@deserialize/multi-vm-wallet 1.2.441 → 1.3.0

package/dist/evm/aa-service/lib/kernel-modules.js

@@ -0,0 +1,409 @@
+"use strict";
+/**
+ * Kernel Module Management
+ *
+ * Handles installation and management of ERC-7579 modules for Kernel v3 accounts:
+ * - Validators: Session keys, multi-sig, passkeys
+ * - Executors: Additional execution logic
+ * - Hooks: Pre/post execution hooks
+ * - Fallbacks: Handle unknown function calls
+ *
+ * ERC-7579 Module Types:
+ * 1 = Validator
+ * 2 = Executor
+ * 3 = Fallback
+ * 4 = Hook
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MODULE_TYPE_IDS = void 0;
+exports.prepareInstallModule = prepareInstallModule;
+exports.installModule = installModule;
+exports.prepareUninstallModule = prepareUninstallModule;
+exports.uninstallModule = uninstallModule;
+exports.isModuleInstalled = isModuleInstalled;
+exports.prepareInstallSessionKey = prepareInstallSessionKey;
+exports.createSessionKey = createSessionKey;
+exports.prepareRevokeSessionKey = prepareRevokeSessionKey;
+exports.revokeSessionKey = revokeSessionKey;
+exports.prepareInstallMultiSigValidator = prepareInstallMultiSigValidator;
+exports.installMultiSigValidator = installMultiSigValidator;
+const viem_1 = require("viem");
+exports.MODULE_TYPE_IDS = {
+    validator: 1,
+    executor: 2,
+    fallback: 3,
+    hook: 4
+};
+/**
+ * Prepare installModule call (for batching)
+ *
+ * Returns a Call object that can be batched with other operations.
+ * Use this when you want to install multiple modules in one transaction.
+ *
+ * @example
+ * // Batch install multiple modules
+ * const calls = [
+ *     prepareInstallModule({ account, moduleType: 'validator', moduleAddress: '0x...' }),
+ *     prepareInstallModule({ account, moduleType: 'hook', moduleAddress: '0x...' })
+ * ];
+ * await aaService.sendBatchTransaction({ account, calls });
+ */
+function prepareInstallModule(config) {
+    const { account, moduleType, moduleAddress, initData = '0x' } = config;
+    // Get the module type ID according to ERC-7579
+    const moduleTypeId = exports.MODULE_TYPE_IDS[moduleType];
+    // Encode the installModule call
+    // function installModule(uint256 moduleTypeId, address module, bytes calldata initData)
+    const calldata = (0, viem_1.encodePacked)(['bytes4', 'uint256', 'address', 'bytes'], [
+        '0x8f6e1e8e', // installModule selector
+        BigInt(moduleTypeId),
+        moduleAddress,
+        initData
+    ]);
+    return {
+        to: account.address,
+        data: calldata
+    };
+}
+/**
+ * Install a module on a Kernel account (execute immediately)
+ *
+ * This uses the ERC-7579 standard installModule function.
+ * For batching multiple modules, use prepareInstallModule instead.
+ *
+ * @example
+ * // Install a single module
+ * const userOpHash = await installModule({
+ *     account,
+ *     bundlerManager,
+ *     moduleType: 'validator',
+ *     moduleAddress: SESSION_KEY_VALIDATOR_ADDRESS,
+ *     initData: encodedPermissions
+ * });
+ */
+async function installModule(config) {
+    const { account, bundlerManager, moduleType, moduleAddress, initData = '0x' } = config;
+    const bundlerClient = bundlerManager.getClient(account.chain);
+    console.log(`Installing ${moduleType} module at ${moduleAddress}...`);
+    // Use prepareInstallModule to get the call
+    const call = prepareInstallModule({
+        account,
+        moduleType,
+        moduleAddress,
+        initData
+    });
+    // Execute immediately
+    const userOpHash = await bundlerClient.sendUserOperation({
+        account: account.account,
+        calls: [call]
+    });
+    console.log(`✅ Module installation submitted: ${userOpHash}`);
+    return userOpHash;
+}
+/**
+ * Prepare uninstallModule call (for batching)
+ *
+ * Returns a Call object that can be batched with other operations.
+ *
+ * @example
+ * // Batch uninstall multiple modules
+ * const calls = [
+ *     prepareUninstallModule({ account, moduleType: 'validator', moduleAddress: '0x...' }),
+ *     prepareUninstallModule({ account, moduleType: 'hook', moduleAddress: '0x...' })
+ * ];
+ * await aaService.sendBatchTransaction({ account, calls });
+ */
+function prepareUninstallModule(config) {
+    const { account, moduleType, moduleAddress, deInitData = '0x' } = config;
+    const moduleTypeId = exports.MODULE_TYPE_IDS[moduleType];
+    // Encode the uninstallModule call
+    // function uninstallModule(uint256 moduleTypeId, address module, bytes calldata deInitData)
+    const calldata = (0, viem_1.encodePacked)(['bytes4', 'uint256', 'address', 'bytes'], [
+        '0xbf8a8dc4', // uninstallModule selector
+        BigInt(moduleTypeId),
+        moduleAddress,
+        deInitData
+    ]);
+    return {
+        to: account.address,
+        data: calldata
+    };
+}
+/**
+ * Uninstall a module from a Kernel account (execute immediately)
+ *
+ * For batching multiple uninstalls, use prepareUninstallModule instead.
+ *
+ * @example
+ * // Uninstall a single module
+ * const userOpHash = await uninstallModule({
+ *     account,
+ *     bundlerManager,
+ *     moduleType: 'validator',
+ *     moduleAddress: SESSION_KEY_VALIDATOR_ADDRESS
+ * });
+ */
+async function uninstallModule(config) {
+    const { account, bundlerManager, moduleType, moduleAddress, deInitData = '0x' } = config;
+    const bundlerClient = bundlerManager.getClient(account.chain);
+    console.log(`Uninstalling ${moduleType} module at ${moduleAddress}...`);
+    // Use prepareUninstallModule to get the call
+    const call = prepareUninstallModule({
+        account,
+        moduleType,
+        moduleAddress,
+        deInitData
+    });
+    // Execute immediately
+    const userOpHash = await bundlerClient.sendUserOperation({
+        account: account.account,
+        calls: [call]
+    });
+    console.log(`✅ Module uninstallation submitted: ${userOpHash}`);
+    return userOpHash;
+}
+/**
+ * Check if a module is installed on an account
+ *
+ * @example
+ * const isInstalled = await isModuleInstalled({
+ *     account,
+ *     bundlerManager,
+ *     moduleType: 'validator',
+ *     moduleAddress: SESSION_KEY_VALIDATOR_ADDRESS
+ * });
+ */
+async function isModuleInstalled(config) {
+    const { account, bundlerManager, moduleType, moduleAddress } = config;
+    const publicClient = bundlerManager.getClient(account.chain);
+    const moduleTypeId = exports.MODULE_TYPE_IDS[moduleType];
+    try {
+        // Call isModuleInstalled(uint256 moduleTypeId, address module)
+        const result = await publicClient.readContract({
+            address: account.address,
+            abi: (0, viem_1.parseAbi)([
+                'function isModuleInstalled(uint256 moduleTypeId, address module, bytes calldata additionalContext) view returns (bool)'
+            ]),
+            functionName: 'isModuleInstalled',
+            args: [BigInt(moduleTypeId), moduleAddress, '0x']
+        });
+        return result;
+    }
+    catch (error) {
+        console.error('Error checking module installation:', error);
+        return false;
+    }
+}
+// ============================================
+// Session Key Helpers
+// ============================================
+/**
+ * Prepare session key installation call (for batching)
+ *
+ * Returns a Call object that can be batched with other operations.
+ *
+ * @example
+ * // Batch install session key with other modules
+ * const calls = [
+ *     prepareInstallSessionKey({ account, sessionKeyAddress, permissions }),
+ *     prepareInstallModule({ account, moduleType: 'hook', moduleAddress: '0x...' })
+ * ];
+ * await aaService.sendBatchTransaction({ account, calls });
+ */
+function prepareInstallSessionKey(config) {
+    const { account, sessionKeyAddress, permissions } = config;
+    // Encode session key permissions
+    const initData = encodeSessionKeyPermissions(sessionKeyAddress, permissions);
+    // Get session key validator address for your chain
+    const SESSION_KEY_VALIDATOR = getSessionKeyValidatorAddress(account.chain.id);
+    // Return the install module call
+    return prepareInstallModule({
+        account,
+        moduleType: 'validator',
+        moduleAddress: SESSION_KEY_VALIDATOR,
+        initData
+    });
+}
+/**
+ * Create and install a session key validator (execute immediately)
+ *
+ * Session keys allow delegated access with specific permissions.
+ * Perfect for automated operations like recurring payments.
+ *
+ * For batching with other operations, use prepareInstallSessionKey instead.
+ *
+ * @example
+ * // Install session key for monthly savings automation
+ * const sessionKey = privateKeyToAccount('0x...');
+ *
+ * await createSessionKey({
+ *     account,
+ *     bundlerManager,
+ *     sessionKeyAddress: sessionKey.address,
+ *     permissions: [{
+ *         target: USDC_ADDRESS,
+ *         functionSelector: '0xa9059cbb', // transfer(address,uint256)
+ *         maxValuePerUse: parseUnits('100', 6), // Max 100 USDC per tx
+ *         validUntil: Date.now() + 30 * 24 * 60 * 60 * 1000, // 30 days
+ *         maxUses: 1 // Once per month
+ *     }]
+ * });
+ */
+async function createSessionKey(config) {
+    const { account, bundlerManager, sessionKeyAddress, permissions } = config;
+    // Encode session key permissions
+    const initData = encodeSessionKeyPermissions(sessionKeyAddress, permissions);
+    // Get session key validator address for your chain
+    const SESSION_KEY_VALIDATOR = getSessionKeyValidatorAddress(account.chain.id);
+    // Install the session key validator with permissions
+    return installModule({
+        account,
+        bundlerManager,
+        moduleType: 'validator',
+        moduleAddress: SESSION_KEY_VALIDATOR,
+        initData
+    });
+}
+/**
+ * Prepare session key revocation call (for batching)
+ *
+ * Returns a Call object that can be batched with other operations.
+ *
+ * @example
+ * // Batch revoke multiple session keys
+ * const calls = [
+ *     prepareRevokeSessionKey({ account, sessionKeyAddress: key1 }),
+ *     prepareRevokeSessionKey({ account, sessionKeyAddress: key2 })
+ * ];
+ * await aaService.sendBatchTransaction({ account, calls });
+ */
+function prepareRevokeSessionKey(config) {
+    const { account, sessionKeyAddress } = config;
+    const SESSION_KEY_VALIDATOR = getSessionKeyValidatorAddress(account.chain.id);
+    const deInitData = (0, viem_1.encodePacked)(['address'], [sessionKeyAddress]);
+    return prepareUninstallModule({
+        account,
+        moduleType: 'validator',
+        moduleAddress: SESSION_KEY_VALIDATOR,
+        deInitData
+    });
+}
+/**
+ * Revoke a session key (execute immediately)
+ *
+ * For batching with other operations, use prepareRevokeSessionKey instead.
+ */
+async function revokeSessionKey(account, bundlerManager, sessionKeyAddress) {
+    const SESSION_KEY_VALIDATOR = getSessionKeyValidatorAddress(account.chain.id);
+    const deInitData = (0, viem_1.encodePacked)(['address'], [sessionKeyAddress]);
+    return uninstallModule({
+        account,
+        bundlerManager,
+        moduleType: 'validator',
+        moduleAddress: SESSION_KEY_VALIDATOR,
+        deInitData
+    });
+}
+// ============================================
+// Helper Functions
+// ============================================
+function encodeSessionKeyPermissions(sessionKeyAddress, permissions) {
+    // This encoding depends on your session key validator implementation
+    // Example encoding for a simple permission structure:
+    const encodedPermissions = permissions.map(p => {
+        return (0, viem_1.encodePacked)(['address', 'uint256', 'bytes4', 'uint256', 'uint48', 'uint48', 'uint48'], [
+            p.target,
+            p.maxValuePerUse ?? 0n,
+            p.functionSelector ?? '0x00000000',
+            p.maxGasPerUse ?? 0n,
+            BigInt(p.validAfter ?? 0),
+            BigInt(p.validUntil ?? 0),
+            BigInt(p.maxUses ?? 0)
+        ]);
+    });
+    // Combine session key address with permissions
+    return (0, viem_1.encodePacked)(['address', 'uint256', 'bytes[]'], [
+        sessionKeyAddress,
+        BigInt(permissions.length),
+        encodedPermissions
+    ]);
+}
+function getSessionKeyValidatorAddress(chainId) {
+    // Known session key validator addresses per chain
+    // These would be pre-deployed or use a universal address
+    const addresses = {
+        1: '0x0000000000000000000000000000000000000000', // Mainnet
+        11155111: '0x0000000000000000000000000000000000000000', // Sepolia
+        // Add more chains as needed
+    };
+    const address = addresses[chainId];
+    if (!address) {
+        throw new Error(`Session key validator not available for chain ${chainId}`);
+    }
+    return address;
+}
+// ============================================
+// Multi-Signature Module Helpers
+// ============================================
+/**
+ * Prepare multi-sig validator installation call (for batching)
+ *
+ * Returns a Call object that can be batched with other operations.
+ *
+ * @example
+ * // Batch install multi-sig with session key
+ * const calls = [
+ *     prepareInstallMultiSigValidator({ account, owners, threshold: 2 }),
+ *     prepareInstallSessionKey({ account, sessionKeyAddress, permissions })
+ * ];
+ * await aaService.sendBatchTransaction({ account, calls });
+ */
+function prepareInstallMultiSigValidator(config) {
+    const { account, owners, threshold } = config;
+    const initData = (0, viem_1.encodePacked)(['address[]', 'uint256'], [owners, BigInt(threshold)]);
+    const MULTISIG_VALIDATOR = getMultiSigValidatorAddress(account.chain.id);
+    return prepareInstallModule({
+        account,
+        moduleType: 'validator',
+        moduleAddress: MULTISIG_VALIDATOR,
+        initData
+    });
+}
+/**
+ * Install a multi-signature validator (execute immediately)
+ *
+ * For batching with other operations, use prepareInstallMultiSigValidator instead.
+ *
+ * @example
+ * await installMultiSigValidator({
+ *     account,
+ *     bundlerManager,
+ *     owners: [owner1, owner2, owner3],
+ *     threshold: 2 // 2 of 3 signatures required
+ * });
+ */
+async function installMultiSigValidator(config) {
+    const { account, bundlerManager, owners, threshold } = config;
+    const initData = (0, viem_1.encodePacked)(['address[]', 'uint256'], [owners, BigInt(threshold)]);
+    const MULTISIG_VALIDATOR = getMultiSigValidatorAddress(account.chain.id);
+    return installModule({
+        account,
+        bundlerManager,
+        moduleType: 'validator',
+        moduleAddress: MULTISIG_VALIDATOR,
+        initData
+    });
+}
+function getMultiSigValidatorAddress(chainId) {
+    // Known multi-sig validator addresses per chain
+    const addresses = {
+        1: '0x0000000000000000000000000000000000000000',
+        11155111: '0x0000000000000000000000000000000000000000',
+    };
+    const address = addresses[chainId];
+    if (!address) {
+        throw new Error(`Multi-sig validator not available for chain ${chainId}`);
+    }
+    return address;
+}
+//# sourceMappingURL=kernel-modules.js.map

package/dist/evm/aa-service/lib/kernel-modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-modules.js","sourceRoot":"","sources":["../../../../utils/evm/aa-service/lib/kernel-modules.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAwGH,oDA2BC;AAkBD,sCA8BC;AAeD,wDA0BC;AAgBD,0CA8BC;AAaD,8CAyBC;AAmBD,4DAgBC;AA2BD,4CAmBC;AAeD,0DAeC;AAOD,4CAgBC;AAyED,0EAoBC;AAeD,4DAsBC;AAtjBD,+BAAmD;AAUtC,QAAA,eAAe,GAA+B;IACvD,SAAS,EAAE,CAAC;IACZ,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;CACV,CAAC;AAyEF;;;;;;;;;;;;;GAaG;AACH,SAAgB,oBAAoB,CAAC,MAAmD;IACpF,MAAM,EACF,OAAO,EACP,UAAU,EACV,aAAa,EACb,QAAQ,GAAG,IAAI,EAClB,GAAG,MAAM,CAAC;IAEX,+CAA+C;IAC/C,MAAM,YAAY,GAAG,uBAAe,CAAC,UAAU,CAAC,CAAC;IAEjD,gCAAgC;IAChC,wFAAwF;IACxF,MAAM,QAAQ,GAAG,IAAA,mBAAY,EACzB,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,EACzC;QACI,YAAY,EAAE,yBAAyB;QACvC,MAAM,CAAC,YAAY,CAAC;QACpB,aAAa;QACb,QAAQ;KACX,CACJ,CAAC;IAEF,OAAO;QACH,EAAE,EAAE,OAAO,CAAC,OAAc;QAC1B,IAAI,EAAE,QAAQ;KACjB,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACI,KAAK,UAAU,aAAa,CAAC,MAA2B;IAC3D,MAAM,EACF,OAAO,EACP,cAAc,EACd,UAAU,EACV,aAAa,EACb,QAAQ,GAAG,IAAI,EAClB,GAAG,MAAM,CAAC;IAEX,MAAM,aAAa,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE9D,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,cAAc,aAAa,KAAK,CAAC,CAAC;IAEtE,2CAA2C;IAC3C,MAAM,IAAI,GAAG,oBAAoB,CAAC;QAC9B,OAAO;QACP,UAAU;QACV,aAAa;QACb,QAAQ;KACX,CAAC,CAAC;IAEH,sBAAsB;IACtB,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,iBAAiB,CAAC;QACrD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,CAAC,IAAI,CAAC;KAChB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC;IAE9D,OAAO,UAAiB,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,sBAAsB,CAAC,MAAqD;IACxF,MAAM,EACF,OAAO,EACP,UAAU,EACV,aAAa,EACb,UAAU,GAAG,IAAI,EACpB,GAAG,MAAM,CAAC;IAEX,MAAM,YAAY,GAAG,uBAAe,CAAC,UAAU,CAAC,CAAC;IAEjD,kCAAkC;IAClC,4FAA4F;IAC5F,MAAM,QAAQ,GAAG,IAAA,mBAAY,EACzB,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,EACzC;QACI,YAAY,EAAE,2BAA2B;QACzC,MAAM,CAAC,YAAY,CAAC;QACpB,aAAa;QACb,UAAU;KACb,CACJ,CAAC;IAEF,OAAO;QACH,EAAE,EAAE,OAAO,CAAC,OAAc;QAC1B,IAAI,EAAE,QAAQ;KACjB,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,eAAe,CAAC,MAA6B;IAC/D,MAAM,EACF,OAAO,EACP,cAAc,EACd,UAAU,EACV,aAAa,EACb,UAAU,GAAG,IAAI,EACpB,GAAG,MAAM,CAAC;IAEX,MAAM,aAAa,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE9D,OAAO,CAAC,GAAG,CAAC,gBAAgB,UAAU,cAAc,aAAa,KAAK,CAAC,CAAC;IAExE,6CAA6C;IAC7C,MAAM,IAAI,GAAG,sBAAsB,CAAC;QAChC,OAAO;QACP,UAAU;QACV,aAAa;QACb,UAAU;KACb,CAAC,CAAC;IAEH,sBAAsB;IACtB,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,iBAAiB,CAAC;QACrD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,CAAC,IAAI,CAAC;KAChB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,sCAAsC,UAAU,EAAE,CAAC,CAAC;IAEhE,OAAO,UAAiB,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,iBAAiB,CACnC,MAA6C;IAE7C,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAEtE,MAAM,YAAY,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE7D,MAAM,YAAY,GAAG,uBAAe,CAAC,UAAU,CAAC,CAAC;IAEjD,IAAI,CAAC;QACD,+DAA+D;QAC/D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC;YAC3C,OAAO,EAAE,OAAO,CAAC,OAAc;YAC/B,GAAG,EAAE,IAAA,eAAQ,EAAC;gBACV,wHAAwH;aAC3H,CAAC;YACF,YAAY,EAAE,mBAAmB;YACjC,IAAI,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC;SACpD,CAAC,CAAC;QAEH,OAAO,MAAiB,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,+CAA+C;AAC/C,sBAAsB;AACtB,+CAA+C;AAE/C;;;;;;;;;;;;GAYG;AACH,SAAgB,wBAAwB,CAAC,MAAsD;IAC3F,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAE3D,iCAAiC;IACjC,MAAM,QAAQ,GAAG,2BAA2B,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAE7E,mDAAmD;IACnD,MAAM,qBAAqB,GAAG,6BAA6B,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAE9E,iCAAiC;IACjC,OAAO,oBAAoB,CAAC;QACxB,OAAO;QACP,UAAU,EAAE,WAAW;QACvB,aAAa,EAAE,qBAAqB;QACpC,QAAQ;KACX,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACI,KAAK,UAAU,gBAAgB,CAClC,MAA8B;IAE9B,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAE3E,iCAAiC;IACjC,MAAM,QAAQ,GAAG,2BAA2B,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAE7E,mDAAmD;IACnD,MAAM,qBAAqB,GAAG,6BAA6B,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAE9E,qDAAqD;IACrD,OAAO,aAAa,CAAC;QACjB,OAAO;QACP,cAAc;QACd,UAAU,EAAE,WAAW;QACvB,aAAa,EAAE,qBAAqB;QACpC,QAAQ;KACX,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,uBAAuB,CAAC,MAGvC;IACG,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;IAE9C,MAAM,qBAAqB,GAAG,6BAA6B,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,IAAA,mBAAY,EAAC,CAAC,SAAS,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAElE,OAAO,sBAAsB,CAAC;QAC1B,OAAO;QACP,UAAU,EAAE,WAAW;QACvB,aAAa,EAAE,qBAAqB;QACpC,UAAU;KACb,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,gBAAgB,CAClC,OAA8B,EAC9B,cAA8B,EAC9B,iBAAsB;IAEtB,MAAM,qBAAqB,GAAG,6BAA6B,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAE9E,MAAM,UAAU,GAAG,IAAA,mBAAY,EAAC,CAAC,SAAS,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAElE,OAAO,eAAe,CAAC;QACnB,OAAO;QACP,cAAc;QACd,UAAU,EAAE,WAAW;QACvB,aAAa,EAAE,qBAAqB;QACpC,UAAU;KACb,CAAC,CAAC;AACP,CAAC;AAED,+CAA+C;AAC/C,mBAAmB;AACnB,+CAA+C;AAE/C,SAAS,2BAA2B,CAChC,iBAAsB,EACtB,WAAmC;IAEnC,qEAAqE;IACrE,sDAAsD;IAEtD,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC3C,OAAO,IAAA,mBAAY,EACf,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EACzE;YACI,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,cAAc,IAAI,EAAE;YACtB,CAAC,CAAC,gBAAgB,IAAI,YAAY;YAClC,CAAC,CAAC,YAAY,IAAI,EAAE;YACpB,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAQ;YAChC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAQ;YAChC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAQ;SAChC,CACJ,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,OAAO,IAAA,mBAAY,EACf,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EACjC;QACI,iBAAiB;QACjB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;QAC1B,kBAAkB;KACrB,CACJ,CAAC;AACN,CAAC;AAED,SAAS,6BAA6B,CAAC,OAAe;IAClD,kDAAkD;IAClD,yDAAyD;IACzD,MAAM,SAAS,GAAwB;QACnC,CAAC,EAAE,4CAA4C,EAAE,UAAU;QAC3D,QAAQ,EAAE,4CAA4C,EAAE,UAAU;QAClE,4BAA4B;KAC/B,CAAC;IAEF,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,iDAAiD,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,+CAA+C;AAC/C,iCAAiC;AACjC,+CAA+C;AAE/C;;;;;;;;;;;;GAYG;AACH,SAAgB,+BAA+B,CAAC,MAI/C;IACG,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAE9C,MAAM,QAAQ,GAAG,IAAA,mBAAY,EACzB,CAAC,WAAW,EAAE,SAAS,CAAC,EACxB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAC9B,CAAC;IAEF,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEzE,OAAO,oBAAoB,CAAC;QACxB,OAAO;QACP,UAAU,EAAE,WAAW;QACvB,aAAa,EAAE,kBAAkB;QACjC,QAAQ;KACX,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,wBAAwB,CAAC,MAK9C;IACG,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAE9D,MAAM,QAAQ,GAAG,IAAA,mBAAY,EACzB,CAAC,WAAW,EAAE,SAAS,CAAC,EACxB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAC9B,CAAC;IAEF,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEzE,OAAO,aAAa,CAAC;QACjB,OAAO;QACP,cAAc;QACd,UAAU,EAAE,WAAW;QACvB,aAAa,EAAE,kBAAkB;QACjC,QAAQ;KACX,CAAC,CAAC;AACP,CAAC;AAED,SAAS,2BAA2B,CAAC,OAAe;IAChD,gDAAgD;IAChD,MAAM,SAAS,GAAwB;QACnC,CAAC,EAAE,4CAA4C;QAC/C,QAAQ,EAAE,4CAA4C;KACzD,CAAC;IAEF,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,+CAA+C,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/evm/aa-service/lib/session-keys.d.ts

@@ -0,0 +1,170 @@
+/**
+ * EIP-7702 Session Keys Utilities
+ *
+ * Utilities for creating and managing session keys with ZeroDev's permission system.
+ * This uses the NEW EIP-7702 pattern, not the legacy smart account pattern.
+ *
+ * Key differences from legacy pattern:
+ * - Uses `eip7702Account` instead of `address`
+ * - Uses `addressToEmptyAccount` for permission validator creation
+ * - Passes `sessionKeySigner` to `deserializePermissionAccount`
+ * - No sudo validator needed, only permission plugin
+ */
+import { Hex, Address } from 'viem';
+import { Chain } from 'viem/chains';
+import { PrivateKeyAccount } from 'viem/accounts';
+import { ModularSigner } from '@zerodev/permissions';
+export interface SessionKeyPermissionRule {
+    target: Hex;
+    abi: any[];
+    functionName: string;
+    args?: any[];
+}
+export interface CreateSessionKeyApprovalOptions {
+    sessionKeyAddress: Address;
+    owner: PrivateKeyAccount;
+    chain: Chain;
+    entryPointVersion?: '0.6' | '0.7';
+    useSudoPolicy?: boolean;
+    permissions?: SessionKeyPermissionRule[];
+}
+export interface SessionKeyInfo {
+    privateKey: Hex;
+    address: Address;
+    signer: ModularSigner;
+}
+export interface DeserializedSessionKey {
+    account: any;
+    client: any;
+}
+/**
+ * Generate a new session key
+ *
+ * Creates a new keypair for use as a session key.
+ * The private key should be stored securely and shared with the agent.
+ * The address should be shared with the owner for approval.
+ *
+ * @returns Session key info including private key, address, and signer
+ *
+ * @example
+ * const sessionKey = await generateSessionKey();
+ * console.log("Share this address with owner:", sessionKey.address);
+ * console.log("Keep this private key secure:", sessionKey.privateKey);
+ */
+export declare function generateSessionKey(): Promise<SessionKeyInfo>;
+/**
+ * Recreate session key from private key
+ *
+ * Recreates a session key signer from a stored private key.
+ *
+ * @param privateKey - The session key private key
+ * @returns Session key info
+ *
+ * @example
+ * const sessionKey = await recreateSessionKey(storedPrivateKey);
+ */
+export declare function recreateSessionKey(privateKey: Hex): Promise<SessionKeyInfo>;
+/**
+ * Create session key approval (Owner side)
+ *
+ * The owner calls this to create an approval for a session key address.
+ * This uses the NEW EIP-7702 pattern with addressToEmptyAccount.
+ *
+ * @param options - Configuration options
+ * @returns Serialized approval string to share with the agent
+ *
+ * @example
+ * // Owner approves session key
+ * const approval = await createSessionKeyApproval({
+ *     sessionKeyAddress: '0x...', // Agent's session key address
+ *     owner: ownerAccount,
+ *     chain: sepolia,
+ *     permissions: [{
+ *         target: USDC_ADDRESS,
+ *         abi: parseAbi(['function transfer(address to, uint256 amount)']),
+ *         functionName: 'transfer',
+ *         args: [null, { condition: 3, value: parseUnits('10', 6) }]
+ *     }]
+ * });
+ * // Share approval with agent
+ */
+export declare function createSessionKeyApproval(options: CreateSessionKeyApprovalOptions): Promise<string>;
+/**
+ * Deserialize session key account (Agent side)
+ *
+ * The agent calls this to reconstruct the session key account from the approval.
+ * This requires BOTH the approval AND the session key signer.
+ *
+ * @param approval - Approval string from owner
+ * @param sessionKeySigner - Session key signer (created from private key)
+ * @param chain - Chain to use
+ * @param entryPointVersion - EntryPoint version
+ * @returns Deserialized session key account
+ *
+ * @example
+ * // Agent deserializes with private key
+ * const sessionKey = await recreateSessionKey(storedPrivateKey);
+ * const account = await deserializeSessionKey({
+ *     approval,
+ *     sessionKeySigner: sessionKey.signer,
+ *     chain: sepolia
+ * });
+ */
+export declare function deserializeSessionKey(options: {
+    approval: string;
+    sessionKeySigner: ModularSigner;
+    chain: Chain;
+    entryPointVersion?: '0.6' | '0.7';
+}): Promise<any>;
+/**
+ * Create kernel client for session key
+ *
+ * Creates a client for sending transactions with the session key.
+ *
+ * @param account - Deserialized session key account
+ * @param chain - Chain to use
+ * @param bundlerUrl - Bundler RPC URL
+ * @param paymasterUrl - Optional paymaster URL for gas sponsorship
+ * @returns Kernel account client
+ *
+ * @example
+ * const client = createSessionKeyClient({
+ *     account: sessionKeyAccount,
+ *     chain: sepolia,
+ *     bundlerUrl: 'https://api.pimlico.io/...'
+ * });
+ */
+export declare function createSessionKeyClient(options: {
+    account: any;
+    chain: Chain;
+    bundlerUrl: string;
+    paymasterUrl?: string;
+}): any;
+/**
+ * Create USDC transfer permission rule
+ *
+ * Helper to create a permission rule for USDC transfers with a maximum amount.
+ *
+ * @param usdcAddress - USDC contract address
+ * @param maxAmount - Maximum USDC amount (in USDC units, e.g., "10" for 10 USDC)
+ * @returns Permission rule
+ *
+ * @example
+ * const rule = createUSDCTransferPermission(
+ *     '0x1c7D4B196Cb0C7B01d743Fbc6116a902379C7238',
+ *     '10' // Max 10 USDC
+ * );
+ */
+export declare function createUSDCTransferPermission(usdcAddress: Hex, maxAmount: string): SessionKeyPermissionRule;
+/**
+ * Create ETH transfer permission rule
+ *
+ * Helper to create a permission rule for ETH transfers with a maximum value.
+ *
+ * @param maxValue - Maximum ETH value (in ether units, e.g., "0.1" for 0.1 ETH)
+ * @returns Permission rule
+ *
+ * @example
+ * const rule = createETHTransferPermission('0.1'); // Max 0.1 ETH
+ */
+export declare function createETHTransferPermission(maxValue: string): SessionKeyPermissionRule;