feat(express): type coinSpecific.ofc on WalletResponse codec

Narrow the WalletResponse `coinSpecific` codec from a bare `t.UnknownRecord`
to an intersection that adds typed visibility for `coinSpecific.ofc.userKeySigningRequired`
while keeping the unknown-record permissiveness intact for unrelated subdocuments
(eth, terc20, etc.). Add codec-decode tests covering wallets with non-ofc
subdocuments, the typed ofc shape, an empty coinSpecific, and rejection of
wrong-typed values.

Ticket: WCN-471

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: zahin-mohammad

modules/express/src/typedRoutes/schemas/wallet.ts

@@ -189,7 +189,7 @@ export const WalletResponse = t.partial({
   /** Multisig type version (e.g., 'MPCv2') */
   multisigTypeVersion: t.string,
   /** Coin-specific wallet data */
-  coinSpecific: t.UnknownRecord,
+  coinSpecific: t.intersection([t.partial({ ofc: t.partial({ userKeySigningRequired: t.boolean }) }), t.UnknownRecord]),
   /** Admin settings including policy */
   admin: WalletAdmin,
   /** Users with access to this wallet */

modules/express/test/unit/typedRoutes/decode.ts

@@ -20,6 +20,7 @@ import {
   ExpressWalletUpdateParams,
 } from '../../../src/typedRoutes/api/v2/expressWalletUpdate';
 import { SignerMacaroonBody, SignerMacaroonParams } from '../../../src/typedRoutes/api/v2/signerMacaroon';
+import { WalletResponse } from '../../../src/typedRoutes/schemas/wallet';
 
 export function assertDecode<T>(codec: t.Type<T, unknown>, input: unknown): T {
   const result = codec.decode(input);
@@ -306,4 +307,32 @@ describe('io-ts decode tests', function () {
   it('express.lightning.signerMacaroon params invalid', function () {
     assert.throws(() => assertDecode(t.type(SignerMacaroonParams), { coin: 'lnbtc' }));
   });
+  describe('WalletResponse coinSpecific', function () {
+    it('decodes wallets with only non-ofc coinSpecific subdocuments', function () {
+      // coinSpecific carrying an unrelated subdocument (e.g. eth) and no ofc must still decode
+      const decoded = assertDecode(WalletResponse, {
+        id: 'wallet123',
+        coinSpecific: { eth: { baseAddress: '0xabc' } },
+      });
+      assert.deepStrictEqual(decoded.coinSpecific, { eth: { baseAddress: '0xabc' } });
+    });
+    it('decodes wallets with coinSpecific.ofc.userKeySigningRequired', function () {
+      const decoded = assertDecode(WalletResponse, {
+        id: 'wallet123',
+        coinSpecific: { ofc: { userKeySigningRequired: true } },
+      });
+      assert.strictEqual(decoded.coinSpecific?.ofc?.userKeySigningRequired, true);
+    });
+    it('decodes wallets with empty coinSpecific', function () {
+      assertDecode(WalletResponse, { id: 'wallet123', coinSpecific: {} });
+    });
+    it('rejects coinSpecific.ofc.userKeySigningRequired of wrong type', function () {
+      assert.throws(() =>
+        assertDecode(WalletResponse, {
+          id: 'wallet123',
+          coinSpecific: { ofc: { userKeySigningRequired: 'yes' } },
+        })
+      );
+    });
+  });
 });