@zerodev/sdk 4.2.2 → 4.3.0

package/dist/esm/kernel-zerodev/validator/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAIN,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,MAAM,EAGN,GAAG,EACH,KAAK,EAEL,SAAS,EACT,WAAW,EAGX,kBAAkB,EAClB,IAAI,EACJ,WAAW,GACZ,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,CAAN,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,oCAAmB,CAAA;IACnB,sCAAqB,CAAA;IACrB,sCAAqB,CAAA;AACvB,CAAC,EAJW,aAAa,KAAb,aAAa,QAIxB;AAyBD,MAAM,OAAgB,mBAAmB;IAcvC,YAAY,MAAiC;QAbpC;;;;;WAAsB;QAC/B;;;;;WAAoB;QACV;;;;;WAAkB;QAClB;;;;;WAAc;QACd;;;;;WAA2B;QAC3B;;;;;WAAsB;QACtB;;;;;WAAmB;QACnB;;;;;WAAmB;QACnB;;;;;WAAmB;QACnB;;;;;WAAe;QACf;;;;;WAAgB;QAC1B;;;;;WAA8C;QAG5C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;QAC3E,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC;QAC9C,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,kBAAkB,CAAC;QACxE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,WAAW,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;YACrE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,aAAa;SACnC,CAAC,CAAC;IACL,CAAC;IAuBD,yBAAyB;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sBAAsB;QACpB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED,WAAW;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,oBAA6B,EAC7B,QAAa;QAEb,MAAM,aAAa,GACjB,sIAAsI,CAAC;QACzI,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACnD,oBAAoB,EACpB,QAAQ,CACT,CAAC;QACF,IAAI,aAAa,KAAK,aAAa,CAAC,MAAM,EAAE;YAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,eAAe,GAAG,EAAE,CAAC;YAC3B,MAAM,cAAc,GAAG,SAAS,CAAC;gBAC/B,4BAA4B;gBAC5B,IAAI,CAAC,UAAU,EAAE;gBACjB,IAAI,CAAC,QAAS;aACf,CAAC,CAAC;YAEH,OAAO,SAAS,CAAC;gBACf,aAAa,CAAC,MAAM;gBACpB,cAAc;gBACd,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC1C,UAAU;gBACV,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACzC,aAAa;gBACb,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;aAC7C,CAAC,CAAC;SACJ;QACD,OAAO,SAAS,CAAC;YACf,aAAa;YACb,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAAC,eAAoB;QACrC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,eAAe;QACb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,MAAe,EACf,QAAa,EACb,QAAiB,EACjB,UAAkB,EAClB,UAAkB,EAClB,SAA8B;QAE9B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,IAAI,cAAc,CAAC;QACnB,IAAI;YACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,YAAY,CAAC;gBACzD,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,oEAAoE;aAC3E,CAAC,CAAC;YACH,cAAc,GAAG,QAAQ;gBACvB,CAAC,CAAE,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAS;gBACtC,CAAC,CAAC,QAAQ,CAAC;SACd;QAAC,OAAO,KAAK,EAAE,GAAE;QAClB,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;YAC1C,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,cAAc,EAAE,WAAW,EAAE,KAAK,mBAAmB,CAAC,WAAW,EAAE;oBACnE,cAAc,EAAE,WAAW,EAAE;wBAC3B,4CAA4C,CAAC,WAAW,EAAE;oBAC5D,cAAc,KAAK,SAAS;oBAC5B,cAAc,KAAK,WAAW;oBAC5B,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,OAAO;gBACb,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;gBACtB,iBAAiB,EAAE,MAAM;aAC1B;YACD,KAAK,EAAE;gBACL,iBAAiB,EAAE;oBACjB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC/B,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC1C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;oBACrC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;iBACtC;aACF;YACD,OAAO,EAAE;gBACP,GAAG,EAAE,QAAe;gBACpB,aAAa,EAAE,WAAW,CACxB,SAAS,CAAC;oBACR,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBACnC,SAAS,CAAC,UAAU,EAAE;iBACvB,CAAC,EACF,EAAE,IAAI,EAAE,EAAE,EAAE,CACb;gBACD,QAAQ,EAAE,QAAmB;gBAC7B,UAAU,EAAE,MAAM,SAAS,CAAC,aAAa,EAAE;aAC5C;YACD,WAAW,EAAE,mBAAmB;SACjC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACrC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QAED,IAAI,IAAmB,CAAC;QACxB,IAAI;YACF,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;gBACnE,GAAG,EAAE,gBAAgB;gBACrB,OAAO,EAAE,oBAAoB;gBAC7B,YAAY,EAAE,qBAAqB;aACpC,CAAC,CAAC;YACH,IACE,uBAAuB,EAAE,WAAW,EAAE;gBACpC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;gBACrC,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,EAChC;gBACA,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC;aAC3B;iBAAM,IACL,MAAM,IAAI,CAAC,eAAe,CACxB,oBAAoB,EACpB,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAQ,CACxC,EACD;gBACA,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC;aAC7B;iBAAM;gBACL,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC;aAC7B;SACF;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE;gBACtC,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC;aAC7B;iBAAM;gBACL,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;aAClB;SACF;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAA4B;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAC1C,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAChB,CAAC;QACF,IAAI,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE;YAChE,OAAO,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SAC9D;aAAM;YACL,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAClD,IAAI,CAAC,eAAe,EAAE;gBACpB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;aAC7C;YACD,OAAO,MAAM,CAAC;gBACZ,IAAI;gBACJ,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,QAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACjC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC1C,UAAU;gBACV,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACxD,eAAe;gBACf,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;SACJ;IACH,CAAC;CACF","sourcesContent":["import {\n  type SignTypedDataParams,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n} from \"@alchemy/aa-core\";\nimport {\n  concat,\n  type Chain,\n  type Hex,\n  pad,\n  toHex,\n  type Address,\n  concatHex,\n  hexToBigInt,\n  type PublicClient,\n  type Transport,\n  createPublicClient,\n  http,\n  zeroAddress,\n} from \"viem\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport {\n  BUNDLER_URL,\n  CHAIN_ID_TO_NODE,\n  ECDSA_VALIDATOR_ADDRESS,\n  ENTRYPOINT_ADDRESS,\n  KERNEL_IMPL_ADDRESS,\n} from \"../constants.js\";\nimport { polygonMumbai } from \"viem/chains\";\n\nexport enum ValidatorMode {\n  sudo = \"0x00000000\",\n  plugin = \"0x00000001\",\n  enable = \"0x00000002\",\n}\n\nexport interface KernelBaseValidatorParams {\n  projectId: string;\n  validatorAddress?: Hex;\n  mode?: ValidatorMode;\n  chain?: Chain;\n  entryPointAddress?: Address;\n  enableSignature?: Hex;\n  validUntil?: number;\n  validAfter?: number;\n  executor?: Address;\n  selector?: Hex;\n  rpcUrl?: string;\n}\n\nexport type ValidatorPluginData = Required<\n  Pick<\n    KernelBaseValidatorParams,\n    \"executor\" | \"selector\" | \"validAfter\" | \"validUntil\"\n  >\n>;\n\n//Kernel wallet implementation separates out validation and execution phase. It allows you to have\n// custom wrapper logic for the validation phase in addition to signature of choice.\nexport abstract class KernelBaseValidator {\n  readonly validatorAddress: Hex;\n  mode: ValidatorMode;\n  protected projectId: string;\n  protected chain?: Chain;\n  protected entryPointAddress: Address;\n  protected enableSignature?: Hex;\n  protected validUntil: number;\n  protected validAfter: number;\n  protected executor?: Address;\n  protected selector?: Hex;\n  protected rpcUrl?: string;\n  publicClient?: PublicClient<Transport, Chain>;\n\n  constructor(params: KernelBaseValidatorParams) {\n    this.projectId = params.projectId;\n    this.validatorAddress = params.validatorAddress ?? ECDSA_VALIDATOR_ADDRESS;\n    this.mode = params.mode ?? ValidatorMode.sudo;\n    this.entryPointAddress = params.entryPointAddress ?? ENTRYPOINT_ADDRESS;\n    this.enableSignature = params.enableSignature;\n    this.validUntil = params.validUntil ?? 0;\n    this.validAfter = params.validAfter ?? 0;\n    this.executor = params.executor;\n    this.selector = params.selector;\n    this.chain = params.chain;\n    this.rpcUrl = params.rpcUrl ?? BUNDLER_URL;\n    this.publicClient = createPublicClient({\n      transport: http(CHAIN_ID_TO_NODE[this.chain?.id ?? polygonMumbai.id]),\n      chain: this.chain ?? polygonMumbai,\n    });\n  }\n\n  abstract encodeEnable(enableData: Hex): Hex;\n\n  abstract encodeDisable(enableData: Hex): Hex;\n\n  abstract getEnableData(): Promise<Hex>;\n\n  abstract signMessage(message: Uint8Array | string | Hex): Promise<Hex>;\n\n  abstract signTypedData(params: SignTypedDataParams): Promise<Hex>;\n\n  abstract signUserOp(userOp: UserOperationRequest): Promise<Hex>;\n\n  abstract signer(): Promise<SmartAccountSigner>;\n\n  abstract getDummyUserOpSignature(callData?: Hex): Promise<Hex>;\n\n  abstract isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean>;\n\n  shouldDelegateViaFallback(): boolean {\n    return true;\n  }\n\n  getPluginValidatorData(): ValidatorPluginData {\n    if (!this.selector || !this.executor) {\n      throw Error(\"Plugin Validator data params uninitialised\");\n    }\n    return {\n      selector: this.selector,\n      executor: this.executor,\n      validAfter: this.validAfter,\n      validUntil: this.validUntil,\n    };\n  }\n\n  getNonceKey(): bigint {\n    return 0n;\n  }\n\n  async getDynamicDummySignature(\n    kernelAccountAddress: Address,\n    calldata: Hex\n  ): Promise<Hex> {\n    const dummyECDSASig =\n      \"0xfffffffffffffffffffffffffffffff0000000000000000000000000000000007aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa1c\";\n    const validatorMode = await this.resolveValidatorMode(\n      kernelAccountAddress,\n      calldata\n    );\n    if (validatorMode === ValidatorMode.enable) {\n      const enableData = await this.getEnableData();\n      const enableDataLength = enableData.length / 2 - 1;\n      const enableSigLength = 65;\n      const staticDummySig = concatHex([\n        \"0x000000000000000000000000\",\n        this.getAddress(),\n        this.executor!,\n      ]);\n\n      return concatHex([\n        ValidatorMode.enable,\n        staticDummySig,\n        pad(toHex(enableDataLength), { size: 32 }),\n        enableData,\n        pad(toHex(enableSigLength), { size: 32 }),\n        dummyECDSASig,\n        await this.getDummyUserOpSignature(calldata),\n      ]);\n    }\n    return concatHex([\n      validatorMode,\n      await this.getDummyUserOpSignature(calldata),\n    ]);\n  }\n\n  setEnableSignature(enableSignature: Hex) {\n    this.enableSignature = enableSignature;\n  }\n\n  getEnableSignature(): Hex | undefined {\n    return this.enableSignature;\n  }\n\n  getAddress(): Hex {\n    return this.validatorAddress;\n  }\n\n  getPublicClient(): PublicClient<Transport, Chain> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    return this.publicClient;\n  }\n\n  async approveExecutor(\n    kernel: Address,\n    selector: Hex,\n    executor: Address,\n    validUntil: number,\n    validAfter: number,\n    validator: KernelBaseValidator\n  ): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    let kernelImplAddr;\n    try {\n      const strgAddr = await this.getPublicClient().getStorageAt({\n        address: kernel,\n        slot: \"0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc\",\n      });\n      kernelImplAddr = strgAddr\n        ? ((\"0x\" + strgAddr.slice(26)) as Hex)\n        : strgAddr;\n    } catch (error) {}\n    const sender = kernel;\n    const signer = await this.signer();\n    const ownerSig = await signer.signTypedData({\n      domain: {\n        name: \"Kernel\",\n        version:\n          kernelImplAddr?.toLowerCase() === KERNEL_IMPL_ADDRESS.toLowerCase() ||\n          kernelImplAddr?.toLowerCase() ===\n            \"0x8dD4DBB54d8A8Cf0DE6F9CCC4609470A30EfF18C\".toLowerCase() ||\n          kernelImplAddr === undefined ||\n          kernelImplAddr === zeroAddress\n            ? \"0.2.2\"\n            : \"0.2.1\",\n        chainId: this.chain.id,\n        verifyingContract: sender,\n      },\n      types: {\n        ValidatorApproved: [\n          { name: \"sig\", type: \"bytes4\" },\n          { name: \"validatorData\", type: \"uint256\" },\n          { name: \"executor\", type: \"address\" },\n          { name: \"enableData\", type: \"bytes\" },\n        ],\n      },\n      message: {\n        sig: selector as Hex,\n        validatorData: hexToBigInt(\n          concatHex([\n            pad(toHex(validUntil), { size: 6 }),\n            pad(toHex(validAfter), { size: 6 }),\n            validator.getAddress(),\n          ]),\n          { size: 32 }\n        ),\n        executor: executor as Address,\n        enableData: await validator.getEnableData(),\n      },\n      primaryType: \"ValidatorApproved\",\n    });\n    return ownerSig;\n  }\n\n  async resolveValidatorMode(\n    kernelAccountAddress: Address,\n    callData: Hex\n  ): Promise<ValidatorMode> {\n    if (!this.chain || !this.publicClient) {\n      throw new Error(\"Validator uninitialized\");\n    }\n\n    let mode: ValidatorMode;\n    try {\n      const defaultValidatorAddress = await this.publicClient.readContract({\n        abi: KernelAccountAbi,\n        address: kernelAccountAddress,\n        functionName: \"getDefaultValidator\",\n      });\n      if (\n        defaultValidatorAddress?.toLowerCase() ===\n          this.validatorAddress.toLowerCase() ||\n        this.mode === ValidatorMode.sudo\n      ) {\n        mode = ValidatorMode.sudo;\n      } else if (\n        await this.isPluginEnabled(\n          kernelAccountAddress,\n          callData.toString().slice(0, 10) as Hex\n        )\n      ) {\n        mode = ValidatorMode.plugin;\n      } else {\n        mode = ValidatorMode.enable;\n      }\n    } catch (error) {\n      if (this.mode === ValidatorMode.plugin) {\n        mode = ValidatorMode.enable;\n      } else {\n        mode = this.mode;\n      }\n    }\n    return mode;\n  }\n\n  async getSignature(userOp: UserOperationRequest): Promise<Hex> {\n    const mode = await this.resolveValidatorMode(\n      userOp.sender,\n      userOp.callData\n    );\n    if (mode === ValidatorMode.sudo || mode === ValidatorMode.plugin) {\n      return concatHex([this.mode, await this.signUserOp(userOp)]);\n    } else {\n      const enableData = await this.getEnableData();\n      const enableDataLength = enableData.length / 2 - 1;\n      const enableSignature = this.getEnableSignature();\n      if (!enableSignature) {\n        throw new Error(\"Enable signature not set\");\n      }\n      return concat([\n        mode, // 4 bytes 0 - 4\n        pad(toHex(this.validUntil), { size: 6 }), // 6 bytes 4 - 10\n        pad(toHex(this.validAfter), { size: 6 }), // 6 bytes 10 - 16\n        pad(this.validatorAddress, { size: 20 }), // 20 bytes 16 - 36\n        pad(this.executor!, { size: 20 }), // 20 bytes 36 - 56\n        pad(toHex(enableDataLength), { size: 32 }), // 32 bytes 56 - 88\n        enableData, // 88 - 88 + enableData.length\n        pad(toHex(enableSignature.length / 2 - 1), { size: 32 }), // 32 bytes 88 + enableData.length - 120 + enableData.length\n        enableSignature, // 120 + enableData.length - 120 + enableData.length + enableSignature.length\n        await this.signUserOp(userOp), // 120 + enableData.length + enableSignature.length - 120 + enableData.length + enableSignature.length + userOperation.length\n      ]);\n    }\n  }\n}\n"]}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAIN,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,MAAM,EAGN,GAAG,EACH,KAAK,EAEL,SAAS,EACT,WAAW,EAGX,kBAAkB,EAClB,IAAI,EACJ,WAAW,GACZ,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,CAAN,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,oCAAmB,CAAA;IACnB,sCAAqB,CAAA;IACrB,sCAAqB,CAAA;AACvB,CAAC,EAJW,aAAa,KAAb,aAAa,QAIxB;AAyBD,MAAM,OAAgB,mBAAmB;IAcvC,YAAY,MAAiC;QAbpC;;;;;WAAsB;QAC/B;;;;;WAAoB;QACV;;;;;WAAkB;QAClB;;;;;WAAc;QACd;;;;;WAA2B;QAC3B;;;;;WAAsB;QACtB;;;;;WAAmB;QACnB;;;;;WAAmB;QACnB;;;;;WAAmB;QACnB;;;;;WAAe;QACf;;;;;WAAgB;QAC1B;;;;;WAA8C;QAG5C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;QAC3E,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC;QAC9C,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,kBAAkB,CAAC;QACxE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,WAAW,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;YACrE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,aAAa;SACnC,CAAC,CAAC;IACL,CAAC;IAuBD,yBAAyB;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sBAAsB;QACpB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED,WAAW;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,oBAA6B,EAC7B,QAAa;QAEb,MAAM,aAAa,GACjB,sIAAsI,CAAC;QACzI,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACnD,oBAAoB,EACpB,QAAQ,CACT,CAAC;QACF,IAAI,aAAa,KAAK,aAAa,CAAC,MAAM,EAAE;YAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;YAClE,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,eAAe,GAAG,EAAE,CAAC;YAC3B,MAAM,cAAc,GAAG,SAAS,CAAC;gBAC/B,4BAA4B;gBAC5B,IAAI,CAAC,UAAU,EAAE;gBACjB,IAAI,CAAC,QAAS;aACf,CAAC,CAAC;YAEH,OAAO,SAAS,CAAC;gBACf,aAAa,CAAC,MAAM;gBACpB,cAAc;gBACd,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC1C,UAAU;gBACV,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACzC,aAAa;gBACb,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;aAC7C,CAAC,CAAC;SACJ;QACD,OAAO,SAAS,CAAC;YACf,aAAa;YACb,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAAC,eAAoB;QACrC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,eAAe;QACb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,MAAe,EACf,QAAa,EACb,QAAiB,EACjB,UAAkB,EAClB,UAAkB,EAClB,SAA8B;QAE9B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,IAAI,cAAc,CAAC;QACnB,IAAI;YACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,YAAY,CAAC;gBACzD,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,oEAAoE;aAC3E,CAAC,CAAC;YACH,cAAc,GAAG,QAAQ;gBACvB,CAAC,CAAE,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAS;gBACtC,CAAC,CAAC,QAAQ,CAAC;SACd;QAAC,OAAO,KAAK,EAAE,GAAE;QAClB,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;YAC1C,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,cAAc,EAAE,WAAW,EAAE,KAAK,mBAAmB,CAAC,WAAW,EAAE;oBACnE,cAAc,EAAE,WAAW,EAAE;wBAC3B,4CAA4C,CAAC,WAAW,EAAE;oBAC5D,cAAc,KAAK,SAAS;oBAC5B,cAAc,KAAK,WAAW;oBAC5B,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,OAAO;gBACb,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;gBACtB,iBAAiB,EAAE,MAAM;aAC1B;YACD,KAAK,EAAE;gBACL,iBAAiB,EAAE;oBACjB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC/B,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC1C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;oBACrC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;iBACtC;aACF;YACD,OAAO,EAAE;gBACP,GAAG,EAAE,QAAe;gBACpB,aAAa,EAAE,WAAW,CACxB,SAAS,CAAC;oBACR,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBACnC,SAAS,CAAC,UAAU,EAAE;iBACvB,CAAC,EACF,EAAE,IAAI,EAAE,EAAE,EAAE,CACb;gBACD,QAAQ,EAAE,QAAmB;gBAC7B,UAAU,EAAE,MAAM,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC;aAClD;YACD,WAAW,EAAE,mBAAmB;SACjC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACrC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QAED,IAAI,IAAmB,CAAC;QACxB,IAAI;YACF,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;gBACnE,GAAG,EAAE,gBAAgB;gBACrB,OAAO,EAAE,oBAAoB;gBAC7B,YAAY,EAAE,qBAAqB;aACpC,CAAC,CAAC;YACH,IACE,uBAAuB,EAAE,WAAW,EAAE;gBACpC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;gBACrC,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,EAChC;gBACA,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC;aAC3B;iBAAM,IACL,MAAM,IAAI,CAAC,eAAe,CACxB,oBAAoB,EACpB,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAQ,CACxC,EACD;gBACA,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC;aAC7B;iBAAM;gBACL,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC;aAC7B;SACF;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE;gBACtC,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC;aAC7B;iBAAM;gBACL,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;aAClB;SACF;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAA4B;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAC1C,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAChB,CAAC;QACF,IAAI,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE;YAChE,OAAO,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SAC9D;aAAM;YACL,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAClD,IAAI,CAAC,eAAe,EAAE;gBACpB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;aAC7C;YACD,OAAO,MAAM,CAAC;gBACZ,IAAI;gBACJ,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,QAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACjC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC1C,UAAU;gBACV,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACxD,eAAe;gBACf,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;SACJ;IACH,CAAC;CACF","sourcesContent":["import {\n  type SignTypedDataParams,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n} from \"@alchemy/aa-core\";\nimport {\n  concat,\n  type Chain,\n  type Hex,\n  pad,\n  toHex,\n  type Address,\n  concatHex,\n  hexToBigInt,\n  type PublicClient,\n  type Transport,\n  createPublicClient,\n  http,\n  zeroAddress,\n} from \"viem\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport {\n  BUNDLER_URL,\n  CHAIN_ID_TO_NODE,\n  ECDSA_VALIDATOR_ADDRESS,\n  ENTRYPOINT_ADDRESS,\n  KERNEL_IMPL_ADDRESS,\n} from \"../constants.js\";\nimport { polygonMumbai } from \"viem/chains\";\n\nexport enum ValidatorMode {\n  sudo = \"0x00000000\",\n  plugin = \"0x00000001\",\n  enable = \"0x00000002\",\n}\n\nexport interface KernelBaseValidatorParams {\n  projectId: string;\n  validatorAddress?: Hex;\n  mode?: ValidatorMode;\n  chain?: Chain;\n  entryPointAddress?: Address;\n  enableSignature?: Hex;\n  validUntil?: number;\n  validAfter?: number;\n  executor?: Address;\n  selector?: Hex;\n  rpcUrl?: string;\n}\n\nexport type ValidatorPluginData = Required<\n  Pick<\n    KernelBaseValidatorParams,\n    \"executor\" | \"selector\" | \"validAfter\" | \"validUntil\"\n  >\n>;\n\n//Kernel wallet implementation separates out validation and execution phase. It allows you to have\n// custom wrapper logic for the validation phase in addition to signature of choice.\nexport abstract class KernelBaseValidator {\n  readonly validatorAddress: Hex;\n  mode: ValidatorMode;\n  protected projectId: string;\n  protected chain?: Chain;\n  protected entryPointAddress: Address;\n  protected enableSignature?: Hex;\n  protected validUntil: number;\n  protected validAfter: number;\n  protected executor?: Address;\n  protected selector?: Hex;\n  protected rpcUrl?: string;\n  publicClient?: PublicClient<Transport, Chain>;\n\n  constructor(params: KernelBaseValidatorParams) {\n    this.projectId = params.projectId;\n    this.validatorAddress = params.validatorAddress ?? ECDSA_VALIDATOR_ADDRESS;\n    this.mode = params.mode ?? ValidatorMode.sudo;\n    this.entryPointAddress = params.entryPointAddress ?? ENTRYPOINT_ADDRESS;\n    this.enableSignature = params.enableSignature;\n    this.validUntil = params.validUntil ?? 0;\n    this.validAfter = params.validAfter ?? 0;\n    this.executor = params.executor;\n    this.selector = params.selector;\n    this.chain = params.chain;\n    this.rpcUrl = params.rpcUrl ?? BUNDLER_URL;\n    this.publicClient = createPublicClient({\n      transport: http(CHAIN_ID_TO_NODE[this.chain?.id ?? polygonMumbai.id]),\n      chain: this.chain ?? polygonMumbai,\n    });\n  }\n\n  abstract encodeEnable(enableData: Hex): Hex;\n\n  abstract encodeDisable(enableData: Hex): Hex;\n\n  abstract getEnableData(kernelAccountAddress?: Address): Promise<Hex>;\n\n  abstract signMessage(message: Uint8Array | string | Hex): Promise<Hex>;\n\n  abstract signTypedData(params: SignTypedDataParams): Promise<Hex>;\n\n  abstract signUserOp(userOp: UserOperationRequest): Promise<Hex>;\n\n  abstract signer(): Promise<SmartAccountSigner>;\n\n  abstract getDummyUserOpSignature(callData?: Hex): Promise<Hex>;\n\n  abstract isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean>;\n\n  shouldDelegateViaFallback(): boolean {\n    return true;\n  }\n\n  getPluginValidatorData(): ValidatorPluginData {\n    if (!this.selector || !this.executor) {\n      throw Error(\"Plugin Validator data params uninitialised\");\n    }\n    return {\n      selector: this.selector,\n      executor: this.executor,\n      validAfter: this.validAfter,\n      validUntil: this.validUntil,\n    };\n  }\n\n  getNonceKey(): bigint {\n    return 0n;\n  }\n\n  async getDynamicDummySignature(\n    kernelAccountAddress: Address,\n    calldata: Hex\n  ): Promise<Hex> {\n    const dummyECDSASig =\n      \"0xfffffffffffffffffffffffffffffff0000000000000000000000000000000007aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa1c\";\n    const validatorMode = await this.resolveValidatorMode(\n      kernelAccountAddress,\n      calldata\n    );\n    if (validatorMode === ValidatorMode.enable) {\n      const enableData = await this.getEnableData(kernelAccountAddress);\n      const enableDataLength = enableData.length / 2 - 1;\n      const enableSigLength = 65;\n      const staticDummySig = concatHex([\n        \"0x000000000000000000000000\",\n        this.getAddress(),\n        this.executor!,\n      ]);\n\n      return concatHex([\n        ValidatorMode.enable,\n        staticDummySig,\n        pad(toHex(enableDataLength), { size: 32 }),\n        enableData,\n        pad(toHex(enableSigLength), { size: 32 }),\n        dummyECDSASig,\n        await this.getDummyUserOpSignature(calldata),\n      ]);\n    }\n    return concatHex([\n      validatorMode,\n      await this.getDummyUserOpSignature(calldata),\n    ]);\n  }\n\n  setEnableSignature(enableSignature: Hex) {\n    this.enableSignature = enableSignature;\n  }\n\n  getEnableSignature(): Hex | undefined {\n    return this.enableSignature;\n  }\n\n  getAddress(): Hex {\n    return this.validatorAddress;\n  }\n\n  getPublicClient(): PublicClient<Transport, Chain> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    return this.publicClient;\n  }\n\n  async approveExecutor(\n    kernel: Address,\n    selector: Hex,\n    executor: Address,\n    validUntil: number,\n    validAfter: number,\n    validator: KernelBaseValidator\n  ): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    let kernelImplAddr;\n    try {\n      const strgAddr = await this.getPublicClient().getStorageAt({\n        address: kernel,\n        slot: \"0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc\",\n      });\n      kernelImplAddr = strgAddr\n        ? ((\"0x\" + strgAddr.slice(26)) as Hex)\n        : strgAddr;\n    } catch (error) {}\n    const sender = kernel;\n    const signer = await this.signer();\n    const ownerSig = await signer.signTypedData({\n      domain: {\n        name: \"Kernel\",\n        version:\n          kernelImplAddr?.toLowerCase() === KERNEL_IMPL_ADDRESS.toLowerCase() ||\n          kernelImplAddr?.toLowerCase() ===\n            \"0x8dD4DBB54d8A8Cf0DE6F9CCC4609470A30EfF18C\".toLowerCase() ||\n          kernelImplAddr === undefined ||\n          kernelImplAddr === zeroAddress\n            ? \"0.2.2\"\n            : \"0.2.1\",\n        chainId: this.chain.id,\n        verifyingContract: sender,\n      },\n      types: {\n        ValidatorApproved: [\n          { name: \"sig\", type: \"bytes4\" },\n          { name: \"validatorData\", type: \"uint256\" },\n          { name: \"executor\", type: \"address\" },\n          { name: \"enableData\", type: \"bytes\" },\n        ],\n      },\n      message: {\n        sig: selector as Hex,\n        validatorData: hexToBigInt(\n          concatHex([\n            pad(toHex(validUntil), { size: 6 }),\n            pad(toHex(validAfter), { size: 6 }),\n            validator.getAddress(),\n          ]),\n          { size: 32 }\n        ),\n        executor: executor as Address,\n        enableData: await validator.getEnableData(kernel),\n      },\n      primaryType: \"ValidatorApproved\",\n    });\n    return ownerSig;\n  }\n\n  async resolveValidatorMode(\n    kernelAccountAddress: Address,\n    callData: Hex\n  ): Promise<ValidatorMode> {\n    if (!this.chain || !this.publicClient) {\n      throw new Error(\"Validator uninitialized\");\n    }\n\n    let mode: ValidatorMode;\n    try {\n      const defaultValidatorAddress = await this.publicClient.readContract({\n        abi: KernelAccountAbi,\n        address: kernelAccountAddress,\n        functionName: \"getDefaultValidator\",\n      });\n      if (\n        defaultValidatorAddress?.toLowerCase() ===\n          this.validatorAddress.toLowerCase() ||\n        this.mode === ValidatorMode.sudo\n      ) {\n        mode = ValidatorMode.sudo;\n      } else if (\n        await this.isPluginEnabled(\n          kernelAccountAddress,\n          callData.toString().slice(0, 10) as Hex\n        )\n      ) {\n        mode = ValidatorMode.plugin;\n      } else {\n        mode = ValidatorMode.enable;\n      }\n    } catch (error) {\n      if (this.mode === ValidatorMode.plugin) {\n        mode = ValidatorMode.enable;\n      } else {\n        mode = this.mode;\n      }\n    }\n    return mode;\n  }\n\n  async getSignature(userOp: UserOperationRequest): Promise<Hex> {\n    const mode = await this.resolveValidatorMode(\n      userOp.sender,\n      userOp.callData\n    );\n    if (mode === ValidatorMode.sudo || mode === ValidatorMode.plugin) {\n      return concatHex([this.mode, await this.signUserOp(userOp)]);\n    } else {\n      const enableData = await this.getEnableData(userOp.sender);\n      const enableDataLength = enableData.length / 2 - 1;\n      const enableSignature = this.getEnableSignature();\n      if (!enableSignature) {\n        throw new Error(\"Enable signature not set\");\n      }\n      return concat([\n        mode, // 4 bytes 0 - 4\n        pad(toHex(this.validUntil), { size: 6 }), // 6 bytes 4 - 10\n        pad(toHex(this.validAfter), { size: 6 }), // 6 bytes 10 - 16\n        pad(this.validatorAddress, { size: 20 }), // 20 bytes 16 - 36\n        pad(this.executor!, { size: 20 }), // 20 bytes 36 - 56\n        pad(toHex(enableDataLength), { size: 32 }), // 32 bytes 56 - 88\n        enableData, // 88 - 88 + enableData.length\n        pad(toHex(enableSignature.length / 2 - 1), { size: 32 }), // 32 bytes 88 + enableData.length - 120 + enableData.length\n        enableSignature, // 120 + enableData.length - 120 + enableData.length + enableSignature.length\n        await this.signUserOp(userOp), // 120 + enableData.length + enableSignature.length - 120 + enableData.length + enableSignature.length + userOperation.length\n      ]);\n    }\n  }\n}\n"]}

package/dist/esm/kernel-zerodev/validator/session-key-validator.d.ts

@@ -2,7 +2,6 @@ import { type Address, type Hex, type SmartAccountSigner, type UserOperationRequ
 import { KernelBaseValidator, type KernelBaseValidatorParams, type ValidatorPluginData } from "./base.js";
 import { type GetAbiItemParameters } from "viem";
 import { MerkleTree } from "merkletreejs";
-import { Operation } from "../provider.js";
 import type { GetAbiItemReturnType } from "viem/dist/types/utils/abi/getAbiItem.js";
 import type { GeneratePermissionFromArgsParameters } from "./types.js";
 export interface SessionKeyValidatorParams extends KernelBaseValidatorParams {
@@ -22,6 +21,15 @@ export declare enum ParamOperator {
     LESS_THAN_OR_EQUAL = 4,
     NOT_EQUAL = 5
 }
+export type SessionNonces = {
+    lastNonce: bigint;
+    invalidNonce: bigint;
+};
+export type ExecutionRule = {
+    validAfter: number;
+    interval: number;
+    runs: number;
+};
 export interface ParamRules {
     offset: number;
     condition: ParamOperator;
@@ -29,10 +37,11 @@ export interface ParamRules {
 }
 export type Permission = {
     target: Address;
+    index?: number;
     rules?: ParamRules[];
     sig?: Hex;
     valueLimit?: bigint;
-    operation?: Operation;
+    executionRule?: ExecutionRule;
 };
 export interface SessionKeyData {
     validUntil: number;
@@ -41,7 +50,7 @@ export interface SessionKeyData {
     permissions?: Permission[];
 }
 export declare function getAbiItem<TAbi extends Abi | readonly unknown[], TItemName extends string>({ abi, args, name, }: GetAbiItemParameters<TAbi, TItemName>): GetAbiItemReturnType<TAbi, TItemName>;
-export declare function getPermissionFromABI<TAbi extends Abi | readonly unknown[], TFunctionName extends string | undefined = string>({ abi, target, args, functionName, operation, valueLimit, }: GeneratePermissionFromArgsParameters<TAbi, TFunctionName>): Permission;
+export declare function getPermissionFromABI<TAbi extends Abi | readonly unknown[], TFunctionName extends string | undefined = string>({ abi, target, args, functionName, valueLimit, }: GeneratePermissionFromArgsParameters<TAbi, TFunctionName>): Permission;
 export declare class SessionKeyValidator extends KernelBaseValidator {
     protected sessionKey: SmartAccountSigner;
     sessionKeyData: SessionKeyData;
@@ -49,19 +58,21 @@ export declare class SessionKeyValidator extends KernelBaseValidator {
     constructor(params: SessionKeyValidatorParams);
     static init(params: SessionKeyValidatorParams): Promise<SessionKeyValidator>;
     shouldDelegateViaFallback(): boolean;
-    findMatchingPermission(callData: Hex): Permission | undefined;
-    private filterByOperation;
+    findMatchingPermissions(callData: Hex): Permission | Permission[] | undefined;
+    private filterPermissions;
     private filterBySignature;
     private findPermissionByRule;
     private getFormattedHex;
     private evaluateRuleCondition;
     getMerkleTree(): MerkleTree;
-    encodePermissionData(permission: Permission, merkleProof?: string[]): Hex;
+    encodePermissionData(permission: Permission | Permission[], merkleProof?: string[] | string[][]): Hex;
     getSessionData(): SessionKeyParams;
     signer(): Promise<SmartAccountSigner>;
-    getEnableData(): Promise<Hex>;
+    getSessionNonces(kernelAccountAddress: Address): Promise<SessionNonces>;
+    getEnableData(kernelAccountAddress?: Address, enabledLastNonce?: bigint): Promise<Hex>;
     isPluginEnabled(kernelAccountAddress: Address, selector: Hex): Promise<boolean>;
     getDummyUserOpSignature(callData: Hex): Promise<Hex>;
+    private getEncodedPermissionProofData;
     encodeEnable(sessionKeyEnableData: Hex): Hex;
     encodeDisable(sessionKey: Hex): Hex;
     signMessage(message: string | Uint8Array): Promise<Hex>;

package/dist/esm/kernel-zerodev/validator/session-key-validator.js

@@ -1,12 +1,11 @@
 import { getUserOperationHash, getChain, } from "@alchemy/aa-core";
 import { KernelBaseValidator, ValidatorMode, } from "./base.js";
-import { encodeFunctionData, toBytes, concat, pad, toHex, keccak256, encodeAbiParameters, concatHex, zeroAddress, decodeFunctionData, isHex, getFunctionSelector, } from "viem";
+import { encodeFunctionData, toBytes, concat, pad, toHex, encodeAbiParameters, concatHex, zeroAddress, decodeFunctionData, isHex, getFunctionSelector, keccak256, } from "viem";
 import { formatAbiItem } from "viem/utils";
 import { SessionKeyValidatorAbi } from "../abis/SessionKeyValidatorAbi.js";
 import { DUMMY_ECDSA_SIG } from "../constants.js";
 import { KernelAccountAbi } from "../abis/KernelAccountAbi.js";
 import { MerkleTree } from "merkletreejs";
-import { Operation } from "../provider.js";
 import { getChainId } from "../api/index.js";
 import { fixSignedData } from "../utils.js";
 import {} from "abitype";
@@ -54,7 +53,7 @@ export function getAbiItem({ abi, args = [], name, }) {
             .map((item) => formatAbiItem(item))
             .reduce((a, c) => `${a}\n${c}`)}`);
 }
-export function getPermissionFromABI({ abi, target, args, functionName, operation, valueLimit, }) {
+export function getPermissionFromABI({ abi, target, args, functionName, valueLimit, }) {
     const abiItem = getAbiItem({
         abi,
         args,
@@ -80,7 +79,6 @@ export function getPermissionFromABI({ abi, target, args, functionName, operatio
         sig: functionSelector,
         rules: paramRules,
         target,
-        operation: operation ?? Operation.Call,
         valueLimit: valueLimit ?? 0n,
     };
 }
@@ -112,17 +110,19 @@ export class SessionKeyValidator extends KernelBaseValidator {
             validUntil: params.sessionKeyData.validUntil ?? 0,
             paymaster: params.sessionKeyData.paymaster ?? zeroAddress,
         };
-        this.sessionKeyData.permissions = this.sessionKeyData.permissions?.map((perm) => ({
+        this.sessionKeyData.permissions = this.sessionKeyData.permissions?.map((perm, index) => ({
             ...perm,
-            operation: perm.operation ?? Operation.Call,
             valueLimit: perm.valueLimit ?? 0n,
             sig: perm.sig ?? pad("0x", { size: 4 }),
             rules: perm.rules ?? [],
+            index,
+            executionRule: perm.executionRule ?? {
+                validAfter: 0,
+                interval: 0,
+                runs: 0,
+            },
         }));
         this.merkleTree = this.getMerkleTree();
-        if (this.shouldDelegateViaFallback()) {
-            throw Error("Session key permissions not set");
-        }
         this.selector =
             params.selector ??
                 getFunctionSelector("execute(address, uint256, bytes, uint8)");
@@ -141,29 +141,53 @@ export class SessionKeyValidator extends KernelBaseValidator {
     shouldDelegateViaFallback() {
         return this.merkleTree.getHexRoot() === pad("0x00", { size: 32 });
     }
-    findMatchingPermission(callData) {
+    findMatchingPermissions(callData) {
         try {
             const { functionName, args } = decodeFunctionData({
                 abi: KernelAccountAbi,
                 data: callData,
             });
-            if (functionName !== "execute")
+            if (functionName !== "execute" && functionName !== "executeBatch")
                 return undefined;
+            if (functionName === "execute") {
+                const [to, value, data] = args;
+                return this.filterPermissions([to], [data], [value])?.[0];
+            }
+            else if (functionName === "executeBatch") {
+                let targets = [], values = [], dataArray = [];
+                args[0].forEach((arg) => {
+                    targets.push(arg.to);
+                    values.push(arg.value);
+                    dataArray.push(arg.data);
+                });
+                return this.filterPermissions(targets, dataArray, values);
+            }
+            else {
+                throw Error("Invalid function");
+            }
+        }
+        catch (error) {
+            return undefined;
+        }
+    }
+    filterPermissions(targets, dataArray, values) {
+        if (targets.length !== dataArray.length ||
+            targets.length !== values.length) {
+            throw Error("Invalid arguments");
+        }
+        const filteredPermissions = targets.map((target, index) => {
             const permissionsList = this.sessionKeyData.permissions;
             if (!permissionsList || !permissionsList.length)
                 return undefined;
-            const targetToMatch = args[0].toLowerCase();
+            const targetToMatch = target.toLowerCase();
             let targetPermissions = permissionsList.filter((permission) => permission.target.toLowerCase() === targetToMatch);
             if (!targetPermissions.length) {
                 targetPermissions = permissionsList.filter((permission) => permission.target.toLowerCase() === zeroAddress.toLowerCase());
             }
             if (!targetPermissions.length)
                 return undefined;
-            const operationPermissions = this.filterByOperation(targetPermissions, args[3]);
-            if (!operationPermissions.length)
-                return undefined;
-            const signaturePermissions = this.filterBySignature(operationPermissions, args[2].slice(0, 10).toLowerCase());
-            const valueLimitPermissions = signaturePermissions.filter((permission) => (permission.valueLimit ?? 0n) >= args[1]);
+            const signaturePermissions = this.filterBySignature(targetPermissions, dataArray[index].slice(0, 10).toLowerCase());
+            const valueLimitPermissions = signaturePermissions.filter((permission) => (permission.valueLimit ?? 0n) >= values[index]);
             if (!valueLimitPermissions.length)
                 return undefined;
             const sortedPermissions = valueLimitPermissions.sort((a, b) => {
@@ -177,14 +201,11 @@ export class SessionKeyValidator extends KernelBaseValidator {
                     return 0;
                 }
             });
-            return this.findPermissionByRule(sortedPermissions, args[2]);
-        }
-        catch (error) {
-            return undefined;
-        }
-    }
-    filterByOperation(permissions, operation) {
-        return permissions.filter((permission) => permission.operation === operation || Operation.Call === operation);
+            return this.findPermissionByRule(sortedPermissions, dataArray[index]);
+        });
+        return filteredPermissions.every((permission) => permission !== undefined)
+            ? filteredPermissions
+            : undefined;
     }
     filterBySignature(permissions, signature) {
         return permissions.filter((permission) => (permission.sig ?? pad("0x", { size: 4 })).toLowerCase() === signature);
@@ -226,32 +247,38 @@ export class SessionKeyValidator extends KernelBaseValidator {
     }
     getMerkleTree() {
         const permissionPacked = this.sessionKeyData.permissions?.map((permission) => this.encodePermissionData(permission));
-        if (permissionPacked?.length === 1)
+        if (permissionPacked && permissionPacked.length === 1)
             permissionPacked.push(permissionPacked[0]);
         return permissionPacked && permissionPacked.length !== 0
             ? new MerkleTree(permissionPacked, keccak256, {
-                sortPairs: true,
                 hashLeaves: true,
+                complete: true,
+                sort: true,
             })
             : new MerkleTree([pad("0x00", { size: 32 })], keccak256, {
                 hashLeaves: false,
+                complete: true,
             });
     }
     encodePermissionData(permission, merkleProof) {
         let permissionParam = {
             components: [
                 {
-                    name: "target",
-                    type: "address",
+                    name: "index",
+                    type: "uint32",
                 },
                 {
-                    name: "valueLimit",
-                    type: "uint256",
+                    name: "target",
+                    type: "address",
                 },
                 {
                     name: "sig",
                     type: "bytes4",
                 },
+                {
+                    name: "valueLimit",
+                    type: "uint256",
+                },
                 {
                     components: [
                         {
@@ -272,13 +299,27 @@ export class SessionKeyValidator extends KernelBaseValidator {
                     type: "tuple[]",
                 },
                 {
-                    internalType: "enum Operation",
-                    name: "operation",
-                    type: "uint8",
+                    components: [
+                        {
+                            name: "interval",
+                            type: "uint48",
+                        },
+                        {
+                            name: "runs",
+                            type: "uint48",
+                        },
+                        {
+                            internalType: "ValidAfter",
+                            name: "validAfter",
+                            type: "uint48",
+                        },
+                    ],
+                    name: "executionRule",
+                    type: "tuple",
                 },
             ],
             name: "permission",
-            type: "tuple",
+            type: Array.isArray(permission) ? "tuple[]" : "tuple",
         };
         let params;
         let values;
@@ -287,7 +328,7 @@ export class SessionKeyValidator extends KernelBaseValidator {
                 permissionParam,
                 {
                     name: "merkleProof",
-                    type: "bytes32[]",
+                    type: Array.isArray(merkleProof[0]) ? "bytes32[][]" : "bytes32[]",
                 },
             ];
             values = [permission, merkleProof];
@@ -314,16 +355,34 @@ export class SessionKeyValidator extends KernelBaseValidator {
     async signer() {
         return await Promise.resolve(this.sessionKey);
     }
-    async getEnableData() {
+    async getSessionNonces(kernelAccountAddress) {
+        if (!this.publicClient) {
+            throw new Error("Validator uninitialized: PublicClient missing");
+        }
+        const nonce = await this.publicClient.readContract({
+            abi: SessionKeyValidatorAbi,
+            address: this.validatorAddress,
+            functionName: "nonces",
+            args: [kernelAccountAddress],
+        });
+        return { lastNonce: nonce[0], invalidNonce: nonce[1] };
+    }
+    async getEnableData(kernelAccountAddress, enabledLastNonce) {
         if (!this.merkleTree) {
             throw Error("SessionKeyValidator: MerkleTree not generated");
         }
+        if (!kernelAccountAddress) {
+            throw Error("SessionKeyValidator: Kernel account address not provided");
+        }
+        const lastNonce = enabledLastNonce ??
+            (await this.getSessionNonces(kernelAccountAddress)).lastNonce + 1n;
         return concat([
             await this.sessionKey.getAddress(),
             pad(this.merkleTree.getHexRoot(), { size: 32 }),
             pad(toHex(this.sessionKeyData.validAfter), { size: 6 }),
             pad(toHex(this.sessionKeyData.validUntil), { size: 6 }),
             this.sessionKeyData.paymaster,
+            pad(toHex(lastNonce), { size: 32 }),
         ]);
     }
     async isPluginEnabled(kernelAccountAddress, selector) {
@@ -344,18 +403,26 @@ export class SessionKeyValidator extends KernelBaseValidator {
         });
         const enableDataHex = concatHex([
             await this.sessionKey.getAddress(),
-            pad(enableData[0], { size: 4 }),
+            pad(enableData[0], { size: 32 }),
             pad(toHex(enableData[1]), { size: 6 }),
             pad(toHex(enableData[2]), { size: 6 }),
             enableData[3],
+            pad(toHex(enableData[4]), { size: 32 }),
         ]);
         return (execDetail.validator.toLowerCase() ===
             this.validatorAddress.toLowerCase() &&
-            enableData[4] &&
-            enableDataHex.toLowerCase() === (await this.getEnableData()).toLowerCase());
+            enableDataHex.toLowerCase() ===
+                (await this.getEnableData(kernelAccountAddress, enableData[4])).toLowerCase());
     }
     async getDummyUserOpSignature(callData) {
-        const matchingPermission = this.findMatchingPermission(callData);
+        return concatHex([
+            await this.sessionKey.getAddress(),
+            DUMMY_ECDSA_SIG,
+            this.getEncodedPermissionProofData(callData),
+        ]);
+    }
+    getEncodedPermissionProofData(callData) {
+        const matchingPermission = this.findMatchingPermissions(callData);
         if (!matchingPermission && !this.shouldDelegateViaFallback()) {
             throw Error("SessionKeyValidator: No matching permission found for the userOp");
         }
@@ -364,17 +431,19 @@ export class SessionKeyValidator extends KernelBaseValidator {
             matchingPermission
             ? this.encodePermissionData(matchingPermission)
             : "0x";
-        const merkleProof = this.merkleTree.getHexProof(keccak256(encodedPermissionData));
-        const encodedData = this.sessionKeyData.permissions &&
+        let merkleProof = [];
+        if (Array.isArray(matchingPermission)) {
+            let encodedPerms = matchingPermission.map((permission) => keccak256(this.encodePermissionData(permission)));
+            merkleProof = encodedPerms.map((perm) => this.merkleTree.getHexProof(perm));
+        }
+        else if (matchingPermission) {
+            merkleProof = this.merkleTree.getHexProof(keccak256(encodedPermissionData));
+        }
+        return this.sessionKeyData.permissions &&
             this.sessionKeyData.permissions.length !== 0 &&
             matchingPermission
             ? this.encodePermissionData(matchingPermission, merkleProof)
             : "0x";
-        return concatHex([
-            await this.sessionKey.getAddress(),
-            DUMMY_ECDSA_SIG,
-            encodedData,
-        ]);
     }
     encodeEnable(sessionKeyEnableData) {
         return encodeFunctionData({
@@ -405,25 +474,10 @@ export class SessionKeyValidator extends KernelBaseValidator {
             signature: "0x",
         }, this.entryPointAddress, BigInt(this.chain.id));
         const formattedMessage = typeof hash === "string" ? toBytes(hash) : hash;
-        const matchingPermission = this.findMatchingPermission(userOp.callData);
-        if (!matchingPermission && !this.shouldDelegateViaFallback()) {
-            throw Error("SessionKeyValidator: No matching permission found for the userOp");
-        }
-        const encodedPermissionData = this.sessionKeyData.permissions &&
-            this.sessionKeyData.permissions.length !== 0 &&
-            matchingPermission
-            ? this.encodePermissionData(matchingPermission)
-            : "0x";
-        const merkleProof = this.merkleTree.getHexProof(keccak256(encodedPermissionData));
-        const encodedData = this.sessionKeyData.permissions &&
-            this.sessionKeyData.permissions.length !== 0 &&
-            matchingPermission
-            ? this.encodePermissionData(matchingPermission, merkleProof)
-            : "0x";
         const signature = concat([
             await this.sessionKey.getAddress(),
             await this.sessionKey.signMessage(formattedMessage),
-            encodedData,
+            this.getEncodedPermissionProofData(userOp.callData),
         ]);
         return signature;
     }