@rhinestone/shared-configs 2.0.0 → 2.1.0

package/dist/src/generated/packageVersion.d.ts

@@ -1,2 +1,2 @@
-declare const PACKAGE_VERSION = "2.0.0";
+declare const PACKAGE_VERSION = "2.1.0";
 export { PACKAGE_VERSION };

package/dist/src/generated/packageVersion.js

@@ -2,5 +2,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PACKAGE_VERSION = void 0;
 // Auto-generated by scripts/generate.ts. Do not edit manually.
-const PACKAGE_VERSION = "2.0.0";
+const PACKAGE_VERSION = "2.1.0";
 exports.PACKAGE_VERSION = PACKAGE_VERSION;

package/dist/src/index.d.ts

@@ -1,6 +1,6 @@
 import { contractAddresses } from "./generated/contracts";
 import { contractAddresses as contractAddressesDev } from "./generated/contracts.dev";
-import type { CctpChainConfig, ChainEntry, ChainExplorer, ChainItem, ChainList, ChainNetwork, ChainStack, ChainRegistry, ChainRoles, NearChainConfig, OftChainConfig, ProviderName, ProviderRegistry, RhinoChainConfig, SettlementConfig, SettlementLayer, SupportedChain, SupportedMainnet, SupportedOPStackMainnet, SupportedOPStackTestnet, SupportedTestnet, SwapQuoter } from "./types";
+import type { CctpChainConfig, ChainEntry, ChainExplorer, ChainItem, ChainList, ChainNetwork, ChainStack, ChainRegistry, ChainRoles, NearChainConfig, OftChainConfig, ProviderName, ProviderRegistry, RhinoChainConfig, SettlementConfig, SettlementLayer, SupportedChain, SupportedMainnet, SupportedOPStackMainnet, SupportedOPStackTestnet, SupportedTestnet, SwapQuoter, TokenAuthorization, TokenAuthorizationDomain, TokenAuthorizationStandard, TokenEntry } from "./types";
 import { chains, MainnetNetwork, mainnetChains, OPStackChains, TestnetNetwork, testnetChains } from "./types";
 import type { PegGroup } from "./types";
 import { getOftConfig, getSupportedOftTokens, hasOftSupport, OFT_REGISTRY } from "./oft";
@@ -16,5 +16,5 @@ declare const mainnetChainList: ChainList;
 declare const testnetChainList: ChainList;
 declare function chainHasUnpricedTokens(chainId: number): boolean;
 export { chainRegistry, providerRegistry, mainnetChainList, testnetChainList, contractAddresses, contractAddressesDev, chains, mainnetChains, testnetChains, MainnetNetwork, OPStackChains, TestnetNetwork, OFT_REGISTRY, getOftConfig, hasOftSupport, getSupportedOftTokens, chainHasUnpricedTokens, HYPERCORE_SPOT_CHAIN_ID, HYPERCORE_PERP_CHAIN_ID, HYPERCORE_ORIGIN_CHAIN_ID, getHyperCoreDestinationDex, HYPERCORE_SETTLEMENT_CHAIN_ID, CORE_WRITER_PRECOMPILE, CORE_DEPOSIT_WALLET, HYPERCORE_SPOT_DEX, HYPERCORE_DEFAULT_PERP_DEX, HYPERCORE_USDC_ACTIVATION_FEE, getApproveCoreDepositWalletCall, getDepositForCall, isHyperCoreChainId, resolveSettlementChainId, canBeOrigin, canBeDestination, isNonEvmChainId, getNonEvmChainIds, getCaip2, chainIdFromCaip2, createChainFactsClient, CHAIN_FACTS_LATEST_URL, CHAIN_FACTS_PUBLIC_KEY, };
-export type { ChainEntry, ChainExplorer, ChainItem, ChainList, ChainNetwork, ChainStack, ChainRegistry, ChainRoles, ProviderRegistry, ProviderName, SwapQuoter, SupportedMainnet, SupportedTestnet, SupportedChain, SupportedOPStackMainnet, SupportedOPStackTestnet, SettlementLayer, SettlementConfig, CctpChainConfig, NearChainConfig, OftChainConfig, RhinoChainConfig, OftConfig, PegGroup, ChainFactsClient, ChainFactsClientOptions, ChainFactsErrorPhase, ChainFactsPayload, ChainFactsSnapshot, ChainFactsSource, };
+export type { ChainEntry, ChainExplorer, ChainItem, ChainList, ChainNetwork, ChainStack, ChainRegistry, ChainRoles, ProviderRegistry, ProviderName, SwapQuoter, SupportedMainnet, SupportedTestnet, SupportedChain, SupportedOPStackMainnet, SupportedOPStackTestnet, SettlementLayer, TokenAuthorization, TokenAuthorizationDomain, TokenAuthorizationStandard, TokenEntry, SettlementConfig, CctpChainConfig, NearChainConfig, OftChainConfig, RhinoChainConfig, OftConfig, PegGroup, ChainFactsClient, ChainFactsClientOptions, ChainFactsErrorPhase, ChainFactsPayload, ChainFactsSnapshot, ChainFactsSource, };
 export * from "./abis";

package/dist/src/types.d.ts

@@ -1,5 +1,5 @@
 /** biome-ignore-all lint/style/useLiteralEnumMembers: readability */
-import type { Address } from 'viem';
+import type { Address, Hex } from 'viem';
 import { chains, MainnetNetwork, mainnetChains, OPStackChains, TestnetNetwork, testnetChains } from './generated/networks';
 type EnumNumberValues<E> = Extract<E[keyof E], number>;
 type SupportedTestnet = EnumNumberValues<typeof TestnetNetwork>;
@@ -27,6 +27,39 @@ type ChainNetwork = 'mainnet' | 'testnet';
  * to keep working.
  */
 type ChainStack = 'op-stack' | 'zksync' | 'celo' | 'vanilla';
+/** Token-native EIP-712 authorization standards understood by consumers. */
+type TokenAuthorizationStandard = 'erc3009' | 'erc2612';
+/** Exact EIP-712 domain fields used by the deployed token. */
+interface CanonicalTokenAuthorizationDomain {
+    name: string;
+    version: string;
+    chainId: number;
+    verifyingContract: Address;
+    salt?: never;
+}
+/** Legacy Polygon-style domain that encodes the chain id as a bytes32 salt. */
+interface SaltedTokenAuthorizationDomain {
+    name: string;
+    version: string;
+    verifyingContract: Address;
+    salt: Hex;
+    chainId?: never;
+}
+type TokenAuthorizationDomain = CanonicalTokenAuthorizationDomain | SaltedTokenAuthorizationDomain;
+/**
+ * Signed authorizations implemented by the token contract itself.
+ *
+ * Permit2 is intentionally not represented here: it is an external contract
+ * and depends on the owner's token allowance, not on token implementation.
+ */
+interface TokenAuthorization {
+    standards: TokenAuthorizationStandard[];
+    domain: TokenAuthorizationDomain;
+    /** Exact value returned by the deployed token's DOMAIN_SEPARATOR(). */
+    domainSeparator: Hex;
+    /** Whether these token-native signature paths accept EOAs only. */
+    eoaOnly: boolean;
+}
 declare const PEG_GROUPS: Record<PegGroup, {
     tolerance: number;
 }>;
@@ -39,6 +72,18 @@ interface TokenEntry {
     pegGroup?: PegGroup;
     balanceSlot: number | null;
     approvalSlot: number | null;
+    /**
+     * Token-native signed authorization support, when explicitly verified.
+     *
+     * `domain` contains the exact EIP-712 signing fields and `domainSeparator`
+     * pins the value returned by the deployed token. Consumers should derive the
+     * separator from `domain`, compare it with both the pinned value and the live
+     * contract, and fail closed before collecting a signature if either differs.
+     *
+     * Absent means "no verified native authorization capability", not that an
+     * external path such as Permit2 is unavailable.
+     */
+    authorization?: TokenAuthorization;
     /**
      * Bridge layers that can carry *this token* on this chain, when known.
      *
@@ -268,6 +313,44 @@ interface ChainEntry {
      * say so). This is the outer bound: what the chain itself permits.
      */
     roles?: ChainRoles;
+    /**
+     * What the deposit-ingestion vendors call this chain.
+     *
+     * These are the last identifiers that made adding a chain a code change: a
+     * chain missing from deposit-processor's Alchemy map is never considered for
+     * webhook creation, one missing from its Zerion map is never ingested, and a
+     * chain in neither publishes `deposit: false` and turns into a refund-only
+     * chain. Neither id is derivable from anything else here.
+     *
+     * On `ChainEntry` rather than under a consumer's namespace because an
+     * Alchemy network name is a fact about the chain, not about deposit-processor:
+     * the next service to adopt a vendor reads the same key instead of another
+     * service's.
+     *
+     * `null` is an answer, and a different one from absence: the vendor was
+     * checked and does not serve this chain. Both null means the chain cannot take
+     * deposits at all. Absence, by contrast, would mean an artifact published
+     * before this field existed — which is why it is required here, on the same
+     * reasoning as `network` and `stack`: the read-client refuses any artifact
+     * older than the registry bundled with the package reading it, so a package
+     * whose bundled registry carries this can only accept remote artifacts that
+     * carry it too.
+     */
+    providerIds: ProviderIds;
+    /**
+     * Whether we open smart sessions on this chain.
+     *
+     * A declared policy, not a derived one. The underlying constraint is where the
+     * SmartSession modules are deployed — which `bootstrap_full` does everywhere,
+     * making deployment necessary but not sufficient, since we still decline to
+     * open sessions on testnets. `@rhinestone/sdk` gates nothing here: its chain
+     * catalog resolves any chain by id, so this is the only statement of the
+     * answer.
+     *
+     * A consumer rejects `setup-account` for a chain that is `false`. Required for
+     * the same reason as `providerIds`.
+     */
+    sessionCapable: boolean;
     nativeToken: NativeTokenEntry;
     wrappedNativeToken: NativeTokenEntry;
     tokens: TokenEntry[];
@@ -276,6 +359,16 @@ interface ChainEntry {
     swapQuoters: SwapQuoter[];
     swapQuoterConfig?: Partial<Record<SwapQuoter, SwapQuoterConfig>>;
 }
+/**
+ * Vendor-keyed, so a chain states each vendor's own name for it once. `null`
+ * means checked and unsupported — see `ChainEntry.providerIds`.
+ */
+interface ProviderIds {
+    /** Alchemy Notify network name, e.g. `BASE_MAINNET`. */
+    alchemy: string | null;
+    /** Zerion chain slug, e.g. `binance-smart-chain`. */
+    zerion: string | null;
+}
 type ContractAddresses = Record<string, Record<string, Address>>;
 interface ChainRegistry {
     [chainId: string]: ChainEntry;
@@ -320,4 +413,4 @@ interface ErpcConfig {
     providerIdPrefix: Record<string, string>;
 }
 export { OPStackChains, MainnetNetwork, TestnetNetwork, mainnetChains, testnetChains, chains, PEG_GROUPS };
-export type { CctpChainConfig, ChainItem, ChainEntry, ChainExplorer, ChainNetwork, ChainRegistry, ChainRoles, ChainStack, ChainList, ContractAddresses, NearChainConfig, OftChainConfig, ProviderRegistry, ProviderName, RhinoChainConfig, SettlementConfig, SettlementLayer, SupportedTestnet, SupportedMainnet, SupportedOPStackMainnet, SupportedOPStackTestnet, SupportedChain, SwapQuoter, SwapQuoterConfig, PegGroup, VmType, ErpcFailsafe, ErpcChainOverride, ErpcConfig, };
+export type { CctpChainConfig, ChainItem, ChainEntry, ChainExplorer, ChainNetwork, ChainRegistry, ChainRoles, ChainStack, ChainList, ContractAddresses, NearChainConfig, OftChainConfig, ProviderIds, ProviderRegistry, ProviderName, RhinoChainConfig, SettlementConfig, SettlementLayer, TokenAuthorization, TokenAuthorizationDomain, TokenAuthorizationStandard, TokenEntry, SupportedTestnet, SupportedMainnet, SupportedOPStackMainnet, SupportedOPStackTestnet, SupportedChain, SwapQuoter, SwapQuoterConfig, PegGroup, VmType, ErpcFailsafe, ErpcChainOverride, ErpcConfig, };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rhinestone/shared-configs",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Reusable configuration files for Rhinestone services",
   "author": {
     "name": "Rhinestone",
@@ -27,6 +27,7 @@
     "generate:abis": "bun run scripts/generate-abis.ts",
     "generate:abis:extract": "bun run scripts/generate-abis.ts --extract",
     "sync:abis": "bun run scripts/sync-abis.ts",
+    "audit:token-authorizations": "bun run scripts/audit-token-authorizations.ts",
     "check:vendor-drift": "bun run scripts/vendor-drift/main.ts",
     "compile": "tsc",
     "test": "bun test",