@pafi-dev/core 0.5.16 → 0.5.17

package/README.md

@@ -15,6 +15,10 @@ Core TypeScript SDK for the PAFI point token system. Covers EIP-712 signing, con
 - TypeScript >= 5.0
 - `viem` ^2.0.0 (peer dependency)
 
+> **Latest:** `0.5.16` — ERC-4337 v0.8 hash + EIP-712 signing fixes for the
+> EIP-7702 mobile flow. See [Changelog](#changelog) for the full breakdown
+> of the AA24/AA23 bugs this release closes.
+
 ---
 
 ## Installation
@@ -62,11 +66,21 @@ POINT_TOKEN_FACTORY_ADDRESSES[8453] // "0x36c0BAb2faBE45EfA6d13001143e43A266Af67
 Protocol constants (same on all EVM chains):
 
 ```ts
-import { ENTRY_POINT_V07, PERMIT2_ADDRESS } from "@pafi-dev/core";
+import {
+  ENTRY_POINT_V07,
+  ENTRY_POINT_V08,
+  PERMIT2_ADDRESS,
+} from "@pafi-dev/core";
 // ENTRY_POINT_V07   "0x0000000071727De22E5E9d8BAf0edAc6f37da032"
+// ENTRY_POINT_V08   "0x4337084d9e255ff0702461cf8895ce9e3b5ff108"
 // PERMIT2_ADDRESS   "0x000000000022D473030F116dDEE9F6B43aC78BA3"
 ```
 
+For Pimlico's `Simple7702Account` (the EIP-7702 delegate target you get
+when using Privy embedded wallets) you **must** use `ENTRY_POINT_V08`.
+Mixing v0.7 with a v0.8 account reverts with `AA23 reverted account: not
+from EntryPoint`.
+
 ---
 
 ## EIP-712 signing
@@ -255,6 +269,68 @@ const userOp = buildPerpDepositWithGasDeduction({
 
 ## Changelog
 
+### 0.5.16
+
+ERC-4337 v0.8 + EIP-7702 mobile flow correctness fixes.
+
+**Why this release.** The mobile prepare/submit flow (issuer backend computes
+the userOpHash, mobile client signs it, backend submits to the bundler)
+was reverting on Pimlico with `AA24 signature error` even though the same
+UserOp validated cleanly on the web flow via `permissionless`. Three
+distinct bugs stacked on top of each other; this release fixes them.
+
+**1. `computeUserOpHash` now produces the EIP-712 typed digest used by
+EntryPoint v0.8.** Previous versions hashed via the v0.7 scheme
+(`keccak256(packed userOp || entryPoint || chainId)`), which produces a
+totally different hash than what Pimlico's `Simple7702Account` (impl
+`0xe6Cae8…`, `entryPoint() = 0x4337084d…`) actually validates against.
+Symptom: `AA24` on every mobile UserOp.
+
+**2. `buildUserOpTypedData()` exposed for client-side signing.** The
+deployed Pimlico `Simple7702Account` validates the user signature with
+`SignatureCheckerLib.isValidSignatureNow(address(this), userOpHash, sig)`
+— **no EIP-191 prefix wrapping.** That means
+`personal_sign` / `signMessage({ raw: userOpHash })` produces a signature
+that `ecrecover`s to the wrong address; AA24 again. The new helper returns
+`{ domain, types, primaryType, message }` ready to pass straight into
+`walletClient.signTypedData(...)`. Because `userOpHash` IS the EIP-712
+digest of `PackedUserOperation`, signing the typed data yields a
+signature that recovers the EOA from the raw userOpHash — which is what
+the contract checks.
+
+```ts
+import { buildUserOpTypedData, computeUserOpHash } from "@pafi-dev/core";
+
+// Backend (gg56-backend, claim/prepare):
+const typedData = buildUserOpTypedData(userOpWithPaymaster, chainId);
+const userOpHash = computeUserOpHash(userOpWithPaymaster, chainId);
+return { lockId, userOpHash, typedData /* serialise bigints */ };
+
+// Client (Privy embedded wallet):
+const signature = await walletClient.signTypedData({
+  domain: typedData.domain,
+  types: typedData.types,
+  primaryType: typedData.primaryType,
+  message: typedData.message,
+});
+// Submit { lockId, signature } to /claim/submit. AA24 stays away.
+```
+
+**Do NOT use `signMessage({ raw })` or `personal_sign` to sign a v0.8
+userOpHash for `Simple7702Account`** — that path is a foot-gun the SDK
+intentionally no longer offers a helper for.
+
+**3. `ENTRY_POINT_V08` constant added.** v0.7 EntryPoint
+(`0x0000000071727De22E5E9d8BAf0edAc6f37da032`) is incompatible with
+v0.8 accounts — calling `pm_sponsorUserOperation` with v0.7 reverts
+inside `_validateUserOp` with `"AA23 reverted account: not from
+EntryPoint"` because `msg.sender (v0.7 EP) ≠ account.entryPoint() (v0.8 EP)`.
+
+```ts
+import { ENTRY_POINT_V08 } from "@pafi-dev/core";
+// 0x4337084d9e255ff0702461cf8895ce9e3b5ff108
+```
+
 ### 0.4.0
 - `sponsorAuth` module added — `signSponsorAuth`, `verifySponsorAuth`, `computeCallDataHash`
 - `PERMIT2_ADDRESS` and `ENTRY_POINT_V07` centralised in `constants.ts`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pafi-dev/core",
-  "version": "0.5.16",
+  "version": "0.5.17",
   "description": "EIP-712 signing, contract interaction, and Relay calldata for the PAFI point token system",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -91,15 +91,6 @@
   "files": [
     "dist"
   ],
-  "scripts": {
-    "generate": "tsx scripts/generate-abis.ts",
-    "build": "tsup",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "test:integration": "vitest run --config vitest.integration.config.ts",
-    "test:fork": "vitest run --config vitest.fork.config.ts",
-    "typecheck": "tsc --noEmit"
-  },
   "peerDependencies": {
     "viem": "^2.0.0"
   },
@@ -110,5 +101,14 @@
     "tsup": "^8.0.0",
     "vitest": "^2.0.0"
   },
-  "license": "Apache-2.0"
-}
+  "license": "Apache-2.0",
+  "scripts": {
+    "generate": "tsx scripts/generate-abis.ts",
+    "build": "tsup",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:integration": "vitest run --config vitest.integration.config.ts",
+    "test:fork": "vitest run --config vitest.fork.config.ts",
+    "typecheck": "tsc --noEmit"
+  }
+}