@kasufinance/kasu-sdk 2.8.0 → 2.10.0

package/dist/domain/batch-proof.d.ts

@@ -0,0 +1,210 @@
+import { BigNumber, BigNumberish } from 'ethers';
+/**
+ * The money-path checks around an atomic, sponsored deposit batch — the
+ * `approve + requestDepositWithKyc` pair `DepositFlow` hands its
+ * `depositBatch` port.
+ *
+ * Two questions, both PURE:
+ *
+ * 1. Before anything is signed: is this batch exactly the deposit this run
+ *    asked for? (`validateDepositBatchCalls`)
+ * 2. After it is mined: did THIS receipt deposit THIS amount, for THIS
+ *    lender, into THIS tranche? (`proveDepositInReceipt`)
+ *
+ * Neither knows a relay, a wallet vendor or a URL; the app's submitter calls
+ * them.
+ */
+/**
+ * ERC-4337 EntryPoint v0.7 — the contract a bundler calls `handleOps` on. The
+ * proof reads the user operation's outcome from ITS events, and from no other
+ * contract's.
+ */
+export declare const ENTRY_POINT_V07 = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
+/** One call of a batch, as a submitter receives it. */
+export interface DepositBatchCall {
+    to: string;
+    data: string;
+    /** Native value. Absent or zero — neither call may send the native token. */
+    value?: BigNumberish;
+}
+/** What the run asked for. Every field is pinned on the batch. */
+export interface DepositBatchExpectation {
+    /** The ERC-20 the deposit is paid in — the approval's target. */
+    stableAsset: string;
+    /** The contract approved AND called: the chain's `LendingPoolManager`. */
+    spender: string;
+    poolId: string;
+    trancheId: string;
+    /** The run's amount, in BASE units — approved and deposited, exactly. */
+    amount: BigNumberish;
+    /**
+     * The run's fixed-term config (`'0'` = variable). REQUIRED: a batch that
+     * locks the deposit into another term — or unlocks a fixed-term run into
+     * variable — is a different deposit, and `DepositFlow` always carries the
+     * value, so there is no consumer that genuinely lacks it.
+     */
+    fixedTermConfigId: BigNumberish;
+}
+export interface ValidatedDepositBatch {
+    /** The tranche the deposit goes into — what the receipt proof matches. */
+    tranche: string;
+    /** The exact amount approved and deposited, in base units. */
+    amount: BigNumber;
+}
+/**
+ * What `validateDepositBatchCalls` throws. `code` says which pin failed; the
+ * message names no party, so a wallet-rejection classifier can never read it
+ * as something the lender did.
+ */
+export declare class DepositBatchMismatchError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+/**
+ * Pin a deposit batch to the run that produced it — PURE; throws a
+ * `DepositBatchMismatchError` on ANY deviation, before the lender's key signs
+ * anything.
+ *
+ * The batch must be exactly two calls, in this order, with no native value:
+ *
+ * 0. `stableAsset.approve(spender, A)`;
+ * 1. `spender.requestDepositWithKyc(poolId, trancheId, A, '0x', fixedTermConfigId, …)`;
+ *
+ * with `A` the run's own amount in BOTH — never more, never unlimited (house
+ * rule: exact-amount approvals) — the run's own fixed-term config, each call
+ * the canonical ABI encoding of its arguments, and no swap data. The deposit
+ * data and KYC signature are not pinned here: they are signatures the
+ * contract and the backend verify.
+ *
+ * This is the client's half; a relaying backend checks the same shape again.
+ */
+export declare function validateDepositBatchCalls(calls: readonly DepositBatchCall[], expected: DepositBatchExpectation): ValidatedDepositBatch;
+/** A mined log, as an ethers (or any) receipt carries it. */
+export interface ReceiptLog {
+    address: string;
+    topics: readonly string[];
+    data: string;
+}
+/** The two receipt fields the proof reads. An ethers v5 receipt fits. */
+export interface ReceiptLike {
+    logs: readonly ReceiptLog[];
+    blockNumber: number;
+}
+export interface DepositProofExpectation {
+    /** The lender — the user operation's `sender`, and the deposit's `user`. */
+    lender: string;
+    tranche: string;
+    /** The exact amount deposited, in base units. */
+    amount: BigNumberish;
+    /**
+     * The user operation hash, when the submitter knows it. With it, only
+     * THAT operation counts; without it, the lender's ONLY operation in the
+     * bundle does — two of them without a hash is `ambiguous-operation`.
+     */
+    userOperationHash?: string | null;
+    /** Defaults to `ENTRY_POINT_V07`. */
+    entryPoint?: string;
+    /**
+     * The strategy's pending pool. When supplied, a `DepositRequested` counts
+     * only if THAT contract emitted it.
+     */
+    pendingPool?: string;
+}
+export type DepositProof = 
+/** This receipt shows this lender's deposit of this amount, in this tranche. */
+{
+    kind: 'deposited';
+    dNftId: BigNumber;
+    blockNumber: number;
+}
+/**
+ * The user operation ran and reverted — the account rolled both calls
+ * back, nothing was deposited. `revertError` is the protocol error it
+ * named, or `''`.
+ */
+ | {
+    kind: 'reverted';
+    revertError: string;
+}
+/** The receipt does not show this deposit. NEVER a success, never a failure. */
+ | {
+    kind: 'unproven';
+    reason: 'no-user-operation' | 'ambiguous-operation' | 'no-deposit-requested' | 'malformed-receipt';
+};
+/**
+ * Did THIS receipt deposit for THIS lender? — PURE.
+ *
+ * A sponsored batch lands as a bundler's `handleOps` transaction, and that
+ * transaction's `status` is success even when the user operation inside it
+ * reverted: the EntryPoint catches the revert, the account rolls back both
+ * calls, nothing is deposited. So `status` decides NOTHING. What does:
+ *
+ *  1. The EntryPoint's `UserOperationEvent` for OUR operation — emitted BY
+ *     the EntryPoint, `sender` = lender, and `userOpHash` = the known hash
+ *     when there is one.
+ *  2. Its `success` flag. `false` → `reverted`, naming the protocol error
+ *     from the matching `UserOperationRevertReason` when it decodes.
+ *  3. A `DepositRequested` with `user` = lender, `tranche` = the run's and
+ *     `amount` = the run's, INSIDE our operation's execution: the logs after
+ *     the previous operation's event (or `BeforeExecution`, which precedes
+ *     the first) and before ours. A deposit from another operation in the
+ *     same bundle does not count, and neither does one emitted by a contract
+ *     that is not the pending pool, when the pending pool is known.
+ *
+ * Anything short of all three is `unproven`, which a consumer must treat as
+ * PENDING — the money may have moved — and never as a failure.
+ */
+export declare function proveDepositInReceipt(receipt: ReceiptLike, expected: DepositProofExpectation): DepositProof;
+export interface UserOperationProofExpectation {
+    /** The account that sent the operation — the lender's own wallet. */
+    sender: string;
+    /**
+     * The user operation hash, when the submitter knows it. With it, only
+     * THAT operation counts; without it, the sender's ONLY operation in the
+     * bundle does — two of them without a hash is `ambiguous-operation`.
+     */
+    userOperationHash?: string | null;
+    /** Defaults to `ENTRY_POINT_V07`. */
+    entryPoint?: string;
+}
+export type UserOperationProof = 
+/** The sender's operation ran and SUCCEEDED: every call in it executed. */
+{
+    kind: 'executed';
+    blockNumber: number;
+}
+/**
+ * The operation ran and reverted — the account rolled its calls back.
+ * `revertError` is the protocol error it named, or `''`.
+ */
+ | {
+    kind: 'reverted';
+    revertError: string;
+}
+/**
+ * The receipt does not show the operation — or, with no hash to go by,
+ * shows TWO of the sender's and cannot tell which is ours. NEVER a
+ * success, never a failure.
+ */
+ | {
+    kind: 'unproven';
+    reason: 'no-user-operation' | 'ambiguous-operation' | 'malformed-receipt';
+};
+/**
+ * Did THIS receipt execute the sender's user operation? — PURE. The
+ * single-call sibling of `proveDepositInReceipt`, for a sponsored
+ * `requestWithdrawal`, a cancel or a fixed-term withdrawal: the same
+ * EntryPoint `UserOperationEvent` from the same contract, for the same
+ * sender (and hash, when known), read the same way — the `handleOps`
+ * transaction's own `status` decides NOTHING, because it is a success even
+ * when the operation inside it reverted.
+ *
+ * `executed` needs the operation's `success` flag. A single-call operation
+ * that succeeded executed its one call; there is no event to match beyond
+ * that, so pass the `userOperationHash` whenever the submitter reports one —
+ * without it, the sender's ONLY operation in the bundle is the one read, and a
+ * bundle holding two of theirs is `ambiguous-operation` (pending), never the
+ * first one's verdict: with one succeeded and one reverted, "executed" would
+ * tell the lender their request is queued when it is not.
+ */
+export declare function proveUserOperationInReceipt(receipt: ReceiptLike, expected: UserOperationProofExpectation): UserOperationProof;

package/dist/domain/batch-proof.js

@@ -0,0 +1,384 @@
+import { BigNumber, utils } from 'ethers';
+import { IERC20MetadataAbi__factory } from '../contracts/factories/IERC20MetadataAbi__factory';
+import { ILendingPoolManagerAbi__factory } from '../contracts/factories/ILendingPoolManagerAbi__factory';
+import { decodeRevert } from './revert-errors';
+/**
+ * The money-path checks around an atomic, sponsored deposit batch — the
+ * `approve + requestDepositWithKyc` pair `DepositFlow` hands its
+ * `depositBatch` port.
+ *
+ * Two questions, both PURE:
+ *
+ * 1. Before anything is signed: is this batch exactly the deposit this run
+ *    asked for? (`validateDepositBatchCalls`)
+ * 2. After it is mined: did THIS receipt deposit THIS amount, for THIS
+ *    lender, into THIS tranche? (`proveDepositInReceipt`)
+ *
+ * Neither knows a relay, a wallet vendor or a URL; the app's submitter calls
+ * them.
+ */
+/**
+ * ERC-4337 EntryPoint v0.7 — the contract a bundler calls `handleOps` on. The
+ * proof reads the user operation's outcome from ITS events, and from no other
+ * contract's.
+ */
+export const ENTRY_POINT_V07 = '0x0000000071727De22E5E9d8BAf0edAc6f37da032';
+/** EntryPoint v0.7 events (eth-infinitism `IEntryPoint`). */
+const ENTRY_POINT_EVENTS = new utils.Interface([
+    'event UserOperationEvent(bytes32 indexed userOpHash, address indexed sender, address indexed paymaster, uint256 nonce, bool success, uint256 actualGasCost, uint256 actualGasUsed)',
+    'event UserOperationRevertReason(bytes32 indexed userOpHash, address indexed sender, uint256 nonce, bytes revertReason)',
+    'event BeforeExecution()',
+]);
+/** kasu-contracts `IPendingPool` — emitted by the strategy's pending pool. */
+const PENDING_POOL_EVENTS = new utils.Interface([
+    'event DepositRequested(address indexed user, address indexed tranche, uint256 indexed dNftID, uint256 epochId, uint256 amount)',
+]);
+const USER_OPERATION_EVENT = ENTRY_POINT_EVENTS.getEventTopic('UserOperationEvent');
+const USER_OPERATION_REVERT_REASON = ENTRY_POINT_EVENTS.getEventTopic('UserOperationRevertReason');
+const BEFORE_EXECUTION = ENTRY_POINT_EVENTS.getEventTopic('BeforeExecution');
+const DEPOSIT_REQUESTED = PENDING_POOL_EVENTS.getEventTopic('DepositRequested');
+const ERC20 = IERC20MetadataAbi__factory.createInterface();
+const LENDING_POOL_MANAGER = ILendingPoolManagerAbi__factory.createInterface();
+const ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;
+/**
+ * Case-insensitive address equality; `false` for anything that is not a
+ * 20-byte hex address. Checksums are not enforced — an all-lowercase address
+ * is the subgraph's own spelling.
+ */
+function sameAddress(a, b) {
+    return (typeof a === 'string' &&
+        typeof b === 'string' &&
+        ADDRESS_RE.test(a) &&
+        ADDRESS_RE.test(b) &&
+        a.toLowerCase() === b.toLowerCase());
+}
+function isHexData(value) {
+    return typeof value === 'string' && utils.isHexString(value);
+}
+/**
+ * What `validateDepositBatchCalls` throws. `code` says which pin failed; the
+ * message names no party, so a wallet-rejection classifier can never read it
+ * as something the lender did.
+ */
+export class DepositBatchMismatchError extends Error {
+    constructor(code) {
+        super(`Deposit batch does not match the run (${code})`);
+        this.name = 'DepositBatchMismatchError';
+        this.code = code;
+        Object.setPrototypeOf(this, DepositBatchMismatchError.prototype);
+    }
+}
+function mismatch(code) {
+    throw new DepositBatchMismatchError(code);
+}
+function isCallShape(call) {
+    if (call === null || typeof call !== 'object')
+        return false;
+    const { to, data } = call;
+    return typeof to === 'string' && ADDRESS_RE.test(to) && isHexData(data);
+}
+function isZeroValue(value) {
+    if (value === undefined)
+        return true;
+    try {
+        return BigNumber.from(value).isZero();
+    }
+    catch (_a) {
+        return false;
+    }
+}
+function sameAmount(a, b) {
+    return BigNumber.isBigNumber(a) && a.eq(b);
+}
+/**
+ * Decode `data` as a call to `name` on `iface`, and refuse it unless it is
+ * the CANONICAL encoding of what it decodes to. The ABI decoder tolerates
+ * trailing bytes and non-minimal offsets; a signature over bytes that decode
+ * "the same" but are not the bytes the SDK produced is not a signature over
+ * this run's deposit.
+ */
+function decodeCanonical(iface, name, data, code) {
+    let parsed;
+    try {
+        parsed = iface.parseTransaction({ data });
+    }
+    catch (_a) {
+        return mismatch(code);
+    }
+    if (parsed.name !== name)
+        return mismatch(code);
+    let canonical;
+    try {
+        canonical = iface.encodeFunctionData(parsed.functionFragment, parsed.args);
+    }
+    catch (_b) {
+        return mismatch(code);
+    }
+    if (canonical.toLowerCase() !== data.toLowerCase()) {
+        return mismatch('non-canonical-encoding');
+    }
+    return parsed.args;
+}
+/**
+ * Pin a deposit batch to the run that produced it — PURE; throws a
+ * `DepositBatchMismatchError` on ANY deviation, before the lender's key signs
+ * anything.
+ *
+ * The batch must be exactly two calls, in this order, with no native value:
+ *
+ * 0. `stableAsset.approve(spender, A)`;
+ * 1. `spender.requestDepositWithKyc(poolId, trancheId, A, '0x', fixedTermConfigId, …)`;
+ *
+ * with `A` the run's own amount in BOTH — never more, never unlimited (house
+ * rule: exact-amount approvals) — the run's own fixed-term config, each call
+ * the canonical ABI encoding of its arguments, and no swap data. The deposit
+ * data and KYC signature are not pinned here: they are signatures the
+ * contract and the backend verify.
+ *
+ * This is the client's half; a relaying backend checks the same shape again.
+ */
+export function validateDepositBatchCalls(calls, expected) {
+    const amount = BigNumber.from(expected.amount);
+    if (amount.lte(0))
+        mismatch('non-positive-amount');
+    if (!Array.isArray(calls) || calls.length !== 2)
+        mismatch('call-count');
+    const [approveCall, depositCall] = calls;
+    for (const call of [approveCall, depositCall]) {
+        if (!isCallShape(call))
+            mismatch('malformed-call');
+        if (!isZeroValue(call.value))
+            mismatch('native-value');
+    }
+    // 0 — the approval.
+    if (!sameAddress(approveCall.to, expected.stableAsset)) {
+        mismatch('approve-token');
+    }
+    const [approveSpender, approveAmount] = decodeCanonical(ERC20, 'approve', approveCall.data, 'approve-call');
+    if (!sameAddress(approveSpender, expected.spender)) {
+        mismatch('approve-spender');
+    }
+    // 1 — the deposit.
+    if (!sameAddress(depositCall.to, expected.spender)) {
+        mismatch('deposit-target');
+    }
+    const [pool, tranche, maxAmount, swapData, fixedTermConfigId] = decodeCanonical(LENDING_POOL_MANAGER, 'requestDepositWithKyc', depositCall.data, 'deposit-call');
+    if (!sameAddress(pool, expected.poolId))
+        mismatch('deposit-pool');
+    if (!sameAddress(tranche, expected.trancheId))
+        mismatch('deposit-tranche');
+    if (swapData !== '0x')
+        mismatch('swap-data');
+    if (!sameAmount(fixedTermConfigId, BigNumber.from(expected.fixedTermConfigId))) {
+        mismatch('fixed-term-config');
+    }
+    // EXACT amount, on both calls, equal to the run's.
+    if (!sameAmount(approveAmount, amount))
+        mismatch('approve-amount');
+    if (!sameAmount(maxAmount, amount))
+        mismatch('deposit-amount');
+    return { tranche: tranche, amount };
+}
+/** A log's first topic, lowercased; `undefined` for a log without a topic array. */
+function topicOf(log) {
+    var _a;
+    return Array.isArray(log.topics)
+        ? (_a = log.topics[0]) === null || _a === void 0 ? void 0 : _a.toLowerCase()
+        : undefined;
+}
+function parse(iface, log) {
+    try {
+        return iface.parseLog({ topics: [...log.topics], data: log.data });
+    }
+    catch (_a) {
+        return null;
+    }
+}
+/**
+ * Did THIS receipt deposit for THIS lender? — PURE.
+ *
+ * A sponsored batch lands as a bundler's `handleOps` transaction, and that
+ * transaction's `status` is success even when the user operation inside it
+ * reverted: the EntryPoint catches the revert, the account rolls back both
+ * calls, nothing is deposited. So `status` decides NOTHING. What does:
+ *
+ *  1. The EntryPoint's `UserOperationEvent` for OUR operation — emitted BY
+ *     the EntryPoint, `sender` = lender, and `userOpHash` = the known hash
+ *     when there is one.
+ *  2. Its `success` flag. `false` → `reverted`, naming the protocol error
+ *     from the matching `UserOperationRevertReason` when it decodes.
+ *  3. A `DepositRequested` with `user` = lender, `tranche` = the run's and
+ *     `amount` = the run's, INSIDE our operation's execution: the logs after
+ *     the previous operation's event (or `BeforeExecution`, which precedes
+ *     the first) and before ours. A deposit from another operation in the
+ *     same bundle does not count, and neither does one emitted by a contract
+ *     that is not the pending pool, when the pending pool is known.
+ *
+ * Anything short of all three is `unproven`, which a consumer must treat as
+ * PENDING — the money may have moved — and never as a failure.
+ */
+export function proveDepositInReceipt(receipt, expected) {
+    // Typed as an array, but a receipt is foreign data: check before reading.
+    if (!Array.isArray(receipt.logs)) {
+        return { kind: 'unproven', reason: 'malformed-receipt' };
+    }
+    const amount = BigNumber.from(expected.amount);
+    const op = locateUserOperation(receipt.logs, {
+        sender: expected.lender,
+        userOperationHash: expected.userOperationHash,
+        entryPoint: expected.entryPoint,
+    });
+    if (op === null)
+        return { kind: 'unproven', reason: 'no-user-operation' };
+    if (op === 'ambiguous') {
+        return { kind: 'unproven', reason: 'ambiguous-operation' };
+    }
+    if (!op.success) {
+        return { kind: 'reverted', revertError: op.revertError() };
+    }
+    for (const log of op.window) {
+        if (topicOf(log) !== DEPOSIT_REQUESTED)
+            continue;
+        if (expected.pendingPool !== undefined &&
+            !sameAddress(log.address, expected.pendingPool)) {
+            continue;
+        }
+        const decoded = parse(PENDING_POOL_EVENTS, log);
+        if ((decoded === null || decoded === void 0 ? void 0 : decoded.name) !== 'DepositRequested')
+            continue;
+        if (!sameAddress(decoded.args.user, expected.lender))
+            continue;
+        if (!sameAddress(decoded.args.tranche, expected.tranche))
+            continue;
+        if (!sameAmount(decoded.args.amount, amount))
+            continue;
+        return {
+            kind: 'deposited',
+            dNftId: decoded.args.dNftID,
+            blockNumber: receipt.blockNumber,
+        };
+    }
+    return { kind: 'unproven', reason: 'no-deposit-requested' };
+}
+/**
+ * Did THIS receipt execute the sender's user operation? — PURE. The
+ * single-call sibling of `proveDepositInReceipt`, for a sponsored
+ * `requestWithdrawal`, a cancel or a fixed-term withdrawal: the same
+ * EntryPoint `UserOperationEvent` from the same contract, for the same
+ * sender (and hash, when known), read the same way — the `handleOps`
+ * transaction's own `status` decides NOTHING, because it is a success even
+ * when the operation inside it reverted.
+ *
+ * `executed` needs the operation's `success` flag. A single-call operation
+ * that succeeded executed its one call; there is no event to match beyond
+ * that, so pass the `userOperationHash` whenever the submitter reports one —
+ * without it, the sender's ONLY operation in the bundle is the one read, and a
+ * bundle holding two of theirs is `ambiguous-operation` (pending), never the
+ * first one's verdict: with one succeeded and one reverted, "executed" would
+ * tell the lender their request is queued when it is not.
+ */
+export function proveUserOperationInReceipt(receipt, expected) {
+    if (!Array.isArray(receipt.logs)) {
+        return { kind: 'unproven', reason: 'malformed-receipt' };
+    }
+    const op = locateUserOperation(receipt.logs, expected);
+    if (op === null)
+        return { kind: 'unproven', reason: 'no-user-operation' };
+    if (op === 'ambiguous') {
+        return { kind: 'unproven', reason: 'ambiguous-operation' };
+    }
+    if (!op.success) {
+        return { kind: 'reverted', revertError: op.revertError() };
+    }
+    return { kind: 'executed', blockNumber: receipt.blockNumber };
+}
+/**
+ * The sender's user operation in a `handleOps` receipt — its `success` flag
+ * and its execution window — `null` when the receipt does not show one, or
+ * `'ambiguous'` when no hash was given and it shows more than one of theirs.
+ *
+ *  - The `UserOperationEvent` must be emitted BY the EntryPoint, with
+ *    `sender` = the expected sender and, when one is known, `userOpHash` =
+ *    the expected hash. Without a hash the sender must have exactly ONE
+ *    operation in the bundle: a bundler may pack two of theirs (sequential
+ *    nonces, or parallel nonce keys), and reading the first would attribute
+ *    the other one's verdict to this call.
+ *  - The window is the logs after the previous operation's event (or
+ *    `BeforeExecution`, which precedes the first) and before ours: what our
+ *    operation's calls emitted, and nothing another operation in the same
+ *    bundle did.
+ */
+function locateUserOperation(logs, expected) {
+    var _a, _b, _c;
+    const entryPoint = (_a = expected.entryPoint) !== null && _a !== void 0 ? _a : ENTRY_POINT_V07;
+    const wantedHash = (_c = (_b = expected.userOperationHash) === null || _b === void 0 ? void 0 : _b.toLowerCase()) !== null && _c !== void 0 ? _c : null;
+    const fromEntryPoint = (log) => sameAddress(log.address, entryPoint);
+    let opIndex = -1;
+    let success = false;
+    for (let i = 0; i < logs.length; i += 1) {
+        const log = logs[i];
+        if (!fromEntryPoint(log) || topicOf(log) !== USER_OPERATION_EVENT) {
+            continue;
+        }
+        const decoded = parse(ENTRY_POINT_EVENTS, log);
+        if ((decoded === null || decoded === void 0 ? void 0 : decoded.name) !== 'UserOperationEvent')
+            continue;
+        const userOpHash = String(decoded.args.userOpHash).toLowerCase();
+        if (wantedHash !== null && userOpHash !== wantedHash)
+            continue;
+        if (!sameAddress(decoded.args.sender, expected.sender))
+            continue;
+        // A second operation of this sender, and no hash to tell them apart.
+        if (opIndex >= 0)
+            return 'ambiguous';
+        opIndex = i;
+        success = decoded.args.success === true;
+        // A hash names exactly one operation; without one, keep scanning so
+        // a second operation of the sender is noticed.
+        if (wantedHash !== null)
+            break;
+    }
+    if (opIndex < 0)
+        return null;
+    // Our operation's execution window.
+    let windowStart = 0;
+    for (let i = opIndex - 1; i >= 0; i -= 1) {
+        const log = logs[i];
+        const topic = topicOf(log);
+        if (fromEntryPoint(log) &&
+            (topic === USER_OPERATION_EVENT || topic === BEFORE_EXECUTION)) {
+            windowStart = i + 1;
+            break;
+        }
+    }
+    const window = logs.slice(windowStart, opIndex);
+    return {
+        success,
+        window,
+        revertError: () => revertErrorIn(window, expected.sender, fromEntryPoint),
+    };
+}
+/**
+ * The protocol error a reverted operation named, or `''`. Only a PROTOCOL
+ * error is passed on: an `Error(string)` or an ERC-20 failure is not a name a
+ * consumer has words for.
+ */
+function revertErrorIn(window, lender, fromEntryPoint) {
+    for (const log of window) {
+        if (!fromEntryPoint(log))
+            continue;
+        // Through the same guard as the main loop: a malformed log beside the
+        // revert reason must not turn a DEFINITIVE revert into "pending".
+        if (topicOf(log) !== USER_OPERATION_REVERT_REASON)
+            continue;
+        const decoded = parse(ENTRY_POINT_EVENTS, log);
+        if ((decoded === null || decoded === void 0 ? void 0 : decoded.name) !== 'UserOperationRevertReason')
+            continue;
+        if (!sameAddress(decoded.args.sender, lender))
+            continue;
+        const revert = decodeRevert(decoded.args.revertReason);
+        return (revert === null || revert === void 0 ? void 0 : revert.family) === 'protocol' ? revert.name : '';
+    }
+    return '';
+}
+//# sourceMappingURL=batch-proof.js.map

package/dist/domain/batch-proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-proof.js","sourceRoot":"","sources":["../../src/domain/batch-proof.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAgB,KAAK,EAAE,MAAM,QAAQ,CAAC;AAExD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAE,+BAA+B,EAAE,MAAM,wDAAwD,CAAC;AAEzG,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,4CAA4C,CAAC;AAE5E,6DAA6D;AAC7D,MAAM,kBAAkB,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC;IAC3C,oLAAoL;IACpL,wHAAwH;IACxH,yBAAyB;CAC5B,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC;IAC5C,gIAAgI;CACnI,CAAC,CAAC;AAEH,MAAM,oBAAoB,GACtB,kBAAkB,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;AAC3D,MAAM,4BAA4B,GAAG,kBAAkB,CAAC,aAAa,CACjE,2BAA2B,CAC9B,CAAC;AACF,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;AAC7E,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;AAEhF,MAAM,KAAK,GAAG,0BAA0B,CAAC,eAAe,EAAE,CAAC;AAC3D,MAAM,oBAAoB,GAAG,+BAA+B,CAAC,eAAe,EAAE,CAAC;AAE/E,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAEzC;;;;GAIG;AACH,SAAS,WAAW,CAAC,CAAU,EAAE,CAAU;IACvC,OAAO,CACH,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,KAAK,QAAQ;QACrB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAClB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CACtC,CAAC;AACN,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAwCD;;;;GAIG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAGhD,YAAY,IAAY;QACpB,KAAK,CAAC,yCAAyC,IAAI,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;CACJ;AAED,SAAS,QAAQ,CAAC,IAAY;IAC1B,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAAC,IAAa;IAC9B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAA+B,CAAC;IACrD,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,WAAW,CAAC,KAA+B;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,WAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,CAAU,EAAE,CAAY;IACxC,OAAO,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACpB,KAAsB,EACtB,IAAY,EACZ,IAAY,EACZ,IAAY;IAEZ,IAAI,MAAoC,CAAC;IACzC,IAAI,CAAC;QACD,MAAM,GAAG,KAAK,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,WAAM,CAAC;QACL,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACD,SAAS,GAAG,KAAK,CAAC,kBAAkB,CAChC,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,IAAI,CACd,CAAC;IACN,CAAC;IAAC,WAAM,CAAC;QACL,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACjD,OAAO,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,yBAAyB,CACrC,KAAkC,EAClC,QAAiC;IAEjC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAEnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IACxE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,KAGlC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,WAAW,CAAc,EAAE,CAAC;QACzD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC3D,CAAC;IAED,oBAAoB;IACpB,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,GAAG,eAAe,CACnD,KAAK,EACL,SAAS,EACT,WAAW,CAAC,IAAI,EAChB,cAAc,CACjB,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IAED,mBAAmB;IACnB,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,CAAC,GACzD,eAAe,CACX,oBAAoB,EACpB,uBAAuB,EACvB,WAAW,CAAC,IAAI,EAChB,cAAc,CACjB,CAAC;IACN,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAClE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC;QAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC3E,IAAI,QAAQ,KAAK,IAAI;QAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7C,IACI,CAAC,UAAU,CACP,iBAAiB,EACjB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAC7C,EACH,CAAC;QACC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAClC,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC;QAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACnE,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC;QAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAE/D,OAAO,EAAE,OAAO,EAAE,OAAiB,EAAE,MAAM,EAAE,CAAC;AAClD,CAAC;AA2DD,oFAAoF;AACpF,SAAS,OAAO,CAAC,GAAe;;IAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAiB,CAAC;QACvC,CAAC,CAAC,MAAA,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,0CAAE,WAAW,EAAE;QAC9B,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC;AAED,SAAS,KAAK,CACV,KAAsB,EACtB,GAAe;IAEf,IAAI,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAAC,WAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,qBAAqB,CACjC,OAAoB,EACpB,QAAiC;IAEjC,0EAA0E;IAC1E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAe,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE;QACzC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,UAAU,EAAE,QAAQ,CAAC,UAAU;KAClC,CAAC,CAAC;IACH,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC1E,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/D,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,iBAAiB;YAAE,SAAS;QACjD,IACI,QAAQ,CAAC,WAAW,KAAK,SAAS;YAClC,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,EACjD,CAAC;YACC,SAAS;QACb,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,MAAK,kBAAkB;YAAE,SAAS;QACnD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/D,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACnE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,SAAS;QACvD,OAAO;YACH,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAmB;YACxC,WAAW,EAAE,OAAO,CAAC,WAAW;SACnC,CAAC;IACN,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;AAChE,CAAC;AAoCD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,2BAA2B,CACvC,OAAoB,EACpB,QAAuC;IAEvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAe,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC1E,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,mBAAmB,CACxB,IAA2B,EAC3B,QAAuC;;IASvC,MAAM,UAAU,GAAG,MAAA,QAAQ,CAAC,UAAU,mCAAI,eAAe,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAA,MAAA,QAAQ,CAAC,iBAAiB,0CAAE,WAAW,EAAE,mCAAI,IAAI,CAAC;IACrE,MAAM,cAAc,GAAG,CAAC,GAAe,EAAW,EAAE,CAChD,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAEzC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,oBAAoB,EAAE,CAAC;YAChE,SAAS;QACb,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,MAAK,oBAAoB;YAAE,SAAS;QACrD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACjE,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,UAAU;YAAE,SAAS;QAC/D,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QACjE,qEAAqE;QACrE,IAAI,OAAO,IAAI,CAAC;YAAE,OAAO,WAAW,CAAC;QACrC,OAAO,GAAG,CAAC,CAAC;QACZ,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;QACxC,oEAAoE;QACpE,+CAA+C;QAC/C,IAAI,UAAU,KAAK,IAAI;YAAE,MAAM;IACnC,CAAC;IACD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7B,oCAAoC;IACpC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,OAAO,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IACI,cAAc,CAAC,GAAG,CAAC;YACnB,CAAC,KAAK,KAAK,oBAAoB,IAAI,KAAK,KAAK,gBAAgB,CAAC,EAChE,CAAC;YACC,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC;YACpB,MAAM;QACV,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAChD,OAAO;QACH,OAAO;QACP,MAAM;QACN,WAAW,EAAE,GAAW,EAAE,CACtB,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;KAC7D,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAClB,MAA6B,EAC7B,MAAc,EACd,cAA4C;IAE5C,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,SAAS;QACnC,sEAAsE;QACtE,kEAAkE;QAClE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,4BAA4B;YAAE,SAAS;QAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,MAAK,2BAA2B;YAAE,SAAS;QAC5D,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,SAAS;QACxD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,MAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC"}

package/dist/domain/explorer-urls.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Block-explorer links, built only from a hash or address that has been
+ * checked first.
+ *
+ * Apps used to concatenate `explorer + '/tx/' + hash` from whatever string
+ * they held — a value off a receipt, a query parameter, a backend field. A
+ * string that is not a hash then becomes a link that points somewhere else
+ * (`/tx/../../evil`, `?x=`, a whole other URL). These helpers refuse anything
+ * that is not exactly a 32-byte hash or a 20-byte address, and refuse a base
+ * that is not an `https://` origin, so the only URL they can return is
+ * `<https base>/tx/<hash>` or `<https base>/address/<address>`.
+ *
+ * A URL is a locator, not copy — no words, no locale — so it does not
+ * stretch the domain layer's "numbers and codes only" rule.
+ *
+ * Pure: no network, no environment. They take any object with a
+ * `blockExplorerUrl` — a `CHAIN_CONFIGS` entry, or a custom one.
+ */
+/** The one field these helpers read from a chain config. */
+export interface ExplorerConfig {
+    blockExplorerUrl: string;
+}
+/**
+ * `<blockExplorerUrl>/tx/<txHash>`. Throws unless `txHash` is exactly `0x`
+ * followed by 64 hex digits.
+ */
+export declare function explorerTxUrl(config: ExplorerConfig, txHash: string): string;
+/**
+ * `<blockExplorerUrl>/address/<address>`, the address as given. Throws unless
+ * `address` is `0x` followed by 40 hex digits with a valid checksum when it
+ * is mixed-case (all-lower and all-upper carry no checksum and are accepted).
+ */
+export declare function explorerAddressUrl(config: ExplorerConfig, address: string): string;