Feat/mu-cu-su ed25519 solana support

[vilenarios]

Enable Solana Wallet Support Across AO Stack (MU, SU, CU)

Summary

Adds first-class support for Solana wallets to send and process AO messages using their native Ed25519 signatures
across the entire AO stack (Messenger Unit, Scheduler Unit, and Compute Unit), while maintaining full backward
compatibility with Ethereum and Arweave wallets.

Motivation

Currently, the AO stack only properly handles Arweave RSA and Ethereum wallets. While Solana users can sign AO
messages via ANS-104 DataItems (arbundles already supports their signature types), the units don't properly derive
or verify Solana addresses, leading to:

• MU: Incorrect rate limiting (uses wrong addresses)
• SU: Signature verification failures (doesn't recognize Ed25519)
• CU: Incorrect process owner attribution (can't derive addresses)

This PR enables:

✅ Solana wallets to be properly recognized and handled across all AO units
✅ Correct address derivation for Solana (base58), Ethereum (EIP-55), and Arweave
✅ Signature verification for Ed25519 (Solana) alongside ECDSA (Ethereum) and RSA (Arweave)
✅ Both compressed and uncompressed Ethereum keys to work correctly

Changes

MU (Messenger Unit)

New Files

src/domain/lib/derive-address.js - Utility module with 4 exports:

• deriveEthereumAddress(): Derives EIP-55 checksummed addresses from compressed (33-byte) or uncompressed
  (65-byte) secp256k1 public keys
• deriveSolanaAddress(): Derives base58 addresses from 32-byte Ed25519 public keys
• detectSignatureType(): Returns wallet type ('ethereum' | 'solana' | 'arweave' | 'unknown') from signature
  length
• detectKeyType(): Returns wallet type from public key byte length

src/domain/lib/derive-address.test.js - Comprehensive unit tests (31 new tests):

• Ethereum: compressed/uncompressed keys, EIP-55 checksum validation, edge cases
• Solana: Ed25519 keys, base58 encoding validation, edge cases
• Detection: signature/key type detection for all wallet types

Modified Files

src/domain/api/sendDataItem.js - Uses signature-based detection:

• Removed inline address derivation functions (-46 lines)
• Imports and uses detectSignatureType() to identify wallet type
• Derives appropriate address based on detected signature type
• Falls back to existing toAddress() for Arweave/unknown wallets

src/domain/clients/taskQueue.js - Uses key-based detection:

• Removed inline address derivation functions (-41 lines)
• Imports and uses detectKeyType() to identify wallet type
• Derives appropriate address based on detected key type
• Falls back to existing toAddress() for Arweave/unknown wallets

src/domain/api/sendDataItem.test.js - Added missing rate limit mocks to fix tests

SU (Scheduler Unit)

Modified Files

src/domain/core/bytes.rs - Core signature verification and address derivation:

• Added verify_ed25519() function for Ed25519/Solana signature verification using ed25519-dalek
• Added ed25519_address() function for deriving base58-encoded Solana addresses
• Updated get_owner() to handle Ed25519 (Type 2) and Solana (Type 4) signature types
• Both signature types use identical 32-byte keys and base58 address derivation

Cargo.toml - Added cryptographic dependencies:

• ed25519-dalek = { version = "2.1", features = ["digest"] } - Ed25519 signature verification
• bs58 = "0.5.0" - Base58 encoding for Solana addresses
• sha3 = "0.10.8" - SHA3 hashing (already present, used for Ethereum)

CU (Compute Unit)

Modified Files

servers/cu/src/domain/utils.js - Address derivation logic:

• Added bs58 import for base58 encoding
• Updated SIG_CONFIG with ED25519 and SOLANA signature type entries
• Implemented keyToSolanaAddress() function for deriving base58-encoded addresses from 32-byte Ed25519 public
  keys
• Updated addressFrom() routing logic to handle 32-byte keys (both Ed25519 Type 2 and Solana Type 4)
• Maintains graceful fallback for unknown signature types

servers/cu/src/domain/utils.test.js - Comprehensive test coverage (4 new tests):

• Solana address derivation with known value validation (system program address)
• Address consistency and caching validation
• Differentiation between Ethereum and Solana keys
• Graceful fallback for unknown key lengths

servers/cu/package.json - Added dependency:

• bs58": "^6.0.0" - Base58 encoding for Solana addresses

Technical Details

Address Derivation

Ethereum (EIP-55 checksummed):
0xf14376531c7e37908DB49415D2294cc9Cc51e21B

• Handles both compressed (33-byte) and uncompressed (65-byte) secp256k1 keys
• Both formats derive to the same address
• Uses Keccak256 hashing and EIP-55 mixed-case checksum

Solana (base58):
4qGyVQ7ZrC2jjU1pHsLZT4swLV5GmYUPaXRX562eCbvD

• Direct base58 encoding of 32-byte Ed25519 public key
• Matches Solana blockchain standard
• No hashing (unlike Ethereum)

Arweave (existing):
vLRHFqCw1uHu75xqB4fCDW-QxpkpJxBtFD9g4QYUbfw

• No changes to existing Arweave address derivation

Detection Logic

By Signature Length (MU):

• 87 chars base64url = Ethereum (65-byte ECDSA signature)
• 86 chars base64url = Solana (64-byte Ed25519 signature)
• 683 chars base64url = Arweave (512-byte RSA signature)

By Public Key Length (MU/CU):

• 33 or 65 bytes = Ethereum (compressed/uncompressed secp256k1)
• 32 bytes = Solana (Ed25519)
• 512 bytes = Arweave (RSA modulus)

By Signature Type (SU/CU):

• Type 1 = Arweave (RSA-PSS)
• Type 2 = Ed25519 (generic)
• Type 3 = Ethereum (secp256k1)
• Type 4 = Solana (Ed25519, identical to Type 2)

Signature Verification (SU)

Ed25519/Solana:

• Uses ed25519-dalek for signature verification
• Verifies 64-byte signatures against 32-byte public keys
• Strict validation (rejects invalid signatures)

Ethereum:

• Existing ECDSA verification unchanged
• Handles both compressed and uncompressed keys

Arweave:

• Existing RSA-PSS verification unchanged

Error Handling

MU:

• Invalid Ethereum/Solana keys throw errors and reject the DataItem (strict validation)
• Validation happens inside derivation functions
• Arweave and unknown wallet types gracefully fall back to existing toAddress()

SU:

• Invalid Ed25519 signatures return verification failure
• Malformed public keys are rejected
• Unknown signature types default to existing Arweave handling

CU:

• Invalid key lengths fall back to returning the Arweave transaction ID
• No signature verification (CU only derives addresses)
• Graceful degradation for unknown types

Testing

MU Tests

Unit Tests: 31 new tests (all passing)

• Generated cryptographic test vectors using @noble/secp256k1 and @noble/ed25519
• Tests verify EIP-55 checksum, base58 encoding, compressed/uncompressed equivalence
• Edge case coverage: invalid lengths, bad prefixes, boundary conditions

Total Test Results:

• 106 tests total (added 31 new)
• 102 passing (all new tests pass)
• 4 failing (pre-existing cron module failures, unrelated to this PR)

SU Tests

• Tested with ANS-104 DataItems signed by Solana wallets
• Verified signature verification for Ed25519 Type 2 and Solana Type 4
• Confirmed address derivation matches Solana blockchain addresses

CU Tests

Unit Tests: 4 new tests (all passing)

• Solana address derivation with known value validation (system program address
  11111111111111111111111111111111)
• Address consistency and caching validation
• Differentiation between Ethereum (65-byte) and Solana (32-byte) keys
• Graceful fallback for unknown key lengths

Total Test Results:

• All new Solana tests pass
• Existing tests continue to pass
• 8 pre-existing failures in evaluate.test.js (unrelated: Promise.withResolvers compatibility issue)

Dependencies

MU

Added cryptographic libraries (already used by arbundles):

• @noble/secp256k1@^2.1.0 - Ethereum key decompression
• @noble/ed25519@^2.1.0 - Solana test vector generation
• bs58@^5.0.0 - Solana base58 encoding

SU

Added cryptographic libraries:

• ed25519-dalek = { version = "2.1", features = ["digest"] } - Ed25519 signature verification
• bs58 = "0.5.0" - Base58 encoding for Solana addresses
• sha3 = "0.10.8" - SHA3 hashing (already present)

CU

Added encoding library:

• bs58@^6.0.0 - Base58 encoding for Solana addresses

Backward Compatibility

✅ Fully backward compatible

• Arweave and Ethereum wallets continue to work exactly as before
• No breaking changes to existing behavior across all units
• No new tags or protocol changes required
• Detection via ANS-104 signature types (already in DataItems)
• CU gracefully falls back for unknown signature types

Code Quality

MU:

• -318 net lines (removed 754, added 436)
• Reduced code duplication by extracting shared logic
• Single source of truth for address derivation

SU:

• Added ~50 lines of well-documented verification logic
• Follows existing Rust patterns in bytes.rs

CU:

• +180 insertions, -4 deletions
• Single centralized address derivation function (addressFrom())
• All code paths flow through updated logic

All Units:

• Follows existing code patterns and conventions
• StandardJS/Rust fmt compliant
• Comprehensive JSDoc/inline documentation

Future Work

This PR provides complete Solana wallet support across the AO stack. Follow-up work may include:

• Integration tests with real arbundles DataItems across all units
• Performance testing under high rate limit load
• Additional wallet types (if needed)
• Cross-unit end-to-end testing

Checklist

• ✅ All new tests pass (MU: verified, SU: verified, CU: verified)
• ✅ Code follows StandardJS/Rust style guidelines
• ✅ Added comprehensive unit tests across all units
• ✅ Backward compatible with existing functionality
• ✅ Documentation added (JSDoc/inline comments)
• ✅ No breaking changes

Verification

Addresses can be looked up in block explorers:

• Ethereum: https://etherscan.io/address/0x...
• Solana: https://explorer.solana.com/address/...
• Arweave: https://viewblock.io/arweave/address/...