@zerodev/sdk 4.0.16 → 4.0.18

package/dist/cjs/kernel-zerodev/validator/recovery-validator.js

@@ -0,0 +1,298 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RecoveryValidator = exports.recoverySelector = exports.isEthereumProvider = exports.isLocalAccount = void 0;
+const aa_core_1 = require("@alchemy/aa-core");
+const base_js_1 = require("./base.js");
+const viem_1 = require("viem");
+const WeightedValidatorAbi_js_1 = require("../abis/WeightedValidatorAbi.js");
+const index_js_1 = require("../api/index.js");
+const constants_js_1 = require("../constants.js");
+const KernelAccountAbi_js_1 = require("../abis/KernelAccountAbi.js");
+const utils_js_1 = require("../utils.js");
+const chains_1 = require("viem/chains");
+const RecoveryActionAbi_js_1 = require("../abis/RecoveryActionAbi.js");
+function isLocalAccount(account) {
+    return account && account.signTransaction !== undefined;
+}
+exports.isLocalAccount = isLocalAccount;
+function isEthereumProvider(provider) {
+    return provider && provider.request !== undefined;
+}
+exports.isEthereumProvider = isEthereumProvider;
+exports.recoverySelector = (0, viem_1.getFunctionSelector)("doRecovery(address, bytes)");
+class RecoveryValidator extends base_js_1.KernelBaseValidator {
+    constructor(params) {
+        super(params);
+        Object.defineProperty(this, "guardians", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "threshold", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "delaySeconds", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "accountSigner", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "guardianAccountOrProvider", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "signatures", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "walletClient", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        this.guardians = params.guardians;
+        this.threshold = params.threshold;
+        this.delaySeconds = params.delaySeconds ?? 0;
+        this.accountSigner = params.accountSigner;
+        this.mode = params.mode ?? base_js_1.ValidatorMode.plugin;
+        this.guardianAccountOrProvider = params.guardianAccountOrProvider;
+        this.signatures = params.signatures;
+        this.validAfter = params.validAfter ?? 0;
+        this.validUntil = params.validUntil ?? 0;
+        this.executor = params.executor ?? constants_js_1.RECOVERY_ACTION;
+        this.selector = params.selector ?? exports.recoverySelector;
+        if (isLocalAccount(params.guardianAccountOrProvider)) {
+            this.walletClient = (0, viem_1.createWalletClient)({
+                account: params.guardianAccountOrProvider,
+                chain: this.chain ?? chains_1.polygonMumbai,
+                transport: (0, viem_1.http)(constants_js_1.CHAIN_ID_TO_NODE[this.chain?.id ?? chains_1.polygonMumbai.id]),
+            }).extend(viem_1.publicActions);
+        }
+        else if (isEthereumProvider(params.guardianAccountOrProvider)) {
+            this.walletClient = (0, viem_1.createWalletClient)({
+                chain: this.chain ?? chains_1.polygonMumbai,
+                transport: (0, viem_1.custom)(params.guardianAccountOrProvider),
+            }).extend(viem_1.publicActions);
+        }
+        else if (params.walletClient) {
+            this.walletClient = params.walletClient.extend(viem_1.publicActions);
+        }
+        else if (params.guardianAccountOrProvider) {
+            throw Error("Incorrect guardianAccountOrProvider type");
+        }
+    }
+    static async init(params) {
+        const chainId = await (0, index_js_1.getChainId)(params.projectId);
+        if (!chainId) {
+            throw new Error("ChainId not found");
+        }
+        const chain = (0, aa_core_1.getChain)(chainId);
+        const instance = new RecoveryValidator({ ...params, chain });
+        return instance;
+    }
+    getNonceKey() {
+        return BigInt(this.validatorAddress);
+    }
+    setRecoverySignatures(signatures) {
+        this.signatures = signatures;
+    }
+    getRecoverySignatures() {
+        return this.signatures;
+    }
+    getRecoveryConfig() {
+        if (this.guardians === undefined ||
+            !this.threshold ||
+            Object.entries(this.guardians).length !== this.threshold) {
+            throw Error("Recovery config unintialised");
+        }
+        return {
+            guardians: this.guardians,
+            threshold: this.threshold,
+            delaySeconds: this.delaySeconds,
+        };
+    }
+    async signer() {
+        if (!this.accountSigner) {
+            throw Error("AccountSigner not set");
+        }
+        return await Promise.resolve(this.accountSigner);
+    }
+    async getEnableData() {
+        if (this.guardians === undefined ||
+            !this.threshold ||
+            Object.entries(this.guardians).length !== this.threshold) {
+            throw Error("Recovery config unintialised");
+        }
+        return (0, viem_1.encodeAbiParameters)((0, viem_1.parseAbiParameters)("address[] guardians, uint24[] weights, uint24 threshold, uint48 delay"), [
+            Object.keys(this.guardians),
+            Object.values(this.guardians),
+            this.threshold,
+            this.delaySeconds,
+        ]);
+    }
+    encodeEnable(recoveryData) {
+        return (0, viem_1.encodeFunctionData)({
+            abi: WeightedValidatorAbi_js_1.WeightedValidatorAbi,
+            functionName: "enable",
+            args: [recoveryData],
+        });
+    }
+    encodeDisable(disableData = "0x") {
+        return (0, viem_1.encodeFunctionData)({
+            abi: WeightedValidatorAbi_js_1.WeightedValidatorAbi,
+            functionName: "disable",
+            args: [disableData],
+        });
+    }
+    encodeApprove(callDataAndNonceHash, kernelAccountAddress) {
+        return (0, viem_1.encodeFunctionData)({
+            abi: WeightedValidatorAbi_js_1.WeightedValidatorAbi,
+            functionName: "approve",
+            args: [callDataAndNonceHash, kernelAccountAddress],
+        });
+    }
+    encodeApproveWithSig(callDataAndNonceHash, kernelAccountAddress, sigs) {
+        return (0, viem_1.encodeFunctionData)({
+            abi: WeightedValidatorAbi_js_1.WeightedValidatorAbi,
+            functionName: "approveWithSig",
+            args: [callDataAndNonceHash, kernelAccountAddress, sigs],
+        });
+    }
+    encodeVeto(callDataAndNonceHash) {
+        return (0, viem_1.encodeFunctionData)({
+            abi: WeightedValidatorAbi_js_1.WeightedValidatorAbi,
+            functionName: "veto",
+            args: [callDataAndNonceHash],
+        });
+    }
+    encodeRecoveryAction(enableData, defaultValidatorAddress) {
+        return (0, viem_1.encodeFunctionData)({
+            abi: RecoveryActionAbi_js_1.RecoveryActionAbi,
+            functionName: "doRecovery",
+            args: [defaultValidatorAddress, enableData],
+        });
+    }
+    async isPluginEnabled(kernelAccountAddress, selector) {
+        if (this.guardians === undefined ||
+            !this.threshold ||
+            Object.entries(this.guardians).length !== this.threshold) {
+            throw Error("Recovery config unintialised");
+        }
+        if (!this.publicClient) {
+            throw new Error("Validator uninitialized: PublicClient missing");
+        }
+        try {
+            const kernel = (0, viem_1.getContract)({
+                abi: KernelAccountAbi_js_1.KernelAccountAbi,
+                address: kernelAccountAddress,
+                publicClient: this.publicClient,
+            });
+            const execDetail = await kernel.read.getExecution([selector]);
+            const enableData = await this.publicClient.readContract({
+                abi: WeightedValidatorAbi_js_1.WeightedValidatorAbi,
+                address: this.validatorAddress,
+                functionName: "weightedStorage",
+                args: [kernelAccountAddress],
+            });
+            return (execDetail.validator.toLowerCase() ===
+                this.validatorAddress.toLowerCase() &&
+                enableData[0] ===
+                    Object.values(this.guardians).reduce((a, c) => a + c, 0) &&
+                enableData[1] === this.threshold &&
+                enableData[2] === this.delaySeconds &&
+                this.isGuardiansEnabled(kernelAccountAddress));
+        }
+        catch (error) {
+            return false;
+        }
+    }
+    async isGuardiansEnabled(kernelAccountAddress) {
+        if (this.guardians === undefined ||
+            !this.threshold ||
+            Object.entries(this.guardians).length !== this.threshold) {
+            throw Error("Recovery config unintialised");
+        }
+        const weightedValidator = (0, viem_1.getContract)({
+            abi: WeightedValidatorAbi_js_1.WeightedValidatorAbi,
+            address: this.validatorAddress,
+            publicClient: this.publicClient,
+        });
+        for (const [addr, weight] of Object.entries(this.guardians)) {
+            const result = await weightedValidator.read.guardian([
+                addr,
+                kernelAccountAddress,
+            ]);
+            if (result[0] !== weight) {
+                return false;
+            }
+        }
+        return true;
+    }
+    async getDummyUserOpSignature() {
+        let dummySignature = "0x";
+        if (this.signatures) {
+            const totalSigs = this.signatures.substring(2).length / 130;
+            for (let i = 0; i < totalSigs; i++) {
+                dummySignature = (0, viem_1.concatHex)([dummySignature, constants_js_1.DUMMY_ECDSA_SIG]);
+            }
+            return this.signatures;
+        }
+        return constants_js_1.DUMMY_ECDSA_SIG;
+    }
+    async signMessage(message) {
+        if (!this.accountSigner) {
+            throw Error("AccountSigner not set");
+        }
+        return await this.accountSigner.signMessage(message);
+    }
+    async signTypedData(params) {
+        if (!this.accountSigner) {
+            throw Error("AccountSigner not set");
+        }
+        return (0, utils_js_1.fixSignedData)(await this.accountSigner.signTypedData(params));
+    }
+    async signRecoveryHash(recoveryHash) {
+        if (!this.chain) {
+            throw new Error("Validator uninitialized");
+        }
+        const signer = await this.signer();
+        return await signer.signTypedData({
+            domain: {
+                name: "WeightedECDSAValidator",
+                version: "1",
+                chainId: this.chain.id,
+                verifyingContract: this.validatorAddress,
+            },
+            types: {
+                Approve: [{ name: "callDataAndNonceHash", type: "bytes32" }],
+            },
+            message: {
+                callDataAndNonceHash: recoveryHash,
+            },
+            primaryType: "Approve",
+        });
+    }
+    async signUserOp(_userOp) {
+        if (!this.chain) {
+            throw new Error("Validator uninitialized");
+        }
+        return this.signatures ?? constants_js_1.DUMMY_ECDSA_SIG;
+    }
+}
+exports.RecoveryValidator = RecoveryValidator;
+//# sourceMappingURL=recovery-validator.js.map

package/dist/cjs/kernel-zerodev/validator/recovery-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-validator.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/recovery-validator.ts"],"names":[],"mappings":";;;AAAA,8CAO0B;AAC1B,uCAImB;AACnB,+BAgBc;AACd,6EAAuE;AACvE,8CAA6C;AAC7C,kDAIyB;AACzB,qEAA+D;AAC/D,0CAA4C;AAE5C,wCAA4C;AAC5C,uEAAiE;AAmBjE,SAAgB,cAAc,CAAC,OAAY;IACzC,OAAO,OAAO,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC;AAC1D,CAAC;AAFD,wCAEC;AAED,SAAgB,kBAAkB,CAChC,QAAa;IAEb,OAAO,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC;AACpD,CAAC;AAJD,gDAIC;AAQY,QAAA,gBAAgB,GAAG,IAAA,0BAAmB,EACjD,4BAA4B,CAC7B,CAAC;AAEF,MAAa,iBAAkB,SAAQ,6BAAmB;IAaxD,YAAY,MAA+B;QACzC,KAAK,CAAC,MAAM,CAAC,CAAC;QAbN;;;;;WAA8B;QAC9B;;;;;WAAmB;QACnB;;;;;WAAqB;QACrB;;;;;WAAmC;QACnC;;;;;WAAoE;QACpE;;;;;WAAiB;QAC3B;;;;;WAIE;QAIA,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,uBAAa,CAAC,MAAM,CAAC;QAChD,IAAI,CAAC,yBAAyB,GAAG,MAAM,CAAC,yBAAyB,CAAC;QAClE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,8BAAe,CAAC;QACnD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,wBAAgB,CAAC;QACpD,IAAI,cAAc,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE;YACpD,IAAI,CAAC,YAAY,GAAG,IAAA,yBAAkB,EAAC;gBACrC,OAAO,EAAE,MAAM,CAAC,yBAAyB;gBACzC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,sBAAa;gBAClC,SAAS,EAAE,IAAA,WAAI,EAAC,+BAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,sBAAa,CAAC,EAAE,CAAC,CAAC;aACtE,CAAC,CAAC,MAAM,CAAC,oBAAa,CAAC,CAAC;SAC1B;aAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE;YAC/D,IAAI,CAAC,YAAY,GAAG,IAAA,yBAAkB,EAAC;gBACrC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,sBAAa;gBAClC,SAAS,EAAE,IAAA,aAAM,EAAC,MAAM,CAAC,yBAAyB,CAAC;aACpD,CAAC,CAAC,MAAM,CAAC,oBAAa,CAAC,CAAC;SAC1B;aAAM,IAAI,MAAM,CAAC,YAAY,EAAE;YAC9B,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,oBAAa,CAAC,CAAC;SAC/D;aAAM,IAAI,MAAM,CAAC,yBAAyB,EAAE;YAC3C,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;SACzD;IACH,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,IAAI,CACtB,MAA+B;QAE/B,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAU,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;SACtC;QACD,MAAM,KAAK,GAAG,IAAA,kBAAQ,EAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,WAAW;QACT,OAAO,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvC,CAAC;IAED,qBAAqB,CAAC,UAAe;QACnC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,qBAAqB;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,iBAAiB;QACf,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,IAAI,CAAC,SAAS;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,EACxD;YACA,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;SAC7C;QACD,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACvB,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;SACtC;QACD,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,IAAI,CAAC,SAAS;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,EACxD;YACA,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;SAC7C;QACD,OAAO,IAAA,0BAAmB,EACxB,IAAA,yBAAkB,EAChB,uEAAuE,CACxE,EACD;YACE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAc;YACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC7B,IAAI,CAAC,SAAS;YACd,IAAI,CAAC,YAAY;SAClB,CACF,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,YAAiB;QAC5B,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,8CAAoB;YACzB,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,cAAmB,IAAI;QACnC,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,8CAAoB;YACzB,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,oBAAyB,EAAE,oBAA6B;QACpE,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,8CAAoB;YACzB,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAClB,oBAAyB,EACzB,oBAA6B,EAC7B,IAAS;QAET,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,8CAAoB;YACzB,YAAY,EAAE,gBAAgB;YAC9B,IAAI,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,IAAI,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,oBAAyB;QAClC,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,8CAAoB;YACzB,YAAY,EAAE,MAAM;YACpB,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAAC,UAAe,EAAE,uBAAgC;QACpE,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,wCAAiB;YACtB,YAAY,EAAE,YAAY;YAC1B,IAAI,EAAE,CAAC,uBAAuB,EAAE,UAAU,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,oBAA6B,EAC7B,QAAa;QAEb,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,IAAI,CAAC,SAAS;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,EACxD;YACA,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;SAC7C;QACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,IAAI;YACF,MAAM,MAAM,GAAG,IAAA,kBAAW,EAAC;gBACzB,GAAG,EAAE,sCAAgB;gBACrB,OAAO,EAAE,oBAAoB;gBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;gBACtD,GAAG,EAAE,8CAAoB;gBACzB,OAAO,EAAE,IAAI,CAAC,gBAAgB;gBAC9B,YAAY,EAAE,iBAAiB;gBAC/B,IAAI,EAAE,CAAC,oBAAoB,CAAC;aAC7B,CAAC,CAAC;YAEH,OAAO,CACL,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;gBAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;gBACrC,UAAU,CAAC,CAAC,CAAC;oBACX,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1D,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS;gBAChC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,YAAY;gBACnC,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAC9C,CAAC;SACH;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,KAAK,CAAC;SACd;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,oBAA6B;QACpD,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,IAAI,CAAC,SAAS;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,EACxD;YACA,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;SAC7C;QACD,MAAM,iBAAiB,GAAG,IAAA,kBAAW,EAAC;YACpC,GAAG,EAAE,8CAAoB;YACzB,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;YAC3D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACnD,IAAe;gBACf,oBAAoB;aACrB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE;gBACxB,OAAO,KAAK,CAAC;aACd;SACF;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC3B,IAAI,cAAc,GAAQ,IAAI,CAAC;QAC/B,IAAI,IAAI,CAAC,UAAU,EAAE;YACnB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;YAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE;gBAClC,cAAc,GAAG,IAAA,gBAAS,EAAC,CAAC,cAAc,EAAE,8BAAe,CAAC,CAAC,CAAC;aAC/D;YAED,OAAO,IAAI,CAAC,UAAU,CAAC;SACxB;QACD,OAAO,8BAAe,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACvB,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;SACtC;QACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACvB,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;SACtC;QACD,OAAO,IAAA,wBAAa,EAAC,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,YAAiB;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,OAAO,MAAM,MAAM,CAAC,aAAa,CAAC;YAChC,MAAM,EAAE;gBACN,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;gBACtB,iBAAiB,EAAE,IAAI,CAAC,gBAAgB;aACzC;YACD,KAAK,EAAE;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;aAC7D;YACD,OAAO,EAAE;gBACP,oBAAoB,EAAE,YAAY;aACnC;YACD,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAA6B;QAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,OAAO,IAAI,CAAC,UAAU,IAAI,8BAAe,CAAC;IAC5C,CAAC;CACF;AA7RD,8CA6RC","sourcesContent":["import {\n  getChain,\n  type Address,\n  type Hex,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n  type SignTypedDataParams,\n} from \"@alchemy/aa-core\";\nimport {\n  KernelBaseValidator,\n  ValidatorMode,\n  type KernelBaseValidatorParams,\n} from \"./base.js\";\nimport {\n  concatHex,\n  encodeAbiParameters,\n  encodeFunctionData,\n  getContract,\n  parseAbiParameters,\n  type LocalAccount,\n  createWalletClient,\n  type WalletClient,\n  http,\n  custom,\n  type Transport,\n  type Chain,\n  type Account,\n  publicActions,\n  getFunctionSelector,\n} from \"viem\";\nimport { WeightedValidatorAbi } from \"../abis/WeightedValidatorAbi.js\";\nimport { getChainId } from \"../api/index.js\";\nimport {\n  CHAIN_ID_TO_NODE,\n  DUMMY_ECDSA_SIG,\n  RECOVERY_ACTION,\n} from \"../constants.js\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport { fixSignedData } from \"../utils.js\";\nimport type { EthereumProvider } from \"./types.js\";\nimport { polygonMumbai } from \"viem/chains\";\nimport { RecoveryActionAbi } from \"../abis/RecoveryActionAbi.js\";\n\ninterface WeightedGuardians {\n  [guardian: Address]: number;\n}\nexport interface RecoveryValidatorParams extends KernelBaseValidatorParams {\n  guardians?: WeightedGuardians;\n  threshold?: number;\n  delaySeconds?: number;\n  accountSigner?: SmartAccountSigner;\n  guardianAccountOrProvider?: LocalAccount<string> | EthereumProvider;\n  walletClient?: WalletClient<Transport, Chain>;\n  signatures?: Hex;\n}\n\nexport type RecoveryConfig = Required<\n  Pick<RecoveryValidatorParams, \"guardians\" | \"threshold\" | \"delaySeconds\">\n>;\n\nexport function isLocalAccount(account: any): account is LocalAccount<string> {\n  return account && account.signTransaction !== undefined;\n}\n\nexport function isEthereumProvider(\n  provider: any\n): provider is EthereumProvider {\n  return provider && provider.request !== undefined;\n}\n\ntype WalletClientAccountType<T> = T extends LocalAccount<string>\n  ? Account\n  : T extends EthereumProvider\n  ? undefined\n  : never;\n\nexport const recoverySelector = getFunctionSelector(\n  \"doRecovery(address, bytes)\"\n);\n\nexport class RecoveryValidator extends KernelBaseValidator {\n  protected guardians?: WeightedGuardians;\n  protected threshold?: number;\n  protected delaySeconds: number;\n  protected accountSigner?: SmartAccountSigner;\n  protected guardianAccountOrProvider?: LocalAccount<string> | EthereumProvider;\n  protected signatures?: Hex;\n  walletClient?: WalletClient<\n    Transport,\n    Chain,\n    WalletClientAccountType<typeof this.guardianAccountOrProvider>\n  >;\n\n  constructor(params: RecoveryValidatorParams) {\n    super(params);\n    this.guardians = params.guardians;\n    this.threshold = params.threshold;\n    this.delaySeconds = params.delaySeconds ?? 0;\n    this.accountSigner = params.accountSigner;\n    this.mode = params.mode ?? ValidatorMode.plugin;\n    this.guardianAccountOrProvider = params.guardianAccountOrProvider;\n    this.signatures = params.signatures;\n    this.validAfter = params.validAfter ?? 0;\n    this.validUntil = params.validUntil ?? 0;\n    this.executor = params.executor ?? RECOVERY_ACTION;\n    this.selector = params.selector ?? recoverySelector;\n    if (isLocalAccount(params.guardianAccountOrProvider)) {\n      this.walletClient = createWalletClient({\n        account: params.guardianAccountOrProvider,\n        chain: this.chain ?? polygonMumbai,\n        transport: http(CHAIN_ID_TO_NODE[this.chain?.id ?? polygonMumbai.id]),\n      }).extend(publicActions);\n    } else if (isEthereumProvider(params.guardianAccountOrProvider)) {\n      this.walletClient = createWalletClient({\n        chain: this.chain ?? polygonMumbai,\n        transport: custom(params.guardianAccountOrProvider),\n      }).extend(publicActions);\n    } else if (params.walletClient) {\n      this.walletClient = params.walletClient.extend(publicActions);\n    } else if (params.guardianAccountOrProvider) {\n      throw Error(\"Incorrect guardianAccountOrProvider type\");\n    }\n  }\n\n  public static async init(\n    params: RecoveryValidatorParams\n  ): Promise<RecoveryValidator> {\n    const chainId = await getChainId(params.projectId);\n    if (!chainId) {\n      throw new Error(\"ChainId not found\");\n    }\n    const chain = getChain(chainId);\n    const instance = new RecoveryValidator({ ...params, chain });\n    return instance;\n  }\n\n  getNonceKey(): bigint {\n    return BigInt(this.validatorAddress);\n  }\n\n  setRecoverySignatures(signatures: Hex) {\n    this.signatures = signatures;\n  }\n\n  getRecoverySignatures(): Hex | undefined {\n    return this.signatures;\n  }\n\n  getRecoveryConfig(): RecoveryConfig {\n    if (\n      this.guardians === undefined ||\n      !this.threshold ||\n      Object.entries(this.guardians).length !== this.threshold\n    ) {\n      throw Error(\"Recovery config unintialised\");\n    }\n    return {\n      guardians: this.guardians,\n      threshold: this.threshold,\n      delaySeconds: this.delaySeconds,\n    };\n  }\n\n  async signer(): Promise<SmartAccountSigner> {\n    if (!this.accountSigner) {\n      throw Error(\"AccountSigner not set\");\n    }\n    return await Promise.resolve(this.accountSigner);\n  }\n\n  async getEnableData(): Promise<Hex> {\n    if (\n      this.guardians === undefined ||\n      !this.threshold ||\n      Object.entries(this.guardians).length !== this.threshold\n    ) {\n      throw Error(\"Recovery config unintialised\");\n    }\n    return encodeAbiParameters(\n      parseAbiParameters(\n        \"address[] guardians, uint24[] weights, uint24 threshold, uint48 delay\"\n      ),\n      [\n        Object.keys(this.guardians) as Address[],\n        Object.values(this.guardians),\n        this.threshold,\n        this.delaySeconds,\n      ]\n    );\n  }\n\n  encodeEnable(recoveryData: Hex): Hex {\n    return encodeFunctionData({\n      abi: WeightedValidatorAbi,\n      functionName: \"enable\",\n      args: [recoveryData],\n    });\n  }\n\n  encodeDisable(disableData: Hex = \"0x\"): Hex {\n    return encodeFunctionData({\n      abi: WeightedValidatorAbi,\n      functionName: \"disable\",\n      args: [disableData],\n    });\n  }\n\n  encodeApprove(callDataAndNonceHash: Hex, kernelAccountAddress: Address): Hex {\n    return encodeFunctionData({\n      abi: WeightedValidatorAbi,\n      functionName: \"approve\",\n      args: [callDataAndNonceHash, kernelAccountAddress],\n    });\n  }\n\n  encodeApproveWithSig(\n    callDataAndNonceHash: Hex,\n    kernelAccountAddress: Address,\n    sigs: Hex\n  ): Hex {\n    return encodeFunctionData({\n      abi: WeightedValidatorAbi,\n      functionName: \"approveWithSig\",\n      args: [callDataAndNonceHash, kernelAccountAddress, sigs],\n    });\n  }\n\n  encodeVeto(callDataAndNonceHash: Hex): Hex {\n    return encodeFunctionData({\n      abi: WeightedValidatorAbi,\n      functionName: \"veto\",\n      args: [callDataAndNonceHash],\n    });\n  }\n\n  encodeRecoveryAction(enableData: Hex, defaultValidatorAddress: Address): Hex {\n    return encodeFunctionData({\n      abi: RecoveryActionAbi,\n      functionName: \"doRecovery\",\n      args: [defaultValidatorAddress, enableData],\n    });\n  }\n\n  async isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean> {\n    if (\n      this.guardians === undefined ||\n      !this.threshold ||\n      Object.entries(this.guardians).length !== this.threshold\n    ) {\n      throw Error(\"Recovery config unintialised\");\n    }\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    try {\n      const kernel = getContract({\n        abi: KernelAccountAbi,\n        address: kernelAccountAddress,\n        publicClient: this.publicClient,\n      });\n      const execDetail = await kernel.read.getExecution([selector]);\n      const enableData = await this.publicClient.readContract({\n        abi: WeightedValidatorAbi,\n        address: this.validatorAddress,\n        functionName: \"weightedStorage\",\n        args: [kernelAccountAddress],\n      });\n\n      return (\n        execDetail.validator.toLowerCase() ===\n          this.validatorAddress.toLowerCase() &&\n        enableData[0] ===\n          Object.values(this.guardians).reduce((a, c) => a + c, 0) &&\n        enableData[1] === this.threshold &&\n        enableData[2] === this.delaySeconds &&\n        this.isGuardiansEnabled(kernelAccountAddress)\n      );\n    } catch (error) {\n      return false;\n    }\n  }\n\n  async isGuardiansEnabled(kernelAccountAddress: Address): Promise<boolean> {\n    if (\n      this.guardians === undefined ||\n      !this.threshold ||\n      Object.entries(this.guardians).length !== this.threshold\n    ) {\n      throw Error(\"Recovery config unintialised\");\n    }\n    const weightedValidator = getContract({\n      abi: WeightedValidatorAbi,\n      address: this.validatorAddress,\n      publicClient: this.publicClient,\n    });\n    for (const [addr, weight] of Object.entries(this.guardians)) {\n      const result = await weightedValidator.read.guardian([\n        addr as Address,\n        kernelAccountAddress,\n      ]);\n      if (result[0] !== weight) {\n        return false;\n      }\n    }\n    return true;\n  }\n\n  async getDummyUserOpSignature(): Promise<Hex> {\n    let dummySignature: Hex = \"0x\";\n    if (this.signatures) {\n      const totalSigs = this.signatures.substring(2).length / 130;\n      for (let i = 0; i < totalSigs; i++) {\n        dummySignature = concatHex([dummySignature, DUMMY_ECDSA_SIG]);\n      }\n      // Hack - Fix this to not send original signatures\n      return this.signatures;\n    }\n    return DUMMY_ECDSA_SIG;\n  }\n\n  async signMessage(message: string | Uint8Array): Promise<Hex> {\n    if (!this.accountSigner) {\n      throw Error(\"AccountSigner not set\");\n    }\n    return await this.accountSigner.signMessage(message);\n  }\n\n  async signTypedData(params: SignTypedDataParams): Promise<Hex> {\n    if (!this.accountSigner) {\n      throw Error(\"AccountSigner not set\");\n    }\n    return fixSignedData(await this.accountSigner.signTypedData(params));\n  }\n\n  async signRecoveryHash(recoveryHash: Hex): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    const signer = await this.signer();\n    return await signer.signTypedData({\n      domain: {\n        name: \"WeightedECDSAValidator\",\n        version: \"1\",\n        chainId: this.chain.id,\n        verifyingContract: this.validatorAddress,\n      },\n      types: {\n        Approve: [{ name: \"callDataAndNonceHash\", type: \"bytes32\" }],\n      },\n      message: {\n        callDataAndNonceHash: recoveryHash,\n      },\n      primaryType: \"Approve\",\n    });\n  }\n\n  async signUserOp(_userOp: UserOperationRequest): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    return this.signatures ?? DUMMY_ECDSA_SIG;\n  }\n}\n"]}

package/dist/cjs/kernel-zerodev/validator/session-key-validator.d.ts

@@ -26,7 +26,7 @@ export interface ParamRules {
 }
 export interface Permission {
     target: Address;
-    valueLimit: number;
+    valueLimit: bigint;
     sig: Hex;
     rules: ParamRules[];
     operation: Operation;

package/dist/cjs/kernel-zerodev/validator/session-key-validator.js

@@ -10,6 +10,9 @@ const KernelAccountAbi_js_1 = require("../abis/KernelAccountAbi.js");
 const merkletreejs_1 = require("merkletreejs");
 const index_js_1 = require("../api/index.js");
 const utils_js_1 = require("../utils.js");
+BigInt.prototype.toJSON = function () {
+    return this.toString();
+};
 var ParamCondition;
 (function (ParamCondition) {
     ParamCondition[ParamCondition["EQUAL"] = 0] = "EQUAL";
@@ -89,7 +92,17 @@ class SessionKeyValidator extends base_js_1.KernelBaseValidator {
             const valueLimitPermissions = signaturePermissions.filter((permission) => permission.valueLimit >= args[1]);
             if (!valueLimitPermissions.length)
                 return undefined;
-            const sortedPermissions = valueLimitPermissions.sort((a, b) => b.valueLimit - a.valueLimit);
+            const sortedPermissions = valueLimitPermissions.sort((a, b) => {
+                if (b.valueLimit > a.valueLimit) {
+                    return 1;
+                }
+                else if (b.valueLimit < a.valueLimit) {
+                    return -1;
+                }
+                else {
+                    return 0;
+                }
+            });
             return this.findPermissionByRule(sortedPermissions, args[2]);
         }
         catch (error) {

package/dist/cjs/kernel-zerodev/validator/session-key-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-key-validator.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/session-key-validator.ts"],"names":[],"mappings":";;;AAAA,8CAQ0B;AAC1B,uCAKmB;AACnB,+BAac;AACd,iFAA2E;AAC3E,kDAAkD;AAClD,qEAA+D;AAC/D,+CAA0C;AAE1C,8CAA6C;AAC7C,0CAA4C;AAiB5C,IAAY,cAOX;AAPD,WAAY,cAAc;IACxB,qDAAS,CAAA;IACT,mEAAgB,CAAA;IAChB,6DAAa,CAAA;IACb,qFAAyB,CAAA;IACzB,+EAAsB,CAAA;IACtB,6DAAa,CAAA;AACf,CAAC,EAPW,cAAc,8BAAd,cAAc,QAOzB;AAuBD,MAAa,mBAAoB,SAAQ,6BAAmB;IAK1D,YAAY,MAAiC;QAC3C,KAAK,CAAC,MAAM,CAAC,CAAC;QALN;;;;;WAA+B;QACzC;;;;;WAA+B;QAC/B;;;;;WAAuB;QAIrB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG;YACpB,GAAG,MAAM,CAAC,cAAc;YACxB,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,SAAS,IAAI,kBAAW;SAC1D,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ;YACX,MAAM,CAAC,QAAQ;gBACf,IAAA,0BAAmB,EAAC,yCAAyC,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,kBAAW,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,uBAAa,CAAC,MAAM,CAAC;IAClD,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,IAAI,CACtB,MAAiC;QAEjC,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAU,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;SACtC;QACD,MAAM,KAAK,GAAG,IAAA,kBAAQ,EAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yBAAyB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,IAAA,UAAG,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,sBAAsB,CAAC,QAAa;QAClC,IAAI;YACF,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,IAAA,yBAAkB,EAAC;gBAChD,GAAG,EAAE,sCAAgB;gBACrB,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YAEH,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAEjD,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;YACxD,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAElE,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAG5C,IAAI,iBAAiB,GAAG,eAAe,CAAC,MAAM,CAC5C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,aAAa,CAClE,CAAC;YAGF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE;gBAC7B,iBAAiB,GAAG,eAAe,CAAC,MAAM,CACxC,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,kBAAW,CAAC,WAAW,EAAE,CAChE,CAAC;aACH;YAED,IAAI,CAAC,iBAAiB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEhD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,iBAAiB,EACjB,IAAI,CAAC,CAAC,CAAC,CACR,CAAC;YAEF,IAAI,CAAC,oBAAoB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEnD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,oBAAoB,EACpB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CACnC,CAAC;YAEF,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,MAAM,CACvD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CACjD,CAAC;YAEF,IAAI,CAAC,qBAAqB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEpD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,IAAI,CAClD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CACtC,CAAC;YAEF,OAAO,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;SAC9D;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,SAAS,CAAC;SAClB;IACH,CAAC;IAEO,iBAAiB,CACvB,WAAyB,EACzB,SAAoB;QAEpB,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CACnD,CAAC;IACJ,CAAC;IAEO,iBAAiB,CACvB,WAAyB,EACzB,SAAiB;QAEjB,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,SAAS,CAC3D,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAC1B,WAAyB,EACzB,IAAY;QAEZ,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACrC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE;gBACnC,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CACzC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CACnE,CAAC;gBACF,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAExD,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;oBACrE,OAAO,KAAK,CAAC;iBACd;aACF;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,OAAO,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAA,YAAK,EAAC,KAAK,CAAC,EAAE;YAC9C,IAAI,EAAE,EAAE;SACT,CAAC,CAAC,WAAW,EAAS,CAAC;IAC1B,CAAC;IAEO,qBAAqB,CAC3B,SAAc,EACd,SAAc,EACd,SAAyB;QAEzB,QAAQ,SAAS,EAAE;YACjB,KAAK,cAAc,CAAC,KAAK;gBACvB,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC,KAAK,cAAc,CAAC,YAAY;gBAC9B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,cAAc,CAAC,SAAS;gBAC3B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,cAAc,CAAC,qBAAqB;gBACvC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,cAAc,CAAC,kBAAkB;gBACpC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,cAAc,CAAC,SAAS;gBAC3B,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC;gBACE,OAAO,KAAK,CAAC;SAChB;IACH,CAAC;IAED,aAAa;QACX,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CAC3D,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CACtD,CAAC;QAIF,IAAI,gBAAgB,EAAE,MAAM,KAAK,CAAC;YAChC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7C,OAAO,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACtD,CAAC,CAAC,IAAI,yBAAU,CAAC,gBAAgB,EAAE,gBAAS,EAAE;gBAC1C,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;aACjB,CAAC;YACJ,CAAC,CAAC,IAAI,yBAAU,CAAC,CAAC,IAAA,UAAG,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,gBAAS,EAAE;gBACrD,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;IACT,CAAC;IAED,oBAAoB,CAAC,UAAsB,EAAE,WAAsB;QACjE,IAAI,eAAe,GAAG;YACpB,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,QAAQ;iBACf;gBACD;oBACE,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,SAAS;yBAChB;wBACD;4BACE,YAAY,EAAE,qBAAqB;4BACnC,IAAI,EAAE,WAAW;4BACjB,IAAI,EAAE,OAAO;yBACd;wBACD;4BACE,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,SAAS;yBAChB;qBACF;oBACD,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,YAAY,EAAE,gBAAgB;oBAC9B,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,OAAO;iBACd;aACF;YACD,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,OAAO;SACd,CAAC;QACF,IAAI,MAAM,CAAC;QACX,IAAI,MAAM,CAAC;QACX,IAAI,WAAW,EAAE;YACf,MAAM,GAAG;gBACP,eAAe;gBACf;oBACE,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,WAAW;iBAClB;aACF,CAAC;YACF,MAAM,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;SACpC;aAAM;YACL,MAAM,GAAG,CAAC,eAAe,CAAC,CAAC;YAC3B,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;SACvB;QACD,OAAO,IAAA,0BAAmB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YACpB,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAC9D;QACD,OAAO,IAAA,aAAM,EAAC;YACZ,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,IAAA,UAAG,EAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACtD,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,cAAc,CAAC,SAAU;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,sCAAgB;YACrB,OAAO,EAAE,oBAAoB;YAC7B,YAAY,EAAE,cAAc;YAC5B,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,kDAAsB;YAC3B,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,oBAAoB,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAA,gBAAS,EAAC;YAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,IAAA,UAAG,EAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/B,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,UAAU,CAAC,CAAC,CAAC;SACd,CAAC,CAAC;QACH,OAAO,CACL,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;YACrC,UAAU,CAAC,CAAC,CAAC;YACb,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAC3E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,QAAa;QACzC,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE;YAC5D,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;SACH;QACD,MAAM,qBAAqB,GACzB,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAC7C,IAAA,gBAAS,EAAC,qBAAqB,CAAC,CACjC,CAAC;QACF,MAAM,WAAW,GACf,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,IAAA,gBAAS,EAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,8BAAe;YACf,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,oBAAyB;QACpC,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,kDAAsB;YAC3B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,UAAe;QAC3B,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,kDAAsB;YAC3B,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,OAAO,IAAA,wBAAa,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA4B;QAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,MAAM,IAAI,GAAG,IAAA,8BAAoB,EAC/B;YACE,GAAG,MAAM;YACT,SAAS,EAAE,IAAI;SAChB,EACD,IAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzE,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE;YAC5D,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;SACH;QACD,MAAM,qBAAqB,GACzB,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAC7C,IAAA,gBAAS,EAAC,qBAAqB,CAAC,CACjC,CAAC;QACF,MAAM,WAAW,GACf,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,SAAS,GAAG,IAAA,aAAM,EAAC;YACvB,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACnD,WAAW;SACZ,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAhZD,kDAgZC","sourcesContent":["import {\n  getUserOperationHash,\n  type Address,\n  type Hex,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n  getChain,\n  type SignTypedDataParams,\n} from \"@alchemy/aa-core\";\nimport {\n  KernelBaseValidator,\n  ValidatorMode,\n  type KernelBaseValidatorParams,\n  type ValidatorPluginData,\n} from \"./base.js\";\nimport {\n  encodeFunctionData,\n  toBytes,\n  concat,\n  pad,\n  toHex,\n  keccak256,\n  encodeAbiParameters,\n  concatHex,\n  zeroAddress,\n  decodeFunctionData,\n  isHex,\n  getFunctionSelector,\n} from \"viem\";\nimport { SessionKeyValidatorAbi } from \"../abis/SessionKeyValidatorAbi.js\";\nimport { DUMMY_ECDSA_SIG } from \"../constants.js\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport { MerkleTree } from \"merkletreejs\";\nimport type { Operation } from \"../provider.js\";\nimport { getChainId } from \"../api/index.js\";\nimport { fixSignedData } from \"../utils.js\";\n\nexport interface SessionKeyValidatorParams extends KernelBaseValidatorParams {\n  sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n}\n\nexport type SessionKeyParams = Pick<\n  SessionKeyValidatorParams,\n  \"sessionKeyData\" | \"enableSignature\"\n> &\n  ValidatorPluginData & {\n    sessionPrivateKey?: Hex;\n    initCode?: Hex;\n    accountAddress?: Address;\n  };\n\nexport enum ParamCondition {\n  EQUAL = 0,\n  GREATER_THAN = 1,\n  LESS_THAN = 2,\n  GREATER_THAN_OR_EQUAL = 3,\n  LESS_THAN_OR_EQUAL = 4,\n  NOT_EQUAL = 5,\n}\n\nexport interface ParamRules {\n  offset: number;\n  condition: ParamCondition;\n  param: Hex;\n}\n\nexport interface Permission {\n  target: Address;\n  valueLimit: number;\n  sig: Hex;\n  rules: ParamRules[];\n  operation: Operation;\n}\n\nexport interface SessionKeyData {\n  validUntil: number;\n  validAfter: number;\n  paymaster?: Address;\n  permissions?: Permission[];\n}\n\nexport class SessionKeyValidator extends KernelBaseValidator {\n  protected sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n  merkleTree: MerkleTree;\n\n  constructor(params: SessionKeyValidatorParams) {\n    super(params);\n    this.sessionKey = params.sessionKey;\n    this.sessionKeyData = {\n      ...params.sessionKeyData,\n      paymaster: params.sessionKeyData.paymaster ?? zeroAddress,\n    };\n    this.merkleTree = this.getMerkleTree();\n    this.selector =\n      params.selector ??\n      getFunctionSelector(\"execute(address, uint256, bytes, uint8)\");\n    this.executor = params.executor ?? zeroAddress;\n    this.mode = params.mode ?? ValidatorMode.plugin;\n  }\n\n  public static async init(\n    params: SessionKeyValidatorParams\n  ): Promise<SessionKeyValidator> {\n    const chainId = await getChainId(params.projectId);\n    if (!chainId) {\n      throw new Error(\"ChainId not found\");\n    }\n    const chain = getChain(chainId);\n    const instance = new SessionKeyValidator({ ...params, chain });\n    return instance;\n  }\n\n  shouldDelegateViaFallback(): boolean {\n    return this.merkleTree.getHexRoot() === pad(\"0x00\", { size: 32 });\n  }\n\n  findMatchingPermission(callData: Hex): Permission | undefined {\n    try {\n      const { functionName, args } = decodeFunctionData({\n        abi: KernelAccountAbi,\n        data: callData,\n      });\n\n      if (functionName !== \"execute\") return undefined;\n\n      const permissionsList = this.sessionKeyData.permissions;\n      if (!permissionsList || !permissionsList.length) return undefined;\n\n      const targetToMatch = args[0].toLowerCase();\n\n      // Filter permissions by target\n      let targetPermissions = permissionsList.filter(\n        (permission) => permission.target.toLowerCase() === targetToMatch\n      );\n\n      // If no permissions match the exact target, check for generic permissions (using zero address)\n      if (!targetPermissions.length) {\n        targetPermissions = permissionsList.filter(\n          (permission) =>\n            permission.target.toLowerCase() === zeroAddress.toLowerCase()\n        );\n      }\n\n      if (!targetPermissions.length) return undefined;\n\n      const operationPermissions = this.filterByOperation(\n        targetPermissions,\n        args[3]\n      );\n\n      if (!operationPermissions.length) return undefined;\n\n      const signaturePermissions = this.filterBySignature(\n        operationPermissions,\n        args[2].slice(0, 10).toLowerCase()\n      );\n\n      const valueLimitPermissions = signaturePermissions.filter(\n        (permission) => permission.valueLimit >= args[1]\n      );\n\n      if (!valueLimitPermissions.length) return undefined;\n\n      const sortedPermissions = valueLimitPermissions.sort(\n        (a, b) => b.valueLimit - a.valueLimit\n      );\n\n      return this.findPermissionByRule(sortedPermissions, args[2]);\n    } catch (error) {\n      return undefined;\n    }\n  }\n\n  private filterByOperation(\n    permissions: Permission[],\n    operation: Operation\n  ): Permission[] {\n    return permissions.filter(\n      (permission) => permission.operation === operation\n    );\n  }\n\n  private filterBySignature(\n    permissions: Permission[],\n    signature: string\n  ): Permission[] {\n    return permissions.filter(\n      (permission) => permission.sig.toLowerCase() === signature\n    );\n  }\n\n  private findPermissionByRule(\n    permissions: Permission[],\n    data: string\n  ): Permission | undefined {\n    return permissions.find((permission) => {\n      for (const rule of permission.rules) {\n        const dataParam: Hex = this.getFormattedHex(\n          \"0x\" + data.slice(10 + rule.offset * 2, 10 + rule.offset * 2 + 64)\n        );\n        const ruleParam: Hex = this.getFormattedHex(rule.param);\n\n        if (!this.evaluateRuleCondition(dataParam, ruleParam, rule.condition)) {\n          return false;\n        }\n      }\n      return true;\n    });\n  }\n\n  private getFormattedHex(value: string): Hex {\n    return pad(isHex(value) ? value : toHex(value), {\n      size: 32,\n    }).toLowerCase() as Hex;\n  }\n\n  private evaluateRuleCondition(\n    dataParam: Hex,\n    ruleParam: Hex,\n    condition: ParamCondition\n  ): boolean {\n    switch (condition) {\n      case ParamCondition.EQUAL:\n        return dataParam === ruleParam;\n      case ParamCondition.GREATER_THAN:\n        return dataParam > ruleParam;\n      case ParamCondition.LESS_THAN:\n        return dataParam < ruleParam;\n      case ParamCondition.GREATER_THAN_OR_EQUAL:\n        return dataParam >= ruleParam;\n      case ParamCondition.LESS_THAN_OR_EQUAL:\n        return dataParam <= ruleParam;\n      case ParamCondition.NOT_EQUAL:\n        return dataParam !== ruleParam;\n      default:\n        return false;\n    }\n  }\n\n  getMerkleTree(): MerkleTree {\n    const permissionPacked = this.sessionKeyData.permissions?.map(\n      (permission) => this.encodePermissionData(permission)\n    );\n\n    // Having one leaf returns empty array in getProof(). To hack it we push the leaf twice\n    // issue - https://github.com/merkletreejs/merkletreejs/issues/58\n    if (permissionPacked?.length === 1)\n      permissionPacked.push(permissionPacked[0]);\n\n    return permissionPacked && permissionPacked.length !== 0\n      ? new MerkleTree(permissionPacked, keccak256, {\n          sortPairs: true,\n          hashLeaves: true,\n        })\n      : new MerkleTree([pad(\"0x00\", { size: 32 })], keccak256, {\n          hashLeaves: false,\n        });\n  }\n\n  encodePermissionData(permission: Permission, merkleProof?: string[]): Hex {\n    let permissionParam = {\n      components: [\n        {\n          name: \"target\",\n          type: \"address\",\n        },\n        {\n          name: \"valueLimit\",\n          type: \"uint256\",\n        },\n        {\n          name: \"sig\",\n          type: \"bytes4\",\n        },\n        {\n          components: [\n            {\n              name: \"offset\",\n              type: \"uint256\",\n            },\n            {\n              internalType: \"enum ParamCondition\",\n              name: \"condition\",\n              type: \"uint8\",\n            },\n            {\n              name: \"param\",\n              type: \"bytes32\",\n            },\n          ],\n          name: \"rules\",\n          type: \"tuple[]\",\n        },\n        {\n          internalType: \"enum Operation\",\n          name: \"operation\",\n          type: \"uint8\",\n        },\n      ],\n      name: \"permission\",\n      type: \"tuple\",\n    };\n    let params;\n    let values;\n    if (merkleProof) {\n      params = [\n        permissionParam,\n        {\n          name: \"merkleProof\",\n          type: \"bytes32[]\",\n        },\n      ];\n      values = [permission, merkleProof];\n    } else {\n      params = [permissionParam];\n      values = [permission];\n    }\n    return encodeAbiParameters(params, values);\n  }\n\n  getSessionData(): SessionKeyParams {\n    if (!this.selector || !this.executor) {\n      throw Error(\"Plugin Validator data params uninitialised\");\n    }\n    return {\n      selector: this.selector,\n      executor: this.executor,\n      validUntil: this.validUntil,\n      validAfter: this.validAfter,\n      sessionKeyData: this.sessionKeyData,\n      enableSignature: this.enableSignature,\n    };\n  }\n\n  async signer(): Promise<SmartAccountSigner> {\n    return await Promise.resolve(this.sessionKey);\n  }\n\n  async getEnableData(): Promise<Hex> {\n    if (!this.merkleTree) {\n      throw Error(\"SessionKeyValidator: MerkleTree not generated\");\n    }\n    return concat([\n      await this.sessionKey.getAddress(),\n      pad(this.merkleTree.getHexRoot() as Hex, { size: 32 }),\n      pad(toHex(this.sessionKeyData.validAfter), { size: 6 }),\n      pad(toHex(this.sessionKeyData.validUntil), { size: 6 }),\n      this.sessionKeyData.paymaster!,\n    ]);\n  }\n\n  async isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    const execDetail = await this.publicClient.readContract({\n      abi: KernelAccountAbi,\n      address: kernelAccountAddress,\n      functionName: \"getExecution\",\n      args: [selector],\n    });\n    const enableData = await this.publicClient.readContract({\n      abi: SessionKeyValidatorAbi,\n      address: this.validatorAddress,\n      functionName: \"sessionData\",\n      args: [await this.sessionKey.getAddress(), kernelAccountAddress],\n    });\n    const enableDataHex = concatHex([\n      await this.sessionKey.getAddress(),\n      pad(enableData[0], { size: 4 }),\n      pad(toHex(enableData[1]), { size: 6 }),\n      pad(toHex(enableData[2]), { size: 6 }),\n      enableData[3],\n    ]);\n    return (\n      execDetail.validator.toLowerCase() ===\n        this.validatorAddress.toLowerCase() &&\n      enableData[4] &&\n      enableDataHex.toLowerCase() === (await this.getEnableData()).toLowerCase()\n    );\n  }\n\n  async getDummyUserOpSignature(callData: Hex): Promise<Hex> {\n    const matchingPermission = this.findMatchingPermission(callData);\n    if (!matchingPermission && !this.shouldDelegateViaFallback()) {\n      throw Error(\n        \"SessionKeyValidator: No matching permission found for the userOp\"\n      );\n    }\n    const encodedPermissionData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission)\n        : \"0x\";\n    const merkleProof = this.merkleTree.getHexProof(\n      keccak256(encodedPermissionData)\n    );\n    const encodedData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission, merkleProof)\n        : \"0x\";\n    return concatHex([\n      await this.sessionKey.getAddress(),\n      DUMMY_ECDSA_SIG,\n      encodedData,\n    ]);\n  }\n\n  encodeEnable(sessionKeyEnableData: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"enable\",\n      args: [sessionKeyEnableData],\n    });\n  }\n\n  encodeDisable(sessionKey: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"disable\",\n      args: [sessionKey],\n    });\n  }\n\n  async signMessage(message: string | Uint8Array): Promise<Hex> {\n    return await this.sessionKey.signMessage(message);\n  }\n\n  async signTypedData(params: SignTypedDataParams): Promise<Hex> {\n    return fixSignedData(await this.sessionKey.signTypedData(params));\n  }\n\n  async signUserOp(userOp: UserOperationRequest): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    const hash = getUserOperationHash(\n      {\n        ...userOp,\n        signature: \"0x\",\n      },\n      this.entryPointAddress,\n      BigInt(this.chain.id)\n    );\n    const formattedMessage = typeof hash === \"string\" ? toBytes(hash) : hash;\n\n    const matchingPermission = this.findMatchingPermission(userOp.callData);\n    if (!matchingPermission && !this.shouldDelegateViaFallback()) {\n      throw Error(\n        \"SessionKeyValidator: No matching permission found for the userOp\"\n      );\n    }\n    const encodedPermissionData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission)\n        : \"0x\";\n    const merkleProof = this.merkleTree.getHexProof(\n      keccak256(encodedPermissionData)\n    );\n    const encodedData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission, merkleProof)\n        : \"0x\";\n    const signature = concat([\n      await this.sessionKey.getAddress(),\n      await this.sessionKey.signMessage(formattedMessage),\n      encodedData,\n    ]);\n    return signature;\n  }\n}\n"]}
+{"version":3,"file":"session-key-validator.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/session-key-validator.ts"],"names":[],"mappings":";;;AAAA,8CAQ0B;AAC1B,uCAKmB;AACnB,+BAac;AACd,iFAA2E;AAC3E,kDAAkD;AAClD,qEAA+D;AAC/D,+CAA0C;AAE1C,8CAA6C;AAC7C,0CAA4C;AAK3C,MAAM,CAAC,SAAiB,CAAC,MAAM,GAAG;IACjC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzB,CAAC,CAAC;AAiBF,IAAY,cAOX;AAPD,WAAY,cAAc;IACxB,qDAAS,CAAA;IACT,mEAAgB,CAAA;IAChB,6DAAa,CAAA;IACb,qFAAyB,CAAA;IACzB,+EAAsB,CAAA;IACtB,6DAAa,CAAA;AACf,CAAC,EAPW,cAAc,8BAAd,cAAc,QAOzB;AAuBD,MAAa,mBAAoB,SAAQ,6BAAmB;IAK1D,YAAY,MAAiC;QAC3C,KAAK,CAAC,MAAM,CAAC,CAAC;QALN;;;;;WAA+B;QACzC;;;;;WAA+B;QAC/B;;;;;WAAuB;QAIrB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG;YACpB,GAAG,MAAM,CAAC,cAAc;YACxB,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,SAAS,IAAI,kBAAW;SAC1D,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ;YACX,MAAM,CAAC,QAAQ;gBACf,IAAA,0BAAmB,EAAC,yCAAyC,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,kBAAW,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,uBAAa,CAAC,MAAM,CAAC;IAClD,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,IAAI,CACtB,MAAiC;QAEjC,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAU,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;SACtC;QACD,MAAM,KAAK,GAAG,IAAA,kBAAQ,EAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yBAAyB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,IAAA,UAAG,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,sBAAsB,CAAC,QAAa;QAClC,IAAI;YACF,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,IAAA,yBAAkB,EAAC;gBAChD,GAAG,EAAE,sCAAgB;gBACrB,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YAEH,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAEjD,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;YACxD,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAElE,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAG5C,IAAI,iBAAiB,GAAG,eAAe,CAAC,MAAM,CAC5C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,aAAa,CAClE,CAAC;YAGF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE;gBAC7B,iBAAiB,GAAG,eAAe,CAAC,MAAM,CACxC,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,kBAAW,CAAC,WAAW,EAAE,CAChE,CAAC;aACH;YAED,IAAI,CAAC,iBAAiB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEhD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,iBAAiB,EACjB,IAAI,CAAC,CAAC,CAAC,CACR,CAAC;YAEF,IAAI,CAAC,oBAAoB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEnD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,oBAAoB,EACpB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CACnC,CAAC;YAEF,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,MAAM,CACvD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CACjD,CAAC;YAEF,IAAI,CAAC,qBAAqB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEpD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC5D,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,EAAE;oBAC/B,OAAO,CAAC,CAAC;iBACV;qBAAM,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,EAAE;oBACtC,OAAO,CAAC,CAAC,CAAC;iBACX;qBAAM;oBACL,OAAO,CAAC,CAAC;iBACV;YACH,CAAC,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;SAC9D;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,SAAS,CAAC;SAClB;IACH,CAAC;IAEO,iBAAiB,CACvB,WAAyB,EACzB,SAAoB;QAEpB,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CACnD,CAAC;IACJ,CAAC;IAEO,iBAAiB,CACvB,WAAyB,EACzB,SAAiB;QAEjB,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,SAAS,CAC3D,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAC1B,WAAyB,EACzB,IAAY;QAEZ,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACrC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE;gBACnC,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CACzC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CACnE,CAAC;gBACF,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAExD,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;oBACrE,OAAO,KAAK,CAAC;iBACd;aACF;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,OAAO,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAA,YAAK,EAAC,KAAK,CAAC,EAAE;YAC9C,IAAI,EAAE,EAAE;SACT,CAAC,CAAC,WAAW,EAAS,CAAC;IAC1B,CAAC;IAEO,qBAAqB,CAC3B,SAAc,EACd,SAAc,EACd,SAAyB;QAEzB,QAAQ,SAAS,EAAE;YACjB,KAAK,cAAc,CAAC,KAAK;gBACvB,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC,KAAK,cAAc,CAAC,YAAY;gBAC9B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,cAAc,CAAC,SAAS;gBAC3B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,cAAc,CAAC,qBAAqB;gBACvC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,cAAc,CAAC,kBAAkB;gBACpC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,cAAc,CAAC,SAAS;gBAC3B,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC;gBACE,OAAO,KAAK,CAAC;SAChB;IACH,CAAC;IAED,aAAa;QACX,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CAC3D,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CACtD,CAAC;QAIF,IAAI,gBAAgB,EAAE,MAAM,KAAK,CAAC;YAChC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7C,OAAO,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACtD,CAAC,CAAC,IAAI,yBAAU,CAAC,gBAAgB,EAAE,gBAAS,EAAE;gBAC1C,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;aACjB,CAAC;YACJ,CAAC,CAAC,IAAI,yBAAU,CAAC,CAAC,IAAA,UAAG,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,gBAAS,EAAE;gBACrD,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;IACT,CAAC;IAED,oBAAoB,CAAC,UAAsB,EAAE,WAAsB;QACjE,IAAI,eAAe,GAAG;YACpB,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,QAAQ;iBACf;gBACD;oBACE,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,SAAS;yBAChB;wBACD;4BACE,YAAY,EAAE,qBAAqB;4BACnC,IAAI,EAAE,WAAW;4BACjB,IAAI,EAAE,OAAO;yBACd;wBACD;4BACE,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,SAAS;yBAChB;qBACF;oBACD,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,YAAY,EAAE,gBAAgB;oBAC9B,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,OAAO;iBACd;aACF;YACD,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,OAAO;SACd,CAAC;QACF,IAAI,MAAM,CAAC;QACX,IAAI,MAAM,CAAC;QACX,IAAI,WAAW,EAAE;YACf,MAAM,GAAG;gBACP,eAAe;gBACf;oBACE,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,WAAW;iBAClB;aACF,CAAC;YACF,MAAM,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;SACpC;aAAM;YACL,MAAM,GAAG,CAAC,eAAe,CAAC,CAAC;YAC3B,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;SACvB;QACD,OAAO,IAAA,0BAAmB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YACpB,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAC9D;QACD,OAAO,IAAA,aAAM,EAAC;YACZ,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,IAAA,UAAG,EAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACtD,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,cAAc,CAAC,SAAU;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,sCAAgB;YACrB,OAAO,EAAE,oBAAoB;YAC7B,YAAY,EAAE,cAAc;YAC5B,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,kDAAsB;YAC3B,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,oBAAoB,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAA,gBAAS,EAAC;YAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,IAAA,UAAG,EAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/B,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,UAAU,CAAC,CAAC,CAAC;SACd,CAAC,CAAC;QACH,OAAO,CACL,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;YACrC,UAAU,CAAC,CAAC,CAAC;YACb,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAC3E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,QAAa;QACzC,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE;YAC5D,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;SACH;QACD,MAAM,qBAAqB,GACzB,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAC7C,IAAA,gBAAS,EAAC,qBAAqB,CAAC,CACjC,CAAC;QACF,MAAM,WAAW,GACf,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,IAAA,gBAAS,EAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,8BAAe;YACf,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,oBAAyB;QACpC,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,kDAAsB;YAC3B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,UAAe;QAC3B,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,kDAAsB;YAC3B,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,OAAO,IAAA,wBAAa,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA4B;QAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,MAAM,IAAI,GAAG,IAAA,8BAAoB,EAC/B;YACE,GAAG,MAAM;YACT,SAAS,EAAE,IAAI;SAChB,EACD,IAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzE,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE;YAC5D,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;SACH;QACD,MAAM,qBAAqB,GACzB,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAC7C,IAAA,gBAAS,EAAC,qBAAqB,CAAC,CACjC,CAAC;QACF,MAAM,WAAW,GACf,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,SAAS,GAAG,IAAA,aAAM,EAAC;YACvB,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACnD,WAAW;SACZ,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAtZD,kDAsZC","sourcesContent":["import {\n  getUserOperationHash,\n  type Address,\n  type Hex,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n  getChain,\n  type SignTypedDataParams,\n} from \"@alchemy/aa-core\";\nimport {\n  KernelBaseValidator,\n  ValidatorMode,\n  type KernelBaseValidatorParams,\n  type ValidatorPluginData,\n} from \"./base.js\";\nimport {\n  encodeFunctionData,\n  toBytes,\n  concat,\n  pad,\n  toHex,\n  keccak256,\n  encodeAbiParameters,\n  concatHex,\n  zeroAddress,\n  decodeFunctionData,\n  isHex,\n  getFunctionSelector,\n} from \"viem\";\nimport { SessionKeyValidatorAbi } from \"../abis/SessionKeyValidatorAbi.js\";\nimport { DUMMY_ECDSA_SIG } from \"../constants.js\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport { MerkleTree } from \"merkletreejs\";\nimport type { Operation } from \"../provider.js\";\nimport { getChainId } from \"../api/index.js\";\nimport { fixSignedData } from \"../utils.js\";\n\n// We need to be able to serialize bigint to transmit session key over\n// the network.\n// Using this trick: https://github.com/GoogleChromeLabs/jsbi/issues/30#issuecomment-1006086291\n(BigInt.prototype as any).toJSON = function () {\n  return this.toString();\n};\n\nexport interface SessionKeyValidatorParams extends KernelBaseValidatorParams {\n  sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n}\n\nexport type SessionKeyParams = Pick<\n  SessionKeyValidatorParams,\n  \"sessionKeyData\" | \"enableSignature\"\n> &\n  ValidatorPluginData & {\n    sessionPrivateKey?: Hex;\n    initCode?: Hex;\n    accountAddress?: Address;\n  };\n\nexport enum ParamCondition {\n  EQUAL = 0,\n  GREATER_THAN = 1,\n  LESS_THAN = 2,\n  GREATER_THAN_OR_EQUAL = 3,\n  LESS_THAN_OR_EQUAL = 4,\n  NOT_EQUAL = 5,\n}\n\nexport interface ParamRules {\n  offset: number;\n  condition: ParamCondition;\n  param: Hex;\n}\n\nexport interface Permission {\n  target: Address;\n  valueLimit: bigint;\n  sig: Hex;\n  rules: ParamRules[];\n  operation: Operation;\n}\n\nexport interface SessionKeyData {\n  validUntil: number;\n  validAfter: number;\n  paymaster?: Address;\n  permissions?: Permission[];\n}\n\nexport class SessionKeyValidator extends KernelBaseValidator {\n  protected sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n  merkleTree: MerkleTree;\n\n  constructor(params: SessionKeyValidatorParams) {\n    super(params);\n    this.sessionKey = params.sessionKey;\n    this.sessionKeyData = {\n      ...params.sessionKeyData,\n      paymaster: params.sessionKeyData.paymaster ?? zeroAddress,\n    };\n    this.merkleTree = this.getMerkleTree();\n    this.selector =\n      params.selector ??\n      getFunctionSelector(\"execute(address, uint256, bytes, uint8)\");\n    this.executor = params.executor ?? zeroAddress;\n    this.mode = params.mode ?? ValidatorMode.plugin;\n  }\n\n  public static async init(\n    params: SessionKeyValidatorParams\n  ): Promise<SessionKeyValidator> {\n    const chainId = await getChainId(params.projectId);\n    if (!chainId) {\n      throw new Error(\"ChainId not found\");\n    }\n    const chain = getChain(chainId);\n    const instance = new SessionKeyValidator({ ...params, chain });\n    return instance;\n  }\n\n  shouldDelegateViaFallback(): boolean {\n    return this.merkleTree.getHexRoot() === pad(\"0x00\", { size: 32 });\n  }\n\n  findMatchingPermission(callData: Hex): Permission | undefined {\n    try {\n      const { functionName, args } = decodeFunctionData({\n        abi: KernelAccountAbi,\n        data: callData,\n      });\n\n      if (functionName !== \"execute\") return undefined;\n\n      const permissionsList = this.sessionKeyData.permissions;\n      if (!permissionsList || !permissionsList.length) return undefined;\n\n      const targetToMatch = args[0].toLowerCase();\n\n      // Filter permissions by target\n      let targetPermissions = permissionsList.filter(\n        (permission) => permission.target.toLowerCase() === targetToMatch\n      );\n\n      // If no permissions match the exact target, check for generic permissions (using zero address)\n      if (!targetPermissions.length) {\n        targetPermissions = permissionsList.filter(\n          (permission) =>\n            permission.target.toLowerCase() === zeroAddress.toLowerCase()\n        );\n      }\n\n      if (!targetPermissions.length) return undefined;\n\n      const operationPermissions = this.filterByOperation(\n        targetPermissions,\n        args[3]\n      );\n\n      if (!operationPermissions.length) return undefined;\n\n      const signaturePermissions = this.filterBySignature(\n        operationPermissions,\n        args[2].slice(0, 10).toLowerCase()\n      );\n\n      const valueLimitPermissions = signaturePermissions.filter(\n        (permission) => permission.valueLimit >= args[1]\n      );\n\n      if (!valueLimitPermissions.length) return undefined;\n\n      const sortedPermissions = valueLimitPermissions.sort((a, b) => {\n        if (b.valueLimit > a.valueLimit) {\n          return 1;\n        } else if (b.valueLimit < a.valueLimit) {\n          return -1;\n        } else {\n          return 0;\n        }\n      });\n\n      return this.findPermissionByRule(sortedPermissions, args[2]);\n    } catch (error) {\n      return undefined;\n    }\n  }\n\n  private filterByOperation(\n    permissions: Permission[],\n    operation: Operation\n  ): Permission[] {\n    return permissions.filter(\n      (permission) => permission.operation === operation\n    );\n  }\n\n  private filterBySignature(\n    permissions: Permission[],\n    signature: string\n  ): Permission[] {\n    return permissions.filter(\n      (permission) => permission.sig.toLowerCase() === signature\n    );\n  }\n\n  private findPermissionByRule(\n    permissions: Permission[],\n    data: string\n  ): Permission | undefined {\n    return permissions.find((permission) => {\n      for (const rule of permission.rules) {\n        const dataParam: Hex = this.getFormattedHex(\n          \"0x\" + data.slice(10 + rule.offset * 2, 10 + rule.offset * 2 + 64)\n        );\n        const ruleParam: Hex = this.getFormattedHex(rule.param);\n\n        if (!this.evaluateRuleCondition(dataParam, ruleParam, rule.condition)) {\n          return false;\n        }\n      }\n      return true;\n    });\n  }\n\n  private getFormattedHex(value: string): Hex {\n    return pad(isHex(value) ? value : toHex(value), {\n      size: 32,\n    }).toLowerCase() as Hex;\n  }\n\n  private evaluateRuleCondition(\n    dataParam: Hex,\n    ruleParam: Hex,\n    condition: ParamCondition\n  ): boolean {\n    switch (condition) {\n      case ParamCondition.EQUAL:\n        return dataParam === ruleParam;\n      case ParamCondition.GREATER_THAN:\n        return dataParam > ruleParam;\n      case ParamCondition.LESS_THAN:\n        return dataParam < ruleParam;\n      case ParamCondition.GREATER_THAN_OR_EQUAL:\n        return dataParam >= ruleParam;\n      case ParamCondition.LESS_THAN_OR_EQUAL:\n        return dataParam <= ruleParam;\n      case ParamCondition.NOT_EQUAL:\n        return dataParam !== ruleParam;\n      default:\n        return false;\n    }\n  }\n\n  getMerkleTree(): MerkleTree {\n    const permissionPacked = this.sessionKeyData.permissions?.map(\n      (permission) => this.encodePermissionData(permission)\n    );\n\n    // Having one leaf returns empty array in getProof(). To hack it we push the leaf twice\n    // issue - https://github.com/merkletreejs/merkletreejs/issues/58\n    if (permissionPacked?.length === 1)\n      permissionPacked.push(permissionPacked[0]);\n\n    return permissionPacked && permissionPacked.length !== 0\n      ? new MerkleTree(permissionPacked, keccak256, {\n          sortPairs: true,\n          hashLeaves: true,\n        })\n      : new MerkleTree([pad(\"0x00\", { size: 32 })], keccak256, {\n          hashLeaves: false,\n        });\n  }\n\n  encodePermissionData(permission: Permission, merkleProof?: string[]): Hex {\n    let permissionParam = {\n      components: [\n        {\n          name: \"target\",\n          type: \"address\",\n        },\n        {\n          name: \"valueLimit\",\n          type: \"uint256\",\n        },\n        {\n          name: \"sig\",\n          type: \"bytes4\",\n        },\n        {\n          components: [\n            {\n              name: \"offset\",\n              type: \"uint256\",\n            },\n            {\n              internalType: \"enum ParamCondition\",\n              name: \"condition\",\n              type: \"uint8\",\n            },\n            {\n              name: \"param\",\n              type: \"bytes32\",\n            },\n          ],\n          name: \"rules\",\n          type: \"tuple[]\",\n        },\n        {\n          internalType: \"enum Operation\",\n          name: \"operation\",\n          type: \"uint8\",\n        },\n      ],\n      name: \"permission\",\n      type: \"tuple\",\n    };\n    let params;\n    let values;\n    if (merkleProof) {\n      params = [\n        permissionParam,\n        {\n          name: \"merkleProof\",\n          type: \"bytes32[]\",\n        },\n      ];\n      values = [permission, merkleProof];\n    } else {\n      params = [permissionParam];\n      values = [permission];\n    }\n    return encodeAbiParameters(params, values);\n  }\n\n  getSessionData(): SessionKeyParams {\n    if (!this.selector || !this.executor) {\n      throw Error(\"Plugin Validator data params uninitialised\");\n    }\n    return {\n      selector: this.selector,\n      executor: this.executor,\n      validUntil: this.validUntil,\n      validAfter: this.validAfter,\n      sessionKeyData: this.sessionKeyData,\n      enableSignature: this.enableSignature,\n    };\n  }\n\n  async signer(): Promise<SmartAccountSigner> {\n    return await Promise.resolve(this.sessionKey);\n  }\n\n  async getEnableData(): Promise<Hex> {\n    if (!this.merkleTree) {\n      throw Error(\"SessionKeyValidator: MerkleTree not generated\");\n    }\n    return concat([\n      await this.sessionKey.getAddress(),\n      pad(this.merkleTree.getHexRoot() as Hex, { size: 32 }),\n      pad(toHex(this.sessionKeyData.validAfter), { size: 6 }),\n      pad(toHex(this.sessionKeyData.validUntil), { size: 6 }),\n      this.sessionKeyData.paymaster!,\n    ]);\n  }\n\n  async isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    const execDetail = await this.publicClient.readContract({\n      abi: KernelAccountAbi,\n      address: kernelAccountAddress,\n      functionName: \"getExecution\",\n      args: [selector],\n    });\n    const enableData = await this.publicClient.readContract({\n      abi: SessionKeyValidatorAbi,\n      address: this.validatorAddress,\n      functionName: \"sessionData\",\n      args: [await this.sessionKey.getAddress(), kernelAccountAddress],\n    });\n    const enableDataHex = concatHex([\n      await this.sessionKey.getAddress(),\n      pad(enableData[0], { size: 4 }),\n      pad(toHex(enableData[1]), { size: 6 }),\n      pad(toHex(enableData[2]), { size: 6 }),\n      enableData[3],\n    ]);\n    return (\n      execDetail.validator.toLowerCase() ===\n        this.validatorAddress.toLowerCase() &&\n      enableData[4] &&\n      enableDataHex.toLowerCase() === (await this.getEnableData()).toLowerCase()\n    );\n  }\n\n  async getDummyUserOpSignature(callData: Hex): Promise<Hex> {\n    const matchingPermission = this.findMatchingPermission(callData);\n    if (!matchingPermission && !this.shouldDelegateViaFallback()) {\n      throw Error(\n        \"SessionKeyValidator: No matching permission found for the userOp\"\n      );\n    }\n    const encodedPermissionData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission)\n        : \"0x\";\n    const merkleProof = this.merkleTree.getHexProof(\n      keccak256(encodedPermissionData)\n    );\n    const encodedData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission, merkleProof)\n        : \"0x\";\n    return concatHex([\n      await this.sessionKey.getAddress(),\n      DUMMY_ECDSA_SIG,\n      encodedData,\n    ]);\n  }\n\n  encodeEnable(sessionKeyEnableData: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"enable\",\n      args: [sessionKeyEnableData],\n    });\n  }\n\n  encodeDisable(sessionKey: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"disable\",\n      args: [sessionKey],\n    });\n  }\n\n  async signMessage(message: string | Uint8Array): Promise<Hex> {\n    return await this.sessionKey.signMessage(message);\n  }\n\n  async signTypedData(params: SignTypedDataParams): Promise<Hex> {\n    return fixSignedData(await this.sessionKey.signTypedData(params));\n  }\n\n  async signUserOp(userOp: UserOperationRequest): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    const hash = getUserOperationHash(\n      {\n        ...userOp,\n        signature: \"0x\",\n      },\n      this.entryPointAddress,\n      BigInt(this.chain.id)\n    );\n    const formattedMessage = typeof hash === \"string\" ? toBytes(hash) : hash;\n\n    const matchingPermission = this.findMatchingPermission(userOp.callData);\n    if (!matchingPermission && !this.shouldDelegateViaFallback()) {\n      throw Error(\n        \"SessionKeyValidator: No matching permission found for the userOp\"\n      );\n    }\n    const encodedPermissionData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission)\n        : \"0x\";\n    const merkleProof = this.merkleTree.getHexProof(\n      keccak256(encodedPermissionData)\n    );\n    const encodedData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission, merkleProof)\n        : \"0x\";\n    const signature = concat([\n      await this.sessionKey.getAddress(),\n      await this.sessionKey.signMessage(formattedMessage),\n      encodedData,\n    ]);\n    return signature;\n  }\n}\n"]}

package/dist/cjs/kernel-zerodev/validator/types.d.ts

@@ -1,21 +1,27 @@
 import type { ECDSAValidator, ECDSAValidatorParams } from "./ecdsa-validator.js";
 import type { ERC165SessionKeyValidator, ERC165SessionKeyValidatorParams } from "./erc165-session-key-validator.js";
 import type { KillSwitchValidator, KillSwitchValidatorParams } from "./kill-switch-validator.js";
+import type { RecoveryValidator, RecoveryValidatorParams } from "./recovery-validator.js";
 import type { SessionKeyValidator, SessionKeyValidatorParams, ParamRules, Permission, SessionKeyData, SessionKeyParams } from "./session-key-validator.js";
-export type SupportedValidators = "ECDSA" | "KILL_SWITCH" | "ERC165_SESSION_KEY" | "SESSION_KEY";
+export type SupportedValidators = "ECDSA" | "KILL_SWITCH" | "ERC165_SESSION_KEY" | "SESSION_KEY" | "RECOVERY";
 export type ValidatorTypeMap = {
     ECDSA: ECDSAValidator;
     KILL_SWITCH: KillSwitchValidator;
     ERC165_SESSION_KEY: ERC165SessionKeyValidator;
     SESSION_KEY: SessionKeyValidator;
+    RECOVERY: RecoveryValidator;
 };
 export type ValidatorParamsMap = {
     ECDSA: ECDSAValidatorParams;
     KILL_SWITCH: KillSwitchValidatorParams;
     ERC165_SESSION_KEY: ERC165SessionKeyValidatorParams;
     SESSION_KEY: SessionKeyValidatorParams;
+    RECOVERY: RecoveryValidatorParams;
 };
 export type ValidatorMap = {
     [V in SupportedValidators]: new (params: ValidatorParamsMap[V]) => ValidatorTypeMap[V];
 };
+export type EthereumProvider = {
+    request(...args: any): Promise<any>;
+};
 export type { ParamRules, Permission, SessionKeyData, SessionKeyParams };

package/dist/cjs/kernel-zerodev/validator/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ECDSAValidator,\n  ECDSAValidatorParams,\n} from \"./ecdsa-validator.js\";\nimport type {\n  ERC165SessionKeyValidator,\n  ERC165SessionKeyValidatorParams,\n} from \"./erc165-session-key-validator.js\";\n\nimport type {\n  KillSwitchValidator,\n  KillSwitchValidatorParams,\n} from \"./kill-switch-validator.js\";\nimport type {\n  SessionKeyValidator,\n  SessionKeyValidatorParams,\n  ParamRules,\n  Permission,\n  SessionKeyData,\n  SessionKeyParams,\n} from \"./session-key-validator.js\";\n\nexport type SupportedValidators =\n  | \"ECDSA\"\n  | \"KILL_SWITCH\"\n  | \"ERC165_SESSION_KEY\"\n  | \"SESSION_KEY\";\n\nexport type ValidatorTypeMap = {\n  ECDSA: ECDSAValidator;\n  KILL_SWITCH: KillSwitchValidator;\n  ERC165_SESSION_KEY: ERC165SessionKeyValidator;\n  SESSION_KEY: SessionKeyValidator;\n};\n\nexport type ValidatorParamsMap = {\n  ECDSA: ECDSAValidatorParams;\n  KILL_SWITCH: KillSwitchValidatorParams;\n  ERC165_SESSION_KEY: ERC165SessionKeyValidatorParams;\n  SESSION_KEY: SessionKeyValidatorParams;\n};\n\nexport type ValidatorMap = {\n  [V in SupportedValidators]: new (\n    params: ValidatorParamsMap[V]\n  ) => ValidatorTypeMap[V];\n};\n\nexport type { ParamRules, Permission, SessionKeyData, SessionKeyParams };\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ECDSAValidator,\n  ECDSAValidatorParams,\n} from \"./ecdsa-validator.js\";\nimport type {\n  ERC165SessionKeyValidator,\n  ERC165SessionKeyValidatorParams,\n} from \"./erc165-session-key-validator.js\";\n\nimport type {\n  KillSwitchValidator,\n  KillSwitchValidatorParams,\n} from \"./kill-switch-validator.js\";\nimport type {\n  RecoveryValidator,\n  RecoveryValidatorParams,\n} from \"./recovery-validator.js\";\nimport type {\n  SessionKeyValidator,\n  SessionKeyValidatorParams,\n  ParamRules,\n  Permission,\n  SessionKeyData,\n  SessionKeyParams,\n} from \"./session-key-validator.js\";\n\nexport type SupportedValidators =\n  | \"ECDSA\"\n  | \"KILL_SWITCH\"\n  | \"ERC165_SESSION_KEY\"\n  | \"SESSION_KEY\"\n  | \"RECOVERY\";\n\nexport type ValidatorTypeMap = {\n  ECDSA: ECDSAValidator;\n  KILL_SWITCH: KillSwitchValidator;\n  ERC165_SESSION_KEY: ERC165SessionKeyValidator;\n  SESSION_KEY: SessionKeyValidator;\n  RECOVERY: RecoveryValidator;\n};\n\nexport type ValidatorParamsMap = {\n  ECDSA: ECDSAValidatorParams;\n  KILL_SWITCH: KillSwitchValidatorParams;\n  ERC165_SESSION_KEY: ERC165SessionKeyValidatorParams;\n  SESSION_KEY: SessionKeyValidatorParams;\n  RECOVERY: RecoveryValidatorParams;\n};\n\nexport type ValidatorMap = {\n  [V in SupportedValidators]: new (\n    params: ValidatorParamsMap[V]\n  ) => ValidatorTypeMap[V];\n};\n\nexport type EthereumProvider = { request(...args: any): Promise<any> };\n\nexport type { ParamRules, Permission, SessionKeyData, SessionKeyParams };\n"]}

package/dist/cjs/kernel-zerodev/validator-provider/base.d.ts

@@ -23,7 +23,7 @@ export declare abstract class ValidatorProvider<V extends KernelBaseValidator, P
     constructor(params: ExtendedValidatorProviderParams<P>, validator: KernelBaseValidator);
     getValidator: () => V;
     getEncodedEnableData: (enableData: Hex) => Promise<Hex>;
-    getEncodedDisableData: (disableData: Hex) => Promise<Hex>;
+    getEncodedDisableData: (disableData?: Hex) => Promise<Hex>;
     sendEnableUserOperation: (enableData: Hex) => Promise<SendUserOperationResult>;
-    sendDisableUserOperation: (disableData: Hex) => Promise<SendUserOperationResult>;
+    sendDisableUserOperation: (disableData?: Hex) => Promise<SendUserOperationResult>;
 }

package/dist/cjs/kernel-zerodev/validator-provider/base.js

@@ -53,7 +53,7 @@ class ValidatorProvider extends provider_js_1.ZeroDevProvider {
             enumerable: true,
             configurable: true,
             writable: true,
-            value: async (disableData) => {
+            value: async (disableData = "0x") => {
                 if (!(0, account_js_1.isKernelAccount)(this.account) || !this.account.validator) {
                     throw new Error("ValidatorProvider: account with validator is not set, did you call all connects first?");
                 }
@@ -79,17 +79,21 @@ class ValidatorProvider extends provider_js_1.ZeroDevProvider {
             enumerable: true,
             configurable: true,
             writable: true,
-            value: async (disableData) => {
+            value: async (disableData = "0x") => {
                 const encodedDisableData = await this.getEncodedDisableData(disableData);
                 if (!(0, account_js_1.isKernelAccount)(this.account) || !this.account.validator) {
                     throw new Error("ValidatorProvider: account with validator is not set, did you call all connects first?");
                 }
-                return await this.sendUserOperation({
+                if (!this.defaultProvider) {
+                    throw Error("Default Validator provider unintialized");
+                }
+                return await this.defaultProvider.sendUserOperation({
                     target: this.account.validator.validatorAddress,
                     data: encodedDisableData,
                 });
             }
         });
+        this.defaultProvider = params.defaultProvider;
         this.connect(() => new account_js_1.KernelSmartContractAccount({
             projectId: params.projectId,
             validator,

package/dist/cjs/kernel-zerodev/validator-provider/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator-provider/base.ts"],"names":[],"mappings":";;;AACA,gDAA6E;AAU7E,8CAIuB;AACvB,wCAA4C;AAC5C,6DAAyE;AA8BzE,MAAsB,iBAGpB,SAAQ,6BAAe;IAKvB,YACE,MAA0C,EAC1C,SAA8B;QAE9B,IAAI,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC7C,MAAM,kBAAkB,GACtB,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,CAAC;QAC3D,IACE,MAAM,CAAC,IAAI,EAAE,eAAe;YAC5B,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,MAAM,KAAK,iBAAiB;YACzD,kBAAkB,EAClB;YACA,eAAe,GAAG,SAAS,CAAC;SAC7B;QACD,KAAK,CAAC;YACJ,GAAG,MAAM,CAAC,IAAI,EAAE,cAAc;YAC9B,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,IAAI,sBAAa;YAC1D,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM;YAC3C,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,eAAe;SAChB,CAAC,CAAC;QAxBK;;;;;WAGR;QA+CF;;;;mBAAe,GAAM,EAAE;gBACrB,IAAI,CAAC,IAAA,4BAAe,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;oBAC7D,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;iBACH;gBACD,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAkB,CAAC;YACrD,CAAC;WAAC;QAEF;;;;mBAAuB,KAAK,EAAE,UAAe,EAAgB,EAAE;gBAC7D,IAAI,CAAC,IAAA,4BAAe,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;oBAC7D,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;iBACH;gBACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YAC/D,CAAC;WAAC;QAEF;;;;mBAAwB,KAAK,EAAE,WAAgB,EAAgB,EAAE;gBAC/D,IAAI,CAAC,IAAA,4BAAe,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;oBAC7D,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;iBACH;gBACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;YACjE,CAAC;WAAC;QAEF;;;;mBAA0B,KAAK,EAC7B,UAAe,EACmB,EAAE;gBACpC,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;gBACtE,IAAI,CAAC,IAAA,4BAAe,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;oBAC7D,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;iBACH;gBAED,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC;oBAClC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB;oBAC/C,IAAI,EAAE,iBAAiB;iBACxB,CAAC,CAAC;YACL,CAAC;WAAC;QAEF;;;;mBAA2B,KAAK,EAC9B,WAAgB,EACkB,EAAE;gBACpC,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;gBACzE,IAAI,CAAC,IAAA,4BAAe,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;oBAC7D,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;iBACH;gBAED,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC;oBAClC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB;oBAC/C,IAAI,EAAE,kBAAkB;iBACzB,CAAC,CAAC;YACL,CAAC;WAAC;QAlFA,IAAI,CAAC,OAAO,CACV,GAAG,EAAE,CACH,IAAI,uCAA0B,CAAC;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS;YACT,gBAAgB,EAAE,MAAM,CAAC,eAAe,EAAE,YAAY,EAAE;YACxD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,eAAe;YACf,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,UAAU,EAAE,CAAC,QAAQ,EAAE;YACtD,GAAG,MAAM,CAAC,IAAI,EAAE,aAAa;SAC9B,CAAC,CACL,CAAC;QACF,IAAI,kBAAkB,EAAE;YACtB,IAAI,eAAe,GAAG,MAAM,CAAC,IAAI,EAAE,eAAe,IAAI;gBACpD,MAAM,EAAE,qBAAqB;aAC9B,CAAC;YACF,eAAe,GAAG;gBAChB,GAAG,eAAe;gBAClB,iBAAiB,EACf,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,iBAAiB,IAAI,eAAe;aACrE,CAAC;YACF,IAAA,0CAA2B,EAAC,IAAI,EAAE,eAAe,CAAC,CAAC;SACpD;IACH,CAAC;CA4DF;AAhHD,8CAgHC","sourcesContent":["import { type Hex, type SendUserOperationResult } from \"@alchemy/aa-core\";\nimport { ZeroDevProvider, type ZeroDevProviderConfig } from \"../provider.js\";\nimport type {\n  KernelBaseValidator,\n  KernelBaseValidatorParams,\n} from \"../validator/base.js\";\nimport type {\n  PaymasterAndBundlerProviders,\n  PaymasterConfig,\n  PaymasterPolicy,\n} from \"../paymaster/types.js\";\nimport {\n  KernelSmartContractAccount,\n  type KernelSmartAccountParams,\n  isKernelAccount,\n} from \"../account.js\";\nimport { polygonMumbai } from \"viem/chains\";\nimport { withZeroDevPaymasterAndData } from \"../middleware/paymaster.js\";\nimport type { RequiredProps } from \"../types.js\";\n\nexport type ValidatorProviderParamsOpts<P extends KernelBaseValidatorParams> = {\n  paymasterConfig?: PaymasterConfig<PaymasterPolicy>;\n  providerConfig?: Partial<ZeroDevProviderConfig>;\n  accountConfig?: Omit<\n    KernelSmartAccountParams,\n    keyof ExtendedValidatorProviderParams<P>\n  >;\n  validatorConfig?: Omit<P, keyof ExtendedValidatorProviderParams<P>>;\n};\n\nexport interface ValidatorProviderParams<P extends KernelBaseValidatorParams> {\n  projectId: string;\n  bundlerProvider?: PaymasterAndBundlerProviders;\n  opts?: ValidatorProviderParamsOpts<P>;\n  usePaymaster?: boolean;\n  defaultProvider?: ValidatorProvider<\n    KernelBaseValidator,\n    KernelBaseValidatorParams\n  >;\n}\n\nexport type ExtendedValidatorProviderParams<\n  P extends KernelBaseValidatorParams\n> = ValidatorProviderParams<P> & RequiredProps<P>;\n\n// A simple facade abstraction for validator related provider operations\n// Needs to be implemented for each validator plugin\nexport abstract class ValidatorProvider<\n  V extends KernelBaseValidator,\n  P extends KernelBaseValidatorParams\n> extends ZeroDevProvider {\n  protected defaultProvider?: ValidatorProvider<\n    KernelBaseValidator,\n    KernelBaseValidatorParams\n  >;\n  constructor(\n    params: ExtendedValidatorProviderParams<P>,\n    validator: KernelBaseValidator\n  ) {\n    let bundlerProvider = params.bundlerProvider;\n    const shouldUsePaymaster =\n      params.usePaymaster === undefined || params.usePaymaster;\n    if (\n      params.opts?.paymasterConfig &&\n      params.opts?.paymasterConfig.policy === \"TOKEN_PAYMASTER\" &&\n      shouldUsePaymaster\n    ) {\n      bundlerProvider = \"STACKUP\";\n    }\n    super({\n      ...params.opts?.providerConfig,\n      chain: params.opts?.providerConfig?.chain ?? polygonMumbai,\n      rpcUrl: params.opts?.providerConfig?.rpcUrl,\n      projectId: params.projectId,\n      bundlerProvider,\n    });\n    this.connect(\n      () =>\n        new KernelSmartContractAccount({\n          projectId: params.projectId,\n          validator,\n          defaultValidator: params.defaultProvider?.getValidator(),\n          rpcClient: this.rpcClient,\n          bundlerProvider,\n          index: params.defaultProvider?.getAccount().getIndex(),\n          ...params.opts?.accountConfig,\n        })\n    );\n    if (shouldUsePaymaster) {\n      let paymasterConfig = params.opts?.paymasterConfig ?? {\n        policy: \"VERIFYING_PAYMASTER\",\n      };\n      paymasterConfig = {\n        ...paymasterConfig,\n        paymasterProvider:\n          params.opts?.paymasterConfig?.paymasterProvider ?? bundlerProvider,\n      };\n      withZeroDevPaymasterAndData(this, paymasterConfig);\n    }\n  }\n\n  getValidator = (): V => {\n    if (!isKernelAccount(this.account) || !this.account.validator) {\n      throw new Error(\n        \"ValidatorProvider: account with validator is not set, did you call all connects first?\"\n      );\n    }\n    return this.account.getValidator() as unknown as V;\n  };\n\n  getEncodedEnableData = async (enableData: Hex): Promise<Hex> => {\n    if (!isKernelAccount(this.account) || !this.account.validator) {\n      throw new Error(\n        \"ValidatorProvider: account with validator is not set, did you call all connects first?\"\n      );\n    }\n    return await this.account.validator.encodeEnable(enableData);\n  };\n\n  getEncodedDisableData = async (disableData: Hex): Promise<Hex> => {\n    if (!isKernelAccount(this.account) || !this.account.validator) {\n      throw new Error(\n        \"ValidatorProvider: account with validator is not set, did you call all connects first?\"\n      );\n    }\n    return await this.account.validator.encodeDisable(disableData);\n  };\n\n  sendEnableUserOperation = async (\n    enableData: Hex\n  ): Promise<SendUserOperationResult> => {\n    const encodedEnableData = await this.getEncodedEnableData(enableData);\n    if (!isKernelAccount(this.account) || !this.account.validator) {\n      throw new Error(\n        \"ValidatorProvider: account with validator is not set, did you call all connects first?\"\n      );\n    }\n\n    return await this.sendUserOperation({\n      target: this.account.validator.validatorAddress,\n      data: encodedEnableData,\n    });\n  };\n\n  sendDisableUserOperation = async (\n    disableData: Hex\n  ): Promise<SendUserOperationResult> => {\n    const encodedDisableData = await this.getEncodedDisableData(disableData);\n    if (!isKernelAccount(this.account) || !this.account.validator) {\n      throw new Error(\n        \"ValidatorProvider: account with validator is not set, did you call all connects first?\"\n      );\n    }\n\n    return await this.sendUserOperation({\n      target: this.account.validator.validatorAddress,\n      data: encodedDisableData,\n    });\n  };\n}\n"]}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator-provider/base.ts"],"names":[],"mappings":";;;AACA,gDAA6E;AAU7E,8CAIuB;AACvB,wCAA4C;AAC5C,6DAAyE;AA8BzE,MAAsB,iBAGpB,SAAQ,6BAAe;IAKvB,YACE,MAA0C,EAC1C,SAA8B;QAE9B,IAAI,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC7C,MAAM,kBAAkB,GACtB,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,CAAC;QAC3D,IACE,MAAM,CAAC,IAAI,EAAE,eAAe;YAC5B,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,MAAM,KAAK,iBAAiB;YACzD,kBAAkB,EAClB;YACA,eAAe,GAAG,SAAS,CAAC;SAC7B;QACD,KAAK,CAAC;YACJ,GAAG,MAAM,CAAC,IAAI,EAAE,cAAc;YAC9B,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,IAAI,sBAAa;YAC1D,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM;YAC3C,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,eAAe;SAChB,CAAC,CAAC;QAxBK;;;;;WAGR;QAgDF;;;;mBAAe,GAAM,EAAE;gBACrB,IAAI,CAAC,IAAA,4BAAe,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;oBAC7D,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;iBACH;gBACD,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAkB,CAAC;YACrD,CAAC;WAAC;QAEF;;;;mBAAuB,KAAK,EAAE,UAAe,EAAgB,EAAE;gBAC7D,IAAI,CAAC,IAAA,4BAAe,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;oBAC7D,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;iBACH;gBACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YAC/D,CAAC;WAAC;QAEF;;;;mBAAwB,KAAK,EAAE,cAAmB,IAAI,EAAgB,EAAE;gBACtE,IAAI,CAAC,IAAA,4BAAe,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;oBAC7D,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;iBACH;gBACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;YACjE,CAAC;WAAC;QAEF;;;;mBAA0B,KAAK,EAC7B,UAAe,EACmB,EAAE;gBACpC,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;gBACtE,IAAI,CAAC,IAAA,4BAAe,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;oBAC7D,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;iBACH;gBAED,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC;oBAClC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB;oBAC/C,IAAI,EAAE,iBAAiB;iBACxB,CAAC,CAAC;YACL,CAAC;WAAC;QAEF;;;;mBAA2B,KAAK,EAC9B,cAAmB,IAAI,EACW,EAAE;gBACpC,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;gBACzE,IAAI,CAAC,IAAA,4BAAe,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;oBAC7D,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;iBACH;gBACD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;oBACzB,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;iBACxD;gBAED,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC;oBAClD,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB;oBAC/C,IAAI,EAAE,kBAAkB;iBACzB,CAAC,CAAC;YACL,CAAC;WAAC;QAtFA,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC9C,IAAI,CAAC,OAAO,CACV,GAAG,EAAE,CACH,IAAI,uCAA0B,CAAC;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS;YACT,gBAAgB,EAAE,MAAM,CAAC,eAAe,EAAE,YAAY,EAAE;YACxD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,eAAe;YACf,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,UAAU,EAAE,CAAC,QAAQ,EAAE;YACtD,GAAG,MAAM,CAAC,IAAI,EAAE,aAAa;SAC9B,CAAC,CACL,CAAC;QACF,IAAI,kBAAkB,EAAE;YACtB,IAAI,eAAe,GAAG,MAAM,CAAC,IAAI,EAAE,eAAe,IAAI;gBACpD,MAAM,EAAE,qBAAqB;aAC9B,CAAC;YACF,eAAe,GAAG;gBAChB,GAAG,eAAe;gBAClB,iBAAiB,EACf,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,iBAAiB,IAAI,eAAe;aACrE,CAAC;YACF,IAAA,0CAA2B,EAAC,IAAI,EAAE,eAAe,CAAC,CAAC;SACpD;IACH,CAAC;CA+DF;AApHD,8CAoHC","sourcesContent":["import { type Hex, type SendUserOperationResult } from \"@alchemy/aa-core\";\nimport { ZeroDevProvider, type ZeroDevProviderConfig } from \"../provider.js\";\nimport type {\n  KernelBaseValidator,\n  KernelBaseValidatorParams,\n} from \"../validator/base.js\";\nimport type {\n  PaymasterAndBundlerProviders,\n  PaymasterConfig,\n  PaymasterPolicy,\n} from \"../paymaster/types.js\";\nimport {\n  KernelSmartContractAccount,\n  type KernelSmartAccountParams,\n  isKernelAccount,\n} from \"../account.js\";\nimport { polygonMumbai } from \"viem/chains\";\nimport { withZeroDevPaymasterAndData } from \"../middleware/paymaster.js\";\nimport type { RequiredProps } from \"../types.js\";\n\nexport type ValidatorProviderParamsOpts<P extends KernelBaseValidatorParams> = {\n  paymasterConfig?: PaymasterConfig<PaymasterPolicy>;\n  providerConfig?: Partial<ZeroDevProviderConfig>;\n  accountConfig?: Omit<\n    KernelSmartAccountParams,\n    keyof ExtendedValidatorProviderParams<P>\n  >;\n  validatorConfig?: Omit<P, keyof ExtendedValidatorProviderParams<P>>;\n};\n\nexport interface ValidatorProviderParams<P extends KernelBaseValidatorParams> {\n  projectId: string;\n  bundlerProvider?: PaymasterAndBundlerProviders;\n  opts?: ValidatorProviderParamsOpts<P>;\n  usePaymaster?: boolean;\n  defaultProvider?: ValidatorProvider<\n    KernelBaseValidator,\n    KernelBaseValidatorParams\n  >;\n}\n\nexport type ExtendedValidatorProviderParams<\n  P extends KernelBaseValidatorParams\n> = ValidatorProviderParams<P> & RequiredProps<P>;\n\n// A simple facade abstraction for validator related provider operations\n// Needs to be implemented for each validator plugin\nexport abstract class ValidatorProvider<\n  V extends KernelBaseValidator,\n  P extends KernelBaseValidatorParams\n> extends ZeroDevProvider {\n  protected defaultProvider?: ValidatorProvider<\n    KernelBaseValidator,\n    KernelBaseValidatorParams\n  >;\n  constructor(\n    params: ExtendedValidatorProviderParams<P>,\n    validator: KernelBaseValidator\n  ) {\n    let bundlerProvider = params.bundlerProvider;\n    const shouldUsePaymaster =\n      params.usePaymaster === undefined || params.usePaymaster;\n    if (\n      params.opts?.paymasterConfig &&\n      params.opts?.paymasterConfig.policy === \"TOKEN_PAYMASTER\" &&\n      shouldUsePaymaster\n    ) {\n      bundlerProvider = \"STACKUP\";\n    }\n    super({\n      ...params.opts?.providerConfig,\n      chain: params.opts?.providerConfig?.chain ?? polygonMumbai,\n      rpcUrl: params.opts?.providerConfig?.rpcUrl,\n      projectId: params.projectId,\n      bundlerProvider,\n    });\n    this.defaultProvider = params.defaultProvider;\n    this.connect(\n      () =>\n        new KernelSmartContractAccount({\n          projectId: params.projectId,\n          validator,\n          defaultValidator: params.defaultProvider?.getValidator(),\n          rpcClient: this.rpcClient,\n          bundlerProvider,\n          index: params.defaultProvider?.getAccount().getIndex(),\n          ...params.opts?.accountConfig,\n        })\n    );\n    if (shouldUsePaymaster) {\n      let paymasterConfig = params.opts?.paymasterConfig ?? {\n        policy: \"VERIFYING_PAYMASTER\",\n      };\n      paymasterConfig = {\n        ...paymasterConfig,\n        paymasterProvider:\n          params.opts?.paymasterConfig?.paymasterProvider ?? bundlerProvider,\n      };\n      withZeroDevPaymasterAndData(this, paymasterConfig);\n    }\n  }\n\n  getValidator = (): V => {\n    if (!isKernelAccount(this.account) || !this.account.validator) {\n      throw new Error(\n        \"ValidatorProvider: account with validator is not set, did you call all connects first?\"\n      );\n    }\n    return this.account.getValidator() as unknown as V;\n  };\n\n  getEncodedEnableData = async (enableData: Hex): Promise<Hex> => {\n    if (!isKernelAccount(this.account) || !this.account.validator) {\n      throw new Error(\n        \"ValidatorProvider: account with validator is not set, did you call all connects first?\"\n      );\n    }\n    return await this.account.validator.encodeEnable(enableData);\n  };\n\n  getEncodedDisableData = async (disableData: Hex = \"0x\"): Promise<Hex> => {\n    if (!isKernelAccount(this.account) || !this.account.validator) {\n      throw new Error(\n        \"ValidatorProvider: account with validator is not set, did you call all connects first?\"\n      );\n    }\n    return await this.account.validator.encodeDisable(disableData);\n  };\n\n  sendEnableUserOperation = async (\n    enableData: Hex\n  ): Promise<SendUserOperationResult> => {\n    const encodedEnableData = await this.getEncodedEnableData(enableData);\n    if (!isKernelAccount(this.account) || !this.account.validator) {\n      throw new Error(\n        \"ValidatorProvider: account with validator is not set, did you call all connects first?\"\n      );\n    }\n\n    return await this.sendUserOperation({\n      target: this.account.validator.validatorAddress,\n      data: encodedEnableData,\n    });\n  };\n\n  sendDisableUserOperation = async (\n    disableData: Hex = \"0x\"\n  ): Promise<SendUserOperationResult> => {\n    const encodedDisableData = await this.getEncodedDisableData(disableData);\n    if (!isKernelAccount(this.account) || !this.account.validator) {\n      throw new Error(\n        \"ValidatorProvider: account with validator is not set, did you call all connects first?\"\n      );\n    }\n    if (!this.defaultProvider) {\n      throw Error(\"Default Validator provider unintialized\");\n    }\n\n    return await this.defaultProvider.sendUserOperation({\n      target: this.account.validator.validatorAddress,\n      data: encodedDisableData,\n    });\n  };\n}\n"]}