@introspectivelabs/x402-evm 0.1.0-beta.15 → 0.1.0-beta.16

package/dist/cjs/accounts/index.d.ts

@@ -147,4 +147,25 @@ declare function extractPasskeyCoordinates(credential: PublicKeyCredential): Pro
     y: Hex;
 }>;
 
-export { type SafeOpHashParams, ToP256SafeSmartAccountParams, ToSafeSmartAccountParams, type ToWebAuthnSafeSmartAccountParams, computeSafeOpHash, encodeContractSignature, extractPasskeyCoordinates, toP256SafeSmartAccount, toSafeSmartAccount, toWebAuthnSafeSmartAccount };
+interface ToP256ExecutorModuleAccountParams {
+    client: PublicClient<Transport, Chain>;
+    moduleAddress: Hex;
+    sign: (hash: Hex) => Promise<{
+        r: Hex;
+        s: Hex;
+    }>;
+    entryPointAddress?: Hex;
+}
+/**
+ * Creates a viem SmartAccount adapter for P256ExecutorModule.
+ *
+ * The module is the UserOp sender (not the Safe). CallData encodes
+ * `module.execute(to, value, data, 0)` and the signature is raw
+ * P256 `r || s` (64 bytes).
+ *
+ * Use this with `ExactEvmSchemeERC4337` to handle ERC-4337 payments
+ * where the P256ExecutorModule is the account.
+ */
+declare function toP256ExecutorModuleAccount(params: ToP256ExecutorModuleAccountParams): Promise<SmartAccount>;
+
+export { type SafeOpHashParams, type ToP256ExecutorModuleAccountParams, ToP256SafeSmartAccountParams, ToSafeSmartAccountParams, type ToWebAuthnSafeSmartAccountParams, computeSafeOpHash, encodeContractSignature, extractPasskeyCoordinates, toP256ExecutorModuleAccount, toP256SafeSmartAccount, toSafeSmartAccount, toWebAuthnSafeSmartAccount };

package/dist/cjs/accounts/index.js

@@ -23,6 +23,7 @@ __export(accounts_exports, {
   computeSafeOpHash: () => computeSafeOpHash,
   encodeContractSignature: () => encodeContractSignature,
   extractPasskeyCoordinates: () => extractPasskeyCoordinates,
+  toP256ExecutorModuleAccount: () => toP256ExecutorModuleAccount,
   toP256SafeSmartAccount: () => toP256SafeSmartAccount,
   toSafeSmartAccount: () => toSafeSmartAccount3,
   toWebAuthnSafeSmartAccount: () => toWebAuthnSafeSmartAccount
@@ -462,11 +463,165 @@ async function extractPasskeyCoordinates(credential) {
     y: "0x" + base64urlToHex(jwk.y)
   };
 }
+
+// src/accounts/toP256ExecutorModuleAccount.ts
+var import_viem6 = require("viem");
+var import_account_abstraction2 = require("viem/account-abstraction");
+
+// src/exact/client/utils/userOpHash.ts
+var import_viem5 = require("viem");
+function computeUserOpHash(packedUserOp, chainId, entrypoint = import_account_abstraction.entryPoint07Address) {
+  const encoded = (0, import_viem5.encodeAbiParameters)(
+    [
+      { type: "address" },
+      { type: "uint256" },
+      { type: "bytes32" },
+      { type: "bytes32" },
+      { type: "bytes32" },
+      { type: "uint256" },
+      { type: "bytes32" },
+      { type: "bytes32" }
+    ],
+    [
+      packedUserOp.sender,
+      packedUserOp.nonce,
+      (0, import_viem5.keccak256)(packedUserOp.initCode),
+      (0, import_viem5.keccak256)(packedUserOp.callData),
+      packedUserOp.accountGasLimits,
+      packedUserOp.preVerificationGas,
+      packedUserOp.gasFees,
+      (0, import_viem5.keccak256)(packedUserOp.paymasterAndData)
+    ]
+  );
+  const innerHash = (0, import_viem5.keccak256)(encoded);
+  return (0, import_viem5.keccak256)(
+    (0, import_viem5.encodeAbiParameters)(
+      [{ type: "bytes32" }, { type: "address" }, { type: "uint256" }],
+      [innerHash, entrypoint, BigInt(chainId)]
+    )
+  );
+}
+
+// src/accounts/toP256ExecutorModuleAccount.ts
+var P256_EXECUTOR_MODULE_ABI = [
+  {
+    inputs: [
+      { name: "to", type: "address" },
+      { name: "value", type: "uint256" },
+      { name: "data", type: "bytes" },
+      { name: "operation", type: "uint8" }
+    ],
+    name: "execute",
+    outputs: [],
+    stateMutability: "nonpayable",
+    type: "function"
+  }
+];
+var ENTRYPOINT_07_ABI = [
+  {
+    name: "getNonce",
+    type: "function",
+    inputs: [
+      { name: "sender", type: "address" },
+      { name: "key", type: "uint192" }
+    ],
+    outputs: [{ name: "nonce", type: "uint256" }],
+    stateMutability: "view"
+  }
+];
+async function toP256ExecutorModuleAccount(params) {
+  const { client, moduleAddress, sign } = params;
+  const entryPoint = params.entryPointAddress ?? import_account_abstraction.entryPoint07Address;
+  return (0, import_account_abstraction2.toSmartAccount)({
+    client,
+    entryPoint: {
+      abi: ENTRYPOINT_07_ABI,
+      address: entryPoint,
+      version: "0.7"
+    },
+    async getAddress() {
+      return moduleAddress;
+    },
+    async encodeCalls(calls) {
+      if (calls.length !== 1) {
+        throw new Error(
+          `P256ExecutorModule does not support batch calls. Received ${calls.length} calls, expected 1.`
+        );
+      }
+      const { to, value, data } = calls[0];
+      return (0, import_viem6.encodeFunctionData)({
+        abi: P256_EXECUTOR_MODULE_ABI,
+        functionName: "execute",
+        args: [to, value ?? 0n, data ?? "0x", 0]
+      });
+    },
+    async getNonce() {
+      return await client.readContract({
+        address: entryPoint,
+        abi: ENTRYPOINT_07_ABI,
+        functionName: "getNonce",
+        args: [moduleAddress, 0n]
+      });
+    },
+    async getFactoryArgs() {
+      return { factory: void 0, factoryData: void 0 };
+    },
+    async getStubSignature() {
+      return "0x" + "ff".repeat(64);
+    },
+    async signMessage() {
+      throw new Error("P256ExecutorModule does not support signMessage");
+    },
+    async signTypedData() {
+      throw new Error("P256ExecutorModule does not support signTypedData");
+    },
+    async signUserOperation(userOperation) {
+      const chainId = client.chain.id;
+      const factory = userOperation.factory;
+      const packedUserOp = {
+        sender: userOperation.sender,
+        nonce: userOperation.nonce,
+        initCode: factory ? (0, import_viem6.concat)([factory, userOperation.factoryData ?? "0x"]) : "0x",
+        callData: userOperation.callData,
+        accountGasLimits: packAccountGasLimits(
+          userOperation.verificationGasLimit,
+          userOperation.callGasLimit
+        ),
+        preVerificationGas: userOperation.preVerificationGas,
+        gasFees: packGasFees(
+          userOperation.maxPriorityFeePerGas,
+          userOperation.maxFeePerGas
+        ),
+        paymasterAndData: buildPaymasterAndData(userOperation)
+      };
+      const hash = computeUserOpHash(packedUserOp, chainId, entryPoint);
+      const { r, s } = await sign(hash);
+      return (0, import_viem6.concat)([(0, import_viem6.pad)(r, { size: 32 }), (0, import_viem6.pad)(s, { size: 32 })]);
+    }
+  });
+}
+function packAccountGasLimits(verificationGasLimit, callGasLimit) {
+  const packed = verificationGasLimit << 128n | callGasLimit;
+  return (0, import_viem6.pad)(`0x${packed.toString(16)}`, { size: 32 });
+}
+function packGasFees(maxPriorityFeePerGas, maxFeePerGas) {
+  const packed = maxPriorityFeePerGas << 128n | maxFeePerGas;
+  return (0, import_viem6.pad)(`0x${packed.toString(16)}`, { size: 32 });
+}
+function buildPaymasterAndData(userOp) {
+  if (!userOp.paymaster) return "0x";
+  const pmGas = packAccountGasLimits(
+    userOp.paymasterVerificationGasLimit ?? 0n,
+    userOp.paymasterPostOpGasLimit ?? 0n
+  );
+  return (0, import_viem6.concat)([userOp.paymaster, pmGas, userOp.paymasterData ?? "0x"]);
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   computeSafeOpHash,
   encodeContractSignature,
   extractPasskeyCoordinates,
+  toP256ExecutorModuleAccount,
   toP256SafeSmartAccount,
   toSafeSmartAccount,
   toWebAuthnSafeSmartAccount

package/dist/cjs/accounts/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/accounts/index.ts","../../../src/accounts/toSafeSmartAccount.ts","../../../src/accounts/toP256SafeSmartAccount.ts","../../../src/accounts/encodeContractSignature.ts","../../../src/accounts/computeSafeOpHash.ts","../../../src/constants.ts","../../../src/accounts/toWebAuthnSafeSmartAccount.ts","../../../src/accounts/extractPasskeyCoordinates.ts"],"sourcesContent":["// Unified API\nexport { toSafeSmartAccount } from \"./toSafeSmartAccount\";\n\n// Individual signer functions\nexport { toP256SafeSmartAccount } from \"./toP256SafeSmartAccount\";\nexport { toWebAuthnSafeSmartAccount } from \"./toWebAuthnSafeSmartAccount\";\n\n// Utilities\nexport { encodeContractSignature } from \"./encodeContractSignature\";\nexport { computeSafeOpHash } from \"./computeSafeOpHash\";\n\nexport { extractPasskeyCoordinates } from \"./extractPasskeyCoordinates\";\n\n// Types\nexport type { P256Signer, SafeMessageSigner, ToP256SafeSmartAccountParams } from \"./types\";\nexport type { SignerConfig, ToSafeSmartAccountParams } from \"./types\";\nexport type { ToWebAuthnSafeSmartAccountParams } from \"./toWebAuthnSafeSmartAccount\";\nexport type { SafeOpHashParams } from \"./computeSafeOpHash\";\n","import type { Hex, LocalAccount } from \"viem\";\nimport { concat, encodeAbiParameters, pad, toHex } from \"viem\";\nimport type { SmartAccount, WebAuthnAccount } from \"viem/account-abstraction\";\nimport { toSafeSmartAccount as toPermissionlessSafeSmartAccount } from \"permissionless/accounts\";\n\nimport type { P256Signer, ToSafeSmartAccountParams } from \"./types\";\nimport { toP256SafeSmartAccount } from \"./toP256SafeSmartAccount\";\nimport { toWebAuthnSafeSmartAccount } from \"./toWebAuthnSafeSmartAccount\";\nimport { encodeContractSignature } from \"./encodeContractSignature\";\nimport { computeSafeOpHash } from \"./computeSafeOpHash\";\nimport type { SafeOpHashParams } from \"./computeSafeOpHash\";\nimport {\n  SAFE_4337_MODULE_ADDRESS,\n  SAFE_WEBAUTHN_SHARED_SIGNER,\n  entryPoint07Address,\n} from \"../constants\";\n\n/**\n * Creates a Safe SmartAccount with a unified signer configuration.\n *\n * Dispatches to the appropriate implementation based on `signerConfig.type`:\n * - `\"p256\"`: P256 contract owner (existing `toP256SafeSmartAccount`)\n * - `\"webauthn\"`: WebAuthn passkey via permissionless native support\n * - `\"multi\"`: Both P256 and WebAuthn owners on a single Safe\n *\n * @example\n * ```typescript\n * // P256 only\n * const account = await toSafeSmartAccount({\n *   client,\n *   signerConfig: { type: \"p256\", p256Signer },\n * });\n *\n * // WebAuthn only\n * const account = await toSafeSmartAccount({\n *   client,\n *   signerConfig: { type: \"webauthn\", webAuthnAccount },\n * });\n *\n * // Multi-signer (threshold 1, P256 signs by default)\n * const account = await toSafeSmartAccount({\n *   client,\n *   signerConfig: {\n *     type: \"multi\",\n *     signers: { p256: p256Signer, webAuthn: webAuthnAccount },\n *     threshold: 1,\n *   },\n * });\n * ```\n */\nexport async function toSafeSmartAccount(\n  params: ToSafeSmartAccountParams,\n): Promise<SmartAccount> {\n  const { signerConfig } = params;\n\n  switch (signerConfig.type) {\n    case \"p256\":\n      return toP256SafeSmartAccount({\n        client: params.client,\n        p256Signer: signerConfig.p256Signer,\n        safeAddress: params.safeAddress,\n        entryPoint: params.entryPoint,\n        safe4337ModuleAddress: params.safe4337ModuleAddress,\n      });\n\n    case \"webauthn\":\n      return toWebAuthnSafeSmartAccount({\n        client: params.client,\n        webAuthnAccount: signerConfig.webAuthnAccount,\n        safeAddress: params.safeAddress,\n        entryPoint: params.entryPoint,\n        safe4337ModuleAddress: params.safe4337ModuleAddress,\n        safeWebAuthnSharedSignerAddress: signerConfig.safeWebAuthnSharedSignerAddress,\n      });\n\n    case \"multi\":\n      return buildMultiSignerAccount(params, signerConfig.signers, signerConfig.threshold ?? 1);\n  }\n}\n\nfunction createMockLocalAccount(address: Hex): LocalAccount {\n  const notImplemented = () => {\n    throw new Error(\"Mock owner: use signUserOperation instead\");\n  };\n\n  return {\n    address,\n    type: \"local\",\n    source: \"custom\",\n    publicKey: \"0x\" as Hex,\n    signMessage: notImplemented,\n    signTypedData: notImplemented,\n    signTransaction: notImplemented,\n    sign: notImplemented,\n  } as unknown as LocalAccount;\n}\n\n/**\n * Encodes a WebAuthn signature from raw sign() output into the ABI format\n * expected by Safe's WebAuthn verifier:\n * `(bytes authenticatorData, string clientDataFields, uint256[2] signature)`\n *\n * permissionless does not export this helper, so we implement it here.\n */\nasync function encodeWebAuthnSignature(\n  owner: WebAuthnAccount,\n  hash: Hex,\n): Promise<Hex> {\n  const { signature: signatureData, webauthn } = await owner.sign({ hash });\n\n  // Extract r, s from the DER-encoded P256 signature\n  const sigBytes = signatureData.slice(2);\n  const r = BigInt(\"0x\" + sigBytes.slice(0, 64));\n  const s = BigInt(\"0x\" + sigBytes.slice(64, 128));\n\n  // Extract the fields after \"challenge\":\"...\" from clientDataJSON\n  const match = webauthn.clientDataJSON.match(\n    /^\\{\"type\":\"webauthn.get\",\"challenge\":\"[A-Za-z0-9\\-_]{43}\",(.*)\\}$/,\n  );\n  const clientDataFields = match ? match[1] : \"\";\n\n  return encodeAbiParameters(\n    [\n      { name: \"authenticatorData\", type: \"bytes\" },\n      { name: \"clientDataFields\", type: \"string\" },\n      { name: \"signature\", type: \"uint256[2]\" },\n    ],\n    [webauthn.authenticatorData, clientDataFields, [r, s]],\n  );\n}\n\nasync function buildMultiSignerAccount(\n  params: ToSafeSmartAccountParams,\n  signers: { p256?: P256Signer; webAuthn?: WebAuthnAccount },\n  threshold: number,\n): Promise<SmartAccount> {\n  if (!signers.p256 && !signers.webAuthn) {\n    throw new Error(\"Multi-signer config requires at least one signer\");\n  }\n\n  // If only one signer is provided, delegate to the single-signer function\n  if (signers.p256 && !signers.webAuthn) {\n    return toP256SafeSmartAccount({\n      client: params.client,\n      p256Signer: signers.p256,\n      safeAddress: params.safeAddress,\n      entryPoint: params.entryPoint,\n      safe4337ModuleAddress: params.safe4337ModuleAddress,\n    });\n  }\n  if (signers.webAuthn && !signers.p256) {\n    const signerConfig = params.signerConfig;\n    const sharedSignerAddr = signerConfig.type === \"multi\"\n      ? signerConfig.safeWebAuthnSharedSignerAddress\n      : undefined;\n    return toWebAuthnSafeSmartAccount({\n      client: params.client,\n      webAuthnAccount: signers.webAuthn,\n      safeAddress: params.safeAddress,\n      entryPoint: params.entryPoint,\n      safe4337ModuleAddress: params.safe4337ModuleAddress,\n      safeWebAuthnSharedSignerAddress: sharedSignerAddr,\n    });\n  }\n\n  // Both signers present\n  const p256Signer = signers.p256!;\n  const webAuthnAccount = signers.webAuthn!;\n\n  const safe4337ModuleAddress = params.safe4337ModuleAddress ?? SAFE_4337_MODULE_ADDRESS;\n  const entryPointAddress = params.entryPoint?.address ?? entryPoint07Address;\n\n  const mockP256Owner = createMockLocalAccount(p256Signer.p256OwnerAddress);\n\n  // Build account with both owners: mock LocalAccount for P256 + WebAuthnAccount\n  const baseAccount = await toPermissionlessSafeSmartAccount({\n    client: params.client,\n    owners: [mockP256Owner, webAuthnAccount],\n    version: \"1.5.0\",\n    threshold: BigInt(threshold),\n    ...(params.safeAddress ? { address: params.safeAddress } : {}),\n    entryPoint: {\n      address: entryPointAddress,\n      version: \"0.7\",\n    },\n    safe4337ModuleAddress,\n  });\n\n  const chainId = await params.client.getChainId();\n\n  if (threshold >= 2) {\n    return buildThreshold2Account(\n      baseAccount as SmartAccount,\n      p256Signer,\n      webAuthnAccount,\n      chainId,\n      safe4337ModuleAddress,\n      entryPointAddress,\n    );\n  }\n\n  // Threshold 1: P256 signs by default (no browser interaction needed)\n  return buildThreshold1Account(\n    baseAccount as SmartAccount,\n    p256Signer,\n    chainId,\n    safe4337ModuleAddress,\n    entryPointAddress,\n  );\n}\n\nfunction buildThreshold1Account(\n  baseAccount: SmartAccount,\n  p256Signer: P256Signer,\n  chainId: number,\n  safe4337ModuleAddress: Hex,\n  entryPointAddress: Hex,\n): SmartAccount {\n  return {\n    ...baseAccount,\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    async signUserOperation(userOp: any) {\n      const safeOpHash = computeSafeOpHash(\n        extractSafeOpHashParams(userOp),\n        chainId,\n        safe4337ModuleAddress,\n        entryPointAddress,\n      );\n\n      const { r, s } = await p256Signer.sign(safeOpHash);\n      const rPadded = pad(r as Hex, { size: 32 });\n      const sPadded = pad(s as Hex, { size: 32 });\n      const p256Signature = concat([rPadded, sPadded]);\n\n      const contractSig = encodeContractSignature(\n        p256Signer.p256OwnerAddress,\n        p256Signature,\n      );\n\n      const validAfter = pad(toHex(0), { size: 6 });\n      const validUntil = pad(toHex(0), { size: 6 });\n\n      return concat([validAfter, validUntil, contractSig]);\n    },\n  } as SmartAccount;\n}\n\nfunction buildThreshold2Account(\n  baseAccount: SmartAccount,\n  p256Signer: P256Signer,\n  webAuthnAccount: WebAuthnAccount,\n  chainId: number,\n  safe4337ModuleAddress: Hex,\n  entryPointAddress: Hex,\n): SmartAccount {\n  return {\n    ...baseAccount,\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    async signUserOperation(userOp: any) {\n      const safeOpHash = computeSafeOpHash(\n        extractSafeOpHashParams(userOp),\n        chainId,\n        safe4337ModuleAddress,\n        entryPointAddress,\n      );\n\n      // Sign with P256\n      const { r, s } = await p256Signer.sign(safeOpHash);\n      const rPadded = pad(r as Hex, { size: 32 });\n      const sPadded = pad(s as Hex, { size: 32 });\n      const p256SignatureData = concat([rPadded, sPadded]);\n\n      // Sign with WebAuthn\n      const webAuthnSignatureData = await encodeWebAuthnSignature(\n        webAuthnAccount,\n        safeOpHash,\n      );\n\n      // Build sorted multi-signature\n      // Safe requires signatures sorted by signer address (ascending)\n      const p256SignerAddress = p256Signer.p256OwnerAddress.toLowerCase();\n      const webAuthnSignerAddress = SAFE_WEBAUTHN_SHARED_SIGNER.toLowerCase();\n\n      type SignerEntry = {\n        address: string;\n        data: Hex;\n        dynamic: boolean;\n        contractOwner: boolean;\n      };\n\n      const signerEntries: SignerEntry[] = [\n        {\n          address: p256SignerAddress,\n          data: p256SignatureData,\n          dynamic: true,\n          contractOwner: true,\n        },\n        {\n          address: webAuthnSignerAddress,\n          data: webAuthnSignatureData,\n          dynamic: true,\n          contractOwner: false,\n        },\n      ].sort((a, b) => (a.address < b.address ? -1 : 1));\n\n      const concatenatedSig = concatSafeSignatures(signerEntries);\n\n      const validAfter = pad(toHex(0), { size: 6 });\n      const validUntil = pad(toHex(0), { size: 6 });\n\n      return concat([validAfter, validUntil, concatenatedSig]);\n    },\n  } as SmartAccount;\n}\n\n/**\n * Concatenates multiple Safe signatures with proper static/dynamic layout.\n *\n * Safe's `checkNSignatures` expects:\n * - N x 65-byte static parts (sorted by signer address)\n * - Dynamic data appended after all static parts\n *\n * For dynamic signatures (contract or WebAuthn):\n *   Static: r = address padded to 32 bytes, s = offset to dynamic data, v = 0x00\n *   Dynamic: 32-byte length prefix + signature data\n *\n * For ECDSA signatures:\n *   Static: r (32 bytes) + s (32 bytes) + v (1 byte)\n */\nfunction concatSafeSignatures(\n  entries: { address: string; data: Hex; dynamic: boolean; contractOwner: boolean }[],\n): Hex {\n  const staticPartSize = 65; // per signer\n  const totalStaticSize = staticPartSize * entries.length;\n\n  const staticParts: Hex[] = [];\n  const dynamicParts: Hex[] = [];\n  let dynamicOffset = totalStaticSize;\n\n  for (const entry of entries) {\n    if (entry.dynamic) {\n      // Dynamic signature: static part points to dynamic data\n      const r = pad(entry.address as Hex, { size: 32 });\n      const s = pad(toHex(dynamicOffset), { size: 32 });\n      const v = \"0x00\" as Hex;\n      staticParts.push(concat([r, s, v]));\n\n      // Dynamic part: length-prefixed data\n      const dataBytes = (entry.data.length - 2) / 2;\n      const length = pad(toHex(dataBytes), { size: 32 });\n      dynamicParts.push(concat([length, entry.data]));\n\n      // Advance offset: 32 bytes for length + actual data length\n      dynamicOffset += 32 + dataBytes;\n    } else {\n      // ECDSA: direct 65-byte signature (not used in current multi-signer paths)\n      staticParts.push(entry.data);\n    }\n  }\n\n  return concat([...staticParts, ...dynamicParts]);\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction extractSafeOpHashParams(userOp: any): SafeOpHashParams {\n  const op = userOp as Record<string, unknown>;\n  return {\n    sender: op.sender as Hex,\n    nonce: BigInt(op.nonce as bigint),\n    factory: (op.factory as Hex) ?? null,\n    factoryData: (op.factoryData as Hex) ?? null,\n    callData: op.callData as Hex,\n    verificationGasLimit: BigInt(op.verificationGasLimit as bigint),\n    callGasLimit: BigInt(op.callGasLimit as bigint),\n    preVerificationGas: BigInt(op.preVerificationGas as bigint),\n    maxPriorityFeePerGas: BigInt(op.maxPriorityFeePerGas as bigint),\n    maxFeePerGas: BigInt(op.maxFeePerGas as bigint),\n    paymaster: (op.paymaster as Hex) ?? null,\n    paymasterVerificationGasLimit: op.paymasterVerificationGasLimit\n      ? BigInt(op.paymasterVerificationGasLimit as bigint)\n      : null,\n    paymasterPostOpGasLimit: op.paymasterPostOpGasLimit\n      ? BigInt(op.paymasterPostOpGasLimit as bigint)\n      : null,\n    paymasterData: (op.paymasterData as Hex) ?? null,\n  };\n}\n","import type { Hex, LocalAccount } from \"viem\";\nimport { concat, pad, toHex } from \"viem\";\nimport type { SmartAccount } from \"viem/account-abstraction\";\nimport { toSafeSmartAccount } from \"permissionless/accounts\";\n\nimport type { ToP256SafeSmartAccountParams } from \"./types\";\nimport { encodeContractSignature } from \"./encodeContractSignature\";\nimport type { SafeOpHashParams } from \"./computeSafeOpHash\";\nimport { computeSafeOpHash } from \"./computeSafeOpHash\";\nimport { SAFE_4337_MODULE_ADDRESS, entryPoint07Address } from \"../constants\";\n\n/**\n * Creates a mock LocalAccount that has the P256Owner contract address.\n *\n * This is needed because `toSafeSmartAccount` requires a `LocalAccount` owner,\n * but our actual signer is a P256Owner contract (ERC-1271). The mock provides\n * the correct address so the Safe is configured with the right owner. The\n * signing methods are never called since we override `signUserOperation`.\n */\nfunction createMockLocalAccount(address: Hex): LocalAccount {\n  const notImplemented = () => {\n    throw new Error(\"P256 contract owner: use signUserOperation instead\");\n  };\n\n  return {\n    address,\n    type: \"local\",\n    source: \"custom\",\n    publicKey: \"0x\" as Hex,\n    signMessage: notImplemented,\n    signTypedData: notImplemented,\n    signTransaction: notImplemented,\n    sign: notImplemented,\n  } as unknown as LocalAccount;\n}\n\n/**\n * Creates a Safe SmartAccount that signs UserOperations with a P256 contract owner.\n *\n * This wraps permissionless's `toSafeSmartAccount` and overrides `signUserOperation`\n * to produce P256 signatures in Safe's contract signature format (v=0). The resulting\n * account is compatible with `SafeAccountSigner` and `ExactEvmSchemeERC4337`.\n *\n * The caller is responsible for:\n * - Deploying the P256Owner contract (or computing its deterministic address)\n * - Providing the `sign()` function (e.g., using `@noble/curves/p256` with `prehash: false`)\n * - Ensuring the P256Owner is an owner of the Safe\n *\n * @example\n * ```typescript\n * import { toP256SafeSmartAccount } from '@introspectivelabs/x402-evm';\n * import { p256 } from '@noble/curves/p256';\n *\n * const account = await toP256SafeSmartAccount({\n *   client: publicClient,\n *   p256Signer: {\n *     p256OwnerAddress: '0x349c...',\n *     sign: async (hash) => {\n *       const sig = p256.sign(hash.slice(2), privateKey, { prehash: false, lowS: true });\n *       return {\n *         r: `0x${sig.r.toString(16).padStart(64, '0')}`,\n *         s: `0x${sig.s.toString(16).padStart(64, '0')}`,\n *       };\n *     },\n *   },\n *   safeAddress: '0x...',\n * });\n *\n * const scheme = new ExactEvmSchemeERC4337({ account });\n * ```\n */\nexport async function toP256SafeSmartAccount(\n  params: ToP256SafeSmartAccountParams,\n): Promise<SmartAccount> {\n  const safe4337ModuleAddress = params.safe4337ModuleAddress ?? SAFE_4337_MODULE_ADDRESS;\n  const entryPointAddress =\n    params.entryPoint?.address ?? entryPoint07Address;\n\n  const mockOwner = createMockLocalAccount(params.p256Signer.p256OwnerAddress);\n\n  const baseAccount = await toSafeSmartAccount({\n    client: params.client,\n    owners: [mockOwner],\n    version: \"1.5.0\",\n    ...(params.safeAddress ? { address: params.safeAddress } : {}),\n    entryPoint: {\n      address: entryPointAddress,\n      version: \"0.7\",\n    },\n    safe4337ModuleAddress,\n  });\n\n  const chainId = await params.client.getChainId();\n\n  return {\n    ...baseAccount,\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    async signUserOperation(userOp: any) {\n      const op = userOp as Record<string, unknown>;\n      // Compute the SafeOp EIP-712 hash (what Safe4337Module verifies)\n      const hashParams: SafeOpHashParams = {\n        sender: op.sender as Hex,\n        nonce: BigInt(op.nonce as bigint),\n        factory: (op.factory as Hex) ?? null,\n        factoryData: (op.factoryData as Hex) ?? null,\n        callData: op.callData as Hex,\n        verificationGasLimit: BigInt(op.verificationGasLimit as bigint),\n        callGasLimit: BigInt(op.callGasLimit as bigint),\n        preVerificationGas: BigInt(op.preVerificationGas as bigint),\n        maxPriorityFeePerGas: BigInt(op.maxPriorityFeePerGas as bigint),\n        maxFeePerGas: BigInt(op.maxFeePerGas as bigint),\n        paymaster: (op.paymaster as Hex) ?? null,\n        paymasterVerificationGasLimit: op.paymasterVerificationGasLimit\n          ? BigInt(op.paymasterVerificationGasLimit as bigint)\n          : null,\n        paymasterPostOpGasLimit: op.paymasterPostOpGasLimit\n          ? BigInt(op.paymasterPostOpGasLimit as bigint)\n          : null,\n        paymasterData: (op.paymasterData as Hex) ?? null,\n      };\n      const safeOpHash = computeSafeOpHash(\n        hashParams,\n        chainId,\n        safe4337ModuleAddress,\n        entryPointAddress,\n      );\n\n      // Sign the SafeOp hash with P256\n      const { r, s } = await params.p256Signer.sign(safeOpHash);\n\n      // Encode r || s as 64-byte signature\n      const rPadded = pad(r as Hex, { size: 32 });\n      const sPadded = pad(s as Hex, { size: 32 });\n      const p256Signature = concat([rPadded, sPadded]);\n\n      // Wrap in Safe contract signature format (v=0)\n      const contractSig = encodeContractSignature(\n        params.p256Signer.p256OwnerAddress,\n        p256Signature,\n      );\n\n      // Safe4337Module expects: validAfter (6 bytes) || validUntil (6 bytes) || signatures\n      const validAfter = pad(toHex(0), { size: 6 });\n      const validUntil = pad(toHex(0), { size: 6 });\n\n      return concat([validAfter, validUntil, contractSig]);\n    },\n  } as SmartAccount;\n}\n","import { type Hex, concat, pad, toHex } from \"viem\";\n\n/**\n * Encodes a signature in Safe's contract signature format (v=0).\n *\n * Safe's `checkNSignatures` expects this layout for contract owners:\n *\n * Static part (65 bytes):\n *   - r (32 bytes): owner address padded to 32 bytes\n *   - s (32 bytes): offset to dynamic data (relative to start of signatures)\n *   - v (1 byte):   0x00 (indicates contract signature)\n *\n * Dynamic part (at the offset):\n *   - length (32 bytes): length of the signature data\n *   - data (variable):   the actual signature bytes\n *\n * For a single signer, the static part is 65 bytes, so the dynamic data\n * starts at offset 65.\n */\nexport function encodeContractSignature(ownerAddress: Hex, signatureData: Hex): Hex {\n  // Static part: r = address padded to 32 bytes\n  const r = pad(ownerAddress, { size: 32 });\n\n  // For a single signature, dynamic data starts right after the 65-byte static part\n  const dynamicOffset = 65;\n  const s = pad(toHex(dynamicOffset), { size: 32 });\n\n  // v = 0x00 for contract signature\n  const v = \"0x00\" as Hex;\n\n  // Dynamic part: length-prefixed signature data\n  const signatureBytes = (signatureData.length - 2) / 2;\n  const length = pad(toHex(signatureBytes), { size: 32 });\n\n  return concat([r, s, v, length, signatureData]);\n}\n","import {\n  type Hex,\n  concat,\n  hashTypedData,\n  isAddress,\n  pad,\n  toHex,\n} from \"viem\";\nimport { SAFE_4337_MODULE_ADDRESS, entryPoint07Address } from \"../constants\";\n\nconst SAFE_OP_TYPES = {\n  SafeOp: [\n    { type: \"address\", name: \"safe\" },\n    { type: \"uint256\", name: \"nonce\" },\n    { type: \"bytes\", name: \"initCode\" },\n    { type: \"bytes\", name: \"callData\" },\n    { type: \"uint128\", name: \"verificationGasLimit\" },\n    { type: \"uint128\", name: \"callGasLimit\" },\n    { type: \"uint256\", name: \"preVerificationGas\" },\n    { type: \"uint128\", name: \"maxPriorityFeePerGas\" },\n    { type: \"uint128\", name: \"maxFeePerGas\" },\n    { type: \"bytes\", name: \"paymasterAndData\" },\n    { type: \"uint48\", name: \"validAfter\" },\n    { type: \"uint48\", name: \"validUntil\" },\n    { type: \"address\", name: \"entryPoint\" },\n  ],\n} as const;\n\nexport interface SafeOpHashParams {\n  sender: Hex;\n  nonce: bigint;\n  factory?: Hex | null;\n  factoryData?: Hex | null;\n  callData: Hex;\n  verificationGasLimit: bigint;\n  callGasLimit: bigint;\n  preVerificationGas: bigint;\n  maxPriorityFeePerGas: bigint;\n  maxFeePerGas: bigint;\n  paymaster?: Hex | null;\n  paymasterVerificationGasLimit?: bigint | null;\n  paymasterPostOpGasLimit?: bigint | null;\n  paymasterData?: Hex | null;\n}\n\n/**\n * Computes the EIP-712 SafeOp hash that Safe4337Module uses for signature verification.\n *\n * The Safe4337Module converts the EntryPoint v0.7 UserOperation into a SafeOp struct,\n * packing initCode and paymasterAndData into their v0.6-style concatenated forms,\n * then hashes the struct using EIP-712.\n */\nexport function computeSafeOpHash(\n  userOp: SafeOpHashParams,\n  chainId: number,\n  safe4337ModuleAddress: Hex = SAFE_4337_MODULE_ADDRESS,\n  entryPointAddress: Hex = entryPoint07Address,\n): Hex {\n  // Reconstruct initCode: factory || factoryData (v0.7 -> v0.6 style)\n  const initCode =\n    userOp.factory && isAddress(userOp.factory)\n      ? concat([userOp.factory, (userOp.factoryData || \"0x\") as Hex])\n      : (\"0x\" as Hex);\n\n  // Reconstruct paymasterAndData: paymaster || verificationGasLimit(16) || postOpGasLimit(16) || data\n  let paymasterAndData: Hex = \"0x\";\n  if (userOp.paymaster && isAddress(userOp.paymaster)) {\n    paymasterAndData = concat([\n      userOp.paymaster,\n      pad(toHex(userOp.paymasterVerificationGasLimit || 0n), { size: 16 }),\n      pad(toHex(userOp.paymasterPostOpGasLimit || 0n), { size: 16 }),\n      (userOp.paymasterData || \"0x\") as Hex,\n    ]);\n  }\n\n  return hashTypedData({\n    domain: {\n      chainId,\n      verifyingContract: safe4337ModuleAddress,\n    },\n    types: SAFE_OP_TYPES,\n    primaryType: \"SafeOp\",\n    message: {\n      safe: userOp.sender,\n      nonce: userOp.nonce,\n      initCode,\n      callData: userOp.callData,\n      verificationGasLimit: userOp.verificationGasLimit,\n      callGasLimit: userOp.callGasLimit,\n      preVerificationGas: userOp.preVerificationGas,\n      maxPriorityFeePerGas: userOp.maxPriorityFeePerGas,\n      maxFeePerGas: userOp.maxFeePerGas,\n      paymasterAndData,\n      validAfter: 0,\n      validUntil: 0,\n      entryPoint: entryPointAddress,\n    },\n  });\n}\n","import type { Hex } from \"viem\";\nimport { entryPoint07Address } from \"viem/account-abstraction\";\n\nexport { entryPoint07Address };\n\nexport const SAFE_4337_MODULE_ADDRESS =\n  \"0x75cf11467937ce3F2f357CE24ffc3DBF8fD5c226\" as const satisfies Hex;\n\nexport const SAFE_WEBAUTHN_SHARED_SIGNER =\n  \"0xfD90FAd33ee8b58f32c00aceEad1358e4AFC23f9\" as const satisfies Hex;\n\nexport const FCL_P256_VERIFIER =\n  \"0xA86e0054C51E4894D88762a017ECc5E5235f5DBA\" as const satisfies Hex;\n\nexport const P256_OWNER_FACTORY =\n  \"0x349c03Eb61e26528cbf79F5D3Ba071FcA2aE82cB\" as const satisfies Hex;\n\nexport const WEBAUTHN_SIGNER_FACTORY =\n  \"0xF7488fFbe67327ac9f37D5F722d83Fc900852Fbf\" as const satisfies Hex;\n","import type { Hex } from \"viem\";\nimport type { SmartAccount, WebAuthnAccount } from \"viem/account-abstraction\";\nimport { toSafeSmartAccount } from \"permissionless/accounts\";\nimport type { PublicClient, Transport, Chain } from \"viem\";\nimport { SAFE_4337_MODULE_ADDRESS, entryPoint07Address } from \"../constants\";\n\nexport type ToWebAuthnSafeSmartAccountParams = {\n  client: PublicClient<Transport, Chain>;\n  webAuthnAccount: WebAuthnAccount;\n  safeAddress?: Hex;\n  entryPoint?: { address: Hex; version: \"0.7\" };\n  safe4337ModuleAddress?: Hex;\n  safeWebAuthnSharedSignerAddress?: Hex;\n};\n\n/**\n * Creates a Safe SmartAccount that signs UserOperations with a WebAuthn passkey.\n */\nexport async function toWebAuthnSafeSmartAccount(\n  params: ToWebAuthnSafeSmartAccountParams,\n): Promise<SmartAccount> {\n  const safe4337ModuleAddress = params.safe4337ModuleAddress ?? SAFE_4337_MODULE_ADDRESS;\n  const entryPointAddress = params.entryPoint?.address ?? entryPoint07Address;\n\n  const baseAccount = await toSafeSmartAccount({\n    client: params.client,\n    owners: [params.webAuthnAccount],\n    version: \"1.5.0\",\n    ...(params.safeAddress ? { address: params.safeAddress } : {}),\n    entryPoint: {\n      address: entryPointAddress,\n      version: \"0.7\",\n    },\n    safe4337ModuleAddress,\n    ...(params.safeWebAuthnSharedSignerAddress\n      ? { safeWebAuthnSharedSignerAddress: params.safeWebAuthnSharedSignerAddress }\n      : {}),\n  });\n\n  return baseAccount as SmartAccount;\n}\n","/// <reference lib=\"dom\" />\nimport type { Hex } from \"viem\";\n\nfunction bufferToHex(buffer: ArrayBuffer): string {\n  return Array.from(new Uint8Array(buffer))\n    .map((b) => b.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n}\n\nfunction base64urlToHex(base64url: string): string {\n  const base64 = base64url.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  const binary = atob(base64);\n  return Array.from(binary, (c) => c.charCodeAt(0).toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/**\n * Extracts P256 public key coordinates from a WebAuthn credential.\n *\n * Replaces `extractPasskeyData` from `@safe-global/protocol-kit`.\n * Uses only the Web Crypto API (no external dependencies).\n */\nexport async function extractPasskeyCoordinates(\n  credential: PublicKeyCredential,\n): Promise<{ rawId: string; x: Hex; y: Hex }> {\n  const rawId = bufferToHex(credential.rawId);\n  const response = credential.response as AuthenticatorAttestationResponse;\n  const publicKey = response.getPublicKey();\n  if (!publicKey) throw new Error(\"Failed to extract public key from credential\");\n\n  const key = await crypto.subtle.importKey(\n    \"spki\",\n    publicKey,\n    { name: \"ECDSA\", namedCurve: \"P-256\" },\n    true,\n    [\"verify\"],\n  );\n  const jwk = await crypto.subtle.exportKey(\"jwk\", key);\n  if (!jwk.x || !jwk.y) throw new Error(\"Missing coordinates in JWK\");\n\n  return {\n    rawId,\n    x: (\"0x\" + base64urlToHex(jwk.x)) as Hex,\n    y: (\"0x\" + base64urlToHex(jwk.y)) as Hex,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,4BAAAA;AAAA,EAAA;AAAA;AAAA;;;ACCA,IAAAC,eAAwD;AAExD,IAAAC,mBAAuE;;;ACFvE,IAAAC,eAAmC;AAEnC,sBAAmC;;;ACHnC,kBAA6C;AAmBtC,SAAS,wBAAwB,cAAmB,eAAyB;AAElF,QAAM,QAAI,iBAAI,cAAc,EAAE,MAAM,GAAG,CAAC;AAGxC,QAAM,gBAAgB;AACtB,QAAM,QAAI,qBAAI,mBAAM,aAAa,GAAG,EAAE,MAAM,GAAG,CAAC;AAGhD,QAAM,IAAI;AAGV,QAAM,kBAAkB,cAAc,SAAS,KAAK;AACpD,QAAM,aAAS,qBAAI,mBAAM,cAAc,GAAG,EAAE,MAAM,GAAG,CAAC;AAEtD,aAAO,oBAAO,CAAC,GAAG,GAAG,GAAG,QAAQ,aAAa,CAAC;AAChD;;;ACnCA,IAAAC,eAOO;;;ACNP,iCAAoC;AAI7B,IAAM,2BACX;AAEK,IAAM,8BACX;;;ADCF,IAAM,gBAAgB;AAAA,EACpB,QAAQ;AAAA,IACN,EAAE,MAAM,WAAW,MAAM,OAAO;AAAA,IAChC,EAAE,MAAM,WAAW,MAAM,QAAQ;AAAA,IACjC,EAAE,MAAM,SAAS,MAAM,WAAW;AAAA,IAClC,EAAE,MAAM,SAAS,MAAM,WAAW;AAAA,IAClC,EAAE,MAAM,WAAW,MAAM,uBAAuB;AAAA,IAChD,EAAE,MAAM,WAAW,MAAM,eAAe;AAAA,IACxC,EAAE,MAAM,WAAW,MAAM,qBAAqB;AAAA,IAC9C,EAAE,MAAM,WAAW,MAAM,uBAAuB;AAAA,IAChD,EAAE,MAAM,WAAW,MAAM,eAAe;AAAA,IACxC,EAAE,MAAM,SAAS,MAAM,mBAAmB;AAAA,IAC1C,EAAE,MAAM,UAAU,MAAM,aAAa;AAAA,IACrC,EAAE,MAAM,UAAU,MAAM,aAAa;AAAA,IACrC,EAAE,MAAM,WAAW,MAAM,aAAa;AAAA,EACxC;AACF;AA0BO,SAAS,kBACd,QACA,SACA,wBAA6B,0BAC7B,oBAAyB,gDACpB;AAEL,QAAM,WACJ,OAAO,eAAW,wBAAU,OAAO,OAAO,QACtC,qBAAO,CAAC,OAAO,SAAU,OAAO,eAAe,IAAY,CAAC,IAC3D;AAGP,MAAI,mBAAwB;AAC5B,MAAI,OAAO,iBAAa,wBAAU,OAAO,SAAS,GAAG;AACnD,2BAAmB,qBAAO;AAAA,MACxB,OAAO;AAAA,UACP,sBAAI,oBAAM,OAAO,iCAAiC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC;AAAA,UACnE,sBAAI,oBAAM,OAAO,2BAA2B,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC;AAAA,MAC5D,OAAO,iBAAiB;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,aAAO,4BAAc;AAAA,IACnB,QAAQ;AAAA,MACN;AAAA,MACA,mBAAmB;AAAA,IACrB;AAAA,IACA,OAAO;AAAA,IACP,aAAa;AAAA,IACb,SAAS;AAAA,MACP,MAAM,OAAO;AAAA,MACb,OAAO,OAAO;AAAA,MACd;AAAA,MACA,UAAU,OAAO;AAAA,MACjB,sBAAsB,OAAO;AAAA,MAC7B,cAAc,OAAO;AAAA,MACrB,oBAAoB,OAAO;AAAA,MAC3B,sBAAsB,OAAO;AAAA,MAC7B,cAAc,OAAO;AAAA,MACrB;AAAA,MACA,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,YAAY;AAAA,IACd;AAAA,EACF,CAAC;AACH;;;AF/EA,SAAS,uBAAuB,SAA4B;AAC1D,QAAM,iBAAiB,MAAM;AAC3B,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AAEA,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,aAAa;AAAA,IACb,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,MAAM;AAAA,EACR;AACF;AAqCA,eAAsB,uBACpB,QACuB;AACvB,QAAM,wBAAwB,OAAO,yBAAyB;AAC9D,QAAM,oBACJ,OAAO,YAAY,WAAW;AAEhC,QAAM,YAAY,uBAAuB,OAAO,WAAW,gBAAgB;AAE3E,QAAM,cAAc,UAAM,oCAAmB;AAAA,IAC3C,QAAQ,OAAO;AAAA,IACf,QAAQ,CAAC,SAAS;AAAA,IAClB,SAAS;AAAA,IACT,GAAI,OAAO,cAAc,EAAE,SAAS,OAAO,YAAY,IAAI,CAAC;AAAA,IAC5D,YAAY;AAAA,MACV,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,UAAU,MAAM,OAAO,OAAO,WAAW;AAE/C,SAAO;AAAA,IACL,GAAG;AAAA;AAAA,IAEH,MAAM,kBAAkB,QAAa;AACnC,YAAM,KAAK;AAEX,YAAM,aAA+B;AAAA,QACnC,QAAQ,GAAG;AAAA,QACX,OAAO,OAAO,GAAG,KAAe;AAAA,QAChC,SAAU,GAAG,WAAmB;AAAA,QAChC,aAAc,GAAG,eAAuB;AAAA,QACxC,UAAU,GAAG;AAAA,QACb,sBAAsB,OAAO,GAAG,oBAA8B;AAAA,QAC9D,cAAc,OAAO,GAAG,YAAsB;AAAA,QAC9C,oBAAoB,OAAO,GAAG,kBAA4B;AAAA,QAC1D,sBAAsB,OAAO,GAAG,oBAA8B;AAAA,QAC9D,cAAc,OAAO,GAAG,YAAsB;AAAA,QAC9C,WAAY,GAAG,aAAqB;AAAA,QACpC,+BAA+B,GAAG,gCAC9B,OAAO,GAAG,6BAAuC,IACjD;AAAA,QACJ,yBAAyB,GAAG,0BACxB,OAAO,GAAG,uBAAiC,IAC3C;AAAA,QACJ,eAAgB,GAAG,iBAAyB;AAAA,MAC9C;AACA,YAAM,aAAa;AAAA,QACjB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAGA,YAAM,EAAE,GAAG,EAAE,IAAI,MAAM,OAAO,WAAW,KAAK,UAAU;AAGxD,YAAM,cAAU,kBAAI,GAAU,EAAE,MAAM,GAAG,CAAC;AAC1C,YAAM,cAAU,kBAAI,GAAU,EAAE,MAAM,GAAG,CAAC;AAC1C,YAAM,oBAAgB,qBAAO,CAAC,SAAS,OAAO,CAAC;AAG/C,YAAM,cAAc;AAAA,QAClB,OAAO,WAAW;AAAA,QAClB;AAAA,MACF;AAGA,YAAM,iBAAa,sBAAI,oBAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAC5C,YAAM,iBAAa,sBAAI,oBAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAE5C,iBAAO,qBAAO,CAAC,YAAY,YAAY,WAAW,CAAC;AAAA,IACrD;AAAA,EACF;AACF;;;AIlJA,IAAAC,mBAAmC;AAgBnC,eAAsB,2BACpB,QACuB;AACvB,QAAM,wBAAwB,OAAO,yBAAyB;AAC9D,QAAM,oBAAoB,OAAO,YAAY,WAAW;AAExD,QAAM,cAAc,UAAM,qCAAmB;AAAA,IAC3C,QAAQ,OAAO;AAAA,IACf,QAAQ,CAAC,OAAO,eAAe;AAAA,IAC/B,SAAS;AAAA,IACT,GAAI,OAAO,cAAc,EAAE,SAAS,OAAO,YAAY,IAAI,CAAC;AAAA,IAC5D,YAAY;AAAA,MACV,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AAAA,IACA;AAAA,IACA,GAAI,OAAO,kCACP,EAAE,iCAAiC,OAAO,gCAAgC,IAC1E,CAAC;AAAA,EACP,CAAC;AAED,SAAO;AACT;;;ALUA,eAAsBC,oBACpB,QACuB;AACvB,QAAM,EAAE,aAAa,IAAI;AAEzB,UAAQ,aAAa,MAAM;AAAA,IACzB,KAAK;AACH,aAAO,uBAAuB;AAAA,QAC5B,QAAQ,OAAO;AAAA,QACf,YAAY,aAAa;AAAA,QACzB,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,uBAAuB,OAAO;AAAA,MAChC,CAAC;AAAA,IAEH,KAAK;AACH,aAAO,2BAA2B;AAAA,QAChC,QAAQ,OAAO;AAAA,QACf,iBAAiB,aAAa;AAAA,QAC9B,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,uBAAuB,OAAO;AAAA,QAC9B,iCAAiC,aAAa;AAAA,MAChD,CAAC;AAAA,IAEH,KAAK;AACH,aAAO,wBAAwB,QAAQ,aAAa,SAAS,aAAa,aAAa,CAAC;AAAA,EAC5F;AACF;AAEA,SAASC,wBAAuB,SAA4B;AAC1D,QAAM,iBAAiB,MAAM;AAC3B,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AAEA,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,aAAa;AAAA,IACb,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,MAAM;AAAA,EACR;AACF;AASA,eAAe,wBACb,OACA,MACc;AACd,QAAM,EAAE,WAAW,eAAe,SAAS,IAAI,MAAM,MAAM,KAAK,EAAE,KAAK,CAAC;AAGxE,QAAM,WAAW,cAAc,MAAM,CAAC;AACtC,QAAM,IAAI,OAAO,OAAO,SAAS,MAAM,GAAG,EAAE,CAAC;AAC7C,QAAM,IAAI,OAAO,OAAO,SAAS,MAAM,IAAI,GAAG,CAAC;AAG/C,QAAM,QAAQ,SAAS,eAAe;AAAA,IACpC;AAAA,EACF;AACA,QAAM,mBAAmB,QAAQ,MAAM,CAAC,IAAI;AAE5C,aAAO;AAAA,IACL;AAAA,MACE,EAAE,MAAM,qBAAqB,MAAM,QAAQ;AAAA,MAC3C,EAAE,MAAM,oBAAoB,MAAM,SAAS;AAAA,MAC3C,EAAE,MAAM,aAAa,MAAM,aAAa;AAAA,IAC1C;AAAA,IACA,CAAC,SAAS,mBAAmB,kBAAkB,CAAC,GAAG,CAAC,CAAC;AAAA,EACvD;AACF;AAEA,eAAe,wBACb,QACA,SACA,WACuB;AACvB,MAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,UAAU;AACtC,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAGA,MAAI,QAAQ,QAAQ,CAAC,QAAQ,UAAU;AACrC,WAAO,uBAAuB;AAAA,MAC5B,QAAQ,OAAO;AAAA,MACf,YAAY,QAAQ;AAAA,MACpB,aAAa,OAAO;AAAA,MACpB,YAAY,OAAO;AAAA,MACnB,uBAAuB,OAAO;AAAA,IAChC,CAAC;AAAA,EACH;AACA,MAAI,QAAQ,YAAY,CAAC,QAAQ,MAAM;AACrC,UAAM,eAAe,OAAO;AAC5B,UAAM,mBAAmB,aAAa,SAAS,UAC3C,aAAa,kCACb;AACJ,WAAO,2BAA2B;AAAA,MAChC,QAAQ,OAAO;AAAA,MACf,iBAAiB,QAAQ;AAAA,MACzB,aAAa,OAAO;AAAA,MACpB,YAAY,OAAO;AAAA,MACnB,uBAAuB,OAAO;AAAA,MAC9B,iCAAiC;AAAA,IACnC,CAAC;AAAA,EACH;AAGA,QAAM,aAAa,QAAQ;AAC3B,QAAM,kBAAkB,QAAQ;AAEhC,QAAM,wBAAwB,OAAO,yBAAyB;AAC9D,QAAM,oBAAoB,OAAO,YAAY,WAAW;AAExD,QAAM,gBAAgBA,wBAAuB,WAAW,gBAAgB;AAGxE,QAAM,cAAc,UAAM,iBAAAC,oBAAiC;AAAA,IACzD,QAAQ,OAAO;AAAA,IACf,QAAQ,CAAC,eAAe,eAAe;AAAA,IACvC,SAAS;AAAA,IACT,WAAW,OAAO,SAAS;AAAA,IAC3B,GAAI,OAAO,cAAc,EAAE,SAAS,OAAO,YAAY,IAAI,CAAC;AAAA,IAC5D,YAAY;AAAA,MACV,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,UAAU,MAAM,OAAO,OAAO,WAAW;AAE/C,MAAI,aAAa,GAAG;AAClB,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAGA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,uBACP,aACA,YACA,SACA,uBACA,mBACc;AACd,SAAO;AAAA,IACL,GAAG;AAAA;AAAA,IAEH,MAAM,kBAAkB,QAAa;AACnC,YAAM,aAAa;AAAA,QACjB,wBAAwB,MAAM;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM,EAAE,GAAG,EAAE,IAAI,MAAM,WAAW,KAAK,UAAU;AACjD,YAAM,cAAU,kBAAI,GAAU,EAAE,MAAM,GAAG,CAAC;AAC1C,YAAM,cAAU,kBAAI,GAAU,EAAE,MAAM,GAAG,CAAC;AAC1C,YAAM,oBAAgB,qBAAO,CAAC,SAAS,OAAO,CAAC;AAE/C,YAAM,cAAc;AAAA,QAClB,WAAW;AAAA,QACX;AAAA,MACF;AAEA,YAAM,iBAAa,sBAAI,oBAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAC5C,YAAM,iBAAa,sBAAI,oBAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAE5C,iBAAO,qBAAO,CAAC,YAAY,YAAY,WAAW,CAAC;AAAA,IACrD;AAAA,EACF;AACF;AAEA,SAAS,uBACP,aACA,YACA,iBACA,SACA,uBACA,mBACc;AACd,SAAO;AAAA,IACL,GAAG;AAAA;AAAA,IAEH,MAAM,kBAAkB,QAAa;AACnC,YAAM,aAAa;AAAA,QACjB,wBAAwB,MAAM;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAGA,YAAM,EAAE,GAAG,EAAE,IAAI,MAAM,WAAW,KAAK,UAAU;AACjD,YAAM,cAAU,kBAAI,GAAU,EAAE,MAAM,GAAG,CAAC;AAC1C,YAAM,cAAU,kBAAI,GAAU,EAAE,MAAM,GAAG,CAAC;AAC1C,YAAM,wBAAoB,qBAAO,CAAC,SAAS,OAAO,CAAC;AAGnD,YAAM,wBAAwB,MAAM;AAAA,QAClC;AAAA,QACA;AAAA,MACF;AAIA,YAAM,oBAAoB,WAAW,iBAAiB,YAAY;AAClE,YAAM,wBAAwB,4BAA4B,YAAY;AAStE,YAAM,gBAA+B;AAAA,QACnC;AAAA,UACE,SAAS;AAAA,UACT,MAAM;AAAA,UACN,SAAS;AAAA,UACT,eAAe;AAAA,QACjB;AAAA,QACA;AAAA,UACE,SAAS;AAAA,UACT,MAAM;AAAA,UACN,SAAS;AAAA,UACT,eAAe;AAAA,QACjB;AAAA,MACF,EAAE,KAAK,CAAC,GAAG,MAAO,EAAE,UAAU,EAAE,UAAU,KAAK,CAAE;AAEjD,YAAM,kBAAkB,qBAAqB,aAAa;AAE1D,YAAM,iBAAa,sBAAI,oBAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAC5C,YAAM,iBAAa,sBAAI,oBAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAE5C,iBAAO,qBAAO,CAAC,YAAY,YAAY,eAAe,CAAC;AAAA,IACzD;AAAA,EACF;AACF;AAgBA,SAAS,qBACP,SACK;AACL,QAAM,iBAAiB;AACvB,QAAM,kBAAkB,iBAAiB,QAAQ;AAEjD,QAAM,cAAqB,CAAC;AAC5B,QAAM,eAAsB,CAAC;AAC7B,MAAI,gBAAgB;AAEpB,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,SAAS;AAEjB,YAAM,QAAI,kBAAI,MAAM,SAAgB,EAAE,MAAM,GAAG,CAAC;AAChD,YAAM,QAAI,sBAAI,oBAAM,aAAa,GAAG,EAAE,MAAM,GAAG,CAAC;AAChD,YAAM,IAAI;AACV,kBAAY,SAAK,qBAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAGlC,YAAM,aAAa,MAAM,KAAK,SAAS,KAAK;AAC5C,YAAM,aAAS,sBAAI,oBAAM,SAAS,GAAG,EAAE,MAAM,GAAG,CAAC;AACjD,mBAAa,SAAK,qBAAO,CAAC,QAAQ,MAAM,IAAI,CAAC,CAAC;AAG9C,uBAAiB,KAAK;AAAA,IACxB,OAAO;AAEL,kBAAY,KAAK,MAAM,IAAI;AAAA,IAC7B;AAAA,EACF;AAEA,aAAO,qBAAO,CAAC,GAAG,aAAa,GAAG,YAAY,CAAC;AACjD;AAGA,SAAS,wBAAwB,QAA+B;AAC9D,QAAM,KAAK;AACX,SAAO;AAAA,IACL,QAAQ,GAAG;AAAA,IACX,OAAO,OAAO,GAAG,KAAe;AAAA,IAChC,SAAU,GAAG,WAAmB;AAAA,IAChC,aAAc,GAAG,eAAuB;AAAA,IACxC,UAAU,GAAG;AAAA,IACb,sBAAsB,OAAO,GAAG,oBAA8B;AAAA,IAC9D,cAAc,OAAO,GAAG,YAAsB;AAAA,IAC9C,oBAAoB,OAAO,GAAG,kBAA4B;AAAA,IAC1D,sBAAsB,OAAO,GAAG,oBAA8B;AAAA,IAC9D,cAAc,OAAO,GAAG,YAAsB;AAAA,IAC9C,WAAY,GAAG,aAAqB;AAAA,IACpC,+BAA+B,GAAG,gCAC9B,OAAO,GAAG,6BAAuC,IACjD;AAAA,IACJ,yBAAyB,GAAG,0BACxB,OAAO,GAAG,uBAAiC,IAC3C;AAAA,IACJ,eAAgB,GAAG,iBAAyB;AAAA,EAC9C;AACF;;;AM/XA,SAAS,YAAY,QAA6B;AAChD,SAAO,MAAM,KAAK,IAAI,WAAW,MAAM,CAAC,EACrC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AACZ;AAEA,SAAS,eAAe,WAA2B;AACjD,QAAM,SAAS,UAAU,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC7D,QAAM,SAAS,KAAK,MAAM;AAC1B,SAAO,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACzF;AAQA,eAAsB,0BACpB,YAC4C;AAC5C,QAAM,QAAQ,YAAY,WAAW,KAAK;AAC1C,QAAM,WAAW,WAAW;AAC5B,QAAM,YAAY,SAAS,aAAa;AACxC,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,8CAA8C;AAE9E,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA;AAAA,IACA,EAAE,MAAM,SAAS,YAAY,QAAQ;AAAA,IACrC;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AACA,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,GAAG;AACpD,MAAI,CAAC,IAAI,KAAK,CAAC,IAAI,EAAG,OAAM,IAAI,MAAM,4BAA4B;AAElE,SAAO;AAAA,IACL;AAAA,IACA,GAAI,OAAO,eAAe,IAAI,CAAC;AAAA,IAC/B,GAAI,OAAO,eAAe,IAAI,CAAC;AAAA,EACjC;AACF;","names":["toSafeSmartAccount","import_viem","import_accounts","import_viem","import_viem","import_accounts","toSafeSmartAccount","createMockLocalAccount","toPermissionlessSafeSmartAccount"]}
+{"version":3,"sources":["../../../src/accounts/index.ts","../../../src/accounts/toSafeSmartAccount.ts","../../../src/accounts/toP256SafeSmartAccount.ts","../../../src/accounts/encodeContractSignature.ts","../../../src/accounts/computeSafeOpHash.ts","../../../src/constants.ts","../../../src/accounts/toWebAuthnSafeSmartAccount.ts","../../../src/accounts/extractPasskeyCoordinates.ts","../../../src/accounts/toP256ExecutorModuleAccount.ts","../../../src/exact/client/utils/userOpHash.ts"],"sourcesContent":["// Unified API\nexport { toSafeSmartAccount } from \"./toSafeSmartAccount\";\n\n// Individual signer functions\nexport { toP256SafeSmartAccount } from \"./toP256SafeSmartAccount\";\nexport { toWebAuthnSafeSmartAccount } from \"./toWebAuthnSafeSmartAccount\";\n\n// Utilities\nexport { encodeContractSignature } from \"./encodeContractSignature\";\nexport { computeSafeOpHash } from \"./computeSafeOpHash\";\n\nexport { extractPasskeyCoordinates } from \"./extractPasskeyCoordinates\";\n\n// P256ExecutorModule adapter\nexport { toP256ExecutorModuleAccount } from \"./toP256ExecutorModuleAccount\";\nexport type { ToP256ExecutorModuleAccountParams } from \"./toP256ExecutorModuleAccount\";\n\n// Types\nexport type { P256Signer, SafeMessageSigner, ToP256SafeSmartAccountParams } from \"./types\";\nexport type { SignerConfig, ToSafeSmartAccountParams } from \"./types\";\nexport type { ToWebAuthnSafeSmartAccountParams } from \"./toWebAuthnSafeSmartAccount\";\nexport type { SafeOpHashParams } from \"./computeSafeOpHash\";\n","import type { Hex, LocalAccount } from \"viem\";\nimport { concat, encodeAbiParameters, pad, toHex } from \"viem\";\nimport type { SmartAccount, WebAuthnAccount } from \"viem/account-abstraction\";\nimport { toSafeSmartAccount as toPermissionlessSafeSmartAccount } from \"permissionless/accounts\";\n\nimport type { P256Signer, ToSafeSmartAccountParams } from \"./types\";\nimport { toP256SafeSmartAccount } from \"./toP256SafeSmartAccount\";\nimport { toWebAuthnSafeSmartAccount } from \"./toWebAuthnSafeSmartAccount\";\nimport { encodeContractSignature } from \"./encodeContractSignature\";\nimport { computeSafeOpHash } from \"./computeSafeOpHash\";\nimport type { SafeOpHashParams } from \"./computeSafeOpHash\";\nimport {\n  SAFE_4337_MODULE_ADDRESS,\n  SAFE_WEBAUTHN_SHARED_SIGNER,\n  entryPoint07Address,\n} from \"../constants\";\n\n/**\n * Creates a Safe SmartAccount with a unified signer configuration.\n *\n * Dispatches to the appropriate implementation based on `signerConfig.type`:\n * - `\"p256\"`: P256 contract owner (existing `toP256SafeSmartAccount`)\n * - `\"webauthn\"`: WebAuthn passkey via permissionless native support\n * - `\"multi\"`: Both P256 and WebAuthn owners on a single Safe\n *\n * @example\n * ```typescript\n * // P256 only\n * const account = await toSafeSmartAccount({\n *   client,\n *   signerConfig: { type: \"p256\", p256Signer },\n * });\n *\n * // WebAuthn only\n * const account = await toSafeSmartAccount({\n *   client,\n *   signerConfig: { type: \"webauthn\", webAuthnAccount },\n * });\n *\n * // Multi-signer (threshold 1, P256 signs by default)\n * const account = await toSafeSmartAccount({\n *   client,\n *   signerConfig: {\n *     type: \"multi\",\n *     signers: { p256: p256Signer, webAuthn: webAuthnAccount },\n *     threshold: 1,\n *   },\n * });\n * ```\n */\nexport async function toSafeSmartAccount(\n  params: ToSafeSmartAccountParams,\n): Promise<SmartAccount> {\n  const { signerConfig } = params;\n\n  switch (signerConfig.type) {\n    case \"p256\":\n      return toP256SafeSmartAccount({\n        client: params.client,\n        p256Signer: signerConfig.p256Signer,\n        safeAddress: params.safeAddress,\n        entryPoint: params.entryPoint,\n        safe4337ModuleAddress: params.safe4337ModuleAddress,\n      });\n\n    case \"webauthn\":\n      return toWebAuthnSafeSmartAccount({\n        client: params.client,\n        webAuthnAccount: signerConfig.webAuthnAccount,\n        safeAddress: params.safeAddress,\n        entryPoint: params.entryPoint,\n        safe4337ModuleAddress: params.safe4337ModuleAddress,\n        safeWebAuthnSharedSignerAddress: signerConfig.safeWebAuthnSharedSignerAddress,\n      });\n\n    case \"multi\":\n      return buildMultiSignerAccount(params, signerConfig.signers, signerConfig.threshold ?? 1);\n  }\n}\n\nfunction createMockLocalAccount(address: Hex): LocalAccount {\n  const notImplemented = () => {\n    throw new Error(\"Mock owner: use signUserOperation instead\");\n  };\n\n  return {\n    address,\n    type: \"local\",\n    source: \"custom\",\n    publicKey: \"0x\" as Hex,\n    signMessage: notImplemented,\n    signTypedData: notImplemented,\n    signTransaction: notImplemented,\n    sign: notImplemented,\n  } as unknown as LocalAccount;\n}\n\n/**\n * Encodes a WebAuthn signature from raw sign() output into the ABI format\n * expected by Safe's WebAuthn verifier:\n * `(bytes authenticatorData, string clientDataFields, uint256[2] signature)`\n *\n * permissionless does not export this helper, so we implement it here.\n */\nasync function encodeWebAuthnSignature(\n  owner: WebAuthnAccount,\n  hash: Hex,\n): Promise<Hex> {\n  const { signature: signatureData, webauthn } = await owner.sign({ hash });\n\n  // Extract r, s from the DER-encoded P256 signature\n  const sigBytes = signatureData.slice(2);\n  const r = BigInt(\"0x\" + sigBytes.slice(0, 64));\n  const s = BigInt(\"0x\" + sigBytes.slice(64, 128));\n\n  // Extract the fields after \"challenge\":\"...\" from clientDataJSON\n  const match = webauthn.clientDataJSON.match(\n    /^\\{\"type\":\"webauthn.get\",\"challenge\":\"[A-Za-z0-9\\-_]{43}\",(.*)\\}$/,\n  );\n  const clientDataFields = match ? match[1] : \"\";\n\n  return encodeAbiParameters(\n    [\n      { name: \"authenticatorData\", type: \"bytes\" },\n      { name: \"clientDataFields\", type: \"string\" },\n      { name: \"signature\", type: \"uint256[2]\" },\n    ],\n    [webauthn.authenticatorData, clientDataFields, [r, s]],\n  );\n}\n\nasync function buildMultiSignerAccount(\n  params: ToSafeSmartAccountParams,\n  signers: { p256?: P256Signer; webAuthn?: WebAuthnAccount },\n  threshold: number,\n): Promise<SmartAccount> {\n  if (!signers.p256 && !signers.webAuthn) {\n    throw new Error(\"Multi-signer config requires at least one signer\");\n  }\n\n  // If only one signer is provided, delegate to the single-signer function\n  if (signers.p256 && !signers.webAuthn) {\n    return toP256SafeSmartAccount({\n      client: params.client,\n      p256Signer: signers.p256,\n      safeAddress: params.safeAddress,\n      entryPoint: params.entryPoint,\n      safe4337ModuleAddress: params.safe4337ModuleAddress,\n    });\n  }\n  if (signers.webAuthn && !signers.p256) {\n    const signerConfig = params.signerConfig;\n    const sharedSignerAddr = signerConfig.type === \"multi\"\n      ? signerConfig.safeWebAuthnSharedSignerAddress\n      : undefined;\n    return toWebAuthnSafeSmartAccount({\n      client: params.client,\n      webAuthnAccount: signers.webAuthn,\n      safeAddress: params.safeAddress,\n      entryPoint: params.entryPoint,\n      safe4337ModuleAddress: params.safe4337ModuleAddress,\n      safeWebAuthnSharedSignerAddress: sharedSignerAddr,\n    });\n  }\n\n  // Both signers present\n  const p256Signer = signers.p256!;\n  const webAuthnAccount = signers.webAuthn!;\n\n  const safe4337ModuleAddress = params.safe4337ModuleAddress ?? SAFE_4337_MODULE_ADDRESS;\n  const entryPointAddress = params.entryPoint?.address ?? entryPoint07Address;\n\n  const mockP256Owner = createMockLocalAccount(p256Signer.p256OwnerAddress);\n\n  // Build account with both owners: mock LocalAccount for P256 + WebAuthnAccount\n  const baseAccount = await toPermissionlessSafeSmartAccount({\n    client: params.client,\n    owners: [mockP256Owner, webAuthnAccount],\n    version: \"1.5.0\",\n    threshold: BigInt(threshold),\n    ...(params.safeAddress ? { address: params.safeAddress } : {}),\n    entryPoint: {\n      address: entryPointAddress,\n      version: \"0.7\",\n    },\n    safe4337ModuleAddress,\n  });\n\n  const chainId = await params.client.getChainId();\n\n  if (threshold >= 2) {\n    return buildThreshold2Account(\n      baseAccount as SmartAccount,\n      p256Signer,\n      webAuthnAccount,\n      chainId,\n      safe4337ModuleAddress,\n      entryPointAddress,\n    );\n  }\n\n  // Threshold 1: P256 signs by default (no browser interaction needed)\n  return buildThreshold1Account(\n    baseAccount as SmartAccount,\n    p256Signer,\n    chainId,\n    safe4337ModuleAddress,\n    entryPointAddress,\n  );\n}\n\nfunction buildThreshold1Account(\n  baseAccount: SmartAccount,\n  p256Signer: P256Signer,\n  chainId: number,\n  safe4337ModuleAddress: Hex,\n  entryPointAddress: Hex,\n): SmartAccount {\n  return {\n    ...baseAccount,\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    async signUserOperation(userOp: any) {\n      const safeOpHash = computeSafeOpHash(\n        extractSafeOpHashParams(userOp),\n        chainId,\n        safe4337ModuleAddress,\n        entryPointAddress,\n      );\n\n      const { r, s } = await p256Signer.sign(safeOpHash);\n      const rPadded = pad(r as Hex, { size: 32 });\n      const sPadded = pad(s as Hex, { size: 32 });\n      const p256Signature = concat([rPadded, sPadded]);\n\n      const contractSig = encodeContractSignature(\n        p256Signer.p256OwnerAddress,\n        p256Signature,\n      );\n\n      const validAfter = pad(toHex(0), { size: 6 });\n      const validUntil = pad(toHex(0), { size: 6 });\n\n      return concat([validAfter, validUntil, contractSig]);\n    },\n  } as SmartAccount;\n}\n\nfunction buildThreshold2Account(\n  baseAccount: SmartAccount,\n  p256Signer: P256Signer,\n  webAuthnAccount: WebAuthnAccount,\n  chainId: number,\n  safe4337ModuleAddress: Hex,\n  entryPointAddress: Hex,\n): SmartAccount {\n  return {\n    ...baseAccount,\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    async signUserOperation(userOp: any) {\n      const safeOpHash = computeSafeOpHash(\n        extractSafeOpHashParams(userOp),\n        chainId,\n        safe4337ModuleAddress,\n        entryPointAddress,\n      );\n\n      // Sign with P256\n      const { r, s } = await p256Signer.sign(safeOpHash);\n      const rPadded = pad(r as Hex, { size: 32 });\n      const sPadded = pad(s as Hex, { size: 32 });\n      const p256SignatureData = concat([rPadded, sPadded]);\n\n      // Sign with WebAuthn\n      const webAuthnSignatureData = await encodeWebAuthnSignature(\n        webAuthnAccount,\n        safeOpHash,\n      );\n\n      // Build sorted multi-signature\n      // Safe requires signatures sorted by signer address (ascending)\n      const p256SignerAddress = p256Signer.p256OwnerAddress.toLowerCase();\n      const webAuthnSignerAddress = SAFE_WEBAUTHN_SHARED_SIGNER.toLowerCase();\n\n      type SignerEntry = {\n        address: string;\n        data: Hex;\n        dynamic: boolean;\n        contractOwner: boolean;\n      };\n\n      const signerEntries: SignerEntry[] = [\n        {\n          address: p256SignerAddress,\n          data: p256SignatureData,\n          dynamic: true,\n          contractOwner: true,\n        },\n        {\n          address: webAuthnSignerAddress,\n          data: webAuthnSignatureData,\n          dynamic: true,\n          contractOwner: false,\n        },\n      ].sort((a, b) => (a.address < b.address ? -1 : 1));\n\n      const concatenatedSig = concatSafeSignatures(signerEntries);\n\n      const validAfter = pad(toHex(0), { size: 6 });\n      const validUntil = pad(toHex(0), { size: 6 });\n\n      return concat([validAfter, validUntil, concatenatedSig]);\n    },\n  } as SmartAccount;\n}\n\n/**\n * Concatenates multiple Safe signatures with proper static/dynamic layout.\n *\n * Safe's `checkNSignatures` expects:\n * - N x 65-byte static parts (sorted by signer address)\n * - Dynamic data appended after all static parts\n *\n * For dynamic signatures (contract or WebAuthn):\n *   Static: r = address padded to 32 bytes, s = offset to dynamic data, v = 0x00\n *   Dynamic: 32-byte length prefix + signature data\n *\n * For ECDSA signatures:\n *   Static: r (32 bytes) + s (32 bytes) + v (1 byte)\n */\nfunction concatSafeSignatures(\n  entries: { address: string; data: Hex; dynamic: boolean; contractOwner: boolean }[],\n): Hex {\n  const staticPartSize = 65; // per signer\n  const totalStaticSize = staticPartSize * entries.length;\n\n  const staticParts: Hex[] = [];\n  const dynamicParts: Hex[] = [];\n  let dynamicOffset = totalStaticSize;\n\n  for (const entry of entries) {\n    if (entry.dynamic) {\n      // Dynamic signature: static part points to dynamic data\n      const r = pad(entry.address as Hex, { size: 32 });\n      const s = pad(toHex(dynamicOffset), { size: 32 });\n      const v = \"0x00\" as Hex;\n      staticParts.push(concat([r, s, v]));\n\n      // Dynamic part: length-prefixed data\n      const dataBytes = (entry.data.length - 2) / 2;\n      const length = pad(toHex(dataBytes), { size: 32 });\n      dynamicParts.push(concat([length, entry.data]));\n\n      // Advance offset: 32 bytes for length + actual data length\n      dynamicOffset += 32 + dataBytes;\n    } else {\n      // ECDSA: direct 65-byte signature (not used in current multi-signer paths)\n      staticParts.push(entry.data);\n    }\n  }\n\n  return concat([...staticParts, ...dynamicParts]);\n}\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nfunction extractSafeOpHashParams(userOp: any): SafeOpHashParams {\n  const op = userOp as Record<string, unknown>;\n  return {\n    sender: op.sender as Hex,\n    nonce: BigInt(op.nonce as bigint),\n    factory: (op.factory as Hex) ?? null,\n    factoryData: (op.factoryData as Hex) ?? null,\n    callData: op.callData as Hex,\n    verificationGasLimit: BigInt(op.verificationGasLimit as bigint),\n    callGasLimit: BigInt(op.callGasLimit as bigint),\n    preVerificationGas: BigInt(op.preVerificationGas as bigint),\n    maxPriorityFeePerGas: BigInt(op.maxPriorityFeePerGas as bigint),\n    maxFeePerGas: BigInt(op.maxFeePerGas as bigint),\n    paymaster: (op.paymaster as Hex) ?? null,\n    paymasterVerificationGasLimit: op.paymasterVerificationGasLimit\n      ? BigInt(op.paymasterVerificationGasLimit as bigint)\n      : null,\n    paymasterPostOpGasLimit: op.paymasterPostOpGasLimit\n      ? BigInt(op.paymasterPostOpGasLimit as bigint)\n      : null,\n    paymasterData: (op.paymasterData as Hex) ?? null,\n  };\n}\n","import type { Hex, LocalAccount } from \"viem\";\nimport { concat, pad, toHex } from \"viem\";\nimport type { SmartAccount } from \"viem/account-abstraction\";\nimport { toSafeSmartAccount } from \"permissionless/accounts\";\n\nimport type { ToP256SafeSmartAccountParams } from \"./types\";\nimport { encodeContractSignature } from \"./encodeContractSignature\";\nimport type { SafeOpHashParams } from \"./computeSafeOpHash\";\nimport { computeSafeOpHash } from \"./computeSafeOpHash\";\nimport { SAFE_4337_MODULE_ADDRESS, entryPoint07Address } from \"../constants\";\n\n/**\n * Creates a mock LocalAccount that has the P256Owner contract address.\n *\n * This is needed because `toSafeSmartAccount` requires a `LocalAccount` owner,\n * but our actual signer is a P256Owner contract (ERC-1271). The mock provides\n * the correct address so the Safe is configured with the right owner. The\n * signing methods are never called since we override `signUserOperation`.\n */\nfunction createMockLocalAccount(address: Hex): LocalAccount {\n  const notImplemented = () => {\n    throw new Error(\"P256 contract owner: use signUserOperation instead\");\n  };\n\n  return {\n    address,\n    type: \"local\",\n    source: \"custom\",\n    publicKey: \"0x\" as Hex,\n    signMessage: notImplemented,\n    signTypedData: notImplemented,\n    signTransaction: notImplemented,\n    sign: notImplemented,\n  } as unknown as LocalAccount;\n}\n\n/**\n * Creates a Safe SmartAccount that signs UserOperations with a P256 contract owner.\n *\n * This wraps permissionless's `toSafeSmartAccount` and overrides `signUserOperation`\n * to produce P256 signatures in Safe's contract signature format (v=0). The resulting\n * account is compatible with `SafeAccountSigner` and `ExactEvmSchemeERC4337`.\n *\n * The caller is responsible for:\n * - Deploying the P256Owner contract (or computing its deterministic address)\n * - Providing the `sign()` function (e.g., using `@noble/curves/p256` with `prehash: false`)\n * - Ensuring the P256Owner is an owner of the Safe\n *\n * @example\n * ```typescript\n * import { toP256SafeSmartAccount } from '@introspectivelabs/x402-evm';\n * import { p256 } from '@noble/curves/p256';\n *\n * const account = await toP256SafeSmartAccount({\n *   client: publicClient,\n *   p256Signer: {\n *     p256OwnerAddress: '0x349c...',\n *     sign: async (hash) => {\n *       const sig = p256.sign(hash.slice(2), privateKey, { prehash: false, lowS: true });\n *       return {\n *         r: `0x${sig.r.toString(16).padStart(64, '0')}`,\n *         s: `0x${sig.s.toString(16).padStart(64, '0')}`,\n *       };\n *     },\n *   },\n *   safeAddress: '0x...',\n * });\n *\n * const scheme = new ExactEvmSchemeERC4337({ account });\n * ```\n */\nexport async function toP256SafeSmartAccount(\n  params: ToP256SafeSmartAccountParams,\n): Promise<SmartAccount> {\n  const safe4337ModuleAddress = params.safe4337ModuleAddress ?? SAFE_4337_MODULE_ADDRESS;\n  const entryPointAddress =\n    params.entryPoint?.address ?? entryPoint07Address;\n\n  const mockOwner = createMockLocalAccount(params.p256Signer.p256OwnerAddress);\n\n  const baseAccount = await toSafeSmartAccount({\n    client: params.client,\n    owners: [mockOwner],\n    version: \"1.5.0\",\n    ...(params.safeAddress ? { address: params.safeAddress } : {}),\n    entryPoint: {\n      address: entryPointAddress,\n      version: \"0.7\",\n    },\n    safe4337ModuleAddress,\n  });\n\n  const chainId = await params.client.getChainId();\n\n  return {\n    ...baseAccount,\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    async signUserOperation(userOp: any) {\n      const op = userOp as Record<string, unknown>;\n      // Compute the SafeOp EIP-712 hash (what Safe4337Module verifies)\n      const hashParams: SafeOpHashParams = {\n        sender: op.sender as Hex,\n        nonce: BigInt(op.nonce as bigint),\n        factory: (op.factory as Hex) ?? null,\n        factoryData: (op.factoryData as Hex) ?? null,\n        callData: op.callData as Hex,\n        verificationGasLimit: BigInt(op.verificationGasLimit as bigint),\n        callGasLimit: BigInt(op.callGasLimit as bigint),\n        preVerificationGas: BigInt(op.preVerificationGas as bigint),\n        maxPriorityFeePerGas: BigInt(op.maxPriorityFeePerGas as bigint),\n        maxFeePerGas: BigInt(op.maxFeePerGas as bigint),\n        paymaster: (op.paymaster as Hex) ?? null,\n        paymasterVerificationGasLimit: op.paymasterVerificationGasLimit\n          ? BigInt(op.paymasterVerificationGasLimit as bigint)\n          : null,\n        paymasterPostOpGasLimit: op.paymasterPostOpGasLimit\n          ? BigInt(op.paymasterPostOpGasLimit as bigint)\n          : null,\n        paymasterData: (op.paymasterData as Hex) ?? null,\n      };\n      const safeOpHash = computeSafeOpHash(\n        hashParams,\n        chainId,\n        safe4337ModuleAddress,\n        entryPointAddress,\n      );\n\n      // Sign the SafeOp hash with P256\n      const { r, s } = await params.p256Signer.sign(safeOpHash);\n\n      // Encode r || s as 64-byte signature\n      const rPadded = pad(r as Hex, { size: 32 });\n      const sPadded = pad(s as Hex, { size: 32 });\n      const p256Signature = concat([rPadded, sPadded]);\n\n      // Wrap in Safe contract signature format (v=0)\n      const contractSig = encodeContractSignature(\n        params.p256Signer.p256OwnerAddress,\n        p256Signature,\n      );\n\n      // Safe4337Module expects: validAfter (6 bytes) || validUntil (6 bytes) || signatures\n      const validAfter = pad(toHex(0), { size: 6 });\n      const validUntil = pad(toHex(0), { size: 6 });\n\n      return concat([validAfter, validUntil, contractSig]);\n    },\n  } as SmartAccount;\n}\n","import { type Hex, concat, pad, toHex } from \"viem\";\n\n/**\n * Encodes a signature in Safe's contract signature format (v=0).\n *\n * Safe's `checkNSignatures` expects this layout for contract owners:\n *\n * Static part (65 bytes):\n *   - r (32 bytes): owner address padded to 32 bytes\n *   - s (32 bytes): offset to dynamic data (relative to start of signatures)\n *   - v (1 byte):   0x00 (indicates contract signature)\n *\n * Dynamic part (at the offset):\n *   - length (32 bytes): length of the signature data\n *   - data (variable):   the actual signature bytes\n *\n * For a single signer, the static part is 65 bytes, so the dynamic data\n * starts at offset 65.\n */\nexport function encodeContractSignature(ownerAddress: Hex, signatureData: Hex): Hex {\n  // Static part: r = address padded to 32 bytes\n  const r = pad(ownerAddress, { size: 32 });\n\n  // For a single signature, dynamic data starts right after the 65-byte static part\n  const dynamicOffset = 65;\n  const s = pad(toHex(dynamicOffset), { size: 32 });\n\n  // v = 0x00 for contract signature\n  const v = \"0x00\" as Hex;\n\n  // Dynamic part: length-prefixed signature data\n  const signatureBytes = (signatureData.length - 2) / 2;\n  const length = pad(toHex(signatureBytes), { size: 32 });\n\n  return concat([r, s, v, length, signatureData]);\n}\n","import {\n  type Hex,\n  concat,\n  hashTypedData,\n  isAddress,\n  pad,\n  toHex,\n} from \"viem\";\nimport { SAFE_4337_MODULE_ADDRESS, entryPoint07Address } from \"../constants\";\n\nconst SAFE_OP_TYPES = {\n  SafeOp: [\n    { type: \"address\", name: \"safe\" },\n    { type: \"uint256\", name: \"nonce\" },\n    { type: \"bytes\", name: \"initCode\" },\n    { type: \"bytes\", name: \"callData\" },\n    { type: \"uint128\", name: \"verificationGasLimit\" },\n    { type: \"uint128\", name: \"callGasLimit\" },\n    { type: \"uint256\", name: \"preVerificationGas\" },\n    { type: \"uint128\", name: \"maxPriorityFeePerGas\" },\n    { type: \"uint128\", name: \"maxFeePerGas\" },\n    { type: \"bytes\", name: \"paymasterAndData\" },\n    { type: \"uint48\", name: \"validAfter\" },\n    { type: \"uint48\", name: \"validUntil\" },\n    { type: \"address\", name: \"entryPoint\" },\n  ],\n} as const;\n\nexport interface SafeOpHashParams {\n  sender: Hex;\n  nonce: bigint;\n  factory?: Hex | null;\n  factoryData?: Hex | null;\n  callData: Hex;\n  verificationGasLimit: bigint;\n  callGasLimit: bigint;\n  preVerificationGas: bigint;\n  maxPriorityFeePerGas: bigint;\n  maxFeePerGas: bigint;\n  paymaster?: Hex | null;\n  paymasterVerificationGasLimit?: bigint | null;\n  paymasterPostOpGasLimit?: bigint | null;\n  paymasterData?: Hex | null;\n}\n\n/**\n * Computes the EIP-712 SafeOp hash that Safe4337Module uses for signature verification.\n *\n * The Safe4337Module converts the EntryPoint v0.7 UserOperation into a SafeOp struct,\n * packing initCode and paymasterAndData into their v0.6-style concatenated forms,\n * then hashes the struct using EIP-712.\n */\nexport function computeSafeOpHash(\n  userOp: SafeOpHashParams,\n  chainId: number,\n  safe4337ModuleAddress: Hex = SAFE_4337_MODULE_ADDRESS,\n  entryPointAddress: Hex = entryPoint07Address,\n): Hex {\n  // Reconstruct initCode: factory || factoryData (v0.7 -> v0.6 style)\n  const initCode =\n    userOp.factory && isAddress(userOp.factory)\n      ? concat([userOp.factory, (userOp.factoryData || \"0x\") as Hex])\n      : (\"0x\" as Hex);\n\n  // Reconstruct paymasterAndData: paymaster || verificationGasLimit(16) || postOpGasLimit(16) || data\n  let paymasterAndData: Hex = \"0x\";\n  if (userOp.paymaster && isAddress(userOp.paymaster)) {\n    paymasterAndData = concat([\n      userOp.paymaster,\n      pad(toHex(userOp.paymasterVerificationGasLimit || 0n), { size: 16 }),\n      pad(toHex(userOp.paymasterPostOpGasLimit || 0n), { size: 16 }),\n      (userOp.paymasterData || \"0x\") as Hex,\n    ]);\n  }\n\n  return hashTypedData({\n    domain: {\n      chainId,\n      verifyingContract: safe4337ModuleAddress,\n    },\n    types: SAFE_OP_TYPES,\n    primaryType: \"SafeOp\",\n    message: {\n      safe: userOp.sender,\n      nonce: userOp.nonce,\n      initCode,\n      callData: userOp.callData,\n      verificationGasLimit: userOp.verificationGasLimit,\n      callGasLimit: userOp.callGasLimit,\n      preVerificationGas: userOp.preVerificationGas,\n      maxPriorityFeePerGas: userOp.maxPriorityFeePerGas,\n      maxFeePerGas: userOp.maxFeePerGas,\n      paymasterAndData,\n      validAfter: 0,\n      validUntil: 0,\n      entryPoint: entryPointAddress,\n    },\n  });\n}\n","import type { Hex } from \"viem\";\nimport { entryPoint07Address } from \"viem/account-abstraction\";\n\nexport { entryPoint07Address };\n\nexport const SAFE_4337_MODULE_ADDRESS =\n  \"0x75cf11467937ce3F2f357CE24ffc3DBF8fD5c226\" as const satisfies Hex;\n\nexport const SAFE_WEBAUTHN_SHARED_SIGNER =\n  \"0xfD90FAd33ee8b58f32c00aceEad1358e4AFC23f9\" as const satisfies Hex;\n\nexport const FCL_P256_VERIFIER =\n  \"0xA86e0054C51E4894D88762a017ECc5E5235f5DBA\" as const satisfies Hex;\n\nexport const P256_OWNER_FACTORY =\n  \"0x349c03Eb61e26528cbf79F5D3Ba071FcA2aE82cB\" as const satisfies Hex;\n\nexport const WEBAUTHN_SIGNER_FACTORY =\n  \"0xF7488fFbe67327ac9f37D5F722d83Fc900852Fbf\" as const satisfies Hex;\n\nexport const GUARD_FACTORY =\n  \"0x35E2B487b682029e363BA7f06fD7392834A83077\" as const satisfies Hex;\n","import type { Hex } from \"viem\";\nimport type { SmartAccount, WebAuthnAccount } from \"viem/account-abstraction\";\nimport { toSafeSmartAccount } from \"permissionless/accounts\";\nimport type { PublicClient, Transport, Chain } from \"viem\";\nimport { SAFE_4337_MODULE_ADDRESS, entryPoint07Address } from \"../constants\";\n\nexport type ToWebAuthnSafeSmartAccountParams = {\n  client: PublicClient<Transport, Chain>;\n  webAuthnAccount: WebAuthnAccount;\n  safeAddress?: Hex;\n  entryPoint?: { address: Hex; version: \"0.7\" };\n  safe4337ModuleAddress?: Hex;\n  safeWebAuthnSharedSignerAddress?: Hex;\n};\n\n/**\n * Creates a Safe SmartAccount that signs UserOperations with a WebAuthn passkey.\n */\nexport async function toWebAuthnSafeSmartAccount(\n  params: ToWebAuthnSafeSmartAccountParams,\n): Promise<SmartAccount> {\n  const safe4337ModuleAddress = params.safe4337ModuleAddress ?? SAFE_4337_MODULE_ADDRESS;\n  const entryPointAddress = params.entryPoint?.address ?? entryPoint07Address;\n\n  const baseAccount = await toSafeSmartAccount({\n    client: params.client,\n    owners: [params.webAuthnAccount],\n    version: \"1.5.0\",\n    ...(params.safeAddress ? { address: params.safeAddress } : {}),\n    entryPoint: {\n      address: entryPointAddress,\n      version: \"0.7\",\n    },\n    safe4337ModuleAddress,\n    ...(params.safeWebAuthnSharedSignerAddress\n      ? { safeWebAuthnSharedSignerAddress: params.safeWebAuthnSharedSignerAddress }\n      : {}),\n  });\n\n  return baseAccount as SmartAccount;\n}\n","/// <reference lib=\"dom\" />\nimport type { Hex } from \"viem\";\n\nfunction bufferToHex(buffer: ArrayBuffer): string {\n  return Array.from(new Uint8Array(buffer))\n    .map((b) => b.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n}\n\nfunction base64urlToHex(base64url: string): string {\n  const base64 = base64url.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  const binary = atob(base64);\n  return Array.from(binary, (c) => c.charCodeAt(0).toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/**\n * Extracts P256 public key coordinates from a WebAuthn credential.\n *\n * Replaces `extractPasskeyData` from `@safe-global/protocol-kit`.\n * Uses only the Web Crypto API (no external dependencies).\n */\nexport async function extractPasskeyCoordinates(\n  credential: PublicKeyCredential,\n): Promise<{ rawId: string; x: Hex; y: Hex }> {\n  const rawId = bufferToHex(credential.rawId);\n  const response = credential.response as AuthenticatorAttestationResponse;\n  const publicKey = response.getPublicKey();\n  if (!publicKey) throw new Error(\"Failed to extract public key from credential\");\n\n  const key = await crypto.subtle.importKey(\n    \"spki\",\n    publicKey,\n    { name: \"ECDSA\", namedCurve: \"P-256\" },\n    true,\n    [\"verify\"],\n  );\n  const jwk = await crypto.subtle.exportKey(\"jwk\", key);\n  if (!jwk.x || !jwk.y) throw new Error(\"Missing coordinates in JWK\");\n\n  return {\n    rawId,\n    x: (\"0x\" + base64urlToHex(jwk.x)) as Hex,\n    y: (\"0x\" + base64urlToHex(jwk.y)) as Hex,\n  };\n}\n","import {\n  concat,\n  encodeFunctionData,\n  pad,\n  type Chain,\n  type Hex,\n  type PublicClient,\n  type Transport,\n} from \"viem\";\nimport { toSmartAccount, type SmartAccount } from \"viem/account-abstraction\";\nimport { entryPoint07Address } from \"../constants\";\nimport { computeUserOpHash, type PackedUserOp } from \"../exact/client/utils/userOpHash\";\n\nconst P256_EXECUTOR_MODULE_ABI = [\n  {\n    inputs: [\n      { name: \"to\", type: \"address\" },\n      { name: \"value\", type: \"uint256\" },\n      { name: \"data\", type: \"bytes\" },\n      { name: \"operation\", type: \"uint8\" },\n    ],\n    name: \"execute\",\n    outputs: [],\n    stateMutability: \"nonpayable\",\n    type: \"function\",\n  },\n] as const;\n\nconst ENTRYPOINT_07_ABI = [\n  {\n    name: \"getNonce\",\n    type: \"function\",\n    inputs: [\n      { name: \"sender\", type: \"address\" },\n      { name: \"key\", type: \"uint192\" },\n    ],\n    outputs: [{ name: \"nonce\", type: \"uint256\" }],\n    stateMutability: \"view\",\n  },\n] as const;\n\nexport interface ToP256ExecutorModuleAccountParams {\n  client: PublicClient<Transport, Chain>;\n  moduleAddress: Hex;\n  sign: (hash: Hex) => Promise<{ r: Hex; s: Hex }>;\n  entryPointAddress?: Hex;\n}\n\n/**\n * Creates a viem SmartAccount adapter for P256ExecutorModule.\n *\n * The module is the UserOp sender (not the Safe). CallData encodes\n * `module.execute(to, value, data, 0)` and the signature is raw\n * P256 `r || s` (64 bytes).\n *\n * Use this with `ExactEvmSchemeERC4337` to handle ERC-4337 payments\n * where the P256ExecutorModule is the account.\n */\nexport async function toP256ExecutorModuleAccount(\n  params: ToP256ExecutorModuleAccountParams,\n): Promise<SmartAccount> {\n  const { client, moduleAddress, sign } = params;\n  const entryPoint = params.entryPointAddress ?? entryPoint07Address;\n\n  return toSmartAccount({\n    client,\n    entryPoint: {\n      abi: ENTRYPOINT_07_ABI,\n      address: entryPoint,\n      version: \"0.7\",\n    },\n\n    async getAddress() {\n      return moduleAddress;\n    },\n\n    async encodeCalls(calls) {\n      if (calls.length !== 1) {\n        throw new Error(\n          \"P256ExecutorModule does not support batch calls. \" +\n            `Received ${calls.length} calls, expected 1.`,\n        );\n      }\n      const { to, value, data } = calls[0];\n      return encodeFunctionData({\n        abi: P256_EXECUTOR_MODULE_ABI,\n        functionName: \"execute\",\n        args: [to, value ?? 0n, data ?? \"0x\", 0],\n      });\n    },\n\n    async getNonce() {\n      return await client.readContract({\n        address: entryPoint,\n        abi: ENTRYPOINT_07_ABI,\n        functionName: \"getNonce\",\n        args: [moduleAddress, 0n],\n      }) as bigint;\n    },\n\n    async getFactoryArgs() {\n      return { factory: undefined, factoryData: undefined };\n    },\n\n    async getStubSignature() {\n      return (\"0x\" + \"ff\".repeat(64)) as Hex;\n    },\n\n    async signMessage() {\n      throw new Error(\"P256ExecutorModule does not support signMessage\");\n    },\n\n    async signTypedData() {\n      throw new Error(\"P256ExecutorModule does not support signTypedData\");\n    },\n\n    async signUserOperation(userOperation) {\n      const chainId = client.chain.id;\n\n      const factory = userOperation.factory as Hex | undefined;\n      const packedUserOp: PackedUserOp = {\n        sender: userOperation.sender as Hex,\n        nonce: userOperation.nonce,\n        initCode: factory\n          ? concat([factory, (userOperation.factoryData ?? \"0x\") as Hex])\n          : \"0x\",\n        callData: userOperation.callData,\n        accountGasLimits: packAccountGasLimits(\n          userOperation.verificationGasLimit,\n          userOperation.callGasLimit,\n        ),\n        preVerificationGas: userOperation.preVerificationGas,\n        gasFees: packGasFees(\n          userOperation.maxPriorityFeePerGas,\n          userOperation.maxFeePerGas,\n        ),\n        paymasterAndData: buildPaymasterAndData(userOperation),\n      };\n\n      const hash = computeUserOpHash(packedUserOp, chainId, entryPoint);\n      const { r, s } = await sign(hash);\n      return concat([pad(r, { size: 32 }), pad(s, { size: 32 })]);\n    },\n  });\n}\n\nfunction packAccountGasLimits(\n  verificationGasLimit: bigint,\n  callGasLimit: bigint,\n): Hex {\n  const packed = (verificationGasLimit << 128n) | callGasLimit;\n  return pad(`0x${packed.toString(16)}` as Hex, { size: 32 });\n}\n\nfunction packGasFees(\n  maxPriorityFeePerGas: bigint,\n  maxFeePerGas: bigint,\n): Hex {\n  const packed = (maxPriorityFeePerGas << 128n) | maxFeePerGas;\n  return pad(`0x${packed.toString(16)}` as Hex, { size: 32 });\n}\n\nfunction buildPaymasterAndData(userOp: {\n  paymaster?: Hex;\n  paymasterData?: Hex;\n  paymasterVerificationGasLimit?: bigint;\n  paymasterPostOpGasLimit?: bigint;\n}): Hex {\n  if (!userOp.paymaster) return \"0x\";\n  const pmGas = packAccountGasLimits(\n    userOp.paymasterVerificationGasLimit ?? 0n,\n    userOp.paymasterPostOpGasLimit ?? 0n,\n  );\n  return concat([userOp.paymaster, pmGas, userOp.paymasterData ?? \"0x\"]);\n}\n","import { encodeAbiParameters, keccak256, type Hex } from \"viem\";\nimport { entryPoint07Address } from \"../../../constants\";\n\nexport interface PackedUserOp {\n  sender: Hex;\n  nonce: bigint;\n  initCode: Hex;\n  callData: Hex;\n  accountGasLimits: Hex;\n  preVerificationGas: bigint;\n  gasFees: Hex;\n  paymasterAndData: Hex;\n}\n\n/**\n * Compute the UserOperation hash for EntryPoint v0.7 packed format.\n *\n * The hash is computed as:\n *   keccak256(abi.encode(keccak256(pack(userOp)), entryPoint, chainId))\n *\n * where pack(userOp) encodes the UserOp fields with initCode, callData,\n * and paymasterAndData replaced by their keccak256 hashes.\n */\nexport function computeUserOpHash(\n  packedUserOp: PackedUserOp,\n  chainId: number,\n  entrypoint: Hex = entryPoint07Address,\n): Hex {\n  const encoded = encodeAbiParameters(\n    [\n      { type: \"address\" },\n      { type: \"uint256\" },\n      { type: \"bytes32\" },\n      { type: \"bytes32\" },\n      { type: \"bytes32\" },\n      { type: \"uint256\" },\n      { type: \"bytes32\" },\n      { type: \"bytes32\" },\n    ],\n    [\n      packedUserOp.sender,\n      packedUserOp.nonce,\n      keccak256(packedUserOp.initCode),\n      keccak256(packedUserOp.callData),\n      packedUserOp.accountGasLimits,\n      packedUserOp.preVerificationGas,\n      packedUserOp.gasFees,\n      keccak256(packedUserOp.paymasterAndData),\n    ],\n  );\n\n  const innerHash = keccak256(encoded);\n\n  return keccak256(\n    encodeAbiParameters(\n      [{ type: \"bytes32\" }, { type: \"address\" }, { type: \"uint256\" }],\n      [innerHash, entrypoint, BigInt(chainId)],\n    ),\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,4BAAAA;AAAA,EAAA;AAAA;AAAA;;;ACCA,IAAAC,eAAwD;AAExD,IAAAC,mBAAuE;;;ACFvE,IAAAC,eAAmC;AAEnC,sBAAmC;;;ACHnC,kBAA6C;AAmBtC,SAAS,wBAAwB,cAAmB,eAAyB;AAElF,QAAM,QAAI,iBAAI,cAAc,EAAE,MAAM,GAAG,CAAC;AAGxC,QAAM,gBAAgB;AACtB,QAAM,QAAI,qBAAI,mBAAM,aAAa,GAAG,EAAE,MAAM,GAAG,CAAC;AAGhD,QAAM,IAAI;AAGV,QAAM,kBAAkB,cAAc,SAAS,KAAK;AACpD,QAAM,aAAS,qBAAI,mBAAM,cAAc,GAAG,EAAE,MAAM,GAAG,CAAC;AAEtD,aAAO,oBAAO,CAAC,GAAG,GAAG,GAAG,QAAQ,aAAa,CAAC;AAChD;;;ACnCA,IAAAC,eAOO;;;ACNP,iCAAoC;AAI7B,IAAM,2BACX;AAEK,IAAM,8BACX;;;ADCF,IAAM,gBAAgB;AAAA,EACpB,QAAQ;AAAA,IACN,EAAE,MAAM,WAAW,MAAM,OAAO;AAAA,IAChC,EAAE,MAAM,WAAW,MAAM,QAAQ;AAAA,IACjC,EAAE,MAAM,SAAS,MAAM,WAAW;AAAA,IAClC,EAAE,MAAM,SAAS,MAAM,WAAW;AAAA,IAClC,EAAE,MAAM,WAAW,MAAM,uBAAuB;AAAA,IAChD,EAAE,MAAM,WAAW,MAAM,eAAe;AAAA,IACxC,EAAE,MAAM,WAAW,MAAM,qBAAqB;AAAA,IAC9C,EAAE,MAAM,WAAW,MAAM,uBAAuB;AAAA,IAChD,EAAE,MAAM,WAAW,MAAM,eAAe;AAAA,IACxC,EAAE,MAAM,SAAS,MAAM,mBAAmB;AAAA,IAC1C,EAAE,MAAM,UAAU,MAAM,aAAa;AAAA,IACrC,EAAE,MAAM,UAAU,MAAM,aAAa;AAAA,IACrC,EAAE,MAAM,WAAW,MAAM,aAAa;AAAA,EACxC;AACF;AA0BO,SAAS,kBACd,QACA,SACA,wBAA6B,0BAC7B,oBAAyB,gDACpB;AAEL,QAAM,WACJ,OAAO,eAAW,wBAAU,OAAO,OAAO,QACtC,qBAAO,CAAC,OAAO,SAAU,OAAO,eAAe,IAAY,CAAC,IAC3D;AAGP,MAAI,mBAAwB;AAC5B,MAAI,OAAO,iBAAa,wBAAU,OAAO,SAAS,GAAG;AACnD,2BAAmB,qBAAO;AAAA,MACxB,OAAO;AAAA,UACP,sBAAI,oBAAM,OAAO,iCAAiC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC;AAAA,UACnE,sBAAI,oBAAM,OAAO,2BAA2B,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC;AAAA,MAC5D,OAAO,iBAAiB;AAAA,IAC3B,CAAC;AAAA,EACH;AAEA,aAAO,4BAAc;AAAA,IACnB,QAAQ;AAAA,MACN;AAAA,MACA,mBAAmB;AAAA,IACrB;AAAA,IACA,OAAO;AAAA,IACP,aAAa;AAAA,IACb,SAAS;AAAA,MACP,MAAM,OAAO;AAAA,MACb,OAAO,OAAO;AAAA,MACd;AAAA,MACA,UAAU,OAAO;AAAA,MACjB,sBAAsB,OAAO;AAAA,MAC7B,cAAc,OAAO;AAAA,MACrB,oBAAoB,OAAO;AAAA,MAC3B,sBAAsB,OAAO;AAAA,MAC7B,cAAc,OAAO;AAAA,MACrB;AAAA,MACA,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,YAAY;AAAA,IACd;AAAA,EACF,CAAC;AACH;;;AF/EA,SAAS,uBAAuB,SAA4B;AAC1D,QAAM,iBAAiB,MAAM;AAC3B,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AAEA,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,aAAa;AAAA,IACb,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,MAAM;AAAA,EACR;AACF;AAqCA,eAAsB,uBACpB,QACuB;AACvB,QAAM,wBAAwB,OAAO,yBAAyB;AAC9D,QAAM,oBACJ,OAAO,YAAY,WAAW;AAEhC,QAAM,YAAY,uBAAuB,OAAO,WAAW,gBAAgB;AAE3E,QAAM,cAAc,UAAM,oCAAmB;AAAA,IAC3C,QAAQ,OAAO;AAAA,IACf,QAAQ,CAAC,SAAS;AAAA,IAClB,SAAS;AAAA,IACT,GAAI,OAAO,cAAc,EAAE,SAAS,OAAO,YAAY,IAAI,CAAC;AAAA,IAC5D,YAAY;AAAA,MACV,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,UAAU,MAAM,OAAO,OAAO,WAAW;AAE/C,SAAO;AAAA,IACL,GAAG;AAAA;AAAA,IAEH,MAAM,kBAAkB,QAAa;AACnC,YAAM,KAAK;AAEX,YAAM,aAA+B;AAAA,QACnC,QAAQ,GAAG;AAAA,QACX,OAAO,OAAO,GAAG,KAAe;AAAA,QAChC,SAAU,GAAG,WAAmB;AAAA,QAChC,aAAc,GAAG,eAAuB;AAAA,QACxC,UAAU,GAAG;AAAA,QACb,sBAAsB,OAAO,GAAG,oBAA8B;AAAA,QAC9D,cAAc,OAAO,GAAG,YAAsB;AAAA,QAC9C,oBAAoB,OAAO,GAAG,kBAA4B;AAAA,QAC1D,sBAAsB,OAAO,GAAG,oBAA8B;AAAA,QAC9D,cAAc,OAAO,GAAG,YAAsB;AAAA,QAC9C,WAAY,GAAG,aAAqB;AAAA,QACpC,+BAA+B,GAAG,gCAC9B,OAAO,GAAG,6BAAuC,IACjD;AAAA,QACJ,yBAAyB,GAAG,0BACxB,OAAO,GAAG,uBAAiC,IAC3C;AAAA,QACJ,eAAgB,GAAG,iBAAyB;AAAA,MAC9C;AACA,YAAM,aAAa;AAAA,QACjB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAGA,YAAM,EAAE,GAAG,EAAE,IAAI,MAAM,OAAO,WAAW,KAAK,UAAU;AAGxD,YAAM,cAAU,kBAAI,GAAU,EAAE,MAAM,GAAG,CAAC;AAC1C,YAAM,cAAU,kBAAI,GAAU,EAAE,MAAM,GAAG,CAAC;AAC1C,YAAM,oBAAgB,qBAAO,CAAC,SAAS,OAAO,CAAC;AAG/C,YAAM,cAAc;AAAA,QAClB,OAAO,WAAW;AAAA,QAClB;AAAA,MACF;AAGA,YAAM,iBAAa,sBAAI,oBAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAC5C,YAAM,iBAAa,sBAAI,oBAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAE5C,iBAAO,qBAAO,CAAC,YAAY,YAAY,WAAW,CAAC;AAAA,IACrD;AAAA,EACF;AACF;;;AIlJA,IAAAC,mBAAmC;AAgBnC,eAAsB,2BACpB,QACuB;AACvB,QAAM,wBAAwB,OAAO,yBAAyB;AAC9D,QAAM,oBAAoB,OAAO,YAAY,WAAW;AAExD,QAAM,cAAc,UAAM,qCAAmB;AAAA,IAC3C,QAAQ,OAAO;AAAA,IACf,QAAQ,CAAC,OAAO,eAAe;AAAA,IAC/B,SAAS;AAAA,IACT,GAAI,OAAO,cAAc,EAAE,SAAS,OAAO,YAAY,IAAI,CAAC;AAAA,IAC5D,YAAY;AAAA,MACV,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AAAA,IACA;AAAA,IACA,GAAI,OAAO,kCACP,EAAE,iCAAiC,OAAO,gCAAgC,IAC1E,CAAC;AAAA,EACP,CAAC;AAED,SAAO;AACT;;;ALUA,eAAsBC,oBACpB,QACuB;AACvB,QAAM,EAAE,aAAa,IAAI;AAEzB,UAAQ,aAAa,MAAM;AAAA,IACzB,KAAK;AACH,aAAO,uBAAuB;AAAA,QAC5B,QAAQ,OAAO;AAAA,QACf,YAAY,aAAa;AAAA,QACzB,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,uBAAuB,OAAO;AAAA,MAChC,CAAC;AAAA,IAEH,KAAK;AACH,aAAO,2BAA2B;AAAA,QAChC,QAAQ,OAAO;AAAA,QACf,iBAAiB,aAAa;AAAA,QAC9B,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,uBAAuB,OAAO;AAAA,QAC9B,iCAAiC,aAAa;AAAA,MAChD,CAAC;AAAA,IAEH,KAAK;AACH,aAAO,wBAAwB,QAAQ,aAAa,SAAS,aAAa,aAAa,CAAC;AAAA,EAC5F;AACF;AAEA,SAASC,wBAAuB,SAA4B;AAC1D,QAAM,iBAAiB,MAAM;AAC3B,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AAEA,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,aAAa;AAAA,IACb,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,MAAM;AAAA,EACR;AACF;AASA,eAAe,wBACb,OACA,MACc;AACd,QAAM,EAAE,WAAW,eAAe,SAAS,IAAI,MAAM,MAAM,KAAK,EAAE,KAAK,CAAC;AAGxE,QAAM,WAAW,cAAc,MAAM,CAAC;AACtC,QAAM,IAAI,OAAO,OAAO,SAAS,MAAM,GAAG,EAAE,CAAC;AAC7C,QAAM,IAAI,OAAO,OAAO,SAAS,MAAM,IAAI,GAAG,CAAC;AAG/C,QAAM,QAAQ,SAAS,eAAe;AAAA,IACpC;AAAA,EACF;AACA,QAAM,mBAAmB,QAAQ,MAAM,CAAC,IAAI;AAE5C,aAAO;AAAA,IACL;AAAA,MACE,EAAE,MAAM,qBAAqB,MAAM,QAAQ;AAAA,MAC3C,EAAE,MAAM,oBAAoB,MAAM,SAAS;AAAA,MAC3C,EAAE,MAAM,aAAa,MAAM,aAAa;AAAA,IAC1C;AAAA,IACA,CAAC,SAAS,mBAAmB,kBAAkB,CAAC,GAAG,CAAC,CAAC;AAAA,EACvD;AACF;AAEA,eAAe,wBACb,QACA,SACA,WACuB;AACvB,MAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,UAAU;AACtC,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAGA,MAAI,QAAQ,QAAQ,CAAC,QAAQ,UAAU;AACrC,WAAO,uBAAuB;AAAA,MAC5B,QAAQ,OAAO;AAAA,MACf,YAAY,QAAQ;AAAA,MACpB,aAAa,OAAO;AAAA,MACpB,YAAY,OAAO;AAAA,MACnB,uBAAuB,OAAO;AAAA,IAChC,CAAC;AAAA,EACH;AACA,MAAI,QAAQ,YAAY,CAAC,QAAQ,MAAM;AACrC,UAAM,eAAe,OAAO;AAC5B,UAAM,mBAAmB,aAAa,SAAS,UAC3C,aAAa,kCACb;AACJ,WAAO,2BAA2B;AAAA,MAChC,QAAQ,OAAO;AAAA,MACf,iBAAiB,QAAQ;AAAA,MACzB,aAAa,OAAO;AAAA,MACpB,YAAY,OAAO;AAAA,MACnB,uBAAuB,OAAO;AAAA,MAC9B,iCAAiC;AAAA,IACnC,CAAC;AAAA,EACH;AAGA,QAAM,aAAa,QAAQ;AAC3B,QAAM,kBAAkB,QAAQ;AAEhC,QAAM,wBAAwB,OAAO,yBAAyB;AAC9D,QAAM,oBAAoB,OAAO,YAAY,WAAW;AAExD,QAAM,gBAAgBA,wBAAuB,WAAW,gBAAgB;AAGxE,QAAM,cAAc,UAAM,iBAAAC,oBAAiC;AAAA,IACzD,QAAQ,OAAO;AAAA,IACf,QAAQ,CAAC,eAAe,eAAe;AAAA,IACvC,SAAS;AAAA,IACT,WAAW,OAAO,SAAS;AAAA,IAC3B,GAAI,OAAO,cAAc,EAAE,SAAS,OAAO,YAAY,IAAI,CAAC;AAAA,IAC5D,YAAY;AAAA,MACV,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,UAAU,MAAM,OAAO,OAAO,WAAW;AAE/C,MAAI,aAAa,GAAG;AAClB,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAGA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,uBACP,aACA,YACA,SACA,uBACA,mBACc;AACd,SAAO;AAAA,IACL,GAAG;AAAA;AAAA,IAEH,MAAM,kBAAkB,QAAa;AACnC,YAAM,aAAa;AAAA,QACjB,wBAAwB,MAAM;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM,EAAE,GAAG,EAAE,IAAI,MAAM,WAAW,KAAK,UAAU;AACjD,YAAM,cAAU,kBAAI,GAAU,EAAE,MAAM,GAAG,CAAC;AAC1C,YAAM,cAAU,kBAAI,GAAU,EAAE,MAAM,GAAG,CAAC;AAC1C,YAAM,oBAAgB,qBAAO,CAAC,SAAS,OAAO,CAAC;AAE/C,YAAM,cAAc;AAAA,QAClB,WAAW;AAAA,QACX;AAAA,MACF;AAEA,YAAM,iBAAa,sBAAI,oBAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAC5C,YAAM,iBAAa,sBAAI,oBAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAE5C,iBAAO,qBAAO,CAAC,YAAY,YAAY,WAAW,CAAC;AAAA,IACrD;AAAA,EACF;AACF;AAEA,SAAS,uBACP,aACA,YACA,iBACA,SACA,uBACA,mBACc;AACd,SAAO;AAAA,IACL,GAAG;AAAA;AAAA,IAEH,MAAM,kBAAkB,QAAa;AACnC,YAAM,aAAa;AAAA,QACjB,wBAAwB,MAAM;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAGA,YAAM,EAAE,GAAG,EAAE,IAAI,MAAM,WAAW,KAAK,UAAU;AACjD,YAAM,cAAU,kBAAI,GAAU,EAAE,MAAM,GAAG,CAAC;AAC1C,YAAM,cAAU,kBAAI,GAAU,EAAE,MAAM,GAAG,CAAC;AAC1C,YAAM,wBAAoB,qBAAO,CAAC,SAAS,OAAO,CAAC;AAGnD,YAAM,wBAAwB,MAAM;AAAA,QAClC;AAAA,QACA;AAAA,MACF;AAIA,YAAM,oBAAoB,WAAW,iBAAiB,YAAY;AAClE,YAAM,wBAAwB,4BAA4B,YAAY;AAStE,YAAM,gBAA+B;AAAA,QACnC;AAAA,UACE,SAAS;AAAA,UACT,MAAM;AAAA,UACN,SAAS;AAAA,UACT,eAAe;AAAA,QACjB;AAAA,QACA;AAAA,UACE,SAAS;AAAA,UACT,MAAM;AAAA,UACN,SAAS;AAAA,UACT,eAAe;AAAA,QACjB;AAAA,MACF,EAAE,KAAK,CAAC,GAAG,MAAO,EAAE,UAAU,EAAE,UAAU,KAAK,CAAE;AAEjD,YAAM,kBAAkB,qBAAqB,aAAa;AAE1D,YAAM,iBAAa,sBAAI,oBAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAC5C,YAAM,iBAAa,sBAAI,oBAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAE5C,iBAAO,qBAAO,CAAC,YAAY,YAAY,eAAe,CAAC;AAAA,IACzD;AAAA,EACF;AACF;AAgBA,SAAS,qBACP,SACK;AACL,QAAM,iBAAiB;AACvB,QAAM,kBAAkB,iBAAiB,QAAQ;AAEjD,QAAM,cAAqB,CAAC;AAC5B,QAAM,eAAsB,CAAC;AAC7B,MAAI,gBAAgB;AAEpB,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,SAAS;AAEjB,YAAM,QAAI,kBAAI,MAAM,SAAgB,EAAE,MAAM,GAAG,CAAC;AAChD,YAAM,QAAI,sBAAI,oBAAM,aAAa,GAAG,EAAE,MAAM,GAAG,CAAC;AAChD,YAAM,IAAI;AACV,kBAAY,SAAK,qBAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AAGlC,YAAM,aAAa,MAAM,KAAK,SAAS,KAAK;AAC5C,YAAM,aAAS,sBAAI,oBAAM,SAAS,GAAG,EAAE,MAAM,GAAG,CAAC;AACjD,mBAAa,SAAK,qBAAO,CAAC,QAAQ,MAAM,IAAI,CAAC,CAAC;AAG9C,uBAAiB,KAAK;AAAA,IACxB,OAAO;AAEL,kBAAY,KAAK,MAAM,IAAI;AAAA,IAC7B;AAAA,EACF;AAEA,aAAO,qBAAO,CAAC,GAAG,aAAa,GAAG,YAAY,CAAC;AACjD;AAGA,SAAS,wBAAwB,QAA+B;AAC9D,QAAM,KAAK;AACX,SAAO;AAAA,IACL,QAAQ,GAAG;AAAA,IACX,OAAO,OAAO,GAAG,KAAe;AAAA,IAChC,SAAU,GAAG,WAAmB;AAAA,IAChC,aAAc,GAAG,eAAuB;AAAA,IACxC,UAAU,GAAG;AAAA,IACb,sBAAsB,OAAO,GAAG,oBAA8B;AAAA,IAC9D,cAAc,OAAO,GAAG,YAAsB;AAAA,IAC9C,oBAAoB,OAAO,GAAG,kBAA4B;AAAA,IAC1D,sBAAsB,OAAO,GAAG,oBAA8B;AAAA,IAC9D,cAAc,OAAO,GAAG,YAAsB;AAAA,IAC9C,WAAY,GAAG,aAAqB;AAAA,IACpC,+BAA+B,GAAG,gCAC9B,OAAO,GAAG,6BAAuC,IACjD;AAAA,IACJ,yBAAyB,GAAG,0BACxB,OAAO,GAAG,uBAAiC,IAC3C;AAAA,IACJ,eAAgB,GAAG,iBAAyB;AAAA,EAC9C;AACF;;;AM/XA,SAAS,YAAY,QAA6B;AAChD,SAAO,MAAM,KAAK,IAAI,WAAW,MAAM,CAAC,EACrC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AACZ;AAEA,SAAS,eAAe,WAA2B;AACjD,QAAM,SAAS,UAAU,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC7D,QAAM,SAAS,KAAK,MAAM;AAC1B,SAAO,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACzF;AAQA,eAAsB,0BACpB,YAC4C;AAC5C,QAAM,QAAQ,YAAY,WAAW,KAAK;AAC1C,QAAM,WAAW,WAAW;AAC5B,QAAM,YAAY,SAAS,aAAa;AACxC,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,8CAA8C;AAE9E,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA;AAAA,IACA,EAAE,MAAM,SAAS,YAAY,QAAQ;AAAA,IACrC;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AACA,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,GAAG;AACpD,MAAI,CAAC,IAAI,KAAK,CAAC,IAAI,EAAG,OAAM,IAAI,MAAM,4BAA4B;AAElE,SAAO;AAAA,IACL;AAAA,IACA,GAAI,OAAO,eAAe,IAAI,CAAC;AAAA,IAC/B,GAAI,OAAO,eAAe,IAAI,CAAC;AAAA,EACjC;AACF;;;AC5CA,IAAAC,eAQO;AACP,IAAAC,8BAAkD;;;ACTlD,IAAAC,eAAyD;AAuBlD,SAAS,kBACd,cACA,SACA,aAAkB,gDACb;AACL,QAAM,cAAU;AAAA,IACd;AAAA,MACE,EAAE,MAAM,UAAU;AAAA,MAClB,EAAE,MAAM,UAAU;AAAA,MAClB,EAAE,MAAM,UAAU;AAAA,MAClB,EAAE,MAAM,UAAU;AAAA,MAClB,EAAE,MAAM,UAAU;AAAA,MAClB,EAAE,MAAM,UAAU;AAAA,MAClB,EAAE,MAAM,UAAU;AAAA,MAClB,EAAE,MAAM,UAAU;AAAA,IACpB;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,aAAa;AAAA,UACb,wBAAU,aAAa,QAAQ;AAAA,UAC/B,wBAAU,aAAa,QAAQ;AAAA,MAC/B,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,UACb,wBAAU,aAAa,gBAAgB;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,gBAAY,wBAAU,OAAO;AAEnC,aAAO;AAAA,QACL;AAAA,MACE,CAAC,EAAE,MAAM,UAAU,GAAG,EAAE,MAAM,UAAU,GAAG,EAAE,MAAM,UAAU,CAAC;AAAA,MAC9D,CAAC,WAAW,YAAY,OAAO,OAAO,CAAC;AAAA,IACzC;AAAA,EACF;AACF;;;AD9CA,IAAM,2BAA2B;AAAA,EAC/B;AAAA,IACE,QAAQ;AAAA,MACN,EAAE,MAAM,MAAM,MAAM,UAAU;AAAA,MAC9B,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,MACjC,EAAE,MAAM,QAAQ,MAAM,QAAQ;AAAA,MAC9B,EAAE,MAAM,aAAa,MAAM,QAAQ;AAAA,IACrC;AAAA,IACA,MAAM;AAAA,IACN,SAAS,CAAC;AAAA,IACV,iBAAiB;AAAA,IACjB,MAAM;AAAA,EACR;AACF;AAEA,IAAM,oBAAoB;AAAA,EACxB;AAAA,IACE,MAAM;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,MACN,EAAE,MAAM,UAAU,MAAM,UAAU;AAAA,MAClC,EAAE,MAAM,OAAO,MAAM,UAAU;AAAA,IACjC;AAAA,IACA,SAAS,CAAC,EAAE,MAAM,SAAS,MAAM,UAAU,CAAC;AAAA,IAC5C,iBAAiB;AAAA,EACnB;AACF;AAmBA,eAAsB,4BACpB,QACuB;AACvB,QAAM,EAAE,QAAQ,eAAe,KAAK,IAAI;AACxC,QAAM,aAAa,OAAO,qBAAqB;AAE/C,aAAO,4CAAe;AAAA,IACpB;AAAA,IACA,YAAY;AAAA,MACV,KAAK;AAAA,MACL,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AAAA,IAEA,MAAM,aAAa;AACjB,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,YAAY,OAAO;AACvB,UAAI,MAAM,WAAW,GAAG;AACtB,cAAM,IAAI;AAAA,UACR,6DACc,MAAM,MAAM;AAAA,QAC5B;AAAA,MACF;AACA,YAAM,EAAE,IAAI,OAAO,KAAK,IAAI,MAAM,CAAC;AACnC,iBAAO,iCAAmB;AAAA,QACxB,KAAK;AAAA,QACL,cAAc;AAAA,QACd,MAAM,CAAC,IAAI,SAAS,IAAI,QAAQ,MAAM,CAAC;AAAA,MACzC,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,WAAW;AACf,aAAO,MAAM,OAAO,aAAa;AAAA,QAC/B,SAAS;AAAA,QACT,KAAK;AAAA,QACL,cAAc;AAAA,QACd,MAAM,CAAC,eAAe,EAAE;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,iBAAiB;AACrB,aAAO,EAAE,SAAS,QAAW,aAAa,OAAU;AAAA,IACtD;AAAA,IAEA,MAAM,mBAAmB;AACvB,aAAQ,OAAO,KAAK,OAAO,EAAE;AAAA,IAC/B;AAAA,IAEA,MAAM,cAAc;AAClB,YAAM,IAAI,MAAM,iDAAiD;AAAA,IACnE;AAAA,IAEA,MAAM,gBAAgB;AACpB,YAAM,IAAI,MAAM,mDAAmD;AAAA,IACrE;AAAA,IAEA,MAAM,kBAAkB,eAAe;AACrC,YAAM,UAAU,OAAO,MAAM;AAE7B,YAAM,UAAU,cAAc;AAC9B,YAAM,eAA6B;AAAA,QACjC,QAAQ,cAAc;AAAA,QACtB,OAAO,cAAc;AAAA,QACrB,UAAU,cACN,qBAAO,CAAC,SAAU,cAAc,eAAe,IAAY,CAAC,IAC5D;AAAA,QACJ,UAAU,cAAc;AAAA,QACxB,kBAAkB;AAAA,UAChB,cAAc;AAAA,UACd,cAAc;AAAA,QAChB;AAAA,QACA,oBAAoB,cAAc;AAAA,QAClC,SAAS;AAAA,UACP,cAAc;AAAA,UACd,cAAc;AAAA,QAChB;AAAA,QACA,kBAAkB,sBAAsB,aAAa;AAAA,MACvD;AAEA,YAAM,OAAO,kBAAkB,cAAc,SAAS,UAAU;AAChE,YAAM,EAAE,GAAG,EAAE,IAAI,MAAM,KAAK,IAAI;AAChC,iBAAO,qBAAO,KAAC,kBAAI,GAAG,EAAE,MAAM,GAAG,CAAC,OAAG,kBAAI,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;AAAA,IAC5D;AAAA,EACF,CAAC;AACH;AAEA,SAAS,qBACP,sBACA,cACK;AACL,QAAM,SAAU,wBAAwB,OAAQ;AAChD,aAAO,kBAAI,KAAK,OAAO,SAAS,EAAE,CAAC,IAAW,EAAE,MAAM,GAAG,CAAC;AAC5D;AAEA,SAAS,YACP,sBACA,cACK;AACL,QAAM,SAAU,wBAAwB,OAAQ;AAChD,aAAO,kBAAI,KAAK,OAAO,SAAS,EAAE,CAAC,IAAW,EAAE,MAAM,GAAG,CAAC;AAC5D;AAEA,SAAS,sBAAsB,QAKvB;AACN,MAAI,CAAC,OAAO,UAAW,QAAO;AAC9B,QAAM,QAAQ;AAAA,IACZ,OAAO,iCAAiC;AAAA,IACxC,OAAO,2BAA2B;AAAA,EACpC;AACA,aAAO,qBAAO,CAAC,OAAO,WAAW,OAAO,OAAO,iBAAiB,IAAI,CAAC;AACvE;","names":["toSafeSmartAccount","import_viem","import_accounts","import_viem","import_viem","import_accounts","toSafeSmartAccount","createMockLocalAccount","toPermissionlessSafeSmartAccount","import_viem","import_account_abstraction","import_viem"]}

package/dist/cjs/{constants-Bl5JlK9d.d.ts → constants-C31shlNE.d.ts}

@@ -3,5 +3,6 @@ declare const SAFE_WEBAUTHN_SHARED_SIGNER: "0xfD90FAd33ee8b58f32c00aceEad1358e4A
 declare const FCL_P256_VERIFIER: "0xA86e0054C51E4894D88762a017ECc5E5235f5DBA";
 declare const P256_OWNER_FACTORY: "0x349c03Eb61e26528cbf79F5D3Ba071FcA2aE82cB";
 declare const WEBAUTHN_SIGNER_FACTORY: "0xF7488fFbe67327ac9f37D5F722d83Fc900852Fbf";
+declare const GUARD_FACTORY: "0x35E2B487b682029e363BA7f06fD7392834A83077";
 
-export { FCL_P256_VERIFIER as F, P256_OWNER_FACTORY as P, SAFE_4337_MODULE_ADDRESS as S, WEBAUTHN_SIGNER_FACTORY as W, SAFE_WEBAUTHN_SHARED_SIGNER as a };
+export { FCL_P256_VERIFIER as F, GUARD_FACTORY as G, P256_OWNER_FACTORY as P, SAFE_4337_MODULE_ADDRESS as S, WEBAUTHN_SIGNER_FACTORY as W, SAFE_WEBAUTHN_SHARED_SIGNER as a };

package/dist/cjs/exact/client/index.d.ts

@@ -1,5 +1,5 @@
-import { U as UserOperationSigner, P as PreparedUserOperation } from '../../userOperation-bd50ILnY.js';
-export { B as BundlerClient, f as BundlerClientConfig, j as ERC20_TRANSFER_ABI, b as ExactEvmSchemeEIP3009, c as ExactEvmSchemeEIP3009Config, E as ExactEvmSchemeERC4337, a as ExactEvmSchemeERC4337Config, G as GasEstimate, g as UserOperationCall, V as ViemBundlerClient, h as ViemBundlerClientConfig, i as buildERC20TransferCallData, d as createP256SafeMessageSigner, e as createWebAuthnSafeMessageSigner, u as userOpToJson } from '../../userOperation-bd50ILnY.js';
+import { U as UserOperationSigner, P as PreparedUserOperation } from '../../userOpHash-Bzusu9T7.js';
+export { B as BundlerClient, f as BundlerClientConfig, j as ERC20_TRANSFER_ABI, b as ExactEvmSchemeEIP3009, c as ExactEvmSchemeEIP3009Config, E as ExactEvmSchemeERC4337, a as ExactEvmSchemeERC4337Config, G as GasEstimate, l as PackedUserOp, g as UserOperationCall, V as ViemBundlerClient, h as ViemBundlerClientConfig, i as buildERC20TransferCallData, k as computeUserOpHash, d as createP256SafeMessageSigner, e as createWebAuthnSafeMessageSigner, u as userOpToJson } from '../../userOpHash-Bzusu9T7.js';
 import { SmartAccount } from 'viem/account-abstraction';
 import 'viem';
 import '../../types-Dk5U6Xnw.js';

package/dist/cjs/exact/client/index.js

@@ -37,6 +37,7 @@ __export(client_exports, {
   SafeAccountSigner: () => SafeAccountSigner,
   ViemBundlerClient: () => ViemBundlerClient,
   buildERC20TransferCallData: () => buildERC20TransferCallData,
+  computeUserOpHash: () => computeUserOpHash,
   createP256SafeMessageSigner: () => createP256SafeMessageSigner,
   createWebAuthnSafeMessageSigner: () => createWebAuthnSafeMessageSigner,
   parseAAError: () => parseAAError,
@@ -751,6 +752,45 @@ var ExactEvmSchemeEIP3009 = class {
     };
   }
 };
+
+// src/exact/client/utils/userOpHash.ts
+var import_viem11 = require("viem");
+
+// src/constants.ts
+var import_account_abstraction2 = require("viem/account-abstraction");
+
+// src/exact/client/utils/userOpHash.ts
+function computeUserOpHash(packedUserOp, chainId, entrypoint = import_account_abstraction2.entryPoint07Address) {
+  const encoded = (0, import_viem11.encodeAbiParameters)(
+    [
+      { type: "address" },
+      { type: "uint256" },
+      { type: "bytes32" },
+      { type: "bytes32" },
+      { type: "bytes32" },
+      { type: "uint256" },
+      { type: "bytes32" },
+      { type: "bytes32" }
+    ],
+    [
+      packedUserOp.sender,
+      packedUserOp.nonce,
+      (0, import_viem11.keccak256)(packedUserOp.initCode),
+      (0, import_viem11.keccak256)(packedUserOp.callData),
+      packedUserOp.accountGasLimits,
+      packedUserOp.preVerificationGas,
+      packedUserOp.gasFees,
+      (0, import_viem11.keccak256)(packedUserOp.paymasterAndData)
+    ]
+  );
+  const innerHash = (0, import_viem11.keccak256)(encoded);
+  return (0, import_viem11.keccak256)(
+    (0, import_viem11.encodeAbiParameters)(
+      [{ type: "bytes32" }, { type: "address" }, { type: "uint256" }],
+      [innerHash, entrypoint, BigInt(chainId)]
+    )
+  );
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ERC20_TRANSFER_ABI,
@@ -760,6 +800,7 @@ var ExactEvmSchemeEIP3009 = class {
   SafeAccountSigner,
   ViemBundlerClient,
   buildERC20TransferCallData,
+  computeUserOpHash,
   createP256SafeMessageSigner,
   createWebAuthnSafeMessageSigner,
   parseAAError,