@lit-protocol/vincent-ability-aave 0.2.8 → 1.0.0

package/dist/src/lib/validateSimulation.d.ts

@@ -0,0 +1,3 @@
+import type { ValidateSimulationParams } from '@lit-protocol/vincent-ability-sdk/gatedSigner';
+export declare const validateSimulation: (params: ValidateSimulationParams) => void;
+//# sourceMappingURL=validateSimulation.d.ts.map

package/dist/src/lib/validateSimulation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateSimulation.d.ts","sourceRoot":"","sources":["../../../src/lib/validateSimulation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AAM9F,eAAO,MAAM,kBAAkB,GAAI,QAAQ,wBAAwB,SA6DlE,CAAC"}

package/dist/src/lib/validateSimulation.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateSimulation = void 0;
+const viem_1 = require("viem");
+const aave_1 = require("./helpers/aave");
+const validateSimulation = (params) => {
+    const { chainId, sender: _sender, simulation } = params;
+    if (simulation.error) {
+        const { message, revertReason } = simulation.error;
+        throw new Error(`Simulation failed - Reason: ${revertReason} - Message: ${message}`);
+    }
+    const _feeContract = (0, aave_1.getFeeContractAddress)(chainId) || viem_1.zeroAddress; // Default to zeroAddress for code simplicity
+    const feeContract = (0, viem_1.getAddress)(_feeContract, chainId);
+    const { POOL: aavePoolAddress } = (0, aave_1.getAaveAddresses)(chainId);
+    const aaveATokens = (0, aave_1.getATokens)(chainId);
+    const sender = (0, viem_1.getAddress)(_sender, chainId);
+    const pool = (0, viem_1.getAddress)(aavePoolAddress, chainId);
+    const aTokens = Object.values(aaveATokens).map((a) => (0, viem_1.getAddress)(a, chainId));
+    const allowed = new Set([viem_1.zeroAddress, sender, pool, feeContract, ...aTokens]);
+    simulation.changes.forEach((c, idx) => {
+        const assetType = c.assetType;
+        const changeType = c.changeType;
+        const from = (0, viem_1.getAddress)(c.from, chainId);
+        const to = (0, viem_1.getAddress)(c.to, chainId);
+        // Helper for throwing with context
+        const fail = (reason) => {
+            throw new Error(`Invalid simulation change at index ${idx}: ${reason} [assetType=${assetType}, changeType=${changeType}, from=${from}, to=${to}]`);
+        };
+        if (assetType === 'NATIVE') {
+            if (changeType !== 'TRANSFER') {
+                fail('Only TRANSFER is allowed for NATIVE');
+            }
+            return;
+        }
+        if (assetType === 'ERC20') {
+            if (changeType === 'APPROVE') {
+                if (![sender, feeContract].includes(from) || ![pool, feeContract].includes(to)) {
+                    fail('ERC20 APPROVE must be from userOp.sender to aave pool or fee contract');
+                }
+                return;
+            }
+            if (changeType === 'TRANSFER') {
+                if (!allowed.has(from) || !allowed.has(to)) {
+                    fail('ERC20 TRANSFER endpoints must be within {zero address, sender, fee contract or Aave addresses}');
+                }
+                return;
+            }
+            // Unknown change type for ERC20
+            fail('Unsupported ERC20 change type');
+        }
+        // Any other asset types are not permitted
+        fail('Unsupported asset type');
+    });
+};
+exports.validateSimulation = validateSimulation;
+//# sourceMappingURL=validateSimulation.js.map

package/dist/src/lib/validateSimulation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateSimulation.js","sourceRoot":"","sources":["../../../src/lib/validateSimulation.ts"],"names":[],"mappings":";;;AAEA,+BAA+C;AAE/C,yCAAqF;AAE9E,MAAM,kBAAkB,GAAG,CAAC,MAAgC,EAAE,EAAE;IACrE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAExD,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,+BAA+B,YAAY,eAAe,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,4BAAqB,EAAC,OAAO,CAAC,IAAI,kBAAW,CAAC,CAAC,6CAA6C;IACjH,MAAM,WAAW,GAAG,IAAA,iBAAU,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,IAAA,uBAAgB,EAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,IAAA,iBAAU,EAAC,OAAO,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,IAAA,iBAAU,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAA,iBAAU,EAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,iBAAU,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAW,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IAE9E,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;QAC9B,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;QAChC,MAAM,IAAI,GAAG,IAAA,iBAAU,EAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,IAAA,iBAAU,EAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAErC,mCAAmC;QACnC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE;YAC9B,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,KAAK,MAAM,eAAe,SAAS,gBAAgB,UAAU,UAAU,IAAI,QAAQ,EAAE,GAAG,CAClI,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;gBAC9B,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC/E,IAAI,CAAC,uEAAuE,CAAC,CAAC;gBAChF,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;gBAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC3C,IAAI,CACF,gGAAgG,CACjG,CAAC;gBACJ,CAAC;gBACD,OAAO;YACT,CAAC;YAED,gCAAgC;YAChC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACxC,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AA7DW,QAAA,kBAAkB,sBA6D7B"}

package/dist/src/lib/validateTransaction.d.ts

@@ -0,0 +1,3 @@
+import type { ValidateTransactionParams } from '@lit-protocol/vincent-ability-sdk/gatedSigner';
+export declare const validateTransaction: (params: ValidateTransactionParams) => void;
+//# sourceMappingURL=validateTransaction.d.ts.map

package/dist/src/lib/validateTransaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateTransaction.d.ts","sourceRoot":"","sources":["../../../src/lib/validateTransaction.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,yBAAyB,EAC1B,MAAM,+CAA+C,CAAC;AAQvD,eAAO,MAAM,mBAAmB,GAAI,QAAQ,yBAAyB,SAsEpE,CAAC"}

package/dist/src/lib/validateTransaction.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateTransaction = void 0;
+const viem_1 = require("viem");
+const aave_1 = require("./helpers/aave");
+const transactionKind_1 = require("./helpers/transactionKind");
+const validateTransaction = (params) => {
+    const { chainId, decodedTransaction, sender } = params;
+    if (decodedTransaction.kind === 'error') {
+        const decodedTransactionError = decodedTransaction;
+        throw new Error(`Transaction failed to decode: ${decodedTransactionError.message}`);
+    }
+    const decodedTransactionSuccess = decodedTransaction;
+    const { POOL: aavePoolAddress } = (0, aave_1.getAaveAddresses)(chainId);
+    const feeContractAddress = (0, aave_1.getFeeContractAddress)(chainId);
+    if (!feeContractAddress) {
+        throw new Error(`Fee contract address not found for chainId ${chainId}`);
+    }
+    if (decodedTransaction.kind === transactionKind_1.TransactionKind.ERC20) {
+        if (['approve', 'increaseAllowance'].includes(decodedTransactionSuccess.fn)) {
+            const [spender, amount] = decodedTransactionSuccess.args;
+            if (!(0, viem_1.isAddressEqual)(spender, feeContractAddress) &&
+                !(0, viem_1.isAddressEqual)(spender, aavePoolAddress)) {
+                throw new Error(`ERC20 approval to forbidden spender ${spender}`);
+            }
+            if (amount === 2n ** 256n - 1n)
+                throw new Error('Infinite approval not allowed');
+        }
+        else {
+            throw new Error('ERC20 function not allowed');
+        }
+        return;
+    }
+    if (decodedTransaction.kind === transactionKind_1.TransactionKind.FEE) {
+        if (['depositToAave', 'withdrawFromAave'].includes(decodedTransactionSuccess.fn)) {
+            // const [appId, assetAddress, amount] =
+            //   decodedTransactionSuccess.args as [number, Address, bigint];
+            // There is nothing to block here
+            // A wrong appId and the delegatee will produce an invalid signature
+            // A wrong assetAddress or amount and the deposit/withdrawal will fail
+        }
+        else {
+            throw new Error('Fee function not allowed');
+        }
+        return;
+    }
+    if (decodedTransaction.kind === transactionKind_1.TransactionKind.AAVE) {
+        const fn = decodedTransactionSuccess.fn;
+        const args = decodedTransactionSuccess.args; // Args depend on the function being called
+        if (fn === 'supply') {
+            if (!(0, viem_1.isAddressEqual)(args[2], sender))
+                throw new Error('supply.onBehalfOf != sender');
+        }
+        else if (fn === 'withdraw') {
+            if (!(0, viem_1.isAddressEqual)(args[2], sender))
+                throw new Error('withdraw.to != sender');
+        }
+        else if (fn === 'borrow') {
+            if (!(0, viem_1.isAddressEqual)(args[4], sender))
+                throw new Error('borrow.onBehalfOf != sender');
+        }
+        else if (fn === 'repay') {
+            if (!(0, viem_1.isAddressEqual)(args[3], sender))
+                throw new Error('repay.onBehalfOf != sender');
+        }
+        else if (fn === 'setUserUseReserveAsCollateral') {
+            // ok; self-scoped setting
+        }
+        else {
+            throw new Error(`Aave Pool function not allowed: ${fn}`);
+        }
+        return;
+    }
+    throw new Error('Unknown decoded transaction kind. Could not validate transaction.');
+};
+exports.validateTransaction = validateTransaction;
+//# sourceMappingURL=validateTransaction.js.map

package/dist/src/lib/validateTransaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateTransaction.js","sourceRoot":"","sources":["../../../src/lib/validateTransaction.ts"],"names":[],"mappings":";;;AAOA,+BAAsC;AAEtC,yCAAyE;AACzE,+DAA4D;AAErD,MAAM,mBAAmB,GAAG,CAAC,MAAiC,EAAE,EAAE;IACvE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAEvD,IAAI,kBAAkB,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACxC,MAAM,uBAAuB,GAAG,kBAA6C,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,iCAAiC,uBAAuB,CAAC,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,yBAAyB,GAAG,kBAA+C,CAAC;IAElF,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,IAAA,uBAAgB,EAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,kBAAkB,GAAG,IAAA,4BAAqB,EAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,kBAAkB,CAAC,IAAI,KAAK,iCAAe,CAAC,KAAK,EAAE,CAAC;QACtD,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5E,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,yBAAyB,CAAC,IAAyB,CAAC;YAC9E,IACE,CAAC,IAAA,qBAAc,EAAC,OAAO,EAAE,kBAAkB,CAAC;gBAC5C,CAAC,IAAA,qBAAc,EAAC,OAAO,EAAE,eAAe,CAAC,EACzC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,IAAI,MAAM,KAAK,EAAE,IAAI,IAAI,GAAG,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,OAAO;IACT,CAAC;IAED,IAAI,kBAAkB,CAAC,IAAI,KAAK,iCAAe,CAAC,GAAG,EAAE,CAAC;QACpD,IAAI,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC,EAAE,CAAC;YACjF,wCAAwC;YACxC,iEAAiE;YACjE,iCAAiC;YACjC,oEAAoE;YACpE,sEAAsE;QACxE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO;IACT,CAAC;IAED,IAAI,kBAAkB,CAAC,IAAI,KAAK,iCAAe,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,EAAE,GAAG,yBAAyB,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAa,CAAC,CAAC,2CAA2C;QAEjG,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,IAAA,qBAAc,EAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,EAAE,KAAK,UAAU,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAA,qBAAc,EAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACjF,CAAC;aAAM,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAA,qBAAc,EAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAA,qBAAc,EAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACtF,CAAC;aAAM,IAAI,EAAE,KAAK,+BAA+B,EAAE,CAAC;YAClD,0BAA0B;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO;IACT,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;AACvF,CAAC,CAAC;AAtEW,QAAA,mBAAmB,uBAsE9B"}