@zerodev/sdk 4.0.16 → 4.0.18

package/dist/esm/kernel-zerodev/validator/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGjE,MAAM,CAAC,MAAM,UAAU,GAAiB;IACtC,KAAK,EAAE,cAAc;IACrB,WAAW,EAAE,mBAAmB;IAChC,kBAAkB,EAAE,yBAAyB;IAC7C,WAAW,EAAE,mBAAmB;CACjC,CAAC;AAEF,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,mBAAmB,GACpB,CAAC","sourcesContent":["import { ECDSAValidator } from \"./ecdsa-validator.js\";\nimport { ERC165SessionKeyValidator } from \"./erc165-session-key-validator.js\";\nimport { KillSwitchValidator } from \"./kill-switch-validator.js\";\nimport { SessionKeyValidator } from \"./session-key-validator.js\";\nimport type { ValidatorMap } from \"./types.js\";\n\nexport const Validators: ValidatorMap = {\n  ECDSA: ECDSAValidator,\n  KILL_SWITCH: KillSwitchValidator,\n  ERC165_SESSION_KEY: ERC165SessionKeyValidator,\n  SESSION_KEY: SessionKeyValidator,\n};\n\nexport {\n  ECDSAValidator,\n  KillSwitchValidator,\n  ERC165SessionKeyValidator,\n  SessionKeyValidator,\n};\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGjE,MAAM,CAAC,MAAM,UAAU,GAAiB;IACtC,KAAK,EAAE,cAAc;IACrB,WAAW,EAAE,mBAAmB;IAChC,kBAAkB,EAAE,yBAAyB;IAC7C,WAAW,EAAE,mBAAmB;IAChC,QAAQ,EAAE,iBAAiB;CAC5B,CAAC;AAEF,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,GAClB,CAAC","sourcesContent":["import { ECDSAValidator } from \"./ecdsa-validator.js\";\nimport { ERC165SessionKeyValidator } from \"./erc165-session-key-validator.js\";\nimport { KillSwitchValidator } from \"./kill-switch-validator.js\";\nimport { RecoveryValidator } from \"./recovery-validator.js\";\nimport { SessionKeyValidator } from \"./session-key-validator.js\";\nimport type { ValidatorMap } from \"./types.js\";\n\nexport const Validators: ValidatorMap = {\n  ECDSA: ECDSAValidator,\n  KILL_SWITCH: KillSwitchValidator,\n  ERC165_SESSION_KEY: ERC165SessionKeyValidator,\n  SESSION_KEY: SessionKeyValidator,\n  RECOVERY: RecoveryValidator,\n};\n\nexport {\n  ECDSAValidator,\n  KillSwitchValidator,\n  ERC165SessionKeyValidator,\n  SessionKeyValidator,\n  RecoveryValidator,\n};\n"]}

package/dist/esm/kernel-zerodev/validator/recovery-validator.d.ts

@@ -0,0 +1,52 @@
+import { type Address, type Hex, type SmartAccountSigner, type UserOperationRequest, type SignTypedDataParams } from "@alchemy/aa-core";
+import { KernelBaseValidator, type KernelBaseValidatorParams } from "./base.js";
+import { type LocalAccount, type WalletClient, type Transport, type Chain, type Account } from "viem";
+import type { EthereumProvider } from "./types.js";
+interface WeightedGuardians {
+    [guardian: Address]: number;
+}
+export interface RecoveryValidatorParams extends KernelBaseValidatorParams {
+    guardians?: WeightedGuardians;
+    threshold?: number;
+    delaySeconds?: number;
+    accountSigner?: SmartAccountSigner;
+    guardianAccountOrProvider?: LocalAccount<string> | EthereumProvider;
+    walletClient?: WalletClient<Transport, Chain>;
+    signatures?: Hex;
+}
+export type RecoveryConfig = Required<Pick<RecoveryValidatorParams, "guardians" | "threshold" | "delaySeconds">>;
+export declare function isLocalAccount(account: any): account is LocalAccount<string>;
+export declare function isEthereumProvider(provider: any): provider is EthereumProvider;
+type WalletClientAccountType<T> = T extends LocalAccount<string> ? Account : T extends EthereumProvider ? undefined : never;
+export declare const recoverySelector: `0x${string}`;
+export declare class RecoveryValidator extends KernelBaseValidator {
+    protected guardians?: WeightedGuardians;
+    protected threshold?: number;
+    protected delaySeconds: number;
+    protected accountSigner?: SmartAccountSigner;
+    protected guardianAccountOrProvider?: LocalAccount<string> | EthereumProvider;
+    protected signatures?: Hex;
+    walletClient?: WalletClient<Transport, Chain, WalletClientAccountType<typeof this.guardianAccountOrProvider>>;
+    constructor(params: RecoveryValidatorParams);
+    static init(params: RecoveryValidatorParams): Promise<RecoveryValidator>;
+    getNonceKey(): bigint;
+    setRecoverySignatures(signatures: Hex): void;
+    getRecoverySignatures(): Hex | undefined;
+    getRecoveryConfig(): RecoveryConfig;
+    signer(): Promise<SmartAccountSigner>;
+    getEnableData(): Promise<Hex>;
+    encodeEnable(recoveryData: Hex): Hex;
+    encodeDisable(disableData?: Hex): Hex;
+    encodeApprove(callDataAndNonceHash: Hex, kernelAccountAddress: Address): Hex;
+    encodeApproveWithSig(callDataAndNonceHash: Hex, kernelAccountAddress: Address, sigs: Hex): Hex;
+    encodeVeto(callDataAndNonceHash: Hex): Hex;
+    encodeRecoveryAction(enableData: Hex, defaultValidatorAddress: Address): Hex;
+    isPluginEnabled(kernelAccountAddress: Address, selector: Hex): Promise<boolean>;
+    isGuardiansEnabled(kernelAccountAddress: Address): Promise<boolean>;
+    getDummyUserOpSignature(): Promise<Hex>;
+    signMessage(message: string | Uint8Array): Promise<Hex>;
+    signTypedData(params: SignTypedDataParams): Promise<Hex>;
+    signRecoveryHash(recoveryHash: Hex): Promise<Hex>;
+    signUserOp(_userOp: UserOperationRequest): Promise<Hex>;
+}
+export {};

package/dist/esm/kernel-zerodev/validator/recovery-validator.js

@@ -0,0 +1,292 @@
+import { getChain, } from "@alchemy/aa-core";
+import { KernelBaseValidator, ValidatorMode, } from "./base.js";
+import { concatHex, encodeAbiParameters, encodeFunctionData, getContract, parseAbiParameters, createWalletClient, http, custom, publicActions, getFunctionSelector, } from "viem";
+import { WeightedValidatorAbi } from "../abis/WeightedValidatorAbi.js";
+import { getChainId } from "../api/index.js";
+import { CHAIN_ID_TO_NODE, DUMMY_ECDSA_SIG, RECOVERY_ACTION, } from "../constants.js";
+import { KernelAccountAbi } from "../abis/KernelAccountAbi.js";
+import { fixSignedData } from "../utils.js";
+import { polygonMumbai } from "viem/chains";
+import { RecoveryActionAbi } from "../abis/RecoveryActionAbi.js";
+export function isLocalAccount(account) {
+    return account && account.signTransaction !== undefined;
+}
+export function isEthereumProvider(provider) {
+    return provider && provider.request !== undefined;
+}
+export const recoverySelector = getFunctionSelector("doRecovery(address, bytes)");
+export class RecoveryValidator extends KernelBaseValidator {
+    constructor(params) {
+        super(params);
+        Object.defineProperty(this, "guardians", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "threshold", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "delaySeconds", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "accountSigner", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "guardianAccountOrProvider", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "signatures", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "walletClient", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        this.guardians = params.guardians;
+        this.threshold = params.threshold;
+        this.delaySeconds = params.delaySeconds ?? 0;
+        this.accountSigner = params.accountSigner;
+        this.mode = params.mode ?? ValidatorMode.plugin;
+        this.guardianAccountOrProvider = params.guardianAccountOrProvider;
+        this.signatures = params.signatures;
+        this.validAfter = params.validAfter ?? 0;
+        this.validUntil = params.validUntil ?? 0;
+        this.executor = params.executor ?? RECOVERY_ACTION;
+        this.selector = params.selector ?? recoverySelector;
+        if (isLocalAccount(params.guardianAccountOrProvider)) {
+            this.walletClient = createWalletClient({
+                account: params.guardianAccountOrProvider,
+                chain: this.chain ?? polygonMumbai,
+                transport: http(CHAIN_ID_TO_NODE[this.chain?.id ?? polygonMumbai.id]),
+            }).extend(publicActions);
+        }
+        else if (isEthereumProvider(params.guardianAccountOrProvider)) {
+            this.walletClient = createWalletClient({
+                chain: this.chain ?? polygonMumbai,
+                transport: custom(params.guardianAccountOrProvider),
+            }).extend(publicActions);
+        }
+        else if (params.walletClient) {
+            this.walletClient = params.walletClient.extend(publicActions);
+        }
+        else if (params.guardianAccountOrProvider) {
+            throw Error("Incorrect guardianAccountOrProvider type");
+        }
+    }
+    static async init(params) {
+        const chainId = await getChainId(params.projectId);
+        if (!chainId) {
+            throw new Error("ChainId not found");
+        }
+        const chain = getChain(chainId);
+        const instance = new RecoveryValidator({ ...params, chain });
+        return instance;
+    }
+    getNonceKey() {
+        return BigInt(this.validatorAddress);
+    }
+    setRecoverySignatures(signatures) {
+        this.signatures = signatures;
+    }
+    getRecoverySignatures() {
+        return this.signatures;
+    }
+    getRecoveryConfig() {
+        if (this.guardians === undefined ||
+            !this.threshold ||
+            Object.entries(this.guardians).length !== this.threshold) {
+            throw Error("Recovery config unintialised");
+        }
+        return {
+            guardians: this.guardians,
+            threshold: this.threshold,
+            delaySeconds: this.delaySeconds,
+        };
+    }
+    async signer() {
+        if (!this.accountSigner) {
+            throw Error("AccountSigner not set");
+        }
+        return await Promise.resolve(this.accountSigner);
+    }
+    async getEnableData() {
+        if (this.guardians === undefined ||
+            !this.threshold ||
+            Object.entries(this.guardians).length !== this.threshold) {
+            throw Error("Recovery config unintialised");
+        }
+        return encodeAbiParameters(parseAbiParameters("address[] guardians, uint24[] weights, uint24 threshold, uint48 delay"), [
+            Object.keys(this.guardians),
+            Object.values(this.guardians),
+            this.threshold,
+            this.delaySeconds,
+        ]);
+    }
+    encodeEnable(recoveryData) {
+        return encodeFunctionData({
+            abi: WeightedValidatorAbi,
+            functionName: "enable",
+            args: [recoveryData],
+        });
+    }
+    encodeDisable(disableData = "0x") {
+        return encodeFunctionData({
+            abi: WeightedValidatorAbi,
+            functionName: "disable",
+            args: [disableData],
+        });
+    }
+    encodeApprove(callDataAndNonceHash, kernelAccountAddress) {
+        return encodeFunctionData({
+            abi: WeightedValidatorAbi,
+            functionName: "approve",
+            args: [callDataAndNonceHash, kernelAccountAddress],
+        });
+    }
+    encodeApproveWithSig(callDataAndNonceHash, kernelAccountAddress, sigs) {
+        return encodeFunctionData({
+            abi: WeightedValidatorAbi,
+            functionName: "approveWithSig",
+            args: [callDataAndNonceHash, kernelAccountAddress, sigs],
+        });
+    }
+    encodeVeto(callDataAndNonceHash) {
+        return encodeFunctionData({
+            abi: WeightedValidatorAbi,
+            functionName: "veto",
+            args: [callDataAndNonceHash],
+        });
+    }
+    encodeRecoveryAction(enableData, defaultValidatorAddress) {
+        return encodeFunctionData({
+            abi: RecoveryActionAbi,
+            functionName: "doRecovery",
+            args: [defaultValidatorAddress, enableData],
+        });
+    }
+    async isPluginEnabled(kernelAccountAddress, selector) {
+        if (this.guardians === undefined ||
+            !this.threshold ||
+            Object.entries(this.guardians).length !== this.threshold) {
+            throw Error("Recovery config unintialised");
+        }
+        if (!this.publicClient) {
+            throw new Error("Validator uninitialized: PublicClient missing");
+        }
+        try {
+            const kernel = getContract({
+                abi: KernelAccountAbi,
+                address: kernelAccountAddress,
+                publicClient: this.publicClient,
+            });
+            const execDetail = await kernel.read.getExecution([selector]);
+            const enableData = await this.publicClient.readContract({
+                abi: WeightedValidatorAbi,
+                address: this.validatorAddress,
+                functionName: "weightedStorage",
+                args: [kernelAccountAddress],
+            });
+            return (execDetail.validator.toLowerCase() ===
+                this.validatorAddress.toLowerCase() &&
+                enableData[0] ===
+                    Object.values(this.guardians).reduce((a, c) => a + c, 0) &&
+                enableData[1] === this.threshold &&
+                enableData[2] === this.delaySeconds &&
+                this.isGuardiansEnabled(kernelAccountAddress));
+        }
+        catch (error) {
+            return false;
+        }
+    }
+    async isGuardiansEnabled(kernelAccountAddress) {
+        if (this.guardians === undefined ||
+            !this.threshold ||
+            Object.entries(this.guardians).length !== this.threshold) {
+            throw Error("Recovery config unintialised");
+        }
+        const weightedValidator = getContract({
+            abi: WeightedValidatorAbi,
+            address: this.validatorAddress,
+            publicClient: this.publicClient,
+        });
+        for (const [addr, weight] of Object.entries(this.guardians)) {
+            const result = await weightedValidator.read.guardian([
+                addr,
+                kernelAccountAddress,
+            ]);
+            if (result[0] !== weight) {
+                return false;
+            }
+        }
+        return true;
+    }
+    async getDummyUserOpSignature() {
+        let dummySignature = "0x";
+        if (this.signatures) {
+            const totalSigs = this.signatures.substring(2).length / 130;
+            for (let i = 0; i < totalSigs; i++) {
+                dummySignature = concatHex([dummySignature, DUMMY_ECDSA_SIG]);
+            }
+            return this.signatures;
+        }
+        return DUMMY_ECDSA_SIG;
+    }
+    async signMessage(message) {
+        if (!this.accountSigner) {
+            throw Error("AccountSigner not set");
+        }
+        return await this.accountSigner.signMessage(message);
+    }
+    async signTypedData(params) {
+        if (!this.accountSigner) {
+            throw Error("AccountSigner not set");
+        }
+        return fixSignedData(await this.accountSigner.signTypedData(params));
+    }
+    async signRecoveryHash(recoveryHash) {
+        if (!this.chain) {
+            throw new Error("Validator uninitialized");
+        }
+        const signer = await this.signer();
+        return await signer.signTypedData({
+            domain: {
+                name: "WeightedECDSAValidator",
+                version: "1",
+                chainId: this.chain.id,
+                verifyingContract: this.validatorAddress,
+            },
+            types: {
+                Approve: [{ name: "callDataAndNonceHash", type: "bytes32" }],
+            },
+            message: {
+                callDataAndNonceHash: recoveryHash,
+            },
+            primaryType: "Approve",
+        });
+    }
+    async signUserOp(_userOp) {
+        if (!this.chain) {
+            throw new Error("Validator uninitialized");
+        }
+        return this.signatures ?? DUMMY_ECDSA_SIG;
+    }
+}
+//# sourceMappingURL=recovery-validator.js.map

package/dist/esm/kernel-zerodev/validator/recovery-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-validator.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/recovery-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,GAMT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,EACnB,aAAa,GAEd,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAElB,kBAAkB,EAElB,IAAI,EACJ,MAAM,EAIN,aAAa,EACb,mBAAmB,GACpB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAmBjE,MAAM,UAAU,cAAc,CAAC,OAAY;IACzC,OAAO,OAAO,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAa;IAEb,OAAO,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC;AACpD,CAAC;AAQD,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CACjD,4BAA4B,CAC7B,CAAC;AAEF,MAAM,OAAO,iBAAkB,SAAQ,mBAAmB;IAaxD,YAAY,MAA+B;QACzC,KAAK,CAAC,MAAM,CAAC,CAAC;QAbN;;;;;WAA8B;QAC9B;;;;;WAAmB;QACnB;;;;;WAAqB;QACrB;;;;;WAAmC;QACnC;;;;;WAAoE;QACpE;;;;;WAAiB;QAC3B;;;;;WAIE;QAIA,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC;QAChD,IAAI,CAAC,yBAAyB,GAAG,MAAM,CAAC,yBAAyB,CAAC;QAClE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,eAAe,CAAC;QACnD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,gBAAgB,CAAC;QACpD,IAAI,cAAc,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE;YACpD,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC;gBACrC,OAAO,EAAE,MAAM,CAAC,yBAAyB;gBACzC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,aAAa;gBAClC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;aACtE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SAC1B;aAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE;YAC/D,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC;gBACrC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,aAAa;gBAClC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC;aACpD,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SAC1B;aAAM,IAAI,MAAM,CAAC,YAAY,EAAE;YAC9B,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SAC/D;aAAM,IAAI,MAAM,CAAC,yBAAyB,EAAE;YAC3C,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;SACzD;IACH,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,IAAI,CACtB,MAA+B;QAE/B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;SACtC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,WAAW;QACT,OAAO,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvC,CAAC;IAED,qBAAqB,CAAC,UAAe;QACnC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,qBAAqB;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,iBAAiB;QACf,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,IAAI,CAAC,SAAS;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,EACxD;YACA,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;SAC7C;QACD,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACvB,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;SACtC;QACD,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,IAAI,CAAC,SAAS;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,EACxD;YACA,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;SAC7C;QACD,OAAO,mBAAmB,CACxB,kBAAkB,CAChB,uEAAuE,CACxE,EACD;YACE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAc;YACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAC7B,IAAI,CAAC,SAAS;YACd,IAAI,CAAC,YAAY;SAClB,CACF,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,YAAiB;QAC5B,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,cAAmB,IAAI;QACnC,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,oBAAyB,EAAE,oBAA6B;QACpE,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAClB,oBAAyB,EACzB,oBAA6B,EAC7B,IAAS;QAET,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,gBAAgB;YAC9B,IAAI,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,IAAI,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,oBAAyB;QAClC,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,MAAM;YACpB,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAAC,UAAe,EAAE,uBAAgC;QACpE,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,iBAAiB;YACtB,YAAY,EAAE,YAAY;YAC1B,IAAI,EAAE,CAAC,uBAAuB,EAAE,UAAU,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,oBAA6B,EAC7B,QAAa;QAEb,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,IAAI,CAAC,SAAS;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,EACxD;YACA,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;SAC7C;QACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,IAAI;YACF,MAAM,MAAM,GAAG,WAAW,CAAC;gBACzB,GAAG,EAAE,gBAAgB;gBACrB,OAAO,EAAE,oBAAoB;gBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;gBACtD,GAAG,EAAE,oBAAoB;gBACzB,OAAO,EAAE,IAAI,CAAC,gBAAgB;gBAC9B,YAAY,EAAE,iBAAiB;gBAC/B,IAAI,EAAE,CAAC,oBAAoB,CAAC;aAC7B,CAAC,CAAC;YAEH,OAAO,CACL,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;gBAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;gBACrC,UAAU,CAAC,CAAC,CAAC;oBACX,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1D,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS;gBAChC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,YAAY;gBACnC,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAC9C,CAAC;SACH;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,KAAK,CAAC;SACd;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,oBAA6B;QACpD,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,IAAI,CAAC,SAAS;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,EACxD;YACA,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;SAC7C;QACD,MAAM,iBAAiB,GAAG,WAAW,CAAC;YACpC,GAAG,EAAE,oBAAoB;YACzB,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;YAC3D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACnD,IAAe;gBACf,oBAAoB;aACrB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE;gBACxB,OAAO,KAAK,CAAC;aACd;SACF;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC3B,IAAI,cAAc,GAAQ,IAAI,CAAC;QAC/B,IAAI,IAAI,CAAC,UAAU,EAAE;YACnB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;YAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE;gBAClC,cAAc,GAAG,SAAS,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;aAC/D;YAED,OAAO,IAAI,CAAC,UAAU,CAAC;SACxB;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACvB,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;SACtC;QACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACvB,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;SACtC;QACD,OAAO,aAAa,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,YAAiB;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,OAAO,MAAM,MAAM,CAAC,aAAa,CAAC;YAChC,MAAM,EAAE;gBACN,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;gBACtB,iBAAiB,EAAE,IAAI,CAAC,gBAAgB;aACzC;YACD,KAAK,EAAE;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;aAC7D;YACD,OAAO,EAAE;gBACP,oBAAoB,EAAE,YAAY;aACnC;YACD,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAA6B;QAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,OAAO,IAAI,CAAC,UAAU,IAAI,eAAe,CAAC;IAC5C,CAAC;CACF","sourcesContent":["import {\n  getChain,\n  type Address,\n  type Hex,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n  type SignTypedDataParams,\n} from \"@alchemy/aa-core\";\nimport {\n  KernelBaseValidator,\n  ValidatorMode,\n  type KernelBaseValidatorParams,\n} from \"./base.js\";\nimport {\n  concatHex,\n  encodeAbiParameters,\n  encodeFunctionData,\n  getContract,\n  parseAbiParameters,\n  type LocalAccount,\n  createWalletClient,\n  type WalletClient,\n  http,\n  custom,\n  type Transport,\n  type Chain,\n  type Account,\n  publicActions,\n  getFunctionSelector,\n} from \"viem\";\nimport { WeightedValidatorAbi } from \"../abis/WeightedValidatorAbi.js\";\nimport { getChainId } from \"../api/index.js\";\nimport {\n  CHAIN_ID_TO_NODE,\n  DUMMY_ECDSA_SIG,\n  RECOVERY_ACTION,\n} from \"../constants.js\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport { fixSignedData } from \"../utils.js\";\nimport type { EthereumProvider } from \"./types.js\";\nimport { polygonMumbai } from \"viem/chains\";\nimport { RecoveryActionAbi } from \"../abis/RecoveryActionAbi.js\";\n\ninterface WeightedGuardians {\n  [guardian: Address]: number;\n}\nexport interface RecoveryValidatorParams extends KernelBaseValidatorParams {\n  guardians?: WeightedGuardians;\n  threshold?: number;\n  delaySeconds?: number;\n  accountSigner?: SmartAccountSigner;\n  guardianAccountOrProvider?: LocalAccount<string> | EthereumProvider;\n  walletClient?: WalletClient<Transport, Chain>;\n  signatures?: Hex;\n}\n\nexport type RecoveryConfig = Required<\n  Pick<RecoveryValidatorParams, \"guardians\" | \"threshold\" | \"delaySeconds\">\n>;\n\nexport function isLocalAccount(account: any): account is LocalAccount<string> {\n  return account && account.signTransaction !== undefined;\n}\n\nexport function isEthereumProvider(\n  provider: any\n): provider is EthereumProvider {\n  return provider && provider.request !== undefined;\n}\n\ntype WalletClientAccountType<T> = T extends LocalAccount<string>\n  ? Account\n  : T extends EthereumProvider\n  ? undefined\n  : never;\n\nexport const recoverySelector = getFunctionSelector(\n  \"doRecovery(address, bytes)\"\n);\n\nexport class RecoveryValidator extends KernelBaseValidator {\n  protected guardians?: WeightedGuardians;\n  protected threshold?: number;\n  protected delaySeconds: number;\n  protected accountSigner?: SmartAccountSigner;\n  protected guardianAccountOrProvider?: LocalAccount<string> | EthereumProvider;\n  protected signatures?: Hex;\n  walletClient?: WalletClient<\n    Transport,\n    Chain,\n    WalletClientAccountType<typeof this.guardianAccountOrProvider>\n  >;\n\n  constructor(params: RecoveryValidatorParams) {\n    super(params);\n    this.guardians = params.guardians;\n    this.threshold = params.threshold;\n    this.delaySeconds = params.delaySeconds ?? 0;\n    this.accountSigner = params.accountSigner;\n    this.mode = params.mode ?? ValidatorMode.plugin;\n    this.guardianAccountOrProvider = params.guardianAccountOrProvider;\n    this.signatures = params.signatures;\n    this.validAfter = params.validAfter ?? 0;\n    this.validUntil = params.validUntil ?? 0;\n    this.executor = params.executor ?? RECOVERY_ACTION;\n    this.selector = params.selector ?? recoverySelector;\n    if (isLocalAccount(params.guardianAccountOrProvider)) {\n      this.walletClient = createWalletClient({\n        account: params.guardianAccountOrProvider,\n        chain: this.chain ?? polygonMumbai,\n        transport: http(CHAIN_ID_TO_NODE[this.chain?.id ?? polygonMumbai.id]),\n      }).extend(publicActions);\n    } else if (isEthereumProvider(params.guardianAccountOrProvider)) {\n      this.walletClient = createWalletClient({\n        chain: this.chain ?? polygonMumbai,\n        transport: custom(params.guardianAccountOrProvider),\n      }).extend(publicActions);\n    } else if (params.walletClient) {\n      this.walletClient = params.walletClient.extend(publicActions);\n    } else if (params.guardianAccountOrProvider) {\n      throw Error(\"Incorrect guardianAccountOrProvider type\");\n    }\n  }\n\n  public static async init(\n    params: RecoveryValidatorParams\n  ): Promise<RecoveryValidator> {\n    const chainId = await getChainId(params.projectId);\n    if (!chainId) {\n      throw new Error(\"ChainId not found\");\n    }\n    const chain = getChain(chainId);\n    const instance = new RecoveryValidator({ ...params, chain });\n    return instance;\n  }\n\n  getNonceKey(): bigint {\n    return BigInt(this.validatorAddress);\n  }\n\n  setRecoverySignatures(signatures: Hex) {\n    this.signatures = signatures;\n  }\n\n  getRecoverySignatures(): Hex | undefined {\n    return this.signatures;\n  }\n\n  getRecoveryConfig(): RecoveryConfig {\n    if (\n      this.guardians === undefined ||\n      !this.threshold ||\n      Object.entries(this.guardians).length !== this.threshold\n    ) {\n      throw Error(\"Recovery config unintialised\");\n    }\n    return {\n      guardians: this.guardians,\n      threshold: this.threshold,\n      delaySeconds: this.delaySeconds,\n    };\n  }\n\n  async signer(): Promise<SmartAccountSigner> {\n    if (!this.accountSigner) {\n      throw Error(\"AccountSigner not set\");\n    }\n    return await Promise.resolve(this.accountSigner);\n  }\n\n  async getEnableData(): Promise<Hex> {\n    if (\n      this.guardians === undefined ||\n      !this.threshold ||\n      Object.entries(this.guardians).length !== this.threshold\n    ) {\n      throw Error(\"Recovery config unintialised\");\n    }\n    return encodeAbiParameters(\n      parseAbiParameters(\n        \"address[] guardians, uint24[] weights, uint24 threshold, uint48 delay\"\n      ),\n      [\n        Object.keys(this.guardians) as Address[],\n        Object.values(this.guardians),\n        this.threshold,\n        this.delaySeconds,\n      ]\n    );\n  }\n\n  encodeEnable(recoveryData: Hex): Hex {\n    return encodeFunctionData({\n      abi: WeightedValidatorAbi,\n      functionName: \"enable\",\n      args: [recoveryData],\n    });\n  }\n\n  encodeDisable(disableData: Hex = \"0x\"): Hex {\n    return encodeFunctionData({\n      abi: WeightedValidatorAbi,\n      functionName: \"disable\",\n      args: [disableData],\n    });\n  }\n\n  encodeApprove(callDataAndNonceHash: Hex, kernelAccountAddress: Address): Hex {\n    return encodeFunctionData({\n      abi: WeightedValidatorAbi,\n      functionName: \"approve\",\n      args: [callDataAndNonceHash, kernelAccountAddress],\n    });\n  }\n\n  encodeApproveWithSig(\n    callDataAndNonceHash: Hex,\n    kernelAccountAddress: Address,\n    sigs: Hex\n  ): Hex {\n    return encodeFunctionData({\n      abi: WeightedValidatorAbi,\n      functionName: \"approveWithSig\",\n      args: [callDataAndNonceHash, kernelAccountAddress, sigs],\n    });\n  }\n\n  encodeVeto(callDataAndNonceHash: Hex): Hex {\n    return encodeFunctionData({\n      abi: WeightedValidatorAbi,\n      functionName: \"veto\",\n      args: [callDataAndNonceHash],\n    });\n  }\n\n  encodeRecoveryAction(enableData: Hex, defaultValidatorAddress: Address): Hex {\n    return encodeFunctionData({\n      abi: RecoveryActionAbi,\n      functionName: \"doRecovery\",\n      args: [defaultValidatorAddress, enableData],\n    });\n  }\n\n  async isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean> {\n    if (\n      this.guardians === undefined ||\n      !this.threshold ||\n      Object.entries(this.guardians).length !== this.threshold\n    ) {\n      throw Error(\"Recovery config unintialised\");\n    }\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    try {\n      const kernel = getContract({\n        abi: KernelAccountAbi,\n        address: kernelAccountAddress,\n        publicClient: this.publicClient,\n      });\n      const execDetail = await kernel.read.getExecution([selector]);\n      const enableData = await this.publicClient.readContract({\n        abi: WeightedValidatorAbi,\n        address: this.validatorAddress,\n        functionName: \"weightedStorage\",\n        args: [kernelAccountAddress],\n      });\n\n      return (\n        execDetail.validator.toLowerCase() ===\n          this.validatorAddress.toLowerCase() &&\n        enableData[0] ===\n          Object.values(this.guardians).reduce((a, c) => a + c, 0) &&\n        enableData[1] === this.threshold &&\n        enableData[2] === this.delaySeconds &&\n        this.isGuardiansEnabled(kernelAccountAddress)\n      );\n    } catch (error) {\n      return false;\n    }\n  }\n\n  async isGuardiansEnabled(kernelAccountAddress: Address): Promise<boolean> {\n    if (\n      this.guardians === undefined ||\n      !this.threshold ||\n      Object.entries(this.guardians).length !== this.threshold\n    ) {\n      throw Error(\"Recovery config unintialised\");\n    }\n    const weightedValidator = getContract({\n      abi: WeightedValidatorAbi,\n      address: this.validatorAddress,\n      publicClient: this.publicClient,\n    });\n    for (const [addr, weight] of Object.entries(this.guardians)) {\n      const result = await weightedValidator.read.guardian([\n        addr as Address,\n        kernelAccountAddress,\n      ]);\n      if (result[0] !== weight) {\n        return false;\n      }\n    }\n    return true;\n  }\n\n  async getDummyUserOpSignature(): Promise<Hex> {\n    let dummySignature: Hex = \"0x\";\n    if (this.signatures) {\n      const totalSigs = this.signatures.substring(2).length / 130;\n      for (let i = 0; i < totalSigs; i++) {\n        dummySignature = concatHex([dummySignature, DUMMY_ECDSA_SIG]);\n      }\n      // Hack - Fix this to not send original signatures\n      return this.signatures;\n    }\n    return DUMMY_ECDSA_SIG;\n  }\n\n  async signMessage(message: string | Uint8Array): Promise<Hex> {\n    if (!this.accountSigner) {\n      throw Error(\"AccountSigner not set\");\n    }\n    return await this.accountSigner.signMessage(message);\n  }\n\n  async signTypedData(params: SignTypedDataParams): Promise<Hex> {\n    if (!this.accountSigner) {\n      throw Error(\"AccountSigner not set\");\n    }\n    return fixSignedData(await this.accountSigner.signTypedData(params));\n  }\n\n  async signRecoveryHash(recoveryHash: Hex): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    const signer = await this.signer();\n    return await signer.signTypedData({\n      domain: {\n        name: \"WeightedECDSAValidator\",\n        version: \"1\",\n        chainId: this.chain.id,\n        verifyingContract: this.validatorAddress,\n      },\n      types: {\n        Approve: [{ name: \"callDataAndNonceHash\", type: \"bytes32\" }],\n      },\n      message: {\n        callDataAndNonceHash: recoveryHash,\n      },\n      primaryType: \"Approve\",\n    });\n  }\n\n  async signUserOp(_userOp: UserOperationRequest): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    return this.signatures ?? DUMMY_ECDSA_SIG;\n  }\n}\n"]}

package/dist/esm/kernel-zerodev/validator/session-key-validator.d.ts

@@ -26,7 +26,7 @@ export interface ParamRules {
 }
 export interface Permission {
     target: Address;
-    valueLimit: number;
+    valueLimit: bigint;
     sig: Hex;
     rules: ParamRules[];
     operation: Operation;

package/dist/esm/kernel-zerodev/validator/session-key-validator.js

@@ -7,6 +7,9 @@ import { KernelAccountAbi } from "../abis/KernelAccountAbi.js";
 import { MerkleTree } from "merkletreejs";
 import { getChainId } from "../api/index.js";
 import { fixSignedData } from "../utils.js";
+BigInt.prototype.toJSON = function () {
+    return this.toString();
+};
 export var ParamCondition;
 (function (ParamCondition) {
     ParamCondition[ParamCondition["EQUAL"] = 0] = "EQUAL";
@@ -86,7 +89,17 @@ export class SessionKeyValidator extends KernelBaseValidator {
             const valueLimitPermissions = signaturePermissions.filter((permission) => permission.valueLimit >= args[1]);
             if (!valueLimitPermissions.length)
                 return undefined;
-            const sortedPermissions = valueLimitPermissions.sort((a, b) => b.valueLimit - a.valueLimit);
+            const sortedPermissions = valueLimitPermissions.sort((a, b) => {
+                if (b.valueLimit > a.valueLimit) {
+                    return 1;
+                }
+                else if (b.valueLimit < a.valueLimit) {
+                    return -1;
+                }
+                else {
+                    return 0;
+                }
+            });
             return this.findPermissionByRule(sortedPermissions, args[2]);
         }
         catch (error) {

package/dist/esm/kernel-zerodev/validator/session-key-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-key-validator.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/session-key-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EAKpB,QAAQ,GAET,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,EACnB,aAAa,GAGd,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,kBAAkB,EAClB,OAAO,EACP,MAAM,EACN,GAAG,EACH,KAAK,EACL,SAAS,EACT,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,kBAAkB,EAClB,KAAK,EACL,mBAAmB,GACpB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAiB5C,MAAM,CAAN,IAAY,cAOX;AAPD,WAAY,cAAc;IACxB,qDAAS,CAAA;IACT,mEAAgB,CAAA;IAChB,6DAAa,CAAA;IACb,qFAAyB,CAAA;IACzB,+EAAsB,CAAA;IACtB,6DAAa,CAAA;AACf,CAAC,EAPW,cAAc,KAAd,cAAc,QAOzB;AAuBD,MAAM,OAAO,mBAAoB,SAAQ,mBAAmB;IAK1D,YAAY,MAAiC;QAC3C,KAAK,CAAC,MAAM,CAAC,CAAC;QALN;;;;;WAA+B;QACzC;;;;;WAA+B;QAC/B;;;;;WAAuB;QAIrB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG;YACpB,GAAG,MAAM,CAAC,cAAc;YACxB,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,SAAS,IAAI,WAAW;SAC1D,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ;YACX,MAAM,CAAC,QAAQ;gBACf,mBAAmB,CAAC,yCAAyC,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC;IAClD,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,IAAI,CACtB,MAAiC;QAEjC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;SACtC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yBAAyB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,sBAAsB,CAAC,QAAa;QAClC,IAAI;YACF,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC;gBAChD,GAAG,EAAE,gBAAgB;gBACrB,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YAEH,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAEjD,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;YACxD,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAElE,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAG5C,IAAI,iBAAiB,GAAG,eAAe,CAAC,MAAM,CAC5C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,aAAa,CAClE,CAAC;YAGF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE;gBAC7B,iBAAiB,GAAG,eAAe,CAAC,MAAM,CACxC,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,CAChE,CAAC;aACH;YAED,IAAI,CAAC,iBAAiB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEhD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,iBAAiB,EACjB,IAAI,CAAC,CAAC,CAAC,CACR,CAAC;YAEF,IAAI,CAAC,oBAAoB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEnD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,oBAAoB,EACpB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CACnC,CAAC;YAEF,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,MAAM,CACvD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CACjD,CAAC;YAEF,IAAI,CAAC,qBAAqB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEpD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,IAAI,CAClD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CACtC,CAAC;YAEF,OAAO,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;SAC9D;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,SAAS,CAAC;SAClB;IACH,CAAC;IAEO,iBAAiB,CACvB,WAAyB,EACzB,SAAoB;QAEpB,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CACnD,CAAC;IACJ,CAAC;IAEO,iBAAiB,CACvB,WAAyB,EACzB,SAAiB;QAEjB,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,SAAS,CAC3D,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAC1B,WAAyB,EACzB,IAAY;QAEZ,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACrC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE;gBACnC,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CACzC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CACnE,CAAC;gBACF,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAExD,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;oBACrE,OAAO,KAAK,CAAC;iBACd;aACF;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAC9C,IAAI,EAAE,EAAE;SACT,CAAC,CAAC,WAAW,EAAS,CAAC;IAC1B,CAAC;IAEO,qBAAqB,CAC3B,SAAc,EACd,SAAc,EACd,SAAyB;QAEzB,QAAQ,SAAS,EAAE;YACjB,KAAK,cAAc,CAAC,KAAK;gBACvB,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC,KAAK,cAAc,CAAC,YAAY;gBAC9B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,cAAc,CAAC,SAAS;gBAC3B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,cAAc,CAAC,qBAAqB;gBACvC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,cAAc,CAAC,kBAAkB;gBACpC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,cAAc,CAAC,SAAS;gBAC3B,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC;gBACE,OAAO,KAAK,CAAC;SAChB;IACH,CAAC;IAED,aAAa;QACX,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CAC3D,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CACtD,CAAC;QAIF,IAAI,gBAAgB,EAAE,MAAM,KAAK,CAAC;YAChC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7C,OAAO,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACtD,CAAC,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAE,SAAS,EAAE;gBAC1C,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;aACjB,CAAC;YACJ,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE;gBACrD,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;IACT,CAAC;IAED,oBAAoB,CAAC,UAAsB,EAAE,WAAsB;QACjE,IAAI,eAAe,GAAG;YACpB,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,QAAQ;iBACf;gBACD;oBACE,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,SAAS;yBAChB;wBACD;4BACE,YAAY,EAAE,qBAAqB;4BACnC,IAAI,EAAE,WAAW;4BACjB,IAAI,EAAE,OAAO;yBACd;wBACD;4BACE,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,SAAS;yBAChB;qBACF;oBACD,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,YAAY,EAAE,gBAAgB;oBAC9B,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,OAAO;iBACd;aACF;YACD,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,OAAO;SACd,CAAC;QACF,IAAI,MAAM,CAAC;QACX,IAAI,MAAM,CAAC;QACX,IAAI,WAAW,EAAE;YACf,MAAM,GAAG;gBACP,eAAe;gBACf;oBACE,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,WAAW;iBAClB;aACF,CAAC;YACF,MAAM,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;SACpC;aAAM;YACL,MAAM,GAAG,CAAC,eAAe,CAAC,CAAC;YAC3B,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;SACvB;QACD,OAAO,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YACpB,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAC9D;QACD,OAAO,MAAM,CAAC;YACZ,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACtD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,cAAc,CAAC,SAAU;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,gBAAgB;YACrB,OAAO,EAAE,oBAAoB;YAC7B,YAAY,EAAE,cAAc;YAC5B,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,sBAAsB;YAC3B,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,oBAAoB,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,SAAS,CAAC;YAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,UAAU,CAAC,CAAC,CAAC;SACd,CAAC,CAAC;QACH,OAAO,CACL,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;YACrC,UAAU,CAAC,CAAC,CAAC;YACb,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAC3E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,QAAa;QACzC,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE;YAC5D,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;SACH;QACD,MAAM,qBAAqB,GACzB,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAC7C,SAAS,CAAC,qBAAqB,CAAC,CACjC,CAAC;QACF,MAAM,WAAW,GACf,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,SAAS,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,eAAe;YACf,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,oBAAyB;QACpC,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,sBAAsB;YAC3B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,UAAe;QAC3B,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,sBAAsB;YAC3B,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,OAAO,aAAa,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA4B;QAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,MAAM,IAAI,GAAG,oBAAoB,CAC/B;YACE,GAAG,MAAM;YACT,SAAS,EAAE,IAAI;SAChB,EACD,IAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzE,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE;YAC5D,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;SACH;QACD,MAAM,qBAAqB,GACzB,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAC7C,SAAS,CAAC,qBAAqB,CAAC,CACjC,CAAC;QACF,MAAM,WAAW,GACf,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,SAAS,GAAG,MAAM,CAAC;YACvB,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACnD,WAAW;SACZ,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;CACF","sourcesContent":["import {\n  getUserOperationHash,\n  type Address,\n  type Hex,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n  getChain,\n  type SignTypedDataParams,\n} from \"@alchemy/aa-core\";\nimport {\n  KernelBaseValidator,\n  ValidatorMode,\n  type KernelBaseValidatorParams,\n  type ValidatorPluginData,\n} from \"./base.js\";\nimport {\n  encodeFunctionData,\n  toBytes,\n  concat,\n  pad,\n  toHex,\n  keccak256,\n  encodeAbiParameters,\n  concatHex,\n  zeroAddress,\n  decodeFunctionData,\n  isHex,\n  getFunctionSelector,\n} from \"viem\";\nimport { SessionKeyValidatorAbi } from \"../abis/SessionKeyValidatorAbi.js\";\nimport { DUMMY_ECDSA_SIG } from \"../constants.js\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport { MerkleTree } from \"merkletreejs\";\nimport type { Operation } from \"../provider.js\";\nimport { getChainId } from \"../api/index.js\";\nimport { fixSignedData } from \"../utils.js\";\n\nexport interface SessionKeyValidatorParams extends KernelBaseValidatorParams {\n  sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n}\n\nexport type SessionKeyParams = Pick<\n  SessionKeyValidatorParams,\n  \"sessionKeyData\" | \"enableSignature\"\n> &\n  ValidatorPluginData & {\n    sessionPrivateKey?: Hex;\n    initCode?: Hex;\n    accountAddress?: Address;\n  };\n\nexport enum ParamCondition {\n  EQUAL = 0,\n  GREATER_THAN = 1,\n  LESS_THAN = 2,\n  GREATER_THAN_OR_EQUAL = 3,\n  LESS_THAN_OR_EQUAL = 4,\n  NOT_EQUAL = 5,\n}\n\nexport interface ParamRules {\n  offset: number;\n  condition: ParamCondition;\n  param: Hex;\n}\n\nexport interface Permission {\n  target: Address;\n  valueLimit: number;\n  sig: Hex;\n  rules: ParamRules[];\n  operation: Operation;\n}\n\nexport interface SessionKeyData {\n  validUntil: number;\n  validAfter: number;\n  paymaster?: Address;\n  permissions?: Permission[];\n}\n\nexport class SessionKeyValidator extends KernelBaseValidator {\n  protected sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n  merkleTree: MerkleTree;\n\n  constructor(params: SessionKeyValidatorParams) {\n    super(params);\n    this.sessionKey = params.sessionKey;\n    this.sessionKeyData = {\n      ...params.sessionKeyData,\n      paymaster: params.sessionKeyData.paymaster ?? zeroAddress,\n    };\n    this.merkleTree = this.getMerkleTree();\n    this.selector =\n      params.selector ??\n      getFunctionSelector(\"execute(address, uint256, bytes, uint8)\");\n    this.executor = params.executor ?? zeroAddress;\n    this.mode = params.mode ?? ValidatorMode.plugin;\n  }\n\n  public static async init(\n    params: SessionKeyValidatorParams\n  ): Promise<SessionKeyValidator> {\n    const chainId = await getChainId(params.projectId);\n    if (!chainId) {\n      throw new Error(\"ChainId not found\");\n    }\n    const chain = getChain(chainId);\n    const instance = new SessionKeyValidator({ ...params, chain });\n    return instance;\n  }\n\n  shouldDelegateViaFallback(): boolean {\n    return this.merkleTree.getHexRoot() === pad(\"0x00\", { size: 32 });\n  }\n\n  findMatchingPermission(callData: Hex): Permission | undefined {\n    try {\n      const { functionName, args } = decodeFunctionData({\n        abi: KernelAccountAbi,\n        data: callData,\n      });\n\n      if (functionName !== \"execute\") return undefined;\n\n      const permissionsList = this.sessionKeyData.permissions;\n      if (!permissionsList || !permissionsList.length) return undefined;\n\n      const targetToMatch = args[0].toLowerCase();\n\n      // Filter permissions by target\n      let targetPermissions = permissionsList.filter(\n        (permission) => permission.target.toLowerCase() === targetToMatch\n      );\n\n      // If no permissions match the exact target, check for generic permissions (using zero address)\n      if (!targetPermissions.length) {\n        targetPermissions = permissionsList.filter(\n          (permission) =>\n            permission.target.toLowerCase() === zeroAddress.toLowerCase()\n        );\n      }\n\n      if (!targetPermissions.length) return undefined;\n\n      const operationPermissions = this.filterByOperation(\n        targetPermissions,\n        args[3]\n      );\n\n      if (!operationPermissions.length) return undefined;\n\n      const signaturePermissions = this.filterBySignature(\n        operationPermissions,\n        args[2].slice(0, 10).toLowerCase()\n      );\n\n      const valueLimitPermissions = signaturePermissions.filter(\n        (permission) => permission.valueLimit >= args[1]\n      );\n\n      if (!valueLimitPermissions.length) return undefined;\n\n      const sortedPermissions = valueLimitPermissions.sort(\n        (a, b) => b.valueLimit - a.valueLimit\n      );\n\n      return this.findPermissionByRule(sortedPermissions, args[2]);\n    } catch (error) {\n      return undefined;\n    }\n  }\n\n  private filterByOperation(\n    permissions: Permission[],\n    operation: Operation\n  ): Permission[] {\n    return permissions.filter(\n      (permission) => permission.operation === operation\n    );\n  }\n\n  private filterBySignature(\n    permissions: Permission[],\n    signature: string\n  ): Permission[] {\n    return permissions.filter(\n      (permission) => permission.sig.toLowerCase() === signature\n    );\n  }\n\n  private findPermissionByRule(\n    permissions: Permission[],\n    data: string\n  ): Permission | undefined {\n    return permissions.find((permission) => {\n      for (const rule of permission.rules) {\n        const dataParam: Hex = this.getFormattedHex(\n          \"0x\" + data.slice(10 + rule.offset * 2, 10 + rule.offset * 2 + 64)\n        );\n        const ruleParam: Hex = this.getFormattedHex(rule.param);\n\n        if (!this.evaluateRuleCondition(dataParam, ruleParam, rule.condition)) {\n          return false;\n        }\n      }\n      return true;\n    });\n  }\n\n  private getFormattedHex(value: string): Hex {\n    return pad(isHex(value) ? value : toHex(value), {\n      size: 32,\n    }).toLowerCase() as Hex;\n  }\n\n  private evaluateRuleCondition(\n    dataParam: Hex,\n    ruleParam: Hex,\n    condition: ParamCondition\n  ): boolean {\n    switch (condition) {\n      case ParamCondition.EQUAL:\n        return dataParam === ruleParam;\n      case ParamCondition.GREATER_THAN:\n        return dataParam > ruleParam;\n      case ParamCondition.LESS_THAN:\n        return dataParam < ruleParam;\n      case ParamCondition.GREATER_THAN_OR_EQUAL:\n        return dataParam >= ruleParam;\n      case ParamCondition.LESS_THAN_OR_EQUAL:\n        return dataParam <= ruleParam;\n      case ParamCondition.NOT_EQUAL:\n        return dataParam !== ruleParam;\n      default:\n        return false;\n    }\n  }\n\n  getMerkleTree(): MerkleTree {\n    const permissionPacked = this.sessionKeyData.permissions?.map(\n      (permission) => this.encodePermissionData(permission)\n    );\n\n    // Having one leaf returns empty array in getProof(). To hack it we push the leaf twice\n    // issue - https://github.com/merkletreejs/merkletreejs/issues/58\n    if (permissionPacked?.length === 1)\n      permissionPacked.push(permissionPacked[0]);\n\n    return permissionPacked && permissionPacked.length !== 0\n      ? new MerkleTree(permissionPacked, keccak256, {\n          sortPairs: true,\n          hashLeaves: true,\n        })\n      : new MerkleTree([pad(\"0x00\", { size: 32 })], keccak256, {\n          hashLeaves: false,\n        });\n  }\n\n  encodePermissionData(permission: Permission, merkleProof?: string[]): Hex {\n    let permissionParam = {\n      components: [\n        {\n          name: \"target\",\n          type: \"address\",\n        },\n        {\n          name: \"valueLimit\",\n          type: \"uint256\",\n        },\n        {\n          name: \"sig\",\n          type: \"bytes4\",\n        },\n        {\n          components: [\n            {\n              name: \"offset\",\n              type: \"uint256\",\n            },\n            {\n              internalType: \"enum ParamCondition\",\n              name: \"condition\",\n              type: \"uint8\",\n            },\n            {\n              name: \"param\",\n              type: \"bytes32\",\n            },\n          ],\n          name: \"rules\",\n          type: \"tuple[]\",\n        },\n        {\n          internalType: \"enum Operation\",\n          name: \"operation\",\n          type: \"uint8\",\n        },\n      ],\n      name: \"permission\",\n      type: \"tuple\",\n    };\n    let params;\n    let values;\n    if (merkleProof) {\n      params = [\n        permissionParam,\n        {\n          name: \"merkleProof\",\n          type: \"bytes32[]\",\n        },\n      ];\n      values = [permission, merkleProof];\n    } else {\n      params = [permissionParam];\n      values = [permission];\n    }\n    return encodeAbiParameters(params, values);\n  }\n\n  getSessionData(): SessionKeyParams {\n    if (!this.selector || !this.executor) {\n      throw Error(\"Plugin Validator data params uninitialised\");\n    }\n    return {\n      selector: this.selector,\n      executor: this.executor,\n      validUntil: this.validUntil,\n      validAfter: this.validAfter,\n      sessionKeyData: this.sessionKeyData,\n      enableSignature: this.enableSignature,\n    };\n  }\n\n  async signer(): Promise<SmartAccountSigner> {\n    return await Promise.resolve(this.sessionKey);\n  }\n\n  async getEnableData(): Promise<Hex> {\n    if (!this.merkleTree) {\n      throw Error(\"SessionKeyValidator: MerkleTree not generated\");\n    }\n    return concat([\n      await this.sessionKey.getAddress(),\n      pad(this.merkleTree.getHexRoot() as Hex, { size: 32 }),\n      pad(toHex(this.sessionKeyData.validAfter), { size: 6 }),\n      pad(toHex(this.sessionKeyData.validUntil), { size: 6 }),\n      this.sessionKeyData.paymaster!,\n    ]);\n  }\n\n  async isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    const execDetail = await this.publicClient.readContract({\n      abi: KernelAccountAbi,\n      address: kernelAccountAddress,\n      functionName: \"getExecution\",\n      args: [selector],\n    });\n    const enableData = await this.publicClient.readContract({\n      abi: SessionKeyValidatorAbi,\n      address: this.validatorAddress,\n      functionName: \"sessionData\",\n      args: [await this.sessionKey.getAddress(), kernelAccountAddress],\n    });\n    const enableDataHex = concatHex([\n      await this.sessionKey.getAddress(),\n      pad(enableData[0], { size: 4 }),\n      pad(toHex(enableData[1]), { size: 6 }),\n      pad(toHex(enableData[2]), { size: 6 }),\n      enableData[3],\n    ]);\n    return (\n      execDetail.validator.toLowerCase() ===\n        this.validatorAddress.toLowerCase() &&\n      enableData[4] &&\n      enableDataHex.toLowerCase() === (await this.getEnableData()).toLowerCase()\n    );\n  }\n\n  async getDummyUserOpSignature(callData: Hex): Promise<Hex> {\n    const matchingPermission = this.findMatchingPermission(callData);\n    if (!matchingPermission && !this.shouldDelegateViaFallback()) {\n      throw Error(\n        \"SessionKeyValidator: No matching permission found for the userOp\"\n      );\n    }\n    const encodedPermissionData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission)\n        : \"0x\";\n    const merkleProof = this.merkleTree.getHexProof(\n      keccak256(encodedPermissionData)\n    );\n    const encodedData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission, merkleProof)\n        : \"0x\";\n    return concatHex([\n      await this.sessionKey.getAddress(),\n      DUMMY_ECDSA_SIG,\n      encodedData,\n    ]);\n  }\n\n  encodeEnable(sessionKeyEnableData: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"enable\",\n      args: [sessionKeyEnableData],\n    });\n  }\n\n  encodeDisable(sessionKey: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"disable\",\n      args: [sessionKey],\n    });\n  }\n\n  async signMessage(message: string | Uint8Array): Promise<Hex> {\n    return await this.sessionKey.signMessage(message);\n  }\n\n  async signTypedData(params: SignTypedDataParams): Promise<Hex> {\n    return fixSignedData(await this.sessionKey.signTypedData(params));\n  }\n\n  async signUserOp(userOp: UserOperationRequest): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    const hash = getUserOperationHash(\n      {\n        ...userOp,\n        signature: \"0x\",\n      },\n      this.entryPointAddress,\n      BigInt(this.chain.id)\n    );\n    const formattedMessage = typeof hash === \"string\" ? toBytes(hash) : hash;\n\n    const matchingPermission = this.findMatchingPermission(userOp.callData);\n    if (!matchingPermission && !this.shouldDelegateViaFallback()) {\n      throw Error(\n        \"SessionKeyValidator: No matching permission found for the userOp\"\n      );\n    }\n    const encodedPermissionData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission)\n        : \"0x\";\n    const merkleProof = this.merkleTree.getHexProof(\n      keccak256(encodedPermissionData)\n    );\n    const encodedData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission, merkleProof)\n        : \"0x\";\n    const signature = concat([\n      await this.sessionKey.getAddress(),\n      await this.sessionKey.signMessage(formattedMessage),\n      encodedData,\n    ]);\n    return signature;\n  }\n}\n"]}
+{"version":3,"file":"session-key-validator.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/session-key-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EAKpB,QAAQ,GAET,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,EACnB,aAAa,GAGd,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,kBAAkB,EAClB,OAAO,EACP,MAAM,EACN,GAAG,EACH,KAAK,EACL,SAAS,EACT,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,kBAAkB,EAClB,KAAK,EACL,mBAAmB,GACpB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAK3C,MAAM,CAAC,SAAiB,CAAC,MAAM,GAAG;IACjC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzB,CAAC,CAAC;AAiBF,MAAM,CAAN,IAAY,cAOX;AAPD,WAAY,cAAc;IACxB,qDAAS,CAAA;IACT,mEAAgB,CAAA;IAChB,6DAAa,CAAA;IACb,qFAAyB,CAAA;IACzB,+EAAsB,CAAA;IACtB,6DAAa,CAAA;AACf,CAAC,EAPW,cAAc,KAAd,cAAc,QAOzB;AAuBD,MAAM,OAAO,mBAAoB,SAAQ,mBAAmB;IAK1D,YAAY,MAAiC;QAC3C,KAAK,CAAC,MAAM,CAAC,CAAC;QALN;;;;;WAA+B;QACzC;;;;;WAA+B;QAC/B;;;;;WAAuB;QAIrB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG;YACpB,GAAG,MAAM,CAAC,cAAc;YACxB,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,SAAS,IAAI,WAAW;SAC1D,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ;YACX,MAAM,CAAC,QAAQ;gBACf,mBAAmB,CAAC,yCAAyC,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC;IAClD,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,IAAI,CACtB,MAAiC;QAEjC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;SACtC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yBAAyB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,sBAAsB,CAAC,QAAa;QAClC,IAAI;YACF,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC;gBAChD,GAAG,EAAE,gBAAgB;gBACrB,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YAEH,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAEjD,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;YACxD,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAElE,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAG5C,IAAI,iBAAiB,GAAG,eAAe,CAAC,MAAM,CAC5C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,aAAa,CAClE,CAAC;YAGF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE;gBAC7B,iBAAiB,GAAG,eAAe,CAAC,MAAM,CACxC,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,CAChE,CAAC;aACH;YAED,IAAI,CAAC,iBAAiB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEhD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,iBAAiB,EACjB,IAAI,CAAC,CAAC,CAAC,CACR,CAAC;YAEF,IAAI,CAAC,oBAAoB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEnD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,oBAAoB,EACpB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CACnC,CAAC;YAEF,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,MAAM,CACvD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CACjD,CAAC;YAEF,IAAI,CAAC,qBAAqB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEpD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC5D,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,EAAE;oBAC/B,OAAO,CAAC,CAAC;iBACV;qBAAM,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,EAAE;oBACtC,OAAO,CAAC,CAAC,CAAC;iBACX;qBAAM;oBACL,OAAO,CAAC,CAAC;iBACV;YACH,CAAC,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;SAC9D;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,SAAS,CAAC;SAClB;IACH,CAAC;IAEO,iBAAiB,CACvB,WAAyB,EACzB,SAAoB;QAEpB,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CACnD,CAAC;IACJ,CAAC;IAEO,iBAAiB,CACvB,WAAyB,EACzB,SAAiB;QAEjB,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,SAAS,CAC3D,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAC1B,WAAyB,EACzB,IAAY;QAEZ,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACrC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE;gBACnC,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CACzC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CACnE,CAAC;gBACF,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAExD,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;oBACrE,OAAO,KAAK,CAAC;iBACd;aACF;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAC9C,IAAI,EAAE,EAAE;SACT,CAAC,CAAC,WAAW,EAAS,CAAC;IAC1B,CAAC;IAEO,qBAAqB,CAC3B,SAAc,EACd,SAAc,EACd,SAAyB;QAEzB,QAAQ,SAAS,EAAE;YACjB,KAAK,cAAc,CAAC,KAAK;gBACvB,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC,KAAK,cAAc,CAAC,YAAY;gBAC9B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,cAAc,CAAC,SAAS;gBAC3B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,cAAc,CAAC,qBAAqB;gBACvC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,cAAc,CAAC,kBAAkB;gBACpC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,cAAc,CAAC,SAAS;gBAC3B,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC;gBACE,OAAO,KAAK,CAAC;SAChB;IACH,CAAC;IAED,aAAa;QACX,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CAC3D,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CACtD,CAAC;QAIF,IAAI,gBAAgB,EAAE,MAAM,KAAK,CAAC;YAChC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7C,OAAO,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACtD,CAAC,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAE,SAAS,EAAE;gBAC1C,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;aACjB,CAAC;YACJ,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE;gBACrD,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;IACT,CAAC;IAED,oBAAoB,CAAC,UAAsB,EAAE,WAAsB;QACjE,IAAI,eAAe,GAAG;YACpB,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,QAAQ;iBACf;gBACD;oBACE,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,SAAS;yBAChB;wBACD;4BACE,YAAY,EAAE,qBAAqB;4BACnC,IAAI,EAAE,WAAW;4BACjB,IAAI,EAAE,OAAO;yBACd;wBACD;4BACE,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,SAAS;yBAChB;qBACF;oBACD,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,YAAY,EAAE,gBAAgB;oBAC9B,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,OAAO;iBACd;aACF;YACD,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,OAAO;SACd,CAAC;QACF,IAAI,MAAM,CAAC;QACX,IAAI,MAAM,CAAC;QACX,IAAI,WAAW,EAAE;YACf,MAAM,GAAG;gBACP,eAAe;gBACf;oBACE,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,WAAW;iBAClB;aACF,CAAC;YACF,MAAM,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;SACpC;aAAM;YACL,MAAM,GAAG,CAAC,eAAe,CAAC,CAAC;YAC3B,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;SACvB;QACD,OAAO,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YACpB,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAC9D;QACD,OAAO,MAAM,CAAC;YACZ,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACtD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,cAAc,CAAC,SAAU;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,gBAAgB;YACrB,OAAO,EAAE,oBAAoB;YAC7B,YAAY,EAAE,cAAc;YAC5B,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,sBAAsB;YAC3B,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,oBAAoB,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,SAAS,CAAC;YAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,UAAU,CAAC,CAAC,CAAC;SACd,CAAC,CAAC;QACH,OAAO,CACL,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;YACrC,UAAU,CAAC,CAAC,CAAC;YACb,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAC3E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,QAAa;QACzC,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE;YAC5D,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;SACH;QACD,MAAM,qBAAqB,GACzB,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAC7C,SAAS,CAAC,qBAAqB,CAAC,CACjC,CAAC;QACF,MAAM,WAAW,GACf,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,SAAS,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,eAAe;YACf,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,oBAAyB;QACpC,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,sBAAsB;YAC3B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,UAAe;QAC3B,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,sBAAsB;YAC3B,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,OAAO,aAAa,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA4B;QAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,MAAM,IAAI,GAAG,oBAAoB,CAC/B;YACE,GAAG,MAAM;YACT,SAAS,EAAE,IAAI;SAChB,EACD,IAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzE,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE;YAC5D,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;SACH;QACD,MAAM,qBAAqB,GACzB,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAC7C,SAAS,CAAC,qBAAqB,CAAC,CACjC,CAAC;QACF,MAAM,WAAW,GACf,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,SAAS,GAAG,MAAM,CAAC;YACvB,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACnD,WAAW;SACZ,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;CACF","sourcesContent":["import {\n  getUserOperationHash,\n  type Address,\n  type Hex,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n  getChain,\n  type SignTypedDataParams,\n} from \"@alchemy/aa-core\";\nimport {\n  KernelBaseValidator,\n  ValidatorMode,\n  type KernelBaseValidatorParams,\n  type ValidatorPluginData,\n} from \"./base.js\";\nimport {\n  encodeFunctionData,\n  toBytes,\n  concat,\n  pad,\n  toHex,\n  keccak256,\n  encodeAbiParameters,\n  concatHex,\n  zeroAddress,\n  decodeFunctionData,\n  isHex,\n  getFunctionSelector,\n} from \"viem\";\nimport { SessionKeyValidatorAbi } from \"../abis/SessionKeyValidatorAbi.js\";\nimport { DUMMY_ECDSA_SIG } from \"../constants.js\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport { MerkleTree } from \"merkletreejs\";\nimport type { Operation } from \"../provider.js\";\nimport { getChainId } from \"../api/index.js\";\nimport { fixSignedData } from \"../utils.js\";\n\n// We need to be able to serialize bigint to transmit session key over\n// the network.\n// Using this trick: https://github.com/GoogleChromeLabs/jsbi/issues/30#issuecomment-1006086291\n(BigInt.prototype as any).toJSON = function () {\n  return this.toString();\n};\n\nexport interface SessionKeyValidatorParams extends KernelBaseValidatorParams {\n  sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n}\n\nexport type SessionKeyParams = Pick<\n  SessionKeyValidatorParams,\n  \"sessionKeyData\" | \"enableSignature\"\n> &\n  ValidatorPluginData & {\n    sessionPrivateKey?: Hex;\n    initCode?: Hex;\n    accountAddress?: Address;\n  };\n\nexport enum ParamCondition {\n  EQUAL = 0,\n  GREATER_THAN = 1,\n  LESS_THAN = 2,\n  GREATER_THAN_OR_EQUAL = 3,\n  LESS_THAN_OR_EQUAL = 4,\n  NOT_EQUAL = 5,\n}\n\nexport interface ParamRules {\n  offset: number;\n  condition: ParamCondition;\n  param: Hex;\n}\n\nexport interface Permission {\n  target: Address;\n  valueLimit: bigint;\n  sig: Hex;\n  rules: ParamRules[];\n  operation: Operation;\n}\n\nexport interface SessionKeyData {\n  validUntil: number;\n  validAfter: number;\n  paymaster?: Address;\n  permissions?: Permission[];\n}\n\nexport class SessionKeyValidator extends KernelBaseValidator {\n  protected sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n  merkleTree: MerkleTree;\n\n  constructor(params: SessionKeyValidatorParams) {\n    super(params);\n    this.sessionKey = params.sessionKey;\n    this.sessionKeyData = {\n      ...params.sessionKeyData,\n      paymaster: params.sessionKeyData.paymaster ?? zeroAddress,\n    };\n    this.merkleTree = this.getMerkleTree();\n    this.selector =\n      params.selector ??\n      getFunctionSelector(\"execute(address, uint256, bytes, uint8)\");\n    this.executor = params.executor ?? zeroAddress;\n    this.mode = params.mode ?? ValidatorMode.plugin;\n  }\n\n  public static async init(\n    params: SessionKeyValidatorParams\n  ): Promise<SessionKeyValidator> {\n    const chainId = await getChainId(params.projectId);\n    if (!chainId) {\n      throw new Error(\"ChainId not found\");\n    }\n    const chain = getChain(chainId);\n    const instance = new SessionKeyValidator({ ...params, chain });\n    return instance;\n  }\n\n  shouldDelegateViaFallback(): boolean {\n    return this.merkleTree.getHexRoot() === pad(\"0x00\", { size: 32 });\n  }\n\n  findMatchingPermission(callData: Hex): Permission | undefined {\n    try {\n      const { functionName, args } = decodeFunctionData({\n        abi: KernelAccountAbi,\n        data: callData,\n      });\n\n      if (functionName !== \"execute\") return undefined;\n\n      const permissionsList = this.sessionKeyData.permissions;\n      if (!permissionsList || !permissionsList.length) return undefined;\n\n      const targetToMatch = args[0].toLowerCase();\n\n      // Filter permissions by target\n      let targetPermissions = permissionsList.filter(\n        (permission) => permission.target.toLowerCase() === targetToMatch\n      );\n\n      // If no permissions match the exact target, check for generic permissions (using zero address)\n      if (!targetPermissions.length) {\n        targetPermissions = permissionsList.filter(\n          (permission) =>\n            permission.target.toLowerCase() === zeroAddress.toLowerCase()\n        );\n      }\n\n      if (!targetPermissions.length) return undefined;\n\n      const operationPermissions = this.filterByOperation(\n        targetPermissions,\n        args[3]\n      );\n\n      if (!operationPermissions.length) return undefined;\n\n      const signaturePermissions = this.filterBySignature(\n        operationPermissions,\n        args[2].slice(0, 10).toLowerCase()\n      );\n\n      const valueLimitPermissions = signaturePermissions.filter(\n        (permission) => permission.valueLimit >= args[1]\n      );\n\n      if (!valueLimitPermissions.length) return undefined;\n\n      const sortedPermissions = valueLimitPermissions.sort((a, b) => {\n        if (b.valueLimit > a.valueLimit) {\n          return 1;\n        } else if (b.valueLimit < a.valueLimit) {\n          return -1;\n        } else {\n          return 0;\n        }\n      });\n\n      return this.findPermissionByRule(sortedPermissions, args[2]);\n    } catch (error) {\n      return undefined;\n    }\n  }\n\n  private filterByOperation(\n    permissions: Permission[],\n    operation: Operation\n  ): Permission[] {\n    return permissions.filter(\n      (permission) => permission.operation === operation\n    );\n  }\n\n  private filterBySignature(\n    permissions: Permission[],\n    signature: string\n  ): Permission[] {\n    return permissions.filter(\n      (permission) => permission.sig.toLowerCase() === signature\n    );\n  }\n\n  private findPermissionByRule(\n    permissions: Permission[],\n    data: string\n  ): Permission | undefined {\n    return permissions.find((permission) => {\n      for (const rule of permission.rules) {\n        const dataParam: Hex = this.getFormattedHex(\n          \"0x\" + data.slice(10 + rule.offset * 2, 10 + rule.offset * 2 + 64)\n        );\n        const ruleParam: Hex = this.getFormattedHex(rule.param);\n\n        if (!this.evaluateRuleCondition(dataParam, ruleParam, rule.condition)) {\n          return false;\n        }\n      }\n      return true;\n    });\n  }\n\n  private getFormattedHex(value: string): Hex {\n    return pad(isHex(value) ? value : toHex(value), {\n      size: 32,\n    }).toLowerCase() as Hex;\n  }\n\n  private evaluateRuleCondition(\n    dataParam: Hex,\n    ruleParam: Hex,\n    condition: ParamCondition\n  ): boolean {\n    switch (condition) {\n      case ParamCondition.EQUAL:\n        return dataParam === ruleParam;\n      case ParamCondition.GREATER_THAN:\n        return dataParam > ruleParam;\n      case ParamCondition.LESS_THAN:\n        return dataParam < ruleParam;\n      case ParamCondition.GREATER_THAN_OR_EQUAL:\n        return dataParam >= ruleParam;\n      case ParamCondition.LESS_THAN_OR_EQUAL:\n        return dataParam <= ruleParam;\n      case ParamCondition.NOT_EQUAL:\n        return dataParam !== ruleParam;\n      default:\n        return false;\n    }\n  }\n\n  getMerkleTree(): MerkleTree {\n    const permissionPacked = this.sessionKeyData.permissions?.map(\n      (permission) => this.encodePermissionData(permission)\n    );\n\n    // Having one leaf returns empty array in getProof(). To hack it we push the leaf twice\n    // issue - https://github.com/merkletreejs/merkletreejs/issues/58\n    if (permissionPacked?.length === 1)\n      permissionPacked.push(permissionPacked[0]);\n\n    return permissionPacked && permissionPacked.length !== 0\n      ? new MerkleTree(permissionPacked, keccak256, {\n          sortPairs: true,\n          hashLeaves: true,\n        })\n      : new MerkleTree([pad(\"0x00\", { size: 32 })], keccak256, {\n          hashLeaves: false,\n        });\n  }\n\n  encodePermissionData(permission: Permission, merkleProof?: string[]): Hex {\n    let permissionParam = {\n      components: [\n        {\n          name: \"target\",\n          type: \"address\",\n        },\n        {\n          name: \"valueLimit\",\n          type: \"uint256\",\n        },\n        {\n          name: \"sig\",\n          type: \"bytes4\",\n        },\n        {\n          components: [\n            {\n              name: \"offset\",\n              type: \"uint256\",\n            },\n            {\n              internalType: \"enum ParamCondition\",\n              name: \"condition\",\n              type: \"uint8\",\n            },\n            {\n              name: \"param\",\n              type: \"bytes32\",\n            },\n          ],\n          name: \"rules\",\n          type: \"tuple[]\",\n        },\n        {\n          internalType: \"enum Operation\",\n          name: \"operation\",\n          type: \"uint8\",\n        },\n      ],\n      name: \"permission\",\n      type: \"tuple\",\n    };\n    let params;\n    let values;\n    if (merkleProof) {\n      params = [\n        permissionParam,\n        {\n          name: \"merkleProof\",\n          type: \"bytes32[]\",\n        },\n      ];\n      values = [permission, merkleProof];\n    } else {\n      params = [permissionParam];\n      values = [permission];\n    }\n    return encodeAbiParameters(params, values);\n  }\n\n  getSessionData(): SessionKeyParams {\n    if (!this.selector || !this.executor) {\n      throw Error(\"Plugin Validator data params uninitialised\");\n    }\n    return {\n      selector: this.selector,\n      executor: this.executor,\n      validUntil: this.validUntil,\n      validAfter: this.validAfter,\n      sessionKeyData: this.sessionKeyData,\n      enableSignature: this.enableSignature,\n    };\n  }\n\n  async signer(): Promise<SmartAccountSigner> {\n    return await Promise.resolve(this.sessionKey);\n  }\n\n  async getEnableData(): Promise<Hex> {\n    if (!this.merkleTree) {\n      throw Error(\"SessionKeyValidator: MerkleTree not generated\");\n    }\n    return concat([\n      await this.sessionKey.getAddress(),\n      pad(this.merkleTree.getHexRoot() as Hex, { size: 32 }),\n      pad(toHex(this.sessionKeyData.validAfter), { size: 6 }),\n      pad(toHex(this.sessionKeyData.validUntil), { size: 6 }),\n      this.sessionKeyData.paymaster!,\n    ]);\n  }\n\n  async isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    const execDetail = await this.publicClient.readContract({\n      abi: KernelAccountAbi,\n      address: kernelAccountAddress,\n      functionName: \"getExecution\",\n      args: [selector],\n    });\n    const enableData = await this.publicClient.readContract({\n      abi: SessionKeyValidatorAbi,\n      address: this.validatorAddress,\n      functionName: \"sessionData\",\n      args: [await this.sessionKey.getAddress(), kernelAccountAddress],\n    });\n    const enableDataHex = concatHex([\n      await this.sessionKey.getAddress(),\n      pad(enableData[0], { size: 4 }),\n      pad(toHex(enableData[1]), { size: 6 }),\n      pad(toHex(enableData[2]), { size: 6 }),\n      enableData[3],\n    ]);\n    return (\n      execDetail.validator.toLowerCase() ===\n        this.validatorAddress.toLowerCase() &&\n      enableData[4] &&\n      enableDataHex.toLowerCase() === (await this.getEnableData()).toLowerCase()\n    );\n  }\n\n  async getDummyUserOpSignature(callData: Hex): Promise<Hex> {\n    const matchingPermission = this.findMatchingPermission(callData);\n    if (!matchingPermission && !this.shouldDelegateViaFallback()) {\n      throw Error(\n        \"SessionKeyValidator: No matching permission found for the userOp\"\n      );\n    }\n    const encodedPermissionData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission)\n        : \"0x\";\n    const merkleProof = this.merkleTree.getHexProof(\n      keccak256(encodedPermissionData)\n    );\n    const encodedData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission, merkleProof)\n        : \"0x\";\n    return concatHex([\n      await this.sessionKey.getAddress(),\n      DUMMY_ECDSA_SIG,\n      encodedData,\n    ]);\n  }\n\n  encodeEnable(sessionKeyEnableData: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"enable\",\n      args: [sessionKeyEnableData],\n    });\n  }\n\n  encodeDisable(sessionKey: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"disable\",\n      args: [sessionKey],\n    });\n  }\n\n  async signMessage(message: string | Uint8Array): Promise<Hex> {\n    return await this.sessionKey.signMessage(message);\n  }\n\n  async signTypedData(params: SignTypedDataParams): Promise<Hex> {\n    return fixSignedData(await this.sessionKey.signTypedData(params));\n  }\n\n  async signUserOp(userOp: UserOperationRequest): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    const hash = getUserOperationHash(\n      {\n        ...userOp,\n        signature: \"0x\",\n      },\n      this.entryPointAddress,\n      BigInt(this.chain.id)\n    );\n    const formattedMessage = typeof hash === \"string\" ? toBytes(hash) : hash;\n\n    const matchingPermission = this.findMatchingPermission(userOp.callData);\n    if (!matchingPermission && !this.shouldDelegateViaFallback()) {\n      throw Error(\n        \"SessionKeyValidator: No matching permission found for the userOp\"\n      );\n    }\n    const encodedPermissionData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission)\n        : \"0x\";\n    const merkleProof = this.merkleTree.getHexProof(\n      keccak256(encodedPermissionData)\n    );\n    const encodedData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission, merkleProof)\n        : \"0x\";\n    const signature = concat([\n      await this.sessionKey.getAddress(),\n      await this.sessionKey.signMessage(formattedMessage),\n      encodedData,\n    ]);\n    return signature;\n  }\n}\n"]}

package/dist/esm/kernel-zerodev/validator/types.d.ts

@@ -1,21 +1,27 @@
 import type { ECDSAValidator, ECDSAValidatorParams } from "./ecdsa-validator.js";
 import type { ERC165SessionKeyValidator, ERC165SessionKeyValidatorParams } from "./erc165-session-key-validator.js";
 import type { KillSwitchValidator, KillSwitchValidatorParams } from "./kill-switch-validator.js";
+import type { RecoveryValidator, RecoveryValidatorParams } from "./recovery-validator.js";
 import type { SessionKeyValidator, SessionKeyValidatorParams, ParamRules, Permission, SessionKeyData, SessionKeyParams } from "./session-key-validator.js";
-export type SupportedValidators = "ECDSA" | "KILL_SWITCH" | "ERC165_SESSION_KEY" | "SESSION_KEY";
+export type SupportedValidators = "ECDSA" | "KILL_SWITCH" | "ERC165_SESSION_KEY" | "SESSION_KEY" | "RECOVERY";
 export type ValidatorTypeMap = {
     ECDSA: ECDSAValidator;
     KILL_SWITCH: KillSwitchValidator;
     ERC165_SESSION_KEY: ERC165SessionKeyValidator;
     SESSION_KEY: SessionKeyValidator;
+    RECOVERY: RecoveryValidator;
 };
 export type ValidatorParamsMap = {
     ECDSA: ECDSAValidatorParams;
     KILL_SWITCH: KillSwitchValidatorParams;
     ERC165_SESSION_KEY: ERC165SessionKeyValidatorParams;
     SESSION_KEY: SessionKeyValidatorParams;
+    RECOVERY: RecoveryValidatorParams;
 };
 export type ValidatorMap = {
     [V in SupportedValidators]: new (params: ValidatorParamsMap[V]) => ValidatorTypeMap[V];
 };
+export type EthereumProvider = {
+    request(...args: any): Promise<any>;
+};
 export type { ParamRules, Permission, SessionKeyData, SessionKeyParams };

package/dist/esm/kernel-zerodev/validator/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ECDSAValidator,\n  ECDSAValidatorParams,\n} from \"./ecdsa-validator.js\";\nimport type {\n  ERC165SessionKeyValidator,\n  ERC165SessionKeyValidatorParams,\n} from \"./erc165-session-key-validator.js\";\n\nimport type {\n  KillSwitchValidator,\n  KillSwitchValidatorParams,\n} from \"./kill-switch-validator.js\";\nimport type {\n  SessionKeyValidator,\n  SessionKeyValidatorParams,\n  ParamRules,\n  Permission,\n  SessionKeyData,\n  SessionKeyParams,\n} from \"./session-key-validator.js\";\n\nexport type SupportedValidators =\n  | \"ECDSA\"\n  | \"KILL_SWITCH\"\n  | \"ERC165_SESSION_KEY\"\n  | \"SESSION_KEY\";\n\nexport type ValidatorTypeMap = {\n  ECDSA: ECDSAValidator;\n  KILL_SWITCH: KillSwitchValidator;\n  ERC165_SESSION_KEY: ERC165SessionKeyValidator;\n  SESSION_KEY: SessionKeyValidator;\n};\n\nexport type ValidatorParamsMap = {\n  ECDSA: ECDSAValidatorParams;\n  KILL_SWITCH: KillSwitchValidatorParams;\n  ERC165_SESSION_KEY: ERC165SessionKeyValidatorParams;\n  SESSION_KEY: SessionKeyValidatorParams;\n};\n\nexport type ValidatorMap = {\n  [V in SupportedValidators]: new (\n    params: ValidatorParamsMap[V]\n  ) => ValidatorTypeMap[V];\n};\n\nexport type { ParamRules, Permission, SessionKeyData, SessionKeyParams };\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ECDSAValidator,\n  ECDSAValidatorParams,\n} from \"./ecdsa-validator.js\";\nimport type {\n  ERC165SessionKeyValidator,\n  ERC165SessionKeyValidatorParams,\n} from \"./erc165-session-key-validator.js\";\n\nimport type {\n  KillSwitchValidator,\n  KillSwitchValidatorParams,\n} from \"./kill-switch-validator.js\";\nimport type {\n  RecoveryValidator,\n  RecoveryValidatorParams,\n} from \"./recovery-validator.js\";\nimport type {\n  SessionKeyValidator,\n  SessionKeyValidatorParams,\n  ParamRules,\n  Permission,\n  SessionKeyData,\n  SessionKeyParams,\n} from \"./session-key-validator.js\";\n\nexport type SupportedValidators =\n  | \"ECDSA\"\n  | \"KILL_SWITCH\"\n  | \"ERC165_SESSION_KEY\"\n  | \"SESSION_KEY\"\n  | \"RECOVERY\";\n\nexport type ValidatorTypeMap = {\n  ECDSA: ECDSAValidator;\n  KILL_SWITCH: KillSwitchValidator;\n  ERC165_SESSION_KEY: ERC165SessionKeyValidator;\n  SESSION_KEY: SessionKeyValidator;\n  RECOVERY: RecoveryValidator;\n};\n\nexport type ValidatorParamsMap = {\n  ECDSA: ECDSAValidatorParams;\n  KILL_SWITCH: KillSwitchValidatorParams;\n  ERC165_SESSION_KEY: ERC165SessionKeyValidatorParams;\n  SESSION_KEY: SessionKeyValidatorParams;\n  RECOVERY: RecoveryValidatorParams;\n};\n\nexport type ValidatorMap = {\n  [V in SupportedValidators]: new (\n    params: ValidatorParamsMap[V]\n  ) => ValidatorTypeMap[V];\n};\n\nexport type EthereumProvider = { request(...args: any): Promise<any> };\n\nexport type { ParamRules, Permission, SessionKeyData, SessionKeyParams };\n"]}

package/dist/esm/kernel-zerodev/validator-provider/base.d.ts

@@ -23,7 +23,7 @@ export declare abstract class ValidatorProvider<V extends KernelBaseValidator, P
     constructor(params: ExtendedValidatorProviderParams<P>, validator: KernelBaseValidator);
     getValidator: () => V;
     getEncodedEnableData: (enableData: Hex) => Promise<Hex>;
-    getEncodedDisableData: (disableData: Hex) => Promise<Hex>;
+    getEncodedDisableData: (disableData?: Hex) => Promise<Hex>;
     sendEnableUserOperation: (enableData: Hex) => Promise<SendUserOperationResult>;
-    sendDisableUserOperation: (disableData: Hex) => Promise<SendUserOperationResult>;
+    sendDisableUserOperation: (disableData?: Hex) => Promise<SendUserOperationResult>;
 }