@debridge-finance/borderless-validation-sdk 0.0.0-dev-dee2389

package/dist/cjs/types/validation.js

@@ -0,0 +1,242 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Environment = exports.ViolationCode = void 0;
+var ViolationCode;
+(function (ViolationCode) {
+    // Structure
+    ViolationCode["InvalidRequestStructure"] = "INVALID_REQUEST_STRUCTURE";
+    ViolationCode["InvalidResponseStructure"] = "INVALID_RESPONSE_STRUCTURE";
+    // Echo fields
+    ViolationCode["RequestIdMismatch"] = "REQUEST_ID_MISMATCH";
+    ViolationCode["UserIdMismatch"] = "USER_ID_MISMATCH";
+    ViolationCode["IntentExpirationTimestampMismatch"] = "INTENT_EXPIRATION_TIMESTAMP_MISMATCH";
+    ViolationCode["ReferralCodeMismatch"] = "REFERRAL_CODE_MISMATCH";
+    // Required actions — general
+    ViolationCode["DuplicateActionId"] = "DUPLICATE_ACTION_ID";
+    ViolationCode["ForbiddenTransactionWithAA"] = "FORBIDDEN_TRANSACTION_WITH_AA";
+    ViolationCode["ForbiddenSign7702WithoutAA"] = "FORBIDDEN_SIGN7702_WITHOUT_AA";
+    ViolationCode["ForbiddenSign712MetaMaskWithoutAA"] = "FORBIDDEN_SIGN712_METAMASK_WITHOUT_AA";
+    ViolationCode["ForbiddenDelegateWithoutAA"] = "FORBIDDEN_DELEGATE_WITHOUT_AA";
+    ViolationCode["ForbiddenTransactionCallsWithoutAA"] = "FORBIDDEN_TRANSACTION_CALLS_WITHOUT_AA";
+    // Required actions — Sign7702Authorization
+    ViolationCode["Sign7702ActionsNotSingleDelegate"] = "SIGN7702_ACTIONS_NOT_SINGLE_DELEGATE";
+    ViolationCode["Sign7702ContractAddressNotWhitelisted"] = "SIGN7702_CONTRACT_ADDRESS_NOT_WHITELISTED";
+    ViolationCode["DuplicateSign7702Authorization"] = "DUPLICATE_SIGN7702_AUTHORIZATION";
+    // Subscription / chain resolution
+    ViolationCode["UnknownSubscriptionId"] = "UNKNOWN_SUBSCRIPTION_ID";
+    // Required actions — Sign712MetaMask
+    ViolationCode["Sign712MetaMaskEmptyTransactionCalls"] = "SIGN712_METAMASK_EMPTY_TRANSACTION_CALLS";
+    ViolationCode["Sign712MetaMaskForbiddenAction"] = "SIGN712_METAMASK_FORBIDDEN_ACTION";
+    ViolationCode["Sign712MetaMaskChainIdMismatch"] = "SIGN712_METAMASK_CHAIN_ID_MISMATCH";
+    ViolationCode["Sign712MetaMaskDomainNameNotDelegationManager"] = "SIGN712_METAMASK_DOMAIN_NAME_NOT_DELEGATION_MANAGER";
+    ViolationCode["Sign712MetaMaskVerifyingContractNotWhitelisted"] = "SIGN712_METAMASK_VERIFYING_CONTRACT_NOT_WHITELISTED";
+    ViolationCode["Sign712MetaMaskDelegatorMismatch"] = "SIGN712_METAMASK_DELEGATOR_MISMATCH";
+    ViolationCode["Sign712MetaMaskCaveatEnforcerNotWhitelisted"] = "SIGN712_METAMASK_CAVEAT_ENFORCER_NOT_WHITELISTED";
+    ViolationCode["Sign712MetaMaskMissingExactExecutionCaveat"] = "SIGN712_METAMASK_MISSING_EXACT_EXECUTION_CAVEAT";
+    ViolationCode["Sign712MetaMaskMissingExactExecutionBatchCaveat"] = "SIGN712_METAMASK_MISSING_EXACT_EXECUTION_BATCH_CAVEAT";
+    ViolationCode["Sign712MetaMaskExactExecutionMismatch"] = "SIGN712_METAMASK_EXACT_EXECUTION_MISMATCH";
+    ViolationCode["Sign712MetaMaskExactExecutionBatchMismatch"] = "SIGN712_METAMASK_EXACT_EXECUTION_BATCH_MISMATCH";
+    ViolationCode["Sign712MetaMaskCaveatDecodeError"] = "SIGN712_METAMASK_CAVEAT_DECODE_ERROR";
+    ViolationCode["Sign712MetaMaskMissingIdEnforcerCaveat"] = "SIGN712_METAMASK_MISSING_ID_ENFORCER_CAVEAT";
+    ViolationCode["Sign712MetaMaskIdEnforcerValueMismatch"] = "SIGN712_METAMASK_ID_ENFORCER_VALUE_MISMATCH";
+    ViolationCode["Sign712MetaMaskMissingTimestampEnforcerCaveat"] = "SIGN712_METAMASK_MISSING_TIMESTAMP_ENFORCER_CAVEAT";
+    ViolationCode["Sign712MetaMaskDuplicateTimestampEnforcerCaveat"] = "SIGN712_METAMASK_DUPLICATE_TIMESTAMP_ENFORCER_CAVEAT";
+    ViolationCode["Sign712MetaMaskTimestampBeforeThresholdMismatch"] = "SIGN712_METAMASK_TIMESTAMP_BEFORE_THRESHOLD_MISMATCH";
+    // Required actions — Sign712 (Intent)
+    ViolationCode["Sign712IntentMissing"] = "SIGN712_INTENT_MISSING";
+    ViolationCode["Sign712IntentDuplicate"] = "SIGN712_INTENT_DUPLICATE";
+    ViolationCode["Sign712IntentActionsNotSingleIntent"] = "SIGN712_INTENT_ACTIONS_NOT_SINGLE_INTENT";
+    ViolationCode["Sign712IntentPrimaryTypeInvalid"] = "SIGN712_INTENT_PRIMARY_TYPE_INVALID";
+    ViolationCode["Sign712IntentChainIdMismatch"] = "SIGN712_INTENT_CHAIN_ID_MISMATCH";
+    ViolationCode["Sign712IntentDomainNameInvalid"] = "SIGN712_INTENT_DOMAIN_NAME_INVALID";
+    ViolationCode["Sign712IntentDomainVersionInvalid"] = "SIGN712_INTENT_DOMAIN_VERSION_INVALID";
+    ViolationCode["Sign712IntentVerifyingContractNotWhitelisted"] = "SIGN712_INTENT_VERIFYING_CONTRACT_NOT_WHITELISTED";
+    ViolationCode["Sign712IntentIdMismatch"] = "SIGN712_INTENT_ID_MISMATCH";
+    ViolationCode["Sign712IntentIdComputeError"] = "SIGN712_INTENT_ID_COMPUTE_ERROR";
+    ViolationCode["Sign712IntentTypesInvalid"] = "SIGN712_INTENT_TYPES_INVALID";
+    // Required actions — Permit
+    ViolationCode["PermitActionsNotSingleBudget"] = "PERMIT_ACTIONS_NOT_SINGLE_BUDGET";
+    ViolationCode["PermitPrimaryTypeInvalid"] = "PERMIT_PRIMARY_TYPE_INVALID";
+    ViolationCode["PermitChainIdMismatch"] = "PERMIT_CHAIN_ID_MISMATCH";
+    ViolationCode["PermitVerifyingContractMismatch"] = "PERMIT_VERIFYING_CONTRACT_MISMATCH";
+    ViolationCode["PermitOwnerMismatch"] = "PERMIT_OWNER_MISMATCH";
+    ViolationCode["PermitSpenderMissing"] = "PERMIT_SPENDER_MISSING";
+    ViolationCode["PermitSpenderNotAllowed"] = "PERMIT_SPENDER_NOT_ALLOWED";
+    ViolationCode["PermitDetailsAllowanceHolderMismatch"] = "PERMIT_DETAILS_ALLOWANCE_HOLDER_MISMATCH";
+    ViolationCode["PermitDetailsTokenAddressMismatch"] = "PERMIT_DETAILS_TOKEN_ADDRESS_MISMATCH";
+    ViolationCode["PermitDetailsMissing"] = "PERMIT_DETAILS_MISSING";
+    ViolationCode["PermitForbiddenWithoutPermitMode"] = "PERMIT_FORBIDDEN_WITHOUT_PERMIT_MODE";
+    ViolationCode["PermitDomainNameMismatch"] = "PERMIT_DOMAIN_NAME_MISMATCH";
+    ViolationCode["PermitDomainVersionMismatch"] = "PERMIT_DOMAIN_VERSION_MISMATCH";
+    // Required actions — Permit2
+    ViolationCode["Permit2ActionsNotSingleBudget"] = "PERMIT2_ACTIONS_NOT_SINGLE_BUDGET";
+    ViolationCode["Permit2PrimaryTypeInvalid"] = "PERMIT2_PRIMARY_TYPE_INVALID";
+    ViolationCode["Permit2ChainIdMismatch"] = "PERMIT2_CHAIN_ID_MISMATCH";
+    ViolationCode["Permit2VerifyingContractNotWhitelisted"] = "PERMIT2_VERIFYING_CONTRACT_NOT_WHITELISTED";
+    ViolationCode["Permit2DomainHasVersion"] = "PERMIT2_DOMAIN_HAS_VERSION";
+    ViolationCode["Permit2TypesInvalid"] = "PERMIT2_TYPES_INVALID";
+    ViolationCode["Permit2TokenMismatch"] = "PERMIT2_TOKEN_MISMATCH";
+    ViolationCode["Permit2AmountNotMaxUint160"] = "PERMIT2_AMOUNT_NOT_MAX_UINT160";
+    ViolationCode["Permit2ExpirationMismatch"] = "PERMIT2_EXPIRATION_MISMATCH";
+    ViolationCode["Permit2MessageDetailsMissing"] = "PERMIT2_MESSAGE_DETAILS_MISSING";
+    ViolationCode["Permit2SpenderMissing"] = "PERMIT2_SPENDER_MISSING";
+    ViolationCode["Permit2SpenderNotAllowed"] = "PERMIT2_SPENDER_NOT_ALLOWED";
+    ViolationCode["Permit2DetailsAllowanceHolderMismatch"] = "PERMIT2_DETAILS_ALLOWANCE_HOLDER_MISMATCH";
+    ViolationCode["Permit2DetailsTokenAddressMismatch"] = "PERMIT2_DETAILS_TOKEN_ADDRESS_MISMATCH";
+    ViolationCode["Permit2DetailsPermit2ContractMismatch"] = "PERMIT2_DETAILS_PERMIT2_CONTRACT_MISMATCH";
+    ViolationCode["Permit2DetailsMissing"] = "PERMIT2_DETAILS_MISSING";
+    ViolationCode["Permit2ForbiddenWithoutPermitMode"] = "PERMIT2_FORBIDDEN_WITHOUT_PERMIT_MODE";
+    // Required actions — Transaction
+    ViolationCode["TransactionActionsInvalid"] = "TRANSACTION_ACTIONS_INVALID";
+    // Operations — Budget
+    ViolationCode["BudgetTransactionCallsMissing"] = "BUDGET_TRANSACTION_CALLS_MISSING";
+    ViolationCode["BudgetTokenAddressMissing"] = "BUDGET_TOKEN_ADDRESS_MISSING";
+    ViolationCode["BudgetForbiddenWithApproveNone"] = "BUDGET_FORBIDDEN_WITH_APPROVE_NONE";
+    ViolationCode["BudgetTokenAddressMismatch"] = "BUDGET_TOKEN_ADDRESS_MISMATCH";
+    ViolationCode["BudgetTokenAddressZero"] = "BUDGET_TOKEN_ADDRESS_ZERO";
+    ViolationCode["BudgetTokenNotInTrades"] = "BUDGET_TOKEN_NOT_IN_TRADES";
+    ViolationCode["BudgetTooManyTransactionCalls"] = "BUDGET_TOO_MANY_TRANSACTION_CALLS";
+    ViolationCode["BudgetCalldataInvalid"] = "BUDGET_CALLDATA_INVALID";
+    ViolationCode["BudgetAmountMismatch"] = "BUDGET_AMOUNT_MISMATCH";
+    ViolationCode["BudgetAllowanceHolderMismatch"] = "BUDGET_ALLOWANCE_HOLDER_MISMATCH";
+    ViolationCode["BudgetAllowanceHolderNotWhitelisted"] = "BUDGET_ALLOWANCE_HOLDER_NOT_WHITELISTED";
+    // Operations — Wrap
+    ViolationCode["WrapTransactionCallsMissing"] = "WRAP_TRANSACTION_CALLS_MISSING";
+    ViolationCode["WrapTooManyTransactionCalls"] = "WRAP_TOO_MANY_TRANSACTION_CALLS";
+    ViolationCode["WrapNativeTokenNotInTrades"] = "WRAP_NATIVE_TOKEN_NOT_IN_TRADES";
+    ViolationCode["WrapToNotWeth"] = "WRAP_TO_NOT_WETH";
+    ViolationCode["WrapCalldataInvalid"] = "WRAP_CALLDATA_INVALID";
+    ViolationCode["WrapAmountMismatch"] = "WRAP_AMOUNT_MISMATCH";
+    // Operations — GasCompensation
+    ViolationCode["GasCompensationTransactionCallsMissing"] = "GAS_COMPENSATION_TRANSACTION_CALLS_MISSING";
+    ViolationCode["GasCompensationTooManyTransactionCalls"] = "GAS_COMPENSATION_TOO_MANY_TRANSACTION_CALLS";
+    ViolationCode["GasCompensationNoMatchingPreHook"] = "GAS_COMPENSATION_NO_MATCHING_PRE_HOOK";
+    ViolationCode["GasCompensationToMismatch"] = "GAS_COMPENSATION_TO_MISMATCH";
+    ViolationCode["GasCompensationCalldataInvalid"] = "GAS_COMPENSATION_CALLDATA_INVALID";
+    ViolationCode["GasCompensationNativeValueZero"] = "GAS_COMPENSATION_NATIVE_VALUE_ZERO";
+    // Required actions — approval mutual exclusivity
+    ViolationCode["ApprovalMutualExclusivity"] = "APPROVAL_MUTUAL_EXCLUSIVITY";
+    // Trade validation — amount parsing (used by Budget/Wrap)
+    ViolationCode["TradeAmountInvalid"] = "TRADE_AMOUNT_INVALID";
+    // Trade validation — structure
+    ViolationCode["TradeCountMismatch"] = "TRADE_COUNT_MISMATCH";
+    // Trade validation — srcChainTokenIn
+    ViolationCode["TradeSrcTokenInChainIdMismatch"] = "TRADE_SRC_TOKEN_IN_CHAIN_ID_MISMATCH";
+    ViolationCode["TradeSrcTokenInAddressMismatch"] = "TRADE_SRC_TOKEN_IN_ADDRESS_MISMATCH";
+    ViolationCode["TradeSrcTokenInAmountMismatch"] = "TRADE_SRC_TOKEN_IN_AMOUNT_MISMATCH";
+    ViolationCode["TradeOperatingExpenseInvalid"] = "TRADE_OPERATING_EXPENSE_INVALID";
+    ViolationCode["TradeOperatingExpenseNegative"] = "TRADE_OPERATING_EXPENSE_NEGATIVE";
+    ViolationCode["TradeOperatingExpenseExpectedPositive"] = "TRADE_OPERATING_EXPENSE_EXPECTED_POSITIVE";
+    ViolationCode["TradeMutatedWithOperatingExpenseMismatch"] = "TRADE_MUTATED_WITH_OPERATING_EXPENSE_MISMATCH";
+    // Trade validation — srcChainTokenOut
+    ViolationCode["TradeSrcTokenOutChainIdMismatch"] = "TRADE_SRC_TOKEN_OUT_CHAIN_ID_MISMATCH";
+    ViolationCode["TradeSrcTokenOutAmountNegative"] = "TRADE_SRC_TOKEN_OUT_AMOUNT_NEGATIVE";
+    // Trade validation — dstChainTokenOut
+    ViolationCode["TradeDstTokenOutChainIdMismatch"] = "TRADE_DST_TOKEN_OUT_CHAIN_ID_MISMATCH";
+    ViolationCode["TradeDstTokenOutAddressMismatch"] = "TRADE_DST_TOKEN_OUT_ADDRESS_MISMATCH";
+    ViolationCode["TradeDstTokenOutAmountBelowRequested"] = "TRADE_DST_TOKEN_OUT_AMOUNT_BELOW_REQUESTED";
+    ViolationCode["TradeWithoutPartnerFeeAmountTooLow"] = "TRADE_WITHOUT_PARTNER_FEE_AMOUNT_TOO_LOW";
+    ViolationCode["TradeWithoutPartnerFeeAmountMismatch"] = "TRADE_WITHOUT_PARTNER_FEE_AMOUNT_MISMATCH";
+    // Trade validation — USD values
+    ViolationCode["TradeUsdValueNegative"] = "TRADE_USD_VALUE_NEGATIVE";
+    // Trade validation — execution-mode echo fields
+    ViolationCode["TradeSrcAuthorityAddressMismatch"] = "TRADE_SRC_AUTHORITY_ADDRESS_MISMATCH";
+    ViolationCode["TradeDstRecipientMismatch"] = "TRADE_DST_RECIPIENT_MISMATCH";
+    ViolationCode["TradeDstAuthorityAddressMismatch"] = "TRADE_DST_AUTHORITY_ADDRESS_MISMATCH";
+    // Trade validation — prependedOperatingExpenseCost
+    ViolationCode["TradePrependedCostNotZero"] = "TRADE_PREPENDED_COST_NOT_ZERO";
+    ViolationCode["TradePrependedCostInvalid"] = "TRADE_PREPENDED_COST_INVALID";
+    // Trade validation — relatedIntentId
+    ViolationCode["TradeRelatedIntentIdNotFound"] = "TRADE_RELATED_INTENT_ID_NOT_FOUND";
+    ViolationCode["TradeRelatedIntentIdChainIdInconsistent"] = "TRADE_RELATED_INTENT_ID_CHAIN_ID_INCONSISTENT";
+    ViolationCode["TradeRelatedIntentIdAuthorityInconsistent"] = "TRADE_RELATED_INTENT_ID_AUTHORITY_INCONSISTENT";
+    ViolationCode["TradeIntentChainIdMismatch"] = "TRADE_INTENT_CHAIN_ID_MISMATCH";
+    // Trade validation — partnerFeeBps
+    ViolationCode["TradePartnerFeeBpsMismatch"] = "TRADE_PARTNER_FEE_BPS_MISMATCH";
+    // Trade grouping
+    ViolationCode["IntentNotMatchedToTradeGroup"] = "INTENT_NOT_MATCHED_TO_TRADE_GROUP";
+    ViolationCode["TradeGroupHasNoIntent"] = "TRADE_GROUP_HAS_NO_INTENT";
+    ViolationCode["DuplicateIntentsInTradeGroup"] = "DUPLICATE_INTENTS_IN_TRADE_GROUP";
+    // Required actions — kind consistency
+    ViolationCode["RequiredActionKindInconsistent"] = "REQUIRED_ACTION_KIND_INCONSISTENT";
+    // Solana — general required actions
+    ViolationCode["SolanaDuplicateActionId"] = "SOLANA_DUPLICATE_ACTION_ID";
+    ViolationCode["SolanaRequiredActionsOrder"] = "SOLANA_REQUIRED_ACTIONS_ORDER";
+    ViolationCode["SolanaForbiddenTransactionWithAA"] = "SOLANA_FORBIDDEN_TRANSACTION_WITH_AA";
+    ViolationCode["SolanaForbiddenSignTransactionWithoutAA"] = "SOLANA_FORBIDDEN_SIGN_TRANSACTION_WITHOUT_AA";
+    ViolationCode["SolanaForbiddenOperationAction"] = "SOLANA_FORBIDDEN_OPERATION_ACTION";
+    // Solana — Transaction / SignTransaction common
+    ViolationCode["SolanaTransactionActionsInvalid"] = "SOLANA_TRANSACTION_ACTIONS_INVALID";
+    ViolationCode["SolanaTransactionDecodeError"] = "SOLANA_TRANSACTION_DECODE_ERROR";
+    ViolationCode["SolanaTransactionVersionInvalid"] = "SOLANA_TRANSACTION_VERSION_INVALID";
+    // Solana — Transaction (AA=false)
+    ViolationCode["SolanaTransactionFeePayerMismatch"] = "SOLANA_TRANSACTION_FEE_PAYER_MISMATCH";
+    ViolationCode["SolanaTransactionComputeBudgetMissing"] = "SOLANA_TRANSACTION_COMPUTE_BUDGET_MISSING";
+    ViolationCode["SolanaTransactionForbiddenInstruction"] = "SOLANA_TRANSACTION_FORBIDDEN_INSTRUCTION";
+    // Solana — SignTransaction (AA=true)
+    ViolationCode["SolanaSignTransactionFeePayerIsUser"] = "SOLANA_SIGN_TRANSACTION_FEE_PAYER_IS_USER";
+    ViolationCode["SolanaSignTransactionForbiddenInstruction"] = "SOLANA_SIGN_TRANSACTION_FORBIDDEN_INSTRUCTION";
+    // Solana — Budget (approve) common
+    ViolationCode["SolanaBudgetForbiddenWithApproveNone"] = "SOLANA_BUDGET_FORBIDDEN_WITH_APPROVE_NONE";
+    ViolationCode["SolanaBudgetNoApproveInstruction"] = "SOLANA_BUDGET_NO_APPROVE_INSTRUCTION";
+    // Solana — Budget — Classic SPL Token Approve
+    ViolationCode["SolanaBudgetClassicAtaMismatch"] = "SOLANA_BUDGET_CLASSIC_ATA_MISMATCH";
+    ViolationCode["SolanaBudgetClassicDelegateNotWhitelisted"] = "SOLANA_BUDGET_CLASSIC_DELEGATE_NOT_WHITELISTED";
+    ViolationCode["SolanaBudgetClassicOwnerMismatch"] = "SOLANA_BUDGET_CLASSIC_OWNER_MISMATCH";
+    ViolationCode["SolanaBudgetClassicAmountMismatch"] = "SOLANA_BUDGET_CLASSIC_AMOUNT_MISMATCH";
+    // Solana — Budget — Custom (approveProtocolTransfers)
+    ViolationCode["SolanaBudgetCustomMakerMismatch"] = "SOLANA_BUDGET_CUSTOM_MAKER_MISMATCH";
+    ViolationCode["SolanaBudgetCustomStatePdaMismatch"] = "SOLANA_BUDGET_CUSTOM_STATE_PDA_MISMATCH";
+    ViolationCode["SolanaBudgetCustomTokenProgramInvalid"] = "SOLANA_BUDGET_CUSTOM_TOKEN_PROGRAM_INVALID";
+    ViolationCode["SolanaBudgetCustomAtaMismatch"] = "SOLANA_BUDGET_CUSTOM_ATA_MISMATCH";
+    ViolationCode["SolanaBudgetCustomVecLengthMismatch"] = "SOLANA_BUDGET_CUSTOM_VEC_LENGTH_MISMATCH";
+    ViolationCode["SolanaBudgetCustomAmountMismatch"] = "SOLANA_BUDGET_CUSTOM_AMOUNT_MISMATCH";
+    // Solana — unclassified instruction
+    ViolationCode["SolanaUnclassifiedInstruction"] = "SOLANA_UNCLASSIFIED_INSTRUCTION";
+    // Solana — Compensation (forbidden)
+    ViolationCode["SolanaForbiddenCompensationAction"] = "SOLANA_FORBIDDEN_COMPENSATION_ACTION";
+    // Solana — Wrap
+    ViolationCode["SolanaWrapNotForNativeToken"] = "SOLANA_WRAP_NOT_FOR_NATIVE_TOKEN";
+    ViolationCode["SolanaWrapNoTransferInstruction"] = "SOLANA_WRAP_NO_TRANSFER_INSTRUCTION";
+    ViolationCode["SolanaWrapNoSyncNativeInstruction"] = "SOLANA_WRAP_NO_SYNC_NATIVE_INSTRUCTION";
+    ViolationCode["SolanaWrapTransferAmountMismatch"] = "SOLANA_WRAP_TRANSFER_AMOUNT_MISMATCH";
+    ViolationCode["SolanaWrapTransferToMismatch"] = "SOLANA_WRAP_TRANSFER_TO_MISMATCH";
+    ViolationCode["SolanaWrapSyncNativeAccountMismatch"] = "SOLANA_WRAP_SYNC_NATIVE_ACCOUNT_MISMATCH";
+    ViolationCode["SolanaWrapCreateAtaOwnerMismatch"] = "SOLANA_WRAP_CREATE_ATA_OWNER_MISMATCH";
+    ViolationCode["SolanaWrapCreateAtaMintMismatch"] = "SOLANA_WRAP_CREATE_ATA_MINT_MISMATCH";
+    ViolationCode["SolanaWrapCreateAtaAddressMismatch"] = "SOLANA_WRAP_CREATE_ATA_ADDRESS_MISMATCH";
+    // Solana — Sign (Intent)
+    ViolationCode["SolanaSignIntentMissing"] = "SOLANA_SIGN_INTENT_MISSING";
+    ViolationCode["SolanaSignIntentDuplicate"] = "SOLANA_SIGN_INTENT_DUPLICATE";
+    ViolationCode["SolanaSignIntentActionsInvalid"] = "SOLANA_SIGN_INTENT_ACTIONS_INVALID";
+    ViolationCode["SolanaSignIntentDataInvalid"] = "SOLANA_SIGN_INTENT_DATA_INVALID";
+    ViolationCode["SolanaSignIntentIdMismatch"] = "SOLANA_SIGN_INTENT_ID_MISMATCH";
+    ViolationCode["SolanaSignIntentIdComputeError"] = "SOLANA_SIGN_INTENT_ID_COMPUTE_ERROR";
+    // Hooks — common (chain-agnostic)
+    ViolationCode["HookEchoMismatch"] = "HOOK_ECHO_MISMATCH";
+    ViolationCode["HookCountMismatch"] = "HOOK_COUNT_MISMATCH";
+    ViolationCode["NonEmptyHooksWithoutAA"] = "NON_EMPTY_HOOKS_WITHOUT_AA";
+    ViolationCode["HookActionsInvalid"] = "HOOK_ACTIONS_INVALID";
+    ViolationCode["HookGasCompensationWithoutInfo"] = "HOOK_GAS_COMPENSATION_WITHOUT_INFO";
+    ViolationCode["HookDuplicateActionId"] = "HOOK_DUPLICATE_ACTION_ID";
+    // Hooks — Solana
+    ViolationCode["SolanaHookDataMismatch"] = "SOLANA_HOOK_DATA_MISMATCH";
+    ViolationCode["SolanaHookDecodeError"] = "SOLANA_HOOK_DECODE_ERROR";
+    ViolationCode["SolanaGasCompensationDecodeError"] = "SOLANA_GAS_COMPENSATION_DECODE_ERROR";
+    ViolationCode["SolanaGasCompensationForbiddenProgram"] = "SOLANA_GAS_COMPENSATION_FORBIDDEN_PROGRAM";
+    ViolationCode["SolanaGasCompensationTransferMissing"] = "SOLANA_GAS_COMPENSATION_TRANSFER_MISSING";
+    ViolationCode["SolanaGasCompensationTooManyTransfers"] = "SOLANA_GAS_COMPENSATION_TOO_MANY_TRANSFERS";
+    ViolationCode["SolanaGasCompensationRecipientNotWhitelisted"] = "SOLANA_GAS_COMPENSATION_RECIPIENT_NOT_WHITELISTED";
+    ViolationCode["SolanaGasCompensationTokenMismatch"] = "SOLANA_GAS_COMPENSATION_TOKEN_MISMATCH";
+    ViolationCode["SolanaGasCompensationFeePayerIsUser"] = "SOLANA_GAS_COMPENSATION_FEE_PAYER_IS_USER";
+    ViolationCode["SolanaGasCompensationUnexpectedInstruction"] = "SOLANA_GAS_COMPENSATION_UNEXPECTED_INSTRUCTION";
+    ViolationCode["UrlNotWhitelisted"] = "URL_NOT_WHITELISTED";
+})(ViolationCode || (exports.ViolationCode = ViolationCode = {}));
+var Environment;
+(function (Environment) {
+    Environment[Environment["Prod"] = 0] = "Prod";
+    Environment[Environment["Hanoi"] = 1] = "Hanoi";
+    Environment[Environment["Dubai"] = 2] = "Dubai";
+    Environment[Environment["Madrid"] = 3] = "Madrid";
+})(Environment || (exports.Environment = Environment = {}));
+//# sourceMappingURL=validation.js.map

package/dist/cjs/types/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../src/types/validation.ts"],"names":[],"mappings":";;;AAAA,IAAY,aA2QX;AA3QD,WAAY,aAAa;IACrB,YAAY;IACZ,sEAAqD,CAAA;IACrD,wEAAuD,CAAA;IAEvD,cAAc;IACd,0DAAyC,CAAA;IACzC,oDAAmC,CAAA;IACnC,2FAA0E,CAAA;IAC1E,gEAA+C,CAAA;IAE/C,6BAA6B;IAC7B,0DAAyC,CAAA;IACzC,6EAA4D,CAAA;IAC5D,6EAA4D,CAAA;IAC5D,4FAA2E,CAAA;IAC3E,6EAA4D,CAAA;IAC5D,8FAA6E,CAAA;IAE7E,2CAA2C;IAC3C,0FAAyE,CAAA;IACzE,oGAAmF,CAAA;IACnF,oFAAmE,CAAA;IAEnE,kCAAkC;IAClC,kEAAiD,CAAA;IAEjD,qCAAqC;IACrC,kGAAiF,CAAA;IACjF,qFAAoE,CAAA;IACpE,sFAAqE,CAAA;IACrE,sHAAqG,CAAA;IACrG,uHAAsG,CAAA;IACtG,yFAAwE,CAAA;IACxE,iHAAgG,CAAA;IAChG,+GAA8F,CAAA;IAC9F,0HAAyG,CAAA;IACzG,oGAAmF,CAAA;IACnF,+GAA8F,CAAA;IAC9F,0FAAyE,CAAA;IACzE,uGAAsF,CAAA;IACtF,uGAAsF,CAAA;IACtF,qHAAoG,CAAA;IACpG,yHAAwG,CAAA;IACxG,yHAAwG,CAAA;IAExG,sCAAsC;IACtC,gEAA+C,CAAA;IAC/C,oEAAmD,CAAA;IACnD,iGAAgF,CAAA;IAChF,wFAAuE,CAAA;IACvE,kFAAiE,CAAA;IACjE,sFAAqE,CAAA;IACrE,4FAA2E,CAAA;IAC3E,mHAAkG,CAAA;IAClG,uEAAsD,CAAA;IACtD,gFAA+D,CAAA;IAC/D,2EAA0D,CAAA;IAE1D,4BAA4B;IAC5B,kFAAiE,CAAA;IACjE,yEAAwD,CAAA;IACxD,mEAAkD,CAAA;IAClD,uFAAsE,CAAA;IACtE,8DAA6C,CAAA;IAC7C,gEAA+C,CAAA;IAC/C,uEAAsD,CAAA;IACtD,kGAAiF,CAAA;IACjF,4FAA2E,CAAA;IAC3E,gEAA+C,CAAA;IAC/C,0FAAyE,CAAA;IACzE,yEAAwD,CAAA;IACxD,+EAA8D,CAAA;IAE9D,6BAA6B;IAC7B,oFAAmE,CAAA;IACnE,2EAA0D,CAAA;IAC1D,qEAAoD,CAAA;IACpD,sGAAqF,CAAA;IACrF,uEAAsD,CAAA;IACtD,8DAA6C,CAAA;IAC7C,gEAA+C,CAAA;IAC/C,8EAA6D,CAAA;IAC7D,0EAAyD,CAAA;IACzD,iFAAgE,CAAA;IAChE,kEAAiD,CAAA;IACjD,yEAAwD,CAAA;IACxD,oGAAmF,CAAA;IACnF,8FAA6E,CAAA;IAC7E,oGAAmF,CAAA;IACnF,kEAAiD,CAAA;IACjD,4FAA2E,CAAA;IAE3E,iCAAiC;IACjC,0EAAyD,CAAA;IAEzD,sBAAsB;IACtB,mFAAkE,CAAA;IAClE,2EAA0D,CAAA;IAC1D,sFAAqE,CAAA;IACrE,6EAA4D,CAAA;IAC5D,qEAAoD,CAAA;IACpD,sEAAqD,CAAA;IACrD,oFAAmE,CAAA;IACnE,kEAAiD,CAAA;IACjD,gEAA+C,CAAA;IAC/C,mFAAkE,CAAA;IAClE,gGAA+E,CAAA;IAE/E,oBAAoB;IACpB,+EAA8D,CAAA;IAC9D,gFAA+D,CAAA;IAC/D,+EAA8D,CAAA;IAC9D,mDAAkC,CAAA;IAClC,8DAA6C,CAAA;IAC7C,4DAA2C,CAAA;IAE3C,+BAA+B;IAC/B,sGAAqF,CAAA;IACrF,uGAAsF,CAAA;IACtF,2FAA0E,CAAA;IAC1E,2EAA0D,CAAA;IAC1D,qFAAoE,CAAA;IACpE,sFAAqE,CAAA;IAErE,iDAAiD;IACjD,0EAAyD,CAAA;IAEzD,0DAA0D;IAC1D,4DAA2C,CAAA;IAE3C,+BAA+B;IAC/B,4DAA2C,CAAA;IAE3C,qCAAqC;IACrC,wFAAuE,CAAA;IACvE,uFAAsE,CAAA;IACtE,qFAAoE,CAAA;IACpE,iFAAgE,CAAA;IAChE,mFAAkE,CAAA;IAClE,oGAAmF,CAAA;IACnF,2GAA0F,CAAA;IAE1F,sCAAsC;IACtC,0FAAyE,CAAA;IACzE,uFAAsE,CAAA;IAEtE,sCAAsC;IACtC,0FAAyE,CAAA;IACzE,yFAAwE,CAAA;IACxE,oGAAmF,CAAA;IACnF,gGAA+E,CAAA;IAC/E,mGAAkF,CAAA;IAElF,gCAAgC;IAChC,mEAAkD,CAAA;IAElD,gDAAgD;IAChD,0FAAyE,CAAA;IACzE,2EAA0D,CAAA;IAC1D,0FAAyE,CAAA;IAEzE,mDAAmD;IACnD,4EAA2D,CAAA;IAC3D,2EAA0D,CAAA;IAE1D,qCAAqC;IACrC,mFAAkE,CAAA;IAClE,0GAAyF,CAAA;IACzF,6GAA4F,CAAA;IAC5F,8EAA6D,CAAA;IAE7D,mCAAmC;IACnC,8EAA6D,CAAA;IAE7D,iBAAiB;IACjB,mFAAkE,CAAA;IAClE,oEAAmD,CAAA;IACnD,kFAAiE,CAAA;IAEjE,sCAAsC;IACtC,qFAAoE,CAAA;IAEpE,oCAAoC;IACpC,uEAAsD,CAAA;IACtD,6EAA4D,CAAA;IAC5D,0FAAyE,CAAA;IACzE,yGAAwF,CAAA;IACxF,qFAAoE,CAAA;IAEpE,gDAAgD;IAChD,uFAAsE,CAAA;IACtE,iFAAgE,CAAA;IAChE,uFAAsE,CAAA;IAEtE,kCAAkC;IAClC,4FAA2E,CAAA;IAC3E,oGAAmF,CAAA;IACnF,mGAAkF,CAAA;IAElF,qCAAqC;IACrC,kGAAiF,CAAA;IACjF,4GAA2F,CAAA;IAE3F,mCAAmC;IACnC,mGAAkF,CAAA;IAClF,0FAAyE,CAAA;IAEzE,8CAA8C;IAC9C,sFAAqE,CAAA;IACrE,6GAA4F,CAAA;IAC5F,0FAAyE,CAAA;IACzE,4FAA2E,CAAA;IAE3E,sDAAsD;IACtD,wFAAuE,CAAA;IACvE,+FAA8E,CAAA;IAC9E,qGAAoF,CAAA;IACpF,oFAAmE,CAAA;IACnE,iGAAgF,CAAA;IAChF,0FAAyE,CAAA;IAEzE,oCAAoC;IACpC,kFAAiE,CAAA;IAEjE,oCAAoC;IACpC,2FAA0E,CAAA;IAE1E,gBAAgB;IAChB,iFAAgE,CAAA;IAChE,wFAAuE,CAAA;IACvE,6FAA4E,CAAA;IAC5E,0FAAyE,CAAA;IACzE,kFAAiE,CAAA;IACjE,iGAAgF,CAAA;IAChF,2FAA0E,CAAA;IAC1E,yFAAwE,CAAA;IACxE,+FAA8E,CAAA;IAE9E,yBAAyB;IACzB,uEAAsD,CAAA;IACtD,2EAA0D,CAAA;IAC1D,sFAAqE,CAAA;IACrE,gFAA+D,CAAA;IAC/D,8EAA6D,CAAA;IAC7D,uFAAsE,CAAA;IAEtE,kCAAkC;IAClC,wDAAuC,CAAA;IACvC,0DAAyC,CAAA;IACzC,sEAAqD,CAAA;IACrD,4DAA2C,CAAA;IAC3C,sFAAqE,CAAA;IACrE,mEAAkD,CAAA;IAElD,iBAAiB;IACjB,qEAAoD,CAAA;IACpD,mEAAkD,CAAA;IAClD,0FAAyE,CAAA;IACzE,oGAAmF,CAAA;IACnF,kGAAiF,CAAA;IACjF,qGAAoF,CAAA;IACpF,mHAAkG,CAAA;IAClG,8FAA6E,CAAA;IAC7E,kGAAiF,CAAA;IACjF,8GAA6F,CAAA;IAC7F,0DAAyC,CAAA;AAC7C,CAAC,EA3QW,aAAa,6BAAb,aAAa,QA2QxB;AAED,IAAY,WAKX;AALD,WAAY,WAAW;IACnB,6CAAI,CAAA;IACJ,+CAAK,CAAA;IACL,+CAAK,CAAA;IACL,iDAAM,CAAA;AACV,CAAC,EALW,WAAW,2BAAX,WAAW,QAKtB"}

package/dist/cjs/validations/echo-fields.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateEchoFields = validateEchoFields;
+const types_1 = require("../types");
+function validateEchoFields(request, response) {
+    return [
+        ...validateRequestId(request, response),
+        ...validateUserId(request, response),
+        ...validateExpirationTimestamp(request, response),
+        ...validateReferralCode(request, response),
+    ];
+}
+function validateRequestId(request, response) {
+    if (request.requestId === response.requestId)
+        return [];
+    return [{
+            code: types_1.ViolationCode.RequestIdMismatch,
+            message: `response.requestId does not match request.requestId`,
+            path: "response.requestId",
+            expected: request.requestId,
+            actual: response.requestId,
+        }];
+}
+function validateUserId(request, response) {
+    if (request.userId === response.userId)
+        return [];
+    return [{
+            code: types_1.ViolationCode.UserIdMismatch,
+            message: `response.userId does not match request.userId`,
+            path: "response.userId",
+            expected: request.userId,
+            actual: response.userId,
+        }];
+}
+// TODO: move to a separate validation (specifically for intents)?
+function validateExpirationTimestamp(request, response) {
+    const violations = [];
+    for (let i = 0; i < response.intents.length; i++) {
+        const intent = response.intents[i].intent;
+        violations.push(...validateIntentExpirationTimestamp(request.expirationTimestamp, intent, i));
+    }
+    return violations;
+}
+// TODO: move to a separate validation (specifically for intents)?
+function validateIntentExpirationTimestamp(expected, intent, intentIndex) {
+    if (expected === intent.expirationTimestamp)
+        return [];
+    return [{
+            code: types_1.ViolationCode.IntentExpirationTimestampMismatch,
+            message: `intent "${intent.intentId}" expirationTimestamp does not match request.expirationTimestamp`,
+            path: `response.intents[${intentIndex}].intent.expirationTimestamp`,
+            expected,
+            actual: intent.expirationTimestamp,
+        }];
+}
+function validateReferralCode(request, response) {
+    if (request.referralCode === response.referralCode)
+        return [];
+    return [{
+            code: types_1.ViolationCode.ReferralCodeMismatch,
+            message: `response.referralCode does not match request.referralCode`,
+            path: "response.referralCode",
+            expected: request.referralCode,
+            actual: response.referralCode,
+        }];
+}
+//# sourceMappingURL=echo-fields.js.map

package/dist/cjs/validations/echo-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"echo-fields.js","sourceRoot":"","sources":["../../../src/validations/echo-fields.ts"],"names":[],"mappings":";;AAQA,gDAUC;AAlBD,oCAMkB;AAElB,SAAgB,kBAAkB,CAC9B,OAA8B,EAC9B,QAAgC;IAEhC,OAAO;QACH,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC;QACvC,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC;QACpC,GAAG,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjD,GAAG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC;KAC7C,CAAC;AACN,CAAC;AAED,SAAS,iBAAiB,CACtB,OAA8B,EAC9B,QAAgC;IAEhC,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAExD,OAAO,CAAC;YACJ,IAAI,EAAE,qBAAa,CAAC,iBAAiB;YACrC,OAAO,EAAE,qDAAqD;YAC9D,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,MAAM,EAAE,QAAQ,CAAC,SAAS;SAC7B,CAAC,CAAC;AACP,CAAC;AAED,SAAS,cAAc,CACnB,OAA8B,EAC9B,QAAgC;IAEhC,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAElD,OAAO,CAAC;YACJ,IAAI,EAAE,qBAAa,CAAC,cAAc;YAClC,OAAO,EAAE,+CAA+C;YACxD,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,OAAO,CAAC,MAAM;YACxB,MAAM,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAC,CAAC;AACP,CAAC;AAED,kEAAkE;AAClE,SAAS,2BAA2B,CAChC,OAA8B,EAC9B,QAAgC;IAEhC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1C,UAAU,CAAC,IAAI,CAAC,GAAG,iCAAiC,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,kEAAkE;AAClE,SAAS,iCAAiC,CACtC,QAAgB,EAChB,MAAsB,EACtB,WAAmB;IAEnB,IAAI,QAAQ,KAAK,MAAM,CAAC,mBAAmB;QAAE,OAAO,EAAE,CAAC;IAEvD,OAAO,CAAC;YACJ,IAAI,EAAE,qBAAa,CAAC,iCAAiC;YACrD,OAAO,EAAE,WAAW,MAAM,CAAC,QAAQ,kEAAkE;YACrG,IAAI,EAAE,oBAAoB,WAAW,8BAA8B;YACnE,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,mBAAmB;SACrC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,oBAAoB,CACzB,OAA8B,EAC9B,QAAgC;IAEhC,IAAI,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAE9D,OAAO,CAAC;YACJ,IAAI,EAAE,qBAAa,CAAC,oBAAoB;YACxC,OAAO,EAAE,2DAA2D;YACpE,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,OAAO,CAAC,YAAY;YAC9B,MAAM,EAAE,QAAQ,CAAC,YAAY;SAChC,CAAC,CAAC;AACP,CAAC"}

package/dist/cjs/validations/evm-caveats.js

@@ -0,0 +1,235 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CaveatKind = void 0;
+exports.classifyCaveats = classifyCaveats;
+exports.validateExactExecutionPresence = validateExactExecutionPresence;
+exports.validateExactExecutionContent = validateExactExecutionContent;
+exports.validateTimestampEnforcerValue = validateTimestampEnforcerValue;
+const types_1 = require("../types");
+const types_2 = require("../whitelists/types");
+const evm_1 = require("../whitelists/evm");
+const caveat_decoder_1 = require("../helpers/caveat-decoder");
+var CaveatKind;
+(function (CaveatKind) {
+    CaveatKind[CaveatKind["Unknown"] = 0] = "Unknown";
+    CaveatKind[CaveatKind["ExactExec"] = 1] = "ExactExec";
+    CaveatKind[CaveatKind["ExactExecBatch"] = 2] = "ExactExecBatch";
+    CaveatKind[CaveatKind["IdEnforcer"] = 3] = "IdEnforcer";
+    CaveatKind[CaveatKind["Timestamp"] = 4] = "Timestamp";
+})(CaveatKind || (exports.CaveatKind = CaveatKind = {}));
+function classifyCaveats(caveats, actionId, actionPath, realChainId, violations) {
+    const result = {
+        hasIdEnforcer: false,
+        timestampCount: 0,
+    };
+    for (let i = 0; i < caveats.length; i++) {
+        const caveat = caveats[i];
+        const path = `${actionPath}.data.message.caveats[${i}]`;
+        const kind = classifySingleCaveat(caveat, realChainId);
+        // CRITICAL: each caveat.enforcer must be in one of the allowed whitelists
+        if (kind === CaveatKind.Unknown) {
+            violations.push({
+                code: types_1.ViolationCode.Sign712MetaMaskCaveatEnforcerNotWhitelisted,
+                message: `Sign712MetaMask caveat enforcer is not in any whitelist`,
+                path: `${path}.enforcer`,
+                actual: caveat.enforcer,
+            });
+            continue;
+        }
+        if (kind === CaveatKind.ExactExec)
+            result.exactExec = { caveat, index: i };
+        if (kind === CaveatKind.ExactExecBatch)
+            result.exactExecBatch = { caveat, index: i };
+        if (kind === CaveatKind.IdEnforcer) {
+            result.hasIdEnforcer = true;
+            // CRITICAL: IdEnforcer ID must equal Number(actionId)
+            validateIdEnforcerValue(caveat, actionId, path, violations);
+        }
+        // CRITICAL: exactly one TimestampEnforcer per action
+        if (kind === CaveatKind.Timestamp) {
+            result.timestampCount++;
+            if (result.timestampCount === 1) {
+                result.firstTimestamp = { caveat, index: i };
+            }
+            else if (result.timestampCount === 2) {
+                violations.push({
+                    code: types_1.ViolationCode.Sign712MetaMaskDuplicateTimestampEnforcerCaveat,
+                    message: `Sign712MetaMask must have exactly one TimestampEnforcer`,
+                    path: `${path}.enforcer`,
+                    expected: 1,
+                    actual: result.timestampCount,
+                });
+            }
+        }
+    }
+    return result;
+}
+function classifySingleCaveat(caveat, realChainId) {
+    if ((0, types_2.isWhitelisted)(evm_1.EXACT_EXECUTION_ENFORCER_CONTRACTS, realChainId, caveat.enforcer))
+        return CaveatKind.ExactExec;
+    if ((0, types_2.isWhitelisted)(evm_1.EXACT_EXECUTION_BATCH_ENFORCER_CONTRACTS, realChainId, caveat.enforcer))
+        return CaveatKind.ExactExecBatch;
+    if ((0, types_2.isWhitelisted)(evm_1.ID_ENFORCER_CONTRACTS, realChainId, caveat.enforcer))
+        return CaveatKind.IdEnforcer;
+    if ((0, types_2.isWhitelisted)(evm_1.TIMESTAMP_ENFORCER_CONTRACTS, realChainId, caveat.enforcer))
+        return CaveatKind.Timestamp;
+    return CaveatKind.Unknown;
+}
+// CRITICAL: single transactionCall requires ExactExecution caveat,
+// multiple transactionCalls require ExactExecutionBatch caveat
+function validateExactExecutionPresence(classified, txCalls, actionPath) {
+    if (txCalls.length === 1 && !classified.exactExec) {
+        return [{
+                code: types_1.ViolationCode.Sign712MetaMaskMissingExactExecutionCaveat,
+                message: `Sign712MetaMask must have an ExactExecution caveat for a single transactionCall`,
+                path: `${actionPath}.data.message.caveats`,
+            }];
+    }
+    if (txCalls.length > 1 && !classified.exactExecBatch) {
+        return [{
+                code: types_1.ViolationCode.Sign712MetaMaskMissingExactExecutionBatchCaveat,
+                message: `Sign712MetaMask must have an ExactExecutionBatch caveat for multiple transactionCalls`,
+                path: `${actionPath}.data.message.caveats`,
+                expected: txCalls.length,
+                actual: 0,
+            }];
+    }
+    return [];
+}
+// CRITICAL: decoded caveat terms must match transactionCalls[]
+function validateExactExecutionContent(classified, txCalls, actionPath, violations) {
+    if (txCalls.length === 1 && classified.exactExec) {
+        validateExactExecutionTerms(classified.exactExec.caveat, txCalls[0], classified.exactExec.index, actionPath, violations);
+    }
+    else if (txCalls.length > 1 && classified.exactExecBatch) {
+        validateExactExecutionBatchTerms(classified.exactExecBatch.caveat, txCalls, classified.exactExecBatch.index, actionPath, violations);
+    }
+}
+function validateExactExecutionTerms(caveat, txCall, caveatIndex, actionPath, violations) {
+    const caveatPath = `${actionPath}.data.message.caveats[${caveatIndex}]`;
+    let decoded;
+    try {
+        decoded = (0, caveat_decoder_1.decodeExactExecution)(caveat.terms);
+    }
+    catch (e) {
+        violations.push({
+            code: types_1.ViolationCode.Sign712MetaMaskCaveatDecodeError,
+            message: `failed to decode ExactExecution caveat terms`,
+            path: `${caveatPath}.terms`,
+            actual: caveat.terms,
+            details: e,
+        });
+        return;
+    }
+    if (!executionMatchesTxCall(decoded, txCall)) {
+        violations.push({
+            code: types_1.ViolationCode.Sign712MetaMaskExactExecutionMismatch,
+            message: `ExactExecution caveat terms do not match transactionCalls[0]`,
+            path: `${caveatPath}.terms`,
+            expected: txCall,
+            actual: decoded,
+        });
+    }
+}
+function validateExactExecutionBatchTerms(caveat, txCalls, caveatIndex, actionPath, violations) {
+    const caveatPath = `${actionPath}.data.message.caveats[${caveatIndex}]`;
+    let decoded;
+    try {
+        decoded = (0, caveat_decoder_1.decodeExactExecutionBatch)(caveat.terms);
+    }
+    catch (e) {
+        violations.push({
+            code: types_1.ViolationCode.Sign712MetaMaskCaveatDecodeError,
+            message: `failed to decode ExactExecutionBatch caveat terms`,
+            path: `${caveatPath}.terms`,
+            actual: caveat.terms,
+            details: e,
+        });
+        return;
+    }
+    if (decoded.length !== txCalls.length) {
+        violations.push({
+            code: types_1.ViolationCode.Sign712MetaMaskExactExecutionBatchMismatch,
+            message: `ExactExecutionBatch decoded ${decoded.length} executions but transactionCalls has ${txCalls.length}`,
+            path: `${caveatPath}.terms`,
+            expected: txCalls.length,
+            actual: decoded.length,
+        });
+        return;
+    }
+    for (let i = 0; i < txCalls.length; i++) {
+        if (!executionMatchesTxCall(decoded[i], txCalls[i])) {
+            violations.push({
+                code: types_1.ViolationCode.Sign712MetaMaskExactExecutionBatchMismatch,
+                message: `ExactExecutionBatch caveat terms[${i}] do not match transactionCalls[${i}]`,
+                path: `${caveatPath}.terms`,
+                expected: txCalls[i],
+                actual: decoded[i],
+            });
+        }
+    }
+}
+function executionMatchesTxCall(decoded, txCall) {
+    return (decoded.to.toLowerCase() === txCall.to.toLowerCase() &&
+        decoded.value === txCall.value &&
+        decoded.data.toLowerCase() === txCall.data.toLowerCase());
+}
+// Decodes IdEnforcer terms (ABI-encoded uint256) and checks it equals the actionId UUID.
+// actionId is a UUID string like "ea675851-d810-4e1a-b438-044ec80840a3";
+// caveat.terms is ABI-encoded uint256 (hex-padded to 32 bytes).
+function validateIdEnforcerValue(caveat, actionId, caveatPath, violations) {
+    try {
+        const decodedId = BigInt(caveat.terms);
+        const expectedId = actionIdToBigInt(actionId);
+        if (decodedId !== expectedId) {
+            violations.push({
+                code: types_1.ViolationCode.Sign712MetaMaskIdEnforcerValueMismatch,
+                message: `IdEnforcer ID does not match actionId`,
+                path: `${caveatPath}.terms`,
+                expected: { actionId, numeric: expectedId.toString() },
+                actual: { numeric: decodedId.toString() },
+            });
+        }
+    }
+    catch {
+        violations.push({
+            code: types_1.ViolationCode.Sign712MetaMaskIdEnforcerValueMismatch,
+            message: `IdEnforcer terms cannot be decoded as uint256`,
+            path: `${caveatPath}.terms`,
+            expected: actionId,
+            actual: caveat.terms,
+        });
+    }
+}
+function actionIdToBigInt(actionId) {
+    if (actionId.includes("-")) {
+        return BigInt("0x" + actionId.replace(/-/g, ""));
+    }
+    return BigInt(actionId);
+}
+// CRITICAL: beforeThreshold must equal request.expirationTimestamp
+function validateTimestampEnforcerValue(caveat, expirationTimestamp, caveatIndex, actionPath, violations) {
+    const caveatPath = `${actionPath}.data.message.caveats[${caveatIndex}]`;
+    try {
+        const decoded = (0, caveat_decoder_1.decodeTimestampEnforcer)(caveat.terms);
+        if (decoded.beforeThreshold !== BigInt(expirationTimestamp)) {
+            violations.push({
+                code: types_1.ViolationCode.Sign712MetaMaskTimestampBeforeThresholdMismatch,
+                message: `TimestampEnforcer beforeThreshold does not match request.expirationTimestamp`,
+                path: `${caveatPath}.terms`,
+                expected: expirationTimestamp,
+                actual: Number(decoded.beforeThreshold),
+            });
+        }
+    }
+    catch (e) {
+        violations.push({
+            code: types_1.ViolationCode.Sign712MetaMaskCaveatDecodeError,
+            message: `failed to decode TimestampEnforcer caveat terms`,
+            path: `${caveatPath}.terms`,
+            actual: caveat.terms,
+            details: e,
+        });
+    }
+}
+//# sourceMappingURL=evm-caveats.js.map

package/dist/cjs/validations/evm-caveats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-caveats.js","sourceRoot":"","sources":["../../../src/validations/evm-caveats.ts"],"names":[],"mappings":";;;AAgDA,0CAsDC;AAuBD,wEAsBC;AAGD,sEAiBC;AAuID,wEA8BC;AA5UD,oCAIkB;AAClB,+CAAoD;AACpD,2CAK2B;AAC3B,8DAKmC;AAuBnC,IAAY,UAMX;AAND,WAAY,UAAU;IAClB,iDAAO,CAAA;IACP,qDAAS,CAAA;IACT,+DAAc,CAAA;IACd,uDAAU,CAAA;IACV,qDAAS,CAAA;AACb,CAAC,EANW,UAAU,0BAAV,UAAU,QAMrB;AAED,SAAgB,eAAe,CAC3B,OAAiB,EACjB,QAAgB,EAChB,UAAkB,EAClB,WAAoB,EACpB,UAAuB;IAEvB,MAAM,MAAM,GAAsB;QAC9B,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,CAAC;KACpB,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAG,UAAU,yBAAyB,CAAC,GAAG,CAAC;QAExD,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAEvD,0EAA0E;QAC1E,IAAI,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YAC9B,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,2CAA2C;gBAC/D,OAAO,EAAE,yDAAyD;gBAClE,IAAI,EAAE,GAAG,IAAI,WAAW;gBACxB,MAAM,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,SAAS;QACb,CAAC;QAED,IAAI,IAAI,KAAK,UAAU,CAAC,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3E,IAAI,IAAI,KAAK,UAAU,CAAC,cAAc;YAAE,MAAM,CAAC,cAAc,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACrF,IAAI,IAAI,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;YAC5B,sDAAsD;YACtD,uBAAuB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAChE,CAAC;QACD,qDAAqD;QACrD,IAAI,IAAI,KAAK,UAAU,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,MAAM,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,cAAc,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACjD,CAAC;iBAAM,IAAI,MAAM,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;gBACrC,UAAU,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,qBAAa,CAAC,+CAA+C;oBACnE,OAAO,EAAE,yDAAyD;oBAClE,IAAI,EAAE,GAAG,IAAI,WAAW;oBACxB,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,MAAM,CAAC,cAAc;iBAChC,CAAC,CAAC;YACP,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CACzB,MAAc,EACd,WAAoB;IAEpB,IAAI,IAAA,qBAAa,EAAC,wCAAkC,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC/E,OAAO,UAAU,CAAC,SAAS,CAAC;IAEhC,IAAI,IAAA,qBAAa,EAAC,8CAAwC,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC;QACrF,OAAO,UAAU,CAAC,cAAc,CAAC;IAErC,IAAI,IAAA,qBAAa,EAAC,2BAAqB,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC;QAClE,OAAO,UAAU,CAAC,UAAU,CAAC;IAEjC,IAAI,IAAA,qBAAa,EAAC,kCAA4B,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC;QACzE,OAAO,UAAU,CAAC,SAAS,CAAC;IAEhC,OAAO,UAAU,CAAC,OAAO,CAAC;AAC9B,CAAC;AAED,mEAAmE;AACnE,+DAA+D;AAC/D,SAAgB,8BAA8B,CAC1C,UAA6B,EAC7B,OAAiB,EACjB,UAAkB;IAElB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAChD,OAAO,CAAC;gBACJ,IAAI,EAAE,qBAAa,CAAC,0CAA0C;gBAC9D,OAAO,EAAE,iFAAiF;gBAC1F,IAAI,EAAE,GAAG,UAAU,uBAAuB;aAC7C,CAAC,CAAC;IACP,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QACnD,OAAO,CAAC;gBACJ,IAAI,EAAE,qBAAa,CAAC,+CAA+C;gBACnE,OAAO,EAAE,uFAAuF;gBAChG,IAAI,EAAE,GAAG,UAAU,uBAAuB;gBAC1C,QAAQ,EAAE,OAAO,CAAC,MAAM;gBACxB,MAAM,EAAE,CAAC;aACZ,CAAC,CAAC;IACP,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,SAAgB,6BAA6B,CACzC,UAA6B,EAC7B,OAAiB,EACjB,UAAkB,EAClB,UAAuB;IAEvB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QAC/C,2BAA2B,CACvB,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EACvC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CACrD,CAAC;IACN,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;QACzD,gCAAgC,CAC5B,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EACzC,UAAU,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CAC1D,CAAC;IACN,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAChC,MAAc,EACd,MAAc,EACd,WAAmB,EACnB,UAAkB,EAClB,UAAuB;IAEvB,MAAM,UAAU,GAAG,GAAG,UAAU,yBAAyB,WAAW,GAAG,CAAC;IAExE,IAAI,OAAyB,CAAC;IAC9B,IAAI,CAAC;QACD,OAAO,GAAG,IAAA,qCAAoB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,gCAAgC;YACpD,OAAO,EAAE,8CAA8C;YACvD,IAAI,EAAE,GAAG,UAAU,QAAQ;YAC3B,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,OAAO,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO;IACX,CAAC;IAED,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,qCAAqC;YACzD,OAAO,EAAE,8DAA8D;YACvE,IAAI,EAAE,GAAG,UAAU,QAAQ;YAC3B,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,OAAO;SAClB,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED,SAAS,gCAAgC,CACrC,MAAc,EACd,OAAiB,EACjB,WAAmB,EACnB,UAAkB,EAClB,UAAuB;IAEvB,MAAM,UAAU,GAAG,GAAG,UAAU,yBAAyB,WAAW,GAAG,CAAC;IAExE,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACD,OAAO,GAAG,IAAA,0CAAyB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,gCAAgC;YACpD,OAAO,EAAE,mDAAmD;YAC5D,IAAI,EAAE,GAAG,UAAU,QAAQ;YAC3B,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,OAAO,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO;IACX,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,0CAA0C;YAC9D,OAAO,EAAE,+BAA+B,OAAO,CAAC,MAAM,wCAAwC,OAAO,CAAC,MAAM,EAAE;YAC9G,IAAI,EAAE,GAAG,UAAU,QAAQ;YAC3B,QAAQ,EAAE,OAAO,CAAC,MAAM;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;SACzB,CAAC,CAAC;QACH,OAAO;IACX,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,0CAA0C;gBAC9D,OAAO,EAAE,oCAAoC,CAAC,mCAAmC,CAAC,GAAG;gBACrF,IAAI,EAAE,GAAG,UAAU,QAAQ;gBAC3B,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;gBACpB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;aACrB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAC3B,OAAyB,EACzB,MAAc;IAEd,OAAO,CACH,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE;QACpD,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;QAC9B,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAC3D,CAAC;AACN,CAAC;AAED,yFAAyF;AACzF,yEAAyE;AACzE,gEAAgE;AAChE,SAAS,uBAAuB,CAC5B,MAAc,EACd,QAAgB,EAChB,UAAkB,EAClB,UAAuB;IAEvB,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE9C,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,sCAAsC;gBAC1D,OAAO,EAAE,uCAAuC;gBAChD,IAAI,EAAE,GAAG,UAAU,QAAQ;gBAC3B,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE;gBACtD,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE;aAC5C,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,sCAAsC;YAC1D,OAAO,EAAE,+CAA+C;YACxD,IAAI,EAAE,GAAG,UAAU,QAAQ;YAC3B,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM,CAAC,KAAK;SACvB,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACtC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED,mEAAmE;AACnE,SAAgB,8BAA8B,CAC1C,MAAc,EACd,mBAA2B,EAC3B,WAAmB,EACnB,UAAkB,EAClB,UAAuB;IAEvB,MAAM,UAAU,GAAG,GAAG,UAAU,yBAAyB,WAAW,GAAG,CAAC;IAExE,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,wCAAuB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEtD,IAAI,OAAO,CAAC,eAAe,KAAK,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC1D,UAAU,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAa,CAAC,+CAA+C;gBACnE,OAAO,EAAE,8EAA8E;gBACvF,IAAI,EAAE,GAAG,UAAU,QAAQ;gBAC3B,QAAQ,EAAE,mBAAmB;gBAC7B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;aAC1C,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,UAAU,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAa,CAAC,gCAAgC;YACpD,OAAO,EAAE,iDAAiD;YAC1D,IAAI,EAAE,GAAG,UAAU,QAAQ;YAC3B,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,OAAO,EAAE,CAAC;SACb,CAAC,CAAC;IACP,CAAC;AACL,CAAC"}