@gol/sdk 0.1.0-next.0 → 0.3.0

package/README.md

@@ -1,18 +1,88 @@
 # GOL SDK
 
-Public TypeScript interfaces for GOL Network.
+TypeScript SDK for GOL Network bounded mandates with hosted, owner-reimbursed gas on Base Sepolia testnet (chain `84532`).
 
-This first package covers developer onboarding and API credential verification through the public GOL Platform API. Mandates, payment actions, receipts, and webhooks are intentionally not exposed until their contract and platform interfaces exist.
+A developer's agent sends bounded USDC transfers from an end user's existing smart account. GOL's relayer pays the network gas first. After the action reaches the hosted profile's selected Base head, GOL claims the actual gas back in native ETH from the same account, within caps the owner signed. The owner signs every authority in their own wallet and can pause, resume, or revoke without GOL.
 
-## Install
+Supported accounts are four exact configurations: Safe 1.4.1, Biconomy Nexus 1.0.0, ZeroDev Kernel v0.3.1, and Alchemy Modular Account v2. The transfer asset is Circle USDC on Base Sepolia. Read deployed addresses and limits from `getGasConfiguration`; do not hard-code them.
 
-The package is not published yet. After a release is available:
+## Install
 
 ```sh
-pnpm add @gol/sdk
+pnpm add @gol/sdk@next
 ```
 
-Use Node.js 22 or later. The root entry point exports browser-safe types and errors. API clients that accept session tokens or API keys are available only from `@gol/sdk/server`.
+Use Node.js 22 or later. The root entry point (`@gol/sdk`) is browser-safe: policy encoding, owner wallet payloads, owner operations, and verification. API clients and webhook verification are in `@gol/sdk/server` and must run on your server, because they hold your API key.
+
+## Integration flow
+
+Create a test project and an API key with `project:read`, `accounts:read`, `mandates:read`, `mandates:write`, `actions:submit`, and `webhooks:manage` at [console.gol.network](https://console.gol.network).
+
+1. **Install the core on the owner's account.** `getAccountStatus` reports the detected family and whether the core is installed. If not, build the owner operation in the browser with `prepareOwnerInstallation` and `prepareOwnerOperation`, have the owner sign it with `signOwnerOperation`, and submit the returned transaction (a Safe transaction, or an EntryPoint v0.7 user operation for Nexus, Kernel, and Alchemy).
+2. **Prepare the approval on your server.** `prepareGasPolicy` compiles the exact mandate policy (allowed recipients, per-action and total USDC caps) and gas policy (per-action and total ETH reimbursement caps, expiry, chargeable outcomes).
+3. **Have the owner sign in the browser.** `signPreparedGasPolicy(ownerWallet, prepared, expectations)` independently recomputes every ID, digest, and wallet payload, asks the wallet for one `eth_signTypedData_v4` signature, and returns a `createMandateWithGas` call. Any address may send it; authority comes only from the owner's signature.
+4. **Confirm.** `confirmGasPolicy` (or `waitForGasPolicyConfirmation`) returns the policy once both receipt providers observe the approval at the hosted profile's selected Base head. Profile 3 uses the lower `safe` head, usually tens of seconds behind the latest head on Base Sepolia. This is earlier than Ethereum finality, and timing varies with network conditions.
+5. **Submit actions from your agent.** `prepareGasExecution` returns EIP-712 typed data; your agent signs it and you call `submitGasExecution` with the same 32-byte action ID as the idempotency key. A retry with the same ID and signature returns the original execution and moves no additional value.
+6. **Observe.** Poll `getGasExecution` or `waitForGasExecution`, or receive signed webhooks. Network cost, owner reimbursement, and GOL cost are reported separately.
+7. **Pause or resume.** On your server, call `prepareGasPolicySafetyAction(projectId, gasPolicyId, { action: "pause" })` or use `"resume"`. In the owner's browser, `signPreparedSafetyAction(walletClient, prepared)` verifies the digest and wallet payload before signing and returns a core call that any address may relay. Alternatively, submit `prepared.directOwnerCall` through the owner's account. Confirm the transaction with `waitForGasPolicySafetyAction`. A paused policy refuses new submissions. An accepted action waiting to be sent remains held while paused, proceeds if the owner resumes before its quote expires, or closes without owner liability at quote expiry.
+8. **Revoke.** `prepareGasPolicyRevocation` returns both owner paths: a relayed owner signature (`signPreparedRevocation`) and a direct account call. Either works without GOL or the agent.
+
+```ts
+// Server
+import { GolApiClient } from "@gol/sdk/server";
+const gol = new GolApiClient({
+  baseUrl: "https://api.gol.network",
+  apiKey: process.env.GOL_API_KEY!,
+});
+const prepared = await gol.prepareGasPolicy(projectId, {
+  account,
+  family: "safe",
+  agent,
+  transfer: {
+    recipients: [merchant],
+    maxPerActionBaseUnits: "1000000",
+    maxTotalBaseUnits: "10000000",
+  },
+  mandate: {
+    validFrom: now - 60,
+    expiresAt: now + 30 * 86400,
+    approvalExpiresAt: now + 3600,
+  },
+  gas: {
+    maxPerActionWei: "20000000000000",
+    maxTotalWei: "200000000000000",
+    expiresAt: now + 30 * 86400,
+    chargeableOutcomesMask: 1,
+  },
+});
+
+// Browser
+import { signPreparedGasPolicy } from "@gol/sdk";
+const call = await signPreparedGasPolicy(walletClient, prepared, {
+  agent,
+  recipients: [merchant],
+});
+const hash = await walletClient.sendTransaction(call);
+```
+
+## Webhooks
+
+Create an endpoint with `createWebhookEndpoint` (or in the console) and store the returned `whsec_` secret. Deliveries are signed, at least once, and may arrive out of order; deduplicate by event ID and treat polling as authoritative.
+
+```ts
+import { verifyWebhook } from "@gol/sdk/server";
+const event = verifyWebhook(
+  rawBody,
+  request.headers,
+  process.env.GOL_WEBHOOK_SECRET!,
+);
+```
+
+## Owner signing details
+
+Each family's owner path is fixed: Safe `SafeMessage` under the account's domain, Nexus ERC-7739 `PersonalSign` with the K1 validator prefix, Kernel `Kernel(bytes32 hash)` with the root locator, and Alchemy `ReplaySafeHash` with the entity-zero prefix. `buildWalletSigningPayload` and `verifyWalletSigningPayload` expose them. The SDK never signs a raw hash with `personal_sign` for an approval, and never receives an owner key. Owner user operations for Nexus, Kernel, and Alchemy are signed with `personal_sign` over the EntryPoint v0.7 user operation hash. An Alchemy account can hold one GOL validation at entity 1; remove an earlier GOL core with `preparePermanentRemoval` before installing this one.
+
+The encoders are checked against the independent Python reference vectors in `contracts/tools/encoding/gol_encoding.py`, and `pnpm verify:owner-fork` drives installation, approval, relayed and direct pause and resume, and both revocation paths for the four families on an anvil fork of Base Sepolia.
 
 ## API key authentication
 
@@ -55,6 +125,7 @@ const projects = await gol.listProjects();
 ```sh
 pnpm install --frozen-lockfile
 pnpm sync:openapi
+pnpm verify:gas-encoding
 pnpm generate:check
 pnpm upstream:check
 pnpm typecheck
@@ -62,9 +133,12 @@ pnpm lint
 pnpm test
 pnpm build
 pnpm verify:pack
+pnpm verify:account-dialects
 pnpm format:check
 ```
 
+`pnpm upstream:check` and `pnpm verify:gas-encoding` need sibling `platform` and `contracts` checkouts. `pnpm verify:account-dialects` reads Base Sepolia over RPC, using `BASE_SEPOLIA_RPC_URL`, else an Alchemy endpoint built from `ALCHEMY_API_KEY`, else the public endpoint. CI runs `generate:check`, `typecheck`, `lint`, `test`, `format:check`, and `verify:pack` on Node.js 22; it does not run the sibling or RPC checks.
+
 `openapi/platform.json` is a versioned snapshot of the platform contract. `pnpm sync:openapi` refreshes the snapshot from `../platform/openapi/openapi.json` by default and regenerates TypeScript declarations. Set `GOL_PLATFORM_OPENAPI_PATH` when the platform repository is elsewhere.
 
 `pnpm verify:pack` builds and packs the SDK, installs the archive into a temporary clean consumer, checks both package entry points, runs the compiled consumer, and deletes the temporary files. It does not publish the package.

package/dist/account-dialects.d.ts

@@ -0,0 +1,33 @@
+import { type Address, type Hex, type PublicClient } from "viem";
+/** Candidate Base Sepolia dialects. An Active compatibility profile is still required. */
+export type AccountFamily = "safe" | "nexus" | "kernel" | "alchemy";
+export declare const BASE_SEPOLIA_CHAIN_ID = 84532;
+export declare const ERC1967_IMPLEMENTATION_SLOT: "0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc";
+type AccountReader = Pick<PublicClient, "getChainId" | "getBytecode" | "getStorageAt" | "readContract">;
+/** Read a fixed block for a consistent preflight. Call before each owner approval and agent submission. */
+export declare function assertAccountImplementation(client: AccountReader, family: AccountFamily, account: Address, blockNumber?: bigint): Promise<void>;
+/** The owner signs this hash with its wallet. The SDK never accepts an owner key. */
+export declare function ownerSigningHash(client: AccountReader, family: AccountFamily, account: Address, digest: Hex): Promise<Hex>;
+/** Safety digests remain preparable after implementation drift. This does not grant authority. */
+export declare function ownerSafetySigningHash(client: AccountReader, family: AccountFamily, account: Address, digest: Hex): Promise<Hex>;
+/** Preserve a Safe threshold payload or pack the reviewed single-owner dialect. */
+export declare function packOwnerSignature(family: AccountFamily, signature: Hex): Hex;
+/** EntryPoint v0.7 nonce key for owner UserOperations. Safe has no selected UserOperation path. */
+export declare function ownerUserOpNonceKey(family: Exclude<AccountFamily, "safe">): bigint;
+export declare function ownerUserOpSigningHash(family: Exclude<AccountFamily, "safe">, userOpHash: Hex): Hex;
+export declare function packOwnerUserOpSignature(family: Exclude<AccountFamily, "safe">, signature: Hex): Hex;
+export type OwnerAccountCall = {
+    to: Address;
+    data: Hex;
+    /** Safe must delegatecall MultiSendCallOnly. Other calls target the account itself. */
+    operation: 0 | 1;
+};
+/** Prepare account self-call calldata after a fresh implementation preflight. */
+export declare function prepareOwnerInstallation(client: AccountReader, family: AccountFamily, account: Address, core: Address, entityId?: number): Promise<OwnerAccountCall>;
+/** Prepare tested invalidate-then-remove calldata, including after slot drift. The owner must authorize it. */
+export declare function preparePermanentRemoval(client: AccountReader, family: AccountFamily, account: Address, core: Address, options?: {
+    safePreviousModule?: Address;
+    alchemyEntityId?: number;
+}): Promise<OwnerAccountCall>;
+export {};
+//# sourceMappingURL=account-dialects.d.ts.map

package/dist/account-dialects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-dialects.d.ts","sourceRoot":"","sources":["../src/account-dialects.ts"],"names":[],"mappings":"AAAA,OAAO,EAQL,KAAK,OAAO,EACZ,KAAK,GAAG,EACR,KAAK,YAAY,EAClB,MAAM,MAAM,CAAC;AAEd,0FAA0F;AAC1F,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEpE,eAAO,MAAM,qBAAqB,QAAQ,CAAC;AAC3C,eAAO,MAAM,2BAA2B,EACtC,oEAA6E,CAAC;AAkDhF,KAAK,aAAa,GAAG,IAAI,CACvB,YAAY,EACZ,YAAY,GAAG,aAAa,GAAG,cAAc,GAAG,cAAc,CAC/D,CAAC;AAEF,2GAA2G;AAC3G,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,OAAO,EAChB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED,qFAAqF;AACrF,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,GAAG,GACV,OAAO,CAAC,GAAG,CAAC,CAId;AAED,kGAAkG;AAClG,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,GAAG,GACV,OAAO,CAAC,GAAG,CAAC,CAKd;AAuFD,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,GAAG,GAAG,CAU7E;AAUD,mGAAmG;AACnG,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,GACrC,MAAM,CAMR;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,EACtC,UAAU,EAAE,GAAG,GACd,GAAG,CAUL;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,EACtC,SAAS,EAAE,GAAG,GACb,GAAG,CAGL;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC;IACV,uFAAuF;IACvF,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;CAClB,CAAC;AAqCF,iFAAiF;AACjF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,OAAO,EACb,QAAQ,SAAI,GACX,OAAO,CAAC,gBAAgB,CAAC,CAuD3B;AAYD,+GAA+G;AAC/G,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,GAAE;IAAE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAO,GACvE,OAAO,CAAC,gBAAgB,CAAC,CA8G3B"}

package/dist/account-dialects.js

@@ -0,0 +1,386 @@
+import { concatHex, encodeAbiParameters, encodeFunctionData, keccak256, padHex, size, stringToHex, } from "viem";
+export const BASE_SEPOLIA_CHAIN_ID = 84532;
+export const ERC1967_IMPLEMENTATION_SLOT = "0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc";
+const SAFE_PROXY_HASH = "0xd7d408ebcd99b2b70be43e20253d6d92a8ea8fab29bd3be7f55b10032331fb4c";
+const ERC1967_PROXY_HASH = "0xaaa52c8cc8a0e3fd27ce756cc6b4e70c51423e9b597b11f32d3e49f8b1fc890d";
+const IMPLEMENTATION = {
+    safe: "0x29fcB43b46531BcA003ddC8FCB67FFE91900C762",
+    nexus: "0x000000039dfcAd030719B07296710F045F0558f7",
+    kernel: "0xBAC849bB641841b44E965fB01A4Bf5F074f84b4D",
+    alchemy: "0x00000000000002377B26b1EdA7b0BC371C60DD4f",
+};
+const OWNER_PREFIX = {
+    safe: "0x",
+    nexus: "0x00000004171351c442b202678c48d8ab5b321e8f",
+    kernel: "0x00",
+    alchemy: "0x0100000000ff00",
+};
+const EIP712_DOMAIN_TYPEHASH = keccak256(stringToHex("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)"));
+const SAFE_MESSAGE_TYPEHASH = keccak256(stringToHex("SafeMessage(bytes message)"));
+const NEXUS_PERSONAL_SIGN_TYPEHASH = keccak256(stringToHex("PersonalSign(bytes prefixed)"));
+const KERNEL_WRAPPER_TYPEHASH = "0x1547321c374afde8a591d972a084b071c594c275e36724931ff96c25f2999c83";
+const ALCHEMY_OWNER_MODULE = "0x00000000000099DE0BF6fA90dEB851E2A2df7d83";
+const domainAbi = [
+    {
+        type: "function",
+        name: "eip712Domain",
+        stateMutability: "view",
+        inputs: [],
+        outputs: [
+            { type: "bytes1" },
+            { type: "string" },
+            { type: "string" },
+            { type: "uint256" },
+            { type: "address" },
+            { type: "bytes32" },
+            { type: "uint256[]" },
+        ],
+    },
+];
+/** Read a fixed block for a consistent preflight. Call before each owner approval and agent submission. */
+export async function assertAccountImplementation(client, family, account, blockNumber) {
+    const chainId = await client.getChainId();
+    if (chainId !== BASE_SEPOLIA_CHAIN_ID)
+        throw new Error("wrong_chain");
+    const code = await client.getBytecode({ address: account, blockNumber });
+    if (!code ||
+        keccak256(code) !==
+            (family === "safe" ? SAFE_PROXY_HASH : ERC1967_PROXY_HASH)) {
+        throw new Error("account_proxy_mismatch");
+    }
+    const slot = await client.getStorageAt({
+        address: account,
+        slot: family === "safe" ? `0x${"00".repeat(32)}` : ERC1967_IMPLEMENTATION_SLOT,
+        blockNumber,
+    });
+    if (!slot || slot.length !== 66)
+        throw new Error("account_implementation_unavailable");
+    const actual = `0x${slot.slice(-40)}`.toLowerCase();
+    if (actual !== IMPLEMENTATION[family].toLowerCase()) {
+        throw new Error("account_implementation_mismatch");
+    }
+}
+/** The owner signs this hash with its wallet. The SDK never accepts an owner key. */
+export async function ownerSigningHash(client, family, account, digest) {
+    if (digest.length !== 66)
+        throw new Error("invalid_digest");
+    await assertAccountImplementation(client, family, account);
+    return accountSigningHash(client, family, account, digest);
+}
+/** Safety digests remain preparable after implementation drift. This does not grant authority. */
+export async function ownerSafetySigningHash(client, family, account, digest) {
+    if ((await client.getChainId()) !== BASE_SEPOLIA_CHAIN_ID)
+        throw new Error("wrong_chain");
+    if (digest.length !== 66)
+        throw new Error("invalid_digest");
+    return accountSigningHash(client, family, account, digest);
+}
+async function accountSigningHash(client, family, account, digest) {
+    if (family === "alchemy") {
+        return client.readContract({
+            address: ALCHEMY_OWNER_MODULE,
+            abi: [
+                {
+                    type: "function",
+                    name: "replaySafeHash",
+                    stateMutability: "view",
+                    inputs: [{ type: "address" }, { type: "bytes32" }],
+                    outputs: [{ type: "bytes32" }],
+                },
+            ],
+            functionName: "replaySafeHash",
+            args: [account, digest],
+        });
+    }
+    let domain;
+    if (family === "safe") {
+        domain = await client.readContract({
+            address: account,
+            abi: [
+                {
+                    type: "function",
+                    name: "domainSeparator",
+                    stateMutability: "view",
+                    inputs: [],
+                    outputs: [{ type: "bytes32" }],
+                },
+            ],
+            functionName: "domainSeparator",
+        });
+        const message = keccak256(encodeAbiParameters([{ type: "bytes32" }], [digest]));
+        const structHash = keccak256(encodeAbiParameters([{ type: "bytes32" }, { type: "bytes32" }], [SAFE_MESSAGE_TYPEHASH, message]));
+        return keccak256(concatHex(["0x1901", domain, structHash]));
+    }
+    const [, name, version] = await client.readContract({
+        address: account,
+        abi: domainAbi,
+        functionName: "eip712Domain",
+    });
+    domain = keccak256(encodeAbiParameters([
+        { type: "bytes32" },
+        { type: "bytes32" },
+        { type: "bytes32" },
+        { type: "uint256" },
+        { type: "address" },
+    ], [
+        EIP712_DOMAIN_TYPEHASH,
+        keccak256(stringToHex(name)),
+        keccak256(stringToHex(version)),
+        84532n,
+        account,
+    ]));
+    const structHash = keccak256(encodeAbiParameters([{ type: "bytes32" }, { type: "bytes32" }], [
+        family === "nexus"
+            ? NEXUS_PERSONAL_SIGN_TYPEHASH
+            : KERNEL_WRAPPER_TYPEHASH,
+        digest,
+    ]));
+    return keccak256(concatHex(["0x1901", domain, structHash]));
+}
+/** Preserve a Safe threshold payload or pack the reviewed single-owner dialect. */
+export function packOwnerSignature(family, signature) {
+    if (family === "safe") {
+        // Safe checkSignatures enforces its own threshold and accepts assembled
+        // multisignature payloads, including contract-signature offsets. Preserve
+        // the wallet's exact bytes instead of imposing a one-owner ECDSA shape.
+        if (!/^0x(?:[0-9a-fA-F]{2})+$/.test(signature) || size(signature) > 4096)
+            throw new Error("invalid_safe_owner_signatures");
+        return signature;
+    }
+    return concatHex([OWNER_PREFIX[family], plainOwnerEcdsa(signature)]);
+}
+function plainOwnerEcdsa(signature) {
+    if (!/^0x[0-9a-fA-F]{130}$/.test(signature))
+        throw new Error("invalid_owner_signature");
+    const v = Number.parseInt(signature.slice(-2), 16);
+    if (v !== 27 && v !== 28)
+        throw new Error("invalid_owner_signature_v");
+    return signature;
+}
+/** EntryPoint v0.7 nonce key for owner UserOperations. Safe has no selected UserOperation path. */
+export function ownerUserOpNonceKey(family) {
+    return family === "nexus"
+        ? BigInt(OWNER_PREFIX.nexus)
+        : family === "alchemy"
+            ? 1n
+            : 0n;
+}
+export function ownerUserOpSigningHash(family, userOpHash) {
+    if (userOpHash.length !== 66)
+        throw new Error("invalid_user_op_hash");
+    return family === "alchemy"
+        ? keccak256(concatHex([
+            stringToHex("\x19Ethereum Signed Message:\n32"),
+            userOpHash,
+        ]))
+        : userOpHash;
+}
+export function packOwnerUserOpSignature(family, signature) {
+    const plain = plainOwnerEcdsa(signature);
+    return family === "alchemy" ? concatHex(["0xff00", plain]) : plain;
+}
+const SAFE_MULTISEND_CALL_ONLY = "0x9641d764fc13c8B624c04430C7356C1C7C8102e2";
+const moduleAbi = [
+    {
+        type: "function",
+        name: "installModule",
+        stateMutability: "nonpayable",
+        inputs: [{ type: "uint256" }, { type: "address" }, { type: "bytes" }],
+        outputs: [],
+    },
+    {
+        type: "function",
+        name: "uninstallModule",
+        stateMutability: "nonpayable",
+        inputs: [{ type: "uint256" }, { type: "address" }, { type: "bytes" }],
+        outputs: [],
+    },
+];
+const invalidateAbi = [
+    {
+        type: "function",
+        name: "invalidateAccountMandates",
+        stateMutability: "nonpayable",
+        inputs: [{ type: "address" }, { type: "uint48" }, { type: "bytes" }],
+        outputs: [],
+    },
+];
+function alchemyEntityId(entityId) {
+    if (!Number.isInteger(entityId) || entityId < 0 || entityId > 0xffffffff) {
+        throw new Error("invalid_alchemy_entity_id");
+    }
+    return `0x${entityId.toString(16).padStart(8, "0")}`;
+}
+/** Prepare account self-call calldata after a fresh implementation preflight. */
+export async function prepareOwnerInstallation(client, family, account, core, entityId = 1) {
+    await assertAccountImplementation(client, family, account);
+    let data;
+    if (family === "safe") {
+        data = encodeFunctionData({
+            abi: [
+                {
+                    type: "function",
+                    name: "enableModule",
+                    stateMutability: "nonpayable",
+                    inputs: [{ type: "address" }],
+                    outputs: [],
+                },
+            ],
+            functionName: "enableModule",
+            args: [core],
+        });
+    }
+    else if (family === "nexus" || family === "kernel") {
+        const init = family === "nexus"
+            ? "0x"
+            : concatHex([
+                padHex("0x", { size: 20 }),
+                encodeAbiParameters([{ type: "bytes" }, { type: "bytes" }], ["0x", "0x"]),
+            ]);
+        data = encodeFunctionData({
+            abi: moduleAbi,
+            functionName: "installModule",
+            args: [2n, core, init],
+        });
+    }
+    else {
+        const config = concatHex([core, alchemyEntityId(entityId), "0x04"]);
+        data = encodeFunctionData({
+            abi: [
+                {
+                    type: "function",
+                    name: "installValidation",
+                    stateMutability: "nonpayable",
+                    inputs: [
+                        { type: "bytes25" },
+                        { type: "bytes4[]" },
+                        { type: "bytes" },
+                        { type: "bytes[]" },
+                    ],
+                    outputs: [],
+                },
+            ],
+            functionName: "installValidation",
+            args: [config, [], "0x01", []],
+        });
+    }
+    return { to: account, data: data.toLowerCase(), operation: 0 };
+}
+function multiSendTransaction(to, data) {
+    return concatHex([
+        "0x00",
+        to,
+        padHex("0x", { size: 32 }),
+        padHex(`0x${size(data).toString(16)}`, { size: 32 }),
+        data,
+    ]);
+}
+/** Prepare tested invalidate-then-remove calldata, including after slot drift. The owner must authorize it. */
+export async function preparePermanentRemoval(client, family, account, core, options = {}) {
+    if ((await client.getChainId()) !== BASE_SEPOLIA_CHAIN_ID)
+        throw new Error("wrong_chain");
+    const invalidate = encodeFunctionData({
+        abi: invalidateAbi,
+        functionName: "invalidateAccountMandates",
+        args: [account, 0, "0x"],
+    });
+    if (family === "safe") {
+        if (!options.safePreviousModule)
+            throw new Error("safe_previous_module_required");
+        const disable = encodeFunctionData({
+            abi: [
+                {
+                    type: "function",
+                    name: "disableModule",
+                    stateMutability: "nonpayable",
+                    inputs: [{ type: "address" }, { type: "address" }],
+                    outputs: [],
+                },
+            ],
+            functionName: "disableModule",
+            args: [options.safePreviousModule, core],
+        });
+        const payload = concatHex([
+            multiSendTransaction(core, invalidate),
+            multiSendTransaction(account, disable),
+        ]);
+        const data = encodeFunctionData({
+            abi: [
+                {
+                    type: "function",
+                    name: "multiSend",
+                    stateMutability: "payable",
+                    inputs: [{ type: "bytes" }],
+                    outputs: [],
+                },
+            ],
+            functionName: "multiSend",
+            args: [payload],
+        });
+        return {
+            to: SAFE_MULTISEND_CALL_ONLY,
+            data: data.toLowerCase(),
+            operation: 1,
+        };
+    }
+    if (family === "alchemy") {
+        const config = concatHex([
+            core,
+            alchemyEntityId(options.alchemyEntityId ?? 1),
+        ]);
+        const uninstall = encodeFunctionData({
+            abi: [
+                {
+                    type: "function",
+                    name: "uninstallValidation",
+                    stateMutability: "nonpayable",
+                    inputs: [{ type: "bytes24" }, { type: "bytes" }, { type: "bytes[]" }],
+                    outputs: [],
+                },
+            ],
+            functionName: "uninstallValidation",
+            args: [config, "0x", []],
+        });
+        const data = encodeFunctionData({
+            abi: [
+                {
+                    type: "function",
+                    name: "executeBatch",
+                    stateMutability: "nonpayable",
+                    inputs: [
+                        {
+                            type: "tuple[]",
+                            components: [
+                                { type: "address" },
+                                { type: "uint256" },
+                                { type: "bytes" },
+                            ],
+                        },
+                    ],
+                    outputs: [],
+                },
+            ],
+            functionName: "executeBatch",
+            args: [
+                [
+                    [core, 0n, invalidate],
+                    [account, 0n, uninstall],
+                ],
+            ],
+        });
+        return { to: account, data: data.toLowerCase(), operation: 0 };
+    }
+    const deinit = family === "nexus"
+        ? encodeAbiParameters([{ type: "address" }, { type: "bytes" }], ["0x0000000000000000000000000000000000000001", "0x"])
+        : "0x";
+    return {
+        to: account,
+        data: encodeFunctionData({
+            abi: moduleAbi,
+            functionName: "uninstallModule",
+            args: [2n, core, deinit],
+        }).toLowerCase(),
+        operation: 0,
+    };
+}
+//# sourceMappingURL=account-dialects.js.map

package/dist/account-dialects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-dialects.js","sourceRoot":"","sources":["../src/account-dialects.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,kBAAkB,EAClB,SAAS,EACT,MAAM,EACN,IAAI,EACJ,WAAW,GAIZ,MAAM,MAAM,CAAC;AAKd,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAC3C,MAAM,CAAC,MAAM,2BAA2B,GACtC,oEAA6E,CAAC;AAEhF,MAAM,eAAe,GACnB,oEAAoE,CAAC;AACvE,MAAM,kBAAkB,GACtB,oEAAoE,CAAC;AACvE,MAAM,cAAc,GAAmC;IACrD,IAAI,EAAE,4CAA4C;IAClD,KAAK,EAAE,4CAA4C;IACnD,MAAM,EAAE,4CAA4C;IACpD,OAAO,EAAE,4CAA4C;CACtD,CAAC;AACF,MAAM,YAAY,GAA+B;IAC/C,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,4CAA4C;IACnD,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,kBAAkB;CAC5B,CAAC;AACF,MAAM,sBAAsB,GAAG,SAAS,CACtC,WAAW,CACT,oFAAoF,CACrF,CACF,CAAC;AACF,MAAM,qBAAqB,GAAG,SAAS,CACrC,WAAW,CAAC,4BAA4B,CAAC,CAC1C,CAAC;AACF,MAAM,4BAA4B,GAAG,SAAS,CAC5C,WAAW,CAAC,8BAA8B,CAAC,CAC5C,CAAC;AACF,MAAM,uBAAuB,GAC3B,oEAA6E,CAAC;AAChF,MAAM,oBAAoB,GACxB,4CAAqD,CAAC;AACxD,MAAM,SAAS,GAAG;IAChB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,cAAc;QACpB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE,EAAE;QACV,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClB,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClB,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClB,EAAE,IAAI,EAAE,SAAS,EAAE;YACnB,EAAE,IAAI,EAAE,SAAS,EAAE;YACnB,EAAE,IAAI,EAAE,SAAS,EAAE;YACnB,EAAE,IAAI,EAAE,WAAW,EAAE;SACtB;KACF;CACO,CAAC;AAMX,2GAA2G;AAC3G,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAqB,EACrB,MAAqB,EACrB,OAAgB,EAChB,WAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;IAC1C,IAAI,OAAO,KAAK,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACzE,IACE,CAAC,IAAI;QACL,SAAS,CAAC,IAAI,CAAC;YACb,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAC5D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;QACrC,OAAO,EAAE,OAAO;QAChB,IAAI,EACF,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,2BAA2B;QAC1E,WAAW;KACZ,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;QAC7B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,MAAM,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAqB,EACrB,MAAqB,EACrB,OAAgB,EAChB,MAAW;IAEX,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5D,MAAM,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3D,OAAO,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAqB,EACrB,MAAqB,EACrB,OAAgB,EAChB,MAAW;IAEX,IAAI,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,qBAAqB;QACvD,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5D,OAAO,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAqB,EACrB,MAAqB,EACrB,OAAgB,EAChB,MAAW;IAEX,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,YAAY,CAAC;YACzB,OAAO,EAAE,oBAAoB;YAC7B,GAAG,EAAE;gBACH;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,gBAAgB;oBACtB,eAAe,EAAE,MAAM;oBACvB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;oBAClD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;iBAC/B;aACO;YACV,YAAY,EAAE,gBAAgB;YAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;SACxB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAW,CAAC;IAChB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;YACjC,OAAO,EAAE,OAAO;YAChB,GAAG,EAAE;gBACH;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,iBAAiB;oBACvB,eAAe,EAAE,MAAM;oBACvB,MAAM,EAAE,EAAE;oBACV,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;iBAC/B;aACO;YACV,YAAY,EAAE,iBAAiB;SAChC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,SAAS,CACvB,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CACrD,CAAC;QACF,MAAM,UAAU,GAAG,SAAS,CAC1B,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAC1C,CAAC,qBAAqB,EAAE,OAAO,CAAC,CACjC,CACF,CAAC;QACF,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;QAClD,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,SAAS;QACd,YAAY,EAAE,cAAc;KAC7B,CAAC,CAAC;IACH,MAAM,GAAG,SAAS,CAChB,mBAAmB,CACjB;QACE,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;KACpB,EACD;QACE,sBAAsB;QACtB,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5B,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM;QACN,OAAO;KACR,CACF,CACF,CAAC;IACF,MAAM,UAAU,GAAG,SAAS,CAC1B,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAC1C;QACE,MAAM,KAAK,OAAO;YAChB,CAAC,CAAC,4BAA4B;YAC9B,CAAC,CAAC,uBAAuB;QAC3B,MAAM;KACP,CACF,CACF,CAAC;IACF,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,kBAAkB,CAAC,MAAqB,EAAE,SAAc;IACtE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,wEAAwE;QACxE,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI;YACtE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,eAAe,CAAC,SAAc;IACrC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,mBAAmB,CACjC,MAAsC;IAEtC,OAAO,MAAM,KAAK,OAAO;QACvB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC;QAC5B,CAAC,CAAC,MAAM,KAAK,SAAS;YACpB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAsC,EACtC,UAAe;IAEf,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtE,OAAO,MAAM,KAAK,SAAS;QACzB,CAAC,CAAC,SAAS,CACP,SAAS,CAAC;YACR,WAAW,CAAC,kCAAkC,CAAC;YAC/C,UAAU;SACX,CAAC,CACH;QACH,CAAC,CAAC,UAAU,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAsC,EACtC,SAAc;IAEd,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACrE,CAAC;AASD,MAAM,wBAAwB,GAC5B,4CAAqD,CAAC;AACxD,MAAM,SAAS,GAAG;IAChB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,eAAe;QACrB,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACrE,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,iBAAiB;QACvB,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACrE,OAAO,EAAE,EAAE;KACZ;CACO,CAAC;AACX,MAAM,aAAa,GAAG;IACpB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,2BAA2B;QACjC,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACpE,OAAO,EAAE,EAAE;KACZ;CACO,CAAC;AAEX,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,UAAU,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAqB,EACrB,MAAqB,EACrB,OAAgB,EAChB,IAAa,EACb,QAAQ,GAAG,CAAC;IAEZ,MAAM,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,IAAS,CAAC;IACd,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,GAAG,kBAAkB,CAAC;YACxB,GAAG,EAAE;gBACH;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,cAAc;oBACpB,eAAe,EAAE,YAAY;oBAC7B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;oBAC7B,OAAO,EAAE,EAAE;iBACZ;aACO;YACV,YAAY,EAAE,cAAc;YAC5B,IAAI,EAAE,CAAC,IAAI,CAAC;SACb,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,IAAI,GACR,MAAM,KAAK,OAAO;YAChB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,SAAS,CAAC;gBACR,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC1B,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACtC,CAAC,IAAI,EAAE,IAAI,CAAC,CACb;aACF,CAAC,CAAC;QACT,IAAI,GAAG,kBAAkB,CAAC;YACxB,GAAG,EAAE,SAAS;YACd,YAAY,EAAE,eAAe;YAC7B,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC;SACvB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACpE,IAAI,GAAG,kBAAkB,CAAC;YACxB,GAAG,EAAE;gBACH;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,mBAAmB;oBACzB,eAAe,EAAE,YAAY;oBAC7B,MAAM,EAAE;wBACN,EAAE,IAAI,EAAE,SAAS,EAAE;wBACnB,EAAE,IAAI,EAAE,UAAU,EAAE;wBACpB,EAAE,IAAI,EAAE,OAAO,EAAE;wBACjB,EAAE,IAAI,EAAE,SAAS,EAAE;qBACpB;oBACD,OAAO,EAAE,EAAE;iBACZ;aACO;YACV,YAAY,EAAE,mBAAmB;YACjC,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAS,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,oBAAoB,CAAC,EAAW,EAAE,IAAS;IAClD,OAAO,SAAS,CAAC;QACf,MAAM;QACN,EAAE;QACF,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC1B,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACpD,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAqB,EACrB,MAAqB,EACrB,OAAgB,EAChB,IAAa,EACb,UAAsE,EAAE;IAExE,IAAI,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,qBAAqB;QACvD,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,kBAAkB,CAAC;QACpC,GAAG,EAAE,aAAa;QAClB,YAAY,EAAE,2BAA2B;QACzC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC;KACzB,CAAC,CAAC;IACH,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,kBAAkB;YAC7B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,kBAAkB,CAAC;YACjC,GAAG,EAAE;gBACH;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,eAAe;oBACrB,eAAe,EAAE,YAAY;oBAC7B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;oBAClD,OAAO,EAAE,EAAE;iBACZ;aACO;YACV,YAAY,EAAE,eAAe;YAC7B,IAAI,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,SAAS,CAAC;YACxB,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC;YACtC,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC;SACvC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,kBAAkB,CAAC;YAC9B,GAAG,EAAE;gBACH;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,WAAW;oBACjB,eAAe,EAAE,SAAS;oBAC1B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;oBAC3B,OAAO,EAAE,EAAE;iBACZ;aACO;YACV,YAAY,EAAE,WAAW;YACzB,IAAI,EAAE,CAAC,OAAO,CAAC;SAChB,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,wBAAwB;YAC5B,IAAI,EAAE,IAAI,CAAC,WAAW,EAAS;YAC/B,SAAS,EAAE,CAAC;SACb,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,SAAS,CAAC;YACvB,IAAI;YACJ,eAAe,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC;SAC9C,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,kBAAkB,CAAC;YACnC,GAAG,EAAE;gBACH;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,qBAAqB;oBAC3B,eAAe,EAAE,YAAY;oBAC7B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;oBACrE,OAAO,EAAE,EAAE;iBACZ;aACO;YACV,YAAY,EAAE,qBAAqB;YACnC,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,kBAAkB,CAAC;YAC9B,GAAG,EAAE;gBACH;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,cAAc;oBACpB,eAAe,EAAE,YAAY;oBAC7B,MAAM,EAAE;wBACN;4BACE,IAAI,EAAE,SAAS;4BACf,UAAU,EAAE;gCACV,EAAE,IAAI,EAAE,SAAS,EAAE;gCACnB,EAAE,IAAI,EAAE,SAAS,EAAE;gCACnB,EAAE,IAAI,EAAE,OAAO,EAAE;6BAClB;yBACF;qBACF;oBACD,OAAO,EAAE,EAAE;iBACZ;aACO;YACV,YAAY,EAAE,cAAc;YAC5B,IAAI,EAAE;gBACJ;oBACE,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC;oBACtB,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC;iBACzB;aACF;SACF,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAS,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,MAAM,GACV,MAAM,KAAK,OAAO;QAChB,CAAC,CAAC,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACxC,CAAC,4CAA4C,EAAE,IAAI,CAAC,CACrD;QACH,CAAC,CAAC,IAAI,CAAC;IACX,OAAO;QACL,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,SAAS;YACd,YAAY,EAAE,iBAAiB;YAC/B,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC;SACzB,CAAC,CAAC,WAAW,EAAS;QACvB,SAAS,EAAE,CAAC;KACb,CAAC;AACJ,CAAC"}

package/dist/gas-approval.d.ts

@@ -0,0 +1,80 @@
+import { type Address, type Hex, type PublicClient } from "viem";
+import { type AccountFamily } from "./account-dialects.js";
+export interface GasMandateTerms {
+    parentId: Hex;
+    account: Address;
+    agent: Address;
+    accountProfileId: Hex;
+    installEpoch: bigint;
+    projectId: Hex;
+    mode: number;
+    policyVersion: number;
+    policyHash: Hex;
+    validFrom: number;
+    expiresAt: number;
+    maxDepth: number;
+    maxActiveDescendants: number;
+    approvalExpiresAt: number;
+    salt: Hex;
+}
+export interface OwnerGasPolicy {
+    mandateId: Hex;
+    account: Address;
+    projectId: Hex;
+    accountProfileId: Hex;
+    installEpoch: bigint;
+    /** Version 1 supports native ETH only. */
+    feeAsset: Address;
+    recipient: Address;
+    attester: Address;
+    maxPerAction: bigint;
+    maxTotal: bigint;
+    expiresAt: number;
+    /** 1 = success, 2 = refusal, 4 = revert. */
+    chargeableOutcomes: number;
+    formulaVersion: number;
+    nonce: bigint;
+}
+export interface CombinedGasApproval {
+    mandateId: Hex;
+    gasPolicyId: Hex;
+    digest: Hex;
+    ownerSigningHash: Hex;
+    summary: {
+        chainId: number;
+        account: Address;
+        core: Address;
+        projectId: Hex;
+        agent: Address;
+        recipient: Address;
+        attester: Address;
+        feeAsset: Address;
+        maxPerActionWei: bigint;
+        maxTotalWei: bigint;
+        chargeableOutcomes: number;
+        expiresAt: number;
+    };
+    encodeSubmission(ownerWalletSignature: Hex): Hex;
+}
+export interface PreparedGasRevocation {
+    account: Address;
+    policyId: Hex;
+    nonce: bigint;
+    deadline: number;
+    digest: Hex;
+    ownerSigningHash: Hex;
+    encodeSubmission(ownerWalletSignature: Hex): Hex;
+}
+export declare function hashGasMandate(terms: GasMandateTerms, chainId: number, core: Address): Hex;
+export declare function hashOwnerGasPolicy(policy: OwnerGasPolicy, chainId: number, core: Address): Hex;
+/** Internal parity point for the existing v2 combined owner commitment. */
+export declare function hashCombinedGasApproval(mandateId: Hex, gasPolicyId: Hex, chainId: number, core: Address): Hex;
+/** Internal parity point for the existing v2 owner safety commitment. */
+export declare function hashGasRevocation(gasPolicyId: Hex, nonce: bigint, deadline: number, chainId: number, core: Address): Hex;
+/** Prepare one owner signature after the account installation has been verified. */
+export declare function prepareCombinedGasApproval(client: Pick<PublicClient, "getChainId" | "getBytecode" | "getStorageAt" | "readContract">, family: AccountFamily, chainId: number, core: Address, terms: GasMandateTerms, mandatePolicy: Hex, gasPolicy: OwnerGasPolicy): Promise<CombinedGasApproval>;
+/** Bind a platform project UUID before any owner signing request is prepared. */
+export declare function prepareProjectBoundGasApproval(client: Parameters<typeof prepareCombinedGasApproval>[0], family: AccountFamily, chainId: number, core: Address, projectUuid: string, terms: GasMandateTerms, mandatePolicy: Hex, gasPolicy: OwnerGasPolicy): Promise<CombinedGasApproval>;
+/** Owner safety action. It remains preparable after an account implementation drift. */
+export declare function prepareGasRevocation(client: Pick<PublicClient, "getChainId" | "getBytecode" | "getStorageAt" | "readContract">, family: AccountFamily, chainId: number, core: Address, account: Address, policyId: Hex, deadline: number): Promise<PreparedGasRevocation>;
+//# sourceMappingURL=gas-approval.d.ts.map

package/dist/gas-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gas-approval.d.ts","sourceRoot":"","sources":["../src/gas-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,OAAO,EACZ,KAAK,GAAG,EACR,KAAK,YAAY,EAClB,MAAM,MAAM,CAAC;AAEd,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,uBAAuB,CAAC;AA2B/B,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,GAAG,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,gBAAgB,EAAE,GAAG,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,GAAG,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,GAAG,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,GAAG,CAAC;CACX;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,GAAG,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,GAAG,CAAC;IACf,gBAAgB,EAAE,GAAG,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,GAAG,CAAC;IACf,WAAW,EAAE,GAAG,CAAC;IACjB,MAAM,EAAE,GAAG,CAAC;IACZ,gBAAgB,EAAE,GAAG,CAAC;IACtB,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,IAAI,EAAE,OAAO,CAAC;QACd,SAAS,EAAE,GAAG,CAAC;QACf,KAAK,EAAE,OAAO,CAAC;QACf,SAAS,EAAE,OAAO,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,gBAAgB,CAAC,oBAAoB,EAAE,GAAG,GAAG,GAAG,CAAC;CAClD;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,GAAG,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,GAAG,CAAC;IACZ,gBAAgB,EAAE,GAAG,CAAC;IACtB,gBAAgB,CAAC,oBAAoB,EAAE,GAAG,GAAG,GAAG,CAAC;CAClD;AAuCD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,GACZ,GAAG,CA0CL;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,GACZ,GAAG,CAwCL;AAED,2EAA2E;AAC3E,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,GAAG,EACd,WAAW,EAAE,GAAG,EAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,GACZ,GAAG,CAUL;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,GAAG,EAChB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,GACZ,GAAG,CAeL;AAED,oFAAoF;AACpF,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,IAAI,CACV,YAAY,EACZ,YAAY,GAAG,aAAa,GAAG,cAAc,GAAG,cAAc,CAC/D,EACD,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,GAAG,EAClB,SAAS,EAAE,cAAc,GACxB,OAAO,CAAC,mBAAmB,CAAC,CA8E9B;AAED,iFAAiF;AACjF,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC,CAAC,CAAC,EACxD,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,GAAG,EAClB,SAAS,EAAE,cAAc,GACxB,OAAO,CAAC,mBAAmB,CAAC,CAgB9B;AAED,wFAAwF;AACxF,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,IAAI,CACV,YAAY,EACZ,YAAY,GAAG,aAAa,GAAG,cAAc,GAAG,cAAc,CAC/D,EACD,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,CAAC,CA0DhC"}