@bloxchain/sdk 1.0.0-alpha.2 → 1.0.0-alpha.21

package/dist/lib/EngineBlox.js

@@ -20,7 +20,7 @@ const keccak256 = (str) => {
  *
  * // Access constants
  * const protocolName = EngineBlox.PROTOCOL_NAME_HASH;
- * const version = `${EngineBlox.VERSION_MAJOR}.${EngineBlox.VERSION_MINOR}.${EngineBlox.VERSION_PATCH}`;
+ * const version = EngineBlox.VERSION;
  *
  * // Use pure functions
  * const signer = EngineBlox.recoverSigner(messageHash, signature);
@@ -32,113 +32,28 @@ const keccak256 = (str) => {
 export class EngineBlox {
     // ============ PURE FUNCTIONS ============
     /**
-     * @dev Recovers the signer address from a message hash and signature
-     * @param messageHash The hash of the message that was signed (bytes32)
-     * @param signature The signature to recover the address from (65 bytes)
+     * @dev Recovers the signer address from the EIP-712 digest and signature (standard EIP-712; no EIP-191 prefix).
+     * @param messageHash The EIP-712 digest (keccak256("\x19\x01" || domainSeparator || structHash))
+     * @param signature The signature (65 bytes)
      * @returns Promise that resolves to the address of the signer
-     * @throws Error if signature is invalid or recovery fails
-     *
-     * @notice This matches the contract's recoverSigner function which uses
-     *         messageHash.toEthSignedMessageHash() to convert to EIP-191 format
-     *
-     * @example
-     * ```typescript
-     * const messageHash = "0x1234...";
-     * const signature = "0xabcd...";
-     * const signer = await EngineBlox.recoverSigner(messageHash, signature);
-     * ```
+     * @notice Matches the contract's recoverSigner which uses ecrecover(messageHash, v, r, s) on the raw digest.
      */
     static async recoverSigner(messageHash, signature) {
-        // Validate signature length (65 bytes = 130 hex chars + '0x' prefix)
         if (signature.length !== 132) {
-            throw new Error(`Invalid signature length: expected 65 bytes (132 hex chars), got ${signature.length - 2} bytes`);
+            throw new Error(`Invalid signature length: expected 65 bytes (132 hex chars), got ${(signature.length - 2) / 2} bytes`);
         }
         try {
-            // The contract uses messageHash.toEthSignedMessageHash() which converts to EIP-191 format
-            // EIP-191 format for 32-byte hash: keccak256("\x19Ethereum Signed Message:\n32" + messageHash)
-            // We need to create the EIP-191 formatted hash and then recover from it
-            const prefix = '\x19Ethereum Signed Message:\n32';
-            const messageHashBytes = Buffer.from(messageHash.slice(2), 'hex');
-            // Concatenate prefix and hash
-            const eip191Message = Buffer.concat([
-                Buffer.from(prefix, 'utf8'),
-                messageHashBytes
-            ]);
-            // Convert Buffer to Uint8Array for viem
-            const eip191MessageBytes = new Uint8Array(eip191Message);
-            // Hash the EIP-191 formatted message
-            const eip191Hash = (await k256(eip191MessageBytes));
-            // Recover address from the EIP-191 formatted hash
-            // Note: recoverAddress is async in viem
-            const recovered = await recoverAddress({
-                hash: eip191Hash,
-                signature: signature
+            const signer = await recoverAddress({
+                hash: messageHash,
+                signature
             });
-            return recovered;
+            return signer;
         }
         catch (error) {
             throw new Error(`Failed to recover signer: ${error instanceof Error ? error.message : 'Unknown error'}`);
         }
     }
     // ============ VIEW FUNCTIONS (No storage access) ============
-    /**
-     * @dev Checks if a function selector exists in a contract's bytecode
-     * @param client PublicClient instance for reading contract bytecode
-     * @param contractAddress The address of the contract to check
-     * @param selector The 4-byte function selector to search for
-     * @returns Promise that resolves to true if the selector is found in the contract's function selector dispatch table
-     *
-     * @notice Searches the first 2KB where function selectors are stored in the dispatch table
-     * @notice This is a heuristic check - false positives are possible but unlikely
-     *
-     * @example
-     * ```typescript
-     * const exists = await EngineBlox.selectorExistsInContract(
-     *   publicClient,
-     *   '0x1234...',
-     *   '0xabcd1234'
-     * );
-     * ```
-     */
-    static async selectorExistsInContract(client, contractAddress, selector) {
-        try {
-            // Get the contract's bytecode
-            const code = await client.getCode({ address: contractAddress });
-            if (!code || code.length < 12) { // Need at least '0x' + PUSH4 (1 byte = 2 hex chars) + selector (4 bytes = 8 hex chars) = 12 chars
-                return false;
-            }
-            // Function selectors are in the dispatch table at the beginning
-            // Typical dispatch tables are < 2KB even for large contracts
-            // Searching only this area reduces gas cost and false positives from metadata/data
-            // 2KB = 2048 bytes = 4096 hex chars (plus '0x' prefix = 4098 total)
-            const maxSearchBytes = 2048;
-            const codeHexLength = code.length - 2; // Remove '0x' prefix
-            const maxSearchHexChars = maxSearchBytes * 2; // Each byte is 2 hex chars
-            const searchLength = codeHexLength < maxSearchHexChars ? codeHexLength : maxSearchHexChars;
-            // Convert hex strings for searching (normalize to lowercase)
-            const codeBytes = code.slice(2).toLowerCase(); // Remove '0x' prefix and normalize
-            const selectorBytes = selector.slice(2).toLowerCase(); // Remove '0x' and normalize
-            // Scan for PUSH4 opcode (0x63 = "63" in hex) with 1-byte sliding window
-            // PUSH4 opcode is followed by 4 bytes (8 hex chars) which is the function selector
-            // Function selectors in EVM bytecode are emitted as PUSH4 <selector> instructions
-            // These can start at any byte offset, not just 4-byte-aligned positions
-            for (let i = 0; i + 10 <= searchLength; i += 2) { // i += 2 because each byte is 2 hex chars
-                // Check if current byte is PUSH4 opcode (0x63 = "63" in hex)
-                if (codeBytes.slice(i, i + 2) === '63') {
-                    // Check if the next 8 hex chars (4 bytes) match the selector
-                    const candidate = codeBytes.slice(i + 2, i + 10);
-                    if (candidate === selectorBytes) {
-                        return true;
-                    }
-                }
-            }
-            return false;
-        }
-        catch (error) {
-            // If we can't read the bytecode, return false
-            return false;
-        }
-    }
     // ============ BITMAP HELPER FUNCTIONS ============
     /**
      * @dev Checks if a TxAction is present in a bitmap
@@ -209,6 +124,15 @@ export class EngineBlox {
         }
         return actions;
     }
+    /**
+     * Hash of execution returndata (`bytes32(0)` when empty). Matches `EngineBlox.executionResultHash` on-chain.
+     */
+    static executionResultHash(executionResult) {
+        if (!executionResult || executionResult === '0x') {
+            return `0x${'0'.repeat(64)}`;
+        }
+        return k256(executionResult);
+    }
 }
 // ============ VERSION INFORMATION ============
 /**
@@ -216,17 +140,9 @@ export class EngineBlox {
  */
 EngineBlox.PROTOCOL_NAME_HASH = keccak256("Bloxchain");
 /**
- * Major version number
- */
-EngineBlox.VERSION_MAJOR = 1;
-/**
- * Minor version number
- */
-EngineBlox.VERSION_MINOR = 0;
-/**
- * Patch version number
+ * Protocol version string (semver, e.g. "1.0.0"). Matches EngineBlox.sol VERSION and EIP-712 domain version.
  */
-EngineBlox.VERSION_PATCH = 0;
+EngineBlox.VERSION = "1.0.0";
 // ============ FUNCTION SELECTORS ============
 /**
  * Native token transfer selector (reserved signature for simple ETH transfers)
@@ -238,14 +154,14 @@ EngineBlox.NATIVE_TRANSFER_SELECTOR = ('0x' + k256(new TextEncoder().encode("__b
  */
 EngineBlox.NATIVE_TRANSFER_OPERATION = keccak256("NATIVE_TRANSFER");
 /**
- * Payment update selector (reserved signature for payment detail updates)
- * Computed as bytes4(keccak256("__bloxchain_update_payment__()"))
+ * Pseudo-selector: whitelist key for attached payment recipients (native + ERC20 payout addresses).
+ * Matches `ATTACHED_PAYMENT_RECIPIENT_SELECTOR` in EngineBlox.sol.
  */
-EngineBlox.UPDATE_PAYMENT_SELECTOR = ('0x' + k256(new TextEncoder().encode("__bloxchain_update_payment__()")).slice(2, 10));
+EngineBlox.ATTACHED_PAYMENT_RECIPIENT_SELECTOR = ('0x' + k256(new TextEncoder().encode('__bloxchain_attached_payment_recipient__()')).slice(2, 10));
 /**
- * Payment update operation type hash
+ * Standard IERC20 `transfer(address,uint256)` — whitelist key for token contracts in attached ERC20 payments.
  */
-EngineBlox.UPDATE_PAYMENT_OPERATION = keccak256("UPDATE_PAYMENT");
+EngineBlox.ERC20_TRANSFER_SELECTOR = ('0x' + k256(new TextEncoder().encode('transfer(address,uint256)')).slice(2, 10));
 // ============ ROLE CONSTANTS ============
 /**
  * Owner role hash

package/dist/lib/EngineBlox.js.map

@@ -1 +1 @@
-{"version":3,"file":"EngineBlox.js","sourceRoot":"","sources":["../../lib/EngineBlox.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,IAAI,EAAqC,cAAc,EAAc,MAAM,MAAM,CAAC;AAExG,OAAO,EAAgB,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEnE;;GAEG;AACH,MAAM,SAAS,GAAG,CAAC,GAAW,EAAO,EAAE;IACrC,OAAO,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAQ,CAAC;AACpD,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,UAAU;IAoErB,2CAA2C;IAE3C;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,WAAgB,EAAE,SAAc;QACzD,qEAAqE;QACrE,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,oEAAoE,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpH,CAAC;QAED,IAAI,CAAC;YACH,0FAA0F;YAC1F,+FAA+F;YAC/F,wEAAwE;YACxE,MAAM,MAAM,GAAG,kCAAkC,CAAC;YAClD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAElE,8BAA8B;YAC9B,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;gBAC3B,gBAAgB;aACjB,CAAC,CAAC;YAEH,wCAAwC;YACxC,MAAM,kBAAkB,GAAG,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC;YAEzD,qCAAqC;YACrC,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAQ,CAAC;YAE3D,kDAAkD;YAClD,wCAAwC;YACxC,MAAM,SAAS,GAAY,MAAM,cAAc,CAAC;gBAC9C,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE,SAAS;aACrB,CAAC,CAAC;YAEH,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,+DAA+D;IAE/D;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,KAAK,CAAC,wBAAwB,CACnC,MAAoB,EACpB,eAAwB,EACxB,QAAa;QAEb,IAAI,CAAC;YACH,8BAA8B;YAC9B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;YAEhE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC,kGAAkG;gBACjI,OAAO,KAAK,CAAC;YACf,CAAC;YAED,gEAAgE;YAChE,6DAA6D;YAC7D,mFAAmF;YACnF,oEAAoE;YACpE,MAAM,cAAc,GAAG,IAAI,CAAC;YAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,qBAAqB;YAC5D,MAAM,iBAAiB,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC,2BAA2B;YACzE,MAAM,YAAY,GAAG,aAAa,GAAG,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC;YAE3F,6DAA6D;YAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,mCAAmC;YAClF,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,4BAA4B;YAEnF,wEAAwE;YACxE,mFAAmF;YACnF,kFAAkF;YAClF,wEAAwE;YACxE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,0CAA0C;gBAC1F,6DAA6D;gBAC7D,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBACvC,6DAA6D;oBAC7D,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;oBACjD,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;wBAChC,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,8CAA8C;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,oDAAoD;IAEpD;;;;;;;;;;OAUG;IACH,MAAM,CAAC,iBAAiB,CAAC,MAAoB,EAAE,MAAgB;QAC7D,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,iBAAiB,CAAC,MAAoB,EAAE,MAAgB;QAC7D,OAAO,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,uBAAuB,CAAC,OAAmB;QAChD,IAAI,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;QACnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,sBAAsB,CAAC,MAAoB;QAChD,iCAAiC;QACjC,MAAM,OAAO,GAAe,EAAE,CAAC;QAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,CAAa,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;;AA5QD,gDAAgD;AAEhD;;GAEG;AACa,6BAAkB,GAAQ,SAAS,CAAC,WAAW,CAAC,CAAC;AAEjE;;GAEG;AACa,wBAAa,GAAW,CAAC,CAAC;AAE1C;;GAEG;AACa,wBAAa,GAAW,CAAC,CAAC;AAE1C;;GAEG;AACa,wBAAa,GAAW,CAAC,CAAC;AAE1C,+CAA+C;AAE/C;;;GAGG;AACa,mCAAwB,GAAQ,CAC9C,IAAI,GAAG,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAC/E,CAAC;AAET;;GAEG;AACa,oCAAyB,GAAQ,SAAS,CAAC,iBAAiB,CAAC,CAAC;AAE9E;;;GAGG;AACa,kCAAuB,GAAQ,CAC7C,IAAI,GAAG,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAC9E,CAAC;AAET;;GAEG;AACa,mCAAwB,GAAQ,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAE5E,2CAA2C;AAE3C;;GAEG;AACa,qBAAU,GAAQ,SAAS,CAAC,YAAY,CAAC,CAAC;AAE1D;;GAEG;AACa,2BAAgB,GAAQ,SAAS,CAAC,kBAAkB,CAAC,CAAC;AAEtE;;GAEG;AACa,wBAAa,GAAQ,SAAS,CAAC,eAAe,CAAC,CAAC;AA8MlE;;GAEG;AACH,eAAe,UAAU,CAAC"}
+{"version":3,"file":"EngineBlox.js","sourceRoot":"","sources":["../../lib/EngineBlox.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,IAAI,EAAqC,cAAc,EAAc,MAAM,MAAM,CAAC;AAExG,OAAO,EAAgB,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEnE;;GAEG;AACH,MAAM,SAAS,GAAG,CAAC,GAAW,EAAO,EAAE;IACrC,OAAO,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAQ,CAAC;AACpD,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,UAAU;IA4DrB,2CAA2C;IAE3C;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,WAAgB,EAAE,SAAc;QACzD,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1H,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;gBAClC,IAAI,EAAE,WAAW;gBACjB,SAAS;aACV,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,+DAA+D;IAE/D,oDAAoD;IAEpD;;;;;;;;;;OAUG;IACH,MAAM,CAAC,iBAAiB,CAAC,MAAoB,EAAE,MAAgB;QAC7D,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,iBAAiB,CAAC,MAAoB,EAAE,MAAgB;QAC7D,OAAO,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,uBAAuB,CAAC,OAAmB;QAChD,IAAI,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;QACnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,sBAAsB,CAAC,MAAoB;QAChD,iCAAiC;QACjC,MAAM,OAAO,GAAe,EAAE,CAAC;QAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,CAAa,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,mBAAmB,CAAC,eAAoB;QAC7C,IAAI,CAAC,eAAe,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YACjD,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAS,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAQ,CAAC;IACtC,CAAC;;AA1KD,gDAAgD;AAEhD;;GAEG;AACa,6BAAkB,GAAQ,SAAS,CAAC,WAAW,CAAC,CAAC;AAEjE;;GAEG;AACa,kBAAO,GAAW,OAAO,CAAC;AAE1C,+CAA+C;AAE/C;;;GAGG;AACa,mCAAwB,GAAQ,CAC9C,IAAI,GAAG,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAC/E,CAAC;AAET;;GAEG;AACa,oCAAyB,GAAQ,SAAS,CAAC,iBAAiB,CAAC,CAAC;AAE9E;;;GAGG;AACa,8CAAmC,GAAQ,CACzD,IAAI,GAAG,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAC1F,CAAC;AAET;;GAEG;AACa,kCAAuB,GAAQ,CAC7C,IAAI,GAAG,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CACzE,CAAC;AAET,2CAA2C;AAE3C;;GAEG;AACa,qBAAU,GAAQ,SAAS,CAAC,YAAY,CAAC,CAAC;AAE1D;;GAEG;AACa,2BAAgB,GAAQ,SAAS,CAAC,kBAAkB,CAAC,CAAC;AAEtE;;GAEG;AACa,wBAAa,GAAQ,SAAS,CAAC,eAAe,CAAC,CAAC;AAoHlE;;GAEG;AACH,eAAe,UAAU,CAAC"}

package/dist/lib/definitions/GuardControllerDefinitions.d.ts

@@ -1,15 +1,42 @@
 /**
  * GuardControllerDefinitions
- * Pure helpers for building execution params for GuardController operations.
- * Mirrors GuardControllerDefinitions.sol; no contract calls.
- * Uses parseAbiParameters + array-of-[actionType,data] to match web3 encodeParameter('tuple(uint8,bytes)[]', [[actionType, data], ...]).
+ * Calls the deployed GuardControllerDefinitions contract for specs and encoding.
+ * Single source of truth: action names, formats, and encoding come from the contract.
+ * @see contracts/core/execution/lib/definitions/GuardControllerDefinitions.sol
+ * @see scripts/sanity/guard-controller/base-test.cjs createGuardConfigBatchMetaTx (actionsArray = [actionType, data] per element)
  */
-import { Hex } from 'viem';
+import { type Address, type Hex, type PublicClient } from 'viem';
 import type { GuardConfigAction } from '../../types/core.execution.index';
+import type { TxAction } from '../../types/lib.index';
 /**
  * Builds execution params for executeGuardConfigBatch((uint8,bytes)[]).
- * Equivalent to GuardControllerDefinitions.guardConfigBatchExecutionParams in Solidity.
- * Same encoding as web3.eth.abi.encodeParameter('tuple(uint8,bytes)[]', actionsArray).
+ * Encoding matches GuardControllerDefinitions.sol guardConfigBatchExecutionParams (abi.encode(actions)).
+ * Same format as scripts/sanity (direct contract tests); single source of truth in this module.
  */
-export declare function guardConfigBatchExecutionParams(actions: GuardConfigAction[]): Hex;
+export declare function guardConfigBatchExecutionParams(_client: PublicClient, _definitionAddress: Address, actions: GuardConfigAction[]): Hex;
+/**
+ * Returns all available GuardConfig action types and their ABI decode formats from the contract.
+ * Index i in both arrays corresponds to GuardConfigActionType enum value i.
+ */
+export declare function getGuardConfigActionSpecs(client: PublicClient, definitionAddress: Address): Promise<{
+    actionNames: string[];
+    formats: string[];
+}>;
+/**
+ * Encodes data for ADD_TARGET_TO_WHITELIST. Matches GuardControllerDefinitions.sol encodeAddTargetToWhitelist (abi.encode(functionSelector, target)).
+ */
+export declare function encodeAddTargetToWhitelist(_client: PublicClient, _definitionAddress: Address, functionSelector: Hex, target: Address): Hex;
+/**
+ * Encodes data for REMOVE_TARGET_FROM_WHITELIST. Matches GuardControllerDefinitions.sol encodeRemoveTargetFromWhitelist (abi.encode(functionSelector, target)).
+ */
+export declare function encodeRemoveTargetFromWhitelist(_client: PublicClient, _definitionAddress: Address, functionSelector: Hex, target: Address): Hex;
+/**
+ * Encodes data for REGISTER_FUNCTION. Matches GuardControllerDefinitions.sol encodeRegisterFunction (abi.encode(functionSignature, operationName, supportedActions)).
+ * supportedActions: array of TxAction enum values (e.g. TxAction.EXECUTE_TIME_DELAY_REQUEST).
+ */
+export declare function encodeRegisterFunction(_client: PublicClient, _definitionAddress: Address, functionSignature: string, operationName: string, supportedActions: TxAction[]): Hex;
+/**
+ * Encodes data for UNREGISTER_FUNCTION. Matches GuardControllerDefinitions.sol encodeUnregisterFunction (abi.encode(functionSelector, safeRemoval)).
+ */
+export declare function encodeUnregisterFunction(_client: PublicClient, _definitionAddress: Address, functionSelector: Hex, safeRemoval: boolean): Hex;
 //# sourceMappingURL=GuardControllerDefinitions.d.ts.map

package/dist/lib/definitions/GuardControllerDefinitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GuardControllerDefinitions.d.ts","sourceRoot":"","sources":["../../../lib/definitions/GuardControllerDefinitions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,GAAG,EAA2C,MAAM,MAAM,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAE1E;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,GAAG,CASjF"}
+{"version":3,"file":"GuardControllerDefinitions.d.ts","sourceRoot":"","sources":["../../../lib/definitions/GuardControllerDefinitions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAY,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,YAAY,EAAuD,MAAM,MAAM,CAAC;AAEhI,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAWtD;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,OAAO,EAC3B,OAAO,EAAE,iBAAiB,EAAE,GAC3B,GAAG,CASL;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,YAAY,EACpB,iBAAiB,EAAE,OAAO,GACzB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAOvD;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,OAAO,EAC3B,gBAAgB,EAAE,GAAG,EACrB,MAAM,EAAE,OAAO,GACd,GAAG,CAEL;AAED;;GAEG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,OAAO,EAC3B,gBAAgB,EAAE,GAAG,EACrB,MAAM,EAAE,OAAO,GACd,GAAG,CAEL;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,OAAO,EAC3B,iBAAiB,EAAE,MAAM,EACzB,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,QAAQ,EAAE,GAC3B,GAAG,CAML;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,OAAO,EAC3B,gBAAgB,EAAE,GAAG,EACrB,WAAW,EAAE,OAAO,GACnB,GAAG,CAEL"}

package/dist/lib/definitions/GuardControllerDefinitions.js

@@ -1,20 +1,72 @@
 /**
  * GuardControllerDefinitions
- * Pure helpers for building execution params for GuardController operations.
- * Mirrors GuardControllerDefinitions.sol; no contract calls.
- * Uses parseAbiParameters + array-of-[actionType,data] to match web3 encodeParameter('tuple(uint8,bytes)[]', [[actionType, data], ...]).
+ * Calls the deployed GuardControllerDefinitions contract for specs and encoding.
+ * Single source of truth: action names, formats, and encoding come from the contract.
+ * @see contracts/core/execution/lib/definitions/GuardControllerDefinitions.sol
+ * @see scripts/sanity/guard-controller/base-test.cjs createGuardConfigBatchMetaTx (actionsArray = [actionType, data] per element)
  */
-import { encodeAbiParameters, parseAbiParameters } from 'viem';
+import { bytesToHex, encodeAbiParameters, parseAbiParameters } from 'viem';
+import GuardControllerDefinitionsAbi from '../../abi/GuardControllerDefinitions.abi.json';
+const ABI = GuardControllerDefinitionsAbi;
+/** Normalize bytes to ABI Hex (0x-prefixed); empty -> '0x'. */
+function normalizeData(data) {
+    if (data === undefined || data === null)
+        return '0x';
+    if (typeof data === 'string')
+        return data.startsWith('0x') ? data : `0x${data}`;
+    return bytesToHex(data);
+}
 /**
  * Builds execution params for executeGuardConfigBatch((uint8,bytes)[]).
- * Equivalent to GuardControllerDefinitions.guardConfigBatchExecutionParams in Solidity.
- * Same encoding as web3.eth.abi.encodeParameter('tuple(uint8,bytes)[]', actionsArray).
+ * Encoding matches GuardControllerDefinitions.sol guardConfigBatchExecutionParams (abi.encode(actions)).
+ * Same format as scripts/sanity (direct contract tests); single source of truth in this module.
  */
-export function guardConfigBatchExecutionParams(actions) {
-    const actionsArray = actions.map((a) => ({
+export function guardConfigBatchExecutionParams(_client, _definitionAddress, actions) {
+    const actionsTuple = actions.map((a) => ({
         actionType: Number(a.actionType),
-        data: a.data
+        data: normalizeData(a.data)
+    }));
+    return encodeAbiParameters(parseAbiParameters('(uint8 actionType, bytes data)[]'), [actionsTuple]);
+}
+/**
+ * Returns all available GuardConfig action types and their ABI decode formats from the contract.
+ * Index i in both arrays corresponds to GuardConfigActionType enum value i.
+ */
+export async function getGuardConfigActionSpecs(client, definitionAddress) {
+    const result = (await client.readContract({
+        address: definitionAddress,
+        abi: ABI,
+        functionName: 'getGuardConfigActionSpecs'
     }));
-    return encodeAbiParameters(parseAbiParameters('(uint8 actionType, bytes data)[]'), [actionsArray]);
+    return { actionNames: result[0], formats: result[1] };
+}
+/**
+ * Encodes data for ADD_TARGET_TO_WHITELIST. Matches GuardControllerDefinitions.sol encodeAddTargetToWhitelist (abi.encode(functionSelector, target)).
+ */
+export function encodeAddTargetToWhitelist(_client, _definitionAddress, functionSelector, target) {
+    return encodeAbiParameters(parseAbiParameters('bytes4, address'), [functionSelector, target]);
+}
+/**
+ * Encodes data for REMOVE_TARGET_FROM_WHITELIST. Matches GuardControllerDefinitions.sol encodeRemoveTargetFromWhitelist (abi.encode(functionSelector, target)).
+ */
+export function encodeRemoveTargetFromWhitelist(_client, _definitionAddress, functionSelector, target) {
+    return encodeAbiParameters(parseAbiParameters('bytes4, address'), [functionSelector, target]);
+}
+/**
+ * Encodes data for REGISTER_FUNCTION. Matches GuardControllerDefinitions.sol encodeRegisterFunction (abi.encode(functionSignature, operationName, supportedActions)).
+ * supportedActions: array of TxAction enum values (e.g. TxAction.EXECUTE_TIME_DELAY_REQUEST).
+ */
+export function encodeRegisterFunction(_client, _definitionAddress, functionSignature, operationName, supportedActions) {
+    return encodeAbiParameters(parseAbiParameters('string, string, uint8[]'), [
+        functionSignature,
+        operationName,
+        supportedActions.map((a) => Number(a))
+    ]);
+}
+/**
+ * Encodes data for UNREGISTER_FUNCTION. Matches GuardControllerDefinitions.sol encodeUnregisterFunction (abi.encode(functionSelector, safeRemoval)).
+ */
+export function encodeUnregisterFunction(_client, _definitionAddress, functionSelector, safeRemoval) {
+    return encodeAbiParameters(parseAbiParameters('bytes4, bool'), [functionSelector, safeRemoval]);
 }
 //# sourceMappingURL=GuardControllerDefinitions.js.map

package/dist/lib/definitions/GuardControllerDefinitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"GuardControllerDefinitions.js","sourceRoot":"","sources":["../../../lib/definitions/GuardControllerDefinitions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAO,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AAGpE;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAA4B;IAC1E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAChC,IAAI,EAAE,CAAC,CAAC,IAAI;KACb,CAAC,CAAC,CAAC;IACJ,OAAO,mBAAmB,CACxB,kBAAkB,CAAC,kCAAkC,CAAC,EACtD,CAAC,YAAY,CAAC,CACR,CAAC;AACX,CAAC"}
+{"version":3,"file":"GuardControllerDefinitions.js","sourceRoot":"","sources":["../../../lib/definitions/GuardControllerDefinitions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAuD,UAAU,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AAChI,OAAO,6BAA6B,MAAM,+CAA+C,CAAC;AAI1F,MAAM,GAAG,GAAG,6BAAoC,CAAC;AAEjD,+DAA+D;AAC/D,SAAS,aAAa,CAAC,IAAyC;IAC9D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAY,CAAC,CAAC,CAAE,KAAK,IAAI,EAAU,CAAC;IAClG,OAAO,UAAU,CAAC,IAAkB,CAAQ,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAAqB,EACrB,kBAA2B,EAC3B,OAA4B;IAE5B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAChC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;KAC5B,CAAC,CAAC,CAAC;IACJ,OAAO,mBAAmB,CACxB,kBAAkB,CAAC,kCAAkC,CAAC,EACtD,CAAC,YAAY,CAAC,CACR,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAoB,EACpB,iBAA0B;IAE1B,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC;QACxC,OAAO,EAAE,iBAAiB;QAC1B,GAAG,EAAE,GAAG;QACR,YAAY,EAAE,2BAA2B;KAC1C,CAAC,CAAyB,CAAC;IAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAqB,EACrB,kBAA2B,EAC3B,gBAAqB,EACrB,MAAe;IAEf,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAQ,CAAC;AACvG,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAAqB,EACrB,kBAA2B,EAC3B,gBAAqB,EACrB,MAAe;IAEf,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAQ,CAAC;AACvG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAqB,EACrB,kBAA2B,EAC3B,iBAAyB,EACzB,aAAqB,EACrB,gBAA4B;IAE5B,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,EAAE;QACxE,iBAAiB;QACjB,aAAa;QACb,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;KACvC,CAAQ,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAqB,EACrB,kBAA2B,EAC3B,gBAAqB,EACrB,WAAoB;IAEpB,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAQ,CAAC;AACzG,CAAC"}

package/dist/lib/definitions/RuntimeRBACDefinitions.d.ts

@@ -1,15 +1,56 @@
 /**
  * RuntimeRBACDefinitions
- * Pure helpers for building execution params for RuntimeRBAC operations.
- * Mirrors RuntimeRBACDefinitions.sol; no contract calls.
- * Uses parseAbiParameters + array-of-[actionType,data] to match web3 encodeParameter('tuple(uint8,bytes)[]', ...).
+ * Calls the deployed RuntimeRBACDefinitions contract for specs and encoding.
+ * Single source of truth: action names, formats, and encoding come from the contract.
+ * @see contracts/core/access/lib/definitions/RuntimeRBACDefinitions.sol
  */
-import { Hex } from 'viem';
+import { type Address, type Hex, type PublicClient } from 'viem';
 import type { RoleConfigAction } from '../../types/core.access.index';
+/**
+ * FunctionPermission shape for encodeAddFunctionToRole.
+ * Matches Solidity EngineBlox.FunctionPermission (functionSelector, grantedActionsBitmap, handlerForSelectors).
+ */
+export interface FunctionPermissionForEncoding {
+    functionSelector: Hex;
+    grantedActionsBitmap: number;
+    handlerForSelectors: readonly Hex[];
+}
 /**
  * Builds execution params for executeRoleConfigBatch((uint8,bytes)[]).
- * Equivalent to RuntimeRBACDefinitions.roleConfigBatchExecutionParams in Solidity.
- * Same encoding as web3.eth.abi.encodeParameter('tuple(uint8,bytes)[]', actionsArray).
+ * Encoding matches RuntimeRBACDefinitions.sol roleConfigBatchExecutionParams (abi.encode(actions)).
+ * Same format as scripts/sanity (direct contract tests); single source of truth in this module.
+ */
+export declare function roleConfigBatchExecutionParams(_client: PublicClient, _definitionAddress: Address, actions: RoleConfigAction[]): Hex;
+/**
+ * Returns all available RoleConfig action types and their ABI decode formats from the contract.
+ * Index i in both arrays corresponds to RoleConfigActionType enum value i.
+ */
+export declare function getRoleConfigActionSpecs(client: PublicClient, definitionAddress: Address): Promise<{
+    actionNames: string[];
+    formats: string[];
+}>;
+/**
+ * Encodes data for CREATE_ROLE. Matches RuntimeRBACDefinitions.sol encodeCreateRole (abi.encode(roleName, maxWallets)).
+ */
+export declare function encodeCreateRole(_client: PublicClient, _definitionAddress: Address, roleName: string, maxWallets: bigint): Hex;
+/**
+ * Encodes data for REMOVE_ROLE. Matches RuntimeRBACDefinitions.sol encodeRemoveRole (abi.encode(roleHash)).
+ */
+export declare function encodeRemoveRole(_client: PublicClient, _definitionAddress: Address, roleHash: Hex): Hex;
+/**
+ * Encodes data for ADD_WALLET. Matches RuntimeRBACDefinitions.sol encodeAddWallet (abi.encode(roleHash, wallet)).
+ */
+export declare function encodeAddWallet(_client: PublicClient, _definitionAddress: Address, roleHash: Hex, wallet: Address): Hex;
+/**
+ * Encodes data for REVOKE_WALLET. Matches RuntimeRBACDefinitions.sol encodeRevokeWallet (abi.encode(roleHash, wallet)).
+ */
+export declare function encodeRevokeWallet(_client: PublicClient, _definitionAddress: Address, roleHash: Hex, wallet: Address): Hex;
+/**
+ * Encodes data for ADD_FUNCTION_TO_ROLE. Matches RuntimeRBACDefinitions.sol encodeAddFunctionToRole (abi.encode(roleHash, functionPermission)).
+ */
+export declare function encodeAddFunctionToRole(_client: PublicClient, _definitionAddress: Address, roleHash: Hex, functionPermission: FunctionPermissionForEncoding): Hex;
+/**
+ * Encodes data for REMOVE_FUNCTION_FROM_ROLE. Matches RuntimeRBACDefinitions.sol encodeRemoveFunctionFromRole (abi.encode(roleHash, functionSelector)).
  */
-export declare function roleConfigBatchExecutionParams(actions: RoleConfigAction[]): Hex;
+export declare function encodeRemoveFunctionFromRole(_client: PublicClient, _definitionAddress: Address, roleHash: Hex, functionSelector: Hex): Hex;
 //# sourceMappingURL=RuntimeRBACDefinitions.d.ts.map

package/dist/lib/definitions/RuntimeRBACDefinitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RuntimeRBACDefinitions.d.ts","sourceRoot":"","sources":["../../../lib/definitions/RuntimeRBACDefinitions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,GAAG,EAA2C,MAAM,MAAM,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEtE;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAS/E"}
+{"version":3,"file":"RuntimeRBACDefinitions.d.ts","sourceRoot":"","sources":["../../../lib/definitions/RuntimeRBACDefinitions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAY,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,YAAY,EAAuD,MAAM,MAAM,CAAC;AAEhI,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAWtE;;;GAGG;AACH,MAAM,WAAW,6BAA6B;IAC5C,gBAAgB,EAAE,GAAG,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,SAAS,GAAG,EAAE,CAAC;CACrC;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,OAAO,EAC3B,OAAO,EAAE,gBAAgB,EAAE,GAC1B,GAAG,CASL;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,YAAY,EACpB,iBAAiB,EAAE,OAAO,GACzB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAOvD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,OAAO,EAC3B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,GAAG,CAEL;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,OAAO,EAC3B,QAAQ,EAAE,GAAG,GACZ,GAAG,CAEL;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,OAAO,EAC3B,QAAQ,EAAE,GAAG,EACb,MAAM,EAAE,OAAO,GACd,GAAG,CAEL;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,OAAO,EAC3B,QAAQ,EAAE,GAAG,EACb,MAAM,EAAE,OAAO,GACd,GAAG,CAEL;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,OAAO,EAC3B,QAAQ,EAAE,GAAG,EACb,kBAAkB,EAAE,6BAA6B,GAChD,GAAG,CAUL;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,YAAY,EACrB,kBAAkB,EAAE,OAAO,EAC3B,QAAQ,EAAE,GAAG,EACb,gBAAgB,EAAE,GAAG,GACpB,GAAG,CAEL"}

package/dist/lib/definitions/RuntimeRBACDefinitions.js

@@ -1,20 +1,83 @@
 /**
  * RuntimeRBACDefinitions
- * Pure helpers for building execution params for RuntimeRBAC operations.
- * Mirrors RuntimeRBACDefinitions.sol; no contract calls.
- * Uses parseAbiParameters + array-of-[actionType,data] to match web3 encodeParameter('tuple(uint8,bytes)[]', ...).
+ * Calls the deployed RuntimeRBACDefinitions contract for specs and encoding.
+ * Single source of truth: action names, formats, and encoding come from the contract.
+ * @see contracts/core/access/lib/definitions/RuntimeRBACDefinitions.sol
  */
-import { encodeAbiParameters, parseAbiParameters } from 'viem';
+import { bytesToHex, encodeAbiParameters, parseAbiParameters } from 'viem';
+import RuntimeRBACDefinitionsAbi from '../../abi/RuntimeRBACDefinitions.abi.json';
+const ABI = RuntimeRBACDefinitionsAbi;
+/** Normalize bytes to ABI Hex (0x-prefixed); empty -> '0x'. */
+function normalizeData(data) {
+    if (data === undefined || data === null)
+        return '0x';
+    if (typeof data === 'string')
+        return data.startsWith('0x') ? data : `0x${data}`;
+    return bytesToHex(data);
+}
 /**
  * Builds execution params for executeRoleConfigBatch((uint8,bytes)[]).
- * Equivalent to RuntimeRBACDefinitions.roleConfigBatchExecutionParams in Solidity.
- * Same encoding as web3.eth.abi.encodeParameter('tuple(uint8,bytes)[]', actionsArray).
+ * Encoding matches RuntimeRBACDefinitions.sol roleConfigBatchExecutionParams (abi.encode(actions)).
+ * Same format as scripts/sanity (direct contract tests); single source of truth in this module.
  */
-export function roleConfigBatchExecutionParams(actions) {
-    const actionsArray = actions.map((a) => ({
+export function roleConfigBatchExecutionParams(_client, _definitionAddress, actions) {
+    const actionsTuple = actions.map((a) => ({
         actionType: Number(a.actionType),
-        data: a.data
+        data: normalizeData(a.data)
+    }));
+    return encodeAbiParameters(parseAbiParameters('(uint8 actionType, bytes data)[]'), [actionsTuple]);
+}
+/**
+ * Returns all available RoleConfig action types and their ABI decode formats from the contract.
+ * Index i in both arrays corresponds to RoleConfigActionType enum value i.
+ */
+export async function getRoleConfigActionSpecs(client, definitionAddress) {
+    const result = (await client.readContract({
+        address: definitionAddress,
+        abi: ABI,
+        functionName: 'getRoleConfigActionSpecs'
     }));
-    return encodeAbiParameters(parseAbiParameters('(uint8 actionType, bytes data)[]'), [actionsArray]);
+    return { actionNames: result[0], formats: result[1] };
+}
+/**
+ * Encodes data for CREATE_ROLE. Matches RuntimeRBACDefinitions.sol encodeCreateRole (abi.encode(roleName, maxWallets)).
+ */
+export function encodeCreateRole(_client, _definitionAddress, roleName, maxWallets) {
+    return encodeAbiParameters(parseAbiParameters('string, uint256'), [roleName, maxWallets]);
+}
+/**
+ * Encodes data for REMOVE_ROLE. Matches RuntimeRBACDefinitions.sol encodeRemoveRole (abi.encode(roleHash)).
+ */
+export function encodeRemoveRole(_client, _definitionAddress, roleHash) {
+    return encodeAbiParameters(parseAbiParameters('bytes32'), [roleHash]);
+}
+/**
+ * Encodes data for ADD_WALLET. Matches RuntimeRBACDefinitions.sol encodeAddWallet (abi.encode(roleHash, wallet)).
+ */
+export function encodeAddWallet(_client, _definitionAddress, roleHash, wallet) {
+    return encodeAbiParameters(parseAbiParameters('bytes32, address'), [roleHash, wallet]);
+}
+/**
+ * Encodes data for REVOKE_WALLET. Matches RuntimeRBACDefinitions.sol encodeRevokeWallet (abi.encode(roleHash, wallet)).
+ */
+export function encodeRevokeWallet(_client, _definitionAddress, roleHash, wallet) {
+    return encodeAbiParameters(parseAbiParameters('bytes32, address'), [roleHash, wallet]);
+}
+/**
+ * Encodes data for ADD_FUNCTION_TO_ROLE. Matches RuntimeRBACDefinitions.sol encodeAddFunctionToRole (abi.encode(roleHash, functionPermission)).
+ */
+export function encodeAddFunctionToRole(_client, _definitionAddress, roleHash, functionPermission) {
+    const tuple = [
+        functionPermission.functionSelector,
+        functionPermission.grantedActionsBitmap,
+        [...functionPermission.handlerForSelectors]
+    ];
+    return encodeAbiParameters(parseAbiParameters('bytes32, (bytes4, uint16, bytes4[])'), [roleHash, tuple]);
+}
+/**
+ * Encodes data for REMOVE_FUNCTION_FROM_ROLE. Matches RuntimeRBACDefinitions.sol encodeRemoveFunctionFromRole (abi.encode(roleHash, functionSelector)).
+ */
+export function encodeRemoveFunctionFromRole(_client, _definitionAddress, roleHash, functionSelector) {
+    return encodeAbiParameters(parseAbiParameters('bytes32, bytes4'), [roleHash, functionSelector]);
 }
 //# sourceMappingURL=RuntimeRBACDefinitions.js.map

package/dist/lib/definitions/RuntimeRBACDefinitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"RuntimeRBACDefinitions.js","sourceRoot":"","sources":["../../../lib/definitions/RuntimeRBACDefinitions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAO,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AAGpE;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAA2B;IACxE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAChC,IAAI,EAAE,CAAC,CAAC,IAAI;KACb,CAAC,CAAC,CAAC;IACJ,OAAO,mBAAmB,CACxB,kBAAkB,CAAC,kCAAkC,CAAC,EACtD,CAAC,YAAY,CAAC,CACR,CAAC;AACX,CAAC"}
+{"version":3,"file":"RuntimeRBACDefinitions.js","sourceRoot":"","sources":["../../../lib/definitions/RuntimeRBACDefinitions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAuD,UAAU,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AAChI,OAAO,yBAAyB,MAAM,2CAA2C,CAAC;AAGlF,MAAM,GAAG,GAAG,yBAAgC,CAAC;AAE7C,+DAA+D;AAC/D,SAAS,aAAa,CAAC,IAAyC;IAC9D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAY,CAAC,CAAC,CAAE,KAAK,IAAI,EAAU,CAAC;IAClG,OAAO,UAAU,CAAC,IAAkB,CAAQ,CAAC;AAC/C,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAqB,EACrB,kBAA2B,EAC3B,OAA2B;IAE3B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAChC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;KAC5B,CAAC,CAAC,CAAC;IACJ,OAAO,mBAAmB,CACxB,kBAAkB,CAAC,kCAAkC,CAAC,EACtD,CAAC,YAAY,CAAC,CACR,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAoB,EACpB,iBAA0B;IAE1B,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC;QACxC,OAAO,EAAE,iBAAiB;QAC1B,GAAG,EAAE,GAAG;QACR,YAAY,EAAE,0BAA0B;KACzC,CAAC,CAAyB,CAAC;IAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAqB,EACrB,kBAA2B,EAC3B,QAAgB,EAChB,UAAkB;IAElB,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAQ,CAAC;AACnG,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAqB,EACrB,kBAA2B,EAC3B,QAAa;IAEb,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAQ,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAqB,EACrB,kBAA2B,EAC3B,QAAa,EACb,MAAe;IAEf,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAQ,CAAC;AAChG,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAqB,EACrB,kBAA2B,EAC3B,QAAa,EACb,MAAe;IAEf,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAQ,CAAC;AAChG,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAqB,EACrB,kBAA2B,EAC3B,QAAa,EACb,kBAAiD;IAEjD,MAAM,KAAK,GAAkC;QAC3C,kBAAkB,CAAC,gBAAgB;QACnC,kBAAkB,CAAC,oBAAoB;QACvC,CAAC,GAAG,kBAAkB,CAAC,mBAAmB,CAAC;KAC5C,CAAC;IACF,OAAO,mBAAmB,CACxB,kBAAkB,CAAC,qCAAqC,CAAC,EACzD,CAAC,QAAQ,EAAE,KAAK,CAAC,CACX,CAAC;AACX,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAqB,EACrB,kBAA2B,EAC3B,QAAa,EACb,gBAAqB;IAErB,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAQ,CAAC;AACzG,CAAC"}

package/dist/lib/definitions/SecureOwnableDefinitions.d.ts

@@ -1,17 +1,22 @@
 /**
  * SecureOwnableDefinitions
- * Pure helpers for building execution params for SecureOwnable operations.
- * Mirrors SecureOwnableDefinitions.sol; no contract calls.
+ * Calls the deployed SecureOwnableDefinitions contract for execution params.
+ * Single source of truth: encoding is done by the contract to avoid TypeScript/Solidity drift.
+ * @see contracts/core/security/lib/definitions/SecureOwnableDefinitions.sol
  */
-import { Address, Hex } from 'viem';
+import { type Address, type Hex, type PublicClient } from 'viem';
 /**
- * Builds execution params for executeRecoveryUpdate(address).
+ * Builds execution params for executeRecoveryUpdate(address) by calling the definition contract.
  * Equivalent to SecureOwnableDefinitions.updateRecoveryExecutionParams in Solidity.
+ * @param client Viem public client
+ * @param definitionAddress Deployed SecureOwnableDefinitions library address (e.g. from deployed-addresses.json)
  */
-export declare function updateRecoveryExecutionParams(newRecoveryAddress: Address): Hex;
+export declare function updateRecoveryExecutionParams(client: PublicClient, definitionAddress: Address, newRecoveryAddress: Address): Promise<Hex>;
 /**
- * Builds execution params for executeTimeLockUpdate(uint256).
+ * Builds execution params for executeTimeLockUpdate(uint256) by calling the definition contract.
  * Equivalent to SecureOwnableDefinitions.updateTimeLockExecutionParams in Solidity.
+ * @param client Viem public client
+ * @param definitionAddress Deployed SecureOwnableDefinitions library address
  */
-export declare function updateTimeLockExecutionParams(newTimeLockPeriodSec: bigint): Hex;
+export declare function updateTimeLockExecutionParams(client: PublicClient, definitionAddress: Address, newTimeLockPeriodSec: bigint): Promise<Hex>;
 //# sourceMappingURL=SecureOwnableDefinitions.d.ts.map

package/dist/lib/definitions/SecureOwnableDefinitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SecureOwnableDefinitions.d.ts","sourceRoot":"","sources":["../../../lib/definitions/SecureOwnableDefinitions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAuB,MAAM,MAAM,CAAC;AAEzD;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,kBAAkB,EAAE,OAAO,GAAG,GAAG,CAK9E;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,oBAAoB,EAAE,MAAM,GAAG,GAAG,CAK/E"}
+{"version":3,"file":"SecureOwnableDefinitions.d.ts","sourceRoot":"","sources":["../../../lib/definitions/SecureOwnableDefinitions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,YAAY,EAAE,MAAM,MAAM,CAAC;AAKjE;;;;;GAKG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,YAAY,EACpB,iBAAiB,EAAE,OAAO,EAC1B,kBAAkB,EAAE,OAAO,GAC1B,OAAO,CAAC,GAAG,CAAC,CAOd;AAED;;;;;GAKG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,YAAY,EACpB,iBAAiB,EAAE,OAAO,EAC1B,oBAAoB,EAAE,MAAM,GAC3B,OAAO,CAAC,GAAG,CAAC,CAOd"}

package/dist/lib/definitions/SecureOwnableDefinitions.js

@@ -1,21 +1,37 @@
 /**
  * SecureOwnableDefinitions
- * Pure helpers for building execution params for SecureOwnable operations.
- * Mirrors SecureOwnableDefinitions.sol; no contract calls.
+ * Calls the deployed SecureOwnableDefinitions contract for execution params.
+ * Single source of truth: encoding is done by the contract to avoid TypeScript/Solidity drift.
+ * @see contracts/core/security/lib/definitions/SecureOwnableDefinitions.sol
  */
-import { encodeAbiParameters } from 'viem';
+import SecureOwnableDefinitionsAbi from '../../abi/SecureOwnableDefinitions.abi.json';
+const ABI = SecureOwnableDefinitionsAbi;
 /**
- * Builds execution params for executeRecoveryUpdate(address).
+ * Builds execution params for executeRecoveryUpdate(address) by calling the definition contract.
  * Equivalent to SecureOwnableDefinitions.updateRecoveryExecutionParams in Solidity.
+ * @param client Viem public client
+ * @param definitionAddress Deployed SecureOwnableDefinitions library address (e.g. from deployed-addresses.json)
  */
-export function updateRecoveryExecutionParams(newRecoveryAddress) {
-    return encodeAbiParameters([{ name: 'newRecoveryAddress', type: 'address' }], [newRecoveryAddress]);
+export async function updateRecoveryExecutionParams(client, definitionAddress, newRecoveryAddress) {
+    return client.readContract({
+        address: definitionAddress,
+        abi: ABI,
+        functionName: 'updateRecoveryExecutionParams',
+        args: [newRecoveryAddress]
+    });
 }
 /**
- * Builds execution params for executeTimeLockUpdate(uint256).
+ * Builds execution params for executeTimeLockUpdate(uint256) by calling the definition contract.
  * Equivalent to SecureOwnableDefinitions.updateTimeLockExecutionParams in Solidity.
+ * @param client Viem public client
+ * @param definitionAddress Deployed SecureOwnableDefinitions library address
  */
-export function updateTimeLockExecutionParams(newTimeLockPeriodSec) {
-    return encodeAbiParameters([{ name: 'newTimeLockPeriodSec', type: 'uint256' }], [newTimeLockPeriodSec]);
+export async function updateTimeLockExecutionParams(client, definitionAddress, newTimeLockPeriodSec) {
+    return client.readContract({
+        address: definitionAddress,
+        abi: ABI,
+        functionName: 'updateTimeLockExecutionParams',
+        args: [newTimeLockPeriodSec]
+    });
 }
 //# sourceMappingURL=SecureOwnableDefinitions.js.map