@shroud-fi/self-host-relayer 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ShroudFi contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,64 @@
+# @shroud-fi/self-host-relayer
+
+> Self-hosted gasless sweep relayer service. Fastify server for EIP-7702 / ERC-2771 sweep broadcasts.
+
+[![npm](https://img.shields.io/npm/v/@shroud-fi/self-host-relayer.svg)](https://www.npmjs.com/package/@shroud-fi/self-host-relayer)
+[![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](./LICENSE)
+
+```bash
+npm i @shroud-fi/self-host-relayer
+```
+
+## What it does
+
+`@shroud-fi/self-host-relayer` is a small Fastify HTTP server that operators can run to broadcast gasless sweep transactions for ShroudFi stealth addresses. It accepts signed authorizations from agents, broadcasts the on-chain tx, and returns a receipt.
+
+This is the server-side counterpart to [`@shroud-fi/relayer`](https://www.npmjs.com/package/@shroud-fi/relayer). The reference deployment runs at `https://api.shroudfi.live`; this package lets you stand up your own.
+
+## Routes
+
+| Route | Method | Purpose |
+|---|---|---|
+| `/health` | GET | Liveness — returns `{ ok: true, chainId }`. |
+| `/relay` | POST | ERC-20 sweep via EIP-2612 permit + ERC-2771 metaTx. |
+| `/relay-eth` | POST | ETH sweep via EIP-7702 delegated authorization. |
+
+## Quick start
+
+```ts
+import { startServer } from '@shroud-fi/self-host-relayer';
+
+await startServer({
+  chainId: 8453,
+  port: 8789,
+  rpcUrl: process.env.BASE_RPC_URL!,
+  relayerContract: '0x44f35ED32516AE8247aF5ec4ED5d5BEb501631d1',
+  forwarderPrivateKey: process.env.FORWARDER_KEY! as `0x${string}`,
+  allowedOrigins: ['https://your-dapp.example'],
+  rateLimitPerMinute: 30,
+});
+```
+
+Or use the production entry that reads everything from env:
+
+```bash
+node node_modules/@shroud-fi/self-host-relayer/dist/esm/prod-entry.js
+```
+
+Required env: `SHROUDFI_RELAYER_CONTRACT`, `SHROUDFI_RELAYER_FORWARDER_KEY`, `SHROUDFI_RELAYER_RPC_URL`, `SHROUDFI_RELAYER_ORIGINS`, `SHROUDFI_RELAYER_CHAIN_ID`, `SHROUDFI_RELAYER_PORT`. Optional: `SHROUDFI_RELAYER_RATE_LIMIT`, `SHROUDFI_ETH_RELAYER_CONTRACT`.
+
+## Deployment
+
+A reference PM2 ecosystem config + droplet ops playbook ships with the source repo. The relayer is designed to run as a **singleton fork** — cluster mode would race on the forwarder EOA nonce.
+
+## Privacy invariants
+
+- The relayer **never sees transfer amounts** in plaintext — sweep authorizations encode the destination + token, not the amount; the contract reads `balanceOf` at execution.
+- **No request logging** by default. Set `DEBUG_DIAGNOSTICS=1` only for local debugging.
+- **Single-purpose forwarder EOA** — should hold only the gas balance needed for sweep ops. Do not reuse with personal wallets.
+
+## License
+
+MIT — see [LICENSE](./LICENSE).
+
+Part of the [ShroudFi](https://shroudfi.live) privacy SDK for AI agents on Base.

package/dist/cjs/dev-entry.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Dev entry: reads config from env vars and starts the server.
+ *
+ * Required env:
+ *   SHROUDFI_RELAYER_CONTRACT       - deployed ShroudFiRelayer address
+ *   SHROUDFI_RELAYER_FORWARDER_KEY  - 0x-prefixed 32-byte forwarder EOA key
+ *   SHROUDFI_RELAYER_RPC_URL        - chain RPC URL
+ *
+ * Optional env:
+ *   SHROUDFI_RELAYER_CHAIN_ID       - default 84532
+ *   SHROUDFI_RELAYER_PORT           - default 8787
+ *   SHROUDFI_RELAYER_ORIGINS        - comma-sep allowed origins (default localhost demo)
+ *   SHROUDFI_RELAYER_RATE_LIMIT     - per-IP requests per minute (default 30)
+ *   SHROUDFI_ETH_RELAYER_CONTRACT   - deployed ShroudFiEthRelayer address.
+ *                                     When set, /relay-eth becomes active for
+ *                                     gasless ETH sweeps via EIP-7702. When
+ *                                     unset, /relay-eth returns 501.
+ *
+ * Privacy: this file is the ONLY place that touches process.env for the
+ * forwarder key. Once read, the key flows into a viem account closure inside
+ * the server and never resurfaces.
+ */
+export {};
+//# sourceMappingURL=dev-entry.d.ts.map

package/dist/cjs/dev-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-entry.d.ts","sourceRoot":"","sources":["../../src/dev-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG"}

package/dist/cjs/dev-entry.js

@@ -0,0 +1,75 @@
+"use strict";
+/**
+ * Dev entry: reads config from env vars and starts the server.
+ *
+ * Required env:
+ *   SHROUDFI_RELAYER_CONTRACT       - deployed ShroudFiRelayer address
+ *   SHROUDFI_RELAYER_FORWARDER_KEY  - 0x-prefixed 32-byte forwarder EOA key
+ *   SHROUDFI_RELAYER_RPC_URL        - chain RPC URL
+ *
+ * Optional env:
+ *   SHROUDFI_RELAYER_CHAIN_ID       - default 84532
+ *   SHROUDFI_RELAYER_PORT           - default 8787
+ *   SHROUDFI_RELAYER_ORIGINS        - comma-sep allowed origins (default localhost demo)
+ *   SHROUDFI_RELAYER_RATE_LIMIT     - per-IP requests per minute (default 30)
+ *   SHROUDFI_ETH_RELAYER_CONTRACT   - deployed ShroudFiEthRelayer address.
+ *                                     When set, /relay-eth becomes active for
+ *                                     gasless ETH sweeps via EIP-7702. When
+ *                                     unset, /relay-eth returns 501.
+ *
+ * Privacy: this file is the ONLY place that touches process.env for the
+ * forwarder key. Once read, the key flows into a viem account closure inside
+ * the server and never resurfaces.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const server_js_1 = require("./server.js");
+const errors_js_1 = require("./errors.js");
+function envOrThrow(name) {
+    const v = process.env[name];
+    if (v === undefined || v.trim().length === 0) {
+        throw new errors_js_1.RelayConfigError(name);
+    }
+    return v.trim();
+}
+function loadConfig() {
+    const chainId = Number(process.env.SHROUDFI_RELAYER_CHAIN_ID?.trim() ?? '84532');
+    const port = Number(process.env.SHROUDFI_RELAYER_PORT?.trim() ?? '8787');
+    const rateLimitPerMinute = Number(process.env.SHROUDFI_RELAYER_RATE_LIMIT?.trim() ?? '30');
+    const originsCsv = process.env.SHROUDFI_RELAYER_ORIGINS?.trim() ??
+        'http://localhost:3000,http://localhost:3001,http://localhost:3002,http://localhost:3003,http://localhost:3005,http://localhost:3006,http://localhost:3008,http://localhost:3009,http://127.0.0.1:3005,http://127.0.0.1:3009';
+    const allowedOrigins = originsCsv
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+    const ethRelayerRaw = process.env.SHROUDFI_ETH_RELAYER_CONTRACT?.trim();
+    const ethRelayerContract = ethRelayerRaw !== undefined && ethRelayerRaw.length > 0
+        ? ethRelayerRaw
+        : undefined;
+    const base = {
+        chainId,
+        port,
+        rateLimitPerMinute,
+        allowedOrigins,
+        relayerContract: envOrThrow('SHROUDFI_RELAYER_CONTRACT'),
+        rpcUrl: envOrThrow('SHROUDFI_RELAYER_RPC_URL'),
+        forwarderPrivateKey: envOrThrow('SHROUDFI_RELAYER_FORWARDER_KEY'),
+    };
+    return ethRelayerContract === undefined
+        ? base
+        : { ...base, ethRelayerContract };
+}
+async function main() {
+    const cfg = loadConfig();
+    await (0, server_js_1.startServer)(cfg);
+    // Print a single line so the operator knows the service is up. NO key,
+    // NO RPC URL, NO contract address (those are public but we keep the
+    // surface minimal — they can be queried via /health).
+    // eslint-disable-next-line no-console
+    console.log(`self-host-relayer listening on http://127.0.0.1:${cfg.port} (chain ${cfg.chainId})`);
+}
+void main().catch((err) => {
+    // eslint-disable-next-line no-console
+    console.error(err instanceof Error ? err.name : 'StartupError');
+    process.exit(1);
+});
+//# sourceMappingURL=dev-entry.js.map

package/dist/cjs/dev-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-entry.js","sourceRoot":"","sources":["../../src/dev-entry.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;AAEH,2CAA0C;AAC1C,2CAA+C;AAI/C,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,4BAAgB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,OAAO,GAAG,MAAM,CACpB,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,IAAI,OAAO,CACzD,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC;IACzE,MAAM,kBAAkB,GAAG,MAAM,CAC/B,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,IAAI,CACxD,CAAC;IACF,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;QAC5C,6NAA6N,CAAC;IAChO,MAAM,cAAc,GAAG,UAAU;SAC9B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE/B,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IACxE,MAAM,kBAAkB,GACtB,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QACrD,CAAC,CAAE,aAAyB;QAC5B,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,IAAI,GAAG;QACX,OAAO;QACP,IAAI;QACJ,kBAAkB;QAClB,cAAc;QACd,eAAe,EAAE,UAAU,CAAC,2BAA2B,CAAY;QACnE,MAAM,EAAE,UAAU,CAAC,0BAA0B,CAAC;QAC9C,mBAAmB,EAAE,UAAU,CAC7B,gCAAgC,CAC1B;KACT,CAAC;IACF,OAAO,kBAAkB,KAAK,SAAS;QACrC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,kBAAkB,EAAE,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,IAAA,uBAAW,EAAC,GAAG,CAAC,CAAC;IACvB,uEAAuE;IACvE,oEAAoE;IACpE,sDAAsD;IACtD,sCAAsC;IACtC,OAAO,CAAC,GAAG,CACT,mDAAmD,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,OAAO,GAAG,CACrF,CAAC;AACJ,CAAC;AAED,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACjC,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cjs/errors.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Privacy-safe errors for @shroud-fi/self-host-relayer.
+ *
+ * Invariants mirrored from other packages:
+ *   - No key bytes in messages
+ *   - No amount values in messages
+ *   - No private signature bytes in messages
+ */
+export declare class SelfHostRelayerError extends Error {
+    readonly name: string;
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare class InvalidRelayRequestError extends SelfHostRelayerError {
+    readonly name: string;
+    constructor();
+}
+export declare class RelayBroadcastError extends SelfHostRelayerError {
+    readonly name: string;
+    constructor(underlyingName?: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare class RelayConfigError extends SelfHostRelayerError {
+    readonly name: string;
+    constructor(field: string);
+}
+export declare class InvalidRelayEthRequestError extends SelfHostRelayerError {
+    readonly name: string;
+    constructor();
+}
+export declare class EthRelayerNotConfiguredError extends SelfHostRelayerError {
+    readonly name: string;
+    constructor();
+}
+export declare class AuthorizationContractMismatchError extends SelfHostRelayerError {
+    readonly name: string;
+    constructor();
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/cjs/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,SAAkB,IAAI,EAAE,MAAM,CAA0B;gBAC5C,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAG3D;AAED,qBAAa,wBAAyB,SAAQ,oBAAoB;IAChE,SAAkB,IAAI,EAAE,MAAM,CAA8B;;CAI7D;AAED,qBAAa,mBAAoB,SAAQ,oBAAoB;IAC3D,SAAkB,IAAI,EAAE,MAAM,CAAyB;gBAC3C,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAQnE;AAED,qBAAa,gBAAiB,SAAQ,oBAAoB;IACxD,SAAkB,IAAI,EAAE,MAAM,CAAsB;gBACxC,KAAK,EAAE,MAAM;CAG1B;AAED,qBAAa,2BAA4B,SAAQ,oBAAoB;IACnE,SAAkB,IAAI,EAAE,MAAM,CAAiC;;CAIhE;AAED,qBAAa,4BAA6B,SAAQ,oBAAoB;IACpE,SAAkB,IAAI,EAAE,MAAM,CAAkC;;CAIjE;AAED,qBAAa,kCAAmC,SAAQ,oBAAoB;IAC1E,SAAkB,IAAI,EAAE,MAAM,CAAwC;;CAIvE"}

package/dist/cjs/errors.js

@@ -0,0 +1,63 @@
+"use strict";
+/**
+ * Privacy-safe errors for @shroud-fi/self-host-relayer.
+ *
+ * Invariants mirrored from other packages:
+ *   - No key bytes in messages
+ *   - No amount values in messages
+ *   - No private signature bytes in messages
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationContractMismatchError = exports.EthRelayerNotConfiguredError = exports.InvalidRelayEthRequestError = exports.RelayConfigError = exports.RelayBroadcastError = exports.InvalidRelayRequestError = exports.SelfHostRelayerError = void 0;
+class SelfHostRelayerError extends Error {
+    name = 'SelfHostRelayerError';
+    constructor(message, options) {
+        super(message, options);
+    }
+}
+exports.SelfHostRelayerError = SelfHostRelayerError;
+class InvalidRelayRequestError extends SelfHostRelayerError {
+    name = 'InvalidRelayRequestError';
+    constructor() {
+        super('Relay request body failed validation');
+    }
+}
+exports.InvalidRelayRequestError = InvalidRelayRequestError;
+class RelayBroadcastError extends SelfHostRelayerError {
+    name = 'RelayBroadcastError';
+    constructor(underlyingName, options) {
+        super(underlyingName !== undefined
+            ? `Broadcast failed (${underlyingName})`
+            : 'Broadcast failed', options);
+    }
+}
+exports.RelayBroadcastError = RelayBroadcastError;
+class RelayConfigError extends SelfHostRelayerError {
+    name = 'RelayConfigError';
+    constructor(field) {
+        super(`Relayer config missing required field: ${field}`);
+    }
+}
+exports.RelayConfigError = RelayConfigError;
+class InvalidRelayEthRequestError extends SelfHostRelayerError {
+    name = 'InvalidRelayEthRequestError';
+    constructor() {
+        super('Relay ETH request body failed validation');
+    }
+}
+exports.InvalidRelayEthRequestError = InvalidRelayEthRequestError;
+class EthRelayerNotConfiguredError extends SelfHostRelayerError {
+    name = 'EthRelayerNotConfiguredError';
+    constructor() {
+        super('ETH relayer contract address not configured');
+    }
+}
+exports.EthRelayerNotConfiguredError = EthRelayerNotConfiguredError;
+class AuthorizationContractMismatchError extends SelfHostRelayerError {
+    name = 'AuthorizationContractMismatchError';
+    constructor() {
+        super('EIP-7702 authorization address does not match configured ETH relayer');
+    }
+}
+exports.AuthorizationContractMismatchError = AuthorizationContractMismatchError;
+//# sourceMappingURL=errors.js.map

package/dist/cjs/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,MAAa,oBAAqB,SAAQ,KAAK;IAC3B,IAAI,GAAW,sBAAsB,CAAC;IACxD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1B,CAAC;CACF;AALD,oDAKC;AAED,MAAa,wBAAyB,SAAQ,oBAAoB;IAC9C,IAAI,GAAW,0BAA0B,CAAC;IAC5D;QACE,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAChD,CAAC;CACF;AALD,4DAKC;AAED,MAAa,mBAAoB,SAAQ,oBAAoB;IACzC,IAAI,GAAW,qBAAqB,CAAC;IACvD,YAAY,cAAuB,EAAE,OAA6B;QAChE,KAAK,CACH,cAAc,KAAK,SAAS;YAC1B,CAAC,CAAC,qBAAqB,cAAc,GAAG;YACxC,CAAC,CAAC,kBAAkB,EACtB,OAAO,CACR,CAAC;IACJ,CAAC;CACF;AAVD,kDAUC;AAED,MAAa,gBAAiB,SAAQ,oBAAoB;IACtC,IAAI,GAAW,kBAAkB,CAAC;IACpD,YAAY,KAAa;QACvB,KAAK,CAAC,0CAA0C,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;CACF;AALD,4CAKC;AAED,MAAa,2BAA4B,SAAQ,oBAAoB;IACjD,IAAI,GAAW,6BAA6B,CAAC;IAC/D;QACE,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACpD,CAAC;CACF;AALD,kEAKC;AAED,MAAa,4BAA6B,SAAQ,oBAAoB;IAClD,IAAI,GAAW,8BAA8B,CAAC;IAChE;QACE,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACvD,CAAC;CACF;AALD,oEAKC;AAED,MAAa,kCAAmC,SAAQ,oBAAoB;IACxD,IAAI,GAAW,oCAAoC,CAAC;IACtE;QACE,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAChF,CAAC;CACF;AALD,gFAKC"}

package/dist/cjs/index.d.ts

@@ -0,0 +1,8 @@
+export { buildServer, startServer } from './server.js';
+export { buildRelayCalldata, relayRequest } from './relay.js';
+export type { RelayCtx, RelayResult } from './relay.js';
+export { buildEthSweepCalldata, relayEthRequest, } from './relay-eth.js';
+export type { RelayEthCtx, RelayEthResult } from './relay-eth.js';
+export type { RelayRequest, RelayResponse, RelaySuccess, RelayFailure, ServiceConfig, RelayEthRequest, } from './types.js';
+export { SelfHostRelayerError, InvalidRelayRequestError, RelayBroadcastError, RelayConfigError, InvalidRelayEthRequestError, EthRelayerNotConfiguredError, AuthorizationContractMismatchError, } from './errors.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC9D,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EACL,qBAAqB,EACrB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAClE,YAAY,EACV,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,2BAA2B,EAC3B,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,aAAa,CAAC"}

package/dist/cjs/index.js

@@ -0,0 +1,26 @@
+"use strict";
+// Public surface — @shroud-fi/self-host-relayer
+//
+// Exports the server builder + the pure relay-logic helpers so the same
+// package can be embedded in another Node process or run standalone via
+// `pnpm dev`.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationContractMismatchError = exports.EthRelayerNotConfiguredError = exports.InvalidRelayEthRequestError = exports.RelayConfigError = exports.RelayBroadcastError = exports.InvalidRelayRequestError = exports.SelfHostRelayerError = exports.relayEthRequest = exports.buildEthSweepCalldata = exports.relayRequest = exports.buildRelayCalldata = exports.startServer = exports.buildServer = void 0;
+var server_js_1 = require("./server.js");
+Object.defineProperty(exports, "buildServer", { enumerable: true, get: function () { return server_js_1.buildServer; } });
+Object.defineProperty(exports, "startServer", { enumerable: true, get: function () { return server_js_1.startServer; } });
+var relay_js_1 = require("./relay.js");
+Object.defineProperty(exports, "buildRelayCalldata", { enumerable: true, get: function () { return relay_js_1.buildRelayCalldata; } });
+Object.defineProperty(exports, "relayRequest", { enumerable: true, get: function () { return relay_js_1.relayRequest; } });
+var relay_eth_js_1 = require("./relay-eth.js");
+Object.defineProperty(exports, "buildEthSweepCalldata", { enumerable: true, get: function () { return relay_eth_js_1.buildEthSweepCalldata; } });
+Object.defineProperty(exports, "relayEthRequest", { enumerable: true, get: function () { return relay_eth_js_1.relayEthRequest; } });
+var errors_js_1 = require("./errors.js");
+Object.defineProperty(exports, "SelfHostRelayerError", { enumerable: true, get: function () { return errors_js_1.SelfHostRelayerError; } });
+Object.defineProperty(exports, "InvalidRelayRequestError", { enumerable: true, get: function () { return errors_js_1.InvalidRelayRequestError; } });
+Object.defineProperty(exports, "RelayBroadcastError", { enumerable: true, get: function () { return errors_js_1.RelayBroadcastError; } });
+Object.defineProperty(exports, "RelayConfigError", { enumerable: true, get: function () { return errors_js_1.RelayConfigError; } });
+Object.defineProperty(exports, "InvalidRelayEthRequestError", { enumerable: true, get: function () { return errors_js_1.InvalidRelayEthRequestError; } });
+Object.defineProperty(exports, "EthRelayerNotConfiguredError", { enumerable: true, get: function () { return errors_js_1.EthRelayerNotConfiguredError; } });
+Object.defineProperty(exports, "AuthorizationContractMismatchError", { enumerable: true, get: function () { return errors_js_1.AuthorizationContractMismatchError; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA,gDAAgD;AAChD,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,cAAc;;;AAEd,yCAAuD;AAA9C,wGAAA,WAAW,OAAA;AAAE,wGAAA,WAAW,OAAA;AACjC,uCAA8D;AAArD,8GAAA,kBAAkB,OAAA;AAAE,wGAAA,YAAY,OAAA;AAEzC,+CAGwB;AAFtB,qHAAA,qBAAqB,OAAA;AACrB,+GAAA,eAAe,OAAA;AAWjB,yCAQqB;AAPnB,iHAAA,oBAAoB,OAAA;AACpB,qHAAA,wBAAwB,OAAA;AACxB,gHAAA,mBAAmB,OAAA;AACnB,6GAAA,gBAAgB,OAAA;AAChB,wHAAA,2BAA2B,OAAA;AAC3B,yHAAA,4BAA4B,OAAA;AAC5B,+HAAA,kCAAkC,OAAA"}

package/dist/cjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/dist/cjs/prod-entry.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Production entry: strict env, fail-fast on missing required values, no
+ * permissive defaults that could mask misconfiguration in deployment.
+ *
+ * Required env (no defaults — startup fails if any are missing):
+ *   SHROUDFI_RELAYER_CONTRACT       - deployed ShroudFiRelayer address
+ *   SHROUDFI_RELAYER_FORWARDER_KEY  - 0x-prefixed 32-byte forwarder EOA key
+ *   SHROUDFI_RELAYER_RPC_URL        - chain RPC URL
+ *   SHROUDFI_RELAYER_ORIGINS        - comma-sep allowed origins (e.g. https://app.shroudfi.live)
+ *   SHROUDFI_RELAYER_CHAIN_ID       - chain id (84532 = Base Sepolia, 8453 = Base)
+ *   SHROUDFI_RELAYER_PORT           - bind port (typically 8789 on droplet)
+ *
+ * Optional env:
+ *   SHROUDFI_RELAYER_RATE_LIMIT     - per-IP requests per minute (default 30)
+ *   SHROUDFI_ETH_RELAYER_CONTRACT   - deployed ShroudFiEthRelayer address.
+ *                                     When set, /relay-eth becomes active for
+ *                                     gasless ETH sweeps via EIP-7702. When
+ *                                     unset, /relay-eth returns 501.
+ *   DEBUG_DIAGNOSTICS               - "1" to enable per-request preflight + sig recovery logs
+ *
+ * Differences from dev-entry.ts:
+ *   - Every required field uses envOrThrow; no fallbacks
+ *   - SHROUDFI_RELAYER_ORIGINS is REQUIRED (dev defaults to localhost; prod must be explicit)
+ *   - No startup log line printed to stdout — only journald via PM2 captures fastify's
+ *     own "Server listening at ..." line
+ *   - DEBUG_DIAGNOSTICS env opts into the per-request debug logs (off by default)
+ *
+ * Privacy: this file is the ONLY place that touches process.env for the
+ * forwarder key. Once read, the key flows into a viem account closure inside
+ * the server and never resurfaces.
+ */
+export {};
+//# sourceMappingURL=prod-entry.d.ts.map

package/dist/cjs/prod-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prod-entry.d.ts","sourceRoot":"","sources":["../../src/prod-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG"}

package/dist/cjs/prod-entry.js

@@ -0,0 +1,98 @@
+"use strict";
+/**
+ * Production entry: strict env, fail-fast on missing required values, no
+ * permissive defaults that could mask misconfiguration in deployment.
+ *
+ * Required env (no defaults — startup fails if any are missing):
+ *   SHROUDFI_RELAYER_CONTRACT       - deployed ShroudFiRelayer address
+ *   SHROUDFI_RELAYER_FORWARDER_KEY  - 0x-prefixed 32-byte forwarder EOA key
+ *   SHROUDFI_RELAYER_RPC_URL        - chain RPC URL
+ *   SHROUDFI_RELAYER_ORIGINS        - comma-sep allowed origins (e.g. https://app.shroudfi.live)
+ *   SHROUDFI_RELAYER_CHAIN_ID       - chain id (84532 = Base Sepolia, 8453 = Base)
+ *   SHROUDFI_RELAYER_PORT           - bind port (typically 8789 on droplet)
+ *
+ * Optional env:
+ *   SHROUDFI_RELAYER_RATE_LIMIT     - per-IP requests per minute (default 30)
+ *   SHROUDFI_ETH_RELAYER_CONTRACT   - deployed ShroudFiEthRelayer address.
+ *                                     When set, /relay-eth becomes active for
+ *                                     gasless ETH sweeps via EIP-7702. When
+ *                                     unset, /relay-eth returns 501.
+ *   DEBUG_DIAGNOSTICS               - "1" to enable per-request preflight + sig recovery logs
+ *
+ * Differences from dev-entry.ts:
+ *   - Every required field uses envOrThrow; no fallbacks
+ *   - SHROUDFI_RELAYER_ORIGINS is REQUIRED (dev defaults to localhost; prod must be explicit)
+ *   - No startup log line printed to stdout — only journald via PM2 captures fastify's
+ *     own "Server listening at ..." line
+ *   - DEBUG_DIAGNOSTICS env opts into the per-request debug logs (off by default)
+ *
+ * Privacy: this file is the ONLY place that touches process.env for the
+ * forwarder key. Once read, the key flows into a viem account closure inside
+ * the server and never resurfaces.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const server_js_1 = require("./server.js");
+const errors_js_1 = require("./errors.js");
+function envOrThrow(name) {
+    const v = process.env[name];
+    if (v === undefined || v.trim().length === 0) {
+        throw new errors_js_1.RelayConfigError(name);
+    }
+    return v.trim();
+}
+function loadConfig() {
+    const chainId = Number(envOrThrow('SHROUDFI_RELAYER_CHAIN_ID'));
+    if (!Number.isFinite(chainId) || chainId <= 0) {
+        throw new errors_js_1.RelayConfigError('SHROUDFI_RELAYER_CHAIN_ID');
+    }
+    const port = Number(envOrThrow('SHROUDFI_RELAYER_PORT'));
+    if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        throw new errors_js_1.RelayConfigError('SHROUDFI_RELAYER_PORT');
+    }
+    const rateLimitRaw = process.env.SHROUDFI_RELAYER_RATE_LIMIT?.trim();
+    const rateLimitPerMinute = rateLimitRaw && rateLimitRaw.length > 0 ? Number(rateLimitRaw) : 30;
+    if (!Number.isFinite(rateLimitPerMinute) || rateLimitPerMinute <= 0) {
+        throw new errors_js_1.RelayConfigError('SHROUDFI_RELAYER_RATE_LIMIT');
+    }
+    const originsCsv = envOrThrow('SHROUDFI_RELAYER_ORIGINS');
+    const allowedOrigins = originsCsv
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+    if (allowedOrigins.length === 0) {
+        throw new errors_js_1.RelayConfigError('SHROUDFI_RELAYER_ORIGINS');
+    }
+    const debugDiagnostics = process.env.DEBUG_DIAGNOSTICS === '1';
+    const ethRelayerRaw = process.env.SHROUDFI_ETH_RELAYER_CONTRACT?.trim();
+    const ethRelayerContract = ethRelayerRaw !== undefined && ethRelayerRaw.length > 0
+        ? ethRelayerRaw
+        : undefined;
+    const base = {
+        chainId,
+        port,
+        rateLimitPerMinute,
+        allowedOrigins,
+        relayerContract: envOrThrow('SHROUDFI_RELAYER_CONTRACT'),
+        rpcUrl: envOrThrow('SHROUDFI_RELAYER_RPC_URL'),
+        forwarderPrivateKey: envOrThrow('SHROUDFI_RELAYER_FORWARDER_KEY'),
+        debugDiagnostics,
+    };
+    return ethRelayerContract === undefined
+        ? base
+        : { ...base, ethRelayerContract };
+}
+async function main() {
+    const cfg = loadConfig();
+    await (0, server_js_1.startServer)(cfg);
+    // Intentionally no stdout — Fastify's logger already emits a "Server
+    // listening at ..." line that PM2/journald captures. Avoid extra surface.
+}
+void main().catch((err) => {
+    // Startup failure → emit only the error class name to stderr, then exit 1.
+    // PM2 will record this and (per ecosystem config) attempt restart up to
+    // max_restarts before giving up.
+    // eslint-disable-next-line no-console
+    console.error(err instanceof Error ? err.name : 'StartupError');
+    process.exit(1);
+});
+//# sourceMappingURL=prod-entry.js.map

package/dist/cjs/prod-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prod-entry.js","sourceRoot":"","sources":["../../src/prod-entry.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;AAEH,2CAA0C;AAC1C,2CAA+C;AAI/C,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,4BAAgB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,4BAAgB,CAAC,2BAA2B,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,4BAAgB,CAAC,uBAAuB,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAC;IACrE,MAAM,kBAAkB,GACtB,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,IAAI,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,4BAAgB,CAAC,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,0BAA0B,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,UAAU;SAC9B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,4BAAgB,CAAC,0BAA0B,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,GAAG,CAAC;IAE/D,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IACxE,MAAM,kBAAkB,GACtB,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QACrD,CAAC,CAAE,aAAyB;QAC5B,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,IAAI,GAAG;QACX,OAAO;QACP,IAAI;QACJ,kBAAkB;QAClB,cAAc;QACd,eAAe,EAAE,UAAU,CAAC,2BAA2B,CAAY;QACnE,MAAM,EAAE,UAAU,CAAC,0BAA0B,CAAC;QAC9C,mBAAmB,EAAE,UAAU,CAC7B,gCAAgC,CAC1B;QACR,gBAAgB;KACjB,CAAC;IACF,OAAO,kBAAkB,KAAK,SAAS;QACrC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,kBAAkB,EAAE,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,IAAA,uBAAW,EAAC,GAAG,CAAC,CAAC;IACvB,qEAAqE;IACrE,0EAA0E;AAC5E,CAAC;AAED,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACjC,2EAA2E;IAC3E,wEAAwE;IACxE,iCAAiC;IACjC,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cjs/relay-eth.d.ts

@@ -0,0 +1,43 @@
+/**
+ * ETH gasless sweep relay — broadcasts an EIP-7702 type-0x04 tx that delegates
+ * the stealth EOA to ShroudFiEthRelayer and calls sweepETH(destination,
+ * deadline, signature).
+ *
+ * Privacy invariants:
+ *   - Relayer EOA's private key held in the viem account closure. Never
+ *     logged or attached to thrown errors.
+ *   - The EIP-712 signature in the request is a one-time spending
+ *     authorization bound to (destination, deadline, chainId, stealthEOA).
+ *     We pass it through verbatim — never store or re-sign.
+ *   - No amount fields anywhere in the request or response.
+ */
+import { type Account, type Chain, type Hex, type PublicClient, type Transport, type WalletClient } from 'viem';
+import type { RelayEthRequest } from './types.js';
+/**
+ * Same generic-loose shape as RelayCtx. Holds the broadcast-side viem clients
+ * plus the relayer EOA. The relayer EOA pays gas for the outer tx.
+ */
+export interface RelayEthCtx {
+    readonly publicClient: PublicClient<Transport, Chain | undefined>;
+    readonly walletClient: WalletClient<Transport, Chain | undefined, Account>;
+    readonly account: Account;
+}
+export interface RelayEthResult {
+    readonly txHash: Hex;
+    readonly blockNumber: bigint;
+}
+/**
+ * Build the inner sweepETH calldata. The OUTER tx is the type-0x04 transaction
+ * itself which carries the authorization list and the `to: stealthAddress`;
+ * the inner data is what executes once the EOA's code is set to the relayer.
+ */
+export declare function buildEthSweepCalldata(req: RelayEthRequest): Hex;
+/**
+ * Submit the type-0x04 tx and wait for receipt.
+ *
+ * On any viem error we wrap with RelayBroadcastError(name, { cause: err }) so
+ * the server can walk the cause chain and log the actual revert reason
+ * (public on-chain data) without surfacing it to clients.
+ */
+export declare function relayEthRequest(ctx: RelayEthCtx, req: RelayEthRequest): Promise<RelayEthResult>;
+//# sourceMappingURL=relay-eth.d.ts.map

package/dist/cjs/relay-eth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-eth.d.ts","sourceRoot":"","sources":["../../src/relay-eth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAEL,KAAK,OAAO,EACZ,KAAK,KAAK,EACV,KAAK,GAAG,EACR,KAAK,YAAY,EAEjB,KAAK,SAAS,EACd,KAAK,YAAY,EAClB,MAAM,MAAM,CAAC;AAEd,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAgBlD;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,SAAS,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC;IAClE,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC,SAAS,EAAE,KAAK,GAAG,SAAS,EAAE,OAAO,CAAC,CAAC;IAC3E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAmBD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,GAAG,GAAG,CAM/D;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,WAAW,EAChB,GAAG,EAAE,eAAe,GACnB,OAAO,CAAC,cAAc,CAAC,CAyBzB"}

package/dist/cjs/relay-eth.js

@@ -0,0 +1,95 @@
+"use strict";
+/**
+ * ETH gasless sweep relay — broadcasts an EIP-7702 type-0x04 tx that delegates
+ * the stealth EOA to ShroudFiEthRelayer and calls sweepETH(destination,
+ * deadline, signature).
+ *
+ * Privacy invariants:
+ *   - Relayer EOA's private key held in the viem account closure. Never
+ *     logged or attached to thrown errors.
+ *   - The EIP-712 signature in the request is a one-time spending
+ *     authorization bound to (destination, deadline, chainId, stealthEOA).
+ *     We pass it through verbatim — never store or re-sign.
+ *   - No amount fields anywhere in the request or response.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildEthSweepCalldata = buildEthSweepCalldata;
+exports.relayEthRequest = relayEthRequest;
+const viem_1 = require("viem");
+const errors_js_1 = require("./errors.js");
+const SWEEP_ETH_ABI = [
+    {
+        type: 'function',
+        name: 'sweepETH',
+        stateMutability: 'nonpayable',
+        inputs: [
+            { name: 'destination', type: 'address' },
+            { name: 'deadline', type: 'uint256' },
+            { name: 'signature', type: 'bytes' },
+        ],
+        outputs: [],
+    },
+];
+/**
+ * Reconstruct a viem `SignedAuthorization` from the wire-encoded fields. The
+ * fields are exactly what the SDK serialises in @shroud-fi/relayer's
+ * eth-sweep.ts — `nonce` arrives as a number, `chainId` as a number, `r`/`s`
+ * as 0x-prefixed hex, `yParity` as 0 or 1.
+ */
+function reconstructAuthorization(req) {
+    return {
+        address: req.authorization.address,
+        chainId: req.authorization.chainId,
+        nonce: req.authorization.nonce,
+        r: req.authorization.r,
+        s: req.authorization.s,
+        yParity: req.authorization.yParity,
+    };
+}
+/**
+ * Build the inner sweepETH calldata. The OUTER tx is the type-0x04 transaction
+ * itself which carries the authorization list and the `to: stealthAddress`;
+ * the inner data is what executes once the EOA's code is set to the relayer.
+ */
+function buildEthSweepCalldata(req) {
+    return (0, viem_1.encodeFunctionData)({
+        abi: SWEEP_ETH_ABI,
+        functionName: 'sweepETH',
+        args: [req.destination, BigInt(req.deadline), req.signature],
+    });
+}
+/**
+ * Submit the type-0x04 tx and wait for receipt.
+ *
+ * On any viem error we wrap with RelayBroadcastError(name, { cause: err }) so
+ * the server can walk the cause chain and log the actual revert reason
+ * (public on-chain data) without surfacing it to clients.
+ */
+async function relayEthRequest(ctx, req) {
+    const data = buildEthSweepCalldata(req);
+    const authorization = reconstructAuthorization(req);
+    try {
+        const txHash = await ctx.walletClient.sendTransaction({
+            account: ctx.account,
+            chain: ctx.walletClient.chain ?? null,
+            to: req.stealthAddress,
+            data,
+            value: 0n,
+            authorizationList: [authorization],
+        });
+        const receipt = await ctx.publicClient.waitForTransactionReceipt({
+            hash: txHash,
+        });
+        if (receipt.status !== 'success') {
+            throw new errors_js_1.RelayBroadcastError('TransactionReverted');
+        }
+        return { txHash, blockNumber: receipt.blockNumber };
+    }
+    catch (err) {
+        if (err instanceof errors_js_1.RelayBroadcastError)
+            throw err;
+        const name = err instanceof Error ? err.name : 'UnknownError';
+        throw new errors_js_1.RelayBroadcastError(name, { cause: err });
+    }
+}
+//# sourceMappingURL=relay-eth.js.map