@pafi-dev/core 0.3.0-beta.7 → 0.3.0-beta.8

package/dist/index.d.cts

@@ -538,6 +538,202 @@ interface CheckEthAndBranchParams {
  */
 declare function checkEthAndBranch(params: CheckEthAndBranchParams): Promise<SubmissionPath>;
 
+/**
+ * Identifies the user-flow scenario the sponsorship covers. Used by
+ * sponsor-relayer for per-scenario rate limits + by Privy verifier
+ * to log sponsorship reason.
+ *
+ * Keep in sync with `SponsorshipScenario` in the paymaster module —
+ * SponsorAuth replaces the Coinbase paymaster flow but reuses the
+ * scenario taxonomy.
+ */
+type SponsorAuthScenario = "mint" | "burn" | "swap" | "perp_deposit";
+/**
+ * Canonical SponsorAuth payload — the EIP-712 message that PAFI
+ * sponsor-relayer signs and Privy native verifies before funding gas.
+ *
+ * See `SPONSOR_AUTH_DESIGN.md` for full architecture.
+ *
+ * ## Replay protection layers
+ *
+ *   - `nonce`        — per-(sender, scenario), allocated by sponsor-relayer
+ *   - `expiresAt`    — short window (60-120s recommended)
+ *   - `callDataHash` — binds payload to ONE specific UserOp callData
+ *   - `sender`       — binds to one EOA
+ *   - `chainId`      — binds to one chain
+ *
+ * Mutation of any field invalidates the signature.
+ */
+interface SponsorAuthPayload {
+    chainId: number;
+    sender: Address;
+    /** keccak256(userOp.callData) — caller computes from the UserOp they intend to submit. */
+    callDataHash: Hex;
+    /** Per-(sender, scenario) monotonic counter from sponsor-relayer. */
+    nonce: bigint;
+    /** Unix seconds. After this, Privy verifier rejects. */
+    expiresAt: number;
+    scenario: SponsorAuthScenario;
+    /** Issuer that originated this sponsorship request (e.g. "gg56"). */
+    issuerId: string;
+}
+/**
+ * Optional extension fields — keep separate so the canonical payload
+ * stays minimal. Privy verifier may or may not enforce these depending
+ * on dashboard config.
+ */
+interface SponsorAuthPayloadExtended extends SponsorAuthPayload {
+    /** Max gas (units) sponsor-relayer pre-approved. */
+    maxGasLimit?: bigint;
+    /** Max gas price (wei) sponsor-relayer pre-approved. */
+    maxGasPrice?: bigint;
+    /** Audit metadata — surfaced in logs only, not used for verification. */
+    intent?: {
+        amount?: string;
+        pointToken?: Address;
+        targetContract?: Address;
+    };
+}
+/**
+ * EIP-712 domain for SponsorAuth signatures.
+ *
+ * `verifyingContract` is `0x0` because verification is OFF-CHAIN
+ * (Privy native verifier reads sig + payload, recovers signer,
+ * compares with PAFI public key registered in Privy dashboard).
+ * The domain is still EIP-712 to leverage existing tooling.
+ */
+declare const SPONSOR_AUTH_DOMAIN_NAME: "PAFI SponsorAuth";
+declare const SPONSOR_AUTH_DOMAIN_VERSION: "1";
+/** EIP-712 typed-data shape — matches `SponsorAuthPayload` field order. */
+declare const SPONSOR_AUTH_TYPES: {
+    readonly SponsorAuth: readonly [{
+        readonly name: "chainId";
+        readonly type: "uint256";
+    }, {
+        readonly name: "sender";
+        readonly type: "address";
+    }, {
+        readonly name: "callDataHash";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "nonce";
+        readonly type: "uint256";
+    }, {
+        readonly name: "expiresAt";
+        readonly type: "uint256";
+    }, {
+        readonly name: "scenario";
+        readonly type: "string";
+    }, {
+        readonly name: "issuerId";
+        readonly type: "string";
+    }];
+};
+/**
+ * Build the EIP-712 domain object Privy verifier expects. Same
+ * `chainId` as the SponsorAuth payload.
+ */
+declare function buildSponsorAuthDomain(chainId: number): {
+    readonly name: "PAFI SponsorAuth";
+    readonly version: "1";
+    readonly chainId: number;
+    readonly verifyingContract: Address;
+};
+
+/**
+ * Build the EIP-712 typed data object for a SponsorAuth payload.
+ * Returned shape is compatible with `walletClient.signTypedData()`,
+ * `viem.recoverTypedDataAddress()`, and any other EIP-712 tooling.
+ *
+ * Use this when you need the full typed-data object (e.g. to display
+ * to a hardware-wallet user, or to feed into an off-chain audit log).
+ * Most callers only need `signSponsorAuth` / `verifySponsorAuth` below.
+ */
+declare function buildSponsorAuthTypedData(payload: SponsorAuthPayload): {
+    domain: {
+        readonly name: "PAFI SponsorAuth";
+        readonly version: "1";
+        readonly chainId: number;
+        readonly verifyingContract: Address;
+    };
+    types: {
+        readonly SponsorAuth: readonly [{
+            readonly name: "chainId";
+            readonly type: "uint256";
+        }, {
+            readonly name: "sender";
+            readonly type: "address";
+        }, {
+            readonly name: "callDataHash";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "nonce";
+            readonly type: "uint256";
+        }, {
+            readonly name: "expiresAt";
+            readonly type: "uint256";
+        }, {
+            readonly name: "scenario";
+            readonly type: "string";
+        }, {
+            readonly name: "issuerId";
+            readonly type: "string";
+        }];
+    };
+    primaryType: "SponsorAuth";
+    message: {
+        chainId: bigint;
+        sender: `0x${string}`;
+        callDataHash: `0x${string}`;
+        nonce: bigint;
+        expiresAt: bigint;
+        scenario: SponsorAuthScenario;
+        issuerId: string;
+    };
+};
+/**
+ * Sign a SponsorAuth payload using a viem `WalletClient`. Production
+ * sponsor-relayer should use a KMS-backed signer instead — this helper
+ * is for tests + local dev where you hold a raw private key.
+ *
+ * Returns the **serialized 65-byte signature** ready to put into
+ * `SponsorAuthResponse.sponsorAuth`.
+ */
+declare function signSponsorAuth(walletClient: WalletClient, payload: SponsorAuthPayload): Promise<Hex>;
+/**
+ * Verify a SponsorAuth signature offline. Use to:
+ *
+ *   - Smoke-test that sponsor-relayer's output is well-formed (FE)
+ *   - Unit tests in SDK
+ *   - Defense-in-depth check before submitting to Privy
+ *
+ * Privy verifier does the same check on their side — this is NOT a
+ * substitute for Privy verification. It exists so consumers can fail
+ * fast on a mangled sig before round-tripping through Privy.
+ *
+ * @param payload          The exact payload PAFI BE returned
+ * @param signature        The serialized signature (sponsorAuth field)
+ * @param expectedSigner   PAFI's SponsorAuth signing-key address
+ *                         (registered in Privy dashboard)
+ *
+ * @returns `true` if signature recovers to `expectedSigner`,
+ *          and the payload hasn't expired (`expiresAt > now`).
+ *          Returns `false` on any failure — does NOT throw.
+ */
+declare function verifySponsorAuth(payload: SponsorAuthPayload, signature: Hex, expectedSigner: Address): Promise<{
+    ok: boolean;
+    reason?: "INVALID_SIGNER" | "EXPIRED" | "INVALID_SIGNATURE_FORMAT";
+    recoveredAddress?: Address;
+}>;
+/**
+ * Helper — compute `callDataHash` from a UserOperation's `callData`.
+ * Same hash function (`keccak256`) Privy verifier uses.
+ *
+ * Bind this hash into the SponsorAuth payload BEFORE signing, so the
+ * sig is invalid for any other UserOp.
+ */
+declare function computeCallDataHash(callData: Hex): Hex;
+
 /**
  * Real `PointToken` ABI — matches the contract deployed on Base mainnet
  * (POINT at `0x7d25E7156E51F865D522fd3ef257a6B5DD41b97e`). Sourced from
@@ -1293,4 +1489,4 @@ declare class PafiSDK {
     signLoginMessage(message: string): Promise<Hex>;
 }
 
-export { ApiError, BATCH_EXECUTOR_ABI, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET, BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA, BROKER_HASHES, BestQuote, type BuildPartialUserOpParams, type BuildPerpDepositWithGasDeductionParams, COMMON_POOLS, COMMON_TOKENS, CONTRACT_ADDRESSES, ChainConfig, type CheckEthAndBranchParams, ConfigurationError, type ContractAddresses, EIP712Signature, LoginMessageParams, MintRequest, type ModalOpenOptions, ORDERLY_VAULT_ABI, ORDERLY_VAULT_ADDRESSES, ORDERLY_VAULT_BASE_MAINNET, Operation, POINT_TOKEN_FACTORY_ADDRESSES, POINT_TOKEN_IMPL_ADDRESSES, POINT_TOKEN_POOLS, POINT_TOKEN_ABI as POINT_TOKEN_V2_ABI, PafiSDK, PafiSDKConfig, PafiSDKError, type PafiWebModalAdapter, type PafiWebModalHandle, PartialUserOperation, type PaymasterConfig, PointTokenDomainConfig, PoolKey, QuoteResult, ReceiverConsent, SUPPORTED_CHAINS, type SignatureStruct, SignatureVerification, SigningError, SimulationError, type SponsorshipScenario, type SubmissionPath, SwapSimulationResult, TOKEN_HASHES, UNIVERSAL_ROUTER_ADDRESSES, UserOperation, V4_QUOTER_ADDRESSES, type VaultDepositFE, _resetPaymasterConfigForTests, assembleUserOperation, buildPartialUserOperation, buildPerpDepositWithGasDeduction, burnRequestTypes, checkEthAndBranch, computeAccountId, encodeBatchExecute, erc20ApproveOp, erc20BurnOp, erc20TransferOp, getContractAddresses, getPafiWebModalAdapter, getPaymasterConfig, isPaymasterConfigured, mintRequestTypes, openPafiWebModal, openWebPopup, rawCallOp, receiverConsentTypes, setPafiWebModalAdapter, setPaymasterConfig, webPopupAdapter };
+export { ApiError, BATCH_EXECUTOR_ABI, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET, BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA, BROKER_HASHES, BestQuote, type BuildPartialUserOpParams, type BuildPerpDepositWithGasDeductionParams, COMMON_POOLS, COMMON_TOKENS, CONTRACT_ADDRESSES, ChainConfig, type CheckEthAndBranchParams, ConfigurationError, type ContractAddresses, EIP712Signature, LoginMessageParams, MintRequest, type ModalOpenOptions, ORDERLY_VAULT_ABI, ORDERLY_VAULT_ADDRESSES, ORDERLY_VAULT_BASE_MAINNET, Operation, POINT_TOKEN_FACTORY_ADDRESSES, POINT_TOKEN_IMPL_ADDRESSES, POINT_TOKEN_POOLS, POINT_TOKEN_ABI as POINT_TOKEN_V2_ABI, PafiSDK, PafiSDKConfig, PafiSDKError, type PafiWebModalAdapter, type PafiWebModalHandle, PartialUserOperation, type PaymasterConfig, PointTokenDomainConfig, PoolKey, QuoteResult, ReceiverConsent, SPONSOR_AUTH_DOMAIN_NAME, SPONSOR_AUTH_DOMAIN_VERSION, SPONSOR_AUTH_TYPES, SUPPORTED_CHAINS, type SignatureStruct, SignatureVerification, SigningError, SimulationError, type SponsorAuthPayload, type SponsorAuthPayloadExtended, type SponsorAuthScenario, type SponsorshipScenario, type SubmissionPath, SwapSimulationResult, TOKEN_HASHES, UNIVERSAL_ROUTER_ADDRESSES, UserOperation, V4_QUOTER_ADDRESSES, type VaultDepositFE, _resetPaymasterConfigForTests, assembleUserOperation, buildPartialUserOperation, buildPerpDepositWithGasDeduction, buildSponsorAuthDomain, buildSponsorAuthTypedData, burnRequestTypes, checkEthAndBranch, computeAccountId, computeCallDataHash, encodeBatchExecute, erc20ApproveOp, erc20BurnOp, erc20TransferOp, getContractAddresses, getPafiWebModalAdapter, getPaymasterConfig, isPaymasterConfigured, mintRequestTypes, openPafiWebModal, openWebPopup, rawCallOp, receiverConsentTypes, setPafiWebModalAdapter, setPaymasterConfig, signSponsorAuth, verifySponsorAuth, webPopupAdapter };

package/dist/index.d.ts

@@ -538,6 +538,202 @@ interface CheckEthAndBranchParams {
  */
 declare function checkEthAndBranch(params: CheckEthAndBranchParams): Promise<SubmissionPath>;
 
+/**
+ * Identifies the user-flow scenario the sponsorship covers. Used by
+ * sponsor-relayer for per-scenario rate limits + by Privy verifier
+ * to log sponsorship reason.
+ *
+ * Keep in sync with `SponsorshipScenario` in the paymaster module —
+ * SponsorAuth replaces the Coinbase paymaster flow but reuses the
+ * scenario taxonomy.
+ */
+type SponsorAuthScenario = "mint" | "burn" | "swap" | "perp_deposit";
+/**
+ * Canonical SponsorAuth payload — the EIP-712 message that PAFI
+ * sponsor-relayer signs and Privy native verifies before funding gas.
+ *
+ * See `SPONSOR_AUTH_DESIGN.md` for full architecture.
+ *
+ * ## Replay protection layers
+ *
+ *   - `nonce`        — per-(sender, scenario), allocated by sponsor-relayer
+ *   - `expiresAt`    — short window (60-120s recommended)
+ *   - `callDataHash` — binds payload to ONE specific UserOp callData
+ *   - `sender`       — binds to one EOA
+ *   - `chainId`      — binds to one chain
+ *
+ * Mutation of any field invalidates the signature.
+ */
+interface SponsorAuthPayload {
+    chainId: number;
+    sender: Address;
+    /** keccak256(userOp.callData) — caller computes from the UserOp they intend to submit. */
+    callDataHash: Hex;
+    /** Per-(sender, scenario) monotonic counter from sponsor-relayer. */
+    nonce: bigint;
+    /** Unix seconds. After this, Privy verifier rejects. */
+    expiresAt: number;
+    scenario: SponsorAuthScenario;
+    /** Issuer that originated this sponsorship request (e.g. "gg56"). */
+    issuerId: string;
+}
+/**
+ * Optional extension fields — keep separate so the canonical payload
+ * stays minimal. Privy verifier may or may not enforce these depending
+ * on dashboard config.
+ */
+interface SponsorAuthPayloadExtended extends SponsorAuthPayload {
+    /** Max gas (units) sponsor-relayer pre-approved. */
+    maxGasLimit?: bigint;
+    /** Max gas price (wei) sponsor-relayer pre-approved. */
+    maxGasPrice?: bigint;
+    /** Audit metadata — surfaced in logs only, not used for verification. */
+    intent?: {
+        amount?: string;
+        pointToken?: Address;
+        targetContract?: Address;
+    };
+}
+/**
+ * EIP-712 domain for SponsorAuth signatures.
+ *
+ * `verifyingContract` is `0x0` because verification is OFF-CHAIN
+ * (Privy native verifier reads sig + payload, recovers signer,
+ * compares with PAFI public key registered in Privy dashboard).
+ * The domain is still EIP-712 to leverage existing tooling.
+ */
+declare const SPONSOR_AUTH_DOMAIN_NAME: "PAFI SponsorAuth";
+declare const SPONSOR_AUTH_DOMAIN_VERSION: "1";
+/** EIP-712 typed-data shape — matches `SponsorAuthPayload` field order. */
+declare const SPONSOR_AUTH_TYPES: {
+    readonly SponsorAuth: readonly [{
+        readonly name: "chainId";
+        readonly type: "uint256";
+    }, {
+        readonly name: "sender";
+        readonly type: "address";
+    }, {
+        readonly name: "callDataHash";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "nonce";
+        readonly type: "uint256";
+    }, {
+        readonly name: "expiresAt";
+        readonly type: "uint256";
+    }, {
+        readonly name: "scenario";
+        readonly type: "string";
+    }, {
+        readonly name: "issuerId";
+        readonly type: "string";
+    }];
+};
+/**
+ * Build the EIP-712 domain object Privy verifier expects. Same
+ * `chainId` as the SponsorAuth payload.
+ */
+declare function buildSponsorAuthDomain(chainId: number): {
+    readonly name: "PAFI SponsorAuth";
+    readonly version: "1";
+    readonly chainId: number;
+    readonly verifyingContract: Address;
+};
+
+/**
+ * Build the EIP-712 typed data object for a SponsorAuth payload.
+ * Returned shape is compatible with `walletClient.signTypedData()`,
+ * `viem.recoverTypedDataAddress()`, and any other EIP-712 tooling.
+ *
+ * Use this when you need the full typed-data object (e.g. to display
+ * to a hardware-wallet user, or to feed into an off-chain audit log).
+ * Most callers only need `signSponsorAuth` / `verifySponsorAuth` below.
+ */
+declare function buildSponsorAuthTypedData(payload: SponsorAuthPayload): {
+    domain: {
+        readonly name: "PAFI SponsorAuth";
+        readonly version: "1";
+        readonly chainId: number;
+        readonly verifyingContract: Address;
+    };
+    types: {
+        readonly SponsorAuth: readonly [{
+            readonly name: "chainId";
+            readonly type: "uint256";
+        }, {
+            readonly name: "sender";
+            readonly type: "address";
+        }, {
+            readonly name: "callDataHash";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "nonce";
+            readonly type: "uint256";
+        }, {
+            readonly name: "expiresAt";
+            readonly type: "uint256";
+        }, {
+            readonly name: "scenario";
+            readonly type: "string";
+        }, {
+            readonly name: "issuerId";
+            readonly type: "string";
+        }];
+    };
+    primaryType: "SponsorAuth";
+    message: {
+        chainId: bigint;
+        sender: `0x${string}`;
+        callDataHash: `0x${string}`;
+        nonce: bigint;
+        expiresAt: bigint;
+        scenario: SponsorAuthScenario;
+        issuerId: string;
+    };
+};
+/**
+ * Sign a SponsorAuth payload using a viem `WalletClient`. Production
+ * sponsor-relayer should use a KMS-backed signer instead — this helper
+ * is for tests + local dev where you hold a raw private key.
+ *
+ * Returns the **serialized 65-byte signature** ready to put into
+ * `SponsorAuthResponse.sponsorAuth`.
+ */
+declare function signSponsorAuth(walletClient: WalletClient, payload: SponsorAuthPayload): Promise<Hex>;
+/**
+ * Verify a SponsorAuth signature offline. Use to:
+ *
+ *   - Smoke-test that sponsor-relayer's output is well-formed (FE)
+ *   - Unit tests in SDK
+ *   - Defense-in-depth check before submitting to Privy
+ *
+ * Privy verifier does the same check on their side — this is NOT a
+ * substitute for Privy verification. It exists so consumers can fail
+ * fast on a mangled sig before round-tripping through Privy.
+ *
+ * @param payload          The exact payload PAFI BE returned
+ * @param signature        The serialized signature (sponsorAuth field)
+ * @param expectedSigner   PAFI's SponsorAuth signing-key address
+ *                         (registered in Privy dashboard)
+ *
+ * @returns `true` if signature recovers to `expectedSigner`,
+ *          and the payload hasn't expired (`expiresAt > now`).
+ *          Returns `false` on any failure — does NOT throw.
+ */
+declare function verifySponsorAuth(payload: SponsorAuthPayload, signature: Hex, expectedSigner: Address): Promise<{
+    ok: boolean;
+    reason?: "INVALID_SIGNER" | "EXPIRED" | "INVALID_SIGNATURE_FORMAT";
+    recoveredAddress?: Address;
+}>;
+/**
+ * Helper — compute `callDataHash` from a UserOperation's `callData`.
+ * Same hash function (`keccak256`) Privy verifier uses.
+ *
+ * Bind this hash into the SponsorAuth payload BEFORE signing, so the
+ * sig is invalid for any other UserOp.
+ */
+declare function computeCallDataHash(callData: Hex): Hex;
+
 /**
  * Real `PointToken` ABI — matches the contract deployed on Base mainnet
  * (POINT at `0x7d25E7156E51F865D522fd3ef257a6B5DD41b97e`). Sourced from
@@ -1293,4 +1489,4 @@ declare class PafiSDK {
     signLoginMessage(message: string): Promise<Hex>;
 }
 
-export { ApiError, BATCH_EXECUTOR_ABI, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET, BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA, BROKER_HASHES, BestQuote, type BuildPartialUserOpParams, type BuildPerpDepositWithGasDeductionParams, COMMON_POOLS, COMMON_TOKENS, CONTRACT_ADDRESSES, ChainConfig, type CheckEthAndBranchParams, ConfigurationError, type ContractAddresses, EIP712Signature, LoginMessageParams, MintRequest, type ModalOpenOptions, ORDERLY_VAULT_ABI, ORDERLY_VAULT_ADDRESSES, ORDERLY_VAULT_BASE_MAINNET, Operation, POINT_TOKEN_FACTORY_ADDRESSES, POINT_TOKEN_IMPL_ADDRESSES, POINT_TOKEN_POOLS, POINT_TOKEN_ABI as POINT_TOKEN_V2_ABI, PafiSDK, PafiSDKConfig, PafiSDKError, type PafiWebModalAdapter, type PafiWebModalHandle, PartialUserOperation, type PaymasterConfig, PointTokenDomainConfig, PoolKey, QuoteResult, ReceiverConsent, SUPPORTED_CHAINS, type SignatureStruct, SignatureVerification, SigningError, SimulationError, type SponsorshipScenario, type SubmissionPath, SwapSimulationResult, TOKEN_HASHES, UNIVERSAL_ROUTER_ADDRESSES, UserOperation, V4_QUOTER_ADDRESSES, type VaultDepositFE, _resetPaymasterConfigForTests, assembleUserOperation, buildPartialUserOperation, buildPerpDepositWithGasDeduction, burnRequestTypes, checkEthAndBranch, computeAccountId, encodeBatchExecute, erc20ApproveOp, erc20BurnOp, erc20TransferOp, getContractAddresses, getPafiWebModalAdapter, getPaymasterConfig, isPaymasterConfigured, mintRequestTypes, openPafiWebModal, openWebPopup, rawCallOp, receiverConsentTypes, setPafiWebModalAdapter, setPaymasterConfig, webPopupAdapter };
+export { ApiError, BATCH_EXECUTOR_ABI, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET, BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA, BROKER_HASHES, BestQuote, type BuildPartialUserOpParams, type BuildPerpDepositWithGasDeductionParams, COMMON_POOLS, COMMON_TOKENS, CONTRACT_ADDRESSES, ChainConfig, type CheckEthAndBranchParams, ConfigurationError, type ContractAddresses, EIP712Signature, LoginMessageParams, MintRequest, type ModalOpenOptions, ORDERLY_VAULT_ABI, ORDERLY_VAULT_ADDRESSES, ORDERLY_VAULT_BASE_MAINNET, Operation, POINT_TOKEN_FACTORY_ADDRESSES, POINT_TOKEN_IMPL_ADDRESSES, POINT_TOKEN_POOLS, POINT_TOKEN_ABI as POINT_TOKEN_V2_ABI, PafiSDK, PafiSDKConfig, PafiSDKError, type PafiWebModalAdapter, type PafiWebModalHandle, PartialUserOperation, type PaymasterConfig, PointTokenDomainConfig, PoolKey, QuoteResult, ReceiverConsent, SPONSOR_AUTH_DOMAIN_NAME, SPONSOR_AUTH_DOMAIN_VERSION, SPONSOR_AUTH_TYPES, SUPPORTED_CHAINS, type SignatureStruct, SignatureVerification, SigningError, SimulationError, type SponsorAuthPayload, type SponsorAuthPayloadExtended, type SponsorAuthScenario, type SponsorshipScenario, type SubmissionPath, SwapSimulationResult, TOKEN_HASHES, UNIVERSAL_ROUTER_ADDRESSES, UserOperation, V4_QUOTER_ADDRESSES, type VaultDepositFE, _resetPaymasterConfigForTests, assembleUserOperation, buildPartialUserOperation, buildPerpDepositWithGasDeduction, buildSponsorAuthDomain, buildSponsorAuthTypedData, burnRequestTypes, checkEthAndBranch, computeAccountId, computeCallDataHash, encodeBatchExecute, erc20ApproveOp, erc20BurnOp, erc20TransferOp, getContractAddresses, getPafiWebModalAdapter, getPaymasterConfig, isPaymasterConfigured, mintRequestTypes, openPafiWebModal, openWebPopup, rawCallOp, receiverConsentTypes, setPafiWebModalAdapter, setPaymasterConfig, signSponsorAuth, verifySponsorAuth, webPopupAdapter };

package/dist/index.js

@@ -280,6 +280,101 @@ async function checkEthAndBranch(params) {
   return balance >= required ? "normal" : "paymaster";
 }
 
+// src/sponsor-auth/types.ts
+var SPONSOR_AUTH_DOMAIN_NAME = "PAFI SponsorAuth";
+var SPONSOR_AUTH_DOMAIN_VERSION = "1";
+var SPONSOR_AUTH_TYPES = {
+  SponsorAuth: [
+    { name: "chainId", type: "uint256" },
+    { name: "sender", type: "address" },
+    { name: "callDataHash", type: "bytes32" },
+    { name: "nonce", type: "uint256" },
+    { name: "expiresAt", type: "uint256" },
+    { name: "scenario", type: "string" },
+    { name: "issuerId", type: "string" }
+  ]
+};
+function buildSponsorAuthDomain(chainId) {
+  return {
+    name: SPONSOR_AUTH_DOMAIN_NAME,
+    version: SPONSOR_AUTH_DOMAIN_VERSION,
+    chainId,
+    verifyingContract: "0x0000000000000000000000000000000000000000"
+  };
+}
+
+// src/sponsor-auth/sign.ts
+import {
+  keccak256 as keccak2562,
+  parseSignature,
+  recoverTypedDataAddress
+} from "viem";
+function buildSponsorAuthTypedData(payload) {
+  return {
+    domain: buildSponsorAuthDomain(payload.chainId),
+    types: SPONSOR_AUTH_TYPES,
+    primaryType: "SponsorAuth",
+    // viem strictly types uint256 fields as `bigint`. Our payload keeps
+    // `chainId` + `expiresAt` as `number` for ergonomic JS use; cast
+    // here at the EIP-712 boundary. Runtime conversion handled by viem.
+    message: toEip712Message(payload)
+  };
+}
+async function signSponsorAuth(walletClient, payload) {
+  return walletClient.signTypedData({
+    account: walletClient.account,
+    domain: buildSponsorAuthDomain(payload.chainId),
+    types: SPONSOR_AUTH_TYPES,
+    primaryType: "SponsorAuth",
+    // See note in buildSponsorAuthTypedData about the cast.
+    message: toEip712Message(payload)
+  });
+}
+async function verifySponsorAuth(payload, signature, expectedSigner) {
+  try {
+    parseSignature(signature);
+  } catch {
+    return { ok: false, reason: "INVALID_SIGNATURE_FORMAT" };
+  }
+  if (payload.expiresAt < Math.floor(Date.now() / 1e3)) {
+    return { ok: false, reason: "EXPIRED" };
+  }
+  let recovered;
+  try {
+    recovered = await recoverTypedDataAddress({
+      domain: buildSponsorAuthDomain(payload.chainId),
+      types: SPONSOR_AUTH_TYPES,
+      primaryType: "SponsorAuth",
+      message: toEip712Message(payload),
+      signature
+    });
+  } catch {
+    return { ok: false, reason: "INVALID_SIGNATURE_FORMAT" };
+  }
+  if (recovered.toLowerCase() !== expectedSigner.toLowerCase()) {
+    return {
+      ok: false,
+      reason: "INVALID_SIGNER",
+      recoveredAddress: recovered
+    };
+  }
+  return { ok: true, recoveredAddress: recovered };
+}
+function computeCallDataHash(callData) {
+  return keccak2562(callData);
+}
+function toEip712Message(payload) {
+  return {
+    chainId: BigInt(payload.chainId),
+    sender: payload.sender,
+    callDataHash: payload.callDataHash,
+    nonce: payload.nonce,
+    expiresAt: BigInt(payload.expiresAt),
+    scenario: payload.scenario,
+    issuerId: payload.issuerId
+  };
+}
+
 // src/contracts/real/pointToken.ts
 import { parseAbi } from "viem";
 var POINT_TOKEN_ABI = parseAbi([
@@ -706,6 +801,9 @@ export {
   PafiSDK,
   PafiSDKError,
   SETTLE_ALL,
+  SPONSOR_AUTH_DOMAIN_NAME,
+  SPONSOR_AUTH_DOMAIN_VERSION,
+  SPONSOR_AUTH_TYPES,
   SUPPORTED_CHAINS,
   SWAP_EXACT_IN,
   SigningError,
@@ -727,6 +825,8 @@ export {
   buildPermit2ApprovalCalldata,
   buildPerpDepositWithGasDeduction,
   buildReceiverConsentTypedData,
+  buildSponsorAuthDomain,
+  buildSponsorAuthTypedData,
   buildSwapFromQuote,
   buildSwapWithGasDeduction,
   buildUniversalRouterExecuteArgs,
@@ -736,6 +836,7 @@ export {
   checkEthAndBranch,
   combineRoutes,
   computeAccountId,
+  computeCallDataHash,
   createLoginMessage,
   encodeBatchExecute,
   erc20Abi,
@@ -775,6 +876,7 @@ export {
   signBurnRequest,
   signMintRequest,
   signReceiverConsent,
+  signSponsorAuth,
   simulateSwap,
   universalRouterAbi,
   v4QuoterAbi,
@@ -783,6 +885,7 @@ export {
   verifyMintCap,
   verifyMintRequest,
   verifyReceiverConsent,
+  verifySponsorAuth,
   webPopupAdapter
 };
 //# sourceMappingURL=index.js.map