@nevermined-io/core-kit 1.6.0 → 1.7.0

package/dist/nevermined/utils/BlockchainViemUtils.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/nevermined/utils/BlockchainViemUtils.ts"],"sourcesContent":["import { signerToEcdsaValidator } from '@zerodev/ecdsa-validator'\nimport {\n  deserializePermissionAccount,\n  serializePermissionAccount,\n  toPermissionValidator,\n} from '@zerodev/permissions'\nimport { toECDSASigner } from '@zerodev/permissions/signers'\nimport {\n  addressToEmptyAccount,\n  createKernelAccount,\n  createKernelAccountClient,\n  createZeroDevPaymasterClient,\n  getUserOperationGasPrice,\n  KernelAccountClient,\n  type KernelSmartAccountImplementation,\n} from '@zerodev/sdk'\nimport { KERNEL_V3_1, getEntryPoint } from '@zerodev/sdk/constants'\nimport {\n  Address,\n  encodeAbiParameters,\n  getAbiItem,\n  getAddress,\n  getContract,\n  http,\n  isAddress,\n  pad,\n  stringToBytes,\n  stringToHex,\n  toBytes,\n  keccak256 as viemKeccak256,\n  type Abi,\n  type AbiEvent,\n  type AbiFunction,\n  type Account,\n  type PublicClient,\n  type TransactionReceipt,\n} from 'viem'\nimport { SmartAccount } from 'viem/account-abstraction'\nimport {\n  english,\n  generateMnemonic,\n  generatePrivateKey,\n  mnemonicToAccount,\n  privateKeyToAccount,\n} from 'viem/accounts'\nimport { Instantiable, InstantiableConfig, Web3Clients } from '../../Instantiable.abstract.js'\nimport { ContractsError } from '../../errors/NeverminedErrors.js'\nimport { getChain } from '../../utils/Network.js'\nimport { Signer } from '@zerodev/sdk/types'\n\nconst ENTRY_POINT_VERSION = '0.7'\n\n/**\n * Utility class with methods that allow the interaction with the blockchain.\n * This class uses Viem library to interact with the blockchain.\n */\nexport class BlockchainViemUtils extends Instantiable {\n  constructor(config: InstantiableConfig) {\n    super()\n    this.setInstanceConfig(config)\n  }\n}\n\n//////////////////////////\n///// UTILITIES //////////\n//////////////////////////\n\n///// CONTRACTS\n\n// Wait budget for an L2 block to be mined and the receipt to surface.\n// Base / Base Sepolia block time is ~2s; 30s ≈ 15 blocks of headroom.\nconst TRANSACTION_RECEIPT_TIMEOUT_MS = 30_000\nconst TRANSACTION_RECEIPT_POLLING_INTERVAL_MS = 1_500\n\n/**\n * Given a transaction hash, it returns the transaction receipt.\n * Uses viem's `waitForTransactionReceipt` which polls until the receipt is\n * available, retrying on `TransactionReceiptNotFoundError` and handling\n * tx-replacement / reorgs natively.\n * @param txHash - the transaction hash\n * @returns the transaction receipt\n */\nexport async function getTransactionReceipt({\n  txHash,\n  publicClient,\n}: {\n  txHash: `0x${string}`\n  publicClient: PublicClient\n  iteration?: number\n}): Promise<TransactionReceipt> {\n  try {\n    return await publicClient.waitForTransactionReceipt({\n      hash: txHash,\n      timeout: TRANSACTION_RECEIPT_TIMEOUT_MS,\n      pollingInterval: TRANSACTION_RECEIPT_POLLING_INTERVAL_MS,\n      confirmations: 1,\n    })\n  } catch (error) {\n    throw new ContractsError(\n      `Unable to get transaction receipt with hash: ${txHash}. Error: ${error}`,\n    )\n  }\n}\n\n/**\n * Given an already deployed contract address and the ABI, it returns the contract instance.\n *\n * @param contractAddress - the contract address\n * @param abi - the contract artifact\n * @param client - the client to interact with the blockchain\n * @returns a contract instance\n */\nexport async function getContractInstance(contractAddress: string, abi: Abi, client: Web3Clients) {\n  return getContract({\n    abi,\n    address: contractAddress as `0x${string}`,\n    client: { wallet: client.wallet, public: client.public },\n  })\n}\n\n///// ABIs\n\n/**\n * It searchs an ABI function in the ABI.\n * @param abi the ABI of the contract\n * @param funcName the function name\n * @param args the args of the function\n * @returns the function found\n */\nexport function searchAbiFunction(abi: Abi, funcName: string, args: any[] = []): AbiFunction {\n  const func = getAbiItem({ abi, name: funcName, args })\n  if (!func || func.type !== 'function') {\n    throw new ContractsError(`Function \"${funcName}\" is not part of contract`)\n  }\n  return func as AbiFunction\n}\n\n/**\n * It searchs an ABI event in the ABI.\n * @param abi the ABI of the contract\n * @param funcName the event name\n * @returns the event found\n */\nexport function searchAbiEvent(abi: Abi, eventName: string): AbiEvent {\n  const event = getAbiItem({\n    abi,\n    name: eventName,\n  })\n  if (!event || event.type !== 'event') {\n    throw new ContractsError(`Event \"${event}\" is not part of contract`)\n  }\n  return event as AbiEvent\n}\n\n/**\n * It searchs an ABI function in the ABI.\n * @param abi the ABI of the contract\n * @param funcName the function name\n * @param args the args of the function\n * @returns the function found\n */\nexport function getSignatureOfFunction(abi: Abi, funcName: string, args: any[] = []): AbiFunction {\n  return searchAbiFunction(abi, funcName, args)\n}\n\n/**\n * It searchs an ABI function in the ABI and return the inputs.\n * @param abi the ABI of the contract\n * @param funcName the function name\n * @param args the args of the function\n * @returns the function found\n */\nexport function getInputsOfFunction(abi: Abi, funcName: string, args: any[] = []) {\n  return searchAbiFunction(abi, funcName, args).inputs\n}\n\n/**\n * It searchs an ABI function in the ABI and return the inputs formatted.\n * @param abi the ABI of the contract\n * @param funcName the function name\n * @param args the args of the function\n * @returns the function found\n */\nexport function getInputsOfFunctionFormatted(abi: Abi, funcName: string, args: any[] = []) {\n  return searchAbiFunction(abi, funcName, args).inputs.map((input, i) => {\n    return {\n      name: input.name,\n      value: args[i],\n    }\n  })\n}\n\n//////// UTILS\n\n/**\n * Given an address it returns that address in checksum format.\n * @param address the address\n * @returns the same address in checksum format\n */\nexport function getChecksumAddress(address: string): string {\n  return getAddress(address)\n}\n\n/**\n * It checks if the address is a valid address.\n * @param address the address to check\n * @returns true of the address is valid\n */\nexport function isValidAddress(address: string): boolean {\n  return isAddress(address)\n}\n\n/**\n * Encodes a UTF-8 string into a byte array.\n\n * @param message the string to encode\n * @returns the encoded byte array\n */\nexport function getBytes(message: string): Uint8Array {\n  return stringToBytes(message)\n}\n\n/**\n * It pads a value with zeros.\n * @param value the value to pad\n * @param length the expected longitutde of the value\n * @returns the padded value\n */\nexport function zeroPadValue(value: `0x${string}` | Uint8Array, length: number): string {\n  return pad(value, { size: length }) as `0x${string}`\n}\n\n/**\n * Encodes a UTF-8 string into a hex string\n * @param message the string to encode\n * @returns the hex string\n */\nexport function encodeBytes32String(message: string) {\n  return stringToHex(message, { size: 32 })\n}\n\n////// ACCOUNTS\n/**\n * Given a seedphrase, it returns an account.\n * @param seedphrase - the seedphrase to be used to generate the account\n * @param addressIndex - the address index\n * @returns an account\n */\nexport function makeWallet(seedphrase: string, addressIndex = 0): Account {\n  return mnemonicToAccount(seedphrase, { addressIndex })\n}\n\n/**\n * Given a seedphrase generates multiple accounts\n * @param seedphrase - the seedphrase to be used to generate the account\n * @param numAccounts - the number of accounts to create\n * @returns the array of accounts\n */\nexport function makeWallets(seedphrase: string, numAccounts = 10) {\n  const accounts: Account[] = []\n  for (let i = 0; i < numAccounts; i++) {\n    accounts.push(makeWallet(seedphrase, i))\n  }\n  return accounts\n}\n\n/**\n * It generates a random account.\n * @returns a new account\n */\nexport function makeRandomWallet(): Account {\n  const mnemonic = generateMnemonic(english)\n  return makeWallet(mnemonic)\n}\n\n/**\n * It generates a list of random accounts\n * @param numAccounts - the number of accounts to create\n * @returns the array of accounts\n */\nexport function makeRandomWallets(numAccounts = 10): Account[] {\n  const mnemonic = generateMnemonic(english)\n  return makeWallets(mnemonic, numAccounts)\n}\n\n/////// HASHES\n\n/**\n * It hashes a string using keccak256.\n * @param seed the string to hash\n * @returns the hash\n */\nexport function keccak256(seed: string): string {\n  return viemKeccak256(toBytes(seed))\n}\n\n/**\n * It encodes and hashes a list of primitive values into an ABI-encoded hex value.\n * @param types the types of the values\n * @param values the values to encode\n * @returns the hash\n */\nexport function keccak256WithEncode(types: any[], values: any[]): string {\n  const encoded = encodeAbiParameters(types, values as never)\n  return keccak256(encoded)\n}\n\n/**\n * It encodes and hashes a list of primitive values into an ABI-encoded hex value.\n * @param types the types of the values\n * @param values the values to encode\n * @returns the hash\n */\nexport function keccak256Packed(types: any[], values: any[]): string {\n  return keccak256WithEncode(types, values)\n}\n\n/////// ZERO DEV\n\n/**\n * Returns the bundler RPC URL. When `BUNDLER_RPC_URL_OVERRIDE` is set\n * (used by tests against a local Alto + anvil-fork stack), it takes precedence\n * over the canonical ZeroDev URL. When `useUltraRelay` is true, the production\n * URL is routed through ZeroDev's UltraRelay (`?provider=ULTRA_RELAY`); the\n * override branch is left untouched.\n * @param useUltraRelay - when true, append `?provider=ULTRA_RELAY` to route the\n *   UserOperation through ZeroDev's UltraRelay bundler tier. Ignored when\n *   `BUNDLER_RPC_URL_OVERRIDE` is set.\n */\nexport function getBundlerRpcUrl(\n  zeroDevProjectId: string,\n  chainId: number,\n  useUltraRelay = false,\n): string {\n  const base = `https://rpc.zerodev.app/api/v3/${zeroDevProjectId}/chain/${chainId}`\n  // `||` (not `??`) because Vite replaces missing browser env vars with the\n  // empty string at build time; an empty override is equivalent to \"no\n  // override\" for our purposes.\n  return (\n    process.env.BUNDLER_RPC_URL_OVERRIDE || (useUltraRelay ? `${base}?provider=ULTRA_RELAY` : base)\n  )\n}\n\n/**\n * Returns the paymaster RPC URL (ZeroDev-only; the local fork stack uses\n * `ultra-relay` which sponsors via the bundler's executor key without a\n * paymaster, so this URL is not consulted when `BUNDLER_RPC_URL_OVERRIDE` is\n * set).\n */\nexport function getPaymasterRpcUrl(zeroDevProjectId: string, chainId: number): string {\n  return `https://rpc.zerodev.app/api/v3/${zeroDevProjectId}/chain/${chainId}`\n}\n\n/**\n * Returns true when the kernel client should run in \"relayer mode\" — no\n * paymaster, gas fees zeroed out. Used by tests against a local\n * `ultra-relay` (ZeroDev's fork of Alto) on top of an anvil-fork. The relayer's\n * executor key pays gas directly via `EntryPoint.handleOps`, avoiding the\n * paymaster sponsorship handshake altogether.\n */\nexport function isRelayerMode(): boolean {\n  return Boolean(process.env.BUNDLER_RPC_URL_OVERRIDE)\n}\n\n/**\n * Returns gas prices for UserOperation fee estimation. ZeroDev's bundler\n * exposes a custom `zd_getUserOperationGasPrice` method; standard ERC-4337\n * bundlers do not. In relayer mode the bundler accepts UserOps with zeroed\n * `maxFeePerGas`/`maxPriorityFeePerGas` and pays gas itself.\n */\nexport async function estimateUserOperationFees(\n  bundlerClient: any,\n  _publicClient: any,\n): Promise<{ maxFeePerGas: bigint; maxPriorityFeePerGas: bigint }> {\n  if (isRelayerMode()) {\n    return { maxFeePerGas: 0n, maxPriorityFeePerGas: 0n }\n  }\n  return getUserOperationGasPrice(bundlerClient)\n}\n\n/**\n * It creates a ZeroDev Kernel client.\n * @param signer the signer account\n * @param chainId the chain id\n * @param zeroDevProjectId the zero dev project id, you can get it from the ZeroDev dashboard\n * @param useUltraRelay forwarded straight to `getBundlerRpcUrl` — when true the\n *   bundler RPC is routed through ZeroDev's UltraRelay. Ignored when\n *   `BUNDLER_RPC_URL_OVERRIDE` is set.\n * @returns the kernel client\n */\nexport async function createKernelClient(\n  kernelAccount: SmartAccount,\n  chainId: number,\n  zeroDevProjectId: string,\n  publicClient: any,\n  useUltraRelay = false,\n): Promise<KernelAccountClient> {\n  const bundlerRpc = getBundlerRpcUrl(zeroDevProjectId, chainId, useUltraRelay)\n  const paymasterRpc = getPaymasterRpcUrl(zeroDevProjectId, chainId)\n\n  return createKernelAccountClient({\n    account: kernelAccount,\n    chain: getChain(chainId),\n    bundlerTransport: http(bundlerRpc),\n    client: publicClient,\n    ...(isRelayerMode()\n      ? {}\n      : {\n          paymaster: {\n            getPaymasterData: (userOperation: any) => {\n              const zerodevPaymaster = createZeroDevPaymasterClient({\n                chain: getChain(chainId),\n                transport: http(paymasterRpc),\n              })\n              return zerodevPaymaster.sponsorUserOperation({ userOperation })\n            },\n          },\n        }),\n    userOperation: {\n      estimateFeesPerGas: async ({ bundlerClient }) => {\n        return estimateUserOperationFees(bundlerClient, publicClient)\n      },\n    },\n  })\n}\n\nexport type EcdsaValidator = Awaited<ReturnType<typeof signerToEcdsaValidator>>\n\n/**\n * Identifies the smart-account derivation inputs (entryPoint + kernel version).\n * The SCA is deterministic from `(EOA, entryPoint, kernelVersion, index)`, so a\n * bump here means the same EOA derives a different SCA. Persisted SCA caches\n * (e.g. the webapp's localStorage) should stamp this and invalidate on change.\n */\nexport const SCA_DERIVATION_VERSION = `${ENTRY_POINT_VERSION}:${KERNEL_V3_1}`\n\n/**\n * Build the ECDSA sudo validator for a signer. Both `createKernelSmartAccount`\n * and `createSessionKey` need this validator and each derives it via a ZeroDev\n * RPC round-trip. Callers that run both in sequence (e.g. the webapp API-key\n * creation path) can compute it once here and pass it into both helpers to\n * avoid the redundant round-trip.\n *\n * @param ecdsaValidator (on the consumers) must be one built for the SAME\n * `signer` — passing a validator derived from a different signer would attach\n * the wrong owner to the account.\n */\nexport async function createEcdsaValidator(\n  signer: Signer,\n  publicClient: PublicClient,\n): Promise<EcdsaValidator> {\n  return signerToEcdsaValidator(publicClient, {\n    signer,\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    kernelVersion: KERNEL_V3_1,\n  })\n}\n\nexport async function createKernelSmartAccount(\n  signer: Signer,\n  publicClient: PublicClient,\n  ecdsaValidator?: EcdsaValidator,\n): Promise<SmartAccount> {\n  const validator = ecdsaValidator ?? (await createEcdsaValidator(signer, publicClient))\n\n  return await createKernelAccount(publicClient, {\n    plugins: {\n      sudo: validator,\n    },\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    kernelVersion: KERNEL_V3_1,\n  })\n}\n\nexport async function getApproval(signer: Signer, publicClient: any, policies: any[]) {\n  const ecdsaValidator = await signerToEcdsaValidator(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    signer,\n    kernelVersion: KERNEL_V3_1,\n  })\n  const emptyAccount = addressToEmptyAccount(signer.address as Address)\n  const emptySessionKeySigner = await toECDSASigner({ signer: emptyAccount })\n\n  const permissionPlugin = await toPermissionValidator(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    signer: emptySessionKeySigner,\n    policies: policies,\n    kernelVersion: KERNEL_V3_1,\n  })\n  const sessionKeyAccount = await createKernelAccount(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    plugins: {\n      sudo: ecdsaValidator,\n      regular: permissionPlugin,\n    },\n    kernelVersion: KERNEL_V3_1,\n  })\n\n  return await serializePermissionAccount(sessionKeyAccount)\n}\n\nexport async function useSessionKey(approval: string, signer: Signer, publicClient: any) {\n  const sessionKeySigner = await toECDSASigner({\n    signer,\n  })\n  const sessionKeyAccount = await deserializePermissionAccount(\n    publicClient,\n    getEntryPoint(ENTRY_POINT_VERSION),\n    KERNEL_V3_1,\n    approval,\n    sessionKeySigner,\n  )\n\n  return sessionKeyAccount\n}\n\nexport async function createSessionKey(\n  signer: Signer,\n  publicClient: any,\n  policies: any[],\n  ecdsaValidator?: EcdsaValidator,\n) {\n  const validator = ecdsaValidator ?? (await createEcdsaValidator(signer, publicClient))\n  const sessionPrivateKey = generatePrivateKey()\n  const masterAccount = privateKeyToAccount(sessionPrivateKey)\n  const sessionKeySigner = await toECDSASigner({\n    signer: masterAccount,\n  })\n\n  const permissionPlugin = await toPermissionValidator(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    signer: sessionKeySigner,\n    policies: policies,\n    kernelVersion: KERNEL_V3_1,\n  })\n\n  const sessionKeyAccount = await createKernelAccount(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    plugins: {\n      sudo: validator,\n      regular: permissionPlugin,\n    },\n    kernelVersion: KERNEL_V3_1,\n  })\n\n  return serializePermissionAccount(sessionKeyAccount, sessionPrivateKey)\n}\n\nexport async function getSessionKey(serializedSessionKey: string, publicClient: any) {\n  const sessionKeyAccount = await deserializePermissionAccount(\n    publicClient,\n    getEntryPoint(ENTRY_POINT_VERSION),\n    KERNEL_V3_1,\n    serializedSessionKey,\n  )\n\n  return sessionKeyAccount\n}\n\n/**\n * Creates a delegated session key for an existing kernel account.\n * The resulting serialized session key can be deserialized into a SmartAccount\n * that shares the same address as the kernel account but enforces the given policies.\n *\n * @param kernelAccount The existing SmartAccount (kernel) to delegate from\n * @param publicClient Viem PublicClient instance\n * @param policies Array of policies to enforce for this session key\n * @returns Serialized session key string\n */\nexport async function createDelegatedSessionKeyFromKernel(\n  kernelAccount: SmartAccount,\n  publicClient: PublicClient,\n  policies: any[],\n): Promise<string> {\n  // 1) Generate ephemeral session private key (used only for the permission plugin)\n  const sessionPrivateKey = generatePrivateKey()\n  const sessionAccount = privateKeyToAccount(sessionPrivateKey)\n\n  // 2) Wrap ephemeral key as ECDSA signer for permissions\n  const sessionKeySigner = await toECDSASigner({ signer: sessionAccount })\n\n  // 3) Create the permission validator plugin\n  const permissionValidator = await toPermissionValidator(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    signer: sessionKeySigner,\n    policies,\n    kernelVersion: KERNEL_V3_1,\n  })\n\n  // 4) Extract the sudo validator from the existing kernel account\n  const kernelAccountTyped = kernelAccount as SmartAccount<KernelSmartAccountImplementation>\n  const sudoValidator = kernelAccountTyped.kernelPluginManager.sudoValidator\n\n  if (!sudoValidator) {\n    throw new Error('Kernel account does not have a sudo validator')\n  }\n\n  // 5) Create a new kernel account with both sudo (from original) and permission validator\n  const sessionKeyAccount = await createKernelAccount(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    plugins: {\n      sudo: sudoValidator, // Use existing sudo validator\n      regular: permissionValidator,\n    },\n    kernelVersion: KERNEL_V3_1,\n  })\n\n  // 6) Serialize the session key account with the ephemeral private key\n  const serialized = await serializePermissionAccount(sessionKeyAccount, sessionPrivateKey)\n\n  return serialized\n}\n\nexport const WalletUtils = {\n  makeWallet,\n  makeWallets,\n  makeRandomWallet,\n  makeRandomWallets,\n}\n"],"names":["signerToEcdsaValidator","deserializePermissionAccount","serializePermissionAccount","toPermissionValidator","toECDSASigner","addressToEmptyAccount","createKernelAccount","createKernelAccountClient","createZeroDevPaymasterClient","getUserOperationGasPrice","KERNEL_V3_1","getEntryPoint","encodeAbiParameters","getAbiItem","getAddress","getContract","http","isAddress","pad","stringToBytes","stringToHex","toBytes","keccak256","viemKeccak256","english","generateMnemonic","generatePrivateKey","mnemonicToAccount","privateKeyToAccount","Instantiable","ContractsError","getChain","ENTRY_POINT_VERSION","BlockchainViemUtils","config","setInstanceConfig","TRANSACTION_RECEIPT_TIMEOUT_MS","TRANSACTION_RECEIPT_POLLING_INTERVAL_MS","getTransactionReceipt","txHash","publicClient","waitForTransactionReceipt","hash","timeout","pollingInterval","confirmations","error","getContractInstance","contractAddress","abi","client","address","wallet","public","searchAbiFunction","funcName","args","func","name","type","searchAbiEvent","eventName","event","getSignatureOfFunction","getInputsOfFunction","inputs","getInputsOfFunctionFormatted","map","input","i","value","getChecksumAddress","isValidAddress","getBytes","message","zeroPadValue","length","size","encodeBytes32String","makeWallet","seedphrase","addressIndex","makeWallets","numAccounts","accounts","push","makeRandomWallet","mnemonic","makeRandomWallets","seed","keccak256WithEncode","types","values","encoded","keccak256Packed","getBundlerRpcUrl","zeroDevProjectId","chainId","useUltraRelay","base","process","env","BUNDLER_RPC_URL_OVERRIDE","getPaymasterRpcUrl","isRelayerMode","Boolean","estimateUserOperationFees","bundlerClient","_publicClient","maxFeePerGas","maxPriorityFeePerGas","createKernelClient","kernelAccount","bundlerRpc","paymasterRpc","account","chain","bundlerTransport","paymaster","getPaymasterData","userOperation","zerodevPaymaster","transport","sponsorUserOperation","estimateFeesPerGas","SCA_DERIVATION_VERSION","createEcdsaValidator","signer","entryPoint","kernelVersion","createKernelSmartAccount","ecdsaValidator","validator","plugins","sudo","getApproval","policies","emptyAccount","emptySessionKeySigner","permissionPlugin","sessionKeyAccount","regular","useSessionKey","approval","sessionKeySigner","createSessionKey","sessionPrivateKey","masterAccount","getSessionKey","serializedSessionKey","createDelegatedSessionKeyFromKernel","sessionAccount","permissionValidator","kernelAccountTyped","sudoValidator","kernelPluginManager","Error","serialized","WalletUtils"],"mappings":"AAAA,SAASA,sBAAsB,QAAQ,2BAA0B;AACjE,SACEC,4BAA4B,EAC5BC,0BAA0B,EAC1BC,qBAAqB,QAChB,uBAAsB;AAC7B,SAASC,aAAa,QAAQ,+BAA8B;AAC5D,SACEC,qBAAqB,EACrBC,mBAAmB,EACnBC,yBAAyB,EACzBC,4BAA4B,EAC5BC,wBAAwB,QAGnB,eAAc;AACrB,SAASC,WAAW,EAAEC,aAAa,QAAQ,yBAAwB;AACnE,SAEEC,mBAAmB,EACnBC,UAAU,EACVC,UAAU,EACVC,WAAW,EACXC,IAAI,EACJC,SAAS,EACTC,GAAG,EACHC,aAAa,EACbC,WAAW,EACXC,OAAO,EACPC,aAAaC,aAAa,QAOrB,OAAM;AAEb,SACEC,OAAO,EACPC,gBAAgB,EAChBC,kBAAkB,EAClBC,iBAAiB,EACjBC,mBAAmB,QACd,gBAAe;AACtB,SAASC,YAAY,QAAyC,iCAAgC;AAC9F,SAASC,cAAc,QAAQ,mCAAkC;AACjE,SAASC,QAAQ,QAAQ,yBAAwB;AAGjD,MAAMC,sBAAsB;AAE5B;;;CAGC,GACD,OAAO,MAAMC,4BAA4BJ;IACvC,YAAYK,MAA0B,CAAE;QACtC,KAAK;QACL,IAAI,CAACC,iBAAiB,CAACD;IACzB;AACF;AAEA,0BAA0B;AAC1B,0BAA0B;AAC1B,0BAA0B;AAE1B,eAAe;AAEf,sEAAsE;AACtE,sEAAsE;AACtE,MAAME,iCAAiC;AACvC,MAAMC,0CAA0C;AAEhD;;;;;;;CAOC,GACD,OAAO,eAAeC,sBAAsB,EAC1CC,MAAM,EACNC,YAAY,EAKb;IACC,IAAI;QACF,OAAO,MAAMA,aAAaC,yBAAyB,CAAC;YAClDC,MAAMH;YACNI,SAASP;YACTQ,iBAAiBP;YACjBQ,eAAe;QACjB;IACF,EAAE,OAAOC,OAAO;QACd,MAAM,IAAIhB,eACR,CAAC,6CAA6C,EAAES,OAAO,SAAS,EAAEO,OAAO;IAE7E;AACF;AAEA;;;;;;;CAOC,GACD,OAAO,eAAeC,oBAAoBC,eAAuB,EAAEC,GAAQ,EAAEC,MAAmB;IAC9F,OAAOnC,YAAY;QACjBkC;QACAE,SAASH;QACTE,QAAQ;YAAEE,QAAQF,OAAOE,MAAM;YAAEC,QAAQH,OAAOG,MAAM;QAAC;IACzD;AACF;AAEA,UAAU;AAEV;;;;;;CAMC,GACD,OAAO,SAASC,kBAAkBL,GAAQ,EAAEM,QAAgB,EAAEC,OAAc,EAAE;IAC5E,MAAMC,OAAO5C,WAAW;QAAEoC;QAAKS,MAAMH;QAAUC;IAAK;IACpD,IAAI,CAACC,QAAQA,KAAKE,IAAI,KAAK,YAAY;QACrC,MAAM,IAAI7B,eAAe,CAAC,UAAU,EAAEyB,SAAS,yBAAyB,CAAC;IAC3E;IACA,OAAOE;AACT;AAEA;;;;;CAKC,GACD,OAAO,SAASG,eAAeX,GAAQ,EAAEY,SAAiB;IACxD,MAAMC,QAAQjD,WAAW;QACvBoC;QACAS,MAAMG;IACR;IACA,IAAI,CAACC,SAASA,MAAMH,IAAI,KAAK,SAAS;QACpC,MAAM,IAAI7B,eAAe,CAAC,OAAO,EAAEgC,MAAM,yBAAyB,CAAC;IACrE;IACA,OAAOA;AACT;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,uBAAuBd,GAAQ,EAAEM,QAAgB,EAAEC,OAAc,EAAE;IACjF,OAAOF,kBAAkBL,KAAKM,UAAUC;AAC1C;AAEA;;;;;;CAMC,GACD,OAAO,SAASQ,oBAAoBf,GAAQ,EAAEM,QAAgB,EAAEC,OAAc,EAAE;IAC9E,OAAOF,kBAAkBL,KAAKM,UAAUC,MAAMS,MAAM;AACtD;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,6BAA6BjB,GAAQ,EAAEM,QAAgB,EAAEC,OAAc,EAAE;IACvF,OAAOF,kBAAkBL,KAAKM,UAAUC,MAAMS,MAAM,CAACE,GAAG,CAAC,CAACC,OAAOC;QAC/D,OAAO;YACLX,MAAMU,MAAMV,IAAI;YAChBY,OAAOd,IAAI,CAACa,EAAE;QAChB;IACF;AACF;AAEA,cAAc;AAEd;;;;CAIC,GACD,OAAO,SAASE,mBAAmBpB,OAAe;IAChD,OAAOrC,WAAWqC;AACpB;AAEA;;;;CAIC,GACD,OAAO,SAASqB,eAAerB,OAAe;IAC5C,OAAOlC,UAAUkC;AACnB;AAEA;;;;;CAKC,GACD,OAAO,SAASsB,SAASC,OAAe;IACtC,OAAOvD,cAAcuD;AACvB;AAEA;;;;;CAKC,GACD,OAAO,SAASC,aAAaL,KAAiC,EAAEM,MAAc;IAC5E,OAAO1D,IAAIoD,OAAO;QAAEO,MAAMD;IAAO;AACnC;AAEA;;;;CAIC,GACD,OAAO,SAASE,oBAAoBJ,OAAe;IACjD,OAAOtD,YAAYsD,SAAS;QAAEG,MAAM;IAAG;AACzC;AAEA,eAAe;AACf;;;;;CAKC,GACD,OAAO,SAASE,WAAWC,UAAkB,EAAEC,eAAe,CAAC;IAC7D,OAAOtD,kBAAkBqD,YAAY;QAAEC;IAAa;AACtD;AAEA;;;;;CAKC,GACD,OAAO,SAASC,YAAYF,UAAkB,EAAEG,cAAc,EAAE;IAC9D,MAAMC,WAAsB,EAAE;IAC9B,IAAK,IAAIf,IAAI,GAAGA,IAAIc,aAAad,IAAK;QACpCe,SAASC,IAAI,CAACN,WAAWC,YAAYX;IACvC;IACA,OAAOe;AACT;AAEA;;;CAGC,GACD,OAAO,SAASE;IACd,MAAMC,WAAW9D,iBAAiBD;IAClC,OAAOuD,WAAWQ;AACpB;AAEA;;;;CAIC,GACD,OAAO,SAASC,kBAAkBL,cAAc,EAAE;IAChD,MAAMI,WAAW9D,iBAAiBD;IAClC,OAAO0D,YAAYK,UAAUJ;AAC/B;AAEA,cAAc;AAEd;;;;CAIC,GACD,OAAO,SAAS7D,UAAUmE,IAAY;IACpC,OAAOlE,cAAcF,QAAQoE;AAC/B;AAEA;;;;;CAKC,GACD,OAAO,SAASC,oBAAoBC,KAAY,EAAEC,MAAa;IAC7D,MAAMC,UAAUjF,oBAAoB+E,OAAOC;IAC3C,OAAOtE,UAAUuE;AACnB;AAEA;;;;;CAKC,GACD,OAAO,SAASC,gBAAgBH,KAAY,EAAEC,MAAa;IACzD,OAAOF,oBAAoBC,OAAOC;AACpC;AAEA,gBAAgB;AAEhB;;;;;;;;;CASC,GACD,OAAO,SAASG,iBACdC,gBAAwB,EACxBC,OAAe,EACfC,gBAAgB,KAAK;IAErB,MAAMC,OAAO,CAAC,+BAA+B,EAAEH,iBAAiB,OAAO,EAAEC,SAAS;IAClF,0EAA0E;IAC1E,qEAAqE;IACrE,8BAA8B;IAC9B,OACEG,QAAQC,GAAG,CAACC,wBAAwB,IAAKJ,CAAAA,gBAAgB,GAAGC,KAAK,qBAAqB,CAAC,GAAGA,IAAG;AAEjG;AAEA;;;;;CAKC,GACD,OAAO,SAASI,mBAAmBP,gBAAwB,EAAEC,OAAe;IAC1E,OAAO,CAAC,+BAA+B,EAAED,iBAAiB,OAAO,EAAEC,SAAS;AAC9E;AAEA;;;;;;CAMC,GACD,OAAO,SAASO;IACd,OAAOC,QAAQL,QAAQC,GAAG,CAACC,wBAAwB;AACrD;AAEA;;;;;CAKC,GACD,OAAO,eAAeI,0BACpBC,aAAkB,EAClBC,aAAkB;IAElB,IAAIJ,iBAAiB;QACnB,OAAO;YAAEK,cAAc,EAAE;YAAEC,sBAAsB,EAAE;QAAC;IACtD;IACA,OAAOrG,yBAAyBkG;AAClC;AAEA;;;;;;;;;CASC,GACD,OAAO,eAAeI,mBACpBC,aAA2B,EAC3Bf,OAAe,EACfD,gBAAwB,EACxBxD,YAAiB,EACjB0D,gBAAgB,KAAK;IAErB,MAAMe,aAAalB,iBAAiBC,kBAAkBC,SAASC;IAC/D,MAAMgB,eAAeX,mBAAmBP,kBAAkBC;IAE1D,OAAO1F,0BAA0B;QAC/B4G,SAASH;QACTI,OAAOrF,SAASkE;QAChBoB,kBAAkBrG,KAAKiG;QACvB/D,QAAQV;QACR,GAAIgE,kBACA,CAAC,IACD;YACEc,WAAW;gBACTC,kBAAkB,CAACC;oBACjB,MAAMC,mBAAmBjH,6BAA6B;wBACpD4G,OAAOrF,SAASkE;wBAChByB,WAAW1G,KAAKkG;oBAClB;oBACA,OAAOO,iBAAiBE,oBAAoB,CAAC;wBAAEH;oBAAc;gBAC/D;YACF;QACF,CAAC;QACLA,eAAe;YACbI,oBAAoB,OAAO,EAAEjB,aAAa,EAAE;gBAC1C,OAAOD,0BAA0BC,eAAenE;YAClD;QACF;IACF;AACF;AAIA;;;;;CAKC,GACD,OAAO,MAAMqF,yBAAyB,GAAG7F,oBAAoB,CAAC,EAAEtB,aAAa,CAAA;AAE7E;;;;;;;;;;CAUC,GACD,OAAO,eAAeoH,qBACpBC,MAAc,EACdvF,YAA0B;IAE1B,OAAOxC,uBAAuBwC,cAAc;QAC1CuF;QACAC,YAAYrH,cAAcqB;QAC1BiG,eAAevH;IACjB;AACF;AAEA,OAAO,eAAewH,yBACpBH,MAAc,EACdvF,YAA0B,EAC1B2F,cAA+B;IAE/B,MAAMC,YAAYD,kBAAmB,MAAML,qBAAqBC,QAAQvF;IAExE,OAAO,MAAMlC,oBAAoBkC,cAAc;QAC7C6F,SAAS;YACPC,MAAMF;QACR;QACAJ,YAAYrH,cAAcqB;QAC1BiG,eAAevH;IACjB;AACF;AAEA,OAAO,eAAe6H,YAAYR,MAAc,EAAEvF,YAAiB,EAAEgG,QAAe;IAClF,MAAML,iBAAiB,MAAMnI,uBAAuBwC,cAAc;QAChEwF,YAAYrH,cAAcqB;QAC1B+F;QACAE,eAAevH;IACjB;IACA,MAAM+H,eAAepI,sBAAsB0H,OAAO5E,OAAO;IACzD,MAAMuF,wBAAwB,MAAMtI,cAAc;QAAE2H,QAAQU;IAAa;IAEzE,MAAME,mBAAmB,MAAMxI,sBAAsBqC,cAAc;QACjEwF,YAAYrH,cAAcqB;QAC1B+F,QAAQW;QACRF,UAAUA;QACVP,eAAevH;IACjB;IACA,MAAMkI,oBAAoB,MAAMtI,oBAAoBkC,cAAc;QAChEwF,YAAYrH,cAAcqB;QAC1BqG,SAAS;YACPC,MAAMH;YACNU,SAASF;QACX;QACAV,eAAevH;IACjB;IAEA,OAAO,MAAMR,2BAA2B0I;AAC1C;AAEA,OAAO,eAAeE,cAAcC,QAAgB,EAAEhB,MAAc,EAAEvF,YAAiB;IACrF,MAAMwG,mBAAmB,MAAM5I,cAAc;QAC3C2H;IACF;IACA,MAAMa,oBAAoB,MAAM3I,6BAC9BuC,cACA7B,cAAcqB,sBACdtB,aACAqI,UACAC;IAGF,OAAOJ;AACT;AAEA,OAAO,eAAeK,iBACpBlB,MAAc,EACdvF,YAAiB,EACjBgG,QAAe,EACfL,cAA+B;IAE/B,MAAMC,YAAYD,kBAAmB,MAAML,qBAAqBC,QAAQvF;IACxE,MAAM0G,oBAAoBxH;IAC1B,MAAMyH,gBAAgBvH,oBAAoBsH;IAC1C,MAAMF,mBAAmB,MAAM5I,cAAc;QAC3C2H,QAAQoB;IACV;IAEA,MAAMR,mBAAmB,MAAMxI,sBAAsBqC,cAAc;QACjEwF,YAAYrH,cAAcqB;QAC1B+F,QAAQiB;QACRR,UAAUA;QACVP,eAAevH;IACjB;IAEA,MAAMkI,oBAAoB,MAAMtI,oBAAoBkC,cAAc;QAChEwF,YAAYrH,cAAcqB;QAC1BqG,SAAS;YACPC,MAAMF;YACNS,SAASF;QACX;QACAV,eAAevH;IACjB;IAEA,OAAOR,2BAA2B0I,mBAAmBM;AACvD;AAEA,OAAO,eAAeE,cAAcC,oBAA4B,EAAE7G,YAAiB;IACjF,MAAMoG,oBAAoB,MAAM3I,6BAC9BuC,cACA7B,cAAcqB,sBACdtB,aACA2I;IAGF,OAAOT;AACT;AAEA;;;;;;;;;CASC,GACD,OAAO,eAAeU,oCACpBtC,aAA2B,EAC3BxE,YAA0B,EAC1BgG,QAAe;IAEf,kFAAkF;IAClF,MAAMU,oBAAoBxH;IAC1B,MAAM6H,iBAAiB3H,oBAAoBsH;IAE3C,wDAAwD;IACxD,MAAMF,mBAAmB,MAAM5I,cAAc;QAAE2H,QAAQwB;IAAe;IAEtE,4CAA4C;IAC5C,MAAMC,sBAAsB,MAAMrJ,sBAAsBqC,cAAc;QACpEwF,YAAYrH,cAAcqB;QAC1B+F,QAAQiB;QACRR;QACAP,eAAevH;IACjB;IAEA,iEAAiE;IACjE,MAAM+I,qBAAqBzC;IAC3B,MAAM0C,gBAAgBD,mBAAmBE,mBAAmB,CAACD,aAAa;IAE1E,IAAI,CAACA,eAAe;QAClB,MAAM,IAAIE,MAAM;IAClB;IAEA,yFAAyF;IACzF,MAAMhB,oBAAoB,MAAMtI,oBAAoBkC,cAAc;QAChEwF,YAAYrH,cAAcqB;QAC1BqG,SAAS;YACPC,MAAMoB;YACNb,SAASW;QACX;QACAvB,eAAevH;IACjB;IAEA,sEAAsE;IACtE,MAAMmJ,aAAa,MAAM3J,2BAA2B0I,mBAAmBM;IAEvE,OAAOW;AACT;AAEA,OAAO,MAAMC,cAAc;IACzB/E;IACAG;IACAI;IACAE;AACF,EAAC"}
+{"version":3,"sources":["../../../src/nevermined/utils/BlockchainViemUtils.ts"],"sourcesContent":["import { signerToEcdsaValidator } from '@zerodev/ecdsa-validator'\nimport {\n  deserializePermissionAccount,\n  serializePermissionAccount,\n  toPermissionValidator,\n} from '@zerodev/permissions'\nimport { toECDSASigner } from '@zerodev/permissions/signers'\nimport {\n  addressToEmptyAccount,\n  createKernelAccount,\n  createKernelAccountClient,\n  createZeroDevPaymasterClient,\n  getUserOperationGasPrice,\n  KernelAccountClient,\n  type KernelSmartAccountImplementation,\n} from '@zerodev/sdk'\nimport {\n  KERNEL_V3_1,\n  KERNEL_V3_3,\n  KERNEL_7702_DELEGATION_ADDRESS,\n  getEntryPoint,\n} from '@zerodev/sdk/constants'\nimport {\n  Address,\n  encodeAbiParameters,\n  getAbiItem,\n  getAddress,\n  getContract,\n  http,\n  isAddress,\n  pad,\n  stringToBytes,\n  stringToHex,\n  toBytes,\n  keccak256 as viemKeccak256,\n  type Abi,\n  type AbiEvent,\n  type AbiFunction,\n  type Account,\n  type PublicClient,\n  type SignAuthorizationReturnType,\n  type TransactionReceipt,\n} from 'viem'\nimport { SmartAccount } from 'viem/account-abstraction'\nimport {\n  english,\n  generateMnemonic,\n  generatePrivateKey,\n  mnemonicToAccount,\n  privateKeyToAccount,\n} from 'viem/accounts'\nimport { Instantiable, InstantiableConfig, Web3Clients } from '../../Instantiable.abstract.js'\nimport { ContractsError } from '../../errors/NeverminedErrors.js'\nimport { getChain, isTempoNetwork } from '../../utils/Network.js'\nimport { Signer } from '@zerodev/sdk/types'\n\nconst ENTRY_POINT_VERSION = '0.7'\n\n/**\n * Utility class with methods that allow the interaction with the blockchain.\n * This class uses Viem library to interact with the blockchain.\n */\nexport class BlockchainViemUtils extends Instantiable {\n  constructor(config: InstantiableConfig) {\n    super()\n    this.setInstanceConfig(config)\n  }\n}\n\n//////////////////////////\n///// UTILITIES //////////\n//////////////////////////\n\n///// CONTRACTS\n\n// Wait budget for an L2 block to be mined and the receipt to surface.\n// Base / Base Sepolia block time is ~2s; 30s ≈ 15 blocks of headroom.\nconst TRANSACTION_RECEIPT_TIMEOUT_MS = 30_000\nconst TRANSACTION_RECEIPT_POLLING_INTERVAL_MS = 1_500\n\n/**\n * Given a transaction hash, it returns the transaction receipt.\n * Uses viem's `waitForTransactionReceipt` which polls until the receipt is\n * available, retrying on `TransactionReceiptNotFoundError` and handling\n * tx-replacement / reorgs natively.\n * @param txHash - the transaction hash\n * @returns the transaction receipt\n */\nexport async function getTransactionReceipt({\n  txHash,\n  publicClient,\n}: {\n  txHash: `0x${string}`\n  publicClient: PublicClient\n  iteration?: number\n}): Promise<TransactionReceipt> {\n  try {\n    return await publicClient.waitForTransactionReceipt({\n      hash: txHash,\n      timeout: TRANSACTION_RECEIPT_TIMEOUT_MS,\n      pollingInterval: TRANSACTION_RECEIPT_POLLING_INTERVAL_MS,\n      confirmations: 1,\n    })\n  } catch (error) {\n    throw new ContractsError(\n      `Unable to get transaction receipt with hash: ${txHash}. Error: ${error}`,\n    )\n  }\n}\n\n/**\n * Given an already deployed contract address and the ABI, it returns the contract instance.\n *\n * @param contractAddress - the contract address\n * @param abi - the contract artifact\n * @param client - the client to interact with the blockchain\n * @returns a contract instance\n */\nexport async function getContractInstance(contractAddress: string, abi: Abi, client: Web3Clients) {\n  return getContract({\n    abi,\n    address: contractAddress as `0x${string}`,\n    client: { wallet: client.wallet, public: client.public },\n  })\n}\n\n///// ABIs\n\n/**\n * It searchs an ABI function in the ABI.\n * @param abi the ABI of the contract\n * @param funcName the function name\n * @param args the args of the function\n * @returns the function found\n */\nexport function searchAbiFunction(abi: Abi, funcName: string, args: any[] = []): AbiFunction {\n  const func = getAbiItem({ abi, name: funcName, args })\n  if (!func || func.type !== 'function') {\n    throw new ContractsError(`Function \"${funcName}\" is not part of contract`)\n  }\n  return func as AbiFunction\n}\n\n/**\n * It searchs an ABI event in the ABI.\n * @param abi the ABI of the contract\n * @param funcName the event name\n * @returns the event found\n */\nexport function searchAbiEvent(abi: Abi, eventName: string): AbiEvent {\n  const event = getAbiItem({\n    abi,\n    name: eventName,\n  })\n  if (!event || event.type !== 'event') {\n    throw new ContractsError(`Event \"${event}\" is not part of contract`)\n  }\n  return event as AbiEvent\n}\n\n/**\n * It searchs an ABI function in the ABI.\n * @param abi the ABI of the contract\n * @param funcName the function name\n * @param args the args of the function\n * @returns the function found\n */\nexport function getSignatureOfFunction(abi: Abi, funcName: string, args: any[] = []): AbiFunction {\n  return searchAbiFunction(abi, funcName, args)\n}\n\n/**\n * It searchs an ABI function in the ABI and return the inputs.\n * @param abi the ABI of the contract\n * @param funcName the function name\n * @param args the args of the function\n * @returns the function found\n */\nexport function getInputsOfFunction(abi: Abi, funcName: string, args: any[] = []) {\n  return searchAbiFunction(abi, funcName, args).inputs\n}\n\n/**\n * It searchs an ABI function in the ABI and return the inputs formatted.\n * @param abi the ABI of the contract\n * @param funcName the function name\n * @param args the args of the function\n * @returns the function found\n */\nexport function getInputsOfFunctionFormatted(abi: Abi, funcName: string, args: any[] = []) {\n  return searchAbiFunction(abi, funcName, args).inputs.map((input, i) => {\n    return {\n      name: input.name,\n      value: args[i],\n    }\n  })\n}\n\n//////// UTILS\n\n/**\n * Given an address it returns that address in checksum format.\n * @param address the address\n * @returns the same address in checksum format\n */\nexport function getChecksumAddress(address: string): string {\n  return getAddress(address)\n}\n\n/**\n * It checks if the address is a valid address.\n * @param address the address to check\n * @returns true of the address is valid\n */\nexport function isValidAddress(address: string): boolean {\n  return isAddress(address)\n}\n\n/**\n * Encodes a UTF-8 string into a byte array.\n\n * @param message the string to encode\n * @returns the encoded byte array\n */\nexport function getBytes(message: string): Uint8Array {\n  return stringToBytes(message)\n}\n\n/**\n * It pads a value with zeros.\n * @param value the value to pad\n * @param length the expected longitutde of the value\n * @returns the padded value\n */\nexport function zeroPadValue(value: `0x${string}` | Uint8Array, length: number): string {\n  return pad(value, { size: length }) as `0x${string}`\n}\n\n/**\n * Encodes a UTF-8 string into a hex string\n * @param message the string to encode\n * @returns the hex string\n */\nexport function encodeBytes32String(message: string) {\n  return stringToHex(message, { size: 32 })\n}\n\n////// ACCOUNTS\n/**\n * Given a seedphrase, it returns an account.\n * @param seedphrase - the seedphrase to be used to generate the account\n * @param addressIndex - the address index\n * @returns an account\n */\nexport function makeWallet(seedphrase: string, addressIndex = 0): Account {\n  return mnemonicToAccount(seedphrase, { addressIndex })\n}\n\n/**\n * Given a seedphrase generates multiple accounts\n * @param seedphrase - the seedphrase to be used to generate the account\n * @param numAccounts - the number of accounts to create\n * @returns the array of accounts\n */\nexport function makeWallets(seedphrase: string, numAccounts = 10) {\n  const accounts: Account[] = []\n  for (let i = 0; i < numAccounts; i++) {\n    accounts.push(makeWallet(seedphrase, i))\n  }\n  return accounts\n}\n\n/**\n * It generates a random account.\n * @returns a new account\n */\nexport function makeRandomWallet(): Account {\n  const mnemonic = generateMnemonic(english)\n  return makeWallet(mnemonic)\n}\n\n/**\n * It generates a list of random accounts\n * @param numAccounts - the number of accounts to create\n * @returns the array of accounts\n */\nexport function makeRandomWallets(numAccounts = 10): Account[] {\n  const mnemonic = generateMnemonic(english)\n  return makeWallets(mnemonic, numAccounts)\n}\n\n/////// HASHES\n\n/**\n * It hashes a string using keccak256.\n * @param seed the string to hash\n * @returns the hash\n */\nexport function keccak256(seed: string): string {\n  return viemKeccak256(toBytes(seed))\n}\n\n/**\n * It encodes and hashes a list of primitive values into an ABI-encoded hex value.\n * @param types the types of the values\n * @param values the values to encode\n * @returns the hash\n */\nexport function keccak256WithEncode(types: any[], values: any[]): string {\n  const encoded = encodeAbiParameters(types, values as never)\n  return keccak256(encoded)\n}\n\n/**\n * It encodes and hashes a list of primitive values into an ABI-encoded hex value.\n * @param types the types of the values\n * @param values the values to encode\n * @returns the hash\n */\nexport function keccak256Packed(types: any[], values: any[]): string {\n  return keccak256WithEncode(types, values)\n}\n\n/////// ZERO DEV\n\n/**\n * Returns the bundler RPC URL. When `BUNDLER_RPC_URL_OVERRIDE` is set\n * (used by tests against a local Alto + anvil-fork stack), it takes precedence\n * over the canonical ZeroDev URL. When `useUltraRelay` is true, the production\n * URL is routed through ZeroDev's UltraRelay (`?provider=ULTRA_RELAY`); the\n * override branch is left untouched.\n * @param useUltraRelay - when true, append `?provider=ULTRA_RELAY` to route the\n *   UserOperation through ZeroDev's UltraRelay bundler tier. Ignored when\n *   `BUNDLER_RPC_URL_OVERRIDE` is set.\n */\nexport function getBundlerRpcUrl(\n  zeroDevProjectId: string,\n  chainId: number,\n  useUltraRelay = false,\n): string {\n  const base = `https://rpc.zerodev.app/api/v3/${zeroDevProjectId}/chain/${chainId}`\n  // Per-chain override wins, then the global override, then the canonical URL.\n  // The per-chain form (`BUNDLER_RPC_URL_OVERRIDE_<chainId>`) lets a single\n  // process route UserOps for different networks to different local bundlers —\n  // e.g. a dual-fork dev stack (base-sepolia bundler :4337 + tempo bundler\n  // :4338). `||` (not `??`) because Vite replaces missing browser env vars with\n  // the empty string at build time; an empty override is equivalent to none.\n  return (\n    process.env[`BUNDLER_RPC_URL_OVERRIDE_${chainId}`] ||\n    process.env.BUNDLER_RPC_URL_OVERRIDE ||\n    (useUltraRelay ? `${base}?provider=ULTRA_RELAY` : base)\n  )\n}\n\n/**\n * Returns the paymaster RPC URL (ZeroDev-only; the local fork stack uses\n * `ultra-relay` which sponsors via the bundler's executor key without a\n * paymaster, so this URL is not consulted when `BUNDLER_RPC_URL_OVERRIDE` is\n * set).\n */\nexport function getPaymasterRpcUrl(zeroDevProjectId: string, chainId: number): string {\n  return `https://rpc.zerodev.app/api/v3/${zeroDevProjectId}/chain/${chainId}`\n}\n\n/**\n * Returns true when the kernel client should run in \"relayer mode\" — no\n * paymaster, gas fees zeroed out. Used by tests against a local\n * `ultra-relay` (ZeroDev's fork of Alto) on top of an anvil-fork. The relayer's\n * executor key pays gas directly via `EntryPoint.handleOps`, avoiding the\n * paymaster sponsorship handshake altogether.\n */\nexport function isRelayerMode(): boolean {\n  return Boolean(process.env.BUNDLER_RPC_URL_OVERRIDE)\n}\n\n/**\n * Returns gas prices for UserOperation fee estimation. ZeroDev's bundler\n * exposes a custom `zd_getUserOperationGasPrice` method; standard ERC-4337\n * bundlers do not. In relayer mode the bundler accepts UserOps with zeroed\n * `maxFeePerGas`/`maxPriorityFeePerGas` and pays gas itself.\n */\nexport async function estimateUserOperationFees(\n  bundlerClient: any,\n  _publicClient: any,\n): Promise<{ maxFeePerGas: bigint; maxPriorityFeePerGas: bigint }> {\n  if (isRelayerMode()) {\n    return { maxFeePerGas: 0n, maxPriorityFeePerGas: 0n }\n  }\n  return getUserOperationGasPrice(bundlerClient)\n}\n\n// Tempo undersizes the ZeroDev bundler's `verificationGasLimit` estimate (cold\n// SCA deploy + session-key enable under TIP-20 gas), so `zd_sponsorUserOperation`\n// re-simulates with that too-low ceiling and reverts `AA26 over\n// verificationGasLimit` (see #1929, staging createPlan on tempo-moderato). We give\n// the sponsor an explicit floor so it stops undersizing. A multiplier is useless\n// here — viem calls getPaymasterData with verificationGasLimit still 0/undefined,\n// so `x * n` is 0. An absolute floor covers both the 0 and the too-low cases.\n// NOTE(#1929): fixed floor — bump if a Tempo op still AA26s (env-tunable if it ever needs per-deploy calibration).\n// needs per-deploy calibration).\nconst TEMPO_MIN_VERIFICATION_GAS = 30_000_000n\n\n/**\n * Floors `verificationGasLimit` on Tempo networks before the UserOp is handed to\n * the ZeroDev paymaster, so `zd_sponsorUserOperation` has headroom and does not\n * revert AA26. No-op on every other network. Shared by both paymaster sponsor\n * call sites. Generic so the caller's UserOp type is preserved; typing\n * `verificationGasLimit?: bigint` also turns a plain-number literal (a `bigint`\n * missing its `n`) into a compile error instead of a silent floor-to-30M.\n */\nexport function applyTempoVerificationGasFloor<T extends { verificationGasLimit?: bigint }>(\n  userOperation: T,\n  chainId: number,\n): T {\n  if (!isTempoNetwork(chainId)) return userOperation\n  const current =\n    typeof userOperation.verificationGasLimit === 'bigint' ? userOperation.verificationGasLimit : 0n\n  const floored = current > TEMPO_MIN_VERIFICATION_GAS ? current : TEMPO_MIN_VERIFICATION_GAS\n  return { ...userOperation, verificationGasLimit: floored } as T\n}\n\n/**\n * It creates a ZeroDev Kernel client.\n * @param signer the signer account\n * @param chainId the chain id\n * @param zeroDevProjectId the zero dev project id, you can get it from the ZeroDev dashboard\n * @param useUltraRelay forwarded straight to `getBundlerRpcUrl` — when true the\n *   bundler RPC is routed through ZeroDev's UltraRelay. Ignored when\n *   `BUNDLER_RPC_URL_OVERRIDE` is set.\n * @returns the kernel client\n */\nexport async function createKernelClient(\n  kernelAccount: SmartAccount,\n  chainId: number,\n  zeroDevProjectId: string,\n  publicClient: any,\n  useUltraRelay = false,\n): Promise<KernelAccountClient> {\n  const bundlerRpc = getBundlerRpcUrl(zeroDevProjectId, chainId, useUltraRelay)\n  const paymasterRpc = getPaymasterRpcUrl(zeroDevProjectId, chainId)\n\n  return createKernelAccountClient({\n    account: kernelAccount,\n    chain: getChain(chainId),\n    bundlerTransport: http(bundlerRpc),\n    client: publicClient,\n    ...(isRelayerMode()\n      ? {}\n      : {\n          paymaster: {\n            getPaymasterData: (userOperation: any) => {\n              const zerodevPaymaster = createZeroDevPaymasterClient({\n                chain: getChain(chainId),\n                transport: http(paymasterRpc),\n              })\n              return zerodevPaymaster.sponsorUserOperation({\n                userOperation: applyTempoVerificationGasFloor(userOperation, chainId),\n              })\n            },\n          },\n        }),\n    userOperation: {\n      estimateFeesPerGas: async ({ bundlerClient }) => {\n        return estimateUserOperationFees(bundlerClient, publicClient)\n      },\n    },\n  })\n}\n\nexport type EcdsaValidator = Awaited<ReturnType<typeof signerToEcdsaValidator>>\n\n/**\n * Identifies the smart-account derivation inputs (entryPoint + kernel version).\n * The SCA is deterministic from `(EOA, entryPoint, kernelVersion, index)`, so a\n * bump here means the same EOA derives a different SCA. Persisted SCA caches\n * (e.g. the webapp's localStorage) should stamp this and invalidate on change.\n */\nexport const SCA_DERIVATION_VERSION = `${ENTRY_POINT_VERSION}:${KERNEL_V3_1}`\n\n// ponytail: in-process memo for ZeroDev Kernel account resolution. Every\n// deserializePermissionAccount / createKernelAccount reads the EIP-1967 impl\n// slot (eth_getStorageAt) of a deployed account — ~56% of backend Infura RPC\n// volume, and the same session key/owner is re-resolved per request and twice\n// per x402 payment (verify + settle). See #2206. Safe to reuse the resolved\n// account: the Kernel account fetches its nonce fresh at send time, so a cached\n// account never signs against a stale nonce. Keyed by the deterministic inputs\n// (serialized key / owner + kernel version + chainId); short TTL bounds\n// staleness across a kernel upgrade. Single-process only — cross-pod dedup is\n// out of scope (#2206 notes). Upgrade path: swap the Map for a shared store.\nconst ACCOUNT_CACHE_TTL_MS = 60_000\n// Bound the cache: `getSessionKey` runs behind `getAccountAttributes` on every\n// authenticated request, keyed per-API-key, so an entry never re-requested\n// would otherwise sit past its TTL for the life of the (long-lived) apps/api\n// process — a slow leak. Cardinality ≈ distinct API keys ever seen; cap + sweep\n// keep it bounded (matches BlockchainCacheService's MAX_ENTRIES + cleanup()).\nexport const ACCOUNT_CACHE_MAX_ENTRIES = 5_000\nconst accountResolutionCache = new Map<string, { value: Promise<unknown>; expiresAt: number }>()\n\nfunction memoResolveAccount<T>(key: string, resolver: () => Promise<T>): Promise<T> {\n  const now = Date.now()\n  const cached = accountResolutionCache.get(key)\n  if (cached && cached.expiresAt > now) {\n    return cached.value as Promise<T>\n  }\n  // Sweep expired entries + bound size so keys never re-requested don't\n  // accumulate for the life of the process (Map keeps insertion order → FIFO).\n  for (const [k, e] of accountResolutionCache) {\n    if (e.expiresAt <= now) accountResolutionCache.delete(k)\n  }\n  if (accountResolutionCache.size >= ACCOUNT_CACHE_MAX_ENTRIES) {\n    accountResolutionCache.delete(accountResolutionCache.keys().next().value as string)\n  }\n  const entry: { value: Promise<unknown>; expiresAt: number } = {\n    value: undefined as unknown as Promise<unknown>,\n    expiresAt: now + ACCOUNT_CACHE_TTL_MS,\n  }\n  // Coalesce concurrent identical resolutions; evict on rejection so a transient\n  // RPC failure isn't cached — but only if this exact entry is still current, so\n  // a resolver that hangs past its TTL and then rejects can't drop a newer one.\n  entry.value = resolver().catch((err) => {\n    if (accountResolutionCache.get(key) === entry) accountResolutionCache.delete(key)\n    throw err\n  })\n  accountResolutionCache.set(key, entry)\n  return entry.value as Promise<T>\n}\n\n/** Current entry count of the Kernel account-resolution memo (#2206). */\nexport function getAccountResolutionCacheStats() {\n  return { size: accountResolutionCache.size }\n}\n\n/** Clear the account-resolution memo (test isolation / kernel-upgrade invalidation). */\nexport function clearAccountResolutionCache() {\n  accountResolutionCache.clear()\n}\n\nfunction chainIdOf(publicClient: any): string | number {\n  const id = publicClient?.chain?.id\n  // chainId is the ONLY discriminator in the sca:/7702:/sk: keys, and SCA /\n  // session-key addresses are identical across chains by CREATE2 design — so an\n  // id-less client must fail closed rather than alias two networks under one\n  // bucket and serve a chain-A account to a chain-B request (latent until #1933).\n  if (id == null) {\n    throw new Error('account-resolution cache: publicClient.chain.id is required for keying')\n  }\n  return id\n}\n\n/**\n * Build the ECDSA sudo validator for a signer. Both `createKernelSmartAccount`\n * and `createSessionKey` need this validator and each derives it via a ZeroDev\n * RPC round-trip. Callers that run both in sequence (e.g. the webapp API-key\n * creation path) can compute it once here and pass it into both helpers to\n * avoid the redundant round-trip.\n *\n * @param ecdsaValidator (on the consumers) must be one built for the SAME\n * `signer` — passing a validator derived from a different signer would attach\n * the wrong owner to the account.\n */\nexport async function createEcdsaValidator(\n  signer: Signer,\n  publicClient: PublicClient,\n): Promise<EcdsaValidator> {\n  return signerToEcdsaValidator(publicClient, {\n    signer,\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    kernelVersion: KERNEL_V3_1,\n  })\n}\n\nexport async function createKernelSmartAccount(\n  signer: Signer,\n  publicClient: PublicClient,\n  ecdsaValidator?: EcdsaValidator,\n): Promise<SmartAccount> {\n  const build = async () => {\n    const validator = ecdsaValidator ?? (await createEcdsaValidator(signer, publicClient))\n    return createKernelAccount(publicClient, {\n      plugins: {\n        sudo: validator,\n      },\n      entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n      kernelVersion: KERNEL_V3_1,\n    })\n  }\n  // A caller-supplied validator isn't part of the key — bypass the memo (like\n  // createKernel7702Account does for eip7702Auth) rather than let a cache entry\n  // built by a different call silently ignore it (the mismatch createEcdsaValidator warns about).\n  if (ecdsaValidator) return build()\n  return memoResolveAccount(\n    `sca:${chainIdOf(publicClient)}:${SCA_DERIVATION_VERSION}:${signer.address}`,\n    build,\n  )\n}\n\nexport async function getApproval(signer: Signer, publicClient: any, policies: any[]) {\n  const ecdsaValidator = await signerToEcdsaValidator(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    signer,\n    kernelVersion: KERNEL_V3_1,\n  })\n  const emptyAccount = addressToEmptyAccount(signer.address as Address)\n  const emptySessionKeySigner = await toECDSASigner({ signer: emptyAccount })\n\n  const permissionPlugin = await toPermissionValidator(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    signer: emptySessionKeySigner,\n    policies: policies,\n    kernelVersion: KERNEL_V3_1,\n  })\n  const sessionKeyAccount = await createKernelAccount(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    plugins: {\n      sudo: ecdsaValidator,\n      regular: permissionPlugin,\n    },\n    kernelVersion: KERNEL_V3_1,\n  })\n\n  return await serializePermissionAccount(sessionKeyAccount)\n}\n\nexport async function useSessionKey(approval: string, signer: Signer, publicClient: any) {\n  const sessionKeySigner = await toECDSASigner({\n    signer,\n  })\n  const sessionKeyAccount = await deserializePermissionAccount(\n    publicClient,\n    getEntryPoint(ENTRY_POINT_VERSION),\n    KERNEL_V3_1,\n    approval,\n    sessionKeySigner,\n  )\n\n  return sessionKeyAccount\n}\n\nexport async function createSessionKey(\n  signer: Signer,\n  publicClient: any,\n  policies: any[],\n  ecdsaValidator?: EcdsaValidator,\n  sessionPrivateKey: `0x${string}` = generatePrivateKey(),\n) {\n  const validator = ecdsaValidator ?? (await createEcdsaValidator(signer, publicClient))\n  const masterAccount = privateKeyToAccount(sessionPrivateKey)\n  const sessionKeySigner = await toECDSASigner({\n    signer: masterAccount,\n  })\n\n  const permissionPlugin = await toPermissionValidator(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    signer: sessionKeySigner,\n    policies: policies,\n    kernelVersion: KERNEL_V3_1,\n  })\n\n  const sessionKeyAccount = await createKernelAccount(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    plugins: {\n      sudo: validator,\n      regular: permissionPlugin,\n    },\n    kernelVersion: KERNEL_V3_1,\n  })\n\n  // serializePermissionAccount embeds the ENABLE signature for `publicClient`'s\n  // chain (signed by the sudo/owner). That signature is chain-bound, which is\n  // why one serialization only validates on the chain it was made for. #1929\n  return serializePermissionAccount(sessionKeyAccount, sessionPrivateKey)\n}\n\n/**\n * Multi-network session keys (#1929). Generates ONE session private key and\n * serializes the permission account once per network — each serialization\n * carries that network's chain-bound enable signature. The SAME session key\n * works on every supported chain (the smart-account address + init code are\n * identical via CREATE2 parity); only the enable signature differs per chain.\n *\n * Use the returned map (chainId → serialized session key) to build a single\n * multi-network API key: the backend selects the entry for the operation's\n * network. Avoids the `EnableNotApproved` revert when an API key minted on one\n * chain is used on another.\n *\n * @param signer the smart-account owner (e.g. the Privy EOA) — signs each\n *   network's enable signature\n * @param publicClientByChainId map of chainId → a PublicClient for that chain\n * @param policies the permission policies (same on every chain)\n */\nexport async function createSessionKeysForNetworks(\n  signer: Signer,\n  publicClientByChainId: Record<number, any>,\n  policies: any[],\n  requiredChainId?: number,\n): Promise<Record<number, string>> {\n  const sessionPrivateKey = generatePrivateKey()\n  const out: Record<number, string> = {}\n  for (const [chainIdStr, publicClient] of Object.entries(publicClientByChainId)) {\n    const chainId = Number(chainIdStr)\n    try {\n      out[chainId] = await createSessionKey(\n        signer,\n        publicClient,\n        policies,\n        undefined,\n        sessionPrivateKey,\n      )\n    } catch (err) {\n      // Best-effort: a secondary network whose RPC is unreachable must not break\n      // key generation (e.g. login). `requiredChainId` (the primary) still throws.\n      if (requiredChainId != null && chainId === Number(requiredChainId)) throw err\n      console.warn(\n        `[createSessionKeysForNetworks] skipping network ${chainId}: ${\n          err instanceof Error ? err.message : String(err)\n        }`,\n      )\n    }\n  }\n  // Enforce the `requiredChainId` contract even when it is ABSENT from the input\n  // map (the loop above only throws when it is present AND fails). Without this,\n  // callers read `out[primary]` → undefined → an API key with no primary session\n  // key, which fails opaquely downstream.\n  if (requiredChainId != null && out[requiredChainId] == null) {\n    throw new Error(\n      `createSessionKeysForNetworks: required network ${requiredChainId} was not in the public-client map`,\n    )\n  }\n  return out\n}\n\n/**\n * The canonical, CREATE2-deterministic Kernel v3.3 implementation that an EOA\n * delegates to under EIP-7702 (same address on Base mainnet + Base Sepolia).\n * This is the `contract`/`address` passed to Privy `sign7702Authorization` and\n * carried in the type-4 authorization. See #2148.\n */\nexport const KERNEL_7702_IMPL_ADDRESS = KERNEL_7702_DELEGATION_ADDRESS\n\n// The two Kernel versions the platform runs: v3.1 for the legacy counterfactual\n// SCA, v3.3 for the EIP-7702-delegated EOA account. Re-exported so the API\n// layer can pick the right version for (de)serializing session keys.\nexport { KERNEL_V3_1, KERNEL_V3_3 }\nexport type KernelVersion = typeof KERNEL_V3_1 | typeof KERNEL_V3_3\n\n/**\n * Resolves a user's EIP-7702 account: the Privy EOA delegated to Kernel v3.3.\n * The resulting account's address **equals the EOA** (no counterfactual SCA),\n * so it both signs EIP-3009 as a plain EOA (Router) and acts as a 4337 smart\n * account (credits/session-keys). `eip7702Auth` is the signed type-4\n * authorization (from Privy `sign7702Authorization`); omit it once the account\n * is already delegated on-chain.\n *\n * ponytail: on-chain correctness (delegation designator, UserOp submission)\n * is validated on Base Sepolia in Phase 0 (#2153); this wrapper only pins the\n * SDK call shape.\n */\nexport async function createKernel7702Account(\n  signer: Signer,\n  publicClient: PublicClient,\n  eip7702Auth?: SignAuthorizationReturnType,\n): Promise<SmartAccount> {\n  const build = () =>\n    createKernelAccount(publicClient, {\n      eip7702Account: signer,\n      ...(eip7702Auth ? { eip7702Auth } : {}),\n      entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n      kernelVersion: KERNEL_V3_3,\n    })\n  // The install path (auth attached) is a one-time mutating op — never cache it.\n  if (eip7702Auth) return build()\n  return memoResolveAccount(`7702:${chainIdOf(publicClient)}:${signer.address}`, build)\n}\n\nexport async function getSessionKey(\n  serializedSessionKey: string,\n  publicClient: any,\n  kernelVersion: KernelVersion = KERNEL_V3_1,\n) {\n  return memoResolveAccount(\n    `sk:${chainIdOf(publicClient)}:${kernelVersion}:${serializedSessionKey}`,\n    () =>\n      deserializePermissionAccount(\n        publicClient,\n        getEntryPoint(ENTRY_POINT_VERSION),\n        kernelVersion,\n        serializedSessionKey,\n      ),\n  )\n}\n\n/**\n * Creates a delegated session key for an existing kernel account.\n * The resulting serialized session key can be deserialized into a SmartAccount\n * that shares the same address as the kernel account but enforces the given policies.\n *\n * @param kernelAccount The existing SmartAccount (kernel) to delegate from\n * @param publicClient Viem PublicClient instance\n * @param policies Array of policies to enforce for this session key\n * @returns Serialized session key string\n */\nexport async function createDelegatedSessionKeyFromKernel(\n  kernelAccount: SmartAccount,\n  publicClient: PublicClient,\n  policies: any[],\n  kernelVersion: KernelVersion = KERNEL_V3_1,\n): Promise<string> {\n  // 1) Generate ephemeral session private key (used only for the permission plugin)\n  const sessionPrivateKey = generatePrivateKey()\n  const sessionAccount = privateKeyToAccount(sessionPrivateKey)\n\n  // 2) Wrap ephemeral key as ECDSA signer for permissions\n  const sessionKeySigner = await toECDSASigner({ signer: sessionAccount })\n\n  // 3) Create the permission validator plugin — MUST match the parent kernel's\n  //    version (v3.3 for a 7702 account, v3.1 for the legacy SCA), otherwise the\n  //    serialized blob deserializes/validates against the wrong kernel.\n  const permissionValidator = await toPermissionValidator(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    signer: sessionKeySigner,\n    policies,\n    kernelVersion,\n  })\n\n  // 4) Extract the sudo validator from the existing kernel account\n  const kernelAccountTyped = kernelAccount as SmartAccount<KernelSmartAccountImplementation>\n  const sudoValidator = kernelAccountTyped.kernelPluginManager.sudoValidator\n\n  if (!sudoValidator) {\n    throw new Error('Kernel account does not have a sudo validator')\n  }\n\n  // 5) Create a new kernel account with both sudo (from original) and permission\n  //    validator, at the same address as the parent kernel. For a 7702 account\n  //    that address is the EOA; pinning `address` keeps the session-key account\n  //    on the same account rather than a fresh counterfactual one.\n  const sessionKeyAccount = await createKernelAccount(publicClient, {\n    entryPoint: getEntryPoint(ENTRY_POINT_VERSION),\n    address: kernelAccountTyped.address,\n    plugins: {\n      sudo: sudoValidator, // Use existing sudo validator\n      regular: permissionValidator,\n    },\n    kernelVersion,\n  })\n\n  // 6) Serialize the session key account with the ephemeral private key\n  const serialized = await serializePermissionAccount(sessionKeyAccount, sessionPrivateKey)\n\n  return serialized\n}\n\nexport const WalletUtils = {\n  makeWallet,\n  makeWallets,\n  makeRandomWallet,\n  makeRandomWallets,\n}\n"],"names":["signerToEcdsaValidator","deserializePermissionAccount","serializePermissionAccount","toPermissionValidator","toECDSASigner","addressToEmptyAccount","createKernelAccount","createKernelAccountClient","createZeroDevPaymasterClient","getUserOperationGasPrice","KERNEL_V3_1","KERNEL_V3_3","KERNEL_7702_DELEGATION_ADDRESS","getEntryPoint","encodeAbiParameters","getAbiItem","getAddress","getContract","http","isAddress","pad","stringToBytes","stringToHex","toBytes","keccak256","viemKeccak256","english","generateMnemonic","generatePrivateKey","mnemonicToAccount","privateKeyToAccount","Instantiable","ContractsError","getChain","isTempoNetwork","ENTRY_POINT_VERSION","BlockchainViemUtils","config","setInstanceConfig","TRANSACTION_RECEIPT_TIMEOUT_MS","TRANSACTION_RECEIPT_POLLING_INTERVAL_MS","getTransactionReceipt","txHash","publicClient","waitForTransactionReceipt","hash","timeout","pollingInterval","confirmations","error","getContractInstance","contractAddress","abi","client","address","wallet","public","searchAbiFunction","funcName","args","func","name","type","searchAbiEvent","eventName","event","getSignatureOfFunction","getInputsOfFunction","inputs","getInputsOfFunctionFormatted","map","input","i","value","getChecksumAddress","isValidAddress","getBytes","message","zeroPadValue","length","size","encodeBytes32String","makeWallet","seedphrase","addressIndex","makeWallets","numAccounts","accounts","push","makeRandomWallet","mnemonic","makeRandomWallets","seed","keccak256WithEncode","types","values","encoded","keccak256Packed","getBundlerRpcUrl","zeroDevProjectId","chainId","useUltraRelay","base","process","env","BUNDLER_RPC_URL_OVERRIDE","getPaymasterRpcUrl","isRelayerMode","Boolean","estimateUserOperationFees","bundlerClient","_publicClient","maxFeePerGas","maxPriorityFeePerGas","TEMPO_MIN_VERIFICATION_GAS","applyTempoVerificationGasFloor","userOperation","current","verificationGasLimit","floored","createKernelClient","kernelAccount","bundlerRpc","paymasterRpc","account","chain","bundlerTransport","paymaster","getPaymasterData","zerodevPaymaster","transport","sponsorUserOperation","estimateFeesPerGas","SCA_DERIVATION_VERSION","ACCOUNT_CACHE_TTL_MS","ACCOUNT_CACHE_MAX_ENTRIES","accountResolutionCache","Map","memoResolveAccount","key","resolver","now","Date","cached","get","expiresAt","k","e","delete","keys","next","entry","undefined","catch","err","set","getAccountResolutionCacheStats","clearAccountResolutionCache","clear","chainIdOf","id","Error","createEcdsaValidator","signer","entryPoint","kernelVersion","createKernelSmartAccount","ecdsaValidator","build","validator","plugins","sudo","getApproval","policies","emptyAccount","emptySessionKeySigner","permissionPlugin","sessionKeyAccount","regular","useSessionKey","approval","sessionKeySigner","createSessionKey","sessionPrivateKey","masterAccount","createSessionKeysForNetworks","publicClientByChainId","requiredChainId","out","chainIdStr","Object","entries","Number","console","warn","String","KERNEL_7702_IMPL_ADDRESS","createKernel7702Account","eip7702Auth","eip7702Account","getSessionKey","serializedSessionKey","createDelegatedSessionKeyFromKernel","sessionAccount","permissionValidator","kernelAccountTyped","sudoValidator","kernelPluginManager","serialized","WalletUtils"],"mappings":"AAAA,SAASA,sBAAsB,QAAQ,2BAA0B;AACjE,SACEC,4BAA4B,EAC5BC,0BAA0B,EAC1BC,qBAAqB,QAChB,uBAAsB;AAC7B,SAASC,aAAa,QAAQ,+BAA8B;AAC5D,SACEC,qBAAqB,EACrBC,mBAAmB,EACnBC,yBAAyB,EACzBC,4BAA4B,EAC5BC,wBAAwB,QAGnB,eAAc;AACrB,SACEC,WAAW,EACXC,WAAW,EACXC,8BAA8B,EAC9BC,aAAa,QACR,yBAAwB;AAC/B,SAEEC,mBAAmB,EACnBC,UAAU,EACVC,UAAU,EACVC,WAAW,EACXC,IAAI,EACJC,SAAS,EACTC,GAAG,EACHC,aAAa,EACbC,WAAW,EACXC,OAAO,EACPC,aAAaC,aAAa,QAQrB,OAAM;AAEb,SACEC,OAAO,EACPC,gBAAgB,EAChBC,kBAAkB,EAClBC,iBAAiB,EACjBC,mBAAmB,QACd,gBAAe;AACtB,SAASC,YAAY,QAAyC,iCAAgC;AAC9F,SAASC,cAAc,QAAQ,mCAAkC;AACjE,SAASC,QAAQ,EAAEC,cAAc,QAAQ,yBAAwB;AAGjE,MAAMC,sBAAsB;AAE5B;;;CAGC,GACD,OAAO,MAAMC,4BAA4BL;IACvC,YAAYM,MAA0B,CAAE;QACtC,KAAK;QACL,IAAI,CAACC,iBAAiB,CAACD;IACzB;AACF;AAEA,0BAA0B;AAC1B,0BAA0B;AAC1B,0BAA0B;AAE1B,eAAe;AAEf,sEAAsE;AACtE,sEAAsE;AACtE,MAAME,iCAAiC;AACvC,MAAMC,0CAA0C;AAEhD;;;;;;;CAOC,GACD,OAAO,eAAeC,sBAAsB,EAC1CC,MAAM,EACNC,YAAY,EAKb;IACC,IAAI;QACF,OAAO,MAAMA,aAAaC,yBAAyB,CAAC;YAClDC,MAAMH;YACNI,SAASP;YACTQ,iBAAiBP;YACjBQ,eAAe;QACjB;IACF,EAAE,OAAOC,OAAO;QACd,MAAM,IAAIjB,eACR,CAAC,6CAA6C,EAAEU,OAAO,SAAS,EAAEO,OAAO;IAE7E;AACF;AAEA;;;;;;;CAOC,GACD,OAAO,eAAeC,oBAAoBC,eAAuB,EAAEC,GAAQ,EAAEC,MAAmB;IAC9F,OAAOpC,YAAY;QACjBmC;QACAE,SAASH;QACTE,QAAQ;YAAEE,QAAQF,OAAOE,MAAM;YAAEC,QAAQH,OAAOG,MAAM;QAAC;IACzD;AACF;AAEA,UAAU;AAEV;;;;;;CAMC,GACD,OAAO,SAASC,kBAAkBL,GAAQ,EAAEM,QAAgB,EAAEC,OAAc,EAAE;IAC5E,MAAMC,OAAO7C,WAAW;QAAEqC;QAAKS,MAAMH;QAAUC;IAAK;IACpD,IAAI,CAACC,QAAQA,KAAKE,IAAI,KAAK,YAAY;QACrC,MAAM,IAAI9B,eAAe,CAAC,UAAU,EAAE0B,SAAS,yBAAyB,CAAC;IAC3E;IACA,OAAOE;AACT;AAEA;;;;;CAKC,GACD,OAAO,SAASG,eAAeX,GAAQ,EAAEY,SAAiB;IACxD,MAAMC,QAAQlD,WAAW;QACvBqC;QACAS,MAAMG;IACR;IACA,IAAI,CAACC,SAASA,MAAMH,IAAI,KAAK,SAAS;QACpC,MAAM,IAAI9B,eAAe,CAAC,OAAO,EAAEiC,MAAM,yBAAyB,CAAC;IACrE;IACA,OAAOA;AACT;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,uBAAuBd,GAAQ,EAAEM,QAAgB,EAAEC,OAAc,EAAE;IACjF,OAAOF,kBAAkBL,KAAKM,UAAUC;AAC1C;AAEA;;;;;;CAMC,GACD,OAAO,SAASQ,oBAAoBf,GAAQ,EAAEM,QAAgB,EAAEC,OAAc,EAAE;IAC9E,OAAOF,kBAAkBL,KAAKM,UAAUC,MAAMS,MAAM;AACtD;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,6BAA6BjB,GAAQ,EAAEM,QAAgB,EAAEC,OAAc,EAAE;IACvF,OAAOF,kBAAkBL,KAAKM,UAAUC,MAAMS,MAAM,CAACE,GAAG,CAAC,CAACC,OAAOC;QAC/D,OAAO;YACLX,MAAMU,MAAMV,IAAI;YAChBY,OAAOd,IAAI,CAACa,EAAE;QAChB;IACF;AACF;AAEA,cAAc;AAEd;;;;CAIC,GACD,OAAO,SAASE,mBAAmBpB,OAAe;IAChD,OAAOtC,WAAWsC;AACpB;AAEA;;;;CAIC,GACD,OAAO,SAASqB,eAAerB,OAAe;IAC5C,OAAOnC,UAAUmC;AACnB;AAEA;;;;;CAKC,GACD,OAAO,SAASsB,SAASC,OAAe;IACtC,OAAOxD,cAAcwD;AACvB;AAEA;;;;;CAKC,GACD,OAAO,SAASC,aAAaL,KAAiC,EAAEM,MAAc;IAC5E,OAAO3D,IAAIqD,OAAO;QAAEO,MAAMD;IAAO;AACnC;AAEA;;;;CAIC,GACD,OAAO,SAASE,oBAAoBJ,OAAe;IACjD,OAAOvD,YAAYuD,SAAS;QAAEG,MAAM;IAAG;AACzC;AAEA,eAAe;AACf;;;;;CAKC,GACD,OAAO,SAASE,WAAWC,UAAkB,EAAEC,eAAe,CAAC;IAC7D,OAAOvD,kBAAkBsD,YAAY;QAAEC;IAAa;AACtD;AAEA;;;;;CAKC,GACD,OAAO,SAASC,YAAYF,UAAkB,EAAEG,cAAc,EAAE;IAC9D,MAAMC,WAAsB,EAAE;IAC9B,IAAK,IAAIf,IAAI,GAAGA,IAAIc,aAAad,IAAK;QACpCe,SAASC,IAAI,CAACN,WAAWC,YAAYX;IACvC;IACA,OAAOe;AACT;AAEA;;;CAGC,GACD,OAAO,SAASE;IACd,MAAMC,WAAW/D,iBAAiBD;IAClC,OAAOwD,WAAWQ;AACpB;AAEA;;;;CAIC,GACD,OAAO,SAASC,kBAAkBL,cAAc,EAAE;IAChD,MAAMI,WAAW/D,iBAAiBD;IAClC,OAAO2D,YAAYK,UAAUJ;AAC/B;AAEA,cAAc;AAEd;;;;CAIC,GACD,OAAO,SAAS9D,UAAUoE,IAAY;IACpC,OAAOnE,cAAcF,QAAQqE;AAC/B;AAEA;;;;;CAKC,GACD,OAAO,SAASC,oBAAoBC,KAAY,EAAEC,MAAa;IAC7D,MAAMC,UAAUlF,oBAAoBgF,OAAOC;IAC3C,OAAOvE,UAAUwE;AACnB;AAEA;;;;;CAKC,GACD,OAAO,SAASC,gBAAgBH,KAAY,EAAEC,MAAa;IACzD,OAAOF,oBAAoBC,OAAOC;AACpC;AAEA,gBAAgB;AAEhB;;;;;;;;;CASC,GACD,OAAO,SAASG,iBACdC,gBAAwB,EACxBC,OAAe,EACfC,gBAAgB,KAAK;IAErB,MAAMC,OAAO,CAAC,+BAA+B,EAAEH,iBAAiB,OAAO,EAAEC,SAAS;IAClF,6EAA6E;IAC7E,0EAA0E;IAC1E,6EAA6E;IAC7E,yEAAyE;IACzE,8EAA8E;IAC9E,2EAA2E;IAC3E,OACEG,QAAQC,GAAG,CAAC,CAAC,yBAAyB,EAAEJ,SAAS,CAAC,IAClDG,QAAQC,GAAG,CAACC,wBAAwB,IACnCJ,CAAAA,gBAAgB,GAAGC,KAAK,qBAAqB,CAAC,GAAGA,IAAG;AAEzD;AAEA;;;;;CAKC,GACD,OAAO,SAASI,mBAAmBP,gBAAwB,EAAEC,OAAe;IAC1E,OAAO,CAAC,+BAA+B,EAAED,iBAAiB,OAAO,EAAEC,SAAS;AAC9E;AAEA;;;;;;CAMC,GACD,OAAO,SAASO;IACd,OAAOC,QAAQL,QAAQC,GAAG,CAACC,wBAAwB;AACrD;AAEA;;;;;CAKC,GACD,OAAO,eAAeI,0BACpBC,aAAkB,EAClBC,aAAkB;IAElB,IAAIJ,iBAAiB;QACnB,OAAO;YAAEK,cAAc,EAAE;YAAEC,sBAAsB,EAAE;QAAC;IACtD;IACA,OAAOxG,yBAAyBqG;AAClC;AAEA,+EAA+E;AAC/E,kFAAkF;AAClF,gEAAgE;AAChE,mFAAmF;AACnF,iFAAiF;AACjF,kFAAkF;AAClF,8EAA8E;AAC9E,mHAAmH;AACnH,iCAAiC;AACjC,MAAMI,6BAA6B,WAAW;AAE9C;;;;;;;CAOC,GACD,OAAO,SAASC,+BACdC,aAAgB,EAChBhB,OAAe;IAEf,IAAI,CAAClE,eAAekE,UAAU,OAAOgB;IACrC,MAAMC,UACJ,OAAOD,cAAcE,oBAAoB,KAAK,WAAWF,cAAcE,oBAAoB,GAAG,EAAE;IAClG,MAAMC,UAAUF,UAAUH,6BAA6BG,UAAUH;IACjE,OAAO;QAAE,GAAGE,aAAa;QAAEE,sBAAsBC;IAAQ;AAC3D;AAEA;;;;;;;;;CASC,GACD,OAAO,eAAeC,mBACpBC,aAA2B,EAC3BrB,OAAe,EACfD,gBAAwB,EACxBxD,YAAiB,EACjB0D,gBAAgB,KAAK;IAErB,MAAMqB,aAAaxB,iBAAiBC,kBAAkBC,SAASC;IAC/D,MAAMsB,eAAejB,mBAAmBP,kBAAkBC;IAE1D,OAAO7F,0BAA0B;QAC/BqH,SAASH;QACTI,OAAO5F,SAASmE;QAChB0B,kBAAkB5G,KAAKwG;QACvBrE,QAAQV;QACR,GAAIgE,kBACA,CAAC,IACD;YACEoB,WAAW;gBACTC,kBAAkB,CAACZ;oBACjB,MAAMa,mBAAmBzH,6BAA6B;wBACpDqH,OAAO5F,SAASmE;wBAChB8B,WAAWhH,KAAKyG;oBAClB;oBACA,OAAOM,iBAAiBE,oBAAoB,CAAC;wBAC3Cf,eAAeD,+BAA+BC,eAAehB;oBAC/D;gBACF;YACF;QACF,CAAC;QACLgB,eAAe;YACbgB,oBAAoB,OAAO,EAAEtB,aAAa,EAAE;gBAC1C,OAAOD,0BAA0BC,eAAenE;YAClD;QACF;IACF;AACF;AAIA;;;;;CAKC,GACD,OAAO,MAAM0F,yBAAyB,GAAGlG,oBAAoB,CAAC,EAAEzB,aAAa,CAAA;AAE7E,yEAAyE;AACzE,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,gFAAgF;AAChF,+EAA+E;AAC/E,wEAAwE;AACxE,8EAA8E;AAC9E,6EAA6E;AAC7E,MAAM4H,uBAAuB;AAC7B,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,gFAAgF;AAChF,8EAA8E;AAC9E,OAAO,MAAMC,4BAA4B,MAAK;AAC9C,MAAMC,yBAAyB,IAAIC;AAEnC,SAASC,mBAAsBC,GAAW,EAAEC,QAA0B;IACpE,MAAMC,MAAMC,KAAKD,GAAG;IACpB,MAAME,SAASP,uBAAuBQ,GAAG,CAACL;IAC1C,IAAII,UAAUA,OAAOE,SAAS,GAAGJ,KAAK;QACpC,OAAOE,OAAOtE,KAAK;IACrB;IACA,sEAAsE;IACtE,6EAA6E;IAC7E,KAAK,MAAM,CAACyE,GAAGC,EAAE,IAAIX,uBAAwB;QAC3C,IAAIW,EAAEF,SAAS,IAAIJ,KAAKL,uBAAuBY,MAAM,CAACF;IACxD;IACA,IAAIV,uBAAuBxD,IAAI,IAAIuD,2BAA2B;QAC5DC,uBAAuBY,MAAM,CAACZ,uBAAuBa,IAAI,GAAGC,IAAI,GAAG7E,KAAK;IAC1E;IACA,MAAM8E,QAAwD;QAC5D9E,OAAO+E;QACPP,WAAWJ,MAAMP;IACnB;IACA,+EAA+E;IAC/E,+EAA+E;IAC/E,8EAA8E;IAC9EiB,MAAM9E,KAAK,GAAGmE,WAAWa,KAAK,CAAC,CAACC;QAC9B,IAAIlB,uBAAuBQ,GAAG,CAACL,SAASY,OAAOf,uBAAuBY,MAAM,CAACT;QAC7E,MAAMe;IACR;IACAlB,uBAAuBmB,GAAG,CAAChB,KAAKY;IAChC,OAAOA,MAAM9E,KAAK;AACpB;AAEA,uEAAuE,GACvE,OAAO,SAASmF;IACd,OAAO;QAAE5E,MAAMwD,uBAAuBxD,IAAI;IAAC;AAC7C;AAEA,sFAAsF,GACtF,OAAO,SAAS6E;IACdrB,uBAAuBsB,KAAK;AAC9B;AAEA,SAASC,UAAUpH,YAAiB;IAClC,MAAMqH,KAAKrH,cAAckF,OAAOmC;IAChC,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,gFAAgF;IAChF,IAAIA,MAAM,MAAM;QACd,MAAM,IAAIC,MAAM;IAClB;IACA,OAAOD;AACT;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAeE,qBACpBC,MAAc,EACdxH,YAA0B;IAE1B,OAAO3C,uBAAuB2C,cAAc;QAC1CwH;QACAC,YAAYvJ,cAAcsB;QAC1BkI,eAAe3J;IACjB;AACF;AAEA,OAAO,eAAe4J,yBACpBH,MAAc,EACdxH,YAA0B,EAC1B4H,cAA+B;IAE/B,MAAMC,QAAQ;QACZ,MAAMC,YAAYF,kBAAmB,MAAML,qBAAqBC,QAAQxH;QACxE,OAAOrC,oBAAoBqC,cAAc;YACvC+H,SAAS;gBACPC,MAAMF;YACR;YACAL,YAAYvJ,cAAcsB;YAC1BkI,eAAe3J;QACjB;IACF;IACA,4EAA4E;IAC5E,8EAA8E;IAC9E,gGAAgG;IAChG,IAAI6J,gBAAgB,OAAOC;IAC3B,OAAO9B,mBACL,CAAC,IAAI,EAAEqB,UAAUpH,cAAc,CAAC,EAAE0F,uBAAuB,CAAC,EAAE8B,OAAO7G,OAAO,EAAE,EAC5EkH;AAEJ;AAEA,OAAO,eAAeI,YAAYT,MAAc,EAAExH,YAAiB,EAAEkI,QAAe;IAClF,MAAMN,iBAAiB,MAAMvK,uBAAuB2C,cAAc;QAChEyH,YAAYvJ,cAAcsB;QAC1BgI;QACAE,eAAe3J;IACjB;IACA,MAAMoK,eAAezK,sBAAsB8J,OAAO7G,OAAO;IACzD,MAAMyH,wBAAwB,MAAM3K,cAAc;QAAE+J,QAAQW;IAAa;IAEzE,MAAME,mBAAmB,MAAM7K,sBAAsBwC,cAAc;QACjEyH,YAAYvJ,cAAcsB;QAC1BgI,QAAQY;QACRF,UAAUA;QACVR,eAAe3J;IACjB;IACA,MAAMuK,oBAAoB,MAAM3K,oBAAoBqC,cAAc;QAChEyH,YAAYvJ,cAAcsB;QAC1BuI,SAAS;YACPC,MAAMJ;YACNW,SAASF;QACX;QACAX,eAAe3J;IACjB;IAEA,OAAO,MAAMR,2BAA2B+K;AAC1C;AAEA,OAAO,eAAeE,cAAcC,QAAgB,EAAEjB,MAAc,EAAExH,YAAiB;IACrF,MAAM0I,mBAAmB,MAAMjL,cAAc;QAC3C+J;IACF;IACA,MAAMc,oBAAoB,MAAMhL,6BAC9B0C,cACA9B,cAAcsB,sBACdzB,aACA0K,UACAC;IAGF,OAAOJ;AACT;AAEA,OAAO,eAAeK,iBACpBnB,MAAc,EACdxH,YAAiB,EACjBkI,QAAe,EACfN,cAA+B,EAC/BgB,oBAAmC3J,oBAAoB;IAEvD,MAAM6I,YAAYF,kBAAmB,MAAML,qBAAqBC,QAAQxH;IACxE,MAAM6I,gBAAgB1J,oBAAoByJ;IAC1C,MAAMF,mBAAmB,MAAMjL,cAAc;QAC3C+J,QAAQqB;IACV;IAEA,MAAMR,mBAAmB,MAAM7K,sBAAsBwC,cAAc;QACjEyH,YAAYvJ,cAAcsB;QAC1BgI,QAAQkB;QACRR,UAAUA;QACVR,eAAe3J;IACjB;IAEA,MAAMuK,oBAAoB,MAAM3K,oBAAoBqC,cAAc;QAChEyH,YAAYvJ,cAAcsB;QAC1BuI,SAAS;YACPC,MAAMF;YACNS,SAASF;QACX;QACAX,eAAe3J;IACjB;IAEA,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,OAAOR,2BAA2B+K,mBAAmBM;AACvD;AAEA;;;;;;;;;;;;;;;;CAgBC,GACD,OAAO,eAAeE,6BACpBtB,MAAc,EACduB,qBAA0C,EAC1Cb,QAAe,EACfc,eAAwB;IAExB,MAAMJ,oBAAoB3J;IAC1B,MAAMgK,MAA8B,CAAC;IACrC,KAAK,MAAM,CAACC,YAAYlJ,aAAa,IAAImJ,OAAOC,OAAO,CAACL,uBAAwB;QAC9E,MAAMtF,UAAU4F,OAAOH;QACvB,IAAI;YACFD,GAAG,CAACxF,QAAQ,GAAG,MAAMkF,iBACnBnB,QACAxH,cACAkI,UACArB,WACA+B;QAEJ,EAAE,OAAO7B,KAAK;YACZ,2EAA2E;YAC3E,6EAA6E;YAC7E,IAAIiC,mBAAmB,QAAQvF,YAAY4F,OAAOL,kBAAkB,MAAMjC;YAC1EuC,QAAQC,IAAI,CACV,CAAC,gDAAgD,EAAE9F,QAAQ,EAAE,EAC3DsD,eAAeO,QAAQP,IAAI7E,OAAO,GAAGsH,OAAOzC,MAC5C;QAEN;IACF;IACA,+EAA+E;IAC/E,+EAA+E;IAC/E,+EAA+E;IAC/E,wCAAwC;IACxC,IAAIiC,mBAAmB,QAAQC,GAAG,CAACD,gBAAgB,IAAI,MAAM;QAC3D,MAAM,IAAI1B,MACR,CAAC,+CAA+C,EAAE0B,gBAAgB,iCAAiC,CAAC;IAExG;IACA,OAAOC;AACT;AAEA;;;;;CAKC,GACD,OAAO,MAAMQ,2BAA2BxL,+BAA8B;AAEtE,gFAAgF;AAChF,2EAA2E;AAC3E,qEAAqE;AACrE,SAASF,WAAW,EAAEC,WAAW,GAAE;AAGnC;;;;;;;;;;;CAWC,GACD,OAAO,eAAe0L,wBACpBlC,MAAc,EACdxH,YAA0B,EAC1B2J,WAAyC;IAEzC,MAAM9B,QAAQ,IACZlK,oBAAoBqC,cAAc;YAChC4J,gBAAgBpC;YAChB,GAAImC,cAAc;gBAAEA;YAAY,IAAI,CAAC,CAAC;YACtClC,YAAYvJ,cAAcsB;YAC1BkI,eAAe1J;QACjB;IACF,+EAA+E;IAC/E,IAAI2L,aAAa,OAAO9B;IACxB,OAAO9B,mBAAmB,CAAC,KAAK,EAAEqB,UAAUpH,cAAc,CAAC,EAAEwH,OAAO7G,OAAO,EAAE,EAAEkH;AACjF;AAEA,OAAO,eAAegC,cACpBC,oBAA4B,EAC5B9J,YAAiB,EACjB0H,gBAA+B3J,WAAW;IAE1C,OAAOgI,mBACL,CAAC,GAAG,EAAEqB,UAAUpH,cAAc,CAAC,EAAE0H,cAAc,CAAC,EAAEoC,sBAAsB,EACxE,IACExM,6BACE0C,cACA9B,cAAcsB,sBACdkI,eACAoC;AAGR;AAEA;;;;;;;;;CASC,GACD,OAAO,eAAeC,oCACpBjF,aAA2B,EAC3B9E,YAA0B,EAC1BkI,QAAe,EACfR,gBAA+B3J,WAAW;IAE1C,kFAAkF;IAClF,MAAM6K,oBAAoB3J;IAC1B,MAAM+K,iBAAiB7K,oBAAoByJ;IAE3C,wDAAwD;IACxD,MAAMF,mBAAmB,MAAMjL,cAAc;QAAE+J,QAAQwC;IAAe;IAEtE,6EAA6E;IAC7E,+EAA+E;IAC/E,sEAAsE;IACtE,MAAMC,sBAAsB,MAAMzM,sBAAsBwC,cAAc;QACpEyH,YAAYvJ,cAAcsB;QAC1BgI,QAAQkB;QACRR;QACAR;IACF;IAEA,iEAAiE;IACjE,MAAMwC,qBAAqBpF;IAC3B,MAAMqF,gBAAgBD,mBAAmBE,mBAAmB,CAACD,aAAa;IAE1E,IAAI,CAACA,eAAe;QAClB,MAAM,IAAI7C,MAAM;IAClB;IAEA,+EAA+E;IAC/E,6EAA6E;IAC7E,8EAA8E;IAC9E,iEAAiE;IACjE,MAAMgB,oBAAoB,MAAM3K,oBAAoBqC,cAAc;QAChEyH,YAAYvJ,cAAcsB;QAC1BmB,SAASuJ,mBAAmBvJ,OAAO;QACnCoH,SAAS;YACPC,MAAMmC;YACN5B,SAAS0B;QACX;QACAvC;IACF;IAEA,sEAAsE;IACtE,MAAM2C,aAAa,MAAM9M,2BAA2B+K,mBAAmBM;IAEvE,OAAOyB;AACT;AAEA,OAAO,MAAMC,cAAc;IACzB/H;IACAG;IACAI;IACAE;AACF,EAAC"}

package/dist/nevermined/utils/ZeroDevPolicies.d.ts

@@ -15,8 +15,8 @@ export declare const getOrderPolicy: () => Policy;
 export declare const getMintNFTPolicy: () => Policy;
 export declare const getBurnNFTPolicy: () => Policy;
 export declare const getRegisterPolicy: () => Policy;
-export declare const buildPolicy: (permissions: string[], contractAddress: `0x${string}`) => Policy;
-export declare const getAllContractsPolicy: (contractAddress: `0x${string}`) => Policy;
+export declare const buildPolicy: (permissions: string[], tokenAddresses: `0x${string}`[]) => Policy;
+export declare const getAllContractsPolicy: (tokenAddresses: `0x${string}`[]) => Policy;
 export type OrderContract = {
     address: `0x${string}`;
     isPayAsYouGo: boolean;

package/dist/nevermined/utils/ZeroDevPolicies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ZeroDevPolicies.d.ts","sourceRoot":"","sources":["../../../src/nevermined/utils/ZeroDevPolicies.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,GAAG,EAAoC,MAAM,MAAM,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7C,wBAAgB,SAAS,CAAC,WAAW,EAAE,GAAG,EAAE,UAK3C;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,SAelE;AAED,wBAAgB,0BAA0B,CAAC,eAAe,EAAE,KAAK,MAAM,EAAE;;SAK/D,GAAG;;EAGZ;AACD,eAAO,MAAM,qBAAqB,GAAI,iBAAiB,KAAK,MAAM,EAAE,WACV,CAAA;AAE1D,eAAO,MAAM,0BAA0B,cACwB,CAAA;AAE/D,eAAO,MAAM,gCAAgC,cAC2C,CAAA;AAExF,eAAO,MAAM,uBAAuB,cACuC,CAAA;AAE3E,eAAO,MAAM,cAAc,cAM1B,CAAA;AAED,eAAO,MAAM,gBAAgB,cAAkE,CAAA;AAE/F,eAAO,MAAM,gBAAgB,cAAkE,CAAA;AAE/F,eAAO,MAAM,iBAAiB,cAU3B,CAAA;AAEH,eAAO,MAAM,WAAW,GAAI,aAAa,MAAM,EAAE,EAAE,iBAAiB,KAAK,MAAM,EAAE,WAoBhF,CAAA;AAED,eAAO,MAAM,qBAAqB,GAAI,iBAAiB,KAAK,MAAM,EAAE,WAgBjE,CAAA;AAEH,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,KAAK,MAAM,EAAE,CAAA;IACtB,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,aAAa,EAAE,CAAA;IAC1B,iBAAiB,EAAE,KAAK,MAAM,EAAE,CAAA;IAChC,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oBAAoB,CAAC,EAAE,KAAK,MAAM,EAAE,CAAA;IACpC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,oBAAoB,kBAAkB,KAAG,MAAM,EAgFtF,CAAA"}
+{"version":3,"file":"ZeroDevPolicies.d.ts","sourceRoot":"","sources":["../../../src/nevermined/utils/ZeroDevPolicies.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,GAAG,EAAoC,MAAM,MAAM,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7C,wBAAgB,SAAS,CAAC,WAAW,EAAE,GAAG,EAAE,UAK3C;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,SAiClE;AAoBD,wBAAgB,0BAA0B,CAAC,eAAe,EAAE,KAAK,MAAM,EAAE;;SAK/D,GAAG;;EAGZ;AACD,eAAO,MAAM,qBAAqB,GAAI,iBAAiB,KAAK,MAAM,EAAE,WACV,CAAA;AAgB1D,eAAO,MAAM,0BAA0B,cACyB,CAAA;AAEhE,eAAO,MAAM,gCAAgC,cAC2C,CAAA;AAExF,eAAO,MAAM,uBAAuB,cACuC,CAAA;AAE3E,eAAO,MAAM,cAAc,cAM1B,CAAA;AAED,eAAO,MAAM,gBAAgB,cAAkE,CAAA;AAE/F,eAAO,MAAM,gBAAgB,cAAkE,CAAA;AAE/F,eAAO,MAAM,iBAAiB,cACuC,CAAA;AAwBrE,eAAO,MAAM,WAAW,GAAI,aAAa,MAAM,EAAE,EAAE,gBAAgB,KAAK,MAAM,EAAE,EAAE,WAgBjF,CAAA;AAOD,eAAO,MAAM,qBAAqB,GAAI,gBAAgB,KAAK,MAAM,EAAE,EAAE,WAWpE,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,KAAK,MAAM,EAAE,CAAA;IACtB,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,aAAa,EAAE,CAAA;IAC1B,iBAAiB,EAAE,KAAK,MAAM,EAAE,CAAA;IAChC,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oBAAoB,CAAC,EAAE,KAAK,MAAM,EAAE,CAAA;IACpC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,oBAAoB,kBAAkB,KAAG,MAAM,EAgFtF,CAAA"}

package/dist/nevermined/utils/ZeroDevPolicies.js

@@ -9,20 +9,54 @@ export function getPolicy(permissions) {
 }
 export function getPermissions(config, functionNames) {
     const permissions = [];
-    functionNames.forEach((functionName)=>{
-        const abis = config.abi.filter((item)=>item.type === 'function' && item.name === functionName);
+    functionNames.forEach((entry)=>{
+        // A bare name ('register') matches every overload of that name; a full signature
+        // ('register(bytes32,string,uint256[])') pins ONE overload. The latter lets callers
+        // permit only the signature the SDK actually calls instead of all overloads, which
+        // keeps the CallPolicy merkle small (load-bearing on Tempo — see #1929).
+        const name = entry.split('(')[0];
+        const abis = config.abi.filter((item)=>{
+            if (item.type !== 'function' || item.name !== name) return false;
+            if (!entry.includes('(')) return true;
+            const sig = `${item.name}(${(item.inputs ?? []).map((i)=>i.type).join(',')})`;
+            return sig === entry;
+        });
+        // Fail LOUD if a requested function resolves to no ABI entry. A pinned full
+        // signature (#1929 register trim) that stops matching after a contract regen
+        // would otherwise silently emit zero permissions → every userOp for that
+        // function reverts `InvalidCallData` at runtime with no build-time error.
+        if (abis.length === 0) {
+            throw new Error(`getPermissions: "${entry}" matched no function in the ABI for ${config.address}. ` + `A contract regen may have changed the signature (see #1929 register-overload trim).`);
+        }
         abis.forEach((abi)=>{
             permissions.push({
                 target: config.address,
                 abi: [
                     abi
                 ],
-                functionName
+                functionName: name
             });
         });
     });
     return permissions;
 }
+// Dedupe settlement-token addresses case-insensitively (checksummed vs lowercase
+// are the SAME token) and drop the zero address. Duplicate `approve` permissions
+// re-bloat the CallPolicy merkle, which is load-bearing on Tempo's enable-gas
+// ceiling (#1929) — a case-sensitive `new Set` would let a mixed-casing map edit
+// silently regress the enable.
+function dedupeTokens(tokenAddresses) {
+    const seen = new Set();
+    const out = [];
+    for (const t of tokenAddresses){
+        if (!t || t === zeroAddress) continue;
+        const key = t.toLowerCase();
+        if (seen.has(key)) continue;
+        seen.add(key);
+        out.push(t);
+    }
+    return out;
+}
 export function getERC20ApprovePermissions(contractAddress) {
     return {
         target: contractAddress,
@@ -35,8 +69,21 @@ export function getERC20ApprovePermissions(contractAddress) {
 export const getERC20ApprovePolicy = (contractAddress)=>getPolicy([
         getERC20ApprovePermissions(contractAddress)
     ]);
+// AssetRegistry's ABI carries 5 `register` overloads, but the SDK only ever calls
+// register(bytes32 seed, string url, uint256[] plans) (AssetRegistry.register). Pinning the
+// used signature drops the 4 dead overloads from the CallPolicy merkle (16 → 12 perms),
+// which is what lets the session-key ENABLE fit under Tempo's verification-gas ceiling (#1929).
+const REGISTER_FN = 'register(bytes32,string,uint256[])';
+const REGISTER_GROUP_FNS = [
+    REGISTER_FN,
+    'createPlan',
+    'createPlanWithHooks',
+    'registerAgentAndPlan',
+    'addPlanToAgent',
+    'removePlanFromAgent'
+];
 export const getAgentRegistrationPolicy = ()=>getPolicy(getPermissions(assetsRegistryConfig, [
-        'register'
+        REGISTER_FN
     ]));
 export const getPricingPlanRegistrationPolicy = ()=>getPolicy(getPermissions(assetsRegistryConfig, [
         'createPlan',
@@ -62,24 +109,28 @@ export const getMintNFTPolicy = ()=>getPolicy(getPermissions(nft1155CreditsConfi
 export const getBurnNFTPolicy = ()=>getPolicy(getPermissions(nft1155CreditsConfig, [
         'burn'
     ]));
-export const getRegisterPolicy = ()=>getPolicy(getPermissions(assetsRegistryConfig, [
-        'register',
-        'createPlan',
-        'createPlanWithHooks',
-        'registerAgentAndPlan',
-        'addPlanToAgent',
-        'removePlanFromAgent'
-    ]));
-export const buildPolicy = (permissions, contractAddress)=>{
+export const getRegisterPolicy = ()=>getPolicy(getPermissions(assetsRegistryConfig, REGISTER_GROUP_FNS));
+// #1929: the session-key CallPolicy is a cross-network UNION (every settlement
+// token's `approve` + the protocol methods) that must fit under Tempo's (most
+// restrictive) verification-gas ceiling for the on-chain ENABLE. The register-
+// overload trim (16 → 12 perms) exists precisely because that margin is thin, and
+// each new network/currency adds an `approve` to EVERY chain's key — so guard the
+// bound explicitly. Exceeding it means the next Tempo `createSessionKey` enable
+// would silently revert (AA23/AA26); the fix is a per-network token subset
+// (`createSessionKeysForNetworks` already loops per network), NOT raising this.
+const MAX_CALLPOLICY_PERMISSIONS = 14;
+const assertPolicyFitsTempoEnableGas = (perms)=>{
+    if (perms.length > MAX_CALLPOLICY_PERMISSIONS) {
+        throw new Error(`CallPolicy has ${perms.length} permissions; exceeds the Tempo session-key enable-gas budget (${MAX_CALLPOLICY_PERMISSIONS}). Split to a per-network token subset instead of growing the cross-network union.`);
+    }
+};
+// #1929: `order` keys must approve EVERY settlement token they may pay with (one
+// per network/currency), not a single hardcoded one — otherwise paying a plan in
+// a different token (EURC, or pathUSD on Tempo) reverts `InvalidCallData`. No spend
+// limit by design (the approve permissions carry no `valueLimit`).
+export const buildPolicy = (permissions, tokenAddresses)=>{
     const perms = [
-        ...permissions.includes('register') ? getPermissions(assetsRegistryConfig, [
-            'register',
-            'createPlan',
-            'createPlanWithHooks',
-            'registerAgentAndPlan',
-            'addPlanToAgent',
-            'removePlanFromAgent'
-        ]) : [],
+        ...permissions.includes('register') ? getPermissions(assetsRegistryConfig, REGISTER_GROUP_FNS) : [],
         ...permissions.includes('mint') ? getPermissions(nft1155CreditsConfig, [
             'mint'
         ]) : [],
@@ -92,21 +143,19 @@ export const buildPolicy = (permissions, contractAddress)=>{
         ...permissions.includes('order') ? getPermissions(payAsYouGoTemplateConfig, [
             'order'
         ]) : [],
-        ...permissions.includes('order') ? [
-            getERC20ApprovePermissions(contractAddress)
-        ] : []
+        ...permissions.includes('order') ? dedupeTokens(tokenAddresses).map((t)=>getERC20ApprovePermissions(t)) : []
     ];
+    assertPolicyFitsTempoEnableGas(perms);
     return getPolicy(perms);
 };
-export const getAllContractsPolicy = (contractAddress)=>getPolicy([
-        ...getPermissions(assetsRegistryConfig, [
-            'register',
-            'createPlan',
-            'createPlanWithHooks',
-            'registerAgentAndPlan',
-            'addPlanToAgent',
-            'removePlanFromAgent'
-        ]),
+// #1929: the session key must permit `approve` on EVERY settlement token it may
+// ever pay with — one per (network, currency). A single-token policy silently
+// breaks the moment the order's token differs from it (EURC plans, or pathUSD on
+// Tempo), reverting validateUserOp with `InvalidCallData`. Dedupe + drop zeros
+// here so callers can pass the raw per-network token list.
+export const getAllContractsPolicy = (tokenAddresses)=>{
+    const perms = [
+        ...getPermissions(assetsRegistryConfig, REGISTER_GROUP_FNS),
         ...getPermissions(fixedPaymentTemplateConfig, [
             'order'
         ]),
@@ -117,8 +166,11 @@ export const getAllContractsPolicy = (contractAddress)=>getPolicy([
             'mint',
             'burn'
         ]),
-        getERC20ApprovePermissions(contractAddress)
-    ].filter(Boolean));
+        ...dedupeTokens(tokenAddresses).map((t)=>getERC20ApprovePermissions(t))
+    ].filter(Boolean);
+    assertPolicyFitsTempoEnableGas(perms);
+    return getPolicy(perms);
+};
 export const getZeroDevOrderPolicies = (orderPolicyOptions)=>{
     const policies = [];
     const orderPermissions = orderPolicyOptions.contracts.map((contract)=>{

package/dist/nevermined/utils/ZeroDevPolicies.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/nevermined/utils/ZeroDevPolicies.ts"],"sourcesContent":["import {\n  CallPolicyVersion,\n  ParamCondition,\n  toCallPolicy,\n  toRateLimitPolicy,\n  toTimestampPolicy,\n} from '@zerodev/permissions/policies'\nimport {\n  assetsRegistryConfig,\n  fixedPaymentTemplateConfig,\n  nft1155CreditsConfig,\n  payAsYouGoTemplateAddress,\n  payAsYouGoTemplateConfig,\n} from '../../artifacts/generated.js'\nimport { Abi, isAddress, parseAbi, zeroAddress } from 'viem'\nimport { Policy } from '@zerodev/permissions'\n\nexport function getPolicy(permissions: any[]) {\n  return toCallPolicy({\n    policyVersion: CallPolicyVersion.V0_0_4,\n    permissions,\n  })\n}\n\nexport function getPermissions(config: any, functionNames: string[]) {\n  const permissions: any[] = []\n  functionNames.forEach((functionName) => {\n    const abis = config.abi.filter(\n      (item: any) => item.type === 'function' && item.name === functionName,\n    )\n    abis.forEach((abi: any) => {\n      permissions.push({\n        target: config.address,\n        abi: [abi],\n        functionName,\n      })\n    })\n  })\n  return permissions\n}\n\nexport function getERC20ApprovePermissions(contractAddress: `0x${string}`) {\n  return {\n    target: contractAddress,\n    abi: parseAbi([\n      'function approve(address spender, uint256 amount) external returns (bool)',\n    ]) as Abi,\n    functionName: 'approve',\n  }\n}\nexport const getERC20ApprovePolicy = (contractAddress: `0x${string}`) =>\n  getPolicy([getERC20ApprovePermissions(contractAddress)])\n\nexport const getAgentRegistrationPolicy = () =>\n  getPolicy(getPermissions(assetsRegistryConfig, ['register']))\n\nexport const getPricingPlanRegistrationPolicy = () =>\n  getPolicy(getPermissions(assetsRegistryConfig, ['createPlan', 'createPlanWithHooks']))\n\nexport const getRegisterAssetsPolicy = () =>\n  getPolicy(getPermissions(assetsRegistryConfig, ['registerAgentAndPlan']))\n\nexport const getOrderPolicy = () => {\n  const perms = [\n    ...getPermissions(fixedPaymentTemplateConfig, ['order']),\n    ...getPermissions(payAsYouGoTemplateAddress, ['order']),\n  ]\n  return getPolicy(perms)\n}\n\nexport const getMintNFTPolicy = () => getPolicy(getPermissions(nft1155CreditsConfig, ['mint']))\n\nexport const getBurnNFTPolicy = () => getPolicy(getPermissions(nft1155CreditsConfig, ['burn']))\n\nexport const getRegisterPolicy = () =>\n  getPolicy(\n    getPermissions(assetsRegistryConfig, [\n      'register',\n      'createPlan',\n      'createPlanWithHooks',\n      'registerAgentAndPlan',\n      'addPlanToAgent',\n      'removePlanFromAgent',\n    ]),\n  )\n\nexport const buildPolicy = (permissions: string[], contractAddress: `0x${string}`) => {\n  const perms = [\n    ...(permissions.includes('register')\n      ? getPermissions(assetsRegistryConfig, [\n          'register',\n          'createPlan',\n          'createPlanWithHooks',\n          'registerAgentAndPlan',\n          'addPlanToAgent',\n          'removePlanFromAgent',\n        ])\n      : []),\n    ...(permissions.includes('mint') ? getPermissions(nft1155CreditsConfig, ['mint']) : []),\n    ...(permissions.includes('burn') ? getPermissions(nft1155CreditsConfig, ['burn']) : []),\n    ...(permissions.includes('order') ? getPermissions(fixedPaymentTemplateConfig, ['order']) : []),\n    ...(permissions.includes('order') ? getPermissions(payAsYouGoTemplateConfig, ['order']) : []),\n    ...(permissions.includes('order') ? [getERC20ApprovePermissions(contractAddress)] : []),\n  ]\n\n  return getPolicy(perms)\n}\n\nexport const getAllContractsPolicy = (contractAddress: `0x${string}`) =>\n  getPolicy(\n    [\n      ...getPermissions(assetsRegistryConfig, [\n        'register',\n        'createPlan',\n        'createPlanWithHooks',\n        'registerAgentAndPlan',\n        'addPlanToAgent',\n        'removePlanFromAgent',\n      ]),\n      ...getPermissions(fixedPaymentTemplateConfig, ['order']),\n      ...getPermissions(payAsYouGoTemplateConfig, ['order']),\n      ...getPermissions(nft1155CreditsConfig, ['mint', 'burn']),\n      getERC20ApprovePermissions(contractAddress),\n    ].filter(Boolean),\n  )\n\nexport type OrderContract = {\n  address: `0x${string}`\n  isPayAsYouGo: boolean\n}\n\nexport type OrderPolicyOptions = {\n  contracts: OrderContract[]\n  subscriberAddress: `0x${string}`\n  numberOfPurchases: bigint\n  totalAmount: bigint\n  count?: number\n  erc20ContractAddress?: `0x${string}`\n  validUntil?: number\n}\n\nexport const getZeroDevOrderPolicies = (orderPolicyOptions: OrderPolicyOptions): Policy[] => {\n  const policies: Policy[] = []\n\n  const orderPermissions = orderPolicyOptions.contracts.map((contract) => {\n    if (contract.isPayAsYouGo) {\n      return {\n        target: contract.address,\n        abi: parseAbi([\n          'function order(bytes32 _seed, uint256 _planId, bytes[] memory _params) external payable',\n        ]) as Abi,\n        valueLimit: 0n,\n        functionName: 'order',\n        args: [null, null],\n      }\n    }\n    return {\n      target: contract.address,\n      abi: parseAbi([\n        'function order(bytes32 _seed, uint256 _planId, address _creditsReceiver, uint256 _numberOfPurchases, bytes[] memory _params) external payable',\n      ]) as Abi,\n      valueLimit: 0n,\n      functionName: 'order',\n      args: [\n        null,\n        null,\n        {\n          condition: ParamCondition.EQUAL,\n          value: orderPolicyOptions.subscriberAddress,\n        },\n        {\n          condition: ParamCondition.EQUAL,\n          value: orderPolicyOptions.numberOfPurchases,\n        },\n      ],\n    }\n  })\n\n  const callPermissions: any[] = [...orderPermissions]\n\n  if (\n    orderPolicyOptions.erc20ContractAddress &&\n    isAddress(orderPolicyOptions.erc20ContractAddress)\n  ) {\n    callPermissions.push({\n      target: orderPolicyOptions.erc20ContractAddress,\n      abi: parseAbi([\n        'function approve(address spender, uint256 amount) external returns (bool)',\n      ]) as Abi,\n      valueLimit: 0n,\n      functionName: 'approve',\n      args: [\n        {\n          condition: ParamCondition.NOT_EQUAL,\n          value: zeroAddress,\n        },\n        {\n          condition: ParamCondition.LESS_THAN_OR_EQUAL,\n          value: orderPolicyOptions.totalAmount,\n        },\n      ],\n    })\n  }\n\n  policies.push(getPolicy(callPermissions))\n\n  if (orderPolicyOptions.count) {\n    const rateLimitPolicy = toRateLimitPolicy({\n      count: orderPolicyOptions.count,\n    })\n    policies.push(rateLimitPolicy)\n  }\n\n  if (orderPolicyOptions.validUntil) {\n    const timestampPolicy = toTimestampPolicy({\n      validUntil: orderPolicyOptions.validUntil,\n    })\n    policies.push(timestampPolicy)\n  }\n\n  return policies\n}\n"],"names":["CallPolicyVersion","ParamCondition","toCallPolicy","toRateLimitPolicy","toTimestampPolicy","assetsRegistryConfig","fixedPaymentTemplateConfig","nft1155CreditsConfig","payAsYouGoTemplateAddress","payAsYouGoTemplateConfig","isAddress","parseAbi","zeroAddress","getPolicy","permissions","policyVersion","V0_0_4","getPermissions","config","functionNames","forEach","functionName","abis","abi","filter","item","type","name","push","target","address","getERC20ApprovePermissions","contractAddress","getERC20ApprovePolicy","getAgentRegistrationPolicy","getPricingPlanRegistrationPolicy","getRegisterAssetsPolicy","getOrderPolicy","perms","getMintNFTPolicy","getBurnNFTPolicy","getRegisterPolicy","buildPolicy","includes","getAllContractsPolicy","Boolean","getZeroDevOrderPolicies","orderPolicyOptions","policies","orderPermissions","contracts","map","contract","isPayAsYouGo","valueLimit","args","condition","EQUAL","value","subscriberAddress","numberOfPurchases","callPermissions","erc20ContractAddress","NOT_EQUAL","LESS_THAN_OR_EQUAL","totalAmount","count","rateLimitPolicy","validUntil","timestampPolicy"],"mappings":"AAAA,SACEA,iBAAiB,EACjBC,cAAc,EACdC,YAAY,EACZC,iBAAiB,EACjBC,iBAAiB,QACZ,gCAA+B;AACtC,SACEC,oBAAoB,EACpBC,0BAA0B,EAC1BC,oBAAoB,EACpBC,yBAAyB,EACzBC,wBAAwB,QACnB,+BAA8B;AACrC,SAAcC,SAAS,EAAEC,QAAQ,EAAEC,WAAW,QAAQ,OAAM;AAG5D,OAAO,SAASC,UAAUC,WAAkB;IAC1C,OAAOZ,aAAa;QAClBa,eAAef,kBAAkBgB,MAAM;QACvCF;IACF;AACF;AAEA,OAAO,SAASG,eAAeC,MAAW,EAAEC,aAAuB;IACjE,MAAML,cAAqB,EAAE;IAC7BK,cAAcC,OAAO,CAAC,CAACC;QACrB,MAAMC,OAAOJ,OAAOK,GAAG,CAACC,MAAM,CAC5B,CAACC,OAAcA,KAAKC,IAAI,KAAK,cAAcD,KAAKE,IAAI,KAAKN;QAE3DC,KAAKF,OAAO,CAAC,CAACG;YACZT,YAAYc,IAAI,CAAC;gBACfC,QAAQX,OAAOY,OAAO;gBACtBP,KAAK;oBAACA;iBAAI;gBACVF;YACF;QACF;IACF;IACA,OAAOP;AACT;AAEA,OAAO,SAASiB,2BAA2BC,eAA8B;IACvE,OAAO;QACLH,QAAQG;QACRT,KAAKZ,SAAS;YACZ;SACD;QACDU,cAAc;IAChB;AACF;AACA,OAAO,MAAMY,wBAAwB,CAACD,kBACpCnB,UAAU;QAACkB,2BAA2BC;KAAiB,EAAC;AAE1D,OAAO,MAAME,6BAA6B,IACxCrB,UAAUI,eAAeZ,sBAAsB;QAAC;KAAW,GAAE;AAE/D,OAAO,MAAM8B,mCAAmC,IAC9CtB,UAAUI,eAAeZ,sBAAsB;QAAC;QAAc;KAAsB,GAAE;AAExF,OAAO,MAAM+B,0BAA0B,IACrCvB,UAAUI,eAAeZ,sBAAsB;QAAC;KAAuB,GAAE;AAE3E,OAAO,MAAMgC,iBAAiB;IAC5B,MAAMC,QAAQ;WACTrB,eAAeX,4BAA4B;YAAC;SAAQ;WACpDW,eAAeT,2BAA2B;YAAC;SAAQ;KACvD;IACD,OAAOK,UAAUyB;AACnB,EAAC;AAED,OAAO,MAAMC,mBAAmB,IAAM1B,UAAUI,eAAeV,sBAAsB;QAAC;KAAO,GAAE;AAE/F,OAAO,MAAMiC,mBAAmB,IAAM3B,UAAUI,eAAeV,sBAAsB;QAAC;KAAO,GAAE;AAE/F,OAAO,MAAMkC,oBAAoB,IAC/B5B,UACEI,eAAeZ,sBAAsB;QACnC;QACA;QACA;QACA;QACA;QACA;KACD,GACF;AAEH,OAAO,MAAMqC,cAAc,CAAC5B,aAAuBkB;IACjD,MAAMM,QAAQ;WACRxB,YAAY6B,QAAQ,CAAC,cACrB1B,eAAeZ,sBAAsB;YACnC;YACA;YACA;YACA;YACA;YACA;SACD,IACD,EAAE;WACFS,YAAY6B,QAAQ,CAAC,UAAU1B,eAAeV,sBAAsB;YAAC;SAAO,IAAI,EAAE;WAClFO,YAAY6B,QAAQ,CAAC,UAAU1B,eAAeV,sBAAsB;YAAC;SAAO,IAAI,EAAE;WAClFO,YAAY6B,QAAQ,CAAC,WAAW1B,eAAeX,4BAA4B;YAAC;SAAQ,IAAI,EAAE;WAC1FQ,YAAY6B,QAAQ,CAAC,WAAW1B,eAAeR,0BAA0B;YAAC;SAAQ,IAAI,EAAE;WACxFK,YAAY6B,QAAQ,CAAC,WAAW;YAACZ,2BAA2BC;SAAiB,GAAG,EAAE;KACvF;IAED,OAAOnB,UAAUyB;AACnB,EAAC;AAED,OAAO,MAAMM,wBAAwB,CAACZ,kBACpCnB,UACE;WACKI,eAAeZ,sBAAsB;YACtC;YACA;YACA;YACA;YACA;YACA;SACD;WACEY,eAAeX,4BAA4B;YAAC;SAAQ;WACpDW,eAAeR,0BAA0B;YAAC;SAAQ;WAClDQ,eAAeV,sBAAsB;YAAC;YAAQ;SAAO;QACxDwB,2BAA2BC;KAC5B,CAACR,MAAM,CAACqB,UACV;AAiBH,OAAO,MAAMC,0BAA0B,CAACC;IACtC,MAAMC,WAAqB,EAAE;IAE7B,MAAMC,mBAAmBF,mBAAmBG,SAAS,CAACC,GAAG,CAAC,CAACC;QACzD,IAAIA,SAASC,YAAY,EAAE;YACzB,OAAO;gBACLxB,QAAQuB,SAAStB,OAAO;gBACxBP,KAAKZ,SAAS;oBACZ;iBACD;gBACD2C,YAAY,EAAE;gBACdjC,cAAc;gBACdkC,MAAM;oBAAC;oBAAM;iBAAK;YACpB;QACF;QACA,OAAO;YACL1B,QAAQuB,SAAStB,OAAO;YACxBP,KAAKZ,SAAS;gBACZ;aACD;YACD2C,YAAY,EAAE;YACdjC,cAAc;YACdkC,MAAM;gBACJ;gBACA;gBACA;oBACEC,WAAWvD,eAAewD,KAAK;oBAC/BC,OAAOX,mBAAmBY,iBAAiB;gBAC7C;gBACA;oBACEH,WAAWvD,eAAewD,KAAK;oBAC/BC,OAAOX,mBAAmBa,iBAAiB;gBAC7C;aACD;QACH;IACF;IAEA,MAAMC,kBAAyB;WAAIZ;KAAiB;IAEpD,IACEF,mBAAmBe,oBAAoB,IACvCpD,UAAUqC,mBAAmBe,oBAAoB,GACjD;QACAD,gBAAgBjC,IAAI,CAAC;YACnBC,QAAQkB,mBAAmBe,oBAAoB;YAC/CvC,KAAKZ,SAAS;gBACZ;aACD;YACD2C,YAAY,EAAE;YACdjC,cAAc;YACdkC,MAAM;gBACJ;oBACEC,WAAWvD,eAAe8D,SAAS;oBACnCL,OAAO9C;gBACT;gBACA;oBACE4C,WAAWvD,eAAe+D,kBAAkB;oBAC5CN,OAAOX,mBAAmBkB,WAAW;gBACvC;aACD;QACH;IACF;IAEAjB,SAASpB,IAAI,CAACf,UAAUgD;IAExB,IAAId,mBAAmBmB,KAAK,EAAE;QAC5B,MAAMC,kBAAkBhE,kBAAkB;YACxC+D,OAAOnB,mBAAmBmB,KAAK;QACjC;QACAlB,SAASpB,IAAI,CAACuC;IAChB;IAEA,IAAIpB,mBAAmBqB,UAAU,EAAE;QACjC,MAAMC,kBAAkBjE,kBAAkB;YACxCgE,YAAYrB,mBAAmBqB,UAAU;QAC3C;QACApB,SAASpB,IAAI,CAACyC;IAChB;IAEA,OAAOrB;AACT,EAAC"}
+{"version":3,"sources":["../../../src/nevermined/utils/ZeroDevPolicies.ts"],"sourcesContent":["import {\n  CallPolicyVersion,\n  ParamCondition,\n  toCallPolicy,\n  toRateLimitPolicy,\n  toTimestampPolicy,\n} from '@zerodev/permissions/policies'\nimport {\n  assetsRegistryConfig,\n  fixedPaymentTemplateConfig,\n  nft1155CreditsConfig,\n  payAsYouGoTemplateAddress,\n  payAsYouGoTemplateConfig,\n} from '../../artifacts/generated.js'\nimport { Abi, isAddress, parseAbi, zeroAddress } from 'viem'\nimport { Policy } from '@zerodev/permissions'\n\nexport function getPolicy(permissions: any[]) {\n  return toCallPolicy({\n    policyVersion: CallPolicyVersion.V0_0_4,\n    permissions,\n  })\n}\n\nexport function getPermissions(config: any, functionNames: string[]) {\n  const permissions: any[] = []\n  functionNames.forEach((entry) => {\n    // A bare name ('register') matches every overload of that name; a full signature\n    // ('register(bytes32,string,uint256[])') pins ONE overload. The latter lets callers\n    // permit only the signature the SDK actually calls instead of all overloads, which\n    // keeps the CallPolicy merkle small (load-bearing on Tempo — see #1929).\n    const name = entry.split('(')[0]\n    const abis = config.abi.filter((item: any) => {\n      if (item.type !== 'function' || item.name !== name) return false\n      if (!entry.includes('(')) return true\n      const sig = `${item.name}(${(item.inputs ?? []).map((i: any) => i.type).join(',')})`\n      return sig === entry\n    })\n    // Fail LOUD if a requested function resolves to no ABI entry. A pinned full\n    // signature (#1929 register trim) that stops matching after a contract regen\n    // would otherwise silently emit zero permissions → every userOp for that\n    // function reverts `InvalidCallData` at runtime with no build-time error.\n    if (abis.length === 0) {\n      throw new Error(\n        `getPermissions: \"${entry}\" matched no function in the ABI for ${config.address}. ` +\n          `A contract regen may have changed the signature (see #1929 register-overload trim).`,\n      )\n    }\n    abis.forEach((abi: any) => {\n      permissions.push({\n        target: config.address,\n        abi: [abi],\n        functionName: name,\n      })\n    })\n  })\n  return permissions\n}\n\n// Dedupe settlement-token addresses case-insensitively (checksummed vs lowercase\n// are the SAME token) and drop the zero address. Duplicate `approve` permissions\n// re-bloat the CallPolicy merkle, which is load-bearing on Tempo's enable-gas\n// ceiling (#1929) — a case-sensitive `new Set` would let a mixed-casing map edit\n// silently regress the enable.\nfunction dedupeTokens(tokenAddresses: `0x${string}`[]): `0x${string}`[] {\n  const seen = new Set<string>()\n  const out: `0x${string}`[] = []\n  for (const t of tokenAddresses) {\n    if (!t || t === zeroAddress) continue\n    const key = t.toLowerCase()\n    if (seen.has(key)) continue\n    seen.add(key)\n    out.push(t)\n  }\n  return out\n}\n\nexport function getERC20ApprovePermissions(contractAddress: `0x${string}`) {\n  return {\n    target: contractAddress,\n    abi: parseAbi([\n      'function approve(address spender, uint256 amount) external returns (bool)',\n    ]) as Abi,\n    functionName: 'approve',\n  }\n}\nexport const getERC20ApprovePolicy = (contractAddress: `0x${string}`) =>\n  getPolicy([getERC20ApprovePermissions(contractAddress)])\n\n// AssetRegistry's ABI carries 5 `register` overloads, but the SDK only ever calls\n// register(bytes32 seed, string url, uint256[] plans) (AssetRegistry.register). Pinning the\n// used signature drops the 4 dead overloads from the CallPolicy merkle (16 → 12 perms),\n// which is what lets the session-key ENABLE fit under Tempo's verification-gas ceiling (#1929).\nconst REGISTER_FN = 'register(bytes32,string,uint256[])'\nconst REGISTER_GROUP_FNS = [\n  REGISTER_FN,\n  'createPlan',\n  'createPlanWithHooks',\n  'registerAgentAndPlan',\n  'addPlanToAgent',\n  'removePlanFromAgent',\n]\n\nexport const getAgentRegistrationPolicy = () =>\n  getPolicy(getPermissions(assetsRegistryConfig, [REGISTER_FN]))\n\nexport const getPricingPlanRegistrationPolicy = () =>\n  getPolicy(getPermissions(assetsRegistryConfig, ['createPlan', 'createPlanWithHooks']))\n\nexport const getRegisterAssetsPolicy = () =>\n  getPolicy(getPermissions(assetsRegistryConfig, ['registerAgentAndPlan']))\n\nexport const getOrderPolicy = () => {\n  const perms = [\n    ...getPermissions(fixedPaymentTemplateConfig, ['order']),\n    ...getPermissions(payAsYouGoTemplateAddress, ['order']),\n  ]\n  return getPolicy(perms)\n}\n\nexport const getMintNFTPolicy = () => getPolicy(getPermissions(nft1155CreditsConfig, ['mint']))\n\nexport const getBurnNFTPolicy = () => getPolicy(getPermissions(nft1155CreditsConfig, ['burn']))\n\nexport const getRegisterPolicy = () =>\n  getPolicy(getPermissions(assetsRegistryConfig, REGISTER_GROUP_FNS))\n\n// #1929: the session-key CallPolicy is a cross-network UNION (every settlement\n// token's `approve` + the protocol methods) that must fit under Tempo's (most\n// restrictive) verification-gas ceiling for the on-chain ENABLE. The register-\n// overload trim (16 → 12 perms) exists precisely because that margin is thin, and\n// each new network/currency adds an `approve` to EVERY chain's key — so guard the\n// bound explicitly. Exceeding it means the next Tempo `createSessionKey` enable\n// would silently revert (AA23/AA26); the fix is a per-network token subset\n// (`createSessionKeysForNetworks` already loops per network), NOT raising this.\nconst MAX_CALLPOLICY_PERMISSIONS = 14\n\nconst assertPolicyFitsTempoEnableGas = (perms: unknown[]): void => {\n  if (perms.length > MAX_CALLPOLICY_PERMISSIONS) {\n    throw new Error(\n      `CallPolicy has ${perms.length} permissions; exceeds the Tempo session-key enable-gas budget (${MAX_CALLPOLICY_PERMISSIONS}). Split to a per-network token subset instead of growing the cross-network union.`,\n    )\n  }\n}\n\n// #1929: `order` keys must approve EVERY settlement token they may pay with (one\n// per network/currency), not a single hardcoded one — otherwise paying a plan in\n// a different token (EURC, or pathUSD on Tempo) reverts `InvalidCallData`. No spend\n// limit by design (the approve permissions carry no `valueLimit`).\nexport const buildPolicy = (permissions: string[], tokenAddresses: `0x${string}`[]) => {\n  const perms = [\n    ...(permissions.includes('register')\n      ? getPermissions(assetsRegistryConfig, REGISTER_GROUP_FNS)\n      : []),\n    ...(permissions.includes('mint') ? getPermissions(nft1155CreditsConfig, ['mint']) : []),\n    ...(permissions.includes('burn') ? getPermissions(nft1155CreditsConfig, ['burn']) : []),\n    ...(permissions.includes('order') ? getPermissions(fixedPaymentTemplateConfig, ['order']) : []),\n    ...(permissions.includes('order') ? getPermissions(payAsYouGoTemplateConfig, ['order']) : []),\n    ...(permissions.includes('order')\n      ? dedupeTokens(tokenAddresses).map((t) => getERC20ApprovePermissions(t))\n      : []),\n  ]\n\n  assertPolicyFitsTempoEnableGas(perms)\n  return getPolicy(perms)\n}\n\n// #1929: the session key must permit `approve` on EVERY settlement token it may\n// ever pay with — one per (network, currency). A single-token policy silently\n// breaks the moment the order's token differs from it (EURC plans, or pathUSD on\n// Tempo), reverting validateUserOp with `InvalidCallData`. Dedupe + drop zeros\n// here so callers can pass the raw per-network token list.\nexport const getAllContractsPolicy = (tokenAddresses: `0x${string}`[]) => {\n  const perms = [\n    ...getPermissions(assetsRegistryConfig, REGISTER_GROUP_FNS),\n    ...getPermissions(fixedPaymentTemplateConfig, ['order']),\n    ...getPermissions(payAsYouGoTemplateConfig, ['order']),\n    ...getPermissions(nft1155CreditsConfig, ['mint', 'burn']),\n    ...dedupeTokens(tokenAddresses).map((t) => getERC20ApprovePermissions(t)),\n  ].filter(Boolean)\n\n  assertPolicyFitsTempoEnableGas(perms)\n  return getPolicy(perms)\n}\n\nexport type OrderContract = {\n  address: `0x${string}`\n  isPayAsYouGo: boolean\n}\n\nexport type OrderPolicyOptions = {\n  contracts: OrderContract[]\n  subscriberAddress: `0x${string}`\n  numberOfPurchases: bigint\n  totalAmount: bigint\n  count?: number\n  erc20ContractAddress?: `0x${string}`\n  validUntil?: number\n}\n\nexport const getZeroDevOrderPolicies = (orderPolicyOptions: OrderPolicyOptions): Policy[] => {\n  const policies: Policy[] = []\n\n  const orderPermissions = orderPolicyOptions.contracts.map((contract) => {\n    if (contract.isPayAsYouGo) {\n      return {\n        target: contract.address,\n        abi: parseAbi([\n          'function order(bytes32 _seed, uint256 _planId, bytes[] memory _params) external payable',\n        ]) as Abi,\n        valueLimit: 0n,\n        functionName: 'order',\n        args: [null, null],\n      }\n    }\n    return {\n      target: contract.address,\n      abi: parseAbi([\n        'function order(bytes32 _seed, uint256 _planId, address _creditsReceiver, uint256 _numberOfPurchases, bytes[] memory _params) external payable',\n      ]) as Abi,\n      valueLimit: 0n,\n      functionName: 'order',\n      args: [\n        null,\n        null,\n        {\n          condition: ParamCondition.EQUAL,\n          value: orderPolicyOptions.subscriberAddress,\n        },\n        {\n          condition: ParamCondition.EQUAL,\n          value: orderPolicyOptions.numberOfPurchases,\n        },\n      ],\n    }\n  })\n\n  const callPermissions: any[] = [...orderPermissions]\n\n  if (\n    orderPolicyOptions.erc20ContractAddress &&\n    isAddress(orderPolicyOptions.erc20ContractAddress)\n  ) {\n    callPermissions.push({\n      target: orderPolicyOptions.erc20ContractAddress,\n      abi: parseAbi([\n        'function approve(address spender, uint256 amount) external returns (bool)',\n      ]) as Abi,\n      valueLimit: 0n,\n      functionName: 'approve',\n      args: [\n        {\n          condition: ParamCondition.NOT_EQUAL,\n          value: zeroAddress,\n        },\n        {\n          condition: ParamCondition.LESS_THAN_OR_EQUAL,\n          value: orderPolicyOptions.totalAmount,\n        },\n      ],\n    })\n  }\n\n  policies.push(getPolicy(callPermissions))\n\n  if (orderPolicyOptions.count) {\n    const rateLimitPolicy = toRateLimitPolicy({\n      count: orderPolicyOptions.count,\n    })\n    policies.push(rateLimitPolicy)\n  }\n\n  if (orderPolicyOptions.validUntil) {\n    const timestampPolicy = toTimestampPolicy({\n      validUntil: orderPolicyOptions.validUntil,\n    })\n    policies.push(timestampPolicy)\n  }\n\n  return policies\n}\n"],"names":["CallPolicyVersion","ParamCondition","toCallPolicy","toRateLimitPolicy","toTimestampPolicy","assetsRegistryConfig","fixedPaymentTemplateConfig","nft1155CreditsConfig","payAsYouGoTemplateAddress","payAsYouGoTemplateConfig","isAddress","parseAbi","zeroAddress","getPolicy","permissions","policyVersion","V0_0_4","getPermissions","config","functionNames","forEach","entry","name","split","abis","abi","filter","item","type","includes","sig","inputs","map","i","join","length","Error","address","push","target","functionName","dedupeTokens","tokenAddresses","seen","Set","out","t","key","toLowerCase","has","add","getERC20ApprovePermissions","contractAddress","getERC20ApprovePolicy","REGISTER_FN","REGISTER_GROUP_FNS","getAgentRegistrationPolicy","getPricingPlanRegistrationPolicy","getRegisterAssetsPolicy","getOrderPolicy","perms","getMintNFTPolicy","getBurnNFTPolicy","getRegisterPolicy","MAX_CALLPOLICY_PERMISSIONS","assertPolicyFitsTempoEnableGas","buildPolicy","getAllContractsPolicy","Boolean","getZeroDevOrderPolicies","orderPolicyOptions","policies","orderPermissions","contracts","contract","isPayAsYouGo","valueLimit","args","condition","EQUAL","value","subscriberAddress","numberOfPurchases","callPermissions","erc20ContractAddress","NOT_EQUAL","LESS_THAN_OR_EQUAL","totalAmount","count","rateLimitPolicy","validUntil","timestampPolicy"],"mappings":"AAAA,SACEA,iBAAiB,EACjBC,cAAc,EACdC,YAAY,EACZC,iBAAiB,EACjBC,iBAAiB,QACZ,gCAA+B;AACtC,SACEC,oBAAoB,EACpBC,0BAA0B,EAC1BC,oBAAoB,EACpBC,yBAAyB,EACzBC,wBAAwB,QACnB,+BAA8B;AACrC,SAAcC,SAAS,EAAEC,QAAQ,EAAEC,WAAW,QAAQ,OAAM;AAG5D,OAAO,SAASC,UAAUC,WAAkB;IAC1C,OAAOZ,aAAa;QAClBa,eAAef,kBAAkBgB,MAAM;QACvCF;IACF;AACF;AAEA,OAAO,SAASG,eAAeC,MAAW,EAAEC,aAAuB;IACjE,MAAML,cAAqB,EAAE;IAC7BK,cAAcC,OAAO,CAAC,CAACC;QACrB,iFAAiF;QACjF,oFAAoF;QACpF,mFAAmF;QACnF,yEAAyE;QACzE,MAAMC,OAAOD,MAAME,KAAK,CAAC,IAAI,CAAC,EAAE;QAChC,MAAMC,OAAON,OAAOO,GAAG,CAACC,MAAM,CAAC,CAACC;YAC9B,IAAIA,KAAKC,IAAI,KAAK,cAAcD,KAAKL,IAAI,KAAKA,MAAM,OAAO;YAC3D,IAAI,CAACD,MAAMQ,QAAQ,CAAC,MAAM,OAAO;YACjC,MAAMC,MAAM,GAAGH,KAAKL,IAAI,CAAC,CAAC,EAAE,AAACK,CAAAA,KAAKI,MAAM,IAAI,EAAE,AAAD,EAAGC,GAAG,CAAC,CAACC,IAAWA,EAAEL,IAAI,EAAEM,IAAI,CAAC,KAAK,CAAC,CAAC;YACpF,OAAOJ,QAAQT;QACjB;QACA,4EAA4E;QAC5E,6EAA6E;QAC7E,yEAAyE;QACzE,0EAA0E;QAC1E,IAAIG,KAAKW,MAAM,KAAK,GAAG;YACrB,MAAM,IAAIC,MACR,CAAC,iBAAiB,EAAEf,MAAM,qCAAqC,EAAEH,OAAOmB,OAAO,CAAC,EAAE,CAAC,GACjF,CAAC,mFAAmF,CAAC;QAE3F;QACAb,KAAKJ,OAAO,CAAC,CAACK;YACZX,YAAYwB,IAAI,CAAC;gBACfC,QAAQrB,OAAOmB,OAAO;gBACtBZ,KAAK;oBAACA;iBAAI;gBACVe,cAAclB;YAChB;QACF;IACF;IACA,OAAOR;AACT;AAEA,iFAAiF;AACjF,iFAAiF;AACjF,8EAA8E;AAC9E,iFAAiF;AACjF,+BAA+B;AAC/B,SAAS2B,aAAaC,cAA+B;IACnD,MAAMC,OAAO,IAAIC;IACjB,MAAMC,MAAuB,EAAE;IAC/B,KAAK,MAAMC,KAAKJ,eAAgB;QAC9B,IAAI,CAACI,KAAKA,MAAMlC,aAAa;QAC7B,MAAMmC,MAAMD,EAAEE,WAAW;QACzB,IAAIL,KAAKM,GAAG,CAACF,MAAM;QACnBJ,KAAKO,GAAG,CAACH;QACTF,IAAIP,IAAI,CAACQ;IACX;IACA,OAAOD;AACT;AAEA,OAAO,SAASM,2BAA2BC,eAA8B;IACvE,OAAO;QACLb,QAAQa;QACR3B,KAAKd,SAAS;YACZ;SACD;QACD6B,cAAc;IAChB;AACF;AACA,OAAO,MAAMa,wBAAwB,CAACD,kBACpCvC,UAAU;QAACsC,2BAA2BC;KAAiB,EAAC;AAE1D,kFAAkF;AAClF,4FAA4F;AAC5F,wFAAwF;AACxF,gGAAgG;AAChG,MAAME,cAAc;AACpB,MAAMC,qBAAqB;IACzBD;IACA;IACA;IACA;IACA;IACA;CACD;AAED,OAAO,MAAME,6BAA6B,IACxC3C,UAAUI,eAAeZ,sBAAsB;QAACiD;KAAY,GAAE;AAEhE,OAAO,MAAMG,mCAAmC,IAC9C5C,UAAUI,eAAeZ,sBAAsB;QAAC;QAAc;KAAsB,GAAE;AAExF,OAAO,MAAMqD,0BAA0B,IACrC7C,UAAUI,eAAeZ,sBAAsB;QAAC;KAAuB,GAAE;AAE3E,OAAO,MAAMsD,iBAAiB;IAC5B,MAAMC,QAAQ;WACT3C,eAAeX,4BAA4B;YAAC;SAAQ;WACpDW,eAAeT,2BAA2B;YAAC;SAAQ;KACvD;IACD,OAAOK,UAAU+C;AACnB,EAAC;AAED,OAAO,MAAMC,mBAAmB,IAAMhD,UAAUI,eAAeV,sBAAsB;QAAC;KAAO,GAAE;AAE/F,OAAO,MAAMuD,mBAAmB,IAAMjD,UAAUI,eAAeV,sBAAsB;QAAC;KAAO,GAAE;AAE/F,OAAO,MAAMwD,oBAAoB,IAC/BlD,UAAUI,eAAeZ,sBAAsBkD,qBAAoB;AAErE,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,kFAAkF;AAClF,kFAAkF;AAClF,gFAAgF;AAChF,2EAA2E;AAC3E,gFAAgF;AAChF,MAAMS,6BAA6B;AAEnC,MAAMC,iCAAiC,CAACL;IACtC,IAAIA,MAAMzB,MAAM,GAAG6B,4BAA4B;QAC7C,MAAM,IAAI5B,MACR,CAAC,eAAe,EAAEwB,MAAMzB,MAAM,CAAC,+DAA+D,EAAE6B,2BAA2B,kFAAkF,CAAC;IAElN;AACF;AAEA,iFAAiF;AACjF,iFAAiF;AACjF,oFAAoF;AACpF,mEAAmE;AACnE,OAAO,MAAME,cAAc,CAACpD,aAAuB4B;IACjD,MAAMkB,QAAQ;WACR9C,YAAYe,QAAQ,CAAC,cACrBZ,eAAeZ,sBAAsBkD,sBACrC,EAAE;WACFzC,YAAYe,QAAQ,CAAC,UAAUZ,eAAeV,sBAAsB;YAAC;SAAO,IAAI,EAAE;WAClFO,YAAYe,QAAQ,CAAC,UAAUZ,eAAeV,sBAAsB;YAAC;SAAO,IAAI,EAAE;WAClFO,YAAYe,QAAQ,CAAC,WAAWZ,eAAeX,4BAA4B;YAAC;SAAQ,IAAI,EAAE;WAC1FQ,YAAYe,QAAQ,CAAC,WAAWZ,eAAeR,0BAA0B;YAAC;SAAQ,IAAI,EAAE;WACxFK,YAAYe,QAAQ,CAAC,WACrBY,aAAaC,gBAAgBV,GAAG,CAAC,CAACc,IAAMK,2BAA2BL,MACnE,EAAE;KACP;IAEDmB,+BAA+BL;IAC/B,OAAO/C,UAAU+C;AACnB,EAAC;AAED,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,+EAA+E;AAC/E,2DAA2D;AAC3D,OAAO,MAAMO,wBAAwB,CAACzB;IACpC,MAAMkB,QAAQ;WACT3C,eAAeZ,sBAAsBkD;WACrCtC,eAAeX,4BAA4B;YAAC;SAAQ;WACpDW,eAAeR,0BAA0B;YAAC;SAAQ;WAClDQ,eAAeV,sBAAsB;YAAC;YAAQ;SAAO;WACrDkC,aAAaC,gBAAgBV,GAAG,CAAC,CAACc,IAAMK,2BAA2BL;KACvE,CAACpB,MAAM,CAAC0C;IAETH,+BAA+BL;IAC/B,OAAO/C,UAAU+C;AACnB,EAAC;AAiBD,OAAO,MAAMS,0BAA0B,CAACC;IACtC,MAAMC,WAAqB,EAAE;IAE7B,MAAMC,mBAAmBF,mBAAmBG,SAAS,CAACzC,GAAG,CAAC,CAAC0C;QACzD,IAAIA,SAASC,YAAY,EAAE;YACzB,OAAO;gBACLpC,QAAQmC,SAASrC,OAAO;gBACxBZ,KAAKd,SAAS;oBACZ;iBACD;gBACDiE,YAAY,EAAE;gBACdpC,cAAc;gBACdqC,MAAM;oBAAC;oBAAM;iBAAK;YACpB;QACF;QACA,OAAO;YACLtC,QAAQmC,SAASrC,OAAO;YACxBZ,KAAKd,SAAS;gBACZ;aACD;YACDiE,YAAY,EAAE;YACdpC,cAAc;YACdqC,MAAM;gBACJ;gBACA;gBACA;oBACEC,WAAW7E,eAAe8E,KAAK;oBAC/BC,OAAOV,mBAAmBW,iBAAiB;gBAC7C;gBACA;oBACEH,WAAW7E,eAAe8E,KAAK;oBAC/BC,OAAOV,mBAAmBY,iBAAiB;gBAC7C;aACD;QACH;IACF;IAEA,MAAMC,kBAAyB;WAAIX;KAAiB;IAEpD,IACEF,mBAAmBc,oBAAoB,IACvC1E,UAAU4D,mBAAmBc,oBAAoB,GACjD;QACAD,gBAAgB7C,IAAI,CAAC;YACnBC,QAAQ+B,mBAAmBc,oBAAoB;YAC/C3D,KAAKd,SAAS;gBACZ;aACD;YACDiE,YAAY,EAAE;YACdpC,cAAc;YACdqC,MAAM;gBACJ;oBACEC,WAAW7E,eAAeoF,SAAS;oBACnCL,OAAOpE;gBACT;gBACA;oBACEkE,WAAW7E,eAAeqF,kBAAkB;oBAC5CN,OAAOV,mBAAmBiB,WAAW;gBACvC;aACD;QACH;IACF;IAEAhB,SAASjC,IAAI,CAACzB,UAAUsE;IAExB,IAAIb,mBAAmBkB,KAAK,EAAE;QAC5B,MAAMC,kBAAkBtF,kBAAkB;YACxCqF,OAAOlB,mBAAmBkB,KAAK;QACjC;QACAjB,SAASjC,IAAI,CAACmD;IAChB;IAEA,IAAInB,mBAAmBoB,UAAU,EAAE;QACjC,MAAMC,kBAAkBvF,kBAAkB;YACxCsF,YAAYpB,mBAAmBoB,UAAU;QAC3C;QACAnB,SAASjC,IAAI,CAACqD;IAChB;IAEA,OAAOpB;AACT,EAAC"}

package/dist/utils/Network.d.ts

@@ -2,4 +2,9 @@ import { type Chain } from 'viem/chains';
 export declare function getNetworkName(networkId: number): Promise<string>;
 export declare function isTestnet(networkId: number): boolean;
 export declare function getChain(networkId: number | undefined): Chain;
+/**
+ * True for Tempo networks (mainnet 4217 + moderato 42431); name-prefixed so new
+ * Tempo entries are covered. See `applyTempoVerificationGasFloor` for the why.
+ */
+export declare function isTempoNetwork(networkId: number | undefined): boolean;
 //# sourceMappingURL=Network.d.ts.map

package/dist/utils/Network.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Network.d.ts","sourceRoot":"","sources":["../../src/utils/Network.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,KAAK,EAeX,MAAM,aAAa,CAAA;AAGpB,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAmEvE;AACD,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAmEpD;AACD,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,CAoF7D"}
+{"version":3,"file":"Network.d.ts","sourceRoot":"","sources":["../../src/utils/Network.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,KAAK,EAiBX,MAAM,aAAa,CAAA;AA0EpB,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIvE;AAED,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAIpD;AAED,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,CAI7D;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGrE"}