Context
Related:
NCDI (external desktop app) holds the buyer private key, generates an operatorSignature, and redirects into the AI Credits / ByGD widget with:
?buyerAddress=0x…&operatorSignature=0x…
The widget must continue purchase without ever receiving the buyer private key.
Scope
- Read
buyerAddress + operatorSignature on load
- Persist a complete pair in memory +
localStorage so refresh still works after URL params are stripped
- Validate both params; incomplete/invalid → error notice + manual buyer fallback (generate / import / watch)
- Use
buyerAddress as active buyer and operatorSignature as operator-approval token for consent submission / retries
- Never accept or store a buyer private key from the deep link
- Auto-start the ByGD buy flow when both params are present and the payer wallet is connected
Context
Related:
NCDI (external desktop app) holds the buyer private key, generates an
operatorSignature, and redirects into the AI Credits / ByGD widget with:The widget must continue purchase without ever receiving the buyer private key.
Scope
buyerAddress+operatorSignatureon loadlocalStorageso refresh still works after URL params are strippedbuyerAddressas active buyer andoperatorSignatureas operator-approval token for consent submission / retries