@nucypher/taco 0.6.0-alpha.3 → 0.7.0-alpha.0

package/dist/es/conditions/schemas/signing.js

@@ -0,0 +1,201 @@
+import { FunctionFragment } from 'ethers/lib/utils';
+import { z } from 'zod';
+import { baseConditionSchema } from './common';
+import { blockchainReturnValueTestSchema } from './return-value-test';
+export const SIGNING_CONDITION_OBJECT_CONTEXT_VAR = ':signingConditionObject';
+const signingConditionSchema = baseConditionSchema.extend({
+    signingObjectContextVar: z
+        .literal(SIGNING_CONDITION_OBJECT_CONTEXT_VAR)
+        .default(SIGNING_CONDITION_OBJECT_CONTEXT_VAR)
+        .describe('The context variable that will be replaced with the signing object at signing'),
+});
+const baseSigningObjectAttributeConditionSchema = signingConditionSchema.extend({
+    attributeName: z
+        .string()
+        .min(1)
+        .describe('The name of the attribute to check'),
+});
+export const SigningObjectAttributeConditionType = 'signing-attribute';
+export const signingObjectAttributeConditionSchema = baseSigningObjectAttributeConditionSchema.extend({
+    conditionType: z
+        .literal(SigningObjectAttributeConditionType)
+        .default(SigningObjectAttributeConditionType),
+    returnValueTest: blockchainReturnValueTestSchema,
+});
+export const abiParameterValidationSchema = z
+    .object({
+    parameterIndex: z
+        .number()
+        .int()
+        .nonnegative()
+        .describe('Index of parameter to check within abi calldata.'),
+    indexWithinTuple: z
+        .number()
+        .int()
+        .nonnegative()
+        .optional()
+        .describe('Index of value within tuple value at parameter index to check'),
+    returnValueTest: blockchainReturnValueTestSchema
+        .optional()
+        .describe('Comparison check for value within calldata'),
+    nestedAbiValidation: z
+        .lazy(() => abiCallValidationSchema)
+        .optional()
+        .describe('Additional checks for nested abi calldata'),
+})
+    .refine(
+// An XOR check to see if either 'returnValueTest' or 'nestedAbiValidation' is set
+(parameterValidation) => Boolean(parameterValidation.returnValueTest) !==
+    Boolean(parameterValidation.nestedAbiValidation), {
+    message: "At most one of the fields 'returnValueTest' and 'nestedAbiValidation' must be defined",
+    path: ['returnValueTest'],
+});
+// TODO: is there something already built out there to validate Solidity types?
+function generateSolidityBaseTypeRegExp() {
+    // Generate a regex pattern for Solidity base types
+    // Generate int/uint sizes (8, 16, ..., 256)
+    const intSizes = Array.from({ length: 32 }, (_, i) => (i + 1) * 8); // [8, 16, ..., 256]
+    const intSizePattern = intSizes.join('|');
+    // Generate bytes sizes (1, 2, ..., 32)
+    const bytesSizes = Array.from({ length: 32 }, (_, i) => i + 1); // [1, 2, ..., 32]
+    const bytesSizePattern = bytesSizes.join('|');
+    // Build the regex string
+    const baseTypes = [
+        `u?int(${intSizePattern})?`, // uint8, uint16, ..., uint256, int8, int16, ..., int256
+        `bytes(${bytesSizePattern})?`, // bytes1, bytes2, ..., bytes32
+        'string',
+        'address',
+        'bool',
+    ].join('|');
+    return new RegExp(`^(${baseTypes})$`);
+}
+// YIKES!
+const solidityBaseTypePattern = generateSolidityBaseTypeRegExp();
+const isValidSolidityType = (param) => {
+    // Recursive check for valid Solidity types
+    if (!param.baseType || !param.baseType.trim()) {
+        return false; // empty type is not valid
+    }
+    // Check for arrays and tuples
+    if (param.baseType === 'tuple') {
+        if (!param.components || param.components.length === 0) {
+            return false; // tuples must have components defined
+        }
+        return param.components.every(isValidSolidityType);
+    }
+    else if (param.baseType === 'array') {
+        if (!param.arrayChildren) {
+            return false; // arrays must have children type defined
+        }
+        return isValidSolidityType(param.arrayChildren);
+    }
+    else {
+        return solidityBaseTypePattern.test(param.baseType);
+    }
+};
+// TODO; find a better way to validate the param type - incomplete best effort for now
+const isValidHumanAbiCallSignature = (signature) => {
+    try {
+        // TODO: verify this works properly
+        const fragment = FunctionFragment.from(signature);
+        for (const parameter of fragment.inputs) {
+            if (!isValidSolidityType(parameter)) {
+                return false; // invalid Solidity type
+            }
+        }
+        // ensure the same sighash format was provided
+        return fragment.format() === signature;
+    }
+    catch {
+        return false;
+    }
+};
+const humanAbiCallSignatureSchema = z
+    .string()
+    .refine(isValidHumanAbiCallSignature, {
+    message: 'Invalid human readable ABI signature provided',
+})
+    .describe('A human readable ABI signature, e.g. "transfer(address,uint256)"');
+/**
+ * Validates the allowed ABI calls against the provided signature and validations.
+ * This function is used in the superRefine method of the abiCallValidationSchema.
+ *
+ * @param ctx - The Zod refinement context.
+ * @param signature - The ABI signature to validate against.
+ * @param validations - The array of validations for the ABI parameters.
+ */
+function validateAllowedAbiCall(ctx, signature, validations) {
+    try {
+        const fragment = FunctionFragment.from(signature);
+        for (const [index, validation] of validations.entries()) {
+            if (validation.parameterIndex >= fragment.inputs.length) {
+                // invalid parameter index
+                ctx.addIssue({
+                    code: z.ZodIssueCode.custom,
+                    message: `Parameter index, "${validation.parameterIndex}", is out of range`,
+                    path: ['allowedAbiCalls', signature, index, 'parameterIndex'],
+                });
+            }
+            if (validation.indexWithinTuple !== undefined) {
+                const paramType = fragment.inputs[validation.parameterIndex];
+                if (paramType.baseType !== 'tuple') {
+                    // type at parameter index is not a tuple
+                    ctx.addIssue({
+                        code: z.ZodIssueCode.custom,
+                        message: `Type at parameter index, "${validation.parameterIndex}", is not a tuple`,
+                        path: ['allowedAbiCalls', signature, index, 'parameterIndex'],
+                    });
+                }
+                else if (validation.indexWithinTuple >= paramType.components.length) {
+                    // invalid index within tuple
+                    ctx.addIssue({
+                        code: z.ZodIssueCode.custom,
+                        message: `Index within tuple, "${validation.indexWithinTuple}", is out of range`,
+                        path: ['allowedAbiCalls', signature, index, 'indexWithinTuple'],
+                    });
+                }
+            }
+            if (validation.nestedAbiValidation) {
+                // if there is nested ABI validation, the type must be bytes
+                let paramType = fragment.inputs[validation.parameterIndex];
+                if (validation.indexWithinTuple !== undefined) {
+                    // if there is an index within tuple, get the type of the component at that index
+                    paramType = paramType.components[validation.indexWithinTuple];
+                }
+                if (paramType.baseType !== 'bytes') {
+                    ctx.addIssue({
+                        code: z.ZodIssueCode.custom,
+                        message: `Invalid type for nested ABI validation, "${paramType.baseType}"; expected bytes`,
+                        path: ['allowedAbiCalls', signature, index],
+                    });
+                }
+            }
+        }
+    }
+    catch {
+        // even though abi signatures are already validated by nested schema - zod uses “greedy” (continuable) validation so all validations are run
+        // ignore invalid ABI signature
+    }
+}
+export const abiCallValidationSchema = z
+    .object({
+    allowedAbiCalls: z.record(humanAbiCallSignatureSchema, z.array(abiParameterValidationSchema)),
+})
+    .refine((abiCallValidation) => Object.keys(abiCallValidation.allowedAbiCalls).length > 0, {
+    message: 'At least one allowed ABI call must be defined',
+    path: ['allowedAbiCalls'],
+})
+    .superRefine((data, ctx) => {
+    for (const [signature, validations] of Object.entries(data.allowedAbiCalls)) {
+        validateAllowedAbiCall(ctx, signature, validations);
+    }
+})
+    .describe('A map of allowed ABI calls with their respective parameter validations.');
+export const SigningObjectAbiAttributeConditionType = 'signing-abi-attribute';
+export const signingObjectAbiAttributeConditionSchema = baseSigningObjectAttributeConditionSchema.extend({
+    conditionType: z
+        .literal(SigningObjectAbiAttributeConditionType)
+        .default(SigningObjectAbiAttributeConditionType),
+    abiValidation: abiCallValidationSchema,
+});
+//# sourceMappingURL=signing.js.map

package/dist/es/conditions/schemas/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../../../../src/conditions/schemas/signing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAa,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAEtE,MAAM,CAAC,MAAM,oCAAoC,GAAG,yBAAyB,CAAC;AAE9E,MAAM,sBAAsB,GAAG,mBAAmB,CAAC,MAAM,CAAC;IACxD,uBAAuB,EAAE,CAAC;SACvB,OAAO,CAAC,oCAAoC,CAAC;SAC7C,OAAO,CAAC,oCAAoC,CAAC;SAC7C,QAAQ,CACP,+EAA+E,CAChF;CACJ,CAAC,CAAC;AAEH,MAAM,yCAAyC,GAAG,sBAAsB,CAAC,MAAM,CAC7E;IACE,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,oCAAoC,CAAC;CAClD,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,mBAAmB,CAAC;AAEvE,MAAM,CAAC,MAAM,qCAAqC,GAChD,yCAAyC,CAAC,MAAM,CAAC;IAC/C,aAAa,EAAE,CAAC;SACb,OAAO,CAAC,mCAAmC,CAAC;SAC5C,OAAO,CAAC,mCAAmC,CAAC;IAC/C,eAAe,EAAE,+BAA+B;CACjD,CAAC,CAAC;AAML,MAAM,CAAC,MAAM,4BAA4B,GAAgB,CAAC;KACvD,MAAM,CAAC;IACN,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,QAAQ,EAAE;SACV,QAAQ,CACP,+DAA+D,CAChE;IACH,eAAe,EAAE,+BAA+B;SAC7C,QAAQ,EAAE;SACV,QAAQ,CAAC,4CAA4C,CAAC;IACzD,mBAAmB,EAAE,CAAC;SACnB,IAAI,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC;SACnC,QAAQ,EAAE;SACV,QAAQ,CAAC,2CAA2C,CAAC;CACzD,CAAC;KACD,MAAM;AACL,kFAAkF;AAClF,CAAC,mBAAmB,EAAE,EAAE,CACtB,OAAO,CAAC,mBAAmB,CAAC,eAAe,CAAC;IAC5C,OAAO,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,EAClD;IACE,OAAO,EACL,uFAAuF;IACzF,IAAI,EAAE,CAAC,iBAAiB,CAAC;CAC1B,CACF,CAAC;AAMJ,+EAA+E;AAE/E,SAAS,8BAA8B;IACrC,mDAAmD;IAEnD,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB;IACxF,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE1C,uCAAuC;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB;IAClF,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE9C,yBAAyB;IACzB,MAAM,SAAS,GAAG;QAChB,SAAS,cAAc,IAAI,EAAE,wDAAwD;QACrF,SAAS,gBAAgB,IAAI,EAAE,+BAA+B;QAC9D,QAAQ;QACR,SAAS;QACT,MAAM;KACP,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEZ,OAAO,IAAI,MAAM,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,SAAS;AACT,MAAM,uBAAuB,GAAG,8BAA8B,EAAE,CAAC;AAEjE,MAAM,mBAAmB,GAAG,CAAC,KAAgB,EAAW,EAAE;IACxD,2CAA2C;IAC3C,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC,CAAC,0BAA0B;IAC1C,CAAC;IAED,8BAA8B;IAC9B,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC,CAAC,sCAAsC;QACtD,CAAC;QACD,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACrD,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,CAAC,yCAAyC;QACzD,CAAC;QACD,OAAO,mBAAmB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC;AAEF,sFAAsF;AACtF,MAAM,4BAA4B,GAAG,CAAC,SAAiB,EAAW,EAAE;IAClE,IAAI,CAAC;QACH,mCAAmC;QACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC,CAAC,wBAAwB;YACxC,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,OAAO,QAAQ,CAAC,MAAM,EAAE,KAAK,SAAS,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAAC;KAClC,MAAM,EAAE;KACR,MAAM,CAAC,4BAA4B,EAAE;IACpC,OAAO,EAAE,+CAA+C;CACzD,CAAC;KACD,QAAQ,CAAC,kEAAkE,CAAC,CAAC;AAEhF;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAC7B,GAAoB,EACpB,SAAiB,EACjB,WAA0C;IAE1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YACxD,IAAI,UAAU,CAAC,cAAc,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACxD,0BAA0B;gBAC1B,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,OAAO,EAAE,qBAAqB,UAAU,CAAC,cAAc,oBAAoB;oBAC3E,IAAI,EAAE,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;YAED,IAAI,UAAU,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;gBAC7D,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACnC,yCAAyC;oBACzC,GAAG,CAAC,QAAQ,CAAC;wBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;wBAC3B,OAAO,EAAE,6BAA6B,UAAU,CAAC,cAAc,mBAAmB;wBAClF,IAAI,EAAE,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,UAAU,CAAC,gBAAgB,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;oBACtE,6BAA6B;oBAC7B,GAAG,CAAC,QAAQ,CAAC;wBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;wBAC3B,OAAO,EAAE,wBAAwB,UAAU,CAAC,gBAAgB,oBAAoB;wBAChF,IAAI,EAAE,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,CAAC;qBAChE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,UAAU,CAAC,mBAAmB,EAAE,CAAC;gBACnC,4DAA4D;gBAC5D,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;gBAC3D,IAAI,UAAU,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;oBAC9C,iFAAiF;oBACjF,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;gBAChE,CAAC;gBAED,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACnC,GAAG,CAAC,QAAQ,CAAC;wBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;wBAC3B,OAAO,EAAE,4CAA4C,SAAS,CAAC,QAAQ,mBAAmB;wBAC1F,IAAI,EAAE,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC;qBAC5C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4IAA4I;QAC5I,+BAA+B;IACjC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAgB,CAAC;KAClD,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,MAAM,CACvB,2BAA2B,EAC3B,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CACtC;CACF,CAAC;KACD,MAAM,CACL,CAAC,iBAAiB,EAAE,EAAE,CACpB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EAC3D;IACE,OAAO,EAAE,+CAA+C;IACxD,IAAI,EAAE,CAAC,iBAAiB,CAAC;CAC1B,CACF;KACA,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CACnD,IAAI,CAAC,eAAe,CACrB,EAAE,CAAC;QACF,sBAAsB,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC;KACD,QAAQ,CACP,yEAAyE,CAC1E,CAAC;AAIJ,MAAM,CAAC,MAAM,sCAAsC,GAAG,uBAAuB,CAAC;AAE9E,MAAM,CAAC,MAAM,wCAAwC,GACnD,yCAAyC,CAAC,MAAM,CAAC;IAC/C,aAAa,EAAE,CAAC;SACb,OAAO,CAAC,sCAAsC,CAAC;SAC/C,OAAO,CAAC,sCAAsC,CAAC;IAClD,aAAa,EAAE,uBAAuB;CACvC,CAAC,CAAC"}

package/dist/es/conditions/schemas/time.d.ts

@@ -5,17 +5,25 @@ export declare const timeConditionSchema: z.ZodObject<{
     conditionType: z.ZodDefault<z.ZodLiteral<"time">>;
     method: z.ZodDefault<z.ZodLiteral<"blocktime">>;
     chain: z.ZodNumber;
-    returnValueTest: z.ZodObject<z.objectUtil.extendShape<{
+    returnValueTest: z.ZodEffects<z.ZodObject<{
         index: z.ZodOptional<z.ZodNumber>;
-        comparator: z.ZodEnum<["==", ">", "<", ">=", "<=", "!="]>;
-    }, {
+        comparator: z.ZodEnum<["==", ">", "<", ">=", "<=", "!=", "in", "!in"]>;
+    } & {
         value: z.ZodType<any, z.ZodTypeDef, any>;
-    }>, "strip", z.ZodTypeAny, {
-        comparator: "==" | ">" | "<" | ">=" | "<=" | "!=";
+    }, "strip", z.ZodTypeAny, {
+        comparator: "==" | ">" | "<" | ">=" | "<=" | "!=" | "in" | "!in";
+        value?: any;
+        index?: number | undefined;
+    }, {
+        comparator: "==" | ">" | "<" | ">=" | "<=" | "!=" | "in" | "!in";
+        value?: any;
+        index?: number | undefined;
+    }>, {
+        comparator: "==" | ">" | "<" | ">=" | "<=" | "!=" | "in" | "!in";
         value?: any;
         index?: number | undefined;
     }, {
-        comparator: "==" | ">" | "<" | ">=" | "<=" | "!=";
+        comparator: "==" | ">" | "<" | ">=" | "<=" | "!=" | "in" | "!in";
         value?: any;
         index?: number | undefined;
     }>;
@@ -24,14 +32,14 @@ export declare const timeConditionSchema: z.ZodObject<{
     chain: number;
     method: "blocktime";
     returnValueTest: {
-        comparator: "==" | ">" | "<" | ">=" | "<=" | "!=";
+        comparator: "==" | ">" | "<" | ">=" | "<=" | "!=" | "in" | "!in";
         value?: any;
         index?: number | undefined;
     };
 }, {
     chain: number;
     returnValueTest: {
-        comparator: "==" | ">" | "<" | ">=" | "<=" | "!=";
+        comparator: "==" | ">" | "<" | ">=" | "<=" | "!=" | "in" | "!in";
         value?: any;
         index?: number | undefined;
     };

package/dist/es/conditions/schemas/utils.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { compoundConditionSchema } from '../compound-condition';
+import { addressAllowlistConditionSchema } from './address-allowlist';
 import { contractConditionSchema } from './contract';
 import { ifThenElseConditionSchema } from './if-then-else';
 import { jsonApiConditionSchema } from './json-api';
@@ -7,15 +8,19 @@ import { jsonRpcConditionSchema } from './json-rpc';
 import { jwtConditionSchema } from './jwt';
 import { rpcConditionSchema } from './rpc';
 import { sequentialConditionSchema } from './sequential';
+import { signingObjectAbiAttributeConditionSchema, signingObjectAttributeConditionSchema, } from './signing';
 import { timeConditionSchema } from './time';
 export const anyConditionSchema = z.lazy(() => z.union([
     rpcConditionSchema,
     timeConditionSchema,
+    addressAllowlistConditionSchema,
     contractConditionSchema,
-    compoundConditionSchema,
     jsonApiConditionSchema,
     jsonRpcConditionSchema,
     jwtConditionSchema,
+    signingObjectAttributeConditionSchema,
+    signingObjectAbiAttributeConditionSchema,
+    compoundConditionSchema,
     sequentialConditionSchema,
     ifThenElseConditionSchema,
 ]));

package/dist/es/conditions/schemas/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../src/conditions/schemas/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAE7C,MAAM,CAAC,MAAM,kBAAkB,GAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CACzD,CAAC,CAAC,KAAK,CAAC;IACN,kBAAkB;IAClB,mBAAmB;IACnB,uBAAuB;IACvB,uBAAuB;IACvB,sBAAsB;IACtB,sBAAsB;IACtB,kBAAkB;IAClB,yBAAyB;IACzB,yBAAyB;CAC1B,CAAC,CACH,CAAC"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../src/conditions/schemas/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EACL,wCAAwC,EACxC,qCAAqC,GACtC,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAE7C,MAAM,CAAC,MAAM,kBAAkB,GAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CACzD,CAAC,CAAC,KAAK,CAAC;IACN,kBAAkB;IAClB,mBAAmB;IACnB,+BAA+B;IAC/B,uBAAuB;IACvB,sBAAsB;IACtB,sBAAsB;IACtB,kBAAkB;IAClB,qCAAqC;IACrC,wCAAwC;IACxC,uBAAuB;IACvB,yBAAyB;IACzB,yBAAyB;CAC1B,CAAC,CACH,CAAC"}

package/dist/es/index.d.ts

@@ -1,4 +1,5 @@
 export { DkgPublicKey, ThresholdMessageKit } from '@nucypher/nucypher-core';
 export { Domain, domains, fromBytes, getPorterUris, initialize, toBytes, toHexString, } from '@nucypher/shared';
 export * as conditions from './conditions';
+export { signUserOp } from './sign';
 export { decrypt, encrypt, encryptWithPublicKey } from './taco';

package/dist/es/index.js

@@ -1,5 +1,6 @@
 export { DkgPublicKey, ThresholdMessageKit } from '@nucypher/nucypher-core';
 export { domains, fromBytes, getPorterUris, initialize, toBytes, toHexString, } from '@nucypher/shared';
 export * as conditions from './conditions';
+export { signUserOp } from './sign';
 export { decrypt, encrypt, encryptWithPublicKey } from './taco';
 //# sourceMappingURL=index.js.map

package/dist/es/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAEL,OAAO,EACP,SAAS,EACT,aAAa,EACb,UAAU,EACV,OAAO,EACP,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAEL,OAAO,EACP,SAAS,EACT,aAAa,EACb,UAAU,EACV,OAAO,EACP,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,UAAU,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC"}

package/dist/es/sign.d.ts

@@ -0,0 +1,24 @@
+import { Domain, TacoSignature, UserOperation } from '@nucypher/shared';
+import { ethers } from 'ethers';
+import { ConditionContext } from './conditions/context';
+export type SignResult = {
+    messageHash: string;
+    aggregatedSignature: string;
+    signingResults: {
+        [ursulaAddress: string]: TacoSignature;
+    };
+};
+/**
+ * Signs a UserOperation.
+ * @param provider - The Ethereum provider to use for signing.
+ * @param domain - The TACo domain being used.
+ * @param cohortId - The cohort ID that identifies the signing cohort.
+ * @param chainId - The chain ID for the signing operation.
+ * @param userOp - The UserOperation to be signed.
+ * @param aaVersion - The AA version of the account abstraction to use for signing.
+ * @param context - Optional condition context for the context variable resolution.
+ * @param porterUris - Optional URIs for the Porter service. If not provided, will fetch the default URIs from the domain.
+ * @returns A promise that resolves to a SignResult containing the message hash, aggregated signature, and signing results from the Porter service.
+ * @throws An error if the signing process fails due to insufficient signatures or mismatched hashes.
+ */
+export declare function signUserOp(provider: ethers.providers.Provider, domain: Domain, cohortId: number, chainId: number, userOp: UserOperation, aaVersion: 'mdt' | '0.8.0' | string, context?: ConditionContext, porterUris?: string[]): Promise<SignResult>;

package/dist/es/sign.js

@@ -0,0 +1,85 @@
+import { convertUserOperationToPython, fromHexString, getPorterUris, PorterClient, SigningCoordinatorAgent, toBase64, toHexString, UserOperationSignatureRequest, } from '@nucypher/shared';
+const ERR_INSUFFICIENT_SIGNATURES = (errors) => `Threshold of signatures not met; TACo signing failed with errors: ${JSON.stringify(errors)}`;
+const ERR_MISMATCHED_HASHES = (hashToSignatures) => `Threshold of signatures not met; multiple mismatched hashes found: ${JSON.stringify(Object.fromEntries(hashToSignatures.entries()))}`;
+function aggregateSignatures(signaturesByAddress, threshold) {
+    // Aggregate hex signatures by concatenating them; being careful to remove the '0x' prefix from each signature except the first one.
+    const signatures = Object.values(signaturesByAddress)
+        .map((sig) => sig.signature)
+        .slice(0, threshold);
+    if (signatures.length === 1) {
+        return signatures[0];
+    }
+    // Concatenate signatures
+    const allBytes = signatures.flatMap((hex) => Array.from(fromHexString(hex)));
+    return `0x${toHexString(new Uint8Array(allBytes))}`;
+}
+/**
+ * Signs a UserOperation.
+ * @param provider - The Ethereum provider to use for signing.
+ * @param domain - The TACo domain being used.
+ * @param cohortId - The cohort ID that identifies the signing cohort.
+ * @param chainId - The chain ID for the signing operation.
+ * @param userOp - The UserOperation to be signed.
+ * @param aaVersion - The AA version of the account abstraction to use for signing.
+ * @param context - Optional condition context for the context variable resolution.
+ * @param porterUris - Optional URIs for the Porter service. If not provided, will fetch the default URIs from the domain.
+ * @returns A promise that resolves to a SignResult containing the message hash, aggregated signature, and signing results from the Porter service.
+ * @throws An error if the signing process fails due to insufficient signatures or mismatched hashes.
+ */
+export async function signUserOp(provider, domain, cohortId, chainId, userOp, aaVersion, context, porterUris) {
+    const porterUrisFull = porterUris
+        ? porterUris
+        : await getPorterUris(domain);
+    const porter = new PorterClient(porterUrisFull);
+    const signers = await SigningCoordinatorAgent.getParticipants(provider, domain, cohortId);
+    const threshold = await SigningCoordinatorAgent.getThreshold(provider, domain, cohortId);
+    const pythonUserOp = convertUserOperationToPython(userOp);
+    const signingRequest = new UserOperationSignatureRequest(pythonUserOp, aaVersion, cohortId, chainId, context || {}, 'userop');
+    const signingRequests = Object.fromEntries(signers.map((signer) => [
+        signer.provider,
+        toBase64(signingRequest.toBytes()),
+    ]));
+    // Build signing request for the user operation
+    const porterSignResult = await porter.signUserOp(signingRequests, threshold);
+    const hashToSignatures = new Map();
+    // Single pass: decode signatures and populate signingResults
+    for (const [ursulaAddress, signature] of Object.entries(porterSignResult.signingResults)) {
+        // For non-optimistic: track hashes and group signatures for aggregation
+        const hash = signature.messageHash;
+        if (!hashToSignatures.has(hash)) {
+            hashToSignatures.set(hash, {});
+        }
+        hashToSignatures.get(hash)[ursulaAddress] = signature;
+    }
+    let messageHash = undefined;
+    let signaturesToAggregate = undefined;
+    for (const [hash, signatures] of hashToSignatures.entries()) {
+        if (Object.keys(signatures).length >= threshold) {
+            signaturesToAggregate = signatures;
+            messageHash = hash;
+            break;
+        }
+    }
+    // Insufficient signatures for a message hash to meet the threshold
+    if (!messageHash || !signaturesToAggregate) {
+        if (hashToSignatures.size > 1 &&
+            Object.keys(porterSignResult.errors).length < signers.length - threshold) {
+            // Two things are true:
+            // 1. we have multiple hashes, which means we have mismatched hashes from different nodes
+            //    we don't really expect this to happen (other than some malicious nodes)
+            // 2. number of errors still could have allowed for a threshold of signatures
+            console.error('Porter returned mismatched message hashes:', hashToSignatures);
+            throw new Error(ERR_MISMATCHED_HASHES(hashToSignatures));
+        }
+        else {
+            throw new Error(ERR_INSUFFICIENT_SIGNATURES(porterSignResult.errors));
+        }
+    }
+    const aggregatedSignature = aggregateSignatures(signaturesToAggregate, threshold);
+    return {
+        messageHash,
+        aggregatedSignature,
+        signingResults: porterSignResult.signingResults,
+    };
+}
+//# sourceMappingURL=sign.js.map

package/dist/es/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../src/sign.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAE5B,aAAa,EACb,aAAa,EACb,YAAY,EACZ,uBAAuB,EAGvB,QAAQ,EACR,WAAW,EAEX,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAK1B,MAAM,2BAA2B,GAAG,CAAC,MAAe,EAAE,EAAE,CACtD,qEAAqE,IAAI,CAAC,SAAS,CACjF,MAAM,CACP,EAAE,CAAC;AACN,MAAM,qBAAqB,GAAG,CAC5B,gBAAyE,EACzE,EAAE,CACF,sEAAsE,IAAI,CAAC,SAAS,CAClF,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAC/C,EAAE,CAAC;AAQN,SAAS,mBAAmB,CAC1B,mBAEC,EACD,SAAiB;IAEjB,oIAAoI;IACpI,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC;SAClD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;SAC3B,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACvB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IACD,yBAAyB;IACzB,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,KAAK,WAAW,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAmC,EACnC,MAAc,EACd,QAAgB,EAChB,OAAe,EACf,MAAqB,EACrB,SAAmC,EACnC,OAA0B,EAC1B,UAAqB;IAErB,MAAM,cAAc,GAAa,UAAU;QACzC,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,cAAc,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,eAAe,CAC3D,QAAQ,EACR,MAAM,EACN,QAAQ,CACT,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,YAAY,CAC1D,QAAQ,EACR,MAAM,EACN,QAAQ,CACT,CAAC;IAEF,MAAM,YAAY,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;IAE1D,MAAM,cAAc,GAAG,IAAI,6BAA6B,CACtD,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,OAAO,EACP,OAAO,IAAI,EAAE,EACb,QAAQ,CACT,CAAC;IAEF,MAAM,eAAe,GAA2B,MAAM,CAAC,WAAW,CAChE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,QAAQ;QACf,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;KACnC,CAAC,CACH,CAAC;IAEF,+CAA+C;IAC/C,MAAM,gBAAgB,GAAmB,MAAM,MAAM,CAAC,UAAU,CAC9D,eAAe,EACf,SAAS,CACV,CAAC;IAEF,MAAM,gBAAgB,GAGlB,IAAI,GAAG,EAAE,CAAC;IAEd,6DAA6D;IAC7D,KAAK,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CACrD,gBAAgB,CAAC,cAAc,CAChC,EAAE,CAAC;QACF,wEAAwE;QACxE,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC;QACnC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;IACzD,CAAC;IAED,IAAI,WAAW,GAAG,SAAS,CAAC;IAC5B,IAAI,qBAAqB,GAAG,SAAS,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAChD,qBAAqB,GAAG,UAAU,CAAC;YACnC,WAAW,GAAG,IAAI,CAAC;YACnB,MAAM;QACR,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC,WAAW,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3C,IACE,gBAAgB,CAAC,IAAI,GAAG,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,EACxE,CAAC;YACD,uBAAuB;YACvB,yFAAyF;YACzF,6EAA6E;YAC7E,6EAA6E;YAC7E,OAAO,CAAC,KAAK,CACX,4CAA4C,EAC5C,gBAAgB,CACjB,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,MAAM,mBAAmB,GAAG,mBAAmB,CAC7C,qBAAqB,EACrB,SAAS,CACV,CAAC;IAEF,OAAO;QACL,WAAW;QACX,mBAAmB;QACnB,cAAc,EAAE,gBAAgB,CAAC,cAAc;KAChD,CAAC;AACJ,CAAC"}

package/dist/es/types.d.ts

@@ -1 +1,2 @@
 export { Conditions as CoreConditions, Context as CoreContext, } from '@nucypher/nucypher-core';
+export type { UserOperation } from '@nucypher/shared';