@imtbl/sdk 0.4.0-alpha.3 → 0.4.1-alpha

package/dist/index.cjs

@@ -4,13 +4,14 @@ var axios$2 = require('axios');
 var coreSdk = require('@imtbl/core-sdk');
 var oidcClientTs = require('oidc-client-ts');
 var jwt_decode = require('jwt-decode');
+var crypto = require('crypto');
 var magicSdk = require('magic-sdk');
 var oidc = require('@magic-ext/oidc');
+var ethers = require('ethers');
 var BN$2 = require('bn.js');
 var encUtils = require('enc-utils');
 var providers = require('@ethersproject/providers');
 var events = require('events');
-var ethers = require('ethers');
 var abi = require('@0xsequence/abi');
 var config = require('@0xsequence/config');
 var FormData$2 = require('form-data');
@@ -44,6 +45,7 @@ function _interopNamespaceDefault(e) {
     return Object.freeze(n);
 }
 
+var crypto__namespace = /*#__PURE__*/_interopNamespaceDefault(crypto);
 var encUtils__namespace = /*#__PURE__*/_interopNamespaceDefault(encUtils);
 
 exports.Environment = void 0;
@@ -5551,7 +5553,7 @@ class MultiRollupApiClients {
 }
 
 // eslint-disable-next-line @typescript-eslint/naming-convention
-const defaultHeaders$1 = { 'x-sdk-version': 'ts-immutable-sdk-0.4.0-alpha.3' };
+const defaultHeaders$1 = { 'x-sdk-version': 'ts-immutable-sdk-0.4.1-alpha' };
 const createConfig = ({ basePath, headers, }) => {
     if (!basePath.trim()) {
         throw Error('basePath can not be empty');
@@ -5611,7 +5613,7 @@ class APIError extends Error {
 
 /* eslint-disable implicit-arrow-linebreak */
 const defaultHeaders = {
-    sdkVersion: 'ts-immutable-sdk-multi-rollup-api-client-0.4.0-alpha.3',
+    sdkVersion: 'ts-immutable-sdk-multi-rollup-api-client-0.4.1-alpha',
 };
 /**
  * createAPIConfiguration to create a custom Configuration
@@ -5877,7 +5879,7 @@ const createImmutableXConfiguration = ({ basePath, chainID, coreContractAddress,
     chainID,
     coreContractAddress,
     registrationContractAddress,
-    sdkVersion: 'ts-immutable-sdk-0.4.0-alpha.3',
+    sdkVersion: 'ts-immutable-sdk-0.4.1-alpha',
 });
 /**
  * Sets `sdkVersion` at the time of build
@@ -9601,8 +9603,6 @@ var globalAxios = axios;
  * https://openapi-generator.tech
  * Do not edit the class manually.
  */
-// Some imports not used depending on template conditions
-// @ts-ignore
 const BASE_PATH = "https://guardian.sandbox.imtbl.com".replace(/\/+$/, "");
 /**
  *
@@ -9630,10 +9630,10 @@ class BaseAPI {
  */
 class RequiredError extends Error {
     field;
-    name = "RequiredError";
     constructor(field, msg) {
         super(msg);
         this.field = field;
+        this.name = "RequiredError";
     }
 }
 
@@ -9678,6 +9678,8 @@ const setBearerAuthToObject = async function (object, configuration) {
     }
 };
 function setFlattenedQueryParams(urlSearchParams, parameter, key = "") {
+    if (parameter == null)
+        return;
     if (typeof parameter === "object") {
         if (Array.isArray(parameter)) {
             parameter.forEach(item => setFlattenedQueryParams(urlSearchParams, item, key));
@@ -10048,6 +10050,24 @@ class Configuration {
     }
 }
 
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Guardian
+ * Guardian API
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@immutable.com
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+const TransactionApprovalRequestChainTypeEnum = {
+    Starkex: 'starkex',
+    Evm: 'evm'
+};
+
 // used to sign message with L1 keys. Used for registration
 function serializeEthSignature(sig) {
     // This is because golang appends a recovery param
@@ -10155,10 +10175,17 @@ const withPassportError = async (fn, customErrorType) => {
 };
 
 const keyCrendentials = 'passport_credentials';
+const KEY_PKCE_STATE = 'pkce_state';
+const KEY_PKCE_VERIFIER = 'pkce_verifier';
 const validCredentialsMinTtlSec = 3600; // 1 hour
 class DeviceCredentialsManager {
     saveCredentials(tokenResponse) {
-        localStorage.setItem(keyCrendentials, JSON.stringify(tokenResponse));
+        if (this.areValid(tokenResponse)) {
+            localStorage.setItem(keyCrendentials, JSON.stringify(tokenResponse));
+        }
+        else {
+            throw Error('Invalid credentials.');
+        }
     }
     getCredentials() {
         const credentialsJson = localStorage.getItem(keyCrendentials);
@@ -10176,14 +10203,31 @@ class DeviceCredentialsManager {
         return false;
     }
     isTokenValid(jwt) {
-        const tokenPayload = jwt_decode(jwt);
-        const expiresAt = tokenPayload.exp ?? 0;
-        const now = (Date.now() / 1000) + validCredentialsMinTtlSec;
-        return expiresAt > now;
+        try {
+            const tokenPayload = jwt_decode(jwt);
+            const expiresAt = tokenPayload.exp ?? 0;
+            const now = (Date.now() / 1000) + validCredentialsMinTtlSec;
+            return expiresAt > now;
+        }
+        catch (error) {
+            return false;
+        }
     }
     clearCredentials() {
         localStorage.removeItem(keyCrendentials);
     }
+    savePKCEData(data) {
+        localStorage.setItem(KEY_PKCE_STATE, data.state);
+        localStorage.setItem(KEY_PKCE_VERIFIER, data.verifier);
+    }
+    getPKCEData() {
+        const state = localStorage.getItem(KEY_PKCE_STATE);
+        const verifier = localStorage.getItem(KEY_PKCE_VERIFIER);
+        if (state && verifier) {
+            return { state, verifier };
+        }
+        return null;
+    }
 }
 
 const formUrlEncodedHeader = {
@@ -10360,6 +10404,59 @@ class AuthManager {
         }, formUrlEncodedHeader);
         return response.data;
     }
+    static base64URLEncode(str) {
+        return str.toString('base64')
+            .replace(/\+/g, '-')
+            .replace(/\//g, '_')
+            .replace(/=/g, '');
+    }
+    static sha256(buffer) {
+        return crypto__namespace.createHash('sha256').update(buffer).digest();
+    }
+    getPKCEAuthorizationUrl() {
+        const verifier = AuthManager.base64URLEncode(crypto__namespace.randomBytes(32));
+        const challenge = AuthManager.base64URLEncode(AuthManager.sha256(verifier));
+        // https://auth0.com/docs/secure/attack-protection/state-parameters
+        const state = AuthManager.base64URLEncode(crypto__namespace.randomBytes(32));
+        this.deviceCredentialsManager.savePKCEData({ state, verifier });
+        return `${this.config.authenticationDomain}/authorize?`
+            + 'response_type=code'
+            + `&code_challenge=${challenge}`
+            + '&code_challenge_method=S256'
+            + `&client_id=${this.config.oidcConfiguration.clientId}`
+            + `&redirect_uri=${this.config.oidcConfiguration.redirectUri}`
+            + `&scope=${this.config.oidcConfiguration.scope}`
+            + `&state=${state}`
+            + `&audience=${this.config.oidcConfiguration.audience}`;
+    }
+    async connectImxPKCEFlow(authorizationCode, state) {
+        return withPassportError(async () => {
+            const pkceData = this.deviceCredentialsManager.getPKCEData();
+            if (!pkceData) {
+                throw new Error('No code verifier or state for PKCE');
+            }
+            if (state !== pkceData.state) {
+                throw new Error('Provided state does not match stored state');
+            }
+            const tokenResponse = await this.getPKCEToken(authorizationCode, pkceData.verifier);
+            const user = AuthManager.mapDeviceTokenResponseToDomainUserModel(tokenResponse);
+            // Only persist credentials that contain the necessary data
+            if (user.imx?.ethAddress && user.imx?.starkAddress && user.imx?.userAdminAddress) {
+                this.deviceCredentialsManager.saveCredentials(tokenResponse);
+            }
+            return user;
+        }, PassportErrorType.AUTHENTICATION_ERROR);
+    }
+    async getPKCEToken(authorizationCode, codeVerifier) {
+        const response = await axios$2.post(`${this.config.authenticationDomain}/oauth/token`, {
+            client_id: this.config.oidcConfiguration.clientId,
+            grant_type: 'authorization_code',
+            code_verifier: codeVerifier,
+            code: authorizationCode,
+            redirect_uri: this.config.oidcConfiguration.redirectUri,
+        }, formUrlEncodedHeader);
+        return response.data;
+    }
     async connectImxWithCredentials(tokenResponse) {
         return withPassportError(async () => {
             if (this.deviceCredentialsManager.areValid(tokenResponse)) {
@@ -10488,6 +10585,53 @@ const retryWithDelay = async (fn, options) => {
     }
 };
 
+/**
+ * ProviderErrors should take priority over RpcErrorCodes
+ */
+exports.ProviderErrorCode = void 0;
+(function (ProviderErrorCode) {
+    ProviderErrorCode[ProviderErrorCode["USER_REJECTED_REQUEST"] = 4001] = "USER_REJECTED_REQUEST";
+    ProviderErrorCode[ProviderErrorCode["UNAUTHORIZED"] = 4100] = "UNAUTHORIZED";
+    ProviderErrorCode[ProviderErrorCode["UNSUPPORTED_METHOD"] = 4200] = "UNSUPPORTED_METHOD";
+    ProviderErrorCode[ProviderErrorCode["DISCONNECTED"] = 4900] = "DISCONNECTED";
+})(exports.ProviderErrorCode || (exports.ProviderErrorCode = {}));
+exports.RpcErrorCode = void 0;
+(function (RpcErrorCode) {
+    RpcErrorCode[RpcErrorCode["RPC_SERVER_ERROR"] = -32000] = "RPC_SERVER_ERROR";
+    RpcErrorCode[RpcErrorCode["INVALID_REQUEST"] = -32600] = "INVALID_REQUEST";
+    RpcErrorCode[RpcErrorCode["METHOD_NOT_FOUND"] = -32601] = "METHOD_NOT_FOUND";
+    RpcErrorCode[RpcErrorCode["INVALID_PARAMS"] = -32602] = "INVALID_PARAMS";
+    RpcErrorCode[RpcErrorCode["INTERNAL_ERROR"] = -32603] = "INTERNAL_ERROR";
+    RpcErrorCode[RpcErrorCode["PARSE_ERROR"] = -32700] = "PARSE_ERROR";
+    RpcErrorCode[RpcErrorCode["USER_REJECTED_REQUEST"] = -32003] = "USER_REJECTED_REQUEST";
+})(exports.RpcErrorCode || (exports.RpcErrorCode = {}));
+class JsonRpcError extends Error {
+    message;
+    code;
+    constructor(code, message) {
+        super(message);
+        this.message = message;
+        this.code = code;
+    }
+}
+
+const convertBigNumberishToString = (value) => ethers.BigNumber.from(value).toString();
+const transformGuardianTransactions = (txs) => {
+    try {
+        return txs.map((t) => ({
+            delegateCall: t.delegateCall === true,
+            revertOnError: t.revertOnError === true,
+            gasLimit: t.gasLimit ? convertBigNumberishToString(t.gasLimit) : '0',
+            target: t.to ?? ethers.ethers.constants.AddressZero,
+            value: t.value ? convertBigNumberishToString(t.value) : '0',
+            data: t.data ? t.data.toString() : '0x00',
+        }));
+    }
+    catch (error) {
+        const errorMessage = (error instanceof Error) ? error.message : String(error);
+        throw new JsonRpcError(exports.RpcErrorCode.INVALID_PARAMS, `Transaction failed to parsing: ${errorMessage}`);
+    }
+};
 class GuardianClient {
     transactionAPI;
     confirmationScreen;
@@ -10522,7 +10666,7 @@ class GuardianClient {
         });
         const { confirmationRequired } = evaluateStarkexRes.data;
         if (confirmationRequired) {
-            const confirmationResult = await this.confirmationScreen.startGuardianTransaction(payloadHash, this.imxEtherAddress);
+            const confirmationResult = await this.confirmationScreen.startGuardianTransaction(payloadHash, this.imxEtherAddress, TransactionApprovalRequestChainTypeEnum.Starkex);
             if (!confirmationResult.confirmed) {
                 throw new Error('Transaction rejected by user');
             }
@@ -10531,6 +10675,47 @@ class GuardianClient {
             this.confirmationScreen.closeWindow();
         }
     }
+    async evaluateEVMTransaction({ chainId, nonce, user, metaTransactions, }) {
+        const headers = { Authorization: `Bearer ${user.accessToken}` };
+        const guardianTransactions = transformGuardianTransactions(metaTransactions);
+        try {
+            const transactionEvaluationResponseAxiosResponse = await this.transactionAPI.evaluateTransaction({
+                id: 'evm',
+                transactionEvaluationRequest: {
+                    chainType: 'evm',
+                    chainId,
+                    transactionData: {
+                        nonce,
+                        userAddress: user.zkEvm.ethAddress,
+                        metaTransactions: guardianTransactions,
+                    },
+                },
+            }, { headers });
+            return transactionEvaluationResponseAxiosResponse.data;
+        }
+        catch (error) {
+            const errorMessage = (error instanceof Error) ? error.message : String(error);
+            throw new JsonRpcError(exports.RpcErrorCode.INTERNAL_ERROR, `Transaction failed to validate with error: ${errorMessage}`);
+        }
+    }
+    async validateEVMTransaction({ chainId, nonce, user, metaTransactions, }) {
+        const transactionEvaluationResponse = await this.evaluateEVMTransaction({
+            chainId,
+            nonce,
+            user,
+            metaTransactions,
+        });
+        const { confirmationRequired, transactionId } = transactionEvaluationResponse;
+        if (confirmationRequired && !!transactionId) {
+            const confirmationResult = await this.confirmationScreen.startGuardianTransaction(transactionId, this.imxEtherAddress, TransactionApprovalRequestChainTypeEnum.Evm, chainId);
+            if (!confirmationResult.confirmed) {
+                throw new JsonRpcError(exports.RpcErrorCode.USER_REJECTED_REQUEST, 'Transaction rejected by user ');
+            }
+        }
+        else {
+            this.confirmationScreen.closeWindow();
+        }
+    }
 }
 
 async function exchangeTransfer$1({ user, starkSigner, request, exchangesApi, }) {
@@ -10969,6 +11154,10 @@ class PassportImxProviderFactory {
         const user = await this.authManager.connectImxDeviceFlow(deviceCode, interval, timeoutMs);
         return this.createProviderInstance(user);
     }
+    async getProviderWithPKCEFlow(authorizationCode, state) {
+        const user = await this.authManager.connectImxPKCEFlow(authorizationCode, state);
+        return this.createProviderInstance(user);
+    }
     async getProviderWithCredentials(tokenResponse) {
         const user = await this.authManager.connectImxWithCredentials(tokenResponse);
         if (!user) {
@@ -11232,7 +11421,7 @@ class ConfirmationScreen {
             }, CONFIRMATION_WINDOW_CLOSED_POLLING_DURATION);
         });
     }
-    startGuardianTransaction(transactionId, imxEtherAddress) {
+    startGuardianTransaction(transactionId, imxEtherAddress, chainType, chainId) {
         return new Promise((resolve, reject) => {
             const messageHandler = ({ data, origin }) => {
                 if (origin !== this.config.passportDomain
@@ -11261,7 +11450,16 @@ class ConfirmationScreen {
                 return;
             }
             // eslint-disable-next-line max-len
-            this.confirmationWindow.location.href = `${this.config.passportDomain}/transaction-confirmation/transaction.html?transactionId=${transactionId}&imxEtherAddress=${imxEtherAddress}&chainType=starkex`;
+            let href = '';
+            if (chainType === TransactionApprovalRequestChainTypeEnum.Starkex) {
+                // eslint-disable-next-line max-len
+                href = `${this.config.passportDomain}/transaction-confirmation/transaction.html?transactionId=${transactionId}&imxEtherAddress=${imxEtherAddress}&chainType=starkex`;
+            }
+            else {
+                // eslint-disable-next-line max-len
+                href = `${this.config.passportDomain}/transaction-confirmation/zkevm?transactionId=${transactionId}&imxEtherAddress=${imxEtherAddress}&chainType=evm&chainId=${chainId}`;
+            }
+            this.confirmationWindow.location.href = href;
             // https://stackoverflow.com/questions/9388380/capture-the-close-event-of-popup-window-in-javascript/48240128#48240128
             const timer = setInterval(() => {
                 if (this.confirmationWindow?.closed) {
@@ -11369,35 +11567,6 @@ class RelayerClient {
     }
 }
 
-/**
- * ProviderErrors should take priority over RpcErrorCodes
- */
-exports.ProviderErrorCode = void 0;
-(function (ProviderErrorCode) {
-    ProviderErrorCode[ProviderErrorCode["USER_REJECTED_REQUEST"] = 4001] = "USER_REJECTED_REQUEST";
-    ProviderErrorCode[ProviderErrorCode["UNAUTHORIZED"] = 4100] = "UNAUTHORIZED";
-    ProviderErrorCode[ProviderErrorCode["UNSUPPORTED_METHOD"] = 4200] = "UNSUPPORTED_METHOD";
-    ProviderErrorCode[ProviderErrorCode["DISCONNECTED"] = 4900] = "DISCONNECTED";
-})(exports.ProviderErrorCode || (exports.ProviderErrorCode = {}));
-exports.RpcErrorCode = void 0;
-(function (RpcErrorCode) {
-    RpcErrorCode[RpcErrorCode["RPC_SERVER_ERROR"] = -32000] = "RPC_SERVER_ERROR";
-    RpcErrorCode[RpcErrorCode["INVALID_REQUEST"] = -32600] = "INVALID_REQUEST";
-    RpcErrorCode[RpcErrorCode["METHOD_NOT_FOUND"] = -32601] = "METHOD_NOT_FOUND";
-    RpcErrorCode[RpcErrorCode["INVALID_PARAMS"] = -32602] = "INVALID_PARAMS";
-    RpcErrorCode[RpcErrorCode["INTERNAL_ERROR"] = -32603] = "INTERNAL_ERROR";
-    RpcErrorCode[RpcErrorCode["PARSE_ERROR"] = -32700] = "PARSE_ERROR";
-})(exports.RpcErrorCode || (exports.RpcErrorCode = {}));
-class JsonRpcError extends Error {
-    message;
-    code;
-    constructor(code, message) {
-        super(message);
-        this.message = message;
-        this.code = code;
-    }
-}
-
 const MESSAGE_TO_SIGN = 'Only sign this message from Immutable Passport';
 async function registerZkEvmUser({ authManager, magicProvider, multiRollupApiClients, accessToken, }) {
     const web3Provider = new providers.Web3Provider(magicProvider);
@@ -11525,46 +11694,9 @@ const chainIdNumber = (chainId) => {
 
 const MAX_TRANSACTION_HASH_RETRIEVAL_RETRIES = 30;
 const TRANSACTION_HASH_RETRIEVAL_WAIT = 1000;
-const converBigNumberishToNumber = (value) => ethers.BigNumber.from(value).toNumber();
-const transformGardianTransactions = (txs) => {
-    try {
-        return txs.map((t) => ({
-            delegateCall: t.delegateCall === true,
-            revertOnError: t.revertOnError === true,
-            gasLimit: t.gasLimit ? converBigNumberishToNumber(t.gasLimit).toString() : '0',
-            target: t.to ?? ethers.ethers.constants.AddressZero,
-            value: t.value ? converBigNumberishToNumber(t.value).toString() : '0',
-            data: t.data ? t.data.toString() : '0x00',
-        }));
-    }
-    catch (error) {
-        const errorMessage = (error instanceof Error) ? error.message : String(error);
-        throw new JsonRpcError(exports.RpcErrorCode.INVALID_PARAMS, `Transaction failed to parsing: ${errorMessage}`);
-    }
-};
-const guardianValidation = async ({ transactionAPI, chainId, nonce, user, metaTransactions, }) => {
-    const headers = { Authorization: `Bearer ${user.accessToken}` };
-    const guardianTransactions = transformGardianTransactions(metaTransactions);
-    try {
-        await transactionAPI.evaluateTransaction({
-            id: 'evm',
-            transactionEvaluationRequest: {
-                chainType: 'evm',
-                chainId,
-                transactionData: {
-                    nonce,
-                    userAddress: user.zkEvm.ethAddress,
-                    metaTransactions: guardianTransactions,
-                },
-            },
-        }, { headers });
-    }
-    catch (error) {
-        const errorMessage = (error instanceof Error) ? error.message : String(error);
-        throw new JsonRpcError(exports.RpcErrorCode.INTERNAL_ERROR, `Transaction failed to validate with error: ${errorMessage}`);
-    }
-};
-const sendTransaction = async ({ params, magicProvider, jsonRpcProvider, relayerClient, transactionAPI, config, user, }) => {
+const sendTransaction = async ({ params, magicProvider, jsonRpcProvider, relayerClient, guardianClient, config, user, }) => {
+    const popupWindowSize = { width: 480, height: 580 };
+    guardianClient.loading(popupWindowSize);
     const transactionRequest = params[0];
     if (!transactionRequest.to) {
         throw new JsonRpcError(exports.RpcErrorCode.INVALID_PARAMS, 'eth_sendTransaction requires a "to" field');
@@ -11602,10 +11734,9 @@ const sendTransaction = async ({ params, magicProvider, jsonRpcProvider, relayer
         value: imxFeeOption.tokenPrice,
         revertOnError: true,
     };
-    await guardianValidation({
-        transactionAPI,
+    await guardianClient.validateEVMTransaction({
         chainId: config.zkEvmChainId,
-        nonce: converBigNumberishToNumber(nonce),
+        nonce: convertBigNumberishToString(nonce),
         user,
         metaTransactions: [metaTransaction, feeMetaTransaction],
     });
@@ -11685,10 +11816,16 @@ class ZkEvmProvider {
                 if (!this.isLoggedIn()) {
                     throw new JsonRpcError(exports.ProviderErrorCode.UNAUTHORIZED, 'Unauthorised - call eth_requestAccounts first');
                 }
+                const guardianClient = new GuardianClient({
+                    imxPublicApiDomain: this.config.imxPublicApiDomain,
+                    accessToken: this.user.accessToken,
+                    confirmationScreen: this.confirmationScreen,
+                    imxEtherAddress: this.user?.imx?.ethAddress || '',
+                });
                 return sendTransaction({
                     params: request.params || [],
                     magicProvider: this.magicProvider,
-                    transactionAPI: this.transactionAPI,
+                    guardianClient,
                     jsonRpcProvider: this.jsonRpcProvider,
                     config: this.config,
                     relayerClient: this.relayerClient,
@@ -11854,6 +11991,12 @@ class Passport {
     async connectImxDeviceFlow(deviceCode, interval, timeoutMs) {
         return this.passportImxProviderFactory.getProviderWithDeviceFlow(deviceCode, interval, timeoutMs);
     }
+    getPKCEAuthorizationUrl() {
+        return this.authManager.getPKCEAuthorizationUrl();
+    }
+    async connectImxPKCEFlow(authorizationCode, state) {
+        return this.passportImxProviderFactory.getProviderWithPKCEFlow(authorizationCode, state);
+    }
     /**
      * @returns {boolean} the stored device flow credentials if they exist
      */
@@ -28719,7 +28862,7 @@ class $a8cb37a3fc8eb863$export$1f60ba4ec72508a0 {
 function $parcel$export(e, n, v, s) {
   Object.defineProperty(e, n, {get: v, set: s, enumerable: true, configurable: true});
 }
-const $d663162fd5a0853f$export$38a083d9fb5551ca = "0.4.0-alpha.3";
+const $d663162fd5a0853f$export$38a083d9fb5551ca = "0.4.1-alpha";
 const $d663162fd5a0853f$export$83bf90b30cdfd29f = ()=>false;
 const $d663162fd5a0853f$export$1169f5475725171b = ()=>$d663162fd5a0853f$export$38a083d9fb5551ca;