@zerodev/sdk 4.3.1 → 4.3.3

package/dist/cjs/kernel-zerodev/owner/getCustodialOwner.d.ts

@@ -1,11 +1,11 @@
 import type { SmartAccountSigner } from "@alchemy/aa-core";
-type GetCustodialOwnerParams = {
+type GetCustodialOwnerParams = Readonly<{
     apiUrl?: string;
     turnKeyClient?: unknown;
     privateKey?: string;
     publicKey?: string;
     keyId?: string;
     custodialFilePath?: string;
-};
+}>;
 export declare function getCustodialOwner(identifier: string, { custodialFilePath, privateKey, publicKey, keyId, apiUrl, turnKeyClient, }: GetCustodialOwnerParams): Promise<SmartAccountSigner | undefined>;
 export {};

package/dist/cjs/kernel-zerodev/owner/getCustodialOwner.js

@@ -1,4 +1,27 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -6,62 +29,32 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getCustodialOwner = void 0;
 const constants_js_1 = require("../constants.js");
 const axios_1 = __importDefault(require("axios"));
+const radash_1 = require("radash");
 async function getCustodialOwner(identifier, { custodialFilePath, privateKey, publicKey, keyId, apiUrl = constants_js_1.API_URL, turnKeyClient, }) {
     if (custodialFilePath) {
-        let fsModule;
-        try {
-            fsModule = require.resolve("fs") && require("fs");
-        }
-        catch (error) {
-            console.log("FS module not available. Skipping FS operation...");
-            return;
-        }
-        const data = fsModule.readFileSync(custodialFilePath, "utf8");
-        const values = data.split("\n");
-        [privateKey, publicKey, keyId] = values;
+        [privateKey, publicKey, keyId] = await loadSignDataFromCustodialFile(custodialFilePath);
     }
-    if (!privateKey || !publicKey || !keyId) {
-        throw new Error("Must provide custodialFilePath or privateKey, publicKey, and keyId.");
+    if (!keyId) {
+        throw new Error("You must provide custodialFilePath or a keyId.");
     }
-    if (!turnKeyClient) {
-        let TurnkeyClient;
-        let ApiKeyStamper;
-        try {
-            TurnkeyClient =
-                require.resolve("@turnkey/http") &&
-                    require("@turnkey/http").TurnkeyClient;
-            ApiKeyStamper =
-                require.resolve("@turnkey/api-key-stamper") &&
-                    require("@turnkey/api-key-stamper").ApiKeyStamper;
-        }
-        catch (error) {
-            console.log("@turnkey/http or @turnkey/api-key-stamper module not available. Skipping FS operation...");
-            return;
-        }
-        turnKeyClient = new TurnkeyClient({
-            baseUrl: "https://api.turnkey.com",
-        }, new ApiKeyStamper({
-            apiPublicKey: publicKey,
-            apiPrivateKey: privateKey,
-        }));
+    let ensuredTurnkeyClient = turnKeyClient;
+    if (!ensuredTurnkeyClient && privateKey && publicKey) {
+        ensuredTurnkeyClient = await getDefaultTurnkeyClient({
+            privateKey,
+            publicKey,
+        });
     }
-    const response = await axios_1.default.post(`${apiUrl}/wallets/${identifier}`, {
-        keyId,
-    });
-    let createAccount;
-    try {
-        createAccount =
-            require.resolve("@turnkey/viem") &&
-                require("@turnkey/viem").createAccount;
+    else {
+        throw new Error("No turnkey client available, if you don't provide one you should provide private and public key or a custodial file path");
     }
-    catch (error) {
-        console.log("@turnkey/viem module not available. Skipping FS operation...");
-        return;
+    const response = await fetchWallet({ identifier, keyId, apiUrl });
+    if (!response?.data?.walletId) {
+        throw new Error(`No wallet id found for ${identifier}`);
     }
-    const turnkeySigner = await createAccount({
-        client: turnKeyClient,
-        organizationId: keyId,
+    const turnkeySigner = await getTurnkeySigner({
+        keyId,
         privateKeyId: response.data.walletId,
+        turnkeyClient: ensuredTurnkeyClient,
     });
     return {
         getAddress: async () => turnkeySigner.address,
@@ -77,4 +70,56 @@ async function getCustodialOwner(identifier, { custodialFilePath, privateKey, pu
     };
 }
 exports.getCustodialOwner = getCustodialOwner;
+const loadSignDataFromCustodialFile = (0, radash_1.memo)(async (custodialFilePath) => {
+    const [, fsModule] = await (0, radash_1.tryit)(() => Promise.resolve().then(() => __importStar(require("fs"))))();
+    if (!fsModule) {
+        console.error("FS module not available");
+        throw new Error("FS module not available, you must provide each keys or install this module");
+    }
+    const data = fsModule.readFileSync(custodialFilePath, "utf8");
+    return data.split("\n");
+}, {
+    ttl: 1000 * 60,
+    key: (custodialFilePath) => `${custodialFilePath}`,
+});
+const getDefaultTurnkeyClient = (0, radash_1.memo)(async ({ privateKey, publicKey, }) => {
+    const [, turnkeyHttp] = await (0, radash_1.tryit)(() => Promise.resolve().then(() => __importStar(require("@turnkey/http"))))();
+    const [, turnkeyApiKeyStamper] = await (0, radash_1.tryit)(() => Promise.resolve().then(() => __importStar(require("@turnkey/api-key-stamper"))))();
+    if (!turnkeyHttp || !turnkeyApiKeyStamper) {
+        console.error("@turnkey/http or @turnkey/api-key-stamper module not available.");
+        throw new Error("Turnkey http or api-key-stamper modules not available, you must provide a turnkey client or install this modules");
+    }
+    return new turnkeyHttp.TurnkeyClient({
+        baseUrl: "https://api.turnkey.com",
+    }, new turnkeyApiKeyStamper.ApiKeyStamper({
+        apiPublicKey: publicKey,
+        apiPrivateKey: privateKey,
+    }));
+}, {
+    ttl: 1000 * 60,
+    key: ({ privateKey, publicKey, }) => `${privateKey}-${publicKey}`,
+});
+const fetchWallet = (0, radash_1.memo)(({ identifier, keyId, apiUrl, }) => {
+    return axios_1.default.post(`${apiUrl}/wallets/${identifier}`, {
+        keyId,
+    });
+}, {
+    ttl: 1000 * 60,
+    key: ({ identifier, keyId, apiUrl, }) => `${identifier}-${keyId}-${apiUrl}`,
+});
+const getTurnkeySigner = (0, radash_1.memo)(async ({ keyId, privateKeyId, turnkeyClient, }) => {
+    const [, turnkeyViem] = await (0, radash_1.tryit)(() => Promise.resolve().then(() => __importStar(require("@turnkey/viem"))))();
+    if (!turnkeyViem) {
+        console.error("@turnkey/viem module not available");
+        throw new Error("Turnkey viem module not available, can't create a turnkey signer for the custodial owner");
+    }
+    return turnkeyViem.createAccount({
+        client: turnkeyClient,
+        organizationId: keyId,
+        privateKeyId,
+    });
+}, {
+    ttl: 1000 * 60,
+    key: ({ keyId, privateKeyId, }) => `${keyId}-${privateKeyId}`,
+});
 //# sourceMappingURL=getCustodialOwner.js.map

package/dist/cjs/kernel-zerodev/owner/getCustodialOwner.js.map

@@ -1 +1 @@
-{"version":3,"file":"getCustodialOwner.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/owner/getCustodialOwner.ts"],"names":[],"mappings":";;;;;;AACA,kDAA0C;AAC1C,kDAA0B;AAwBnB,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,EACE,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,KAAK,EACL,MAAM,GAAG,sBAAO,EAChB,aAAa,GACW;IAG1B,IAAI,iBAAiB,EAAE;QACrB,IAAI,QAAQ,CAAC;QACb,IAAI;YACF,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;SACnD;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACjE,OAAO;SACR;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEhC,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC;KACzC;IAGD,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE;QACvC,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;KACH;IAGD,IAAI,CAAC,aAAa,EAAE;QAElB,IAAI,aAAa,CAAC;QAClB,IAAI,aAAa,CAAC;QAElB,IAAI;YACF,aAAa;gBACX,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;oBAChC,OAAO,CAAC,eAAe,CAAC,CAAC,aAAa,CAAC;YACzC,aAAa;gBACX,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC;oBAC3C,OAAO,CAAC,0BAA0B,CAAC,CAAC,aAAa,CAAC;SACrD;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,GAAG,CACT,0FAA0F,CAC3F,CAAC;YACF,OAAO;SACR;QAGD,aAAa,GAAG,IAAI,aAAa,CAC/B;YACE,OAAO,EAAE,yBAAyB;SACnC,EACD,IAAI,aAAa,CAAC;YAChB,YAAY,EAAE,SAAS;YACvB,aAAa,EAAE,UAAU;SAC1B,CAAC,CACH,CAAC;KACH;IAGD,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,IAAI,CAC/B,GAAG,MAAM,YAAY,UAAU,EAAE,EACjC;QACE,KAAK;KACN,CACF,CAAC;IAGF,IAAI,aAAa,CAAC;IAClB,IAAI;QACF,aAAa;YACX,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;gBAChC,OAAO,CAAC,eAAe,CAAC,CAAC,aAAa,CAAC;KAC1C;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAC5E,OAAO;KACR;IACD,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC;QACxC,MAAM,EAAE,aAAa;QACrB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;KACrC,CAAC,CAAC;IAGH,OAAO;QACL,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,aAAa,CAAC,OAAO;QAC7C,WAAW,EAAE,KAAK,EAAE,GAAwB,EAAE,EAAE;YAC9C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;gBAE3B,OAAO,aAAa,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;aACpD;iBAAM;gBAEL,OAAO,aAAa,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;aAC7D;QACH,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,MAA2B,EAAE,EAAE,CACnD,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC;KACtC,CAAC;AACJ,CAAC;AAxGD,8CAwGC","sourcesContent":["import type { SignTypedDataParams, SmartAccountSigner } from \"@alchemy/aa-core\";\nimport { API_URL } from \"../constants.js\";\nimport axios from \"axios\";\n\n/**\n * Params to get a custodial owner\n * Priv / pub key combo or custodial file path should be in different types\n */\ntype GetCustodialOwnerParams = {\n  // ZeroDev api url\n  apiUrl?: string;\n  // Turnkey client (if the client want to reuse it\n  turnKeyClient?: unknown;\n\n  // Direct access to priv / pub key\n  privateKey?: string;\n  publicKey?: string;\n  keyId?: string;\n\n  // Or read them from the custodial file path\n  custodialFilePath?: string;\n};\n\n/**\n * Returns a signer for a custodial wallet via TurnKey\n */\nexport async function getCustodialOwner(\n  identifier: string,\n  {\n    custodialFilePath,\n    privateKey,\n    publicKey,\n    keyId,\n    apiUrl = API_URL,\n    turnKeyClient,\n  }: GetCustodialOwnerParams\n): Promise<SmartAccountSigner | undefined> {\n  // Extract data from the custodial file path if provided\n  if (custodialFilePath) {\n    let fsModule;\n    try {\n      fsModule = require.resolve(\"fs\") && require(\"fs\");\n    } catch (error) {\n      console.log(\"FS module not available. Skipping FS operation...\");\n      return;\n    }\n    const data = fsModule.readFileSync(custodialFilePath, \"utf8\");\n    const values = data.split(\"\\n\");\n    // Override the values, if they are provided, to the one from the custodial file\n    [privateKey, publicKey, keyId] = values;\n  }\n\n  // Ensure we have the required values\n  if (!privateKey || !publicKey || !keyId) {\n    throw new Error(\n      \"Must provide custodialFilePath or privateKey, publicKey, and keyId.\"\n    );\n  }\n\n  // Get our turnkey client (build it if needed)\n  if (!turnKeyClient) {\n    // Try to fetch turnkey client & api key stamper\n    let TurnkeyClient;\n    let ApiKeyStamper;\n    // TODO: Would be cleaner with something like radash and a tryit function?\n    try {\n      TurnkeyClient =\n        require.resolve(\"@turnkey/http\") &&\n        require(\"@turnkey/http\").TurnkeyClient;\n      ApiKeyStamper =\n        require.resolve(\"@turnkey/api-key-stamper\") &&\n        require(\"@turnkey/api-key-stamper\").ApiKeyStamper;\n    } catch (error) {\n      console.log(\n        \"@turnkey/http or @turnkey/api-key-stamper module not available. Skipping FS operation...\"\n      );\n      return;\n    }\n\n    // Build the turnkey client\n    turnKeyClient = new TurnkeyClient(\n      {\n        baseUrl: \"https://api.turnkey.com\",\n      },\n      new ApiKeyStamper({\n        apiPublicKey: publicKey,\n        apiPrivateKey: privateKey,\n      })\n    );\n  }\n\n  // Get the wallet identifier from the API\n  const response = await axios.post<any, { data: { walletId: string } }>(\n    `${apiUrl}/wallets/${identifier}`,\n    {\n      keyId,\n    }\n  );\n\n  // Build the turnkey viem account\n  let createAccount;\n  try {\n    createAccount =\n      require.resolve(\"@turnkey/viem\") &&\n      require(\"@turnkey/viem\").createAccount;\n  } catch (error) {\n    console.log(\"@turnkey/viem module not available. Skipping FS operation...\");\n    return;\n  }\n  const turnkeySigner = await createAccount({\n    client: turnKeyClient,\n    organizationId: keyId,\n    privateKeyId: response.data.walletId,\n  });\n\n  // Return an alchemy AA signer from the turnkey signer\n  return {\n    getAddress: async () => turnkeySigner.address,\n    signMessage: async (msg: Uint8Array | string) => {\n      if (typeof msg === \"string\") {\n        // If the msg is a string, sign it directly\n        return turnkeySigner.signMessage({ message: msg });\n      } else {\n        // Otherwise, sign the raw data\n        return turnkeySigner.signMessage({ message: { raw: msg } });\n      }\n    },\n    signTypedData: async (params: SignTypedDataParams) =>\n      turnkeySigner.signTypedData(params),\n  };\n}\n"]}
+{"version":3,"file":"getCustodialOwner.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/owner/getCustodialOwner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,kDAA0C;AAC1C,kDAA0B;AAC1B,mCAAqC;AAwB9B,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,EACE,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,KAAK,EACL,MAAM,GAAG,sBAAO,EAChB,aAAa,GACW;IAG1B,IAAI,iBAAiB,EAAE;QACrB,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,6BAA6B,CAClE,iBAAiB,CAClB,CAAC;KACH;IAGD,IAAI,CAAC,KAAK,EAAE;QACV,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;KACnE;IAGD,IAAI,oBAAoB,GAAG,aAAa,CAAC;IACzC,IAAI,CAAC,oBAAoB,IAAI,UAAU,IAAI,SAAS,EAAE;QACpD,oBAAoB,GAAG,MAAM,uBAAuB,CAAC;YACnD,UAAU;YACV,SAAS;SACV,CAAC,CAAC;KACJ;SAAM;QACL,MAAM,IAAI,KAAK,CACb,0HAA0H,CAC3H,CAAC;KACH;IAGD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC7B,MAAM,IAAI,KAAK,CAAC,0BAA0B,UAAU,EAAE,CAAC,CAAC;KACzD;IAGD,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC;QAC3C,KAAK;QACL,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;QACpC,aAAa,EAAE,oBAAoB;KACpC,CAAC,CAAC;IAGH,OAAO;QACL,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,aAAa,CAAC,OAAO;QAC7C,WAAW,EAAE,KAAK,EAAE,GAAwB,EAAE,EAAE;YAC9C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;gBAE3B,OAAO,aAAa,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;aACpD;iBAAM;gBAEL,OAAO,aAAa,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;aAC7D;QACH,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,MAA2B,EAAE,EAAE,CACnD,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC;KACtC,CAAC;AACJ,CAAC;AAhED,8CAgEC;AAKD,MAAM,6BAA6B,GAAG,IAAA,aAAI,EACxC,KAAK,EAAE,iBAAyB,EAAE,EAAE;IAClC,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,MAAM,IAAA,cAAK,EAAC,GAAG,EAAE,mDAAQ,IAAI,GAAC,CAAC,EAAE,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE;QACb,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;KACH;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,EACD;IAEE,GAAG,EAAE,IAAI,GAAG,EAAE;IAEd,GAAG,EAAE,CAAC,iBAAyB,EAAE,EAAE,CAAC,GAAG,iBAAiB,EAAE;CAC3D,CACF,CAAC;AAKF,MAAM,uBAAuB,GAAG,IAAA,aAAI,EAClC,KAAK,EAAE,EACL,UAAU,EACV,SAAS,GAIV,EAAE,EAAE;IAEH,MAAM,CAAC,EAAE,WAAW,CAAC,GAAG,MAAM,IAAA,cAAK,EAAC,GAAG,EAAE,mDAAQ,eAAe,GAAC,CAAC,EAAE,CAAC;IACrE,MAAM,CAAC,EAAE,oBAAoB,CAAC,GAAG,MAAM,IAAA,cAAK,EAC1C,GAAG,EAAE,mDAAQ,0BAA0B,GAAC,CACzC,EAAE,CAAC;IACJ,IAAI,CAAC,WAAW,IAAI,CAAC,oBAAoB,EAAE;QACzC,OAAO,CAAC,KAAK,CACX,iEAAiE,CAClE,CAAC;QACF,MAAM,IAAI,KAAK,CACb,kHAAkH,CACnH,CAAC;KACH;IAGD,OAAO,IAAI,WAAW,CAAC,aAAa,CAClC;QACE,OAAO,EAAE,yBAAyB;KACnC,EACD,IAAI,oBAAoB,CAAC,aAAa,CAAC;QACrC,YAAY,EAAE,SAAS;QACvB,aAAa,EAAE,UAAU;KAC1B,CAAC,CACH,CAAC;AACJ,CAAC,EACD;IAEE,GAAG,EAAE,IAAI,GAAG,EAAE;IAEd,GAAG,EAAE,CAAC,EACJ,UAAU,EACV,SAAS,GAIV,EAAE,EAAE,CAAC,GAAG,UAAU,IAAI,SAAS,EAAE;CACnC,CACF,CAAC;AAKF,MAAM,WAAW,GAAG,IAAA,aAAI,EACtB,CAAC,EACC,UAAU,EACV,KAAK,EACL,MAAM,GAKP,EAAE,EAAE;IACH,OAAO,eAAK,CAAC,IAAI,CACf,GAAG,MAAM,YAAY,UAAU,EAAE,EACjC;QACE,KAAK;KACN,CACF,CAAC;AACJ,CAAC,EACD;IAEE,GAAG,EAAE,IAAI,GAAG,EAAE;IAEd,GAAG,EAAE,CAAC,EACJ,UAAU,EACV,KAAK,EACL,MAAM,GAKP,EAAE,EAAE,CAAC,GAAG,UAAU,IAAI,KAAK,IAAI,MAAM,EAAE;CACzC,CACF,CAAC;AAKF,MAAM,gBAAgB,GAAG,IAAA,aAAI,EAC3B,KAAK,EAAE,EACL,KAAK,EACL,YAAY,EACZ,aAAa,GAKd,EAAE,EAAE;IAEH,MAAM,CAAC,EAAE,WAAW,CAAC,GAAG,MAAM,IAAA,cAAK,EAAC,GAAG,EAAE,mDAAQ,eAAe,GAAC,CAAC,EAAE,CAAC;IACrE,IAAI,CAAC,WAAW,EAAE;QAChB,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;KACH;IACD,OAAO,WAAW,CAAC,aAAa,CAAC;QAC/B,MAAM,EAAE,aAAoB;QAC5B,cAAc,EAAE,KAAK;QACrB,YAAY;KACb,CAAC,CAAC;AACL,CAAC,EACD;IAEE,GAAG,EAAE,IAAI,GAAG,EAAE;IAEd,GAAG,EAAE,CAAC,EACJ,KAAK,EACL,YAAY,GAKb,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,YAAY,EAAE;CACjC,CACF,CAAC","sourcesContent":["import type { SignTypedDataParams, SmartAccountSigner } from \"@alchemy/aa-core\";\nimport { API_URL } from \"../constants.js\";\nimport axios from \"axios\";\nimport { memo, tryit } from \"radash\";\n\n/**\n * Params to get a custodial owner\n * Priv / pub key combo or custodial file path should be in different types\n */\ntype GetCustodialOwnerParams = Readonly<{\n  // ZeroDev api url\n  apiUrl?: string;\n  // Turnkey client (if the client want to reuse it\n  turnKeyClient?: unknown;\n\n  // Direct access to priv / pub key\n  privateKey?: string;\n  publicKey?: string;\n  keyId?: string;\n\n  // Or read them from the custodial file path\n  custodialFilePath?: string;\n}>;\n\n/**\n * Returns a signer for a custodial wallet via TurnKey\n */\nexport async function getCustodialOwner(\n  identifier: string,\n  {\n    custodialFilePath,\n    privateKey,\n    publicKey,\n    keyId,\n    apiUrl = API_URL,\n    turnKeyClient,\n  }: GetCustodialOwnerParams\n): Promise<SmartAccountSigner | undefined> {\n  // Extract data from the custodial file path if provided\n  if (custodialFilePath) {\n    [privateKey, publicKey, keyId] = await loadSignDataFromCustodialFile(\n      custodialFilePath\n    );\n  }\n\n  // Ensure we have the required values\n  if (!keyId) {\n    throw new Error(\"You must provide custodialFilePath or a keyId.\");\n  }\n\n  // Get our turnkey client (build it if needed)\n  let ensuredTurnkeyClient = turnKeyClient;\n  if (!ensuredTurnkeyClient && privateKey && publicKey) {\n    ensuredTurnkeyClient = await getDefaultTurnkeyClient({\n      privateKey,\n      publicKey,\n    });\n  } else {\n    throw new Error(\n      \"No turnkey client available, if you don't provide one you should provide private and public key or a custodial file path\"\n    );\n  }\n\n  // Get the wallet identifier from the API\n  const response = await fetchWallet({ identifier, keyId, apiUrl });\n  if (!response?.data?.walletId) {\n    throw new Error(`No wallet id found for ${identifier}`);\n  }\n\n  // Build the turnkey viem account\n  const turnkeySigner = await getTurnkeySigner({\n    keyId,\n    privateKeyId: response.data.walletId,\n    turnkeyClient: ensuredTurnkeyClient,\n  });\n\n  // Return an alchemy AA signer from the turnkey signer\n  return {\n    getAddress: async () => turnkeySigner.address,\n    signMessage: async (msg: Uint8Array | string) => {\n      if (typeof msg === \"string\") {\n        // If the msg is a string, sign it directly\n        return turnkeySigner.signMessage({ message: msg });\n      } else {\n        // Otherwise, sign the raw data\n        return turnkeySigner.signMessage({ message: { raw: msg } });\n      }\n    },\n    signTypedData: async (params: SignTypedDataParams) =>\n      turnkeySigner.signTypedData(params),\n  };\n}\n\n/**\n * Try to load sign data from a local custodial file path\n */\nconst loadSignDataFromCustodialFile = memo(\n  async (custodialFilePath: string) => {\n    const [, fsModule] = await tryit(() => import(\"fs\"))();\n    if (!fsModule) {\n      console.error(\"FS module not available\");\n      throw new Error(\n        \"FS module not available, you must provide each keys or install this module\"\n      );\n    }\n    const data = fsModule.readFileSync(custodialFilePath, \"utf8\");\n    return data.split(\"\\n\");\n  },\n  {\n    // TTL of 1min in the memory cache\n    ttl: 1000 * 60,\n    // The key in the cache\n    key: (custodialFilePath: string) => `${custodialFilePath}`,\n  }\n);\n\n/**\n * Get our default turnkey client\n */\nconst getDefaultTurnkeyClient = memo(\n  async ({\n    privateKey,\n    publicKey,\n  }: {\n    privateKey: string;\n    publicKey: string;\n  }) => {\n    // Try to fetch turnkey client & api key stamper\n    const [, turnkeyHttp] = await tryit(() => import(\"@turnkey/http\"))();\n    const [, turnkeyApiKeyStamper] = await tryit(\n      () => import(\"@turnkey/api-key-stamper\")\n    )();\n    if (!turnkeyHttp || !turnkeyApiKeyStamper) {\n      console.error(\n        \"@turnkey/http or @turnkey/api-key-stamper module not available.\"\n      );\n      throw new Error(\n        \"Turnkey http or api-key-stamper modules not available, you must provide a turnkey client or install this modules\"\n      );\n    }\n\n    // Build the turnkey client\n    return new turnkeyHttp.TurnkeyClient(\n      {\n        baseUrl: \"https://api.turnkey.com\",\n      },\n      new turnkeyApiKeyStamper.ApiKeyStamper({\n        apiPublicKey: publicKey,\n        apiPrivateKey: privateKey,\n      })\n    );\n  },\n  {\n    // TTL of 1min in the memory cache\n    ttl: 1000 * 60,\n    // The key in the cache\n    key: ({\n      privateKey,\n      publicKey,\n    }: {\n      privateKey: string;\n      publicKey: string;\n    }) => `${privateKey}-${publicKey}`,\n  }\n);\n\n/**\n * Simple function used to fetch the wallet id from the API using an identifier\n */\nconst fetchWallet = memo(\n  ({\n    identifier,\n    keyId,\n    apiUrl,\n  }: {\n    identifier: string;\n    keyId: string;\n    apiUrl: string;\n  }) => {\n    return axios.post<any, { data: { walletId: string } }>(\n      `${apiUrl}/wallets/${identifier}`,\n      {\n        keyId,\n      }\n    );\n  },\n  {\n    // TTL of 1min in the memory cache\n    ttl: 1000 * 60,\n    // The key in the cache\n    key: ({\n      identifier,\n      keyId,\n      apiUrl,\n    }: {\n      identifier: string;\n      keyId: string;\n      apiUrl: string;\n    }) => `${identifier}-${keyId}-${apiUrl}`,\n  }\n);\n\n/**\n * Get a turnkey signer\n */\nconst getTurnkeySigner = memo(\n  async ({\n    keyId,\n    privateKeyId,\n    turnkeyClient,\n  }: {\n    keyId: string;\n    privateKeyId: string;\n    turnkeyClient: unknown;\n  }) => {\n    // Get the turnkey viem account\n    const [, turnkeyViem] = await tryit(() => import(\"@turnkey/viem\"))();\n    if (!turnkeyViem) {\n      console.error(\"@turnkey/viem module not available\");\n      throw new Error(\n        \"Turnkey viem module not available, can't create a turnkey signer for the custodial owner\"\n      );\n    }\n    return turnkeyViem.createAccount({\n      client: turnkeyClient as any,\n      organizationId: keyId,\n      privateKeyId,\n    });\n  },\n  {\n    // TTL of 1min in the memory cache\n    ttl: 1000 * 60,\n    // The key in the cache\n    key: ({\n      keyId,\n      privateKeyId,\n    }: {\n      keyId: string;\n      privateKeyId: string;\n      turnkeyClient: unknown;\n    }) => `${keyId}-${privateKeyId}`,\n  }\n);\n"]}

package/dist/cjs/kernel-zerodev/owner/passkey/utils.js

@@ -39,10 +39,10 @@ const signMessageImplementation = async (msg, id, walletId, projectId, credentia
     abortWebauthn();
     const signedRequest = await http_1.TurnkeyApi.signSignRawPayload({
         body: {
-            type: "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD",
+            type: "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD_V2",
             organizationId: id,
             parameters: {
-                privateKeyId: walletId,
+                signWith: walletId,
                 payload: msg,
                 encoding: "PAYLOAD_ENCODING_HEXADECIMAL",
                 hashFunction: "HASH_FUNCTION_NO_OP",

package/dist/cjs/kernel-zerodev/owner/passkey/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../../src/kernel-zerodev/owner/passkey/utils.ts"],"names":[],"mappings":";;;;;;AAAA,wCAAwD;AACxD,kDAA0B;AAC1B,qDAA6C;AAE7C,+BAAkE;AAElE,IAAA,kBAAW,EAAC;IACV,OAAO,EAAE,yBAAyB;CACnC,CAAC,CAAC;AAEU,QAAA,eAAe,GAAG;IAC7B,UAAU,EAAE,IAAI,eAAe,EAAE;CAClC,CAAC;AAEF,SAAgB,aAAa;IAC3B,uBAAe,CAAC,UAAU,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7E,uBAAe,CAAC,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;AACrD,CAAC;AAHD,sCAGC;AAEY,QAAA,SAAS,GAAG,YAAY,CAAC;AAEzB,QAAA,KAAK,GAAG,CAAC,CAAC,CAAC;AAEjB,MAAM,oBAAoB,GAAG,GAAgB,EAAE;IACpD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC,CAAC;AAJW,QAAA,oBAAoB,wBAI/B;AAEK,MAAM,eAAe,GAAG,CAAC,SAAsB,EAAU,EAAE;IAChE,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;SAC1B,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC,CAAC;AANW,QAAA,eAAe,mBAM1B;AAEK,MAAM,yBAAyB,GAAG,KAAK,EAC5C,GAAW,EACX,EAAU,EACV,QAAgB,EAChB,SAAiB,EACjB,YAAoB,EACpB,MAAM,GAAG,sBAAO,EAChB,EAAE;IACF,aAAa,EAAE,CAAC;IAChB,MAAM,aAAa,GAAG,MAAM,iBAAU,CAAC,kBAAkB,CACvD;QACE,IAAI,EAAE;YACJ,IAAI,EAAE,gCAAgC;YACtC,cAAc,EAAE,EAAE;YAClB,UAAU,EAAE;gBACV,YAAY,EAAE,QAAQ;gBACtB,OAAO,EAAE,GAAG;gBACZ,QAAQ,EAAE,8BAA8B;gBACxC,YAAY,EAAE,qBAAqB;aACpC;YACD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;SAChC;KACF,EACD;QACE,SAAS,EAAE;YACT,gBAAgB,EAAE;gBAChB;oBACE,EAAE,EAAE,uBAAuB,CAAC,YAAY,CAAC;oBACzC,IAAI,EAAE,iBAAS;iBAChB;aACF;SACF;KACF,CACF,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,eAAK,CAAC,IAAI,CACpC,GAAG,MAAM,aAAa,SAAS,gBAAgB,EAC/C;QACE,aAAa;KACd,CACF,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC;IAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,2BAA2B,EAAE;QACnD,IAAI,MAAM,GAAG,QAAQ,EAAE,MAAM,EAAE,oBAAoB,CAAC;QAEpD,IAAI,MAAM,EAAE;YACV,MAAM,YAAY,GAAG,IAAA,qBAAc,EAAC;gBAClC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,EAAE;gBAClB,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,EAAE;gBAClB,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;aACjC,CAAC,CAAC;YACH,IAAI,YAAY,EAAE;gBAChB,OAAO,YAAY,CAAC;aACrB;SACF;KACF;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAxDW,QAAA,yBAAyB,6BAwDpC;AAEK,MAAM,WAAW,GAAG,KAAK,EAC9B,GAAwB,EACxB,EAAU,EACV,QAAgB,EAChB,SAAiB,EACjB,YAAoB,EACpB,MAAM,GAAG,sBAAO,EAChB,EAAE;IACF,OAAO,MAAM,IAAA,iCAAyB,EACpC,IAAA,kBAAW,EAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EACzD,EAAE,EACF,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,MAAM,CACP,CAAC;AACJ,CAAC,CAAC;AAhBW,QAAA,WAAW,eAgBtB;AAEK,MAAM,aAAa,GAAG,KAAK,EAChC,MAA2B,EAC3B,EAAU,EACV,QAAgB,EAChB,SAAiB,EACjB,YAAoB,EACpB,MAAM,GAAG,sBAAO,EAChB,EAAE;IACF,MAAM,UAAU,GAAG,IAAA,oBAAa,EAAC,MAAM,CAAC,CAAC;IACzC,OAAO,MAAM,IAAA,iCAAyB,EACpC,UAAU,EACV,EAAE,EACF,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,MAAM,CACP,CAAC;AACJ,CAAC,CAAC;AAjBW,QAAA,aAAa,iBAiBxB;AAEK,MAAM,cAAc,GAAG,KAAK,EACjC,SAAiB,EACjB,IAAa,EACb,MAAM,GAAG,sBAAO,EAChB,EAAE;IACF,MAAM,GAAG,GACP,GAAG,MAAM,aAAa,SAAS,UAAU,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC;IAClC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAkB,EAAE,EAAE,CAAC,CAAC;QAC9C,EAAE,EAAE,uBAAuB,CAAC,UAAU,CAAC;QACvC,IAAI,EAAE,YAAY;KACnB,CAAC,CAAC,CAAC;AACN,CAAC,CAAC;AAbW,QAAA,cAAc,kBAazB;AAGF,SAAgB,uBAAuB,CAAC,eAAuB;IAE7D,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAQrE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,GAAG,CAAC,CAAC;IAG7D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAG5B,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACtC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;KACjC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAzBD,0DAyBC","sourcesContent":["import { browserInit, TurnkeyApi } from \"@turnkey/http\";\nimport axios from \"axios\";\nimport { API_URL } from \"../../constants.js\";\nimport type { SignTypedDataParams } from \"@alchemy/aa-core\";\nimport { hashTypedData, signatureToHex, hashMessage } from \"viem\";\n\nbrowserInit({\n  baseUrl: \"https://api.turnkey.com\",\n});\n\nexport const abortController = {\n  controller: new AbortController(),\n};\n\nexport function abortWebauthn() {\n  abortController.controller.abort(\"ZeroDev: Reset previous Webauthn request\");\n  abortController.controller = new AbortController();\n}\n\nexport const publicKey = \"public-key\";\n\nexport const es256 = -7;\n\nexport const generateRandomBuffer = (): ArrayBuffer => {\n  const arr = new Uint8Array(32);\n  crypto.getRandomValues(arr);\n  return arr.buffer;\n};\n\nexport const base64UrlEncode = (challenge: ArrayBuffer): string => {\n  return Buffer.from(challenge)\n    .toString(\"base64\")\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=/g, \"\");\n};\n\nexport const signMessageImplementation = async (\n  msg: string,\n  id: string,\n  walletId: string,\n  projectId: string,\n  credentialId: string,\n  apiUrl = API_URL\n) => {\n  abortWebauthn();\n  const signedRequest = await TurnkeyApi.signSignRawPayload(\n    {\n      body: {\n        type: \"ACTIVITY_TYPE_SIGN_RAW_PAYLOAD\",\n        organizationId: id,\n        parameters: {\n          privateKeyId: walletId,\n          payload: msg,\n          encoding: \"PAYLOAD_ENCODING_HEXADECIMAL\",\n          hashFunction: \"HASH_FUNCTION_NO_OP\",\n        },\n        timestampMs: String(Date.now()),\n      },\n    },\n    {\n      publicKey: {\n        allowCredentials: [\n          {\n            id: base64URLStringToBuffer(credentialId),\n            type: publicKey,\n          },\n        ],\n      },\n    }\n  );\n  const proxyResponse = await axios.post(\n    `${apiUrl}/projects/${projectId}/wallets/proxy`,\n    {\n      signedRequest,\n    }\n  );\n  const { activity } = await proxyResponse.data;\n  if (activity.status === \"ACTIVITY_STATUS_COMPLETED\") {\n    let result = activity?.result?.signRawPayloadResult;\n\n    if (result) {\n      const signatureHex = signatureToHex({\n        r: `0x${result.r}`,\n        s: `0x${result.s}`,\n        v: result.v === \"00\" ? 27n : 28n,\n      });\n      if (signatureHex) {\n        return signatureHex;\n      }\n    }\n  }\n  return \"0x\";\n};\n\nexport const signMessage = async (\n  msg: string | Uint8Array,\n  id: string,\n  walletId: string,\n  projectId: string,\n  credentialId: string,\n  apiUrl = API_URL\n) => {\n  return await signMessageImplementation(\n    hashMessage(typeof msg === \"string\" ? msg : { raw: msg }),\n    id,\n    walletId,\n    projectId,\n    credentialId,\n    apiUrl\n  );\n};\n\nexport const signTypedData = async (\n  params: SignTypedDataParams,\n  id: string,\n  walletId: string,\n  projectId: string,\n  credentialId: string,\n  apiUrl = API_URL\n) => {\n  const hashToSign = hashTypedData(params);\n  return await signMessageImplementation(\n    hashToSign,\n    id,\n    walletId,\n    projectId,\n    credentialId,\n    apiUrl\n  );\n};\n\nexport const getCredentials = async (\n  projectId: string,\n  name?: string,\n  apiUrl = API_URL\n) => {\n  const url =\n    `${apiUrl}/projects/${projectId}/wallets` + (name ? `/${name}` : \"\");\n  const response = await axios.get(url);\n  const credentials = response.data;\n  return credentials.map((credential: string) => ({\n    id: base64URLStringToBuffer(credential),\n    type: \"public-key\",\n  }));\n};\n\n// https://github.com/MasterKale/SimpleWebAuthn/blob/master/packages/browser/src/helpers/base64URLStringToBuffer.ts#L8\nexport function base64URLStringToBuffer(base64URLString: string): ArrayBuffer {\n  // Convert from Base64URL to Base64\n  const base64 = base64URLString.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  /**\n   * Pad with '=' until it's a multiple of four\n   * (4 - (85 % 4 = 1) = 3) % 4 = 3 padding\n   * (4 - (86 % 4 = 2) = 2) % 4 = 2 padding\n   * (4 - (87 % 4 = 3) = 1) % 4 = 1 padding\n   * (4 - (88 % 4 = 0) = 4) % 4 = 0 padding\n   */\n  const padLength = (4 - (base64.length % 4)) % 4;\n  const padded = base64.padEnd(base64.length + padLength, \"=\");\n\n  // Convert to a binary string\n  const binary = atob(padded);\n\n  // Convert binary string to buffer\n  const buffer = new ArrayBuffer(binary.length);\n  const bytes = new Uint8Array(buffer);\n\n  for (let i = 0; i < binary.length; i++) {\n    bytes[i] = binary.charCodeAt(i);\n  }\n\n  return buffer;\n}\n"]}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../../src/kernel-zerodev/owner/passkey/utils.ts"],"names":[],"mappings":";;;;;;AAAA,wCAAwD;AACxD,kDAA0B;AAC1B,qDAA6C;AAE7C,+BAAkE;AAElE,IAAA,kBAAW,EAAC;IACV,OAAO,EAAE,yBAAyB;CACnC,CAAC,CAAC;AAEU,QAAA,eAAe,GAAG;IAC7B,UAAU,EAAE,IAAI,eAAe,EAAE;CAClC,CAAC;AAEF,SAAgB,aAAa;IAC3B,uBAAe,CAAC,UAAU,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7E,uBAAe,CAAC,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;AACrD,CAAC;AAHD,sCAGC;AAEY,QAAA,SAAS,GAAG,YAAY,CAAC;AAEzB,QAAA,KAAK,GAAG,CAAC,CAAC,CAAC;AAEjB,MAAM,oBAAoB,GAAG,GAAgB,EAAE;IACpD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC,CAAC;AAJW,QAAA,oBAAoB,wBAI/B;AAEK,MAAM,eAAe,GAAG,CAAC,SAAsB,EAAU,EAAE;IAChE,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;SAC1B,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC,CAAC;AANW,QAAA,eAAe,mBAM1B;AAEK,MAAM,yBAAyB,GAAG,KAAK,EAC5C,GAAW,EACX,EAAU,EACV,QAAgB,EAChB,SAAiB,EACjB,YAAoB,EACpB,MAAM,GAAG,sBAAO,EAChB,EAAE;IACF,aAAa,EAAE,CAAC;IAChB,MAAM,aAAa,GAAG,MAAM,iBAAU,CAAC,kBAAkB,CACvD;QACE,IAAI,EAAE;YACJ,IAAI,EAAE,mCAAmC;YACzC,cAAc,EAAE,EAAE;YAClB,UAAU,EAAE;gBACV,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,GAAG;gBACZ,QAAQ,EAAE,8BAA8B;gBACxC,YAAY,EAAE,qBAAqB;aACpC;YACD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;SAChC;KACF,EACD;QACE,SAAS,EAAE;YACT,gBAAgB,EAAE;gBAChB;oBACE,EAAE,EAAE,uBAAuB,CAAC,YAAY,CAAC;oBACzC,IAAI,EAAE,iBAAS;iBAChB;aACF;SACF;KACF,CACF,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,eAAK,CAAC,IAAI,CACpC,GAAG,MAAM,aAAa,SAAS,gBAAgB,EAC/C;QACE,aAAa;KACd,CACF,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC;IAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,2BAA2B,EAAE;QACnD,IAAI,MAAM,GAAG,QAAQ,EAAE,MAAM,EAAE,oBAAoB,CAAC;QAEpD,IAAI,MAAM,EAAE;YACV,MAAM,YAAY,GAAG,IAAA,qBAAc,EAAC;gBAClC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,EAAE;gBAClB,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,EAAE;gBAClB,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;aACjC,CAAC,CAAC;YACH,IAAI,YAAY,EAAE;gBAChB,OAAO,YAAY,CAAC;aACrB;SACF;KACF;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAxDW,QAAA,yBAAyB,6BAwDpC;AAEK,MAAM,WAAW,GAAG,KAAK,EAC9B,GAAwB,EACxB,EAAU,EACV,QAAgB,EAChB,SAAiB,EACjB,YAAoB,EACpB,MAAM,GAAG,sBAAO,EAChB,EAAE;IACF,OAAO,MAAM,IAAA,iCAAyB,EACpC,IAAA,kBAAW,EAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EACzD,EAAE,EACF,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,MAAM,CACP,CAAC;AACJ,CAAC,CAAC;AAhBW,QAAA,WAAW,eAgBtB;AAEK,MAAM,aAAa,GAAG,KAAK,EAChC,MAA2B,EAC3B,EAAU,EACV,QAAgB,EAChB,SAAiB,EACjB,YAAoB,EACpB,MAAM,GAAG,sBAAO,EAChB,EAAE;IACF,MAAM,UAAU,GAAG,IAAA,oBAAa,EAAC,MAAM,CAAC,CAAC;IACzC,OAAO,MAAM,IAAA,iCAAyB,EACpC,UAAU,EACV,EAAE,EACF,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,MAAM,CACP,CAAC;AACJ,CAAC,CAAC;AAjBW,QAAA,aAAa,iBAiBxB;AAEK,MAAM,cAAc,GAAG,KAAK,EACjC,SAAiB,EACjB,IAAa,EACb,MAAM,GAAG,sBAAO,EAChB,EAAE;IACF,MAAM,GAAG,GACP,GAAG,MAAM,aAAa,SAAS,UAAU,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC;IAClC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAkB,EAAE,EAAE,CAAC,CAAC;QAC9C,EAAE,EAAE,uBAAuB,CAAC,UAAU,CAAC;QACvC,IAAI,EAAE,YAAY;KACnB,CAAC,CAAC,CAAC;AACN,CAAC,CAAC;AAbW,QAAA,cAAc,kBAazB;AAGF,SAAgB,uBAAuB,CAAC,eAAuB;IAE7D,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAQrE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,GAAG,CAAC,CAAC;IAG7D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAG5B,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACtC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;KACjC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAzBD,0DAyBC","sourcesContent":["import { browserInit, TurnkeyApi } from \"@turnkey/http\";\nimport axios from \"axios\";\nimport { API_URL } from \"../../constants.js\";\nimport type { SignTypedDataParams } from \"@alchemy/aa-core\";\nimport { hashTypedData, signatureToHex, hashMessage } from \"viem\";\n\nbrowserInit({\n  baseUrl: \"https://api.turnkey.com\",\n});\n\nexport const abortController = {\n  controller: new AbortController(),\n};\n\nexport function abortWebauthn() {\n  abortController.controller.abort(\"ZeroDev: Reset previous Webauthn request\");\n  abortController.controller = new AbortController();\n}\n\nexport const publicKey = \"public-key\";\n\nexport const es256 = -7;\n\nexport const generateRandomBuffer = (): ArrayBuffer => {\n  const arr = new Uint8Array(32);\n  crypto.getRandomValues(arr);\n  return arr.buffer;\n};\n\nexport const base64UrlEncode = (challenge: ArrayBuffer): string => {\n  return Buffer.from(challenge)\n    .toString(\"base64\")\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=/g, \"\");\n};\n\nexport const signMessageImplementation = async (\n  msg: string,\n  id: string,\n  walletId: string,\n  projectId: string,\n  credentialId: string,\n  apiUrl = API_URL\n) => {\n  abortWebauthn();\n  const signedRequest = await TurnkeyApi.signSignRawPayload(\n    {\n      body: {\n        type: \"ACTIVITY_TYPE_SIGN_RAW_PAYLOAD_V2\",\n        organizationId: id,\n        parameters: {\n          signWith: walletId,\n          payload: msg,\n          encoding: \"PAYLOAD_ENCODING_HEXADECIMAL\",\n          hashFunction: \"HASH_FUNCTION_NO_OP\",\n        },\n        timestampMs: String(Date.now()),\n      },\n    },\n    {\n      publicKey: {\n        allowCredentials: [\n          {\n            id: base64URLStringToBuffer(credentialId),\n            type: publicKey,\n          },\n        ],\n      },\n    }\n  );\n  const proxyResponse = await axios.post(\n    `${apiUrl}/projects/${projectId}/wallets/proxy`,\n    {\n      signedRequest,\n    }\n  );\n  const { activity } = await proxyResponse.data;\n  if (activity.status === \"ACTIVITY_STATUS_COMPLETED\") {\n    let result = activity?.result?.signRawPayloadResult;\n\n    if (result) {\n      const signatureHex = signatureToHex({\n        r: `0x${result.r}`,\n        s: `0x${result.s}`,\n        v: result.v === \"00\" ? 27n : 28n,\n      });\n      if (signatureHex) {\n        return signatureHex;\n      }\n    }\n  }\n  return \"0x\";\n};\n\nexport const signMessage = async (\n  msg: string | Uint8Array,\n  id: string,\n  walletId: string,\n  projectId: string,\n  credentialId: string,\n  apiUrl = API_URL\n) => {\n  return await signMessageImplementation(\n    hashMessage(typeof msg === \"string\" ? msg : { raw: msg }),\n    id,\n    walletId,\n    projectId,\n    credentialId,\n    apiUrl\n  );\n};\n\nexport const signTypedData = async (\n  params: SignTypedDataParams,\n  id: string,\n  walletId: string,\n  projectId: string,\n  credentialId: string,\n  apiUrl = API_URL\n) => {\n  const hashToSign = hashTypedData(params);\n  return await signMessageImplementation(\n    hashToSign,\n    id,\n    walletId,\n    projectId,\n    credentialId,\n    apiUrl\n  );\n};\n\nexport const getCredentials = async (\n  projectId: string,\n  name?: string,\n  apiUrl = API_URL\n) => {\n  const url =\n    `${apiUrl}/projects/${projectId}/wallets` + (name ? `/${name}` : \"\");\n  const response = await axios.get(url);\n  const credentials = response.data;\n  return credentials.map((credential: string) => ({\n    id: base64URLStringToBuffer(credential),\n    type: \"public-key\",\n  }));\n};\n\n// https://github.com/MasterKale/SimpleWebAuthn/blob/master/packages/browser/src/helpers/base64URLStringToBuffer.ts#L8\nexport function base64URLStringToBuffer(base64URLString: string): ArrayBuffer {\n  // Convert from Base64URL to Base64\n  const base64 = base64URLString.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  /**\n   * Pad with '=' until it's a multiple of four\n   * (4 - (85 % 4 = 1) = 3) % 4 = 3 padding\n   * (4 - (86 % 4 = 2) = 2) % 4 = 2 padding\n   * (4 - (87 % 4 = 3) = 1) % 4 = 1 padding\n   * (4 - (88 % 4 = 0) = 4) % 4 = 0 padding\n   */\n  const padLength = (4 - (base64.length % 4)) % 4;\n  const padded = base64.padEnd(base64.length + padLength, \"=\");\n\n  // Convert to a binary string\n  const binary = atob(padded);\n\n  // Convert binary string to buffer\n  const buffer = new ArrayBuffer(binary.length);\n  const bytes = new Uint8Array(buffer);\n\n  for (let i = 0; i < binary.length; i++) {\n    bytes[i] = binary.charCodeAt(i);\n  }\n\n  return buffer;\n}\n"]}

package/dist/cjs/kernel-zerodev/validator/base.d.ts

@@ -22,6 +22,7 @@ export type ValidatorPluginData = Required<Pick<KernelBaseValidatorParams, "exec
 export declare abstract class KernelBaseValidator {
     readonly validatorAddress: Hex;
     mode: ValidatorMode;
+    resolvedMode?: ValidatorMode;
     protected projectId: string;
     protected chain?: Chain;
     protected entryPointAddress: Address;

package/dist/cjs/kernel-zerodev/validator/base.js

@@ -25,6 +25,12 @@ class KernelBaseValidator {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "resolvedMode", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "projectId", {
             enumerable: true,
             configurable: true,
@@ -120,7 +126,8 @@ class KernelBaseValidator {
     }
     async getDynamicDummySignature(kernelAccountAddress, calldata) {
         const dummyECDSASig = "0xfffffffffffffffffffffffffffffff0000000000000000000000000000000007aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa1c";
-        const validatorMode = await this.resolveValidatorMode(kernelAccountAddress, calldata);
+        const validatorMode = this.resolvedMode ??
+            (await this.resolveValidatorMode(kernelAccountAddress, calldata));
         if (validatorMode === ValidatorMode.enable) {
             const enableData = await this.getEnableData(kernelAccountAddress);
             const enableDataLength = enableData.length / 2 - 1;
@@ -243,10 +250,12 @@ class KernelBaseValidator {
                 mode = this.mode;
             }
         }
+        this.resolvedMode = mode;
         return mode;
     }
     async getSignature(userOp) {
-        const mode = await this.resolveValidatorMode(userOp.sender, userOp.callData);
+        const mode = this.resolvedMode ??
+            (await this.resolveValidatorMode(userOp.sender, userOp.callData));
         if (mode === ValidatorMode.sudo || mode === ValidatorMode.plugin) {
             return (0, viem_1.concatHex)([this.mode, await this.signUserOp(userOp)]);
         }

package/dist/cjs/kernel-zerodev/validator/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/base.ts"],"names":[],"mappings":";;;AAKA,+BAcc;AACd,qEAA+D;AAC/D,kDAMyB;AACzB,wCAA4C;AAE5C,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,oCAAmB,CAAA;IACnB,sCAAqB,CAAA;IACrB,sCAAqB,CAAA;AACvB,CAAC,EAJW,aAAa,6BAAb,aAAa,QAIxB;AAyBD,MAAsB,mBAAmB;IAcvC,YAAY,MAAiC;QAbpC;;;;;WAAsB;QAC/B;;;;;WAAoB;QACV;;;;;WAAkB;QAClB;;;;;WAAc;QACd;;;;;WAA2B;QAC3B;;;;;WAAsB;QACtB;;;;;WAAmB;QACnB;;;;;WAAmB;QACnB;;;;;WAAmB;QACnB;;;;;WAAe;QACf;;;;;WAAgB;QAC1B;;;;;WAA8C;QAG5C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,sCAAuB,CAAC;QAC3E,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC;QAC9C,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,iCAAkB,CAAC;QACxE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,0BAAW,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAA,yBAAkB,EAAC;YACrC,SAAS,EAAE,IAAA,WAAI,EAAC,+BAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,sBAAa,CAAC,EAAE,CAAC,CAAC;YACrE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,sBAAa;SACnC,CAAC,CAAC;IACL,CAAC;IAuBD,yBAAyB;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sBAAsB;QACpB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED,WAAW;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,oBAA6B,EAC7B,QAAa;QAEb,MAAM,aAAa,GACjB,sIAAsI,CAAC;QACzI,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACnD,oBAAoB,EACpB,QAAQ,CACT,CAAC;QACF,IAAI,aAAa,KAAK,aAAa,CAAC,MAAM,EAAE;YAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;YAClE,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,eAAe,GAAG,EAAE,CAAC;YAC3B,MAAM,cAAc,GAAG,IAAA,gBAAS,EAAC;gBAC/B,4BAA4B;gBAC5B,IAAI,CAAC,UAAU,EAAE;gBACjB,IAAI,CAAC,QAAS;aACf,CAAC,CAAC;YAEH,OAAO,IAAA,gBAAS,EAAC;gBACf,aAAa,CAAC,MAAM;gBACpB,cAAc;gBACd,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC1C,UAAU;gBACV,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACzC,aAAa;gBACb,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;aAC7C,CAAC,CAAC;SACJ;QACD,OAAO,IAAA,gBAAS,EAAC;YACf,aAAa;YACb,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAAC,eAAoB;QACrC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,eAAe;QACb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,MAAe,EACf,QAAa,EACb,QAAiB,EACjB,UAAkB,EAClB,UAAkB,EAClB,SAA8B;QAE9B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,IAAI,cAAc,CAAC;QACnB,IAAI;YACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,YAAY,CAAC;gBACzD,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,oEAAoE;aAC3E,CAAC,CAAC;YACH,cAAc,GAAG,QAAQ;gBACvB,CAAC,CAAE,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAS;gBACtC,CAAC,CAAC,QAAQ,CAAC;SACd;QAAC,OAAO,KAAK,EAAE,GAAE;QAClB,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;YAC1C,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,cAAc,EAAE,WAAW,EAAE,KAAK,kCAAmB,CAAC,WAAW,EAAE;oBACnE,cAAc,EAAE,WAAW,EAAE;wBAC3B,4CAA4C,CAAC,WAAW,EAAE;oBAC5D,cAAc,KAAK,SAAS;oBAC5B,cAAc,KAAK,kBAAW;oBAC5B,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,OAAO;gBACb,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;gBACtB,iBAAiB,EAAE,MAAM;aAC1B;YACD,KAAK,EAAE;gBACL,iBAAiB,EAAE;oBACjB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC/B,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC1C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;oBACrC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;iBACtC;aACF;YACD,OAAO,EAAE;gBACP,GAAG,EAAE,QAAe;gBACpB,aAAa,EAAE,IAAA,kBAAW,EACxB,IAAA,gBAAS,EAAC;oBACR,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBACnC,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBACnC,SAAS,CAAC,UAAU,EAAE;iBACvB,CAAC,EACF,EAAE,IAAI,EAAE,EAAE,EAAE,CACb;gBACD,QAAQ,EAAE,QAAmB;gBAC7B,UAAU,EAAE,MAAM,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC;aAClD;YACD,WAAW,EAAE,mBAAmB;SACjC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACrC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QAED,IAAI,IAAmB,CAAC;QACxB,IAAI;YACF,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;gBACnE,GAAG,EAAE,sCAAgB;gBACrB,OAAO,EAAE,oBAAoB;gBAC7B,YAAY,EAAE,qBAAqB;aACpC,CAAC,CAAC;YACH,IACE,uBAAuB,EAAE,WAAW,EAAE;gBACpC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;gBACrC,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,EAChC;gBACA,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC;aAC3B;iBAAM,IACL,MAAM,IAAI,CAAC,eAAe,CACxB,oBAAoB,EACpB,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAQ,CACxC,EACD;gBACA,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC;aAC7B;iBAAM;gBACL,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC;aAC7B;SACF;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE;gBACtC,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC;aAC7B;iBAAM;gBACL,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;aAClB;SACF;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAA4B;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAC1C,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAChB,CAAC;QACF,IAAI,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE;YAChE,OAAO,IAAA,gBAAS,EAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SAC9D;aAAM;YACL,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAClD,IAAI,CAAC,eAAe,EAAE;gBACpB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;aAC7C;YACD,OAAO,IAAA,aAAM,EAAC;gBACZ,IAAI;gBACJ,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACxC,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACxC,IAAA,UAAG,EAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACxC,IAAA,UAAG,EAAC,IAAI,CAAC,QAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACjC,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC1C,UAAU;gBACV,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,eAAe,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACxD,eAAe;gBACf,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;SACJ;IACH,CAAC;CACF;AApQD,kDAoQC","sourcesContent":["import {\n  type SignTypedDataParams,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n} from \"@alchemy/aa-core\";\nimport {\n  concat,\n  type Chain,\n  type Hex,\n  pad,\n  toHex,\n  type Address,\n  concatHex,\n  hexToBigInt,\n  type PublicClient,\n  type Transport,\n  createPublicClient,\n  http,\n  zeroAddress,\n} from \"viem\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport {\n  BUNDLER_URL,\n  CHAIN_ID_TO_NODE,\n  ECDSA_VALIDATOR_ADDRESS,\n  ENTRYPOINT_ADDRESS,\n  KERNEL_IMPL_ADDRESS,\n} from \"../constants.js\";\nimport { polygonMumbai } from \"viem/chains\";\n\nexport enum ValidatorMode {\n  sudo = \"0x00000000\",\n  plugin = \"0x00000001\",\n  enable = \"0x00000002\",\n}\n\nexport interface KernelBaseValidatorParams {\n  projectId: string;\n  validatorAddress?: Hex;\n  mode?: ValidatorMode;\n  chain?: Chain;\n  entryPointAddress?: Address;\n  enableSignature?: Hex;\n  validUntil?: number;\n  validAfter?: number;\n  executor?: Address;\n  selector?: Hex;\n  rpcUrl?: string;\n}\n\nexport type ValidatorPluginData = Required<\n  Pick<\n    KernelBaseValidatorParams,\n    \"executor\" | \"selector\" | \"validAfter\" | \"validUntil\"\n  >\n>;\n\n//Kernel wallet implementation separates out validation and execution phase. It allows you to have\n// custom wrapper logic for the validation phase in addition to signature of choice.\nexport abstract class KernelBaseValidator {\n  readonly validatorAddress: Hex;\n  mode: ValidatorMode;\n  protected projectId: string;\n  protected chain?: Chain;\n  protected entryPointAddress: Address;\n  protected enableSignature?: Hex;\n  protected validUntil: number;\n  protected validAfter: number;\n  protected executor?: Address;\n  protected selector?: Hex;\n  protected rpcUrl?: string;\n  publicClient?: PublicClient<Transport, Chain>;\n\n  constructor(params: KernelBaseValidatorParams) {\n    this.projectId = params.projectId;\n    this.validatorAddress = params.validatorAddress ?? ECDSA_VALIDATOR_ADDRESS;\n    this.mode = params.mode ?? ValidatorMode.sudo;\n    this.entryPointAddress = params.entryPointAddress ?? ENTRYPOINT_ADDRESS;\n    this.enableSignature = params.enableSignature;\n    this.validUntil = params.validUntil ?? 0;\n    this.validAfter = params.validAfter ?? 0;\n    this.executor = params.executor;\n    this.selector = params.selector;\n    this.chain = params.chain;\n    this.rpcUrl = params.rpcUrl ?? BUNDLER_URL;\n    this.publicClient = createPublicClient({\n      transport: http(CHAIN_ID_TO_NODE[this.chain?.id ?? polygonMumbai.id]),\n      chain: this.chain ?? polygonMumbai,\n    });\n  }\n\n  abstract encodeEnable(enableData: Hex): Hex;\n\n  abstract encodeDisable(enableData: Hex): Hex;\n\n  abstract getEnableData(kernelAccountAddress?: Address): Promise<Hex>;\n\n  abstract signMessage(message: Uint8Array | string | Hex): Promise<Hex>;\n\n  abstract signTypedData(params: SignTypedDataParams): Promise<Hex>;\n\n  abstract signUserOp(userOp: UserOperationRequest): Promise<Hex>;\n\n  abstract signer(): Promise<SmartAccountSigner>;\n\n  abstract getDummyUserOpSignature(callData?: Hex): Promise<Hex>;\n\n  abstract isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean>;\n\n  shouldDelegateViaFallback(): boolean {\n    return true;\n  }\n\n  getPluginValidatorData(): ValidatorPluginData {\n    if (!this.selector || !this.executor) {\n      throw Error(\"Plugin Validator data params uninitialised\");\n    }\n    return {\n      selector: this.selector,\n      executor: this.executor,\n      validAfter: this.validAfter,\n      validUntil: this.validUntil,\n    };\n  }\n\n  getNonceKey(): bigint {\n    return 0n;\n  }\n\n  async getDynamicDummySignature(\n    kernelAccountAddress: Address,\n    calldata: Hex\n  ): Promise<Hex> {\n    const dummyECDSASig =\n      \"0xfffffffffffffffffffffffffffffff0000000000000000000000000000000007aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa1c\";\n    const validatorMode = await this.resolveValidatorMode(\n      kernelAccountAddress,\n      calldata\n    );\n    if (validatorMode === ValidatorMode.enable) {\n      const enableData = await this.getEnableData(kernelAccountAddress);\n      const enableDataLength = enableData.length / 2 - 1;\n      const enableSigLength = 65;\n      const staticDummySig = concatHex([\n        \"0x000000000000000000000000\",\n        this.getAddress(),\n        this.executor!,\n      ]);\n\n      return concatHex([\n        ValidatorMode.enable,\n        staticDummySig,\n        pad(toHex(enableDataLength), { size: 32 }),\n        enableData,\n        pad(toHex(enableSigLength), { size: 32 }),\n        dummyECDSASig,\n        await this.getDummyUserOpSignature(calldata),\n      ]);\n    }\n    return concatHex([\n      validatorMode,\n      await this.getDummyUserOpSignature(calldata),\n    ]);\n  }\n\n  setEnableSignature(enableSignature: Hex) {\n    this.enableSignature = enableSignature;\n  }\n\n  getEnableSignature(): Hex | undefined {\n    return this.enableSignature;\n  }\n\n  getAddress(): Hex {\n    return this.validatorAddress;\n  }\n\n  getPublicClient(): PublicClient<Transport, Chain> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    return this.publicClient;\n  }\n\n  async approveExecutor(\n    kernel: Address,\n    selector: Hex,\n    executor: Address,\n    validUntil: number,\n    validAfter: number,\n    validator: KernelBaseValidator\n  ): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    let kernelImplAddr;\n    try {\n      const strgAddr = await this.getPublicClient().getStorageAt({\n        address: kernel,\n        slot: \"0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc\",\n      });\n      kernelImplAddr = strgAddr\n        ? ((\"0x\" + strgAddr.slice(26)) as Hex)\n        : strgAddr;\n    } catch (error) {}\n    const sender = kernel;\n    const signer = await this.signer();\n    const ownerSig = await signer.signTypedData({\n      domain: {\n        name: \"Kernel\",\n        version:\n          kernelImplAddr?.toLowerCase() === KERNEL_IMPL_ADDRESS.toLowerCase() ||\n          kernelImplAddr?.toLowerCase() ===\n            \"0x8dD4DBB54d8A8Cf0DE6F9CCC4609470A30EfF18C\".toLowerCase() ||\n          kernelImplAddr === undefined ||\n          kernelImplAddr === zeroAddress\n            ? \"0.2.2\"\n            : \"0.2.1\",\n        chainId: this.chain.id,\n        verifyingContract: sender,\n      },\n      types: {\n        ValidatorApproved: [\n          { name: \"sig\", type: \"bytes4\" },\n          { name: \"validatorData\", type: \"uint256\" },\n          { name: \"executor\", type: \"address\" },\n          { name: \"enableData\", type: \"bytes\" },\n        ],\n      },\n      message: {\n        sig: selector as Hex,\n        validatorData: hexToBigInt(\n          concatHex([\n            pad(toHex(validUntil), { size: 6 }),\n            pad(toHex(validAfter), { size: 6 }),\n            validator.getAddress(),\n          ]),\n          { size: 32 }\n        ),\n        executor: executor as Address,\n        enableData: await validator.getEnableData(kernel),\n      },\n      primaryType: \"ValidatorApproved\",\n    });\n    return ownerSig;\n  }\n\n  async resolveValidatorMode(\n    kernelAccountAddress: Address,\n    callData: Hex\n  ): Promise<ValidatorMode> {\n    if (!this.chain || !this.publicClient) {\n      throw new Error(\"Validator uninitialized\");\n    }\n\n    let mode: ValidatorMode;\n    try {\n      const defaultValidatorAddress = await this.publicClient.readContract({\n        abi: KernelAccountAbi,\n        address: kernelAccountAddress,\n        functionName: \"getDefaultValidator\",\n      });\n      if (\n        defaultValidatorAddress?.toLowerCase() ===\n          this.validatorAddress.toLowerCase() ||\n        this.mode === ValidatorMode.sudo\n      ) {\n        mode = ValidatorMode.sudo;\n      } else if (\n        await this.isPluginEnabled(\n          kernelAccountAddress,\n          callData.toString().slice(0, 10) as Hex\n        )\n      ) {\n        mode = ValidatorMode.plugin;\n      } else {\n        mode = ValidatorMode.enable;\n      }\n    } catch (error) {\n      if (this.mode === ValidatorMode.plugin) {\n        mode = ValidatorMode.enable;\n      } else {\n        mode = this.mode;\n      }\n    }\n    return mode;\n  }\n\n  async getSignature(userOp: UserOperationRequest): Promise<Hex> {\n    const mode = await this.resolveValidatorMode(\n      userOp.sender,\n      userOp.callData\n    );\n    if (mode === ValidatorMode.sudo || mode === ValidatorMode.plugin) {\n      return concatHex([this.mode, await this.signUserOp(userOp)]);\n    } else {\n      const enableData = await this.getEnableData(userOp.sender);\n      const enableDataLength = enableData.length / 2 - 1;\n      const enableSignature = this.getEnableSignature();\n      if (!enableSignature) {\n        throw new Error(\"Enable signature not set\");\n      }\n      return concat([\n        mode, // 4 bytes 0 - 4\n        pad(toHex(this.validUntil), { size: 6 }), // 6 bytes 4 - 10\n        pad(toHex(this.validAfter), { size: 6 }), // 6 bytes 10 - 16\n        pad(this.validatorAddress, { size: 20 }), // 20 bytes 16 - 36\n        pad(this.executor!, { size: 20 }), // 20 bytes 36 - 56\n        pad(toHex(enableDataLength), { size: 32 }), // 32 bytes 56 - 88\n        enableData, // 88 - 88 + enableData.length\n        pad(toHex(enableSignature.length / 2 - 1), { size: 32 }), // 32 bytes 88 + enableData.length - 120 + enableData.length\n        enableSignature, // 120 + enableData.length - 120 + enableData.length + enableSignature.length\n        await this.signUserOp(userOp), // 120 + enableData.length + enableSignature.length - 120 + enableData.length + enableSignature.length + userOperation.length\n      ]);\n    }\n  }\n}\n"]}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/base.ts"],"names":[],"mappings":";;;AAKA,+BAcc;AACd,qEAA+D;AAC/D,kDAMyB;AACzB,wCAA4C;AAE5C,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,oCAAmB,CAAA;IACnB,sCAAqB,CAAA;IACrB,sCAAqB,CAAA;AACvB,CAAC,EAJW,aAAa,6BAAb,aAAa,QAIxB;AAyBD,MAAsB,mBAAmB;IAevC,YAAY,MAAiC;QAdpC;;;;;WAAsB;QAC/B;;;;;WAAoB;QACpB;;;;;WAA6B;QACnB;;;;;WAAkB;QAClB;;;;;WAAc;QACd;;;;;WAA2B;QAC3B;;;;;WAAsB;QACtB;;;;;WAAmB;QACnB;;;;;WAAmB;QACnB;;;;;WAAmB;QACnB;;;;;WAAe;QACf;;;;;WAAgB;QAC1B;;;;;WAA8C;QAG5C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,sCAAuB,CAAC;QAC3E,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC;QAC9C,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,iCAAkB,CAAC;QACxE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,0BAAW,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAA,yBAAkB,EAAC;YACrC,SAAS,EAAE,IAAA,WAAI,EAAC,+BAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,sBAAa,CAAC,EAAE,CAAC,CAAC;YACrE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,sBAAa;SACnC,CAAC,CAAC;IACL,CAAC;IAuBD,yBAAyB;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sBAAsB;QACpB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED,WAAW;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,oBAA6B,EAC7B,QAAa;QAEb,MAAM,aAAa,GACjB,sIAAsI,CAAC;QACzI,MAAM,aAAa,GACjB,IAAI,CAAC,YAAY;YACjB,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpE,IAAI,aAAa,KAAK,aAAa,CAAC,MAAM,EAAE;YAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;YAClE,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,eAAe,GAAG,EAAE,CAAC;YAC3B,MAAM,cAAc,GAAG,IAAA,gBAAS,EAAC;gBAC/B,4BAA4B;gBAC5B,IAAI,CAAC,UAAU,EAAE;gBACjB,IAAI,CAAC,QAAS;aACf,CAAC,CAAC;YAEH,OAAO,IAAA,gBAAS,EAAC;gBACf,aAAa,CAAC,MAAM;gBACpB,cAAc;gBACd,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC1C,UAAU;gBACV,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACzC,aAAa;gBACb,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;aAC7C,CAAC,CAAC;SACJ;QACD,OAAO,IAAA,gBAAS,EAAC;YACf,aAAa;YACb,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAAC,eAAoB;QACrC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,eAAe;QACb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,MAAe,EACf,QAAa,EACb,QAAiB,EACjB,UAAkB,EAClB,UAAkB,EAClB,SAA8B;QAE9B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,IAAI,cAAc,CAAC;QACnB,IAAI;YACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,YAAY,CAAC;gBACzD,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,oEAAoE;aAC3E,CAAC,CAAC;YACH,cAAc,GAAG,QAAQ;gBACvB,CAAC,CAAE,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAS;gBACtC,CAAC,CAAC,QAAQ,CAAC;SACd;QAAC,OAAO,KAAK,EAAE,GAAE;QAClB,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;YAC1C,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,cAAc,EAAE,WAAW,EAAE,KAAK,kCAAmB,CAAC,WAAW,EAAE;oBACnE,cAAc,EAAE,WAAW,EAAE;wBAC3B,4CAA4C,CAAC,WAAW,EAAE;oBAC5D,cAAc,KAAK,SAAS;oBAC5B,cAAc,KAAK,kBAAW;oBAC5B,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,OAAO;gBACb,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;gBACtB,iBAAiB,EAAE,MAAM;aAC1B;YACD,KAAK,EAAE;gBACL,iBAAiB,EAAE;oBACjB,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC/B,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC1C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;oBACrC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;iBACtC;aACF;YACD,OAAO,EAAE;gBACP,GAAG,EAAE,QAAe;gBACpB,aAAa,EAAE,IAAA,kBAAW,EACxB,IAAA,gBAAS,EAAC;oBACR,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBACnC,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBACnC,SAAS,CAAC,UAAU,EAAE;iBACvB,CAAC,EACF,EAAE,IAAI,EAAE,EAAE,EAAE,CACb;gBACD,QAAQ,EAAE,QAAmB;gBAC7B,UAAU,EAAE,MAAM,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC;aAClD;YACD,WAAW,EAAE,mBAAmB;SACjC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACrC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QAED,IAAI,IAAmB,CAAC;QACxB,IAAI;YACF,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;gBACnE,GAAG,EAAE,sCAAgB;gBACrB,OAAO,EAAE,oBAAoB;gBAC7B,YAAY,EAAE,qBAAqB;aACpC,CAAC,CAAC;YACH,IACE,uBAAuB,EAAE,WAAW,EAAE;gBACpC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;gBACrC,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,EAChC;gBACA,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC;aAC3B;iBAAM,IACL,MAAM,IAAI,CAAC,eAAe,CACxB,oBAAoB,EACpB,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAQ,CACxC,EACD;gBACA,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC;aAC7B;iBAAM;gBACL,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC;aAC7B;SACF;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE;gBACtC,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC;aAC7B;iBAAM;gBACL,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;aAClB;SACF;QACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAA4B;QAC7C,MAAM,IAAI,GACR,IAAI,CAAC,YAAY;YACjB,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpE,IAAI,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE;YAChE,OAAO,IAAA,gBAAS,EAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SAC9D;aAAM;YACL,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAClD,IAAI,CAAC,eAAe,EAAE;gBACpB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;aAC7C;YACD,OAAO,IAAA,aAAM,EAAC;gBACZ,IAAI;gBACJ,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACxC,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACxC,IAAA,UAAG,EAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACxC,IAAA,UAAG,EAAC,IAAI,CAAC,QAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACjC,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC1C,UAAU;gBACV,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,eAAe,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBACxD,eAAe;gBACf,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;SACJ;IACH,CAAC;CACF;AApQD,kDAoQC","sourcesContent":["import {\n  type SignTypedDataParams,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n} from \"@alchemy/aa-core\";\nimport {\n  concat,\n  type Chain,\n  type Hex,\n  pad,\n  toHex,\n  type Address,\n  concatHex,\n  hexToBigInt,\n  type PublicClient,\n  type Transport,\n  createPublicClient,\n  http,\n  zeroAddress,\n} from \"viem\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport {\n  BUNDLER_URL,\n  CHAIN_ID_TO_NODE,\n  ECDSA_VALIDATOR_ADDRESS,\n  ENTRYPOINT_ADDRESS,\n  KERNEL_IMPL_ADDRESS,\n} from \"../constants.js\";\nimport { polygonMumbai } from \"viem/chains\";\n\nexport enum ValidatorMode {\n  sudo = \"0x00000000\",\n  plugin = \"0x00000001\",\n  enable = \"0x00000002\",\n}\n\nexport interface KernelBaseValidatorParams {\n  projectId: string;\n  validatorAddress?: Hex;\n  mode?: ValidatorMode;\n  chain?: Chain;\n  entryPointAddress?: Address;\n  enableSignature?: Hex;\n  validUntil?: number;\n  validAfter?: number;\n  executor?: Address;\n  selector?: Hex;\n  rpcUrl?: string;\n}\n\nexport type ValidatorPluginData = Required<\n  Pick<\n    KernelBaseValidatorParams,\n    \"executor\" | \"selector\" | \"validAfter\" | \"validUntil\"\n  >\n>;\n\n//Kernel wallet implementation separates out validation and execution phase. It allows you to have\n// custom wrapper logic for the validation phase in addition to signature of choice.\nexport abstract class KernelBaseValidator {\n  readonly validatorAddress: Hex;\n  mode: ValidatorMode;\n  resolvedMode?: ValidatorMode;\n  protected projectId: string;\n  protected chain?: Chain;\n  protected entryPointAddress: Address;\n  protected enableSignature?: Hex;\n  protected validUntil: number;\n  protected validAfter: number;\n  protected executor?: Address;\n  protected selector?: Hex;\n  protected rpcUrl?: string;\n  publicClient?: PublicClient<Transport, Chain>;\n\n  constructor(params: KernelBaseValidatorParams) {\n    this.projectId = params.projectId;\n    this.validatorAddress = params.validatorAddress ?? ECDSA_VALIDATOR_ADDRESS;\n    this.mode = params.mode ?? ValidatorMode.sudo;\n    this.entryPointAddress = params.entryPointAddress ?? ENTRYPOINT_ADDRESS;\n    this.enableSignature = params.enableSignature;\n    this.validUntil = params.validUntil ?? 0;\n    this.validAfter = params.validAfter ?? 0;\n    this.executor = params.executor;\n    this.selector = params.selector;\n    this.chain = params.chain;\n    this.rpcUrl = params.rpcUrl ?? BUNDLER_URL;\n    this.publicClient = createPublicClient({\n      transport: http(CHAIN_ID_TO_NODE[this.chain?.id ?? polygonMumbai.id]),\n      chain: this.chain ?? polygonMumbai,\n    });\n  }\n\n  abstract encodeEnable(enableData: Hex): Hex;\n\n  abstract encodeDisable(enableData: Hex): Hex;\n\n  abstract getEnableData(kernelAccountAddress?: Address): Promise<Hex>;\n\n  abstract signMessage(message: Uint8Array | string | Hex): Promise<Hex>;\n\n  abstract signTypedData(params: SignTypedDataParams): Promise<Hex>;\n\n  abstract signUserOp(userOp: UserOperationRequest): Promise<Hex>;\n\n  abstract signer(): Promise<SmartAccountSigner>;\n\n  abstract getDummyUserOpSignature(callData?: Hex): Promise<Hex>;\n\n  abstract isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean>;\n\n  shouldDelegateViaFallback(): boolean {\n    return true;\n  }\n\n  getPluginValidatorData(): ValidatorPluginData {\n    if (!this.selector || !this.executor) {\n      throw Error(\"Plugin Validator data params uninitialised\");\n    }\n    return {\n      selector: this.selector,\n      executor: this.executor,\n      validAfter: this.validAfter,\n      validUntil: this.validUntil,\n    };\n  }\n\n  getNonceKey(): bigint {\n    return 0n;\n  }\n\n  async getDynamicDummySignature(\n    kernelAccountAddress: Address,\n    calldata: Hex\n  ): Promise<Hex> {\n    const dummyECDSASig =\n      \"0xfffffffffffffffffffffffffffffff0000000000000000000000000000000007aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa1c\";\n    const validatorMode =\n      this.resolvedMode ??\n      (await this.resolveValidatorMode(kernelAccountAddress, calldata));\n    if (validatorMode === ValidatorMode.enable) {\n      const enableData = await this.getEnableData(kernelAccountAddress);\n      const enableDataLength = enableData.length / 2 - 1;\n      const enableSigLength = 65;\n      const staticDummySig = concatHex([\n        \"0x000000000000000000000000\",\n        this.getAddress(),\n        this.executor!,\n      ]);\n\n      return concatHex([\n        ValidatorMode.enable,\n        staticDummySig,\n        pad(toHex(enableDataLength), { size: 32 }),\n        enableData,\n        pad(toHex(enableSigLength), { size: 32 }),\n        dummyECDSASig,\n        await this.getDummyUserOpSignature(calldata),\n      ]);\n    }\n    return concatHex([\n      validatorMode,\n      await this.getDummyUserOpSignature(calldata),\n    ]);\n  }\n\n  setEnableSignature(enableSignature: Hex) {\n    this.enableSignature = enableSignature;\n  }\n\n  getEnableSignature(): Hex | undefined {\n    return this.enableSignature;\n  }\n\n  getAddress(): Hex {\n    return this.validatorAddress;\n  }\n\n  getPublicClient(): PublicClient<Transport, Chain> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    return this.publicClient;\n  }\n\n  async approveExecutor(\n    kernel: Address,\n    selector: Hex,\n    executor: Address,\n    validUntil: number,\n    validAfter: number,\n    validator: KernelBaseValidator\n  ): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    let kernelImplAddr;\n    try {\n      const strgAddr = await this.getPublicClient().getStorageAt({\n        address: kernel,\n        slot: \"0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc\",\n      });\n      kernelImplAddr = strgAddr\n        ? ((\"0x\" + strgAddr.slice(26)) as Hex)\n        : strgAddr;\n    } catch (error) {}\n    const sender = kernel;\n    const signer = await this.signer();\n    const ownerSig = await signer.signTypedData({\n      domain: {\n        name: \"Kernel\",\n        version:\n          kernelImplAddr?.toLowerCase() === KERNEL_IMPL_ADDRESS.toLowerCase() ||\n          kernelImplAddr?.toLowerCase() ===\n            \"0x8dD4DBB54d8A8Cf0DE6F9CCC4609470A30EfF18C\".toLowerCase() ||\n          kernelImplAddr === undefined ||\n          kernelImplAddr === zeroAddress\n            ? \"0.2.2\"\n            : \"0.2.1\",\n        chainId: this.chain.id,\n        verifyingContract: sender,\n      },\n      types: {\n        ValidatorApproved: [\n          { name: \"sig\", type: \"bytes4\" },\n          { name: \"validatorData\", type: \"uint256\" },\n          { name: \"executor\", type: \"address\" },\n          { name: \"enableData\", type: \"bytes\" },\n        ],\n      },\n      message: {\n        sig: selector as Hex,\n        validatorData: hexToBigInt(\n          concatHex([\n            pad(toHex(validUntil), { size: 6 }),\n            pad(toHex(validAfter), { size: 6 }),\n            validator.getAddress(),\n          ]),\n          { size: 32 }\n        ),\n        executor: executor as Address,\n        enableData: await validator.getEnableData(kernel),\n      },\n      primaryType: \"ValidatorApproved\",\n    });\n    return ownerSig;\n  }\n\n  async resolveValidatorMode(\n    kernelAccountAddress: Address,\n    callData: Hex\n  ): Promise<ValidatorMode> {\n    if (!this.chain || !this.publicClient) {\n      throw new Error(\"Validator uninitialized\");\n    }\n\n    let mode: ValidatorMode;\n    try {\n      const defaultValidatorAddress = await this.publicClient.readContract({\n        abi: KernelAccountAbi,\n        address: kernelAccountAddress,\n        functionName: \"getDefaultValidator\",\n      });\n      if (\n        defaultValidatorAddress?.toLowerCase() ===\n          this.validatorAddress.toLowerCase() ||\n        this.mode === ValidatorMode.sudo\n      ) {\n        mode = ValidatorMode.sudo;\n      } else if (\n        await this.isPluginEnabled(\n          kernelAccountAddress,\n          callData.toString().slice(0, 10) as Hex\n        )\n      ) {\n        mode = ValidatorMode.plugin;\n      } else {\n        mode = ValidatorMode.enable;\n      }\n    } catch (error) {\n      if (this.mode === ValidatorMode.plugin) {\n        mode = ValidatorMode.enable;\n      } else {\n        mode = this.mode;\n      }\n    }\n    this.resolvedMode = mode;\n    return mode;\n  }\n\n  async getSignature(userOp: UserOperationRequest): Promise<Hex> {\n    const mode =\n      this.resolvedMode ??\n      (await this.resolveValidatorMode(userOp.sender, userOp.callData));\n    if (mode === ValidatorMode.sudo || mode === ValidatorMode.plugin) {\n      return concatHex([this.mode, await this.signUserOp(userOp)]);\n    } else {\n      const enableData = await this.getEnableData(userOp.sender);\n      const enableDataLength = enableData.length / 2 - 1;\n      const enableSignature = this.getEnableSignature();\n      if (!enableSignature) {\n        throw new Error(\"Enable signature not set\");\n      }\n      return concat([\n        mode, // 4 bytes 0 - 4\n        pad(toHex(this.validUntil), { size: 6 }), // 6 bytes 4 - 10\n        pad(toHex(this.validAfter), { size: 6 }), // 6 bytes 10 - 16\n        pad(this.validatorAddress, { size: 20 }), // 20 bytes 16 - 36\n        pad(this.executor!, { size: 20 }), // 20 bytes 36 - 56\n        pad(toHex(enableDataLength), { size: 32 }), // 32 bytes 56 - 88\n        enableData, // 88 - 88 + enableData.length\n        pad(toHex(enableSignature.length / 2 - 1), { size: 32 }), // 32 bytes 88 + enableData.length - 120 + enableData.length\n        enableSignature, // 120 + enableData.length - 120 + enableData.length + enableSignature.length\n        await this.signUserOp(userOp), // 120 + enableData.length + enableSignature.length - 120 + enableData.length + enableSignature.length + userOperation.length\n      ]);\n    }\n  }\n}\n"]}

package/dist/cjs/kernel-zerodev/validator/session-key-validator.js

@@ -256,8 +256,7 @@ class SessionKeyValidator extends base_js_1.KernelBaseValidator {
         return permissionPacked && permissionPacked.length !== 0
             ? new merkletreejs_1.MerkleTree(permissionPacked, viem_1.keccak256, {
                 hashLeaves: true,
-                complete: true,
-                sort: true,
+                sortPairs: true,
             })
             : new merkletreejs_1.MerkleTree([(0, viem_1.pad)("0x00", { size: 32 })], viem_1.keccak256, {
                 hashLeaves: false,

package/dist/cjs/kernel-zerodev/validator/session-key-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-key-validator.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/session-key-validator.ts"],"names":[],"mappings":";;;AAAA,8CAS0B;AAC1B,uCAKmB;AACnB,+BAcc;AACd,sCAA2C;AAC3C,iFAA2E;AAC3E,kDAAkD;AAClD,qEAA+D;AAC/D,+CAA0C;AAC1C,8CAA6C;AAC7C,0CAA4C;AAW3C,MAAM,CAAC,SAAiB,CAAC,MAAM,GAAG;IACjC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzB,CAAC,CAAC;AAiBF,IAAY,aAOX;AAPD,WAAY,aAAa;IACvB,mDAAS,CAAA;IACT,iEAAgB,CAAA;IAChB,2DAAa,CAAA;IACb,mFAAyB,CAAA;IACzB,6EAAsB,CAAA;IACtB,2DAAa,CAAA;AACf,CAAC,EAPW,aAAa,6BAAb,aAAa,QAOxB;AAkCD,SAAgB,UAAU,CAGxB,EACA,GAAG,EACH,IAAI,GAAG,EAAE,EACT,IAAI,GACkC;IAItC,MAAM,QAAQ,GAAI,GAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC5E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAgB,CAAC;IACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAQ,CAAC;IACrD,MAAM,qBAAqB,GAAG,EAAE,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;QAC9B,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;YAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,OAAc,CAAC;YAC1E,SAAS;SACV;QACD,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,SAAS;QAC9B,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC1C,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,SAAS;QACpD,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;KACrC;IACD,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAQ,CAAC;SAC7D,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC;QACzC,OAAO,qBAAqB,CAAC,CAAC,CAAQ,CAAC;;QAEvC,MAAM,KAAK,CACT,mFAAmF,qBAAqB;aACrG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,qBAAa,EAAC,IAAI,CAAC,CAAC;aAClC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CACpC,CAAC;AACN,CAAC;AAnCD,gCAmCC;AAED,SAAgB,oBAAoB,CAGlC,EACA,GAAG,EACH,MAAM,EACN,IAAI,EACJ,YAAY,EACZ,UAAU,GACgD;IAC1D,MAAM,OAAO,GAAG,UAAU,CAAC;QACzB,GAAG;QACH,IAAI;QACJ,IAAI,EAAE,YAAY;KACK,CAAC,CAAC;IAC3B,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE;QAC/B,MAAM,KAAK,CAAC,GAAG,YAAY,mBAAmB,CAAC,CAAC;KACjD;IACD,MAAM,gBAAgB,GAAG,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;IACtD,IAAI,UAAU,GAAiB,EAAE,CAAC;IAClC,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAC/B,UAAU,GAAI,IAA4C;aACvD,GAAG,CACF,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CACT,GAAG,IAAI;YACL,KAAK,EAAE,IAAA,UAAG,EACR,IAAA,YAAK,EAAC,GAAG,CAAC,KAAK,CAAC;gBACd,CAAC,CAAC,GAAG,CAAC,KAAK;gBACX,CAAC,CAAC,IAAA,YAAK,EAAC,GAAG,CAAC,KAAoC,CAAC,EACnD,EAAE,IAAI,EAAE,EAAE,EAAE,CACb;YACD,MAAM,EAAE,CAAC,GAAG,EAAE;YACd,SAAS,EAAE,GAAG,CAAC,QAAQ;SACxB,CACJ;aACA,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAiB,CAAC;KAC3C;IACD,OAAO;QACL,GAAG,EAAE,gBAAgB;QACrB,KAAK,EAAE,UAAU;QACjB,MAAM;QACN,UAAU,EAAE,UAAU,IAAI,EAAE;KAC7B,CAAC;AACJ,CAAC;AA3CD,oDA2CC;AAED,MAAa,mBAAoB,SAAQ,6BAAmB;IAK1D,YAAY,MAAiC;QAC3C,KAAK,CAAC,MAAM,CAAC,CAAC;QALN;;;;;WAA+B;QACzC;;;;;WAA+B;QAC/B;;;;;WAAuB;QAIrB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG;YACpB,GAAG,MAAM,CAAC,cAAc;YACxB,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,UAAU,IAAI,CAAC;YACjD,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,UAAU,IAAI,CAAC;YACjD,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,SAAS,IAAI,kBAAW;SAC1D,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CACpE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAChB,GAAG,IAAI;YACP,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YACjC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAA,UAAG,EAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACvB,KAAK;YACL,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI;gBACnC,UAAU,EAAE,CAAC;gBACb,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC;aACR;SACF,CAAC,CACH,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ;YACX,MAAM,CAAC,QAAQ;gBACf,IAAA,0BAAmB,EAAC,yCAAyC,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,kBAAW,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,uBAAa,CAAC,MAAM,CAAC;IAClD,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,IAAI,CACtB,MAAiC;QAEjC,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAU,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;SACtC;QACD,MAAM,KAAK,GAAG,IAAA,kBAAQ,EAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yBAAyB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,IAAA,UAAG,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,uBAAuB,CACrB,QAAa;QAEb,IAAI;YACF,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,IAAA,yBAAkB,EAAC;gBAChD,GAAG,EAAE,sCAAgB;gBACrB,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YAEH,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,cAAc;gBAC/D,OAAO,SAAS,CAAC;YACnB,IAAI,YAAY,KAAK,SAAS,EAAE;gBAC9B,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;gBAC/B,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aAC3D;iBAAM,IAAI,YAAY,KAAK,cAAc,EAAE;gBAC1C,IAAI,OAAO,GAAU,EAAE,EACrB,MAAM,GAAa,EAAE,EACrB,SAAS,GAAU,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;oBACtB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACrB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACvB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;aAC3D;iBAAM;gBACL,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;aACjC;SACF;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,SAAS,CAAC;SAClB;IACH,CAAC;IAEO,iBAAiB,CACvB,OAAkB,EAClB,SAAgB,EAChB,MAAgB;QAEhB,IACE,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YACnC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAChC;YACA,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC;SAClC;QACD,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACxD,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;YACxD,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAElE,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YAG3C,IAAI,iBAAiB,GAAG,eAAe,CAAC,MAAM,CAC5C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,aAAa,CAClE,CAAC;YAGF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE;gBAC7B,iBAAiB,GAAG,eAAe,CAAC,MAAM,CACxC,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,kBAAW,CAAC,WAAW,EAAE,CAChE,CAAC;aACH;YAED,IAAI,CAAC,iBAAiB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEhD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,iBAAiB,EACjB,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAC5C,CAAC;YAEF,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,MAAM,CACvD,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAC/D,CAAC;YAEF,IAAI,CAAC,qBAAqB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEpD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC5D,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;oBAC/C,OAAO,CAAC,CAAC;iBACV;qBAAM,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;oBACtD,OAAO,CAAC,CAAC,CAAC;iBACX;qBAAM;oBACL,OAAO,CAAC,CAAC;iBACV;YACH,CAAC,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC;YACxE,CAAC,CAAE,mBAAoC;YACvC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAEO,iBAAiB,CACvB,WAAyB,EACzB,SAAiB;QAEjB,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CACb,CAAC,UAAU,CAAC,GAAG,IAAI,IAAA,UAAG,EAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CACzE,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAC1B,WAAyB,EACzB,IAAY;QAEZ,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACrC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,IAAI,EAAE,EAAE;gBACzC,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CACzC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CACnE,CAAC;gBACF,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAExD,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;oBACrE,OAAO,KAAK,CAAC;iBACd;aACF;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,OAAO,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAA,YAAK,EAAC,KAAK,CAAC,EAAE;YAC9C,IAAI,EAAE,EAAE;SACT,CAAC,CAAC,WAAW,EAAS,CAAC;IAC1B,CAAC;IAEO,qBAAqB,CAC3B,SAAc,EACd,SAAc,EACd,SAAwB;QAExB,QAAQ,SAAS,EAAE;YACjB,KAAK,aAAa,CAAC,KAAK;gBACtB,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC,KAAK,aAAa,CAAC,YAAY;gBAC7B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,aAAa,CAAC,SAAS;gBAC1B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,aAAa,CAAC,qBAAqB;gBACtC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,aAAa,CAAC,kBAAkB;gBACnC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,aAAa,CAAC,SAAS;gBAC1B,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC;gBACE,OAAO,KAAK,CAAC;SAChB;IACH,CAAC;IAED,aAAa;QACX,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CAC3D,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CACtD,CAAC;QAIF,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACnD,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7C,OAAO,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACtD,CAAC,CAAC,IAAI,yBAAU,CAAC,gBAAgB,EAAE,gBAAS,EAAE;gBAC1C,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;aACX,CAAC;YACJ,CAAC,CAAC,IAAI,yBAAU,CAAC,CAAC,IAAA,UAAG,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,gBAAS,EAAE;gBACrD,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;IACT,CAAC;IAED,oBAAoB,CAClB,UAAqC,EACrC,WAAmC;QAEnC,IAAI,eAAe,GAAG;YACpB,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,QAAQ;iBACf;gBACD;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,QAAQ;iBACf;gBACD;oBACE,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,SAAS;yBAChB;wBACD;4BACE,YAAY,EAAE,qBAAqB;4BACnC,IAAI,EAAE,WAAW;4BACjB,IAAI,EAAE,OAAO;yBACd;wBACD;4BACE,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,SAAS;yBAChB;qBACF;oBACD,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,UAAU;4BAChB,IAAI,EAAE,QAAQ;yBACf;wBACD;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,QAAQ;yBACf;wBACD;4BACE,YAAY,EAAE,YAAY;4BAC1B,IAAI,EAAE,YAAY;4BAClB,IAAI,EAAE,QAAQ;yBACf;qBACF;oBACD,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,OAAO;iBACd;aACF;YACD,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;SACtD,CAAC;QACF,IAAI,MAAM,CAAC;QACX,IAAI,MAAM,CAAC;QACX,IAAI,WAAW,EAAE;YACf,MAAM,GAAG;gBACP,eAAe;gBACf;oBACE,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW;iBAClE;aACF,CAAC;YACF,MAAM,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;SACpC;aAAM;YACL,MAAM,GAAG,CAAC,eAAe,CAAC,CAAC;YAC3B,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;SACvB;QACD,OAAO,IAAA,0BAAmB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,oBAA6B;QAE7B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACjD,GAAG,EAAE,kDAAsB;YAC3B,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,oBAA8B,EAC9B,gBAAyB;QAEzB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YACpB,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAC9D;QACD,IAAI,CAAC,oBAAoB,EAAE;YACzB,MAAM,KAAK,CAAC,0DAA0D,CAAC,CAAC;SACzE;QACD,MAAM,SAAS,GACb,gBAAgB;YAChB,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC;QACrE,OAAO,IAAA,aAAM,EAAC;YACZ,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,IAAA,UAAG,EAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACtD,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,cAAc,CAAC,SAAU;YAC9B,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,sCAAgB;YACrB,OAAO,EAAE,oBAAoB;YAC7B,YAAY,EAAE,cAAc;YAC5B,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,kDAAsB;YAC3B,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,oBAAoB,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAA,gBAAS,EAAC;YAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,IAAA,UAAG,EAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAChC,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,UAAU,CAAC,CAAC,CAAC;YACb,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,OAAO,CACL,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;YACrC,aAAa,CAAC,WAAW,EAAE;gBACzB,CACE,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAC9D,CAAC,WAAW,EAAE,CAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,QAAa;QACzC,OAAO,IAAA,gBAAS,EAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,8BAAe;YACf,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAEO,6BAA6B,CAAC,QAAa;QACjD,MAAM,kBAAkB,GAAG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE;YAC5D,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;SACH;QACD,MAAM,qBAAqB,GACzB,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,IAAI,WAAW,GAA0B,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE;YACrC,IAAI,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACvD,IAAA,gBAAS,EAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CACjD,CAAC;YACF,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACtC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAClC,CAAC;SACH;aAAM,IAAI,kBAAkB,EAAE;YAC7B,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CACvC,IAAA,gBAAS,EAAC,qBAAqB,CAAC,CACjC,CAAC;SACH;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW;YACpC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAClB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAED,YAAY,CAAC,oBAAyB;QACpC,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,kDAAsB;YAC3B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,UAAe;QAC3B,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,kDAAsB;YAC3B,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,OAAO,IAAA,wBAAa,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA4B;QAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,MAAM,IAAI,GAAG,IAAA,8BAAoB,EAC/B;YACE,GAAG,MAAM;YACT,SAAS,EAAE,IAAI;SAChB,EACD,IAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzE,MAAM,SAAS,GAAG,IAAA,aAAM,EAAC;YACvB,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACnD,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,QAAQ,CAAC;SACpD,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAreD,kDAqeC","sourcesContent":["import {\n  getUserOperationHash,\n  type Address,\n  type Hex,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n  getChain,\n  type SignTypedDataParams,\n  type Abi,\n} from \"@alchemy/aa-core\";\nimport {\n  KernelBaseValidator,\n  ValidatorMode,\n  type KernelBaseValidatorParams,\n  type ValidatorPluginData,\n} from \"./base.js\";\nimport {\n  encodeFunctionData,\n  toBytes,\n  concat,\n  pad,\n  toHex,\n  encodeAbiParameters,\n  concatHex,\n  zeroAddress,\n  decodeFunctionData,\n  isHex,\n  getFunctionSelector,\n  type GetAbiItemParameters,\n  keccak256,\n} from \"viem\";\nimport { formatAbiItem } from \"viem/utils\";\nimport { SessionKeyValidatorAbi } from \"../abis/SessionKeyValidatorAbi.js\";\nimport { DUMMY_ECDSA_SIG } from \"../constants.js\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport { MerkleTree } from \"merkletreejs\";\nimport { getChainId } from \"../api/index.js\";\nimport { fixSignedData } from \"../utils.js\";\nimport type { GetAbiItemReturnType } from \"viem/dist/types/utils/abi/getAbiItem.js\";\nimport { type AbiFunction } from \"abitype\";\nimport type {\n  CombinedArgs,\n  GeneratePermissionFromArgsParameters,\n} from \"./types.js\";\n\n// We need to be able to serialize bigint to transmit session key over\n// the network.\n// Using this trick: https://github.com/GoogleChromeLabs/jsbi/issues/30#issuecomment-1006086291\n(BigInt.prototype as any).toJSON = function () {\n  return this.toString();\n};\n\nexport interface SessionKeyValidatorParams extends KernelBaseValidatorParams {\n  sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n}\n\nexport type SessionKeyParams = Pick<\n  SessionKeyValidatorParams,\n  \"sessionKeyData\" | \"enableSignature\"\n> &\n  ValidatorPluginData & {\n    sessionPrivateKey?: Hex;\n    initCode?: Hex;\n    accountAddress?: Address;\n  };\n\nexport enum ParamOperator {\n  EQUAL = 0,\n  GREATER_THAN = 1,\n  LESS_THAN = 2,\n  GREATER_THAN_OR_EQUAL = 3,\n  LESS_THAN_OR_EQUAL = 4,\n  NOT_EQUAL = 5,\n}\n\nexport type SessionNonces = {\n  lastNonce: bigint;\n  invalidNonce: bigint;\n};\n\nexport type ExecutionRule = {\n  validAfter: number; // 48 bits\n  interval: number; // 48 bits\n  runs: number; // 48 bits\n};\nexport interface ParamRules {\n  offset: number;\n  condition: ParamOperator;\n  param: Hex;\n}\n\nexport type Permission = {\n  target: Address;\n  index?: number;\n  rules?: ParamRules[];\n  sig?: Hex;\n  valueLimit?: bigint;\n  executionRule?: ExecutionRule;\n};\n\nexport interface SessionKeyData {\n  validUntil: number;\n  validAfter: number;\n  paymaster?: Address;\n  permissions?: Permission[];\n}\n\nexport function getAbiItem<\n  TAbi extends Abi | readonly unknown[],\n  TItemName extends string\n>({\n  abi,\n  args = [],\n  name,\n}: GetAbiItemParameters<TAbi, TItemName>): GetAbiItemReturnType<\n  TAbi,\n  TItemName\n> {\n  const abiItems = (abi as Abi).filter((x) => \"name\" in x && x.name === name);\n  if (abiItems.length === 0) return undefined as any;\n  if (abiItems.length === 1) return abiItems[0] as any;\n  const abiItemsParamFiltered = [];\n  for (const abiItem of abiItems) {\n    if (!(\"inputs\" in abiItem)) continue;\n    if (!args || args.length === 0) {\n      if (!abiItem.inputs || abiItem.inputs.length === 0) return abiItem as any;\n      continue;\n    }\n    if (!abiItem.inputs) continue;\n    if (abiItem.inputs.length === 0) continue;\n    if (abiItem.inputs.length !== args.length) continue;\n    abiItemsParamFiltered.push(abiItem);\n  }\n  if (abiItemsParamFiltered.length === 0) return abiItems[0] as any;\n  else if (abiItemsParamFiltered.length === 1)\n    return abiItemsParamFiltered[0] as any;\n  else\n    throw Error(\n      `Couldn't parse funtion signature using params, set appropriate one from below:\\n${abiItemsParamFiltered\n        .map((item) => formatAbiItem(item))\n        .reduce((a, c) => `${a}\\n${c}`)}`\n    );\n}\n\nexport function getPermissionFromABI<\n  TAbi extends Abi | readonly unknown[],\n  TFunctionName extends string | undefined = string\n>({\n  abi,\n  target,\n  args,\n  functionName,\n  valueLimit,\n}: GeneratePermissionFromArgsParameters<TAbi, TFunctionName>): Permission {\n  const abiItem = getAbiItem({\n    abi,\n    args,\n    name: functionName,\n  } as GetAbiItemParameters);\n  if (abiItem.type !== \"function\") {\n    throw Error(`${functionName} not found in abi`);\n  }\n  const functionSelector = getFunctionSelector(abiItem);\n  let paramRules: ParamRules[] = [];\n  if (args && Array.isArray(args)) {\n    paramRules = (args as CombinedArgs<AbiFunction[\"inputs\"]>)\n      .map(\n        (arg, i) =>\n          arg && {\n            param: pad(\n              isHex(arg.value)\n                ? arg.value\n                : toHex(arg.value as Parameters<typeof toHex>[0]),\n              { size: 32 }\n            ),\n            offset: i * 32,\n            condition: arg.operator,\n          }\n      )\n      .filter((rule) => rule) as ParamRules[];\n  }\n  return {\n    sig: functionSelector,\n    rules: paramRules,\n    target,\n    valueLimit: valueLimit ?? 0n,\n  };\n}\n\nexport class SessionKeyValidator extends KernelBaseValidator {\n  protected sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n  merkleTree: MerkleTree;\n\n  constructor(params: SessionKeyValidatorParams) {\n    super(params);\n    this.sessionKey = params.sessionKey;\n    this.sessionKeyData = {\n      ...params.sessionKeyData,\n      validAfter: params.sessionKeyData.validAfter ?? 0,\n      validUntil: params.sessionKeyData.validUntil ?? 0,\n      paymaster: params.sessionKeyData.paymaster ?? zeroAddress,\n    };\n    this.sessionKeyData.permissions = this.sessionKeyData.permissions?.map(\n      (perm, index) => ({\n        ...perm,\n        valueLimit: perm.valueLimit ?? 0n,\n        sig: perm.sig ?? pad(\"0x\", { size: 4 }),\n        rules: perm.rules ?? [],\n        index,\n        executionRule: perm.executionRule ?? {\n          validAfter: 0,\n          interval: 0,\n          runs: 0,\n        },\n      })\n    );\n    this.merkleTree = this.getMerkleTree();\n    this.selector =\n      params.selector ??\n      getFunctionSelector(\"execute(address, uint256, bytes, uint8)\");\n    this.executor = params.executor ?? zeroAddress;\n    this.mode = params.mode ?? ValidatorMode.plugin;\n  }\n\n  public static async init(\n    params: SessionKeyValidatorParams\n  ): Promise<SessionKeyValidator> {\n    const chainId = await getChainId(params.projectId);\n    if (!chainId) {\n      throw new Error(\"ChainId not found\");\n    }\n    const chain = getChain(chainId);\n    const instance = new SessionKeyValidator({ ...params, chain });\n    return instance;\n  }\n\n  shouldDelegateViaFallback(): boolean {\n    return this.merkleTree.getHexRoot() === pad(\"0x00\", { size: 32 });\n  }\n\n  findMatchingPermissions(\n    callData: Hex\n  ): Permission | Permission[] | undefined {\n    try {\n      const { functionName, args } = decodeFunctionData({\n        abi: KernelAccountAbi,\n        data: callData,\n      });\n\n      if (functionName !== \"execute\" && functionName !== \"executeBatch\")\n        return undefined;\n      if (functionName === \"execute\") {\n        const [to, value, data] = args;\n        return this.filterPermissions([to], [data], [value])?.[0];\n      } else if (functionName === \"executeBatch\") {\n        let targets: Hex[] = [],\n          values: bigint[] = [],\n          dataArray: Hex[] = [];\n        args[0].forEach((arg) => {\n          targets.push(arg.to);\n          values.push(arg.value);\n          dataArray.push(arg.data);\n        });\n        return this.filterPermissions(targets, dataArray, values);\n      } else {\n        throw Error(\"Invalid function\");\n      }\n    } catch (error) {\n      return undefined;\n    }\n  }\n\n  private filterPermissions(\n    targets: Address[],\n    dataArray: Hex[],\n    values: bigint[]\n  ): Permission[] | undefined {\n    if (\n      targets.length !== dataArray.length ||\n      targets.length !== values.length\n    ) {\n      throw Error(\"Invalid arguments\");\n    }\n    const filteredPermissions = targets.map((target, index) => {\n      const permissionsList = this.sessionKeyData.permissions;\n      if (!permissionsList || !permissionsList.length) return undefined;\n\n      const targetToMatch = target.toLowerCase();\n\n      // Filter permissions by target\n      let targetPermissions = permissionsList.filter(\n        (permission) => permission.target.toLowerCase() === targetToMatch\n      );\n\n      // If no permissions match the exact target, check for generic permissions (using zero address)\n      if (!targetPermissions.length) {\n        targetPermissions = permissionsList.filter(\n          (permission) =>\n            permission.target.toLowerCase() === zeroAddress.toLowerCase()\n        );\n      }\n\n      if (!targetPermissions.length) return undefined;\n\n      const signaturePermissions = this.filterBySignature(\n        targetPermissions,\n        dataArray[index].slice(0, 10).toLowerCase()\n      );\n\n      const valueLimitPermissions = signaturePermissions.filter(\n        (permission) => (permission.valueLimit ?? 0n) >= values[index]\n      );\n\n      if (!valueLimitPermissions.length) return undefined;\n\n      const sortedPermissions = valueLimitPermissions.sort((a, b) => {\n        if ((b.valueLimit ?? 0n) > (a.valueLimit ?? 0n)) {\n          return 1;\n        } else if ((b.valueLimit ?? 0n) < (a.valueLimit ?? 0n)) {\n          return -1;\n        } else {\n          return 0;\n        }\n      });\n\n      return this.findPermissionByRule(sortedPermissions, dataArray[index]);\n    });\n    return filteredPermissions.every((permission) => permission !== undefined)\n      ? (filteredPermissions as Permission[])\n      : undefined;\n  }\n\n  private filterBySignature(\n    permissions: Permission[],\n    signature: string\n  ): Permission[] {\n    return permissions.filter(\n      (permission) =>\n        (permission.sig ?? pad(\"0x\", { size: 4 })).toLowerCase() === signature\n    );\n  }\n\n  private findPermissionByRule(\n    permissions: Permission[],\n    data: string\n  ): Permission | undefined {\n    return permissions.find((permission) => {\n      for (const rule of permission.rules ?? []) {\n        const dataParam: Hex = this.getFormattedHex(\n          \"0x\" + data.slice(10 + rule.offset * 2, 10 + rule.offset * 2 + 64)\n        );\n        const ruleParam: Hex = this.getFormattedHex(rule.param);\n\n        if (!this.evaluateRuleCondition(dataParam, ruleParam, rule.condition)) {\n          return false;\n        }\n      }\n      return true;\n    });\n  }\n\n  private getFormattedHex(value: string): Hex {\n    return pad(isHex(value) ? value : toHex(value), {\n      size: 32,\n    }).toLowerCase() as Hex;\n  }\n\n  private evaluateRuleCondition(\n    dataParam: Hex,\n    ruleParam: Hex,\n    condition: ParamOperator\n  ): boolean {\n    switch (condition) {\n      case ParamOperator.EQUAL:\n        return dataParam === ruleParam;\n      case ParamOperator.GREATER_THAN:\n        return dataParam > ruleParam;\n      case ParamOperator.LESS_THAN:\n        return dataParam < ruleParam;\n      case ParamOperator.GREATER_THAN_OR_EQUAL:\n        return dataParam >= ruleParam;\n      case ParamOperator.LESS_THAN_OR_EQUAL:\n        return dataParam <= ruleParam;\n      case ParamOperator.NOT_EQUAL:\n        return dataParam !== ruleParam;\n      default:\n        return false;\n    }\n  }\n\n  getMerkleTree(): MerkleTree {\n    const permissionPacked = this.sessionKeyData.permissions?.map(\n      (permission) => this.encodePermissionData(permission)\n    );\n\n    // Having one leaf returns empty array in getProof(). To hack it we push the leaf twice\n    // issue - https://github.com/merkletreejs/merkletreejs/issues/58\n    if (permissionPacked && permissionPacked.length === 1)\n      permissionPacked.push(permissionPacked[0]);\n\n    return permissionPacked && permissionPacked.length !== 0\n      ? new MerkleTree(permissionPacked, keccak256, {\n          hashLeaves: true,\n          complete: true,\n          sort: true,\n        })\n      : new MerkleTree([pad(\"0x00\", { size: 32 })], keccak256, {\n          hashLeaves: false,\n          complete: true,\n        });\n  }\n\n  encodePermissionData(\n    permission: Permission | Permission[],\n    merkleProof?: string[] | string[][]\n  ): Hex {\n    let permissionParam = {\n      components: [\n        {\n          name: \"index\",\n          type: \"uint32\",\n        },\n        {\n          name: \"target\",\n          type: \"address\",\n        },\n        {\n          name: \"sig\",\n          type: \"bytes4\",\n        },\n        {\n          name: \"valueLimit\",\n          type: \"uint256\",\n        },\n        {\n          components: [\n            {\n              name: \"offset\",\n              type: \"uint256\",\n            },\n            {\n              internalType: \"enum ParamCondition\",\n              name: \"condition\",\n              type: \"uint8\",\n            },\n            {\n              name: \"param\",\n              type: \"bytes32\",\n            },\n          ],\n          name: \"rules\",\n          type: \"tuple[]\",\n        },\n        {\n          components: [\n            {\n              name: \"interval\",\n              type: \"uint48\",\n            },\n            {\n              name: \"runs\",\n              type: \"uint48\",\n            },\n            {\n              internalType: \"ValidAfter\",\n              name: \"validAfter\",\n              type: \"uint48\",\n            },\n          ],\n          name: \"executionRule\",\n          type: \"tuple\",\n        },\n      ],\n      name: \"permission\",\n      type: Array.isArray(permission) ? \"tuple[]\" : \"tuple\",\n    };\n    let params;\n    let values;\n    if (merkleProof) {\n      params = [\n        permissionParam,\n        {\n          name: \"merkleProof\",\n          type: Array.isArray(merkleProof[0]) ? \"bytes32[][]\" : \"bytes32[]\",\n        },\n      ];\n      values = [permission, merkleProof];\n    } else {\n      params = [permissionParam];\n      values = [permission];\n    }\n    return encodeAbiParameters(params, values);\n  }\n\n  getSessionData(): SessionKeyParams {\n    if (!this.selector || !this.executor) {\n      throw Error(\"Plugin Validator data params uninitialised\");\n    }\n    return {\n      selector: this.selector,\n      executor: this.executor,\n      validUntil: this.validUntil,\n      validAfter: this.validAfter,\n      sessionKeyData: this.sessionKeyData,\n      enableSignature: this.enableSignature,\n    };\n  }\n\n  async signer(): Promise<SmartAccountSigner> {\n    return await Promise.resolve(this.sessionKey);\n  }\n\n  async getSessionNonces(\n    kernelAccountAddress: Address\n  ): Promise<SessionNonces> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    const nonce = await this.publicClient.readContract({\n      abi: SessionKeyValidatorAbi,\n      address: this.validatorAddress,\n      functionName: \"nonces\",\n      args: [kernelAccountAddress],\n    });\n    return { lastNonce: nonce[0], invalidNonce: nonce[1] };\n  }\n\n  async getEnableData(\n    kernelAccountAddress?: Address,\n    enabledLastNonce?: bigint\n  ): Promise<Hex> {\n    if (!this.merkleTree) {\n      throw Error(\"SessionKeyValidator: MerkleTree not generated\");\n    }\n    if (!kernelAccountAddress) {\n      throw Error(\"SessionKeyValidator: Kernel account address not provided\");\n    }\n    const lastNonce =\n      enabledLastNonce ??\n      (await this.getSessionNonces(kernelAccountAddress)).lastNonce + 1n;\n    return concat([\n      await this.sessionKey.getAddress(),\n      pad(this.merkleTree.getHexRoot() as Hex, { size: 32 }),\n      pad(toHex(this.sessionKeyData.validAfter), { size: 6 }),\n      pad(toHex(this.sessionKeyData.validUntil), { size: 6 }),\n      this.sessionKeyData.paymaster!,\n      pad(toHex(lastNonce), { size: 32 }),\n    ]);\n  }\n\n  async isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    const execDetail = await this.publicClient.readContract({\n      abi: KernelAccountAbi,\n      address: kernelAccountAddress,\n      functionName: \"getExecution\",\n      args: [selector],\n    });\n    const enableData = await this.publicClient.readContract({\n      abi: SessionKeyValidatorAbi,\n      address: this.validatorAddress,\n      functionName: \"sessionData\",\n      args: [await this.sessionKey.getAddress(), kernelAccountAddress],\n    });\n    const enableDataHex = concatHex([\n      await this.sessionKey.getAddress(),\n      pad(enableData[0], { size: 32 }),\n      pad(toHex(enableData[1]), { size: 6 }),\n      pad(toHex(enableData[2]), { size: 6 }),\n      enableData[3],\n      pad(toHex(enableData[4]), { size: 32 }),\n    ]);\n    return (\n      execDetail.validator.toLowerCase() ===\n        this.validatorAddress.toLowerCase() &&\n      enableDataHex.toLowerCase() ===\n        (\n          await this.getEnableData(kernelAccountAddress, enableData[4])\n        ).toLowerCase()\n    );\n  }\n\n  async getDummyUserOpSignature(callData: Hex): Promise<Hex> {\n    return concatHex([\n      await this.sessionKey.getAddress(),\n      DUMMY_ECDSA_SIG,\n      this.getEncodedPermissionProofData(callData),\n    ]);\n  }\n\n  private getEncodedPermissionProofData(callData: Hex): Hex {\n    const matchingPermission = this.findMatchingPermissions(callData);\n    if (!matchingPermission && !this.shouldDelegateViaFallback()) {\n      throw Error(\n        \"SessionKeyValidator: No matching permission found for the userOp\"\n      );\n    }\n    const encodedPermissionData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission)\n        : \"0x\";\n    let merkleProof: string[] | string[][] = [];\n    if (Array.isArray(matchingPermission)) {\n      let encodedPerms = matchingPermission.map((permission) =>\n        keccak256(this.encodePermissionData(permission))\n      );\n      merkleProof = encodedPerms.map((perm) =>\n        this.merkleTree.getHexProof(perm)\n      );\n    } else if (matchingPermission) {\n      merkleProof = this.merkleTree.getHexProof(\n        keccak256(encodedPermissionData)\n      );\n    }\n    return this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n      ? this.encodePermissionData(matchingPermission, merkleProof)\n      : \"0x\";\n  }\n\n  encodeEnable(sessionKeyEnableData: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"enable\",\n      args: [sessionKeyEnableData],\n    });\n  }\n\n  encodeDisable(sessionKey: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"disable\",\n      args: [sessionKey],\n    });\n  }\n\n  async signMessage(message: string | Uint8Array): Promise<Hex> {\n    return await this.sessionKey.signMessage(message);\n  }\n\n  async signTypedData(params: SignTypedDataParams): Promise<Hex> {\n    return fixSignedData(await this.sessionKey.signTypedData(params));\n  }\n\n  async signUserOp(userOp: UserOperationRequest): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    const hash = getUserOperationHash(\n      {\n        ...userOp,\n        signature: \"0x\",\n      },\n      this.entryPointAddress,\n      BigInt(this.chain.id)\n    );\n    const formattedMessage = typeof hash === \"string\" ? toBytes(hash) : hash;\n\n    const signature = concat([\n      await this.sessionKey.getAddress(),\n      await this.sessionKey.signMessage(formattedMessage),\n      this.getEncodedPermissionProofData(userOp.callData),\n    ]);\n    return signature;\n  }\n}\n"]}
+{"version":3,"file":"session-key-validator.js","sourceRoot":"","sources":["../../../../src/kernel-zerodev/validator/session-key-validator.ts"],"names":[],"mappings":";;;AAAA,8CAS0B;AAC1B,uCAKmB;AACnB,+BAcc;AACd,sCAA2C;AAC3C,iFAA2E;AAC3E,kDAAkD;AAClD,qEAA+D;AAC/D,+CAA0C;AAC1C,8CAA6C;AAC7C,0CAA4C;AAW3C,MAAM,CAAC,SAAiB,CAAC,MAAM,GAAG;IACjC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzB,CAAC,CAAC;AAiBF,IAAY,aAOX;AAPD,WAAY,aAAa;IACvB,mDAAS,CAAA;IACT,iEAAgB,CAAA;IAChB,2DAAa,CAAA;IACb,mFAAyB,CAAA;IACzB,6EAAsB,CAAA;IACtB,2DAAa,CAAA;AACf,CAAC,EAPW,aAAa,6BAAb,aAAa,QAOxB;AAkCD,SAAgB,UAAU,CAGxB,EACA,GAAG,EACH,IAAI,GAAG,EAAE,EACT,IAAI,GACkC;IAItC,MAAM,QAAQ,GAAI,GAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC5E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAgB,CAAC;IACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAQ,CAAC;IACrD,MAAM,qBAAqB,GAAG,EAAE,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;QAC9B,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;YAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,OAAc,CAAC;YAC1E,SAAS;SACV;QACD,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,SAAS;QAC9B,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC1C,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,SAAS;QACpD,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;KACrC;IACD,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAQ,CAAC;SAC7D,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC;QACzC,OAAO,qBAAqB,CAAC,CAAC,CAAQ,CAAC;;QAEvC,MAAM,KAAK,CACT,mFAAmF,qBAAqB;aACrG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,qBAAa,EAAC,IAAI,CAAC,CAAC;aAClC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CACpC,CAAC;AACN,CAAC;AAnCD,gCAmCC;AAED,SAAgB,oBAAoB,CAGlC,EACA,GAAG,EACH,MAAM,EACN,IAAI,EACJ,YAAY,EACZ,UAAU,GACgD;IAC1D,MAAM,OAAO,GAAG,UAAU,CAAC;QACzB,GAAG;QACH,IAAI;QACJ,IAAI,EAAE,YAAY;KACK,CAAC,CAAC;IAC3B,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE;QAC/B,MAAM,KAAK,CAAC,GAAG,YAAY,mBAAmB,CAAC,CAAC;KACjD;IACD,MAAM,gBAAgB,GAAG,IAAA,0BAAmB,EAAC,OAAO,CAAC,CAAC;IACtD,IAAI,UAAU,GAAiB,EAAE,CAAC;IAClC,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAC/B,UAAU,GAAI,IAA4C;aACvD,GAAG,CACF,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CACT,GAAG,IAAI;YACL,KAAK,EAAE,IAAA,UAAG,EACR,IAAA,YAAK,EAAC,GAAG,CAAC,KAAK,CAAC;gBACd,CAAC,CAAC,GAAG,CAAC,KAAK;gBACX,CAAC,CAAC,IAAA,YAAK,EAAC,GAAG,CAAC,KAAoC,CAAC,EACnD,EAAE,IAAI,EAAE,EAAE,EAAE,CACb;YACD,MAAM,EAAE,CAAC,GAAG,EAAE;YACd,SAAS,EAAE,GAAG,CAAC,QAAQ;SACxB,CACJ;aACA,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAiB,CAAC;KAC3C;IACD,OAAO;QACL,GAAG,EAAE,gBAAgB;QACrB,KAAK,EAAE,UAAU;QACjB,MAAM;QACN,UAAU,EAAE,UAAU,IAAI,EAAE;KAC7B,CAAC;AACJ,CAAC;AA3CD,oDA2CC;AAED,MAAa,mBAAoB,SAAQ,6BAAmB;IAK1D,YAAY,MAAiC;QAC3C,KAAK,CAAC,MAAM,CAAC,CAAC;QALN;;;;;WAA+B;QACzC;;;;;WAA+B;QAC/B;;;;;WAAuB;QAIrB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG;YACpB,GAAG,MAAM,CAAC,cAAc;YACxB,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,UAAU,IAAI,CAAC;YACjD,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC,UAAU,IAAI,CAAC;YACjD,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,SAAS,IAAI,kBAAW;SAC1D,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CACpE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAChB,GAAG,IAAI;YACP,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YACjC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAA,UAAG,EAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACvB,KAAK;YACL,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI;gBACnC,UAAU,EAAE,CAAC;gBACb,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC;aACR;SACF,CAAC,CACH,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ;YACX,MAAM,CAAC,QAAQ;gBACf,IAAA,0BAAmB,EAAC,yCAAyC,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,kBAAW,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,uBAAa,CAAC,MAAM,CAAC;IAClD,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,IAAI,CACtB,MAAiC;QAEjC,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAU,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;SACtC;QACD,MAAM,KAAK,GAAG,IAAA,kBAAQ,EAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yBAAyB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,IAAA,UAAG,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,uBAAuB,CACrB,QAAa;QAEb,IAAI;YACF,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,IAAA,yBAAkB,EAAC;gBAChD,GAAG,EAAE,sCAAgB;gBACrB,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YAEH,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,cAAc;gBAC/D,OAAO,SAAS,CAAC;YACnB,IAAI,YAAY,KAAK,SAAS,EAAE;gBAC9B,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;gBAC/B,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aAC3D;iBAAM,IAAI,YAAY,KAAK,cAAc,EAAE;gBAC1C,IAAI,OAAO,GAAU,EAAE,EACrB,MAAM,GAAa,EAAE,EACrB,SAAS,GAAU,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;oBACtB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACrB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACvB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;aAC3D;iBAAM;gBACL,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;aACjC;SACF;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,SAAS,CAAC;SAClB;IACH,CAAC;IAEO,iBAAiB,CACvB,OAAkB,EAClB,SAAgB,EAChB,MAAgB;QAEhB,IACE,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YACnC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAChC;YACA,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC;SAClC;QACD,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACxD,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;YACxD,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAElE,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YAG3C,IAAI,iBAAiB,GAAG,eAAe,CAAC,MAAM,CAC5C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,aAAa,CAClE,CAAC;YAGF,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE;gBAC7B,iBAAiB,GAAG,eAAe,CAAC,MAAM,CACxC,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,kBAAW,CAAC,WAAW,EAAE,CAChE,CAAC;aACH;YAED,IAAI,CAAC,iBAAiB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEhD,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,iBAAiB,EACjB,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAC5C,CAAC;YAEF,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,MAAM,CACvD,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAC/D,CAAC;YAEF,IAAI,CAAC,qBAAqB,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAEpD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC5D,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;oBAC/C,OAAO,CAAC,CAAC;iBACV;qBAAM,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE;oBACtD,OAAO,CAAC,CAAC,CAAC;iBACX;qBAAM;oBACL,OAAO,CAAC,CAAC;iBACV;YACH,CAAC,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC;YACxE,CAAC,CAAE,mBAAoC;YACvC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAEO,iBAAiB,CACvB,WAAyB,EACzB,SAAiB;QAEjB,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CACb,CAAC,UAAU,CAAC,GAAG,IAAI,IAAA,UAAG,EAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CACzE,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAC1B,WAAyB,EACzB,IAAY;QAEZ,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACrC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,IAAI,EAAE,EAAE;gBACzC,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CACzC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CACnE,CAAC;gBACF,MAAM,SAAS,GAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAExD,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE;oBACrE,OAAO,KAAK,CAAC;iBACd;aACF;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,OAAO,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAA,YAAK,EAAC,KAAK,CAAC,EAAE;YAC9C,IAAI,EAAE,EAAE;SACT,CAAC,CAAC,WAAW,EAAS,CAAC;IAC1B,CAAC;IAEO,qBAAqB,CAC3B,SAAc,EACd,SAAc,EACd,SAAwB;QAExB,QAAQ,SAAS,EAAE;YACjB,KAAK,aAAa,CAAC,KAAK;gBACtB,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC,KAAK,aAAa,CAAC,YAAY;gBAC7B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,aAAa,CAAC,SAAS;gBAC1B,OAAO,SAAS,GAAG,SAAS,CAAC;YAC/B,KAAK,aAAa,CAAC,qBAAqB;gBACtC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,aAAa,CAAC,kBAAkB;gBACnC,OAAO,SAAS,IAAI,SAAS,CAAC;YAChC,KAAK,aAAa,CAAC,SAAS;gBAC1B,OAAO,SAAS,KAAK,SAAS,CAAC;YACjC;gBACE,OAAO,KAAK,CAAC;SAChB;IACH,CAAC;IAED,aAAa;QACX,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CAC3D,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CACtD,CAAC;QAIF,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACnD,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7C,OAAO,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACtD,CAAC,CAAC,IAAI,yBAAU,CAAC,gBAAgB,EAAE,gBAAS,EAAE;gBAC1C,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,IAAI;aAChB,CAAC;YACJ,CAAC,CAAC,IAAI,yBAAU,CAAC,CAAC,IAAA,UAAG,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,gBAAS,EAAE;gBACrD,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;IACT,CAAC;IAED,oBAAoB,CAClB,UAAqC,EACrC,WAAmC;QAEnC,IAAI,eAAe,GAAG;YACpB,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,QAAQ;iBACf;gBACD;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,QAAQ;iBACf;gBACD;oBACE,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,SAAS;yBAChB;wBACD;4BACE,YAAY,EAAE,qBAAqB;4BACnC,IAAI,EAAE,WAAW;4BACjB,IAAI,EAAE,OAAO;yBACd;wBACD;4BACE,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,SAAS;yBAChB;qBACF;oBACD,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,SAAS;iBAChB;gBACD;oBACE,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,UAAU;4BAChB,IAAI,EAAE,QAAQ;yBACf;wBACD;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,QAAQ;yBACf;wBACD;4BACE,YAAY,EAAE,YAAY;4BAC1B,IAAI,EAAE,YAAY;4BAClB,IAAI,EAAE,QAAQ;yBACf;qBACF;oBACD,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,OAAO;iBACd;aACF;YACD,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;SACtD,CAAC;QACF,IAAI,MAAM,CAAC;QACX,IAAI,MAAM,CAAC;QACX,IAAI,WAAW,EAAE;YACf,MAAM,GAAG;gBACP,eAAe;gBACf;oBACE,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW;iBAClE;aACF,CAAC;YACF,MAAM,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;SACpC;aAAM;YACL,MAAM,GAAG,CAAC,eAAe,CAAC,CAAC;YAC3B,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;SACvB;QACD,OAAO,IAAA,0BAAmB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,oBAA6B;QAE7B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACjD,GAAG,EAAE,kDAAsB;YAC3B,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,oBAA8B,EAC9B,gBAAyB;QAEzB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;YACpB,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAC9D;QACD,IAAI,CAAC,oBAAoB,EAAE;YACzB,MAAM,KAAK,CAAC,0DAA0D,CAAC,CAAC;SACzE;QACD,MAAM,SAAS,GACb,gBAAgB;YAChB,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC;QACrE,OAAO,IAAA,aAAM,EAAC;YACZ,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,IAAA,UAAG,EAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAS,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACtD,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,cAAc,CAAC,SAAU;YAC9B,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,oBAA6B,EAC7B,QAAa;QAEb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,sCAAgB;YACrB,OAAO,EAAE,oBAAoB;YAC7B,YAAY,EAAE,cAAc;YAC5B,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACtD,GAAG,EAAE,kDAAsB;YAC3B,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,oBAAoB,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAA,gBAAS,EAAC;YAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,IAAA,UAAG,EAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAChC,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,UAAU,CAAC,CAAC,CAAC;YACb,IAAA,UAAG,EAAC,IAAA,YAAK,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,OAAO,CACL,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YAChC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;YACrC,aAAa,CAAC,WAAW,EAAE;gBACzB,CACE,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAC9D,CAAC,WAAW,EAAE,CAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,QAAa;QACzC,OAAO,IAAA,gBAAS,EAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,8BAAe;YACf,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAEO,6BAA6B,CAAC,QAAa;QACjD,MAAM,kBAAkB,GAAG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE;YAC5D,MAAM,KAAK,CACT,kEAAkE,CACnE,CAAC;SACH;QACD,MAAM,qBAAqB,GACzB,IAAI,CAAC,cAAc,CAAC,WAAW;YAC/B,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAChB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,IAAI,WAAW,GAA0B,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE;YACrC,IAAI,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACvD,IAAA,gBAAS,EAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CACjD,CAAC;YACF,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACtC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAClC,CAAC;SACH;aAAM,IAAI,kBAAkB,EAAE;YAC7B,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CACvC,IAAA,gBAAS,EAAC,qBAAqB,CAAC,CACjC,CAAC;SACH;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW;YACpC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAC5C,kBAAkB;YAClB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAED,YAAY,CAAC,oBAAyB;QACpC,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,kDAAsB;YAC3B,YAAY,EAAE,QAAQ;YACtB,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,UAAe;QAC3B,OAAO,IAAA,yBAAkB,EAAC;YACxB,GAAG,EAAE,kDAAsB;YAC3B,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA4B;QAC5C,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA2B;QAC7C,OAAO,IAAA,wBAAa,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA4B;QAC3C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;SAC5C;QACD,MAAM,IAAI,GAAG,IAAA,8BAAoB,EAC/B;YACE,GAAG,MAAM;YACT,SAAS,EAAE,IAAI;SAChB,EACD,IAAI,CAAC,iBAAiB,EACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzE,MAAM,SAAS,GAAG,IAAA,aAAM,EAAC;YACvB,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE;YAClC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACnD,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,QAAQ,CAAC;SACpD,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AApeD,kDAoeC","sourcesContent":["import {\n  getUserOperationHash,\n  type Address,\n  type Hex,\n  type SmartAccountSigner,\n  type UserOperationRequest,\n  getChain,\n  type SignTypedDataParams,\n  type Abi,\n} from \"@alchemy/aa-core\";\nimport {\n  KernelBaseValidator,\n  ValidatorMode,\n  type KernelBaseValidatorParams,\n  type ValidatorPluginData,\n} from \"./base.js\";\nimport {\n  encodeFunctionData,\n  toBytes,\n  concat,\n  pad,\n  toHex,\n  encodeAbiParameters,\n  concatHex,\n  zeroAddress,\n  decodeFunctionData,\n  isHex,\n  getFunctionSelector,\n  type GetAbiItemParameters,\n  keccak256,\n} from \"viem\";\nimport { formatAbiItem } from \"viem/utils\";\nimport { SessionKeyValidatorAbi } from \"../abis/SessionKeyValidatorAbi.js\";\nimport { DUMMY_ECDSA_SIG } from \"../constants.js\";\nimport { KernelAccountAbi } from \"../abis/KernelAccountAbi.js\";\nimport { MerkleTree } from \"merkletreejs\";\nimport { getChainId } from \"../api/index.js\";\nimport { fixSignedData } from \"../utils.js\";\nimport type { GetAbiItemReturnType } from \"viem/dist/types/utils/abi/getAbiItem.js\";\nimport { type AbiFunction } from \"abitype\";\nimport type {\n  CombinedArgs,\n  GeneratePermissionFromArgsParameters,\n} from \"./types.js\";\n\n// We need to be able to serialize bigint to transmit session key over\n// the network.\n// Using this trick: https://github.com/GoogleChromeLabs/jsbi/issues/30#issuecomment-1006086291\n(BigInt.prototype as any).toJSON = function () {\n  return this.toString();\n};\n\nexport interface SessionKeyValidatorParams extends KernelBaseValidatorParams {\n  sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n}\n\nexport type SessionKeyParams = Pick<\n  SessionKeyValidatorParams,\n  \"sessionKeyData\" | \"enableSignature\"\n> &\n  ValidatorPluginData & {\n    sessionPrivateKey?: Hex;\n    initCode?: Hex;\n    accountAddress?: Address;\n  };\n\nexport enum ParamOperator {\n  EQUAL = 0,\n  GREATER_THAN = 1,\n  LESS_THAN = 2,\n  GREATER_THAN_OR_EQUAL = 3,\n  LESS_THAN_OR_EQUAL = 4,\n  NOT_EQUAL = 5,\n}\n\nexport type SessionNonces = {\n  lastNonce: bigint;\n  invalidNonce: bigint;\n};\n\nexport type ExecutionRule = {\n  validAfter: number; // 48 bits\n  interval: number; // 48 bits\n  runs: number; // 48 bits\n};\nexport interface ParamRules {\n  offset: number;\n  condition: ParamOperator;\n  param: Hex;\n}\n\nexport type Permission = {\n  target: Address;\n  index?: number;\n  rules?: ParamRules[];\n  sig?: Hex;\n  valueLimit?: bigint;\n  executionRule?: ExecutionRule;\n};\n\nexport interface SessionKeyData {\n  validUntil: number;\n  validAfter: number;\n  paymaster?: Address;\n  permissions?: Permission[];\n}\n\nexport function getAbiItem<\n  TAbi extends Abi | readonly unknown[],\n  TItemName extends string\n>({\n  abi,\n  args = [],\n  name,\n}: GetAbiItemParameters<TAbi, TItemName>): GetAbiItemReturnType<\n  TAbi,\n  TItemName\n> {\n  const abiItems = (abi as Abi).filter((x) => \"name\" in x && x.name === name);\n  if (abiItems.length === 0) return undefined as any;\n  if (abiItems.length === 1) return abiItems[0] as any;\n  const abiItemsParamFiltered = [];\n  for (const abiItem of abiItems) {\n    if (!(\"inputs\" in abiItem)) continue;\n    if (!args || args.length === 0) {\n      if (!abiItem.inputs || abiItem.inputs.length === 0) return abiItem as any;\n      continue;\n    }\n    if (!abiItem.inputs) continue;\n    if (abiItem.inputs.length === 0) continue;\n    if (abiItem.inputs.length !== args.length) continue;\n    abiItemsParamFiltered.push(abiItem);\n  }\n  if (abiItemsParamFiltered.length === 0) return abiItems[0] as any;\n  else if (abiItemsParamFiltered.length === 1)\n    return abiItemsParamFiltered[0] as any;\n  else\n    throw Error(\n      `Couldn't parse funtion signature using params, set appropriate one from below:\\n${abiItemsParamFiltered\n        .map((item) => formatAbiItem(item))\n        .reduce((a, c) => `${a}\\n${c}`)}`\n    );\n}\n\nexport function getPermissionFromABI<\n  TAbi extends Abi | readonly unknown[],\n  TFunctionName extends string | undefined = string\n>({\n  abi,\n  target,\n  args,\n  functionName,\n  valueLimit,\n}: GeneratePermissionFromArgsParameters<TAbi, TFunctionName>): Permission {\n  const abiItem = getAbiItem({\n    abi,\n    args,\n    name: functionName,\n  } as GetAbiItemParameters);\n  if (abiItem.type !== \"function\") {\n    throw Error(`${functionName} not found in abi`);\n  }\n  const functionSelector = getFunctionSelector(abiItem);\n  let paramRules: ParamRules[] = [];\n  if (args && Array.isArray(args)) {\n    paramRules = (args as CombinedArgs<AbiFunction[\"inputs\"]>)\n      .map(\n        (arg, i) =>\n          arg && {\n            param: pad(\n              isHex(arg.value)\n                ? arg.value\n                : toHex(arg.value as Parameters<typeof toHex>[0]),\n              { size: 32 }\n            ),\n            offset: i * 32,\n            condition: arg.operator,\n          }\n      )\n      .filter((rule) => rule) as ParamRules[];\n  }\n  return {\n    sig: functionSelector,\n    rules: paramRules,\n    target,\n    valueLimit: valueLimit ?? 0n,\n  };\n}\n\nexport class SessionKeyValidator extends KernelBaseValidator {\n  protected sessionKey: SmartAccountSigner;\n  sessionKeyData: SessionKeyData;\n  merkleTree: MerkleTree;\n\n  constructor(params: SessionKeyValidatorParams) {\n    super(params);\n    this.sessionKey = params.sessionKey;\n    this.sessionKeyData = {\n      ...params.sessionKeyData,\n      validAfter: params.sessionKeyData.validAfter ?? 0,\n      validUntil: params.sessionKeyData.validUntil ?? 0,\n      paymaster: params.sessionKeyData.paymaster ?? zeroAddress,\n    };\n    this.sessionKeyData.permissions = this.sessionKeyData.permissions?.map(\n      (perm, index) => ({\n        ...perm,\n        valueLimit: perm.valueLimit ?? 0n,\n        sig: perm.sig ?? pad(\"0x\", { size: 4 }),\n        rules: perm.rules ?? [],\n        index,\n        executionRule: perm.executionRule ?? {\n          validAfter: 0,\n          interval: 0,\n          runs: 0,\n        },\n      })\n    );\n    this.merkleTree = this.getMerkleTree();\n    this.selector =\n      params.selector ??\n      getFunctionSelector(\"execute(address, uint256, bytes, uint8)\");\n    this.executor = params.executor ?? zeroAddress;\n    this.mode = params.mode ?? ValidatorMode.plugin;\n  }\n\n  public static async init(\n    params: SessionKeyValidatorParams\n  ): Promise<SessionKeyValidator> {\n    const chainId = await getChainId(params.projectId);\n    if (!chainId) {\n      throw new Error(\"ChainId not found\");\n    }\n    const chain = getChain(chainId);\n    const instance = new SessionKeyValidator({ ...params, chain });\n    return instance;\n  }\n\n  shouldDelegateViaFallback(): boolean {\n    return this.merkleTree.getHexRoot() === pad(\"0x00\", { size: 32 });\n  }\n\n  findMatchingPermissions(\n    callData: Hex\n  ): Permission | Permission[] | undefined {\n    try {\n      const { functionName, args } = decodeFunctionData({\n        abi: KernelAccountAbi,\n        data: callData,\n      });\n\n      if (functionName !== \"execute\" && functionName !== \"executeBatch\")\n        return undefined;\n      if (functionName === \"execute\") {\n        const [to, value, data] = args;\n        return this.filterPermissions([to], [data], [value])?.[0];\n      } else if (functionName === \"executeBatch\") {\n        let targets: Hex[] = [],\n          values: bigint[] = [],\n          dataArray: Hex[] = [];\n        args[0].forEach((arg) => {\n          targets.push(arg.to);\n          values.push(arg.value);\n          dataArray.push(arg.data);\n        });\n        return this.filterPermissions(targets, dataArray, values);\n      } else {\n        throw Error(\"Invalid function\");\n      }\n    } catch (error) {\n      return undefined;\n    }\n  }\n\n  private filterPermissions(\n    targets: Address[],\n    dataArray: Hex[],\n    values: bigint[]\n  ): Permission[] | undefined {\n    if (\n      targets.length !== dataArray.length ||\n      targets.length !== values.length\n    ) {\n      throw Error(\"Invalid arguments\");\n    }\n    const filteredPermissions = targets.map((target, index) => {\n      const permissionsList = this.sessionKeyData.permissions;\n      if (!permissionsList || !permissionsList.length) return undefined;\n\n      const targetToMatch = target.toLowerCase();\n\n      // Filter permissions by target\n      let targetPermissions = permissionsList.filter(\n        (permission) => permission.target.toLowerCase() === targetToMatch\n      );\n\n      // If no permissions match the exact target, check for generic permissions (using zero address)\n      if (!targetPermissions.length) {\n        targetPermissions = permissionsList.filter(\n          (permission) =>\n            permission.target.toLowerCase() === zeroAddress.toLowerCase()\n        );\n      }\n\n      if (!targetPermissions.length) return undefined;\n\n      const signaturePermissions = this.filterBySignature(\n        targetPermissions,\n        dataArray[index].slice(0, 10).toLowerCase()\n      );\n\n      const valueLimitPermissions = signaturePermissions.filter(\n        (permission) => (permission.valueLimit ?? 0n) >= values[index]\n      );\n\n      if (!valueLimitPermissions.length) return undefined;\n\n      const sortedPermissions = valueLimitPermissions.sort((a, b) => {\n        if ((b.valueLimit ?? 0n) > (a.valueLimit ?? 0n)) {\n          return 1;\n        } else if ((b.valueLimit ?? 0n) < (a.valueLimit ?? 0n)) {\n          return -1;\n        } else {\n          return 0;\n        }\n      });\n\n      return this.findPermissionByRule(sortedPermissions, dataArray[index]);\n    });\n    return filteredPermissions.every((permission) => permission !== undefined)\n      ? (filteredPermissions as Permission[])\n      : undefined;\n  }\n\n  private filterBySignature(\n    permissions: Permission[],\n    signature: string\n  ): Permission[] {\n    return permissions.filter(\n      (permission) =>\n        (permission.sig ?? pad(\"0x\", { size: 4 })).toLowerCase() === signature\n    );\n  }\n\n  private findPermissionByRule(\n    permissions: Permission[],\n    data: string\n  ): Permission | undefined {\n    return permissions.find((permission) => {\n      for (const rule of permission.rules ?? []) {\n        const dataParam: Hex = this.getFormattedHex(\n          \"0x\" + data.slice(10 + rule.offset * 2, 10 + rule.offset * 2 + 64)\n        );\n        const ruleParam: Hex = this.getFormattedHex(rule.param);\n\n        if (!this.evaluateRuleCondition(dataParam, ruleParam, rule.condition)) {\n          return false;\n        }\n      }\n      return true;\n    });\n  }\n\n  private getFormattedHex(value: string): Hex {\n    return pad(isHex(value) ? value : toHex(value), {\n      size: 32,\n    }).toLowerCase() as Hex;\n  }\n\n  private evaluateRuleCondition(\n    dataParam: Hex,\n    ruleParam: Hex,\n    condition: ParamOperator\n  ): boolean {\n    switch (condition) {\n      case ParamOperator.EQUAL:\n        return dataParam === ruleParam;\n      case ParamOperator.GREATER_THAN:\n        return dataParam > ruleParam;\n      case ParamOperator.LESS_THAN:\n        return dataParam < ruleParam;\n      case ParamOperator.GREATER_THAN_OR_EQUAL:\n        return dataParam >= ruleParam;\n      case ParamOperator.LESS_THAN_OR_EQUAL:\n        return dataParam <= ruleParam;\n      case ParamOperator.NOT_EQUAL:\n        return dataParam !== ruleParam;\n      default:\n        return false;\n    }\n  }\n\n  getMerkleTree(): MerkleTree {\n    const permissionPacked = this.sessionKeyData.permissions?.map(\n      (permission) => this.encodePermissionData(permission)\n    );\n\n    // Having one leaf returns empty array in getProof(). To hack it we push the leaf twice\n    // issue - https://github.com/merkletreejs/merkletreejs/issues/58\n    if (permissionPacked && permissionPacked.length === 1)\n      permissionPacked.push(permissionPacked[0]);\n\n    return permissionPacked && permissionPacked.length !== 0\n      ? new MerkleTree(permissionPacked, keccak256, {\n          hashLeaves: true,\n          sortPairs: true,\n        })\n      : new MerkleTree([pad(\"0x00\", { size: 32 })], keccak256, {\n          hashLeaves: false,\n          complete: true,\n        });\n  }\n\n  encodePermissionData(\n    permission: Permission | Permission[],\n    merkleProof?: string[] | string[][]\n  ): Hex {\n    let permissionParam = {\n      components: [\n        {\n          name: \"index\",\n          type: \"uint32\",\n        },\n        {\n          name: \"target\",\n          type: \"address\",\n        },\n        {\n          name: \"sig\",\n          type: \"bytes4\",\n        },\n        {\n          name: \"valueLimit\",\n          type: \"uint256\",\n        },\n        {\n          components: [\n            {\n              name: \"offset\",\n              type: \"uint256\",\n            },\n            {\n              internalType: \"enum ParamCondition\",\n              name: \"condition\",\n              type: \"uint8\",\n            },\n            {\n              name: \"param\",\n              type: \"bytes32\",\n            },\n          ],\n          name: \"rules\",\n          type: \"tuple[]\",\n        },\n        {\n          components: [\n            {\n              name: \"interval\",\n              type: \"uint48\",\n            },\n            {\n              name: \"runs\",\n              type: \"uint48\",\n            },\n            {\n              internalType: \"ValidAfter\",\n              name: \"validAfter\",\n              type: \"uint48\",\n            },\n          ],\n          name: \"executionRule\",\n          type: \"tuple\",\n        },\n      ],\n      name: \"permission\",\n      type: Array.isArray(permission) ? \"tuple[]\" : \"tuple\",\n    };\n    let params;\n    let values;\n    if (merkleProof) {\n      params = [\n        permissionParam,\n        {\n          name: \"merkleProof\",\n          type: Array.isArray(merkleProof[0]) ? \"bytes32[][]\" : \"bytes32[]\",\n        },\n      ];\n      values = [permission, merkleProof];\n    } else {\n      params = [permissionParam];\n      values = [permission];\n    }\n    return encodeAbiParameters(params, values);\n  }\n\n  getSessionData(): SessionKeyParams {\n    if (!this.selector || !this.executor) {\n      throw Error(\"Plugin Validator data params uninitialised\");\n    }\n    return {\n      selector: this.selector,\n      executor: this.executor,\n      validUntil: this.validUntil,\n      validAfter: this.validAfter,\n      sessionKeyData: this.sessionKeyData,\n      enableSignature: this.enableSignature,\n    };\n  }\n\n  async signer(): Promise<SmartAccountSigner> {\n    return await Promise.resolve(this.sessionKey);\n  }\n\n  async getSessionNonces(\n    kernelAccountAddress: Address\n  ): Promise<SessionNonces> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    const nonce = await this.publicClient.readContract({\n      abi: SessionKeyValidatorAbi,\n      address: this.validatorAddress,\n      functionName: \"nonces\",\n      args: [kernelAccountAddress],\n    });\n    return { lastNonce: nonce[0], invalidNonce: nonce[1] };\n  }\n\n  async getEnableData(\n    kernelAccountAddress?: Address,\n    enabledLastNonce?: bigint\n  ): Promise<Hex> {\n    if (!this.merkleTree) {\n      throw Error(\"SessionKeyValidator: MerkleTree not generated\");\n    }\n    if (!kernelAccountAddress) {\n      throw Error(\"SessionKeyValidator: Kernel account address not provided\");\n    }\n    const lastNonce =\n      enabledLastNonce ??\n      (await this.getSessionNonces(kernelAccountAddress)).lastNonce + 1n;\n    return concat([\n      await this.sessionKey.getAddress(),\n      pad(this.merkleTree.getHexRoot() as Hex, { size: 32 }),\n      pad(toHex(this.sessionKeyData.validAfter), { size: 6 }),\n      pad(toHex(this.sessionKeyData.validUntil), { size: 6 }),\n      this.sessionKeyData.paymaster!,\n      pad(toHex(lastNonce), { size: 32 }),\n    ]);\n  }\n\n  async isPluginEnabled(\n    kernelAccountAddress: Address,\n    selector: Hex\n  ): Promise<boolean> {\n    if (!this.publicClient) {\n      throw new Error(\"Validator uninitialized: PublicClient missing\");\n    }\n    const execDetail = await this.publicClient.readContract({\n      abi: KernelAccountAbi,\n      address: kernelAccountAddress,\n      functionName: \"getExecution\",\n      args: [selector],\n    });\n    const enableData = await this.publicClient.readContract({\n      abi: SessionKeyValidatorAbi,\n      address: this.validatorAddress,\n      functionName: \"sessionData\",\n      args: [await this.sessionKey.getAddress(), kernelAccountAddress],\n    });\n    const enableDataHex = concatHex([\n      await this.sessionKey.getAddress(),\n      pad(enableData[0], { size: 32 }),\n      pad(toHex(enableData[1]), { size: 6 }),\n      pad(toHex(enableData[2]), { size: 6 }),\n      enableData[3],\n      pad(toHex(enableData[4]), { size: 32 }),\n    ]);\n    return (\n      execDetail.validator.toLowerCase() ===\n        this.validatorAddress.toLowerCase() &&\n      enableDataHex.toLowerCase() ===\n        (\n          await this.getEnableData(kernelAccountAddress, enableData[4])\n        ).toLowerCase()\n    );\n  }\n\n  async getDummyUserOpSignature(callData: Hex): Promise<Hex> {\n    return concatHex([\n      await this.sessionKey.getAddress(),\n      DUMMY_ECDSA_SIG,\n      this.getEncodedPermissionProofData(callData),\n    ]);\n  }\n\n  private getEncodedPermissionProofData(callData: Hex): Hex {\n    const matchingPermission = this.findMatchingPermissions(callData);\n    if (!matchingPermission && !this.shouldDelegateViaFallback()) {\n      throw Error(\n        \"SessionKeyValidator: No matching permission found for the userOp\"\n      );\n    }\n    const encodedPermissionData =\n      this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n        ? this.encodePermissionData(matchingPermission)\n        : \"0x\";\n    let merkleProof: string[] | string[][] = [];\n    if (Array.isArray(matchingPermission)) {\n      let encodedPerms = matchingPermission.map((permission) =>\n        keccak256(this.encodePermissionData(permission))\n      );\n      merkleProof = encodedPerms.map((perm) =>\n        this.merkleTree.getHexProof(perm)\n      );\n    } else if (matchingPermission) {\n      merkleProof = this.merkleTree.getHexProof(\n        keccak256(encodedPermissionData)\n      );\n    }\n    return this.sessionKeyData.permissions &&\n      this.sessionKeyData.permissions.length !== 0 &&\n      matchingPermission\n      ? this.encodePermissionData(matchingPermission, merkleProof)\n      : \"0x\";\n  }\n\n  encodeEnable(sessionKeyEnableData: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"enable\",\n      args: [sessionKeyEnableData],\n    });\n  }\n\n  encodeDisable(sessionKey: Hex): Hex {\n    return encodeFunctionData({\n      abi: SessionKeyValidatorAbi,\n      functionName: \"disable\",\n      args: [sessionKey],\n    });\n  }\n\n  async signMessage(message: string | Uint8Array): Promise<Hex> {\n    return await this.sessionKey.signMessage(message);\n  }\n\n  async signTypedData(params: SignTypedDataParams): Promise<Hex> {\n    return fixSignedData(await this.sessionKey.signTypedData(params));\n  }\n\n  async signUserOp(userOp: UserOperationRequest): Promise<Hex> {\n    if (!this.chain) {\n      throw new Error(\"Validator uninitialized\");\n    }\n    const hash = getUserOperationHash(\n      {\n        ...userOp,\n        signature: \"0x\",\n      },\n      this.entryPointAddress,\n      BigInt(this.chain.id)\n    );\n    const formattedMessage = typeof hash === \"string\" ? toBytes(hash) : hash;\n\n    const signature = concat([\n      await this.sessionKey.getAddress(),\n      await this.sessionKey.signMessage(formattedMessage),\n      this.getEncodedPermissionProofData(userOp.callData),\n    ]);\n    return signature;\n  }\n}\n"]}

package/dist/esm/kernel-zerodev/owner/getCustodialOwner.d.ts

@@ -1,11 +1,11 @@
 import type { SmartAccountSigner } from "@alchemy/aa-core";
-type GetCustodialOwnerParams = {
+type GetCustodialOwnerParams = Readonly<{
     apiUrl?: string;
     turnKeyClient?: unknown;
     privateKey?: string;
     publicKey?: string;
     keyId?: string;
     custodialFilePath?: string;
-};
+}>;
 export declare function getCustodialOwner(identifier: string, { custodialFilePath, privateKey, publicKey, keyId, apiUrl, turnKeyClient, }: GetCustodialOwnerParams): Promise<SmartAccountSigner | undefined>;
 export {};