@zerodev/permissions 5.2.1-alpha.0

package/_cjs/signers/toWebAuthnPubKey.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toWebAuthnPubKey = exports.WebAuthnMode = void 0;
+const buffer_1 = require("buffer");
+const browser_1 = require("@simplewebauthn/browser");
+const viem_1 = require("viem");
+const webAuthnUtils_js_1 = require("./webAuthnUtils.js");
+var WebAuthnMode;
+(function (WebAuthnMode) {
+    WebAuthnMode["Register"] = "register";
+    WebAuthnMode["Login"] = "login";
+})(WebAuthnMode || (exports.WebAuthnMode = WebAuthnMode = {}));
+const toWebAuthnPubKey = async ({ passkeyName, passkeyServerUrl, mode = WebAuthnMode.Login }) => {
+    let pubKey;
+    let authenticatorIdHash;
+    if (mode === WebAuthnMode.Login) {
+        const loginOptionsResponse = await fetch(`${passkeyServerUrl}/login/options`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            credentials: "include"
+        });
+        const loginOptions = await loginOptionsResponse.json();
+        const loginCred = await (0, browser_1.startAuthentication)(loginOptions);
+        authenticatorIdHash = (0, viem_1.keccak256)((0, webAuthnUtils_js_1.uint8ArrayToHexString)((0, webAuthnUtils_js_1.b64ToBytes)(loginCred.id)));
+        const loginVerifyResponse = await fetch(`${passkeyServerUrl}/login/verify`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ cred: loginCred }),
+            credentials: "include"
+        });
+        const loginVerifyResult = await loginVerifyResponse.json();
+        if (window.sessionStorage === undefined) {
+            throw new Error("sessionStorage is not available");
+        }
+        sessionStorage.setItem("userId", loginVerifyResult.userId);
+        if (!loginVerifyResult.verification.verified) {
+            throw new Error("Login not verified");
+        }
+        pubKey = loginVerifyResult.pubkey;
+    }
+    else {
+        if (!passkeyName) {
+            throw new Error("No passkey name provided");
+        }
+        const registerOptionsResponse = await fetch(`${passkeyServerUrl}/register/options`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json"
+            },
+            body: JSON.stringify({ username: passkeyName }),
+            credentials: "include"
+        });
+        const registerOptions = await registerOptionsResponse.json();
+        if (window.sessionStorage === undefined) {
+            throw new Error("sessionStorage is not available");
+        }
+        sessionStorage.setItem("userId", registerOptions.userId);
+        const registerCred = await (0, browser_1.startRegistration)(registerOptions.options);
+        authenticatorIdHash = (0, viem_1.keccak256)((0, webAuthnUtils_js_1.uint8ArrayToHexString)((0, webAuthnUtils_js_1.b64ToBytes)(registerCred.id)));
+        const registerVerifyResponse = await fetch(`${passkeyServerUrl}/register/verify`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json"
+            },
+            body: JSON.stringify({
+                userId: registerOptions.userId,
+                username: passkeyName,
+                cred: registerCred
+            }),
+            credentials: "include"
+        });
+        const registerVerifyResult = await registerVerifyResponse.json();
+        if (!registerVerifyResult.verified) {
+            throw new Error("Registration not verified");
+        }
+        pubKey = registerCred.response.publicKey;
+    }
+    if (!pubKey) {
+        throw new Error("No public key returned from registration credential");
+    }
+    const spkiDer = buffer_1.Buffer.from(pubKey, "base64");
+    const key = await crypto.subtle.importKey("spki", spkiDer, {
+        name: "ECDSA",
+        namedCurve: "P-256"
+    }, true, ["verify"]);
+    const rawKey = await crypto.subtle.exportKey("raw", key);
+    const rawKeyBuffer = buffer_1.Buffer.from(rawKey);
+    const pubKeyX = rawKeyBuffer.subarray(1, 33).toString("hex");
+    const pubKeyY = rawKeyBuffer.subarray(33).toString("hex");
+    return {
+        pubX: BigInt(`0x${pubKeyX}`),
+        pubY: BigInt(`0x${pubKeyY}`),
+        authenticatorIdHash
+    };
+};
+exports.toWebAuthnPubKey = toWebAuthnPubKey;
+//# sourceMappingURL=toWebAuthnPubKey.js.map

package/_cjs/signers/toWebAuthnPubKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toWebAuthnPubKey.js","sourceRoot":"","sources":["../../signers/toWebAuthnPubKey.ts"],"names":[],"mappings":";;;AAAA,mCAA+B;AAC/B,qDAAgF;AAChF,+BAA0C;AAE1C,yDAAsE;AAEtE,IAAY,YAGX;AAHD,WAAY,YAAY;IACpB,qCAAqB,CAAA;IACrB,+BAAe,CAAA;AACnB,CAAC,EAHW,YAAY,4BAAZ,YAAY,QAGvB;AAEM,MAAM,gBAAgB,GAAG,KAAK,EAAE,EACnC,WAAW,EACX,gBAAgB,EAChB,IAAI,GAAG,YAAY,CAAC,KAAK,EAK5B,EAAwB,EAAE;IACvB,IAAI,MAA0B,CAAA;IAC9B,IAAI,mBAAwB,CAAA;IAC5B,IAAI,IAAI,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC;QAE9B,MAAM,oBAAoB,GAAG,MAAM,KAAK,CACpC,GAAG,gBAAgB,gBAAgB,EACnC;YACI,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,WAAW,EAAE,SAAS;SACzB,CACJ,CAAA;QACD,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAAA;QAGtD,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAmB,EAAC,YAAY,CAAC,CAAA;QAGzD,mBAAmB,GAAG,IAAA,gBAAS,EAC3B,IAAA,wCAAqB,EAAC,IAAA,6BAAU,EAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAClD,CAAA;QAGD,MAAM,mBAAmB,GAAG,MAAM,KAAK,CACnC,GAAG,gBAAgB,eAAe,EAClC;YACI,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACzC,WAAW,EAAE,SAAS;SACzB,CACJ,CAAA;QAED,MAAM,iBAAiB,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAA;QAE1D,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACtD,CAAC;QACD,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAE1D,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;QACzC,CAAC;QAED,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAA;IACrC,CAAC;SAAM,CAAC;QACJ,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC/C,CAAC;QAED,MAAM,uBAAuB,GAAG,MAAM,KAAK,CACvC,GAAG,gBAAgB,mBAAmB,EACtC;YACI,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;aACrC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;YAC/C,WAAW,EAAE,SAAS;SACzB,CACJ,CAAA;QACD,MAAM,eAAe,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,CAAA;QAG5D,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACtD,CAAC;QACD,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,CAAA;QAGxD,MAAM,YAAY,GAAG,MAAM,IAAA,2BAAiB,EAAC,eAAe,CAAC,OAAO,CAAC,CAAA;QAGrE,mBAAmB,GAAG,IAAA,gBAAS,EAC3B,IAAA,wCAAqB,EAAC,IAAA,6BAAU,EAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CACrD,CAAA;QAGD,MAAM,sBAAsB,GAAG,MAAM,KAAK,CACtC,GAAG,gBAAgB,kBAAkB,EACrC;YACI,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;aACrC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACjB,MAAM,EAAE,eAAe,CAAC,MAAM;gBAC9B,QAAQ,EAAE,WAAW;gBACrB,IAAI,EAAE,YAAY;aACrB,CAAC;YACF,WAAW,EAAE,SAAS;SACzB,CACJ,CAAA;QAED,MAAM,oBAAoB,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,CAAA;QAChE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAChD,CAAC;QAGD,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAA;IAC5C,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,OAAO,GAAG,eAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACrC,MAAM,EACN,OAAO,EACP;QACI,IAAI,EAAE,OAAO;QACb,UAAU,EAAE,OAAO;KACtB,EACD,IAAI,EACJ,CAAC,QAAQ,CAAC,CACb,CAAA;IAGD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACxD,MAAM,YAAY,GAAG,eAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAGxC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC5D,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAEzD,OAAO;QACH,IAAI,EAAE,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;QAC5B,mBAAmB;KACtB,CAAA;AACL,CAAC,CAAA;AA5IY,QAAA,gBAAgB,oBA4I5B"}

package/_cjs/signers/toWebAuthnSigner.js

@@ -0,0 +1,154 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toWebAuthnSigner = void 0;
+const browser_1 = require("@simplewebauthn/browser");
+const accounts_1 = require("permissionless/accounts");
+const viem_1 = require("viem");
+const viem_2 = require("viem");
+const accounts_2 = require("viem/accounts");
+const actions_1 = require("viem/actions");
+const constants_js_1 = require("../constants.js");
+const toWebAuthnPubKey_js_1 = require("./toWebAuthnPubKey.js");
+const webAuthnUtils_js_1 = require("./webAuthnUtils.js");
+const toWebAuthnSigner = async (client, { signerContractAddress = constants_js_1.WEBAUTHN_SIGNER_CONTRACT, pubKey, passkeyServerUrl, passkeyName, mode = toWebAuthnPubKey_js_1.WebAuthnMode.Register }) => {
+    pubKey =
+        pubKey ??
+            (await (0, toWebAuthnPubKey_js_1.toWebAuthnPubKey)({
+                passkeyName,
+                passkeyServerUrl,
+                mode
+            }));
+    if (!pubKey) {
+        throw new Error("WebAuthn public key not found");
+    }
+    const chainId = await (0, actions_1.getChainId)(client);
+    const signMessageUsingWebAuthn = async (message) => {
+        let messageContent;
+        if (typeof message === "string") {
+            messageContent = message;
+        }
+        else if ("raw" in message && typeof message.raw === "string") {
+            messageContent = message.raw;
+        }
+        else if ("raw" in message && message.raw instanceof Uint8Array) {
+            messageContent = message.raw.toString();
+        }
+        else {
+            throw new Error("Unsupported message format");
+        }
+        const formattedMessage = messageContent.startsWith("0x")
+            ? messageContent.slice(2)
+            : messageContent;
+        if (window.sessionStorage === undefined) {
+            throw new Error("sessionStorage is not available");
+        }
+        const userId = sessionStorage.getItem("userId");
+        const signInitiateResponse = await fetch(`${passkeyServerUrl}/sign-initiate`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ data: formattedMessage, userId }),
+            credentials: "include"
+        });
+        const signInitiateResult = await signInitiateResponse.json();
+        const assertionOptions = {
+            challenge: signInitiateResult.challenge,
+            allowCredentials: signInitiateResult.allowCredentials,
+            userVerification: "required"
+        };
+        const cred = await (0, browser_1.startAuthentication)(assertionOptions);
+        const verifyResponse = await fetch(`${passkeyServerUrl}/sign-verify`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ cred, userId }),
+            credentials: "include"
+        });
+        const verifyResult = await verifyResponse.json();
+        if (!verifyResult.success) {
+            throw new Error("Signature not verified");
+        }
+        const authenticatorData = verifyResult.authenticatorData;
+        const authenticatorDataHex = (0, webAuthnUtils_js_1.uint8ArrayToHexString)((0, webAuthnUtils_js_1.b64ToBytes)(authenticatorData));
+        const clientDataJSON = atob(cred.response.clientDataJSON);
+        const { beforeType } = (0, webAuthnUtils_js_1.findQuoteIndices)(clientDataJSON);
+        const signature = verifyResult.signature;
+        const signatureHex = (0, webAuthnUtils_js_1.uint8ArrayToHexString)((0, webAuthnUtils_js_1.b64ToBytes)(signature));
+        const { r, s } = (0, webAuthnUtils_js_1.parseAndNormalizeSig)(signatureHex);
+        const encodedSignature = (0, viem_2.encodeAbiParameters)([
+            { name: "authenticatorData", type: "bytes" },
+            { name: "clientDataJSON", type: "string" },
+            { name: "responseTypeLocation", type: "uint256" },
+            { name: "r", type: "uint256" },
+            { name: "s", type: "uint256" },
+            { name: "usePrecompiled", type: "bool" }
+        ], [
+            authenticatorDataHex,
+            clientDataJSON,
+            beforeType,
+            BigInt(r),
+            BigInt(s),
+            (0, webAuthnUtils_js_1.isRIP7212SupportedNetwork)(chainId)
+        ]);
+        return encodedSignature;
+    };
+    const account = (0, accounts_2.toAccount)({
+        address: "0x0000000000000000000000000000000000000000",
+        async signMessage({ message }) {
+            return signMessageUsingWebAuthn(message);
+        },
+        async signTransaction(_, __) {
+            throw new accounts_1.SignTransactionNotSupportedBySmartAccount();
+        },
+        async signTypedData(typedData) {
+            const { domain, message, primaryType } = typedData;
+            const types = {
+                EIP712Domain: (0, viem_1.getTypesForEIP712Domain)({ domain }),
+                ...typedData.types
+            };
+            (0, viem_1.validateTypedData)({ domain, message, primaryType, types });
+            const hash = (0, viem_1.hashTypedData)(typedData);
+            return signMessageUsingWebAuthn(hash);
+        }
+    });
+    return {
+        account,
+        signerContractAddress,
+        getSignerData: () => {
+            if (!pubKey) {
+                throw new Error("WebAuthn public key not found");
+            }
+            return (0, viem_2.encodeAbiParameters)([
+                {
+                    components: [
+                        { name: "pubKeyX", type: "uint256" },
+                        { name: "pubKeyY", type: "uint256" }
+                    ],
+                    name: "WebAuthnSignerData",
+                    type: "tuple"
+                },
+                { name: "authenticatorIdHash", type: "bytes32" }
+            ], [
+                { pubKeyX: pubKey.pubX, pubKeyY: pubKey.pubY },
+                pubKey.authenticatorIdHash
+            ]);
+        },
+        getDummySignature: () => {
+            return (0, viem_2.encodeAbiParameters)([
+                { name: "authenticatorData", type: "bytes" },
+                { name: "clientDataJSON", type: "string" },
+                { name: "responseTypeLocation", type: "uint256" },
+                { name: "r", type: "uint256" },
+                { name: "s", type: "uint256" },
+                { name: "usePrecompiled", type: "bool" }
+            ], [
+                "0x49960de5880e8c687434170f6476605b8fe4aeb9a28632c7995cf3ba831d97631d00000000",
+                '{"type":"webauthn.get","challenge":"tbxXNFS9X_4Byr1cMwqKrIGB-_30a0QhZ6y7ucM0BOE","origin":"http://localhost:3000","crossOrigin":false}',
+                1n,
+                44941127272049826721201904734628716258498742255959991581049806490182030242267n,
+                9910254599581058084911561569808925251374718953855182016200087235935345969636n,
+                false
+            ]);
+        }
+    };
+};
+exports.toWebAuthnSigner = toWebAuthnSigner;
+//# sourceMappingURL=toWebAuthnSigner.js.map

package/_cjs/signers/toWebAuthnSigner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toWebAuthnSigner.js","sourceRoot":"","sources":["../../signers/toWebAuthnSigner.ts"],"names":[],"mappings":";;;AAAA,qDAA6D;AAG7D,sDAAmF;AACnF,+BAWa;AACb,+BAAgE;AAChE,4CAAyC;AACzC,0CAAyC;AACzC,kDAA0D;AAE1D,+DAAsE;AACtE,yDAM2B;AAepB,MAAM,gBAAgB,GAAG,KAAK,EAIjC,MAA6C,EAC7C,EACI,qBAAqB,GAAG,uCAAwB,EAChD,MAAM,EACN,gBAAgB,EAChB,WAAW,EACX,IAAI,GAAG,kCAAY,CAAC,QAAQ,EACF,EACR,EAAE;IACxB,MAAM;QACF,MAAM;YACN,CAAC,MAAM,IAAA,sCAAgB,EAAC;gBACpB,WAAW;gBACX,gBAAgB;gBAChB,IAAI;aACP,CAAC,CAAC,CAAA;IACP,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACpD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAA,oBAAU,EAAC,MAAM,CAAC,CAAA;IAExC,MAAM,wBAAwB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAE;QAChE,IAAI,cAAsB,CAAA;QAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAE9B,cAAc,GAAG,OAAO,CAAA;QAC5B,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAE7D,cAAc,GAAG,OAAO,CAAC,GAAG,CAAA;QAChC,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,YAAY,UAAU,EAAE,CAAC;YAE/D,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC3C,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QACjD,CAAC;QAGD,MAAM,gBAAgB,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC;YACpD,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;YACzB,CAAC,CAAC,cAAc,CAAA;QAEpB,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACtD,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAG/C,MAAM,oBAAoB,GAAG,MAAM,KAAK,CACpC,GAAG,gBAAgB,gBAAgB,EACnC;YACI,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;YACxD,WAAW,EAAE,SAAS;SACzB,CACJ,CAAA;QACD,MAAM,kBAAkB,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAAA;QAG5D,MAAM,gBAAgB,GAA0C;YAC5D,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,gBAAgB,EAAE,kBAAkB,CAAC,gBAAgB;YACrD,gBAAgB,EAAE,UAAU;SAC/B,CAAA;QAGD,MAAM,IAAI,GAAG,MAAM,IAAA,6BAAmB,EAAC,gBAAgB,CAAC,CAAA;QAGxD,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,cAAc,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACtC,WAAW,EAAE,SAAS;SACzB,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAA;QAEhD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC7C,CAAC;QAGD,MAAM,iBAAiB,GAAG,YAAY,CAAC,iBAAiB,CAAA;QACxD,MAAM,oBAAoB,GAAG,IAAA,wCAAqB,EAC9C,IAAA,6BAAU,EAAC,iBAAiB,CAAC,CAChC,CAAA;QAGD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;QAGzD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,mCAAgB,EAAC,cAAc,CAAC,CAAA;QAGvD,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAA;QACxC,MAAM,YAAY,GAAG,IAAA,wCAAqB,EAAC,IAAA,6BAAU,EAAC,SAAS,CAAC,CAAC,CAAA;QACjE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,IAAA,uCAAoB,EAAC,YAAY,CAAC,CAAA;QAGnD,MAAM,gBAAgB,GAAG,IAAA,0BAAmB,EACxC;YACI,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE;YAC5C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1C,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE;YACjD,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9B,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE;SAC3C,EACD;YACI,oBAAoB;YACpB,cAAc;YACd,UAAU;YACV,MAAM,CAAC,CAAC,CAAC;YACT,MAAM,CAAC,CAAC,CAAC;YACT,IAAA,4CAAyB,EAAC,OAAO,CAAC;SACrC,CACJ,CAAA;QACD,OAAO,gBAAgB,CAAA;IAC3B,CAAC,CAAA;IACD,MAAM,OAAO,GAAiB,IAAA,oBAAS,EAAC;QAEpC,OAAO,EAAE,4CAA4C;QACrD,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE;YACzB,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAA;QAC5C,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE;YACvB,MAAM,IAAI,oDAAyC,EAAE,CAAA;QACzD,CAAC;QACD,KAAK,CAAC,aAAa,CAKjB,SAAwD;YACtD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAClC,SAA+C,CAAA;YAEnD,MAAM,KAAK,GAAG;gBACV,YAAY,EAAE,IAAA,8BAAuB,EAAC,EAAE,MAAM,EAAE,CAAC;gBACjD,GAAG,SAAS,CAAC,KAAK;aACrB,CAAA;YAED,IAAA,wBAAiB,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;YAE1D,MAAM,IAAI,GAAG,IAAA,oBAAa,EAAC,SAAS,CAAC,CAAA;YACrC,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAA;QACzC,CAAC;KACJ,CAAC,CAAA;IAEF,OAAO;QACH,OAAO;QACP,qBAAqB;QACrB,aAAa,EAAE,GAAG,EAAE;YAChB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;YACpD,CAAC;YACD,OAAO,IAAA,0BAAmB,EACtB;gBACI;oBACI,UAAU,EAAE;wBACR,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;wBACpC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;qBACvC;oBACD,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE,OAAO;iBAChB;gBACD,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,EAAE;aACnD,EACD;gBACI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;gBAC9C,MAAM,CAAC,mBAAmB;aAC7B,CACJ,CAAA;QACL,CAAC;QACD,iBAAiB,EAAE,GAAG,EAAE;YACpB,OAAO,IAAA,0BAAmB,EACtB;gBACI,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE;gBAC5C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1C,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE;gBACjD,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC9B,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE;aAC3C,EACD;gBACI,8EAA8E;gBAC9E,wIAAwI;gBACxI,EAAE;gBACF,8EAA8E;gBAC9E,6EAA6E;gBAC7E,KAAK;aACR,CACJ,CAAA;QACL,CAAC;KACJ,CAAA;AACL,CAAC,CAAA;AAzMY,QAAA,gBAAgB,oBAyM5B"}

package/_cjs/signers/utils/toSignerId.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toSignerId = void 0;
+const viem_1 = require("viem");
+const toSignerId = (signer) => {
+    return (0, viem_1.encodeAbiParameters)([{ name: "signerData", type: "bytes" }], [(0, viem_1.concat)([signer.signerContractAddress, signer.getSignerData()])]);
+};
+exports.toSignerId = toSignerId;
+//# sourceMappingURL=toSignerId.js.map

package/_cjs/signers/utils/toSignerId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toSignerId.js","sourceRoot":"","sources":["../../../signers/utils/toSignerId.ts"],"names":[],"mappings":";;;AAAA,+BAA4D;AAGrD,MAAM,UAAU,GAAG,CAAC,MAAqB,EAAO,EAAE;IACrD,OAAO,IAAA,0BAAmB,EACtB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACvC,CAAC,IAAA,aAAM,EAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CACnE,CAAA;AACL,CAAC,CAAA;AALY,QAAA,UAAU,cAKtB"}

package/_cjs/signers/webAuthnUtils.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isRIP7212SupportedNetwork = exports.parseAndNormalizeSig = exports.findQuoteIndices = exports.b64ToBytes = exports.uint8ArrayToHexString = void 0;
+const p256_1 = require("@noble/curves/p256");
+const viem_1 = require("viem");
+const RIP7212_SUPPORTED_NETWORKS = [80001];
+const uint8ArrayToHexString = (array) => {
+    return `0x${Array.from(array, (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+};
+exports.uint8ArrayToHexString = uint8ArrayToHexString;
+const b64ToBytes = (base64) => {
+    const paddedBase64 = base64
+        .replace(/-/g, "+")
+        .replace(/_/g, "/")
+        .padEnd(base64.length + ((4 - (base64.length % 4)) % 4), "=");
+    const binString = atob(paddedBase64);
+    return Uint8Array.from(binString, (m) => m.codePointAt(0) ?? 0);
+};
+exports.b64ToBytes = b64ToBytes;
+const findQuoteIndices = (input) => {
+    const beforeTypeIndex = BigInt(input.lastIndexOf('"type":"webauthn.get"'));
+    const beforeChallengeIndex = BigInt(input.indexOf('"challenge'));
+    return {
+        beforeType: beforeTypeIndex,
+        beforeChallenge: beforeChallengeIndex
+    };
+};
+exports.findQuoteIndices = findQuoteIndices;
+function parseAndNormalizeSig(derSig) {
+    const parsedSignature = p256_1.p256.Signature.fromDER(derSig.slice(2));
+    const bSig = (0, viem_1.hexToBytes)(`0x${parsedSignature.toCompactHex()}`);
+    const bR = bSig.slice(0, 32);
+    const bS = bSig.slice(32);
+    const r = (0, viem_1.bytesToBigInt)(bR);
+    let s = (0, viem_1.bytesToBigInt)(bS);
+    const n = BigInt("0xFFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551");
+    if (s > n / 2n) {
+        s = n - s;
+    }
+    return { r, s };
+}
+exports.parseAndNormalizeSig = parseAndNormalizeSig;
+const isRIP7212SupportedNetwork = (chainId) => RIP7212_SUPPORTED_NETWORKS.includes(chainId);
+exports.isRIP7212SupportedNetwork = isRIP7212SupportedNetwork;
+//# sourceMappingURL=webAuthnUtils.js.map

package/_cjs/signers/webAuthnUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webAuthnUtils.js","sourceRoot":"","sources":["../../signers/webAuthnUtils.ts"],"names":[],"mappings":";;;AAAA,6CAAyC;AACzC,+BAA0D;AAE1D,MAAM,0BAA0B,GAAG,CAAC,KAAK,CAAC,CAAA;AAEnC,MAAM,qBAAqB,GAAG,CAAC,KAAiB,EAAiB,EAAE;IACtE,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CACrC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAmB,CAAA;AACjC,CAAC,CAAA;AAJY,QAAA,qBAAqB,yBAIjC;AAEM,MAAM,UAAU,GAAG,CAAC,MAAc,EAAc,EAAE;IACrD,MAAM,YAAY,GAAG,MAAM;SACtB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAClB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAClB,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAA;IACpC,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AACnE,CAAC,CAAA;AAPY,QAAA,UAAU,cAOtB;AAEM,MAAM,gBAAgB,GAAG,CAC5B,KAAa,EACkC,EAAE;IACjD,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAA;IAC1E,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;IAChE,OAAO;QACH,UAAU,EAAE,eAAe;QAC3B,eAAe,EAAE,oBAAoB;KACxC,CAAA;AACL,CAAC,CAAA;AATY,QAAA,gBAAgB,oBAS5B;AAID,SAAgB,oBAAoB,CAAC,MAAW;IAC5C,MAAM,eAAe,GAAG,WAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/D,MAAM,IAAI,GAAG,IAAA,iBAAU,EAAC,KAAK,eAAe,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IAE9D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAGzB,MAAM,CAAC,GAAG,IAAA,oBAAa,EAAC,EAAE,CAAC,CAAA;IAC3B,IAAI,CAAC,GAAG,IAAA,oBAAa,EAAC,EAAE,CAAC,CAAA;IACzB,MAAM,CAAC,GAAG,MAAM,CACZ,oEAAoE,CACvE,CAAA;IACD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;QACb,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACb,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAA;AACnB,CAAC;AAjBD,oDAiBC;AAEM,MAAM,yBAAyB,GAAG,CAAC,OAAe,EAAW,EAAE,CAClE,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;AADnC,QAAA,yBAAyB,6BACU"}

package/_cjs/toPermissionValidator.js

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toPermissionValidator = void 0;
+const sdk_1 = require("@zerodev/sdk");
+const permissionless_1 = require("permissionless");
+const viem_1 = require("viem");
+const actions_1 = require("viem/actions");
+const constants_js_1 = require("./constants.js");
+const index_js_1 = require("./policies/index.js");
+const index_js_2 = require("./signers/index.js");
+async function toPermissionValidator(client, { signer, policies, entryPoint: entryPointAddress, flag = constants_js_1.PolicyFlags.FOR_ALL_VALIDATION }) {
+    const chainId = await (0, actions_1.getChainId)(client);
+    const getEnableData = async (_kernelAccountAddress) => {
+        const enableData = (0, viem_1.encodeAbiParameters)([{ name: "policyAndSignerData", type: "bytes[]" }], [
+            [
+                ...policies.map((policy) => (0, viem_1.concat)([
+                    policy.getPolicyInfoInBytes(),
+                    policy.getPolicyData(getPermissionId())
+                ])),
+                (0, viem_1.concat)([
+                    flag,
+                    signer.signerContractAddress,
+                    signer.getSignerData(getPermissionId())
+                ])
+            ]
+        ]);
+        return enableData;
+    };
+    const getPermissionId = () => {
+        const pIdData = (0, viem_1.encodeAbiParameters)([{ name: "policyAndSignerData", type: "bytes[]" }], [[(0, index_js_1.toPolicyId)(policies), flag, (0, index_js_2.toSignerId)(signer)]]);
+        return (0, viem_1.slice)((0, viem_1.keccak256)(pIdData), 0, 2);
+    };
+    return {
+        ...signer.account,
+        validatorType: "PERMISSION",
+        address: viem_1.zeroAddress,
+        source: "PermissionValidator",
+        getEnableData,
+        getIdentifier: () => (0, viem_1.pad)(getPermissionId(), {
+            size: 20,
+            dir: "right"
+        }),
+        signMessage: async ({ message }) => {
+            return (0, viem_1.concat)([
+                "0xff",
+                await signer.account.signMessage({ message })
+            ]);
+        },
+        signTypedData: async (typedData) => {
+            return (0, viem_1.concat)([
+                "0xff",
+                await signer.account.signTypedData(typedData)
+            ]);
+        },
+        signUserOperation: async (userOperation) => {
+            const userOpHash = (0, permissionless_1.getUserOperationHash)({
+                userOperation: { ...userOperation, signature: "0x" },
+                entryPoint: entryPointAddress,
+                chainId: chainId
+            });
+            const signature = await signer.account.signMessage({
+                message: { raw: userOpHash }
+            });
+            return (0, viem_1.concat)(["0xff", signature]);
+        },
+        getNonceKey: async () => {
+            return 0n;
+        },
+        async getDummySignature(_userOperation) {
+            return (0, viem_1.concat)(["0xff", signer.getDummySignature()]);
+        },
+        getPluginSerializationParams: () => {
+            return {
+                policies
+            };
+        },
+        isEnabled: async (kernelAccountAddress, _selector) => {
+            try {
+                const permissionConfig = await (0, permissionless_1.getAction)(client, actions_1.readContract)({
+                    abi: sdk_1.KernelV3AccountAbi,
+                    address: kernelAccountAddress,
+                    functionName: "permissionConfig",
+                    args: [
+                        (0, viem_1.concat)([
+                            "0x00",
+                            (0, viem_1.pad)(getPermissionId(), {
+                                size: 20,
+                                dir: "right"
+                            })
+                        ])
+                    ]
+                });
+                return permissionConfig.signer === signer.signerContractAddress;
+            }
+            catch (error) {
+                return false;
+            }
+        }
+    };
+}
+exports.toPermissionValidator = toPermissionValidator;
+//# sourceMappingURL=toPermissionValidator.js.map

package/_cjs/toPermissionValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toPermissionValidator.js","sourceRoot":"","sources":["../toPermissionValidator.ts"],"names":[],"mappings":";;;AAAA,sCAAiD;AACjD,mDAAgE;AAEhE,+BAYa;AACb,0CAAuD;AACvD,iDAA4C;AAC5C,kDAAgD;AAChD,iDAA+C;AAOxC,KAAK,UAAU,qBAAqB,CAKvC,MAA6C,EAC7C,EACI,MAAM,EACN,QAAQ,EACR,UAAU,EAAE,iBAAiB,EAC7B,IAAI,GAAG,0BAAW,CAAC,kBAAkB,EAChB;IAEzB,MAAM,OAAO,GAAG,MAAM,IAAA,oBAAU,EAAC,MAAM,CAAC,CAAA;IAExC,MAAM,aAAa,GAAG,KAAK,EACvB,qBAA+B,EACnB,EAAE;QACd,MAAM,UAAU,GAAG,IAAA,0BAAmB,EAClC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAClD;YACI;gBACI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACvB,IAAA,aAAM,EAAC;oBACH,MAAM,CAAC,oBAAoB,EAAE;oBAC7B,MAAM,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;iBAC1C,CAAC,CACL;gBACD,IAAA,aAAM,EAAC;oBACH,IAAI;oBACJ,MAAM,CAAC,qBAAqB;oBAC5B,MAAM,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;iBAC1C,CAAC;aACL;SACJ,CACJ,CAAA;QACD,OAAO,UAAU,CAAA;IACrB,CAAC,CAAA;IAED,MAAM,eAAe,GAAG,GAAQ,EAAE;QAC9B,MAAM,OAAO,GAAG,IAAA,0BAAmB,EAC/B,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAClD,CAAC,CAAC,IAAA,qBAAU,EAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAA,qBAAU,EAAC,MAAM,CAAC,CAAC,CAAC,CACrD,CAAA;QACD,OAAO,IAAA,YAAK,EAAC,IAAA,gBAAS,EAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1C,CAAC,CAAA;IAED,OAAO;QACH,GAAG,MAAM,CAAC,OAAO;QACjB,aAAa,EAAE,YAAY;QAC3B,OAAO,EAAE,kBAAW;QACpB,MAAM,EAAE,qBAAqB;QAC7B,aAAa;QACb,aAAa,EAAE,GAAG,EAAE,CAChB,IAAA,UAAG,EAAC,eAAe,EAAE,EAAE;YACnB,IAAI,EAAE,EAAE;YACR,GAAG,EAAE,OAAO;SACf,CAAC;QAEN,WAAW,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAC/B,OAAO,IAAA,aAAM,EAAC;gBACV,MAAM;gBACN,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;aAChD,CAAC,CAAA;QACN,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YAC/B,OAAO,IAAA,aAAM,EAAC;gBACV,MAAM;gBACN,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC;aAChD,CAAC,CAAA;QACN,CAAC;QAED,iBAAiB,EAAE,KAAK,EAAE,aAAa,EAAgB,EAAE;YACrD,MAAM,UAAU,GAAG,IAAA,qCAAoB,EAAC;gBACpC,aAAa,EAAE,EAAE,GAAG,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE;gBACpD,UAAU,EAAE,iBAAiB;gBAC7B,OAAO,EAAE,OAAO;aACnB,CAAC,CAAA;YAEF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC/C,OAAO,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;aAC/B,CAAC,CAAA;YACF,OAAO,IAAA,aAAM,EAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;QACtC,CAAC;QAED,WAAW,EAAE,KAAK,IAAI,EAAE;YACpB,OAAO,EAAE,CAAA;QACb,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,cAAc;YAClC,OAAO,IAAA,aAAM,EAAC,CAAC,MAAM,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;QACvD,CAAC;QACD,4BAA4B,EAAE,GAAmB,EAAE;YAC/C,OAAO;gBACH,QAAQ;aACX,CAAA;QACL,CAAC;QACD,SAAS,EAAE,KAAK,EACZ,oBAA6B,EAC7B,SAAc,EACE,EAAE;YAClB,IAAI,CAAC;gBACD,MAAM,gBAAgB,GAAG,MAAM,IAAA,0BAAS,EACpC,MAAM,EACN,sBAAY,CACf,CAAC;oBACE,GAAG,EAAE,wBAAkB;oBACvB,OAAO,EAAE,oBAAoB;oBAC7B,YAAY,EAAE,kBAAkB;oBAChC,IAAI,EAAE;wBACF,IAAA,aAAM,EAAC;4BACH,MAAM;4BACN,IAAA,UAAG,EAAC,eAAe,EAAE,EAAE;gCACnB,IAAI,EAAE,EAAE;gCACR,GAAG,EAAE,OAAO;6BACf,CAAC;yBACL,CAAC;qBACL;iBACJ,CAAC,CAAA;gBACF,OAAO,gBAAgB,CAAC,MAAM,KAAK,MAAM,CAAC,qBAAqB,CAAA;YACnE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,OAAO,KAAK,CAAA;YAChB,CAAC;QACL,CAAC;KACJ,CAAA;AACL,CAAC;AA7HD,sDA6HC"}

package/_cjs/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/_cjs/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":""}

package/_cjs/utils.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deserializePermissionAccountParams = exports.serializePermissionAccountParams = exports.isPermissionValidatorPlugin = exports.bytesToBase64 = exports.base64ToBytes = void 0;
+function base64ToBytes(base64) {
+    const binString = atob(base64);
+    return Uint8Array.from(binString, (m) => m.codePointAt(0));
+}
+exports.base64ToBytes = base64ToBytes;
+function bytesToBase64(bytes) {
+    const binString = Array.from(bytes, (x) => String.fromCodePoint(x)).join("");
+    return btoa(binString);
+}
+exports.bytesToBase64 = bytesToBase64;
+function isPermissionValidatorPlugin(plugin) {
+    return plugin?.getPluginSerializationParams !== undefined;
+}
+exports.isPermissionValidatorPlugin = isPermissionValidatorPlugin;
+const serializePermissionAccountParams = (params) => {
+    const replacer = (_, value) => {
+        if (typeof value === "bigint") {
+            return value.toString();
+        }
+        return value;
+    };
+    const jsonString = JSON.stringify(params, replacer);
+    const uint8Array = new TextEncoder().encode(jsonString);
+    const base64String = bytesToBase64(uint8Array);
+    return base64String;
+};
+exports.serializePermissionAccountParams = serializePermissionAccountParams;
+const deserializePermissionAccountParams = (params) => {
+    const uint8Array = base64ToBytes(params);
+    const jsonString = new TextDecoder().decode(uint8Array);
+    return JSON.parse(jsonString);
+};
+exports.deserializePermissionAccountParams = deserializePermissionAccountParams;
+//# sourceMappingURL=utils.js.map

package/_cjs/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../utils.ts"],"names":[],"mappings":";;;AAGA,SAAgB,aAAa,CAAC,MAAc;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IAC9B,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAW,CAAC,CAAA;AACxE,CAAC;AAHD,sCAGC;AAED,SAAgB,aAAa,CAAC,KAAiB;IAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC5E,OAAO,IAAI,CAAC,SAAS,CAAC,CAAA;AAC1B,CAAC;AAHD,sCAGC;AAED,SAAgB,2BAA2B,CAEvC,MAAW;IAEX,OAAO,MAAM,EAAE,4BAA4B,KAAK,SAAS,CAAA;AAC7D,CAAC;AALD,kEAKC;AAEM,MAAM,gCAAgC,GAAG,CAC5C,MAA+B,EACjC,EAAE;IAEA,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,KAAU,EAAE,EAAE;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC3B,CAAC;QACD,OAAO,KAAK,CAAA;IAChB,CAAC,CAAA;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACnD,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACvD,MAAM,YAAY,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;IAC9C,OAAO,YAAY,CAAA;AACvB,CAAC,CAAA;AAfY,QAAA,gCAAgC,oCAe5C;AAEM,MAAM,kCAAkC,GAAG,CAAC,MAAc,EAAE,EAAE;IACjE,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACxC,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACvD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAA4B,CAAA;AAC5D,CAAC,CAAA;AAJY,QAAA,kCAAkC,sCAI9C"}

package/_esm/constants.js

@@ -0,0 +1,14 @@
+export const CALL_POLICY_CONTRACT = "0xc4a1aaED053Fc02717358a377A2d695bCdFA3B8A";
+export const ECDSA_SIGNER_CONTRACT = "0x8Ed04D0B000777c87e701696cf6B9710733Df96a";
+export const GAS_POLICY_CONTRACT = "0x50FD84A0A1D1683e1dafC5009876B38773fc8E3A";
+export const SIGNATURE_POLICY_CONTRACT = "0x19a3E696fFdFEDfadb22297DB223B9ca501523dD";
+export const RATE_LIMIT_POLICY_CONTRACT = "0xdB6e5F9a18f0F6Fa0861cB60f94Cf7f7374E8270";
+export const WEBAUTHN_SIGNER_CONTRACT = "0xD71E0e2AFf9D4d93b20F615e6aC2ac7e0795b472";
+export const SUDO_POLICY_CONTRACT = "0x6D14FC570e2bE7D74a6926ea54f190d690855851";
+export var PolicyFlags;
+(function (PolicyFlags) {
+    PolicyFlags["FOR_ALL_VALIDATION"] = "0x0000";
+    PolicyFlags["NOT_FOR_VALIDATE_USEROP"] = "0x0001";
+    PolicyFlags["NOT_FOR_VALIDATE_SIG"] = "0x0002";
+})(PolicyFlags || (PolicyFlags = {}));
+//# sourceMappingURL=constants.js.map

package/_esm/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG,4CAA4C,CAAA;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAC9B,4CAA4C,CAAA;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,4CAA4C,CAAA;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAClC,4CAA4C,CAAA;AAChD,MAAM,CAAC,MAAM,0BAA0B,GACnC,4CAA4C,CAAA;AAChD,MAAM,CAAC,MAAM,wBAAwB,GACjC,4CAA4C,CAAA;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAG,4CAA4C,CAAA;AAEhF,MAAM,CAAN,IAAY,WAIX;AAJD,WAAY,WAAW;IACnB,4CAA6B,CAAA;IAC7B,iDAAkC,CAAA;IAClC,8CAA+B,CAAA;AACnC,CAAC,EAJW,WAAW,KAAX,WAAW,QAItB"}

package/_esm/deserializePermissionAccount.js

@@ -0,0 +1,89 @@
+import { KernelV3AccountAbi, createKernelAccount } from "@zerodev/sdk";
+import { KernelFactoryAbi } from "@zerodev/sdk";
+import { toKernelPluginManager } from "@zerodev/sdk/accounts";
+import { ENTRYPOINT_ADDRESS_V06 } from "permissionless";
+import { decodeFunctionData } from "viem";
+import { privateKeyToAccount } from "viem/accounts";
+import { toCallPolicy, toGasPolicy, toRateLimitPolicy, toSignatureCallerPolicy, toSudoPolicy } from "./policies/index.js";
+import { toECDSASigner } from "./signers/toECDSASigner.js";
+import { toPermissionValidator } from "./toPermissionValidator.js";
+import {} from "./types.js";
+import { deserializePermissionAccountParams } from "./utils.js";
+export const deserializePermissionAccount = async (client, modularPermissionAccountParams, modularSigner, entryPointAddress = ENTRYPOINT_ADDRESS_V06) => {
+    const params = deserializePermissionAccountParams(modularPermissionAccountParams);
+    let signer;
+    if (params.privateKey)
+        signer = toECDSASigner({
+            signer: privateKeyToAccount(params.privateKey)
+        });
+    else if (modularSigner)
+        signer = modularSigner;
+    else
+        throw new Error("No signer or serialized sessionKey provided");
+    const modularPermissionPlugin = await toPermissionValidator(client, {
+        signer,
+        policies: await Promise.all(params.permissionParams.policies?.map((policy) => createPolicyFromParams(policy)) || []),
+        entryPoint: entryPointAddress
+    });
+    const { index, validatorInitData } = decodeParamsFromInitCode(params.accountParams.initCode);
+    const kernelPluginManager = await toKernelPluginManager(client, {
+        regular: modularPermissionPlugin,
+        pluginEnableSignature: params.enableSignature,
+        validatorInitData,
+        action: params.action,
+        entryPoint: entryPointAddress,
+        ...params.validityData
+    });
+    return createKernelAccount(client, {
+        plugins: kernelPluginManager,
+        index,
+        deployedAccountAddress: params.accountParams.accountAddress,
+        entryPoint: entryPointAddress
+    });
+};
+export const createPolicyFromParams = async (policy) => {
+    switch (policy.policyParams.type) {
+        case "call":
+            return await toCallPolicy(policy.policyParams);
+        case "gas":
+            return await toGasPolicy(policy.policyParams);
+        case "rate-limit":
+            return await toRateLimitPolicy(policy.policyParams);
+        case "signature-caller":
+            return await toSignatureCallerPolicy(policy.policyParams);
+        case "sudo":
+            return await toSudoPolicy(policy.policyParams);
+        default:
+            throw new Error("Unsupported policy type");
+    }
+};
+export const decodeParamsFromInitCode = (initCode) => {
+    let index;
+    let validatorInitData;
+    const createAccountFunctionData = decodeFunctionData({
+        abi: KernelFactoryAbi,
+        data: `0x${initCode.slice(42)}`
+    });
+    if (!createAccountFunctionData)
+        throw new Error("Invalid initCode");
+    if (createAccountFunctionData.functionName === "createAccount") {
+        index = createAccountFunctionData.args[2];
+        const initializeFunctionData = decodeFunctionData({
+            abi: KernelV3AccountAbi,
+            data: createAccountFunctionData.args[1]
+        });
+        if (!initializeFunctionData)
+            throw new Error("Invalid initCode");
+        if (initializeFunctionData.functionName === "initialize") {
+            validatorInitData = {
+                validatorAddress: initializeFunctionData.args[0],
+                identifier: initializeFunctionData.args[0],
+                enableData: initializeFunctionData.args[2]
+            };
+        }
+    }
+    if (index === undefined || validatorInitData === undefined)
+        throw new Error("Invalid initCode");
+    return { index, validatorInitData };
+};
+//# sourceMappingURL=deserializePermissionAccount.js.map

package/_esm/deserializePermissionAccount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deserializePermissionAccount.js","sourceRoot":"","sources":["../deserializePermissionAccount.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAE7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AAGvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAA;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EACH,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,YAAY,EACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAe,MAAM,YAAY,CAAA;AAExC,OAAO,EAAE,kCAAkC,EAAE,MAAM,YAAY,CAAA;AAE/D,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,EAG7C,MAAiD,EACjD,8BAAsC,EACtC,aAA6B,EAC7B,oBAAgC,sBAAoC,EACtE,EAAE;IACA,MAAM,MAAM,GAAG,kCAAkC,CAC7C,8BAA8B,CACjC,CAAA;IACD,IAAI,MAAqB,CAAA;IACzB,IAAI,MAAM,CAAC,UAAU;QACjB,MAAM,GAAG,aAAa,CAAC;YACnB,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC;SACjD,CAAC,CAAA;SACD,IAAI,aAAa;QAAE,MAAM,GAAG,aAAa,CAAA;;QACzC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAEnE,MAAM,uBAAuB,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE;QAChE,MAAM;QACN,QAAQ,EAAE,MAAM,OAAO,CAAC,GAAG,CACvB,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7C,sBAAsB,CAAC,MAAM,CAAC,CACjC,IAAI,EAAE,CACV;QACD,UAAU,EAAE,iBAAiB;KAChC,CAAC,CAAA;IAEF,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,wBAAwB,CACzD,MAAM,CAAC,aAAa,CAAC,QAAQ,CAChC,CAAA;IAED,MAAM,mBAAmB,GAAG,MAAM,qBAAqB,CACnD,MAAM,EACN;QACI,OAAO,EAAE,uBAAuB;QAChC,qBAAqB,EAAE,MAAM,CAAC,eAAe;QAC7C,iBAAiB;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,iBAAiB;QAC7B,GAAG,MAAM,CAAC,YAAY;KACzB,CACJ,CAAA;IAED,OAAO,mBAAmB,CAAa,MAAM,EAAE;QAC3C,OAAO,EAAE,mBAAmB;QAC5B,KAAK;QACL,sBAAsB,EAAE,MAAM,CAAC,aAAa,CAAC,cAAc;QAC3D,UAAU,EAAE,iBAAiB;KAChC,CAAC,CAAA;AACN,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;IAC3D,QAAQ,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC/B,KAAK,MAAM;YACP,OAAO,MAAM,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAClD,KAAK,KAAK;YACN,OAAO,MAAM,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QACjD,KAAK,YAAY;YACb,OAAO,MAAM,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QACvD,KAAK,kBAAkB;YACnB,OAAO,MAAM,uBAAuB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAC7D,KAAK,MAAM;YACP,OAAO,MAAM,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAClD;YACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAClD,CAAC;AACL,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,QAAa,EAAE,EAAE;IACtD,IAAI,KAAyB,CAAA;IAC7B,IAAI,iBAAgD,CAAA;IACpD,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;QACjD,GAAG,EAAE,gBAAgB;QACrB,IAAI,EAAE,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;KAClC,CAAC,CAAA;IACF,IAAI,CAAC,yBAAyB;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;IACnE,IAAI,yBAAyB,CAAC,YAAY,KAAK,eAAe,EAAE,CAAC;QAC7D,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;YAC9C,GAAG,EAAE,kBAAkB;YACvB,IAAI,EAAE,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;SAC1C,CAAC,CAAA;QACF,IAAI,CAAC,sBAAsB;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;QAChE,IAAI,sBAAsB,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YACvD,iBAAiB,GAAG;gBAChB,gBAAgB,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChD,UAAU,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC1C,UAAU,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;aAC7C,CAAA;QACL,CAAC;IACL,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,iBAAiB,KAAK,SAAS;QACtD,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;IACvC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAA;AACvC,CAAC,CAAA"}

package/_esm/index.js

@@ -0,0 +1,5 @@
+export { toPermissionValidator } from "./toPermissionValidator.js";
+export { serializePermissionAccount } from "./serializePermissionAccount.js";
+export { deserializePermissionAccount } from "./deserializePermissionAccount.js";
+export * from "./constants.js";
+//# sourceMappingURL=index.js.map

package/_esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAA;AAChF,cAAc,gBAAgB,CAAA"}

package/_esm/package.json

@@ -0,0 +1 @@
+{"type": "module","sideEffects":false}