@rhinestone/sdk 2.4.0 → 2.6.0

package/dist/src/modules/validators/webauthn.d.ts

@@ -3,6 +3,7 @@ import type { ResolvedModule } from '../types.js';
 import type { AtomicValidatorDefinition } from './types.js';
 export declare const WEBAUTHN_VALIDATOR_ADDRESS: Address;
 export declare const WEBAUTHN_V0_VALIDATOR_ADDRESS: `0x${string}`;
+export declare const WEBAUTHN_STATELESS_ACCOUNT: Address;
 export declare const WEBAUTHN_MOCK_SIGNATURE: "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";
 export interface PublicKey {
     prefix?: number | undefined;
@@ -27,14 +28,20 @@ export declare function parseWebauthnSignature(signature: Hex | Uint8Array): {
     readonly s: bigint;
 };
 export declare function generateWebauthnCredentialId(pubKeyX: bigint, pubKeyY: bigint, account: Address): Hex;
+export declare function webauthnStatelessMockSignature(): Hex;
 export declare function encodeWebauthnSignatures(credentialIds: readonly Hex[], usePrecompile: boolean, signatures: readonly WebAuthnSignature[]): Hex;
+export declare function encodeWebauthnStatelessSignatures(signatures: readonly WebAuthnSignature[]): Hex;
 export declare function encodeWebauthnSignatureV0(signature: Omit<WebAuthnSignature, 'challengeIndex'>, usePrecompile: boolean): Hex;
 export declare function encodeWebauthnValidatorContribution(input: {
     readonly ownerOrder: readonly string[];
     readonly threshold: number;
     readonly account: Address;
     readonly usePrecompile: boolean;
-    readonly format: 'current' | 'v0';
+    readonly format: 'current' | 'v0' | 'stateless';
+    readonly credentials?: readonly {
+        readonly ownerId: string;
+        readonly publicKey: Hex;
+    }[];
     readonly contributions: readonly {
         readonly ownerId: string;
         readonly publicKey: Hex;
@@ -69,5 +76,30 @@ export declare function resolveWebauthnCredentials(input: {
     readonly ordering?: WebauthnCredentialOrdering;
 }): ResolvedModule;
 export declare function webauthnDefinitionCredentials(definition: AtomicValidatorDefinition): readonly WebauthnCredential[];
+/**
+ * The configuration `WebAuthnValidator.validateSignatureWithData` expects, which
+ * is *not* the validator's install data: a verification context plus the account
+ * the credential IDs were derived from. Multi-factor stores this blob verbatim
+ * and hands it back on every factor validation.
+ *
+ * Written for the deployed validator ({@link WEBAUTHN_VALIDATOR_ADDRESS}); a
+ * future deployment that drops the account from credential-ID derivation would
+ * need its own encoder.
+ */
+export declare function encodeWebauthnStatelessData(input: {
+    readonly credentials: readonly WebauthnCredential[];
+    readonly threshold: number;
+    readonly usePrecompile?: boolean;
+}): Hex;
+export declare function webauthnStatelessCodecContext(definition: AtomicValidatorDefinition): {
+    account: `0x${string}`;
+    usePrecompile: boolean;
+    format: "stateless";
+    credentials: {
+        ownerId: string;
+        publicKey: `0x${string}`;
+    }[];
+};
+export declare function resolveWebauthnStatelessData(definition: AtomicValidatorDefinition): Hex;
 export declare function resolveWebauthnValidator(definition: AtomicValidatorDefinition, ordering?: WebauthnCredentialOrdering): ResolvedModule;
 //# sourceMappingURL=webauthn.d.ts.map

package/dist/src/modules/validators/webauthn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webauthn.d.ts","sourceRoot":"","sources":["../../../../modules/validators/webauthn.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,OAAO,EAGZ,KAAK,GAAG,EAIT,MAAM,MAAM,CAAA;AACb,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAE9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAA;AAExD,eAAO,MAAM,0BAA0B,EAAE,OACK,CAAA;AAC9C,eAAO,MAAM,6BAA6B,eAA6B,CAAA;AAEvE,eAAO,MAAM,uBAAuB,EAClC,o4CAA64C,CAAA;AAE/4C,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,SAAS,GAAG,GAAG,GAAG,UAAU,CAAA;IACpC,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,EAAE,GAAG,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV;AA4DD,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,GAAG,GAAG,UAAU,GAAG,SAAS,CAU7E;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,GAAG,GAAG,UAAU,GAAG;IACnE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;CACnB,CAOA;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,GACf,GAAG,CAOL;AAED,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,SAAS,GAAG,EAAE,EAC7B,aAAa,EAAE,OAAO,EACtB,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,GAAG,CAgCL;AAED,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,EACpD,aAAa,EAAE,OAAO,GACrB,GAAG,CAoBL;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,aAAa,EAAE,SAAS;QAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAA;QACvB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAA;QACvB,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAA;QAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAC3B,EAAE,CAAA;CACJ,GAAG,GAAG,CAgDN;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAOD,MAAM,MAAM,0BAA0B,GAClC;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAA;AAEjE,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,SAAS,kBAAkB,EAAE,GACzC,SAAS,yBAAyB,EAAE,CAatC;AAaD,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,SAAS,yBAAyB,EAAE,EACjD,QAAQ,EAAE,0BAA0B,GACnC,SAAS,yBAAyB,EAAE,CAgBtC;AAID,wBAAgB,+BAA+B,CAC7C,WAAW,EAAE,SAAS,yBAAyB,EAAE,EACjD,OAAO,EAAE,OAAO,GACf,OAAO,CAiBT;AAED,wBAAgB,+BAA+B,CAC7C,WAAW,EAAE,SAAS,yBAAyB,EAAE,GAChD,OAAO,CAQT;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAA;CAC/C,GAAG,cAAc,CA0BjB;AAED,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,yBAAyB,GACpC,SAAS,kBAAkB,EAAE,CAU/B;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,yBAAyB,EACrC,QAAQ,CAAC,EAAE,0BAA0B,GACpC,cAAc,CAUhB"}
+{"version":3,"file":"webauthn.d.ts","sourceRoot":"","sources":["../../../../modules/validators/webauthn.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,OAAO,EAIZ,KAAK,GAAG,EAIT,MAAM,MAAM,CAAA;AACb,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAE9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAA;AAExD,eAAO,MAAM,0BAA0B,EAAE,OACK,CAAA;AAC9C,eAAO,MAAM,6BAA6B,eAA6B,CAAA;AAOvE,eAAO,MAAM,0BAA0B,EAAE,OACK,CAAA;AAE9C,eAAO,MAAM,uBAAuB,EAClC,o4CAA64C,CAAA;AAE/4C,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,SAAS,GAAG,GAAG,GAAG,UAAU,CAAA;IACpC,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,EAAE,GAAG,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV;AA4DD,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,GAAG,GAAG,UAAU,GAAG,SAAS,CAU7E;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,GAAG,GAAG,UAAU,GAAG;IACnE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;CACnB,CAOA;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,GACf,GAAG,CAOL;AAiBD,wBAAgB,8BAA8B,IAAI,GAAG,CAcpD;AAED,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,SAAS,GAAG,EAAE,EAC7B,aAAa,EAAE,OAAO,EACtB,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,GAAG,CAqBL;AAID,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,GAAG,CAKL;AAED,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,EACpD,aAAa,EAAE,OAAO,GACrB,GAAG,CAoBL;AAwBD,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,GAAG,WAAW,CAAA;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS;QAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAA;KACxB,EAAE,CAAA;IACH,QAAQ,CAAC,aAAa,EAAE,SAAS;QAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAA;QACvB,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAA;QACvB,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAA;QAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAC3B,EAAE,CAAA;CACJ,GAAG,GAAG,CA+EN;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAOD,MAAM,MAAM,0BAA0B,GAClC;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAA;AAEjE,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,SAAS,kBAAkB,EAAE,GACzC,SAAS,yBAAyB,EAAE,CAatC;AAaD,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,SAAS,yBAAyB,EAAE,EACjD,QAAQ,EAAE,0BAA0B,GACnC,SAAS,yBAAyB,EAAE,CAgBtC;AAID,wBAAgB,+BAA+B,CAC7C,WAAW,EAAE,SAAS,yBAAyB,EAAE,EACjD,OAAO,EAAE,OAAO,GACf,OAAO,CAiBT;AAED,wBAAgB,+BAA+B,CAC7C,WAAW,EAAE,SAAS,yBAAyB,EAAE,GAChD,OAAO,CAQT;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAA;CAC/C,GAAG,cAAc,CA0BjB;AAED,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,yBAAyB,GACpC,SAAS,kBAAkB,EAAE,CAU/B;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CACjC,GAAG,GAAG,CA2CN;AAID,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,yBAAyB;;;;;;;;EAYtC;AAED,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,yBAAyB,GACpC,GAAG,CAKL;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,yBAAyB,EACrC,QAAQ,CAAC,EAAE,0BAA0B,GACpC,cAAc,CAUhB"}

package/dist/src/modules/validators/webauthn.js

@@ -1,7 +1,13 @@
-import { bytesToHex, encodeAbiParameters, hexToBytes, keccak256, stringToBytes, } from 'viem';
+import { bytesToHex, decodeAbiParameters, encodeAbiParameters, hexToBytes, keccak256, stringToBytes, } from 'viem';
 import { compareHexValues } from './ordering.js';
 export const WEBAUTHN_VALIDATOR_ADDRESS = '0x0000000000578c4cb0e472a5462da43c495c3f33';
 export const WEBAUTHN_V0_VALIDATOR_ADDRESS = WEBAUTHN_VALIDATOR_ADDRESS;
+// The account address carried by a stateless WebAuthn configuration. The
+// validator only uses it to re-derive the credential IDs in the same blob and
+// check they match, never to read storage, so any constant works as long as the
+// IDs are derived from it. The real account address cannot be used: it is
+// derived from the init data that would contain it.
+export const WEBAUTHN_STATELESS_ACCOUNT = '0x0000000000000000000000000000000000000000';
 export const WEBAUTHN_MOCK_SIGNATURE = '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';
 const P256_CURVE_ORDER = 0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551n;
 const P256_HALF_CURVE_ORDER = P256_CURVE_ORDER / 2n;
@@ -56,6 +62,29 @@ export function parseWebauthnSignature(signature) {
 export function generateWebauthnCredentialId(pubKeyX, pubKeyY, account) {
     return keccak256(encodeAbiParameters([{ type: 'uint256' }, { type: 'uint256' }, { type: 'address' }], [pubKeyX, pubKeyY, account]));
 }
+const WEBAUTHN_AUTH_ABI = {
+    type: 'tuple[]',
+    name: 'webAuthns',
+    components: [
+        { type: 'bytes', name: 'authenticatorData' },
+        { type: 'string', name: 'clientDataJSON' },
+        { type: 'uint256', name: 'challengeIndex' },
+        { type: 'uint256', name: 'typeIndex' },
+        { type: 'uint256', name: 'r' },
+        { type: 'uint256', name: 's' },
+    ],
+};
+// The same mock assertion `WEBAUTHN_MOCK_SIGNATURE` carries, in the shape the
+// stateless path expects, so a passkey factor can be gas-estimated.
+export function webauthnStatelessMockSignature() {
+    return encodeAbiParameters([WEBAUTHN_AUTH_ABI], [
+        decodeAbiParameters([
+            { type: 'bytes32[]', name: 'credIds' },
+            { type: 'bool', name: 'usePrecompile' },
+            WEBAUTHN_AUTH_ABI,
+        ], WEBAUTHN_MOCK_SIGNATURE)[2],
+    ]);
+}
 export function encodeWebauthnSignatures(credentialIds, usePrecompile, signatures) {
     const ordered = credentialIds
         .map((credentialId, index) => ({
@@ -66,24 +95,18 @@ export function encodeWebauthnSignatures(credentialIds, usePrecompile, signature
     return encodeAbiParameters([
         { type: 'bytes32[]', name: 'credIds' },
         { type: 'bool', name: 'usePrecompile' },
-        {
-            type: 'tuple[]',
-            name: 'webAuthns',
-            components: [
-                { type: 'bytes', name: 'authenticatorData' },
-                { type: 'string', name: 'clientDataJSON' },
-                { type: 'uint256', name: 'challengeIndex' },
-                { type: 'uint256', name: 'typeIndex' },
-                { type: 'uint256', name: 'r' },
-                { type: 'uint256', name: 's' },
-            ],
-        },
+        WEBAUTHN_AUTH_ABI,
     ], [
         ordered.map(({ credentialId }) => credentialId),
         usePrecompile,
         ordered.map(({ signature }) => signature),
     ]);
 }
+// The signature format the validator's stateless path expects: the assertions
+// alone, paired with the configuration's credentials by position.
+export function encodeWebauthnStatelessSignatures(signatures) {
+    return encodeAbiParameters([WEBAUTHN_AUTH_ABI], [signatures.map(normalizeWebauthnSignature)]);
+}
 export function encodeWebauthnSignatureV0(signature, usePrecompile) {
     const normalized = normalizeWebauthnSignatureV0(signature);
     return encodeAbiParameters([
@@ -102,6 +125,19 @@ export function encodeWebauthnSignatureV0(signature, usePrecompile) {
         usePrecompile,
     ]);
 }
+// Orders owners the way the stateless configuration lays their credentials out.
+function statelessCredentialOrder(credentials) {
+    return [...credentials]
+        .map((credential) => {
+        const publicKey = parseWebauthnPublicKey(credential.publicKey);
+        return {
+            ownerId: credential.ownerId,
+            credentialId: generateWebauthnCredentialId(publicKey.x, publicKey.y, WEBAUTHN_STATELESS_ACCOUNT),
+        };
+    })
+        .sort((left, right) => compareHexValues(left.credentialId, right.credentialId))
+        .map(({ ownerId }) => ownerId);
+}
 export function encodeWebauthnValidatorContribution(input) {
     if (input.threshold < 1 || input.threshold > input.ownerOrder.length) {
         throw new Error('Validator threshold is outside the configured owner set');
@@ -137,6 +173,25 @@ export function encodeWebauthnValidatorContribution(input) {
         }
         return encodeWebauthnSignatureV0(signatures[0], input.usePrecompile);
     }
+    if (input.format === 'stateless') {
+        if (!input.credentials) {
+            throw new Error('Stateless WebAuthn contributions require the configured credentials');
+        }
+        const configuredOrder = statelessCredentialOrder(input.credentials);
+        const signingOrder = statelessCredentialOrder(ordered.map((contribution) => ({
+            ownerId: contribution.ownerId,
+            publicKey: contribution.publicKey,
+        })));
+        const expected = configuredOrder.slice(0, signingOrder.length);
+        if (signingOrder.some((ownerId, index) => expected[index] !== ownerId)) {
+            throw new Error('A WebAuthn factor pairs each signature with the credential at the same position, so a partial signer set must be the lowest-ordered credentials of that factor');
+        }
+        const byOwnerId = new Map(ordered.map((contribution, index) => [
+            contribution.ownerId,
+            signatures[index],
+        ]));
+        return encodeWebauthnStatelessSignatures(signingOrder.map((ownerId) => byOwnerId.get(ownerId)));
+    }
     const credentialIds = ordered.map((contribution) => {
         const publicKey = parseWebauthnPublicKey(contribution.publicKey);
         return generateWebauthnCredentialId(publicKey.x, publicKey.y, input.account);
@@ -232,6 +287,66 @@ export function webauthnDefinitionCredentials(definition) {
         };
     });
 }
+/**
+ * The configuration `WebAuthnValidator.validateSignatureWithData` expects, which
+ * is *not* the validator's install data: a verification context plus the account
+ * the credential IDs were derived from. Multi-factor stores this blob verbatim
+ * and hands it back on every factor validation.
+ *
+ * Written for the deployed validator ({@link WEBAUTHN_VALIDATOR_ADDRESS}); a
+ * future deployment that drops the account from credential-ID derivation would
+ * need its own encoder.
+ */
+export function encodeWebauthnStatelessData(input) {
+    const credentials = orderWebauthnCredentials(toWebauthnInstallCredentials(input.credentials), { kind: 'credential-id', account: WEBAUTHN_STATELESS_ACCOUNT });
+    return encodeAbiParameters([
+        {
+            name: 'context',
+            type: 'tuple',
+            components: [
+                { name: 'usePrecompile', type: 'bool' },
+                { name: 'threshold', type: 'uint256' },
+                { name: 'credentialIds', type: 'bytes32[]' },
+                {
+                    name: 'credentialData',
+                    type: 'tuple[]',
+                    components: [
+                        { name: 'pubKeyX', type: 'uint256' },
+                        { name: 'pubKeyY', type: 'uint256' },
+                        { name: 'requireUV', type: 'bool' },
+                    ],
+                },
+            ],
+        },
+        { name: 'account', type: 'address' },
+    ], [
+        {
+            usePrecompile: input.usePrecompile ?? false,
+            threshold: BigInt(input.threshold),
+            credentialIds: credentials.map((credential) => generateWebauthnCredentialId(credential.pubKeyX, credential.pubKeyY, WEBAUTHN_STATELESS_ACCOUNT)),
+            credentialData: [...credentials],
+        },
+        WEBAUTHN_STATELESS_ACCOUNT,
+    ]);
+}
+// A passkey factor signs through the sub-validator's stateless path: the
+// assertions alone, paired with credentials derived from the pinned account.
+export function webauthnStatelessCodecContext(definition) {
+    return {
+        account: WEBAUTHN_STATELESS_ACCOUNT,
+        usePrecompile: false,
+        format: 'stateless',
+        credentials: definition.owners.flatMap((owner) => owner.kind === 'webauthn'
+            ? [{ ownerId: owner.id, publicKey: owner.account.publicKey }]
+            : []),
+    };
+}
+export function resolveWebauthnStatelessData(definition) {
+    return encodeWebauthnStatelessData({
+        credentials: webauthnDefinitionCredentials(definition),
+        threshold: definition.threshold,
+    });
+}
 export function resolveWebauthnValidator(definition, ordering) {
     return resolveWebauthnCredentials({
         credentials: webauthnDefinitionCredentials(definition),

package/dist/src/signing/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../signing/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAI7E,OAAO,KAAK,EACV,2BAA2B,EAC3B,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACxB,MAAM,6BAA6B,CAAA;AAEpC,OAAO,KAAK,EACV,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EAChB,MAAM,SAAS,CAAA;AAEhB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;IACvC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAA;IACjD,QAAQ,CAAC,SAAS,EAAE,2BAA2B,CAAA;IAC/C,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,CAAA;IACrD,QAAQ,CAAC,gBAAgB,EAAE,wBAAwB,CAAA;IACnD,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAA;IACpE,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;CAC7C;AAID,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAA;IACzC,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAA;CAC1C,GAAG,cAAc,CA4DjB;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,cAAc,EACvB,WAAW,CAAC,EAAE,SAAS,GAAG,YAAY,GACrC,0BAA0B,CAoB5B;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,cAAc,EACvB,WAAW,CAAC,EAAE,SAAS,GAAG,YAAY,GACrC,WAAW,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAC,CAmCvD;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE,oBAAoB,CAAC,SAAS,CAAoB,EAC3D,WAAW,GAAE,SAAS,GAAG,YAAwB,GAChD,IAAI,CAAC,oBAAoB,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC,CAsBlE;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,cAAc,GACtB,OAAO,mBAAmB,EAAE,wBAAwB,CAWtD"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../signing/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAI7E,OAAO,KAAK,EACV,2BAA2B,EAC3B,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACxB,MAAM,6BAA6B,CAAA;AAGpC,OAAO,KAAK,EACV,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EAChB,MAAM,SAAS,CAAA;AAEhB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;IACvC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAA;IACjD,QAAQ,CAAC,SAAS,EAAE,2BAA2B,CAAA;IAC/C,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,CAAA;IACrD,QAAQ,CAAC,gBAAgB,EAAE,wBAAwB,CAAA;IACnD,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAA;IACpE,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;CAC7C;AAID,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAA;IACzC,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAA;CAC1C,GAAG,cAAc,CA4DjB;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,cAAc,EACvB,WAAW,CAAC,EAAE,SAAS,GAAG,YAAY,GACrC,0BAA0B,CAoB5B;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,cAAc,EACvB,WAAW,CAAC,EAAE,SAAS,GAAG,YAAY,GACrC,WAAW,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAC,CA+BvD;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE,oBAAoB,CAAC,SAAS,CAAoB,EAC3D,WAAW,GAAE,SAAS,GAAG,YAAwB,GAChD,IAAI,CAAC,oBAAoB,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC,CAsBlE;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,cAAc,GACtB,OAAO,mBAAmB,EAAE,wBAAwB,CAWtD"}

package/dist/src/signing/context.js

@@ -2,6 +2,7 @@ import { isAddressEqual } from 'viem';
 import { getValidatorCapabilities } from '../modules/validators/capabilities.js';
 import { resolveValidator } from '../modules/validators/resolve.js';
 import { ecdsaSignerId } from '../modules/validators/signer-id.js';
+import { webauthnStatelessCodecContext } from '../modules/validators/webauthn.js';
 import { signingTopology } from './plan.js';
 const zeroAddress = '0x0000000000000000000000000000000000000000';
 export function createAccountSigningContext(input) {
@@ -90,11 +91,7 @@ export function getSigningValidatorFactors(context, payloadKind) {
             codec: factor.kind === 'passkey'
                 ? {
                     ...normalizedCodec,
-                    webauthn: {
-                        account: context.account.address,
-                        usePrecompile: false,
-                        format: 'current',
-                    },
+                    webauthn: webauthnStatelessCodecContext(factor),
                 }
                 : normalizedCodec,
         };

package/dist/src/smart-sessions/index.d.ts

@@ -1,16 +1,21 @@
-import type { Abi, Address } from 'viem';
+import type { Abi, Address, Chain } from 'viem';
 import type { ProviderConfig, Session, SessionDefinition } from '../config/account.js';
 import { toCrossChainPermissionInput } from '../modules/validators/smart-sessions/cross-chain-permits.js';
 import { getPermissionId, getSessionData } from '../modules/validators/smart-sessions/digest.js';
 import { SMART_SESSION_EMISSARY_ADDRESS, SMART_SESSION_EMISSARY_ADDRESS_DEV } from '../modules/validators/smart-sessions/module.js';
 import { ARG_POLICY_ADDRESS, INTENT_EXECUTION_POLICY_ADDRESS, SPENDING_LIMITS_POLICY_ADDRESS, SUDO_POLICY_ADDRESS, TIME_FRAME_POLICY_ADDRESS, UNIVERSAL_ACTION_POLICY_ADDRESS, USAGE_LIMIT_POLICY_ADDRESS, VALUE_LIMIT_POLICY_ADDRESS } from '../modules/validators/smart-sessions/policies/addresses.js';
 import { SMART_SESSIONS_FALLBACK_TARGET_FLAG, SMART_SESSIONS_FALLBACK_TARGET_SELECTOR_FLAG } from '../modules/validators/smart-sessions/resolve.js';
-import type { ChainDigest, SessionDetails } from '../modules/validators/smart-sessions/types.js';
-declare function toSession<const TAbis extends readonly Abi[]>(definition: SessionDefinition<TAbis>, options?: {
+import { fynd } from '../modules/validators/smart-sessions/swap/fynd.js';
+import { rhinestoneSwap } from '../modules/validators/smart-sessions/swap/rhinestone.js';
+import type { SwapVenueFor } from '../modules/validators/smart-sessions/swap/scope.js';
+import type { ZeroExAnySettlerOptions, ZeroExPinnedOptions } from '../modules/validators/smart-sessions/swap/zero-ex.js';
+import { resolveZeroExSettler, zeroEx } from '../modules/validators/smart-sessions/swap/zero-ex.js';
+import type { ChainDigest, FyndVenue, RhinestoneSwapVenue, SessionDetails, SwapVenue, ZeroExVenue } from '../modules/validators/smart-sessions/types.js';
+declare function toSession<const TAbis extends readonly Abi[], const TChain extends Chain>(definition: SessionDefinition<TAbis, TChain>, options?: {
     useDevContracts?: boolean;
 }): Session;
 declare function getSessionDetails(account: Address, sessions: Session[], provider: ProviderConfig | undefined, useDevContracts?: boolean): Promise<SessionDetails>;
 declare function isSessionEnabled(account: Address, provider: ProviderConfig | undefined, session: Session, useDevContracts?: boolean): Promise<boolean>;
-export { toSession, SMART_SESSION_EMISSARY_ADDRESS, SMART_SESSION_EMISSARY_ADDRESS_DEV, SMART_SESSIONS_FALLBACK_TARGET_FLAG, SMART_SESSIONS_FALLBACK_TARGET_SELECTOR_FLAG, getPermissionId, getSessionData, getSessionDetails, isSessionEnabled, toCrossChainPermissionInput, SPENDING_LIMITS_POLICY_ADDRESS, TIME_FRAME_POLICY_ADDRESS, SUDO_POLICY_ADDRESS, UNIVERSAL_ACTION_POLICY_ADDRESS, ARG_POLICY_ADDRESS, USAGE_LIMIT_POLICY_ADDRESS, VALUE_LIMIT_POLICY_ADDRESS, INTENT_EXECUTION_POLICY_ADDRESS, };
-export type { ChainDigest, SessionDetails };
+export type { ChainDigest, FyndVenue, RhinestoneSwapVenue, SessionDetails, SwapVenue, SwapVenueFor, ZeroExAnySettlerOptions, ZeroExPinnedOptions, ZeroExVenue, };
+export { ARG_POLICY_ADDRESS, fynd, getPermissionId, getSessionData, getSessionDetails, INTENT_EXECUTION_POLICY_ADDRESS, isSessionEnabled, resolveZeroExSettler, rhinestoneSwap, SMART_SESSION_EMISSARY_ADDRESS, SMART_SESSION_EMISSARY_ADDRESS_DEV, SMART_SESSIONS_FALLBACK_TARGET_FLAG, SMART_SESSIONS_FALLBACK_TARGET_SELECTOR_FLAG, SPENDING_LIMITS_POLICY_ADDRESS, SUDO_POLICY_ADDRESS, TIME_FRAME_POLICY_ADDRESS, toCrossChainPermissionInput, toSession, UNIVERSAL_ACTION_POLICY_ADDRESS, USAGE_LIMIT_POLICY_ADDRESS, VALUE_LIMIT_POLICY_ADDRESS, zeroEx, };
 //# sourceMappingURL=index.d.ts.map

package/dist/src/smart-sessions/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../smart-sessions/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAExC,OAAO,KAAK,EACV,cAAc,EACd,OAAO,EACP,iBAAiB,EAClB,MAAM,mBAAmB,CAAA;AAK1B,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAA;AACtG,OAAO,EACL,eAAe,EACf,cAAc,EACf,MAAM,6CAA6C,CAAA;AACpD,OAAO,EACL,8BAA8B,EAC9B,kCAAkC,EACnC,MAAM,6CAA6C,CAAA;AACpD,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,8BAA8B,EAC9B,mBAAmB,EACnB,yBAAyB,EACzB,+BAA+B,EAC/B,0BAA0B,EAC1B,0BAA0B,EAC3B,MAAM,yDAAyD,CAAA;AAChE,OAAO,EAEL,mCAAmC,EACnC,4CAA4C,EAC7C,MAAM,8CAA8C,CAAA;AAKrD,OAAO,KAAK,EACV,WAAW,EAGX,cAAc,EACf,MAAM,4CAA4C,CAAA;AAMnD,iBAAS,SAAS,CAAC,KAAK,CAAC,KAAK,SAAS,SAAS,GAAG,EAAE,EACnD,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC,EACpC,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1C,OAAO,CAIT;AAED,iBAAe,iBAAiB,CAC9B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,OAAO,EAAE,EACnB,QAAQ,EAAE,cAAc,GAAG,SAAS,EACpC,eAAe,CAAC,EAAE,OAAO,GACxB,OAAO,CAAC,cAAc,CAAC,CAiBzB;AAED,iBAAe,gBAAgB,CAC7B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,GAAG,SAAS,EACpC,OAAO,EAAE,OAAO,EAChB,eAAe,CAAC,EAAE,OAAO,GACxB,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,OAAO,EACL,SAAS,EACT,8BAA8B,EAC9B,kCAAkC,EAClC,mCAAmC,EACnC,4CAA4C,EAC5C,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,2BAA2B,EAC3B,8BAA8B,EAC9B,yBAAyB,EACzB,mBAAmB,EACnB,+BAA+B,EAC/B,kBAAkB,EAClB,0BAA0B,EAC1B,0BAA0B,EAC1B,+BAA+B,GAChC,CAAA;AACD,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../smart-sessions/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAE/C,OAAO,KAAK,EACV,cAAc,EACd,OAAO,EACP,iBAAiB,EAClB,MAAM,mBAAmB,CAAA;AAK1B,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAA;AACtG,OAAO,EACL,eAAe,EACf,cAAc,EACf,MAAM,6CAA6C,CAAA;AACpD,OAAO,EACL,8BAA8B,EAC9B,kCAAkC,EACnC,MAAM,6CAA6C,CAAA;AACpD,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,8BAA8B,EAC9B,mBAAmB,EACnB,yBAAyB,EACzB,+BAA+B,EAC/B,0BAA0B,EAC1B,0BAA0B,EAC3B,MAAM,yDAAyD,CAAA;AAChE,OAAO,EAEL,mCAAmC,EACnC,4CAA4C,EAC7C,MAAM,8CAA8C,CAAA;AAKrD,OAAO,EAAE,IAAI,EAAE,MAAM,gDAAgD,CAAA;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAA;AACrF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iDAAiD,CAAA;AACnF,OAAO,KAAK,EACV,uBAAuB,EACvB,mBAAmB,EACpB,MAAM,mDAAmD,CAAA;AAC1D,OAAO,EACL,oBAAoB,EACpB,MAAM,EACP,MAAM,mDAAmD,CAAA;AAC1D,OAAO,KAAK,EACV,WAAW,EAGX,SAAS,EACT,mBAAmB,EACnB,cAAc,EACd,SAAS,EACT,WAAW,EACZ,MAAM,4CAA4C,CAAA;AAMnD,iBAAS,SAAS,CAChB,KAAK,CAAC,KAAK,SAAS,SAAS,GAAG,EAAE,EAClC,KAAK,CAAC,MAAM,SAAS,KAAK,EAE1B,UAAU,EAAE,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,EAC5C,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1C,OAAO,CAIT;AAED,iBAAe,iBAAiB,CAC9B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,OAAO,EAAE,EACnB,QAAQ,EAAE,cAAc,GAAG,SAAS,EACpC,eAAe,CAAC,EAAE,OAAO,GACxB,OAAO,CAAC,cAAc,CAAC,CAiBzB;AAED,iBAAe,gBAAgB,CAC7B,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,cAAc,GAAG,SAAS,EACpC,OAAO,EAAE,OAAO,EAChB,eAAe,CAAC,EAAE,OAAO,GACxB,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,YAAY,EACV,WAAW,EACX,SAAS,EACT,mBAAmB,EACnB,cAAc,EACd,SAAS,EACT,YAAY,EACZ,uBAAuB,EACvB,mBAAmB,EACnB,WAAW,GACZ,CAAA;AACD,OAAO,EACL,kBAAkB,EAClB,IAAI,EACJ,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,+BAA+B,EAC/B,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,8BAA8B,EAC9B,kCAAkC,EAClC,mCAAmC,EACnC,4CAA4C,EAC5C,8BAA8B,EAC9B,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,SAAS,EACT,+BAA+B,EAC/B,0BAA0B,EAC1B,0BAA0B,EAE1B,MAAM,GACP,CAAA"}

package/dist/src/smart-sessions/index.js

@@ -6,6 +6,9 @@ import { SMART_SESSION_EMISSARY_ADDRESS, SMART_SESSION_EMISSARY_ADDRESS_DEV, } f
 import { ARG_POLICY_ADDRESS, INTENT_EXECUTION_POLICY_ADDRESS, SPENDING_LIMITS_POLICY_ADDRESS, SUDO_POLICY_ADDRESS, TIME_FRAME_POLICY_ADDRESS, UNIVERSAL_ACTION_POLICY_ADDRESS, USAGE_LIMIT_POLICY_ADDRESS, VALUE_LIMIT_POLICY_ADDRESS, } from '../modules/validators/smart-sessions/policies/addresses.js';
 import { toSession as resolveSession, SMART_SESSIONS_FALLBACK_TARGET_FLAG, SMART_SESSIONS_FALLBACK_TARGET_SELECTOR_FLAG, } from '../modules/validators/smart-sessions/resolve.js';
 import { readSessionEnabled, readSessionNonce, } from '../modules/validators/smart-sessions/state.js';
+import { fynd } from '../modules/validators/smart-sessions/swap/fynd.js';
+import { rhinestoneSwap } from '../modules/validators/smart-sessions/swap/rhinestone.js';
+import { resolveZeroExSettler, zeroEx, } from '../modules/validators/smart-sessions/swap/zero-ex.js';
 function environment(useDevContracts) {
     return useDevContracts === true ? 'development' : 'production';
 }
@@ -42,4 +45,6 @@ async function isSessionEnabled(account, provider, session, useDevContracts) {
         environment: environment(useDevContracts),
     });
 }
-export { toSession, SMART_SESSION_EMISSARY_ADDRESS, SMART_SESSION_EMISSARY_ADDRESS_DEV, SMART_SESSIONS_FALLBACK_TARGET_FLAG, SMART_SESSIONS_FALLBACK_TARGET_SELECTOR_FLAG, getPermissionId, getSessionData, getSessionDetails, isSessionEnabled, toCrossChainPermissionInput, SPENDING_LIMITS_POLICY_ADDRESS, TIME_FRAME_POLICY_ADDRESS, SUDO_POLICY_ADDRESS, UNIVERSAL_ACTION_POLICY_ADDRESS, ARG_POLICY_ADDRESS, USAGE_LIMIT_POLICY_ADDRESS, VALUE_LIMIT_POLICY_ADDRESS, INTENT_EXECUTION_POLICY_ADDRESS, };
+export { ARG_POLICY_ADDRESS, fynd, getPermissionId, getSessionData, getSessionDetails, INTENT_EXECUTION_POLICY_ADDRESS, isSessionEnabled, resolveZeroExSettler, rhinestoneSwap, SMART_SESSION_EMISSARY_ADDRESS, SMART_SESSION_EMISSARY_ADDRESS_DEV, SMART_SESSIONS_FALLBACK_TARGET_FLAG, SMART_SESSIONS_FALLBACK_TARGET_SELECTOR_FLAG, SPENDING_LIMITS_POLICY_ADDRESS, SUDO_POLICY_ADDRESS, TIME_FRAME_POLICY_ADDRESS, toCrossChainPermissionInput, toSession, UNIVERSAL_ACTION_POLICY_ADDRESS, USAGE_LIMIT_POLICY_ADDRESS, VALUE_LIMIT_POLICY_ADDRESS, 
+// Venue-scoped swap sessions (RHI-6286)
+zeroEx, };

package/dist/src/transactions/intents/session-signing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-signing.d.ts","sourceRoot":"","sources":["../../../../transactions/intents/session-signing.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAE3D,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAA;AAOtF,OAAO,KAAK,EAEV,oBAAoB,EAGrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,wBAAgB,gCAAgC,CAAC,mBAAmB,EAClE,QAAQ,EAAE,cAAc,CAAC,mBAAmB,CAAC,EAC7C,QAAQ,EAAE,oBAAoB,GAC7B,oBAAoB,CA+BtB;AAED,wBAAgB,2BAA2B,CAAC,mBAAmB,EAC7D,QAAQ,EAAE,cAAc,CAAC,mBAAmB,CAAC,EAC7C,OAAO,EAAE,cAAc,GACtB,8BAA8B,CA2FhC"}
+{"version":3,"file":"session-signing.d.ts","sourceRoot":"","sources":["../../../../transactions/intents/session-signing.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAE3D,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAA;AAOtF,OAAO,KAAK,EAEV,oBAAoB,EAGrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAE7C,wBAAgB,gCAAgC,CAAC,mBAAmB,EAClE,QAAQ,EAAE,cAAc,CAAC,mBAAmB,CAAC,EAC7C,QAAQ,EAAE,oBAAoB,GAC7B,oBAAoB,CA+BtB;AAED,wBAAgB,2BAA2B,CAAC,mBAAmB,EAC7D,QAAQ,EAAE,cAAc,CAAC,mBAAmB,CAAC,EAC7C,OAAO,EAAE,cAAc,GACtB,8BAA8B,CA2FhC"}

package/dist/src/transactions/intents/session-signing.js

@@ -7,6 +7,7 @@ import { resolveAtomicValidator, resolveValidator, } from '../../modules/validat
 import { getSessionData } from '../../modules/validators/smart-sessions/digest.js';
 import { getSmartSessionEmissaryAddress } from '../../modules/validators/smart-sessions/module.js';
 import { resolvePermit2ClaimPolicy, selectPermit2ClaimPolicyForMessage, } from '../../modules/validators/smart-sessions/policies/claim.js';
+import { webauthnStatelessCodecContext } from '../../modules/validators/webauthn.js';
 import { getAccountSignatureEnvelope } from '../../signing/context.js';
 import { createValidatorSigningTasks, signingTopology, } from '../../signing/plan.js';
 import { createSignerInvocationPort } from '../../signing/signers/registry.js';
@@ -257,7 +258,7 @@ function sessionOwnerSigning(session, account) {
                     id: factor.id,
                     publicId: factor.publicId,
                     validator: resolveAtomicValidator(factor).address,
-                    codec: withWebauthnContext(requireAtomicSignerCodec(getValidatorCapabilities(factor, resolveAtomicValidator(factor), 'smart-session-owner', 'intent', false).contributionCodec), factor.kind === 'passkey', account),
+                    codec: withFactorWebauthnContext(requireAtomicSignerCodec(getValidatorCapabilities(factor, resolveAtomicValidator(factor), 'smart-session-owner', 'intent', false).contributionCodec), factor),
                 })),
             }
             : {}),
@@ -325,6 +326,11 @@ function withWebauthnContext(codec, webauthn, account) {
         },
     };
 }
+function withFactorWebauthnContext(codec, factor) {
+    return factor.kind === 'passkey'
+        ? { ...codec, webauthn: webauthnStatelessCodecContext(factor) }
+        : codec;
+}
 function sessionAccountEnvelope(envelope, validator) {
     if (envelope.kind === 'none')
         return envelope;

package/dist/src/transactions/user-operations/validator-account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator-account.d.ts","sourceRoot":"","sources":["../../../../transactions/user-operations/validator-account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAK5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAE3D,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,GACtB,GAAG,CAuBL"}
+{"version":3,"file":"validator-account.d.ts","sourceRoot":"","sources":["../../../../transactions/user-operations/validator-account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAQ5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAE3D,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,GACtB,GAAG,CAuBL"}

package/dist/src/transactions/user-operations/validator-account.js

@@ -1,7 +1,7 @@
 import { encodeMultiFactorContribution } from '../../modules/validators/multi-factor.js';
 import { encodeOwnableMockSignature } from '../../modules/validators/ownable.js';
 import { resolveValidator } from '../../modules/validators/resolve.js';
-import { WEBAUTHN_MOCK_SIGNATURE } from '../../modules/validators/webauthn.js';
+import { WEBAUTHN_MOCK_SIGNATURE, webauthnStatelessMockSignature, } from '../../modules/validators/webauthn.js';
 export function getUserOperationStubSignature(runtime, context) {
     if (!runtime.adapter.capabilities.supportsUserOperations) {
         throw new Error(`Account ${runtime.construction.account.kind} does not support UserOperations`);
@@ -17,7 +17,7 @@ export function getUserOperationStubSignature(runtime, context) {
                 publicId: validator.publicId,
                 validator: resolveValidator(validator).address,
                 contribution: validator.kind === 'passkey'
-                    ? WEBAUTHN_MOCK_SIGNATURE
+                    ? webauthnStatelessMockSignature()
                     : encodeOwnableMockSignature(validator.owners.length),
             })),
         });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rhinestone/sdk",
-  "version": "2.4.0",
+  "version": "2.6.0",
   "description": "End-to-end chain abstraction and modularity toolkit",
   "author": {
     "name": "Rhinestone",