@pafi-dev/core 0.3.0-beta.9 → 0.4.0

package/dist/{chunk-O4SMTUOY.js → chunk-W6VULMCO.js}

@@ -155,9 +155,97 @@ function optionalDate(fields, key) {
   return new Date(raw);
 }
 
+// src/auth/sponsorAuth.ts
+import { keccak256, recoverTypedDataAddress } from "viem";
+var SPONSOR_AUTH_DOMAIN_NAME = "PafiSponsorAuth";
+var SPONSOR_AUTH_TYPES = {
+  SponsorAuth: [
+    { name: "chainId", type: "uint256" },
+    { name: "sender", type: "address" },
+    { name: "callDataHash", type: "bytes32" },
+    { name: "nonce", type: "uint256" },
+    { name: "expiresAt", type: "uint256" },
+    { name: "scenario", type: "string" },
+    { name: "issuerId", type: "string" }
+  ]
+};
+function buildSponsorAuthDomain(chainId) {
+  return {
+    name: SPONSOR_AUTH_DOMAIN_NAME,
+    version: "1",
+    chainId,
+    verifyingContract: "0x0000000000000000000000000000000000000000"
+  };
+}
+function buildMessage(payload) {
+  return {
+    chainId: BigInt(payload.chainId),
+    sender: payload.sender,
+    callDataHash: payload.callDataHash,
+    nonce: payload.nonce,
+    expiresAt: BigInt(payload.expiresAt),
+    scenario: payload.scenario,
+    issuerId: payload.issuerId
+  };
+}
+function buildSponsorAuthTypedData(payload) {
+  return {
+    domain: buildSponsorAuthDomain(payload.chainId),
+    types: SPONSOR_AUTH_TYPES,
+    primaryType: "SponsorAuth",
+    message: buildMessage(payload)
+  };
+}
+function computeCallDataHash(callData) {
+  return keccak256(callData);
+}
+async function signSponsorAuth(wallet, payload) {
+  const { domain, types, primaryType, message } = buildSponsorAuthTypedData(payload);
+  return wallet.signTypedData({
+    account: wallet.account,
+    domain,
+    types,
+    primaryType,
+    message
+  });
+}
+async function verifySponsorAuth(payload, signature, expectedSigner) {
+  const nowSec = Math.floor(Date.now() / 1e3);
+  if (payload.expiresAt < nowSec) {
+    return { ok: false, reason: "EXPIRED" };
+  }
+  if (signature.length < 132) {
+    return { ok: false, reason: "INVALID_SIGNATURE_FORMAT" };
+  }
+  let recovered;
+  try {
+    const { domain, types, primaryType, message } = buildSponsorAuthTypedData(payload);
+    recovered = await recoverTypedDataAddress({
+      domain,
+      types,
+      primaryType,
+      message,
+      signature
+    });
+  } catch {
+    return { ok: false, reason: "INVALID_SIGNATURE_FORMAT" };
+  }
+  if (recovered.toLowerCase() !== expectedSigner.toLowerCase()) {
+    return { ok: false, reason: "INVALID_SIGNER", recoveredAddress: recovered };
+  }
+  return { ok: true, recoveredAddress: recovered };
+}
+
 export {
   createLoginMessage,
   parseLoginMessage,
-  verifyLoginMessage
+  verifyLoginMessage,
+  SPONSOR_AUTH_DOMAIN_NAME,
+  SPONSOR_AUTH_TYPES,
+  buildSponsorAuthDomain,
+  buildSponsorAuthTypedData,
+  computeCallDataHash,
+  signSponsorAuth,
+  verifySponsorAuth
 };
-//# sourceMappingURL=chunk-O4SMTUOY.js.map
+//# sourceMappingURL=chunk-W6VULMCO.js.map

package/dist/chunk-W6VULMCO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/auth/loginMessage.ts","../src/auth/sponsorAuth.ts"],"sourcesContent":["import { getAddress, verifyMessage, recoverMessageAddress } from \"viem\";\nimport type { Address, Hex } from \"viem\";\nimport type { LoginMessageParams, VerifyLoginResult } from \"./types\";\n\nconst DEFAULT_VERSION = \"1\";\nconst DEFAULT_STATEMENT = \"Sign in with Ethereum to PAFI.\";\n\n/**\n * Build an EIP-4361 login message string.\n *\n * The output is a deterministic plain-text message that the wallet signs via\n * `personal_sign`. The same message can be parsed back with\n * {@link parseLoginMessage} and verified with {@link verifyLoginMessage}.\n */\nexport function createLoginMessage(params: LoginMessageParams): string {\n  const {\n    domain,\n    address,\n    chainId,\n    nonce,\n    uri,\n    statement = DEFAULT_STATEMENT,\n    version = DEFAULT_VERSION,\n    issuedAt = new Date(),\n    expirationTime,\n    notBefore,\n    requestId,\n  } = params;\n\n  if (!domain) throw new Error(\"createLoginMessage: domain required\");\n  if (!nonce) throw new Error(\"createLoginMessage: nonce required\");\n  if (!uri) throw new Error(\"createLoginMessage: uri required\");\n\n  const checksummed = getAddress(address);\n\n  const lines: string[] = [];\n  lines.push(`${domain} wants you to sign in with your Ethereum account:`);\n  lines.push(checksummed);\n  lines.push(\"\");\n  if (statement) {\n    lines.push(statement);\n    lines.push(\"\");\n  }\n  lines.push(`URI: ${uri}`);\n  lines.push(`Version: ${version}`);\n  lines.push(`Chain ID: ${chainId}`);\n  lines.push(`Nonce: ${nonce}`);\n  lines.push(`Issued At: ${issuedAt.toISOString()}`);\n  if (expirationTime) {\n    lines.push(`Expiration Time: ${expirationTime.toISOString()}`);\n  }\n  if (notBefore) {\n    lines.push(`Not Before: ${notBefore.toISOString()}`);\n  }\n  if (requestId) {\n    lines.push(`Request ID: ${requestId}`);\n  }\n\n  return lines.join(\"\\n\");\n}\n\n/**\n * Parse a login message string built by {@link createLoginMessage} back into\n * its structured fields. Throws if the message does not match the expected\n * EIP-4361 layout.\n */\nexport function parseLoginMessage(message: string): LoginMessageParams {\n  const lines = message.split(\"\\n\");\n  if (lines.length < 7) {\n    throw new Error(\"parseLoginMessage: message too short\");\n  }\n\n  const headerLine = lines[0] ?? \"\";\n  const headerMatch = headerLine.match(\n    /^(?<domain>.+) wants you to sign in with your Ethereum account:$/,\n  );\n  if (!headerMatch || !headerMatch.groups) {\n    throw new Error(\"parseLoginMessage: invalid header line\");\n  }\n  const domain = headerMatch.groups[\"domain\"]!;\n\n  const addressLine = lines[1] ?? \"\";\n  if (!/^0x[0-9a-fA-F]{40}$/.test(addressLine)) {\n    throw new Error(\"parseLoginMessage: invalid address line\");\n  }\n  const address = getAddress(addressLine);\n\n  // After address: blank line, optional statement + blank line, then key:value lines.\n  let cursor = 2;\n  if (lines[cursor] !== \"\") {\n    throw new Error(\"parseLoginMessage: missing blank line after address\");\n  }\n  cursor++;\n\n  let statement: string | undefined;\n  // Statement is present if the next line is not a known key.\n  if (cursor < lines.length && !looksLikeKeyValue(lines[cursor]!)) {\n    statement = lines[cursor];\n    cursor++;\n    if (lines[cursor] !== \"\") {\n      throw new Error(\"parseLoginMessage: missing blank line after statement\");\n    }\n    cursor++;\n  }\n\n  const fields = new Map<string, string>();\n  for (; cursor < lines.length; cursor++) {\n    const line = lines[cursor]!;\n    if (line === \"\") continue;\n    const idx = line.indexOf(\": \");\n    if (idx === -1) {\n      throw new Error(`parseLoginMessage: malformed field line: \"${line}\"`);\n    }\n    const key = line.slice(0, idx);\n    const value = line.slice(idx + 2);\n    fields.set(key, value);\n  }\n\n  const uri = requireField(fields, \"URI\");\n  const version = requireField(fields, \"Version\");\n  const chainId = Number(requireField(fields, \"Chain ID\"));\n  if (!Number.isInteger(chainId)) {\n    throw new Error(\"parseLoginMessage: Chain ID is not an integer\");\n  }\n  const nonce = requireField(fields, \"Nonce\");\n  const issuedAt = new Date(requireField(fields, \"Issued At\"));\n  const expirationTime = optionalDate(fields, \"Expiration Time\");\n  const notBefore = optionalDate(fields, \"Not Before\");\n  const requestId = fields.get(\"Request ID\");\n\n  const result: LoginMessageParams = {\n    domain,\n    address,\n    chainId,\n    nonce,\n    uri,\n    version,\n    issuedAt,\n  };\n  if (statement !== undefined) result.statement = statement;\n  if (expirationTime !== undefined) result.expirationTime = expirationTime;\n  if (notBefore !== undefined) result.notBefore = notBefore;\n  if (requestId !== undefined) result.requestId = requestId;\n  return result;\n}\n\n/**\n * Verify that a login message was signed by the address embedded in the\n * message. Returns `{ valid, address }` where `address` is the recovered\n * signer (checksummed). Does NOT check expiration / not-before / nonce\n * consumption — those are the AuthService's responsibility.\n */\nexport async function verifyLoginMessage(\n  message: string,\n  signature: Hex,\n): Promise<VerifyLoginResult> {\n  const parsed = parseLoginMessage(message);\n  const valid = await verifyMessage({\n    address: parsed.address,\n    message,\n    signature,\n  });\n  if (valid) {\n    return { valid: true, address: parsed.address };\n  }\n  // Recover anyway so callers can log the mismatch.\n  const recovered = await recoverMessageAddress({ message, signature });\n  return { valid: false, address: getAddress(recovered) as Address };\n}\n\n// -------------------------------------------------------------------------\n// helpers\n// -------------------------------------------------------------------------\n\nconst KNOWN_KEYS = new Set([\n  \"URI\",\n  \"Version\",\n  \"Chain ID\",\n  \"Nonce\",\n  \"Issued At\",\n  \"Expiration Time\",\n  \"Not Before\",\n  \"Request ID\",\n]);\n\nfunction looksLikeKeyValue(line: string): boolean {\n  const idx = line.indexOf(\": \");\n  if (idx === -1) return false;\n  return KNOWN_KEYS.has(line.slice(0, idx));\n}\n\nfunction requireField(fields: Map<string, string>, key: string): string {\n  const value = fields.get(key);\n  if (value === undefined) {\n    throw new Error(`parseLoginMessage: missing required field \"${key}\"`);\n  }\n  return value;\n}\n\nfunction optionalDate(\n  fields: Map<string, string>,\n  key: string,\n): Date | undefined {\n  const raw = fields.get(key);\n  if (raw === undefined) return undefined;\n  return new Date(raw);\n}\n","import { keccak256, recoverTypedDataAddress } from \"viem\";\nimport type { Address, Hex, WalletClient } from \"viem\";\n\nexport const SPONSOR_AUTH_DOMAIN_NAME = \"PafiSponsorAuth\";\n\nexport const SPONSOR_AUTH_TYPES = {\n  SponsorAuth: [\n    { name: \"chainId\", type: \"uint256\" },\n    { name: \"sender\", type: \"address\" },\n    { name: \"callDataHash\", type: \"bytes32\" },\n    { name: \"nonce\", type: \"uint256\" },\n    { name: \"expiresAt\", type: \"uint256\" },\n    { name: \"scenario\", type: \"string\" },\n    { name: \"issuerId\", type: \"string\" },\n  ],\n} as const;\n\nexport interface SponsorAuthPayload {\n  chainId: number;\n  sender: Address;\n  callDataHash: Hex;\n  nonce: bigint;\n  expiresAt: number;\n  scenario: string;\n  issuerId: string;\n}\n\nexport interface SponsorAuthVerifyResult {\n  ok: boolean;\n  recoveredAddress?: Address;\n  reason?: \"EXPIRED\" | \"INVALID_SIGNER\" | \"INVALID_SIGNATURE_FORMAT\";\n}\n\nexport function buildSponsorAuthDomain(chainId: number) {\n  return {\n    name: SPONSOR_AUTH_DOMAIN_NAME,\n    version: \"1\",\n    chainId,\n    verifyingContract: \"0x0000000000000000000000000000000000000000\" as Address,\n  };\n}\n\nfunction buildMessage(payload: SponsorAuthPayload) {\n  return {\n    chainId: BigInt(payload.chainId),\n    sender: payload.sender,\n    callDataHash: payload.callDataHash,\n    nonce: payload.nonce,\n    expiresAt: BigInt(payload.expiresAt),\n    scenario: payload.scenario,\n    issuerId: payload.issuerId,\n  };\n}\n\nexport function buildSponsorAuthTypedData(payload: SponsorAuthPayload) {\n  return {\n    domain: buildSponsorAuthDomain(payload.chainId),\n    types: SPONSOR_AUTH_TYPES,\n    primaryType: \"SponsorAuth\" as const,\n    message: buildMessage(payload),\n  };\n}\n\nexport function computeCallDataHash(callData: Hex): Hex {\n  return keccak256(callData);\n}\n\nexport async function signSponsorAuth(\n  wallet: WalletClient,\n  payload: SponsorAuthPayload,\n): Promise<Hex> {\n  const { domain, types, primaryType, message } =\n    buildSponsorAuthTypedData(payload);\n  return wallet.signTypedData({\n    account: wallet.account!,\n    domain,\n    types,\n    primaryType,\n    message,\n  });\n}\n\nexport async function verifySponsorAuth(\n  payload: SponsorAuthPayload,\n  signature: Hex,\n  expectedSigner: Address,\n): Promise<SponsorAuthVerifyResult> {\n  const nowSec = Math.floor(Date.now() / 1000);\n  if (payload.expiresAt < nowSec) {\n    return { ok: false, reason: \"EXPIRED\" };\n  }\n\n  if (signature.length < 132) {\n    return { ok: false, reason: \"INVALID_SIGNATURE_FORMAT\" };\n  }\n\n  let recovered: Address;\n  try {\n    const { domain, types, primaryType, message } =\n      buildSponsorAuthTypedData(payload);\n    recovered = await recoverTypedDataAddress({\n      domain,\n      types,\n      primaryType,\n      message,\n      signature,\n    });\n  } catch {\n    return { ok: false, reason: \"INVALID_SIGNATURE_FORMAT\" };\n  }\n\n  if (recovered.toLowerCase() !== expectedSigner.toLowerCase()) {\n    return { ok: false, reason: \"INVALID_SIGNER\", recoveredAddress: recovered };\n  }\n\n  return { ok: true, recoveredAddress: recovered };\n}\n"],"mappings":";AAAA,SAAS,YAAY,eAAe,6BAA6B;AAIjE,IAAM,kBAAkB;AACxB,IAAM,oBAAoB;AASnB,SAAS,mBAAmB,QAAoC;AACrE,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ,UAAU;AAAA,IACV,WAAW,oBAAI,KAAK;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,qCAAqC;AAClE,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,oCAAoC;AAChE,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,kCAAkC;AAE5D,QAAM,cAAc,WAAW,OAAO;AAEtC,QAAM,QAAkB,CAAC;AACzB,QAAM,KAAK,GAAG,MAAM,mDAAmD;AACvE,QAAM,KAAK,WAAW;AACtB,QAAM,KAAK,EAAE;AACb,MAAI,WAAW;AACb,UAAM,KAAK,SAAS;AACpB,UAAM,KAAK,EAAE;AAAA,EACf;AACA,QAAM,KAAK,QAAQ,GAAG,EAAE;AACxB,QAAM,KAAK,YAAY,OAAO,EAAE;AAChC,QAAM,KAAK,aAAa,OAAO,EAAE;AACjC,QAAM,KAAK,UAAU,KAAK,EAAE;AAC5B,QAAM,KAAK,cAAc,SAAS,YAAY,CAAC,EAAE;AACjD,MAAI,gBAAgB;AAClB,UAAM,KAAK,oBAAoB,eAAe,YAAY,CAAC,EAAE;AAAA,EAC/D;AACA,MAAI,WAAW;AACb,UAAM,KAAK,eAAe,UAAU,YAAY,CAAC,EAAE;AAAA,EACrD;AACA,MAAI,WAAW;AACb,UAAM,KAAK,eAAe,SAAS,EAAE;AAAA,EACvC;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;AAOO,SAAS,kBAAkB,SAAqC;AACrE,QAAM,QAAQ,QAAQ,MAAM,IAAI;AAChC,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,QAAM,aAAa,MAAM,CAAC,KAAK;AAC/B,QAAM,cAAc,WAAW;AAAA,IAC7B;AAAA,EACF;AACA,MAAI,CAAC,eAAe,CAAC,YAAY,QAAQ;AACvC,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AACA,QAAM,SAAS,YAAY,OAAO,QAAQ;AAE1C,QAAM,cAAc,MAAM,CAAC,KAAK;AAChC,MAAI,CAAC,sBAAsB,KAAK,WAAW,GAAG;AAC5C,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACA,QAAM,UAAU,WAAW,WAAW;AAGtC,MAAI,SAAS;AACb,MAAI,MAAM,MAAM,MAAM,IAAI;AACxB,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA;AAEA,MAAI;AAEJ,MAAI,SAAS,MAAM,UAAU,CAAC,kBAAkB,MAAM,MAAM,CAAE,GAAG;AAC/D,gBAAY,MAAM,MAAM;AACxB;AACA,QAAI,MAAM,MAAM,MAAM,IAAI;AACxB,YAAM,IAAI,MAAM,uDAAuD;AAAA,IACzE;AACA;AAAA,EACF;AAEA,QAAM,SAAS,oBAAI,IAAoB;AACvC,SAAO,SAAS,MAAM,QAAQ,UAAU;AACtC,UAAM,OAAO,MAAM,MAAM;AACzB,QAAI,SAAS,GAAI;AACjB,UAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,QAAI,QAAQ,IAAI;AACd,YAAM,IAAI,MAAM,6CAA6C,IAAI,GAAG;AAAA,IACtE;AACA,UAAM,MAAM,KAAK,MAAM,GAAG,GAAG;AAC7B,UAAM,QAAQ,KAAK,MAAM,MAAM,CAAC;AAChC,WAAO,IAAI,KAAK,KAAK;AAAA,EACvB;AAEA,QAAM,MAAM,aAAa,QAAQ,KAAK;AACtC,QAAM,UAAU,aAAa,QAAQ,SAAS;AAC9C,QAAM,UAAU,OAAO,aAAa,QAAQ,UAAU,CAAC;AACvD,MAAI,CAAC,OAAO,UAAU,OAAO,GAAG;AAC9B,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,QAAM,QAAQ,aAAa,QAAQ,OAAO;AAC1C,QAAM,WAAW,IAAI,KAAK,aAAa,QAAQ,WAAW,CAAC;AAC3D,QAAM,iBAAiB,aAAa,QAAQ,iBAAiB;AAC7D,QAAM,YAAY,aAAa,QAAQ,YAAY;AACnD,QAAM,YAAY,OAAO,IAAI,YAAY;AAEzC,QAAM,SAA6B;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,cAAc,OAAW,QAAO,YAAY;AAChD,MAAI,mBAAmB,OAAW,QAAO,iBAAiB;AAC1D,MAAI,cAAc,OAAW,QAAO,YAAY;AAChD,MAAI,cAAc,OAAW,QAAO,YAAY;AAChD,SAAO;AACT;AAQA,eAAsB,mBACpB,SACA,WAC4B;AAC5B,QAAM,SAAS,kBAAkB,OAAO;AACxC,QAAM,QAAQ,MAAM,cAAc;AAAA,IAChC,SAAS,OAAO;AAAA,IAChB;AAAA,IACA;AAAA,EACF,CAAC;AACD,MAAI,OAAO;AACT,WAAO,EAAE,OAAO,MAAM,SAAS,OAAO,QAAQ;AAAA,EAChD;AAEA,QAAM,YAAY,MAAM,sBAAsB,EAAE,SAAS,UAAU,CAAC;AACpE,SAAO,EAAE,OAAO,OAAO,SAAS,WAAW,SAAS,EAAa;AACnE;AAMA,IAAM,aAAa,oBAAI,IAAI;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,kBAAkB,MAAuB;AAChD,QAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,MAAI,QAAQ,GAAI,QAAO;AACvB,SAAO,WAAW,IAAI,KAAK,MAAM,GAAG,GAAG,CAAC;AAC1C;AAEA,SAAS,aAAa,QAA6B,KAAqB;AACtE,QAAM,QAAQ,OAAO,IAAI,GAAG;AAC5B,MAAI,UAAU,QAAW;AACvB,UAAM,IAAI,MAAM,8CAA8C,GAAG,GAAG;AAAA,EACtE;AACA,SAAO;AACT;AAEA,SAAS,aACP,QACA,KACkB;AAClB,QAAM,MAAM,OAAO,IAAI,GAAG;AAC1B,MAAI,QAAQ,OAAW,QAAO;AAC9B,SAAO,IAAI,KAAK,GAAG;AACrB;;;AC9MA,SAAS,WAAW,+BAA+B;AAG5C,IAAM,2BAA2B;AAEjC,IAAM,qBAAqB;AAAA,EAChC,aAAa;AAAA,IACX,EAAE,MAAM,WAAW,MAAM,UAAU;AAAA,IACnC,EAAE,MAAM,UAAU,MAAM,UAAU;AAAA,IAClC,EAAE,MAAM,gBAAgB,MAAM,UAAU;AAAA,IACxC,EAAE,MAAM,SAAS,MAAM,UAAU;AAAA,IACjC,EAAE,MAAM,aAAa,MAAM,UAAU;AAAA,IACrC,EAAE,MAAM,YAAY,MAAM,SAAS;AAAA,IACnC,EAAE,MAAM,YAAY,MAAM,SAAS;AAAA,EACrC;AACF;AAkBO,SAAS,uBAAuB,SAAiB;AACtD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT;AAAA,IACA,mBAAmB;AAAA,EACrB;AACF;AAEA,SAAS,aAAa,SAA6B;AACjD,SAAO;AAAA,IACL,SAAS,OAAO,QAAQ,OAAO;AAAA,IAC/B,QAAQ,QAAQ;AAAA,IAChB,cAAc,QAAQ;AAAA,IACtB,OAAO,QAAQ;AAAA,IACf,WAAW,OAAO,QAAQ,SAAS;AAAA,IACnC,UAAU,QAAQ;AAAA,IAClB,UAAU,QAAQ;AAAA,EACpB;AACF;AAEO,SAAS,0BAA0B,SAA6B;AACrE,SAAO;AAAA,IACL,QAAQ,uBAAuB,QAAQ,OAAO;AAAA,IAC9C,OAAO;AAAA,IACP,aAAa;AAAA,IACb,SAAS,aAAa,OAAO;AAAA,EAC/B;AACF;AAEO,SAAS,oBAAoB,UAAoB;AACtD,SAAO,UAAU,QAAQ;AAC3B;AAEA,eAAsB,gBACpB,QACA,SACc;AACd,QAAM,EAAE,QAAQ,OAAO,aAAa,QAAQ,IAC1C,0BAA0B,OAAO;AACnC,SAAO,OAAO,cAAc;AAAA,IAC1B,SAAS,OAAO;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,kBACpB,SACA,WACA,gBACkC;AAClC,QAAM,SAAS,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC3C,MAAI,QAAQ,YAAY,QAAQ;AAC9B,WAAO,EAAE,IAAI,OAAO,QAAQ,UAAU;AAAA,EACxC;AAEA,MAAI,UAAU,SAAS,KAAK;AAC1B,WAAO,EAAE,IAAI,OAAO,QAAQ,2BAA2B;AAAA,EACzD;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,EAAE,QAAQ,OAAO,aAAa,QAAQ,IAC1C,0BAA0B,OAAO;AACnC,gBAAY,MAAM,wBAAwB;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,QAAQ;AACN,WAAO,EAAE,IAAI,OAAO,QAAQ,2BAA2B;AAAA,EACzD;AAEA,MAAI,UAAU,YAAY,MAAM,eAAe,YAAY,GAAG;AAC5D,WAAO,EAAE,IAAI,OAAO,QAAQ,kBAAkB,kBAAkB,UAAU;AAAA,EAC5E;AAEA,SAAO,EAAE,IAAI,MAAM,kBAAkB,UAAU;AACjD;","names":[]}

package/dist/{index-B06IJlHe.d.ts → index-C1FGQ004.d.ts}

@@ -150,35 +150,32 @@ interface UserOpReceipt {
 declare const ZERO_VALUE = 0n;
 
 /**
- * v1.5 — Scenario 4: Swap PT → USDT on PAFI Web with **gas fee
- * deducted in PT** from the user's balance.
+ * v1.5 — Scenario 4: Swap PT → USDT on PAFI Web with gas fee
+ * deducted in PT from the user's balance.
  *
- * Builds an unsigned `PartialUserOperation` that packages three inner
- * calls into a single `BatchExecutor.execute(calls[])`:
+ * Builds an unsigned `PartialUserOperation` that packages up to four
+ * inner calls into a single `BatchExecutor.execute(calls[])`:
  *
- *   1. `PT.approve(UniversalRouter, amountIn)` — let the router pull
- *      `amountIn` PT for the swap
- *   2. `UniversalRouter.execute(commands, inputs, deadline)` — V4 swap
- *      PT → USDT, user receives `minAmountOut` USDT
- *   3. `PT.transfer(feeRecipient, gasFeePt)` — pay the operator back
- *      for sponsoring the gas, in PT (application-level recovery —
- *      no custom paymaster contract needed)
+ *   1. `PT.approve(Permit2, amountIn)` — grant Permit2 ERC-20 allowance
+ *   2. `Permit2.approve(PT, router, amountIn, deadline)` — authorize
+ *      the UniversalRouter to pull PT via Permit2
+ *   3. `UniversalRouter.execute(commands, inputs, deadline)` — V4 swap
+ *      PT → USDT; user receives ≥ `minAmountOut` USDT
+ *   4. `PT.transfer(feeRecipient, gasFeePt)` — pay the operator back
+ *      for sponsoring the gas, in PT (omitted when `gasFeePt` is 0)
  *
- * The user's wallet must hold `amountIn + gasFeePt` PT **before** the
- * UserOp runs. The three inner calls execute atomically via
- * EIP-7702 delegation (`msg.sender = user`), so a reverting swap
- * unwinds the approve + fee transfer too.
+ * The user's wallet must hold `amountIn + gasFeePt` PT before the
+ * UserOp runs. All inner calls execute atomically via EIP-7702
+ * delegation (`msg.sender = user`), so a reverting swap unwinds
+ * the approvals and fee transfer too.
  *
  * ## Fee model
  *
- * Exact-out on the **USDT side** is not attempted here. The user
- * specifies `amountIn` PT for the swap; the minimum USDT out comes
- * from a separate quote (not this function). The gas fee is a
- * separate `transfer` call — it does NOT come out of the swap's USDT
- * output, because that output goes straight to the user's wallet with
- * no intermediate hook to skim from.
+ * The gas fee is a separate `transfer` after the swap — it does NOT
+ * come out of the USDT output, because that output goes straight to
+ * the user's wallet with no intermediate hook.
  *
- * If the FE wants "user receives exactly X USDT after gas", it should:
+ * If the FE wants "user receives exactly X USDT after gas":
  *   1. Quote PT→USDT for candidate `amountIn` values
  *   2. Pick an `amountIn` where `minAmountOut ≈ X`
  *   3. Separately compute `gasFeePt` from the operator's rate
@@ -186,11 +183,8 @@ declare const ZERO_VALUE = 0n;
  *
  * ## Order of operations
  *
- * Approve → swap → fee transfer. The fee transfer comes **last** so
- * if the swap reverts, the user is also refunded the fee (atomic
- * batch revert). Doing fee transfer first would still unwind on
- * revert, but ordering it last matches the intuitive "only charge
- * gas on success" semantics.
+ * Fee transfer is last so a reverting swap also refunds the fee
+ * (atomic batch revert semantics).
  */
 interface BuildSwapWithGasDeductionParams {
     /** User's EOA (with EIP-7702 delegation to BatchExecutor). */
@@ -218,12 +212,7 @@ interface BuildSwapWithGasDeductionParams {
     gasFeePt: bigint;
     /** Where the gas fee lands — typically the operator or fee collector. */
     feeRecipient: Address;
-    /**
-     * Optional — pre-signed Permit2 / EIP-2612 approval. If omitted, a
-     * standard `approve()` call is appended as the first batch op.
-     * Future work: support Permit2 so the approve is part of the swap
-     * input rather than a separate call.
-     */
+    /** Override ERC-4337 gas estimates. Defaults are conservative; tune down for cheaper UserOps. */
     gasLimits?: {
         callGasLimit?: bigint;
         verificationGasLimit?: bigint;

package/dist/{index-B7pGBych.d.cts → index-CzBaRIqs.d.cts}

@@ -150,35 +150,32 @@ interface UserOpReceipt {
 declare const ZERO_VALUE = 0n;
 
 /**
- * v1.5 — Scenario 4: Swap PT → USDT on PAFI Web with **gas fee
- * deducted in PT** from the user's balance.
+ * v1.5 — Scenario 4: Swap PT → USDT on PAFI Web with gas fee
+ * deducted in PT from the user's balance.
  *
- * Builds an unsigned `PartialUserOperation` that packages three inner
- * calls into a single `BatchExecutor.execute(calls[])`:
+ * Builds an unsigned `PartialUserOperation` that packages up to four
+ * inner calls into a single `BatchExecutor.execute(calls[])`:
  *
- *   1. `PT.approve(UniversalRouter, amountIn)` — let the router pull
- *      `amountIn` PT for the swap
- *   2. `UniversalRouter.execute(commands, inputs, deadline)` — V4 swap
- *      PT → USDT, user receives `minAmountOut` USDT
- *   3. `PT.transfer(feeRecipient, gasFeePt)` — pay the operator back
- *      for sponsoring the gas, in PT (application-level recovery —
- *      no custom paymaster contract needed)
+ *   1. `PT.approve(Permit2, amountIn)` — grant Permit2 ERC-20 allowance
+ *   2. `Permit2.approve(PT, router, amountIn, deadline)` — authorize
+ *      the UniversalRouter to pull PT via Permit2
+ *   3. `UniversalRouter.execute(commands, inputs, deadline)` — V4 swap
+ *      PT → USDT; user receives ≥ `minAmountOut` USDT
+ *   4. `PT.transfer(feeRecipient, gasFeePt)` — pay the operator back
+ *      for sponsoring the gas, in PT (omitted when `gasFeePt` is 0)
  *
- * The user's wallet must hold `amountIn + gasFeePt` PT **before** the
- * UserOp runs. The three inner calls execute atomically via
- * EIP-7702 delegation (`msg.sender = user`), so a reverting swap
- * unwinds the approve + fee transfer too.
+ * The user's wallet must hold `amountIn + gasFeePt` PT before the
+ * UserOp runs. All inner calls execute atomically via EIP-7702
+ * delegation (`msg.sender = user`), so a reverting swap unwinds
+ * the approvals and fee transfer too.
  *
  * ## Fee model
  *
- * Exact-out on the **USDT side** is not attempted here. The user
- * specifies `amountIn` PT for the swap; the minimum USDT out comes
- * from a separate quote (not this function). The gas fee is a
- * separate `transfer` call — it does NOT come out of the swap's USDT
- * output, because that output goes straight to the user's wallet with
- * no intermediate hook to skim from.
+ * The gas fee is a separate `transfer` after the swap — it does NOT
+ * come out of the USDT output, because that output goes straight to
+ * the user's wallet with no intermediate hook.
  *
- * If the FE wants "user receives exactly X USDT after gas", it should:
+ * If the FE wants "user receives exactly X USDT after gas":
  *   1. Quote PT→USDT for candidate `amountIn` values
  *   2. Pick an `amountIn` where `minAmountOut ≈ X`
  *   3. Separately compute `gasFeePt` from the operator's rate
@@ -186,11 +183,8 @@ declare const ZERO_VALUE = 0n;
  *
  * ## Order of operations
  *
- * Approve → swap → fee transfer. The fee transfer comes **last** so
- * if the swap reverts, the user is also refunded the fee (atomic
- * batch revert). Doing fee transfer first would still unwind on
- * revert, but ordering it last matches the intuitive "only charge
- * gas on success" semantics.
+ * Fee transfer is last so a reverting swap also refunds the fee
+ * (atomic batch revert semantics).
  */
 interface BuildSwapWithGasDeductionParams {
     /** User's EOA (with EIP-7702 delegation to BatchExecutor). */
@@ -218,12 +212,7 @@ interface BuildSwapWithGasDeductionParams {
     gasFeePt: bigint;
     /** Where the gas fee lands — typically the operator or fee collector. */
     feeRecipient: Address;
-    /**
-     * Optional — pre-signed Permit2 / EIP-2612 approval. If omitted, a
-     * standard `approve()` call is appended as the first batch op.
-     * Future work: support Permit2 so the approve is part of the swap
-     * input rather than a separate call.
-     */
+    /** Override ERC-4337 gas estimates. Defaults are conservative; tune down for cheaper UserOps. */
     gasLimits?: {
         callGasLimit?: bigint;
         verificationGasLimit?: bigint;

package/dist/index.cjs

@@ -5,7 +5,14 @@ var _chunkALCWYDVGcjs = require('./chunk-ALCWYDVG.cjs');
 
 
 
-var _chunkGWLEEXM4cjs = require('./chunk-GWLEEXM4.cjs');
+
+
+
+
+
+
+
+var _chunkFNJZUNK3cjs = require('./chunk-FNJZUNK3.cjs');
 
 
 
@@ -83,7 +90,7 @@ var _chunkDMW67WBUcjs = require('./chunk-DMW67WBU.cjs');
 
 
 
-var _chunkEDR5SFJNcjs = require('./chunk-EDR5SFJN.cjs');
+var _chunkTYIEMGMYcjs = require('./chunk-TYIEMGMY.cjs');
 
 
 
@@ -98,7 +105,7 @@ var _viem = require('viem');
 
 // src/contracts/real/orderlyVault.ts
 
-var ORDERLY_VAULT_BASE_MAINNET = "0xDe5cE5DD048596e46Ff671b13317aCC3C5B59b01";
+var ORDERLY_VAULT_BASE_MAINNET = "0x816f722424B49Cf1275cc86DA9840Fbd5a6167e9";
 var ORDERLY_VAULT_ADDRESSES = {
   8453: ORDERLY_VAULT_BASE_MAINNET
 };
@@ -212,16 +219,16 @@ function buildPerpDepositWithGasDeduction(params) {
     args: [params.depositData]
   });
   const operations = [
-    _chunkEDR5SFJNcjs.erc20ApproveOp.call(void 0, params.usdcAddress, vault, params.amount),
+    _chunkTYIEMGMYcjs.erc20ApproveOp.call(void 0, params.usdcAddress, vault, params.amount),
     {
-      ..._chunkEDR5SFJNcjs.rawCallOp.call(void 0, vault, depositCallData),
+      ..._chunkTYIEMGMYcjs.rawCallOp.call(void 0, vault, depositCallData),
       // BatchExecutor passes `value` from the inner call along; this
       // becomes the LayerZero fee. The aggregated `msg.value` for the
       // top-level UserOp must equal the sum of inner `value`s.
       value: params.layerZeroFee
     }
   ];
-  return _chunkEDR5SFJNcjs.buildPartialUserOperation.call(void 0, {
+  return _chunkTYIEMGMYcjs.buildPartialUserOperation.call(void 0, {
     sender: params.userAddress,
     nonce: params.aaNonce,
     operations,
@@ -280,6 +287,93 @@ async function checkEthAndBranch(params) {
   return balance >= required ? "normal" : "paymaster";
 }
 
+// src/delegation/checkDelegation.ts
+var EIP7702_MAGIC = "0xef0100";
+function parseEip7702DelegatedAddress(code) {
+  if (!code || code === "0x" || code === "0x0") return null;
+  const normalized = code.toLowerCase();
+  const magic = EIP7702_MAGIC.toLowerCase();
+  const idx = normalized.indexOf(magic);
+  if (idx === -1) return null;
+  const raw = normalized.slice(idx + magic.length, idx + magic.length + 40);
+  if (raw.length !== 40) return null;
+  return `0x${raw}`;
+}
+async function checkDelegation(client, address) {
+  const code = await client.getCode({ address });
+  return parseEip7702DelegatedAddress(code);
+}
+async function isDelegatedTo(client, address, target) {
+  const impl = await checkDelegation(client, address);
+  if (!impl) return false;
+  return impl.toLowerCase() === target.toLowerCase();
+}
+
+// src/delegation/buildDelegationUserOp.ts
+function buildDelegationUserOp(params) {
+  return _chunkTYIEMGMYcjs.buildPartialUserOperation.call(void 0, {
+    sender: params.userAddress,
+    nonce: params.aaNonce,
+    operations: [
+      {
+        // Self-call with no data — triggers EIP-7702 delegation without
+        // executing any inner logic. The BatchExecutor.execute([]) call with
+        // an empty array would revert, so we target the EOA itself (which
+        // forwards to BatchExecutor that then no-ops on empty input).
+        target: params.userAddress,
+        value: 0n,
+        data: "0x"
+      }
+    ],
+    gasLimits: {
+      callGasLimit: _nullishCoalesce(_optionalChain([params, 'access', _7 => _7.gasLimits, 'optionalAccess', _8 => _8.callGasLimit]), () => ( 50000n)),
+      verificationGasLimit: _nullishCoalesce(_optionalChain([params, 'access', _9 => _9.gasLimits, 'optionalAccess', _10 => _10.verificationGasLimit]), () => ( 150000n)),
+      preVerificationGas: _nullishCoalesce(_optionalChain([params, 'access', _11 => _11.gasLimits, 'optionalAccess', _12 => _12.preVerificationGas]), () => ( 50000n))
+    }
+  });
+}
+async function getAaNonce(client, userAddress) {
+  const ENTRY_POINT = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
+  const NONCE_ABI = [
+    {
+      inputs: [
+        { name: "sender", type: "address" },
+        { name: "key", type: "uint192" }
+      ],
+      name: "getNonce",
+      outputs: [{ name: "nonce", type: "uint256" }],
+      stateMutability: "view",
+      type: "function"
+    }
+  ];
+  return client.readContract({
+    address: ENTRY_POINT,
+    abi: NONCE_ABI,
+    functionName: "getNonce",
+    args: [userAddress, 0n]
+  });
+}
+
+// src/transport/proxyTransport.ts
+
+function createPafiProxyTransport(params) {
+  const { proxyUrl, getIdentityToken, issuerId } = params;
+  return _viem.http.call(void 0, proxyUrl, {
+    fetchOptions: {},
+    // fetchFn intercepts every fetch call the viem http transport makes,
+    // injecting the auth headers before the request leaves the browser.
+    fetchFn: (input, init) => {
+      const headers = new Headers(_optionalChain([init, 'optionalAccess', _13 => _13.headers]));
+      const token = getIdentityToken();
+      if (token) {
+        headers.set("authorization", `Bearer ${token}`);
+      }
+      headers.set("x-issuer-id", issuerId);
+      return fetch(input, { ...init, headers });
+    }
+  });
+}
+
 // src/contracts/real/pointToken.ts
 
 var POINT_TOKEN_ABI = _viem.parseAbi.call(void 0, [
@@ -391,8 +485,8 @@ function openWebPopup(url, options = {}) {
   const width = _nullishCoalesce(options.width, () => ( DEFAULT_WIDTH));
   const height = _nullishCoalesce(options.height, () => ( DEFAULT_HEIGHT));
   const name = _nullishCoalesce(options.windowName, () => ( DEFAULT_NAME));
-  const screenW = _nullishCoalesce(_optionalChain([window, 'access', _7 => _7.screen, 'optionalAccess', _8 => _8.availWidth]), () => ( window.innerWidth));
-  const screenH = _nullishCoalesce(_optionalChain([window, 'access', _9 => _9.screen, 'optionalAccess', _10 => _10.availHeight]), () => ( window.innerHeight));
+  const screenW = _nullishCoalesce(_optionalChain([window, 'access', _14 => _14.screen, 'optionalAccess', _15 => _15.availWidth]), () => ( window.innerWidth));
+  const screenH = _nullishCoalesce(_optionalChain([window, 'access', _16 => _16.screen, 'optionalAccess', _17 => _17.availHeight]), () => ( window.innerHeight));
   const left = Math.max(0, Math.floor((screenW - width) / 2));
   const top = Math.max(0, Math.floor((screenH - height) / 2));
   const features = [
@@ -425,7 +519,7 @@ function openWebPopup(url, options = {}) {
       window.removeEventListener("message", messageListener);
       messageListener = null;
     }
-    _optionalChain([options, 'access', _11 => _11.onClose, 'optionalCall', _12 => _12()]);
+    _optionalChain([options, 'access', _18 => _18.onClose, 'optionalCall', _19 => _19()]);
   };
   pollId = setInterval(() => {
     if (popup.closed) {
@@ -534,25 +628,25 @@ var PafiSDK = class {
   // -------------------------------------------------------------------------
   requirePointToken() {
     if (!this._pointTokenAddress) {
-      throw new (0, _chunkEDR5SFJNcjs.ConfigurationError)("pointTokenAddress not set");
+      throw new (0, _chunkTYIEMGMYcjs.ConfigurationError)("pointTokenAddress not set");
     }
     return this._pointTokenAddress;
   }
   requireProvider() {
     if (!this._provider) {
-      throw new (0, _chunkEDR5SFJNcjs.ConfigurationError)("provider not set");
+      throw new (0, _chunkTYIEMGMYcjs.ConfigurationError)("provider not set");
     }
     return this._provider;
   }
   requireSigner() {
     if (!this._signer) {
-      throw new (0, _chunkEDR5SFJNcjs.ConfigurationError)("signer not set");
+      throw new (0, _chunkTYIEMGMYcjs.ConfigurationError)("signer not set");
     }
     return this._signer;
   }
   requireChainId() {
     if (this._chainId === void 0) {
-      throw new (0, _chunkEDR5SFJNcjs.ConfigurationError)("chainId not set");
+      throw new (0, _chunkTYIEMGMYcjs.ConfigurationError)("chainId not set");
     }
     return this._chainId;
   }
@@ -638,7 +732,7 @@ var PafiSDK = class {
    * The caller provides `minAmountOut` after applying their own slippage.
    */
   buildSwapFromQuote(params) {
-    return _chunkEDR5SFJNcjs.buildSwapFromQuote.call(void 0, params);
+    return _chunkTYIEMGMYcjs.buildSwapFromQuote.call(void 0, params);
   }
   // -------------------------------------------------------------------------
   // Simulation — dry-run via eth_call (no gas spent)
@@ -654,7 +748,7 @@ var PafiSDK = class {
    * @param from          - Address that will execute the swap
    */
   async simulateSwap(routerAddress, commands, inputs, deadline, from) {
-    return _chunkEDR5SFJNcjs.simulateSwap.call(void 0, 
+    return _chunkTYIEMGMYcjs.simulateSwap.call(void 0, 
       this.requireProvider(),
       routerAddress,
       commands,
@@ -671,16 +765,16 @@ var PafiSDK = class {
     const chainId = this.requireChainId();
     const account = signer.account;
     if (!account) {
-      throw new (0, _chunkEDR5SFJNcjs.ConfigurationError)("signer has no account attached");
+      throw new (0, _chunkTYIEMGMYcjs.ConfigurationError)("signer has no account attached");
     }
-    return _chunkGWLEEXM4cjs.createLoginMessage.call(void 0, { ...params, address: account.address, chainId });
+    return _chunkFNJZUNK3cjs.createLoginMessage.call(void 0, { ...params, address: account.address, chainId });
   }
   /** Sign a login message string with the current signer (personal_sign) */
   async signLoginMessage(message) {
     const signer = this.requireSigner();
     const account = signer.account;
     if (!account) {
-      throw new (0, _chunkEDR5SFJNcjs.ConfigurationError)("signer has no account attached");
+      throw new (0, _chunkTYIEMGMYcjs.ConfigurationError)("signer has no account attached");
     }
     return signer.signMessage({ account, message });
   }
@@ -784,5 +878,18 @@ var PafiSDK = class {
 
 
 
-exports.ApiError = _chunkEDR5SFJNcjs.ApiError; exports.BATCH_EXECUTOR_ABI = _chunkEDR5SFJNcjs.BATCH_EXECUTOR_ABI; exports.BATCH_EXECUTOR_ADDRESS_BASE_MAINNET = BATCH_EXECUTOR_ADDRESS_BASE_MAINNET; exports.BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA = BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA; exports.BROKER_HASHES = BROKER_HASHES; exports.COMMON_POOLS = _chunkDMW67WBUcjs.COMMON_POOLS; exports.COMMON_TOKENS = _chunkDMW67WBUcjs.COMMON_TOKENS; exports.CONTRACT_ADDRESSES = CONTRACT_ADDRESSES; exports.ConfigurationError = _chunkEDR5SFJNcjs.ConfigurationError; exports.ENTRY_POINT_V07 = ENTRY_POINT_V07; exports.ORDERLY_VAULT_ABI = ORDERLY_VAULT_ABI; exports.ORDERLY_VAULT_ADDRESSES = ORDERLY_VAULT_ADDRESSES; exports.ORDERLY_VAULT_BASE_MAINNET = ORDERLY_VAULT_BASE_MAINNET; exports.POINT_TOKEN_FACTORY_ADDRESSES = POINT_TOKEN_FACTORY_ADDRESSES; exports.POINT_TOKEN_IMPL_ADDRESSES = POINT_TOKEN_IMPL_ADDRESSES; exports.POINT_TOKEN_POOLS = _chunkDMW67WBUcjs.POINT_TOKEN_POOLS; exports.POINT_TOKEN_V2_ABI = POINT_TOKEN_ABI; exports.PafiSDK = PafiSDK; exports.PafiSDKError = _chunkEDR5SFJNcjs.PafiSDKError; exports.SETTLE_ALL = _chunkEDR5SFJNcjs.SETTLE_ALL; exports.SUPPORTED_CHAINS = _chunkDMW67WBUcjs.SUPPORTED_CHAINS; exports.SWAP_EXACT_IN = _chunkEDR5SFJNcjs.SWAP_EXACT_IN; exports.SigningError = _chunkEDR5SFJNcjs.SigningError; exports.SimulationError = _chunkEDR5SFJNcjs.SimulationError; exports.TAKE_ALL = _chunkEDR5SFJNcjs.TAKE_ALL; exports.TOKEN_HASHES = TOKEN_HASHES; exports.UNIVERSAL_ROUTER_ADDRESSES = _chunkDMW67WBUcjs.UNIVERSAL_ROUTER_ADDRESSES; exports.V4_QUOTER_ADDRESSES = _chunkDMW67WBUcjs.V4_QUOTER_ADDRESSES; exports.V4_SWAP = _chunkEDR5SFJNcjs.V4_SWAP; exports.ZERO_VALUE = ZERO_VALUE; exports._resetPaymasterConfigForTests = _resetPaymasterConfigForTests; exports.assembleUserOperation = _chunkEDR5SFJNcjs.assembleUserOperation; exports.buildAllPaths = _chunkZ2V525IScjs.buildAllPaths; exports.buildBurnRequestTypedData = _chunkKJKDLD7Ncjs.buildBurnRequestTypedData; exports.buildDomain = _chunkKJKDLD7Ncjs.buildDomain; exports.buildErc20ApprovalCalldata = _chunkEDR5SFJNcjs.buildErc20ApprovalCalldata; exports.buildMintRequestTypedData = _chunkKJKDLD7Ncjs.buildMintRequestTypedData; exports.buildPartialUserOperation = _chunkEDR5SFJNcjs.buildPartialUserOperation; exports.buildPermit2ApprovalCalldata = _chunkEDR5SFJNcjs.buildPermit2ApprovalCalldata; exports.buildPerpDepositWithGasDeduction = buildPerpDepositWithGasDeduction; exports.buildReceiverConsentTypedData = _chunkKJKDLD7Ncjs.buildReceiverConsentTypedData; exports.buildSwapFromQuote = _chunkEDR5SFJNcjs.buildSwapFromQuote; exports.buildSwapWithGasDeduction = _chunkEDR5SFJNcjs.buildSwapWithGasDeduction; exports.buildUniversalRouterExecuteArgs = _chunkEDR5SFJNcjs.buildUniversalRouterExecuteArgs; exports.buildV4SwapInput = _chunkEDR5SFJNcjs.buildV4SwapInput; exports.burnRequestTypes = _chunkDMW67WBUcjs.burnRequestTypes; exports.checkAllowance = _chunkEDR5SFJNcjs.checkAllowance; exports.checkEthAndBranch = checkEthAndBranch; exports.combineRoutes = _chunkZ2V525IScjs.combineRoutes; exports.computeAccountId = computeAccountId; exports.createLoginMessage = _chunkGWLEEXM4cjs.createLoginMessage; exports.encodeBatchExecute = _chunkEDR5SFJNcjs.encodeBatchExecute; exports.erc20Abi = _chunkIPXARZ6Fcjs.erc20Abi; exports.erc20ApproveOp = _chunkEDR5SFJNcjs.erc20ApproveOp; exports.erc20BurnOp = _chunkEDR5SFJNcjs.erc20BurnOp; exports.erc20TransferOp = _chunkEDR5SFJNcjs.erc20TransferOp; exports.findBestQuote = _chunkZ2V525IScjs.findBestQuote; exports.getContractAddresses = getContractAddresses; exports.getIssuer = _chunkCQCSQPWGcjs.getIssuer2; exports.getMintRequestNonce = _chunkCQCSQPWGcjs.getMintRequestNonce; exports.getPafiWebModalAdapter = getPafiWebModalAdapter; exports.getPaymasterConfig = getPaymasterConfig; exports.getPointTokenBalance = _chunkCQCSQPWGcjs.getPointTokenBalance; exports.getPointTokenIssuer = _chunkCQCSQPWGcjs.getPointTokenIssuer; exports.getPointTokenIssuerAddress = _chunkCQCSQPWGcjs.getIssuer; exports.getReceiverConsentNonce = _chunkCQCSQPWGcjs.getReceiverConsentNonce; exports.getTokenName = _chunkCQCSQPWGcjs.getTokenName; exports.isActiveIssuer = _chunkCQCSQPWGcjs.isActiveIssuer; exports.isMinter = _chunkCQCSQPWGcjs.isMinter; exports.isPaymasterConfigured = isPaymasterConfigured; exports.issuerRegistryAbi = _chunkS2XRFFP3cjs.issuerRegistryAbi; exports.mintRequestTypes = _chunkDMW67WBUcjs.mintRequestTypes; exports.mintingOracleAbi = _chunkS2XRFFP3cjs.mintingOracleAbi; exports.openPafiWebModal = openPafiWebModal; exports.openWebPopup = openWebPopup; exports.parseLoginMessage = _chunkGWLEEXM4cjs.parseLoginMessage; exports.permit2Abi = _chunkIPXARZ6Fcjs.permit2Abi; exports.pointTokenAbi = _chunkS2XRFFP3cjs.pointTokenAbi; exports.pointTokenFactoryAbi = _chunkALCWYDVGcjs.pointTokenFactoryAbi; exports.quoteBestRoute = _chunkZ2V525IScjs.quoteBestRoute; exports.quoteExactInput = _chunkZ2V525IScjs.quoteExactInput; exports.quoteExactInputSingle = _chunkZ2V525IScjs.quoteExactInputSingle; exports.rawCallOp = _chunkEDR5SFJNcjs.rawCallOp; exports.receiverConsentTypes = _chunkDMW67WBUcjs.receiverConsentTypes; exports.setPafiWebModalAdapter = setPafiWebModalAdapter; exports.setPaymasterConfig = setPaymasterConfig; exports.signBurnRequest = _chunkKJKDLD7Ncjs.signBurnRequest; exports.signMintRequest = _chunkKJKDLD7Ncjs.signMintRequest; exports.signReceiverConsent = _chunkKJKDLD7Ncjs.signReceiverConsent; exports.simulateSwap = _chunkEDR5SFJNcjs.simulateSwap; exports.universalRouterAbi = _chunkIPXARZ6Fcjs.universalRouterAbi; exports.v4QuoterAbi = _chunkCL3QSI4Ocjs.v4QuoterAbi; exports.verifyBurnRequest = _chunkKJKDLD7Ncjs.verifyBurnRequest; exports.verifyLoginMessage = _chunkGWLEEXM4cjs.verifyLoginMessage; exports.verifyMintCap = _chunkCQCSQPWGcjs.verifyMintCap; exports.verifyMintRequest = _chunkKJKDLD7Ncjs.verifyMintRequest; exports.verifyReceiverConsent = _chunkKJKDLD7Ncjs.verifyReceiverConsent; exports.webPopupAdapter = webPopupAdapter;
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.ApiError = _chunkTYIEMGMYcjs.ApiError; exports.BATCH_EXECUTOR_ABI = _chunkTYIEMGMYcjs.BATCH_EXECUTOR_ABI; exports.BATCH_EXECUTOR_ADDRESS_BASE_MAINNET = BATCH_EXECUTOR_ADDRESS_BASE_MAINNET; exports.BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA = BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA; exports.BROKER_HASHES = BROKER_HASHES; exports.COMMON_POOLS = _chunkDMW67WBUcjs.COMMON_POOLS; exports.COMMON_TOKENS = _chunkDMW67WBUcjs.COMMON_TOKENS; exports.CONTRACT_ADDRESSES = CONTRACT_ADDRESSES; exports.ConfigurationError = _chunkTYIEMGMYcjs.ConfigurationError; exports.ENTRY_POINT_V07 = ENTRY_POINT_V07; exports.ORDERLY_VAULT_ABI = ORDERLY_VAULT_ABI; exports.ORDERLY_VAULT_ADDRESSES = ORDERLY_VAULT_ADDRESSES; exports.ORDERLY_VAULT_BASE_MAINNET = ORDERLY_VAULT_BASE_MAINNET; exports.POINT_TOKEN_FACTORY_ADDRESSES = POINT_TOKEN_FACTORY_ADDRESSES; exports.POINT_TOKEN_IMPL_ADDRESSES = POINT_TOKEN_IMPL_ADDRESSES; exports.POINT_TOKEN_POOLS = _chunkDMW67WBUcjs.POINT_TOKEN_POOLS; exports.POINT_TOKEN_V2_ABI = POINT_TOKEN_ABI; exports.PafiSDK = PafiSDK; exports.PafiSDKError = _chunkTYIEMGMYcjs.PafiSDKError; exports.SETTLE_ALL = _chunkTYIEMGMYcjs.SETTLE_ALL; exports.SPONSOR_AUTH_DOMAIN_NAME = _chunkFNJZUNK3cjs.SPONSOR_AUTH_DOMAIN_NAME; exports.SPONSOR_AUTH_TYPES = _chunkFNJZUNK3cjs.SPONSOR_AUTH_TYPES; exports.SUPPORTED_CHAINS = _chunkDMW67WBUcjs.SUPPORTED_CHAINS; exports.SWAP_EXACT_IN = _chunkTYIEMGMYcjs.SWAP_EXACT_IN; exports.SigningError = _chunkTYIEMGMYcjs.SigningError; exports.SimulationError = _chunkTYIEMGMYcjs.SimulationError; exports.TAKE_ALL = _chunkTYIEMGMYcjs.TAKE_ALL; exports.TOKEN_HASHES = TOKEN_HASHES; exports.UNIVERSAL_ROUTER_ADDRESSES = _chunkDMW67WBUcjs.UNIVERSAL_ROUTER_ADDRESSES; exports.V4_QUOTER_ADDRESSES = _chunkDMW67WBUcjs.V4_QUOTER_ADDRESSES; exports.V4_SWAP = _chunkTYIEMGMYcjs.V4_SWAP; exports.ZERO_VALUE = ZERO_VALUE; exports._resetPaymasterConfigForTests = _resetPaymasterConfigForTests; exports.assembleUserOperation = _chunkTYIEMGMYcjs.assembleUserOperation; exports.buildAllPaths = _chunkZ2V525IScjs.buildAllPaths; exports.buildBurnRequestTypedData = _chunkKJKDLD7Ncjs.buildBurnRequestTypedData; exports.buildDelegationUserOp = buildDelegationUserOp; exports.buildDomain = _chunkKJKDLD7Ncjs.buildDomain; exports.buildErc20ApprovalCalldata = _chunkTYIEMGMYcjs.buildErc20ApprovalCalldata; exports.buildMintRequestTypedData = _chunkKJKDLD7Ncjs.buildMintRequestTypedData; exports.buildPartialUserOperation = _chunkTYIEMGMYcjs.buildPartialUserOperation; exports.buildPermit2ApprovalCalldata = _chunkTYIEMGMYcjs.buildPermit2ApprovalCalldata; exports.buildPerpDepositWithGasDeduction = buildPerpDepositWithGasDeduction; exports.buildReceiverConsentTypedData = _chunkKJKDLD7Ncjs.buildReceiverConsentTypedData; exports.buildSponsorAuthDomain = _chunkFNJZUNK3cjs.buildSponsorAuthDomain; exports.buildSponsorAuthTypedData = _chunkFNJZUNK3cjs.buildSponsorAuthTypedData; exports.buildSwapFromQuote = _chunkTYIEMGMYcjs.buildSwapFromQuote; exports.buildSwapWithGasDeduction = _chunkTYIEMGMYcjs.buildSwapWithGasDeduction; exports.buildUniversalRouterExecuteArgs = _chunkTYIEMGMYcjs.buildUniversalRouterExecuteArgs; exports.buildV4SwapInput = _chunkTYIEMGMYcjs.buildV4SwapInput; exports.burnRequestTypes = _chunkDMW67WBUcjs.burnRequestTypes; exports.checkAllowance = _chunkTYIEMGMYcjs.checkAllowance; exports.checkDelegation = checkDelegation; exports.checkEthAndBranch = checkEthAndBranch; exports.combineRoutes = _chunkZ2V525IScjs.combineRoutes; exports.computeAccountId = computeAccountId; exports.computeCallDataHash = _chunkFNJZUNK3cjs.computeCallDataHash; exports.createLoginMessage = _chunkFNJZUNK3cjs.createLoginMessage; exports.createPafiProxyTransport = createPafiProxyTransport; exports.encodeBatchExecute = _chunkTYIEMGMYcjs.encodeBatchExecute; exports.erc20Abi = _chunkIPXARZ6Fcjs.erc20Abi; exports.erc20ApproveOp = _chunkTYIEMGMYcjs.erc20ApproveOp; exports.erc20BurnOp = _chunkTYIEMGMYcjs.erc20BurnOp; exports.erc20TransferOp = _chunkTYIEMGMYcjs.erc20TransferOp; exports.findBestQuote = _chunkZ2V525IScjs.findBestQuote; exports.getAaNonce = getAaNonce; exports.getContractAddresses = getContractAddresses; exports.getIssuer = _chunkCQCSQPWGcjs.getIssuer2; exports.getMintRequestNonce = _chunkCQCSQPWGcjs.getMintRequestNonce; exports.getPafiWebModalAdapter = getPafiWebModalAdapter; exports.getPaymasterConfig = getPaymasterConfig; exports.getPointTokenBalance = _chunkCQCSQPWGcjs.getPointTokenBalance; exports.getPointTokenIssuer = _chunkCQCSQPWGcjs.getPointTokenIssuer; exports.getPointTokenIssuerAddress = _chunkCQCSQPWGcjs.getIssuer; exports.getReceiverConsentNonce = _chunkCQCSQPWGcjs.getReceiverConsentNonce; exports.getTokenName = _chunkCQCSQPWGcjs.getTokenName; exports.isActiveIssuer = _chunkCQCSQPWGcjs.isActiveIssuer; exports.isDelegatedTo = isDelegatedTo; exports.isMinter = _chunkCQCSQPWGcjs.isMinter; exports.isPaymasterConfigured = isPaymasterConfigured; exports.issuerRegistryAbi = _chunkS2XRFFP3cjs.issuerRegistryAbi; exports.mintRequestTypes = _chunkDMW67WBUcjs.mintRequestTypes; exports.mintingOracleAbi = _chunkS2XRFFP3cjs.mintingOracleAbi; exports.openPafiWebModal = openPafiWebModal; exports.openWebPopup = openWebPopup; exports.parseEip7702DelegatedAddress = parseEip7702DelegatedAddress; exports.parseLoginMessage = _chunkFNJZUNK3cjs.parseLoginMessage; exports.permit2Abi = _chunkIPXARZ6Fcjs.permit2Abi; exports.pointTokenAbi = _chunkS2XRFFP3cjs.pointTokenAbi; exports.pointTokenFactoryAbi = _chunkALCWYDVGcjs.pointTokenFactoryAbi; exports.quoteBestRoute = _chunkZ2V525IScjs.quoteBestRoute; exports.quoteExactInput = _chunkZ2V525IScjs.quoteExactInput; exports.quoteExactInputSingle = _chunkZ2V525IScjs.quoteExactInputSingle; exports.rawCallOp = _chunkTYIEMGMYcjs.rawCallOp; exports.receiverConsentTypes = _chunkDMW67WBUcjs.receiverConsentTypes; exports.setPafiWebModalAdapter = setPafiWebModalAdapter; exports.setPaymasterConfig = setPaymasterConfig; exports.signBurnRequest = _chunkKJKDLD7Ncjs.signBurnRequest; exports.signMintRequest = _chunkKJKDLD7Ncjs.signMintRequest; exports.signReceiverConsent = _chunkKJKDLD7Ncjs.signReceiverConsent; exports.signSponsorAuth = _chunkFNJZUNK3cjs.signSponsorAuth; exports.simulateSwap = _chunkTYIEMGMYcjs.simulateSwap; exports.universalRouterAbi = _chunkIPXARZ6Fcjs.universalRouterAbi; exports.v4QuoterAbi = _chunkCL3QSI4Ocjs.v4QuoterAbi; exports.verifyBurnRequest = _chunkKJKDLD7Ncjs.verifyBurnRequest; exports.verifyLoginMessage = _chunkFNJZUNK3cjs.verifyLoginMessage; exports.verifyMintCap = _chunkCQCSQPWGcjs.verifyMintCap; exports.verifyMintRequest = _chunkKJKDLD7Ncjs.verifyMintRequest; exports.verifyReceiverConsent = _chunkKJKDLD7Ncjs.verifyReceiverConsent; exports.verifySponsorAuth = _chunkFNJZUNK3cjs.verifySponsorAuth; exports.webPopupAdapter = webPopupAdapter;
 //# sourceMappingURL=index.cjs.map