@keelcodes/sdk 2.3.0 → 2.3.1

package/dist/aa/keel-session.d.ts

@@ -1,6 +1,5 @@
-import { type Address, type Hex } from 'viem';
-import type { SessionPolicy } from './types';
-import type { ChainAAConfig } from './types';
+import { type Address, type Hex, type PublicClient } from 'viem';
+import type { ChainAAConfig, SessionPolicy, Signer, UserOperationV7 } from './types';
 export declare const KEEL_POLICY_VERSION = 1n;
 /** bytes32 归一化（已是 0x+64 hex 直接用，否则左对齐补零） */
 export declare function toBytes32(id: string): Hex;
@@ -35,3 +34,37 @@ export declare function encodeKeelSessionSignature(p: {
     policyData: Hex;
     sig: Hex;
 }): Hex;
+export interface BuildKeelSessionUserOpParams {
+    /** 未传 nonce 时用于读链上 getNonce；传 nonce（relay 预分配）时可不给 */
+    client?: PublicClient;
+    chainConfig: ChainAAConfig;
+    account: Address;
+    /** session 策略（复算 policyData = 链上 commitment，须与 enable 时逐字节一致） */
+    policy: SessionPolicy;
+    /** slot 序号（= validator 副本下标；一 key 一副本） */
+    slot: number;
+    /** 该 key 的 agent 通道号（nonceKey 隔离多 agent 并发）；缺省 0 */
+    agentIndex?: number | bigint;
+    /**
+     * nonce 整值（= `nonceKey<<64 | sequence`），由 relay `POST /v1/wallet/session/nonce/allocate`
+     * 预分配后回传。缺省则读链上当前 getNonce（单 agent 串行场景）。
+     */
+    nonce?: bigint;
+    call: {
+        target: Address;
+        value?: bigint;
+        data: Hex;
+    };
+    /** agent（session key）签名者 */
+    agentSigner: Signer;
+    gas?: Partial<Pick<UserOperationV7, 'callGasLimit' | 'verificationGasLimit' | 'preVerificationGas' | 'maxFeePerGas' | 'maxPriorityFeePerGas'>>;
+}
+/**
+ * v1（Keel）agent 侧调用 UserOp 构造（已签名）：
+ *   nonce    = 预分配整值，或 `EntryPoint.getNonce(account, validatorNonceKey(validator, agentIndex))`
+ *   callData = `executeUserOp( execute(target,value,data) )` —— 挂真 hook 时必需
+ *   signature= sessionId ‖ policyData ‖ agentSig(keccak256(userOpHash ‖ keccak256(policyData)))
+ *
+ * 与 aa-sdk 的 `buildKeelSessionUserOp` 逐字节一致（同输入同输出）。
+ */
+export declare function buildKeelSessionUserOp(p: BuildKeelSessionUserOpParams): Promise<UserOperationV7>;

package/dist/aa/keel-session.js

@@ -16,7 +16,10 @@ exports.encodeKeelPolicyData = encodeKeelPolicyData;
 exports.resolveKeelValidator = resolveKeelValidator;
 exports.keelSessionDigest = keelSessionDigest;
 exports.encodeKeelSessionSignature = encodeKeelSessionSignature;
+exports.buildKeelSessionUserOp = buildKeelSessionUserOp;
 const viem_1 = require("viem");
+const userop_1 = require("./userop");
+const nonce_1 = require("./nonce");
 exports.KEEL_POLICY_VERSION = 1n;
 /** bytes32 归一化（已是 0x+64 hex 直接用，否则左对齐补零） */
 function toBytes32(id) {
@@ -88,3 +91,42 @@ function keelSessionDigest(userOpHash, policyData) {
 function encodeKeelSessionSignature(p) {
     return (0, viem_1.concatHex)([toBytes32(p.sessionId), p.policyData, p.sig]);
 }
+/** EntryPoint v0.7 getNonce(address,uint192) */
+const ENTRYPOINT_GETNONCE_ABI = (0, viem_1.parseAbi)([
+    'function getNonce(address sender, uint192 key) view returns (uint256)',
+]);
+/**
+ * v1（Keel）agent 侧调用 UserOp 构造（已签名）：
+ *   nonce    = 预分配整值，或 `EntryPoint.getNonce(account, validatorNonceKey(validator, agentIndex))`
+ *   callData = `executeUserOp( execute(target,value,data) )` —— 挂真 hook 时必需
+ *   signature= sessionId ‖ policyData ‖ agentSig(keccak256(userOpHash ‖ keccak256(policyData)))
+ *
+ * 与 aa-sdk 的 `buildKeelSessionUserOp` 逐字节一致（同输入同输出）。
+ */
+async function buildKeelSessionUserOp(p) {
+    const validator = resolveKeelValidator(p.chainConfig, p.slot);
+    // agentIndex（通道号）落在 nonceKey 低 16 位（uint16）⇒ 合法 0..65535；
+    // 超界会被 ValidatorLib 静默截断到别的通道，故在 SDK 边界显式拒绝。
+    const agentIndex = p.agentIndex ?? 0;
+    if (BigInt(agentIndex) < 0n || BigInt(agentIndex) > 65535n) {
+        throw new Error(`[keel-sdk] buildKeelSessionUserOp: agentIndex 必须在 0..65535（uint16 通道号），got ${agentIndex}`);
+    }
+    let nonce = p.nonce;
+    if (nonce === undefined) {
+        if (!p.client) {
+            throw new Error('[keel-sdk] buildKeelSessionUserOp: 未传 nonce 时必须提供 client（用于读链上 getNonce）');
+        }
+        nonce = (await p.client.readContract({
+            address: p.chainConfig.entryPoint,
+            abi: ENTRYPOINT_GETNONCE_ABI,
+            functionName: 'getNonce',
+            args: [p.account, (0, nonce_1.validatorNonceKey)(validator, agentIndex)],
+        }));
+    }
+    const callData = (0, userop_1.encodeExecuteUserOp)((0, userop_1.encodeExecute)(p.call.target, p.call.value ?? 0n, p.call.data));
+    const op = (0, userop_1.buildUserOpWithCallData)({ sender: p.account, nonce, callData, gas: p.gas });
+    const userOpHash = (0, userop_1.getUserOpHash)(op, p.chainConfig.entryPoint, p.chainConfig.chainId);
+    const policyData = encodeKeelPolicyData(p.policy);
+    const sig = await p.agentSigner.signUserOp(keelSessionDigest(userOpHash, policyData));
+    return { ...op, signature: encodeKeelSessionSignature({ sessionId: p.policy.sessionId, policyData, sig }) };
+}

package/dist/http.d.ts

@@ -1,6 +1,6 @@
 import type { KeelConfig } from './types';
 /** SDK 版本（契约 §5，随包版本同步）。 */
-export declare const SDK_VERSION = "2.3.0";
+export declare const SDK_VERSION = "2.3.1";
 export declare class HttpClient {
     private baseUrl;
     private headers;

package/dist/http.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.HttpClient = exports.SDK_VERSION = void 0;
 const errors_1 = require("./errors");
 /** SDK 版本（契约 §5，随包版本同步）。 */
-exports.SDK_VERSION = '2.3.0';
+exports.SDK_VERSION = '2.3.1';
 /**
  * 钱包签名的复用时长（ms）：首次签名后在该窗口内复用，避免每个请求都触发钱包弹窗。
  * 服务端会话 TTL 为 24h，此处取 1h 留足余量。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@keelcodes/sdk",
-  "version": "2.3.0",
+  "version": "2.3.1",
   "description": "Keel SDK — unified access to payment / wallet / data / account modules over https://keel.codes",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",