@solana/mpp 0.1.1 → 0.2.0

package/src/session/authorizers/UnboundedAuthorizer.ts

@@ -1,284 +0,0 @@
-import type { MessagePartialSigner } from '@solana/kit';
-
-import {
-    type AuthorizeCloseInput,
-    type AuthorizedClose,
-    type AuthorizedOpen,
-    type AuthorizedTopup,
-    type AuthorizedUpdate,
-    type AuthorizeOpenInput,
-    type AuthorizerCapabilities,
-    type AuthorizeTopupInput,
-    type AuthorizeUpdateInput,
-    type SessionAuthorizer,
-} from '../Types.js';
-import { signVoucher } from '../Voucher.js';
-
-type ChannelProgress = {
-    lastCumulative: bigint;
-    lastSequence: number;
-};
-
-export interface UnboundedAuthorizerParameters {
-    allowedPrograms?: string[];
-    buildCloseTx?: (input: AuthorizeCloseInput) => Promise<string> | string;
-    buildOpenTx?: (input: AuthorizeOpenInput) => Promise<string> | string;
-    buildTopupTx?: (input: AuthorizeTopupInput) => Promise<string> | string;
-    expiresAt?: string;
-    requiresInteractiveApproval?: Partial<AuthorizerCapabilities['requiresInteractiveApproval']>;
-    signer: MessagePartialSigner;
-}
-
-export class UnboundedAuthorizer implements SessionAuthorizer {
-    private readonly signer: MessagePartialSigner;
-    private readonly allowedPrograms?: Set<string>;
-    private readonly expiresAt?: string;
-    private readonly expiresAtUnixMs?: number;
-    private readonly buildOpenTx?: (input: AuthorizeOpenInput) => Promise<string> | string;
-    private readonly buildTopupTx?: (input: AuthorizeTopupInput) => Promise<string> | string;
-    private readonly buildCloseTx?: (input: AuthorizeCloseInput) => Promise<string> | string;
-    private readonly channels = new Map<string, ChannelProgress>();
-    private readonly capabilities: AuthorizerCapabilities;
-
-    constructor(parameters: UnboundedAuthorizerParameters) {
-        this.signer = parameters.signer;
-        this.allowedPrograms = parameters.allowedPrograms ? new Set(parameters.allowedPrograms) : undefined;
-        this.expiresAt = parameters.expiresAt;
-        this.expiresAtUnixMs =
-            parameters.expiresAt !== undefined ? parseIsoTimestamp(parameters.expiresAt, 'expiresAt') : undefined;
-        this.buildOpenTx = parameters.buildOpenTx;
-        this.buildTopupTx = parameters.buildTopupTx;
-        this.buildCloseTx = parameters.buildCloseTx;
-
-        const requiresInteractiveApproval = {
-            close: parameters.requiresInteractiveApproval?.close ?? false,
-            open: parameters.requiresInteractiveApproval?.open ?? false,
-            topup: parameters.requiresInteractiveApproval?.topup ?? false,
-            update: parameters.requiresInteractiveApproval?.update ?? false,
-        };
-
-        this.capabilities = {
-            mode: 'regular_unbounded',
-            ...(this.expiresAt ? { expiresAt: this.expiresAt } : {}),
-            ...(parameters.allowedPrograms ? { allowedPrograms: [...parameters.allowedPrograms] } : {}),
-            allowedActions: ['open', 'update', 'topup', 'close'],
-            requiresInteractiveApproval,
-        };
-    }
-
-    getMode() {
-        return 'regular_unbounded' as const;
-    }
-
-    getCapabilities(): AuthorizerCapabilities {
-        return this.capabilities;
-    }
-
-    async authorizeOpen(input: AuthorizeOpenInput): Promise<AuthorizedOpen> {
-        this.assertNotExpired();
-        this.assertProgramAllowed(input.channelProgram);
-
-        const openTx = await this.resolveOpenTx(input);
-
-        const voucher = await signVoucher(this.signer, {
-            channelId: input.channelId,
-            cumulativeAmount: '0',
-            meter: input.pricing?.meter ?? 'session',
-            payer: this.signer.address,
-            recipient: input.recipient,
-            sequence: 0,
-            units: '0',
-            ...(this.expiresAt ? { expiresAt: this.expiresAt } : {}),
-            chainId: normalizeChainId(input.network),
-            channelProgram: input.channelProgram,
-            serverNonce: input.serverNonce,
-        });
-
-        this.channels.set(input.channelId, {
-            lastCumulative: 0n,
-            lastSequence: 0,
-        });
-
-        return {
-            capabilities: this.getCapabilities(),
-            openTx,
-            voucher,
-            ...(this.expiresAt ? { expiresAt: this.expiresAt } : {}),
-        };
-    }
-
-    async authorizeUpdate(input: AuthorizeUpdateInput): Promise<AuthorizedUpdate> {
-        this.assertNotExpired();
-        this.assertProgramAllowed(input.channelProgram);
-
-        const cumulativeAmount = parseNonNegativeAmount(input.cumulativeAmount, 'cumulativeAmount');
-
-        const progress = this.channels.get(input.channelId);
-        this.assertMonotonic(input.channelId, input.sequence, cumulativeAmount, progress);
-
-        const voucher = await signVoucher(this.signer, {
-            channelId: input.channelId,
-            cumulativeAmount: cumulativeAmount.toString(),
-            meter: input.meter,
-            payer: this.signer.address,
-            recipient: input.recipient,
-            sequence: input.sequence,
-            units: input.units,
-            ...(this.expiresAt ? { expiresAt: this.expiresAt } : {}),
-            chainId: normalizeChainId(input.network),
-            channelProgram: input.channelProgram,
-            serverNonce: input.serverNonce,
-        });
-
-        this.channels.set(input.channelId, {
-            lastCumulative: cumulativeAmount,
-            lastSequence: input.sequence,
-        });
-
-        return { voucher };
-    }
-
-    async authorizeTopup(input: AuthorizeTopupInput): Promise<AuthorizedTopup> {
-        this.assertNotExpired();
-        this.assertProgramAllowed(input.channelProgram);
-        parseNonNegativeAmount(input.additionalAmount, 'additionalAmount');
-
-        return {
-            topupTx: await this.resolveTopupTx(input),
-        };
-    }
-
-    async authorizeClose(input: AuthorizeCloseInput): Promise<AuthorizedClose> {
-        this.assertNotExpired();
-        this.assertProgramAllowed(input.channelProgram);
-
-        const finalCumulativeAmount = parseNonNegativeAmount(input.finalCumulativeAmount, 'finalCumulativeAmount');
-
-        const progress = this.channels.get(input.channelId);
-        this.assertMonotonic(input.channelId, input.sequence, finalCumulativeAmount, progress);
-
-        const voucher = await signVoucher(this.signer, {
-            channelId: input.channelId,
-            cumulativeAmount: finalCumulativeAmount.toString(),
-            meter: 'close',
-            payer: this.signer.address,
-            recipient: input.recipient,
-            sequence: input.sequence,
-            units: '0',
-            ...(this.expiresAt ? { expiresAt: this.expiresAt } : {}),
-            chainId: normalizeChainId(input.network),
-            channelProgram: input.channelProgram,
-            serverNonce: input.serverNonce,
-        });
-
-        const closeTx = await this.resolveCloseTx(input);
-
-        this.channels.set(input.channelId, {
-            lastCumulative: finalCumulativeAmount,
-            lastSequence: input.sequence,
-        });
-
-        return {
-            voucher,
-            ...(closeTx ? { closeTx } : {}),
-        };
-    }
-
-    private assertNotExpired() {
-        if (this.expiresAtUnixMs !== undefined && Date.now() > this.expiresAtUnixMs) {
-            throw new Error('Unbounded authorizer policy has expired');
-        }
-    }
-
-    private assertProgramAllowed(channelProgram: string) {
-        if (!this.allowedPrograms) {
-            return;
-        }
-
-        if (!this.allowedPrograms.has(channelProgram)) {
-            throw new Error(`Channel program is not allowed: ${channelProgram}`);
-        }
-    }
-
-    private assertMonotonic(
-        channelId: string,
-        sequence: number,
-        cumulativeAmount: bigint,
-        progress: ChannelProgress | undefined,
-    ) {
-        if (!Number.isInteger(sequence) || sequence < 0) {
-            throw new Error('Sequence must be a non-negative integer');
-        }
-
-        if (!progress) {
-            return;
-        }
-
-        if (sequence <= progress.lastSequence) {
-            throw new Error(
-                `Sequence must increase for channel ${channelId}. Last=${progress.lastSequence}, received=${sequence}`,
-            );
-        }
-
-        if (cumulativeAmount < progress.lastCumulative) {
-            throw new Error(
-                `Cumulative amount must not decrease for channel ${channelId}. Last=${progress.lastCumulative.toString()}, received=${cumulativeAmount.toString()}`,
-            );
-        }
-    }
-
-    private async resolveOpenTx(input: AuthorizeOpenInput): Promise<string> {
-        if (!this.buildOpenTx) {
-            throw new Error('UnboundedAuthorizer requires `buildOpenTx` to authorize open requests');
-        }
-
-        return await this.buildOpenTx(input);
-    }
-
-    private async resolveTopupTx(input: AuthorizeTopupInput): Promise<string> {
-        if (!this.buildTopupTx) {
-            throw new Error('UnboundedAuthorizer requires `buildTopupTx` to authorize topup requests');
-        }
-
-        return await this.buildTopupTx(input);
-    }
-
-    private async resolveCloseTx(input: AuthorizeCloseInput): Promise<string | undefined> {
-        if (!this.buildCloseTx) {
-            return undefined;
-        }
-
-        return await this.buildCloseTx(input);
-    }
-}
-
-function parseNonNegativeAmount(value: string, field: string): bigint {
-    let amount: bigint;
-    try {
-        amount = BigInt(value);
-    } catch {
-        throw new Error(`${field} must be a valid integer string`);
-    }
-
-    if (amount < 0n) {
-        throw new Error(`${field} must be non-negative`);
-    }
-
-    return amount;
-}
-
-function parseIsoTimestamp(value: string, field: string): number {
-    const unixMs = Date.parse(value);
-    if (Number.isNaN(unixMs)) {
-        throw new Error(`${field} must be a valid ISO timestamp`);
-    }
-    return unixMs;
-}
-
-function normalizeChainId(network: string): string {
-    const normalized = network.trim();
-    if (normalized.length === 0) {
-        throw new Error('network must be a non-empty string');
-    }
-    return normalized.startsWith('solana:') ? normalized : `solana:${normalized}`;
-}

package/src/session/authorizers/index.ts

@@ -1,4 +0,0 @@
-export * from './BudgetAuthorizer.js';
-export * from './SwigSessionAuthorizer.js';
-export * from './UnboundedAuthorizer.js';
-export * from './makeSessionAuthorizer.js';

package/src/session/authorizers/makeSessionAuthorizer.ts

@@ -1,104 +0,0 @@
-import type { MessagePartialSigner } from '@solana/kit';
-
-import type { SessionAuthorizer, SessionPolicyProfile } from '../Types.js';
-import { BudgetAuthorizer, type BudgetAuthorizerParameters } from './BudgetAuthorizer.js';
-import { SwigSessionAuthorizer, type SwigWalletAdapter } from './SwigSessionAuthorizer.js';
-import { UnboundedAuthorizer, type UnboundedAuthorizerParameters } from './UnboundedAuthorizer.js';
-
-export interface MakeSessionAuthorizerParameters {
-    allowedPrograms?: string[];
-    buildCloseTx?: (
-        input: Parameters<NonNullable<BudgetAuthorizerParameters['buildCloseTx']>>[0],
-    ) => Promise<string> | string;
-    buildOpenTx?: (
-        input: Parameters<NonNullable<BudgetAuthorizerParameters['buildOpenTx']>>[0],
-    ) => Promise<string> | string;
-    buildTopupTx?: (
-        input: Parameters<NonNullable<BudgetAuthorizerParameters['buildTopupTx']>>[0],
-    ) => Promise<string> | string;
-    profile: SessionPolicyProfile;
-    rpcUrl?: string;
-    signer?: MessagePartialSigner;
-    swigWallet?: SwigWalletAdapter;
-}
-
-/**
- * Factory that maps session policy profiles to concrete authorizer classes.
- */
-export function makeSessionAuthorizer(parameters: MakeSessionAuthorizerParameters): SessionAuthorizer {
-    const { profile } = parameters;
-
-    switch (profile.profile) {
-        case 'wallet-budget': {
-            const signer = requireSigner(parameters.signer, profile.profile);
-
-            // Budget mode is Swig-role-backed and intentionally fail-closed.
-            if (!parameters.swigWallet?.swigAddress) {
-                throw new Error('makeSessionAuthorizer requires `swigWallet.swigAddress` for profile "wallet-budget"');
-            }
-
-            if (parameters.swigWallet.swigRoleId === undefined) {
-                throw new Error('makeSessionAuthorizer requires `swigWallet.swigRoleId` for profile "wallet-budget"');
-            }
-
-            return new BudgetAuthorizer({
-                maxCumulativeAmount: profile.maxCumulativeAmount,
-                signer,
-                ...(profile.maxDepositAmount ? { maxDepositAmount: profile.maxDepositAmount } : {}),
-                ...(profile.validUntil ? { validUntil: profile.validUntil } : {}),
-                requireApprovalOnTopup: profile.requireApprovalOnTopup,
-                ...(parameters.allowedPrograms ? { allowedPrograms: parameters.allowedPrograms } : {}),
-                swig: {
-                    swigAddress: parameters.swigWallet.swigAddress,
-                    swigRoleId: parameters.swigWallet.swigRoleId,
-                    ...(parameters.rpcUrl ? { rpcUrl: parameters.rpcUrl } : {}),
-                },
-                ...(parameters.buildOpenTx ? { buildOpenTx: parameters.buildOpenTx } : {}),
-                ...(parameters.buildTopupTx ? { buildTopupTx: parameters.buildTopupTx } : {}),
-                ...(parameters.buildCloseTx ? { buildCloseTx: parameters.buildCloseTx } : {}),
-            });
-        }
-
-        case 'wallet-manual': {
-            const signer = requireSigner(parameters.signer, profile.profile);
-            const authorizerParameters: UnboundedAuthorizerParameters = {
-                signer,
-                ...(parameters.allowedPrograms ? { allowedPrograms: parameters.allowedPrograms } : {}),
-                ...(parameters.buildOpenTx ? { buildOpenTx: parameters.buildOpenTx } : {}),
-                ...(parameters.buildTopupTx ? { buildTopupTx: parameters.buildTopupTx } : {}),
-                ...(parameters.buildCloseTx ? { buildCloseTx: parameters.buildCloseTx } : {}),
-                requiresInteractiveApproval: {
-                    update: profile.requireApprovalOnEveryUpdate,
-                },
-            };
-
-            return new UnboundedAuthorizer(authorizerParameters);
-        }
-
-        case 'swig-time-bound': {
-            if (!parameters.swigWallet) {
-                throw new Error('makeSessionAuthorizer requires `swigWallet` for profile "swig-time-bound"');
-            }
-
-            return new SwigSessionAuthorizer({
-                policy: profile,
-                wallet: parameters.swigWallet,
-                ...(parameters.rpcUrl ? { rpcUrl: parameters.rpcUrl } : {}),
-                ...(parameters.allowedPrograms ? { allowedPrograms: parameters.allowedPrograms } : {}),
-                ...(parameters.buildOpenTx ? { buildOpenTx: parameters.buildOpenTx } : {}),
-                ...(parameters.buildTopupTx ? { buildTopupTx: parameters.buildTopupTx } : {}),
-                ...(parameters.buildCloseTx ? { buildCloseTx: parameters.buildCloseTx } : {}),
-            });
-        }
-    }
-}
-
-function requireSigner(
-    signer: MessagePartialSigner | undefined,
-    profile: SessionPolicyProfile['profile'],
-): MessagePartialSigner {
-    if (!signer) {
-        throw new Error(`makeSessionAuthorizer requires \`signer\` for profile "${profile}"`);
-    }
-    return signer;
-}

package/src/session/index.ts

@@ -1,4 +0,0 @@
-export * from './Types.js';
-export * from './Voucher.js';
-export * from './ChannelStore.js';
-export * from './authorizers/index.js';