@burnt-labs/account-management 1.0.0-alpha.12 → 1.0.0-alpha.13

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @burnt-labs/account-management@1.0.0-alpha.12 build /home/runner/work/xion.js/xion.js/packages/account-management
+> @burnt-labs/account-management@1.0.0-alpha.13 build /home/runner/work/xion.js/xion.js/packages/account-management
 > tsup
 
 CLI Building entry: src/index.ts
@@ -11,11 +11,11 @@
 CJS Build start
 ESM Build start
 DTS Build start
-CJS dist/index.js     77.99 KB
-CJS dist/index.js.map 185.78 KB
-CJS ⚡️ Build success in 411ms
-ESM dist/index.mjs     75.78 KB
-ESM dist/index.mjs.map 185.78 KB
-ESM ⚡️ Build success in 411ms
-DTS ⚡️ Build success in 2682ms
-DTS dist/index.d.ts 52.29 KB
+CJS dist/index.js     79.86 KB
+CJS dist/index.js.map 192.40 KB
+CJS ⚡️ Build success in 483ms
+ESM dist/index.mjs     77.58 KB
+ESM dist/index.mjs.map 192.40 KB
+ESM ⚡️ Build success in 484ms
+DTS ⚡️ Build success in 2775ms
+DTS dist/index.d.ts 53.91 KB

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @burnt-labs/account-management
 
+## 1.0.0-alpha.13
+
+### Minor Changes
+
+- [#383](https://github.com/burnt-labs/xion.js/pull/383) [`8905566`](https://github.com/burnt-labs/xion.js/commit/89055662d91e4a4e1bf64f990f494cee3db3a76c) Thanks [@ertemann](https://github.com/ertemann)! - feat(account-management): add `getMsgTypeUrlForRevoke(authorizationTypeUrl, stakeAuthType?)` pure helper in `grants/` (exported from `@burnt-labs/account-management`). Maps an authz authorization `@type` to the `MsgRevoke`-able msg type URL, including the `StakeAuthorization` delegate/undelegate/redelegate variants (keyed by enum name or numeric proto value). Lets dashboard/xion-app consumers drop their local copies.
+
+### Patch Changes
+
+- [#383](https://github.com/burnt-labs/xion.js/pull/383) [`8905566`](https://github.com/burnt-labs/xion.js/commit/89055662d91e4a4e1bf64f990f494cee3db3a76c) Thanks [@ertemann](https://github.com/ertemann)! - fix(account-management): reject the DaoDao indexer's unindexed-treasury placeholder. The indexer returns `{ admin: null, grantConfigs: {}, … }` (not a 404) for any contract it hasn't indexed; `DaoDaoTreasuryStrategy.validateAllResponse` now rejects when `admin` is null/absent instead of accepting it as a successful empty config. In a racing `CompositeTreasuryStrategy` this lets `DirectQueryTreasuryStrategy` win, so an un-indexed treasury no longer silently degrades the connect screen to "Read access only".
+
+- Updated dependencies [[`8905566`](https://github.com/burnt-labs/xion.js/commit/89055662d91e4a4e1bf64f990f494cee3db3a76c), [`8905566`](https://github.com/burnt-labs/xion.js/commit/89055662d91e4a4e1bf64f990f494cee3db3a76c)]:
+  - @burnt-labs/signers@1.0.0-alpha.10
+  - @burnt-labs/abstraxion-core@1.0.0-alpha.72
+
 ## 1.0.0-alpha.12
 
 ### Major Changes

package/dist/index.d.ts

@@ -263,6 +263,38 @@ declare function buildGrantMessages(params: {
     stake?: boolean;
 }): EncodeObject[];
 
+/**
+ * Authorization → revoke message-type mapping
+ *
+ * Pure helpers for translating an authz authorization `@type` into the message
+ * type URL that a `MsgRevoke` must target in order to remove that grant.
+ */
+/** The authz `@type` for staking authorizations, handled specially below. */
+declare const STAKE_AUTHORIZATION_TYPE_URL = "/cosmos.staking.v1beta1.StakeAuthorization";
+/**
+ * Resolve the message type URL a `MsgRevoke` must target to remove a grant of
+ * the given authorization type.
+ *
+ * `MsgRevoke` identifies a grant by its `msgTypeUrl`, which is *not* the
+ * authorization's own `@type` — e.g. revoking a `SendAuthorization` requires
+ * `msgTypeUrl: "/cosmos.bank.v1beta1.MsgSend"`. This is a pure lookup over the
+ * known authz authorization types.
+ *
+ * For `StakeAuthorization`, the target depends on the authorization's
+ * `authorization_type`; pass it via `stakeAuthType` (accepts either the enum
+ * name, e.g. `"AUTHORIZATION_TYPE_DELEGATE"`, or its numeric proto value, e.g.
+ * `1` / `"1"`).
+ *
+ * For unrecognized inputs — including `GenericAuthorization`, whose revoke
+ * target is its own runtime `msg` field — the `authorizationTypeUrl` is
+ * returned unchanged so callers can decide how to handle it.
+ *
+ * @param authorizationTypeUrl - The authz authorization `@type`
+ * @param stakeAuthType - Staking authorization type (enum name or numeric value); only used for `StakeAuthorization`
+ * @returns The msg type URL to revoke, or `authorizationTypeUrl` if unmapped
+ */
+declare function getMsgTypeUrlForRevoke(authorizationTypeUrl: string, stakeAuthType?: number | string): string;
+
 /**
  * Error for invalid contract grant configuration
  */
@@ -1413,4 +1445,4 @@ declare function isUrlSafe(url: string | undefined): boolean;
  */
 declare function urlsMatch(urlA: string | undefined, urlB: string | undefined): boolean;
 
-export { AccountConnectionParams, AccountCreationConfig, AccountExistenceResult, AccountIndexerConfig, AccountInfo, AccountState, AccountStateAction, AccountStateGuards, AddressValidationError, AllSmartWalletQueryResponse, Allowance, AllowanceResponse, Authenticator, BaseAllowance, CompositeAccountStrategy, CompositeTreasuryStrategy, CompositeTreasuryStrategyOptions, ConnectionOrchestrator, ConnectionOrchestratorConfig, ConnectionResult, ContractValidationResult, ContractsAllowance, CosmosAuthzPermission, CreateCompositeAccountStrategyConfig, CreateCompositeTreasuryStrategyConfig, DENOM_DECIMALS, DENOM_DISPLAY_MAP, DaoDaoTreasuryStrategy, DaoDaoTreasuryStrategyConfig, DirectQueryTreasuryStrategy, EmptyAccountStrategy, FeeGrantValidationError, FeeGrantValidationResult, FormattedDescriptions, GeneratedAuthzGrantMessage, GrantConfig, GrantConfigByTypeUrl, GrantConfigTypeUrlsResponse, GrantCreationParams, GrantCreationResult, IndexerStrategy, InvalidAllowanceError, InvalidContractGrantError, MultiAnyAllowance, NumiaAccountStrategy, PermissionDescription, RpcAccountStrategy, RpcAccountStrategyConfig, SelectedSmartAccount, SessionManager, SessionRestorationResult, SigningClientConfig, SmartAccount$1 as SmartAccount, SmartAccountContractConfig, SmartAccountWithCodeId, SubqueryAccountStrategy, TreasuryConfig, TreasuryContractResponse, TreasuryParams, TreasuryStrategy, UserIndexerConfig, accountStateReducer, buildGrantMessages, checkAccountExists, checkStorageGrants, completeRedirect, connectAccount, convertIndexerConfig, createCompositeAccountStrategy, createCompositeTreasuryStrategy, createGrants, createJwtAuthenticatorIdentifier, deduplicateAccountsById, extractIndexerAuthToken, findBestMatchingAuthenticator, formatCoinArray, formatCoins, formatValidationErrors, formatXionAmount, generateBankGrant, generateContractGrant, generatePermissionDescriptions, generateStakeAndGovGrant, generateTreasuryGrants, getAccountInfoFromRestored, getContractAddress, getDomainAndProtocol, initiateRedirect, isContractGrantConfigValid, isDuplicateAuthenticator, isSelfReferentialGrant, isSessionRestorationError, isSessionRestored, isUrlSafe, isValidTransition, parseCoinString, queryTreasuryContractWithPermissions, restoreSession, urlsMatch, validateActions, validateContractAddressFormat, validateContractGrants, validateContractGrantsOrThrow, validateFeeGrant, validateNewAuthenticator, verifyContractExists };
+export { AccountConnectionParams, AccountCreationConfig, AccountExistenceResult, AccountIndexerConfig, AccountInfo, AccountState, AccountStateAction, AccountStateGuards, AddressValidationError, AllSmartWalletQueryResponse, Allowance, AllowanceResponse, Authenticator, BaseAllowance, CompositeAccountStrategy, CompositeTreasuryStrategy, CompositeTreasuryStrategyOptions, ConnectionOrchestrator, ConnectionOrchestratorConfig, ConnectionResult, ContractValidationResult, ContractsAllowance, CosmosAuthzPermission, CreateCompositeAccountStrategyConfig, CreateCompositeTreasuryStrategyConfig, DENOM_DECIMALS, DENOM_DISPLAY_MAP, DaoDaoTreasuryStrategy, DaoDaoTreasuryStrategyConfig, DirectQueryTreasuryStrategy, EmptyAccountStrategy, FeeGrantValidationError, FeeGrantValidationResult, FormattedDescriptions, GeneratedAuthzGrantMessage, GrantConfig, GrantConfigByTypeUrl, GrantConfigTypeUrlsResponse, GrantCreationParams, GrantCreationResult, IndexerStrategy, InvalidAllowanceError, InvalidContractGrantError, MultiAnyAllowance, NumiaAccountStrategy, PermissionDescription, RpcAccountStrategy, RpcAccountStrategyConfig, STAKE_AUTHORIZATION_TYPE_URL, SelectedSmartAccount, SessionManager, SessionRestorationResult, SigningClientConfig, SmartAccount$1 as SmartAccount, SmartAccountContractConfig, SmartAccountWithCodeId, SubqueryAccountStrategy, TreasuryConfig, TreasuryContractResponse, TreasuryParams, TreasuryStrategy, UserIndexerConfig, accountStateReducer, buildGrantMessages, checkAccountExists, checkStorageGrants, completeRedirect, connectAccount, convertIndexerConfig, createCompositeAccountStrategy, createCompositeTreasuryStrategy, createGrants, createJwtAuthenticatorIdentifier, deduplicateAccountsById, extractIndexerAuthToken, findBestMatchingAuthenticator, formatCoinArray, formatCoins, formatValidationErrors, formatXionAmount, generateBankGrant, generateContractGrant, generatePermissionDescriptions, generateStakeAndGovGrant, generateTreasuryGrants, getAccountInfoFromRestored, getContractAddress, getDomainAndProtocol, getMsgTypeUrlForRevoke, initiateRedirect, isContractGrantConfigValid, isDuplicateAuthenticator, isSelfReferentialGrant, isSessionRestorationError, isSessionRestored, isUrlSafe, isValidTransition, parseCoinString, queryTreasuryContractWithPermissions, restoreSession, urlsMatch, validateActions, validateContractAddressFormat, validateContractGrants, validateContractGrantsOrThrow, validateFeeGrant, validateNewAuthenticator, verifyContractExists };

package/dist/index.js

@@ -652,6 +652,33 @@ function buildGrantMessages(params) {
   return messages;
 }
 
+// src/grants/revoke.ts
+var STAKE_AUTHORIZATION_TYPE_URL = "/cosmos.staking.v1beta1.StakeAuthorization";
+var REVOKE_MSG_TYPE_URL_BY_AUTHORIZATION = {
+  "/cosmos.bank.v1beta1.SendAuthorization": "/cosmos.bank.v1beta1.MsgSend",
+  "/cosmos.gov.v1beta1.VoteAuthorization": "/cosmos.gov.v1beta1.MsgVote",
+  "/cosmos.gov.v1.VoteAuthorization": "/cosmos.gov.v1.MsgVote",
+  "/ibc.applications.transfer.v1.TransferAuthorization": "/ibc.applications.transfer.v1.MsgTransfer",
+  "/cosmwasm.wasm.v1.ContractExecutionAuthorization": "/cosmwasm.wasm.v1.MsgExecuteContract",
+  "/cosmwasm.wasm.v1.ContractMigrationAuthorization": "/cosmwasm.wasm.v1.MsgMigrateContract",
+  "/cosmos.distribution.v1beta1.SetWithdrawAddressAuthorization": "/cosmos.distribution.v1beta1.MsgSetWithdrawAddress"
+};
+var REVOKE_MSG_TYPE_URL_BY_STAKE_AUTH_TYPE = {
+  AUTHORIZATION_TYPE_DELEGATE: "/cosmos.staking.v1beta1.MsgDelegate",
+  "1": "/cosmos.staking.v1beta1.MsgDelegate",
+  AUTHORIZATION_TYPE_UNDELEGATE: "/cosmos.staking.v1beta1.MsgUndelegate",
+  "2": "/cosmos.staking.v1beta1.MsgUndelegate",
+  AUTHORIZATION_TYPE_REDELEGATE: "/cosmos.staking.v1beta1.MsgBeginRedelegate",
+  "3": "/cosmos.staking.v1beta1.MsgBeginRedelegate"
+};
+function getMsgTypeUrlForRevoke(authorizationTypeUrl, stakeAuthType) {
+  if (authorizationTypeUrl === STAKE_AUTHORIZATION_TYPE_URL) {
+    const key = String(stakeAuthType ?? "");
+    return REVOKE_MSG_TYPE_URL_BY_STAKE_AUTH_TYPE[key] ?? authorizationTypeUrl;
+  }
+  return REVOKE_MSG_TYPE_URL_BY_AUTHORIZATION[authorizationTypeUrl] ?? authorizationTypeUrl;
+}
+
 // src/grants/utils/authz.ts
 init_contract_validation();
 var InvalidContractGrantError = class extends Error {
@@ -1017,6 +1044,11 @@ var DaoDaoTreasuryStrategy = class {
       throw new Error("Invalid indexer response: not an object");
     }
     const response = data;
+    if (response.admin == null || typeof response.admin === "string" && response.admin.trim() === "") {
+      throw new Error(
+        "DaoDao indexer has no data for this treasury (admin is null, blank, or missing)"
+      );
+    }
     if (!response.grantConfigs || typeof response.grantConfigs !== "object") {
       throw new Error("Invalid indexer response: missing grantConfigs");
     }
@@ -2363,6 +2395,7 @@ exports.InvalidAllowanceError = InvalidAllowanceError;
 exports.InvalidContractGrantError = InvalidContractGrantError;
 exports.NumiaAccountStrategy = NumiaAccountStrategy;
 exports.RpcAccountStrategy = RpcAccountStrategy;
+exports.STAKE_AUTHORIZATION_TYPE_URL = STAKE_AUTHORIZATION_TYPE_URL;
 exports.SubqueryAccountStrategy = SubqueryAccountStrategy;
 exports.accountStateReducer = accountStateReducer;
 exports.buildGrantMessages = buildGrantMessages;
@@ -2390,6 +2423,7 @@ exports.generateTreasuryGrants = generateTreasuryGrants;
 exports.getAccountInfoFromRestored = getAccountInfoFromRestored;
 exports.getContractAddress = getContractAddress;
 exports.getDomainAndProtocol = getDomainAndProtocol;
+exports.getMsgTypeUrlForRevoke = getMsgTypeUrlForRevoke;
 exports.initiateRedirect = initiateRedirect;
 exports.isContractGrantConfigValid = isContractGrantConfigValid;
 exports.isDuplicateAuthenticator = isDuplicateAuthenticator;