@pafi-dev/core 0.3.0-beta.9 → 0.4.0

package/dist/index.d.ts

@@ -1,14 +1,14 @@
-import { Address, Hex, PublicClient, WalletClient } from 'viem';
+import { Address, Hex, PublicClient, HttpTransport, WalletClient } from 'viem';
 import { P as PoolKey, C as ChainConfig, a as PafiSDKConfig, b as PointTokenDomainConfig, M as MintRequest, R as ReceiverConsent, E as EIP712Signature, S as SignatureVerification, B as BestQuote, Q as QuoteResult } from './types-b5_Tokjl.js';
 export { c as BurnRequest, I as Issuer, d as PathKey } from './types-b5_Tokjl.js';
 export { erc20Abi, issuerRegistryAbi, mintingOracleAbi, permit2Abi, pointTokenAbi, pointTokenFactoryAbi, universalRouterAbi, v4QuoterAbi } from './abi/index.js';
 export { buildBurnRequestTypedData, buildDomain, buildMintRequestTypedData, buildReceiverConsentTypedData, signBurnRequest, signMintRequest, signReceiverConsent, verifyBurnRequest, verifyMintRequest, verifyReceiverConsent } from './eip712/index.js';
 export { getIssuer, getMintRequestNonce, getPointTokenBalance, getPointTokenIssuer, getPointTokenIssuerAddress, getReceiverConsentNonce, getTokenName, isActiveIssuer, isMinter, verifyMintCap } from './contract/index.js';
 export { buildAllPaths, combineRoutes, findBestQuote, quoteBestRoute, quoteExactInput, quoteExactInputSingle } from './quoting/index.js';
-import { P as PartialUserOperation, O as Operation, U as UserOperation, S as SwapSimulationResult } from './index-B06IJlHe.js';
-export { B as BuildSwapWithGasDeductionParams, E as ENTRY_POINT_V07, a as PaymasterFields, b as SETTLE_ALL, c as SWAP_EXACT_IN, T as TAKE_ALL, d as UserOpReceipt, V as V4_SWAP, Z as ZERO_VALUE, e as buildErc20ApprovalCalldata, f as buildPermit2ApprovalCalldata, g as buildSwapFromQuote, h as buildSwapWithGasDeduction, i as buildUniversalRouterExecuteArgs, j as buildV4SwapInput, k as checkAllowance, s as simulateSwap } from './index-B06IJlHe.js';
+import { P as PartialUserOperation, O as Operation, U as UserOperation, S as SwapSimulationResult } from './index-C1FGQ004.js';
+export { B as BuildSwapWithGasDeductionParams, E as ENTRY_POINT_V07, a as PaymasterFields, b as SETTLE_ALL, c as SWAP_EXACT_IN, T as TAKE_ALL, d as UserOpReceipt, V as V4_SWAP, Z as ZERO_VALUE, e as buildErc20ApprovalCalldata, f as buildPermit2ApprovalCalldata, g as buildSwapFromQuote, h as buildSwapWithGasDeduction, i as buildUniversalRouterExecuteArgs, j as buildV4SwapInput, k as checkAllowance, s as simulateSwap } from './index-C1FGQ004.js';
 import { LoginMessageParams } from './auth/index.js';
-export { VerifyLoginResult, createLoginMessage, parseLoginMessage, verifyLoginMessage } from './auth/index.js';
+export { SPONSOR_AUTH_DOMAIN_NAME, SPONSOR_AUTH_TYPES, SponsorAuthPayload, SponsorAuthVerifyResult, VerifyLoginResult, buildSponsorAuthDomain, buildSponsorAuthTypedData, computeCallDataHash, createLoginMessage, parseLoginMessage, signSponsorAuth, verifyLoginMessage, verifySponsorAuth } from './auth/index.js';
 
 declare const mintRequestTypes: {
     readonly MintRequest: readonly [{
@@ -117,7 +117,7 @@ declare class ApiError extends PafiSDKError {
  *
  * ## Sponsored vs direct
  *
- * Coinbase Paymaster sponsors GAS, not `msg.value`. So even on the
+ * ERC-4337 paymasters sponsor GAS, not `msg.value`. Even on the
  * sponsored path the user MUST hold enough native ETH on Base to cover
  * `getDepositFee()` (typically ~0.0002 ETH at quiet times).
  */
@@ -538,6 +538,182 @@ interface CheckEthAndBranchParams {
  */
 declare function checkEthAndBranch(params: CheckEthAndBranchParams): Promise<SubmissionPath>;
 
+/**
+ * Parse the implementation address out of an EIP-7702 delegation designator.
+ *
+ * Returns `null` when:
+ *   - `code` is undefined / empty / `"0x"` (plain EOA, no code)
+ *   - `code` does not contain the EIP-7702 magic prefix (regular contract)
+ *
+ * @param code - bytecode returned by `eth_getCode` / `client.getCode()`
+ * @returns the 20-byte implementation address (checksummed), or `null`
+ *
+ * @example
+ * const code = await client.getCode({ address });
+ * const impl = parseEip7702DelegatedAddress(code);
+ * // null  → not delegated
+ * // '0x7702cb554e6bFb442cb743A7dF23154544a7176C' → delegated to BatchExecutor
+ */
+declare function parseEip7702DelegatedAddress(code: Hex | string | null | undefined): Address | null;
+/**
+ * Read the EIP-7702 delegation status of an EOA from the chain.
+ *
+ * @param client  - viem PublicClient (any provider — only `eth_getCode` is called)
+ * @param address - EOA address to inspect
+ * @returns the implementation address the EOA is delegated to, or `null`
+ *
+ * @example
+ * const impl = await checkDelegation(publicClient, userAddress);
+ * if (impl === null) {
+ *   // show "Setup Wallet" button
+ * } else {
+ *   // EOA already delegated; safe to send UserOps
+ * }
+ */
+declare function checkDelegation(client: PublicClient, address: Address): Promise<Address | null>;
+/**
+ * Return `true` when the EOA at `address` is currently delegated to `target`.
+ *
+ * Useful for asserting that the delegation points specifically at the expected
+ * BatchExecutor rather than some other implementation (e.g. old deployment).
+ *
+ * @example
+ * import { BATCH_EXECUTOR_ADDRESS_BASE_MAINNET } from '@pafi-dev/core';
+ * const ok = await isDelegatedTo(client, userAddress, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET);
+ */
+declare function isDelegatedTo(client: PublicClient, address: Address, target: Address): Promise<boolean>;
+
+/**
+ * Parameters for building a delegation-only UserOperation.
+ *
+ * This UserOp carries no calldata — its sole purpose is to anchor the
+ * EIP-7702 authorization (signed externally via `signAuthorization`) into
+ * a sponsored transaction so the user doesn't need native ETH to delegate.
+ */
+interface BuildDelegationUserOpParams {
+    /** User EOA to delegate. */
+    userAddress: Address;
+    /** ERC-4337 account nonce — fetched from EntryPoint. Pass 0n on first ever op. */
+    aaNonce: bigint;
+    gasLimits?: {
+        callGasLimit?: bigint;
+        verificationGasLimit?: bigint;
+        preVerificationGas?: bigint;
+    };
+}
+/**
+ * Build the minimal `PartialUserOperation` used to sponsor the one-time
+ * EIP-7702 delegation.
+ *
+ * The caller must:
+ *   1. Sign the EIP-7702 authorization via `signAuthorization()` (Privy hook).
+ *   2. Pass the authorization as `authorization` alongside `calls` (or alone)
+ *      to `smartClient.sendTransaction()`.
+ *
+ * The permissionless SDK + Pimlico bundler handle the rest: they detect the
+ * `authorization` field and submit an EIP-7702 type-4 transaction that sets
+ * the EOA's bytecode to `0xef0100<batchExecutorAddress>`.
+ *
+ * This builder is a convenience wrapper — in practice you can also pass
+ * `{ to: userAddress, value: 0n, data: '0x', authorization }` directly to
+ * `smartClient.sendTransaction()` without calling this function at all.
+ * Use it when you need a `PartialUserOperation` struct for inspection or
+ * custom paymaster flows.
+ *
+ * @example
+ * // Typical flow — no need to call this builder directly:
+ * const nonce = await publicClient.getTransactionCount({ address, blockTag: 'pending' });
+ * const authorization = await signAuthorization({ contractAddress: BATCH_EXECUTOR, chainId: 8453, nonce });
+ * const txHash = await smartClient.sendTransaction({
+ *   to: address,
+ *   value: 0n,
+ *   data: '0x',
+ *   authorization,
+ *   paymasterContext: { sponsorshipPolicyId },
+ * });
+ */
+declare function buildDelegationUserOp(params: BuildDelegationUserOpParams): PartialUserOperation;
+/**
+ * Fetch the AA nonce for a user EOA from the EntryPoint v0.7.
+ *
+ * Convenience helper so callers don't need to import the EntryPoint ABI
+ * themselves when building the delegation UserOp.
+ *
+ * @param client     - viem PublicClient
+ * @param userAddress - EOA to query
+ * @returns bigint nonce (0n on first-ever UserOp)
+ */
+declare function getAaNonce(client: PublicClient, userAddress: Address): Promise<bigint>;
+
+/**
+ * Parameters for `createPafiProxyTransport`.
+ */
+interface PafiProxyTransportParams {
+    /**
+     * Full URL of the PAFI sponsor-relayer Pimlico proxy endpoint.
+     * @example "https://sponsor-relayer.pacificfinance.org/pimlico"
+     * @example "http://localhost:4000/pimlico"
+     */
+    proxyUrl: string;
+    /**
+     * Called on every request to get the current Privy identity token.
+     * Use a getter (or a ref's `.current`) so the transport always sends
+     * the latest token without needing to be rebuilt when it rotates.
+     *
+     * @example () => identityTokenRef.current
+     * @example () => privyHook.identityToken
+     */
+    getIdentityToken: () => string | null | undefined;
+    /**
+     * Issuer ID sent as `X-Issuer-Id` header.
+     * sponsor-relayer uses this to look up per-issuer rate limits and policy.
+     * Obtain from PAFI team during onboarding.
+     */
+    issuerId: string;
+}
+/**
+ * Create a viem `HttpTransport` that proxies all Pimlico JSON-RPC calls
+ * through the PAFI sponsor-relayer (`POST /pimlico`).
+ *
+ * The transport:
+ *   - Sets `Authorization: Bearer <identityToken>` on every request
+ *   - Sets `X-Issuer-Id: <issuerId>` on every request
+ *   - Reads the identity token lazily via `getIdentityToken()` so it is
+ *     always fresh without rebuilding the SmartAccountClient on each rotation
+ *
+ * Pass the returned transport to both `createPimlicoClient` and
+ * `createSmartAccountClient` so ALL Pimlico RPC calls (paymaster + bundler)
+ * go through the proxy with auth headers attached.
+ *
+ * @example
+ * ```ts
+ * import { createPafiProxyTransport, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET } from '@pafi-dev/core';
+ * import { createSmartAccountClient } from 'permissionless';
+ * import { createPimlicoClient } from 'permissionless/clients/pimlico';
+ * import { useIdentityToken } from '@privy-io/react-auth';
+ *
+ * const { identityToken } = useIdentityToken();
+ * const identityTokenRef = useRef<string | null>(null);
+ * useEffect(() => { identityTokenRef.current = identityToken; }, [identityToken]);
+ *
+ * const proxyTransport = createPafiProxyTransport({
+ *   proxyUrl: process.env.NEXT_PUBLIC_PIMLICO_PROXY_URL!,
+ *   getIdentityToken: () => identityTokenRef.current,
+ *   issuerId: process.env.NEXT_PUBLIC_ISSUER_ID!,
+ * });
+ *
+ * const pimlicoClient = createPimlicoClient({ chain: base, transport: proxyTransport });
+ * const smartClient  = createSmartAccountClient({
+ *   client: publicClient,
+ *   chain: base,
+ *   account,
+ *   paymaster: pimlicoClient,
+ *   bundlerTransport: proxyTransport,
+ * });
+ * ```
+ */
+declare function createPafiProxyTransport(params: PafiProxyTransportParams): HttpTransport;
+
 /**
  * Real `PointToken` ABI — matches the contract deployed on Base mainnet
  * (POINT at `0x7d25E7156E51F865D522fd3ef257a6B5DD41b97e`). Sourced from
@@ -1293,4 +1469,4 @@ declare class PafiSDK {
     signLoginMessage(message: string): Promise<Hex>;
 }
 
-export { ApiError, BATCH_EXECUTOR_ABI, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET, BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA, BROKER_HASHES, BestQuote, type BuildPartialUserOpParams, type BuildPerpDepositWithGasDeductionParams, COMMON_POOLS, COMMON_TOKENS, CONTRACT_ADDRESSES, ChainConfig, type CheckEthAndBranchParams, ConfigurationError, type ContractAddresses, EIP712Signature, LoginMessageParams, MintRequest, type ModalOpenOptions, ORDERLY_VAULT_ABI, ORDERLY_VAULT_ADDRESSES, ORDERLY_VAULT_BASE_MAINNET, Operation, POINT_TOKEN_FACTORY_ADDRESSES, POINT_TOKEN_IMPL_ADDRESSES, POINT_TOKEN_POOLS, POINT_TOKEN_ABI as POINT_TOKEN_V2_ABI, PafiSDK, PafiSDKConfig, PafiSDKError, type PafiWebModalAdapter, type PafiWebModalHandle, PartialUserOperation, type PaymasterConfig, PointTokenDomainConfig, PoolKey, QuoteResult, ReceiverConsent, SUPPORTED_CHAINS, type SignatureStruct, SignatureVerification, SigningError, SimulationError, type SponsorshipScenario, type SubmissionPath, SwapSimulationResult, TOKEN_HASHES, UNIVERSAL_ROUTER_ADDRESSES, UserOperation, V4_QUOTER_ADDRESSES, type VaultDepositFE, _resetPaymasterConfigForTests, assembleUserOperation, buildPartialUserOperation, buildPerpDepositWithGasDeduction, burnRequestTypes, checkEthAndBranch, computeAccountId, encodeBatchExecute, erc20ApproveOp, erc20BurnOp, erc20TransferOp, getContractAddresses, getPafiWebModalAdapter, getPaymasterConfig, isPaymasterConfigured, mintRequestTypes, openPafiWebModal, openWebPopup, rawCallOp, receiverConsentTypes, setPafiWebModalAdapter, setPaymasterConfig, webPopupAdapter };
+export { ApiError, BATCH_EXECUTOR_ABI, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET, BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA, BROKER_HASHES, BestQuote, type BuildDelegationUserOpParams, type BuildPartialUserOpParams, type BuildPerpDepositWithGasDeductionParams, COMMON_POOLS, COMMON_TOKENS, CONTRACT_ADDRESSES, ChainConfig, type CheckEthAndBranchParams, ConfigurationError, type ContractAddresses, EIP712Signature, LoginMessageParams, MintRequest, type ModalOpenOptions, ORDERLY_VAULT_ABI, ORDERLY_VAULT_ADDRESSES, ORDERLY_VAULT_BASE_MAINNET, Operation, POINT_TOKEN_FACTORY_ADDRESSES, POINT_TOKEN_IMPL_ADDRESSES, POINT_TOKEN_POOLS, POINT_TOKEN_ABI as POINT_TOKEN_V2_ABI, type PafiProxyTransportParams, PafiSDK, PafiSDKConfig, PafiSDKError, type PafiWebModalAdapter, type PafiWebModalHandle, PartialUserOperation, type PaymasterConfig, PointTokenDomainConfig, PoolKey, QuoteResult, ReceiverConsent, SUPPORTED_CHAINS, type SignatureStruct, SignatureVerification, SigningError, SimulationError, type SponsorshipScenario, type SubmissionPath, SwapSimulationResult, TOKEN_HASHES, UNIVERSAL_ROUTER_ADDRESSES, UserOperation, V4_QUOTER_ADDRESSES, type VaultDepositFE, _resetPaymasterConfigForTests, assembleUserOperation, buildDelegationUserOp, buildPartialUserOperation, buildPerpDepositWithGasDeduction, burnRequestTypes, checkDelegation, checkEthAndBranch, computeAccountId, createPafiProxyTransport, encodeBatchExecute, erc20ApproveOp, erc20BurnOp, erc20TransferOp, getAaNonce, getContractAddresses, getPafiWebModalAdapter, getPaymasterConfig, isDelegatedTo, isPaymasterConfigured, mintRequestTypes, openPafiWebModal, openWebPopup, parseEip7702DelegatedAddress, rawCallOp, receiverConsentTypes, setPafiWebModalAdapter, setPaymasterConfig, webPopupAdapter };

package/dist/index.js

@@ -2,10 +2,17 @@ import {
   pointTokenFactoryAbi
 } from "./chunk-7UBO7DY5.js";
 import {
+  SPONSOR_AUTH_DOMAIN_NAME,
+  SPONSOR_AUTH_TYPES,
+  buildSponsorAuthDomain,
+  buildSponsorAuthTypedData,
+  computeCallDataHash,
   createLoginMessage,
   parseLoginMessage,
-  verifyLoginMessage
-} from "./chunk-O4SMTUOY.js";
+  signSponsorAuth,
+  verifyLoginMessage,
+  verifySponsorAuth
+} from "./chunk-W6VULMCO.js";
 import {
   getIssuer,
   getIssuer2,
@@ -83,7 +90,7 @@ import {
   erc20TransferOp,
   rawCallOp,
   simulateSwap
-} from "./chunk-W23EJNYG.js";
+} from "./chunk-543IPI6E.js";
 import {
   erc20Abi,
   permit2Abi,
@@ -91,14 +98,14 @@ import {
 } from "./chunk-2PIXFXA2.js";
 
 // src/index.ts
-import { createPublicClient, http } from "viem";
+import { createPublicClient, http as http2 } from "viem";
 
 // src/perp/buildPerpDepositWithGasDeduction.ts
 import { encodeFunctionData } from "viem";
 
 // src/contracts/real/orderlyVault.ts
 import { keccak256, encodePacked, encodeAbiParameters } from "viem";
-var ORDERLY_VAULT_BASE_MAINNET = "0xDe5cE5DD048596e46Ff671b13317aCC3C5B59b01";
+var ORDERLY_VAULT_BASE_MAINNET = "0x816f722424B49Cf1275cc86DA9840Fbd5a6167e9";
 var ORDERLY_VAULT_ADDRESSES = {
   8453: ORDERLY_VAULT_BASE_MAINNET
 };
@@ -280,6 +287,93 @@ async function checkEthAndBranch(params) {
   return balance >= required ? "normal" : "paymaster";
 }
 
+// src/delegation/checkDelegation.ts
+var EIP7702_MAGIC = "0xef0100";
+function parseEip7702DelegatedAddress(code) {
+  if (!code || code === "0x" || code === "0x0") return null;
+  const normalized = code.toLowerCase();
+  const magic = EIP7702_MAGIC.toLowerCase();
+  const idx = normalized.indexOf(magic);
+  if (idx === -1) return null;
+  const raw = normalized.slice(idx + magic.length, idx + magic.length + 40);
+  if (raw.length !== 40) return null;
+  return `0x${raw}`;
+}
+async function checkDelegation(client, address) {
+  const code = await client.getCode({ address });
+  return parseEip7702DelegatedAddress(code);
+}
+async function isDelegatedTo(client, address, target) {
+  const impl = await checkDelegation(client, address);
+  if (!impl) return false;
+  return impl.toLowerCase() === target.toLowerCase();
+}
+
+// src/delegation/buildDelegationUserOp.ts
+function buildDelegationUserOp(params) {
+  return buildPartialUserOperation({
+    sender: params.userAddress,
+    nonce: params.aaNonce,
+    operations: [
+      {
+        // Self-call with no data — triggers EIP-7702 delegation without
+        // executing any inner logic. The BatchExecutor.execute([]) call with
+        // an empty array would revert, so we target the EOA itself (which
+        // forwards to BatchExecutor that then no-ops on empty input).
+        target: params.userAddress,
+        value: 0n,
+        data: "0x"
+      }
+    ],
+    gasLimits: {
+      callGasLimit: params.gasLimits?.callGasLimit ?? 50000n,
+      verificationGasLimit: params.gasLimits?.verificationGasLimit ?? 150000n,
+      preVerificationGas: params.gasLimits?.preVerificationGas ?? 50000n
+    }
+  });
+}
+async function getAaNonce(client, userAddress) {
+  const ENTRY_POINT = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
+  const NONCE_ABI = [
+    {
+      inputs: [
+        { name: "sender", type: "address" },
+        { name: "key", type: "uint192" }
+      ],
+      name: "getNonce",
+      outputs: [{ name: "nonce", type: "uint256" }],
+      stateMutability: "view",
+      type: "function"
+    }
+  ];
+  return client.readContract({
+    address: ENTRY_POINT,
+    abi: NONCE_ABI,
+    functionName: "getNonce",
+    args: [userAddress, 0n]
+  });
+}
+
+// src/transport/proxyTransport.ts
+import { http } from "viem";
+function createPafiProxyTransport(params) {
+  const { proxyUrl, getIdentityToken, issuerId } = params;
+  return http(proxyUrl, {
+    fetchOptions: {},
+    // fetchFn intercepts every fetch call the viem http transport makes,
+    // injecting the auth headers before the request leaves the browser.
+    fetchFn: (input, init) => {
+      const headers = new Headers(init?.headers);
+      const token = getIdentityToken();
+      if (token) {
+        headers.set("authorization", `Bearer ${token}`);
+      }
+      headers.set("x-issuer-id", issuerId);
+      return fetch(input, { ...init, headers });
+    }
+  });
+}
+
 // src/contracts/real/pointToken.ts
 import { parseAbi } from "viem";
 var POINT_TOKEN_ABI = parseAbi([
@@ -513,7 +607,7 @@ var PafiSDK = class {
       this._provider = config.provider;
     } else if (config.rpcUrl) {
       this._provider = createPublicClient({
-        transport: http(config.rpcUrl)
+        transport: http2(config.rpcUrl)
       });
     }
   }
@@ -706,6 +800,8 @@ export {
   PafiSDK,
   PafiSDKError,
   SETTLE_ALL,
+  SPONSOR_AUTH_DOMAIN_NAME,
+  SPONSOR_AUTH_TYPES,
   SUPPORTED_CHAINS,
   SWAP_EXACT_IN,
   SigningError,
@@ -720,6 +816,7 @@ export {
   assembleUserOperation,
   buildAllPaths,
   buildBurnRequestTypedData,
+  buildDelegationUserOp,
   buildDomain,
   buildErc20ApprovalCalldata,
   buildMintRequestTypedData,
@@ -727,22 +824,28 @@ export {
   buildPermit2ApprovalCalldata,
   buildPerpDepositWithGasDeduction,
   buildReceiverConsentTypedData,
+  buildSponsorAuthDomain,
+  buildSponsorAuthTypedData,
   buildSwapFromQuote,
   buildSwapWithGasDeduction,
   buildUniversalRouterExecuteArgs,
   buildV4SwapInput,
   burnRequestTypes,
   checkAllowance,
+  checkDelegation,
   checkEthAndBranch,
   combineRoutes,
   computeAccountId,
+  computeCallDataHash,
   createLoginMessage,
+  createPafiProxyTransport,
   encodeBatchExecute,
   erc20Abi,
   erc20ApproveOp,
   erc20BurnOp,
   erc20TransferOp,
   findBestQuote,
+  getAaNonce,
   getContractAddresses,
   getIssuer2 as getIssuer,
   getMintRequestNonce,
@@ -754,6 +857,7 @@ export {
   getReceiverConsentNonce,
   getTokenName,
   isActiveIssuer,
+  isDelegatedTo,
   isMinter,
   isPaymasterConfigured,
   issuerRegistryAbi,
@@ -761,6 +865,7 @@ export {
   mintingOracleAbi,
   openPafiWebModal,
   openWebPopup,
+  parseEip7702DelegatedAddress,
   parseLoginMessage,
   permit2Abi,
   pointTokenAbi,
@@ -775,6 +880,7 @@ export {
   signBurnRequest,
   signMintRequest,
   signReceiverConsent,
+  signSponsorAuth,
   simulateSwap,
   universalRouterAbi,
   v4QuoterAbi,
@@ -783,6 +889,7 @@ export {
   verifyMintCap,
   verifyMintRequest,
   verifyReceiverConsent,
+  verifySponsorAuth,
   webPopupAdapter
 };
 //# sourceMappingURL=index.js.map