@rhinestone/sdk 2.0.0-beta.9 → 2.1.0

package/dist/src/modules/validators/smart-sessions/calls.d.ts

@@ -0,0 +1,19 @@
+import { type Address, type Hex } from 'viem';
+import type { Call } from '../../../calls/types.js';
+import type { ChainDigest, Session } from './types.js';
+export declare function encodeEnableSessionCall(input: {
+    readonly account: Address;
+    readonly session: Session;
+    readonly userSignature: Hex;
+    readonly hashesAndChainIds: readonly ChainDigest[];
+    readonly sessionToEnableIndex: number;
+    readonly environment: 'production' | 'development';
+}): Call;
+export declare function encodeDisableSessionCall(input: {
+    readonly account: Address;
+    readonly session: Session;
+    readonly expires: bigint;
+    readonly nonce: bigint;
+    readonly environment: 'production' | 'development';
+}): Call;
+//# sourceMappingURL=calls.d.ts.map

package/dist/src/modules/validators/smart-sessions/calls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calls.d.ts","sourceRoot":"","sources":["../../../../../modules/validators/smart-sessions/calls.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,OAAO,EAGZ,KAAK,GAAG,EAKT,MAAM,MAAM,CAAA;AACb,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAKhD,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAgBnD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAA;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,WAAW,EAAE,CAAA;IAClD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,WAAW,EAAE,YAAY,GAAG,aAAa,CAAA;CACnD,GAAG,IAAI,CAwBP;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,YAAY,GAAG,aAAa,CAAA;CACnD,GAAG,IAAI,CAgDP"}

package/dist/src/modules/validators/smart-sessions/calls.js

@@ -0,0 +1,85 @@
+import { encodeAbiParameters, encodeFunctionData, keccak256, maxUint256, zeroAddress, zeroHash, } from 'viem';
+import smartSessionEmissaryAbi from '../../abi/smart-session-emissary.js';
+import { SESSION_LOCK_TAG } from './authorization.js';
+import { getPermissionId, getSessionData } from './digest.js';
+import { getSmartSessionEmissaryAddress } from './module.js';
+const SCOPE_MULTICHAIN = 0;
+const RESET_PERIOD_ONE_WEEK = 6;
+const SIGNED_PERMISSION_DISABLE_TYPEHASH = '0x098b3120e60a8adc9d970dec9c1f8796974a3ab6154f995ad56ee7b9a38d8836';
+function config(permissionId) {
+    return {
+        scope: SCOPE_MULTICHAIN,
+        resetPeriod: RESET_PERIOD_ONE_WEEK,
+        allocator: zeroAddress,
+        permissionId,
+    };
+}
+export function encodeEnableSessionCall(input) {
+    const permissionId = getPermissionId(input.session);
+    return {
+        target: getSmartSessionEmissaryAddress(input.environment),
+        value: 0n,
+        data: encodeFunctionData({
+            abi: smartSessionEmissaryAbi,
+            functionName: 'setConfig',
+            args: [
+                input.account,
+                config(permissionId),
+                {
+                    allocatorSig: zeroHash,
+                    userSig: input.userSignature,
+                    expires: maxUint256,
+                    session: {
+                        chainDigestIndex: input.sessionToEnableIndex,
+                        hashesAndChainIds: [...input.hashesAndChainIds],
+                        sessionToEnable: getSessionData(input.session),
+                    },
+                },
+            ],
+        }),
+    };
+}
+export function encodeDisableSessionCall(input) {
+    const permissionId = getPermissionId(input.session);
+    const disableDigest = keccak256(encodeAbiParameters([
+        { type: 'bytes32' },
+        { type: 'address' },
+        { type: 'bytes32' },
+        { type: 'bytes12' },
+        { type: 'uint256' },
+        { type: 'uint256' },
+    ], [
+        SIGNED_PERMISSION_DISABLE_TYPEHASH,
+        input.account,
+        permissionId,
+        SESSION_LOCK_TAG,
+        input.expires,
+        input.nonce,
+    ]));
+    return {
+        target: getSmartSessionEmissaryAddress(input.environment),
+        value: 0n,
+        data: encodeFunctionData({
+            abi: smartSessionEmissaryAbi,
+            functionName: 'removeConfig',
+            args: [
+                input.account,
+                config(permissionId),
+                {
+                    allocatorSig: '0x',
+                    userSig: '0x',
+                    expires: input.expires,
+                    session: {
+                        chainDigestIndex: 0,
+                        hashesAndChainIds: [
+                            {
+                                chainId: BigInt(input.session.chain.id),
+                                sessionDigest: disableDigest,
+                            },
+                        ],
+                    },
+                },
+            ],
+        }),
+    };
+}

package/dist/src/modules/validators/smart-sessions/cross-chain-permits.d.ts

@@ -0,0 +1,4 @@
+import type { CrossChainPermissionInput, CrossChainPermit } from './types.js';
+export declare function resolveCrossChainPermission(input: CrossChainPermissionInput): CrossChainPermit;
+export declare function toCrossChainPermissionInput(permit: CrossChainPermit): CrossChainPermissionInput;
+//# sourceMappingURL=cross-chain-permits.d.ts.map

package/dist/src/modules/validators/smart-sessions/cross-chain-permits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-chain-permits.d.ts","sourceRoot":"","sources":["../../../../../modules/validators/smart-sessions/cross-chain-permits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAgB1E,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,yBAAyB,GAC/B,gBAAgB,CAyClB;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,gBAAgB,GACvB,yBAAyB,CA2B3B"}

package/dist/src/modules/validators/smart-sessions/cross-chain-permits.js

@@ -0,0 +1,77 @@
+function seconds(input) {
+    return BigInt(Math.floor(input.getTime() / 1000));
+}
+function normalizeLegs(legs) {
+    if (legs === undefined)
+        return undefined;
+    const values = Array.isArray(legs) ? legs : [legs];
+    return values.length === 0 ? undefined : values;
+}
+// Token fields are per-chain ERC-20 addresses (v2 no longer accepts symbols),
+// so legs pass through directly; only the `Date` bounds are converted.
+export function resolveCrossChainPermission(input) {
+    const from = normalizeLegs(input.from)?.map((leg) => ({
+        chain: leg.chain,
+        token: leg.token,
+        ...(leg.maxAmount === undefined ? {} : { maxAmount: leg.maxAmount }),
+    }));
+    const to = normalizeLegs(input.to)?.map((leg) => ({
+        chain: leg.chain,
+        token: leg.token,
+        ...(leg.recipient === undefined ? {} : { recipient: leg.recipient }),
+    }));
+    const validUntil = input.validUntil ? seconds(input.validUntil) : undefined;
+    const validAfter = input.validAfter ? seconds(input.validAfter) : undefined;
+    if (validUntil !== undefined &&
+        validAfter !== undefined &&
+        validAfter > validUntil) {
+        throw new Error(`crossChainPermits: validAfter (${validAfter}) is greater than validUntil (${validUntil})`);
+    }
+    return {
+        ...(from ? { from } : {}),
+        ...(to ? { to } : {}),
+        ...(validUntil === undefined ? {} : { validUntil }),
+        ...(validAfter === undefined ? {} : { validAfter }),
+        ...(input.fillDeadline
+            ? {
+                fillDeadline: input.fillDeadline.map(({ chain, min, max }) => ({
+                    chain,
+                    ...(min ? { min: seconds(min) } : {}),
+                    ...(max ? { max: seconds(max) } : {}),
+                })),
+            }
+            : {}),
+        recipientIsAccount: !input.allowRecipientNotAccount,
+        ...(input.settlementLayers
+            ? { settlementLayers: input.settlementLayers }
+            : {}),
+    };
+}
+export function toCrossChainPermissionInput(permit) {
+    const date = (value) => new Date(Number(value) * 1000);
+    return {
+        ...(permit.from ? { from: permit.from } : {}),
+        ...(permit.to ? { to: permit.to } : {}),
+        ...(permit.validUntil === undefined
+            ? {}
+            : { validUntil: date(permit.validUntil) }),
+        ...(permit.validAfter === undefined
+            ? {}
+            : { validAfter: date(permit.validAfter) }),
+        ...(permit.fillDeadline
+            ? {
+                fillDeadline: permit.fillDeadline.map(({ chain, min, max }) => ({
+                    chain,
+                    ...(min === undefined ? {} : { min: date(min) }),
+                    ...(max === undefined ? {} : { max: date(max) }),
+                })),
+            }
+            : {}),
+        ...(permit.recipientIsAccount === undefined
+            ? {}
+            : { allowRecipientNotAccount: !permit.recipientIsAccount }),
+        ...(permit.settlementLayers
+            ? { settlementLayers: permit.settlementLayers }
+            : {}),
+    };
+}

package/dist/src/modules/validators/smart-sessions/digest.d.ts

@@ -0,0 +1,5 @@
+import type { Session, SessionData } from './types.js';
+export declare function getPermissionIdFromData(session: SessionData): `0x${string}`;
+export declare function getSessionData(session: Session): SessionData;
+export declare function getPermissionId(session: Session): `0x${string}`;
+//# sourceMappingURL=digest.d.ts.map

package/dist/src/modules/validators/smart-sessions/digest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.d.ts","sourceRoot":"","sources":["../../../../../modules/validators/smart-sessions/digest.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAEnD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,WAAW,GAAG,KAAK,MAAM,EAAE,CAe3E;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CAc5D;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,KAAK,MAAM,EAAE,CAE/D"}

package/dist/src/modules/validators/smart-sessions/digest.js

@@ -0,0 +1,30 @@
+import { encodeAbiParameters, keccak256 } from 'viem';
+import { encodePermit2ClaimPolicyInitData, PERMIT2_CLAIM_POLICY_ADDRESS, } from '../policies/claim/permit2.js';
+import { resolvePermit2ClaimPolicy } from './policies/claim.js';
+export function getPermissionIdFromData(session) {
+    return keccak256(encodeAbiParameters([
+        { type: 'address', name: 'sessionValidator' },
+        { type: 'bytes', name: 'sessionValidatorInitData' },
+        { type: 'bytes32', name: 'salt' },
+    ], [
+        session.sessionValidator,
+        session.sessionValidatorInitData,
+        session.salt,
+    ]));
+}
+export function getSessionData(session) {
+    return {
+        sessionValidator: session.sessionValidator,
+        sessionValidatorInitData: session.sessionValidatorInitData,
+        salt: session.salt,
+        erc7739Policies: session.erc7739Policies,
+        actions: session.actions,
+        claimPolicies: session.claimPolicies.map((policy) => ({
+            policy: PERMIT2_CLAIM_POLICY_ADDRESS,
+            initData: encodePermit2ClaimPolicyInitData(resolvePermit2ClaimPolicy(policy)),
+        })),
+    };
+}
+export function getPermissionId(session) {
+    return session.permissionId;
+}

package/dist/src/modules/validators/smart-sessions/mock-signature.d.ts

@@ -0,0 +1,10 @@
+import { type Hex } from 'viem';
+import type { Session, SmartSessionMockShape } from './types.js';
+export declare function buildSmartSessionMockSignature(input: {
+    readonly session: Session;
+    readonly environment: 'production' | 'development';
+    readonly chainCount?: number;
+    readonly targetChainId?: number;
+    readonly shape?: SmartSessionMockShape;
+}): Hex;
+//# sourceMappingURL=mock-signature.d.ts.map

package/dist/src/modules/validators/smart-sessions/mock-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-signature.d.ts","sourceRoot":"","sources":["../../../../../modules/validators/smart-sessions/mock-signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,GAAG,EAAY,MAAM,MAAM,CAAA;AAGjD,OAAO,KAAK,EAEV,OAAO,EAEP,qBAAqB,EACtB,MAAM,SAAS,CAAA;AAEhB,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,YAAY,GAAG,aAAa,CAAA;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,qBAAqB,CAAA;CACvC,GAAG,GAAG,CA4BN"}

package/dist/src/modules/validators/smart-sessions/mock-signature.js

@@ -0,0 +1,31 @@
+import { concat, zeroHash } from 'viem';
+import { getSmartSessionEmissaryAddress } from './module.js';
+import { encodeSmartSessionSignature } from './signature.js';
+export function buildSmartSessionMockSignature(input) {
+    const shape = input.shape ?? 'enable';
+    let enableData;
+    if (shape === 'enable') {
+        const chainCount = Number.isFinite(input.chainCount) && (input.chainCount ?? 0) > 0
+            ? Math.floor(input.chainCount)
+            : 1;
+        const primaryChainId = input.targetChainId ?? input.session.chain.id;
+        enableData = {
+            userSignature: `0x${'00'.repeat(65)}`,
+            hashesAndChainIds: Array.from({ length: chainCount }, (_, index) => ({
+                chainId: index === 0 ? BigInt(primaryChainId) : 0n,
+                sessionDigest: zeroHash,
+            })),
+            sessionToEnableIndex: 0,
+        };
+    }
+    const signers = {
+        kind: 'smart-session',
+        session: input.session,
+        verifyExecutions: shape !== 'erc1271',
+        ...(enableData ? { enableData } : {}),
+    };
+    return concat([
+        getSmartSessionEmissaryAddress(input.environment),
+        encodeSmartSessionSignature(signers, `0x${'00'.repeat(65)}`),
+    ]);
+}

package/dist/src/modules/validators/smart-sessions/module.d.ts

@@ -0,0 +1,11 @@
+import type { Address } from 'viem';
+import type { ResolvedModule } from '../../types.js';
+export declare const SMART_SESSION_EMISSARY_ADDRESS: Address;
+export declare const SMART_SESSION_EMISSARY_ADDRESS_DEV: Address;
+export declare function getSmartSessionEmissaryAddress(environment: 'production' | 'development'): Address;
+export declare function resolveSmartSessionModule(input: {
+    readonly enabled: boolean;
+    readonly address?: Address;
+    readonly environment: 'production' | 'development';
+}): ResolvedModule | undefined;
+//# sourceMappingURL=module.d.ts.map

package/dist/src/modules/validators/smart-sessions/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../modules/validators/smart-sessions/module.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,eAAO,MAAM,8BAA8B,EAAE,OACC,CAAA;AAC9C,eAAO,MAAM,kCAAkC,EAAE,OACH,CAAA;AAE9C,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,YAAY,GAAG,aAAa,GACxC,OAAO,CAIT;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,YAAY,GAAG,aAAa,CAAA;CACnD,GAAG,cAAc,GAAG,SAAS,CAS7B"}

package/dist/src/modules/validators/smart-sessions/module.js

@@ -0,0 +1,18 @@
+export const SMART_SESSION_EMISSARY_ADDRESS = '0xad568b3f825a8d5ffc06dd3253526b64d810ae89';
+export const SMART_SESSION_EMISSARY_ADDRESS_DEV = '0x60731de80d78548875f8a67c4fec2a8660194e0c';
+export function getSmartSessionEmissaryAddress(environment) {
+    return environment === 'development'
+        ? SMART_SESSION_EMISSARY_ADDRESS_DEV
+        : SMART_SESSION_EMISSARY_ADDRESS;
+}
+export function resolveSmartSessionModule(input) {
+    if (!input.enabled)
+        return undefined;
+    return {
+        kind: 'validator',
+        address: input.address ?? getSmartSessionEmissaryAddress(input.environment),
+        initData: '0x',
+        deInitData: '0x',
+        additionalContext: '0x',
+    };
+}

package/dist/src/modules/validators/smart-sessions/policies/addresses.d.ts

@@ -0,0 +1,23 @@
+import type { Address } from 'viem';
+import type { SessionPolicyAddresses } from '../types.js';
+export declare const SPENDING_LIMITS_POLICY_ADDRESS: Address;
+export declare const TIME_FRAME_POLICY_ADDRESS: Address;
+export declare const SUDO_POLICY_ADDRESS: Address;
+export declare const UNIVERSAL_ACTION_POLICY_ADDRESS: Address;
+export declare const ARG_POLICY_ADDRESS: Address;
+export declare const USAGE_LIMIT_POLICY_ADDRESS: Address;
+export declare const VALUE_LIMIT_POLICY_ADDRESS: Address;
+export declare const INTENT_EXECUTION_POLICY_ADDRESS: Address;
+export declare const INTENT_EXECUTION_POLICY_ADDRESS_DEV: Address;
+export interface ResolvedPolicyAddresses {
+    readonly sudo: Address;
+    readonly universalAction: Address;
+    readonly argPolicy: Address;
+    readonly spendingLimits: Address;
+    readonly timeFrame: Address;
+    readonly usageLimit: Address;
+    readonly valueLimit: Address;
+}
+export declare const DEFAULT_POLICY_ADDRESSES: ResolvedPolicyAddresses;
+export declare function resolvePolicyAddresses(overrides?: SessionPolicyAddresses): ResolvedPolicyAddresses;
+//# sourceMappingURL=addresses.d.ts.map

package/dist/src/modules/validators/smart-sessions/policies/addresses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addresses.d.ts","sourceRoot":"","sources":["../../../../../../modules/validators/smart-sessions/policies/addresses.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AAEtD,eAAO,MAAM,8BAA8B,EAAE,OACC,CAAA;AAC9C,eAAO,MAAM,yBAAyB,EAAE,OACM,CAAA;AAC9C,eAAO,MAAM,mBAAmB,EAAE,OACY,CAAA;AAC9C,eAAO,MAAM,+BAA+B,EAAE,OACA,CAAA;AAC9C,eAAO,MAAM,kBAAkB,EAAE,OACa,CAAA;AAC9C,eAAO,MAAM,0BAA0B,EAAE,OACK,CAAA;AAC9C,eAAO,MAAM,0BAA0B,EAAE,OACK,CAAA;AAC9C,eAAO,MAAM,+BAA+B,EAAE,OACA,CAAA;AAC9C,eAAO,MAAM,mCAAmC,EAAE,OACJ,CAAA;AAE9C,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;CAC7B;AAED,eAAO,MAAM,wBAAwB,EAAE,uBAQrC,CAAA;AAEF,wBAAgB,sBAAsB,CACpC,SAAS,CAAC,EAAE,sBAAsB,GACjC,uBAAuB,CAYzB"}

package/dist/src/modules/validators/smart-sessions/policies/addresses.js

@@ -0,0 +1,29 @@
+export const SPENDING_LIMITS_POLICY_ADDRESS = '0x000000000033212E272655D8a22402Db819477A6';
+export const TIME_FRAME_POLICY_ADDRESS = '0x0000000000D30f611fA3bf652ac6879428586930';
+export const SUDO_POLICY_ADDRESS = '0x0000000000FEEc8D74e3143fBaBbca515358d869';
+export const UNIVERSAL_ACTION_POLICY_ADDRESS = '0x0000000000714Cf48FcF88A0bFBa70d313415032';
+export const ARG_POLICY_ADDRESS = '0x0000000000167edE64D8751daACDdC0312565a73';
+export const USAGE_LIMIT_POLICY_ADDRESS = '0x00000000001d4479FA2A947026204d0283ceDe4B';
+export const VALUE_LIMIT_POLICY_ADDRESS = '0x000000000021dC45451291BCDfc9f0B46d6f0278';
+export const INTENT_EXECUTION_POLICY_ADDRESS = '0xe9eA54d063975cDee9e06b7636d5563d95a7A23C';
+export const INTENT_EXECUTION_POLICY_ADDRESS_DEV = '0xa09b47de6e510cbdc18b97e9239bedcb44fb4901';
+export const DEFAULT_POLICY_ADDRESSES = Object.freeze({
+    sudo: SUDO_POLICY_ADDRESS,
+    universalAction: UNIVERSAL_ACTION_POLICY_ADDRESS,
+    argPolicy: ARG_POLICY_ADDRESS,
+    spendingLimits: SPENDING_LIMITS_POLICY_ADDRESS,
+    timeFrame: TIME_FRAME_POLICY_ADDRESS,
+    usageLimit: USAGE_LIMIT_POLICY_ADDRESS,
+    valueLimit: VALUE_LIMIT_POLICY_ADDRESS,
+});
+export function resolvePolicyAddresses(overrides) {
+    return {
+        sudo: overrides?.sudo ?? DEFAULT_POLICY_ADDRESSES.sudo,
+        universalAction: overrides?.universalAction ?? DEFAULT_POLICY_ADDRESSES.universalAction,
+        argPolicy: overrides?.argPolicy ?? DEFAULT_POLICY_ADDRESSES.argPolicy,
+        spendingLimits: overrides?.spendingLimits ?? DEFAULT_POLICY_ADDRESSES.spendingLimits,
+        timeFrame: overrides?.timeFrame ?? DEFAULT_POLICY_ADDRESSES.timeFrame,
+        usageLimit: overrides?.usageLimit ?? DEFAULT_POLICY_ADDRESSES.usageLimit,
+        valueLimit: overrides?.valueLimit ?? DEFAULT_POLICY_ADDRESSES.valueLimit,
+    };
+}

package/dist/src/modules/validators/smart-sessions/policies/claim.d.ts

@@ -0,0 +1,10 @@
+import type { InternalPermit2ClaimPolicy, Permit2ClaimMessage } from '../../policies/claim/permit2.js';
+import type { CrossChainPermit, Permit2ClaimPolicy, SessionPolicy } from '../types.js';
+export declare function expandCrossChainPermit(permit: CrossChainPermit, environment: 'production' | 'development'): {
+    readonly claim: Permit2ClaimPolicy;
+    readonly fallbackPolicies: readonly SessionPolicy[];
+};
+export declare function permit2ClaimPolicyMatchesMessage(policy: Permit2ClaimPolicy, message: Permit2ClaimMessage): boolean;
+export declare function selectPermit2ClaimPolicyForMessage(policies: readonly Permit2ClaimPolicy[], message: Permit2ClaimMessage): Permit2ClaimPolicy | undefined;
+export declare function resolvePermit2ClaimPolicy(policy: Permit2ClaimPolicy): InternalPermit2ClaimPolicy;
+//# sourceMappingURL=claim.d.ts.map

package/dist/src/modules/validators/smart-sessions/policies/claim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim.d.ts","sourceRoot":"","sources":["../../../../../../modules/validators/smart-sessions/policies/claim.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACd,MAAM,UAAU,CAAA;AAEjB,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,gBAAgB,EACxB,WAAW,EAAE,YAAY,GAAG,aAAa,GACxC;IACD,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAA;IAClC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,aAAa,EAAE,CAAA;CACpD,CA+CA;AAED,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAgDT;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,OAAO,EAAE,mBAAmB,GAC3B,kBAAkB,GAAG,SAAS,CAOhC;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,kBAAkB,GACzB,0BAA0B,CAwB5B"}

package/dist/src/modules/validators/smart-sessions/policies/claim.js

@@ -0,0 +1,106 @@
+import { isAddressEqual } from 'viem';
+import { FAR_FUTURE_MS } from '../../permissions.js';
+import { getArbitersForSettlementLayers } from '../../policies/claim/arbiters.js';
+export function expandCrossChainPermit(permit, environment) {
+    const sourceTokens = permit.from?.length
+        ? permit.from.map(({ chain, token }) => ({ chain, address: token }))
+        : undefined;
+    const destinationTokens = permit.to?.length
+        ? permit.to.map(({ chain, token }) => ({ chain, address: token }))
+        : undefined;
+    const recipientsList = (permit.to ?? [])
+        .filter(({ recipient }) => recipient !== undefined)
+        .map(({ chain, recipient }) => ({
+        chain,
+        address: recipient,
+    }));
+    const permitDeadline = permit.validAfter !== undefined || permit.validUntil !== undefined
+        ? { min: permit.validAfter, max: permit.validUntil }
+        : undefined;
+    const claim = {
+        type: 'permit2',
+        spenders: getArbitersForSettlementLayers(permit.settlementLayers, environment === 'development'),
+        sourceTokens,
+        destinationTokens,
+        recipients: recipientsList.length ? recipientsList : undefined,
+        recipientIsAccount: permit.recipientIsAccount,
+        permitDeadline,
+        fillDeadline: permit.fillDeadline,
+    };
+    const fallbackPolicies = [];
+    const limits = (permit.from ?? [])
+        .filter(({ maxAmount }) => maxAmount !== undefined)
+        .map(({ token, maxAmount }) => ({ token, amount: maxAmount }));
+    if (limits.length)
+        fallbackPolicies.push({ type: 'spending-limits', limits });
+    if (permitDeadline) {
+        fallbackPolicies.push({
+            type: 'time-frame',
+            validUntil: permit.validUntil === undefined
+                ? FAR_FUTURE_MS
+                : Number(permit.validUntil * 1000n),
+            validAfter: permit.validAfter === undefined ? 0 : Number(permit.validAfter * 1000n),
+        });
+    }
+    return { claim, fallbackPolicies };
+}
+export function permit2ClaimPolicyMatchesMessage(policy, message) {
+    if (policy.spenders?.length &&
+        !policy.spenders.some((spender) => isAddressEqual(spender, message.spender))) {
+        return false;
+    }
+    if (policy.sourceTokens?.length) {
+        const allowed = new Set(policy.sourceTokens.map(({ address }) => address.toLowerCase()));
+        if (!message.permitted.every(({ token }) => allowed.has(token.toLowerCase()))) {
+            return false;
+        }
+    }
+    const targetChain = message.mandate.target.targetChain;
+    if (policy.destinationTokens?.length) {
+        const allowed = new Set(policy.destinationTokens
+            .filter(({ chain }) => BigInt(chain.id) === targetChain)
+            .map(({ address }) => address.toLowerCase()));
+        if (!message.mandate.target.tokenOut.every(({ token }) => allowed.has(token.toLowerCase()))) {
+            return false;
+        }
+    }
+    if (policy.recipients?.length) {
+        const recipients = policy.recipients.filter(({ chain }) => BigInt(chain.id) === targetChain);
+        if (recipients.length &&
+            !recipients.some(({ address }) => address === 'any' ||
+                isAddressEqual(address, message.mandate.target.recipient))) {
+            return false;
+        }
+    }
+    return true;
+}
+export function selectPermit2ClaimPolicyForMessage(policies, message) {
+    if (policies.length <= 1)
+        return policies[0];
+    return (policies.find((policy) => permit2ClaimPolicyMatchesMessage(policy, message)) ?? policies[0]);
+}
+export function resolvePermit2ClaimPolicy(policy) {
+    return {
+        type: 'permit2-claim',
+        arbiters: policy.spenders ? [...policy.spenders] : undefined,
+        tokensIn: policy.sourceTokens?.map(({ chain, address }) => ({
+            chainId: chain.id,
+            token: address,
+        })),
+        tokensOut: policy.destinationTokens?.map(({ chain, address }) => ({
+            chainId: chain.id,
+            token: address,
+        })),
+        recipients: policy.recipients?.map(({ chain, address }) => ({
+            chainId: chain.id,
+            recipient: address,
+        })),
+        recipientIsSponsor: policy.recipientIsAccount,
+        expiryBounds: policy.permitDeadline,
+        fillExpiryBounds: policy.fillDeadline?.map(({ chain, min, max }) => ({
+            chainId: chain.id,
+            min,
+            max,
+        })),
+    };
+}

package/dist/src/modules/validators/smart-sessions/policies/encode.d.ts

@@ -0,0 +1,4 @@
+import type { ResolvedPolicy, SessionPolicy } from '../types.js';
+import { type ResolvedPolicyAddresses } from './addresses.js';
+export declare function encodeSessionPolicy(policy: SessionPolicy, environment: 'production' | 'development', addresses?: ResolvedPolicyAddresses): ResolvedPolicy;
+//# sourceMappingURL=encode.d.ts.map

package/dist/src/modules/validators/smart-sessions/policies/encode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encode.d.ts","sourceRoot":"","sources":["../../../../../../modules/validators/smart-sessions/policies/encode.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAEV,cAAc,EACd,aAAa,EAGd,MAAM,UAAU,CAAA;AACjB,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,aAAa,CAAA;AAiGpB,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,YAAY,GAAG,aAAa,EACzC,SAAS,GAAE,uBAAkD,GAC5D,cAAc,CA6JhB"}