@axonfi/sdk 0.6.0 → 0.8.0

package/README.md

@@ -318,6 +318,31 @@ await axon.getVaultInfo(); // owner, operator, version
 await axon.canPayTo('0xRecipient'); // destination allowed?
 ```
 
+### ERC-1271 Bot Signatures (External Protocol Signing)
+
+By default, only the vault owner's signatures are accepted by external protocols that check ERC-1271 (e.g., Permit2, Cowswap, Seaport). Bot signatures are rejected.
+
+If your bot needs to sign messages that external protocols validate against the vault (e.g., signing a Cowswap order, a Permit2 approval, or a Seaport listing), the vault owner must explicitly enable bot signing:
+
+```typescript
+// Check if ERC-1271 bot signing is enabled (direct chain read)
+import { isErc1271BotsEnabled, createAxonPublicClient } from '@axonfi/sdk';
+
+const publicClient = createAxonPublicClient(chainId, rpcUrl);
+const enabled = await isErc1271BotsEnabled(publicClient, vaultAddress);
+
+if (!enabled) {
+  console.log('ERC-1271 bot signatures are disabled on this vault.');
+  console.log('The vault owner must enable it via the dashboard or by calling setErc1271Bots(true).');
+}
+```
+
+**When to enable:** Only if your bots interact with protocols that verify signatures via ERC-1271 — Cowswap (off-chain order signing), Permit2 (gasless token approvals), Seaport (NFT marketplace listings).
+
+**When to keep disabled (default):** If your bots only make payments, execute DeFi calls, or rebalance tokens through Axon's standard `pay()` / `execute()` / `swap()` endpoints.
+
+**Security note:** If a bot key is compromised while ERC-1271 is enabled, the attacker could sign Permit2 approvals or marketplace listings that drain vault funds. The owner can disable it instantly via the dashboard or `setErc1271Bots(false)`.
+
 ### Utilities
 
 Helper functions for amount conversion, token resolution, and reference encoding.
@@ -366,7 +391,7 @@ Supports EIP-3009 (USDC, gasless) and Permit2 (any ERC-20) settlement schemes.
 ## Security Model
 
 - **Owners** control everything: bot whitelist, spending limits, withdrawal. Hardware wallet recommended.
-- **Bots** only sign payment intents. They never hold ETH, never submit transactions, and can be removed instantly.
+- **Bots** only sign payment intents. They never hold ETH, never submit transactions, and can be removed instantly. External protocol signing (ERC-1271) is disabled by default — must be explicitly enabled by the owner.
 - **Relayer** (Axon) can only execute bot-signed intents within configured limits. Cannot withdraw or modify vault config.
 - **If Axon goes offline**, the owner retains full withdrawal access directly through the on-chain vault contract.
 

package/dist/index.cjs

@@ -18,7 +18,7 @@ var PAYMENT_INTENT_TYPEHASH = viem.keccak256(
 );
 var EXECUTE_INTENT_TYPEHASH = viem.keccak256(
   viem.stringToBytes(
-    "ExecuteIntent(address bot,address protocol,bytes32 calldataHash,address token,uint256 amount,uint256 value,uint256 deadline,bytes32 ref)"
+    "ExecuteIntent(address bot,address protocol,bytes32 calldataHash,address token,uint256 amount,uint256 value,address[] extraTokens,uint256[] extraAmounts,uint256 deadline,bytes32 ref)"
   )
 );
 var SWAP_INTENT_TYPEHASH = viem.keccak256(
@@ -156,6 +156,8 @@ var EXECUTE_INTENT_TYPES = {
     { name: "token", type: "address" },
     { name: "amount", type: "uint256" },
     { name: "value", type: "uint256" },
+    { name: "extraTokens", type: "address[]" },
+    { name: "extraAmounts", type: "uint256[]" },
     { name: "deadline", type: "uint256" },
     { name: "ref", type: "bytes32" }
   ]
@@ -212,6 +214,8 @@ async function signExecuteIntent(walletClient, vaultAddress, chainId, intent) {
       token: intent.token,
       amount: intent.amount,
       value: intent.value,
+      extraTokens: intent.extraTokens,
+      extraAmounts: intent.extraAmounts,
       deadline: intent.deadline,
       ref: intent.ref
     }
@@ -614,6 +618,19 @@ var AxonVaultAbi = [
     ],
     "stateMutability": "view"
   },
+  {
+    "type": "function",
+    "name": "erc1271BotsEnabled",
+    "inputs": [],
+    "outputs": [
+      {
+        "name": "",
+        "type": "bool",
+        "internalType": "bool"
+      }
+    ],
+    "stateMutability": "view"
+  },
   {
     "type": "function",
     "name": "executePayment",
@@ -723,6 +740,16 @@ var AxonVaultAbi = [
             "type": "uint256",
             "internalType": "uint256"
           },
+          {
+            "name": "extraTokens",
+            "type": "address[]",
+            "internalType": "address[]"
+          },
+          {
+            "name": "extraAmounts",
+            "type": "uint256[]",
+            "internalType": "uint256[]"
+          },
           {
             "name": "deadline",
             "type": "uint256",
@@ -1409,6 +1436,19 @@ var AxonVaultAbi = [
     "outputs": [],
     "stateMutability": "nonpayable"
   },
+  {
+    "type": "function",
+    "name": "setErc1271Bots",
+    "inputs": [
+      {
+        "name": "enabled",
+        "type": "bool",
+        "internalType": "bool"
+      }
+    ],
+    "outputs": [],
+    "stateMutability": "nonpayable"
+  },
   {
     "type": "function",
     "name": "setOperator",
@@ -1819,6 +1859,19 @@ var AxonVaultAbi = [
     ],
     "anonymous": false
   },
+  {
+    "type": "event",
+    "name": "ERC1271BotsToggled",
+    "inputs": [
+      {
+        "name": "enabled",
+        "type": "bool",
+        "indexed": false,
+        "internalType": "bool"
+      }
+    ],
+    "anonymous": false
+  },
   {
     "type": "event",
     "name": "ERC721Withdrawn",
@@ -2097,6 +2150,12 @@ var AxonVaultAbi = [
         "indexed": false,
         "internalType": "uint256"
       },
+      {
+        "name": "value",
+        "type": "uint256",
+        "indexed": false,
+        "internalType": "uint256"
+      },
       {
         "name": "ref",
         "type": "bytes32",
@@ -2285,6 +2344,11 @@ var AxonVaultAbi = [
     "name": "AmountMismatch",
     "inputs": []
   },
+  {
+    "type": "error",
+    "name": "ArrayLengthMismatch",
+    "inputs": []
+  },
   {
     "type": "error",
     "name": "BotAlreadyExists",
@@ -3270,6 +3334,13 @@ async function operatorMaxDrainPerDay(publicClient, vaultAddress) {
     functionName: "operatorMaxDrainPerDay"
   });
 }
+async function isErc1271BotsEnabled(publicClient, vaultAddress) {
+  return publicClient.readContract({
+    address: vaultAddress,
+    abi: AxonVaultAbi,
+    functionName: "erc1271BotsEnabled"
+  });
+}
 async function isVaultPaused(publicClient, vaultAddress) {
   return publicClient.readContract({
     address: vaultAddress,
@@ -4160,6 +4231,8 @@ Timestamp: ${timestamp}`;
       token: resolveToken(input.token, this.chainId),
       amount: parseAmount(input.amount, input.token, this.chainId),
       value: input.value ?? 0n,
+      extraTokens: input.extraTokens ?? [],
+      extraAmounts: input.extraAmounts ?? [],
       deadline: input.deadline ?? this._defaultDeadline(),
       ref: this._resolveRef(input.memo, input.ref)
     };
@@ -4961,6 +5034,7 @@ exports.getVaultOwner = getVaultOwner;
 exports.getVaultVersion = getVaultVersion;
 exports.isBotActive = isBotActive;
 exports.isDestinationAllowed = isDestinationAllowed;
+exports.isErc1271BotsEnabled = isErc1271BotsEnabled;
 exports.isRebalanceTokenWhitelisted = isRebalanceTokenWhitelisted;
 exports.isVaultPaused = isVaultPaused;
 exports.operatorMaxDrainPerDay = operatorMaxDrainPerDay;