@theoo/sdk 0.4.2 → 0.4.4

package/dist/solana-vault.js

@@ -0,0 +1,242 @@
+/**
+ * Multisig vaults on Solana, client side: the encoding `theoo-vault` uses,
+ * and the addresses it derives, worked out here rather than taken from the
+ * server.
+ *
+ * As on the EVM side (`vault.ts`) the point is the approval. An owner
+ * approves proposal N by naming the hash of its instructions — sha256 of
+ * their canonical encoding — and that hash is computed here, from the
+ * instructions this app is about to show. If anything between the chain and
+ * the screen misrepresented the proposal, the vault refuses the approval
+ * instead of counting it. See `solana/programs/theoo-vault`.
+ *
+ * A vault has two addresses. Its **signer** (`address`) holds the SOL and is
+ * what its tokens answer to: show that one, and send to it. Its **config**
+ * holds the settings and is what instructions name; lamports sent to it are
+ * stuck there.
+ */
+import { base58Encode, base64Decode, base64Encode, bytesToHex, concatBytes, equalBytes, hexToBytes, pubkeyBytes, sha256, utf8 } from "./hash.js";
+/** The vault program, at one id on every cluster that has it. */
+export const SOLANA_VAULT_PROGRAM = "FiDvcBjYHp2gi135wSBhe4eNGoFafNkU3mn8AvYrFmzh";
+/** The system program. */
+export const SYSTEM_PROGRAM = "11111111111111111111111111111111";
+/**
+ * The instructions sysvar. A member's proposal or vote names it last: it is
+ * how the vault sees that the member's seat is being used by their passkey,
+ * at the top of the transaction, and not by a session key.
+ */
+export const INSTRUCTIONS_SYSVAR = "Sysvar1nstructions1111111111111111111111111";
+export const SOLANA_VAULT_LIMITS = { owners: 20, instructions: 8, accounts: 32, data: 1024, delay: 30 * 24 * 60 * 60 };
+/** The program's instruction tags. */
+export const SOLANA_VAULT_TAG = {
+    create: 0,
+    propose: 1,
+    approve: 2,
+    revoke: 3,
+    reject: 4,
+    cancel: 5,
+    execute: 6,
+    close: 7,
+    addOwner: 16,
+    removeOwner: 17,
+    replaceOwner: 18,
+    setThreshold: 19,
+    setDelay: 20,
+};
+const u16 = (n) => new Uint8Array([n & 0xff, (n >> 8) & 0xff]);
+export function u64le(n) {
+    const out = new Uint8Array(8);
+    let v = BigInt(n);
+    for (let i = 0; i < 8; i++) {
+        out[i] = Number(v & 0xffn);
+        v >>= 8n;
+    }
+    return out;
+}
+/**
+ * The canonical encoding of a proposal's instructions, as the program stores
+ * and hashes it: a count, then per instruction its program, its accounts
+ * (key, signer, writable) and its data with a two-byte length.
+ */
+export function encodeSolanaCalls(calls) {
+    if (calls.length > 255)
+        throw new Error("too many instructions to encode");
+    const parts = [new Uint8Array([calls.length])];
+    for (const c of calls) {
+        if (c.accounts.length > 255)
+            throw new Error("too many accounts to encode");
+        parts.push(pubkeyBytes(c.programId), new Uint8Array([c.accounts.length]));
+        for (const m of c.accounts)
+            parts.push(pubkeyBytes(m.pubkey), new Uint8Array([m.isSigner ? 1 : 0, m.isWritable ? 1 : 0]));
+        const data = base64Decode(c.data);
+        if (data.length > 0xffff)
+            throw new Error("instruction data too long to encode");
+        parts.push(u16(data.length), data);
+    }
+    return concatBytes(...parts);
+}
+/** What an approval of these instructions must name: sha256 of their encoding, hex. */
+export function solanaCallsHash(calls) {
+    return bytesToHex(sha256(encodeSolanaCalls(calls)));
+}
+/* ── addresses ─────────────────────────────────────────────────────────── */
+// ed25519: an address is "off the curve" when it is no point's encoding.
+const P = (1n << 255n) - 19n;
+const D = mod(-121665n * inv(121666n));
+function mod(a) {
+    const r = a % P;
+    return r < 0n ? r + P : r;
+}
+function pow(b, e) {
+    let r = 1n;
+    b = mod(b);
+    while (e > 0n) {
+        if (e & 1n)
+            r = (r * b) % P;
+        b = (b * b) % P;
+        e >>= 1n;
+    }
+    return r;
+}
+function inv(a) {
+    return pow(a, P - 2n);
+}
+/**
+ * Whether 32 bytes decode to a point on ed25519, as the runtime decides it:
+ * y is the low 255 bits, little-endian; it is a point when x² = (y² − 1) /
+ * (d·y² + 1) has a root. A program-derived address must not be one.
+ */
+export function isOnCurve(b) {
+    let y = 0n;
+    for (let i = 31; i >= 0; i--)
+        y = (y << 8n) | BigInt(b[i]);
+    y = mod(y & ((1n << 255n) - 1n));
+    const y2 = (y * y) % P;
+    const x2 = mod((y2 - 1n) * inv(mod(D * y2 + 1n)));
+    // Euler's criterion: zero, or a square.
+    return x2 === 0n || pow(x2, (P - 1n) / 2n) === 1n;
+}
+/** `Pubkey::find_program_address`: the address and its bump. */
+export function findProgramAddress(seeds, programId) {
+    const program = pubkeyBytes(programId);
+    for (let bump = 255; bump >= 0; bump--) {
+        const h = sha256(concatBytes(...seeds, new Uint8Array([bump]), program, utf8("ProgramDerivedAddress")));
+        if (!isOnCurve(h))
+            return [base58Encode(h), bump];
+    }
+    throw new Error("no program address for these seeds");
+}
+/** `sha256(owners ‖ threshold ‖ delay ‖ salt)`: what a vault's address commits to. */
+function configSeed(owners, threshold, delay, salt) {
+    const s = hexToBytes(salt);
+    if (s.length !== 32)
+        throw new Error("salt must be 32 bytes");
+    return sha256(concatBytes(...owners.map(pubkeyBytes), new Uint8Array([threshold]), u64le(delay), s));
+}
+/** Where a vault's money is: its signer, derived from its config. */
+export function solanaVaultSigner(config, program = SOLANA_VAULT_PROGRAM) {
+    return findProgramAddress([utf8("vault_signer"), pubkeyBytes(config)], program)[0];
+}
+/** A proposal's account. */
+export function solanaProposalAddress(config, id, program = SOLANA_VAULT_PROGRAM) {
+    return findProgramAddress([utf8("proposal"), pubkeyBytes(config), u64le(id)], program)[0];
+}
+/**
+ * Where a vault with these settings is, on every cluster with the program:
+ * its `config`, and its `address` — the signer, where it holds its money.
+ * The address commits to all of them, so it can be shared, and funded,
+ * before the vault is created.
+ */
+export function predictSolanaVault(owners, threshold, delay, salt, program = SOLANA_VAULT_PROGRAM) {
+    const [config] = findProgramAddress([utf8("vault"), configSeed(owners, threshold, delay, salt)], program);
+    return { config, address: solanaVaultSigner(config, program) };
+}
+/** Whether `key` is the vault `vault` names, by its config or by its signer. */
+export function isSolanaVault(config, vault, program = SOLANA_VAULT_PROGRAM) {
+    const want = pubkeyBytes(vault);
+    return equalBytes(config, want) || equalBytes(pubkeyBytes(solanaVaultSigner(base58Encode(config), program)), want);
+}
+/* ── proposals ─────────────────────────────────────────────────────────── */
+const settings = (config, signer, data) => [
+    {
+        programId: SOLANA_VAULT_PROGRAM,
+        accounts: [
+            { pubkey: config, isSigner: false, isWritable: true },
+            { pubkey: signer, isSigner: true, isWritable: false },
+        ],
+        data: base64Encode(data),
+    },
+];
+/**
+ * Instructions for the common proposals. `vault` is the vault as the server
+ * shows it: what it pays from is its `address`, the signer, which the
+ * proposal signs as; settings changes name its `config`.
+ */
+export const solanaVaultCalls = {
+    /** Send lamports from the vault. */
+    send: (vault, to, lamports) => [
+        {
+            programId: SYSTEM_PROGRAM,
+            accounts: [
+                { pubkey: vault.address, isSigner: true, isWritable: true },
+                { pubkey: to, isSigner: false, isWritable: true },
+            ],
+            data: base64Encode(concatBytes(new Uint8Array([2, 0, 0, 0]), u64le(BigInt(lamports)))),
+        },
+    ],
+    addOwner: (vault, owner, threshold) => settings(vault.config, vault.address, concatBytes(new Uint8Array([SOLANA_VAULT_TAG.addOwner]), pubkeyBytes(owner), new Uint8Array([threshold]))),
+    removeOwner: (vault, owner, threshold) => settings(vault.config, vault.address, concatBytes(new Uint8Array([SOLANA_VAULT_TAG.removeOwner]), pubkeyBytes(owner), new Uint8Array([threshold]))),
+    replaceOwner: (vault, owner, next) => settings(vault.config, vault.address, concatBytes(new Uint8Array([SOLANA_VAULT_TAG.replaceOwner]), pubkeyBytes(owner), pubkeyBytes(next))),
+    setThreshold: (vault, threshold) => settings(vault.config, vault.address, new Uint8Array([SOLANA_VAULT_TAG.setThreshold, threshold])),
+    setDelay: (vault, seconds) => settings(vault.config, vault.address, concatBytes(new Uint8Array([SOLANA_VAULT_TAG.setDelay]), u64le(seconds))),
+};
+const le = (b, at, n) => {
+    let v = 0n;
+    for (let i = n - 1; i >= 0; i--)
+        v = (v << 8n) | BigInt(b[at + i]);
+    return v;
+};
+/** Turn one of a proposal's instructions into what it does, for the vault `vault`. */
+export function describeSolanaCall(vault, c) {
+    const d = base64Decode(c.data);
+    const raw = { kind: "call", programId: c.programId, accounts: c.accounts.length, dataBytes: d.length };
+    const [a0, a1] = c.accounts;
+    if (c.programId === SYSTEM_PROGRAM && d.length === 12 && le(d, 0, 4) === 2n && c.accounts.length === 2 && a0.pubkey === vault.address) {
+        return { kind: "send", to: a1.pubkey, lamports: le(d, 4, 8) };
+    }
+    if (c.programId === SOLANA_VAULT_PROGRAM && a0 && a0.pubkey !== vault.config) {
+        const votes = { 1: "propose", 2: "approve", 3: "revoke", 4: "reject", 5: "cancel" };
+        const vote = votes[d[0]];
+        if (vote === "propose")
+            return { kind: "vote_in", vault: a0.pubkey, vote, proposal: null };
+        if (vote && d.length === (vote === "approve" ? 41 : 9))
+            return { kind: "vote_in", vault: a0.pubkey, vote, proposal: Number(le(d, 1, 8)) };
+    }
+    if (c.programId === SOLANA_VAULT_PROGRAM && a0?.pubkey === vault.config) {
+        const key = (at) => base58Encode(d.slice(at, at + 32));
+        switch (d[0]) {
+            case SOLANA_VAULT_TAG.addOwner:
+                if (d.length === 34)
+                    return { kind: "add_owner", owner: key(1), threshold: d[33] };
+                break;
+            case SOLANA_VAULT_TAG.removeOwner:
+                if (d.length === 34)
+                    return { kind: "remove_owner", owner: key(1), threshold: d[33] };
+                break;
+            case SOLANA_VAULT_TAG.replaceOwner:
+                if (d.length === 65)
+                    return { kind: "replace_owner", owner: key(1), with: key(33) };
+                break;
+            case SOLANA_VAULT_TAG.setThreshold:
+                if (d.length === 2)
+                    return { kind: "threshold", threshold: d[1] };
+                break;
+            case SOLANA_VAULT_TAG.setDelay:
+                if (d.length === 9)
+                    return { kind: "delay", seconds: Number(le(d, 1, 8)) };
+                break;
+        }
+    }
+    return raw;
+}
+//# sourceMappingURL=solana-vault.js.map

package/dist/solana-vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana-vault.js","sourceRoot":"","sources":["../src/solana-vault.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjJ,iEAAiE;AACjE,MAAM,CAAC,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAEnF,0BAA0B;AAC1B,MAAM,CAAC,MAAM,cAAc,GAAG,kCAAkC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,6CAA6C,CAAC;AAEjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAW,CAAC;AAEhI,sCAAsC;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,MAAM,EAAE,CAAC;IACT,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE,EAAE;IACZ,WAAW,EAAE,EAAE;IACf,YAAY,EAAE,EAAE;IAChB,YAAY,EAAE,EAAE;IAChB,QAAQ,EAAE,EAAE;CACJ,CAAC;AAEX,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAEvE,MAAM,UAAU,KAAK,CAAC,CAAkB;IACtC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAC3B,CAAC,KAAK,EAAE,CAAC;IACX,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA0B;IAC1D,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAiB,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1H,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACjF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,OAAO,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,8EAA8E;AAE9E,yEAAyE;AACzE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC;AAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAEvC,SAAS,GAAG,CAAC,CAAS;IACpB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS;IAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACX,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QACd,IAAI,CAAC,GAAG,EAAE;YAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,KAAK,EAAE,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,CAAa;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC5D,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,wCAAwC;IACxC,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;AACpD,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,KAAmB,EAAE,SAAiB;IACvE,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACvC,KAAK,IAAI,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;QACxG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACxD,CAAC;AAED,sFAAsF;AACtF,SAAS,UAAU,CAAC,MAAgB,EAAE,SAAiB,EAAE,KAAsB,EAAE,IAAY;IAC3F,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAO,GAAG,oBAAoB;IAC9E,OAAO,kBAAkB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,EAAmB,EAAE,OAAO,GAAG,oBAAoB;IACvG,OAAO,kBAAkB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAgB,EAChB,SAAiB,EACjB,KAAa,EACb,IAAY,EACZ,OAAO,GAAG,oBAAoB;IAE9B,MAAM,CAAC,MAAM,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1G,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,MAAkB,EAAE,KAAa,EAAE,OAAO,GAAG,oBAAoB;IAC7F,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACrH,CAAC;AAED,8EAA8E;AAE9E,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,MAAc,EAAE,IAAgB,EAAuB,EAAE,CAAC;IAC1F;QACE,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE;YACR,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;YACrD,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE;SACtD;QACD,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC;KACzB;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,oCAAoC;IACpC,IAAI,EAAE,CAAC,KAA0B,EAAE,EAAU,EAAE,QAAkC,EAAuB,EAAE,CAAC;QACzG;YACE,SAAS,EAAE,cAAc;YACzB,QAAQ,EAAE;gBACR,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;gBAC3D,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;aAClD;YACD,IAAI,EAAE,YAAY,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;SACvF;KACF;IACD,QAAQ,EAAE,CAAC,KAA0C,EAAE,KAAa,EAAE,SAAiB,EAAE,EAAE,CACzF,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAClJ,WAAW,EAAE,CAAC,KAA0C,EAAE,KAAa,EAAE,SAAiB,EAAE,EAAE,CAC5F,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACrJ,YAAY,EAAE,CAAC,KAA0C,EAAE,KAAa,EAAE,IAAY,EAAE,EAAE,CACxF,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5I,YAAY,EAAE,CAAC,KAA0C,EAAE,SAAiB,EAAE,EAAE,CAC9E,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,gBAAgB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IACnG,QAAQ,EAAE,CAAC,KAA0C,EAAE,OAAe,EAAE,EAAE,CACxE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;CAClH,CAAC;AAEF,MAAM,EAAE,GAAG,CAAC,CAAa,EAAE,EAAU,EAAE,CAAS,EAAU,EAAE;IAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAE,CAAC,CAAC;IACpE,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAcF,sFAAsF;AACtF,MAAM,UAAU,kBAAkB,CAAC,KAA0C,EAAE,CAAoB;IACjG,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAChH,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC5B,IAAI,CAAC,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,EAAG,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACvI,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,oBAAoB,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7E,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAW,CAAC;QAC7F,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAuB,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC3F,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5I,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,oBAAoB,IAAI,EAAE,EAAE,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACxE,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/D,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACb,KAAK,gBAAgB,CAAC,QAAQ;gBAC5B,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;oBAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAE,EAAE,CAAC;gBACpF,MAAM;YACR,KAAK,gBAAgB,CAAC,WAAW;gBAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;oBAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAE,EAAE,CAAC;gBACvF,MAAM;YACR,KAAK,gBAAgB,CAAC,YAAY;gBAChC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;oBAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpF,MAAM;YACR,KAAK,gBAAgB,CAAC,YAAY;gBAChC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;gBACnE,MAAM;YACR,KAAK,gBAAgB,CAAC,QAAQ;gBAC5B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,MAAM;QACV,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/types.d.ts

@@ -350,6 +350,14 @@ export type OperationKind = {
 } | {
     kind: "upgrade_account";
 }
+/**
+ * Up to 16 calls in order, all or none, under one passkey signature: an
+ * approval and the call that spends it belong together. ERC-4337 only.
+ */
+ | {
+    kind: "batch";
+    calls: ChainCall[];
+}
 /** A cross-chain swap LI.FI routed and Theoo checked (`me.money.quoteBridge`). */
  | {
     kind: "bridge";
@@ -375,7 +383,117 @@ export type OperationKind = {
  | {
     kind: "espees_sell_dispute";
     order: string;
+}
+/** Make a multisig. The user's own account must be one of its owners. */
+ | {
+    kind: "vault_create";
+    vault: VaultSpec;
+}
+/**
+ * As an owner, put calls up for approval; proposing approves. With `run`
+ * (the default), a proposal this approval alone makes ready runs at once.
+ */
+ | {
+    kind: "vault_propose";
+    vault: string;
+    calls: VaultCall[];
+    run?: boolean;
+}
+/** Approve proposal `proposal`, naming the hash of the calls that were shown. */
+ | {
+    kind: "vault_approve";
+    vault: string;
+    proposal: number;
+    callsHash: string;
+    run?: boolean;
+} | {
+    kind: "vault_revoke";
+    vault: string;
+    proposal: number;
+} | {
+    kind: "vault_reject";
+    vault: string;
+    proposal: number;
+} | {
+    kind: "vault_cancel";
+    vault: string;
+    proposal: number;
+} | {
+    kind: "vault_execute";
+    vault: string;
+    proposal: number;
 };
+/**
+ * One call a multisig proposal makes. `gas`, when set, is exactly the gas the
+ * call gets when it runs — part of what is approved, so whoever runs it can't
+ * starve a call into a contract that tolerates failing sub-calls (a multicall
+ * allowing failures, a router with revertible steps). Leave it out for a
+ * transfer, or any call that reverts as a whole when it runs out.
+ */
+export interface VaultCall {
+    to: string;
+    value?: string | number | bigint;
+    data?: string;
+    gas?: number;
+}
+/** A multisig to make. */
+export interface VaultSpec {
+    /** For the people in it; kept by Theoo, not on chain. */
+    name?: string;
+    /** Addresses, in order — hex on EVM, base58 on Solana: the order is part of the vault's address. */
+    owners: string[];
+    /** Names for owners, by address, shown to the vault's members. */
+    labels?: Record<string, string>;
+    /** How many owners must approve, 1 to `owners.length`. */
+    threshold: number;
+    /** Seconds an approved proposal waits before it can run, up to 30 days. */
+    delay?: number;
+    /** 32 bytes of hex. Omit for a new vault; give the same one to make the same vault on another chain. */
+    salt?: string;
+}
+/** Where a proposal stands. The last five are final. */
+export type VaultProposalState = "open" | "waiting" | "ready" | "executed" | "cancelled" | "rejected" | "expired" | "stale" | "missing";
+export interface VaultSummary {
+    chain: number;
+    address: string;
+    name: string | null;
+    /** False until the operation that makes it lands. */
+    deployed: boolean;
+    owners: string[];
+    threshold: number;
+    /** Seconds. */
+    delay: number;
+    /** Native balance, decimal wei. */
+    balance: string;
+    proposalCount: number;
+}
+export interface VaultProposal {
+    id: number;
+    state: VaultProposalState;
+    proposer: string;
+    createdAt: number;
+    expiresAt: number;
+    /** When it may run; 0 until enough owners approve. */
+    readyAt: number;
+    /** What the chain says the calls hash to. An approval re-computes it from `calls`. */
+    callsHash: string;
+    approvedBy: string[];
+    rejectedBy: string[];
+    calls: VaultCall[];
+    youApproved: boolean;
+    youRejected: boolean;
+}
+export interface VaultDetail extends VaultSummary {
+    /** The user's own address on this chain. */
+    you: string;
+    isOwner: boolean;
+    labels: Record<string, string>;
+    epoch: number;
+    /** Its creation settings, to make the same vault on another chain. */
+    spec: Partial<VaultSpec>;
+    /** Newest first. */
+    proposals: VaultProposal[];
+}
 /** A token swaps may use on a chain, read from its own contract. */
 export interface MoneyToken {
     chain: number;
@@ -498,6 +616,12 @@ export interface PreparedOperation {
     sponsored: boolean;
     deploys: boolean;
     session?: string | null;
+    /**
+     * What `challenge` is the hash of, so the SDK can rebuild it before the
+     * passkey signs: `{ type: "userOp", entryPoint, userOp }` or
+     * `{ type: "legacy", nonce, call }`.
+     */
+    payload?: unknown;
 }
 export type OperationState = "prepared" | "submitted" | "included" | "failed" | "expired";
 export interface OperationStatus {
@@ -609,7 +733,110 @@ export type SolanaAction = {
  | {
     kind: "batch";
     actions: SolanaAction[];
+}
+/**
+ * Make a multisig vault. Owners are base58, and the user's own account
+ * must be one of them. Theoo pays the rent and holds no seat.
+ *
+ * This and the vault actions below are written by Theoo's server from
+ * these fields, and checked here before the passkey signs them.
+ */
+ | {
+    kind: "vault_create";
+    vault: VaultSpec;
+}
+/**
+ * As an owner, put instructions up for approval; proposing approves.
+ * `vault` is the vault's `config` (its money address is taken too). Each
+ * instruction may name the vault's signer — its `address` — as a signer,
+ * and nobody else.
+ */
+ | {
+    kind: "vault_propose";
+    vault: string;
+    calls: SolanaInstruction[];
+}
+/** Approve proposal `proposal`, naming the hash of the instructions that were shown. */
+ | {
+    kind: "vault_approve";
+    vault: string;
+    proposal: number;
+    callsHash: string;
+} | {
+    kind: "vault_revoke";
+    vault: string;
+    proposal: number;
+} | {
+    kind: "vault_reject";
+    vault: string;
+    proposal: number;
+} | {
+    kind: "vault_cancel";
+    vault: string;
+    proposal: number;
 };
+/** One Solana instruction, as a vault proposal carries it. `data` is base64. */
+export interface SolanaInstruction {
+    programId: string;
+    accounts: SolanaAccountMeta[];
+    data: string;
+}
+/** A Solana multisig. */
+export interface SolanaVaultSummary {
+    cluster: string;
+    /** Where it holds its SOL and what its tokens answer to: the address to show, and to send to. */
+    address: string;
+    /** Its settings account. Instructions name it; never send to it. */
+    config: string;
+    name: string | null;
+    /** False until the operation that makes it lands. */
+    deployed: boolean;
+    owners: string[];
+    threshold: number;
+    /** Seconds. */
+    delay: number;
+    /** Lamports at `address`, decimal. */
+    balance: string;
+    proposalCount: number;
+}
+export interface SolanaVaultProposal {
+    id: number;
+    /** The proposal's own account. */
+    account: string;
+    /** For a `closed` proposal: the final state Theoo saw, or `missing`. */
+    state: VaultProposalState;
+    proposer: string;
+    createdAt: number;
+    expiresAt: number;
+    /** When it may run: once enough current approvals have each waited the whole delay. 0 until then. */
+    readyAt: number;
+    /** What the chain says the instructions hash to. An approval re-computes it from `calls`. */
+    callsHash: string;
+    approvedBy: string[];
+    /** When each of `approvedBy` approved, in the same order. */
+    approvalTimes: number[];
+    rejectedBy: string[];
+    calls: SolanaInstruction[];
+    /** Who paid its rent, and gets it back once it is closed. */
+    payer: string;
+    /** Its account is gone — closed once final — and this is what Theoo last saw of it. */
+    closed: boolean;
+    youApproved: boolean;
+    youRejected: boolean;
+}
+export interface SolanaVaultDetail extends SolanaVaultSummary {
+    /** The user's own account on this cluster. */
+    you: string;
+    isOwner: boolean;
+    labels: Record<string, string>;
+    epoch: number;
+    /** Its creation settings, and its `config`. */
+    spec: Partial<VaultSpec> & {
+        config?: string;
+    };
+    /** Newest first. */
+    proposals: SolanaVaultProposal[];
+}
 /**
  * A Solana session key. The same bounded delegate as on the EVM side, minus
  * the selector: a Solana instruction has no four-byte function id, so the
@@ -675,12 +902,16 @@ export interface PreparedSolanaOperation {
     initializes: boolean;
     /** For `grant_session` and `revoke_session`: the key concerned. */
     session?: string | null;
+    /** The program, base58: with `account`, `nonce` and `action`, what `challenge` is the hash of. */
+    programId?: string;
+    /** The action as the program decodes it, hex. */
+    action?: string;
 }
 export interface SolanaOperationStatus {
     id: string;
     cluster: string;
     account: string;
-    kind: "transfer" | "invoke" | "enable_recovery" | "cancel_recovery" | "grant_session" | "renew_session" | "revoke_session" | "session_call";
+    kind: "transfer" | "invoke" | "enable_recovery" | "cancel_recovery" | "grant_session" | "renew_session" | "revoke_session" | "session_call" | "vault_create" | "vault_propose" | "vault_approve" | "vault_revoke" | "vault_reject" | "vault_cancel" | "vault_execute";
     /** The session key this operation granted, revoked or acted under. */
     session?: string | null;
     summary: Record<string, unknown>;
@@ -759,6 +990,49 @@ export interface BridgeQuote {
     summary: string;
     warning: string | null;
 }
+/** Where a user stands with Bachs: their own account there, its naira number, and where money goes. */
+export interface BachsStatus {
+    /** Bachs is configured on this server. */
+    available: boolean;
+    buyEnabled: boolean;
+    cashoutEnabled: boolean;
+    /** The user has an account at Bachs. */
+    linked: boolean;
+    /** Bachs has approved naira deposits for it. */
+    depositsActive: boolean;
+    payoutsActive: boolean;
+    /** Where to send naira: a permanent account number, the user's own. */
+    nairaAccount: {
+        accountNumber: string;
+        bankName: string;
+    } | null;
+    /** What naira arrives as, and where: always this user's own Theoo account. */
+    receive: {
+        chain: number;
+        asset: string;
+        code: string;
+        address: string;
+    } | null;
+    /** Where a cash-out lands, as Bachs named it from the bank. */
+    bank: {
+        bankName: string;
+        accountName: string;
+        last4: string;
+    } | null;
+    receiveOptions: Array<{
+        chain: number;
+        asset: string;
+    }>;
+    /** False until Bachs names a crypto deposit address through its API. */
+    cashoutPayInReady: boolean;
+}
+export interface BachsOnboardRequest {
+    email: string;
+    firstName?: string;
+    lastName?: string;
+    /** A page on one of the project's origins; Bachs sends the user back there. */
+    returnUrl: string;
+}
 /** Selling ESPEES back to the desk, on a chain. */
 export interface SellInfo {
     open: boolean;