@zerodev/sdk 4.0.8 → 4.0.10

package/dist/esm/kernel-zerodev/validator/index.js

@@ -1,10 +1,12 @@
 import { ECDSAValidator } from "./ecdsa-validator.js";
 import { ERC165SessionKeyValidator } from "./erc165-session-key-validator.js";
 import { KillSwitchValidator } from "./kill-switch-validator.js";
+import { SessionKeyValidator } from "./session-key-validator.js";
 export const Validators = {
     ECDSA: ECDSAValidator,
     KILL_SWITCH: KillSwitchValidator,
     ERC165_SESSION_KEY: ERC165SessionKeyValidator,
+    SESSION_KEY: SessionKeyValidator,
 };
-export { ECDSAValidator, KillSwitchValidator, ERC165SessionKeyValidator };
+export { ECDSAValidator, KillSwitchValidator, ERC165SessionKeyValidator, SessionKeyValidator, };
 //# sourceMappingURL=index.js.map

package/dist/esm/kernel-zerodev/validator/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGjE,MAAM,CAAC,MAAM,UAAU,GAAiB;IACtC,KAAK,EAAE,cAAc;IACrB,WAAW,EAAE,mBAAmB;IAChC,kBAAkB,EAAE,yBAAyB;CAC9C,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,CAAC","sourcesContent":["import { ECDSAValidator } from \"./ecdsa-validator.js\";\nimport { ERC165SessionKeyValidator } from \"./erc165-session-key-validator.js\";\nimport { KillSwitchValidator } from \"./kill-switch-validator.js\";\nimport type { ValidatorMap } from \"./types.js\";\n\nexport const Validators: ValidatorMap = {\n  ECDSA: ECDSAValidator,\n  KILL_SWITCH: KillSwitchValidator,\n  ERC165_SESSION_KEY: ERC165SessionKeyValidator,\n};\n\nexport { ECDSAValidator, KillSwitchValidator, ERC165SessionKeyValidator };\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGjE,MAAM,CAAC,MAAM,UAAU,GAAiB;IACtC,KAAK,EAAE,cAAc;IACrB,WAAW,EAAE,mBAAmB;IAChC,kBAAkB,EAAE,yBAAyB;IAC7C,WAAW,EAAE,mBAAmB;CACjC,CAAC;AAEF,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,mBAAmB,GACpB,CAAC","sourcesContent":["import { ECDSAValidator } from \"./ecdsa-validator.js\";\nimport { ERC165SessionKeyValidator } from \"./erc165-session-key-validator.js\";\nimport { KillSwitchValidator } from \"./kill-switch-validator.js\";\nimport { SessionKeyValidator } from \"./session-key-validator.js\";\nimport type { ValidatorMap } from \"./types.js\";\n\nexport const Validators: ValidatorMap = {\n  ECDSA: ECDSAValidator,\n  KILL_SWITCH: KillSwitchValidator,\n  ERC165_SESSION_KEY: ERC165SessionKeyValidator,\n  SESSION_KEY: SessionKeyValidator,\n};\n\nexport {\n  ECDSAValidator,\n  KillSwitchValidator,\n  ERC165SessionKeyValidator,\n  SessionKeyValidator,\n};\n"]}

package/dist/esm/kernel-zerodev/validator/kill-switch-validator.js

@@ -1,5 +1,5 @@
 import { getChain, getUserOperationHash, } from "@alchemy/aa-core";
-import { KernelBaseValidator } from "./base.js";
+import { KernelBaseValidator, ValidatorMode, } from "./base.js";
 import { concat, concatHex, encodeFunctionData, getContract, keccak256, pad, toBytes, toHex, } from "viem";
 import { KillSwitchValidatorAbi } from "../abis/KillSwitchValidatorAbi.js";
 import { getChainId } from "../api/index.js";
@@ -23,6 +23,7 @@ export class KillSwitchValidator extends KernelBaseValidator {
         });
         this.guardian = params.guardian;
         this.delaySeconds = params.delaySeconds;
+        this.mode = params.mode ?? ValidatorMode.plugin;
     }
     static async init(params) {
         const chainId = await getChainId(params.projectId);

package/dist/esm/kernel-zerodev/validator/kill-switch-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"kill-switch-validator.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/kill-switch-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,oBAAoB,GAMrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAkC,MAAM,WAAW,CAAC;AAChF,OAAO,EACL,MAAM,EACN,SAAS,EACT,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,GAAG,EACH,OAAO,EACP,KAAK,GACN,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAO5C,MAAM,OAAO,mBAAoB,SAAQ,mBAAmB;IAI1D,YAAY,MAAiC;QAC3C,KAAK,CAAC,MAAM,CAAC,CAAC;QAJN;;;;;WAA6B;QAC7B;;;;;WAAqB;QAI7B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAC1C,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,IAAI,CACtB,MAAiC;QAEjC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;SACtC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;IAC3D,CAAC;IAED,YAAY,CAAC,WAAgB;QAC3B,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,sBAAsB;YAC3B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,cAAmB,IAAI;QACnC,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,sBAAsB;YAC3B,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,MAAM,MAAM,GAAG,WAAW,CAAC;YACzB,GAAG,EAAE,gBAAgB;YACrB,OAAO,EAAE,oBAAoB;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,sBAAsB;YAC3B,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,4BAA4B;YAC1C,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;QACtE,OAAO,CACL,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;YACrC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YACvD,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW;YAC7B,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;gBACzB,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,WAAW,EAAE,CAC1D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC3B,OAAO,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,OAAO,aAAa,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA4B;QAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,MAAM,IAAI,GAAG,oBAAoB,CAC/B;YACE,GAAG,MAAM;YACT,SAAS,EAAE,IAAI;SAChB,EACD,IAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CACf,CAAC;QAET,MAAM,YAAY,GAAG,SAAS,CAC5B,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CACrD,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,CAAC;YACvB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;SACvD,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;CACF","sourcesContent":["import {\n  getChain,\n  getUserOperationHash,\n  type Address,\n  type Hex,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n  type SignTypedDataParams,\n} from \"@alchemy/aa-core\";\nimport { KernelBaseValidator, type KernelBaseValidatorParams } from \"./base.js\";\nimport {\n  concat,\n  concatHex,\n  encodeFunctionData,\n  getContract,\n  keccak256,\n  pad,\n  toBytes,\n  toHex,\n} from \"viem\";\nimport { KillSwitchValidatorAbi } from \"../abis/KillSwitchValidatorAbi.js\";\nimport { getChainId } from \"../api/index.js\";\nimport { DUMMY_ECDSA_SIG } from \"../constants.js\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport { fixSignedData } from \"../utils.js\";\n\nexport interface KillSwitchValidatorParams extends KernelBaseValidatorParams {\n  guardian: SmartAccountSigner;\n  delaySeconds: number;\n}\n\nexport class KillSwitchValidator extends KernelBaseValidator {\n  protected guardian: SmartAccountSigner;\n  protected delaySeconds: number;\n\n  constructor(params: KillSwitchValidatorParams) {\n    super(params);\n    this.guardian = params.guardian;\n    this.delaySeconds = params.delaySeconds;\n  }\n\n  public static async init(\n    params: KillSwitchValidatorParams\n  ): Promise<KillSwitchValidator> {\n    const chainId = await getChainId(params.projectId);\n    if (!chainId) {\n      throw new Error(\"ChainId not found\");\n    }\n    const chain = getChain(chainId);\n    const instance = new KillSwitchValidator({ ...params, chain });\n    return instance;\n  }\n\n  async signer(): Promise<SmartAccountSigner> {\n    return await Promise.resolve(this.guardian);\n  }\n\n  async getEnableData(): Promise<Hex> {\n    return await (await this.signer()).getAddress();\n  }\n\n  getPausedUntil(): number {\n    return Math.floor(Date.now() / 1000) + this.delaySeconds;\n  }\n\n  encodeEnable(newGuardian: Hex): Hex {\n    return encodeFunctionData({\n      abi: KillSwitchValidatorAbi,\n      functionName: \"enable\",\n      args: [newGuardian],\n    });\n  }\n\n  encodeDisable(disableData: Hex = \"0x\"): Hex {\n    return encodeFunctionData({\n      abi: KillSwitchValidatorAbi,\n      functionName: \"disable\",\n      args: [disableData],\n    });\n  }\n\n  async isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    const kernel = getContract({\n      abi: KernelAccountAbi,\n      address: kernelAccountAddress,\n      publicClient: this.publicClient,\n    });\n    const execDetail = await kernel.read.getExecution([selector]);\n    const enableData = await this.publicClient.readContract({\n      abi: KillSwitchValidatorAbi,\n      address: this.validatorAddress,\n      functionName: \"killSwitchValidatorStorage\",\n      args: [kernelAccountAddress],\n    });\n    const pausedUntil = Math.floor(Date.now() / 1000) + this.delaySeconds;\n    return (\n      execDetail.validator.toLowerCase() ===\n        this.validatorAddress.toLowerCase() &&\n      enableData[0] === (await this.getEnableData()) &&\n      enableData[3] === (await kernel.read.getDisabledMode()) &&\n      enableData[2] === pausedUntil &&\n      enableData[1].toLowerCase() ===\n        (await kernel.read.getDefaultValidator()).toLowerCase()\n    );\n  }\n\n  async getDummyUserOpSignature(): Promise<Hex> {\n    return concatHex([pad(\"0xffffffffffff\", { size: 6 }), DUMMY_ECDSA_SIG]);\n  }\n\n  async signMessage(message: string | Uint8Array): Promise<Hex> {\n    return await this.guardian.signMessage(message);\n  }\n\n  async signTypedData(params: SignTypedDataParams): Promise<Hex> {\n    return fixSignedData(await this.guardian.signTypedData(params));\n  }\n\n  async signUserOp(userOp: UserOperationRequest): Promise<Hex> {\n    const pausedUntil = this.getPausedUntil();\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    const hash = getUserOperationHash(\n      {\n        ...userOp,\n        signature: \"0x\",\n      },\n      this.entryPointAddress,\n      BigInt(this.chain.id)\n    ) as Hex;\n\n    const extendedHash = keccak256(\n      concat([pad(toHex(pausedUntil), { size: 6 }), hash])\n    );\n    const signature = concat([\n      pad(toHex(pausedUntil), { size: 6 }),\n      await this.guardian.signMessage(toBytes(extendedHash)),\n    ]);\n    return signature;\n  }\n}\n"]}
+{"version":3,"file":"kill-switch-validator.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/kill-switch-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,oBAAoB,GAMrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,EACnB,aAAa,GAEd,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,MAAM,EACN,SAAS,EACT,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,GAAG,EACH,OAAO,EACP,KAAK,GACN,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAO5C,MAAM,OAAO,mBAAoB,SAAQ,mBAAmB;IAI1D,YAAY,MAAiC;QAC3C,KAAK,CAAC,MAAM,CAAC,CAAC;QAJN;;;;;WAA6B;QAC7B;;;;;WAAqB;QAI7B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC;IAClD,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,IAAI,CACtB,MAAiC;QAEjC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;SACtC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;IAC3D,CAAC;IAED,YAAY,CAAC,WAAgB;QAC3B,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,sBAAsB;YAC3B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,cAAmB,IAAI;QACnC,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,sBAAsB;YAC3B,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,MAAM,MAAM,GAAG,WAAW,CAAC;YACzB,GAAG,EAAE,gBAAgB;YACrB,OAAO,EAAE,oBAAoB;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,sBAAsB;YAC3B,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,4BAA4B;YAC1C,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;QACtE,OAAO,CACL,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;YACrC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YACvD,UAAU,CAAC,CAAC,CAAC,KAAK,WAAW;YAC7B,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;gBACzB,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,WAAW,EAAE,CAC1D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC3B,OAAO,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,OAAO,aAAa,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA4B;QAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,MAAM,IAAI,GAAG,oBAAoB,CAC/B;YACE,GAAG,MAAM;YACT,SAAS,EAAE,IAAI;SAChB,EACD,IAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CACf,CAAC;QAET,MAAM,YAAY,GAAG,SAAS,CAC5B,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CACrD,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,CAAC;YACvB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;SACvD,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;CACF","sourcesContent":["import {\n  getChain,\n  getUserOperationHash,\n  type Address,\n  type Hex,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n  type SignTypedDataParams,\n} from \"@alchemy/aa-core\";\nimport {\n  KernelBaseValidator,\n  ValidatorMode,\n  type KernelBaseValidatorParams,\n} from \"./base.js\";\nimport {\n  concat,\n  concatHex,\n  encodeFunctionData,\n  getContract,\n  keccak256,\n  pad,\n  toBytes,\n  toHex,\n} from \"viem\";\nimport { KillSwitchValidatorAbi } from \"../abis/KillSwitchValidatorAbi.js\";\nimport { getChainId } from \"../api/index.js\";\nimport { DUMMY_ECDSA_SIG } from \"../constants.js\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport { fixSignedData } from \"../utils.js\";\n\nexport interface KillSwitchValidatorParams extends KernelBaseValidatorParams {\n  guardian: SmartAccountSigner;\n  delaySeconds: number;\n}\n\nexport class KillSwitchValidator extends KernelBaseValidator {\n  protected guardian: SmartAccountSigner;\n  protected delaySeconds: number;\n\n  constructor(params: KillSwitchValidatorParams) {\n    super(params);\n    this.guardian = params.guardian;\n    this.delaySeconds = params.delaySeconds;\n    this.mode = params.mode ?? ValidatorMode.plugin;\n  }\n\n  public static async init(\n    params: KillSwitchValidatorParams\n  ): Promise<KillSwitchValidator> {\n    const chainId = await getChainId(params.projectId);\n    if (!chainId) {\n      throw new Error(\"ChainId not found\");\n    }\n    const chain = getChain(chainId);\n    const instance = new KillSwitchValidator({ ...params, chain });\n    return instance;\n  }\n\n  async signer(): Promise<SmartAccountSigner> {\n    return await Promise.resolve(this.guardian);\n  }\n\n  async getEnableData(): Promise<Hex> {\n    return await (await this.signer()).getAddress();\n  }\n\n  getPausedUntil(): number {\n    return Math.floor(Date.now() / 1000) + this.delaySeconds;\n  }\n\n  encodeEnable(newGuardian: Hex): Hex {\n    return encodeFunctionData({\n      abi: KillSwitchValidatorAbi,\n      functionName: \"enable\",\n      args: [newGuardian],\n    });\n  }\n\n  encodeDisable(disableData: Hex = \"0x\"): Hex {\n    return encodeFunctionData({\n      abi: KillSwitchValidatorAbi,\n      functionName: \"disable\",\n      args: [disableData],\n    });\n  }\n\n  async isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    const kernel = getContract({\n      abi: KernelAccountAbi,\n      address: kernelAccountAddress,\n      publicClient: this.publicClient,\n    });\n    const execDetail = await kernel.read.getExecution([selector]);\n    const enableData = await this.publicClient.readContract({\n      abi: KillSwitchValidatorAbi,\n      address: this.validatorAddress,\n      functionName: \"killSwitchValidatorStorage\",\n      args: [kernelAccountAddress],\n    });\n    const pausedUntil = Math.floor(Date.now() / 1000) + this.delaySeconds;\n    return (\n      execDetail.validator.toLowerCase() ===\n        this.validatorAddress.toLowerCase() &&\n      enableData[0] === (await this.getEnableData()) &&\n      enableData[3] === (await kernel.read.getDisabledMode()) &&\n      enableData[2] === pausedUntil &&\n      enableData[1].toLowerCase() ===\n        (await kernel.read.getDefaultValidator()).toLowerCase()\n    );\n  }\n\n  async getDummyUserOpSignature(): Promise<Hex> {\n    return concatHex([pad(\"0xffffffffffff\", { size: 6 }), DUMMY_ECDSA_SIG]);\n  }\n\n  async signMessage(message: string | Uint8Array): Promise<Hex> {\n    return await this.guardian.signMessage(message);\n  }\n\n  async signTypedData(params: SignTypedDataParams): Promise<Hex> {\n    return fixSignedData(await this.guardian.signTypedData(params));\n  }\n\n  async signUserOp(userOp: UserOperationRequest): Promise<Hex> {\n    const pausedUntil = this.getPausedUntil();\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    const hash = getUserOperationHash(\n      {\n        ...userOp,\n        signature: \"0x\",\n      },\n      this.entryPointAddress,\n      BigInt(this.chain.id)\n    ) as Hex;\n\n    const extendedHash = keccak256(\n      concat([pad(toHex(pausedUntil), { size: 6 }), hash])\n    );\n    const signature = concat([\n      pad(toHex(pausedUntil), { size: 6 }),\n      await this.guardian.signMessage(toBytes(extendedHash)),\n    ]);\n    return signature;\n  }\n}\n"]}

package/dist/esm/kernel-zerodev/validator/session-key-validator.d.ts

@@ -0,0 +1,65 @@
+import { type Address, type Hex, type SmartAccountSigner, type UserOperationRequest, type SignTypedDataParams } from "@alchemy/aa-core";
+import { KernelBaseValidator, type KernelBaseValidatorParams, type ValidatorPluginData } from "./base.js";
+import { MerkleTree } from "merkletreejs";
+import type { Operation } from "../provider.js";
+export interface SessionKeyValidatorParams extends KernelBaseValidatorParams {
+    sessionKey: SmartAccountSigner;
+    sessionKeyData: SessionKeyData;
+}
+export type SessionKeyParams = Pick<SessionKeyValidatorParams, "sessionKeyData" | "enableSignature"> & ValidatorPluginData & {
+    sessionPrivateKey?: Hex;
+    initCode?: Hex;
+    accountAddress?: Address;
+};
+export declare enum ParamCondition {
+    EQUAL = 0,
+    GREATER_THAN = 1,
+    LESS_THAN = 2,
+    GREATER_THAN_OR_EQUAL = 3,
+    LESS_THAN_OR_EQUAL = 4,
+    NOT_EQUAL = 5
+}
+export interface ParamRules {
+    offset: number;
+    condition: ParamCondition;
+    param: Hex;
+}
+export interface Permission {
+    target: Address;
+    valueLimit: number;
+    sig: Hex;
+    rules: ParamRules[];
+    operation: Operation;
+}
+export interface SessionKeyData {
+    validUntil: number;
+    validAfter: number;
+    paymaster?: Address;
+    permissions?: Permission[];
+}
+export declare class SessionKeyValidator extends KernelBaseValidator {
+    protected sessionKey: SmartAccountSigner;
+    sessionKeyData: SessionKeyData;
+    merkleTree: MerkleTree;
+    constructor(params: SessionKeyValidatorParams);
+    static init(params: SessionKeyValidatorParams): Promise<SessionKeyValidator>;
+    shouldDelegateViaFallback(): boolean;
+    findMatchingPermission(callData: Hex): Permission | undefined;
+    private filterByOperation;
+    private filterBySignature;
+    private findPermissionByRule;
+    private getFormattedHex;
+    private evaluateRuleCondition;
+    getMerkleTree(): MerkleTree;
+    encodePermissionData(permission: Permission, merkleProof?: string[]): Hex;
+    getSessionData(): SessionKeyParams;
+    signer(): Promise<SmartAccountSigner>;
+    getEnableData(): Promise<Hex>;
+    isPluginEnabled(kernelAccountAddress: Address, selector: Hex): Promise<boolean>;
+    getDummyUserOpSignature(callData: Hex): Promise<Hex>;
+    encodeEnable(sessionKeyEnableData: Hex): Hex;
+    encodeDisable(sessionKey: Hex): Hex;
+    signMessage(message: string | Uint8Array): Promise<Hex>;
+    signTypedData(params: SignTypedDataParams): Promise<Hex>;
+    signUserOp(userOp: UserOperationRequest): Promise<Hex>;
+}

package/dist/esm/kernel-zerodev/validator/session-key-validator.js

@@ -0,0 +1,341 @@
+import { getUserOperationHash, getChain, } from "@alchemy/aa-core";
+import { KernelBaseValidator, ValidatorMode, } from "./base.js";
+import { encodeFunctionData, toBytes, concat, pad, toHex, keccak256, encodeAbiParameters, concatHex, zeroAddress, decodeFunctionData, isHex, getFunctionSelector, } from "viem";
+import { SessionKeyValidatorAbi } from "../abis/SessionKeyValidatorAbi.js";
+import { DUMMY_ECDSA_SIG } from "../constants.js";
+import { KernelAccountAbi } from "../abis/KernelAccountAbi.js";
+import { MerkleTree } from "merkletreejs";
+import { getChainId } from "../api/index.js";
+import { fixSignedData } from "../utils.js";
+export var ParamCondition;
+(function (ParamCondition) {
+    ParamCondition[ParamCondition["EQUAL"] = 0] = "EQUAL";
+    ParamCondition[ParamCondition["GREATER_THAN"] = 1] = "GREATER_THAN";
+    ParamCondition[ParamCondition["LESS_THAN"] = 2] = "LESS_THAN";
+    ParamCondition[ParamCondition["GREATER_THAN_OR_EQUAL"] = 3] = "GREATER_THAN_OR_EQUAL";
+    ParamCondition[ParamCondition["LESS_THAN_OR_EQUAL"] = 4] = "LESS_THAN_OR_EQUAL";
+    ParamCondition[ParamCondition["NOT_EQUAL"] = 5] = "NOT_EQUAL";
+})(ParamCondition || (ParamCondition = {}));
+export class SessionKeyValidator extends KernelBaseValidator {
+    constructor(params) {
+        super(params);
+        Object.defineProperty(this, "sessionKey", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "sessionKeyData", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "merkleTree", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        this.sessionKey = params.sessionKey;
+        this.sessionKeyData = {
+            ...params.sessionKeyData,
+            paymaster: params.sessionKeyData.paymaster ?? zeroAddress,
+        };
+        this.merkleTree = this.getMerkleTree();
+        this.selector =
+            params.selector ??
+                getFunctionSelector("execute(address, uint256, bytes, uint8)");
+        this.executor = params.executor ?? zeroAddress;
+        this.mode = params.mode ?? ValidatorMode.plugin;
+    }
+    static async init(params) {
+        const chainId = await getChainId(params.projectId);
+        if (!chainId) {
+            throw new Error("ChainId not found");
+        }
+        const chain = getChain(chainId);
+        const instance = new SessionKeyValidator({ ...params, chain });
+        return instance;
+    }
+    shouldDelegateViaFallback() {
+        return this.merkleTree.getHexRoot() === pad("0x00", { size: 32 });
+    }
+    findMatchingPermission(callData) {
+        try {
+            const { functionName, args } = decodeFunctionData({
+                abi: KernelAccountAbi,
+                data: callData,
+            });
+            if (functionName !== "execute")
+                return undefined;
+            const permissionsList = this.sessionKeyData.permissions;
+            if (!permissionsList || !permissionsList.length)
+                return undefined;
+            const targetToMatch = args[0].toLowerCase();
+            let targetPermissions = permissionsList.filter((permission) => permission.target.toLowerCase() === targetToMatch);
+            if (!targetPermissions.length) {
+                targetPermissions = permissionsList.filter((permission) => permission.target.toLowerCase() === zeroAddress.toLowerCase());
+            }
+            if (!targetPermissions.length)
+                return undefined;
+            const operationPermissions = this.filterByOperation(targetPermissions, args[3]);
+            if (!operationPermissions.length)
+                return undefined;
+            const signaturePermissions = this.filterBySignature(operationPermissions, args[2].slice(0, 10).toLowerCase());
+            const valueLimitPermissions = signaturePermissions.filter((permission) => permission.valueLimit >= args[1]);
+            if (!valueLimitPermissions.length)
+                return undefined;
+            const sortedPermissions = valueLimitPermissions.sort((a, b) => b.valueLimit - a.valueLimit);
+            return this.findPermissionByRule(sortedPermissions, args[2]);
+        }
+        catch (error) {
+            return undefined;
+        }
+    }
+    filterByOperation(permissions, operation) {
+        return permissions.filter((permission) => permission.operation === operation);
+    }
+    filterBySignature(permissions, signature) {
+        return permissions.filter((permission) => permission.sig.toLowerCase() === signature);
+    }
+    findPermissionByRule(permissions, data) {
+        return permissions.find((permission) => {
+            for (const rule of permission.rules) {
+                const dataParam = this.getFormattedHex("0x" + data.slice(10 + rule.offset * 2, 10 + rule.offset * 2 + 64));
+                const ruleParam = this.getFormattedHex(rule.param);
+                if (!this.evaluateRuleCondition(dataParam, ruleParam, rule.condition)) {
+                    return false;
+                }
+            }
+            return true;
+        });
+    }
+    getFormattedHex(value) {
+        return pad(isHex(value) ? value : toHex(value), {
+            size: 32,
+        }).toLowerCase();
+    }
+    evaluateRuleCondition(dataParam, ruleParam, condition) {
+        switch (condition) {
+            case ParamCondition.EQUAL:
+                return dataParam === ruleParam;
+            case ParamCondition.GREATER_THAN:
+                return dataParam > ruleParam;
+            case ParamCondition.LESS_THAN:
+                return dataParam < ruleParam;
+            case ParamCondition.GREATER_THAN_OR_EQUAL:
+                return dataParam >= ruleParam;
+            case ParamCondition.LESS_THAN_OR_EQUAL:
+                return dataParam <= ruleParam;
+            case ParamCondition.NOT_EQUAL:
+                return dataParam !== ruleParam;
+            default:
+                return false;
+        }
+    }
+    getMerkleTree() {
+        const permissionPacked = this.sessionKeyData.permissions?.map((permission) => this.encodePermissionData(permission));
+        if (permissionPacked?.length === 1)
+            permissionPacked.push(permissionPacked[0]);
+        return permissionPacked && permissionPacked.length !== 0
+            ? new MerkleTree(permissionPacked, keccak256, {
+                sortPairs: true,
+                hashLeaves: true,
+            })
+            : new MerkleTree([pad("0x00", { size: 32 })], keccak256, {
+                hashLeaves: false,
+            });
+    }
+    encodePermissionData(permission, merkleProof) {
+        let permissionParam = {
+            components: [
+                {
+                    name: "target",
+                    type: "address",
+                },
+                {
+                    name: "valueLimit",
+                    type: "uint256",
+                },
+                {
+                    name: "sig",
+                    type: "bytes4",
+                },
+                {
+                    components: [
+                        {
+                            name: "offset",
+                            type: "uint256",
+                        },
+                        {
+                            internalType: "enum ParamCondition",
+                            name: "condition",
+                            type: "uint8",
+                        },
+                        {
+                            name: "param",
+                            type: "bytes32",
+                        },
+                    ],
+                    name: "rules",
+                    type: "tuple[]",
+                },
+                {
+                    internalType: "enum Operation",
+                    name: "operation",
+                    type: "uint8",
+                },
+            ],
+            name: "permission",
+            type: "tuple",
+        };
+        let params;
+        let values;
+        if (merkleProof) {
+            params = [
+                permissionParam,
+                {
+                    name: "merkleProof",
+                    type: "bytes32[]",
+                },
+            ];
+            values = [permission, merkleProof];
+        }
+        else {
+            params = [permissionParam];
+            values = [permission];
+        }
+        return encodeAbiParameters(params, values);
+    }
+    getSessionData() {
+        if (!this.selector || !this.executor) {
+            throw Error("Plugin Validator data params uninitialised");
+        }
+        return {
+            selector: this.selector,
+            executor: this.executor,
+            validUntil: this.validUntil,
+            validAfter: this.validAfter,
+            sessionKeyData: this.sessionKeyData,
+            enableSignature: this.enableSignature,
+        };
+    }
+    async signer() {
+        return await Promise.resolve(this.sessionKey);
+    }
+    async getEnableData() {
+        if (!this.merkleTree) {
+            throw Error("SessionKeyValidator: MerkleTree not generated");
+        }
+        return concat([
+            await this.sessionKey.getAddress(),
+            pad(this.merkleTree.getHexRoot(), { size: 32 }),
+            pad(toHex(this.sessionKeyData.validAfter), { size: 6 }),
+            pad(toHex(this.sessionKeyData.validUntil), { size: 6 }),
+            this.sessionKeyData.paymaster,
+        ]);
+    }
+    async isPluginEnabled(kernelAccountAddress, selector) {
+        if (!this.publicClient) {
+            throw new Error("Validator uninitialized: PublicClient missing");
+        }
+        const execDetail = await this.publicClient.readContract({
+            abi: KernelAccountAbi,
+            address: kernelAccountAddress,
+            functionName: "getExecution",
+            args: [selector],
+        });
+        const enableData = await this.publicClient.readContract({
+            abi: SessionKeyValidatorAbi,
+            address: this.validatorAddress,
+            functionName: "sessionData",
+            args: [await this.sessionKey.getAddress(), kernelAccountAddress],
+        });
+        const enableDataHex = concatHex([
+            await this.sessionKey.getAddress(),
+            pad(enableData[0], { size: 4 }),
+            pad(toHex(enableData[1]), { size: 6 }),
+            pad(toHex(enableData[2]), { size: 6 }),
+            enableData[3],
+        ]);
+        return (execDetail.validator.toLowerCase() ===
+            this.validatorAddress.toLowerCase() &&
+            enableData[4] &&
+            enableDataHex.toLowerCase() === (await this.getEnableData()).toLowerCase());
+    }
+    async getDummyUserOpSignature(callData) {
+        const matchingPermission = this.findMatchingPermission(callData);
+        if (!matchingPermission && !this.shouldDelegateViaFallback()) {
+            throw Error("SessionKeyValidator: No matching permission found for the userOp");
+        }
+        const encodedPermissionData = this.sessionKeyData.permissions &&
+            this.sessionKeyData.permissions.length !== 0 &&
+            matchingPermission
+            ? this.encodePermissionData(matchingPermission)
+            : "0x";
+        const merkleProof = this.merkleTree.getHexProof(keccak256(encodedPermissionData));
+        const encodedData = this.sessionKeyData.permissions &&
+            this.sessionKeyData.permissions.length !== 0 &&
+            matchingPermission
+            ? this.encodePermissionData(matchingPermission, merkleProof)
+            : "0x";
+        return concatHex([
+            await this.sessionKey.getAddress(),
+            DUMMY_ECDSA_SIG,
+            encodedData,
+        ]);
+    }
+    encodeEnable(sessionKeyEnableData) {
+        return encodeFunctionData({
+            abi: SessionKeyValidatorAbi,
+            functionName: "enable",
+            args: [sessionKeyEnableData],
+        });
+    }
+    encodeDisable(sessionKey) {
+        return encodeFunctionData({
+            abi: SessionKeyValidatorAbi,
+            functionName: "disable",
+            args: [sessionKey],
+        });
+    }
+    async signMessage(message) {
+        return await this.sessionKey.signMessage(message);
+    }
+    async signTypedData(params) {
+        return fixSignedData(await this.sessionKey.signTypedData(params));
+    }
+    async signUserOp(userOp) {
+        if (!this.chain) {
+            throw new Error("Validator uninitialized");
+        }
+        const hash = getUserOperationHash({
+            ...userOp,
+            signature: "0x",
+        }, this.entryPointAddress, BigInt(this.chain.id));
+        const formattedMessage = typeof hash === "string" ? toBytes(hash) : hash;
+        const matchingPermission = this.findMatchingPermission(userOp.callData);
+        if (!matchingPermission && !this.shouldDelegateViaFallback()) {
+            throw Error("SessionKeyValidator: No matching permission found for the userOp");
+        }
+        const encodedPermissionData = this.sessionKeyData.permissions &&
+            this.sessionKeyData.permissions.length !== 0 &&
+            matchingPermission
+            ? this.encodePermissionData(matchingPermission)
+            : "0x";
+        const merkleProof = this.merkleTree.getHexProof(keccak256(encodedPermissionData));
+        const encodedData = this.sessionKeyData.permissions &&
+            this.sessionKeyData.permissions.length !== 0 &&
+            matchingPermission
+            ? this.encodePermissionData(matchingPermission, merkleProof)
+            : "0x";
+        const signature = concat([
+            await this.sessionKey.getAddress(),
+            await this.sessionKey.signMessage(formattedMessage),
+            encodedData,
+        ]);
+        return signature;
+    }
+}
+//# sourceMappingURL=session-key-validator.js.map

package/dist/esm/kernel-zerodev/validator/session-key-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-key-validator.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/session-key-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EAKpB,QAAQ,GAET,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,EACnB,aAAa,GAGd,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,kBAAkB,EAClB,OAAO,EACP,MAAM,EACN,GAAG,EACH,KAAK,EACL,SAAS,EACT,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,kBAAkB,EAClB,KAAK,EACL,mBAAmB,GACpB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAiB5C,MAAM,CAAN,IAAY,cAOX;AAPD,WAAY,cAAc;IACxB,qDAAS,CAAA;IACT,mEAAgB,CAAA;IAChB,6DAAa,CAAA;IACb,qFAAyB,CAAA;IACzB,+EAAsB,CAAA;IACtB,6DAAa,CAAA;AACf,CAAC,EAPW,cAAc,KAAd,cAAc,QAOzB;AAuBD,MAAM,OAAO,mBAAoB,SAAQ,mBAAmB;IAK1D,YAAY,MAAiC;QAC3C,KAAK,CAAC,MAAM,CAAC,CAAC;QALN;;;;;WAA+B;QACzC;;;;;WAA+B;QAC/B;;;;;WAAuB;QAIrB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG;YACpB,GAAG,MAAM,CAAC,cAAc;YACxB,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,SAAS,IAAI,WAAW;SAC1D,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ;YACX,MAAM,CAAC,QAAQ;gBACf,mBAAmB,CAAC,yCAAyC,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC;IAClD,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,IAAI,CACtB,MAAiC;QAEjC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;SACtC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yBAAyB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,sBAAsB,CAAC,QAAa;QAClC,IAAI;YACF,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC;gBAChD,GAAG,EAAE,gBAAgB;gBACrB,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YAEH,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAEjD,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;YACxD,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAElE,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAG5C,IAAI,iBAAiB,GAAG,eAAe,CAAC,MAAM,CAC5C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,aAAa,CAClE,CAAC;YAGF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE;gBAC7B,iBAAiB,GAAG,eAAe,CAAC,MAAM,CACxC,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,CAChE,CAAC;aACH;YAED,IAAI,CAAC,iBAAiB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEhD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,iBAAiB,EACjB,IAAI,CAAC,CAAC,CAAC,CACR,CAAC;YAEF,IAAI,CAAC,oBAAoB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEnD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,oBAAoB,EACpB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CACnC,CAAC;YAEF,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,MAAM,CACvD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CACjD,CAAC;YAEF,IAAI,CAAC,qBAAqB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEpD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,IAAI,CAClD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CACtC,CAAC;YAEF,OAAO,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;SAC9D;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,SAAS,CAAC;SAClB;IACH,CAAC;IAEO,iBAAiB,CACvB,WAAyB,EACzB,SAAoB;QAEpB,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CACnD,CAAC;IACJ,CAAC;IAEO,iBAAiB,CACvB,WAAyB,EACzB,SAAiB;QAEjB,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,SAAS,CAC3D,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAC1B,WAAyB,EACzB,IAAY;QAEZ,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACrC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE;gBACnC,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CACzC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CACnE,CAAC;gBACF,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAExD,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;oBACrE,OAAO,KAAK,CAAC;iBACd;aACF;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAC9C,IAAI,EAAE,EAAE;SACT,CAAC,CAAC,WAAW,EAAS,CAAC;IAC1B,CAAC;IAEO,qBAAqB,CAC3B,SAAc,EACd,SAAc,EACd,SAAyB;QAEzB,QAAQ,SAAS,EAAE;YACjB,KAAK,cAAc,CAAC,KAAK;gBACvB,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC,KAAK,cAAc,CAAC,YAAY;gBAC9B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,cAAc,CAAC,SAAS;gBAC3B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,cAAc,CAAC,qBAAqB;gBACvC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,cAAc,CAAC,kBAAkB;gBACpC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,cAAc,CAAC,SAAS;gBAC3B,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC;gBACE,OAAO,KAAK,CAAC;SAChB;IACH,CAAC;IAED,aAAa;QACX,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CAC3D,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CACtD,CAAC;QAIF,IAAI,gBAAgB,EAAE,MAAM,KAAK,CAAC;YAChC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7C,OAAO,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACtD,CAAC,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAE,SAAS,EAAE;gBAC1C,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;aACjB,CAAC;YACJ,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE;gBACrD,UAAU,EAAE,KAAK;aAClB,CAAC,CAAC;IACT,CAAC;IAED,oBAAoB,CAAC,UAAsB,EAAE,WAAsB;QACjE,IAAI,eAAe,GAAG;YACpB,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,QAAQ;iBACf;gBACD;oBACE,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,SAAS;yBAChB;wBACD;4BACE,YAAY,EAAE,qBAAqB;4BACnC,IAAI,EAAE,WAAW;4BACjB,IAAI,EAAE,OAAO;yBACd;wBACD;4BACE,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,SAAS;yBAChB;qBACF;oBACD,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,YAAY,EAAE,gBAAgB;oBAC9B,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,OAAO;iBACd;aACF;YACD,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,OAAO;SACd,CAAC;QACF,IAAI,MAAM,CAAC;QACX,IAAI,MAAM,CAAC;QACX,IAAI,WAAW,EAAE;YACf,MAAM,GAAG;gBACP,eAAe;gBACf;oBACE,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,WAAW;iBAClB;aACF,CAAC;YACF,MAAM,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;SACpC;aAAM;YACL,MAAM,GAAG,CAAC,eAAe,CAAC,CAAC;YAC3B,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;SACvB;QACD,OAAO,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YACpB,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAC9D;QACD,OAAO,MAAM,CAAC;YACZ,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACtD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,cAAc,CAAC,SAAU;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,gBAAgB;YACrB,OAAO,EAAE,oBAAoB;YAC7B,YAAY,EAAE,cAAc;YAC5B,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,sBAAsB;YAC3B,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,oBAAoB,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,SAAS,CAAC;YAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,UAAU,CAAC,CAAC,CAAC;SACd,CAAC,CAAC;QACH,OAAO,CACL,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;YACrC,UAAU,CAAC,CAAC,CAAC;YACb,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAC3E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,QAAa;QACzC,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE;YAC5D,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;SACH;QACD,MAAM,qBAAqB,GACzB,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAC7C,SAAS,CAAC,qBAAqB,CAAC,CACjC,CAAC;QACF,MAAM,WAAW,GACf,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,SAAS,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,eAAe;YACf,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,oBAAyB;QACpC,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,sBAAsB;YAC3B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,UAAe;QAC3B,OAAO,kBAAkB,CAAC;YACxB,GAAG,EAAE,sBAAsB;YAC3B,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,OAAO,aAAa,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA4B;QAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,MAAM,IAAI,GAAG,oBAAoB,CAC/B;YACE,GAAG,MAAM;YACT,SAAS,EAAE,IAAI;SAChB,EACD,IAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzE,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE;YAC5D,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;SACH;QACD,MAAM,qBAAqB,GACzB,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAC7C,SAAS,CAAC,qBAAqB,CAAC,CACjC,CAAC;QACF,MAAM,WAAW,GACf,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,SAAS,GAAG,MAAM,CAAC;YACvB,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACnD,WAAW;SACZ,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;CACF","sourcesContent":["import {\n  getUserOperationHash,\n  type Address,\n  type Hex,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n  getChain,\n  type SignTypedDataParams,\n} from \"@alchemy/aa-core\";\nimport {\n  KernelBaseValidator,\n  ValidatorMode,\n  type KernelBaseValidatorParams,\n  type ValidatorPluginData,\n} from \"./base.js\";\nimport {\n  encodeFunctionData,\n  toBytes,\n  concat,\n  pad,\n  toHex,\n  keccak256,\n  encodeAbiParameters,\n  concatHex,\n  zeroAddress,\n  decodeFunctionData,\n  isHex,\n  getFunctionSelector,\n} from \"viem\";\nimport { SessionKeyValidatorAbi } from \"../abis/SessionKeyValidatorAbi.js\";\nimport { DUMMY_ECDSA_SIG } from \"../constants.js\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport { MerkleTree } from \"merkletreejs\";\nimport type { Operation } from \"../provider.js\";\nimport { getChainId } from \"../api/index.js\";\nimport { fixSignedData } from \"../utils.js\";\n\nexport interface SessionKeyValidatorParams extends KernelBaseValidatorParams {\n  sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n}\n\nexport type SessionKeyParams = Pick<\n  SessionKeyValidatorParams,\n  \"sessionKeyData\" | \"enableSignature\"\n> &\n  ValidatorPluginData & {\n    sessionPrivateKey?: Hex;\n    initCode?: Hex;\n    accountAddress?: Address;\n  };\n\nexport enum ParamCondition {\n  EQUAL = 0,\n  GREATER_THAN = 1,\n  LESS_THAN = 2,\n  GREATER_THAN_OR_EQUAL = 3,\n  LESS_THAN_OR_EQUAL = 4,\n  NOT_EQUAL = 5,\n}\n\nexport interface ParamRules {\n  offset: number;\n  condition: ParamCondition;\n  param: Hex;\n}\n\nexport interface Permission {\n  target: Address;\n  valueLimit: number;\n  sig: Hex;\n  rules: ParamRules[];\n  operation: Operation;\n}\n\nexport interface SessionKeyData {\n  validUntil: number;\n  validAfter: number;\n  paymaster?: Address;\n  permissions?: Permission[];\n}\n\nexport class SessionKeyValidator extends KernelBaseValidator {\n  protected sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n  merkleTree: MerkleTree;\n\n  constructor(params: SessionKeyValidatorParams) {\n    super(params);\n    this.sessionKey = params.sessionKey;\n    this.sessionKeyData = {\n      ...params.sessionKeyData,\n      paymaster: params.sessionKeyData.paymaster ?? zeroAddress,\n    };\n    this.merkleTree = this.getMerkleTree();\n    this.selector =\n      params.selector ??\n      getFunctionSelector(\"execute(address, uint256, bytes, uint8)\");\n    this.executor = params.executor ?? zeroAddress;\n    this.mode = params.mode ?? ValidatorMode.plugin;\n  }\n\n  public static async init(\n    params: SessionKeyValidatorParams\n  ): Promise<SessionKeyValidator> {\n    const chainId = await getChainId(params.projectId);\n    if (!chainId) {\n      throw new Error(\"ChainId not found\");\n    }\n    const chain = getChain(chainId);\n    const instance = new SessionKeyValidator({ ...params, chain });\n    return instance;\n  }\n\n  shouldDelegateViaFallback(): boolean {\n    return this.merkleTree.getHexRoot() === pad(\"0x00\", { size: 32 });\n  }\n\n  findMatchingPermission(callData: Hex): Permission | undefined {\n    try {\n      const { functionName, args } = decodeFunctionData({\n        abi: KernelAccountAbi,\n        data: callData,\n      });\n\n      if (functionName !== \"execute\") return undefined;\n\n      const permissionsList = this.sessionKeyData.permissions;\n      if (!permissionsList || !permissionsList.length) return undefined;\n\n      const targetToMatch = args[0].toLowerCase();\n\n      // Filter permissions by target\n      let targetPermissions = permissionsList.filter(\n        (permission) => permission.target.toLowerCase() === targetToMatch\n      );\n\n      // If no permissions match the exact target, check for generic permissions (using zero address)\n      if (!targetPermissions.length) {\n        targetPermissions = permissionsList.filter(\n          (permission) =>\n            permission.target.toLowerCase() === zeroAddress.toLowerCase()\n        );\n      }\n\n      if (!targetPermissions.length) return undefined;\n\n      const operationPermissions = this.filterByOperation(\n        targetPermissions,\n        args[3]\n      );\n\n      if (!operationPermissions.length) return undefined;\n\n      const signaturePermissions = this.filterBySignature(\n        operationPermissions,\n        args[2].slice(0, 10).toLowerCase()\n      );\n\n      const valueLimitPermissions = signaturePermissions.filter(\n        (permission) => permission.valueLimit >= args[1]\n      );\n\n      if (!valueLimitPermissions.length) return undefined;\n\n      const sortedPermissions = valueLimitPermissions.sort(\n        (a, b) => b.valueLimit - a.valueLimit\n      );\n\n      return this.findPermissionByRule(sortedPermissions, args[2]);\n    } catch (error) {\n      return undefined;\n    }\n  }\n\n  private filterByOperation(\n    permissions: Permission[],\n    operation: Operation\n  ): Permission[] {\n    return permissions.filter(\n      (permission) => permission.operation === operation\n    );\n  }\n\n  private filterBySignature(\n    permissions: Permission[],\n    signature: string\n  ): Permission[] {\n    return permissions.filter(\n      (permission) => permission.sig.toLowerCase() === signature\n    );\n  }\n\n  private findPermissionByRule(\n    permissions: Permission[],\n    data: string\n  ): Permission | undefined {\n    return permissions.find((permission) => {\n      for (const rule of permission.rules) {\n        const dataParam: Hex = this.getFormattedHex(\n          \"0x\" + data.slice(10 + rule.offset * 2, 10 + rule.offset * 2 + 64)\n        );\n        const ruleParam: Hex = this.getFormattedHex(rule.param);\n\n        if (!this.evaluateRuleCondition(dataParam, ruleParam, rule.condition)) {\n          return false;\n        }\n      }\n      return true;\n    });\n  }\n\n  private getFormattedHex(value: string): Hex {\n    return pad(isHex(value) ? value : toHex(value), {\n      size: 32,\n    }).toLowerCase() as Hex;\n  }\n\n  private evaluateRuleCondition(\n    dataParam: Hex,\n    ruleParam: Hex,\n    condition: ParamCondition\n  ): boolean {\n    switch (condition) {\n      case ParamCondition.EQUAL:\n        return dataParam === ruleParam;\n      case ParamCondition.GREATER_THAN:\n        return dataParam > ruleParam;\n      case ParamCondition.LESS_THAN:\n        return dataParam < ruleParam;\n      case ParamCondition.GREATER_THAN_OR_EQUAL:\n        return dataParam >= ruleParam;\n      case ParamCondition.LESS_THAN_OR_EQUAL:\n        return dataParam <= ruleParam;\n      case ParamCondition.NOT_EQUAL:\n        return dataParam !== ruleParam;\n      default:\n        return false;\n    }\n  }\n\n  getMerkleTree(): MerkleTree {\n    const permissionPacked = this.sessionKeyData.permissions?.map(\n      (permission) => this.encodePermissionData(permission)\n    );\n\n    // Having one leaf returns empty array in getProof(). To hack it we push the leaf twice\n    // issue - https://github.com/merkletreejs/merkletreejs/issues/58\n    if (permissionPacked?.length === 1)\n      permissionPacked.push(permissionPacked[0]);\n\n    return permissionPacked && permissionPacked.length !== 0\n      ? new MerkleTree(permissionPacked, keccak256, {\n          sortPairs: true,\n          hashLeaves: true,\n        })\n      : new MerkleTree([pad(\"0x00\", { size: 32 })], keccak256, {\n          hashLeaves: false,\n        });\n  }\n\n  encodePermissionData(permission: Permission, merkleProof?: string[]): Hex {\n    let permissionParam = {\n      components: [\n        {\n          name: \"target\",\n          type: \"address\",\n        },\n        {\n          name: \"valueLimit\",\n          type: \"uint256\",\n        },\n        {\n          name: \"sig\",\n          type: \"bytes4\",\n        },\n        {\n          components: [\n            {\n              name: \"offset\",\n              type: \"uint256\",\n            },\n            {\n              internalType: \"enum ParamCondition\",\n              name: \"condition\",\n              type: \"uint8\",\n            },\n            {\n              name: \"param\",\n              type: \"bytes32\",\n            },\n          ],\n          name: \"rules\",\n          type: \"tuple[]\",\n        },\n        {\n          internalType: \"enum Operation\",\n          name: \"operation\",\n          type: \"uint8\",\n        },\n      ],\n      name: \"permission\",\n      type: \"tuple\",\n    };\n    let params;\n    let values;\n    if (merkleProof) {\n      params = [\n        permissionParam,\n        {\n          name: \"merkleProof\",\n          type: \"bytes32[]\",\n        },\n      ];\n      values = [permission, merkleProof];\n    } else {\n      params = [permissionParam];\n      values = [permission];\n    }\n    return encodeAbiParameters(params, values);\n  }\n\n  getSessionData(): SessionKeyParams {\n    if (!this.selector || !this.executor) {\n      throw Error(\"Plugin Validator data params uninitialised\");\n    }\n    return {\n      selector: this.selector,\n      executor: this.executor,\n      validUntil: this.validUntil,\n      validAfter: this.validAfter,\n      sessionKeyData: this.sessionKeyData,\n      enableSignature: this.enableSignature,\n    };\n  }\n\n  async signer(): Promise<SmartAccountSigner> {\n    return await Promise.resolve(this.sessionKey);\n  }\n\n  async getEnableData(): Promise<Hex> {\n    if (!this.merkleTree) {\n      throw Error(\"SessionKeyValidator: MerkleTree not generated\");\n    }\n    return concat([\n      await this.sessionKey.getAddress(),\n      pad(this.merkleTree.getHexRoot() as Hex, { size: 32 }),\n      pad(toHex(this.sessionKeyData.validAfter), { size: 6 }),\n      pad(toHex(this.sessionKeyData.validUntil), { size: 6 }),\n      this.sessionKeyData.paymaster!,\n    ]);\n  }\n\n  async isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    const execDetail = await this.publicClient.readContract({\n      abi: KernelAccountAbi,\n      address: kernelAccountAddress,\n      functionName: \"getExecution\",\n      args: [selector],\n    });\n    const enableData = await this.publicClient.readContract({\n      abi: SessionKeyValidatorAbi,\n      address: this.validatorAddress,\n      functionName: \"sessionData\",\n      args: [await this.sessionKey.getAddress(), kernelAccountAddress],\n    });\n    const enableDataHex = concatHex([\n      await this.sessionKey.getAddress(),\n      pad(enableData[0], { size: 4 }),\n      pad(toHex(enableData[1]), { size: 6 }),\n      pad(toHex(enableData[2]), { size: 6 }),\n      enableData[3],\n    ]);\n    return (\n      execDetail.validator.toLowerCase() ===\n        this.validatorAddress.toLowerCase() &&\n      enableData[4] &&\n      enableDataHex.toLowerCase() === (await this.getEnableData()).toLowerCase()\n    );\n  }\n\n  async getDummyUserOpSignature(callData: Hex): Promise<Hex> {\n    const matchingPermission = this.findMatchingPermission(callData);\n    if (!matchingPermission && !this.shouldDelegateViaFallback()) {\n      throw Error(\n        \"SessionKeyValidator: No matching permission found for the userOp\"\n      );\n    }\n    const encodedPermissionData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission)\n        : \"0x\";\n    const merkleProof = this.merkleTree.getHexProof(\n      keccak256(encodedPermissionData)\n    );\n    const encodedData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission, merkleProof)\n        : \"0x\";\n    return concatHex([\n      await this.sessionKey.getAddress(),\n      DUMMY_ECDSA_SIG,\n      encodedData,\n    ]);\n  }\n\n  encodeEnable(sessionKeyEnableData: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"enable\",\n      args: [sessionKeyEnableData],\n    });\n  }\n\n  encodeDisable(sessionKey: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"disable\",\n      args: [sessionKey],\n    });\n  }\n\n  async signMessage(message: string | Uint8Array): Promise<Hex> {\n    return await this.sessionKey.signMessage(message);\n  }\n\n  async signTypedData(params: SignTypedDataParams): Promise<Hex> {\n    return fixSignedData(await this.sessionKey.signTypedData(params));\n  }\n\n  async signUserOp(userOp: UserOperationRequest): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    const hash = getUserOperationHash(\n      {\n        ...userOp,\n        signature: \"0x\",\n      },\n      this.entryPointAddress,\n      BigInt(this.chain.id)\n    );\n    const formattedMessage = typeof hash === \"string\" ? toBytes(hash) : hash;\n\n    const matchingPermission = this.findMatchingPermission(userOp.callData);\n    if (!matchingPermission && !this.shouldDelegateViaFallback()) {\n      throw Error(\n        \"SessionKeyValidator: No matching permission found for the userOp\"\n      );\n    }\n    const encodedPermissionData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission)\n        : \"0x\";\n    const merkleProof = this.merkleTree.getHexProof(\n      keccak256(encodedPermissionData)\n    );\n    const encodedData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission, merkleProof)\n        : \"0x\";\n    const signature = concat([\n      await this.sessionKey.getAddress(),\n      await this.sessionKey.signMessage(formattedMessage),\n      encodedData,\n    ]);\n    return signature;\n  }\n}\n"]}

package/dist/esm/kernel-zerodev/validator/types.d.ts

@@ -1,17 +1,21 @@
 import type { ECDSAValidator, ECDSAValidatorParams } from "./ecdsa-validator.js";
 import type { ERC165SessionKeyValidator, ERC165SessionKeyValidatorParams } from "./erc165-session-key-validator.js";
 import type { KillSwitchValidator, KillSwitchValidatorParams } from "./kill-switch-validator.js";
-export type SupportedValidators = "ECDSA" | "KILL_SWITCH" | "ERC165_SESSION_KEY";
+import type { SessionKeyValidator, SessionKeyValidatorParams, ParamRules, Permission, SessionKeyData, SessionKeyParams } from "./session-key-validator.js";
+export type SupportedValidators = "ECDSA" | "KILL_SWITCH" | "ERC165_SESSION_KEY" | "SESSION_KEY";
 export type ValidatorTypeMap = {
     ECDSA: ECDSAValidator;
     KILL_SWITCH: KillSwitchValidator;
     ERC165_SESSION_KEY: ERC165SessionKeyValidator;
+    SESSION_KEY: SessionKeyValidator;
 };
 export type ValidatorParamsMap = {
     ECDSA: ECDSAValidatorParams;
     KILL_SWITCH: KillSwitchValidatorParams;
     ERC165_SESSION_KEY: ERC165SessionKeyValidatorParams;
+    SESSION_KEY: SessionKeyValidatorParams;
 };
 export type ValidatorMap = {
     [V in SupportedValidators]: new (params: ValidatorParamsMap[V]) => ValidatorTypeMap[V];
 };
+export type { ParamRules, Permission, SessionKeyData, SessionKeyParams };

package/dist/esm/kernel-zerodev/validator/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ECDSAValidator,\n  ECDSAValidatorParams,\n} from \"./ecdsa-validator.js\";\nimport type {\n  ERC165SessionKeyValidator,\n  ERC165SessionKeyValidatorParams,\n} from \"./erc165-session-key-validator.js\";\n\nimport type {\n  KillSwitchValidator,\n  KillSwitchValidatorParams,\n} from \"./kill-switch-validator.js\";\n\nexport type SupportedValidators =\n  | \"ECDSA\"\n  | \"KILL_SWITCH\"\n  | \"ERC165_SESSION_KEY\";\n\nexport type ValidatorTypeMap = {\n  ECDSA: ECDSAValidator;\n  KILL_SWITCH: KillSwitchValidator;\n  ERC165_SESSION_KEY: ERC165SessionKeyValidator;\n};\n\nexport type ValidatorParamsMap = {\n  ECDSA: ECDSAValidatorParams;\n  KILL_SWITCH: KillSwitchValidatorParams;\n  ERC165_SESSION_KEY: ERC165SessionKeyValidatorParams;\n};\n\nexport type ValidatorMap = {\n  [V in SupportedValidators]: new (\n    params: ValidatorParamsMap[V]\n  ) => ValidatorTypeMap[V];\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ECDSAValidator,\n  ECDSAValidatorParams,\n} from \"./ecdsa-validator.js\";\nimport type {\n  ERC165SessionKeyValidator,\n  ERC165SessionKeyValidatorParams,\n} from \"./erc165-session-key-validator.js\";\n\nimport type {\n  KillSwitchValidator,\n  KillSwitchValidatorParams,\n} from \"./kill-switch-validator.js\";\nimport type {\n  SessionKeyValidator,\n  SessionKeyValidatorParams,\n  ParamRules,\n  Permission,\n  SessionKeyData,\n  SessionKeyParams,\n} from \"./session-key-validator.js\";\n\nexport type SupportedValidators =\n  | \"ECDSA\"\n  | \"KILL_SWITCH\"\n  | \"ERC165_SESSION_KEY\"\n  | \"SESSION_KEY\";\n\nexport type ValidatorTypeMap = {\n  ECDSA: ECDSAValidator;\n  KILL_SWITCH: KillSwitchValidator;\n  ERC165_SESSION_KEY: ERC165SessionKeyValidator;\n  SESSION_KEY: SessionKeyValidator;\n};\n\nexport type ValidatorParamsMap = {\n  ECDSA: ECDSAValidatorParams;\n  KILL_SWITCH: KillSwitchValidatorParams;\n  ERC165_SESSION_KEY: ERC165SessionKeyValidatorParams;\n  SESSION_KEY: SessionKeyValidatorParams;\n};\n\nexport type ValidatorMap = {\n  [V in SupportedValidators]: new (\n    params: ValidatorParamsMap[V]\n  ) => ValidatorTypeMap[V];\n};\n\nexport type { ParamRules, Permission, SessionKeyData, SessionKeyParams };\n"]}

package/dist/esm/kernel-zerodev/validator-provider/base.d.ts

@@ -1,4 +1,4 @@
-import { type Hex, type SendUserOperationResult, type SmartAccountSigner } from "@alchemy/aa-core";
+import { type Hex, type SendUserOperationResult } from "@alchemy/aa-core";
 import { ZeroDevProvider, type ZeroDevProviderConfig } from "../provider.js";
 import type { KernelBaseValidator, KernelBaseValidatorParams } from "../validator/base.js";
 import type { PaymasterAndBundlerProviders, PaymasterConfig, PaymasterPolicy } from "../paymaster/types.js";
@@ -12,15 +12,16 @@ export type ValidatorProviderParamsOpts<P extends KernelBaseValidatorParams> = {
 };
 export interface ValidatorProviderParams<P extends KernelBaseValidatorParams> {
     projectId: string;
-    owner: SmartAccountSigner;
     bundlerProvider?: PaymasterAndBundlerProviders;
     opts?: ValidatorProviderParamsOpts<P>;
     usePaymaster?: boolean;
+    defaultProvider?: ValidatorProvider<KernelBaseValidator, KernelBaseValidatorParams>;
 }
 export type ExtendedValidatorProviderParams<P extends KernelBaseValidatorParams> = ValidatorProviderParams<P> & RequiredProps<P>;
-export declare abstract class ValidatorProvider<P extends KernelBaseValidatorParams> extends ZeroDevProvider {
+export declare abstract class ValidatorProvider<V extends KernelBaseValidator, P extends KernelBaseValidatorParams> extends ZeroDevProvider {
+    protected defaultProvider?: ValidatorProvider<KernelBaseValidator, KernelBaseValidatorParams>;
     constructor(params: ExtendedValidatorProviderParams<P>, validator: KernelBaseValidator);
-    getValidator: () => KernelBaseValidator;
+    getValidator: () => V;
     getEncodedEnableData: (enableData: Hex) => Promise<Hex>;
     getEncodedDisableData: (disableData: Hex) => Promise<Hex>;
     sendEnableUserOperation: (enableData: Hex) => Promise<SendUserOperationResult>;

package/dist/esm/kernel-zerodev/validator-provider/base.js

@@ -12,6 +12,12 @@ export class ValidatorProvider extends ZeroDevProvider {
             projectId: params.projectId,
             bundlerProvider: params.bundlerProvider,
         });
+        Object.defineProperty(this, "defaultProvider", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "getValidator", {
             enumerable: true,
             configurable: true,
@@ -77,14 +83,23 @@ export class ValidatorProvider extends ZeroDevProvider {
         });
         this.connect(() => new KernelSmartContractAccount({
             projectId: params.projectId,
-            owner: params.owner,
             validator,
+            defaultValidator: params.defaultProvider?.getValidator(),
             rpcClient: this.rpcClient,
             bundlerProvider: params.bundlerProvider,
+            index: params.defaultProvider?.getAccount().getIndex(),
             ...params.opts?.accountConfig,
         }));
         if (params.usePaymaster === undefined || params.usePaymaster) {
-            withZeroDevPaymasterAndData(this, params.opts?.paymasterConfig ?? { policy: "VERIFYING_PAYMASTER" });
+            let paymasterConfig = params.opts?.paymasterConfig ?? {
+                policy: "VERIFYING_PAYMASTER",
+            };
+            paymasterConfig = {
+                ...paymasterConfig,
+                paymasterProvider: params.opts?.paymasterConfig?.paymasterProvider ??
+                    params.bundlerProvider,
+            };
+            withZeroDevPaymasterAndData(this, paymasterConfig);
         }
     }
 }