@debridge-finance/borderless-validation-sdk 0.0.0-dev-3dc1a82 → 0.0.1

package/dist/cjs/validations/evm-sign712-metamask.js

@@ -2,7 +2,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateSign712MetaMaskActions = validateSign712MetaMaskActions;
 const types_1 = require("../types");
-const evm_sign712_shared_1 = require("./evm-sign712-shared");
+const types_2 = require("../whitelists/types");
+const evm_1 = require("../whitelists/evm");
+const address_1 = require("../helpers/address");
+const evm_caveats_1 = require("./evm-caveats");
 const SIGN712_METAMASK_ALLOWED_ACTIONS = [
     types_1.EvmActionOperation.Budget,
     types_1.EvmActionOperation.Wrap,
@@ -13,28 +16,23 @@ function validateSign712MetaMaskActions(actions, basePath, realChainId, quoteMod
     const violations = [];
     for (let i = 0; i < actions.length; i++) {
         const action = actions[i];
-        if (action.type !== types_1.EvmActionKind.Sign712MetaMaskCaveats)
+        if (action.type !== types_1.EvmActionKind.Sign712MetaMask)
             continue;
         const actionPath = `${basePath}.requiredActions[${i}]`;
         const data = action.data;
-        // CRITICAL: data structural presence — downstream content checks
-        // assume `data.domain` and `data.message` exist.
-        const presenceErrors = (0, evm_sign712_shared_1.validateSign712DataPresent)(data, actionPath);
-        if (presenceErrors.length > 0) {
-            violations.push(...presenceErrors);
+        // CRITICAL: `data` must be present and contain `domain` and `message`
+        if (!data || !data.domain || !data.message) {
+            violations.push({
+                code: types_1.ViolationCode.Sign712MetaMaskDomainNameNotDelegationManager,
+                message: `Sign712MetaMask data is missing domain or message`,
+                path: `${actionPath}.data`,
+                actual: data,
+            });
             continue;
         }
-        violations.push(...validateSign712TransactionCalls(action, actionPath), ...validateSign712AllowedActions(action, actionPath), ...(0, evm_sign712_shared_1.validateSign712Domain)(data, actionPath, realChainId), 
-        // Delegator: in quote mode we cannot determine the trust source —
-        // skip the check entirely. In execution mode the helper compares
-        // against `srcChainAuthorityAddress` (which may itself be
-        // `undefined` as a defensive check — preserved by passing through).
-        ...(quoteMode
-            ? []
-            : (0, evm_sign712_shared_1.validateSign712Delegator)(data, actionPath, realChainId, srcChainAuthorityAddress, "srcChainAuthorityAddress")));
+        violations.push(...validateSign712TransactionCalls(action, actionPath), ...validateSign712AllowedActions(action, actionPath), ...validateSign712Domain(data, actionPath, realChainId), ...validateSign712Delegator(data, actionPath, realChainId, quoteMode, srcChainAuthorityAddress));
         const caveats = (data.message.caveats ?? []);
-        const txCalls = action.details?.transactionCalls ?? [];
-        violations.push(...(0, evm_sign712_shared_1.validateSign712Caveats)(caveats, action.actionId, txCalls, actionPath, realChainId, expirationTimestamp));
+        violations.push(...validateSign712MetaMaskCaveats(caveats, action, actionPath, realChainId, expirationTimestamp));
     }
     return violations;
 }
@@ -67,4 +65,83 @@ function validateSign712AllowedActions(action, actionPath) {
     }
     return violations;
 }
+// CRITICAL: domain.name must be "DelegationManager"
+// CRITICAL: domain.chainId must equal the real chainId
+// CRITICAL: domain.verifyingContract must be in the DelegationManager whitelist
+function validateSign712Domain(data, actionPath, realChainId) {
+    const violations = [];
+    if (data.domain.name !== "DelegationManager") {
+        violations.push({
+            code: types_1.ViolationCode.Sign712MetaMaskDomainNameNotDelegationManager,
+            message: `Sign712MetaMask domain.name must be "DelegationManager"`,
+            path: `${actionPath}.data.domain.name`,
+            expected: "DelegationManager",
+            actual: data.domain.name,
+        });
+    }
+    if (data.domain.chainId !== realChainId) {
+        violations.push({
+            code: types_1.ViolationCode.Sign712MetaMaskChainIdMismatch,
+            message: `Sign712MetaMask domain.chainId does not match the real chainId`,
+            path: `${actionPath}.data.domain.chainId`,
+            expected: realChainId,
+            actual: data.domain.chainId,
+        });
+    }
+    if (data.domain.verifyingContract === undefined ||
+        !(0, types_2.isWhitelisted)(evm_1.DELEGATION_MANAGER_CONTRACTS, realChainId, data.domain.verifyingContract)) {
+        violations.push({
+            code: types_1.ViolationCode.Sign712MetaMaskVerifyingContractNotWhitelisted,
+            message: `Sign712MetaMask domain.verifyingContract is not whitelisted`,
+            path: `${actionPath}.data.domain.verifyingContract`,
+            actual: data.domain.verifyingContract,
+        });
+    }
+    return violations;
+}
+// LOW: in execution mode, message.delegator must match srcChainAuthorityAddress
+function validateSign712Delegator(data, actionPath, realChainId, quoteMode, srcChainAuthorityAddress) {
+    if (quoteMode)
+        return [];
+    const delegator = data.message.delegator;
+    if (srcChainAuthorityAddress === undefined ||
+        delegator === undefined ||
+        !(0, address_1.addressEquals)(realChainId, delegator, srcChainAuthorityAddress)) {
+        return [{
+                code: types_1.ViolationCode.Sign712MetaMaskDelegatorMismatch,
+                message: `Sign712MetaMask message.delegator must match srcChainAuthorityAddress`,
+                path: `${actionPath}.data.message.delegator`,
+                expected: srcChainAuthorityAddress,
+                actual: delegator,
+            }];
+    }
+    return [];
+}
+function validateSign712MetaMaskCaveats(caveats, action, actionPath, realChainId, expirationTimestamp) {
+    const violations = [];
+    const classified = (0, evm_caveats_1.classifyCaveats)(caveats, action.actionId, actionPath, realChainId, violations);
+    const txCalls = action.details?.transactionCalls ?? [];
+    violations.push(...(0, evm_caveats_1.validateExactExecutionPresence)(classified, txCalls, actionPath));
+    (0, evm_caveats_1.validateExactExecutionContent)(classified, txCalls, actionPath, violations);
+    // CRITICAL: must have at least one IdEnforcer caveat (replay protection)
+    if (!classified.hasIdEnforcer) {
+        violations.push({
+            code: types_1.ViolationCode.Sign712MetaMaskMissingIdEnforcerCaveat,
+            message: `Sign712MetaMask must have an IdEnforcer caveat`,
+            path: `${actionPath}.data.message.caveats`,
+        });
+    }
+    // CRITICAL: must have exactly one TimestampEnforcer caveat
+    if (classified.timestampCount === 0) {
+        violations.push({
+            code: types_1.ViolationCode.Sign712MetaMaskMissingTimestampEnforcerCaveat,
+            message: `Sign712MetaMask must have a TimestampEnforcer caveat`,
+            path: `${actionPath}.data.message.caveats`,
+        });
+    }
+    if (classified.firstTimestamp) {
+        (0, evm_caveats_1.validateTimestampEnforcerValue)(classified.firstTimestamp.caveat, expirationTimestamp, classified.firstTimestamp.index, actionPath, violations);
+    }
+    return violations;
+}
 //# sourceMappingURL=evm-sign712-metamask.js.map

package/dist/cjs/validations/evm-sign712-metamask.js.map

@@ -1 +1 @@
-{"version":3,"file":"evm-sign712-metamask.js","sourceRoot":"","sources":["../../../src/validations/evm-sign712-metamask.ts"],"names":[],"mappings":";;AAwBA,wEAsDC;AA9ED,oCAQkB;AAElB,6DAK8B;AAE9B,MAAM,gCAAgC,GAAkC;IACpE,0BAAkB,CAAC,MAAM;IACzB,0BAAkB,CAAC,IAAI;IACvB,0BAAkB,CAAC,IAAI;IACvB,0BAAkB,CAAC,eAAe;CACrC,CAAC;AAEF,SAAgB,8BAA8B,CAC1C,OAA4B,EAC5B,QAAgB,EAChB,WAAoB,EACpB,SAAkB,EAClB,mBAA2B,EAC3B,wBAAiC;IAEjC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAa,CAAC,sBAAsB;YAAE,SAAS;QAEnE,MAAM,UAAU,GAAG,GAAG,QAAQ,oBAAoB,CAAC,GAAG,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAkC,CAAC;QAEvD,iEAAiE;QACjE,iDAAiD;QACjD,MAAM,cAAc,GAAG,IAAA,+CAA0B,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACpE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;YACnC,SAAS;QACb,CAAC;QAED,UAAU,CAAC,IAAI,CACX,GAAG,+BAA+B,CAAC,MAAM,EAAE,UAAU,CAAC,EACtD,GAAG,6BAA6B,CAAC,MAAM,EAAE,UAAU,CAAC,EACpD,GAAG,IAAA,0CAAqB,EAAC,IAAK,EAAE,UAAU,EAAE,WAAW,CAAC;QACxD,kEAAkE;QAClE,iEAAiE;QACjE,0DAA0D;QAC1D,oEAAoE;QACpE,GAAG,CAAC,SAAS;YACT,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,IAAA,6CAAwB,EACtB,IAAK,EACL,UAAU,EACV,WAAW,EACX,wBAAwB,EACxB,0BAA0B,CAC7B,CAAC,CACT,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,IAAK,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAa,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;QACvD,UAAU,CAAC,IAAI,CACX,GAAG,IAAA,2CAAsB,EACrB,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,CAClF,CACJ,CAAC;IACN,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,4DAA4D;AAC5D,SAAS,+BAA+B,CACpC,MAAyB,EACzB,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC;gBACJ,IAAI,EAAE,qBAAa,CAAC,oCAAoC;gBACxD,OAAO,EAAE,wDAAwD;gBACjE,IAAI,EAAE,GAAG,UAAU,2BAA2B;gBAC9C,MAAM,EAAE,OAAO;aAClB,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,SAAS,6BAA6B,CAClC,MAAyB,EACzB,UAAkB;IAElB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,gCAAgC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,8BAA8B;gBAClD,OAAO,EAAE,2BAA2B,EAAE,kBAAkB;gBACxD,IAAI,EAAE,GAAG,UAAU,UAAU;gBAC7B,QAAQ,EAAE,gCAAgC;gBAC1C,MAAM,EAAE,MAAM,CAAC,OAAO;aACzB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC"}
+{"version":3,"file":"evm-sign712-metamask.js","sourceRoot":"","sources":["../../../src/validations/evm-sign712-metamask.ts"],"names":[],"mappings":";;AA2BA,wEA8CC;AAzED,oCAQkB;AAClB,+CAAoD;AACpD,2CAAiE;AACjE,gDAAmD;AACnD,+CAMuB;AAEvB,MAAM,gCAAgC,GAAkC;IACpE,0BAAkB,CAAC,MAAM;IACzB,0BAAkB,CAAC,IAAI;IACvB,0BAAkB,CAAC,IAAI;IACvB,0BAAkB,CAAC,eAAe;CACrC,CAAC;AAEF,SAAgB,8BAA8B,CAC1C,OAA4B,EAC5B,QAAgB,EAChB,WAAoB,EACpB,SAAkB,EAClB,mBAA2B,EAC3B,wBAAiC;IAEjC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAa,CAAC,eAAe;YAAE,SAAS;QAE5D,MAAM,UAAU,GAAG,GAAG,QAAQ,oBAAoB,CAAC,GAAG,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAkC,CAAC;QAEvD,sEAAsE;QACtE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,6CAA6C;gBACjE,OAAO,EAAE,mDAAmD;gBAC5D,IAAI,EAAE,GAAG,UAAU,OAAO;gBAC1B,MAAM,EAAE,IAAI;aACf,CAAC,CAAC;YACH,SAAS;QACb,CAAC;QAED,UAAU,CAAC,IAAI,CACX,GAAG,+BAA+B,CAAC,MAAM,EAAE,UAAU,CAAC,EACtD,GAAG,6BAA6B,CAAC,MAAM,EAAE,UAAU,CAAC,EACpD,GAAG,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,EACvD,GAAG,wBAAwB,CACvB,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,wBAAwB,CACrE,CACJ,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAa,CAAC;QACzD,UAAU,CAAC,IAAI,CACX,GAAG,8BAA8B,CAC7B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,CAChE,CACJ,CAAC;IACN,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,4DAA4D;AAC5D,SAAS,+BAA+B,CACpC,MAAyB,EACzB,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC;gBACJ,IAAI,EAAE,qBAAa,CAAC,oCAAoC;gBACxD,OAAO,EAAE,wDAAwD;gBACjE,IAAI,EAAE,GAAG,UAAU,2BAA2B;gBAC9C,MAAM,EAAE,OAAO;aAClB,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,SAAS,6BAA6B,CAClC,MAAyB,EACzB,UAAkB;IAElB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,gCAAgC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,8BAA8B;gBAClD,OAAO,EAAE,2BAA2B,EAAE,kBAAkB;gBACxD,IAAI,EAAE,GAAG,UAAU,UAAU;gBAC7B,QAAQ,EAAE,gCAAgC;gBAC1C,MAAM,EAAE,MAAM,CAAC,OAAO;aACzB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,oDAAoD;AACpD,uDAAuD;AACvD,gFAAgF;AAChF,SAAS,qBAAqB,CAC1B,IAAoB,EACpB,UAAkB,EAClB,WAAoB;IAEpB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,6CAA6C;YACjE,OAAO,EAAE,yDAAyD;YAClE,IAAI,EAAE,GAAG,UAAU,mBAAmB;YACtC,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;SAC3B,CAAC,CAAC;IACP,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,8BAA8B;YAClD,OAAO,EAAE,gEAAgE;YACzE,IAAI,EAAE,GAAG,UAAU,sBAAsB;YACzC,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;SAC9B,CAAC,CAAC;IACP,CAAC;IAED,IACI,IAAI,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;QAC3C,CAAC,IAAA,qBAAa,EACV,kCAA4B,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAC3E,EACH,CAAC;QACC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,8CAA8C;YAClE,OAAO,EAAE,6DAA6D;YACtE,IAAI,EAAE,GAAG,UAAU,gCAAgC;YACnD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACxC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,gFAAgF;AAChF,SAAS,wBAAwB,CAC7B,IAAoB,EACpB,UAAkB,EAClB,WAAoB,EACpB,SAAkB,EAClB,wBAAiC;IAEjC,IAAI,SAAS;QAAE,OAAO,EAAE,CAAC;IAEzB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAA+B,CAAC;IAC/D,IACI,wBAAwB,KAAK,SAAS;QACtC,SAAS,KAAK,SAAS;QACvB,CAAC,IAAA,uBAAa,EAAC,WAAW,EAAE,SAAS,EAAE,wBAAwB,CAAC,EAClE,CAAC;QACC,OAAO,CAAC;gBACJ,IAAI,EAAE,qBAAa,CAAC,gCAAgC;gBACpD,OAAO,EAAE,uEAAuE;gBAChF,IAAI,EAAE,GAAG,UAAU,yBAAyB;gBAC5C,QAAQ,EAAE,wBAAwB;gBAClC,MAAM,EAAE,SAAS;aACpB,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,SAAS,8BAA8B,CACnC,OAAiB,EACjB,MAAyB,EACzB,UAAkB,EAClB,WAAoB,EACpB,mBAA2B;IAE3B,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,IAAA,6BAAe,EAC9B,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAChE,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;IAEvD,UAAU,CAAC,IAAI,CACX,GAAG,IAAA,4CAA8B,EAC7B,UAAU,EAAE,OAAO,EAAE,UAAU,CAClC,CACJ,CAAC;IAEF,IAAA,2CAA6B,EAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAE3E,yEAAyE;IACzE,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,sCAAsC;YAC1D,OAAO,EAAE,gDAAgD;YACzD,IAAI,EAAE,GAAG,UAAU,uBAAuB;SAC7C,CAAC,CAAC;IACP,CAAC;IAED,2DAA2D;IAC3D,IAAI,UAAU,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,6CAA6C;YACjE,OAAO,EAAE,sDAAsD;YAC/D,IAAI,EAAE,GAAG,UAAU,uBAAuB;SAC7C,CAAC,CAAC;IACP,CAAC;IAED,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;QAC5B,IAAA,4CAA8B,EAC1B,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,mBAAmB,EACrD,UAAU,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CAC1D,CAAC;IACN,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/cjs/validations/evm-sign7702.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateSign7702Action = validateSign7702Action;
 exports.validateSign7702Actions = validateSign7702Actions;
 const types_1 = require("../types");
 const types_2 = require("../whitelists/types");
@@ -8,38 +7,6 @@ const evm_1 = require("../whitelists/evm");
 // =============================================
 // Sign7702Authorization constraints
 // =============================================
-// CRITICAL: per-action checks for a `Sign7702Authorization` action.
-// Shared between intent-scope (`validateSign7702Actions`) and hook-scope
-// (`validateHookSign7702Binding`); both wrap this with their scope-specific
-// constraints (intent: position+duplicate; hook: type↔actions binding +
-// `validateHookDelegateOp` for position/count).
-function validateSign7702Action(action, actionPath, realChainId) {
-    const violations = [];
-    // HIGH: actions[] must contain exactly one element — Delegate
-    const ops = action.actions;
-    if (ops.length !== 1 || ops[0] !== types_1.EvmActionOperation.Delegate) {
-        violations.push({
-            code: types_1.ViolationCode.Sign7702ActionsNotSingleDelegate,
-            message: `Sign7702Authorization actions must contain exactly [Delegate]`,
-            path: `${actionPath}.actions`,
-            expected: [types_1.EvmActionOperation.Delegate],
-            actual: action.actions,
-        });
-    }
-    // CRITICAL: data.contractAddress must be in the whitelist
-    const data = action.data;
-    const contractAddress = data?.contractAddress;
-    if (!contractAddress
-        || !(0, types_2.isWhitelisted)(evm_1.EIP7702_DELEGATION_CONTRACTS, realChainId, contractAddress)) {
-        violations.push({
-            code: types_1.ViolationCode.Sign7702ContractAddressNotWhitelisted,
-            message: `Sign7702Authorization contractAddress is not in the whitelist`,
-            path: `${actionPath}.data.contractAddress`,
-            actual: contractAddress,
-        });
-    }
-    return violations;
-}
 function validateSign7702Actions(actions, basePath, realChainId) {
     const violations = [];
     let sign7702Count = 0;
@@ -49,7 +16,28 @@ function validateSign7702Actions(actions, basePath, realChainId) {
         if (action.type !== types_1.EvmActionKind.Sign7702Authorization)
             continue;
         const actionPath = `${basePath}.requiredActions[${i}]`;
-        violations.push(...validateSign7702Action(action, actionPath, realChainId));
+        // HIGH: actions[] must contain exactly one element — Delegate
+        if (action.actions.length !== 1 ||
+            action.actions[0] !== types_1.EvmActionOperation.Delegate) {
+            violations.push({
+                code: types_1.ViolationCode.Sign7702ActionsNotSingleDelegate,
+                message: `Sign7702Authorization actions must contain exactly [Delegate]`,
+                path: `${actionPath}.actions`,
+                expected: [types_1.EvmActionOperation.Delegate],
+                actual: action.actions,
+            });
+        }
+        // CRITICAL: data.contractAddress must be in the whitelist
+        const data = action.data;
+        const contractAddress = data?.contractAddress;
+        if (!contractAddress || !(0, types_2.isWhitelisted)(evm_1.EIP7702_DELEGATION_CONTRACTS, realChainId, contractAddress)) {
+            violations.push({
+                code: types_1.ViolationCode.Sign7702ContractAddressNotWhitelisted,
+                message: `Sign7702Authorization contractAddress is not in the whitelist`,
+                path: `${actionPath}.data.contractAddress`,
+                actual: contractAddress,
+            });
+        }
         // HIGH: at most one Sign7702Authorization per intent
         // Note: only the first duplicate will be reported, subsequent ones will be ignored
         sign7702Count++;

package/dist/cjs/validations/evm-sign7702.js.map

@@ -1 +1 @@
-{"version":3,"file":"evm-sign7702.js","sourceRoot":"","sources":["../../../src/validations/evm-sign7702.ts"],"names":[],"mappings":";;AAsBA,wDAmCC;AAED,0DAiCC;AA5FD,oCASkB;AAClB,+CAAoD;AACpD,2CAAiE;AAEjE,gDAAgD;AAChD,oCAAoC;AACpC,gDAAgD;AAEhD,oEAAoE;AACpE,yEAAyE;AACzE,4EAA4E;AAC5E,wEAAwE;AACxE,gDAAgD;AAChD,SAAgB,sBAAsB,CAClC,MAA0E,EAC1E,UAAkB,EAClB,WAAoB;IAEpB,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,8DAA8D;IAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAmB,CAAC;IACvC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,0BAAkB,CAAC,QAAQ,EAAE,CAAC;QAC7D,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,gCAAgC;YACpD,OAAO,EAAE,+DAA+D;YACxE,IAAI,EAAE,GAAG,UAAU,UAAU;YAC7B,QAAQ,EAAE,CAAC,0BAAkB,CAAC,QAAQ,CAAC;YACvC,MAAM,EAAE,MAAM,CAAC,OAAO;SACzB,CAAC,CAAC;IACP,CAAC;IAED,0DAA0D;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAgD,CAAC;IACrE,MAAM,eAAe,GAAG,IAAI,EAAE,eAAe,CAAC;IAC9C,IACI,CAAC,eAAe;WACb,CAAC,IAAA,qBAAa,EAAC,kCAA4B,EAAE,WAAW,EAAE,eAAe,CAAC,EAC/E,CAAC;QACC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,qCAAqC;YACzD,OAAO,EAAE,+DAA+D;YACxE,IAAI,EAAE,GAAG,UAAU,uBAAuB;YAC1C,MAAM,EAAE,eAAe;SAC1B,CAAC,CAAC;IACP,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAgB,uBAAuB,CACnC,OAA4B,EAC5B,QAAgB,EAChB,WAAoB;IAEpB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,kBAAkB,GAAG,CAAC,CAAC,CAAC;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAa,CAAC,qBAAqB;YAAE,SAAS;QAElE,MAAM,UAAU,GAAG,GAAG,QAAQ,oBAAoB,CAAC,GAAG,CAAC;QACvD,UAAU,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;QAE5E,qDAAqD;QACrD,mFAAmF;QACnF,aAAa,EAAE,CAAC;QAChB,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YACtB,kBAAkB,GAAG,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,8BAA8B;gBAClD,OAAO,EAAE,kEAAkE,kBAAkB,QAAQ,CAAC,EAAE;gBACxG,IAAI,EAAE,GAAG,UAAU,OAAO;gBAC1B,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,aAAa;aACxB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}
+{"version":3,"file":"evm-sign7702.js","sourceRoot":"","sources":["../../../src/validations/evm-sign7702.ts"],"names":[],"mappings":";;AAgBA,0DA0DC;AA1ED,oCAQkB;AAClB,+CAAoD;AACpD,2CAAiE;AAEjE,gDAAgD;AAChD,oCAAoC;AACpC,gDAAgD;AAEhD,SAAgB,uBAAuB,CACnC,OAA4B,EAC5B,QAAgB,EAChB,WAAoB;IAEpB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,kBAAkB,GAAG,CAAC,CAAC,CAAC;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAa,CAAC,qBAAqB;YAAE,SAAS;QAElE,MAAM,UAAU,GAAG,GAAG,QAAQ,oBAAoB,CAAC,GAAG,CAAC;QAEvD,8DAA8D;QAC9D,IACI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAC3B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,0BAAkB,CAAC,QAAQ,EACnD,CAAC;YACC,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,gCAAgC;gBACpD,OAAO,EAAE,+DAA+D;gBACxE,IAAI,EAAE,GAAG,UAAU,UAAU;gBAC7B,QAAQ,EAAE,CAAC,0BAAkB,CAAC,QAAQ,CAAC;gBACvC,MAAM,EAAE,MAAM,CAAC,OAAO;aACzB,CAAC,CAAC;QACP,CAAC;QAED,0DAA0D;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAgD,CAAC;QACrE,MAAM,eAAe,GAAG,IAAI,EAAE,eAAe,CAAC;QAC9C,IAAI,CAAC,eAAe,IAAI,CAAC,IAAA,qBAAa,EAAC,kCAA4B,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;YACjG,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,qCAAqC;gBACzD,OAAO,EAAE,+DAA+D;gBACxE,IAAI,EAAE,GAAG,UAAU,uBAAuB;gBAC1C,MAAM,EAAE,eAAe;aAC1B,CAAC,CAAC;QACP,CAAC;QAED,qDAAqD;QACrD,mFAAmF;QACnF,aAAa,EAAE,CAAC;QAChB,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YACtB,kBAAkB,GAAG,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,8BAA8B;gBAClD,OAAO,EAAE,kEAAkE,kBAAkB,QAAQ,CAAC,EAAE;gBACxG,IAAI,EAAE,GAAG,UAAU,OAAO;gBAC1B,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,aAAa;aACxB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/cjs/validations/hooks-common.js

@@ -1,31 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.HookMode = void 0;
 exports.validateHooks = validateHooks;
 const types_1 = require("../types");
 const enums_1 = require("../types/enums");
-const address_1 = require("../helpers/address");
-const gas_compensation_1 = require("../helpers/gas-compensation");
-const placeholder_1 = require("../helpers/placeholder");
 const solana_hook_1 = require("./solana-hook");
-const evm_op_hook_1 = require("./evm-op-hook");
-const compensation_hook_1 = require("./compensation-hook");
-const subscription_to_chain_id_1 = require("../whitelists/subscription-to-chain-id");
-// Re-exported so call sites can pass the mode without importing from helpers.
-var placeholder_2 = require("../helpers/placeholder");
-Object.defineProperty(exports, "HookMode", { enumerable: true, get: function () { return placeholder_2.HookMode; } });
-// Allowed hook-scope operations — each chain checked against its own enum.
-const EVM_HOOK_OPERATIONS = [
-    enums_1.EvmActionOperation.Delegate,
-    enums_1.EvmActionOperation.Hook,
-    enums_1.EvmActionOperation.GasCompensation,
-];
-const EVM_HOOK_OPERATIONS_SET = new Set(EVM_HOOK_OPERATIONS);
-const SOLANA_HOOK_OPERATIONS = [
-    enums_1.SolanaActionOperation.Hook,
-    enums_1.SolanaActionOperation.GasCompensation,
-];
-const SOLANA_HOOK_OPERATIONS_SET = new Set(SOLANA_HOOK_OPERATIONS);
+// Both EVM and Solana use identical string values for hook operations
+const HOOK_OPERATIONS = ["Hook", "GasCompensation"];
+const HOOK_OPERATIONS_SET = new Set(HOOK_OPERATIONS);
 function validateHooks(request, response, quoteMode) {
     return [
         ...validateHookAAConstraint(request, response),
@@ -59,35 +40,26 @@ function validateHookAAConstraint(request, response) {
     }
     return violations;
 }
-// HIGH: preHooks = request.preHooks + one compensation hook per unique
-// gasCompensationInfo group (exact equality — API always adds one per group).
-// postHooks must match exactly — the API never adds extras to postHooks.
+// HIGH: response.preHooks.length must equal request.preHooks.length
 function validateHookCounts(request, response) {
     const violations = [];
     const requestPreCount = request.preHooks?.length ?? 0;
     const requestPostCount = request.postHooks?.length ?? 0;
-    // preHooks: exactly request.preHooks.length + one per unique gas
-    // compensation group. If request has no gasCompensationInfo at all, extras
-    // are forbidden (this also guards against MITM adding preHook entries when
-    // the user never asked for compensation).
-    const compensationGroupCount = (0, gas_compensation_1.extractGasCompensationGroups)(request).length;
-    const expectedPreCount = requestPreCount + compensationGroupCount;
-    if (response.preHooks.length !== expectedPreCount) {
+    if (response.preHooks.length !== requestPreCount) {
         violations.push({
             code: types_1.ViolationCode.HookCountMismatch,
-            message: "response.preHooks count does not match"
-                + " request.preHooks.length + unique gasCompensationInfo groups",
+            message: "response.preHooks count does not match request.preHooks count",
             path: "response.preHooks",
-            expected: expectedPreCount,
+            expected: requestPreCount,
             actual: response.preHooks.length,
         });
     }
-    // postHooks: strict 1:1 match, no extras allowed
-    if (response.postHooks.length !== requestPostCount) {
+    // postHooks may contain additional compensation hooks beyond what was in the request,
+    // so response count must be >= request count
+    if (response.postHooks.length < requestPostCount) {
         violations.push({
             code: types_1.ViolationCode.HookCountMismatch,
-            message: "response.postHooks count does not match"
-                + " request.postHooks count",
+            message: "response.postHooks count is less than request.postHooks count",
             path: "response.postHooks",
             expected: requestPostCount,
             actual: response.postHooks.length,
@@ -102,7 +74,7 @@ function validatePreHooks(request, response, quoteMode) {
         const basePath = `response.preHooks[${i}]`;
         const hookPayload = response.preHooks[i];
         const requestHook = requestHooks[i];
-        violations.push(...validateSingleHookPayload(hookPayload, requestHook, basePath, request, response.trades, placeholder_1.HookMode.PreHooks, quoteMode));
+        violations.push(...validateSingleHookPayload(hookPayload, requestHook, basePath, request, quoteMode));
     }
     return violations;
 }
@@ -114,153 +86,31 @@ function validatePostHooks(request, response, quoteMode) {
         const hookPayload = response.postHooks[i];
         // User postHooks are matched by index; extra entries are compensation hooks
         const requestHook = i < requestHooks.length ? requestHooks[i] : undefined;
-        violations.push(...validateSingleHookPayload(hookPayload, requestHook, basePath, request, response.trades, placeholder_1.HookMode.PostHooks, quoteMode));
+        violations.push(...validateSingleHookPayload(hookPayload, requestHook, basePath, request, quoteMode));
     }
     return violations;
 }
-function validateSingleHookPayload(hookPayload, requestHook, basePath, request, responseTrades, mode, quoteMode) {
-    const isCompensationPreHook = requestHook === undefined && mode === placeholder_1.HookMode.PreHooks;
+function validateSingleHookPayload(hookPayload, requestHook, basePath, request, quoteMode) {
     return [
-        ...validateHookEcho(hookPayload, requestHook, basePath, responseTrades, mode),
+        ...validateHookEcho(hookPayload, requestHook, basePath),
         ...validateHookUniqueActionIds(hookPayload, basePath),
         ...validateHookActionsList(hookPayload, basePath),
-        ...validateHookDelegateOp(hookPayload, basePath),
-        ...validateHookSolanaNotDirect(hookPayload, basePath),
         ...validateGasCompensationRequiresInfo(hookPayload, basePath, request),
-        ...(isCompensationPreHook
-            ? (0, compensation_hook_1.validateCompensationHookStructure)(hookPayload, basePath, request)
-            : []),
-        ...dispatchChainSpecificValidation(hookPayload, requestHook, basePath, quoteMode, request, mode, responseTrades),
+        ...dispatchChainSpecificValidation(hookPayload, requestHook, basePath, quoteMode, request),
     ];
 }
-// MEDIUM: Solana hooks must not be of type 'direct'.
-function validateHookSolanaNotDirect(hookPayload, basePath) {
-    const realChainId = (0, subscription_to_chain_id_1.resolveChainIdOrSelf)(hookPayload.hook.chainId);
-    if ((0, address_1.getChainEngine)(realChainId) !== enums_1.ChainEngine.Solana)
+// CRITICAL: response hook must echo back the request hook exactly
+function validateHookEcho(hookPayload, requestHook, basePath) {
+    if (!requestHook)
         return [];
-    if (hookPayload.hook.type !== enums_1.BundleHookType.Direct)
-        return [];
-    return [{
-            code: types_1.ViolationCode.HookSolanaCannotBeDirect,
-            message: "Solana hooks cannot be of type 'direct'",
-            path: `${basePath}.hook.type`,
-            expected: enums_1.BundleHookType.Delegated,
-            actual: hookPayload.hook.type,
-        }];
-}
-// CRITICAL: response hook must echo back the request hook field-by-field.
-// Notes:
-//   - hook.data in the response has eager placeholders resolved (deferred markers kept).
-//     We apply the same resolution to request.data and compare.
-//   - For Solana hooks the API deletes `to` and `value` in the echo; we skip those.
-//   - For EVM hooks `value` is copied from request as-is (eager resolution is not
-//     reflected in the echoed value — only in internal txData used by requiredActions).
-function validateHookEcho(hookPayload, requestHook, basePath, responseTrades, mode) {
-    // Missing request counterpart — two shapes, both are MITM-safe:
-    //  (a) preHook with `i >= request.preHooks.length`:
-    //      legitimate case — compensation hook appended by the API.
-    //      MITM case — attacker injects an arbitrary preHook.
-    //      The echo-by-field check can't distinguish them (there's no request
-    //      to compare against), so we delegate to the structural compensation
-    //      check.
-    //  (b) postHook with `i >= request.postHooks.length`:
-    //      no legitimate case — the API never appends to postHooks. So we
-    //      produce a violation.
-    if (!requestHook) {
-        if (mode === placeholder_1.HookMode.PostHooks) {
-            return [{
-                    code: types_1.ViolationCode.UnexpectedPostHook,
-                    message: "response.postHooks contains an entry with no matching"
-                        + " request postHook",
-                    path: `${basePath}.hook`,
-                    actual: hookPayload.hook,
-                }];
-        }
-        return [];
-    }
-    const echoed = hookPayload.hook;
-    const chainId = requestHook.chainId;
-    const realChainId = (0, subscription_to_chain_id_1.resolveChainIdOrSelf)(chainId);
-    const isSolana = (0, address_1.getChainEngine)(realChainId) === enums_1.ChainEngine.Solana;
-    const hookPath = `${basePath}.hook`;
-    const violations = [];
-    // chainId — strict number equality (subscriptionId on both sides)
-    if (echoed.chainId !== chainId) {
-        violations.push(echoMismatch(`${hookPath}.chainId`, requestHook.chainId, echoed.chainId));
-    }
-    // from — address equality
-    if (!(0, address_1.addressEquals)(realChainId, echoed.from, requestHook.from)) {
-        violations.push(echoMismatch(`${hookPath}.from`, requestHook.from, echoed.from));
-    }
-    // isAtomic — strict boolean
-    if (echoed.isAtomic !== requestHook.isAtomic) {
-        violations.push(echoMismatch(`${hookPath}.isAtomic`, requestHook.isAtomic, echoed.isAtomic));
-    }
-    // to, value — chain-dependent.
-    // Solana: API deletes both from the echo; skip entirely.
-    // EVM: compare as-is (value is not modified by placeholder resolution).
-    if (!isSolana) {
-        violations.push(...compareOptionalAddress(realChainId, `${hookPath}.to`, requestHook.to, echoed.to));
-        violations.push(...compareOptionalString(`${hookPath}.value`, requestHook.value, echoed.value));
-    }
-    // data — eager placeholders are resolved by the API before echoing.
-    const { resolved: expectedData, errors } = (0, placeholder_1.resolveEagerPlaceholders)(requestHook.data, realChainId, requestHook.placeHolders, responseTrades, mode);
-    for (const error of errors) {
-        const reasonText = placeholder_1.PlaceholderResolutionErrorReason[error.reason];
-        violations.push({
-            code: types_1.ViolationCode.HookPlaceholderResolutionFailed,
-            message: `failed to resolve placeholder "${error.nameVariable}"`
-                + ` (${reasonText})`,
-            path: `${hookPath}.data`,
-            actual: { nameVariable: error.nameVariable, reason: reasonText },
-            details: error.details,
-        });
-    }
-    if (expectedData !== echoed.data) {
-        violations.push(echoMismatch(`${hookPath}.data`, expectedData, echoed.data));
-    }
-    // placeHolders — deep equality via stringify (same source → same serialization).
-    if (JSON.stringify(echoed.placeHolders)
-        !== JSON.stringify(requestHook.placeHolders)) {
-        violations.push(echoMismatch(`${hookPath}.placeHolders`, requestHook.placeHolders, echoed.placeHolders));
-    }
-    // gasCompensationInfo — deep equality or both undefined.
-    if (JSON.stringify(echoed.gasCompensationInfo)
-        !== JSON.stringify(requestHook.gasCompensationInfo)) {
-        violations.push(echoMismatch(`${hookPath}.gasCompensationInfo`, requestHook.gasCompensationInfo, echoed.gasCompensationInfo));
-    }
-    // type — strict equality (or both undefined).
-    if (echoed.type !== requestHook.type) {
-        violations.push(echoMismatch(`${hookPath}.type`, requestHook.type, echoed.type));
-    }
-    // gasLimit — strict string equality (or both undefined).
-    if (echoed.gasLimit !== requestHook.gasLimit) {
-        violations.push(echoMismatch(`${hookPath}.gasLimit`, requestHook.gasLimit, echoed.gasLimit));
-    }
-    return violations;
-}
-function echoMismatch(path, expected, actual) {
-    return {
-        code: types_1.ViolationCode.HookEchoMismatch,
-        message: "response hook field does not match request",
-        path,
-        expected,
-        actual,
-    };
-}
-function compareOptionalString(path, expected, actual) {
-    if (expected === actual)
-        return [];
-    return [echoMismatch(path, expected, actual)];
-}
-function compareOptionalAddress(chainId, path, expected, actual) {
-    if (expected === undefined && actual === undefined)
-        return [];
-    if (expected === undefined || actual === undefined) {
-        return [echoMismatch(path, expected, actual)];
-    }
-    if (!(0, address_1.addressEquals)(chainId, expected, actual)) {
-        return [echoMismatch(path, expected, actual)];
+    if (JSON.stringify(hookPayload.hook) !== JSON.stringify(requestHook)) {
+        return [{
+                code: types_1.ViolationCode.HookEchoMismatch,
+                message: "response hook does not match request hook",
+                path: `${basePath}.hook`,
+                expected: requestHook,
+                actual: hookPayload.hook,
+            }];
     }
     return [];
 }
@@ -288,10 +138,6 @@ function validateHookUniqueActionIds(hookPayload, basePath) {
 }
 // HIGH: each hook required action must have exactly one operation: [Hook] or [GasCompensation]
 function validateHookActionsList(hookPayload, basePath) {
-    const realChainId = (0, subscription_to_chain_id_1.resolveChainIdOrSelf)(hookPayload.hook.chainId);
-    const isSolana = (0, address_1.getChainEngine)(realChainId) === enums_1.ChainEngine.Solana;
-    const allowedSet = isSolana ? SOLANA_HOOK_OPERATIONS_SET : EVM_HOOK_OPERATIONS_SET;
-    const allowedList = isSolana ? SOLANA_HOOK_OPERATIONS : EVM_HOOK_OPERATIONS;
     const violations = [];
     for (let i = 0; i < hookPayload.requiredActions.length; i++) {
         const action = hookPayload.requiredActions[i];
@@ -306,85 +152,26 @@ function validateHookActionsList(hookPayload, basePath) {
             });
             continue;
         }
-        if (!allowedSet.has(action.actions[0])) {
+        if (!HOOK_OPERATIONS_SET.has(action.actions[0])) {
             violations.push({
                 code: types_1.ViolationCode.HookActionsInvalid,
                 message: "hook required action operation must be Hook"
                     + " or GasCompensation",
                 path: `${actionPath}.actions`,
-                expected: allowedList,
+                expected: HOOK_OPERATIONS,
                 actual: action.actions,
             });
         }
     }
     return violations;
 }
-// HIGH: Delegate-op constraints for EVM hook requiredActions.
-//   * `Delegate` may appear at most once.
-//   * If present, it must be the first required action (the API emits
-//     Sign7702Authorization → Sign712MetaMaskCaveats* in this order).
-//   * Direct hooks (`hook.type === 'direct'`) must not contain `Delegate`
-//     (Direct mode skips EIP-7702 delegation entirely).
-// Solana hooks bypass this check — `Delegate` is rejected upstream by
-// `validateHookActionsList`.
-function validateHookDelegateOp(hookPayload, basePath) {
-    const realChainId = (0, subscription_to_chain_id_1.resolveChainIdOrSelf)(hookPayload.hook.chainId);
-    if ((0, address_1.getChainEngine)(realChainId) === enums_1.ChainEngine.Solana)
-        return [];
-    const indices = [];
-    for (let i = 0; i < hookPayload.requiredActions.length; i++) {
-        const action = hookPayload.requiredActions[i];
-        const ops = action.actions;
-        if (ops.includes(enums_1.EvmActionOperation.Delegate)) {
-            indices.push(i);
-        }
-    }
-    if (indices.length === 0)
-        return [];
-    const violations = [];
-    if (hookPayload.hook.type === enums_1.BundleHookType.Direct) {
-        violations.push({
-            code: types_1.ViolationCode.HookDelegateInDirect,
-            message: "Direct hook must not contain a Delegate operation"
-                + " (Direct mode skips EIP-7702 delegation)",
-            path: `${basePath}.requiredActions`,
-            actual: indices,
-        });
-    }
-    if (indices.length > 1) {
-        violations.push({
-            code: types_1.ViolationCode.HookMultipleDelegate,
-            message: "hook requiredActions must contain at most one Delegate",
-            path: `${basePath}.requiredActions`,
-            expected: 1,
-            actual: indices,
-        });
-    }
-    if (indices[0] !== 0) {
-        violations.push({
-            code: types_1.ViolationCode.HookDelegateNotFirst,
-            message: "if Delegate is present in hook requiredActions, it must be"
-                + " the first action",
-            path: `${basePath}.requiredActions[${indices[0]}]`,
-            expected: 0,
-            actual: indices[0],
-        });
-    }
-    return violations;
-}
 // CRITICAL: GasCompensation must only appear when gasCompensationInfo exists
 function validateGasCompensationRequiresInfo(hookPayload, basePath, request) {
     const hasGasCompensationInfo = (request.preHooks ?? []).some(h => h.gasCompensationInfo !== undefined);
-    const realChainId = (0, subscription_to_chain_id_1.resolveChainIdOrSelf)(hookPayload.hook.chainId);
-    const isSolana = (0, address_1.getChainEngine)(realChainId) === enums_1.ChainEngine.Solana;
-    const gasCompensationOp = isSolana
-        ? enums_1.SolanaActionOperation.GasCompensation
-        : enums_1.EvmActionOperation.GasCompensation;
     const violations = [];
     for (let i = 0; i < hookPayload.requiredActions.length; i++) {
         const action = hookPayload.requiredActions[i];
-        const hasGasCompensation = action.actions
-            .includes(gasCompensationOp);
+        const hasGasCompensation = action.actions.includes("GasCompensation");
         if (hasGasCompensation && !hasGasCompensationInfo) {
             violations.push({
                 code: types_1.ViolationCode.HookGasCompensationWithoutInfo,
@@ -397,20 +184,18 @@ function validateGasCompensationRequiresInfo(hookPayload, basePath, request) {
     }
     return violations;
 }
-function dispatchChainSpecificValidation(hookPayload, requestHook, basePath, quoteMode, request, mode, responseTrades) {
-    const realChainId = (0, subscription_to_chain_id_1.resolveChainIdOrSelf)(hookPayload.hook.chainId);
-    if ((0, address_1.getChainEngine)(realChainId) === enums_1.ChainEngine.Solana) {
+function dispatchChainSpecificValidation(hookPayload, requestHook, basePath, quoteMode, request) {
+    const chainId = hookPayload.hook.chainId;
+    if (chainId === enums_1.ChainId.Solana) {
         const srcChainAuthorityAddress = findSolanaSrcChainAuthority(request);
-        return (0, solana_hook_1.validateSolanaHookActions)(hookPayload, requestHook, basePath, quoteMode, srcChainAuthorityAddress, request, realChainId, mode, responseTrades);
+        return (0, solana_hook_1.validateSolanaHookActions)(hookPayload, requestHook, basePath, quoteMode, srcChainAuthorityAddress, request);
     }
-    return (0, evm_op_hook_1.validateEvmHookActions)(hookPayload, requestHook, basePath, mode, responseTrades, realChainId, request);
+    // AI: EVM hook validation dispatch will go here when implemented
+    return [];
 }
 function findSolanaSrcChainAuthority(request) {
     for (const trade of request.trades) {
-        const realChainId = (0, subscription_to_chain_id_1.resolveChainId)(trade.srcChainId);
-        if (realChainId === undefined)
-            continue;
-        if ((0, address_1.getChainEngine)(realChainId) === enums_1.ChainEngine.Solana) {
+        if (trade.srcChainId === enums_1.ChainId.Solana) {
             return trade.srcChainAuthorityAddress;
         }
     }