@theoo/sdk 0.4.3 → 0.4.4

package/dist/vault.d.ts

@@ -0,0 +1,92 @@
+import type { VaultCall } from "./types.js";
+/** `TheooVaultFactory`, at one address on every chain that has it. */
+export declare const VAULT_FACTORY = "0xf9D5b7cB6081Ac75EBdd3A8763deF6981F2f78E4";
+export declare const VAULT_LIMITS: {
+    readonly owners: 20;
+    readonly calls: 16;
+    readonly callData: 16384;
+    readonly delay: number;
+};
+export declare const VAULT_SEL: {
+    readonly create: string;
+    readonly propose: string;
+    readonly approve: string;
+    readonly revoke: string;
+    readonly reject: string;
+    readonly cancel: string;
+    readonly execute: string;
+    readonly addOwner: string;
+    readonly removeOwner: string;
+    readonly replaceOwner: string;
+    readonly setThreshold: string;
+    readonly setDelay: string;
+    readonly signMessage: string;
+    readonly erc20Transfer: string;
+};
+/** `abi.encode(calls)`, as the vault encodes them. */
+export declare function encodeCalls(calls: VaultCall[]): Uint8Array;
+/** What an approval of these calls must name. */
+export declare function callsHash(calls: VaultCall[]): string;
+/** Calldata for `propose(calls)`. */
+export declare function proposeData(calls: VaultCall[]): string;
+/** The calls inside `propose(calls)` calldata. Throws if it isn't one. */
+export declare function decodePropose(calldata: string): VaultCall[];
+/**
+ * Where a vault with these settings is, on every chain with the factory.
+ * The address commits to all of them, so it can be shared — and funded —
+ * before the vault is created anywhere.
+ */
+export declare function predictVault(owners: string[], threshold: number, delay: number, salt: string): string;
+/** 32 random bytes, for a new vault. */
+export declare function newSalt(): string;
+/** A call, said plainly: what an owner is being asked to approve. */
+export type DescribedCall = {
+    kind: "send";
+    to: string;
+    value: bigint;
+} | {
+    kind: "token";
+    token: string;
+    to: string;
+    amount: bigint;
+} | {
+    kind: "add_owner";
+    owner: string;
+    threshold: number;
+} | {
+    kind: "remove_owner";
+    owner: string;
+    threshold: number;
+} | {
+    kind: "replace_owner";
+    owner: string;
+    with: string;
+} | {
+    kind: "threshold";
+    threshold: number;
+} | {
+    kind: "delay";
+    seconds: number;
+} | {
+    kind: "sign_message";
+    hash: string;
+    signed: boolean;
+} | {
+    kind: "call";
+    to: string;
+    value: bigint;
+    selector: string;
+};
+/** Turn one of a proposal's calls into what it does, for `vault` itself. */
+export declare function describeCall(vault: string, c: VaultCall): DescribedCall;
+/** Calls for the common proposals. */
+export declare const vaultCalls: {
+    send: (to: string, wei: bigint | string) => VaultCall[];
+    sendToken: (token: string, to: string, amount: bigint | string) => VaultCall[];
+    addOwner: (vault: string, owner: string, threshold: number) => VaultCall[];
+    removeOwner: (vault: string, owner: string, threshold: number) => VaultCall[];
+    replaceOwner: (vault: string, owner: string, next: string) => VaultCall[];
+    setThreshold: (vault: string, threshold: number) => VaultCall[];
+    setDelay: (vault: string, seconds: number) => VaultCall[];
+};
+//# sourceMappingURL=vault.d.ts.map

package/dist/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,sEAAsE;AACtE,eAAO,MAAM,aAAa,+CAA+C,CAAC;AAE1E,eAAO,MAAM,YAAY;;;;;CAAiF,CAAC;AAE3G,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;CAeZ,CAAC;AA0BX,sDAAsD;AACtD,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAE1D;AAED,iDAAiD;AACjD,wBAAgB,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,CAEpD;AAED,qCAAqC;AACrC,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,CAEtD;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,CAa3D;AAcD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAWrG;AAED,wCAAwC;AACxC,wBAAgB,OAAO,IAAI,MAAM,CAIhC;AAID,qEAAqE;AACrE,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAElE,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,GAAG,aAAa,CA8BvE;AAED,sCAAsC;AACtC,eAAO,MAAM,UAAU;eACV,MAAM,OAAO,MAAM,GAAG,MAAM,KAAG,SAAS,EAAE;uBAClC,MAAM,MAAM,MAAM,UAAU,MAAM,GAAG,MAAM,KAAG,SAAS,EAAE;sBAO1D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,SAAS,EAAE;yBAGnD,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,SAAS,EAAE;0BAGrD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,SAAS,EAAE;0BAGjD,MAAM,aAAa,MAAM,KAAG,SAAS,EAAE;sBAG3C,MAAM,WAAW,MAAM,KAAG,SAAS,EAAE;CAGxD,CAAC"}

package/dist/vault.js

@@ -0,0 +1,165 @@
+/**
+ * Multisig vaults, client side: the encoding a vault's contract uses, worked
+ * out here rather than taken from the server.
+ *
+ * The point is the approval. An owner approves proposal N by naming the hash
+ * of its calls, `keccak256(abi.encode(calls))`. That hash is computed here,
+ * from the calls this app is about to show, so the approval the passkey signs
+ * is an approval of *what was on the screen*: if anything between the chain
+ * and the screen misrepresented the proposal, the vault refuses the approval
+ * instead of counting it. See `contracts/src/TheooVault.sol`.
+ */
+import { addressWord, padded, Reader, selector, splitCall, toBig, word } from "./abi.js";
+import { bytesToHex, concatBytes, hexToBytes, keccak256 } from "./hash.js";
+/** `TheooVaultFactory`, at one address on every chain that has it. */
+export const VAULT_FACTORY = "0xf9D5b7cB6081Ac75EBdd3A8763deF6981F2f78E4";
+export const VAULT_LIMITS = { owners: 20, calls: 16, callData: 16384, delay: 30 * 24 * 60 * 60 };
+export const VAULT_SEL = {
+    create: selector("create(address[],uint8,uint64,bytes32)"),
+    propose: selector("propose((address,uint256,bytes,uint256)[])"),
+    approve: selector("approve(uint256,bytes32)"),
+    revoke: selector("revoke(uint256)"),
+    reject: selector("reject(uint256)"),
+    cancel: selector("cancel(uint256)"),
+    execute: selector("execute(uint256)"),
+    addOwner: selector("addOwner(address,uint8)"),
+    removeOwner: selector("removeOwner(address,uint8)"),
+    replaceOwner: selector("replaceOwner(address,address)"),
+    setThreshold: selector("setThreshold(uint8)"),
+    setDelay: selector("setDelay(uint64)"),
+    signMessage: selector("signMessage(bytes32,bool)"),
+    erc20Transfer: selector("transfer(address,uint256)"),
+};
+const data = (c) => hexToBytes(c.data && c.data !== "" ? c.data : "0x");
+/** The calls as a tail of `(address,uint256,bytes,uint256)[]`: length, offsets, tuples. */
+function callsArray(calls) {
+    const tuples = calls.map((c) => {
+        const d = data(c);
+        return concatBytes(addressWord(c.to), word(toBig(c.value ?? 0)), word(128n), word(toBig(c.gas ?? 0)), word(BigInt(d.length)), padded(d));
+    });
+    const offsets = [];
+    let at = 32 * calls.length;
+    for (const t of tuples) {
+        offsets.push(word(BigInt(at)));
+        at += t.length;
+    }
+    return concatBytes(word(BigInt(calls.length)), ...offsets, ...tuples);
+}
+/** `abi.encode(calls)`, as the vault encodes them. */
+export function encodeCalls(calls) {
+    return concatBytes(word(32n), callsArray(calls));
+}
+/** What an approval of these calls must name. */
+export function callsHash(calls) {
+    return bytesToHex(keccak256(encodeCalls(calls)));
+}
+/** Calldata for `propose(calls)`. */
+export function proposeData(calls) {
+    return bytesToHex(concatBytes(hexToBytes(VAULT_SEL.propose), encodeCalls(calls)));
+}
+/** The calls inside `propose(calls)` calldata. Throws if it isn't one. */
+export function decodePropose(calldata) {
+    const s = splitCall(calldata);
+    if (s.selector !== VAULT_SEL.propose)
+        throw new Error("not a proposal");
+    const arr = s.args.sub(0);
+    const n = Number(arr.uint(0));
+    if (n > VAULT_LIMITS.calls)
+        throw new Error("too many calls");
+    const els = new Reader(arr.data, arr.base + 32);
+    const out = [];
+    for (let i = 0; i < n; i++) {
+        const t = els.sub(32 * i);
+        out.push({ to: t.address(0), value: t.uint(32).toString(), data: bytesToHex(t.bytes(64)), gas: Number(t.uint(96)) });
+    }
+    return out;
+}
+/* ── addresses ─────────────────────────────────────────────────────────── */
+function create1(deployer, nonce) {
+    // RLP([deployer, nonce]) for a nonce below 0x80.
+    const rlp = concatBytes(new Uint8Array([0xd6, 0x94]), hexToBytes(deployer), new Uint8Array([nonce]));
+    return bytesToHex(keccak256(rlp).slice(12));
+}
+function create2(deployer, salt, codeHash) {
+    return bytesToHex(keccak256(concatBytes(new Uint8Array([0xff]), hexToBytes(deployer), salt, codeHash)).slice(12));
+}
+/**
+ * Where a vault with these settings is, on every chain with the factory.
+ * The address commits to all of them, so it can be shared — and funded —
+ * before the vault is created anywhere.
+ */
+export function predictVault(owners, threshold, delay, salt) {
+    const head = concatBytes(word(128n), word(BigInt(threshold)), word(BigInt(delay)), hexToBytes(salt));
+    const tail = concatBytes(word(BigInt(owners.length)), ...owners.map(addressWord));
+    const vaultSalt = keccak256(concatBytes(head, tail));
+    const implementation = create1(VAULT_FACTORY, 1);
+    const clone = concatBytes(hexToBytes("0x3d602d80600a3d3981f3363d3d373d3d3d363d73"), hexToBytes(implementation), hexToBytes("0x5af43d82803e903d91602b57fd5bf3"));
+    return create2(VAULT_FACTORY, vaultSalt, keccak256(clone));
+}
+/** 32 random bytes, for a new vault. */
+export function newSalt() {
+    const b = new Uint8Array(32);
+    crypto.getRandomValues(b);
+    return bytesToHex(b);
+}
+/** Turn one of a proposal's calls into what it does, for `vault` itself. */
+export function describeCall(vault, c) {
+    const value = toBig(c.value ?? 0);
+    const raw = data(c);
+    if (raw.length === 0)
+        return { kind: "send", to: c.to, value };
+    const s = splitCall(raw);
+    const a = s.args;
+    try {
+        if (c.to.toLowerCase() === vault.toLowerCase()) {
+            switch (s.selector) {
+                case VAULT_SEL.addOwner:
+                    return { kind: "add_owner", owner: a.address(0), threshold: Number(a.uint(32)) };
+                case VAULT_SEL.removeOwner:
+                    return { kind: "remove_owner", owner: a.address(0), threshold: Number(a.uint(32)) };
+                case VAULT_SEL.replaceOwner:
+                    return { kind: "replace_owner", owner: a.address(0), with: a.address(32) };
+                case VAULT_SEL.setThreshold:
+                    return { kind: "threshold", threshold: Number(a.uint(0)) };
+                case VAULT_SEL.setDelay:
+                    return { kind: "delay", seconds: Number(a.uint(0)) };
+                case VAULT_SEL.signMessage:
+                    return { kind: "sign_message", hash: a.bytes32(0), signed: a.bool(32) };
+            }
+        }
+        if (s.selector === VAULT_SEL.erc20Transfer && value === 0n && raw.length === 68) {
+            return { kind: "token", token: c.to, to: a.address(0), amount: a.uint(32) };
+        }
+    }
+    catch {
+        /* not what its selector claimed: shown as a raw call */
+    }
+    return { kind: "call", to: c.to, value, selector: s.selector };
+}
+/** Calls for the common proposals. */
+export const vaultCalls = {
+    send: (to, wei) => [{ to, value: toBig(wei).toString(), data: "0x" }],
+    sendToken: (token, to, amount) => [
+        {
+            to: token,
+            value: "0",
+            data: bytesToHex(concatBytes(hexToBytes(VAULT_SEL.erc20Transfer), addressWord(to), word(toBig(amount)))),
+        },
+    ],
+    addOwner: (vault, owner, threshold) => [
+        { to: vault, value: "0", data: bytesToHex(concatBytes(hexToBytes(VAULT_SEL.addOwner), addressWord(owner), word(BigInt(threshold)))) },
+    ],
+    removeOwner: (vault, owner, threshold) => [
+        { to: vault, value: "0", data: bytesToHex(concatBytes(hexToBytes(VAULT_SEL.removeOwner), addressWord(owner), word(BigInt(threshold)))) },
+    ],
+    replaceOwner: (vault, owner, next) => [
+        { to: vault, value: "0", data: bytesToHex(concatBytes(hexToBytes(VAULT_SEL.replaceOwner), addressWord(owner), addressWord(next))) },
+    ],
+    setThreshold: (vault, threshold) => [
+        { to: vault, value: "0", data: bytesToHex(concatBytes(hexToBytes(VAULT_SEL.setThreshold), word(BigInt(threshold)))) },
+    ],
+    setDelay: (vault, seconds) => [
+        { to: vault, value: "0", data: bytesToHex(concatBytes(hexToBytes(VAULT_SEL.setDelay), word(BigInt(seconds)))) },
+    ],
+};
+//# sourceMappingURL=vault.js.map

package/dist/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3E,sEAAsE;AACtE,MAAM,CAAC,MAAM,aAAa,GAAG,4CAA4C,CAAC;AAE1E,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAW,CAAC;AAE3G,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,MAAM,EAAE,QAAQ,CAAC,wCAAwC,CAAC;IAC1D,OAAO,EAAE,QAAQ,CAAC,4CAA4C,CAAC;IAC/D,OAAO,EAAE,QAAQ,CAAC,0BAA0B,CAAC;IAC7C,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IACnC,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IACnC,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IACnC,OAAO,EAAE,QAAQ,CAAC,kBAAkB,CAAC;IACrC,QAAQ,EAAE,QAAQ,CAAC,yBAAyB,CAAC;IAC7C,WAAW,EAAE,QAAQ,CAAC,4BAA4B,CAAC;IACnD,YAAY,EAAE,QAAQ,CAAC,+BAA+B,CAAC;IACvD,YAAY,EAAE,QAAQ,CAAC,qBAAqB,CAAC;IAC7C,QAAQ,EAAE,QAAQ,CAAC,kBAAkB,CAAC;IACtC,WAAW,EAAE,QAAQ,CAAC,2BAA2B,CAAC;IAClD,aAAa,EAAE,QAAQ,CAAC,2BAA2B,CAAC;CAC5C,CAAC;AAEX,MAAM,IAAI,GAAG,CAAC,CAAY,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEnF,2FAA2F;AAC3F,SAAS,UAAU,CAAC,KAAkB;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,WAAW,CAChB,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EACjB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EACzB,IAAI,CAAC,IAAI,CAAC,EACV,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EACvB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EACtB,MAAM,CAAC,CAAC,CAAC,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/B,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;AACxE,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,WAAW,CAAC,KAAkB;IAC5C,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,SAAS,CAAC,KAAkB;IAC1C,OAAO,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,WAAW,CAAC,KAAkB;IAC5C,OAAO,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,YAAY,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAChD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAE9E,SAAS,OAAO,CAAC,QAAgB,EAAE,KAAa;IAC9C,iDAAiD;IACjD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrG,OAAO,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,IAAgB,EAAE,QAAoB;IACvE,OAAO,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AACpH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAAgB,EAAE,SAAiB,EAAE,KAAa,EAAE,IAAY;IAC3F,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,WAAW,CACvB,UAAU,CAAC,4CAA4C,CAAC,EACxD,UAAU,CAAC,cAAc,CAAC,EAC1B,UAAU,CAAC,kCAAkC,CAAC,CAC/C,CAAC;IACF,OAAO,OAAO,CAAC,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,OAAO;IACrB,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAgBD,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,CAAY;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;IAC/D,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/C,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACnB,KAAK,SAAS,CAAC,QAAQ;oBACrB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACnF,KAAK,SAAS,CAAC,WAAW;oBACxB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACtF,KAAK,SAAS,CAAC,YAAY;oBACzB,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC7E,KAAK,SAAS,CAAC,YAAY;oBACzB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,KAAK,SAAS,CAAC,QAAQ;oBACrB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,KAAK,SAAS,CAAC,WAAW;oBACxB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,aAAa,IAAI,KAAK,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAChF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED,sCAAsC;AACtC,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI,EAAE,CAAC,EAAU,EAAE,GAAoB,EAAe,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3G,SAAS,EAAE,CAAC,KAAa,EAAE,EAAU,EAAE,MAAuB,EAAe,EAAE,CAAC;QAC9E;YACE,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG;YACV,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SACzG;KACF;IACD,QAAQ,EAAE,CAAC,KAAa,EAAE,KAAa,EAAE,SAAiB,EAAe,EAAE,CAAC;QAC1E,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;KACtI;IACD,WAAW,EAAE,CAAC,KAAa,EAAE,KAAa,EAAE,SAAiB,EAAe,EAAE,CAAC;QAC7E,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;KACzI;IACD,YAAY,EAAE,CAAC,KAAa,EAAE,KAAa,EAAE,IAAY,EAAe,EAAE,CAAC;QACzE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;KACpI;IACD,YAAY,EAAE,CAAC,KAAa,EAAE,SAAiB,EAAe,EAAE,CAAC;QAC/D,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;KACtH;IACD,QAAQ,EAAE,CAAC,KAAa,EAAE,OAAe,EAAe,EAAE,CAAC;QACzD,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;KAChH;CACF,CAAC"}

package/dist/verify.d.ts

@@ -0,0 +1,82 @@
+import type { OperationKind, PreparedOperation, PreparedSolanaOperation, SolanaAction } from "./types.js";
+/** Thrown before the passkey is asked: what the server sent isn't what was asked for. */
+export declare class SigningRefused extends Error {
+    readonly code: "SIGNING_REFUSED";
+    constructor(reason: string);
+}
+/** 0x's AllowanceHolder: the only spender a token swap approves. Same address on every chain. */
+export declare const ALLOWANCE_HOLDER = "0x0000000000001ff3684f28c67538d4d072c22734";
+/** LI.FI's Diamond: the only spender a cross-chain swap approves. Same address on every chain. */
+export declare const LIFI_DIAMOND = "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae";
+/**
+ * Account implementations an `upgrade_account` may move to: the canonical
+ * set's, the same address on every chain. The first is live today; the
+ * second is the reviewed build that replaces it (contracts/canonical.env).
+ * Drop the first once the chains have moved.
+ */
+export declare const ACCOUNT_IMPLEMENTATIONS: string[];
+export interface WireUserOp {
+    sender: string;
+    nonce: string;
+    factory?: string | null;
+    factoryData?: string | null;
+    callData: string;
+    callGasLimit: string;
+    verificationGasLimit: string;
+    preVerificationGas: string;
+    maxFeePerGas: string;
+    maxPriorityFeePerGas: string;
+    paymaster?: string | null;
+    paymasterVerificationGasLimit?: string | null;
+    paymasterPostOpGasLimit?: string | null;
+    paymasterData?: string | null;
+}
+/** The EntryPoint v0.8 hash of an operation: what its passkey signs. */
+export declare function userOpHash(op: WireUserOp, entryPoint: string, chainId: number): Uint8Array;
+export interface PlainCall {
+    to: string;
+    value: bigint;
+    data: string;
+}
+/** The relayer-model account's own challenge: `keccak256(abi.encode(account, chainid, nonce, to, value, data))`. */
+export declare function legacyChallenge(account: string, chainId: number, nonce: bigint, call: PlainCall): Uint8Array;
+/** What the account's ERC-1271 check expects the passkey to have signed for `hash`. */
+export declare function replaySafeHash(account: string, chainId: number, hash: Uint8Array): Uint8Array;
+/** The calls an ERC-4337 operation's callData makes, as the account will run them. */
+export declare function decodeAccountCalls(callData: string): PlainCall[];
+/** What a quote said leaves the account: checked against the calls. */
+export interface Budget {
+    /** A token address, or `"native"`. */
+    token: string;
+    /** Smallest unit. */
+    amount: bigint;
+    /** The chain's own coin a route may also take as a fee. */
+    extraNative?: bigint;
+}
+export interface CheckOptions {
+    chain?: number;
+    budget?: Budget;
+    /** When the user pays the network fee themselves: the most they may be charged, in wei. */
+    maxFeeWei?: bigint;
+}
+/** The calls, against what was asked for. */
+export declare function checkCalls(kind: OperationKind, calls: PlainCall[], account: string, o: CheckOptions): void;
+/** Check a prepared EVM operation against what was asked for. Throws `SigningRefused`. */
+export declare function checkPrepared(kind: OperationKind, prepared: PreparedOperation, o?: CheckOptions): void;
+/** Check a message-signing request: the hash is the message's, and the challenge is what the account expects for it. */
+export declare function checkSignBegin(req: {
+    message?: string;
+    typedData?: unknown;
+    hash?: string;
+}, begun: {
+    chain: number;
+    account: string;
+    hash: string;
+    challenge: string;
+    webauthnOptions: unknown;
+}): void;
+/** The Solana program's challenge: `sha256("theoo/solana/v1" ‖ program ‖ account ‖ nonce ‖ sha256(action))`. */
+export declare function solanaChallenge(programId: string, account: string, nonce: bigint, action: Uint8Array): Uint8Array;
+/** Check a prepared Solana operation against the action asked for. Throws `SigningRefused`. */
+export declare function checkPreparedSolana(action: SolanaAction, prepared: PreparedSolanaOperation): void;
+//# sourceMappingURL=verify.d.ts.map

package/dist/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAa,aAAa,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,YAAY,EAAa,MAAM,YAAY,CAAC;AAIhI,yFAAyF;AACzF,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAG,iBAAiB,CAAU;gBAC/B,MAAM,EAAE,MAAM;CAI3B;AAQD,iGAAiG;AACjG,eAAO,MAAM,gBAAgB,+CAA+C,CAAC;AAC7E,kGAAkG;AAClG,eAAO,MAAM,YAAY,+CAA+C,CAAC;AACzE;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,UAA+F,CAAC;AAMpI,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,6BAA6B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAeD,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CA4B1F;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,oHAAoH;AACpH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,UAAU,CAc5G;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAM7F;AAuBD,sFAAsF;AACtF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,CAchE;AAID,uEAAuE;AACvE,MAAM,WAAW,MAAM;IACrB,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAwED,6CAA6C;AAC7C,wBAAgB,UAAU,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,GAAG,IAAI,CA8J1G;AA0BD,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,GAAE,YAAiB,GAAG,IAAI,CA+B1G;AAED,wHAAwH;AACxH,wBAAgB,cAAc,CAC5B,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAC7D,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GACnG,IAAI,CAcN;AAqLD,gHAAgH;AAChH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAUjH;AAED,+FAA+F;AAC/F,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAgBjG"}