Picks the function (WALLET_FUNCTION_NAME, WALLET_CREATE_FUNCTION_NAME or WALLET_DEPLOY_FUNCTION_NAME, a live alias when deployed) and so which ops it serves.
Optionalidentity?: stringRecorded in wallet-api's invoke log, e.g. cfx-temporal-worker; absent, wallet-api records its own name.
Optionallambda?: Pick<LambdaClient, "send">StaticinstanceThe process client for one deployment: its function name and the local
endpoint from the wallet-api namespace at each call, and this process's
name (CFX_APP_NAME, else its Lambda's) as the identity.
Calls off a transaction that was never broadcast: the row and its nonce.
Optionalreason?: unknownWhy, stored on the row as its error.
Creates a pool nonce account derived from PAYER and reference, and adds
it to the pool once finalized. The same reference is the same account.
wallet-api's idempotency key: it derives the account from it.
Stores one Solana transaction and signs it when every required signer is
CFX's (with send, broadcast and followed too). With any external signer it
signs nothing: AWAITING_SIGNATURE, the unsigned wire and missingSigners.
Idempotent by (reference, message).
A BIP39 wallet with its CFX share and primary address, and with
legacyMintfx the ledger account's mintfx PDA as a LEGACY_MINTFX address.
Optionaldelegation?: WalletDelegationWhat the wallet is for, recorded as wallet.derivation_id.
OptionallegacyMintfx?: { walletId: string }The wallet's live BIP39 secret's account-0 address on chain (EVM, TRON or
a Bitcoin script type), derived through its CFX share and recorded;
created: false when the wallet already held it.
A deploy, timelock or NTT op: the row it sent, or alreadyDeployed when the chain
already holds the result (a deployed address, a granted role, a paused manager) and
nothing was sent.
The gas station's balance and the paymaster's deposit on chainId. Reads only.
One EVM intent, built, signed and stored by wallet-api as a UserOperation the
chain's gas station submits (with send, broadcast and followed too).
Idempotent on reference.
Expires one AWAITING_SIGNATURE row at its deadline: a lapsed lifetime (or, with
nonceHoldLapsed, a pool-nonce hold that ended) cancels the row.
OptionalnonceHoldLapsed?: booleanThe pool's verdict that the row's nonce hold ended (nonceSyncAction.ts).
A customer's own key as an ALLOWED wallet, and with legacyMintfx the
ledger account's PDA beside it. secret goes only into the invoke payload;
nothing this throws or returns carries it.
Ends a nonced transaction and hands its pool nonce back. wallet-api reads the chain itself, advancing a nonce that has not moved.
Resumes a stored EVM row: the same bytes, followed to commitment.
An AWAITING_SIGNATURE row's external signatures in signedTransaction:
verified, then CFX signs last, stores, broadcasts and follows to commitment.
A signed row not yet landed resumes; a settled one is answered as it stands.
OptionalsignedTransaction?: stringBase64 wire; required on an AWAITING_SIGNATURE row, else the stored bytes or absent.
An EIP-191, EIP-712 or EIP-7702 signature by the role signer.
Signs one base64 message as the role signer.
Invokes
wallet-api(packages/wallet-api),{ op, identity, args }in and{ ok, value | error }out.functionNamepicks the deployment: the create-and-importcfx-wallet-create(grantWalletCreate), the deploy, timelock and NTTcfx-wallet-deploy(grantWalletDeploy), or the signingcfx-wallet-api(grantWalletApi, temporal-worker and background-worker; WALLETS.md §5.7).