@wopr-network/platform-core 1.67.0 → 1.68.0

package/src/billing/crypto/evm/checkout.ts

@@ -1,5 +1,4 @@
 import { Credit } from "../../../credits/credit.js";
-import { deriveAddress } from "../address-gen.js";
 import type { ICryptoChargeRepository } from "../charge-store.js";
 import { getTokenConfig, tokenAmountFromCents } from "./config.js";
 import type { StablecoinCheckoutOpts } from "./types.js";
@@ -8,6 +7,8 @@ export const MIN_STABLECOIN_USD = 10;
 
 export interface StablecoinCheckoutDeps {
   chargeStore: Pick<ICryptoChargeRepository, "getNextDerivationIndex" | "createStablecoinCharge">;
+  /** HD key derivation function — injected from @wopr-network/platform-crypto-server. */
+  deriveAddress: (xpub: string, index: number, encoding: string) => string;
   xpub: string;
 }
 
@@ -47,7 +48,7 @@ export async function createStablecoinCheckout(
   const maxRetries = 3;
   for (let attempt = 0; attempt <= maxRetries; attempt++) {
     const derivationIndex = await deps.chargeStore.getNextDerivationIndex();
-    const depositAddress = deriveAddress(deps.xpub, derivationIndex, "evm");
+    const depositAddress = deps.deriveAddress(deps.xpub, derivationIndex, "evm");
     const referenceId = `sc:${opts.chain}:${opts.token.toLowerCase()}:${depositAddress.toLowerCase()}`;
 
     try {

package/src/billing/crypto/evm/eth-checkout.ts

@@ -1,15 +1,24 @@
 import { Credit } from "../../../credits/credit.js";
-import { deriveAddress } from "../address-gen.js";
 import type { ICryptoChargeRepository } from "../charge-store.js";
-import { centsToNative } from "../oracle/convert.js";
-import type { IPriceOracle } from "../oracle/types.js";
 import type { EvmChain } from "./types.js";
 
 export const MIN_ETH_USD = 10;
 
+/** Price oracle interface — injected from @wopr-network/platform-crypto-server. */
+export interface EthPriceOracle {
+  getPrice(asset: string): Promise<{ priceMicros: number }>;
+}
+
+/** Convert USD cents to native token base units (e.g. wei for ETH). */
+export type CentsToNativeFn = (cents: number, priceMicros: number, decimals: number) => bigint;
+
 export interface EthCheckoutDeps {
   chargeStore: Pick<ICryptoChargeRepository, "getNextDerivationIndex" | "createStablecoinCharge">;
-  oracle: IPriceOracle;
+  oracle: EthPriceOracle;
+  /** HD key derivation function — injected from @wopr-network/platform-crypto-server. */
+  deriveAddress: (xpub: string, index: number, encoding: string) => string;
+  /** Convert cents to native base units — injected from @wopr-network/platform-crypto-server. */
+  centsToNative: CentsToNativeFn;
   xpub: string;
 }
 
@@ -46,12 +55,12 @@ export async function createEthCheckout(deps: EthCheckoutDeps, opts: EthCheckout
 
   const amountUsdCents = Credit.fromDollars(opts.amountUsd).toCentsRounded();
   const { priceMicros } = await deps.oracle.getPrice("ETH");
-  const expectedWei = centsToNative(amountUsdCents, priceMicros, 18);
+  const expectedWei = deps.centsToNative(amountUsdCents, priceMicros, 18);
   const maxRetries = 3;
 
   for (let attempt = 0; attempt <= maxRetries; attempt++) {
     const derivationIndex = await deps.chargeStore.getNextDerivationIndex();
-    const depositAddress = deriveAddress(deps.xpub, derivationIndex, "evm") as `0x${string}`;
+    const depositAddress = deps.deriveAddress(deps.xpub, derivationIndex, "evm") as `0x${string}`;
     const referenceId = `eth:${opts.chain}:${depositAddress}`;
 
     try {

package/src/billing/crypto/evm/eth-settler.ts

@@ -2,7 +2,7 @@ import { Credit } from "../../../credits/credit.js";
 import type { ILedger } from "../../../credits/ledger.js";
 import type { ICryptoChargeRepository } from "../charge-store.js";
 import type { CryptoWebhookResult } from "../types.js";
-import type { EthPaymentEvent } from "./eth-watcher.js";
+import type { EthPaymentEvent } from "./types.js";
 
 export interface EthSettlerDeps {
   chargeStore: Pick<ICryptoChargeRepository, "getByDepositAddress" | "updateStatus" | "markCredited">;

package/src/billing/crypto/evm/index.ts

@@ -1,23 +1,24 @@
-export type { EncodingParams } from "../address-gen.js";
-export { deriveAddress, isValidXpub } from "../address-gen.js";
 export type { StablecoinCheckoutDeps, StablecoinCheckoutResult } from "./checkout.js";
 export { createStablecoinCheckout, MIN_STABLECOIN_USD } from "./checkout.js";
 export { centsFromTokenAmount, getChainConfig, getTokenConfig, tokenAmountFromCents } from "./config.js";
-export type { EthCheckoutDeps, EthCheckoutOpts, EthCheckoutResult } from "./eth-checkout.js";
+export type {
+  CentsToNativeFn,
+  EthCheckoutDeps,
+  EthCheckoutOpts,
+  EthCheckoutResult,
+  EthPriceOracle,
+} from "./eth-checkout.js";
 export { createEthCheckout, MIN_ETH_USD } from "./eth-checkout.js";
 export type { EthSettlerDeps } from "./eth-settler.js";
 export { settleEthPayment } from "./eth-settler.js";
-export type { EthPaymentEvent, EthWatcherOpts } from "./eth-watcher.js";
-export { EthWatcher } from "./eth-watcher.js";
 export type { EvmSettlerDeps } from "./settler.js";
 export { settleEvmPayment } from "./settler.js";
 export type {
   ChainConfig,
+  EthPaymentEvent,
   EvmChain,
   EvmPaymentEvent,
   StablecoinCheckoutOpts,
   StablecoinToken,
   TokenConfig,
 } from "./types.js";
-export type { EvmWatcherOpts } from "./watcher.js";
-export { createRpcCaller, EvmWatcher } from "./watcher.js";

package/src/billing/crypto/evm/types.ts

@@ -40,6 +40,23 @@ export interface EvmPaymentEvent {
   readonly confirmationsRequired: number;
 }
 
+/** Event emitted on each confirmation increment for a native ETH deposit. */
+export interface EthPaymentEvent {
+  readonly chain: EvmChain;
+  readonly from: string;
+  readonly to: string;
+  /** Raw value in wei (BigInt as string for serialization). */
+  readonly valueWei: string;
+  /** USD cents equivalent at detection time (integer). */
+  readonly amountUsdCents: number;
+  readonly txHash: string;
+  readonly blockNumber: number;
+  /** Current confirmation count (latest block - tx block). */
+  readonly confirmations: number;
+  /** Required confirmations for this chain. */
+  readonly confirmationsRequired: number;
+}
+
 /** Options for creating a stablecoin checkout. */
 export interface StablecoinCheckoutOpts {
   tenant: string;

package/src/billing/crypto/index.ts

@@ -1,4 +1,8 @@
+// Client
+
+// Chain-specific settlers + checkouts
 export * from "./btc/index.js";
+// Stores (products use these for local charge tracking)
 export type {
   CryptoChargeProgressUpdate,
   CryptoChargeRecord,
@@ -18,8 +22,8 @@ export { CryptoServiceClient, loadCryptoConfig } from "./client.js";
 export type { IWatcherCursorStore } from "./cursor-store.js";
 export { DrizzleWatcherCursorStore } from "./cursor-store.js";
 export * from "./evm/index.js";
-export type { KeyServerDeps } from "./key-server.js";
-export { createKeyServerApp } from "./key-server.js";
+
+// Ledger glue (webhook handler)
 export type {
   KeyServerWebhookDeps as CryptoWebhookDeps,
   KeyServerWebhookPayload as CryptoWebhookPayload,
@@ -30,18 +34,16 @@ export {
   handleKeyServerWebhook as handleCryptoWebhook,
   normalizeStatus,
 } from "./key-server-webhook.js";
-export * from "./oracle/index.js";
 export type { IPaymentMethodStore, PaymentMethodRecord } from "./payment-method-store.js";
 export { DrizzlePaymentMethodStore } from "./payment-method-store.js";
+
+// Types
 export type {
-  IAddressEncoder,
-  IChainPlugin,
-  IChainWatcher,
-  ICurveDeriver,
-  ISweepStrategy,
-  PaymentEvent,
-} from "./plugin/index.js";
-export { PluginRegistry } from "./plugin/index.js";
-export type { CryptoCharge, CryptoChargeStatus, CryptoPaymentState } from "./types.js";
+  CryptoCharge,
+  CryptoChargeStatus,
+  CryptoPaymentState,
+  CryptoWebhookResult as SettlerWebhookResult,
+} from "./types.js";
+// Checkout orchestration
 export type { UnifiedCheckoutDeps, UnifiedCheckoutResult } from "./unified-checkout.js";
 export { createUnifiedCheckout, MIN_CHECKOUT_USD as MIN_PAYMENT_USD, MIN_CHECKOUT_USD } from "./unified-checkout.js";

package/src/billing/crypto/types.ts

@@ -27,44 +27,6 @@ export interface CryptoCheckoutOpts {
   amountUsd: number;
 }
 
-/** Webhook payload received from BTCPay Server (InvoiceSettled event). */
-export interface CryptoWebhookPayload {
-  /** BTCPay delivery ID (for deduplication). */
-  deliveryId: string;
-  /** Webhook ID. */
-  webhookId: string;
-  /** Original delivery ID (same as deliveryId on first delivery). */
-  originalDeliveryId: string;
-  /** Whether this is a redelivery. */
-  isRedelivery: boolean;
-  /** Event type (e.g. "InvoiceSettled", "InvoiceProcessing", "InvoiceExpired"). */
-  type: string;
-  /** Unix timestamp. */
-  timestamp: number;
-  /** BTCPay store ID. */
-  storeId: string;
-  /** BTCPay invoice ID. */
-  invoiceId: string;
-  /** Invoice metadata (echoed from creation). */
-  metadata: Record<string, unknown>;
-  /** Whether admin manually marked as settled (InvoiceSettled only). */
-  manuallyMarked?: boolean;
-  /** Whether customer overpaid (InvoiceSettled only). */
-  overPaid?: boolean;
-  /** Whether invoice was partially paid (InvoiceExpired only). */
-  partiallyPaid?: boolean;
-}
-
-/** Configuration for BTCPay Server integration. */
-export interface CryptoBillingConfig {
-  /** BTCPay API key (from Account > API keys). */
-  apiKey: string;
-  /** BTCPay Server base URL. */
-  baseUrl: string;
-  /** BTCPay store ID. */
-  storeId: string;
-}
-
 /** Result of processing a crypto webhook event. */
 export interface CryptoWebhookResult {
   handled: boolean;
@@ -74,28 +36,3 @@ export interface CryptoWebhookResult {
   reactivatedBots?: string[];
   duplicate?: boolean;
 }
-
-/**
- * Map BTCPay webhook event type string to a CryptoPaymentState.
- *
- * Shared between the core (billing) and consumer (monetization) webhook handlers.
- * Throws on unrecognized event types to surface integration errors early.
- */
-export function mapBtcPayEventToStatus(eventType: string): CryptoPaymentState {
-  switch (eventType) {
-    case "InvoiceCreated":
-      return "New";
-    case "InvoiceReceivedPayment":
-    case "InvoiceProcessing":
-      return "Processing";
-    case "InvoiceSettled":
-    case "InvoicePaymentSettled":
-      return "Settled";
-    case "InvoiceExpired":
-      return "Expired";
-    case "InvoiceInvalid":
-      return "Invalid";
-    default:
-      throw new Error(`Unknown BTCPay event type: ${eventType}`);
-  }
-}

package/src/email/client.ts

@@ -129,6 +129,18 @@ class ResendTransport implements EmailTransport {
   }
 }
 
+/** No-op transport that logs but does not send. Used when EMAIL_DISABLED=true. */
+class NoopTransport implements EmailTransport {
+  async send(opts: SendTemplateEmailOpts): Promise<EmailSendResult> {
+    logger.info("Email suppressed (EMAIL_DISABLED)", {
+      to: opts.to,
+      template: opts.templateName,
+      userId: opts.userId,
+    });
+    return { id: "noop", success: true };
+  }
+}
+
 /**
  * Create a lazily-initialized singleton EmailClient from environment variables.
  *
@@ -174,6 +186,12 @@ export interface EmailClientOverrides {
  */
 export function getEmailClient(overrides?: EmailClientOverrides): EmailClient {
   if (!_client) {
+    if (process.env.EMAIL_DISABLED === "true") {
+      _client = new EmailClient(new NoopTransport());
+      logger.info("Email client disabled (EMAIL_DISABLED=true)");
+      return _client;
+    }
+
     const from = overrides?.from || process.env.EMAIL_FROM || process.env.RESEND_FROM || "noreply@wopr.bot";
     const replyTo =
       overrides?.replyTo || process.env.EMAIL_REPLY_TO || process.env.RESEND_REPLY_TO || "support@wopr.bot";

package/dist/billing/crypto/__tests__/address-gen.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/billing/crypto/__tests__/address-gen.test.js

@@ -1,219 +0,0 @@
-import { HDKey } from "@scure/bip32";
-import * as bip39 from "@scure/bip39";
-import { privateKeyToAccount } from "viem/accounts";
-import { describe, expect, it } from "vitest";
-import { deriveAddress, deriveTreasury, isValidXpub } from "../address-gen.js";
-/**
- * Well-known BIP-39 test mnemonic.
- * DO NOT use in production — this is public and widely known.
- */
-const TEST_MNEMONIC = "abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about";
-const TEST_SEED = bip39.mnemonicToSeedSync(TEST_MNEMONIC);
-/** Derive xpub at a BIP-44 path from the test mnemonic. */
-function xpubAt(path) {
-    return HDKey.fromMasterSeed(TEST_SEED).derive(path).publicExtendedKey;
-}
-/** Derive private key at xpub / chainIndex / addressIndex from the test mnemonic. */
-function privKeyAt(path, chainIndex, addressIndex) {
-    const child = HDKey.fromMasterSeed(TEST_SEED).derive(path).deriveChild(chainIndex).deriveChild(addressIndex);
-    if (!child.privateKey)
-        throw new Error("No private key");
-    return child.privateKey;
-}
-function privKeyHex(key) {
-    return `0x${Array.from(key, (b) => b.toString(16).padStart(2, "0")).join("")}`;
-}
-// =============================================================
-// DB chain configs — must match production payment_methods rows
-// =============================================================
-const CHAIN_CONFIGS = [
-    { name: "bitcoin", coinType: 0, addressType: "bech32", params: { hrp: "bc" }, addrRegex: /^bc1q[a-z0-9]+$/ },
-    { name: "litecoin", coinType: 2, addressType: "bech32", params: { hrp: "ltc" }, addrRegex: /^ltc1q[a-z0-9]+$/ },
-    {
-        name: "dogecoin",
-        coinType: 3,
-        addressType: "p2pkh",
-        params: { version: "0x1e" },
-        addrRegex: /^D[a-km-zA-HJ-NP-Z1-9]+$/,
-    },
-    {
-        name: "tron",
-        coinType: 195,
-        addressType: "keccak-b58check",
-        params: { version: "0x41" },
-        addrRegex: /^T[a-km-zA-HJ-NP-Z1-9]+$/,
-    },
-    { name: "ethereum", coinType: 60, addressType: "evm", params: {}, addrRegex: /^0x[0-9a-fA-F]{40}$/ },
-];
-// =============================================================
-// Core property: xpub-derived address == mnemonic-derived address
-// This guarantees sweep scripts can sign for pay server addresses.
-// =============================================================
-describe("address derivation — sweep key parity", () => {
-    for (const cfg of CHAIN_CONFIGS) {
-        const path = `m/44'/${cfg.coinType}'/0'`;
-        const xpub = xpubAt(path);
-        describe(cfg.name, () => {
-            it("xpub address matches format", () => {
-                const addr = deriveAddress(xpub, 0, cfg.addressType, cfg.params);
-                expect(addr).toMatch(cfg.addrRegex);
-            });
-            it("derives different addresses at different indices", () => {
-                const a = deriveAddress(xpub, 0, cfg.addressType, cfg.params);
-                const b = deriveAddress(xpub, 1, cfg.addressType, cfg.params);
-                expect(a).not.toBe(b);
-            });
-            it("is deterministic", () => {
-                const a = deriveAddress(xpub, 7, cfg.addressType, cfg.params);
-                const b = deriveAddress(xpub, 7, cfg.addressType, cfg.params);
-                expect(a).toBe(b);
-            });
-            it("treasury differs from deposit index 0", () => {
-                const deposit = deriveAddress(xpub, 0, cfg.addressType, cfg.params);
-                const treasury = deriveTreasury(xpub, cfg.addressType, cfg.params);
-                expect(deposit).not.toBe(treasury);
-            });
-        });
-    }
-});
-// =============================================================
-// Sweep key parity for EVERY chain config.
-// Proves: mnemonic → private key → public key → address == xpub → address
-// This guarantees sweep scripts can sign for pay server addresses.
-// =============================================================
-describe("sweep key parity — privkey derives same address as xpub", () => {
-    for (const cfg of CHAIN_CONFIGS) {
-        const path = `m/44'/${cfg.coinType}'/0'`;
-        const xpub = xpubAt(path);
-        describe(cfg.name, () => {
-            it("deposit addresses match at indices 0-4", () => {
-                for (let i = 0; i < 5; i++) {
-                    const fromXpub = deriveAddress(xpub, i, cfg.addressType, cfg.params);
-                    // Derive from privkey: get the child's public key and re-derive the address
-                    const child = HDKey.fromMasterSeed(TEST_SEED).derive(path).deriveChild(0).deriveChild(i);
-                    const fromPriv = deriveAddress(
-                    // Use the child's public extended key — but HDKey.deriveChild on a full key
-                    // produces a full key. Extract just the public key and re-derive via xpub at same index.
-                    // Simpler: verify the public keys match, then the address must match.
-                    xpub, i, cfg.addressType, cfg.params);
-                    // This is tautological — we need to verify from the private key side.
-                    // For EVM we can use viem. For others, verify pubkey identity.
-                    expect(child.publicKey).toBeDefined();
-                    // The xpub's child pubkey at index i must equal the full-key's child pubkey at index i
-                    const xpubChild = HDKey.fromExtendedKey(xpub).deriveChild(0).deriveChild(i);
-                    const childPk = child.publicKey;
-                    const xpubPk = xpubChild.publicKey;
-                    expect(Buffer.from(childPk).toString("hex")).toBe(Buffer.from(xpubPk).toString("hex"));
-                    // And the address from xpub must match
-                    expect(fromXpub).toBe(fromPriv);
-                }
-            });
-            it("treasury pubkey matches", () => {
-                const fullKey = HDKey.fromMasterSeed(TEST_SEED).derive(path).deriveChild(1).deriveChild(0);
-                const xpubKey = HDKey.fromExtendedKey(xpub).deriveChild(1).deriveChild(0);
-                const fullPk = fullKey.publicKey;
-                const xpubPk = xpubKey.publicKey;
-                expect(Buffer.from(fullPk).toString("hex")).toBe(Buffer.from(xpubPk).toString("hex"));
-            });
-        });
-    }
-});
-// =============================================================
-// EVM: private key → viem account → address must match.
-// Strongest proof: viem can sign transactions from this key
-// and the address matches what the pay server derived.
-// =============================================================
-describe("EVM sweep key parity — viem account matches derived address", () => {
-    const EVM_PATH = "m/44'/60'/0'";
-    const xpub = xpubAt(EVM_PATH);
-    // All EVM chains share coin type 60
-    it("deposit privkey account matches at indices 0-9", () => {
-        for (let i = 0; i < 10; i++) {
-            const derivedAddr = deriveAddress(xpub, i, "evm");
-            const privKey = privKeyAt(EVM_PATH, 0, i);
-            const account = privateKeyToAccount(privKeyHex(privKey));
-            expect(account.address.toLowerCase()).toBe(derivedAddr.toLowerCase());
-        }
-    });
-    it("treasury privkey account matches", () => {
-        const treasuryAddr = deriveTreasury(xpub, "evm");
-        const privKey = privKeyAt(EVM_PATH, 1, 0);
-        const account = privateKeyToAccount(privKeyHex(privKey));
-        expect(account.address.toLowerCase()).toBe(treasuryAddr.toLowerCase());
-    });
-});
-// =============================================================
-// Tron-specific: keccak-b58check produces known test vectors
-// =============================================================
-describe("Tron keccak-b58check — known test vectors", () => {
-    const TRON_XPUB = xpubAt("m/44'/195'/0'");
-    it("index 0 produces known address", () => {
-        const addr = deriveAddress(TRON_XPUB, 0, "keccak-b58check", { version: "0x41" });
-        // Verified against TronWeb / TronLink derivation from test mnemonic
-        expect(addr).toBe("TUEZSdKsoDHQMeZwihtdoBiN46zxhGWYdH");
-    });
-    it("index 1 produces known address", () => {
-        const addr = deriveAddress(TRON_XPUB, 1, "keccak-b58check", { version: "0x41" });
-        expect(addr).toBe("TSeJkUh4Qv67VNFwY8LaAxERygNdy6NQZK");
-    });
-    it("treasury produces known address", () => {
-        const addr = deriveTreasury(TRON_XPUB, "keccak-b58check", { version: "0x41" });
-        expect(addr).toMatch(/^T[a-km-zA-HJ-NP-Z1-9]{33}$/);
-    });
-    it("address has correct length (34 chars)", () => {
-        for (let i = 0; i < 10; i++) {
-            const addr = deriveAddress(TRON_XPUB, i, "keccak-b58check", { version: "0x41" });
-            expect(addr.length).toBe(34);
-        }
-    });
-});
-// =============================================================
-// Bitcoin — known test vectors from BIP-84 test mnemonic
-// =============================================================
-describe("Bitcoin bech32 — known test vectors", () => {
-    const BTC_XPUB = xpubAt("m/44'/0'/0'");
-    it("index 0 produces valid bc1q address", () => {
-        const addr = deriveAddress(BTC_XPUB, 0, "bech32", { hrp: "bc" });
-        expect(addr).toMatch(/^bc1q[a-z0-9]{38,42}$/);
-    });
-    it("testnet uses tb prefix", () => {
-        const addr = deriveAddress(BTC_XPUB, 0, "bech32", { hrp: "tb" });
-        expect(addr).toMatch(/^tb1q[a-z0-9]+$/);
-    });
-});
-// =============================================================
-// Error handling
-// =============================================================
-describe("error handling", () => {
-    const ETH_XPUB = xpubAt("m/44'/60'/0'");
-    const BTC_XPUB = xpubAt("m/44'/0'/0'");
-    it("rejects negative index", () => {
-        expect(() => deriveAddress(ETH_XPUB, -1, "evm")).toThrow("Invalid");
-    });
-    it("rejects unknown address type", () => {
-        expect(() => deriveAddress(ETH_XPUB, 0, "foo")).toThrow("Unknown address type");
-    });
-    it("bech32 throws without hrp", () => {
-        expect(() => deriveAddress(BTC_XPUB, 0, "bech32", {})).toThrow("hrp");
-    });
-    it("p2pkh throws without version", () => {
-        expect(() => deriveAddress(BTC_XPUB, 0, "p2pkh", {})).toThrow("version");
-    });
-    it("keccak-b58check throws without version", () => {
-        expect(() => deriveAddress(BTC_XPUB, 0, "keccak-b58check", {})).toThrow("version");
-    });
-});
-// =============================================================
-// isValidXpub
-// =============================================================
-describe("isValidXpub", () => {
-    it("accepts valid xpub", () => {
-        expect(isValidXpub(xpubAt("m/44'/0'/0'"))).toBe(true);
-    });
-    it("rejects garbage", () => {
-        expect(isValidXpub("not-an-xpub")).toBe(false);
-    });
-    it("rejects empty string", () => {
-        expect(isValidXpub("")).toBe(false);
-    });
-});

package/dist/billing/crypto/__tests__/key-server.test.d.ts

@@ -1 +0,0 @@
-export {};