arc402-cli 0.2.0

package/dist/walletconnect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walletconnect.d.ts","sourceRoot":"","sources":["../src/walletconnect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAKxD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAWxC,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAGF,KAAK,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/D,KAAK,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AA2B3D;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,YAAY,EACpB,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,YAAY,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAC1E,OAAO,CAAC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA+HvE;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,SAAS,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,EAAE,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAAC,MAAM,CAAC,CASjB;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAC1E,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,YAAY,EAC3B,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAuE9C"}

package/dist/walletconnect.js

@@ -0,0 +1,267 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.connectPhoneWallet = connectPhoneWallet;
+exports.sendTransactionWithSession = sendTransactionWithSession;
+exports.requestPhoneWalletSignature = requestPhoneWalletSignature;
+const sign_client_1 = require("@walletconnect/sign-client");
+const keyvaluestorage_1 = require("@walletconnect/keyvaluestorage");
+const qrcode_terminal_1 = __importDefault(require("qrcode-terminal"));
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
+const walletconnect_session_1 = require("./walletconnect-session");
+const telegram_notify_1 = require("./telegram-notify");
+// Suppress unhandled rejections from stale WalletConnect sessions (known SDK issue)
+process.on("unhandledRejection", (reason) => {
+    const msg = reason instanceof Error ? reason.message : String(reason);
+    if (msg.includes("No matching key") || msg.includes("session topic doesn't exist"))
+        return;
+    console.error("Unhandled rejection:", msg);
+});
+async function makeSignClient(projectId) {
+    const storageDir = path_1.default.join(os_1.default.homedir(), ".arc402");
+    const storagePath = path_1.default.join(storageDir, "wc-storage.json");
+    return sign_client_1.SignClient.init({
+        projectId,
+        metadata: {
+            name: "ARC-402 CLI",
+            description: "ARC-402 Protocol CLI",
+            url: "https://app.arc402.xyz",
+            icons: [],
+        },
+        storage: new keyvaluestorage_1.KeyValueStorage({ database: storagePath }),
+    });
+}
+function walletLinks(encodedUri) {
+    return {
+        "MetaMask": `metamask://wc?uri=${encodedUri}`,
+        "Rabby": `rabby://wc?uri=${encodedUri}`,
+        "Coinbase Wallet": `cbwallet://wc?uri=${encodedUri}`,
+        "Trust Wallet": `trust://wc?uri=${encodedUri}`,
+        "Rainbow": `rainbow://wc?uri=${encodedUri}`,
+    };
+}
+/**
+ * Step 1 of the two-step flow: connect the phone wallet (or resume a valid session).
+ * On fresh connect, shows deep links + QR and waits for WC approval.
+ * Saves session to config after a successful fresh pairing.
+ */
+async function connectPhoneWallet(projectId, chainId, config, opts) {
+    const client = await makeSignClient(projectId);
+    // Try to restore an existing valid session
+    const stored = (0, walletconnect_session_1.loadWCSession)(config, chainId);
+    if (stored) {
+        try {
+            const session = client.session.get(stored.topic);
+            // Verify the session is actually alive on the relay side (MetaMask may have
+            // killed it without notifying us). We do a lightweight ping; if it times out
+            // or throws the session is stale — fall through to fresh pairing.
+            await Promise.race([
+                client.ping({ topic: stored.topic }),
+                new Promise((_, reject) => setTimeout(() => reject(new Error("ping timeout")), 5000)),
+            ]);
+            return { client, session, account: stored.account };
+        }
+        catch {
+            // Session stale or timed out — clear locally and do fresh pairing
+            (0, walletconnect_session_1.clearWCSession)(config);
+            try {
+                await client.disconnect({ topic: stored.topic, reason: { code: 6000, message: "session stale" } });
+            }
+            catch { /* best-effort — may already be gone */ }
+        }
+    }
+    // Fresh pairing flow
+    const { uri, approval } = await client.connect({
+        requiredNamespaces: {
+            eip155: {
+                methods: ["eth_sendTransaction", "personal_sign", "wallet_switchEthereumChain"],
+                chains: [`eip155:${chainId}`],
+                events: ["accountsChanged"],
+            },
+        },
+    });
+    if (!uri)
+        throw new Error("Failed to create WalletConnect session");
+    const encodedUri = encodeURIComponent(uri);
+    const displayPrompt = opts?.prompt ?? "Connect your phone wallet";
+    if (opts?.hardware) {
+        console.log("\n─────────────────────────────────────────────────────");
+        console.log("Paste this URI into Ledger Live, Trezor Suite, or any WalletConnect-compatible signer:\n");
+        console.log(uri);
+        console.log("\n─────────────────────────────────────────────────────");
+        console.log("Waiting for connection...");
+    }
+    else {
+        const links = walletLinks(encodedUri);
+        console.log(`\n${displayPrompt}`);
+        console.log("─────────────────────────────────────");
+        console.log("Tap the link for your wallet app (opens directly):\n");
+        for (const [name, link] of Object.entries(links)) {
+            console.log(`${name}:\n${link}\n`);
+        }
+        console.log("Or scan QR:");
+        qrcode_terminal_1.default.generate(uri, { small: true });
+        console.log("\nWaiting for approval...");
+    }
+    const telegramOpts = opts?.hardware ? undefined : opts?.telegramOpts;
+    if (telegramOpts) {
+        await (0, telegram_notify_1.sendWalletConnectApprovalButton)({
+            botToken: telegramOpts.botToken,
+            chatId: telegramOpts.chatId,
+            threadId: telegramOpts.threadId,
+            prompt: displayPrompt,
+            walletLinks: [
+                { label: "🦊 MetaMask", url: `https://metamask.app.link/wc?uri=${encodedUri}` },
+                { label: "🌈 Rainbow", url: `https://rnbwapp.com/wc?uri=${encodedUri}` },
+                { label: "🔵 Trust Wallet", url: `https://link.trustwallet.com/wc?uri=${encodedUri}` },
+            ],
+        });
+        console.log("Approval request sent to Telegram ✓");
+    }
+    const session = await approval();
+    const account = session.namespaces.eip155.accounts[0].split(":")[2];
+    // Ensure wallet is on the correct chain before sending any tx
+    const hexChainId = `0x${chainId.toString(16)}`;
+    const networkName = chainId === 8453 ? "Base" : chainId === 84532 ? "Base Sepolia" : `chain ${chainId}`;
+    // First try adding the chain (MetaMask ignores if already added)
+    if (chainId === 8453) {
+        try {
+            await client.request({
+                topic: session.topic,
+                chainId: `eip155:1`,
+                request: {
+                    method: "wallet_addEthereumChain",
+                    params: [{ chainId: hexChainId, chainName: "Base", nativeCurrency: { name: "ETH", symbol: "ETH", decimals: 18 }, rpcUrls: ["https://mainnet.base.org"], blockExplorerUrls: ["https://basescan.org"] }],
+                },
+            });
+        }
+        catch { /* already added or unsupported */ }
+    }
+    // Then switch — retry up to 3 times
+    let chainSwitched = false;
+    for (let attempt = 0; attempt < 3; attempt++) {
+        try {
+            await client.request({
+                topic: session.topic,
+                chainId: `eip155:${chainId}`,
+                request: {
+                    method: "wallet_switchEthereumChain",
+                    params: [{ chainId: hexChainId }],
+                },
+            });
+            chainSwitched = true;
+            break;
+        }
+        catch {
+            await new Promise(r => setTimeout(r, 1500));
+        }
+    }
+    if (!chainSwitched) {
+        console.log(`\n⚠ Could not auto-switch to ${networkName}. IMPORTANT: Switch to ${networkName} in your wallet NOW before approving the next transaction.`);
+        console.log(`  Otherwise the transaction will go to Ethereum mainnet and fail.`);
+        // Give user 5 seconds to read the warning and switch
+        await new Promise(r => setTimeout(r, 5000));
+    }
+    // Persist session (WC sessions last 7 days by default)
+    const expiry = Math.floor(Date.now() / 1000) + 7 * 24 * 60 * 60;
+    (0, walletconnect_session_1.saveWCSession)(config, { topic: session.topic, expiry, account, chainId });
+    return { client, session, account };
+}
+/**
+ * Step 2 of the two-step flow: send a transaction with an established session.
+ * Returns the transaction hash.
+ */
+async function sendTransactionWithSession(client, session, account, chainId, tx) {
+    return client.request({
+        topic: session.topic,
+        chainId: `eip155:${chainId}`,
+        request: {
+            method: "eth_sendTransaction",
+            params: [{ from: account, to: tx.to, data: tx.data, value: tx.value ?? "0x0" }],
+        },
+    });
+}
+/**
+ * Convenience wrapper: connect + send in one call.
+ * Used by commands that haven't been split into two steps (e.g. policy set-limit).
+ */
+async function requestPhoneWalletSignature(projectId, chainId, buildTx, prompt, telegramOpts, config) {
+    if (!config) {
+        // Legacy path: no session persistence, disconnect after use
+        const client = await makeSignClient(projectId);
+        const { uri, approval } = await client.connect({
+            requiredNamespaces: {
+                eip155: {
+                    methods: ["eth_sendTransaction", "personal_sign", "wallet_switchEthereumChain"],
+                    chains: [`eip155:${chainId}`],
+                    events: ["accountsChanged"],
+                },
+            },
+        });
+        if (!uri)
+            throw new Error("Failed to create WalletConnect session");
+        const encodedUri = encodeURIComponent(uri);
+        const links = walletLinks(encodedUri);
+        console.log(`\n${prompt}`);
+        console.log("─────────────────────────────────────");
+        console.log("Tap the link for your wallet app (opens directly):\n");
+        for (const [name, link] of Object.entries(links))
+            console.log(`${name}:\n${link}\n`);
+        console.log("Or scan QR:");
+        qrcode_terminal_1.default.generate(uri, { small: true });
+        console.log("\nWaiting for approval...");
+        if (telegramOpts) {
+            await (0, telegram_notify_1.sendWalletConnectApprovalButton)({
+                botToken: telegramOpts.botToken,
+                chatId: telegramOpts.chatId,
+                threadId: telegramOpts.threadId,
+                prompt,
+                walletLinks: [
+                    { label: "🦊 MetaMask", url: `https://metamask.app.link/wc?uri=${encodedUri}` },
+                    { label: "🌈 Rainbow", url: `https://rnbwapp.com/wc?uri=${encodedUri}` },
+                    { label: "🔵 Trust Wallet", url: `https://link.trustwallet.com/wc?uri=${encodedUri}` },
+                ],
+            });
+            console.log("Approval request sent to Telegram ✓");
+        }
+        const session = await approval();
+        const account = session.namespaces.eip155.accounts[0].split(":")[2];
+        // Switch chain — retry up to 3 times
+        const hexId = `0x${chainId.toString(16)}`;
+        let switched = false;
+        for (let i = 0; i < 3; i++) {
+            try {
+                await client.request({
+                    topic: session.topic,
+                    chainId: `eip155:${chainId}`,
+                    request: { method: "wallet_switchEthereumChain", params: [{ chainId: hexId }] },
+                });
+                switched = true;
+                break;
+            }
+            catch {
+                await new Promise(r => setTimeout(r, 1000));
+            }
+        }
+        if (!switched) {
+            const net = chainId === 8453 ? "Base" : chainId === 84532 ? "Base Sepolia" : `chain ${chainId}`;
+            console.log(`\n⚠ Could not auto-switch chain. Please switch to ${net} manually in your wallet before approving.`);
+        }
+        const tx = buildTx(account);
+        const txHash = await client.request({
+            topic: session.topic,
+            chainId: `eip155:${chainId}`,
+            request: { method: "eth_sendTransaction", params: [{ from: account, to: tx.to, data: tx.data, value: tx.value ?? "0x0" }] },
+        });
+        await client.disconnect({ topic: session.topic, reason: { code: 0, message: "done" } });
+        return { txHash, account };
+    }
+    const { client, session, account } = await connectPhoneWallet(projectId, chainId, config, { telegramOpts, prompt });
+    const tx = buildTx(account);
+    const txHash = await sendTransactionWithSession(client, session, account, chainId, tx);
+    return { txHash, account };
+}
+//# sourceMappingURL=walletconnect.js.map

package/dist/walletconnect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walletconnect.js","sourceRoot":"","sources":["../src/walletconnect.ts"],"names":[],"mappings":";;;;;AAwDA,gDAoIC;AAMD,gEAeC;AAMD,kEA8EC;AArSD,4DAAwD;AACxD,oEAAiE;AACjE,sEAAqC;AACrC,gDAAwB;AACxB,4CAAoB;AAEpB,mEAAuF;AACvF,uDAAoE;AAEpE,oFAAoF;AACpF,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAe,EAAE,EAAE;IACnD,MAAM,GAAG,GAAG,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAAE,OAAO;IAC3F,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAYH,KAAK,UAAU,cAAc,CAAC,SAAiB;IAC7C,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAC7D,OAAO,wBAAU,CAAC,IAAI,CAAC;QACrB,SAAS;QACT,QAAQ,EAAE;YACR,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,sBAAsB;YACnC,GAAG,EAAE,wBAAwB;YAC7B,KAAK,EAAE,EAAE;SACV;QACD,OAAO,EAAE,IAAI,iCAAe,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB;IACrC,OAAO;QACL,UAAU,EAAS,qBAAqB,UAAU,EAAE;QACpD,OAAO,EAAY,kBAAkB,UAAU,EAAE;QACjD,iBAAiB,EAAE,qBAAqB,UAAU,EAAE;QACpD,cAAc,EAAK,kBAAkB,UAAU,EAAE;QACjD,SAAS,EAAU,oBAAoB,UAAU,EAAE;KACpD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,OAAe,EACf,MAAoB,EACpB,IAA2E;IAE3E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAE/C,2CAA2C;IAC3C,MAAM,MAAM,GAAG,IAAA,qCAAa,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjD,4EAA4E;YAC5E,6EAA6E;YAC7E,kEAAkE;YAClE,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;gBACpC,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;aAC7F,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,IAAA,sCAAc,EAAC,MAAM,CAAC,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;YACrG,CAAC;YAAC,MAAM,CAAC,CAAC,uCAAuC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAC7C,kBAAkB,EAAE;YAClB,MAAM,EAAE;gBACN,OAAO,EAAE,CAAC,qBAAqB,EAAE,eAAe,EAAE,4BAA4B,CAAC;gBAC/E,MAAM,EAAE,CAAC,UAAU,OAAO,EAAE,CAAC;gBAC7B,MAAM,EAAE,CAAC,iBAAiB,CAAC;aAC5B;SACF;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAEpE,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,IAAI,EAAE,MAAM,IAAI,2BAA2B,CAAC;IAElE,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,0FAA0F,CAAC,CAAC;QACxG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,KAAK,aAAa,EAAE,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,MAAM,IAAI,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,yBAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC;IACrE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAA,iDAA+B,EAAC;YACpC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE;gBACX,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,oCAAoC,UAAU,EAAE,EAAE;gBAC/E,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,8BAA8B,UAAU,EAAE,EAAE;gBACxE,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,uCAAuC,UAAU,EAAE,EAAE;aACvF;SACF,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpE,8DAA8D;IAC9D,MAAM,UAAU,GAAG,KAAK,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/C,MAAM,WAAW,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,OAAO,EAAE,CAAC;IAExG,iEAAiE;IACjE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC;gBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE;oBACP,MAAM,EAAE,yBAAyB;oBACjC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,0BAA0B,CAAC,EAAE,iBAAiB,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC;iBACvM;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;IAChD,CAAC;IAED,oCAAoC;IACpC,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC;gBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,UAAU,OAAO,EAAE;gBAC5B,OAAO,EAAE;oBACP,MAAM,EAAE,4BAA4B;oBACpC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;iBAClC;aACF,CAAC,CAAC;YACH,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM;QACR,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,gCAAgC,WAAW,0BAA0B,WAAW,4DAA4D,CAAC,CAAC;QAC1J,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;QACjF,qDAAqD;QACrD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,uDAAuD;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAChE,IAAA,qCAAa,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAE1E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,0BAA0B,CAC9C,MAAmB,EACnB,OAAkB,EAClB,OAAe,EACf,OAAe,EACf,EAAgD;IAEhD,OAAO,MAAM,CAAC,OAAO,CAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,UAAU,OAAO,EAAE;QAC5B,OAAO,EAAE;YACP,MAAM,EAAE,qBAAqB;YAC7B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC;SAChF;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,2BAA2B,CAC/C,SAAiB,EACjB,OAAe,EACf,OAA0E,EAC1E,MAAc,EACd,YAA2B,EAC3B,MAAqB;IAErB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,4DAA4D;QAC5D,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAC7C,kBAAkB,EAAE;gBAClB,MAAM,EAAE;oBACN,OAAO,EAAE,CAAC,qBAAqB,EAAE,eAAe,EAAE,4BAA4B,CAAC;oBAC/E,MAAM,EAAE,CAAC,UAAU,OAAO,EAAE,CAAC;oBAC7B,MAAM,EAAE,CAAC,iBAAiB,CAAC;iBAC5B;aACF;SACF,CAAC,CAAC;QACH,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,MAAM,IAAI,IAAI,CAAC,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,yBAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAA,iDAA+B,EAAC;gBACpC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM;gBACN,WAAW,EAAE;oBACX,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,oCAAoC,UAAU,EAAE,EAAE;oBAC/E,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,8BAA8B,UAAU,EAAE,EAAE;oBACxE,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,uCAAuC,UAAU,EAAE,EAAE;iBACvF;aACF,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,qCAAqC;QACrC,MAAM,KAAK,GAAG,KAAK,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAAC;oBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,OAAO,EAAE,UAAU,OAAO,EAAE;oBAC5B,OAAO,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE;iBAChF,CAAC,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM;YACR,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,OAAO,EAAE,CAAC;YAChG,OAAO,CAAC,GAAG,CAAC,qDAAqD,GAAG,4CAA4C,CAAC,CAAC;QACpH,CAAC;QACD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAS;YAC1C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,UAAU,OAAO,EAAE;YAC5B,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,EAAE;SAC5H,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACxF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IACpH,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACvF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "arc402-cli",
+  "version": "0.2.0",
+  "description": "ARC-402 CLI for discovery, negotiation payloads, hire/remediation/dispute workflows, and network reads",
+  "bin": {
+    "arc402": "./dist/index.js"
+  },
+  "main": "./dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "test": "node --test test/**/*.test.js"
+  },
+  "dependencies": {
+    "@arc402/sdk": "file:../reference/sdk",
+    "@coinbase/wallet-sdk": "^4.3.7",
+    "@types/better-sqlite3": "^7.6.13",
+    "@walletconnect/keyvaluestorage": "^1.1.1",
+    "@walletconnect/sign-client": "^2.17.4",
+    "better-sqlite3": "^12.8.0",
+    "chalk": "^5.3.0",
+    "cli-table3": "^0.6.3",
+    "commander": "^12.1.0",
+    "ethers": "^6.13.4",
+    "jose": "^6.2.1",
+    "ora": "^8.1.1",
+    "prompts": "^2.4.2",
+    "qrcode-terminal": "^0.12.0",
+    "smol-toml": "^1.6.0",
+    "tweetnacl": "^1.0.3",
+    "yaml": "^2.8.2"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "@types/prompts": "^2.4.9",
+    "@types/qrcode-terminal": "^0.12.2",
+    "typescript": "^5.4.5"
+  }
+}

package/scripts/authorize-machine-key.ts

@@ -0,0 +1,43 @@
+import { ethers } from "ethers";
+import { loadConfig } from "../src/config";
+import { connectPhoneWallet, sendTransactionWithSession } from "../src/walletconnect";
+
+const WALLET   = "0xC3207bFe22cba39AeC4e8540c97c29B028103c7F";
+const HOT_KEY  = "0x747024C2e59C523E3B1621A4b3F92366C1E28A30";
+const CHAIN_ID = 8453;
+
+async function main() {
+  const config = loadConfig();
+  const iface  = new ethers.Interface(["function authorizeMachineKey(address key) external"]);
+
+  const tx = {
+    to:    WALLET,
+    data:  iface.encodeFunctionData("authorizeMachineKey", [HOT_KEY]),
+    value: "0x0",
+  };
+
+  const tgOpts = {
+    botToken: config.telegramBotToken!,
+    chatId:   config.telegramChatId!,
+    threadId: config.telegramThreadId,
+  };
+
+  console.log(`Authorizing hot key ${HOT_KEY} as machine key on ${WALLET}\n`);
+
+  const { client, session, account } = await connectPhoneWallet(
+    config.walletConnectProjectId!,
+    CHAIN_ID,
+    config,
+    {
+      telegramOpts: tgOpts,
+      prompt: "⛓ BASE — authorizeMachineKey (one-time). After this the hot key runs autonomously.",
+    }
+  );
+
+  console.log("Connected:", account);
+  const hash = await sendTransactionWithSession(client, session, account, CHAIN_ID, tx);
+  console.log("✅ Done:", hash);
+  process.exit(0);
+}
+
+main().catch(e => { console.error(e.message ?? e); process.exit(1); });

package/scripts/drain-wallet.ts

@@ -0,0 +1,149 @@
+/**
+ * drain-wallet.ts
+ * Drain all ETH from the ARC402Wallet contract to the deployer wallet.
+ * Uses WalletConnect — sends MetaMask approval button to Telegram.
+ *
+ * Flow:
+ *   1. Read wallet balance
+ *   2. Build openContext + attest + executeSpend calldata
+ *   3. Connect via WalletConnect (sends Telegram button)
+ *   4. Send all 3 txs sequentially for owner approval
+ */
+
+import { ethers } from "ethers";
+import { loadConfig } from "../src/config";
+import { connectPhoneWallet, sendTransactionWithSession } from "../src/walletconnect";
+
+const DEPLOYER = "0x59A32A792d0f25B0E0a4A4aFbFDf514b94B102fB";
+const WALLET   = "0xC3207bFe22cba39AeC4e8540c97c29B028103c7F";
+const RPC      = "https://base-mainnet.g.alchemy.com/v2/YIA2uRCsFI-j5pqH-aRzflrACSlV1Qrs";
+const CHAIN_ID = 8453;
+
+const WALLET_ABI = [
+  "function openContext(bytes32 contextId, string calldata taskType) external",
+  "function closeContext() external",
+  "function attest(bytes32 attestationId, string calldata action, string calldata reason, address recipient, uint256 amount, address token, uint256 expiresAt) external returns (bytes32)",
+  "function executeSpend(address payable recipient, uint256 amount, string calldata category, bytes32 attestationId) external",
+  "function contextOpen() external view returns (bool)",
+];
+
+async function main() {
+  const config = loadConfig();
+
+  const balance = await new ethers.JsonRpcProvider(RPC).getBalance(WALLET);
+
+  if (balance === 0n) {
+    console.log("Wallet is already empty.");
+    process.exit(0);
+  }
+
+  // Reserve gas for 3 transactions (~300k gas @ ~0.01 gwei = ~0.003 ETH buffer)
+  const gasReserve = ethers.parseEther("0.0001");
+  const sendAmount = balance - gasReserve;
+
+  if (sendAmount <= 0n) {
+    console.log(`Balance too low to drain safely: ${ethers.formatEther(balance)} ETH`);
+    process.exit(0);
+  }
+
+  console.log(`\nDraining ${ethers.formatEther(sendAmount)} ETH from wallet contract`);
+  console.log(`  From: ${WALLET}`);
+  console.log(`  To:   ${DEPLOYER}\n`);
+
+  const iface = new ethers.Interface(WALLET_ABI);
+
+  const contextId    = ethers.keccak256(ethers.toUtf8Bytes(`drain-${Date.now()}`));
+  const attestId     = ethers.keccak256(ethers.toUtf8Bytes(`attest-${Date.now()}`));
+  const expiresAt    = Math.floor(Date.now() / 1000) + 3600; // 1 hour
+
+  // Close any existing open context first (from prior partial run)
+  const provider = new ethers.JsonRpcProvider(RPC);
+  const contextOpenRaw = await provider.call({ to: WALLET, data: iface.encodeFunctionData("contextOpen") });
+  const contextAlreadyOpen = ethers.AbiCoder.defaultAbiCoder().decode(["bool"], contextOpenRaw)[0];
+
+  const txCloseContext = contextAlreadyOpen ? {
+    to: WALLET,
+    data: iface.encodeFunctionData("closeContext"),
+    value: "0x0",
+  } : null;
+
+  const txOpenContext = {
+    to: WALLET,
+    data: iface.encodeFunctionData("openContext", [contextId, "drain"]),
+    value: "0x0",
+  };
+
+  const txAttest = {
+    to: WALLET,
+    data: iface.encodeFunctionData("attest", [
+      attestId,
+      "drain",
+      "drain to deployer",
+      DEPLOYER,
+      sendAmount,
+      ethers.ZeroAddress,
+      expiresAt,
+    ]),
+    value: "0x0",
+  };
+
+  const txSpend = {
+    to: WALLET,
+    data: iface.encodeFunctionData("executeSpend", [
+      DEPLOYER,
+      sendAmount,
+      "drain",
+      attestId,
+    ]),
+    value: "0x0",
+  };
+
+  const tgOpts = {
+    botToken: config.telegramBotToken!,
+    chatId:   config.telegramChatId!,
+    threadId: config.telegramThreadId,
+  };
+
+  console.log("Connecting WalletConnect — fresh session, Base network enforced...\n");
+
+  const { client, session, account } = await connectPhoneWallet(
+    config.walletConnectProjectId!,
+    CHAIN_ID,
+    config,
+    {
+      telegramOpts: tgOpts,
+      prompt: `⛓ BASE NETWORK ONLY\nApprove drain of ${ethers.formatEther(sendAmount)} ETH → deployer wallet\n\n⚠️ Make sure MetaMask is on BASE before approving`,
+    }
+  );
+
+  console.log(`\nConnected: ${account}`);
+
+  let txCount = 1;
+  const total = (txCloseContext ? 4 : 3);
+
+  if (txCloseContext) {
+    console.log(`Sending tx ${txCount++}/${total}: closeContext (cleaning up prior run)...`);
+    const hClose = await sendTransactionWithSession(client, session, account, CHAIN_ID, txCloseContext);
+    console.log(`  ✓ ${hClose}`);
+  }
+
+  console.log(`Sending tx ${txCount++}/${total}: openContext...`);
+  const h1 = await sendTransactionWithSession(client, session, account, CHAIN_ID, txOpenContext);
+  console.log(`  ✓ ${h1}`);
+
+  console.log(`Sending tx ${txCount++}/${total}: attest...`);
+  const h2 = await sendTransactionWithSession(client, session, account, CHAIN_ID, txAttest);
+  console.log(`  ✓ ${h2}`);
+
+  console.log(`Sending tx ${txCount++}/${total}: executeSpend...`);
+  const h3 = await sendTransactionWithSession(client, session, account, CHAIN_ID, txSpend);
+  console.log(`  ✓ ${h3}`);
+
+  console.log(`\n✅ Done. ${ethers.formatEther(sendAmount)} ETH sent to deployer.`);
+  process.exit(0);
+}
+
+main().catch(e => {
+  console.error(e.message ?? e);
+  process.exit(1);
+});

package/scripts/execute-spend-only.ts

@@ -0,0 +1,81 @@
+/**
+ * execute-spend-only.ts
+ * Send ONLY the executeSpend tx — context and attest already confirmed on-chain.
+ * Uses the attestation ID from the last successful attest tx.
+ */
+
+import { ethers } from "ethers";
+import { loadConfig } from "../src/config";
+import { connectPhoneWallet, sendTransactionWithSession } from "../src/walletconnect";
+
+const DEPLOYER = "0x59A32A792d0f25B0E0a4A4aFbFDf514b94B102fB";
+const WALLET   = "0xC3207bFe22cba39AeC4e8540c97c29B028103c7F";
+const RPC      = "https://base-mainnet.g.alchemy.com/v2/YIA2uRCsFI-j5pqH-aRzflrACSlV1Qrs";
+const CHAIN_ID = 8453;
+
+// Attest tx was: 0x28dbff33aa65b0617c4f25810f06f76bfcf0a430f461b...
+// Recover attestId from the drain script's timestamp-based keccak
+// The attest tx confirmed — we need to recover the attestId used.
+// Re-derive it: the script used `attest-${Date.now()}` at time of that run.
+// Instead, read it from the IntentAttestation contract by checking events.
+
+const INTENT_ATTEST_ABI = [
+  "event AttestationCreated(bytes32 indexed attestationId, address indexed wallet, address recipient, uint256 amount, address token)",
+  "function verify(bytes32 attestationId, address wallet, address recipient, uint256 amount, address token) external view returns (bool)",
+];
+
+const WALLET_ABI = [
+  "function executeSpend(address payable recipient, uint256 amount, string calldata category, bytes32 attestationId) external",
+];
+
+const INTENT_ATTEST_ADDR = "0x7ad8db6C5f394542E8e9658F86C85cC99Cf6D460";
+
+async function main() {
+  const config = loadConfig();
+  const provider = new ethers.JsonRpcProvider(RPC);
+
+  // Find the most recent AttestationCreated event for this wallet → DEPLOYER
+  const attestContract = new ethers.Contract(INTENT_ATTEST_ADDR, INTENT_ATTEST_ABI, provider);
+  const block = await provider.getBlockNumber();
+  // Hardcoded from confirmed attest tx 0x28dbff33...c17
+  const attestId = "0x9d8bdb5f551f63e986e5d0c980fd68f4e445b9f7902f71226ec08ce24bceebb0";
+  const amount   = ethers.parseEther("0.00015");
+
+  console.log(`Found attestation: ${attestId}`);
+  console.log(`Amount: ${ethers.formatEther(amount)} ETH`);
+  console.log(`Sending executeSpend → ${DEPLOYER}\n`);
+
+  const iface = new ethers.Interface(WALLET_ABI);
+  const txSpend = {
+    to: WALLET,
+    data: iface.encodeFunctionData("executeSpend", [DEPLOYER, amount, "drain", attestId]),
+    value: "0x0",
+  };
+
+  const tgOpts = {
+    botToken: config.telegramBotToken!,
+    chatId:   config.telegramChatId!,
+    threadId: config.telegramThreadId,
+  };
+
+  const { client, session, account } = await connectPhoneWallet(
+    config.walletConnectProjectId!,
+    CHAIN_ID,
+    config,
+    {
+      telegramOpts: tgOpts,
+      prompt: `⛓ BASE ONLY — Final tx: executeSpend ${ethers.formatEther(amount)} ETH → deployer\n\n⚠️ Keep MetaMask on Base and approve`,
+    }
+  );
+
+  console.log(`Connected: ${account}`);
+  console.log("Sending executeSpend...");
+  const hash = await sendTransactionWithSession(client, session, account, CHAIN_ID, txSpend);
+  console.log(`\n✅ Done: ${hash}`);
+  process.exit(0);
+}
+
+main().catch(e => {
+  console.error(e.message ?? e);
+  process.exit(1);
+});