+ * Re-exports all public types and classes for the incoming TX subsystem.
+ */
+export { IncomingTxQueue } from './incoming-tx-queue.js';
+export { SubscriptionMultiplexer } from './subscription-multiplexer.js';
+export { createConfirmationWorkerHandler, createRetentionWorkerHandler, createGapRecoveryHandler, updateCursor, loadCursor, EVM_CONFIRMATION_THRESHOLDS, DEFAULT_EVM_CONFIRMATIONS, SOLANA_CONFIRMATION, } from './incoming-tx-workers.js';
+export { IncomingTxMonitorService } from './incoming-tx-monitor-service.js';
+export { DustAttackRule, UnknownTokenRule, LargeAmountRule, } from './safety-rules.js';
+//# sourceMappingURL=index.js.map

package/dist/services/incoming/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/incoming/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAExE,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,wBAAwB,EACxB,YAAY,EACZ,UAAU,EACV,2BAA2B,EAC3B,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC"}

package/dist/services/incoming/safety-rules.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Incoming transaction safety rules.
+ *
+ * Three rule implementations for detecting suspicious incoming transactions:
+ * 1. DustAttackRule -- flags micro-value transfers (potential address poisoning)
+ * 2. UnknownTokenRule -- flags transfers of unregistered tokens
+ * 3. LargeAmountRule -- flags unusually large incoming amounts
+ *
+ * Each rule implements IIncomingSafetyRule with a synchronous check() method.
+ * Rules return true when the transaction IS suspicious (should be flagged).
+ * Safe default: when price data is unavailable, rules return false (not suspicious).
+ *
+ * @see docs/76-incoming-transaction-monitoring.md section 4.2
+ */
+import type { IncomingTransaction } from '@waiaas/core';
+export type SuspiciousReason = 'dust' | 'unknownToken' | 'largeAmount';
+export interface SafetyRuleContext {
+    /** Configurable USD threshold below which a transfer is considered dust. */
+    dustThresholdUsd: number;
+    /** Multiplier of average incoming USD above which a transfer is flagged. */
+    amountMultiplier: number;
+    /** Whether the token address is in the registered token registry. */
+    isRegisteredToken: boolean;
+    /** USD price per whole token unit, or null if unavailable. */
+    usdPrice: number | null;
+    /** Average incoming USD for this wallet, or null if no history. */
+    avgIncomingUsd: number | null;
+    /** Token decimals (e.g. 9 for SOL, 18 for ETH). */
+    decimals: number;
+}
+export interface IIncomingSafetyRule {
+    readonly name: SuspiciousReason;
+    check(tx: IncomingTransaction, context: SafetyRuleContext): boolean;
+}
+/**
+ * Flags transactions with USD value below a configurable dust threshold.
+ *
+ * Dust attacks send tiny amounts to pollute the recipient's transaction
+ * history, hoping they'll copy-paste a malicious address.
+ *
+ * Safe default: if usdPrice is null (unavailable), returns false.
+ */
+export declare class DustAttackRule implements IIncomingSafetyRule {
+    readonly name: SuspiciousReason;
+    check(tx: IncomingTransaction, ctx: SafetyRuleContext): boolean;
+}
+/**
+ * Flags token transfers where the token address is not in the registry.
+ *
+ * Native transfers (tokenAddress === null) are never flagged by this rule,
+ * since SOL/ETH are inherently "known".
+ */
+export declare class UnknownTokenRule implements IIncomingSafetyRule {
+    readonly name: SuspiciousReason;
+    check(tx: IncomingTransaction, ctx: SafetyRuleContext): boolean;
+}
+/**
+ * Flags transactions whose USD value exceeds a configurable multiplier
+ * of the wallet's average incoming USD amount.
+ *
+ * Helps detect unexpected large deposits that may indicate stolen funds
+ * being routed through monitored wallets.
+ *
+ * Safe default: if either usdPrice or avgIncomingUsd is null, returns false.
+ */
+export declare class LargeAmountRule implements IIncomingSafetyRule {
+    readonly name: SuspiciousReason;
+    check(tx: IncomingTransaction, ctx: SafetyRuleContext): boolean;
+}
+//# sourceMappingURL=safety-rules.d.ts.map

package/dist/services/incoming/safety-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-rules.d.ts","sourceRoot":"","sources":["../../../src/services/incoming/safety-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAIxD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,cAAc,GAAG,aAAa,CAAC;AAEvE,MAAM,WAAW,iBAAiB;IAChC,4EAA4E;IAC5E,gBAAgB,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,gBAAgB,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,mEAAmE;IACnE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,KAAK,CAAC,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC;CACrE;AAID;;;;;;;GAOG;AACH,qBAAa,cAAe,YAAW,mBAAmB;IACxD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAU;IAEzC,KAAK,CAAC,EAAE,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO;CAQhE;AAID;;;;;GAKG;AACH,qBAAa,gBAAiB,YAAW,mBAAmB;IAC1D,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAkB;IAEjD,KAAK,CAAC,EAAE,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO;CAMhE;AAID;;;;;;;;GAQG;AACH,qBAAa,eAAgB,YAAW,mBAAmB;IACzD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAiB;IAEhD,KAAK,CAAC,EAAE,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO;CAQhE"}

package/dist/services/incoming/safety-rules.js

@@ -0,0 +1,68 @@
+/**
+ * Incoming transaction safety rules.
+ *
+ * Three rule implementations for detecting suspicious incoming transactions:
+ * 1. DustAttackRule -- flags micro-value transfers (potential address poisoning)
+ * 2. UnknownTokenRule -- flags transfers of unregistered tokens
+ * 3. LargeAmountRule -- flags unusually large incoming amounts
+ *
+ * Each rule implements IIncomingSafetyRule with a synchronous check() method.
+ * Rules return true when the transaction IS suspicious (should be flagged).
+ * Safe default: when price data is unavailable, rules return false (not suspicious).
+ *
+ * @see docs/76-incoming-transaction-monitoring.md section 4.2
+ */
+// ── DustAttackRule ───────────────────────────────────────────────
+/**
+ * Flags transactions with USD value below a configurable dust threshold.
+ *
+ * Dust attacks send tiny amounts to pollute the recipient's transaction
+ * history, hoping they'll copy-paste a malicious address.
+ *
+ * Safe default: if usdPrice is null (unavailable), returns false.
+ */
+export class DustAttackRule {
+    name = 'dust';
+    check(tx, ctx) {
+        if (ctx.usdPrice === null)
+            return false;
+        const amountUsd = (Number(tx.amount) * ctx.usdPrice) / 10 ** ctx.decimals;
+        return amountUsd < ctx.dustThresholdUsd;
+    }
+}
+// ── UnknownTokenRule ────────────────────────────────────────────
+/**
+ * Flags token transfers where the token address is not in the registry.
+ *
+ * Native transfers (tokenAddress === null) are never flagged by this rule,
+ * since SOL/ETH are inherently "known".
+ */
+export class UnknownTokenRule {
+    name = 'unknownToken';
+    check(tx, ctx) {
+        // Native transfers are always safe for this rule
+        if (tx.tokenAddress === null)
+            return false;
+        return !ctx.isRegisteredToken;
+    }
+}
+// ── LargeAmountRule ─────────────────────────────────────────────
+/**
+ * Flags transactions whose USD value exceeds a configurable multiplier
+ * of the wallet's average incoming USD amount.
+ *
+ * Helps detect unexpected large deposits that may indicate stolen funds
+ * being routed through monitored wallets.
+ *
+ * Safe default: if either usdPrice or avgIncomingUsd is null, returns false.
+ */
+export class LargeAmountRule {
+    name = 'largeAmount';
+    check(tx, ctx) {
+        if (ctx.usdPrice === null || ctx.avgIncomingUsd === null)
+            return false;
+        const amountUsd = (Number(tx.amount) * ctx.usdPrice) / 10 ** ctx.decimals;
+        return amountUsd > ctx.avgIncomingUsd * ctx.amountMultiplier;
+    }
+}
+//# sourceMappingURL=safety-rules.js.map

package/dist/services/incoming/safety-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-rules.js","sourceRoot":"","sources":["../../../src/services/incoming/safety-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA4BH,oEAAoE;AAEpE;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IAChB,IAAI,GAAqB,MAAM,CAAC;IAEzC,KAAK,CAAC,EAAuB,EAAE,GAAsB;QACnD,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAExC,MAAM,SAAS,GACb,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC;QAE1D,OAAO,SAAS,GAAG,GAAG,CAAC,gBAAgB,CAAC;IAC1C,CAAC;CACF;AAED,mEAAmE;AAEnE;;;;;GAKG;AACH,MAAM,OAAO,gBAAgB;IAClB,IAAI,GAAqB,cAAc,CAAC;IAEjD,KAAK,CAAC,EAAuB,EAAE,GAAsB;QACnD,iDAAiD;QACjD,IAAI,EAAE,CAAC,YAAY,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAE3C,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,mEAAmE;AAEnE;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAe;IACjB,IAAI,GAAqB,aAAa,CAAC;IAEhD,KAAK,CAAC,EAAuB,EAAE,GAAsB;QACnD,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,CAAC,cAAc,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAEvE,MAAM,SAAS,GACb,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC;QAE1D,OAAO,SAAS,GAAG,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC,gBAAgB,CAAC;IAC/D,CAAC;CACF"}

package/dist/services/incoming/subscription-multiplexer.d.ts

@@ -0,0 +1,87 @@
+/**
+ * SubscriptionMultiplexer -- connection sharing layer for incoming TX subscribers.
+ *
+ * Manages one IChainSubscriber instance per chain:network pair, allowing
+ * multiple wallets to share a single WebSocket connection. Integrates with
+ * reconnectLoop from @waiaas/core for resilient reconnection and triggers
+ * gap recovery on successful reconnect.
+ *
+ * Key behaviors:
+ * - addWallet() reuses existing connection if chain:network already has one
+ * - removeWallet() destroys connection when no wallets remain
+ * - reconnectLoop drives WS_ACTIVE -> RECONNECTING -> POLLING_FALLBACK transitions
+ * - Gap recovery callback invoked with cursor on successful reconnect
+ *
+ * References:
+ *   Design doc 76 section 5.4 (multiplexer)
+ *   IChainSubscriber 6-method interface from @waiaas/core
+ *   reconnectLoop/ConnectionState from @waiaas/core
+ */
+import type { IChainSubscriber, IncomingTransaction, ConnectionState, ReconnectConfig } from '@waiaas/core';
+type SubscriberFactory = (chain: string, network: string) => IChainSubscriber | Promise<IChainSubscriber>;
+type OnTransactionCallback = (tx: IncomingTransaction) => void;
+type GapRecoveryCallback = (chain: string, network: string, walletIds: string[]) => Promise<void>;
+export interface MultiplexerDeps {
+    subscriberFactory: SubscriberFactory;
+    onTransaction: OnTransactionCallback;
+    onGapRecovery?: GapRecoveryCallback;
+    reconnectConfig?: ReconnectConfig;
+}
+export declare class SubscriptionMultiplexer {
+    private readonly connections;
+    private readonly deps;
+    private readonly reconnectConfig;
+    constructor(deps: MultiplexerDeps);
+    /**
+     * Add a wallet to a shared connection for the given chain:network.
+     * If no connection exists, creates subscriber, connects, and starts reconnectLoop.
+     * If connection already exists, subscribes wallet through the existing subscriber.
+     */
+    addWallet(chain: string, network: string, walletId: string, walletAddress: string): Promise<void>;
+    /**
+     * Remove a wallet from its shared connection.
+     * Destroys the connection if no wallets remain.
+     */
+    removeWallet(chain: string, network: string, walletId: string): Promise<void>;
+    /**
+     * Get the connection state for a chain:network pair.
+     * Returns null if no connection exists.
+     */
+    getConnectionState(chain: string, network: string): ConnectionState | null;
+    /**
+     * Get summary of all active connections.
+     */
+    getActiveConnections(): Array<{
+        key: string;
+        walletCount: number;
+        state: ConnectionState;
+    }>;
+    /**
+     * Get subscriber entries for gap recovery.
+     * Returns a read-only view compatible with createGapRecoveryHandler deps.
+     *
+     * Note: pollAll() is not part of IChainSubscriber interface but
+     * exists on both SolanaIncomingSubscriber and EvmIncomingSubscriber.
+     * The returned type uses structural typing to express this.
+     */
+    getSubscriberEntries(): Map<string, {
+        subscriber: {
+            pollAll: () => Promise<void>;
+        };
+    }>;
+    /**
+     * Get subscribers for a specific chain prefix (e.g., "solana", "ethereum").
+     * Used by polling workers to iterate chain-specific subscribers.
+     */
+    getSubscribersForChain(chainPrefix: string): Array<{
+        key: string;
+        subscriber: IChainSubscriber;
+    }>;
+    /**
+     * Stop all connections: abort reconnect loops, unsubscribe wallets, destroy subscribers.
+     * Clears the connections Map.
+     */
+    stopAll(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=subscription-multiplexer.d.ts.map

package/dist/services/incoming/subscription-multiplexer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription-multiplexer.d.ts","sourceRoot":"","sources":["../../../src/services/incoming/subscription-multiplexer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,eAAe,EAChB,MAAM,cAAc,CAAC;AAetB,KAAK,iBAAiB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC1G,KAAK,qBAAqB,GAAG,CAAC,EAAE,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAC/D,KAAK,mBAAmB,GAAG,CACzB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EAAE,KAChB,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,aAAa,EAAE,qBAAqB,CAAC;IACrC,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAID,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6C;IACzE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;IACvC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;gBAEtC,IAAI,EAAE,eAAe;IAKjC;;;;OAIG;IACG,SAAS,CACb,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC;IA8EhB;;;OAGG;IACG,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAehB;;;OAGG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAK1E;;OAEG;IACH,oBAAoB,IAAI,KAAK,CAAC;QAC5B,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,eAAe,CAAC;KACxB,CAAC;IAQF;;;;;;;OAOG;IACH,oBAAoB,IAAI,GAAG,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE;YAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;IAOrF;;;OAGG;IACH,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,KAAK,CAAC;QACjD,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,gBAAgB,CAAC;KAC9B,CAAC;IAaF;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAqB/B"}

package/dist/services/incoming/subscription-multiplexer.js

@@ -0,0 +1,169 @@
+/**
+ * SubscriptionMultiplexer -- connection sharing layer for incoming TX subscribers.
+ *
+ * Manages one IChainSubscriber instance per chain:network pair, allowing
+ * multiple wallets to share a single WebSocket connection. Integrates with
+ * reconnectLoop from @waiaas/core for resilient reconnection and triggers
+ * gap recovery on successful reconnect.
+ *
+ * Key behaviors:
+ * - addWallet() reuses existing connection if chain:network already has one
+ * - removeWallet() destroys connection when no wallets remain
+ * - reconnectLoop drives WS_ACTIVE -> RECONNECTING -> POLLING_FALLBACK transitions
+ * - Gap recovery callback invoked with cursor on successful reconnect
+ *
+ * References:
+ *   Design doc 76 section 5.4 (multiplexer)
+ *   IChainSubscriber 6-method interface from @waiaas/core
+ *   reconnectLoop/ConnectionState from @waiaas/core
+ */
+import { reconnectLoop, DEFAULT_RECONNECT_CONFIG } from '@waiaas/core';
+// ── SubscriptionMultiplexer ──────────────────────────────────────
+export class SubscriptionMultiplexer {
+    connections = new Map();
+    deps;
+    reconnectConfig;
+    constructor(deps) {
+        this.deps = deps;
+        this.reconnectConfig = deps.reconnectConfig ?? DEFAULT_RECONNECT_CONFIG;
+    }
+    /**
+     * Add a wallet to a shared connection for the given chain:network.
+     * If no connection exists, creates subscriber, connects, and starts reconnectLoop.
+     * If connection already exists, subscribes wallet through the existing subscriber.
+     */
+    async addWallet(chain, network, walletId, walletAddress) {
+        const key = `${chain}:${network}`;
+        const existing = this.connections.get(key);
+        if (existing) {
+            // Reuse existing connection -- just subscribe the wallet
+            await existing.subscriber.subscribe(walletId, walletAddress, network, this.deps.onTransaction);
+            existing.wallets.add(walletId);
+            return;
+        }
+        // Create new connection entry
+        const subscriber = await this.deps.subscriberFactory(chain, network);
+        const abortController = new AbortController();
+        const entry = {
+            subscriber,
+            wallets: new Set([walletId]),
+            state: 'RECONNECTING', // Will transition to WS_ACTIVE on connect
+            abortController,
+        };
+        this.connections.set(key, entry);
+        // Subscribe the wallet before connecting
+        await subscriber.subscribe(walletId, walletAddress, network, this.deps.onTransaction);
+        // Connect the subscriber
+        await subscriber.connect();
+        entry.state = 'WS_ACTIVE';
+        // Start reconnectLoop in fire-and-forget mode
+        // The loop monitors the connection and handles reconnection on disconnect
+        void (async () => {
+            // Wait for the first disconnect before entering the reconnect loop
+            try {
+                await subscriber.waitForDisconnect();
+            }
+            catch {
+                // Disconnect detected
+            }
+            if (abortController.signal.aborted)
+                return;
+            // Now enter the reconnect loop for subsequent reconnections
+            await reconnectLoop(subscriber, this.reconnectConfig, (state) => {
+                // Guard against updates after connection was removed
+                const current = this.connections.get(key);
+                if (current !== entry)
+                    return;
+                const previousState = entry.state;
+                entry.state = state;
+                // On successful reconnect (transition to WS_ACTIVE from non-WS_ACTIVE),
+                // trigger gap recovery
+                if (state === 'WS_ACTIVE' &&
+                    previousState !== 'WS_ACTIVE' &&
+                    this.deps.onGapRecovery) {
+                    void this.deps.onGapRecovery(chain, network, [...entry.wallets]);
+                }
+            }, abortController.signal);
+        })();
+    }
+    /**
+     * Remove a wallet from its shared connection.
+     * Destroys the connection if no wallets remain.
+     */
+    async removeWallet(chain, network, walletId) {
+        const key = `${chain}:${network}`;
+        const entry = this.connections.get(key);
+        if (!entry)
+            return;
+        await entry.subscriber.unsubscribe(walletId);
+        entry.wallets.delete(walletId);
+        if (entry.wallets.size === 0) {
+            entry.abortController.abort();
+            await entry.subscriber.destroy();
+            this.connections.delete(key);
+        }
+    }
+    /**
+     * Get the connection state for a chain:network pair.
+     * Returns null if no connection exists.
+     */
+    getConnectionState(chain, network) {
+        const key = `${chain}:${network}`;
+        return this.connections.get(key)?.state ?? null;
+    }
+    /**
+     * Get summary of all active connections.
+     */
+    getActiveConnections() {
+        return Array.from(this.connections.entries()).map(([key, entry]) => ({
+            key,
+            walletCount: entry.wallets.size,
+            state: entry.state,
+        }));
+    }
+    /**
+     * Get subscriber entries for gap recovery.
+     * Returns a read-only view compatible with createGapRecoveryHandler deps.
+     *
+     * Note: pollAll() is not part of IChainSubscriber interface but
+     * exists on both SolanaIncomingSubscriber and EvmIncomingSubscriber.
+     * The returned type uses structural typing to express this.
+     */
+    getSubscriberEntries() {
+        return this.connections;
+    }
+    /**
+     * Get subscribers for a specific chain prefix (e.g., "solana", "ethereum").
+     * Used by polling workers to iterate chain-specific subscribers.
+     */
+    getSubscribersForChain(chainPrefix) {
+        const result = [];
+        for (const [key, entry] of this.connections) {
+            if (key.startsWith(`${chainPrefix}:`)) {
+                result.push({ key, subscriber: entry.subscriber });
+            }
+        }
+        return result;
+    }
+    /**
+     * Stop all connections: abort reconnect loops, unsubscribe wallets, destroy subscribers.
+     * Clears the connections Map.
+     */
+    async stopAll() {
+        const destroyPromises = [];
+        for (const [, entry] of this.connections) {
+            entry.abortController.abort();
+            // Unsubscribe all wallets and destroy subscriber
+            const walletIds = [...entry.wallets];
+            destroyPromises.push((async () => {
+                for (const walletId of walletIds) {
+                    await entry.subscriber.unsubscribe(walletId);
+                }
+                await entry.subscriber.destroy();
+            })());
+        }
+        await Promise.all(destroyPromises);
+        this.connections.clear();
+    }
+}
+//# sourceMappingURL=subscription-multiplexer.js.map

package/dist/services/incoming/subscription-multiplexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription-multiplexer.js","sourceRoot":"","sources":["../../../src/services/incoming/subscription-multiplexer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AA6BvE,oEAAoE;AAEpE,MAAM,OAAO,uBAAuB;IACjB,WAAW,GAAG,IAAI,GAAG,EAAkC,CAAC;IACxD,IAAI,CAAkB;IACtB,eAAe,CAAkB;IAElD,YAAY,IAAqB;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,wBAAwB,CAAC;IAC1E,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CACb,KAAa,EACb,OAAe,EACf,QAAgB,EAChB,aAAqB;QAErB,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,QAAQ,EAAE,CAAC;YACb,yDAAyD;YACzD,MAAM,QAAQ,CAAC,UAAU,CAAC,SAAS,CACjC,QAAQ,EACR,aAAa,EACb,OAAO,EACP,IAAI,CAAC,IAAI,CAAC,aAAa,CACxB,CAAC;YACF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAoB;YAC7B,UAAU;YACV,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC5B,KAAK,EAAE,cAAc,EAAE,0CAA0C;YACjE,eAAe;SAChB,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAEjC,yCAAyC;QACzC,MAAM,UAAU,CAAC,SAAS,CACxB,QAAQ,EACR,aAAa,EACb,OAAO,EACP,IAAI,CAAC,IAAI,CAAC,aAAa,CACxB,CAAC;QAEF,yBAAyB;QACzB,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;QAC3B,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC;QAE1B,8CAA8C;QAC9C,0EAA0E;QAC1E,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,mEAAmE;YACnE,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,iBAAiB,EAAE,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;YAED,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO;YAE3C,4DAA4D;YAC5D,MAAM,aAAa,CACjB,UAAU,EACV,IAAI,CAAC,eAAe,EACpB,CAAC,KAAsB,EAAE,EAAE;gBACzB,qDAAqD;gBACrD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC1C,IAAI,OAAO,KAAK,KAAK;oBAAE,OAAO;gBAE9B,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC;gBAClC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;gBAEpB,wEAAwE;gBACxE,uBAAuB;gBACvB,IACE,KAAK,KAAK,WAAW;oBACrB,aAAa,KAAK,WAAW;oBAC7B,IAAI,CAAC,IAAI,CAAC,aAAa,EACvB,CAAC;oBACD,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC,EACD,eAAe,CAAC,MAAM,CACvB,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,OAAe,EACf,QAAgB;QAEhB,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7C,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,KAAa,EAAE,OAAe;QAC/C,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,oBAAoB;QAKlB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACnE,GAAG;YACH,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;YAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;OAOG;IACH,oBAAoB;QAClB,OAAO,IAAI,CAAC,WAGX,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,sBAAsB,CAAC,WAAmB;QAIxC,MAAM,MAAM,GAGP,EAAE,CAAC;QACR,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,eAAe,GAAoB,EAAE,CAAC;QAE5C,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACzC,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAE9B,iDAAiD;YACjD,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,eAAe,CAAC,IAAI,CAClB,CAAC,KAAK,IAAI,EAAE;gBACV,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACjC,MAAM,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;gBAC/C,CAAC;gBACD,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACnC,CAAC,CAAC,EAAE,CACL,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACnC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/services/signing-sdk/approval-channel-router.d.ts

@@ -10,7 +10,7 @@
  *      - walletconnect / telegram_bot / rest -> return method (no channel call)
  *   3. If SDK method but signing_sdk.enabled=false: fall through to global fallback
  *   4. Global fallback priority (CHAN-06):
- *      SDK ntfy > SDK Telegram > WalletConnect > Telegram Bot > REST
+ *      Wallet App (ntfy) > Wallet App (Telegram) > WalletConnect > Telegram Bot > REST
  *
  * CHAN-07: When signing_sdk.enabled !== 'true', SDK channels are skipped entirely.
  *