@zerodev/permissions 5.2.1-alpha.0

package/_esm/signers/toWebAuthnSigner.js

@@ -0,0 +1,164 @@
+import { startAuthentication } from "@simplewebauthn/browser";
+import { SignTransactionNotSupportedBySmartAccount } from "permissionless/accounts";
+import { getTypesForEIP712Domain, hashTypedData, validateTypedData } from "viem";
+import { encodeAbiParameters } from "viem";
+import { toAccount } from "viem/accounts";
+import { getChainId } from "viem/actions";
+import { WEBAUTHN_SIGNER_CONTRACT } from "../constants.js";
+import { WebAuthnMode, toWebAuthnPubKey } from "./toWebAuthnPubKey.js";
+import { b64ToBytes, findQuoteIndices, isRIP7212SupportedNetwork, parseAndNormalizeSig, uint8ArrayToHexString } from "./webAuthnUtils.js";
+export const toWebAuthnSigner = async (client, { signerContractAddress = WEBAUTHN_SIGNER_CONTRACT, pubKey, passkeyServerUrl, passkeyName, mode = WebAuthnMode.Register }) => {
+    pubKey =
+        pubKey ??
+            (await toWebAuthnPubKey({
+                passkeyName,
+                passkeyServerUrl,
+                mode
+            }));
+    if (!pubKey) {
+        throw new Error("WebAuthn public key not found");
+    }
+    const chainId = await getChainId(client);
+    const signMessageUsingWebAuthn = async (message) => {
+        let messageContent;
+        if (typeof message === "string") {
+            // message is a string
+            messageContent = message;
+        }
+        else if ("raw" in message && typeof message.raw === "string") {
+            // message.raw is a Hex string
+            messageContent = message.raw;
+        }
+        else if ("raw" in message && message.raw instanceof Uint8Array) {
+            // message.raw is a ByteArray
+            messageContent = message.raw.toString();
+        }
+        else {
+            throw new Error("Unsupported message format");
+        }
+        // remove 0x prefix if present
+        const formattedMessage = messageContent.startsWith("0x")
+            ? messageContent.slice(2)
+            : messageContent;
+        if (window.sessionStorage === undefined) {
+            throw new Error("sessionStorage is not available");
+        }
+        const userId = sessionStorage.getItem("userId");
+        // initiate signing
+        const signInitiateResponse = await fetch(`${passkeyServerUrl}/sign-initiate`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ data: formattedMessage, userId }),
+            credentials: "include"
+        });
+        const signInitiateResult = await signInitiateResponse.json();
+        // prepare assertion options
+        const assertionOptions = {
+            challenge: signInitiateResult.challenge,
+            allowCredentials: signInitiateResult.allowCredentials,
+            userVerification: "required"
+        };
+        // start authentication (signing)
+        const cred = await startAuthentication(assertionOptions);
+        // verify signature from server
+        const verifyResponse = await fetch(`${passkeyServerUrl}/sign-verify`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ cred, userId }),
+            credentials: "include"
+        });
+        const verifyResult = await verifyResponse.json();
+        if (!verifyResult.success) {
+            throw new Error("Signature not verified");
+        }
+        // get authenticator data
+        const authenticatorData = verifyResult.authenticatorData;
+        const authenticatorDataHex = uint8ArrayToHexString(b64ToBytes(authenticatorData));
+        // get client data JSON
+        const clientDataJSON = atob(cred.response.clientDataJSON);
+        // get challenge and response type location
+        const { beforeType } = findQuoteIndices(clientDataJSON);
+        // get signature r,s
+        const signature = verifyResult.signature;
+        const signatureHex = uint8ArrayToHexString(b64ToBytes(signature));
+        const { r, s } = parseAndNormalizeSig(signatureHex);
+        // encode signature
+        const encodedSignature = encodeAbiParameters([
+            { name: "authenticatorData", type: "bytes" },
+            { name: "clientDataJSON", type: "string" },
+            { name: "responseTypeLocation", type: "uint256" },
+            { name: "r", type: "uint256" },
+            { name: "s", type: "uint256" },
+            { name: "usePrecompiled", type: "bool" }
+        ], [
+            authenticatorDataHex,
+            clientDataJSON,
+            beforeType,
+            BigInt(r),
+            BigInt(s),
+            isRIP7212SupportedNetwork(chainId)
+        ]);
+        return encodedSignature;
+    };
+    const account = toAccount({
+        // note that this address will be overwritten by actual address
+        address: "0x0000000000000000000000000000000000000000",
+        async signMessage({ message }) {
+            return signMessageUsingWebAuthn(message);
+        },
+        async signTransaction(_, __) {
+            throw new SignTransactionNotSupportedBySmartAccount();
+        },
+        async signTypedData(typedData) {
+            const { domain, message, primaryType } = typedData;
+            const types = {
+                EIP712Domain: getTypesForEIP712Domain({ domain }),
+                ...typedData.types
+            };
+            validateTypedData({ domain, message, primaryType, types });
+            const hash = hashTypedData(typedData);
+            return signMessageUsingWebAuthn(hash);
+        }
+    });
+    return {
+        account,
+        signerContractAddress,
+        getSignerData: () => {
+            if (!pubKey) {
+                throw new Error("WebAuthn public key not found");
+            }
+            return encodeAbiParameters([
+                {
+                    components: [
+                        { name: "pubKeyX", type: "uint256" },
+                        { name: "pubKeyY", type: "uint256" }
+                    ],
+                    name: "WebAuthnSignerData",
+                    type: "tuple"
+                },
+                { name: "authenticatorIdHash", type: "bytes32" }
+            ], [
+                { pubKeyX: pubKey.pubX, pubKeyY: pubKey.pubY },
+                pubKey.authenticatorIdHash
+            ]);
+        },
+        getDummySignature: () => {
+            return encodeAbiParameters([
+                { name: "authenticatorData", type: "bytes" },
+                { name: "clientDataJSON", type: "string" },
+                { name: "responseTypeLocation", type: "uint256" },
+                { name: "r", type: "uint256" },
+                { name: "s", type: "uint256" },
+                { name: "usePrecompiled", type: "bool" }
+            ], [
+                "0x49960de5880e8c687434170f6476605b8fe4aeb9a28632c7995cf3ba831d97631d00000000",
+                '{"type":"webauthn.get","challenge":"tbxXNFS9X_4Byr1cMwqKrIGB-_30a0QhZ6y7ucM0BOE","origin":"http://localhost:3000","crossOrigin":false}',
+                1n,
+                44941127272049826721201904734628716258498742255959991581049806490182030242267n,
+                9910254599581058084911561569808925251374718953855182016200087235935345969636n,
+                false
+            ]);
+        }
+    };
+};
+//# sourceMappingURL=toWebAuthnSigner.js.map

package/_esm/signers/toWebAuthnSigner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toWebAuthnSigner.js","sourceRoot":"","sources":["../../signers/toWebAuthnSigner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAG7D,OAAO,EAAE,yCAAyC,EAAE,MAAM,yBAAyB,CAAA;AACnF,OAAO,EAQH,uBAAuB,EACvB,aAAa,EACb,iBAAiB,EACpB,MAAM,MAAM,CAAA;AACb,OAAO,EAAwB,mBAAmB,EAAE,MAAM,MAAM,CAAA;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAE1D,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACtE,OAAO,EACH,UAAU,EACV,gBAAgB,EAChB,yBAAyB,EACzB,oBAAoB,EACpB,qBAAqB,EACxB,MAAM,oBAAoB,CAAA;AAe3B,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EAIjC,MAA6C,EAC7C,EACI,qBAAqB,GAAG,wBAAwB,EAChD,MAAM,EACN,gBAAgB,EAChB,WAAW,EACX,IAAI,GAAG,YAAY,CAAC,QAAQ,EACF,EACR,EAAE;IACxB,MAAM;QACF,MAAM;YACN,CAAC,MAAM,gBAAgB,CAAC;gBACpB,WAAW;gBACX,gBAAgB;gBAChB,IAAI;aACP,CAAC,CAAC,CAAA;IACP,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACpD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAA;IAExC,MAAM,wBAAwB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAE;QAChE,IAAI,cAAsB,CAAA;QAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,sBAAsB;YACtB,cAAc,GAAG,OAAO,CAAA;QAC5B,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC7D,8BAA8B;YAC9B,cAAc,GAAG,OAAO,CAAC,GAAG,CAAA;QAChC,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,YAAY,UAAU,EAAE,CAAC;YAC/D,6BAA6B;YAC7B,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC3C,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QACjD,CAAC;QAED,8BAA8B;QAC9B,MAAM,gBAAgB,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC;YACpD,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;YACzB,CAAC,CAAC,cAAc,CAAA;QAEpB,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACtD,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAE/C,mBAAmB;QACnB,MAAM,oBAAoB,GAAG,MAAM,KAAK,CACpC,GAAG,gBAAgB,gBAAgB,EACnC;YACI,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;YACxD,WAAW,EAAE,SAAS;SACzB,CACJ,CAAA;QACD,MAAM,kBAAkB,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAAA;QAE5D,4BAA4B;QAC5B,MAAM,gBAAgB,GAA0C;YAC5D,SAAS,EAAE,kBAAkB,CAAC,SAAS;YACvC,gBAAgB,EAAE,kBAAkB,CAAC,gBAAgB;YACrD,gBAAgB,EAAE,UAAU;SAC/B,CAAA;QAED,iCAAiC;QACjC,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,gBAAgB,CAAC,CAAA;QAExD,+BAA+B;QAC/B,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,cAAc,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACtC,WAAW,EAAE,SAAS;SACzB,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAA;QAEhD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC7C,CAAC;QAED,yBAAyB;QACzB,MAAM,iBAAiB,GAAG,YAAY,CAAC,iBAAiB,CAAA;QACxD,MAAM,oBAAoB,GAAG,qBAAqB,CAC9C,UAAU,CAAC,iBAAiB,CAAC,CAChC,CAAA;QAED,uBAAuB;QACvB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;QAEzD,2CAA2C;QAC3C,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAA;QAEvD,oBAAoB;QACpB,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAA;QACxC,MAAM,YAAY,GAAG,qBAAqB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;QACjE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAA;QAEnD,mBAAmB;QACnB,MAAM,gBAAgB,GAAG,mBAAmB,CACxC;YACI,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE;YAC5C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1C,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE;YACjD,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9B,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE;SAC3C,EACD;YACI,oBAAoB;YACpB,cAAc;YACd,UAAU;YACV,MAAM,CAAC,CAAC,CAAC;YACT,MAAM,CAAC,CAAC,CAAC;YACT,yBAAyB,CAAC,OAAO,CAAC;SACrC,CACJ,CAAA;QACD,OAAO,gBAAgB,CAAA;IAC3B,CAAC,CAAA;IACD,MAAM,OAAO,GAAiB,SAAS,CAAC;QACpC,+DAA+D;QAC/D,OAAO,EAAE,4CAA4C;QACrD,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE;YACzB,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAA;QAC5C,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE;YACvB,MAAM,IAAI,yCAAyC,EAAE,CAAA;QACzD,CAAC;QACD,KAAK,CAAC,aAAa,CAKjB,SAAwD;YACtD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAClC,SAA+C,CAAA;YAEnD,MAAM,KAAK,GAAG;gBACV,YAAY,EAAE,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;gBACjD,GAAG,SAAS,CAAC,KAAK;aACrB,CAAA;YAED,iBAAiB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;YAE1D,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;YACrC,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAA;QACzC,CAAC;KACJ,CAAC,CAAA;IAEF,OAAO;QACH,OAAO;QACP,qBAAqB;QACrB,aAAa,EAAE,GAAG,EAAE;YAChB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;YACpD,CAAC;YACD,OAAO,mBAAmB,CACtB;gBACI;oBACI,UAAU,EAAE;wBACR,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;wBACpC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;qBACvC;oBACD,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE,OAAO;iBAChB;gBACD,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,EAAE;aACnD,EACD;gBACI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;gBAC9C,MAAM,CAAC,mBAAmB;aAC7B,CACJ,CAAA;QACL,CAAC;QACD,iBAAiB,EAAE,GAAG,EAAE;YACpB,OAAO,mBAAmB,CACtB;gBACI,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE;gBAC5C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1C,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE;gBACjD,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC9B,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE;aAC3C,EACD;gBACI,8EAA8E;gBAC9E,wIAAwI;gBACxI,EAAE;gBACF,8EAA8E;gBAC9E,6EAA6E;gBAC7E,KAAK;aACR,CACJ,CAAA;QACL,CAAC;KACJ,CAAA;AACL,CAAC,CAAA"}

package/_esm/signers/utils/toSignerId.js

@@ -0,0 +1,5 @@
+import { concat, encodeAbiParameters } from "viem";
+export const toSignerId = (signer) => {
+    return encodeAbiParameters([{ name: "signerData", type: "bytes" }], [concat([signer.signerContractAddress, signer.getSignerData()])]);
+};
+//# sourceMappingURL=toSignerId.js.map

package/_esm/signers/utils/toSignerId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toSignerId.js","sourceRoot":"","sources":["../../../signers/utils/toSignerId.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,MAAM,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAA;AAG5D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAqB,EAAO,EAAE;IACrD,OAAO,mBAAmB,CACtB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACvC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CACnE,CAAA;AACL,CAAC,CAAA"}

package/_esm/signers/webAuthnUtils.js

@@ -0,0 +1,41 @@
+import { p256 } from "@noble/curves/p256";
+import { bytesToBigInt, hexToBytes } from "viem";
+const RIP7212_SUPPORTED_NETWORKS = [80001];
+export const uint8ArrayToHexString = (array) => {
+    return `0x${Array.from(array, (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+};
+export const b64ToBytes = (base64) => {
+    const paddedBase64 = base64
+        .replace(/-/g, "+")
+        .replace(/_/g, "/")
+        .padEnd(base64.length + ((4 - (base64.length % 4)) % 4), "=");
+    const binString = atob(paddedBase64);
+    return Uint8Array.from(binString, (m) => m.codePointAt(0) ?? 0);
+};
+export const findQuoteIndices = (input) => {
+    const beforeTypeIndex = BigInt(input.lastIndexOf('"type":"webauthn.get"'));
+    const beforeChallengeIndex = BigInt(input.indexOf('"challenge'));
+    return {
+        beforeType: beforeTypeIndex,
+        beforeChallenge: beforeChallengeIndex
+    };
+};
+// Parse DER-encoded P256-SHA256 signature to contract-friendly signature
+// and normalize it so the signature is not malleable.
+export function parseAndNormalizeSig(derSig) {
+    const parsedSignature = p256.Signature.fromDER(derSig.slice(2));
+    const bSig = hexToBytes(`0x${parsedSignature.toCompactHex()}`);
+    // assert(bSig.length === 64, "signature is not 64 bytes");
+    const bR = bSig.slice(0, 32);
+    const bS = bSig.slice(32);
+    // Avoid malleability. Ensure low S (<= N/2 where N is the curve order)
+    const r = bytesToBigInt(bR);
+    let s = bytesToBigInt(bS);
+    const n = BigInt("0xFFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551");
+    if (s > n / 2n) {
+        s = n - s;
+    }
+    return { r, s };
+}
+export const isRIP7212SupportedNetwork = (chainId) => RIP7212_SUPPORTED_NETWORKS.includes(chainId);
+//# sourceMappingURL=webAuthnUtils.js.map

package/_esm/signers/webAuthnUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webAuthnUtils.js","sourceRoot":"","sources":["../../signers/webAuthnUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAY,aAAa,EAAE,UAAU,EAAE,MAAM,MAAM,CAAA;AAE1D,MAAM,0BAA0B,GAAG,CAAC,KAAK,CAAC,CAAA;AAE1C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAiB,EAAiB,EAAE;IACtE,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CACrC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAmB,CAAA;AACjC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAc,EAAc,EAAE;IACrD,MAAM,YAAY,GAAG,MAAM;SACtB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAClB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAClB,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAA;IACpC,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AACnE,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC5B,KAAa,EACkC,EAAE;IACjD,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAA;IAC1E,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;IAChE,OAAO;QACH,UAAU,EAAE,eAAe;QAC3B,eAAe,EAAE,oBAAoB;KACxC,CAAA;AACL,CAAC,CAAA;AAED,yEAAyE;AACzE,sDAAsD;AACtD,MAAM,UAAU,oBAAoB,CAAC,MAAW;IAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/D,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,eAAe,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IAC9D,2DAA2D;IAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAEzB,uEAAuE;IACvE,MAAM,CAAC,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;IAC3B,IAAI,CAAC,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;IACzB,MAAM,CAAC,GAAG,MAAM,CACZ,oEAAoE,CACvE,CAAA;IACD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;QACb,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACb,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAA;AACnB,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,OAAe,EAAW,EAAE,CAClE,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA"}

package/_esm/toPermissionValidator.js

@@ -0,0 +1,98 @@
+import { KernelV3AccountAbi } from "@zerodev/sdk";
+import { getAction, getUserOperationHash } from "permissionless";
+import { concat, encodeAbiParameters, keccak256, pad, slice, zeroAddress } from "viem";
+import { getChainId, readContract } from "viem/actions";
+import { PolicyFlags } from "./constants.js";
+import { toPolicyId } from "./policies/index.js";
+import { toSignerId } from "./signers/index.js";
+export async function toPermissionValidator(client, { signer, policies, entryPoint: entryPointAddress, flag = PolicyFlags.FOR_ALL_VALIDATION }) {
+    const chainId = await getChainId(client);
+    const getEnableData = async (_kernelAccountAddress) => {
+        const enableData = encodeAbiParameters([{ name: "policyAndSignerData", type: "bytes[]" }], [
+            [
+                ...policies.map((policy) => concat([
+                    policy.getPolicyInfoInBytes(),
+                    policy.getPolicyData(getPermissionId())
+                ])),
+                concat([
+                    flag,
+                    signer.signerContractAddress,
+                    signer.getSignerData(getPermissionId())
+                ])
+            ]
+        ]);
+        return enableData;
+    };
+    const getPermissionId = () => {
+        const pIdData = encodeAbiParameters([{ name: "policyAndSignerData", type: "bytes[]" }], [[toPolicyId(policies), flag, toSignerId(signer)]]);
+        return slice(keccak256(pIdData), 0, 2);
+    };
+    return {
+        ...signer.account,
+        validatorType: "PERMISSION",
+        address: zeroAddress,
+        source: "PermissionValidator",
+        getEnableData,
+        getIdentifier: () => pad(getPermissionId(), {
+            size: 20,
+            dir: "right"
+        }),
+        signMessage: async ({ message }) => {
+            return concat([
+                "0xff",
+                await signer.account.signMessage({ message })
+            ]);
+        },
+        signTypedData: async (typedData) => {
+            return concat([
+                "0xff",
+                await signer.account.signTypedData(typedData)
+            ]);
+        },
+        signUserOperation: async (userOperation) => {
+            const userOpHash = getUserOperationHash({
+                userOperation: { ...userOperation, signature: "0x" },
+                entryPoint: entryPointAddress,
+                chainId: chainId
+            });
+            const signature = await signer.account.signMessage({
+                message: { raw: userOpHash }
+            });
+            return concat(["0xff", signature]);
+        },
+        getNonceKey: async () => {
+            return 0n;
+        },
+        async getDummySignature(_userOperation) {
+            return concat(["0xff", signer.getDummySignature()]);
+        },
+        getPluginSerializationParams: () => {
+            return {
+                policies
+            };
+        },
+        isEnabled: async (kernelAccountAddress, _selector) => {
+            try {
+                const permissionConfig = await getAction(client, readContract)({
+                    abi: KernelV3AccountAbi,
+                    address: kernelAccountAddress,
+                    functionName: "permissionConfig",
+                    args: [
+                        concat([
+                            "0x00",
+                            pad(getPermissionId(), {
+                                size: 20,
+                                dir: "right"
+                            })
+                        ])
+                    ]
+                });
+                return permissionConfig.signer === signer.signerContractAddress;
+            }
+            catch (error) {
+                return false;
+            }
+        }
+    };
+}
+//# sourceMappingURL=toPermissionValidator.js.map

package/_esm/toPermissionValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toPermissionValidator.js","sourceRoot":"","sources":["../toPermissionValidator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAEhE,OAAO,EAMH,MAAM,EACN,mBAAmB,EACnB,SAAS,EACT,GAAG,EACH,KAAK,EACL,WAAW,EACd,MAAM,MAAM,CAAA;AACb,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAO/C,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAKvC,MAA6C,EAC7C,EACI,MAAM,EACN,QAAQ,EACR,UAAU,EAAE,iBAAiB,EAC7B,IAAI,GAAG,WAAW,CAAC,kBAAkB,EAChB;IAEzB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAA;IAExC,MAAM,aAAa,GAAG,KAAK,EACvB,qBAA+B,EACnB,EAAE;QACd,MAAM,UAAU,GAAG,mBAAmB,CAClC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAClD;YACI;gBACI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACvB,MAAM,CAAC;oBACH,MAAM,CAAC,oBAAoB,EAAE;oBAC7B,MAAM,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;iBAC1C,CAAC,CACL;gBACD,MAAM,CAAC;oBACH,IAAI;oBACJ,MAAM,CAAC,qBAAqB;oBAC5B,MAAM,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;iBAC1C,CAAC;aACL;SACJ,CACJ,CAAA;QACD,OAAO,UAAU,CAAA;IACrB,CAAC,CAAA;IAED,MAAM,eAAe,GAAG,GAAQ,EAAE;QAC9B,MAAM,OAAO,GAAG,mBAAmB,CAC/B,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAClD,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CACrD,CAAA;QACD,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1C,CAAC,CAAA;IAED,OAAO;QACH,GAAG,MAAM,CAAC,OAAO;QACjB,aAAa,EAAE,YAAY;QAC3B,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,qBAAqB;QAC7B,aAAa;QACb,aAAa,EAAE,GAAG,EAAE,CAChB,GAAG,CAAC,eAAe,EAAE,EAAE;YACnB,IAAI,EAAE,EAAE;YACR,GAAG,EAAE,OAAO;SACf,CAAC;QAEN,WAAW,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAC/B,OAAO,MAAM,CAAC;gBACV,MAAM;gBACN,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;aAChD,CAAC,CAAA;QACN,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YAC/B,OAAO,MAAM,CAAC;gBACV,MAAM;gBACN,MAAM,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC;aAChD,CAAC,CAAA;QACN,CAAC;QAED,iBAAiB,EAAE,KAAK,EAAE,aAAa,EAAgB,EAAE;YACrD,MAAM,UAAU,GAAG,oBAAoB,CAAC;gBACpC,aAAa,EAAE,EAAE,GAAG,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE;gBACpD,UAAU,EAAE,iBAAiB;gBAC7B,OAAO,EAAE,OAAO;aACnB,CAAC,CAAA;YAEF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC/C,OAAO,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;aAC/B,CAAC,CAAA;YACF,OAAO,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;QACtC,CAAC;QAED,WAAW,EAAE,KAAK,IAAI,EAAE;YACpB,OAAO,EAAE,CAAA;QACb,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,cAAc;YAClC,OAAO,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAA;QACvD,CAAC;QACD,4BAA4B,EAAE,GAAmB,EAAE;YAC/C,OAAO;gBACH,QAAQ;aACX,CAAA;QACL,CAAC;QACD,SAAS,EAAE,KAAK,EACZ,oBAA6B,EAC7B,SAAc,EACE,EAAE;YAClB,IAAI,CAAC;gBACD,MAAM,gBAAgB,GAAG,MAAM,SAAS,CACpC,MAAM,EACN,YAAY,CACf,CAAC;oBACE,GAAG,EAAE,kBAAkB;oBACvB,OAAO,EAAE,oBAAoB;oBAC7B,YAAY,EAAE,kBAAkB;oBAChC,IAAI,EAAE;wBACF,MAAM,CAAC;4BACH,MAAM;4BACN,GAAG,CAAC,eAAe,EAAE,EAAE;gCACnB,IAAI,EAAE,EAAE;gCACR,GAAG,EAAE,OAAO;6BACf,CAAC;yBACL,CAAC;qBACL;iBACJ,CAAC,CAAA;gBACF,OAAO,gBAAgB,CAAC,MAAM,KAAK,MAAM,CAAC,qBAAqB,CAAA;YACnE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,OAAO,KAAK,CAAA;YAChB,CAAC;QACL,CAAC;KACJ,CAAA;AACL,CAAC"}

package/_esm/types.js

@@ -0,0 +1,3 @@
+import {} from "@zerodev/sdk";
+import { PolicyFlags } from "./constants.js";
+//# sourceMappingURL=types.js.map

package/_esm/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,cAAc,CAAA;AAInD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA"}

package/_esm/utils.js

@@ -0,0 +1,32 @@
+export function base64ToBytes(base64) {
+    const binString = atob(base64);
+    return Uint8Array.from(binString, (m) => m.codePointAt(0));
+}
+export function bytesToBase64(bytes) {
+    const binString = Array.from(bytes, (x) => String.fromCodePoint(x)).join("");
+    return btoa(binString);
+}
+export function isPermissionValidatorPlugin(
+// biome-ignore lint/suspicious/noExplicitAny: <explanation>
+plugin) {
+    return plugin?.getPluginSerializationParams !== undefined;
+}
+export const serializePermissionAccountParams = (params) => {
+    // biome-ignore lint/suspicious/noExplicitAny: <explanation>
+    const replacer = (_, value) => {
+        if (typeof value === "bigint") {
+            return value.toString();
+        }
+        return value;
+    };
+    const jsonString = JSON.stringify(params, replacer);
+    const uint8Array = new TextEncoder().encode(jsonString);
+    const base64String = bytesToBase64(uint8Array);
+    return base64String;
+};
+export const deserializePermissionAccountParams = (params) => {
+    const uint8Array = base64ToBytes(params);
+    const jsonString = new TextDecoder().decode(uint8Array);
+    return JSON.parse(jsonString);
+};
+//# sourceMappingURL=utils.js.map

package/_esm/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../utils.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,aAAa,CAAC,MAAc;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IAC9B,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAW,CAAC,CAAA;AACxE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC5E,OAAO,IAAI,CAAC,SAAS,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,2BAA2B;AACvC,4DAA4D;AAC5D,MAAW;IAEX,OAAO,MAAM,EAAE,4BAA4B,KAAK,SAAS,CAAA;AAC7D,CAAC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC5C,MAA+B,EACjC,EAAE;IACA,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,KAAU,EAAE,EAAE;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC3B,CAAC;QACD,OAAO,KAAK,CAAA;IAChB,CAAC,CAAA;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACnD,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACvD,MAAM,YAAY,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;IAC9C,OAAO,YAAY,CAAA;AACvB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,MAAc,EAAE,EAAE;IACjE,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACxC,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACvD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAA4B,CAAA;AAC5D,CAAC,CAAA"}

package/_types/constants.d.ts

@@ -0,0 +1,13 @@
+export declare const CALL_POLICY_CONTRACT = "0xc4a1aaED053Fc02717358a377A2d695bCdFA3B8A";
+export declare const ECDSA_SIGNER_CONTRACT = "0x8Ed04D0B000777c87e701696cf6B9710733Df96a";
+export declare const GAS_POLICY_CONTRACT = "0x50FD84A0A1D1683e1dafC5009876B38773fc8E3A";
+export declare const SIGNATURE_POLICY_CONTRACT = "0x19a3E696fFdFEDfadb22297DB223B9ca501523dD";
+export declare const RATE_LIMIT_POLICY_CONTRACT = "0xdB6e5F9a18f0F6Fa0861cB60f94Cf7f7374E8270";
+export declare const WEBAUTHN_SIGNER_CONTRACT = "0xD71E0e2AFf9D4d93b20F615e6aC2ac7e0795b472";
+export declare const SUDO_POLICY_CONTRACT = "0x6D14FC570e2bE7D74a6926ea54f190d690855851";
+export declare enum PolicyFlags {
+    FOR_ALL_VALIDATION = "0x0000",
+    NOT_FOR_VALIDATE_USEROP = "0x0001",
+    NOT_FOR_VALIDATE_SIG = "0x0002"
+}
+//# sourceMappingURL=constants.d.ts.map

package/_types/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,+CAA+C,CAAA;AAChF,eAAO,MAAM,qBAAqB,+CACc,CAAA;AAChD,eAAO,MAAM,mBAAmB,+CAA+C,CAAA;AAC/E,eAAO,MAAM,yBAAyB,+CACU,CAAA;AAChD,eAAO,MAAM,0BAA0B,+CACS,CAAA;AAChD,eAAO,MAAM,wBAAwB,+CACW,CAAA;AAChD,eAAO,MAAM,oBAAoB,+CAA+C,CAAA;AAEhF,oBAAY,WAAW;IACnB,kBAAkB,WAAW;IAC7B,uBAAuB,WAAW;IAClC,oBAAoB,WAAW;CAClC"}

package/_types/deserializePermissionAccount.d.ts

@@ -0,0 +1,13 @@
+import { createKernelAccount } from "@zerodev/sdk";
+import type { ValidatorInitData } from "@zerodev/sdk/types";
+import type { EntryPoint } from "permissionless/types";
+import type { Hex } from "viem";
+import { type Policy } from "./types.js";
+import type { ModularSigner } from "./types.js";
+export declare const deserializePermissionAccount: <entryPoint extends EntryPoint>(client: Parameters<typeof createKernelAccount>[0], modularPermissionAccountParams: string, modularSigner?: ModularSigner, entryPointAddress?: entryPoint) => Promise<import("@zerodev/sdk").KernelSmartAccount<entryPoint, import("viem").Transport, import("viem").Chain | undefined>>;
+export declare const createPolicyFromParams: (policy: Policy) => Promise<Policy>;
+export declare const decodeParamsFromInitCode: (initCode: Hex) => {
+    index: bigint;
+    validatorInitData: ValidatorInitData;
+};
+//# sourceMappingURL=deserializePermissionAccount.d.ts.map

package/_types/deserializePermissionAccount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deserializePermissionAccount.d.ts","sourceRoot":"","sources":["../deserializePermissionAccount.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAGtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAE3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AAY/B,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAG/C,eAAO,MAAM,4BAA4B,0CAG7B,WAAW,0BAA0B,CAAC,CAAC,CAAC,CAAC,kCACjB,MAAM,kBACtB,aAAa,+JA8ChC,CAAA;AAED,eAAO,MAAM,sBAAsB,WAAkB,MAAM,oBAe1D,CAAA;AAED,eAAO,MAAM,wBAAwB,aAAc,GAAG;;;CA0BrD,CAAA"}

package/_types/index.d.ts

@@ -0,0 +1,6 @@
+export type * from "./types.js";
+export { toPermissionValidator } from "./toPermissionValidator.js";
+export { serializePermissionAccount } from "./serializePermissionAccount.js";
+export { deserializePermissionAccount } from "./deserializePermissionAccount.js";
+export * from "./constants.js";
+//# sourceMappingURL=index.d.ts.map

package/_types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAA;AAChF,cAAc,gBAAgB,CAAA"}

package/_types/policies/callPolicyUtils.d.ts

@@ -0,0 +1,5 @@
+import { type Abi, type Hex } from "viem";
+import type { GeneratePermissionFromArgsParameters, PermissionCore } from "./types.js";
+export declare function getPermissionFromABI<TAbi extends Abi | readonly unknown[], TFunctionName extends string | undefined = string>({ abi, args, functionName }: GeneratePermissionFromArgsParameters<TAbi, TFunctionName>): Pick<PermissionCore, "selector" | "rules">;
+export declare const encodePermissionData: (permission: PermissionCore | PermissionCore[]) => Hex;
+//# sourceMappingURL=callPolicyUtils.d.ts.map

package/_types/policies/callPolicyUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callPolicyUtils.d.ts","sourceRoot":"","sources":["../../policies/callPolicyUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,KAAK,GAAG,EAGR,KAAK,GAAG,EAOX,MAAM,MAAM,CAAA;AACb,OAAO,KAAK,EAER,oCAAoC,EAEpC,cAAc,EACjB,MAAM,YAAY,CAAA;AAEnB,wBAAgB,oBAAoB,CAChC,IAAI,SAAS,GAAG,GAAG,SAAS,OAAO,EAAE,EACrC,aAAa,SAAS,MAAM,GAAG,SAAS,GAAG,MAAM,EACnD,EACE,GAAG,EACH,IAAI,EACJ,YAAY,EACf,EAAE,oCAAoC,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,IAAI,CAC/D,cAAc,EACd,UAAU,GAAG,OAAO,CACvB,CAwCA;AAED,eAAO,MAAM,oBAAoB,eACjB,cAAc,GAAG,cAAc,EAAE,KAC9C,GAgDF,CAAA"}

package/_types/policies/index.d.ts

@@ -0,0 +1,7 @@
+export { toGasPolicy, type GasPolicyParams } from "./toGasPolicy.js";
+export { toSignatureCallerPolicy, type SignatureCallerPolicyParams } from "./toSignatureCallerPolicy.js";
+export { toRateLimitPolicy, type RateLimitPolicyParams } from "./toRateLimitPolicy.js";
+export { toCallPolicy, type CallPolicyParams } from "./toCallPolicy.js";
+export { toPolicyId } from "./utils/toPolicyId.js";
+export { toSudoPolicy, type SudoPolicyParams } from "./toSudoPolicy.js";
+//# sourceMappingURL=index.d.ts.map

package/_types/policies/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../policies/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACpE,OAAO,EACH,uBAAuB,EACvB,KAAK,2BAA2B,EACnC,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACH,iBAAiB,EACjB,KAAK,qBAAqB,EAC7B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,YAAY,EAAE,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAA"}

package/_types/policies/toCallPolicy.d.ts

@@ -0,0 +1,9 @@
+import type { Abi } from "viem";
+import type { Policy, PolicyParams } from "../types.js";
+import { type Permission } from "./types.js";
+export type CallPolicyParams<TAbi extends Abi | readonly unknown[], TFunctionName extends string | undefined = string> = PolicyParams & {
+    permissions?: Permission<TAbi, TFunctionName>[];
+    type?: "call";
+};
+export declare function toCallPolicy<TAbi extends Abi | readonly unknown[], TFunctionName extends string | undefined = string>({ policyAddress, policyFlag, permissions, type }: CallPolicyParams<TAbi, TFunctionName>): Promise<Policy>;
+//# sourceMappingURL=toCallPolicy.d.ts.map

package/_types/policies/toCallPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toCallPolicy.d.ts","sourceRoot":"","sources":["../../policies/toCallPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AAI/B,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAKvD,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,YAAY,CAAA;AAEtD,MAAM,MAAM,gBAAgB,CACxB,IAAI,SAAS,GAAG,GAAG,SAAS,OAAO,EAAE,EACrC,aAAa,SAAS,MAAM,GAAG,SAAS,GAAG,MAAM,IACjD,YAAY,GAAG;IACf,WAAW,CAAC,EAAE,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAA;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,wBAAsB,YAAY,CAC9B,IAAI,SAAS,GAAG,GAAG,SAAS,OAAO,EAAE,EACrC,aAAa,SAAS,MAAM,GAAG,SAAS,GAAG,MAAM,EACnD,EACE,aAAoC,EACpC,UAA2C,EAC3C,WAAgB,EAChB,IAAa,EAChB,EAAE,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAqCzD"}

package/_types/policies/toGasPolicy.d.ts

@@ -0,0 +1,10 @@
+import { type Address } from "viem";
+import type { Policy, PolicyParams } from "../types.js";
+export type GasPolicyParams = PolicyParams & {
+    allowed: bigint;
+    enforcePaymaster?: boolean;
+    allowedPaymaster?: Address;
+    type?: "gas";
+};
+export declare function toGasPolicy({ policyAddress, policyFlag, allowed, enforcePaymaster, allowedPaymaster, type }: GasPolicyParams): Promise<Policy>;
+//# sourceMappingURL=toGasPolicy.d.ts.map

package/_types/policies/toGasPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toGasPolicy.d.ts","sourceRoot":"","sources":["../../policies/toGasPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAA+C,MAAM,MAAM,CAAA;AAGhF,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAEvD,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,IAAI,CAAC,EAAE,KAAK,CAAA;CACf,CAAA;AAED,wBAAsB,WAAW,CAAC,EAC9B,aAAmC,EACnC,UAA2C,EAC3C,OAAO,EACP,gBAAwB,EACxB,gBAA8B,EAC9B,IAAY,EACf,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAwBnC"}

package/_types/policies/toRateLimitPolicy.d.ts

@@ -0,0 +1,9 @@
+import type { Policy, PolicyParams } from "../types.js";
+export type RateLimitPolicyParams = PolicyParams & {
+    interval?: number;
+    count: number;
+    startAt?: number;
+    type?: "rate-limit";
+};
+export declare function toRateLimitPolicy({ policyAddress, policyFlag, interval, count, startAt, type }: RateLimitPolicyParams): Promise<Policy>;
+//# sourceMappingURL=toRateLimitPolicy.d.ts.map

package/_types/policies/toRateLimitPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toRateLimitPolicy.d.ts","sourceRoot":"","sources":["../../policies/toRateLimitPolicy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAEvD,MAAM,MAAM,qBAAqB,GAAG,YAAY,GAAG;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,YAAY,CAAA;CACtB,CAAA;AAED,wBAAsB,iBAAiB,CAAC,EACpC,aAA0C,EAC1C,UAA2C,EAC3C,QAAY,EACZ,KAAK,EACL,OAAW,EACX,IAAmB,EACtB,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuBzC"}

package/_types/policies/toSignatureCallerPolicy.d.ts

@@ -0,0 +1,8 @@
+import { type Address } from "viem";
+import type { Policy, PolicyParams } from "../types.js";
+export type SignatureCallerPolicyParams = PolicyParams & {
+    allowedCallers: Address[];
+    type?: "signature-caller";
+};
+export declare function toSignatureCallerPolicy({ policyAddress, policyFlag, allowedCallers, type }: SignatureCallerPolicyParams): Promise<Policy>;
+//# sourceMappingURL=toSignatureCallerPolicy.d.ts.map

package/_types/policies/toSignatureCallerPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toSignatureCallerPolicy.d.ts","sourceRoot":"","sources":["../../policies/toSignatureCallerPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAkC,MAAM,MAAM,CAAA;AAGnE,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAEvD,MAAM,MAAM,2BAA2B,GAAG,YAAY,GAAG;IACrD,cAAc,EAAE,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,EAAE,kBAAkB,CAAA;CAC5B,CAAA;AAED,wBAAsB,uBAAuB,CAAC,EAC1C,aAAyC,EACzC,UAA2C,EAC3C,cAAc,EACd,IAAyB,EAC5B,EAAE,2BAA2B,GAAG,OAAO,CAAC,MAAM,CAAC,CAkB/C"}

package/_types/policies/toSudoPolicy.d.ts

@@ -0,0 +1,6 @@
+import type { Policy, PolicyParams } from "../types.js";
+export type SudoPolicyParams = PolicyParams & {
+    type?: "sudo";
+};
+export declare function toSudoPolicy({ policyAddress, policyFlag, type }: SudoPolicyParams): Promise<Policy>;
+//# sourceMappingURL=toSudoPolicy.d.ts.map

package/_types/policies/toSudoPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toSudoPolicy.d.ts","sourceRoot":"","sources":["../../policies/toSudoPolicy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAEvD,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,wBAAsB,YAAY,CAAC,EAC/B,aAAoC,EACpC,UAA2C,EAC3C,IAAa,EAChB,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAcpC"}

package/_types/policies/types.d.ts

@@ -0,0 +1,56 @@
+import { type ExtractAbiFunction, type ExtractAbiFunctionNames } from "abitype";
+import type { Abi, AbiFunction, AbiParameter, AbiParameterKind, AbiParameterToPrimitiveType, AbiStateMutability, Address, Hex, Narrow } from "viem";
+export declare enum CallType {
+    CALL = "0x00",
+    BATCH_CALL = "0x01",
+    DELEGATE_CALL = "0xff"
+}
+export declare enum ParamCondition {
+    EQUAL = 0,
+    GREATER_THAN = 1,
+    LESS_THAN = 2,
+    GREATER_THAN_OR_EQUAL = 3,
+    LESS_THAN_OR_EQUAL = 4,
+    NOT_EQUAL = 5
+}
+export interface ParamRule {
+    condition: ParamCondition;
+    offset: number;
+    param: Hex;
+}
+export type PermissionCore = {
+    callType?: CallType;
+    target: Address;
+    selector?: Hex;
+    valueLimit?: bigint;
+    rules?: ParamRule[];
+};
+export type InferFunctionName<TAbi extends Abi | readonly unknown[] = Abi, TFunctionName extends string | undefined = string, TAbiStateMutability extends AbiStateMutability = AbiStateMutability> = TAbi extends Abi ? ExtractAbiFunctionNames<TAbi, TAbiStateMutability> extends infer AbiFunctionNames ? AbiFunctionNames | (TFunctionName extends AbiFunctionNames ? TFunctionName : never) | (Abi extends TAbi ? string : never) : never : TFunctionName;
+export type GetFunctionArgs<TAbi extends Abi | readonly unknown[], TFunctionName extends string, TAbiFunction extends AbiFunction = TAbi extends Abi ? ExtractAbiFunction<TAbi, TFunctionName> : AbiFunction, TArgs = CombinedArgs<TAbiFunction["inputs"]>, FailedToParseArgs = ([TArgs] extends [never] ? true : false) | (readonly unknown[] extends TArgs ? true : false)> = true extends FailedToParseArgs ? {
+    args?: readonly unknown[];
+} : TArgs extends readonly [] ? {
+    args?: never;
+} : {
+    args?: TArgs;
+};
+export type Permission<TAbi extends Abi | readonly unknown[], TFunctionName extends string | undefined = string, _FunctionName = TAbi extends Abi ? InferFunctionName<TAbi, TFunctionName> : never> = PermissionCore & {
+    functionName?: _FunctionName;
+} & (TFunctionName extends string ? {
+    abi?: Narrow<TAbi>;
+} & GetFunctionArgs<TAbi, TFunctionName> : _FunctionName extends string ? {
+    abi?: [Narrow<TAbi[number]>];
+} & GetFunctionArgs<TAbi, _FunctionName> : never);
+export type CombinedArgs<TAbiParameters extends readonly AbiParameter[], TAbiParameterKind extends AbiParameterKind = AbiParameterKind> = {
+    [K in keyof TAbiParameters]: {
+        condition: ParamCondition;
+        value: AbiParameterToPrimitiveType<TAbiParameters[K], TAbiParameterKind>;
+    } | null;
+};
+export type GeneratePermissionFromArgsParameters<TAbi extends Abi | readonly unknown[], TFunctionName extends string | undefined = string, _FunctionName = TAbi extends Abi ? InferFunctionName<TAbi, TFunctionName> : never> = {
+    functionName?: _FunctionName;
+} & (TFunctionName extends string ? {
+    abi: Narrow<TAbi>;
+} & GetFunctionArgs<TAbi, TFunctionName> : _FunctionName extends string ? {
+    abi: [Narrow<TAbi[number]>];
+} & GetFunctionArgs<TAbi, _FunctionName> : never);
+//# sourceMappingURL=types.d.ts.map

package/_types/policies/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../policies/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,SAAS,CAAA;AAC/E,OAAO,KAAK,EACR,GAAG,EACH,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,2BAA2B,EAC3B,kBAAkB,EAClB,OAAO,EACP,GAAG,EACH,MAAM,EACT,MAAM,MAAM,CAAA;AAEb,oBAAY,QAAQ;IAChB,IAAI,SAAS;IACb,UAAU,SAAS;IACnB,aAAa,SAAS;CACzB;AAED,oBAAY,cAAc;IACtB,KAAK,IAAI;IACT,YAAY,IAAI;IAChB,SAAS,IAAI;IACb,qBAAqB,IAAI;IACzB,kBAAkB,IAAI;IACtB,SAAS,IAAI;CAChB;AAED,MAAM,WAAW,SAAS;IACtB,SAAS,EAAE,cAAc,CAAA;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,GAAG,CAAA;CACb;AAED,MAAM,MAAM,cAAc,GAAG;IACzB,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,CAAC,EAAE,GAAG,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,iBAAiB,CACzB,IAAI,SAAS,GAAG,GAAG,SAAS,OAAO,EAAE,GAAG,GAAG,EAC3C,aAAa,SAAS,MAAM,GAAG,SAAS,GAAG,MAAM,EACjD,mBAAmB,SAAS,kBAAkB,GAAG,kBAAkB,IACnE,IAAI,SAAS,GAAG,GACd,uBAAuB,CACnB,IAAI,EACJ,mBAAmB,CACtB,SAAS,MAAM,gBAAgB,GAEtB,gBAAgB,GAChB,CAAC,aAAa,SAAS,gBAAgB,GAAG,aAAa,GAAG,KAAK,CAAC,GAChE,CAAC,GAAG,SAAS,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC,GACzC,KAAK,GACT,aAAa,CAAA;AAEnB,MAAM,MAAM,eAAe,CACvB,IAAI,SAAS,GAAG,GAAG,SAAS,OAAO,EAAE,EACrC,aAAa,SAAS,MAAM,EAC5B,YAAY,SAAS,WAAW,GAAG,IAAI,SAAS,GAAG,GAC7C,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC,GACvC,WAAW,EACjB,KAAK,GAAG,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAC5C,iBAAiB,GACX,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,GACxC,CAAC,SAAS,OAAO,EAAE,SAAS,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC,IACvD,IAAI,SAAS,iBAAiB,GAC5B;IACI,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;CAC5B,GACD,KAAK,SAAS,SAAS,EAAE,GACvB;IAAE,IAAI,CAAC,EAAE,KAAK,CAAA;CAAE,GAChB;IACM,IAAI,CAAC,EAAE,KAAK,CAAA;CACf,CAAA;AAEX,MAAM,MAAM,UAAU,CAClB,IAAI,SAAS,GAAG,GAAG,SAAS,OAAO,EAAE,EACrC,aAAa,SAAS,MAAM,GAAG,SAAS,GAAG,MAAM,EACjD,aAAa,GAAG,IAAI,SAAS,GAAG,GAC1B,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC,GACtC,KAAK,IACX,cAAc,GAAG;IACjB,YAAY,CAAC,EAAE,aAAa,CAAA;CAC/B,GAAG,CAAC,aAAa,SAAS,MAAM,GACvB;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;CAAE,GAAG,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,GAC7D,aAAa,SAAS,MAAM,GAC1B;IAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;CAAE,GAAG,eAAe,CAC5C,IAAI,EACJ,aAAa,CAChB,GACH,KAAK,CAAC,CAAA;AAElB,MAAM,MAAM,YAAY,CACpB,cAAc,SAAS,SAAS,YAAY,EAAE,EAC9C,iBAAiB,SAAS,gBAAgB,GAAG,gBAAgB,IAC7D;KACC,CAAC,IAAI,MAAM,cAAc,GAAG;QACzB,SAAS,EAAE,cAAc,CAAA;QACzB,KAAK,EAAE,2BAA2B,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAA;KAC3E,GAAG,IAAI;CACX,CAAA;AAED,MAAM,MAAM,oCAAoC,CAC5C,IAAI,SAAS,GAAG,GAAG,SAAS,OAAO,EAAE,EACrC,aAAa,SAAS,MAAM,GAAG,SAAS,GAAG,MAAM,EACjD,aAAa,GAAG,IAAI,SAAS,GAAG,GAC1B,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC,GACtC,KAAK,IACX;IACA,YAAY,CAAC,EAAE,aAAa,CAAA;CAC/B,GAAG,CAAC,aAAa,SAAS,MAAM,GAC3B;IAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;CAAE,GAAG,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,GAC5D,aAAa,SAAS,MAAM,GAC1B;IAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;CAAE,GAAG,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,GACtE,KAAK,CAAC,CAAA"}

package/_types/policies/utils/toPolicyId.d.ts

@@ -0,0 +1,4 @@
+import { type Hex } from "viem";
+import type { Policy } from "../../types.js";
+export declare const toPolicyId: (policies: Policy[]) => Hex;
+//# sourceMappingURL=toPolicyId.d.ts.map

package/_types/policies/utils/toPolicyId.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toPolicyId.d.ts","sourceRoot":"","sources":["../../../policies/utils/toPolicyId.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,GAAG,EAA+B,MAAM,MAAM,CAAA;AAC5D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAE5C,eAAO,MAAM,UAAU,aAAc,MAAM,EAAE,KAAG,GAS/C,CAAA"}

package/_types/serializePermissionAccount.d.ts

@@ -0,0 +1,5 @@
+import type { KernelSmartAccount } from "@zerodev/sdk";
+import type { EntryPoint } from "permissionless/types";
+import type { Hex } from "viem";
+export declare const serializePermissionAccount: <entryPoint extends EntryPoint>(account: KernelSmartAccount<entryPoint>, privateKey?: Hex) => Promise<string>;
+//# sourceMappingURL=serializePermissionAccount.d.ts.map

package/_types/serializePermissionAccount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializePermissionAccount.d.ts","sourceRoot":"","sources":["../serializePermissionAccount.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AAM/B,eAAO,MAAM,0BAA0B,wFAEtB,GAAG,KACjB,QAAQ,MAAM,CA0BhB,CAAA"}