@keelcodes/policy 0.1.0

package/dist/bounded.js

@@ -0,0 +1,341 @@
+import { encodeAbiParameters, getAddress, isAddress, keccak256 } from 'viem';
+import { EnvelopeError, PolicyError } from './errors.js';
+// ============================================================================
+// ERC-8312 — Bounded Agent Actions (off-chain mirror).
+//
+// ERC-8312 defines a narrow on-chain *envelope*: a principal, an immutable
+// capability commitment (`capabilityRoot`), a mutable aggregate-state
+// commitment (`cursorRoot`), an expiry and a lifecycle status. The standard is
+// deliberately explicit that the interface does **accounting, not enforcement**
+// ("counting ≠ enforcing"): non-bypassability is a property of the *substrate*
+// that owns the assets or gates the account's only execution path.
+//
+// This module is the off-chain half of Keel's substrate: it normalises and
+// commits a capability, commits cursor state, applies the budget invariant
+// `spent <= cap`, models the aggregate (delegated) profile's conservation rule,
+// and drives the status state machine including contest/resolve. The on-chain
+// registry recomputes the same commitments from the same canonical encodings,
+// so the two layers cannot disagree about what a capability means.
+//
+// ERC-8312 leaves `capabilityRoot` opaque on purpose, so everything *inside*
+// the capability below — the trust tier, the release gate, the approval set —
+// is Keel's own profile, not a claim of standard conformance. What is standard
+// is the envelope shape, the cursor, the budget profile (`spent <= cap`), the
+// aggregate profile's conservation/attenuation rules, and the status machine.
+// Aligned with the draft of 2026-05-09 (requires ERC-165); see
+// docs/BOUNDED_ACTIONS.md for the exact revision this mirrors.
+// ============================================================================
+/** Schema version mixed into `capabilityRoot`, so a future profile change can never collide with an older one. */
+export const CAPABILITY_VERSION = 1;
+/**
+ * Lifecycle status of an envelope, matching the standard's `Status` enum
+ * (including `None`, the "unknown id" result of `getStatus`).
+ */
+export var EnvelopeStatus;
+(function (EnvelopeStatus) {
+    EnvelopeStatus[EnvelopeStatus["None"] = 0] = "None";
+    EnvelopeStatus[EnvelopeStatus["Active"] = 1] = "Active";
+    EnvelopeStatus[EnvelopeStatus["Completed"] = 2] = "Completed";
+    EnvelopeStatus[EnvelopeStatus["Contested"] = 3] = "Contested";
+    EnvelopeStatus[EnvelopeStatus["Revoked"] = 4] = "Revoked";
+    EnvelopeStatus[EnvelopeStatus["Expired"] = 5] = "Expired";
+})(EnvelopeStatus || (EnvelopeStatus = {}));
+const ZERO_ADDRESS = '0x0000000000000000000000000000000000000000';
+function normalizeAddress(value, field) {
+    if (!isAddress(value))
+        throw new PolicyError(`${field}: invalid address "${value}"`);
+    return getAddress(value).toLowerCase();
+}
+function normalizeNonNegative(value, field) {
+    if (value < 0n)
+        throw new PolicyError(`${field}: must be >= 0, got ${value}`);
+    return value;
+}
+function normalizeTier(value, field) {
+    const tier = value ?? 0;
+    if (!Number.isInteger(tier) || tier < 0 || tier > 3) {
+        throw new PolicyError(`${field}: must be an integer 0..3, got ${tier}`);
+    }
+    return tier;
+}
+/**
+ * Validates an authored capability and returns its normalised form. Addresses
+ * are lower-cased and every optional field is filled with its default, so
+ * semantically identical capabilities always commit to the same root.
+ */
+export function normalizeCapability(input) {
+    const asset = normalizeAddress(input.asset, 'asset');
+    const cap = normalizeNonNegative(input.cap ?? 0n, 'cap');
+    const trustTier = normalizeTier(input.trustTier, 'trustTier');
+    const notBefore = normalizeNonNegative(input.notBefore ?? 0n, 'notBefore');
+    const threshold = input.approvals?.threshold ?? 0;
+    if (!Number.isInteger(threshold) || threshold < 0) {
+        throw new PolicyError(`approvals.threshold: must be a non-negative integer, got ${threshold}`);
+    }
+    const approvers = (input.approvals?.approvers ?? []).map((value, i) => normalizeAddress(value, `approvals.approvers[${i}]`));
+    if (new Set(approvers).size !== approvers.length) {
+        throw new PolicyError('approvals.approvers: duplicate approver');
+    }
+    if (threshold > 0) {
+        if (threshold > approvers.length) {
+            throw new PolicyError(`approvals.threshold (${threshold}) exceeds approver count (${approvers.length})`);
+        }
+    }
+    else if (approvers.length > 0) {
+        throw new PolicyError('approvals.approvers: configured with a zero threshold (dead config)');
+    }
+    return Object.freeze({
+        version: CAPABILITY_VERSION,
+        asset,
+        cap,
+        trustTier,
+        notBefore,
+        approvals: Object.freeze({ threshold, approvers: Object.freeze(approvers) }),
+        delegate: input.delegate ?? false,
+    });
+}
+// Canonical ABI shapes. The on-chain substrate re-encodes the same tuples, so
+// the commitments below are byte-for-byte reproducible in Solidity.
+const CAPABILITY_PARAMETERS = [
+    { name: 'version', type: 'uint256' },
+    { name: 'asset', type: 'address' },
+    { name: 'cap', type: 'uint256' },
+    { name: 'trustTier', type: 'uint8' },
+    { name: 'notBefore', type: 'uint256' },
+    { name: 'delegate', type: 'bool' },
+    { name: 'threshold', type: 'uint256' },
+    { name: 'approvers', type: 'address[]' },
+];
+const CURSOR_PARAMETERS = [
+    { name: 'spent', type: 'uint256' },
+    { name: 'draws', type: 'uint256' },
+    { name: 'lastAdvance', type: 'uint256' },
+];
+/** Canonical ABI encoding of a normalised capability. */
+export function encodeCapability(capability) {
+    return encodeAbiParameters(CAPABILITY_PARAMETERS, [
+        BigInt(capability.version),
+        capability.asset,
+        capability.cap,
+        BigInt(capability.trustTier),
+        capability.notBefore,
+        capability.delegate,
+        BigInt(capability.approvals.threshold),
+        [...capability.approvals.approvers],
+    ]);
+}
+/** `capabilityRoot = keccak256(encodeCapability(capability))`. */
+export function capabilityCommitment(capability) {
+    return keccak256(encodeCapability(capability));
+}
+/** Canonical ABI encoding of a cursor. */
+export function encodeCursor(cursor) {
+    return encodeAbiParameters(CURSOR_PARAMETERS, [
+        cursor.spent,
+        BigInt(cursor.draws),
+        cursor.lastAdvance,
+    ]);
+}
+/** `cursorRoot = keccak256(encodeCursor(cursor))`. */
+export function cursorCommitment(cursor) {
+    return keccak256(encodeCursor(cursor));
+}
+/** The cursor of an envelope that has never been drawn against. */
+export const ZERO_CURSOR = Object.freeze({ spent: 0n, draws: 0, lastAdvance: 0n });
+/**
+ * Deterministic envelope id, per the standard's recommended derivation
+ * `keccak256(abi.encode(registry, principal, capabilityRoot, salt))`. A
+ * registry may precompute it before registering so a reference can be embedded
+ * upstream.
+ */
+export function envelopeId(params) {
+    return keccak256(encodeAbiParameters([
+        { name: 'registry', type: 'address' },
+        { name: 'principal', type: 'address' },
+        { name: 'capabilityRoot', type: 'bytes32' },
+        { name: 'salt', type: 'bytes32' },
+    ], [
+        normalizeAddress(params.registry, 'registry'),
+        normalizeAddress(params.principal, 'principal'),
+        params.capabilityRoot,
+        params.salt,
+    ]));
+}
+/** Remaining headroom under a capability's cap. Never negative. */
+export function remaining(capability, cursor) {
+    return cursor.spent >= capability.cap ? 0n : capability.cap - cursor.spent;
+}
+/**
+ * The budget invariant, `spent + amount <= cap`. Exposed separately so a
+ * caller can check a prospective draw without constructing a full context.
+ */
+export function withinCap(capability, cursor, amount) {
+    if (amount < 0n)
+        return false;
+    return cursor.spent + amount <= capability.cap;
+}
+/** Whether the collected approvals satisfy the capability's M-of-N gate. */
+export function approvalsSatisfied(capability, approvals) {
+    const { threshold, approvers } = capability.approvals;
+    if (threshold === 0)
+        return true;
+    const collected = new Set(approvals.map((value) => value.toLowerCase()));
+    let seen = 0;
+    for (const approver of approvers)
+        if (collected.has(approver))
+            seen += 1;
+    return seen >= threshold;
+}
+/**
+ * Evaluates a prospective draw. Mirrors the on-chain substrate's gates in the
+ * same order — status, release time, trust tier, approvals, then the budget
+ * invariant — so an off-chain denial is never more permissive than the chain.
+ */
+export function canDraw(capability, cursor, amount, context) {
+    if (context.status !== EnvelopeStatus.Active)
+        return { allowed: false, reason: 'envelope-not-active' };
+    if (capability.notBefore > 0n && context.now < capability.notBefore) {
+        return { allowed: false, reason: 'not-yet-released' };
+    }
+    if ((context.minTier ?? 0) > capability.trustTier) {
+        return { allowed: false, reason: 'trust-tier-too-low' };
+    }
+    if (!approvalsSatisfied(capability, context.approvals ?? [])) {
+        return { allowed: false, reason: 'approval-required' };
+    }
+    if (!withinCap(capability, cursor, amount))
+        return { allowed: false, reason: 'cap-exceeded' };
+    return { allowed: true };
+}
+/**
+ * Advances the cursor by one accepted draw. The caller must have obtained an
+ * allowed {@link canDraw} first; this function does not re-check the cap.
+ */
+export function advanceCursor(cursor, amount, now) {
+    if (amount < 0n)
+        throw new EnvelopeError(`amount: must be >= 0, got ${amount}`);
+    return Object.freeze({
+        spent: cursor.spent + amount,
+        draws: cursor.draws + 1,
+        lastAdvance: now,
+    });
+}
+/** Derived status: an envelope past its expiry reads as `Expired` while it is not terminal. */
+export function effectiveStatus(envelope, now) {
+    if (envelope.status === EnvelopeStatus.Active && envelope.expiresAt !== 0n && now > envelope.expiresAt) {
+        return EnvelopeStatus.Expired;
+    }
+    return envelope.status;
+}
+// ============================================================================
+// Aggregate (delegated) profile.
+//
+// A root envelope can allocate sub-budgets to child envelopes. Two rules from
+// the standard's aggregate profile are load-bearing and encoded here:
+//   * conservation — the leaf allocations may not sum to more than the root
+//     cap, so a tree can never conjure headroom it was not granted; and
+//   * attenuation — a child's capability must be no wider than its parent's,
+//     and an attenuated node cannot itself delegate.
+// ============================================================================
+/** Throws unless `allocations` sum to at most `rootCap` (conservation). */
+export function assertConservation(rootCap, allocations) {
+    let sum = 0n;
+    for (const allocation of allocations) {
+        if (allocation < 0n)
+            throw new PolicyError(`allocation: must be >= 0, got ${allocation}`);
+        sum += allocation;
+    }
+    if (sum > rootCap) {
+        throw new PolicyError(`aggregate profile: allocations sum to ${sum} > root cap ${rootCap}`);
+    }
+}
+/**
+ * Derives an attenuated child capability from a parent.
+ *
+ * Narrowing only: the child's cap and trust tier may not exceed the parent's,
+ * its release time may not be earlier, its approval gate may not be weaker
+ * (threshold no lower, approvers a subset of the parent's) and its asset must
+ * match. A parent that is not allowed to delegate (or is itself attenuated) may
+ * not spawn a child at all. The child is always barred from delegating further,
+ * which is what makes attenuation non-transitive widening impossible.
+ */
+export function attenuate(parent, child, options = {}) {
+    if (!parent.delegate || options.parentAttenuated) {
+        throw new EnvelopeError('capability: this envelope may not delegate');
+    }
+    const next = normalizeCapability(child);
+    if (next.asset !== parent.asset)
+        throw new EnvelopeError('attenuation: asset must match the parent');
+    if (next.cap > parent.cap)
+        throw new EnvelopeError('attenuation: cap may not exceed the parent');
+    if (next.trustTier > parent.trustTier) {
+        throw new EnvelopeError('attenuation: trust tier may not exceed the parent');
+    }
+    if (next.notBefore < parent.notBefore) {
+        throw new EnvelopeError('attenuation: release time may not be earlier than the parent');
+    }
+    if (next.approvals.threshold < parent.approvals.threshold) {
+        throw new EnvelopeError('attenuation: approval gate may not be weaker than the parent');
+    }
+    // The gate is identity-based, so a non-weaker threshold is not enough: every
+    // child approver must already be one of the parent's, or the delegate could
+    // swap in an approver set of its own choosing.
+    const parentApprovers = new Set(parent.approvals.approvers);
+    for (const approver of next.approvals.approvers) {
+        if (!parentApprovers.has(approver)) {
+            throw new EnvelopeError('attenuation: approvers must be a subset of the parent');
+        }
+    }
+    return normalizeCapability({ ...next, delegate: false });
+}
+// ============================================================================
+// Status state machine.
+//
+// Active -> {Completed, Contested, Revoked, Expired}
+// Contested -> {Active (dismissed), Revoked (upheld)}
+// Completed / Revoked / Expired are terminal; None is the "unknown id" sink.
+// ============================================================================
+const TRANSITIONS = Object.freeze({
+    [EnvelopeStatus.None]: [],
+    [EnvelopeStatus.Active]: [
+        EnvelopeStatus.Completed,
+        EnvelopeStatus.Contested,
+        EnvelopeStatus.Revoked,
+        EnvelopeStatus.Expired,
+    ],
+    [EnvelopeStatus.Contested]: [EnvelopeStatus.Active, EnvelopeStatus.Revoked],
+    [EnvelopeStatus.Completed]: [],
+    [EnvelopeStatus.Revoked]: [],
+    [EnvelopeStatus.Expired]: [],
+});
+/** Whether `to` is a legal successor of `from`. */
+export function canSetStatus(from, to) {
+    return TRANSITIONS[from].includes(to);
+}
+/** Applies a status transition, throwing {@link EnvelopeError} when it is illegal. */
+export function applyStatus(envelope, to) {
+    if (!canSetStatus(envelope.status, to)) {
+        throw new EnvelopeError(`status: illegal transition ${EnvelopeStatus[envelope.status]} -> ${EnvelopeStatus[to]}`);
+    }
+    return Object.freeze({ ...envelope, status: to });
+}
+/** Whether a status is terminal (no successor). */
+export function isTerminal(status) {
+    return TRANSITIONS[status].length === 0 && status !== EnvelopeStatus.None;
+}
+/** Opens a contest window of `windowSeconds` from `now`. */
+export function openContest(now, windowSeconds) {
+    if (windowSeconds <= 0n)
+        throw new EnvelopeError('contest window must be > 0');
+    return Object.freeze({ contestedAt: now, resolutionDeadline: now + windowSeconds });
+}
+/** Whether the window has elapsed at `now`, letting any caller resolve to the default. */
+export function contestExpired(window, now) {
+    return now > window.resolutionDeadline;
+}
+/** The documented default resolution: a still-open contest lapses back to Active. */
+export function defaultResolution() {
+    return EnvelopeStatus.Active;
+}
+export { ZERO_ADDRESS as ZERO_ASSET };
+//# sourceMappingURL=bounded.js.map

package/dist/bounded.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded.js","sourceRoot":"","sources":["../src/bounded.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAGzD,+EAA+E;AAC/E,uDAAuD;AACvD,EAAE;AACF,2EAA2E;AAC3E,sEAAsE;AACtE,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,mEAAmE;AACnE,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,mEAAmE;AACnE,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,+DAA+D;AAC/D,+DAA+D;AAC/D,+EAA+E;AAE/E,kHAAkH;AAClH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC;;;GAGG;AACH,MAAM,CAAN,IAAY,cAOX;AAPD,WAAY,cAAc;IACxB,mDAAQ,CAAA;IACR,uDAAU,CAAA;IACV,6DAAa,CAAA;IACb,6DAAa,CAAA;IACb,yDAAW,CAAA;IACX,yDAAW,CAAA;AACb,CAAC,EAPW,cAAc,KAAd,cAAc,QAOzB;AAmGD,MAAM,YAAY,GAAG,4CAAuD,CAAC;AAE7E,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAa;IACpD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,sBAAsB,KAAK,GAAG,CAAC,CAAC;IACrF,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,WAAW,EAAa,CAAC;AACpD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,KAAa;IACxD,IAAI,KAAK,GAAG,EAAE;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,uBAAuB,KAAK,EAAE,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,KAAa;IAC7D,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,kCAAkC,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAiB,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAsB;IACxD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IAE3E,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,SAAS,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,WAAW,CAAC,4DAA4D,SAAS,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CACpE,gBAAgB,CAAC,KAAK,EAAE,uBAAuB,CAAC,GAAG,CAAC,CACrD,CAAC;IACF,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QACjD,MAAM,IAAI,WAAW,CAAC,yCAAyC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,IAAI,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,WAAW,CACnB,wBAAwB,SAAS,6BAA6B,SAAS,CAAC,MAAM,GAAG,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,WAAW,CAAC,qEAAqE,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,kBAAkB;QAC3B,KAAK;QACL,GAAG;QACH,SAAS;QACT,SAAS;QACT,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK;KAClC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,oEAAoE;AACpE,MAAM,qBAAqB,GAAG;IAC5B,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACpC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;IAClC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE;IAChC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;IACpC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;IACtC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IAClC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;IACtC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE;CAChC,CAAC;AAEX,MAAM,iBAAiB,GAAG;IACxB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;IAClC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;IAClC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;CAChC,CAAC;AAEX,yDAAyD;AACzD,MAAM,UAAU,gBAAgB,CAAC,UAAsB;IACrD,OAAO,mBAAmB,CAAC,qBAAqB,EAAE;QAChD,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;QAC1B,UAAU,CAAC,KAAK;QAChB,UAAU,CAAC,GAAG;QACd,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAC5B,UAAU,CAAC,SAAS;QACpB,UAAU,CAAC,QAAQ;QACnB,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC;QACtC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC;KAC3B,CAAC,CAAC;AACd,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,oBAAoB,CAAC,UAAsB;IACzD,OAAO,SAAS,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,mBAAmB,CAAC,iBAAiB,EAAE;QAC5C,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QACpB,MAAM,CAAC,WAAW;KACV,CAAC,CAAC;AACd,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,WAAW,GAAW,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,MAK1B;IACC,OAAO,SAAS,CACd,mBAAmB,CACjB;QACE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3C,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;KAClC,EACD;QACE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC7C,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;QAC/C,MAAM,CAAC,cAAc;QACrB,MAAM,CAAC,IAAI;KACH,CACX,CACF,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,SAAS,CAAC,UAAsB,EAAE,MAAc;IAC9D,OAAO,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,UAAsB,EAAE,MAAc,EAAE,MAAc;IAC9E,IAAI,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,MAAM,CAAC,KAAK,GAAG,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC;AACjD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,UAAsB,EAAE,SAA6B;IACtF,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC;IACtD,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACzE,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,QAAQ,IAAI,SAAS;QAAE,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,IAAI,IAAI,CAAC,CAAC;IACzE,OAAO,IAAI,IAAI,SAAS,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CACrB,UAAsB,EACtB,MAAc,EACd,MAAc,EACd,OAAoB;IAEpB,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACvG,IAAI,UAAU,CAAC,SAAS,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;QACpE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC9F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,MAAc,EAAE,GAAW;IACvE,IAAI,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,MAAM;QAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC;QACvB,WAAW,EAAE,GAAG;KACjB,CAAC,CAAC;AACL,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,eAAe,CAAC,QAAkB,EAAE,GAAW;IAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,KAAK,EAAE,IAAI,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvG,OAAO,cAAc,CAAC,OAAO,CAAC;IAChC,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC;AAED,+EAA+E;AAC/E,iCAAiC;AACjC,EAAE;AACF,8EAA8E;AAC9E,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,qDAAqD;AACrD,+EAA+E;AAE/E,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,WAA8B;IAChF,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,UAAU,GAAG,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,iCAAiC,UAAU,EAAE,CAAC,CAAC;QAC1F,GAAG,IAAI,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,GAAG,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,WAAW,CAAC,yCAAyC,GAAG,eAAe,OAAO,EAAE,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CACvB,MAAkB,EAClB,KAAsB,EACtB,UAA0C,EAAE;IAE5C,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACjD,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,aAAa,CAAC,0CAA0C,CAAC,CAAC;IACrG,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG;QAAE,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;IACjG,IAAI,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,mDAAmD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,8DAA8D,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QAC1D,MAAM,IAAI,aAAa,CAAC,8DAA8D,CAAC,CAAC;IAC1F,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,+CAA+C;IAC/C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC5D,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QAChD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,aAAa,CAAC,uDAAuD,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,OAAO,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,EAAE;AACF,qDAAqD;AACrD,sDAAsD;AACtD,6EAA6E;AAC7E,+EAA+E;AAE/E,MAAM,WAAW,GAAgE,MAAM,CAAC,MAAM,CAAC;IAC7F,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE;IACzB,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE;QACvB,cAAc,CAAC,SAAS;QACxB,cAAc,CAAC,SAAS;QACxB,cAAc,CAAC,OAAO;QACtB,cAAc,CAAC,OAAO;KACvB;IACD,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC;IAC3E,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,EAAE;IAC9B,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE;IAC5B,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE;CAC7B,CAAC,CAAC;AAEH,mDAAmD;AACnD,MAAM,UAAU,YAAY,CAAC,IAAoB,EAAE,EAAkB;IACnE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,WAAW,CAAC,QAAkB,EAAE,EAAkB;IAChE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CAAC,8BAA8B,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,UAAU,CAAC,MAAsB;IAC/C,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,cAAc,CAAC,IAAI,CAAC;AAC5E,CAAC;AAeD,4DAA4D;AAC5D,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,aAAqB;IAC5D,IAAI,aAAa,IAAI,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,kBAAkB,EAAE,GAAG,GAAG,aAAa,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,cAAc,CAAC,MAAqB,EAAE,GAAW;IAC/D,OAAO,GAAG,GAAG,MAAM,CAAC,kBAAkB,CAAC;AACzC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,CAAC,MAAM,CAAC;AAC/B,CAAC;AAED,OAAO,EAAE,YAAY,IAAI,UAAU,EAAE,CAAC"}

package/dist/commitment.d.ts

@@ -0,0 +1,68 @@
+import type { Hex, Policy } from './types.js';
+/** ABI shape of a normalised policy; shared with the on-chain carrier. */
+export declare const POLICY_ABI_PARAMETERS: readonly [{
+    readonly name: "version";
+    readonly type: "uint256";
+}, {
+    readonly name: "validAfter";
+    readonly type: "uint256";
+}, {
+    readonly name: "validUntil";
+    readonly type: "uint256";
+}, {
+    readonly name: "rules";
+    readonly type: "tuple[]";
+    readonly components: readonly [{
+        readonly name: "target";
+        readonly type: "address";
+    }, {
+        readonly name: "selectors";
+        readonly type: "bytes4[]";
+    }, {
+        readonly name: "maxPerTx";
+        readonly type: "uint256";
+    }, {
+        readonly name: "maxDaily";
+        readonly type: "uint256";
+    }, {
+        readonly name: "maxCalls";
+        readonly type: "uint256";
+    }, {
+        readonly name: "tokenLimits";
+        readonly type: "tuple[]";
+        readonly components: readonly [{
+            readonly name: "token";
+            readonly type: "address";
+        }, {
+            readonly name: "maxPerTx";
+            readonly type: "uint256";
+        }, {
+            readonly name: "maxDaily";
+            readonly type: "uint256";
+        }];
+    }];
+}];
+/**
+ * Canonical ABI encoding of a normalised policy. Prefer
+ * {@link policyCommitment} unless you need the raw payload (e.g. to recompute
+ * the hash on-chain or in a test).
+ */
+export declare function encodePolicy(policy: Policy): Hex;
+/** The policy commitment hash: `keccak256(encodePolicy(policy))`. */
+export declare function policyCommitment(policy: Policy): Hex;
+/** ABI shape of the hook install payload, i.e. `(bytes32 sessionId, bytes policyData)`. */
+export declare const INSTALL_ABI_PARAMETERS: readonly [{
+    readonly name: "sessionId";
+    readonly type: "bytes32";
+}, {
+    readonly name: "policyData";
+    readonly type: "bytes";
+}];
+/**
+ * The ERC-7579 hook install payload for one session:
+ * `abi.encode(bytes32 sessionId, bytes policyData)`, where `policyData` is
+ * {@link encodePolicy}. The hook stores `keccak256(policyData)` as the session's
+ * commitment, so it equals {@link policyCommitment} — the layers cannot disagree.
+ */
+export declare function encodeInstallData(sessionId: Hex, policy: Policy): Hex;
+//# sourceMappingURL=commitment.d.ts.map

package/dist/commitment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commitment.d.ts","sourceRoot":"","sources":["../src/commitment.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAiC9C,0EAA0E;AAC1E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKxB,CAAC;AAEX;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAkBhD;AAED,qEAAqE;AACrE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAEpD;AAED,2FAA2F;AAC3F,eAAO,MAAM,sBAAsB;;;;;;EAGzB,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,CAErE"}

package/dist/commitment.js

@@ -0,0 +1,80 @@
+import { encodeAbiParameters, keccak256 } from 'viem';
+// ============================================================================
+// Commitment hash.
+//
+// The commitment is `keccak256(abi.encode(version, validAfter, validUntil, rules))`
+// over the **normalised** policy. The on-chain carrier (the ERC-7579 hook module)
+// recomputes the same value from the calldata it decodes and stores it, so an
+// agent's session key commits to a policy it cannot widen later: every signature
+// covers the commitment, and the account's stored hash must match.
+//
+// Decoding calldata into memory arrays and re-encoding (Solidity `abi.encode`)
+// yields the canonical encoding, byte-for-byte identical to the client encoding
+// below — the same property the existing infraX module relies on.
+// ============================================================================
+const RULE_COMPONENTS = [
+    { name: 'target', type: 'address' },
+    { name: 'selectors', type: 'bytes4[]' },
+    { name: 'maxPerTx', type: 'uint256' },
+    { name: 'maxDaily', type: 'uint256' },
+    { name: 'maxCalls', type: 'uint256' },
+    {
+        name: 'tokenLimits',
+        type: 'tuple[]',
+        components: [
+            { name: 'token', type: 'address' },
+            { name: 'maxPerTx', type: 'uint256' },
+            { name: 'maxDaily', type: 'uint256' },
+        ],
+    },
+];
+/** ABI shape of a normalised policy; shared with the on-chain carrier. */
+export const POLICY_ABI_PARAMETERS = [
+    { name: 'version', type: 'uint256' },
+    { name: 'validAfter', type: 'uint256' },
+    { name: 'validUntil', type: 'uint256' },
+    { name: 'rules', type: 'tuple[]', components: RULE_COMPONENTS },
+];
+/**
+ * Canonical ABI encoding of a normalised policy. Prefer
+ * {@link policyCommitment} unless you need the raw payload (e.g. to recompute
+ * the hash on-chain or in a test).
+ */
+export function encodePolicy(policy) {
+    return encodeAbiParameters(POLICY_ABI_PARAMETERS, [
+        BigInt(policy.version),
+        policy.validAfter,
+        policy.validUntil,
+        policy.rules.map((rule) => ({
+            target: rule.target,
+            selectors: [...rule.selectors],
+            maxPerTx: rule.maxPerTx,
+            maxDaily: rule.maxDaily,
+            maxCalls: BigInt(rule.maxCalls),
+            tokenLimits: rule.tokenLimits.map((limit) => ({
+                token: limit.token,
+                maxPerTx: limit.maxPerTx,
+                maxDaily: limit.maxDaily,
+            })),
+        })),
+    ]);
+}
+/** The policy commitment hash: `keccak256(encodePolicy(policy))`. */
+export function policyCommitment(policy) {
+    return keccak256(encodePolicy(policy));
+}
+/** ABI shape of the hook install payload, i.e. `(bytes32 sessionId, bytes policyData)`. */
+export const INSTALL_ABI_PARAMETERS = [
+    { name: 'sessionId', type: 'bytes32' },
+    { name: 'policyData', type: 'bytes' },
+];
+/**
+ * The ERC-7579 hook install payload for one session:
+ * `abi.encode(bytes32 sessionId, bytes policyData)`, where `policyData` is
+ * {@link encodePolicy}. The hook stores `keccak256(policyData)` as the session's
+ * commitment, so it equals {@link policyCommitment} — the layers cannot disagree.
+ */
+export function encodeInstallData(sessionId, policy) {
+    return encodeAbiParameters(INSTALL_ABI_PARAMETERS, [sessionId, encodePolicy(policy)]);
+}
+//# sourceMappingURL=commitment.js.map

package/dist/commitment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commitment.js","sourceRoot":"","sources":["../src/commitment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAGtD,+EAA+E;AAC/E,mBAAmB;AACnB,EAAE;AACF,oFAAoF;AACpF,kFAAkF;AAClF,8EAA8E;AAC9E,iFAAiF;AACjF,mEAAmE;AACnE,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,kEAAkE;AAClE,+EAA+E;AAE/E,MAAM,eAAe,GAAG;IACtB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;IACnC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE;IACvC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;IACrC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;IACrC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;IACrC;QACE,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,SAAS;QACf,UAAU,EAAE;YACV,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;YAClC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;YACrC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;SACtC;KACF;CACO,CAAC;AAEX,0EAA0E;AAC1E,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IACpC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE;CACvD,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,mBAAmB,CAAC,qBAAqB,EAAE;QAChD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACtB,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC5C,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;SACJ,CAAC,CAAC;KACK,CAAC,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;IACtC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;CAC7B,CAAC;AAEX;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAc,EAAE,MAAc;IAC9D,OAAO,mBAAmB,CAAC,sBAAsB,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,CAAU,CAAC,CAAC;AACjG,CAAC"}

package/dist/erc20.d.ts

@@ -0,0 +1,31 @@
+import type { Call, Hex } from './types.js';
+/** Selectors of the standard ERC-20 methods Keel understands. */
+export declare const ERC20_SELECTOR: {
+    readonly transfer: "0xa9059cbb";
+    readonly approve: "0x095ea7b3";
+    readonly transferFrom: "0x23b872dd";
+};
+/** Outcome of reading an ERC-20 amount from a call. */
+export type Erc20Read = 
+/** Selector is not one of the standard value-moving methods. */
+{
+    readonly kind: 'not-erc20';
+}
+/** A standard method whose call data is too short to carry an amount. */
+ | {
+    readonly kind: 'malformed';
+    readonly selector: Hex;
+}
+/** A standard method with an amount as its final 32-byte word. */
+ | {
+    readonly kind: 'amount';
+    readonly selector: Hex;
+    readonly value: bigint;
+};
+/**
+ * Reads the amount from a standard ERC-20 `transfer` / `approve` /
+ * `transferFrom` call. In all three the amount is the final `uint256` word, so
+ * the same slice works for each (68-byte and 100-byte call data respectively).
+ */
+export declare function readErc20Amount(call: Call): Erc20Read;
+//# sourceMappingURL=erc20.d.ts.map

package/dist/erc20.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"erc20.d.ts","sourceRoot":"","sources":["../src/erc20.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAc5C,iEAAiE;AACjE,eAAO,MAAM,cAAc;;;;CAIa,CAAC;AAEzC,uDAAuD;AACvD,MAAM,MAAM,SAAS;AACnB,gEAAgE;AAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE;AAChC,yEAAyE;GACvE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAA;CAAE;AACxD,kEAAkE;GAChE;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAUhF;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,CAKrD"}

package/dist/erc20.js

@@ -0,0 +1,36 @@
+// ============================================================================
+// Standard ERC-20 call shapes.
+//
+// Token-level ceilings can only be enforced by reading the amount out of the
+// token's own call data, so Keel recognises the three standard value-moving
+// methods. Everything else is left to the rule's selector whitelist.
+//
+// `transferFrom` is recognised but *blocked* when a token limit is configured
+// (see evaluate.ts): bounding it is ambiguous enough that the conservative
+// choice — mirroring the existing infraX module — is to refuse it outright.
+// ============================================================================
+/** Selectors of the standard ERC-20 methods Keel understands. */
+export const ERC20_SELECTOR = {
+    transfer: '0xa9059cbb',
+    approve: '0x095ea7b3',
+    transferFrom: '0x23b872dd',
+};
+function isStandardSelector(selector) {
+    return (selector === ERC20_SELECTOR.transfer ||
+        selector === ERC20_SELECTOR.approve ||
+        selector === ERC20_SELECTOR.transferFrom);
+}
+/**
+ * Reads the amount from a standard ERC-20 `transfer` / `approve` /
+ * `transferFrom` call. In all three the amount is the final `uint256` word, so
+ * the same slice works for each (68-byte and 100-byte call data respectively).
+ */
+export function readErc20Amount(call) {
+    if (!isStandardSelector(call.selector))
+        return { kind: 'not-erc20' };
+    // Selector (4 bytes) + at least two words (recipient + amount).
+    if (call.data.length < 10 + 64)
+        return { kind: 'malformed', selector: call.selector };
+    return { kind: 'amount', selector: call.selector, value: BigInt(`0x${call.data.slice(-64)}`) };
+}
+//# sourceMappingURL=erc20.js.map

package/dist/erc20.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erc20.js","sourceRoot":"","sources":["../src/erc20.ts"],"names":[],"mappings":"AAEA,+EAA+E;AAC/E,+BAA+B;AAC/B,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAE/E,iEAAiE;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,QAAQ,EAAE,YAAY;IACtB,OAAO,EAAE,YAAY;IACrB,YAAY,EAAE,YAAY;CACY,CAAC;AAWzC,SAAS,kBAAkB,CAAC,QAAa;IACvC,OAAO,CACL,QAAQ,KAAK,cAAc,CAAC,QAAQ;QACpC,QAAQ,KAAK,cAAc,CAAC,OAAO;QACnC,QAAQ,KAAK,cAAc,CAAC,YAAY,CACzC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAU;IACxC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACrE,gEAAgE;IAChE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;AACjG,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,13 @@
+/** Raised when an authored policy is malformed. */
+export declare class PolicyError extends Error {
+    constructor(message: string);
+}
+/** Raised when a session lifecycle operation is invalid (unknown / duplicate / already revoked). */
+export declare class SessionError extends Error {
+    constructor(message: string);
+}
+/** Raised when an ERC-8312 envelope lifecycle or attenuation operation is invalid. */
+export declare class EnvelopeError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,qBAAa,WAAY,SAAQ,KAAK;gBACxB,OAAO,EAAE,MAAM;CAI5B;AAED,oGAAoG;AACpG,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED,sFAAsF;AACtF,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B"}

package/dist/errors.js

@@ -0,0 +1,22 @@
+/** Raised when an authored policy is malformed. */
+export class PolicyError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'PolicyError';
+    }
+}
+/** Raised when a session lifecycle operation is invalid (unknown / duplicate / already revoked). */
+export class SessionError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SessionError';
+    }
+}
+/** Raised when an ERC-8312 envelope lifecycle or attenuation operation is invalid. */
+export class EnvelopeError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'EnvelopeError';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,oGAAoG;AACpG,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,sFAAsF;AACtF,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF"}