@rhinestone/sdk 2.0.0-beta.3 → 2.0.0-beta.30

package/dist/src/modules/validators/permissions.js

@@ -1,4 +1,4 @@
-import { isAddress, isHex, size, toFunctionSelector, } from 'viem';
+import { isAddress, isHex, padHex, size, toFunctionSelector, } from 'viem';
 function isStaticAbiType(type) {
     if (type === 'address' || type === 'bool')
         return true;
@@ -33,12 +33,53 @@ function toReferenceValue(value, abiType) {
         if (typeof value === 'string' &&
             isHex(value) &&
             size(value) === expectedSize) {
-            return value;
+            // Solidity calldata encodes bytesN (N<32) left-aligned + right-padded
+            // inside its 32-byte word, whereas address/uint*/bool are right-aligned
+            // + left-padded. Downstream `encodeActionParamRule` unconditionally
+            // left-pads with `padHex`, which is correct for the right-aligned types
+            // but wrong for bytesN. Pre-encode here to the full 32-byte hex with
+            // the correct alignment so the policy's bytes32 == bytes32 comparison
+            // matches what's actually in calldata.
+            return padHex(value, { size: 32, dir: 'right' });
         }
         throw new Error(`Expected ${expectedSize}-byte hex string for ${abiType}`);
     }
     throw new Error(`Unsupported ABI type: ${abiType}`);
 }
+// Right-fold an array of leaves into a right-leaning OR chain:
+//   [a, b, c]  →  OR(a, OR(b, c))
+// Right-leaning is fine because ArgPolicy evaluates with short-circuit; any
+// shape that uses every leaf and respects post-order produces the same result.
+function orChain(leaves) {
+    let acc = leaves[leaves.length - 1];
+    for (let i = leaves.length - 2; i >= 0; i--) {
+        acc = { type: 'or', left: leaves[i], right: acc };
+    }
+    return acc;
+}
+function andChain(leaves) {
+    let acc = leaves[leaves.length - 1];
+    for (let i = leaves.length - 2; i >= 0; i--) {
+        acc = { type: 'and', left: leaves[i], right: acc };
+    }
+    return acc;
+}
+// On-chain ERC20SpendingLimitPolicy._isTokenTransferOrApprove matches by
+// 4-byte selector, accepting only these four. Selector-gating here keeps the
+// SDK's accepted set congruent with the contract's — a same-shaped function
+// like `mint(address,uint256)` would otherwise pass argument-type checks and
+// fail every call on-chain.
+const ERC20_SPENDING_LIMIT_SELECTORS = new Set([
+    '0x095ea7b3', // approve(address,uint256)
+    '0x39509351', // increaseAllowance(address,uint256)
+    '0xa9059cbb', // transfer(address,uint256)
+    '0x23b872dd', // transferFrom(address,address,uint256)
+]);
+// Year 2100 in ms — well within uint128 after the encoder's ms→s conversion.
+// Used as the one-sided default for `validUntil` when only `validAfter` is set.
+// Exported so the cross-chain permit expansion (smart-sessions.ts) applies the
+// same always-passing upper bound instead of defaulting to 0 (already expired).
+export const FAR_FUTURE_MS = 4_102_444_800_000;
 function resolvePermission(permission) {
     const { abi, address, functions } = permission;
     const actions = [];
@@ -58,11 +99,57 @@ function resolvePermission(permission) {
         }
         const abiEntry = abiEntries[0];
         const selector = toFunctionSelector(abiEntry);
-        const policies = config.policies ? [...config.policies] : [];
-        const params = config.params ?? {};
-        const paramEntries = Object.entries(params).filter(([, v]) => v !== undefined);
+        if (Object.hasOwn(config, 'policies')) {
+            throw new Error(`Function "${fnName}": \`policies\` was removed from permission configs. ` +
+                'Use params, maxUses, validUntil/validAfter, valueLimit, or spendingLimit instead.');
+        }
+        const policies = [];
+        // --- Sugar field expansion -----------------------------------------------
+        if (config.maxUses !== undefined) {
+            policies.push({ type: 'usage-limit', limit: config.maxUses });
+        }
+        if (config.validUntil !== undefined || config.validAfter !== undefined) {
+            const validUntil = config.validUntil !== undefined
+                ? config.validUntil.getTime()
+                : FAR_FUTURE_MS;
+            const validAfter = config.validAfter !== undefined ? config.validAfter.getTime() : 0;
+            if (validUntil < validAfter) {
+                throw new Error(`Function "${fnName}": validUntil (${validUntil}) is before validAfter (${validAfter}).`);
+            }
+            policies.push({ type: 'time-frame', validUntil, validAfter });
+        }
+        if (config.valueLimit !== undefined) {
+            // Runtime backstop: payable-gating is enforced at the type level, but
+            // users can bypass with `as` casts. valueLimit on a non-payable function
+            // is harmless on-chain (msg.value is always 0, the cap always passes)
+            // but it leaks intent — throw rather than encode dead weight.
+            if (abiEntry.stateMutability !== 'payable') {
+                throw new Error(`Function "${fnName}" is not payable — \`valueLimit\` only constrains native ETH ` +
+                    'attached to the call, which is always zero for non-payable functions. ' +
+                    'Remove `valueLimit`.');
+            }
+            policies.push({ type: 'value-limit', limit: config.valueLimit });
+        }
+        if (config.spendingLimit !== undefined) {
+            // Runtime backstop: type-level gate restricts shape, but ERC20SpendingLimitPolicy
+            // dispatches by selector on-chain — a same-shaped function like
+            // mint(address,uint256) would encode successfully and fail every call.
+            if (!ERC20_SPENDING_LIMIT_SELECTORS.has(selector)) {
+                throw new Error(`Function "${fnName}" (selector ${selector}) is not an ERC-20 transfer/approve ` +
+                    'selector; `spendingLimit` only works on approve, increaseAllowance, ' +
+                    'transfer, or transferFrom. The on-chain policy dispatches by selector ' +
+                    'and would fail every call for other functions.');
+            }
+            policies.push({
+                type: 'spending-limits',
+                limits: [config.spendingLimit],
+            });
+        }
+        // --- End sugar field expansion -------------------------------------------
+        const rawParams = config.params ?? {};
+        const paramEntries = Object.entries(rawParams).filter(([, v]) => v !== undefined);
         if (paramEntries.length > 0) {
-            const rules = paramEntries.map(([paramName, rule]) => {
+            const normalized = paramEntries.map(([paramName, rule]) => {
                 const paramIndex = abiEntry.inputs.findIndex((p) => p.name === paramName);
                 if (paramIndex === -1) {
                     throw new Error(`Parameter "${paramName}" not found in function "${fnName}". ` +
@@ -75,21 +162,79 @@ function resolvePermission(permission) {
                         '(address, bool, uint*, int*, bytes1–bytes32).');
                 }
                 const calldataOffset = BigInt(paramIndex) * 32n;
-                const referenceValue = toReferenceValue(rule.value, param.type);
+                if (rule.anyOf !== undefined) {
+                    if (rule.anyOf.length === 0) {
+                        throw new Error(`Parameter "${paramName}" has empty anyOf — provide at least one value.`);
+                    }
+                    return {
+                        paramName,
+                        calldataOffset,
+                        abiType: param.type,
+                        anyOf: rule.anyOf,
+                    };
+                }
                 return {
-                    condition: rule.condition,
+                    paramName,
                     calldataOffset,
-                    referenceValue,
-                    ...(rule.usageLimit !== undefined
-                        ? { usageLimit: rule.usageLimit }
-                        : {}),
+                    abiType: param.type,
+                    condition: rule.condition,
+                    value: rule.value,
+                    usageLimit: rule.usageLimit,
                 };
             });
-            policies.push({
-                type: 'universal-action',
-                valueLimitPerUse: config.valueLimitPerUse ?? 0n,
-                rules: rules,
-            });
+            const usesArgPolicy = normalized.some((n) => n.anyOf !== undefined);
+            // UniActionPolicy/ArgPolicy reject `msg.value > valueLimitPerUse`, so a
+            // default of 0 would block any non-zero msg.value before the standalone
+            // value-limit policy (sugar) could allow it. Inherit the sugar's cap so
+            // the per-use gate matches user intent; value-limit still enforces the
+            // cumulative cap on top.
+            const embeddedValueLimit = config.valueLimitPerUse ?? config.valueLimit ?? 0n;
+            if (usesArgPolicy) {
+                // One sub-expression per param, then AND across params.
+                const perParam = normalized.map((n) => {
+                    if (n.anyOf !== undefined) {
+                        const leaves = n.anyOf.map((v) => ({
+                            type: 'rule',
+                            rule: {
+                                condition: 'equal',
+                                calldataOffset: n.calldataOffset,
+                                referenceValue: toReferenceValue(v, n.abiType),
+                            },
+                        }));
+                        return leaves.length === 1 ? leaves[0] : orChain(leaves);
+                    }
+                    return {
+                        type: 'rule',
+                        rule: {
+                            condition: n.condition,
+                            calldataOffset: n.calldataOffset,
+                            referenceValue: toReferenceValue(n.value, n.abiType),
+                            ...(n.usageLimit !== undefined
+                                ? { usageLimit: n.usageLimit }
+                                : {}),
+                        },
+                    };
+                });
+                policies.push({
+                    type: 'arg-policy',
+                    valueLimitPerUse: embeddedValueLimit,
+                    expression: perParam.length === 1 ? perParam[0] : andChain(perParam),
+                });
+            }
+            else {
+                // Flat AND-of-rules — cheaper to init via UniActionPolicy.
+                const rules = normalized.map((n) => ({
+                    condition: n.condition,
+                    calldataOffset: n.calldataOffset,
+                    referenceValue: toReferenceValue(n.value, n.abiType),
+                    ...(n.usageLimit !== undefined ? { usageLimit: n.usageLimit } : {}),
+                }));
+                policies.push({
+                    type: 'universal-action',
+                    valueLimitPerUse: embeddedValueLimit,
+                    rules: rules,
+                });
+            }
         }
         else if (config.valueLimitPerUse !== undefined) {
             policies.push({

package/dist/src/modules/validators/policies/claim/arbiters.d.ts

@@ -0,0 +1,22 @@
+import type { Address } from 'viem';
+import type { CrossChainSettlementLayer } from '../../../../types.js';
+/**
+ * Collects every distinct arbiter address that any chain in the registry
+ * has deployed for the given settlement layers. The resulting whitelist
+ * is what the Permit2 claim policy enforces on-chain — a session signed
+ * once with this whitelist is valid against any of those arbiters.
+ *
+ * **"Any" means any of the *supported* settlement layers**, not any
+ * address on earth. When `layers` is empty or undefined, this resolver
+ * expands to the union of every layer in
+ * {@link SETTLEMENT_LAYER_CONTRACT_KEYS}, so the on-chain arbiter check
+ * stays meaningful (the worst case is still a Rhinestone-blessed
+ * arbiter). To get a truly unrestricted whitelist a caller would have
+ * to bypass this helper entirely.
+ *
+ * @param layers   Settlement layers the session is permitted to use.
+ *                 Empty/undefined ⇒ all supported layers.
+ * @param useDevContracts  Pull from the dev address book instead of mainnet.
+ */
+export declare function getArbitersForSettlementLayers(layers: readonly CrossChainSettlementLayer[] | undefined, useDevContracts?: boolean): Address[] | undefined;
+//# sourceMappingURL=arbiters.d.ts.map

package/dist/src/modules/validators/policies/claim/arbiters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arbiters.d.ts","sourceRoot":"","sources":["../../../../../../modules/validators/policies/claim/arbiters.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAA;AAiBlE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,SAAS,yBAAyB,EAAE,GAAG,SAAS,EACxD,eAAe,CAAC,EAAE,OAAO,GACxB,OAAO,EAAE,GAAG,SAAS,CA8BvB"}

package/dist/src/modules/validators/policies/claim/arbiters.js

@@ -0,0 +1,57 @@
+import { contractAddresses, contractAddressesDev, } from '@rhinestone/shared-configs';
+/**
+ * The contract registry keys (per `shared-configs/contracts.{,dev}.js`)
+ * that each settlement layer expands to. `ACROSS` whitelists both arbiter
+ * impls so a session is permissioned for the 7579 and multicall paths
+ * regardless of which one the orchestrator picks at intent time.
+ */
+const SETTLEMENT_LAYER_CONTRACT_KEYS = {
+    SAME_CHAIN: ['samechainArbiter'],
+    ECO: ['ecoArbiter'],
+    ACROSS: ['across7579Arbiter', 'acrossMulticallArbiter'],
+};
+/**
+ * Collects every distinct arbiter address that any chain in the registry
+ * has deployed for the given settlement layers. The resulting whitelist
+ * is what the Permit2 claim policy enforces on-chain — a session signed
+ * once with this whitelist is valid against any of those arbiters.
+ *
+ * **"Any" means any of the *supported* settlement layers**, not any
+ * address on earth. When `layers` is empty or undefined, this resolver
+ * expands to the union of every layer in
+ * {@link SETTLEMENT_LAYER_CONTRACT_KEYS}, so the on-chain arbiter check
+ * stays meaningful (the worst case is still a Rhinestone-blessed
+ * arbiter). To get a truly unrestricted whitelist a caller would have
+ * to bypass this helper entirely.
+ *
+ * @param layers   Settlement layers the session is permitted to use.
+ *                 Empty/undefined ⇒ all supported layers.
+ * @param useDevContracts  Pull from the dev address book instead of mainnet.
+ */
+export function getArbitersForSettlementLayers(layers, useDevContracts) {
+    const effectiveLayers = !layers || layers.length === 0
+        ? Object.keys(SETTLEMENT_LAYER_CONTRACT_KEYS)
+        : layers;
+    const registry = useDevContracts ? contractAddressesDev : contractAddresses;
+    const keys = effectiveLayers.flatMap((l) => SETTLEMENT_LAYER_CONTRACT_KEYS[l]);
+    const seen = new Set();
+    const addresses = [];
+    // shared-configs is shaped Record<chainId, Record<contractKey, Address>>.
+    // The same logical arbiter often shares an address across chains, but a
+    // given key may also have multiple addresses live in the wild (e.g.
+    // post-redeploy). We collect every unique address we see for the keys
+    // the caller asked for, deduplicated case-insensitively.
+    for (const chainContracts of Object.values(registry)) {
+        for (const key of keys) {
+            const addr = chainContracts[key];
+            if (!addr)
+                continue;
+            const norm = addr.toLowerCase();
+            if (seen.has(norm))
+                continue;
+            seen.add(norm);
+            addresses.push(addr);
+        }
+    }
+    return addresses.length ? addresses : undefined;
+}

package/dist/src/modules/validators/smart-sessions.d.ts

@@ -2,7 +2,7 @@ import { type Abi, type Address, type Hex, type TypedDataDefinition } from 'viem
 import type { Permit2ClaimPolicy, Policy, ProviderConfig, ResolvedAction, ResolvedERC7739Policies, ResolvedPolicy, RhinestoneAccountConfig, RhinestoneConfig, Session, SessionDefinition, SessionEnableData } from '../../types.js';
 import { type Module } from '../common.js';
 import { SMART_SESSION_EMISSARY_ADDRESS, SMART_SESSION_EMISSARY_ADDRESS_DEV } from './core.js';
-import { type InternalPermit2ClaimPolicy } from './policies/claim/permit2.js';
+import { type InternalPermit2ClaimPolicy, type Permit2ClaimMessage } from './policies/claim/permit2.js';
 interface SessionData {
     sessionValidator: Address;
     sessionValidatorInitData: Hex;
@@ -153,9 +153,19 @@ declare const SPENDING_LIMITS_POLICY_ADDRESS: Address;
 declare const TIME_FRAME_POLICY_ADDRESS: Address;
 declare const SUDO_POLICY_ADDRESS: Address;
 declare const UNIVERSAL_ACTION_POLICY_ADDRESS: Address;
+declare const ARG_POLICY_ADDRESS: Address;
 declare const USAGE_LIMIT_POLICY_ADDRESS: Address;
 declare const VALUE_LIMIT_POLICY_ADDRESS: Address;
 declare const INTENT_EXECUTION_POLICY_ADDRESS: Address;
+interface ResolvedPolicyAddresses {
+    sudo: Address;
+    universalAction: Address;
+    argPolicy: Address;
+    spendingLimits: Address;
+    timeFrame: Address;
+    usageLimit: Address;
+    valueLimit: Address;
+}
 interface ResolvedSessionSignerSet {
     type: 'experimental_session';
     session: Session;
@@ -174,23 +184,42 @@ declare function getEnableSessionCall(account: Address, session: Session, enable
     to: `0x${string}`;
     data: `0x${string}`;
 }>;
+declare function getDisableSessionCall(account: Address, session: Session, expires: bigint, provider: ProviderConfig | undefined, useDevContracts?: boolean): Promise<{
+    to: `0x${string}`;
+    data: `0x${string}`;
+}>;
 declare function toSession<const TAbis extends readonly Abi[]>(definition: SessionDefinition<TAbis>, options?: {
     useDevContracts?: boolean;
 }): Session;
+/**
+ * Selects the claim policy whose constraints the given Permit2 message
+ * satisfies. With 0–1 policies the choice is trivial; with several, returns
+ * the first match in list order (aligns with the contract iterating its
+ * stored claim policies). Falls back to the first policy when nothing matches
+ * so behaviour is never worse than the previous always-`[0]` logic — the
+ * resulting on-chain failure is then identical to before.
+ */
+declare function selectPermit2ClaimPolicyForMessage(claimPolicies: readonly Permit2ClaimPolicy[], message: Permit2ClaimMessage): Permit2ClaimPolicy | undefined;
 declare function resolvePermit2ClaimPolicy(policy: Permit2ClaimPolicy): InternalPermit2ClaimPolicy;
 declare function getSessionData(session: Session): SessionData;
 declare function getPermissionId(session: Session): `0x${string}`;
-declare function getPolicyData(policy: Policy, useDevContracts?: boolean): PolicyData;
+declare function getPolicyData(policy: Policy, useDevContracts?: boolean, addresses?: ResolvedPolicyAddresses): PolicyData;
 declare function getSmartSessionValidator(config: RhinestoneConfig): Module | null;
 /**
  * Builds a mockSignature for SSX validation gas estimation.
- * Format: emissaryAddress (20 bytes) + enable-mode sigData.
- * Uses real session data (policies/actions from the user's session config) with dummy
- * sigs and hashes — the mock emissary skips sig verification and only writes storage.
- * The orchestrator slices off the first 20 bytes to identify the validator, then
- * simulates verifyExecution with the mock emissary to estimate gas before the user signs.
+ * Format: emissaryAddress (20 bytes) + packed sigData. Uses real session data
+ * (policies/actions from the user's session config) with dummy sigs and hashes —
+ * the mock emissary skips sig verification and only reads/writes storage. The
+ * orchestrator slices off the first 20 bytes to identify the validator, then
+ * picks the gas-simulation path from the bundle's declared `signatureMode`:
+ * `verifyExecution` for execution-emissary modes (ENABLE/USE), or
+ * `isValidSignatureWithSender` via `simulate_verify1271` for plain ERC-1271.
+ * The mode byte alone can't disambiguate USE from ERC-1271 (both are `0x00`),
+ * but `shape` is derived from the same resolved `verifyExecutions` that drives
+ * `signatureMode`, so the mock payload always matches the path that mode selects.
  */
-declare function buildMockSignature(session: Session, useDevContracts?: boolean, chainCount?: number, targetChainId?: number): Hex;
-export { SMART_SESSION_EMISSARY_ADDRESS, SMART_SESSION_EMISSARY_ADDRESS_DEV, SMART_SESSIONS_FALLBACK_TARGET_FLAG, SMART_SESSIONS_FALLBACK_TARGET_SELECTOR_FLAG, SMART_SESSIONS_FALLBACK_TARGET_SELECTOR_FLAG_PERMITTED_TO_CALL_SMARTSESSION, DUMMY_PRECLAIMOP_TARGET, DUMMY_PRECLAIMOP_SELECTOR, SPENDING_LIMITS_POLICY_ADDRESS, TIME_FRAME_POLICY_ADDRESS, SUDO_POLICY_ADDRESS, UNIVERSAL_ACTION_POLICY_ADDRESS, USAGE_LIMIT_POLICY_ADDRESS, VALUE_LIMIT_POLICY_ADDRESS, INTENT_EXECUTION_POLICY_ADDRESS, packSignature, toSession, resolvePermit2ClaimPolicy, getSessionData, getPolicyData, getEnableSessionCall, getPermissionId, getSmartSessionValidator, getSessionDetails, isSessionEnabled, signEnableSession, buildMockSignature, };
+type SmartSessionMockShape = 'enable' | 'use' | 'erc1271';
+declare function buildMockSignature(session: Session, useDevContracts?: boolean, chainCount?: number, targetChainId?: number, shape?: SmartSessionMockShape): Hex;
+export { SMART_SESSION_EMISSARY_ADDRESS, SMART_SESSION_EMISSARY_ADDRESS_DEV, SMART_SESSIONS_FALLBACK_TARGET_FLAG, SMART_SESSIONS_FALLBACK_TARGET_SELECTOR_FLAG, SMART_SESSIONS_FALLBACK_TARGET_SELECTOR_FLAG_PERMITTED_TO_CALL_SMARTSESSION, DUMMY_PRECLAIMOP_TARGET, DUMMY_PRECLAIMOP_SELECTOR, SPENDING_LIMITS_POLICY_ADDRESS, TIME_FRAME_POLICY_ADDRESS, SUDO_POLICY_ADDRESS, UNIVERSAL_ACTION_POLICY_ADDRESS, ARG_POLICY_ADDRESS, USAGE_LIMIT_POLICY_ADDRESS, VALUE_LIMIT_POLICY_ADDRESS, INTENT_EXECUTION_POLICY_ADDRESS, packSignature, toSession, resolvePermit2ClaimPolicy, selectPermit2ClaimPolicyForMessage, getSessionData, getPolicyData, getEnableSessionCall, getDisableSessionCall, getPermissionId, getSmartSessionValidator, getSessionDetails, isSessionEnabled, signEnableSession, buildMockSignature, };
 export type { ChainSession, ChainDigest, ResolvedSessionSignerSet, SessionData, SmartSessionModeType, SessionDetails, };
 //# sourceMappingURL=smart-sessions.d.ts.map

package/dist/src/modules/validators/smart-sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"smart-sessions.d.ts","sourceRoot":"","sources":["../../../../modules/validators/smart-sessions.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,GAAG,EACR,KAAK,OAAO,EAMZ,KAAK,GAAG,EAOR,KAAK,mBAAmB,EAKzB,MAAM,MAAM,CAAA;AAcb,OAAO,KAAK,EAEV,kBAAkB,EAClB,MAAM,EACN,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,uBAAuB,EACvB,gBAAgB,EAChB,OAAO,EACP,iBAAiB,EACjB,iBAAiB,EAElB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAA4B,KAAK,MAAM,EAAE,MAAM,WAAW,CAAA;AACjE,OAAO,EAGL,8BAA8B,EAC9B,kCAAkC,EACnC,MAAM,QAAQ,CAAA;AAEf,OAAO,EAEL,KAAK,0BAA0B,EAEhC,MAAM,0BAA0B,CAAA;AAQjC,UAAU,WAAW;IACnB,gBAAgB,EAAE,OAAO,CAAA;IACzB,wBAAwB,EAAE,GAAG,CAAA;IAC7B,IAAI,EAAE,GAAG,CAAA;IACT,eAAe,EAAE,uBAAuB,CAAA;IACxC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAA;IAClC,aAAa,EAAE,SAAS,cAAc,EAAE,CAAA;CACzC;AAED,KAAK,UAAU,GAAG,cAAc,CAAA;AAChC,KAAK,UAAU,GAAG,cAAc,CAAA;AAahC,KAAK,oBAAoB,GACrB,OAAO,sBAAsB,GAC7B,OAAO,yBAAyB,CAAA;AAEpC,UAAU,WAAW;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,GAAG,CAAA;CACnB;AAED,UAAU,iBAAiB;IACzB,mBAAmB,EAAE,OAAO,CAAA;IAC5B,iBAAiB,EAAE,OAAO,CAAA;IAC1B,0BAA0B,EAAE,OAAO,CAAA;IACnC,sBAAsB,EAAE,OAAO,CAAA;IAC/B,cAAc,EAAE,SAAS,UAAU,EAAE,CAAA;IACrC,eAAe,EAAE,WAAW,CAAA;IAC5B,OAAO,EAAE,SAAS,UAAU,EAAE,CAAA;CAC/B;AAED,UAAU,aAAa;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,gBAAgB,EAAE,OAAO,CAAA;IACzB,wBAAwB,EAAE,GAAG,CAAA;IAC7B,IAAI,EAAE,GAAG,CAAA;IACT,YAAY,EAAE,OAAO,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,UAAU,YAAY;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,UAAU,WAAW;IACnB,qBAAqB,EAAE,SAAS,cAAc,EAAE,CAAA;IAChD,eAAe,EAAE,SAAS,UAAU,EAAE,CAAA;CACvC;AAED,UAAU,cAAc;IACtB,kBAAkB,EAAE,GAAG,CAAA;IACvB,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;CAC/B;AAED,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,iBAAiB,EAAE,WAAW,EAAE,CAAA;IAChC,IAAI,EAAE,mBAAmB,CAAC,OAAO,KAAK,EAAE,mBAAmB,CAAC,CAAA;CAC7D;AAED,QAAA,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2CD,CAAA;AAEV,QAAA,MAAM,sBAAsB,SAAS,CAAA;AACrC,QAAA,MAAM,yBAAyB,SAAS,CAAA;AAExC,QAAA,MAAM,mCAAmC,EAAE,OACG,CAAA;AAC9C,QAAA,MAAM,4CAA4C,EAAE,GAAkB,CAAA;AACtE,QAAA,MAAM,2EAA2E,EAAE,GACrE,CAAA;AAOd,QAAA,MAAM,uBAAuB,EAAE,OACe,CAAA;AAC9C,QAAA,MAAM,yBAAyB,EAAE,GAAkB,CAAA;AAEnD,QAAA,MAAM,8BAA8B,EAAE,OACQ,CAAA;AAC9C,QAAA,MAAM,yBAAyB,EAAE,OACa,CAAA;AAC9C,QAAA,MAAM,mBAAmB,EAAE,OACmB,CAAA;AAC9C,QAAA,MAAM,+BAA+B,EAAE,OACO,CAAA;AAC9C,QAAA,MAAM,0BAA0B,EAAE,OACY,CAAA;AAC9C,QAAA,MAAM,0BAA0B,EAAE,OACY,CAAA;AAC9C,QAAA,MAAM,+BAA+B,EAAE,OACO,CAAA;AAY9C,UAAU,wBAAwB;IAChC,IAAI,EAAE,sBAAsB,CAAA;IAC5B,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,gBAAgB,EAAE,OAAO,CAAA;IACzB,eAAe,CAAC,EAAE,GAAG,CAAA;CACtB;AAED,iBAAS,aAAa,CACpB,OAAO,EAAE,wBAAwB,EACjC,kBAAkB,EAAE,GAAG,GACtB,GAAG,CA4JL;AAED,iBAAe,iBAAiB,CAC9B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,OAAO,EAAE,EACnB,QAAQ,EAAE,cAAc,GAAG,SAAS,EACpC,eAAe,CAAC,EAAE,OAAO,GACxB,OAAO,CAAC,cAAc,CAAC,CA+CzB;AAED,iBAAe,gBAAgB,CAC7B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,GAAG,SAAS,EACpC,OAAO,EAAE,OAAO,EAChB,eAAe,CAAC,EAAE,OAAO,GACxB,OAAO,CAAC,OAAO,CAAC,CAuBlB;AAED,iBAAe,iBAAiB,CAC9B,MAAM,EAAE,uBAAuB,EAC/B,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,GAAG,CAAC,CAyBd;AAwED,iBAAe,oBAAoB,CACjC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,sBAAsB,EAAE,GAAG,EAC3B,iBAAiB,EAAE;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,GAAG,CAAA;CACnB,EAAE,EACH,oBAAoB,EAAE,MAAM,EAC5B,eAAe,CAAC,EAAE,OAAO;;;GA8B1B;AAED,iBAAS,SAAS,CAAC,KAAK,CAAC,KAAK,SAAS,SAAS,GAAG,EAAE,EACnD,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC,EACpC,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1C,OAAO,CAcT;AAED,iBAAS,yBAAyB,CAChC,MAAM,EAAE,kBAAkB,GACzB,0BAA0B,CAwB5B;AAkGD,iBAAS,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CAcrD;AAED,iBAAS,eAAe,CAAC,OAAO,EAAE,OAAO,iBAExC;AA4BD,iBAAS,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,OAAO,GAAG,UAAU,CA0K5E;AAED,iBAAS,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAezE;AAQD;;;;;;;GAOG;AACH,iBAAS,kBAAkB,CACzB,OAAO,EAAE,OAAO,EAChB,eAAe,CAAC,EAAE,OAAO,EACzB,UAAU,GAAE,MAAU,EACtB,aAAa,CAAC,EAAE,MAAM,GACrB,GAAG,CAgCL;AASD,OAAO,EACL,8BAA8B,EAC9B,kCAAkC,EAClC,mCAAmC,EACnC,4CAA4C,EAC5C,2EAA2E,EAC3E,uBAAuB,EACvB,yBAAyB,EACzB,8BAA8B,EAC9B,yBAAyB,EACzB,mBAAmB,EACnB,+BAA+B,EAC/B,0BAA0B,EAC1B,0BAA0B,EAC1B,+BAA+B,EAC/B,aAAa,EACb,SAAS,EACT,yBAAyB,EACzB,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,GACnB,CAAA;AACD,YAAY,EACV,YAAY,EACZ,WAAW,EACX,wBAAwB,EACxB,WAAW,EACX,oBAAoB,EACpB,cAAc,GACf,CAAA"}
+{"version":3,"file":"smart-sessions.d.ts","sourceRoot":"","sources":["../../../../modules/validators/smart-sessions.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,GAAG,EACR,KAAK,OAAO,EAMZ,KAAK,GAAG,EAQR,KAAK,mBAAmB,EAKzB,MAAM,MAAM,CAAA;AAcb,OAAO,KAAK,EAIV,kBAAkB,EAClB,MAAM,EACN,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,uBAAuB,EACvB,gBAAgB,EAChB,OAAO,EACP,iBAAiB,EACjB,iBAAiB,EAGlB,MAAM,aAAa,CAAA;AAEpB,OAAO,EAA4B,KAAK,MAAM,EAAE,MAAM,WAAW,CAAA;AACjE,OAAO,EAIL,8BAA8B,EAC9B,kCAAkC,EACnC,MAAM,QAAQ,CAAA;AAIf,OAAO,EAEL,KAAK,0BAA0B,EAE/B,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAA;AAQjC,UAAU,WAAW;IACnB,gBAAgB,EAAE,OAAO,CAAA;IACzB,wBAAwB,EAAE,GAAG,CAAA;IAC7B,IAAI,EAAE,GAAG,CAAA;IACT,eAAe,EAAE,uBAAuB,CAAA;IACxC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAA;IAClC,aAAa,EAAE,SAAS,cAAc,EAAE,CAAA;CACzC;AAED,KAAK,UAAU,GAAG,cAAc,CAAA;AAChC,KAAK,UAAU,GAAG,cAAc,CAAA;AAahC,KAAK,oBAAoB,GACrB,OAAO,sBAAsB,GAC7B,OAAO,yBAAyB,CAAA;AAEpC,UAAU,WAAW;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,GAAG,CAAA;CACnB;AAED,UAAU,iBAAiB;IACzB,mBAAmB,EAAE,OAAO,CAAA;IAC5B,iBAAiB,EAAE,OAAO,CAAA;IAC1B,0BAA0B,EAAE,OAAO,CAAA;IACnC,sBAAsB,EAAE,OAAO,CAAA;IAC/B,cAAc,EAAE,SAAS,UAAU,EAAE,CAAA;IACrC,eAAe,EAAE,WAAW,CAAA;IAC5B,OAAO,EAAE,SAAS,UAAU,EAAE,CAAA;CAC/B;AAED,UAAU,aAAa;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,gBAAgB,EAAE,OAAO,CAAA;IACzB,wBAAwB,EAAE,GAAG,CAAA;IAC7B,IAAI,EAAE,GAAG,CAAA;IACT,YAAY,EAAE,OAAO,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,UAAU,YAAY;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,UAAU,WAAW;IACnB,qBAAqB,EAAE,SAAS,cAAc,EAAE,CAAA;IAChD,eAAe,EAAE,SAAS,UAAU,EAAE,CAAA;CACvC;AAED,UAAU,cAAc;IACtB,kBAAkB,EAAE,GAAG,CAAA;IACvB,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;CAC/B;AAED,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,iBAAiB,EAAE,WAAW,EAAE,CAAA;IAChC,IAAI,EAAE,mBAAmB,CAAC,OAAO,KAAK,EAAE,mBAAmB,CAAC,CAAA;CAC7D;AAED,QAAA,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2CD,CAAA;AAEV,QAAA,MAAM,sBAAsB,SAAS,CAAA;AACrC,QAAA,MAAM,yBAAyB,SAAS,CAAA;AAExC,QAAA,MAAM,mCAAmC,EAAE,OACG,CAAA;AAC9C,QAAA,MAAM,4CAA4C,EAAE,GAAkB,CAAA;AACtE,QAAA,MAAM,2EAA2E,EAAE,GACrE,CAAA;AAOd,QAAA,MAAM,uBAAuB,EAAE,OACe,CAAA;AAC9C,QAAA,MAAM,yBAAyB,EAAE,GAAkB,CAAA;AAEnD,QAAA,MAAM,8BAA8B,EAAE,OACQ,CAAA;AAC9C,QAAA,MAAM,yBAAyB,EAAE,OACa,CAAA;AAC9C,QAAA,MAAM,mBAAmB,EAAE,OACmB,CAAA;AAC9C,QAAA,MAAM,+BAA+B,EAAE,OACO,CAAA;AAC9C,QAAA,MAAM,kBAAkB,EAAE,OAAsD,CAAA;AAChF,QAAA,MAAM,0BAA0B,EAAE,OACY,CAAA;AAC9C,QAAA,MAAM,0BAA0B,EAAE,OACY,CAAA;AAC9C,QAAA,MAAM,+BAA+B,EAAE,OACO,CAAA;AA+B9C,UAAU,uBAAuB;IAC/B,IAAI,EAAE,OAAO,CAAA;IACb,eAAe,EAAE,OAAO,CAAA;IACxB,SAAS,EAAE,OAAO,CAAA;IAClB,cAAc,EAAE,OAAO,CAAA;IACvB,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,OAAO,CAAA;IACnB,UAAU,EAAE,OAAO,CAAA;CACpB;AA6BD,UAAU,wBAAwB;IAChC,IAAI,EAAE,sBAAsB,CAAA;IAC5B,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,gBAAgB,EAAE,OAAO,CAAA;IACzB,eAAe,CAAC,EAAE,GAAG,CAAA;CACtB;AAED,iBAAS,aAAa,CACpB,OAAO,EAAE,wBAAwB,EACjC,kBAAkB,EAAE,GAAG,GACtB,GAAG,CA4JL;AAED,iBAAe,iBAAiB,CAC9B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,OAAO,EAAE,EACnB,QAAQ,EAAE,cAAc,GAAG,SAAS,EACpC,eAAe,CAAC,EAAE,OAAO,GACxB,OAAO,CAAC,cAAc,CAAC,CA+CzB;AAED,iBAAe,gBAAgB,CAC7B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,GAAG,SAAS,EACpC,OAAO,EAAE,OAAO,EAChB,eAAe,CAAC,EAAE,OAAO,GACxB,OAAO,CAAC,OAAO,CAAC,CAuBlB;AAED,iBAAe,iBAAiB,CAC9B,MAAM,EAAE,uBAAuB,EAC/B,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,GAAG,CAAC,CAyBd;AAwED,iBAAe,oBAAoB,CACjC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,sBAAsB,EAAE,GAAG,EAC3B,iBAAiB,EAAE;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,GAAG,CAAA;CACnB,EAAE,EACH,oBAAoB,EAAE,MAAM,EAC5B,eAAe,CAAC,EAAE,OAAO;;;GA8B1B;AAgBD,iBAAe,qBAAqB,CAClC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,cAAc,GAAG,SAAS,EACpC,eAAe,CAAC,EAAE,OAAO;;;GA6D1B;AAED,iBAAS,SAAS,CAAC,KAAK,CAAC,KAAK,SAAS,SAAS,GAAG,EAAE,EACnD,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC,EACpC,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1C,OAAO,CA8BT;AA+LD;;;;;;;GAOG;AACH,iBAAS,kCAAkC,CACzC,aAAa,EAAE,SAAS,kBAAkB,EAAE,EAC5C,OAAO,EAAE,mBAAmB,GAC3B,kBAAkB,GAAG,SAAS,CAMhC;AAED,iBAAS,yBAAyB,CAChC,MAAM,EAAE,kBAAkB,GACzB,0BAA0B,CAwB5B;AA4ID,iBAAS,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CAcrD;AAED,iBAAS,eAAe,CAAC,OAAO,EAAE,OAAO,iBAExC;AAoID,iBAAS,aAAa,CACpB,MAAM,EAAE,MAAM,EACd,eAAe,CAAC,EAAE,OAAO,EACzB,SAAS,GAAE,uBAAkD,GAC5D,UAAU,CAmMZ;AAED,iBAAS,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAezE;AAQD;;;;;;;;;;;;GAYG;AAUH,KAAK,qBAAqB,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAA;AAEzD,iBAAS,kBAAkB,CACzB,OAAO,EAAE,OAAO,EAChB,eAAe,CAAC,EAAE,OAAO,EACzB,UAAU,GAAE,MAAU,EACtB,aAAa,CAAC,EAAE,MAAM,EAEtB,KAAK,GAAE,qBAAgC,GACtC,GAAG,CAiDL;AASD,OAAO,EACL,8BAA8B,EAC9B,kCAAkC,EAClC,mCAAmC,EACnC,4CAA4C,EAC5C,2EAA2E,EAC3E,uBAAuB,EACvB,yBAAyB,EACzB,8BAA8B,EAC9B,yBAAyB,EACzB,mBAAmB,EACnB,+BAA+B,EAC/B,kBAAkB,EAClB,0BAA0B,EAC1B,0BAA0B,EAC1B,+BAA+B,EAC/B,aAAa,EACb,SAAS,EACT,yBAAyB,EACzB,kCAAkC,EAClC,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,GACnB,CAAA;AACD,YAAY,EACV,YAAY,EACZ,WAAW,EACX,wBAAwB,EACxB,WAAW,EACX,oBAAoB,EACpB,cAAc,GACf,CAAA"}