@rhinestone/sdk 2.0.0-beta.9 → 2.1.0

package/dist/src/modules/validators/smart-sessions/types.d.ts

@@ -0,0 +1,227 @@
+import type { Abi, AbiFunction, Address, Chain, Hex, TypedDataDefinition } from 'viem';
+import type { OwnerSet } from '../types.js';
+export type UniversalActionPolicyParamCondition = 'equal' | 'greaterThan' | 'lessThan' | 'greaterThanOrEqual' | 'lessThanOrEqual' | 'notEqual' | 'inRange';
+export interface UniversalActionPolicyParamRule {
+    readonly condition: UniversalActionPolicyParamCondition;
+    readonly calldataOffset: bigint;
+    readonly usageLimit?: bigint;
+    readonly referenceValue: Hex | bigint;
+}
+export type ArgPolicyExpression = {
+    readonly type: 'rule';
+    readonly rule: UniversalActionPolicyParamRule;
+} | {
+    readonly type: 'not';
+    readonly child: ArgPolicyExpression;
+} | {
+    readonly type: 'and' | 'or';
+    readonly left: ArgPolicyExpression;
+    readonly right: ArgPolicyExpression;
+};
+export type SessionPolicy = {
+    readonly type: 'sudo';
+} | {
+    readonly type: 'universal-action';
+    readonly valueLimitPerUse?: bigint;
+    readonly rules: [
+        UniversalActionPolicyParamRule,
+        ...UniversalActionPolicyParamRule[]
+    ];
+} | {
+    readonly type: 'arg-policy';
+    readonly valueLimitPerUse?: bigint;
+    readonly expression: ArgPolicyExpression;
+} | {
+    readonly type: 'spending-limits';
+    readonly limits: {
+        readonly token: Address;
+        readonly amount: bigint;
+    }[];
+} | {
+    readonly type: 'time-frame';
+    readonly validUntil: number;
+    readonly validAfter: number;
+} | {
+    readonly type: 'usage-limit';
+    readonly limit: bigint;
+} | {
+    readonly type: 'value-limit';
+    readonly limit: bigint;
+} | {
+    readonly type: 'intent-execution';
+};
+export interface FallbackAction {
+    readonly policies?: SessionPolicy[];
+}
+export interface ScopedAction {
+    readonly target: Address;
+    readonly selector: Hex;
+    readonly policies?: SessionPolicy[];
+}
+export type SessionAction = FallbackAction | ScopedAction;
+export interface Permission {
+    readonly abi: Abi;
+    readonly address: Address;
+    readonly functions: Readonly<Record<string, {
+        readonly valueLimitPerUse?: bigint;
+        readonly params?: Readonly<Record<string, unknown>>;
+        readonly maxUses?: bigint;
+        readonly validUntil?: Date;
+        readonly validAfter?: Date;
+        readonly valueLimit?: bigint;
+        readonly spendingLimit?: {
+            readonly token: Address;
+            readonly amount: bigint;
+        };
+    } | undefined>>;
+}
+export interface SessionPolicyAddresses {
+    readonly sudo?: Address;
+    readonly universalAction?: Address;
+    readonly argPolicy?: Address;
+    readonly spendingLimits?: Address;
+    readonly timeFrame?: Address;
+    readonly usageLimit?: Address;
+    readonly valueLimit?: Address;
+}
+export type CrossChainSettlementLayer = 'SAME_CHAIN' | 'ECO' | 'ACROSS';
+export interface CrossChainPermit {
+    from?: {
+        chain: Chain;
+        token: Address;
+        maxAmount?: bigint;
+    }[];
+    to?: {
+        chain: Chain;
+        token: Address;
+        recipient?: Address | 'any';
+    }[];
+    validUntil?: bigint;
+    validAfter?: bigint;
+    fillDeadline?: {
+        chain: Chain;
+        min?: bigint;
+        max?: bigint;
+    }[];
+    recipientIsAccount?: boolean;
+    settlementLayers?: CrossChainSettlementLayer[];
+}
+export interface FromLeg {
+    chain: Chain;
+    token: Address;
+    maxAmount?: bigint;
+}
+export interface ToLeg {
+    chain: Chain;
+    token: Address;
+    recipient?: Address | 'any';
+}
+export interface CrossChainPermissionInput {
+    from?: FromLeg | FromLeg[];
+    to?: ToLeg | ToLeg[];
+    validUntil?: Date;
+    validAfter?: Date;
+    fillDeadline?: {
+        chain: Chain;
+        min?: Date;
+        max?: Date;
+    }[];
+    allowRecipientNotAccount?: boolean;
+    settlementLayers?: CrossChainSettlementLayer[];
+}
+export interface Permit2ClaimPolicy {
+    type: 'permit2';
+    spenders?: Address[];
+    sourceTokens?: {
+        chain: Chain;
+        address: Address;
+    }[];
+    destinationTokens?: {
+        chain: Chain;
+        address: Address;
+    }[];
+    recipients?: {
+        chain: Chain;
+        address: Address | 'any';
+    }[];
+    recipientIsAccount?: boolean;
+    permitDeadline?: {
+        min?: bigint;
+        max?: bigint;
+    };
+    fillDeadline?: {
+        chain: Chain;
+        min?: bigint;
+        max?: bigint;
+    }[];
+}
+export interface SessionDefinition {
+    chain: Chain;
+    owners: OwnerSet;
+    permissions?: Permission[];
+    claimPolicies?: Permit2ClaimPolicy[];
+    crossChainPermits?: CrossChainPermissionInput[];
+    policyAddresses?: SessionPolicyAddresses;
+}
+export interface ResolvedPolicy {
+    policy: Address;
+    initData: Hex;
+}
+export interface ResolvedAction {
+    actionTargetSelector: Hex;
+    actionTarget: Address;
+    actionPolicies: readonly ResolvedPolicy[];
+}
+export interface ResolvedERC7739Content {
+    appDomainSeparator: Hex;
+    contentNames: readonly string[];
+}
+export interface ResolvedERC7739Policies {
+    allowedERC7739Content: readonly ResolvedERC7739Content[];
+    erc1271Policies: readonly ResolvedPolicy[];
+}
+export interface Session {
+    chain: Chain;
+    owners: OwnerSet;
+    hasExplicitPermissions: boolean;
+    permissionId: Hex;
+    sessionValidator: Address;
+    sessionValidatorInitData: Hex;
+    salt: Hex;
+    erc7739Policies: ResolvedERC7739Policies;
+    actions: readonly ResolvedAction[];
+    claimPolicies: readonly Permit2ClaimPolicy[];
+}
+export interface SessionData {
+    sessionValidator: Address;
+    sessionValidatorInitData: Hex;
+    salt: Hex;
+    erc7739Policies: ResolvedERC7739Policies;
+    actions: readonly ResolvedAction[];
+    claimPolicies: readonly ResolvedPolicy[];
+}
+export interface SessionEnableData {
+    readonly userSignature: Hex;
+    readonly hashesAndChainIds: readonly ChainDigest[];
+    readonly sessionToEnableIndex: number;
+}
+export interface ChainDigest {
+    chainId: bigint;
+    sessionDigest: Hex;
+}
+export interface SessionDetails {
+    nonces: bigint[];
+    hashesAndChainIds: ChainDigest[];
+    data: TypedDataDefinition<typeof import('./authorization.js').types, 'MultiChainSession'>;
+}
+export interface ResolvedSessionSignerSet {
+    readonly kind: 'smart-session';
+    readonly session: Session;
+    readonly enableData?: SessionEnableData;
+    readonly verifyExecutions: boolean;
+    readonly claimPolicyData?: Hex;
+}
+export type SmartSessionMockShape = 'enable' | 'use' | 'erc1271';
+export type RawFunctionConfig = NonNullable<Permission['functions'][string]>;
+export type RawAbiFunction = AbiFunction;
+//# sourceMappingURL=types.d.ts.map

package/dist/src/modules/validators/smart-sessions/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../modules/validators/smart-sessions/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,GAAG,EACH,WAAW,EACX,OAAO,EACP,KAAK,EACL,GAAG,EACH,mBAAmB,EACpB,MAAM,MAAM,CAAA;AACb,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAExC,MAAM,MAAM,mCAAmC,GAC3C,OAAO,GACP,aAAa,GACb,UAAU,GACV,oBAAoB,GACpB,iBAAiB,GACjB,UAAU,GACV,SAAS,CAAA;AAEb,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,mCAAmC,CAAA;IACvD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,cAAc,EAAE,GAAG,GAAG,MAAM,CAAA;CACtC;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAA;CAAE,GACxE;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,GAC7D;IACE,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CACpC,CAAA;AAEL,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IACE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE;QACd,8BAA8B;QAC9B,GAAG,8BAA8B,EAAE;KACpC,CAAA;CACF,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAA;CACzC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KACxB,EAAE,CAAA;CACJ,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE,CAAA;AAEzC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAA;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;CACpC;AAED,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,YAAY,CAAA;AAEzD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAA;IACjB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAC1B,MAAM,CACJ,MAAM,EACJ;QACE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;QAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;QAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;QAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;QAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE;YACvB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;YACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;SACxB,CAAA;KACF,GACD,SAAS,CACZ,CACF,CAAA;CACF;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAA;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAC9B;AAED,MAAM,MAAM,yBAAyB,GAAG,YAAY,GAAG,KAAK,GAAG,QAAQ,CAAA;AAEvE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC7D,EAAE,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,GAAG,KAAK,CAAA;KAAE,EAAE,CAAA;IACpE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC7D,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,CAAA;CAC/C;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,CAAC,EAAE,OAAO,GAAG,KAAK,CAAA;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,EAAE,CAAA;IAC1B,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,CAAA;IACpB,UAAU,CAAC,EAAE,IAAI,CAAA;IACjB,UAAU,CAAC,EAAE,IAAI,CAAA;IACjB,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAA;KAAE,EAAE,CAAA;IACzD,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,CAAA;CAC/C;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,SAAS,CAAA;IACf,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;IACpB,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;IACnD,iBAAiB,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;IACxD,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,GAAG,KAAK,CAAA;KAAE,EAAE,CAAA;IACzD,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,cAAc,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/C,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAC9D;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,QAAQ,CAAA;IAChB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAA;IAC1B,aAAa,CAAC,EAAE,kBAAkB,EAAE,CAAA;IACpC,iBAAiB,CAAC,EAAE,yBAAyB,EAAE,CAAA;IAC/C,eAAe,CAAC,EAAE,sBAAsB,CAAA;CACzC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,GAAG,CAAA;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,oBAAoB,EAAE,GAAG,CAAA;IACzB,YAAY,EAAE,OAAO,CAAA;IACrB,cAAc,EAAE,SAAS,cAAc,EAAE,CAAA;CAC1C;AAED,MAAM,WAAW,sBAAsB;IACrC,kBAAkB,EAAE,GAAG,CAAA;IACvB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,EAAE,SAAS,sBAAsB,EAAE,CAAA;IACxD,eAAe,EAAE,SAAS,cAAc,EAAE,CAAA;CAC3C;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,QAAQ,CAAA;IAChB,sBAAsB,EAAE,OAAO,CAAA;IAC/B,YAAY,EAAE,GAAG,CAAA;IACjB,gBAAgB,EAAE,OAAO,CAAA;IACzB,wBAAwB,EAAE,GAAG,CAAA;IAC7B,IAAI,EAAE,GAAG,CAAA;IACT,eAAe,EAAE,uBAAuB,CAAA;IACxC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAA;IAClC,aAAa,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC7C;AAED,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,OAAO,CAAA;IACzB,wBAAwB,EAAE,GAAG,CAAA;IAC7B,IAAI,EAAE,GAAG,CAAA;IACT,eAAe,EAAE,uBAAuB,CAAA;IACxC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAA;IAClC,aAAa,EAAE,SAAS,cAAc,EAAE,CAAA;CACzC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAA;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,WAAW,EAAE,CAAA;IAClD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,GAAG,CAAA;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,iBAAiB,EAAE,WAAW,EAAE,CAAA;IAChC,IAAI,EAAE,mBAAmB,CACvB,cAAc,iBAAiB,EAAE,KAAK,EACtC,mBAAmB,CACpB,CAAA;CACF;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,GAAG,CAAA;CAC/B;AAED,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAA;AAEhE,MAAM,MAAM,iBAAiB,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;AAC5E,MAAM,MAAM,cAAc,GAAG,WAAW,CAAA"}

package/dist/src/modules/validators/smart-sessions/types.js

@@ -0,0 +1 @@
+export {};

package/dist/src/modules/validators/social-recovery.d.ts

@@ -0,0 +1,16 @@
+import type { Address } from 'viem';
+import type { ResolvedModule } from '../types.js';
+export declare const SOCIAL_RECOVERY_VALIDATOR_ADDRESS: Address;
+/**
+ * Resolves the social recovery validator module.
+ *
+ * The module shares the ownable validator's `(threshold, address[])` init
+ * encoding and its concatenated-ECDSA signature format, so it resolves through
+ * the same encoder at a different address. `onInstall` requires the guardian
+ * list to be sorted and unique, which `resolveOwnableAddresses` guarantees.
+ */
+export declare function resolveSocialRecoveryValidator(input: {
+    readonly guardians: readonly Address[];
+    readonly threshold?: number;
+}): ResolvedModule;
+//# sourceMappingURL=social-recovery.d.ts.map

package/dist/src/modules/validators/social-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-recovery.d.ts","sourceRoot":"","sources":["../../../../modules/validators/social-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAG9C,eAAO,MAAM,iCAAiC,EAAE,OACF,CAAA;AAE9C;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,SAAS,EAAE,SAAS,OAAO,EAAE,CAAA;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B,GAAG,cAAc,CAMjB"}

package/dist/src/modules/validators/social-recovery.js

@@ -0,0 +1,17 @@
+import { resolveOwnableAddresses } from './ownable.js';
+export const SOCIAL_RECOVERY_VALIDATOR_ADDRESS = '0xa04d053b3c8021e8d5bf641816c42daa75d8b597';
+/**
+ * Resolves the social recovery validator module.
+ *
+ * The module shares the ownable validator's `(threshold, address[])` init
+ * encoding and its concatenated-ECDSA signature format, so it resolves through
+ * the same encoder at a different address. `onInstall` requires the guardian
+ * list to be sorted and unique, which `resolveOwnableAddresses` guarantees.
+ */
+export function resolveSocialRecoveryValidator(input) {
+    return resolveOwnableAddresses({
+        owners: input.guardians,
+        threshold: input.threshold ?? 1,
+        address: SOCIAL_RECOVERY_VALIDATOR_ADDRESS,
+    });
+}

package/dist/src/modules/validators/types.d.ts

@@ -0,0 +1,143 @@
+import type { Account, Address, Hex } from 'viem';
+import type { WebAuthnAccount } from 'viem/account-abstraction';
+import type { ModuleId } from '../types.js';
+import type { SmartSessionEnableContributionData } from './smart-session-signature-types.js';
+export type ValidatorKind = 'ecdsa' | 'ens' | 'passkey' | 'multi-factor' | 'k1' | 'smart-session';
+export type ValidatorPayloadKind = 'message' | 'typed-data' | 'intent' | 'user-operation' | 'session-enable';
+export type ValidatorSigningPurpose = 'erc1271' | 'intent' | 'user-operation' | 'session-enable';
+export interface OwnableValidatorConfig {
+    type: 'ecdsa';
+    accounts: Account[];
+    threshold?: number;
+    module?: Address;
+}
+export interface ENSValidatorConfig {
+    type: 'ens';
+    owners: {
+        account: Account;
+        expiration?: Date;
+    }[];
+    threshold?: number;
+}
+export interface WebauthnValidatorConfig {
+    type: 'passkey';
+    accounts: WebAuthnAccount[];
+    threshold?: number;
+    module?: Address;
+}
+export interface MultiFactorValidatorConfig {
+    type: 'multi-factor';
+    validators: (OwnableValidatorConfig | ENSValidatorConfig | WebauthnValidatorConfig)[];
+    threshold?: number;
+    module?: Address;
+}
+export type OwnerSet = OwnableValidatorConfig | ENSValidatorConfig | WebauthnValidatorConfig | MultiFactorValidatorConfig;
+export type AtomicValidatorInput = OwnableValidatorConfig | ENSValidatorConfig | WebauthnValidatorConfig;
+export type MultiFactorValidatorInput = MultiFactorValidatorConfig;
+export type ValidatorInput = OwnerSet;
+export type ValidatorModuleSelection = {
+    readonly source: 'explicit';
+    readonly address: Address;
+} | {
+    readonly source: 'default';
+    readonly profile: 'ownable' | 'ens' | 'webauthn' | 'multi-factor';
+};
+export type ValidatorOwner = {
+    readonly kind: 'ecdsa' | 'ens';
+    readonly id: string;
+    readonly signerId: string;
+    readonly account: Account;
+    readonly expiration?: Date;
+} | {
+    readonly kind: 'webauthn';
+    readonly id: string;
+    readonly signerId: string;
+    readonly account: WebAuthnAccount;
+};
+export interface AtomicValidatorDefinition {
+    readonly kind: Exclude<ValidatorKind, 'multi-factor'>;
+    readonly id: string;
+    readonly publicId: number | Hex;
+    readonly module: ValidatorModuleSelection;
+    readonly owners: readonly ValidatorOwner[];
+    readonly threshold: number;
+}
+export interface MultiFactorValidatorDefinition {
+    readonly kind: 'multi-factor';
+    readonly id: string;
+    readonly publicId: number | Hex;
+    readonly module: ValidatorModuleSelection;
+    readonly validators: readonly AtomicValidatorDefinition[];
+    readonly threshold: number;
+}
+export type ResolvedValidatorDefinition = AtomicValidatorDefinition | MultiFactorValidatorDefinition;
+export type ValidatorContributionCodec = {
+    readonly kind: 'ordered-threshold';
+    readonly validator: ModuleId;
+    readonly ownerOrder: readonly string[];
+    readonly threshold: number;
+    readonly recoveryEncoding: 'ethereum' | 'validator-offset-4';
+    readonly webauthn?: {
+        readonly account: Address;
+        readonly usePrecompile: boolean;
+        readonly format: 'current' | 'v0';
+    };
+} | {
+    readonly kind: 'nested-threshold';
+    readonly validator: ModuleId;
+    readonly factorOrder: readonly string[];
+    readonly threshold: number;
+} | {
+    readonly kind: 'smart-session';
+    readonly validator: ModuleId;
+    readonly mode: 'use' | 'enable-and-use' | 'pre-claim' | 'notarized';
+    readonly permissionId: Hex;
+    readonly claimPolicyData?: Hex;
+    readonly enableData?: SmartSessionEnableContributionData;
+    readonly signerCodec?: Exclude<ValidatorContributionCodec, {
+        readonly kind: 'smart-session';
+    }>;
+};
+export type ValidatorContributionInput = {
+    readonly kind: 'ecdsa';
+    readonly ownerId: string;
+    readonly signature: Hex;
+    readonly encoding: 'raw-signer' | 'validator-contribution';
+} | {
+    readonly kind: 'webauthn';
+    readonly ownerId: string;
+    readonly publicKey: Hex;
+    readonly signature: Hex;
+    readonly authenticatorData: Hex;
+    readonly clientDataJSON: string;
+    readonly challengeIndex: number;
+    readonly typeIndex: number;
+    readonly userVerificationRequired: boolean;
+} | {
+    readonly kind: 'factor';
+    readonly factorId: string;
+    readonly publicId: number | Hex;
+    readonly validator: Address;
+    readonly contribution: Hex;
+} | {
+    readonly kind: 'session';
+    readonly signature: Hex;
+};
+export interface ValidatorCapabilities {
+    readonly compatibilityKey: {
+        readonly validatorKind: ValidatorKind;
+        readonly moduleAddress: Address;
+        readonly accountProfile: string;
+        readonly purpose: ValidatorSigningPurpose;
+    };
+    readonly payloadKinds: readonly ValidatorPayloadKind[];
+    readonly signatureModes: readonly string[];
+    readonly signerTopology: 'single' | 'threshold' | 'nested-threshold';
+    readonly supportsIndependentSigning: boolean;
+    readonly supportsOriginReuse: boolean;
+    readonly supportsMockSignature: boolean;
+    readonly supportsEip712: boolean;
+    readonly recoveryEncoding: 'ethereum' | 'validator-offset-4';
+    readonly contributionCodec: ValidatorContributionCodec;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/modules/validators/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../modules/validators/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAA;AAEzF,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,KAAK,GACL,SAAS,GACT,cAAc,GACd,IAAI,GACJ,eAAe,CAAA;AAEnB,MAAM,MAAM,oBAAoB,GAC5B,SAAS,GACT,YAAY,GACZ,QAAQ,GACR,gBAAgB,GAChB,gBAAgB,CAAA;AAEpB,MAAM,MAAM,uBAAuB,GAC/B,SAAS,GACT,QAAQ,GACR,gBAAgB,GAChB,gBAAgB,CAAA;AAEpB,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,OAAO,CAAA;IACb,QAAQ,EAAE,OAAO,EAAE,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,KAAK,CAAA;IACX,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,IAAI,CAAA;KAAE,EAAE,CAAA;IACjD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,SAAS,CAAA;IACf,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,cAAc,CAAA;IACpB,UAAU,EAAE,CACR,sBAAsB,GACtB,kBAAkB,GAClB,uBAAuB,CAC1B,EAAE,CAAA;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,MAAM,QAAQ,GAChB,sBAAsB,GACtB,kBAAkB,GAClB,uBAAuB,GACvB,0BAA0B,CAAA;AAI9B,MAAM,MAAM,oBAAoB,GAC5B,sBAAsB,GACtB,kBAAkB,GAClB,uBAAuB,CAAA;AAE3B,MAAM,MAAM,yBAAyB,GAAG,0BAA0B,CAAA;AAElE,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAA;AAErC,MAAM,MAAM,wBAAwB,GAChC;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAC1D;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,KAAK,GAAG,UAAU,GAAG,cAAc,CAAA;CAClE,CAAA;AAEL,MAAM,MAAM,cAAc,GACtB;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,KAAK,CAAA;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAC3B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;CAClC,CAAA;AAEL,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;IACrD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAA;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,CAAA;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,MAAM,2BAA2B,GACnC,yBAAyB,GACzB,8BAA8B,CAAA;AAElC,MAAM,MAAM,0BAA0B,GAClC;IACE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;IAClC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAA;IAC5B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,UAAU,GAAG,oBAAoB,CAAA;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;QACzB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;QAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAA;KAClC,CAAA;CACF,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,gBAAgB,GAAG,WAAW,GAAG,WAAW,CAAA;IACnE,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAA;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,GAAG,CAAA;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,kCAAkC,CAAA;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAC5B,0BAA0B,EAC1B;QAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;KAAE,CACnC,CAAA;CACF,CAAA;AAEL,MAAM,MAAM,0BAA0B,GAClC;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,YAAY,GAAG,wBAAwB,CAAA;CAC3D,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAA;IACvB,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAA;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAA;CAC3C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAA;CAC3B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAA;CACxB,CAAA;AAEL,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,gBAAgB,EAAE;QACzB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;QACrC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;QAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAA;KAC1C,CAAA;IACD,QAAQ,CAAC,YAAY,EAAE,SAAS,oBAAoB,EAAE,CAAA;IACtD,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,QAAQ,CAAC,cAAc,EAAE,QAAQ,GAAG,WAAW,GAAG,kBAAkB,CAAA;IACpE,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAA;IAC5C,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAA;IACrC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAA;IACvC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAA;IAChC,QAAQ,CAAC,gBAAgB,EAAE,UAAU,GAAG,oBAAoB,CAAA;IAC5D,QAAQ,CAAC,iBAAiB,EAAE,0BAA0B,CAAA;CACvD"}

package/dist/src/modules/validators/types.js

@@ -0,0 +1 @@
+export {};

package/dist/src/modules/validators/webauthn.d.ts

@@ -0,0 +1,54 @@
+import { type Address, type Hex } from 'viem';
+import type { ResolvedModule } from '../types.js';
+import type { AtomicValidatorDefinition } from './types.js';
+export declare const WEBAUTHN_VALIDATOR_ADDRESS: Address;
+export declare const WEBAUTHN_V0_VALIDATOR_ADDRESS: `0x${string}`;
+export declare const WEBAUTHN_MOCK_SIGNATURE: "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";
+export interface PublicKey {
+    prefix?: number | undefined;
+    x: bigint;
+    y: bigint;
+}
+export interface WebauthnCredential {
+    pubKey: PublicKey | Hex | Uint8Array;
+    authenticatorId: string;
+}
+export interface WebAuthnSignature {
+    authenticatorData: Hex;
+    clientDataJSON: string;
+    challengeIndex: bigint;
+    typeIndex: bigint;
+    r: bigint;
+    s: bigint;
+}
+export declare function parseWebauthnPublicKey(publicKey: Hex | Uint8Array): PublicKey;
+export declare function parseWebauthnSignature(signature: Hex | Uint8Array): {
+    readonly r: bigint;
+    readonly s: bigint;
+};
+export declare function generateWebauthnCredentialId(pubKeyX: bigint, pubKeyY: bigint, account: Address): Hex;
+export declare function encodeWebauthnSignatures(credentialIds: readonly Hex[], usePrecompile: boolean, signatures: readonly WebAuthnSignature[]): Hex;
+export declare function encodeWebauthnSignatureV0(signature: Omit<WebAuthnSignature, 'challengeIndex'>, usePrecompile: boolean): Hex;
+export declare function encodeWebauthnValidatorContribution(input: {
+    readonly ownerOrder: readonly string[];
+    readonly threshold: number;
+    readonly account: Address;
+    readonly usePrecompile: boolean;
+    readonly format: 'current' | 'v0';
+    readonly contributions: readonly {
+        readonly ownerId: string;
+        readonly publicKey: Hex;
+        readonly signature: Hex;
+        readonly authenticatorData: Hex;
+        readonly clientDataJSON: string;
+        readonly challengeIndex: number;
+        readonly typeIndex: number;
+    }[];
+}): Hex;
+export declare function resolveWebauthnCredentials(input: {
+    readonly credentials: readonly WebauthnCredential[];
+    readonly threshold: number;
+    readonly address?: `0x${string}`;
+}): ResolvedModule;
+export declare function resolveWebauthnValidator(definition: AtomicValidatorDefinition): ResolvedModule;
+//# sourceMappingURL=webauthn.d.ts.map

package/dist/src/modules/validators/webauthn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.d.ts","sourceRoot":"","sources":["../../../../modules/validators/webauthn.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,OAAO,EAGZ,KAAK,GAAG,EAGT,MAAM,MAAM,CAAA;AACb,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAC9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAA;AAExD,eAAO,MAAM,0BAA0B,EAAE,OACK,CAAA;AAC9C,eAAO,MAAM,6BAA6B,eAA6B,CAAA;AAEvE,eAAO,MAAM,uBAAuB,EAClC,o4CAA64C,CAAA;AAE/4C,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,SAAS,GAAG,GAAG,GAAG,UAAU,CAAA;IACpC,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,EAAE,GAAG,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,GAAG,GAAG,UAAU,GAAG,SAAS,CAU7E;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,GAAG,GAAG,UAAU,GAAG;IACnE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;CACnB,CAOA;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,GACf,GAAG,CAOL;AAED,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,SAAS,GAAG,EAAE,EAC7B,aAAa,EAAE,OAAO,EACtB,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,GAAG,CA8BL;AAED,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,EACpD,aAAa,EAAE,OAAO,GACrB,GAAG,CAmBL;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,aAAa,EAAE,SAAS;QAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAA;QACvB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAA;QACvB,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAA;QAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAC3B,EAAE,CAAA;CACJ,GAAG,GAAG,CAgDN;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,EAAE,CAAA;CACjC,GAAG,cAAc,CAkCjB;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,yBAAyB,GACpC,cAAc,CAkBhB"}

package/dist/src/modules/validators/webauthn.js

@@ -0,0 +1,159 @@
+import { bytesToHex, encodeAbiParameters, hexToBytes, keccak256, } from 'viem';
+export const WEBAUTHN_VALIDATOR_ADDRESS = '0x0000000000578c4cb0e472a5462da43c495c3f33';
+export const WEBAUTHN_V0_VALIDATOR_ADDRESS = WEBAUTHN_VALIDATOR_ADDRESS;
+export const WEBAUTHN_MOCK_SIGNATURE = '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';
+export function parseWebauthnPublicKey(publicKey) {
+    const bytes = typeof publicKey === 'string' ? hexToBytes(publicKey) : publicKey;
+    const offset = bytes.length === 65 ? 1 : 0;
+    const prefix = offset === 1 ? bytes[0] : undefined;
+    return {
+        ...(prefix === undefined ? {} : { prefix }),
+        x: BigInt(bytesToHex(bytes.slice(offset, 32 + offset))),
+        y: BigInt(bytesToHex(bytes.slice(32 + offset, 64 + offset))),
+    };
+}
+export function parseWebauthnSignature(signature) {
+    const bytes = typeof signature === 'string' ? hexToBytes(signature) : signature;
+    return {
+        r: BigInt(bytesToHex(bytes.slice(0, 32))),
+        s: BigInt(bytesToHex(bytes.slice(32, 64))),
+    };
+}
+export function generateWebauthnCredentialId(pubKeyX, pubKeyY, account) {
+    return keccak256(encodeAbiParameters([{ type: 'uint256' }, { type: 'uint256' }, { type: 'address' }], [pubKeyX, pubKeyY, account]));
+}
+export function encodeWebauthnSignatures(credentialIds, usePrecompile, signatures) {
+    const ordered = credentialIds
+        .map((credentialId, index) => ({
+        credentialId,
+        signature: signatures[index],
+    }))
+        .sort((left, right) => left.credentialId.localeCompare(right.credentialId));
+    return encodeAbiParameters([
+        { type: 'bytes32[]', name: 'credIds' },
+        { type: 'bool', name: 'usePrecompile' },
+        {
+            type: 'tuple[]',
+            name: 'webAuthns',
+            components: [
+                { type: 'bytes', name: 'authenticatorData' },
+                { type: 'string', name: 'clientDataJSON' },
+                { type: 'uint256', name: 'challengeIndex' },
+                { type: 'uint256', name: 'typeIndex' },
+                { type: 'uint256', name: 'r' },
+                { type: 'uint256', name: 's' },
+            ],
+        },
+    ], [
+        ordered.map(({ credentialId }) => credentialId),
+        usePrecompile,
+        ordered.map(({ signature }) => signature),
+    ]);
+}
+export function encodeWebauthnSignatureV0(signature, usePrecompile) {
+    return encodeAbiParameters([
+        { type: 'bytes', name: 'authenticatorData' },
+        { type: 'string', name: 'clientDataJSON' },
+        { type: 'uint256', name: 'responseTypeLocation' },
+        { type: 'uint256', name: 'r' },
+        { type: 'uint256', name: 's' },
+        { type: 'bool', name: 'usePrecompiled' },
+    ], [
+        signature.authenticatorData,
+        signature.clientDataJSON,
+        signature.typeIndex,
+        signature.r,
+        signature.s,
+        usePrecompile,
+    ]);
+}
+export function encodeWebauthnValidatorContribution(input) {
+    if (input.threshold < 1 || input.threshold > input.ownerOrder.length) {
+        throw new Error('Validator threshold is outside the configured owner set');
+    }
+    const configured = new Set(input.ownerOrder);
+    const contributions = new Map();
+    for (const contribution of input.contributions) {
+        if (!configured.has(contribution.ownerId)) {
+            throw new Error(`Unknown validator owner ${contribution.ownerId}`);
+        }
+        if (contributions.has(contribution.ownerId)) {
+            throw new Error(`Duplicate validator owner ${contribution.ownerId}`);
+        }
+        contributions.set(contribution.ownerId, contribution);
+    }
+    const ordered = input.ownerOrder.flatMap((ownerId) => {
+        const contribution = contributions.get(ownerId);
+        return contribution ? [contribution] : [];
+    });
+    if (ordered.length < input.threshold) {
+        throw new Error(`Insufficient validator contributions: required ${input.threshold}, received ${ordered.length}`);
+    }
+    const signatures = ordered.map((contribution) => ({
+        authenticatorData: contribution.authenticatorData,
+        clientDataJSON: contribution.clientDataJSON,
+        challengeIndex: BigInt(contribution.challengeIndex),
+        typeIndex: BigInt(contribution.typeIndex),
+        ...parseWebauthnSignature(contribution.signature),
+    }));
+    if (input.format === 'v0') {
+        if (signatures.length !== 1) {
+            throw new Error('WebAuthn V0 accepts exactly one contribution');
+        }
+        return encodeWebauthnSignatureV0(signatures[0], input.usePrecompile);
+    }
+    const credentialIds = ordered.map((contribution) => {
+        const publicKey = parseWebauthnPublicKey(contribution.publicKey);
+        return generateWebauthnCredentialId(publicKey.x, publicKey.y, input.account);
+    });
+    return encodeWebauthnSignatures(credentialIds, input.usePrecompile, signatures);
+}
+export function resolveWebauthnCredentials(input) {
+    const credentials = input.credentials.map((credential) => {
+        const publicKey = typeof credential.pubKey === 'object' &&
+            !(credential.pubKey instanceof Uint8Array)
+            ? credential.pubKey
+            : parseWebauthnPublicKey(credential.pubKey);
+        return {
+            pubKeyX: publicKey.x,
+            pubKeyY: publicKey.y,
+            requireUV: false,
+        };
+    });
+    return {
+        kind: 'validator',
+        address: input.address ?? WEBAUTHN_VALIDATOR_ADDRESS,
+        initData: encodeAbiParameters([
+            { name: 'threshold', type: 'uint256' },
+            {
+                name: 'credentials',
+                type: 'tuple[]',
+                components: [
+                    { name: 'pubKeyX', type: 'uint256' },
+                    { name: 'pubKeyY', type: 'uint256' },
+                    { name: 'requireUV', type: 'bool' },
+                ],
+            },
+        ], [BigInt(input.threshold), credentials]),
+        deInitData: '0x',
+        additionalContext: '0x',
+    };
+}
+export function resolveWebauthnValidator(definition) {
+    const credentials = definition.owners.map((owner) => {
+        if (owner.kind !== 'webauthn') {
+            throw new Error('WebAuthn validator contains a non-WebAuthn owner');
+        }
+        return {
+            pubKey: owner.account.publicKey,
+            authenticatorId: owner.account.id,
+        };
+    });
+    return resolveWebauthnCredentials({
+        credentials,
+        threshold: definition.threshold,
+        address: definition.module.source === 'explicit'
+            ? definition.module.address
+            : WEBAUTHN_VALIDATOR_ADDRESS,
+    });
+}