@agenticprimitives/agent-account 0.1.0-alpha.2

package/dist/client.d.ts

@@ -0,0 +1,224 @@
+import { type Address, type Hex, type TransactionReceipt } from 'viem';
+import type { Signer } from '@agenticprimitives/connect-auth';
+import { type PackedUserOperation } from './bundler-client';
+export interface AgentAccountClientOpts {
+    rpcUrl: string;
+    chainId: number;
+    entryPoint: Address;
+    factory: Address;
+}
+/**
+ * Wave R0 — unified AgentAccount specification. Mirrors the factory's
+ * `AgentAccountInitParams` struct + the salt + the optional T4
+ * safetyDelay override.
+ *
+ *   - `mode = 0` → simple (no CustodyPolicy installed; trustees ignored)
+ *   - `mode = 1` → hybrid    (CustodyPolicy installed; ≥1 trustee required)
+ *   - `mode = 2` → threshold (CustodyPolicy installed; ≥2 trustees required)
+ *   - `mode = 3` → org       (CustodyPolicy installed; ≥3 trustees required)
+ *
+ * At least one signer (non-empty `custodians` OR non-zero `passkey`) is
+ * required. Defaults: mode=0, custodians=[], trustees=[],
+ * timelockOverrides=[] (factory uses spec defaults T4=1h / T5=24h / T6=48h).
+ */
+export interface AgentAccountSpec {
+    mode?: number;
+    custodians?: readonly Address[];
+    trustees?: readonly Address[];
+    passkey?: {
+        credentialIdDigest: Hex;
+        x: bigint;
+        y: bigint;
+    };
+    salt: bigint;
+    /**
+     * Per-tier timelock override array (index 0 unused; tier t uses index
+     * t for t in 1..6). Where the override is 0 the factory falls back to
+     * the spec default per tier (T4=1h / T5=24h / T6=48h). Omit entirely
+     * for production deploys; demos can shorten any tier independently.
+     */
+    timelockOverrides?: readonly number[];
+}
+export declare class AgentAccountClient {
+    private readonly publicClient;
+    private readonly opts;
+    constructor(opts: AgentAccountClientOpts);
+    /**
+     * Deterministic CREATE2 address for any AgentAccount (any mode). Delegates
+     * to the factory's view so TS + Solidity stay in lock-step.
+     */
+    getAddressForAgentAccount(spec: AgentAccountSpec): Promise<Address>;
+    /**
+     * Deploy an AgentAccount via the factory using a raw bootstrap private key.
+     * Idempotent — skips the tx if the predicted address already has code.
+     * Prefer `createAgentAccountFromAccount` with a KMS-backed viem account
+     * in production (no private-key material in process memory).
+     */
+    createAgentAccountFromPrivateKey(spec: AgentAccountSpec, bootstrapPrivateKey: Hex): Promise<Address>;
+    /**
+     * Deploy an AgentAccount via the factory using any viem-compatible account.
+     * The signer pays gas; the deployed account is custodian-of-spec, not
+     * custodian-of-relayer. Idempotent.
+     */
+    createAgentAccountFromAccount(spec: AgentAccountSpec, account: any): Promise<Address>;
+    /**
+     * On-chain `isCustodian(addr)` query against a deployed AgentAccount.
+     * Returns the unified view (external custodians + passkey PIAs). Returns
+     * false if the account isn't deployed yet.
+     */
+    isCustodian(account: Address, address: Address): Promise<boolean>;
+    /**
+     * On-chain `hasPasskey(credentialIdDigest)` — is this passkey CURRENTLY a
+     * registered credential of the account? (Passkeys are tracked by digest, not as
+     * an EOA custodian.) Returns false if the account isn't deployed yet.
+     */
+    hasPasskey(account: Address, credentialIdDigest: Hex): Promise<boolean>;
+    /** On-chain count of EOA custodians (0 if not deployed). Lets a caller tell whether
+     *  an account has wallet/EOA custody. */
+    custodianCount(account: Address): Promise<bigint>;
+    /** On-chain count of registered passkeys (0 if not deployed). Lets a caller tell
+     *  whether an account has passkey custody. */
+    passkeyCount(account: Address): Promise<bigint>;
+    isDeployed(account: Address): Promise<boolean>;
+    /**
+     * Produce an ERC-1271-compatible signature: signer.signMessage of `hash`
+     * (as raw bytes). The deployed account's isValidSignature then validates
+     * by re-deriving EIP-191 digest and checking ownership.
+     */
+    signWithErc1271(account: Address, hash: Hex, signer: Signer): Promise<Hex>;
+    /**
+     * Verify a signature against a deployed account via on-chain ERC-1271 call.
+     * Returns true iff `isValidSignature` returns the magic value 0x1626ba7e.
+     */
+    isValidSignature(account: Address, hash: Hex, signature: Hex): Promise<boolean>;
+    /**
+     * Build an unsigned UserOp targeting an ALREADY-DEPLOYED AgentAccount.
+     * Counterpart to `buildDeployUserOpForAgentAccount` (which deploys the
+     * account); this is for calls AFTER deploy: addCustodian, addPasskey,
+     * validator.proposeAdmin, arbitrary execute(target, value, data), etc.
+     *
+     * @param opts.sender    Existing AgentAccount address.
+     * @param opts.callData  Calldata for the account's execute path. Typically
+     *                       built via viem's encodeFunctionData against
+     *                       agentAccountAbi.execute or the account's own
+     *                       per-action selectors.
+     * @param opts.paymaster Paymaster address (sponsors gas).
+     * @param opts.verifyingPaymaster When set, appends the EIP-191 paymaster
+     *                       signature to paymasterAndData (audit C2 mode).
+     *
+     * Returns { userOp, userOpHash, sender } — same shape as buildDeployUserOp.
+     * The caller signs userOpHash with their owner authority (EOA, passkey,
+     * or ERC-1271 contract sig) + drops the sig into userOp.signature, then
+     * passes the result to submitCallUserOp.
+     */
+    buildCallUserOp(opts: {
+        sender: Address;
+        callData: Hex;
+        paymaster: Address;
+        verificationGasLimit?: bigint;
+        callGasLimit?: bigint;
+        preVerificationGas?: bigint;
+        paymasterVerificationGasLimit?: bigint;
+        verifyingPaymaster?: {
+            signFn: (hash: Hex) => Promise<Hex>;
+            validUntilSeconds?: number;
+            validAfterSeconds?: number;
+        };
+    }): Promise<{
+        userOp: PackedUserOperation;
+        userOpHash: Hex;
+        sender: Address;
+    }>;
+    /**
+     * Backwards-compatible alias preserving the spec 201 `buildUserOp` shape.
+     * Wraps `buildCallUserOp` for single-call userOps. Multi-call (`account.executeBatch`)
+     * is the consumer's responsibility — encode the batch as callData and pass it in.
+     */
+    buildUserOp(params: {
+        account: Address;
+        calls: Array<{
+            to: Address;
+            data: Hex;
+            value: bigint;
+        }>;
+        paymaster: Address;
+        verifyingPaymaster?: {
+            signFn: (hash: Hex) => Promise<Hex>;
+            validUntilSeconds?: number;
+            validAfterSeconds?: number;
+        };
+    }): Promise<{
+        userOp: PackedUserOperation;
+        userOpHash: Hex;
+        sender: Address;
+    }>;
+    /**
+     * Compute the canonical hash a verifying-paymaster signer must sign
+     * (audit C2). Matches `SmartAgentPaymaster.getHash(...)` on-chain.
+     * Returns the raw keccak256 — callers wrap with EIP-191 ("\\x19Ethereum
+     * Signed Message:\\n32" prefix) before signing, which is what
+     * `signMessage({ raw })` does by convention on the viem side.
+     */
+    static computeVerifyingPaymasterHash(args: {
+        userOp: Pick<PackedUserOperation, 'sender' | 'nonce' | 'initCode' | 'callData' | 'accountGasLimits' | 'preVerificationGas' | 'gasFees'>;
+        paymaster: Address;
+        chainId: number;
+        validUntil: number;
+        validAfter: number;
+    }): Hex;
+    /**
+     * Build an UNSIGNED ERC-4337 v0.9 UserOperation that deploys an
+     * AgentAccount via `factory.createAgentAccount(...)`. Works for any
+     * mode and signer shape — the signature on `userOpHash` uses whatever
+     * owner authority the resulting account will accept.
+     *
+     * Paymaster sponsorship: `paymasterAndData` is set to the configured
+     * paymaster. Pass `verifyingPaymaster.signFn` to opt into audit C2's
+     * verifying-paymaster signed-attestation mode.
+     *
+     * Gas defaults are sized for the worst-case validateUserOp path: a
+     * WebAuthn passkey-init account verified by Daimo's pure-Solidity P-256
+     * fallback (~350-400k) plus ERC1967Proxy deploy + storage writes
+     * (~300k) + (for mode>0) the CustodyPolicy install (~250k). Override via
+     * `verificationGasLimit` for cheaper paths.
+     */
+    buildDeployUserOpForAgentAccount(opts: {
+        spec: AgentAccountSpec;
+        paymaster: Address;
+        /** Optional calldata the freshly-deployed account executes in the SAME userOp (deploy +
+         *  execute atomically). Defaults to '0x' (deploy only). When set, `callGasLimit` covers it. */
+        callData?: Hex;
+        verificationGasLimit?: bigint;
+        callGasLimit?: bigint;
+        preVerificationGas?: bigint;
+        paymasterVerificationGasLimit?: bigint;
+        verifyingPaymaster?: {
+            signFn: (hash: Hex) => Promise<Hex>;
+            validUntilSeconds?: number;
+            validAfterSeconds?: number;
+        };
+    }): Promise<{
+        userOp: PackedUserOperation;
+        userOpHash: Hex;
+        sender: Address;
+    }>;
+    /**
+     * Submit a (now-signed) deploy UserOp via EntryPoint.handleOps. The
+     * `bundlerAccount` pays gas (will be reimbursed by the paymaster) and
+     * broadcasts the tx. In production this is `createKmsViemAccount(kms)`
+     * — no private key held locally.
+     */
+    submitDeployUserOp(userOp: PackedUserOperation, bundlerAccount: any): Promise<{
+        deployedAddress: Address;
+        receipt: TransactionReceipt;
+    }>;
+    /**
+     * Submit a (signed) post-deploy UserOp via EntryPoint.handleOps. Counterpart
+     * to `submitDeployUserOp`. The relayer (bundlerAccount) pays gas; the
+     * paymaster reimburses the bundler from its EntryPoint deposit.
+     */
+    submitCallUserOp(userOp: PackedUserOperation, bundlerAccount: any): Promise<{
+        receipt: TransactionReceipt;
+    }>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAQA,OAAO,EAQL,KAAK,OAAO,EACZ,KAAK,GAAG,EAER,KAAK,kBAAkB,EACxB,MAAM,MAAM,CAAC;AAEd,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAE9D,OAAO,EAAgC,KAAK,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AA8D1F,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAChC,QAAQ,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE;QACR,kBAAkB,EAAE,GAAG,CAAC;QACxB,CAAC,EAAE,MAAM,CAAC;QACV,CAAC,EAAE,MAAM,CAAC;KACX,CAAC;IACF,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AA+BD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyB;gBAElC,IAAI,EAAE,sBAAsB;IAKxC;;;OAGG;IACG,yBAAyB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAYzE;;;;;OAKG;IACG,gCAAgC,CACpC,IAAI,EAAE,gBAAgB,EACtB,mBAAmB,EAAE,GAAG,GACvB,OAAO,CAAC,OAAO,CAAC;IAKnB;;;;OAIG;IACG,6BAA6B,CACjC,IAAI,EAAE,gBAAgB,EAEtB,OAAO,EAAE,GAAG,GACX,OAAO,CAAC,OAAO,CAAC;IAqBnB;;;;OAIG;IACG,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAcvE;;;;OAIG;IACG,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;IAU7E;6CACyC;IACnC,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAUvD;kDAC8C;IACxC,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAU/C,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAKpD;;;;OAIG;IACG,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAKhF;;;OAGG;IACG,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;IAerF;;;;;;;;;;;;;;;;;;;OAmBG;IACG,eAAe,CAAC,IAAI,EAAE;QAC1B,MAAM,EAAE,OAAO,CAAC;QAChB,QAAQ,EAAE,GAAG,CAAC;QACd,SAAS,EAAE,OAAO,CAAC;QACnB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,6BAA6B,CAAC,EAAE,MAAM,CAAC;QACvC,kBAAkB,CAAC,EAAE;YACnB,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;YACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,mBAAmB,CAAC;QAAC,UAAU,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAoE9E;;;;OAIG;IACG,WAAW,CAAC,MAAM,EAAE;QACxB,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,OAAO,CAAC;YAAC,IAAI,EAAE,GAAG,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACxD,SAAS,EAAE,OAAO,CAAC;QACnB,kBAAkB,CAAC,EAAE;YACnB,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;YACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,mBAAmB,CAAC;QAAC,UAAU,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IA+B9E;;;;;;OAMG;IACH,MAAM,CAAC,6BAA6B,CAAC,IAAI,EAAE;QACzC,MAAM,EAAE,IAAI,CACV,mBAAmB,EACnB,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,kBAAkB,GAAG,oBAAoB,GAAG,SAAS,CACrG,CAAC;QACF,SAAS,EAAE,OAAO,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,GAAG;IAiCP;;;;;;;;;;;;;;;OAeG;IACG,gCAAgC,CAAC,IAAI,EAAE;QAC3C,IAAI,EAAE,gBAAgB,CAAC;QACvB,SAAS,EAAE,OAAO,CAAC;QACnB;uGAC+F;QAC/F,QAAQ,CAAC,EAAE,GAAG,CAAC;QACf,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,6BAA6B,CAAC,EAAE,MAAM,CAAC;QACvC,kBAAkB,CAAC,EAAE;YACnB,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;YACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,mBAAmB,CAAC;QAAC,UAAU,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IA4D9E;;;;;OAKG;IACG,kBAAkB,CACtB,MAAM,EAAE,mBAAmB,EAE3B,cAAc,EAAE,GAAG,GAClB,OAAO,CAAC;QAAE,eAAe,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,kBAAkB,CAAA;KAAE,CAAC;IASrE;;;;OAIG;IACG,gBAAgB,CACpB,MAAM,EAAE,mBAAmB,EAE3B,cAAc,EAAE,GAAG,GAClB,OAAO,CAAC;QAAE,OAAO,EAAE,kBAAkB,CAAA;KAAE,CAAC;CAS5C"}