fix: read challenge routes from ChainState for WASM challenges

Author: echobt

crates/rpc-server/src/server.rs

@@ -287,13 +287,15 @@ async fn challenge_route_handler(
     trace!("Challenge route: {} {} {}", challenge_id, method, path);
 
     // Check if challenge has registered routes
-    // Clone the routes while holding the lock, then drop it
+    // First try handler.challenge_routes, then fallback to chain_state.challenge_routes
     let challenge_routes = {
         let routes = handler.challenge_routes.read();
         let result = routes.get(&challenge_id).cloned();
 
-        if result.is_none() {
-            // Try to find by name
+        if result.is_some() {
+            result
+        } else {
+            // Try to find by name in legacy challenges
             let chain = handler.chain_state.read();
             let actual_id = chain
                 .challenges
@@ -302,9 +304,43 @@ async fn challenge_route_handler(
                 .map(|c| c.id.to_string());
             drop(chain);
 
-            actual_id.and_then(|id| routes.get(&id).cloned())
-        } else {
-            result
+            if let Some(id) = actual_id {
+                routes.get(&id).cloned()
+            } else {
+                // Fallback: Try chain_state.challenge_routes (for WASM challenges)
+                drop(routes);
+                let chain = handler.chain_state.read();
+                let challenge_uuid = uuid::Uuid::parse_str(&challenge_id).ok().map(ChallengeId);
+
+                challenge_uuid
+                    .as_ref()
+                    .and_then(|id| chain.challenge_routes.get(id))
+                    .map(|chain_routes| {
+                        use platform_challenge_sdk::HttpMethod;
+                        chain_routes
+                            .iter()
+                            .map(|r| {
+                                let method = match r.method.to_uppercase().as_str() {
+                                    "GET" => HttpMethod::Get,
+                                    "POST" => HttpMethod::Post,
+                                    "PUT" => HttpMethod::Put,
+                                    "DELETE" => HttpMethod::Delete,
+                                    "PATCH" => HttpMethod::Patch,
+                                    _ => HttpMethod::Get,
+                                };
+                                let mut route = platform_challenge_sdk::ChallengeRoute::new(
+                                    method,
+                                    r.path.clone(),
+                                    r.description.clone(),
+                                );
+                                if r.requires_auth {
+                                    route = route.with_auth();
+                                }
+                                route
+                            })
+                            .collect::<Vec<_>>()
+                    })
+            }
         }
     };