@fastxyz/allset-sdk 0.1.10 → 0.1.11

package/dist/node/eip7702.d.ts

@@ -0,0 +1,47 @@
+/**
+ * eip7702.ts — EIP-7702 smartDeposit via AllSet Portal relay
+ *
+ * Flow:
+ *   1. Poll ERC-20 balance until >= minAmount
+ *   2. POST /userop/prepare  → backend assembles UserOp + paymasterData
+ *   3. Sign EIP-7702 authorization (re-delegate EOA to v0.8 impl)
+ *   4. Sign UserOperation (EIP-712, v0.8)
+ *   5. POST /userop/submit  → backend calls Pimlico eth_sendUserOperation
+ *
+ * Private key never leaves the SDK.
+ * Pimlico API key never touches the SDK.
+ * Gas is paid in USDC via ERC-20 Paymaster.
+ * Chain is inferred from rpcUrl (backend calls eth_chainId) — no hardcoded chain list.
+ */
+import { type Address, type Hash, type Hex } from 'viem';
+export interface SmartDepositParams {
+    /** EOA private key — stays local, never sent to backend */
+    privateKey: Hex;
+    /** EVM JSON-RPC URL — used for balance polling and forwarded to backend for chainId detection */
+    rpcUrl: string;
+    /** AllSet Portal backend base URL, e.g. https://api.allset.xyz */
+    allsetApiUrl: string;
+    /** ERC-20 token to watch (e.g. USDC on Base) */
+    tokenAddress: Address;
+    /** Minimum token balance (raw, with decimals) that triggers deposit */
+    minAmount: bigint;
+    /** AllSet bridge contract address */
+    bridgeAddress: Address;
+    /** Encoded bridge.deposit(...) calldata from encodeDepositCalldata() */
+    depositCalldata: Hex;
+    /** Balance poll interval in ms (default: 3000) */
+    pollIntervalMs?: number;
+    /** Total timeout in ms waiting for balance (default: no timeout) */
+    timeoutMs?: number;
+    /** Called on each balance check */
+    onBalanceCheck?: (balance: bigint) => void;
+}
+export interface SmartDepositResult {
+    txHash: Hash;
+    userOpHash: Hash;
+    userAddress: Address;
+    /** Token balance at the time of deposit */
+    tokenBalance: bigint;
+}
+export declare function smartDeposit(params: SmartDepositParams): Promise<SmartDepositResult>;
+//# sourceMappingURL=eip7702.d.ts.map

package/dist/node/eip7702.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eip7702.d.ts","sourceRoot":"","sources":["../../src/node/eip7702.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAML,KAAK,OAAO,EACZ,KAAK,IAAI,EACT,KAAK,GAAG,EACT,MAAM,MAAM,CAAC;AAgBd,MAAM,WAAW,kBAAkB;IACjC,2DAA2D;IAC3D,UAAU,EAAE,GAAG,CAAC;IAChB,iGAAiG;IACjG,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,YAAY,EAAE,OAAO,CAAC;IACtB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,aAAa,EAAE,OAAO,CAAC;IACvB,wEAAwE;IACxE,eAAe,EAAE,GAAG,CAAC;IACrB,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5C;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,IAAI,CAAC;IACb,UAAU,EAAE,IAAI,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAC;CACtB;AA2HD,wBAAsB,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA8I1F"}

package/dist/node/eip7702.js

@@ -0,0 +1,189 @@
+/**
+ * eip7702.ts — EIP-7702 smartDeposit via AllSet Portal relay
+ *
+ * Flow:
+ *   1. Poll ERC-20 balance until >= minAmount
+ *   2. POST /userop/prepare  → backend assembles UserOp + paymasterData
+ *   3. Sign EIP-7702 authorization (re-delegate EOA to v0.8 impl)
+ *   4. Sign UserOperation (EIP-712, v0.8)
+ *   5. POST /userop/submit  → backend calls Pimlico eth_sendUserOperation
+ *
+ * Private key never leaves the SDK.
+ * Pimlico API key never touches the SDK.
+ * Gas is paid in USDC via ERC-20 Paymaster.
+ * Chain is inferred from rpcUrl (backend calls eth_chainId) — no hardcoded chain list.
+ */
+import { createPublicClient, encodePacked, http, keccak256, parseAbi, } from 'viem';
+import { privateKeyToAccount } from 'viem/accounts';
+import { getUserOperationTypedData } from 'viem/account-abstraction';
+const ENTRY_POINT_V08 = '0x4337084D9E255Ff0702461CF8895CE9E3b5Ff108';
+const ERC20_BALANCEOF_ABI = parseAbi([
+    'function balanceOf(address account) view returns (uint256)',
+]);
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+/**
+ * Convert the backend's hex-string UserOp to viem's bigint-typed UserOperation<'0.8'>.
+ */
+function parseUserOp(raw) {
+    return {
+        sender: raw.sender,
+        nonce: BigInt(raw.nonce),
+        callData: raw.callData,
+        callGasLimit: BigInt(raw.callGasLimit),
+        verificationGasLimit: BigInt(raw.verificationGasLimit),
+        preVerificationGas: BigInt(raw.preVerificationGas),
+        maxFeePerGas: BigInt(raw.maxFeePerGas),
+        maxPriorityFeePerGas: BigInt(raw.maxPriorityFeePerGas),
+        ...(raw.paymaster && { paymaster: raw.paymaster }),
+        ...(raw.paymasterVerificationGasLimit && {
+            paymasterVerificationGasLimit: BigInt(raw.paymasterVerificationGasLimit),
+        }),
+        ...(raw.paymasterPostOpGasLimit && {
+            paymasterPostOpGasLimit: BigInt(raw.paymasterPostOpGasLimit),
+        }),
+        ...(raw.paymasterData && { paymasterData: raw.paymasterData }),
+        ...(raw.factory && { factory: raw.factory }),
+        ...(raw.factoryData && { factoryData: raw.factoryData }),
+        signature: '0x',
+    };
+}
+/**
+ * Convert UserOperation<'0.8'> bigint fields → hex strings for JSON serialization.
+ * The Go backend expects all numeric fields as 0x-prefixed hex strings.
+ */
+function serializeUserOp(op) {
+    const toHex = (n) => `0x${n.toString(16)}`;
+    return {
+        sender: op.sender,
+        nonce: toHex(op.nonce),
+        callData: op.callData,
+        callGasLimit: toHex(op.callGasLimit),
+        verificationGasLimit: toHex(op.verificationGasLimit),
+        preVerificationGas: toHex(op.preVerificationGas),
+        maxFeePerGas: toHex(op.maxFeePerGas),
+        maxPriorityFeePerGas: toHex(op.maxPriorityFeePerGas),
+        ...(op.paymaster && { paymaster: op.paymaster }),
+        ...(op.paymasterVerificationGasLimit !== undefined && {
+            paymasterVerificationGasLimit: toHex(op.paymasterVerificationGasLimit),
+        }),
+        ...(op.paymasterPostOpGasLimit !== undefined && {
+            paymasterPostOpGasLimit: toHex(op.paymasterPostOpGasLimit),
+        }),
+        ...(op.paymasterData && { paymasterData: op.paymasterData }),
+        ...(op.factory && { factory: op.factory }),
+        ...(op.factoryData && { factoryData: op.factoryData }),
+        ...(op.signature && { signature: op.signature }),
+    };
+}
+// ─── Main function ─────────────────────────────────────────────────────────────
+export async function smartDeposit(params) {
+    const { privateKey, rpcUrl, allsetApiUrl, tokenAddress, minAmount, bridgeAddress, depositCalldata, pollIntervalMs = 3000, timeoutMs, onBalanceCheck, } = params;
+    const eoa = privateKeyToAccount(privateKey);
+    // No chain object needed — chainId is fetched dynamically from the RPC
+    const publicClient = createPublicClient({ transport: http(rpcUrl) });
+    // Step 1: Poll ERC-20 balance
+    const startTime = Date.now();
+    let tokenBalance = 0n;
+    while (true) {
+        if (timeoutMs && Date.now() - startTime > timeoutMs) {
+            throw new Error('smartDeposit: timed out waiting for balance');
+        }
+        tokenBalance = (await publicClient.readContract({
+            address: tokenAddress,
+            abi: ERC20_BALANCEOF_ABI,
+            functionName: 'balanceOf',
+            args: [eoa.address],
+        }));
+        onBalanceCheck?.(tokenBalance);
+        if (tokenBalance >= minAmount)
+            break;
+        await sleep(pollIntervalMs);
+    }
+    // Fetch chainId once — used for EIP-7702 auth and UserOp signing
+    const chainId = await publicClient.getChainId();
+    // Step 2: Build request auth signature (proves caller owns the private key)
+    // Backend verifies: ecrecover(hash, authSig) == from
+    const timestamp = Math.floor(Date.now() / 1000);
+    const msgHash = keccak256(encodePacked(['address', 'address', 'uint256', 'address', 'bytes', 'uint256'], [eoa.address, tokenAddress, minAmount, bridgeAddress, depositCalldata, BigInt(timestamp)]));
+    const authSig = await eoa.signMessage({ message: { raw: msgHash } });
+    // Step 3: POST /userop/prepare
+    const prepareReq = {
+        rpcUrl,
+        from: eoa.address,
+        tokenAddress,
+        amount: minAmount.toString(),
+        bridgeAddress,
+        depositCalldata,
+        timestamp,
+        authSig,
+    };
+    const prepareRes = await fetch(`${allsetApiUrl}/userop/prepare`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(prepareReq),
+    });
+    if (!prepareRes.ok) {
+        const err = await prepareRes.text();
+        throw new Error(`smartDeposit prepare failed (${prepareRes.status}): ${err}`);
+    }
+    const prepared = (await prepareRes.json());
+    // Step 4: Sign EIP-7702 authorization.
+    // We always re-sign to ensure the EOA is delegated to the correct v0.8 impl,
+    // even if a prior (possibly outdated) delegation exists.
+    let eip7702Auth;
+    if (prepared.needsAuthorization) {
+        const accountNonce = await publicClient.getTransactionCount({ address: eoa.address });
+        const signed = await eoa.signAuthorization({
+            address: prepared.delegate7702Address,
+            chainId,
+            nonce: accountNonce,
+        });
+        const yParity = signed.yParity ?? 0;
+        eip7702Auth = {
+            address: prepared.delegate7702Address,
+            chainId: `0x${chainId.toString(16)}`,
+            nonce: `0x${accountNonce.toString(16)}`,
+            yParity: `0x${yParity.toString(16)}`,
+            r: `0x${BigInt(signed.r).toString(16).padStart(64, '0')}`,
+            s: `0x${BigInt(signed.s).toString(16).padStart(64, '0')}`,
+        };
+    }
+    // Step 5: Parse backend response + sign UserOperation (v0.8 uses EIP-712 typed data)
+    const userOpToSign = parseUserOp(prepared.unsignedUserOp);
+    // v0.8 requires EIP-712 signTypedData, NOT signMessage/personal_sign
+    const typedData = getUserOperationTypedData({
+        chainId,
+        entryPointAddress: ENTRY_POINT_V08,
+        userOperation: { ...userOpToSign, signature: '0x' },
+    });
+    const signature = await eoa.signTypedData(typedData);
+    const signedUserOp = { ...userOpToSign, signature };
+    // Step 6: POST /userop/submit
+    const serialized = serializeUserOp(signedUserOp);
+    if (eip7702Auth) {
+        serialized.eip7702Auth = eip7702Auth;
+    }
+    const submitReq = {
+        rpcUrl,
+        signedUserOp: serialized,
+    };
+    const submitRes = await fetch(`${allsetApiUrl}/userop/submit`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(submitReq),
+    });
+    if (!submitRes.ok) {
+        const err = await submitRes.text();
+        throw new Error(`smartDeposit submit failed (${submitRes.status}): ${err}`);
+    }
+    const { txHash, userOpHash: returnedUserOpHash } = (await submitRes.json());
+    return {
+        txHash,
+        userOpHash: returnedUserOpHash,
+        userAddress: eoa.address,
+        tokenBalance,
+    };
+}

package/dist/node/index.d.ts

@@ -1,4 +1,5 @@
 export * from '../core/index.js';
+export * from './eip7702.js';
 export { AllSetProvider, getAllSetDir, getEvmKeysDir as getAllSetEvmKeysDir, ensureAllSetDirs, initUserConfig, } from './provider.js';
 export { createEvmExecutor, createEvmWallet, getEvmKeysDir, } from './evm-executor.js';
 export { loadNetworksConfig, getNetworkConfig, getChainConfig, getTokenConfig, clearConfigCache, } from './config.js';

package/dist/node/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AAEjC,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,IAAI,mBAAmB,EACpC,gBAAgB,EAChB,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC9F,YAAY,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,wBAAsB,OAAO,CAC3B,GAAG,IAAI,EAAE,UAAU,CAAC,cAAc,aAAa,EAAE,OAAO,CAAC,GACxD,UAAU,CAAC,cAAc,aAAa,EAAE,OAAO,CAAC,CAGlD;AAED,wBAAsB,aAAa,CACjC,GAAG,IAAI,EAAE,UAAU,CAAC,cAAc,aAAa,EAAE,aAAa,CAAC,GAC9D,UAAU,CAAC,cAAc,aAAa,EAAE,aAAa,CAAC,CAGxD;AAED,wBAAsB,aAAa,CACjC,GAAG,IAAI,EAAE,UAAU,CAAC,cAAc,aAAa,EAAE,aAAa,CAAC,GAC9D,UAAU,CAAC,cAAc,aAAa,EAAE,aAAa,CAAC,CAGxD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAE7B,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,IAAI,mBAAmB,EACpC,gBAAgB,EAChB,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAChE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC9F,YAAY,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,wBAAsB,OAAO,CAC3B,GAAG,IAAI,EAAE,UAAU,CAAC,cAAc,aAAa,EAAE,OAAO,CAAC,GACxD,UAAU,CAAC,cAAc,aAAa,EAAE,OAAO,CAAC,CAGlD;AAED,wBAAsB,aAAa,CACjC,GAAG,IAAI,EAAE,UAAU,CAAC,cAAc,aAAa,EAAE,aAAa,CAAC,GAC9D,UAAU,CAAC,cAAc,aAAa,EAAE,aAAa,CAAC,CAGxD;AAED,wBAAsB,aAAa,CACjC,GAAG,IAAI,EAAE,UAAU,CAAC,cAAc,aAAa,EAAE,aAAa,CAAC,GAC9D,UAAU,CAAC,cAAc,aAAa,EAAE,aAAa,CAAC,CAGxD"}

package/dist/node/index.js

@@ -1,4 +1,5 @@
 export * from '../core/index.js';
+export * from './eip7702.js';
 export { AllSetProvider, getAllSetDir, getEvmKeysDir as getAllSetEvmKeysDir, ensureAllSetDirs, initUserConfig, } from './provider.js';
 export { createEvmExecutor, createEvmWallet, getEvmKeysDir, } from './evm-executor.js';
 export { loadNetworksConfig, getNetworkConfig, getChainConfig, getTokenConfig, clearConfigCache, } from './config.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fastxyz/allset-sdk",
-  "version": "0.1.10",
+  "version": "0.1.11",
   "description": "AllSet SDK for AllSet bridge flows between Fast and EVM testnets",
   "keywords": [
     "allset",
@@ -76,6 +76,7 @@
   "devDependencies": {
     "@fastxyz/sdk": "^0.2.5",
     "@types/node": "^22.19.11",
+    "permissionless": "^0.3",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3"
   }