@wopr-network/platform-core 1.67.0 → 1.67.1

package/dist/billing/crypto/evm/eth-watcher.js

@@ -1,121 +0,0 @@
-import { nativeToCents } from "../oracle/convert.js";
-/**
- * Native ETH transfer watcher.
- *
- * Unlike the ERC-20 EvmWatcher which uses eth_getLogs for Transfer events,
- * this scans blocks for transactions where `to` matches a watched deposit
- * address and `value > 0`.
- *
- * Scans up to latest block (not just confirmed) to detect pending txs.
- * Emits events on each confirmation increment. Only advances cursor
- * past fully-confirmed blocks.
- */
-export class EthWatcher {
-    _cursor;
-    chain;
-    rpc;
-    oracle;
-    onPayment;
-    confirmations;
-    cursorStore;
-    watcherId;
-    _watchedAddresses;
-    constructor(opts) {
-        this.chain = opts.chain;
-        this.rpc = opts.rpcCall;
-        this.oracle = opts.oracle;
-        this._cursor = opts.fromBlock;
-        this.onPayment = opts.onPayment;
-        this.confirmations = opts.confirmations;
-        this.cursorStore = opts.cursorStore;
-        this.watcherId = `eth:${opts.chain}`;
-        this._watchedAddresses = new Set((opts.watchedAddresses ?? []).map((a) => a.toLowerCase()));
-    }
-    /** Load cursor from DB. Call once at startup before first poll. */
-    async init() {
-        if (!this.cursorStore)
-            return;
-        const saved = await this.cursorStore.get(this.watcherId);
-        if (saved !== null)
-            this._cursor = saved;
-    }
-    setWatchedAddresses(addresses) {
-        this._watchedAddresses = new Set(addresses.map((a) => a.toLowerCase()));
-    }
-    get cursor() {
-        return this._cursor;
-    }
-    /**
-     * Poll for native ETH transfers to watched addresses, including unconfirmed blocks.
-     *
-     * Scans from cursor to latest block. Emits events with current confirmation count.
-     * Re-emits on each confirmation increment. Only advances cursor past fully-confirmed blocks.
-     */
-    async poll() {
-        if (this._watchedAddresses.size === 0)
-            return;
-        const latestHex = (await this.rpc("eth_blockNumber", []));
-        const latest = Number.parseInt(latestHex, 16);
-        const confirmed = latest - this.confirmations;
-        if (latest < this._cursor)
-            return;
-        const { priceMicros } = await this.oracle.getPrice("ETH");
-        // Scan up to latest (not just confirmed) to detect pending txs.
-        // Fetch blocks in batches to avoid bursting RPC rate limits on fast chains (e.g. Tron 3s blocks).
-        const BATCH_SIZE = 5;
-        for (let batchStart = this._cursor; batchStart <= latest; batchStart += BATCH_SIZE) {
-            const batchEnd = Math.min(batchStart + BATCH_SIZE - 1, latest);
-            const blockNums = Array.from({ length: batchEnd - batchStart + 1 }, (_, i) => batchStart + i);
-            const blocks = await Promise.all(blockNums.map((bn) => this.rpc("eth_getBlockByNumber", [`0x${bn.toString(16)}`, true]).then((b) => ({ blockNum: bn, block: b, error: null }), (err) => ({ blockNum: bn, block: null, error: err }))));
-            // Stop processing at the first failed block so the cursor doesn't advance past it.
-            const firstFailIdx = blocks.findIndex((b) => b.error !== null || !b.block);
-            const safeBlocks = firstFailIdx === -1 ? blocks : blocks.slice(0, firstFailIdx);
-            for (const { blockNum, block } of safeBlocks) {
-                if (!block)
-                    break;
-                const confs = latest - blockNum;
-                for (const tx of block.transactions) {
-                    if (!tx.to)
-                        continue;
-                    const to = tx.to.toLowerCase();
-                    if (!this._watchedAddresses.has(to))
-                        continue;
-                    const valueWei = BigInt(tx.value);
-                    if (valueWei === 0n)
-                        continue;
-                    // Skip if we already emitted at this confirmation count
-                    if (this.cursorStore) {
-                        const lastConf = await this.cursorStore.getConfirmationCount(this.watcherId, tx.hash);
-                        if (lastConf !== null && confs <= lastConf)
-                            continue;
-                    }
-                    const amountUsdCents = nativeToCents(valueWei, priceMicros, 18);
-                    const event = {
-                        chain: this.chain,
-                        from: tx.from.toLowerCase(),
-                        to,
-                        valueWei: valueWei.toString(),
-                        amountUsdCents,
-                        txHash: tx.hash,
-                        blockNumber: blockNum,
-                        confirmations: confs,
-                        confirmationsRequired: this.confirmations,
-                    };
-                    await this.onPayment(event);
-                    if (this.cursorStore) {
-                        await this.cursorStore.saveConfirmationCount(this.watcherId, tx.hash, confs);
-                    }
-                }
-                // Only advance cursor past fully-confirmed blocks
-                if (blockNum <= confirmed) {
-                    this._cursor = blockNum + 1;
-                    if (this.cursorStore) {
-                        await this.cursorStore.save(this.watcherId, this._cursor);
-                    }
-                }
-            }
-            if (firstFailIdx !== -1)
-                break;
-        }
-    }
-}

package/dist/billing/crypto/evm/watcher.d.ts

@@ -1,51 +0,0 @@
-import type { IWatcherCursorStore } from "../cursor-store.js";
-import type { EvmChain, EvmPaymentEvent, StablecoinToken } from "./types.js";
-type RpcCall = (method: string, params: unknown[]) => Promise<unknown>;
-export interface EvmWatcherOpts {
-    chain: EvmChain;
-    token: StablecoinToken;
-    rpcCall: RpcCall;
-    fromBlock: number;
-    onPayment: (event: EvmPaymentEvent) => void | Promise<void>;
-    /** Active deposit addresses to watch. Filters eth_getLogs by topic[2] (to address). */
-    watchedAddresses?: string[];
-    cursorStore?: IWatcherCursorStore;
-    /** Contract address for the ERC20 token (from DB). */
-    contractAddress: string;
-    /** Token decimals (from DB). */
-    decimals: number;
-    /** Required confirmations (from DB). */
-    confirmations: number;
-}
-export declare class EvmWatcher {
-    private _cursor;
-    private readonly chain;
-    private readonly token;
-    private readonly rpc;
-    private readonly onPayment;
-    private readonly confirmations;
-    private readonly contractAddress;
-    private readonly decimals;
-    private readonly cursorStore?;
-    private readonly watcherId;
-    private _watchedAddresses;
-    constructor(opts: EvmWatcherOpts);
-    /** Load cursor from DB. Call once at startup before first poll. */
-    init(): Promise<void>;
-    /** Update the set of watched deposit addresses (e.g. after a new checkout). */
-    setWatchedAddresses(addresses: string[]): void;
-    get cursor(): number;
-    /**
-     * Poll for Transfer events, including pending (unconfirmed) blocks.
-     *
-     * Two-phase scan:
-     *   1. Scan cursor..latest for new/updated txs, emit with current confirmation count
-     *   2. Re-check pending txs automatically since cursor doesn't advance past unconfirmed blocks
-     *
-     * Cursor only advances past fully-confirmed blocks.
-     */
-    poll(): Promise<void>;
-}
-/** Create an RPC caller for a given URL (plain JSON-RPC over fetch). */
-export declare function createRpcCaller(rpcUrl: string, extraHeaders?: Record<string, string>): RpcCall;
-export {};

package/dist/billing/crypto/evm/watcher.js

@@ -1,156 +0,0 @@
-import { centsFromTokenAmount } from "./config.js";
-const TRANSFER_TOPIC = "0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef";
-export class EvmWatcher {
-    _cursor;
-    chain;
-    token;
-    rpc;
-    onPayment;
-    confirmations;
-    contractAddress;
-    decimals;
-    cursorStore;
-    watcherId;
-    _watchedAddresses;
-    constructor(opts) {
-        this.chain = opts.chain;
-        this.token = opts.token;
-        this.rpc = opts.rpcCall;
-        this._cursor = opts.fromBlock;
-        this.onPayment = opts.onPayment;
-        this.cursorStore = opts.cursorStore;
-        this.watcherId = `evm:${opts.chain}:${opts.token}`;
-        this._watchedAddresses = (opts.watchedAddresses ?? []).map((a) => a.toLowerCase());
-        this.confirmations = opts.confirmations;
-        this.contractAddress = opts.contractAddress.toLowerCase();
-        this.decimals = opts.decimals;
-    }
-    /** Load cursor from DB. Call once at startup before first poll. */
-    async init() {
-        if (!this.cursorStore)
-            return;
-        const saved = await this.cursorStore.get(this.watcherId);
-        if (saved !== null)
-            this._cursor = saved;
-    }
-    /** Update the set of watched deposit addresses (e.g. after a new checkout). */
-    setWatchedAddresses(addresses) {
-        this._watchedAddresses = addresses.map((a) => a.toLowerCase());
-    }
-    get cursor() {
-        return this._cursor;
-    }
-    /**
-     * Poll for Transfer events, including pending (unconfirmed) blocks.
-     *
-     * Two-phase scan:
-     *   1. Scan cursor..latest for new/updated txs, emit with current confirmation count
-     *   2. Re-check pending txs automatically since cursor doesn't advance past unconfirmed blocks
-     *
-     * Cursor only advances past fully-confirmed blocks.
-     */
-    async poll() {
-        if (this._watchedAddresses.length === 0)
-            return; // nothing to watch
-        const latestHex = (await this.rpc("eth_blockNumber", []));
-        const latest = Number.parseInt(latestHex, 16);
-        const confirmed = latest - this.confirmations;
-        if (latest < this._cursor)
-            return;
-        // Filter by topic[2] (to address) when watched addresses are set.
-        const toFilter = this._watchedAddresses.length > 0
-            ? this._watchedAddresses.map((a) => `0x000000000000000000000000${a.slice(2)}`)
-            : null;
-        // Scan from cursor to latest (not just confirmed) to detect pending txs
-        const logs = (await this.rpc("eth_getLogs", [
-            {
-                address: this.contractAddress,
-                topics: [TRANSFER_TOPIC, null, toFilter],
-                fromBlock: `0x${this._cursor.toString(16)}`,
-                toBlock: `0x${latest.toString(16)}`,
-            },
-        ]));
-        // Group logs by block
-        const logsByBlock = new Map();
-        for (const log of logs) {
-            const bn = Number.parseInt(log.blockNumber, 16);
-            const arr = logsByBlock.get(bn);
-            if (arr)
-                arr.push(log);
-            else
-                logsByBlock.set(bn, [log]);
-        }
-        // Process all blocks (including unconfirmed), emit with confirmation count
-        const blockNums = [...logsByBlock.keys()].sort((a, b) => a - b);
-        for (const blockNum of blockNums) {
-            const confs = latest - blockNum;
-            for (const log of logsByBlock.get(blockNum) ?? []) {
-                const txKey = `${log.transactionHash}:${log.logIndex}`;
-                // Skip if we already emitted at this confirmation count
-                if (this.cursorStore) {
-                    const lastConf = await this.cursorStore.getConfirmationCount(this.watcherId, txKey);
-                    if (lastConf !== null && confs <= lastConf)
-                        continue;
-                }
-                const to = `0x${log.topics[2].slice(26)}`.toLowerCase();
-                const from = `0x${log.topics[1].slice(26)}`.toLowerCase();
-                const rawAmount = BigInt(log.data);
-                const amountUsdCents = centsFromTokenAmount(rawAmount, this.decimals);
-                const event = {
-                    chain: this.chain,
-                    token: this.token,
-                    from,
-                    to,
-                    rawAmount: rawAmount.toString(),
-                    amountUsdCents,
-                    txHash: log.transactionHash,
-                    blockNumber: blockNum,
-                    logIndex: Number.parseInt(log.logIndex, 16),
-                    confirmations: confs,
-                    confirmationsRequired: this.confirmations,
-                };
-                await this.onPayment(event);
-                // Track confirmation count
-                if (this.cursorStore) {
-                    await this.cursorStore.saveConfirmationCount(this.watcherId, txKey, confs);
-                }
-            }
-            // Only advance cursor past fully-confirmed blocks
-            if (blockNum <= confirmed) {
-                this._cursor = blockNum + 1;
-                if (this.cursorStore) {
-                    await this.cursorStore.save(this.watcherId, this._cursor);
-                }
-            }
-        }
-        // Advance cursor if no logs found but confirmed blocks exist
-        if (blockNums.length === 0 && confirmed >= this._cursor) {
-            this._cursor = confirmed + 1;
-            if (this.cursorStore) {
-                await this.cursorStore.save(this.watcherId, this._cursor);
-            }
-        }
-    }
-}
-/** Create an RPC caller for a given URL (plain JSON-RPC over fetch). */
-export function createRpcCaller(rpcUrl, extraHeaders) {
-    let id = 0;
-    const headers = { "Content-Type": "application/json", ...extraHeaders };
-    return async (method, params) => {
-        const res = await fetch(rpcUrl, {
-            method: "POST",
-            headers,
-            body: JSON.stringify({ jsonrpc: "2.0", id: ++id, method, params }),
-        });
-        if (!res.ok) {
-            const body = await res.text().catch(() => "");
-            const hasApiKey = "TRON-PRO-API-KEY" in headers;
-            console.error(`[rpc] ${method} ${res.status} auth=${hasApiKey} url=${rpcUrl.replace(/apikey=[^&]+/, "apikey=***")} body=${body.slice(0, 200)}`);
-            throw new Error(`RPC ${method} failed: ${res.status}`);
-        }
-        const data = (await res.json());
-        if (data.error)
-            throw new Error(`RPC ${method} error: ${data.error.message}`);
-        return data.result;
-    };
-}

package/dist/billing/crypto/key-server-entry.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/billing/crypto/key-server-entry.js

@@ -1,122 +0,0 @@
-/**
- * Standalone entry point for the crypto key server.
- *
- * Deploys on the chain server (pay.wopr.bot:3100).
- * Boots: postgres → migrations → key server routes → watchers → serve.
- *
- * Usage: node dist/billing/crypto/key-server-entry.js
- */
-/* biome-ignore-all lint/suspicious/noConsole: standalone entry point */
-import { serve } from "@hono/node-server";
-import { bitcoinPlugin, dogecoinPlugin, evmPlugin, litecoinPlugin, solanaPlugin, tronPlugin, } from "@wopr-network/crypto-plugins";
-import { drizzle } from "drizzle-orm/node-postgres";
-import { migrate } from "drizzle-orm/node-postgres/migrator";
-import pg from "pg";
-import * as schema from "../../db/schema/index.js";
-import { DrizzleCryptoChargeRepository } from "./charge-store.js";
-import { DrizzleWatcherCursorStore } from "./cursor-store.js";
-import { createRpcCaller } from "./evm/watcher.js";
-import { createKeyServerApp } from "./key-server.js";
-import { ChainlinkOracle } from "./oracle/chainlink.js";
-import { CoinGeckoOracle } from "./oracle/coingecko.js";
-import { CompositeOracle } from "./oracle/composite.js";
-import { FixedPriceOracle } from "./oracle/fixed.js";
-import { DrizzlePaymentMethodStore } from "./payment-method-store.js";
-import { PluginRegistry } from "./plugin/registry.js";
-import { startPluginWatchers } from "./plugin-watcher-service.js";
-import { startWatchers } from "./watcher-service.js";
-const PORT = Number(process.env.PORT ?? "3100");
-const DATABASE_URL = process.env.DATABASE_URL;
-const SERVICE_KEY = process.env.SERVICE_KEY;
-const ADMIN_TOKEN = process.env.ADMIN_TOKEN;
-const BITCOIND_USER = process.env.BITCOIND_USER ?? "btcpay";
-const BITCOIND_PASSWORD = process.env.BITCOIND_PASSWORD ?? "";
-const BASE_RPC_URL = process.env.BASE_RPC_URL ?? "https://mainnet.base.org";
-if (!DATABASE_URL) {
-    console.error("DATABASE_URL is required");
-    process.exit(1);
-}
-async function main() {
-    const pool = new pg.Pool({ connectionString: DATABASE_URL });
-    // Run migrations FIRST, before creating schema-typed db
-    console.log("[crypto-key-server] Running migrations...");
-    await migrate(drizzle(pool), { migrationsFolder: "./drizzle/migrations" });
-    // Now create the schema-typed db (columns guaranteed to exist)
-    console.log("[crypto-key-server] Connecting...");
-    const db = drizzle(pool, { schema });
-    const chargeStore = new DrizzleCryptoChargeRepository(db);
-    const methodStore = new DrizzlePaymentMethodStore(db);
-    // Composite oracle: Chainlink on-chain (BTC, ETH on Base) + CoinGecko fallback (DOGE, LTC, etc.)
-    // Every volatile asset needs reliable USD pricing — the ledger credits nanodollars.
-    const chainlink = BASE_RPC_URL
-        ? new ChainlinkOracle({ rpcCall: createRpcCaller(BASE_RPC_URL) })
-        : new FixedPriceOracle();
-    // Build token→CoinGecko ID map from DB (zero-deploy chain additions)
-    const allMethods = await methodStore.listAll();
-    const dbTokenIds = {};
-    for (const m of allMethods) {
-        if (m.oracleAssetId)
-            dbTokenIds[m.token] = m.oracleAssetId;
-    }
-    const coingecko = new CoinGeckoOracle({ tokenIds: dbTokenIds });
-    const oracle = new CompositeOracle(chainlink, coingecko);
-    // Build plugin registry — one plugin per chain family
-    const registry = new PluginRegistry();
-    registry.register(bitcoinPlugin);
-    registry.register(litecoinPlugin);
-    registry.register(dogecoinPlugin);
-    registry.register(evmPlugin);
-    registry.register(tronPlugin);
-    registry.register(solanaPlugin);
-    console.log(`[crypto-key-server] Registered ${registry.list().length} chain plugins:`, registry.list().map((p) => p.pluginId));
-    const app = createKeyServerApp({
-        db,
-        chargeStore,
-        methodStore,
-        oracle,
-        serviceKey: SERVICE_KEY,
-        adminToken: ADMIN_TOKEN,
-        registry,
-    });
-    // Boot plugin-driven watchers — polls for payments, sends webhooks.
-    // Falls back to legacy startWatchers() if USE_LEGACY_WATCHERS=1 is set.
-    const cursorStore = new DrizzleWatcherCursorStore(db);
-    const useLegacy = process.env.USE_LEGACY_WATCHERS === "1";
-    const stopWatchers = useLegacy
-        ? await startWatchers({
-            db,
-            chargeStore,
-            methodStore,
-            cursorStore,
-            oracle,
-            bitcoindUser: BITCOIND_USER,
-            bitcoindPassword: BITCOIND_PASSWORD,
-            serviceKey: SERVICE_KEY,
-            log: (msg, meta) => console.log(`[watcher] ${msg}`, meta ?? ""),
-        })
-        : await startPluginWatchers({
-            db,
-            chargeStore,
-            methodStore,
-            cursorStore,
-            oracle,
-            registry,
-            log: (msg, meta) => console.log(`[watcher] ${msg}`, meta ?? ""),
-        });
-    const server = serve({ fetch: app.fetch, port: PORT });
-    console.log(`[crypto-key-server] Listening on :${PORT}`);
-    // Graceful shutdown — stop accepting requests, drain watchers, close pool
-    const shutdown = async () => {
-        console.log("[crypto-key-server] Shutting down...");
-        stopWatchers();
-        server.close();
-        await pool.end();
-        process.exit(0);
-    };
-    process.on("SIGTERM", shutdown);
-    process.on("SIGINT", shutdown);
-}
-main().catch((err) => {
-    console.error("[crypto-key-server] Fatal:", err);
-    process.exit(1);
-});

package/dist/billing/crypto/key-server.d.ts

@@ -1,32 +0,0 @@
-/**
- * Crypto Key Server — shared address derivation + charge management.
- *
- * Deploys on the chain server (pay.wopr.bot) alongside bitcoind.
- * Products don't run watchers or hold xpubs. They request addresses
- * and receive webhooks.
- *
- * ~200 lines of new code wrapping platform-core's existing crypto modules.
- */
-import { Hono } from "hono";
-import type { DrizzleDb } from "../../db/index.js";
-import type { ICryptoChargeRepository } from "./charge-store.js";
-import type { IPriceOracle } from "./oracle/types.js";
-import type { IPaymentMethodStore } from "./payment-method-store.js";
-import type { PluginRegistry } from "./plugin/registry.js";
-export interface KeyServerDeps {
-    db: DrizzleDb;
-    chargeStore: ICryptoChargeRepository;
-    methodStore: IPaymentMethodStore;
-    oracle: IPriceOracle;
-    /** Bearer token for product API routes. If unset, auth is disabled. */
-    serviceKey?: string;
-    /** Bearer token for admin routes. If unset, admin routes are disabled. */
-    adminToken?: string;
-    /** Plugin registry for address encoding. Falls back to address-gen.ts when absent. */
-    registry?: PluginRegistry;
-}
-/**
- * Create the Hono app for the crypto key server.
- * Mount this on the chain server at the root.
- */
-export declare function createKeyServerApp(deps: KeyServerDeps): Hono;