@azeth/sdk 0.2.0

package/dist/utils/paymaster.js

@@ -0,0 +1,115 @@
+import { http } from 'viem';
+import { entryPoint07Address } from 'viem/account-abstraction';
+import { createPimlicoClient } from 'permissionless/clients/pimlico';
+/** In-memory daily sponsorship counter.
+ *  Resets at midnight UTC by tracking the current date string. */
+class SponsorshipCounter {
+    counts = new Map();
+    currentDay = '';
+    /** Increment and return the new count for the given account.
+     *  Returns 0-based pre-increment count (i.e., the count BEFORE this call). */
+    incrementAndGet(account) {
+        const today = new Date().toISOString().slice(0, 10);
+        if (today !== this.currentDay) {
+            this.counts.clear();
+            this.currentDay = today;
+        }
+        const key = account.toLowerCase();
+        const current = this.counts.get(key) ?? 0;
+        this.counts.set(key, current + 1);
+        return current;
+    }
+}
+const dailyCounter = new SponsorshipCounter();
+/** Estimate total gas cost in wei from UserOp gas fields.
+ *  Uses maxFeePerGas * (callGasLimit + verificationGasLimit + preVerificationGas)
+ *  as a conservative upper bound. Returns 0n if fields are missing. */
+function estimateGasCostWei(params) {
+    const maxFeePerGas = params['maxFeePerGas'];
+    const callGasLimit = params['callGasLimit'];
+    const verificationGasLimit = params['verificationGasLimit'];
+    const preVerificationGas = params['preVerificationGas'];
+    if (!maxFeePerGas)
+        return 0n;
+    const totalGas = (callGasLimit ?? 0n) + (verificationGasLimit ?? 0n) + (preVerificationGas ?? 0n);
+    return maxFeePerGas * totalGas;
+}
+/** Check if the policy allows sponsoring this UserOp.
+ *  Returns a reason string if denied, undefined if allowed. */
+export function checkPolicy(policy, params) {
+    if (!policy)
+        return undefined;
+    const sender = params['sender'];
+    // Check allowedAccounts
+    if (policy.allowedAccounts && policy.allowedAccounts.length > 0 && sender) {
+        const allowed = policy.allowedAccounts.some((a) => a.toLowerCase() === sender.toLowerCase());
+        if (!allowed) {
+            return `Account ${sender} not in paymaster allowedAccounts`;
+        }
+    }
+    // Check daily limit
+    if (policy.maxSponsoredPerDay && policy.maxSponsoredPerDay > 0 && sender) {
+        const countBefore = dailyCounter.incrementAndGet(sender);
+        if (countBefore >= policy.maxSponsoredPerDay) {
+            return `Account ${sender} exceeded daily sponsorship limit (${policy.maxSponsoredPerDay})`;
+        }
+    }
+    // Check max gas cost
+    if (policy.maxGasCostWei && policy.maxGasCostWei > 0n) {
+        const cost = estimateGasCostWei(params);
+        if (cost > 0n && cost > policy.maxGasCostWei) {
+            return `Estimated gas cost ${cost} wei exceeds maxGasCostWei ${policy.maxGasCostWei}`;
+        }
+    }
+    return undefined;
+}
+/** Create a paymaster middleware that wraps a PimlicoClient with graceful fallback
+ *  and optional policy enforcement.
+ *
+ *  When the paymaster is unreachable or rejects the UserOp, the middleware returns
+ *  empty paymaster data so the UserOp falls back to self-paid gas.
+ *
+ *  @param paymasterUrl - URL for the paymaster RPC endpoint
+ *  @param policy - Optional sponsorship policy for client-side filtering
+ *  @returns PaymasterMiddleware compatible with permissionless's createSmartAccountClient
+ */
+export function createPaymasterMiddleware(paymasterUrl, policy) {
+    const pimlicoClient = createPimlicoClient({
+        transport: http(paymasterUrl),
+        entryPoint: { address: entryPoint07Address, version: '0.7' },
+    });
+    return {
+        getPaymasterData: async (params) => {
+            // Policy check before calling the paymaster
+            const policyDenial = checkPolicy(policy, params);
+            if (policyDenial) {
+                console.warn(`[azeth] Paymaster policy denied: ${policyDenial}. Falling back to self-paid gas.`);
+                return {};
+            }
+            try {
+                return await pimlicoClient.getPaymasterData(params);
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                console.warn(`[azeth] Paymaster getPaymasterData failed: ${message}. Falling back to self-paid gas.`);
+                return {};
+            }
+        },
+        getPaymasterStubData: async (params) => {
+            // Policy check applies to stub data too (same sender, same policy)
+            const policyDenial = checkPolicy(policy, params);
+            if (policyDenial) {
+                return {};
+            }
+            try {
+                return await pimlicoClient.getPaymasterStubData(params);
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                console.warn(`[azeth] Paymaster getPaymasterStubData failed: ${message}. Falling back to self-paid gas.`);
+                return {};
+            }
+        },
+    };
+}
+//# sourceMappingURL=paymaster.js.map

package/dist/utils/paymaster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paymaster.js","sourceRoot":"","sources":["../../src/utils/paymaster.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAwBrE;kEACkE;AAClE,MAAM,kBAAkB;IACd,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnC,UAAU,GAAG,EAAE,CAAC;IAExB;kFAC8E;IAC9E,eAAe,CAAC,OAAe;QAC7B,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,KAAK,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QAC1B,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;QAClC,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,MAAM,YAAY,GAAG,IAAI,kBAAkB,EAAE,CAAC;AAE9C;;uEAEuE;AACvE,SAAS,kBAAkB,CAAC,MAAkC;IAC5D,MAAM,YAAY,GAAI,MAAkC,CAAC,cAAc,CAAuB,CAAC;IAC/F,MAAM,YAAY,GAAI,MAAkC,CAAC,cAAc,CAAuB,CAAC;IAC/F,MAAM,oBAAoB,GAAI,MAAkC,CAAC,sBAAsB,CAAuB,CAAC;IAC/G,MAAM,kBAAkB,GAAI,MAAkC,CAAC,oBAAoB,CAAuB,CAAC;IAC3G,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAClG,OAAO,YAAY,GAAG,QAAQ,CAAC;AACjC,CAAC;AAED;+DAC+D;AAC/D,MAAM,UAAU,WAAW,CACzB,MAAmC,EACnC,MAAkC;IAElC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,MAAM,GAAI,MAAkC,CAAC,QAAQ,CAA8B,CAAC;IAE1F,wBAAwB;IACxB,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAChD,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,WAAW,MAAM,mCAAmC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QACzE,MAAM,WAAW,GAAG,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,WAAW,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC7C,OAAO,WAAW,MAAM,sCAAsC,MAAM,CAAC,kBAAkB,GAAG,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,GAAG,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;YAC7C,OAAO,sBAAsB,IAAI,8BAA8B,MAAM,CAAC,aAAa,EAAE,CAAC;QACxF,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CACvC,YAAoB,EACpB,MAAwB;IAExB,MAAM,aAAa,GAAG,mBAAmB,CAAC;QACxC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;QAC7B,UAAU,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE;KAC7D,CAAC,CAAC;IAEH,OAAO;QACL,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACjC,4CAA4C;YAC5C,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC,oCAAoC,YAAY,kCAAkC,CAAC,CAAC;gBACjG,OAAO,EAAgC,CAAC;YAC1C,CAAC;YAED,IAAI,CAAC;gBACH,OAAO,MAAM,aAAa,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,OAAO,CAAC,IAAI,CAAC,8CAA8C,OAAO,kCAAkC,CAAC,CAAC;gBACtG,OAAO,EAAgC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACrC,mEAAmE;YACnE,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,EAAE,MAA+C,CAAC,CAAC;YAC1F,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,EAAoC,CAAC;YAC9C,CAAC;YAED,IAAI,CAAC;gBACH,OAAO,MAAM,aAAa,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,OAAO,CAAC,IAAI,CAAC,kDAAkD,OAAO,kCAAkC,CAAC,CAAC;gBAC1G,OAAO,EAAoC,CAAC;YAC9C,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/utils/retry.d.ts

@@ -0,0 +1,19 @@
+export interface RetryOptions {
+    /** Maximum number of retry attempts (default: 3) */
+    maxRetries?: number;
+    /** Base delay in ms before first retry (default: 1000) */
+    baseDelay?: number;
+    /** Maximum delay in ms between retries (default: 10000) */
+    maxDelay?: number;
+    /** Custom predicate to determine if an error is retryable */
+    retryOn?: (error: unknown) => boolean;
+}
+/** Execute a function with exponential backoff retry logic.
+ *
+ *  Retries on network errors and 5xx-like failures by default.
+ *  Uses exponential backoff with jitter to avoid thundering herd.
+ *
+ *  @throws The last error encountered after all retries are exhausted
+ */
+export declare function withRetry<T>(fn: () => Promise<T>, options?: RetryOptions): Promise<T>;
+//# sourceMappingURL=retry.d.ts.map

package/dist/utils/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../src/utils/retry.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,YAAY;IAC3B,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACvC;AAsCD;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,CAAC,CAAC,CA6BZ"}

package/dist/utils/retry.js

@@ -0,0 +1,68 @@
+import { AzethError } from '@azeth/common';
+/** LOW-8 fix: Retryable Node.js error codes (stable across versions, unlike message strings) */
+const RETRYABLE_ERROR_CODES = new Set([
+    'ECONNREFUSED', 'ECONNRESET', 'ETIMEDOUT', 'ENOTFOUND',
+    'EHOSTUNREACH', 'ENETUNREACH', 'EPIPE', 'UND_ERR_CONNECT_TIMEOUT',
+    'UND_ERR_SOCKET', 'UND_ERR_HEADERS_TIMEOUT',
+]);
+/** Default retry predicate: retries on network errors and 5xx status codes */
+function isRetryableError(error) {
+    if (error instanceof AzethError) {
+        return error.code === 'NETWORK_ERROR';
+    }
+    if (error instanceof TypeError && error.message.includes('fetch')) {
+        return true;
+    }
+    if (error instanceof Error) {
+        // LOW-8 fix: Prefer stable error codes over fragile string matching.
+        // Node.js system errors (and undici) expose a `code` property.
+        const errCode = error.code;
+        if (errCode && RETRYABLE_ERROR_CODES.has(errCode)) {
+            return true;
+        }
+        // Fallback: string matching for environments without error codes
+        const msg = error.message.toLowerCase();
+        return msg.includes('network') ||
+            msg.includes('econnrefused') ||
+            msg.includes('econnreset') ||
+            msg.includes('etimedout') ||
+            msg.includes('socket hang up') ||
+            msg.includes('503') ||
+            msg.includes('502') ||
+            msg.includes('429');
+    }
+    return false;
+}
+/** Execute a function with exponential backoff retry logic.
+ *
+ *  Retries on network errors and 5xx-like failures by default.
+ *  Uses exponential backoff with jitter to avoid thundering herd.
+ *
+ *  @throws The last error encountered after all retries are exhausted
+ */
+export async function withRetry(fn, options) {
+    const maxRetries = options?.maxRetries ?? 3;
+    const baseDelay = options?.baseDelay ?? 1000;
+    const maxDelay = options?.maxDelay ?? 10000;
+    const retryOn = options?.retryOn ?? isRetryableError;
+    let lastError;
+    for (let attempt = 0; attempt <= maxRetries; attempt++) {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            lastError = err;
+            if (attempt >= maxRetries || !retryOn(err)) {
+                throw err;
+            }
+            // Exponential backoff with jitter
+            const exponentialDelay = baseDelay * Math.pow(2, attempt);
+            const jitter = Math.random() * baseDelay;
+            const delay = Math.min(exponentialDelay + jitter, maxDelay);
+            await new Promise(resolve => setTimeout(resolve, delay));
+        }
+    }
+    // Unreachable but satisfies TypeScript
+    throw lastError;
+}
+//# sourceMappingURL=retry.js.map

package/dist/utils/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../src/utils/retry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAa3C,gGAAgG;AAChG,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW;IACtD,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,yBAAyB;IACjE,gBAAgB,EAAE,yBAAyB;CAC5C,CAAC,CAAC;AAEH,8EAA8E;AAC9E,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,YAAY,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,OAAO,GAAI,KAAmC,CAAC,IAAI,CAAC;QAC1D,IAAI,OAAO,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,iEAAiE;QACjE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC5B,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC5B,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC1B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;YACzB,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC9B,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YACnB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YACnB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAoB,EACpB,OAAsB;IAEtB,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,KAAK,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,gBAAgB,CAAC;IAErD,IAAI,SAAkB,CAAC;IAEvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,SAAS,GAAG,GAAG,CAAC;YAEhB,IAAI,OAAO,IAAI,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,kCAAkC;YAClC,MAAM,gBAAgB,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,GAAG,MAAM,EAAE,QAAQ,CAAC,CAAC;YAE5D,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,MAAM,SAAS,CAAC;AAClB,CAAC"}

package/dist/utils/userop.d.ts

@@ -0,0 +1,55 @@
+import { type PublicClient, type WalletClient, type Chain, type Transport, type Account } from 'viem';
+import { type SmartAccount } from 'viem/account-abstraction';
+import { type SmartAccountClient as PermissionlessSmartAccountClient } from 'permissionless';
+import { type PaymasterPolicy } from './paymaster.js';
+/** SmartAccountClient type with concrete SmartAccount (not `SmartAccount | undefined`).
+ *  This ensures sendTransaction() doesn't require explicit `account` parameter. */
+export type AzethSmartAccountClient = PermissionlessSmartAccountClient<Transport, Chain, SmartAccount>;
+export interface SmartAccountClientConfig {
+    publicClient: PublicClient<Transport, Chain>;
+    walletClient: WalletClient<Transport, Chain, Account>;
+    smartAccountAddress: `0x${string}`;
+    bundlerUrl?: string;
+    paymasterUrl?: string;
+    /** Client-side sponsorship policy for paymaster gas sponsorship.
+     *  Only applies when paymasterUrl is configured. */
+    paymasterPolicy?: PaymasterPolicy;
+    /** Optional guardian co-signing key. When set, every UserOperation gets a
+     *  130-byte dual signature (owner 65 bytes + guardian 65 bytes), enabling
+     *  operations that exceed standard spending limits. */
+    guardianKey?: `0x${string}`;
+    /** Azeth server URL. Used as bundler fallback on testnet — the server
+     *  proxies bundler requests using its own PIMLICO_API_KEY so developers
+     *  don't need their own key for getting started. */
+    serverUrl?: string;
+}
+/**
+ * Create a viem SmartAccount implementation for an existing deployed AzethAccount.
+ *
+ * This wraps a deployed AzethAccount v12 smart account as a viem SmartAccount
+ * that can be used with permissionless's createSmartAccountClient to submit
+ * UserOperations through ERC-4337 EntryPoint v0.7.
+ *
+ * The signing flow matches GuardianModule expectations:
+ * - Computes getUserOperationHash (ERC-4337 standard)
+ * - Signs with walletClient.signMessage({ message: { raw: hash } })
+ * - This produces sign(keccak256("\x19Ethereum Signed Message:\n32" + userOpHash))
+ * - GuardianModule._splitSignature expects ECDSA owner sig as first 65 bytes
+ */
+export declare function createAzethSmartAccount(publicClient: PublicClient<Transport, Chain>, walletClient: WalletClient<Transport, Chain, Account>, smartAccountAddress: `0x${string}`, guardianKey?: `0x${string}`): Promise<SmartAccount>;
+/**
+ * Create a permissionless SmartAccountClient for an AzethAccount.
+ *
+ * The SmartAccountClient handles the full ERC-4337 flow:
+ * 1. Encodes calls via account.encodeCalls()
+ * 2. Gets nonce from EntryPoint
+ * 3. Estimates gas via bundler
+ * 4. Signs UserOp via account.signUserOperation()
+ * 5. Submits to bundler via eth_sendUserOperation
+ * 6. Waits for receipt and returns transaction hash
+ *
+ * @param config - Configuration with clients, smart account address, and bundler URL
+ * @returns A SmartAccountClient that can be used for sendTransaction/writeContract
+ */
+export declare function createAzethSmartAccountClient(config: SmartAccountClientConfig): Promise<AzethSmartAccountClient>;
+//# sourceMappingURL=userop.d.ts.map

package/dist/utils/userop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userop.d.ts","sourceRoot":"","sources":["../../src/utils/userop.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,KAAK,EACV,KAAK,SAAS,EACd,KAAK,OAAO,EAKb,MAAM,MAAM,CAAC;AAEd,OAAO,EAEL,KAAK,YAAY,EAIlB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAA4B,KAAK,kBAAkB,IAAI,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAIvH,OAAO,EAA6B,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjF;mFACmF;AACnF,MAAM,MAAM,uBAAuB,GAAG,gCAAgC,CAAC,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AAEvG,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7C,YAAY,EAAE,YAAY,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACtD,mBAAmB,EAAE,KAAK,MAAM,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;wDACoD;IACpD,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC;;2DAEuD;IACvD,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B;;wDAEoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAC3C,YAAY,EAAE,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,EAC5C,YAAY,EAAE,YAAY,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,EACrD,mBAAmB,EAAE,KAAK,MAAM,EAAE,EAClC,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,GAC1B,OAAO,CAAC,YAAY,CAAC,CAgIvB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,uBAAuB,CAAC,CAyElC"}

package/dist/utils/userop.js

@@ -0,0 +1,201 @@
+import { encodeFunctionData, http, createNonceManager, } from 'viem';
+import { privateKeyToAccount } from 'viem/accounts';
+import { toSmartAccount, entryPoint07Abi, entryPoint07Address, getUserOperationHash, } from 'viem/account-abstraction';
+import { createSmartAccountClient } from 'permissionless';
+import { AzethAccountAbi } from '@azeth/common/abis';
+import { AzethError, SUPPORTED_CHAINS, getBundlerUrl, getPaymasterUrl, getServerBundlerUrl } from '@azeth/common';
+import { encodeSimpleSingle, encodeSimpleBatch, encodeSingleExecution, encodeBatchExecution } from './execution.js';
+import { createPaymasterMiddleware } from './paymaster.js';
+/**
+ * Create a viem SmartAccount implementation for an existing deployed AzethAccount.
+ *
+ * This wraps a deployed AzethAccount v12 smart account as a viem SmartAccount
+ * that can be used with permissionless's createSmartAccountClient to submit
+ * UserOperations through ERC-4337 EntryPoint v0.7.
+ *
+ * The signing flow matches GuardianModule expectations:
+ * - Computes getUserOperationHash (ERC-4337 standard)
+ * - Signs with walletClient.signMessage({ message: { raw: hash } })
+ * - This produces sign(keccak256("\x19Ethereum Signed Message:\n32" + userOpHash))
+ * - GuardianModule._splitSignature expects ECDSA owner sig as first 65 bytes
+ */
+export async function createAzethSmartAccount(publicClient, walletClient, smartAccountAddress, guardianKey) {
+    const chainId = publicClient.chain?.id;
+    if (!chainId) {
+        throw new AzethError('Public client must have a chain configured', 'NETWORK_ERROR');
+    }
+    return toSmartAccount({
+        client: publicClient,
+        entryPoint: {
+            abi: entryPoint07Abi,
+            address: entryPoint07Address,
+            version: '0.7',
+        },
+        // Override viem's default time-based nonce key manager.
+        // viem defaults to Date.now() as the nonce key, which produces 192-bit
+        // timestamp keys (e.g., key=1771722560333). Our EntryPoint nonces live
+        // at key=0, so the SDK would sign a UserOp with nonce=(timestamp<<64|seq)
+        // while the bundler/EntryPoint expects nonce=(0<<64|seq) — causing AA24.
+        nonceKeyManager: createNonceManager({
+            source: {
+                get() { return 0; },
+                set() { },
+            },
+        }),
+        // Return the existing deployed account address
+        getAddress: async () => smartAccountAddress,
+        // Our account is already deployed — no factory needed
+        getFactoryArgs: async () => ({
+            factory: undefined,
+            factoryData: undefined,
+        }),
+        // Encode calls into AzethAccount.execute() callData
+        encodeCalls: async (calls) => {
+            if (calls.length === 0) {
+                throw new AzethError('At least one call is required', 'INVALID_INPUT');
+            }
+            if (calls.length === 1) {
+                const call = calls[0];
+                return encodeFunctionData({
+                    abi: AzethAccountAbi,
+                    functionName: 'execute',
+                    args: [
+                        encodeSimpleSingle(),
+                        encodeSingleExecution(call.to, call.value ?? 0n, (call.data ?? '0x')),
+                    ],
+                });
+            }
+            // Batch execution: encode multiple calls into a single UserOp
+            return encodeFunctionData({
+                abi: AzethAccountAbi,
+                functionName: 'execute',
+                args: [
+                    encodeSimpleBatch(),
+                    encodeBatchExecution(calls.map(c => ({
+                        target: c.to,
+                        value: c.value ?? 0n,
+                        data: (c.data ?? '0x'),
+                    }))),
+                ],
+            });
+        },
+        // Sign a personal message (EIP-191) via the owner EOA
+        signMessage: async ({ message }) => {
+            return walletClient.signMessage({ message });
+        },
+        // Sign a UserOperation: compute the ERC-4337 userOpHash and sign it
+        signUserOperation: async (userOperation) => {
+            const userOpForHash = {
+                ...userOperation,
+                sender: userOperation.sender ?? smartAccountAddress,
+            };
+            const hash = getUserOperationHash({
+                chainId,
+                entryPointAddress: entryPoint07Address,
+                entryPointVersion: '0.7',
+                userOperation: userOpForHash,
+            });
+            // Sign with EIP-191 personal sign: this produces
+            // sign(keccak256("\x19Ethereum Signed Message:\n32" + hash))
+            // which matches GuardianModule's ecrecover(hash.toEthSignedMessageHash(), v, r, s)
+            const ownerSig = await walletClient.signMessage({ message: { raw: hash } });
+            // Guardian co-signature: append 65-byte guardian sig to produce 130-byte dual signature
+            if (guardianKey) {
+                const guardianAccount = privateKeyToAccount(guardianKey);
+                const guardianSig = await guardianAccount.signMessage({ message: { raw: hash } });
+                // Concatenate: ownerSig (0x + 128 hex chars) + guardianSig (128 hex chars, no 0x prefix)
+                return (ownerSig + guardianSig.slice(2));
+            }
+            return ownerSig;
+        },
+        // Sign typed data via the owner EOA
+        signTypedData: async (typedData) => {
+            return walletClient.signTypedData(typedData);
+        },
+        // 65-byte dummy signature for gas estimation.
+        // Must be a valid ECDSA signature (r=1, s=1, v=27) so tryRecover succeeds
+        // and the full validateUserOp code path executes (guardrails, oracle, etc.).
+        // An all-0xFF stub triggers ECDSAInvalidSignatureS, taking a short path that
+        // causes the bundler to underestimate verificationGasLimit (AA26).
+        getStubSignature: async () => {
+            const stub65 = ('0x' + '00'.repeat(31) + '01' + '00'.repeat(31) + '01' + '1b');
+            if (guardianKey) {
+                // 130-byte stub: two valid ECDSA dummy signatures for owner + guardian
+                return (stub65 + stub65.slice(2));
+            }
+            return stub65;
+        },
+    });
+}
+/**
+ * Create a permissionless SmartAccountClient for an AzethAccount.
+ *
+ * The SmartAccountClient handles the full ERC-4337 flow:
+ * 1. Encodes calls via account.encodeCalls()
+ * 2. Gets nonce from EntryPoint
+ * 3. Estimates gas via bundler
+ * 4. Signs UserOp via account.signUserOperation()
+ * 5. Submits to bundler via eth_sendUserOperation
+ * 6. Waits for receipt and returns transaction hash
+ *
+ * @param config - Configuration with clients, smart account address, and bundler URL
+ * @returns A SmartAccountClient that can be used for sendTransaction/writeContract
+ */
+export async function createAzethSmartAccountClient(config) {
+    const { publicClient, walletClient, smartAccountAddress, bundlerUrl, paymasterPolicy } = config;
+    const chainId = publicClient.chain?.id;
+    if (!chainId) {
+        throw new AzethError('Public client must have a chain configured', 'NETWORK_ERROR');
+    }
+    // Resolve chain name from chain ID for URL resolution
+    const chainName = Object.entries(SUPPORTED_CHAINS)
+        .find(([, c]) => c.id === chainId)?.[0];
+    // Resolve bundler URL: explicit config > env var > chain base URL + API key > error
+    let resolvedBundlerUrl = bundlerUrl;
+    if (!resolvedBundlerUrl) {
+        if (chainName) {
+            const apiKey = typeof globalThis.process !== 'undefined'
+                ? globalThis.process.env?.['PIMLICO_API_KEY']
+                : undefined;
+            resolvedBundlerUrl = getBundlerUrl(chainName, apiKey);
+        }
+    }
+    // Fallback: use Azeth server bundler proxy (testnet gas sponsorship)
+    if (!resolvedBundlerUrl && config.serverUrl) {
+        resolvedBundlerUrl = getServerBundlerUrl(config.serverUrl);
+    }
+    if (!resolvedBundlerUrl) {
+        throw new AzethError('bundlerUrl is required for UserOperation submission. ' +
+            'Set PIMLICO_API_KEY or AZETH_BUNDLER_URL env var, or pass bundlerUrl in AzethKitConfig. ' +
+            'Get a free key at https://dashboard.pimlico.io or https://portal.cdp.coinbase.com.', 'INVALID_INPUT', { chainId });
+    }
+    // Resolve paymaster URL: explicit config > env var > chain default (same as bundler for Pimlico)
+    let resolvedPaymasterUrl = config.paymasterUrl;
+    if (!resolvedPaymasterUrl) {
+        resolvedPaymasterUrl = typeof globalThis.process !== 'undefined'
+            ? globalThis.process.env?.['AZETH_PAYMASTER_URL']
+            : undefined;
+        if (!resolvedPaymasterUrl && chainName) {
+            const apiKey = typeof globalThis.process !== 'undefined'
+                ? globalThis.process.env?.['PIMLICO_API_KEY']
+                : undefined;
+            resolvedPaymasterUrl = getPaymasterUrl(chainName, apiKey);
+        }
+    }
+    const smartAccount = await createAzethSmartAccount(publicClient, walletClient, smartAccountAddress, config.guardianKey);
+    // Build SmartAccountClient config with optional paymaster
+    const clientConfig = {
+        account: smartAccount,
+        chain: publicClient.chain,
+        bundlerTransport: http(resolvedBundlerUrl),
+        client: publicClient,
+    };
+    // Wire paymaster middleware when URL is available.
+    // The middleware handles graceful fallback: if the paymaster rejects or is
+    // unreachable, the UserOp falls back to self-paid gas (no crash).
+    if (resolvedPaymasterUrl) {
+        clientConfig.paymaster = createPaymasterMiddleware(resolvedPaymasterUrl, paymasterPolicy);
+    }
+    return createSmartAccountClient(clientConfig);
+}
+//# sourceMappingURL=userop.js.map

package/dist/utils/userop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userop.js","sourceRoot":"","sources":["../../src/utils/userop.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,kBAAkB,EAClB,IAAI,EACJ,kBAAkB,GACnB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACL,cAAc,EAEd,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAA+D,MAAM,gBAAgB,CAAC;AACvH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAA6C,aAAa,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC7J,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACpH,OAAO,EAAE,yBAAyB,EAAwB,MAAM,gBAAgB,CAAC;AAyBjF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,YAA4C,EAC5C,YAAqD,EACrD,mBAAkC,EAClC,WAA2B;IAE3B,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAAC,4CAA4C,EAAE,eAAe,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,MAAM,EAAE,YAAY;QAEpB,UAAU,EAAE;YACV,GAAG,EAAE,eAAe;YACpB,OAAO,EAAE,mBAAmB;YAC5B,OAAO,EAAE,KAAK;SACf;QAED,wDAAwD;QACxD,uEAAuE;QACvE,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,eAAe,EAAE,kBAAkB,CAAC;YAClC,MAAM,EAAE;gBACN,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;gBACnB,GAAG,KAAI,CAAC;aACT;SACF,CAAC;QAEF,+CAA+C;QAC/C,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,mBAAmB;QAE3C,sDAAsD;QACtD,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAC3B,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,SAAS;SACvB,CAAC;QAEF,oDAAoD;QACpD,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,UAAU,CAAC,+BAA+B,EAAE,eAAe,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,OAAO,kBAAkB,CAAC;oBACxB,GAAG,EAAE,eAAe;oBACpB,YAAY,EAAE,SAAS;oBACvB,IAAI,EAAE;wBACJ,kBAAkB,EAAE;wBACpB,qBAAqB,CACnB,IAAI,CAAC,EAAmB,EACxB,IAAI,CAAC,KAAK,IAAI,EAAE,EAChB,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAQ,CAC3B;qBACF;iBACF,CAAC,CAAC;YACL,CAAC;YAED,8DAA8D;YAC9D,OAAO,kBAAkB,CAAC;gBACxB,GAAG,EAAE,eAAe;gBACpB,YAAY,EAAE,SAAS;gBACvB,IAAI,EAAE;oBACJ,iBAAiB,EAAE;oBACnB,oBAAoB,CAClB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACd,MAAM,EAAE,CAAC,CAAC,EAAmB;wBAC7B,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;wBACpB,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAQ;qBAC9B,CAAC,CAAC,CACJ;iBACF;aACF,CAAC,CAAC;QACL,CAAC;QAED,sDAAsD;QACtD,WAAW,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACjC,OAAO,YAAY,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,oEAAoE;QACpE,iBAAiB,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YACzC,MAAM,aAAa,GAAG;gBACpB,GAAG,aAAa;gBAChB,MAAM,EAAE,aAAa,CAAC,MAAM,IAAI,mBAAmB;aACpD,CAAC;YACF,MAAM,IAAI,GAAG,oBAAoB,CAAC;gBAChC,OAAO;gBACP,iBAAiB,EAAE,mBAAmB;gBACtC,iBAAiB,EAAE,KAAK;gBACxB,aAAa,EAAE,aAAa;aAC7B,CAAC,CAAC;YAEH,iDAAiD;YACjD,6DAA6D;YAC7D,mFAAmF;YACnF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAE5E,wFAAwF;YACxF,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,eAAe,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;gBACzD,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;gBAClF,yFAAyF;gBACzF,OAAO,CAAC,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAQ,CAAC;YAClD,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,oCAAoC;QACpC,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACjC,OAAO,YAAY,CAAC,aAAa,CAAC,SAA6D,CAAC,CAAC;QACnG,CAAC;QAED,8CAA8C;QAC9C,0EAA0E;QAC1E,6EAA6E;QAC7E,6EAA6E;QAC7E,mEAAmE;QACnE,gBAAgB,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAQ,CAAC;YACtF,IAAI,WAAW,EAAE,CAAC;gBAChB,uEAAuE;gBACvE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAQ,CAAC;YAC3C,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAAgC;IAEhC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IAEhG,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAAC,4CAA4C,EAAE,eAAe,CAAC,CAAC;IACtF,CAAC;IAED,sDAAsD;IACtD,MAAM,SAAS,GAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAyC;SACxF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAE1C,oFAAoF;IACpF,IAAI,kBAAkB,GAAG,UAAU,CAAC;IACpC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,OAAO,UAAU,CAAC,OAAO,KAAK,WAAW;gBACtD,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC;gBAC7C,CAAC,CAAC,SAAS,CAAC;YACd,kBAAkB,GAAG,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QAC5C,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAClB,uDAAuD;YACvD,0FAA0F;YAC1F,oFAAoF,EACpF,eAAe,EACf,EAAE,OAAO,EAAE,CACZ,CAAC;IACJ,CAAC;IAED,iGAAiG;IACjG,IAAI,oBAAoB,GAAG,MAAM,CAAC,YAAY,CAAC;IAC/C,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,oBAAoB,GAAG,OAAO,UAAU,CAAC,OAAO,KAAK,WAAW;YAC9D,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC;YACjD,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,oBAAoB,IAAI,SAAS,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,OAAO,UAAU,CAAC,OAAO,KAAK,WAAW;gBACtD,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC;gBAC7C,CAAC,CAAC,SAAS,CAAC;YACd,oBAAoB,GAAG,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAChD,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,MAAM,CAAC,WAAW,CACnB,CAAC;IAEF,0DAA0D;IAC1D,MAAM,YAAY,GAAmD;QACnE,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC;QAC1C,MAAM,EAAE,YAAY;KACrB,CAAC;IAEF,mDAAmD;IACnD,2EAA2E;IAC3E,kEAAkE;IAClE,IAAI,oBAAoB,EAAE,CAAC;QACzB,YAAY,CAAC,SAAS,GAAG,yBAAyB,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO,wBAAwB,CAAC,YAAY,CAA4B,CAAC;AAC3E,CAAC"}

package/dist/utils/validation.d.ts

@@ -0,0 +1,8 @@
+/** Validate that a string is a valid Ethereum address (0x + 40 hex chars).
+ *  L-12 fix (Audit #8): Also rejects the zero address to prevent accidental fund burns. */
+export declare function validateAddress(address: string, fieldName: string): void;
+/** Validate that a URL is well-formed HTTP(S). Optionally require HTTPS. */
+export declare function validateUrl(url: string, fieldName: string, requireHttps?: boolean): void;
+/** Validate that a bigint amount is positive */
+export declare function validatePositiveAmount(amount: bigint, fieldName: string): void;
+//# sourceMappingURL=validation.d.ts.map

package/dist/utils/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAEA;2FAC2F;AAC3F,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAexE;AAED,4EAA4E;AAC5E,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,UAAQ,GAAG,IAAI,CAatF;AAED,gDAAgD;AAChD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAQ9E"}

package/dist/utils/validation.js

@@ -0,0 +1,35 @@
+import { AzethError } from '@azeth/common';
+/** Validate that a string is a valid Ethereum address (0x + 40 hex chars).
+ *  L-12 fix (Audit #8): Also rejects the zero address to prevent accidental fund burns. */
+export function validateAddress(address, fieldName) {
+    if (!/^0x[a-fA-F0-9]{40}$/.test(address)) {
+        throw new AzethError('Invalid Ethereum address format', 'INVALID_INPUT', { field: fieldName });
+    }
+    if (address === '0x0000000000000000000000000000000000000000') {
+        throw new AzethError('Cannot use the zero address', 'INVALID_INPUT', { field: fieldName });
+    }
+}
+/** Validate that a URL is well-formed HTTP(S). Optionally require HTTPS. */
+export function validateUrl(url, fieldName, requireHttps = false) {
+    try {
+        const parsed = new URL(url);
+        if (requireHttps && parsed.protocol !== 'https:') {
+            throw new AzethError('URL must use HTTPS', 'INVALID_INPUT', { field: fieldName });
+        }
+        if (!['http:', 'https:'].includes(parsed.protocol)) {
+            throw new AzethError('URL must use HTTP or HTTPS', 'INVALID_INPUT', { field: fieldName });
+        }
+    }
+    catch (e) {
+        if (e instanceof AzethError)
+            throw e;
+        throw new AzethError('Invalid URL format', 'INVALID_INPUT', { field: fieldName });
+    }
+}
+/** Validate that a bigint amount is positive */
+export function validatePositiveAmount(amount, fieldName) {
+    if (amount <= 0n) {
+        throw new AzethError(`Invalid ${fieldName}: must be greater than 0`, 'INVALID_INPUT', { field: fieldName, value: amount.toString() });
+    }
+}
+//# sourceMappingURL=validation.js.map

package/dist/utils/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;2FAC2F;AAC3F,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,SAAiB;IAChE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,UAAU,CAClB,iCAAiC,EACjC,eAAe,EACf,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,4CAA4C,EAAE,CAAC;QAC7D,MAAM,IAAI,UAAU,CAClB,6BAA6B,EAC7B,eAAe,EACf,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,SAAiB,EAAE,YAAY,GAAG,KAAK;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,YAAY,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,UAAU,CAAC,4BAA4B,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,UAAU;YAAE,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,SAAiB;IACtE,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,UAAU,CAClB,WAAW,SAAS,0BAA0B,EAC9C,eAAe,EACf,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAC/C,CAAC;IACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@azeth/sdk",
+  "version": "0.2.0",
+  "type": "module",
+  "description": "TypeScript SDK for the Azeth trust infrastructure — smart accounts, x402 payments, reputation, and service discovery",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/azeth-protocol/sdk.git"
+  },
+  "homepage": "https://azeth.ai",
+  "keywords": [
+    "azeth",
+    "sdk",
+    "machine-economy",
+    "trust-registry",
+    "erc-4337",
+    "smart-accounts",
+    "x402",
+    "payments",
+    "reputation",
+    "xmtp"
+  ],
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@azeth/common": "^0.2.0",
+    "@x402/core": "^2.4.0",
+    "@x402/extensions": "^2.4.0",
+    "@xmtp/agent-sdk": "^2.2.0",
+    "permissionless": "^0.3.4",
+    "viem": "^2.21.0"
+  },
+  "devDependencies": {
+    "@stryker-mutator/core": "^8.6.0",
+    "@stryker-mutator/vitest-runner": "^8.6.0",
+    "@types/node": "^22.0.0",
+    "typescript": "^5.7.0",
+    "vitest": "^2.1.0",
+    "@changesets/cli": "^2.27.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "scripts": {
+    "build": "tsc --project tsconfig.json",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist",
+    "test:mutation": "npx stryker run",
+    "release": "pnpm build && changeset publish"
+  }
+}