@debridge-finance/borderless-validation-sdk 0.0.0-dev-3dc1a82 → 0.0.1

package/dist/esm/validations/evm-sign712-metamask.js

@@ -1,5 +1,8 @@
 import { ViolationCode, EvmActionKind, EvmActionOperation, } from "../types/index.js";
-import { validateSign712DataPresent, validateSign712Domain, validateSign712Delegator, validateSign712Caveats, } from "./evm-sign712-shared.js";
+import { isWhitelisted } from "../whitelists/types.js";
+import { DELEGATION_MANAGER_CONTRACTS } from "../whitelists/evm/index.js";
+import { addressEquals } from "../helpers/address.js";
+import { classifyCaveats, validateExactExecutionPresence, validateExactExecutionContent, validateTimestampEnforcerValue, } from "./evm-caveats.js";
 const SIGN712_METAMASK_ALLOWED_ACTIONS = [
     EvmActionOperation.Budget,
     EvmActionOperation.Wrap,
@@ -10,28 +13,23 @@ export function validateSign712MetaMaskActions(actions, basePath, realChainId, q
     const violations = [];
     for (let i = 0; i < actions.length; i++) {
         const action = actions[i];
-        if (action.type !== EvmActionKind.Sign712MetaMaskCaveats)
+        if (action.type !== EvmActionKind.Sign712MetaMask)
             continue;
         const actionPath = `${basePath}.requiredActions[${i}]`;
         const data = action.data;
-        // CRITICAL: data structural presence — downstream content checks
-        // assume `data.domain` and `data.message` exist.
-        const presenceErrors = validateSign712DataPresent(data, actionPath);
-        if (presenceErrors.length > 0) {
-            violations.push(...presenceErrors);
+        // CRITICAL: `data` must be present and contain `domain` and `message`
+        if (!data || !data.domain || !data.message) {
+            violations.push({
+                code: ViolationCode.Sign712MetaMaskDomainNameNotDelegationManager,
+                message: `Sign712MetaMask data is missing domain or message`,
+                path: `${actionPath}.data`,
+                actual: data,
+            });
             continue;
         }
-        violations.push(...validateSign712TransactionCalls(action, actionPath), ...validateSign712AllowedActions(action, actionPath), ...validateSign712Domain(data, actionPath, realChainId), 
-        // Delegator: in quote mode we cannot determine the trust source —
-        // skip the check entirely. In execution mode the helper compares
-        // against `srcChainAuthorityAddress` (which may itself be
-        // `undefined` as a defensive check — preserved by passing through).
-        ...(quoteMode
-            ? []
-            : validateSign712Delegator(data, actionPath, realChainId, srcChainAuthorityAddress, "srcChainAuthorityAddress")));
+        violations.push(...validateSign712TransactionCalls(action, actionPath), ...validateSign712AllowedActions(action, actionPath), ...validateSign712Domain(data, actionPath, realChainId), ...validateSign712Delegator(data, actionPath, realChainId, quoteMode, srcChainAuthorityAddress));
         const caveats = (data.message.caveats ?? []);
-        const txCalls = action.details?.transactionCalls ?? [];
-        violations.push(...validateSign712Caveats(caveats, action.actionId, txCalls, actionPath, realChainId, expirationTimestamp));
+        violations.push(...validateSign712MetaMaskCaveats(caveats, action, actionPath, realChainId, expirationTimestamp));
     }
     return violations;
 }
@@ -64,4 +62,83 @@ function validateSign712AllowedActions(action, actionPath) {
     }
     return violations;
 }
+// CRITICAL: domain.name must be "DelegationManager"
+// CRITICAL: domain.chainId must equal the real chainId
+// CRITICAL: domain.verifyingContract must be in the DelegationManager whitelist
+function validateSign712Domain(data, actionPath, realChainId) {
+    const violations = [];
+    if (data.domain.name !== "DelegationManager") {
+        violations.push({
+            code: ViolationCode.Sign712MetaMaskDomainNameNotDelegationManager,
+            message: `Sign712MetaMask domain.name must be "DelegationManager"`,
+            path: `${actionPath}.data.domain.name`,
+            expected: "DelegationManager",
+            actual: data.domain.name,
+        });
+    }
+    if (data.domain.chainId !== realChainId) {
+        violations.push({
+            code: ViolationCode.Sign712MetaMaskChainIdMismatch,
+            message: `Sign712MetaMask domain.chainId does not match the real chainId`,
+            path: `${actionPath}.data.domain.chainId`,
+            expected: realChainId,
+            actual: data.domain.chainId,
+        });
+    }
+    if (data.domain.verifyingContract === undefined ||
+        !isWhitelisted(DELEGATION_MANAGER_CONTRACTS, realChainId, data.domain.verifyingContract)) {
+        violations.push({
+            code: ViolationCode.Sign712MetaMaskVerifyingContractNotWhitelisted,
+            message: `Sign712MetaMask domain.verifyingContract is not whitelisted`,
+            path: `${actionPath}.data.domain.verifyingContract`,
+            actual: data.domain.verifyingContract,
+        });
+    }
+    return violations;
+}
+// LOW: in execution mode, message.delegator must match srcChainAuthorityAddress
+function validateSign712Delegator(data, actionPath, realChainId, quoteMode, srcChainAuthorityAddress) {
+    if (quoteMode)
+        return [];
+    const delegator = data.message.delegator;
+    if (srcChainAuthorityAddress === undefined ||
+        delegator === undefined ||
+        !addressEquals(realChainId, delegator, srcChainAuthorityAddress)) {
+        return [{
+                code: ViolationCode.Sign712MetaMaskDelegatorMismatch,
+                message: `Sign712MetaMask message.delegator must match srcChainAuthorityAddress`,
+                path: `${actionPath}.data.message.delegator`,
+                expected: srcChainAuthorityAddress,
+                actual: delegator,
+            }];
+    }
+    return [];
+}
+function validateSign712MetaMaskCaveats(caveats, action, actionPath, realChainId, expirationTimestamp) {
+    const violations = [];
+    const classified = classifyCaveats(caveats, action.actionId, actionPath, realChainId, violations);
+    const txCalls = action.details?.transactionCalls ?? [];
+    violations.push(...validateExactExecutionPresence(classified, txCalls, actionPath));
+    validateExactExecutionContent(classified, txCalls, actionPath, violations);
+    // CRITICAL: must have at least one IdEnforcer caveat (replay protection)
+    if (!classified.hasIdEnforcer) {
+        violations.push({
+            code: ViolationCode.Sign712MetaMaskMissingIdEnforcerCaveat,
+            message: `Sign712MetaMask must have an IdEnforcer caveat`,
+            path: `${actionPath}.data.message.caveats`,
+        });
+    }
+    // CRITICAL: must have exactly one TimestampEnforcer caveat
+    if (classified.timestampCount === 0) {
+        violations.push({
+            code: ViolationCode.Sign712MetaMaskMissingTimestampEnforcerCaveat,
+            message: `Sign712MetaMask must have a TimestampEnforcer caveat`,
+            path: `${actionPath}.data.message.caveats`,
+        });
+    }
+    if (classified.firstTimestamp) {
+        validateTimestampEnforcerValue(classified.firstTimestamp.caveat, expirationTimestamp, classified.firstTimestamp.index, actionPath, violations);
+    }
+    return violations;
+}
 //# sourceMappingURL=evm-sign712-metamask.js.map

package/dist/esm/validations/evm-sign712-metamask.js.map

@@ -1 +1 @@
-{"version":3,"file":"evm-sign712-metamask.js","sourceRoot":"","sources":["../../../src/validations/evm-sign712-metamask.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,aAAa,EAEb,aAAa,EACb,kBAAkB,GAGrB,MAAM,UAAU,CAAC;AAElB,OAAO,EACH,0BAA0B,EAC1B,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,GACzB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,gCAAgC,GAAkC;IACpE,kBAAkB,CAAC,MAAM;IACzB,kBAAkB,CAAC,IAAI;IACvB,kBAAkB,CAAC,IAAI;IACvB,kBAAkB,CAAC,eAAe;CACrC,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAC1C,OAA4B,EAC5B,QAAgB,EAChB,WAAoB,EACpB,SAAkB,EAClB,mBAA2B,EAC3B,wBAAiC;IAEjC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,sBAAsB;YAAE,SAAS;QAEnE,MAAM,UAAU,GAAG,GAAG,QAAQ,oBAAoB,CAAC,GAAG,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAkC,CAAC;QAEvD,iEAAiE;QACjE,iDAAiD;QACjD,MAAM,cAAc,GAAG,0BAA0B,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACpE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;YACnC,SAAS;QACb,CAAC;QAED,UAAU,CAAC,IAAI,CACX,GAAG,+BAA+B,CAAC,MAAM,EAAE,UAAU,CAAC,EACtD,GAAG,6BAA6B,CAAC,MAAM,EAAE,UAAU,CAAC,EACpD,GAAG,qBAAqB,CAAC,IAAK,EAAE,UAAU,EAAE,WAAW,CAAC;QACxD,kEAAkE;QAClE,iEAAiE;QACjE,0DAA0D;QAC1D,oEAAoE;QACpE,GAAG,CAAC,SAAS;YACT,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,wBAAwB,CACtB,IAAK,EACL,UAAU,EACV,WAAW,EACX,wBAAwB,EACxB,0BAA0B,CAC7B,CAAC,CACT,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,IAAK,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAa,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;QACvD,UAAU,CAAC,IAAI,CACX,GAAG,sBAAsB,CACrB,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,CAClF,CACJ,CAAC;IACN,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,4DAA4D;AAC5D,SAAS,+BAA+B,CACpC,MAAyB,EACzB,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa,CAAC,oCAAoC;gBACxD,OAAO,EAAE,wDAAwD;gBACjE,IAAI,EAAE,GAAG,UAAU,2BAA2B;gBAC9C,MAAM,EAAE,OAAO;aAClB,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,SAAS,6BAA6B,CAClC,MAAyB,EACzB,UAAkB;IAElB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,gCAAgC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,8BAA8B;gBAClD,OAAO,EAAE,2BAA2B,EAAE,kBAAkB;gBACxD,IAAI,EAAE,GAAG,UAAU,UAAU;gBAC7B,QAAQ,EAAE,gCAAgC;gBAC1C,MAAM,EAAE,MAAM,CAAC,OAAO;aACzB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC"}
+{"version":3,"file":"evm-sign712-metamask.js","sourceRoot":"","sources":["../../../src/validations/evm-sign712-metamask.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,aAAa,EAEb,aAAa,EACb,kBAAkB,GAGrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAEH,eAAe,EACf,8BAA8B,EAC9B,6BAA6B,EAC7B,8BAA8B,GACjC,MAAM,eAAe,CAAC;AAEvB,MAAM,gCAAgC,GAAkC;IACpE,kBAAkB,CAAC,MAAM;IACzB,kBAAkB,CAAC,IAAI;IACvB,kBAAkB,CAAC,IAAI;IACvB,kBAAkB,CAAC,eAAe;CACrC,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAC1C,OAA4B,EAC5B,QAAgB,EAChB,WAAoB,EACpB,SAAkB,EAClB,mBAA2B,EAC3B,wBAAiC;IAEjC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,eAAe;YAAE,SAAS;QAE5D,MAAM,UAAU,GAAG,GAAG,QAAQ,oBAAoB,CAAC,GAAG,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAkC,CAAC;QAEvD,sEAAsE;QACtE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,6CAA6C;gBACjE,OAAO,EAAE,mDAAmD;gBAC5D,IAAI,EAAE,GAAG,UAAU,OAAO;gBAC1B,MAAM,EAAE,IAAI;aACf,CAAC,CAAC;YACH,SAAS;QACb,CAAC;QAED,UAAU,CAAC,IAAI,CACX,GAAG,+BAA+B,CAAC,MAAM,EAAE,UAAU,CAAC,EACtD,GAAG,6BAA6B,CAAC,MAAM,EAAE,UAAU,CAAC,EACpD,GAAG,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,EACvD,GAAG,wBAAwB,CACvB,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,wBAAwB,CACrE,CACJ,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAa,CAAC;QACzD,UAAU,CAAC,IAAI,CACX,GAAG,8BAA8B,CAC7B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,CAChE,CACJ,CAAC;IACN,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,4DAA4D;AAC5D,SAAS,+BAA+B,CACpC,MAAyB,EACzB,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa,CAAC,oCAAoC;gBACxD,OAAO,EAAE,wDAAwD;gBACjE,IAAI,EAAE,GAAG,UAAU,2BAA2B;gBAC9C,MAAM,EAAE,OAAO;aAClB,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,SAAS,6BAA6B,CAClC,MAAyB,EACzB,UAAkB;IAElB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,gCAAgC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,8BAA8B;gBAClD,OAAO,EAAE,2BAA2B,EAAE,kBAAkB;gBACxD,IAAI,EAAE,GAAG,UAAU,UAAU;gBAC7B,QAAQ,EAAE,gCAAgC;gBAC1C,MAAM,EAAE,MAAM,CAAC,OAAO;aACzB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,oDAAoD;AACpD,uDAAuD;AACvD,gFAAgF;AAChF,SAAS,qBAAqB,CAC1B,IAAoB,EACpB,UAAkB,EAClB,WAAoB;IAEpB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,6CAA6C;YACjE,OAAO,EAAE,yDAAyD;YAClE,IAAI,EAAE,GAAG,UAAU,mBAAmB;YACtC,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;SAC3B,CAAC,CAAC;IACP,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,8BAA8B;YAClD,OAAO,EAAE,gEAAgE;YACzE,IAAI,EAAE,GAAG,UAAU,sBAAsB;YACzC,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;SAC9B,CAAC,CAAC;IACP,CAAC;IAED,IACI,IAAI,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;QAC3C,CAAC,aAAa,CACV,4BAA4B,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAC3E,EACH,CAAC;QACC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,8CAA8C;YAClE,OAAO,EAAE,6DAA6D;YACtE,IAAI,EAAE,GAAG,UAAU,gCAAgC;YACnD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACxC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,gFAAgF;AAChF,SAAS,wBAAwB,CAC7B,IAAoB,EACpB,UAAkB,EAClB,WAAoB,EACpB,SAAkB,EAClB,wBAAiC;IAEjC,IAAI,SAAS;QAAE,OAAO,EAAE,CAAC;IAEzB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAA+B,CAAC;IAC/D,IACI,wBAAwB,KAAK,SAAS;QACtC,SAAS,KAAK,SAAS;QACvB,CAAC,aAAa,CAAC,WAAW,EAAE,SAAS,EAAE,wBAAwB,CAAC,EAClE,CAAC;QACC,OAAO,CAAC;gBACJ,IAAI,EAAE,aAAa,CAAC,gCAAgC;gBACpD,OAAO,EAAE,uEAAuE;gBAChF,IAAI,EAAE,GAAG,UAAU,yBAAyB;gBAC5C,QAAQ,EAAE,wBAAwB;gBAClC,MAAM,EAAE,SAAS;aACpB,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,SAAS,8BAA8B,CACnC,OAAiB,EACjB,MAAyB,EACzB,UAAkB,EAClB,WAAoB,EACpB,mBAA2B;IAE3B,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,eAAe,CAC9B,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAChE,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;IAEvD,UAAU,CAAC,IAAI,CACX,GAAG,8BAA8B,CAC7B,UAAU,EAAE,OAAO,EAAE,UAAU,CAClC,CACJ,CAAC;IAEF,6BAA6B,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAE3E,yEAAyE;IACzE,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,sCAAsC;YAC1D,OAAO,EAAE,gDAAgD;YACzD,IAAI,EAAE,GAAG,UAAU,uBAAuB;SAC7C,CAAC,CAAC;IACP,CAAC;IAED,2DAA2D;IAC3D,IAAI,UAAU,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,6CAA6C;YACjE,OAAO,EAAE,sDAAsD;YAC/D,IAAI,EAAE,GAAG,UAAU,uBAAuB;SAC7C,CAAC,CAAC;IACP,CAAC;IAED,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;QAC5B,8BAA8B,CAC1B,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,mBAAmB,EACrD,UAAU,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CAC1D,CAAC;IACN,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/esm/validations/evm-sign7702.js

@@ -4,38 +4,6 @@ import { EIP7702_DELEGATION_CONTRACTS } from "../whitelists/evm/index.js";
 // =============================================
 // Sign7702Authorization constraints
 // =============================================
-// CRITICAL: per-action checks for a `Sign7702Authorization` action.
-// Shared between intent-scope (`validateSign7702Actions`) and hook-scope
-// (`validateHookSign7702Binding`); both wrap this with their scope-specific
-// constraints (intent: position+duplicate; hook: type↔actions binding +
-// `validateHookDelegateOp` for position/count).
-export function validateSign7702Action(action, actionPath, realChainId) {
-    const violations = [];
-    // HIGH: actions[] must contain exactly one element — Delegate
-    const ops = action.actions;
-    if (ops.length !== 1 || ops[0] !== EvmActionOperation.Delegate) {
-        violations.push({
-            code: ViolationCode.Sign7702ActionsNotSingleDelegate,
-            message: `Sign7702Authorization actions must contain exactly [Delegate]`,
-            path: `${actionPath}.actions`,
-            expected: [EvmActionOperation.Delegate],
-            actual: action.actions,
-        });
-    }
-    // CRITICAL: data.contractAddress must be in the whitelist
-    const data = action.data;
-    const contractAddress = data?.contractAddress;
-    if (!contractAddress
-        || !isWhitelisted(EIP7702_DELEGATION_CONTRACTS, realChainId, contractAddress)) {
-        violations.push({
-            code: ViolationCode.Sign7702ContractAddressNotWhitelisted,
-            message: `Sign7702Authorization contractAddress is not in the whitelist`,
-            path: `${actionPath}.data.contractAddress`,
-            actual: contractAddress,
-        });
-    }
-    return violations;
-}
 export function validateSign7702Actions(actions, basePath, realChainId) {
     const violations = [];
     let sign7702Count = 0;
@@ -45,7 +13,28 @@ export function validateSign7702Actions(actions, basePath, realChainId) {
         if (action.type !== EvmActionKind.Sign7702Authorization)
             continue;
         const actionPath = `${basePath}.requiredActions[${i}]`;
-        violations.push(...validateSign7702Action(action, actionPath, realChainId));
+        // HIGH: actions[] must contain exactly one element — Delegate
+        if (action.actions.length !== 1 ||
+            action.actions[0] !== EvmActionOperation.Delegate) {
+            violations.push({
+                code: ViolationCode.Sign7702ActionsNotSingleDelegate,
+                message: `Sign7702Authorization actions must contain exactly [Delegate]`,
+                path: `${actionPath}.actions`,
+                expected: [EvmActionOperation.Delegate],
+                actual: action.actions,
+            });
+        }
+        // CRITICAL: data.contractAddress must be in the whitelist
+        const data = action.data;
+        const contractAddress = data?.contractAddress;
+        if (!contractAddress || !isWhitelisted(EIP7702_DELEGATION_CONTRACTS, realChainId, contractAddress)) {
+            violations.push({
+                code: ViolationCode.Sign7702ContractAddressNotWhitelisted,
+                message: `Sign7702Authorization contractAddress is not in the whitelist`,
+                path: `${actionPath}.data.contractAddress`,
+                actual: contractAddress,
+            });
+        }
         // HIGH: at most one Sign7702Authorization per intent
         // Note: only the first duplicate will be reported, subsequent ones will be ignored
         sign7702Count++;

package/dist/esm/validations/evm-sign7702.js.map

@@ -1 +1 @@
-{"version":3,"file":"evm-sign7702.js","sourceRoot":"","sources":["../../../src/validations/evm-sign7702.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,aAAa,EAEb,aAAa,EACb,kBAAkB,GAIrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAEjE,gDAAgD;AAChD,oCAAoC;AACpC,gDAAgD;AAEhD,oEAAoE;AACpE,yEAAyE;AACzE,4EAA4E;AAC5E,wEAAwE;AACxE,gDAAgD;AAChD,MAAM,UAAU,sBAAsB,CAClC,MAA0E,EAC1E,UAAkB,EAClB,WAAoB;IAEpB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,8DAA8D;IAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAmB,CAAC;IACvC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,QAAQ,EAAE,CAAC;QAC7D,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,gCAAgC;YACpD,OAAO,EAAE,+DAA+D;YACxE,IAAI,EAAE,GAAG,UAAU,UAAU;YAC7B,QAAQ,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC;YACvC,MAAM,EAAE,MAAM,CAAC,OAAO;SACzB,CAAC,CAAC;IACP,CAAC;IAED,0DAA0D;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAgD,CAAC;IACrE,MAAM,eAAe,GAAG,IAAI,EAAE,eAAe,CAAC;IAC9C,IACI,CAAC,eAAe;WACb,CAAC,aAAa,CAAC,4BAA4B,EAAE,WAAW,EAAE,eAAe,CAAC,EAC/E,CAAC;QACC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa,CAAC,qCAAqC;YACzD,OAAO,EAAE,+DAA+D;YACxE,IAAI,EAAE,GAAG,UAAU,uBAAuB;YAC1C,MAAM,EAAE,eAAe;SAC1B,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACnC,OAA4B,EAC5B,QAAgB,EAChB,WAAoB;IAEpB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,kBAAkB,GAAG,CAAC,CAAC,CAAC;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,qBAAqB;YAAE,SAAS;QAElE,MAAM,UAAU,GAAG,GAAG,QAAQ,oBAAoB,CAAC,GAAG,CAAC;QACvD,UAAU,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;QAE5E,qDAAqD;QACrD,mFAAmF;QACnF,aAAa,EAAE,CAAC;QAChB,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YACtB,kBAAkB,GAAG,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,8BAA8B;gBAClD,OAAO,EAAE,kEAAkE,kBAAkB,QAAQ,CAAC,EAAE;gBACxG,IAAI,EAAE,GAAG,UAAU,OAAO;gBAC1B,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,aAAa;aACxB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}
+{"version":3,"file":"evm-sign7702.js","sourceRoot":"","sources":["../../../src/validations/evm-sign7702.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,aAAa,EAEb,aAAa,EACb,kBAAkB,GAGrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAEjE,gDAAgD;AAChD,oCAAoC;AACpC,gDAAgD;AAEhD,MAAM,UAAU,uBAAuB,CACnC,OAA4B,EAC5B,QAAgB,EAChB,WAAoB;IAEpB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,kBAAkB,GAAG,CAAC,CAAC,CAAC;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,qBAAqB;YAAE,SAAS;QAElE,MAAM,UAAU,GAAG,GAAG,QAAQ,oBAAoB,CAAC,GAAG,CAAC;QAEvD,8DAA8D;QAC9D,IACI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAC3B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,QAAQ,EACnD,CAAC;YACC,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,gCAAgC;gBACpD,OAAO,EAAE,+DAA+D;gBACxE,IAAI,EAAE,GAAG,UAAU,UAAU;gBAC7B,QAAQ,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC;gBACvC,MAAM,EAAE,MAAM,CAAC,OAAO;aACzB,CAAC,CAAC;QACP,CAAC;QAED,0DAA0D;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAgD,CAAC;QACrE,MAAM,eAAe,GAAG,IAAI,EAAE,eAAe,CAAC;QAC9C,IAAI,CAAC,eAAe,IAAI,CAAC,aAAa,CAAC,4BAA4B,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;YACjG,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,qCAAqC;gBACzD,OAAO,EAAE,+DAA+D;gBACxE,IAAI,EAAE,GAAG,UAAU,uBAAuB;gBAC1C,MAAM,EAAE,eAAe;aAC1B,CAAC,CAAC;QACP,CAAC;QAED,qDAAqD;QACrD,mFAAmF;QACnF,aAAa,EAAE,CAAC;QAChB,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YACtB,kBAAkB,GAAG,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,8BAA8B;gBAClD,OAAO,EAAE,kEAAkE,kBAAkB,QAAQ,CAAC,EAAE;gBACxG,IAAI,EAAE,GAAG,UAAU,OAAO;gBAC1B,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,aAAa;aACxB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/esm/validations/hooks-common.js

@@ -1,26 +1,9 @@
 import { ViolationCode, } from "../types/index.js";
-import { BundleHookType, ChainEngine, EvmActionOperation, SolanaActionOperation, } from "../types/enums.js";
-import { addressEquals, getChainEngine } from "../helpers/address.js";
-import { extractGasCompensationGroups } from "../helpers/gas-compensation.js";
-import { HookMode, PlaceholderResolutionErrorReason, resolveEagerPlaceholders, } from "../helpers/placeholder.js";
+import { ChainId } from "../types/enums.js";
 import { validateSolanaHookActions } from "./solana-hook.js";
-import { validateEvmHookActions } from "./evm-op-hook.js";
-import { validateCompensationHookStructure } from "./compensation-hook.js";
-import { resolveChainId, resolveChainIdOrSelf, } from "../whitelists/subscription-to-chain-id.js";
-// Re-exported so call sites can pass the mode without importing from helpers.
-export { HookMode } from "../helpers/placeholder.js";
-// Allowed hook-scope operations — each chain checked against its own enum.
-const EVM_HOOK_OPERATIONS = [
-    EvmActionOperation.Delegate,
-    EvmActionOperation.Hook,
-    EvmActionOperation.GasCompensation,
-];
-const EVM_HOOK_OPERATIONS_SET = new Set(EVM_HOOK_OPERATIONS);
-const SOLANA_HOOK_OPERATIONS = [
-    SolanaActionOperation.Hook,
-    SolanaActionOperation.GasCompensation,
-];
-const SOLANA_HOOK_OPERATIONS_SET = new Set(SOLANA_HOOK_OPERATIONS);
+// Both EVM and Solana use identical string values for hook operations
+const HOOK_OPERATIONS = ["Hook", "GasCompensation"];
+const HOOK_OPERATIONS_SET = new Set(HOOK_OPERATIONS);
 export function validateHooks(request, response, quoteMode) {
     return [
         ...validateHookAAConstraint(request, response),
@@ -54,35 +37,26 @@ function validateHookAAConstraint(request, response) {
     }
     return violations;
 }
-// HIGH: preHooks = request.preHooks + one compensation hook per unique
-// gasCompensationInfo group (exact equality — API always adds one per group).
-// postHooks must match exactly — the API never adds extras to postHooks.
+// HIGH: response.preHooks.length must equal request.preHooks.length
 function validateHookCounts(request, response) {
     const violations = [];
     const requestPreCount = request.preHooks?.length ?? 0;
     const requestPostCount = request.postHooks?.length ?? 0;
-    // preHooks: exactly request.preHooks.length + one per unique gas
-    // compensation group. If request has no gasCompensationInfo at all, extras
-    // are forbidden (this also guards against MITM adding preHook entries when
-    // the user never asked for compensation).
-    const compensationGroupCount = extractGasCompensationGroups(request).length;
-    const expectedPreCount = requestPreCount + compensationGroupCount;
-    if (response.preHooks.length !== expectedPreCount) {
+    if (response.preHooks.length !== requestPreCount) {
         violations.push({
             code: ViolationCode.HookCountMismatch,
-            message: "response.preHooks count does not match"
-                + " request.preHooks.length + unique gasCompensationInfo groups",
+            message: "response.preHooks count does not match request.preHooks count",
             path: "response.preHooks",
-            expected: expectedPreCount,
+            expected: requestPreCount,
             actual: response.preHooks.length,
         });
     }
-    // postHooks: strict 1:1 match, no extras allowed
-    if (response.postHooks.length !== requestPostCount) {
+    // postHooks may contain additional compensation hooks beyond what was in the request,
+    // so response count must be >= request count
+    if (response.postHooks.length < requestPostCount) {
         violations.push({
             code: ViolationCode.HookCountMismatch,
-            message: "response.postHooks count does not match"
-                + " request.postHooks count",
+            message: "response.postHooks count is less than request.postHooks count",
             path: "response.postHooks",
             expected: requestPostCount,
             actual: response.postHooks.length,
@@ -97,7 +71,7 @@ function validatePreHooks(request, response, quoteMode) {
         const basePath = `response.preHooks[${i}]`;
         const hookPayload = response.preHooks[i];
         const requestHook = requestHooks[i];
-        violations.push(...validateSingleHookPayload(hookPayload, requestHook, basePath, request, response.trades, HookMode.PreHooks, quoteMode));
+        violations.push(...validateSingleHookPayload(hookPayload, requestHook, basePath, request, quoteMode));
     }
     return violations;
 }
@@ -109,153 +83,31 @@ function validatePostHooks(request, response, quoteMode) {
         const hookPayload = response.postHooks[i];
         // User postHooks are matched by index; extra entries are compensation hooks
         const requestHook = i < requestHooks.length ? requestHooks[i] : undefined;
-        violations.push(...validateSingleHookPayload(hookPayload, requestHook, basePath, request, response.trades, HookMode.PostHooks, quoteMode));
+        violations.push(...validateSingleHookPayload(hookPayload, requestHook, basePath, request, quoteMode));
     }
     return violations;
 }
-function validateSingleHookPayload(hookPayload, requestHook, basePath, request, responseTrades, mode, quoteMode) {
-    const isCompensationPreHook = requestHook === undefined && mode === HookMode.PreHooks;
+function validateSingleHookPayload(hookPayload, requestHook, basePath, request, quoteMode) {
     return [
-        ...validateHookEcho(hookPayload, requestHook, basePath, responseTrades, mode),
+        ...validateHookEcho(hookPayload, requestHook, basePath),
         ...validateHookUniqueActionIds(hookPayload, basePath),
         ...validateHookActionsList(hookPayload, basePath),
-        ...validateHookDelegateOp(hookPayload, basePath),
-        ...validateHookSolanaNotDirect(hookPayload, basePath),
         ...validateGasCompensationRequiresInfo(hookPayload, basePath, request),
-        ...(isCompensationPreHook
-            ? validateCompensationHookStructure(hookPayload, basePath, request)
-            : []),
-        ...dispatchChainSpecificValidation(hookPayload, requestHook, basePath, quoteMode, request, mode, responseTrades),
+        ...dispatchChainSpecificValidation(hookPayload, requestHook, basePath, quoteMode, request),
     ];
 }
-// MEDIUM: Solana hooks must not be of type 'direct'.
-function validateHookSolanaNotDirect(hookPayload, basePath) {
-    const realChainId = resolveChainIdOrSelf(hookPayload.hook.chainId);
-    if (getChainEngine(realChainId) !== ChainEngine.Solana)
+// CRITICAL: response hook must echo back the request hook exactly
+function validateHookEcho(hookPayload, requestHook, basePath) {
+    if (!requestHook)
         return [];
-    if (hookPayload.hook.type !== BundleHookType.Direct)
-        return [];
-    return [{
-            code: ViolationCode.HookSolanaCannotBeDirect,
-            message: "Solana hooks cannot be of type 'direct'",
-            path: `${basePath}.hook.type`,
-            expected: BundleHookType.Delegated,
-            actual: hookPayload.hook.type,
-        }];
-}
-// CRITICAL: response hook must echo back the request hook field-by-field.
-// Notes:
-//   - hook.data in the response has eager placeholders resolved (deferred markers kept).
-//     We apply the same resolution to request.data and compare.
-//   - For Solana hooks the API deletes `to` and `value` in the echo; we skip those.
-//   - For EVM hooks `value` is copied from request as-is (eager resolution is not
-//     reflected in the echoed value — only in internal txData used by requiredActions).
-function validateHookEcho(hookPayload, requestHook, basePath, responseTrades, mode) {
-    // Missing request counterpart — two shapes, both are MITM-safe:
-    //  (a) preHook with `i >= request.preHooks.length`:
-    //      legitimate case — compensation hook appended by the API.
-    //      MITM case — attacker injects an arbitrary preHook.
-    //      The echo-by-field check can't distinguish them (there's no request
-    //      to compare against), so we delegate to the structural compensation
-    //      check.
-    //  (b) postHook with `i >= request.postHooks.length`:
-    //      no legitimate case — the API never appends to postHooks. So we
-    //      produce a violation.
-    if (!requestHook) {
-        if (mode === HookMode.PostHooks) {
-            return [{
-                    code: ViolationCode.UnexpectedPostHook,
-                    message: "response.postHooks contains an entry with no matching"
-                        + " request postHook",
-                    path: `${basePath}.hook`,
-                    actual: hookPayload.hook,
-                }];
-        }
-        return [];
-    }
-    const echoed = hookPayload.hook;
-    const chainId = requestHook.chainId;
-    const realChainId = resolveChainIdOrSelf(chainId);
-    const isSolana = getChainEngine(realChainId) === ChainEngine.Solana;
-    const hookPath = `${basePath}.hook`;
-    const violations = [];
-    // chainId — strict number equality (subscriptionId on both sides)
-    if (echoed.chainId !== chainId) {
-        violations.push(echoMismatch(`${hookPath}.chainId`, requestHook.chainId, echoed.chainId));
-    }
-    // from — address equality
-    if (!addressEquals(realChainId, echoed.from, requestHook.from)) {
-        violations.push(echoMismatch(`${hookPath}.from`, requestHook.from, echoed.from));
-    }
-    // isAtomic — strict boolean
-    if (echoed.isAtomic !== requestHook.isAtomic) {
-        violations.push(echoMismatch(`${hookPath}.isAtomic`, requestHook.isAtomic, echoed.isAtomic));
-    }
-    // to, value — chain-dependent.
-    // Solana: API deletes both from the echo; skip entirely.
-    // EVM: compare as-is (value is not modified by placeholder resolution).
-    if (!isSolana) {
-        violations.push(...compareOptionalAddress(realChainId, `${hookPath}.to`, requestHook.to, echoed.to));
-        violations.push(...compareOptionalString(`${hookPath}.value`, requestHook.value, echoed.value));
-    }
-    // data — eager placeholders are resolved by the API before echoing.
-    const { resolved: expectedData, errors } = resolveEagerPlaceholders(requestHook.data, realChainId, requestHook.placeHolders, responseTrades, mode);
-    for (const error of errors) {
-        const reasonText = PlaceholderResolutionErrorReason[error.reason];
-        violations.push({
-            code: ViolationCode.HookPlaceholderResolutionFailed,
-            message: `failed to resolve placeholder "${error.nameVariable}"`
-                + ` (${reasonText})`,
-            path: `${hookPath}.data`,
-            actual: { nameVariable: error.nameVariable, reason: reasonText },
-            details: error.details,
-        });
-    }
-    if (expectedData !== echoed.data) {
-        violations.push(echoMismatch(`${hookPath}.data`, expectedData, echoed.data));
-    }
-    // placeHolders — deep equality via stringify (same source → same serialization).
-    if (JSON.stringify(echoed.placeHolders)
-        !== JSON.stringify(requestHook.placeHolders)) {
-        violations.push(echoMismatch(`${hookPath}.placeHolders`, requestHook.placeHolders, echoed.placeHolders));
-    }
-    // gasCompensationInfo — deep equality or both undefined.
-    if (JSON.stringify(echoed.gasCompensationInfo)
-        !== JSON.stringify(requestHook.gasCompensationInfo)) {
-        violations.push(echoMismatch(`${hookPath}.gasCompensationInfo`, requestHook.gasCompensationInfo, echoed.gasCompensationInfo));
-    }
-    // type — strict equality (or both undefined).
-    if (echoed.type !== requestHook.type) {
-        violations.push(echoMismatch(`${hookPath}.type`, requestHook.type, echoed.type));
-    }
-    // gasLimit — strict string equality (or both undefined).
-    if (echoed.gasLimit !== requestHook.gasLimit) {
-        violations.push(echoMismatch(`${hookPath}.gasLimit`, requestHook.gasLimit, echoed.gasLimit));
-    }
-    return violations;
-}
-function echoMismatch(path, expected, actual) {
-    return {
-        code: ViolationCode.HookEchoMismatch,
-        message: "response hook field does not match request",
-        path,
-        expected,
-        actual,
-    };
-}
-function compareOptionalString(path, expected, actual) {
-    if (expected === actual)
-        return [];
-    return [echoMismatch(path, expected, actual)];
-}
-function compareOptionalAddress(chainId, path, expected, actual) {
-    if (expected === undefined && actual === undefined)
-        return [];
-    if (expected === undefined || actual === undefined) {
-        return [echoMismatch(path, expected, actual)];
-    }
-    if (!addressEquals(chainId, expected, actual)) {
-        return [echoMismatch(path, expected, actual)];
+    if (JSON.stringify(hookPayload.hook) !== JSON.stringify(requestHook)) {
+        return [{
+                code: ViolationCode.HookEchoMismatch,
+                message: "response hook does not match request hook",
+                path: `${basePath}.hook`,
+                expected: requestHook,
+                actual: hookPayload.hook,
+            }];
     }
     return [];
 }
@@ -283,10 +135,6 @@ function validateHookUniqueActionIds(hookPayload, basePath) {
 }
 // HIGH: each hook required action must have exactly one operation: [Hook] or [GasCompensation]
 function validateHookActionsList(hookPayload, basePath) {
-    const realChainId = resolveChainIdOrSelf(hookPayload.hook.chainId);
-    const isSolana = getChainEngine(realChainId) === ChainEngine.Solana;
-    const allowedSet = isSolana ? SOLANA_HOOK_OPERATIONS_SET : EVM_HOOK_OPERATIONS_SET;
-    const allowedList = isSolana ? SOLANA_HOOK_OPERATIONS : EVM_HOOK_OPERATIONS;
     const violations = [];
     for (let i = 0; i < hookPayload.requiredActions.length; i++) {
         const action = hookPayload.requiredActions[i];
@@ -301,85 +149,26 @@ function validateHookActionsList(hookPayload, basePath) {
             });
             continue;
         }
-        if (!allowedSet.has(action.actions[0])) {
+        if (!HOOK_OPERATIONS_SET.has(action.actions[0])) {
             violations.push({
                 code: ViolationCode.HookActionsInvalid,
                 message: "hook required action operation must be Hook"
                     + " or GasCompensation",
                 path: `${actionPath}.actions`,
-                expected: allowedList,
+                expected: HOOK_OPERATIONS,
                 actual: action.actions,
             });
         }
     }
     return violations;
 }
-// HIGH: Delegate-op constraints for EVM hook requiredActions.
-//   * `Delegate` may appear at most once.
-//   * If present, it must be the first required action (the API emits
-//     Sign7702Authorization → Sign712MetaMaskCaveats* in this order).
-//   * Direct hooks (`hook.type === 'direct'`) must not contain `Delegate`
-//     (Direct mode skips EIP-7702 delegation entirely).
-// Solana hooks bypass this check — `Delegate` is rejected upstream by
-// `validateHookActionsList`.
-function validateHookDelegateOp(hookPayload, basePath) {
-    const realChainId = resolveChainIdOrSelf(hookPayload.hook.chainId);
-    if (getChainEngine(realChainId) === ChainEngine.Solana)
-        return [];
-    const indices = [];
-    for (let i = 0; i < hookPayload.requiredActions.length; i++) {
-        const action = hookPayload.requiredActions[i];
-        const ops = action.actions;
-        if (ops.includes(EvmActionOperation.Delegate)) {
-            indices.push(i);
-        }
-    }
-    if (indices.length === 0)
-        return [];
-    const violations = [];
-    if (hookPayload.hook.type === BundleHookType.Direct) {
-        violations.push({
-            code: ViolationCode.HookDelegateInDirect,
-            message: "Direct hook must not contain a Delegate operation"
-                + " (Direct mode skips EIP-7702 delegation)",
-            path: `${basePath}.requiredActions`,
-            actual: indices,
-        });
-    }
-    if (indices.length > 1) {
-        violations.push({
-            code: ViolationCode.HookMultipleDelegate,
-            message: "hook requiredActions must contain at most one Delegate",
-            path: `${basePath}.requiredActions`,
-            expected: 1,
-            actual: indices,
-        });
-    }
-    if (indices[0] !== 0) {
-        violations.push({
-            code: ViolationCode.HookDelegateNotFirst,
-            message: "if Delegate is present in hook requiredActions, it must be"
-                + " the first action",
-            path: `${basePath}.requiredActions[${indices[0]}]`,
-            expected: 0,
-            actual: indices[0],
-        });
-    }
-    return violations;
-}
 // CRITICAL: GasCompensation must only appear when gasCompensationInfo exists
 function validateGasCompensationRequiresInfo(hookPayload, basePath, request) {
     const hasGasCompensationInfo = (request.preHooks ?? []).some(h => h.gasCompensationInfo !== undefined);
-    const realChainId = resolveChainIdOrSelf(hookPayload.hook.chainId);
-    const isSolana = getChainEngine(realChainId) === ChainEngine.Solana;
-    const gasCompensationOp = isSolana
-        ? SolanaActionOperation.GasCompensation
-        : EvmActionOperation.GasCompensation;
     const violations = [];
     for (let i = 0; i < hookPayload.requiredActions.length; i++) {
         const action = hookPayload.requiredActions[i];
-        const hasGasCompensation = action.actions
-            .includes(gasCompensationOp);
+        const hasGasCompensation = action.actions.includes("GasCompensation");
         if (hasGasCompensation && !hasGasCompensationInfo) {
             violations.push({
                 code: ViolationCode.HookGasCompensationWithoutInfo,
@@ -392,20 +181,18 @@ function validateGasCompensationRequiresInfo(hookPayload, basePath, request) {
     }
     return violations;
 }
-function dispatchChainSpecificValidation(hookPayload, requestHook, basePath, quoteMode, request, mode, responseTrades) {
-    const realChainId = resolveChainIdOrSelf(hookPayload.hook.chainId);
-    if (getChainEngine(realChainId) === ChainEngine.Solana) {
+function dispatchChainSpecificValidation(hookPayload, requestHook, basePath, quoteMode, request) {
+    const chainId = hookPayload.hook.chainId;
+    if (chainId === ChainId.Solana) {
         const srcChainAuthorityAddress = findSolanaSrcChainAuthority(request);
-        return validateSolanaHookActions(hookPayload, requestHook, basePath, quoteMode, srcChainAuthorityAddress, request, realChainId, mode, responseTrades);
+        return validateSolanaHookActions(hookPayload, requestHook, basePath, quoteMode, srcChainAuthorityAddress, request);
     }
-    return validateEvmHookActions(hookPayload, requestHook, basePath, mode, responseTrades, realChainId, request);
+    // AI: EVM hook validation dispatch will go here when implemented
+    return [];
 }
 function findSolanaSrcChainAuthority(request) {
     for (const trade of request.trades) {
-        const realChainId = resolveChainId(trade.srcChainId);
-        if (realChainId === undefined)
-            continue;
-        if (getChainEngine(realChainId) === ChainEngine.Solana) {
+        if (trade.srcChainId === ChainId.Solana) {
             return trade.srcChainAuthorityAddress;
         }
     }