@cmdoss/suipay-mcp 0.2.1 → 0.2.2-dev.1

package/dist/personal-message-5PF4KVLF.js

@@ -1,284 +0,0 @@
-import {
-  SPEND_ACCOUNT_DEBIT_FUNCTIONS
-} from "./chunk-A3JIIDYT.js";
-
-// ../../src/gateway/sponsor/personal-message.ts
-import { createHash, randomBytes } from "crypto";
-import { bcs } from "@mysten/sui/bcs";
-import {
-  isValidPersonalMessageSignature,
-  verifyPersonalMessageSignature
-} from "@mysten/sui/verify";
-import {
-  fromBase64,
-  normalizeSuiAddress,
-  toBase64
-} from "@mysten/sui/utils";
-import { Transaction } from "@mysten/sui/transactions";
-var SPONSOR_PERSONAL_MESSAGE_DOMAIN = "suipay:sponsor-personal-message:v1";
-var SPONSOR_PERSONAL_MESSAGE_DEFAULT_TTL_MS = 6e4;
-var SPONSOR_PERSONAL_MESSAGE_DEFAULT_GAS_BUDGET_MIST = 50000000n;
-function encodeSponsorPersonalMessagePayload(payload) {
-  if (payload.domain !== SPONSOR_PERSONAL_MESSAGE_DOMAIN) {
-    throw new Error(`domain must be ${SPONSOR_PERSONAL_MESSAGE_DOMAIN}`);
-  }
-  if (payload.txKindHash.length !== 32) {
-    throw new Error("txKindHash must be 32 bytes");
-  }
-  if (!payload.nonce.trim()) throw new Error("nonce is required");
-  if (!Number.isFinite(payload.expiryMs) || payload.expiryMs <= 0) {
-    throw new Error("expiryMs must be a positive finite number");
-  }
-  if (!payload.requestId.trim()) throw new Error("requestId is required");
-  if (!payload.network.trim()) throw new Error("network is required");
-  const parts = [];
-  const push = (u) => parts.push(u);
-  push(
-    bcs.vector(bcs.u8()).serialize([...Buffer.from(payload.domain, "utf8")]).toBytes()
-  );
-  push(
-    bcs.vector(bcs.u8()).serialize([...Buffer.from(payload.nonce, "utf8")]).toBytes()
-  );
-  push(bcs.u64().serialize(BigInt(payload.expiryMs)).toBytes());
-  push(bcs.Address.serialize(normalizeSuiAddress(payload.delegate)).toBytes());
-  push(bcs.Address.serialize(normalizeSuiAddress(payload.poolId)).toBytes());
-  push(bcs.Address.serialize(normalizeSuiAddress(payload.grantId)).toBytes());
-  push(
-    bcs.vector(bcs.u8()).serialize([...Buffer.from(payload.network, "utf8")]).toBytes()
-  );
-  push(bcs.Address.serialize(normalizeSuiAddress(payload.packageId)).toBytes());
-  push(
-    bcs.vector(bcs.u8()).serialize([...Buffer.from(payload.requestId, "utf8")]).toBytes()
-  );
-  push(bcs.vector(bcs.u8()).serialize([...payload.txKindHash]).toBytes());
-  return Buffer.concat(parts.map((p) => Buffer.from(p)));
-}
-function hashTransactionKindBytes(kindBytes) {
-  const raw = typeof kindBytes === "string" ? fromBase64(kindBytes) : kindBytes;
-  return createHash("sha256").update(raw).digest();
-}
-function txKindHashHex(kindBytes) {
-  return Buffer.from(hashTransactionKindBytes(kindBytes)).toString("hex");
-}
-function buildSponsorPersonalMessagePayload(input) {
-  return {
-    domain: SPONSOR_PERSONAL_MESSAGE_DOMAIN,
-    nonce: input.nonce,
-    expiryMs: input.expiryMs,
-    delegate: normalizeSuiAddress(input.delegate),
-    poolId: normalizeSuiAddress(input.poolId),
-    grantId: normalizeSuiAddress(input.grantId),
-    network: input.network,
-    packageId: normalizeSuiAddress(input.packageId),
-    requestId: input.requestId,
-    txKindHash: hashTransactionKindBytes(input.transactionKindBytes)
-  };
-}
-async function verifySponsorPersonalMessageSignature(input) {
-  try {
-    const expected = normalizeSuiAddress(input.expectedDelegate);
-    const encoded = encodeSponsorPersonalMessagePayload(input.payload);
-    const addressMatches = normalizeSuiAddress(input.payload.delegate) === expected;
-    if (!addressMatches) {
-      return { ok: false, reason: "payload_delegate_mismatch" };
-    }
-    try {
-      const publicKey = await verifyPersonalMessageSignature(
-        encoded,
-        input.signature,
-        { address: expected }
-      );
-      const derived = publicKey.toSuiAddress();
-      if (normalizeSuiAddress(derived) !== expected) {
-        return { ok: false, reason: "address_derivation_mismatch" };
-      }
-      return { ok: true, address: expected };
-    } catch {
-      const ok = await isValidPersonalMessageSignature(
-        encoded,
-        input.signature,
-        { address: expected }
-      );
-      if (!ok) return { ok: false, reason: "bad_signature" };
-      return { ok: true, address: expected };
-    }
-  } catch {
-    return { ok: false, reason: "bad_signature" };
-  }
-}
-function assertPersonalMessageKindIsPermittedPay(input) {
-  const allowed = new Set(
-    input.allowedFunctions ?? SPEND_ACCOUNT_DEBIT_FUNCTIONS
-  );
-  let data;
-  try {
-    data = Transaction.fromKind(
-      fromBase64(input.transactionKindBytes)
-    ).getData();
-  } catch {
-    return { ok: false, reason: "kind_invalid" };
-  }
-  if (JSON.stringify(data.commands).includes('"GasCoin"')) {
-    return { ok: false, reason: "kind_gas_coin" };
-  }
-  const commands = data.commands ?? [];
-  if (commands.length !== 1) {
-    return { ok: false, reason: "kind_extra_commands" };
-  }
-  const cmd = commands[0];
-  if (cmd.$kind !== "MoveCall") {
-    return { ok: false, reason: "kind_not_move_call" };
-  }
-  const move = cmd.MoveCall;
-  if (!move) return { ok: false, reason: "kind_missing_move_call" };
-  const pkg = normalizeSuiAddress(String(move.package));
-  const expectedPkg = normalizeSuiAddress(input.packageId);
-  if (pkg !== expectedPkg) {
-    return { ok: false, reason: "kind_package_mismatch" };
-  }
-  if (String(move.module) !== "spend_account") {
-    return { ok: false, reason: "kind_module_not_shared_pool" };
-  }
-  const fn = String(move.function);
-  if (!allowed.has(fn)) {
-    return { ok: false, reason: "kind_function_not_permitted" };
-  }
-  const args = move.arguments ?? [];
-  if (args.length < 2) {
-    return { ok: false, reason: "kind_args_incomplete" };
-  }
-  const poolObj = objectIdFromArg(args[0], data.inputs);
-  const grantObj = objectIdFromArg(args[1], data.inputs);
-  if (!poolObj || !grantObj) {
-    return { ok: false, reason: "kind_object_unresolved" };
-  }
-  if (normalizeSuiAddress(poolObj) !== normalizeSuiAddress(input.poolObjectId)) {
-    return { ok: false, reason: "kind_pool_mismatch" };
-  }
-  if (normalizeSuiAddress(grantObj) !== normalizeSuiAddress(input.grantObjectId)) {
-    return { ok: false, reason: "kind_grant_mismatch" };
-  }
-  return { ok: true, functionName: String(move.function) };
-}
-function assertPersonalMessageDeploymentBinding(input) {
-  const wantNet = input.expectedNetwork.trim().toLowerCase();
-  const gotNet = input.network.trim().toLowerCase();
-  if (!wantNet || gotNet !== wantNet) {
-    return { ok: false, reason: "network_mismatch" };
-  }
-  try {
-    if (normalizeSuiAddress(input.packageId) !== normalizeSuiAddress(input.expectedPackageId)) {
-      return { ok: false, reason: "package_mismatch" };
-    }
-  } catch {
-    return { ok: false, reason: "package_mismatch" };
-  }
-  return { ok: true };
-}
-function publicSponsorGrantDenyReason(reason) {
-  const r = reason.toLowerCase();
-  if (r.includes("expired")) return "grant_expired";
-  if (r.includes("revok")) return "grant_revoked";
-  if (r.includes("paus")) return "grant_paused";
-  if (r.includes("not active") || r.includes("not_active")) {
-    return "grant_not_active";
-  }
-  if (r.includes("no active") || r.includes("not found") || r.includes("missing")) {
-    return "grant_not_found";
-  }
-  return "grant_not_authorized";
-}
-function objectIdFromArg(arg, inputs) {
-  if (!arg || typeof arg !== "object") return null;
-  const a = arg;
-  if (a.$kind !== "Input" || !Number.isInteger(a.Input)) return null;
-  const input = inputs?.[Number(a.Input)];
-  if (!input || typeof input !== "object") return null;
-  const value = input;
-  if (value.$kind !== "Object" || !value.Object) return null;
-  const object = value.Object;
-  const id = object.$kind === "SharedObject" ? object.SharedObject?.objectId : object.$kind === "ImmOrOwnedObject" ? object.ImmOrOwnedObject?.objectId : object.$kind === "Receiving" ? object.Receiving?.objectId : void 0;
-  return typeof id === "string" ? id : null;
-}
-function createResolveSponsorGrant(store) {
-  return async (query) => {
-    const found = await store.findActiveGrantForPersonalMessage({
-      grantObjectId: query.grantObjectId,
-      poolObjectId: query.poolObjectId,
-      delegateAddress: query.delegateAddress
-    });
-    if (!found) {
-      return { ok: false, reason: "grant_not_found" };
-    }
-    const expiresAtMs = Number(found.grant.expiresAtMs);
-    if (Number.isFinite(expiresAtMs) && expiresAtMs > 0 && expiresAtMs <= query.nowMs) {
-      return { ok: false, reason: "grant_expired" };
-    }
-    if (found.grant.status === "revoked") {
-      return { ok: false, reason: "grant_revoked" };
-    }
-    if (found.grant.status !== "active") {
-      return { ok: false, reason: "grant_not_active" };
-    }
-    if (found.aggregateStatus === "paused" || found.aggregateStatus === "pausing") {
-      return { ok: false, reason: "grant_paused" };
-    }
-    if (found.aggregateStatus === "revoking" || found.aggregateStatus === "partially_revoked" || found.aggregateStatus === "revoked") {
-      return { ok: false, reason: "grant_revoked" };
-    }
-    if (!found.grant.grantObjectId) {
-      return { ok: false, reason: "grant_not_found" };
-    }
-    return {
-      ok: true,
-      grant: {
-        delegateAddress: normalizeSuiAddress(found.agentAddress),
-        poolObjectId: normalizeSuiAddress(found.grant.poolObjectId),
-        grantObjectId: normalizeSuiAddress(found.grant.grantObjectId),
-        expiresAtMs: Number.isFinite(expiresAtMs) ? expiresAtMs : 0,
-        status: "active"
-      }
-    };
-  };
-}
-function mintSponsorChallengeNonce() {
-  return randomBytes(24).toString("base64url");
-}
-function mintSponsorExecuteToken() {
-  return randomBytes(24).toString("base64url");
-}
-async function signSponsorPersonalMessagePayload(input) {
-  const encoded = encodeSponsorPersonalMessagePayload(input.payload);
-  return input.signPersonalMessage(encoded);
-}
-function bytesToHex(bytes) {
-  return Buffer.from(bytes).toString("hex");
-}
-function hexToBytes32(hex) {
-  const h = hex.replace(/^0x/i, "").toLowerCase();
-  if (!/^[0-9a-f]{64}$/.test(h)) {
-    throw new Error(`expected 32-byte hex, got ${hex}`);
-  }
-  return Buffer.from(h, "hex");
-}
-export {
-  SPONSOR_PERSONAL_MESSAGE_DEFAULT_GAS_BUDGET_MIST,
-  SPONSOR_PERSONAL_MESSAGE_DEFAULT_TTL_MS,
-  SPONSOR_PERSONAL_MESSAGE_DOMAIN,
-  assertPersonalMessageDeploymentBinding,
-  assertPersonalMessageKindIsPermittedPay,
-  buildSponsorPersonalMessagePayload,
-  bytesToHex,
-  createResolveSponsorGrant,
-  encodeSponsorPersonalMessagePayload,
-  fromBase64,
-  hashTransactionKindBytes,
-  hexToBytes32,
-  mintSponsorChallengeNonce,
-  mintSponsorExecuteToken,
-  publicSponsorGrantDenyReason,
-  signSponsorPersonalMessagePayload,
-  toBase64,
-  txKindHashHex,
-  verifySponsorPersonalMessageSignature
-};