@temporalabs/treasury 0.1.1 → 0.1.2

package/dist/connect/verify.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Did the transaction on chain do what was confirmed? Read from the RECEIPT, never from the
+ * transaction envelope, because a smart-account wallet does not send the call itself: it wraps it in
+ * a batch that a relayer submits, so `tx.from` and `tx.to` name the relayer and a delegation contract
+ * (measured 2026-10-03 on Base: a MetaMask 7702 account, its call executed inside DelegationManager,
+ * plus a 0.06 USDC transfer to a third address in the same batch).
+ *
+ * So the evidence is the event the vault or token itself emits for the connected account — an
+ * `Approval`, `Deposit` or `Withdraw` naming that account and that amount — and every OTHER
+ * movement of the asset out of the account in the same transaction is reported beside it, never
+ * folded into a "matched".
+ */
+import { type Address, type Hex } from "viem";
+import type { ReadClient } from "../client.js";
+import type { Admitted } from "./gate.js";
+export interface Verdict {
+    /**
+     * `matched`: the expected event is there and nothing else left the account.
+     * `extra_transfer`: the expected event is there AND the account also sent the asset elsewhere in
+     *   the same transaction (`alsoMoved`) — tell the operator; it was not part of the call.
+     * `mismatch`: the transaction succeeded but the expected event is missing.
+     * `reverted`: the transaction failed on chain; nothing it was meant to do happened.
+     * `unverified`: no receipt within the wait.
+     */
+    verified: "matched" | "extra_transfer" | "mismatch" | "reverted" | "unverified";
+    detail?: string;
+    alsoMoved?: {
+        to: string;
+        amountRaw: string;
+    }[];
+}
+export declare function verifyLanded(client: Pick<ReadClient, "getTransactionReceipt">, hash: Hex, call: Admitted, account: Address, opts?: {
+    attempts?: number;
+    delayMs?: number;
+    deadline?: number;
+    notBefore?: bigint;
+}): Promise<Verdict>;

package/dist/connect/verify.js

@@ -0,0 +1,89 @@
+/**
+ * Did the transaction on chain do what was confirmed? Read from the RECEIPT, never from the
+ * transaction envelope, because a smart-account wallet does not send the call itself: it wraps it in
+ * a batch that a relayer submits, so `tx.from` and `tx.to` name the relayer and a delegation contract
+ * (measured 2026-10-03 on Base: a MetaMask 7702 account, its call executed inside DelegationManager,
+ * plus a 0.06 USDC transfer to a third address in the same batch).
+ *
+ * So the evidence is the event the vault or token itself emits for the connected account — an
+ * `Approval`, `Deposit` or `Withdraw` naming that account and that amount — and every OTHER
+ * movement of the asset out of the account in the same transaction is reported beside it, never
+ * folded into a "matched".
+ */
+import { getAddress, parseAbiItem, parseEventLogs } from "viem";
+const approvalEvent = parseAbiItem("event Approval(address indexed owner, address indexed spender, uint256 value)");
+const transferEvent = parseAbiItem("event Transfer(address indexed from, address indexed to, uint256 value)");
+const depositEvent = parseAbiItem("event Deposit(address indexed sender, address indexed owner, uint256 assets, uint256 shares)");
+const withdrawEvent = parseAbiItem("event Withdraw(address indexed sender, address indexed receiver, address indexed owner, uint256 assets, uint256 shares)");
+const same = (a, b) => getAddress(a) === getAddress(b);
+export async function verifyLanded(client, hash, call, account, opts = {}) {
+    const attempts = opts.attempts ?? 30;
+    const delayMs = opts.delayMs ?? 2_000;
+    let receipt;
+    // `deadline` (epoch ms) stops the wait when the flow's own time limit is up.
+    for (let i = 0; i < attempts && !receipt && (opts.deadline === undefined || Date.now() < opts.deadline); i++) {
+        try {
+            receipt = await client.getTransactionReceipt({ hash });
+        }
+        catch {
+            await new Promise((r) => setTimeout(r, delayMs));
+        }
+    }
+    if (!receipt)
+        return { verified: "unverified", detail: `no receipt for ${hash} in time; look it up on the explorer before retrying anything` };
+    if (receipt.status !== "success")
+        return { verified: "reverted", detail: `${hash} reverted on chain; nothing it was meant to do happened` };
+    // `notBefore`: the chain head when the confirm flow started. A receipt mined in that block or earlier
+    // is an older transaction of the same shape, not one this flow sent.
+    if (opts.notBefore !== undefined && receipt.blockNumber <= opts.notBefore) {
+        return { verified: "mismatch", detail: `${hash} was mined in block ${receipt.blockNumber}, which already existed when this confirm flow started (at block ${opts.notBefore}); it is not a transaction from this flow` };
+    }
+    const vault = call.vault.address;
+    const asset = call.vault.asset.address;
+    const logs = receipt.logs;
+    const fromAsset = logs.filter((l) => same(l.address, asset));
+    const fromVault = logs.filter((l) => same(l.address, vault));
+    let found = false;
+    if (call.kind === "approve") {
+        found = parseEventLogs({ abi: [approvalEvent], logs: fromAsset }).some((e) => same(e.args.owner, account) && same(e.args.spender, vault) && e.args.value === call.amount);
+    }
+    else if (call.kind === "deposit") {
+        found = parseEventLogs({ abi: [depositEvent], logs: fromVault }).some((e) => same(e.args.owner, account) && e.args.assets === call.amount);
+    }
+    else {
+        found = parseEventLogs({ abi: [withdrawEvent], logs: fromVault }).some((e) => same(e.args.owner, account) &&
+            same(e.args.receiver, account) &&
+            (call.kind === "withdraw" ? e.args.assets === call.amount : e.args.shares === call.amount));
+    }
+    // Every movement of the asset OUT of the account that the call itself does not explain. A deposit
+    // legitimately moves exactly `amount` to the vault; nothing else should move.
+    const expectedPull = call.kind === "deposit" ? call.amount : 0n;
+    let pullSeen = false;
+    const alsoMoved = [];
+    for (const t of parseEventLogs({ abi: [transferEvent], logs: fromAsset })) {
+        if (!same(t.args.from, account))
+            continue;
+        if (!pullSeen && expectedPull > 0n && same(t.args.to, vault) && t.args.value === expectedPull) {
+            pullSeen = true;
+            continue;
+        }
+        alsoMoved.push({ to: getAddress(t.args.to), amountRaw: t.args.value.toString() });
+    }
+    const what = `${call.kind} ${call.amount} raw units on ${call.vault.symbol}`;
+    if (!found) {
+        return {
+            verified: "mismatch",
+            detail: `${hash} succeeded, but carries no ${call.kind === "approve" ? "Approval" : call.kind === "deposit" ? "Deposit" : "Withdraw"} event for ${account} matching ${what}. Stop: what landed is not what was confirmed.`,
+            ...(alsoMoved.length ? { alsoMoved } : {}),
+        };
+    }
+    if (alsoMoved.length) {
+        return {
+            verified: "extra_transfer",
+            detail: `${what} landed as confirmed, and in the same transaction the account also sent ${call.vault.asset.symbol} elsewhere (alsoMoved). That was not part of the call — often a wallet's own fee for paying gas in tokens. Tell the operator.`,
+            alsoMoved,
+        };
+    }
+    return { verified: "matched" };
+}
+//# sourceMappingURL=verify.js.map

package/dist/connect/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/connect/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAA0B,MAAM,MAAM,CAAC;AAIxF,MAAM,aAAa,GAAG,YAAY,CAAC,+EAA+E,CAAC,CAAC;AACpH,MAAM,aAAa,GAAG,YAAY,CAAC,yEAAyE,CAAC,CAAC;AAC9G,MAAM,YAAY,GAAG,YAAY,CAAC,8FAA8F,CAAC,CAAC;AAClI,MAAM,aAAa,GAAG,YAAY,CAAC,yHAAyH,CAAC,CAAC;AAgB9J,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;AAEvE,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAiD,EACjD,IAAS,EACT,IAAc,EACd,OAAgB,EAChB,OAAuF,EAAE;IAEzF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,IAAI,OAA6E,CAAC;IAClF,6EAA6E;IAC7E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7G,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,IAAI,+DAA+D,EAAE,CAAC;IAC/I,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,yDAAyD,EAAE,CAAC;IAC5I,sGAAsG;IACtG,qEAAqE;IACrE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1E,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,uBAAuB,OAAO,CAAC,WAAW,oEAAoE,IAAI,CAAC,SAAS,2CAA2C,EAAE,CAAC;IAC1N,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAE7D,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,KAAK,GAAG,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CACpE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAClG,CAAC;IACJ,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,GAAG,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7I,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CACpE,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;YAC3B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC9B,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAC7F,CAAC;IACJ,CAAC;IAED,kGAAkG;IAClG,8EAA8E;IAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,SAAS,GAAwC,EAAE,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,SAAS;QAC1C,IAAI,CAAC,QAAQ,IAAI,YAAY,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YAC9F,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,iBAAiB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,GAAG,IAAI,8BAA8B,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,cAAc,OAAO,aAAa,IAAI,gDAAgD;YAC1N,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3C,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO;YACL,QAAQ,EAAE,gBAAgB;YAC1B,MAAM,EAAE,GAAG,IAAI,2EAA2E,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,+HAA+H;YAChP,SAAS;SACV,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC"}