@graphprotocol/graph-auth-kit 7.10.1 → 7.11.0

package/README.md

@@ -328,11 +328,63 @@ const publicationSigner = signer.withSubmissionCallbacks({
 const transaction = await publicationContract.connect(publicationSigner).publishNewSubgraph(/* arguments */)
 ```
 
-The wallet signs before `beforeSubmit`. The callback receives a serializable unsigned snapshot,
+The wallet signs before `beforeSubmit`. This existing callback receives a serializable unsigned snapshot,
 including the Safe address, decimal chain ID, proposal hash and complete transaction data (nonce
 as a decimal string). Its successful completion must mean durable persistence. If it rejects,
 nothing is submitted to Safe. The original shared signer remains unchanged.
 
+For applications that require backend verification of wallet approval, opt in to
+`authorizeSubmission`. It receives the same owner signature that will be sent to Safe,
+without another wallet prompt. It runs before `beforeSubmit` and Safe submission; throwing
+prevents both subsequent callbacks and submission. The signature is provided separately
+from the frozen unsigned snapshot:
+
+```ts
+const publicationSigner = signer.withSubmissionCallbacks({
+  authorizeSubmission: async (proposal, authorization) => {
+    // Verify the exact Safe hash/signature, signer ownership and application scope
+    // on your backend, then atomically admit and save the unsigned proposal.
+    await verifyAndSaveProposal(proposal, authorization)
+  },
+  afterSubmit: async (proposal) => {
+    await confirmSubmittedProposal(proposal.safeTxHash)
+  },
+})
+```
+
+`SafeSubmissionAuthorization` contains `senderAddress` and `senderSignature`. The latter
+uses Safe's signature encoding and must be validated accordingly by the backend, not
+trusted because it came from this callback. Treat it as transient authorization: do not
+persist or log it, include it in error telemetry, or return it in recovery responses.
+Possession of sufficient signatures allows execution of the exact approved transaction.
+The old `beforeSubmit`/`afterSubmit` callbacks, transaction response and the acknowledgement
+error's `proposal` remain unsigned. Callbacks and SDK errors still propagate, so applications
+must also sanitize request-bearing errors returned by their own HTTP clients.
+
+An explicit ethers `TransactionRequest.nonce` is now honored, including zero and deferred
+values. Omit it to use `getNextNonce()` as before. For an intentional alternative, construct
+the new transaction with the original proposal's nonce; do not use `sendPreparedTransaction`
+to change an existing proposal's calldata:
+
+```ts
+await publicationSigner.sendTransaction({
+  to: contractAddress,
+  data: alternativePublicationCalldata,
+  nonce: pendingProposalNonce,
+})
+```
+
+The explicit nonce accepts ethers `BigNumberish` representations, but its value must be a
+nonnegative safe integer supported by the SDK. Auth Kit checks
+nonce consumption before signing and again after admission/persistence callbacks. It never
+silently renumbers a consumed proposal. These checks cannot prevent an external execution
+racing the final service submission; applications must still reconcile the outcome.
+Selecting a nonce is not a reservation: coordinate ordinary admission in the application's
+backend, and require explicit consent to admit alternatives sharing a nonce. Keep both
+proposals until verified execution determines which, if either, succeeded. Safe enforces
+execution order and signature thresholds; proposing an alternative does not cancel the
+original. These hooks do not submit, cancel or reconcile any earlier proposal automatically.
+
 After reconciling the saved attempt, retry an absent proposal with an available nonce using
 `publicationSigner.sendPreparedTransaction(proposal)`. This requests a fresh signature but keeps
 the original nonce, gas fields, calldata and hash; it does not select a new nonce or estimate gas.

package/dist/ens/index.js

@@ -1,4 +1,4 @@
-import { u, a, b, c } from "../useGraphAuthKitEnsNames-O_TGBu9d.js";
+import { u, a, b, c } from "../useGraphAuthKitEnsNames-Jsc8pjxn.js";
 export {
   u as useGraphAuthKitAvatar,
   a as useGraphAuthKitAvatars,

package/dist/{hooks-BniInqgx.js → hooks-CCLTYUp2.js}

@@ -113,10 +113,14 @@ class SafeSubmissionAcknowledgementError extends Error {
   }
 }
 function safeNonce(value) {
-  if (!/^\d+$/.test(String(value)) || !Number.isSafeInteger(Number(value))) {
-    throw new RangeError("Safe nonce exceeds the SDK supported integer range");
+  try {
+    if (typeof value !== "number" || Number.isSafeInteger(value)) {
+      const nonce = BigNumber.from(typeof value === "number" ? String(value) : value);
+      if (!nonce.isNegative()) return nonce.toNumber();
+    }
+  } catch {
   }
-  return Number(value);
+  throw new RangeError("Safe nonce exceeds the SDK supported integer range");
 }
 class SafeEthersSigner extends VoidSigner {
   constructor(safeAddress, provider, signerAddress, chainId, options) {
@@ -240,7 +244,8 @@ class SafeEthersSigner extends VoidSigner {
       operation = OperationType.DelegateCall;
     }
     const apiKit = await this.getApiKitInstance();
-    const nonce = await this.getNextNonce();
+    const requestedNonce = await tx.nonce;
+    const nonce = requestedNonce === void 0 ? await this.getNextNonce() : safeNonce(requestedNonce);
     const safeTransactionData = {
       to,
       data,
@@ -266,7 +271,7 @@ class SafeEthersSigner extends VoidSigner {
   }
   /** Retry the exact proposal, without nonce selection, estimation, or metadata reconstruction. */
   async sendPreparedTransaction(input) {
-    var _a, _b, _c, _d;
+    var _a, _b, _c, _d, _e, _f;
     const proposal = Object.freeze({
       schemaVersion: input.schemaVersion,
       safeAddress: input.safeAddress,
@@ -314,16 +319,24 @@ class SafeEthersSigner extends VoidSigner {
     const senderSignature = await connectedSafe.signHash(hash);
     const response = await this.buildTransactionResponse(hash, data);
     const apiKit = await this.getApiKitInstance();
-    await ((_b = (_a = this.submissionCallbacks).beforeSubmit) == null ? void 0 : _b.call(_a, proposal));
+    const authorization = Object.freeze({
+      senderAddress: this.signerAddress,
+      senderSignature: senderSignature.data
+    });
+    await ((_b = (_a = this.submissionCallbacks).authorizeSubmission) == null ? void 0 : _b.call(_a, proposal, authorization));
+    await ((_d = (_c = this.submissionCallbacks).beforeSubmit) == null ? void 0 : _d.call(_c, proposal));
+    if (BigNumber.from(await connectedSafe.getNonce()).gt(data.nonce)) {
+      throw new Error("Prepared Safe proposal nonce has been consumed; reconcile before retrying");
+    }
     await apiKit.proposeTransaction({
       safeAddress: this.safeAddress,
       safeTransactionData: data,
       safeTxHash: hash,
       senderAddress: this.signerAddress,
-      senderSignature: senderSignature.data
+      senderSignature: authorization.senderSignature
     });
     try {
-      await ((_d = (_c = this.submissionCallbacks).afterSubmit) == null ? void 0 : _d.call(_c, proposal));
+      await ((_f = (_e = this.submissionCallbacks).afterSubmit) == null ? void 0 : _f.call(_e, proposal));
     } catch (error) {
       throw new SafeSubmissionAcknowledgementError(proposal, error);
     }

package/dist/index.js

@@ -1,14 +1,14 @@
 "use client";
 import { m, A, k, B, D, w, G, L, n, o, p, M, O, v, R, u, a, S, q, r, s, t, l, g, j, x, I, J, c, b, f, h, E, C, F, H, e, i, y, d, z } from "./GraphAuthKitInner.context-DGIzfOnv.js";
 import { G as G2, a as a2, M as M2, b as b2, d as d2, u as u2 } from "./utils-D-x-g3cl.js";
-import { b as useGraphAuthKitAccount, c as useGraphAuthKitConnector } from "./hooks-BniInqgx.js";
-import { a as a3, S as S2, m as m2, e as e2, d as d3, f as f2, g as g2, h as h2, u as u3 } from "./hooks-BniInqgx.js";
-import { g as g3, u as u4, w as w2 } from "./useWaitForSafeTransaction-jBw2mhZi.js";
+import { b as useGraphAuthKitAccount, c as useGraphAuthKitConnector } from "./hooks-CCLTYUp2.js";
+import { a as a3, S as S2, m as m2, e as e2, d as d3, f as f2, g as g2, h as h2, u as u3 } from "./hooks-CCLTYUp2.js";
+import { g as g3, u as u4, w as w2 } from "./useWaitForSafeTransaction-C3rEtkxJ.js";
 import { HttpError } from "@safe-global/api-kit";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { Alert, ExperimentalButton } from "@graphprotocol/gds";
 import { useConfig, useSwitchChain } from "wagmi";
-import { u as u5, a as a4, b as b3, c as c2 } from "./useGraphAuthKitEnsNames-O_TGBu9d.js";
+import { u as u5, a as a4, b as b3, c as c2 } from "./useGraphAuthKitEnsNames-Jsc8pjxn.js";
 function Connected({ children }) {
   const account = useGraphAuthKitAccount();
   const connector = useGraphAuthKitConnector();

package/dist/safe/SafeEthersSigner.d.ts

@@ -10,7 +10,7 @@ export declare const mapReceipt: (receipt: providers.TransactionReceipt, safeTx:
 export interface SafeTransactionResponse extends TransactionResponse {
     operation: OperationType;
 }
-/** Serializable unsigned snapshot. Signatures deliberately never reach persistence callbacks. */
+/** Serializable unsigned snapshot, safe to persist independently of its authorization. */
 export interface PreparedSafeTransaction {
     schemaVersion: 1;
     safeAddress: string;
@@ -20,7 +20,14 @@ export interface PreparedSafeTransaction {
         nonce: string;
     };
 }
+/** Transient approval of the exact proposal. Verify server-side; never persist or log it. */
+export interface SafeSubmissionAuthorization {
+    readonly senderAddress: string;
+    readonly senderSignature: string;
+}
 export interface SafeSubmissionCallbacks {
+    /** Opt-in server admission using the existing signature. Rejection prevents submission. */
+    authorizeSubmission?: (proposal: PreparedSafeTransaction, authorization: SafeSubmissionAuthorization) => Promise<void>;
     /** Must durably save the proposal before resolving. Rejection prevents submission. */
     beforeSubmit?: (proposal: PreparedSafeTransaction) => Promise<void>;
     /** Safe accepted the proposal; failure here does not mean submission failed. */

package/dist/safe/SafeEthersSigner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SafeEthersSigner.d.ts","sourceRoot":"","sources":["../../src/safe/SafeEthersSigner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AACnH,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,KAAK,UAAU,MAAM,sBAAsB,CAAA;AAClD,OAAO,IAA8B,MAAM,2BAA2B,CAAA;AACtE,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAmC,MAAM,wBAAwB,CAAA;AACjH,OAAO,EAAa,KAAK,SAAS,EAAS,MAAM,QAAQ,CAAA;AAEzD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAgGxD,eAAO,MAAM,UAAU,GAAI,SAAS,SAAS,CAAC,kBAAkB,EAAE,QAAQ,mBAAmB,uBAK5F,CAAA;AAID,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB;IAClE,SAAS,EAAE,aAAa,CAAA;CACzB;AAED,iGAAiG;AACjG,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,CAAC,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CACpE;AAED,MAAM,WAAW,uBAAuB;IACtC,sFAAsF;IACtF,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,gFAAgF;IAChF,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACnE;AAED,qBAAa,kCAAmC,SAAQ,KAAK;IAGzD,QAAQ,CAAC,QAAQ,EAAE,uBAAuB;IAF5C,SAAkB,KAAK,EAAE,OAAO,CAAA;gBAErB,QAAQ,EAAE,uBAAuB,EAC1C,KAAK,EAAE,OAAO;CAMjB;AASD,MAAM,WAAW,uBAAuB;IACtC,mGAAmG;IACnG,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAGD,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAA;IAC1C,OAAO,CAAC,mBAAmB,CAA8B;IACzD,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,MAAM,CAAC,EAAE,UAAU,CAAA;gBAGjB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,SAAS,CAAC,YAAY,EAChC,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,uBAAuB;IAiB7B,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAcnC,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAOtC,oBAAoB;IAId,iBAAiB;IAOvB,kFAAkF;IAClF,uBAAuB,CAAC,SAAS,EAAE,uBAAuB,GAAG,gBAAgB;IAcvE,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAM/B,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAqCjH;;;;;OAKG;IACY,eAAe,CAAC,WAAW,EAAE,UAAU,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAkD7G,iGAAiG;IAC3F,uBAAuB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAuEhG"}
+{"version":3,"file":"SafeEthersSigner.d.ts","sourceRoot":"","sources":["../../src/safe/SafeEthersSigner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AACnH,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,KAAK,UAAU,MAAM,sBAAsB,CAAA;AAClD,OAAO,IAA8B,MAAM,2BAA2B,CAAA;AACtE,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAmC,MAAM,wBAAwB,CAAA;AACjH,OAAO,EAAgC,KAAK,SAAS,EAAS,MAAM,QAAQ,CAAA;AAE5E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAgGxD,eAAO,MAAM,UAAU,GAAI,SAAS,SAAS,CAAC,kBAAkB,EAAE,QAAQ,mBAAmB,uBAK5F,CAAA;AAID,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB;IAClE,SAAS,EAAE,aAAa,CAAA;CACzB;AAED,0FAA0F;AAC1F,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,CAAC,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CACpE;AAED,6FAA6F;AAC7F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,2FAA2F;IAC3F,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,uBAAuB,EAAE,aAAa,EAAE,2BAA2B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACtH,sFAAsF;IACtF,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,gFAAgF;IAChF,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACnE;AAED,qBAAa,kCAAmC,SAAQ,KAAK;IAGzD,QAAQ,CAAC,QAAQ,EAAE,uBAAuB;IAF5C,SAAkB,KAAK,EAAE,OAAO,CAAA;gBAErB,QAAQ,EAAE,uBAAuB,EAC1C,KAAK,EAAE,OAAO;CAMjB;AAcD,MAAM,WAAW,uBAAuB;IACtC,mGAAmG;IACnG,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAGD,qBAAa,gBAAiB,SAAQ,UAAU;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAA;IAC1C,OAAO,CAAC,mBAAmB,CAA8B;IACzD,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,MAAM,CAAC,EAAE,UAAU,CAAA;gBAGjB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,SAAS,CAAC,YAAY,EAChC,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,uBAAuB;IAiB7B,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAcnC,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAOtC,oBAAoB;IAId,iBAAiB;IAOvB,kFAAkF;IAClF,uBAAuB,CAAC,SAAS,EAAE,uBAAuB,GAAG,gBAAgB;IAcvE,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAM/B,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAqCjH;;;;;OAKG;IACY,eAAe,CAAC,WAAW,EAAE,UAAU,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAqD7G,iGAAiG;IAC3F,uBAAuB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAmFhG"}

package/dist/safe/index.js

@@ -1,6 +1,6 @@
 import { A, a, S, c, b, f, e, i, d } from "../GraphAuthKitInner.context-DGIzfOnv.js";
-import { a as a2, S as S2, m } from "../hooks-BniInqgx.js";
-import { g, u, w } from "../useWaitForSafeTransaction-jBw2mhZi.js";
+import { a as a2, S as S2, m } from "../hooks-CCLTYUp2.js";
+import { g, u, w } from "../useWaitForSafeTransaction-C3rEtkxJ.js";
 import { HttpError } from "@safe-global/api-kit";
 export {
   A as ApiKitUrlMap,

package/dist/{useGraphAuthKitEnsNames-O_TGBu9d.js → useGraphAuthKitEnsNames-Jsc8pjxn.js}

@@ -3,7 +3,7 @@ import { createIdenticon } from "@graphprotocol/gds";
 import { getEnsAvatarQueryKey, getEnsNameQueryKey } from "@wagmi/core/query";
 import { useQuery } from "wagmi/query";
 import { K as useGraphAuthKitInnerContext, y as isSupportedChainId, o as L2Chain, n as L1ChainTestnet, p as L2ChainTestnet, L as L1Chain } from "./GraphAuthKitInner.context-DGIzfOnv.js";
-import { b as useGraphAuthKitAccount } from "./hooks-BniInqgx.js";
+import { b as useGraphAuthKitAccount } from "./hooks-CCLTYUp2.js";
 import { useChainId } from "wagmi";
 function useGraphAuthKitAvatar(args = {}) {
   const innerCtx = useGraphAuthKitInnerContext();

package/dist/{useWaitForSafeTransaction-jBw2mhZi.js → useWaitForSafeTransaction-C3rEtkxJ.js}

@@ -1,6 +1,6 @@
 import { useQuery } from "@tanstack/react-query";
 import { useConfig } from "wagmi";
-import { u as useMultisigInfo } from "./hooks-BniInqgx.js";
+import { u as useMultisigInfo } from "./hooks-CCLTYUp2.js";
 import { c as createApiKit } from "./GraphAuthKitInner.context-DGIzfOnv.js";
 async function getSafeTransaction(safeTxHash, network, safeApiKey) {
   const apiKit = await createApiKit(network, safeApiKey);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@graphprotocol/graph-auth-kit",
   "private": false,
-  "version": "7.10.1",
+  "version": "7.11.0",
   "description": "Wallet authentication connect kit in The Graph suite of applications",
   "author": "Edge & Node",
   "license": "UNLICENSED",
@@ -55,8 +55,8 @@
     "viem": "^2.37",
     "wagmi": "^2.17",
     "@graphprotocol/common": "^7.0.4",
-    "@graphprotocol/gds": "^6.9.3",
     "@graphprotocol/ens": "^2.3.1",
+    "@graphprotocol/gds": "^6.9.3",
     "@graphprotocol/go": "^10.5.4"
   },
   "devDependencies": {