@zodiaceco/sdk 1.12.1

package/LICENSE

@@ -0,0 +1,165 @@
+ GNU LESSER GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+
+  This version of the GNU Lesser General Public License incorporates
+the terms and conditions of version 3 of the GNU General Public
+License, supplemented by the additional permissions listed below.
+
+  0. Additional Definitions.
+
+  As used herein, "this License" refers to version 3 of the GNU Lesser
+General Public License, and the "GNU GPL" refers to version 3 of the GNU
+General Public License.
+
+  "The Library" refers to a covered work governed by this License,
+other than an Application or a Combined Work as defined below.
+
+  An "Application" is any work that makes use of an interface provided
+by the Library, but which is not otherwise based on the Library.
+Defining a subclass of a class defined by the Library is deemed a mode
+of using an interface provided by the Library.
+
+  A "Combined Work" is a work produced by combining or linking an
+Application with the Library.  The particular version of the Library
+with which the Combined Work was made is also called the "Linked
+Version".
+
+  The "Minimal Corresponding Source" for a Combined Work means the
+Corresponding Source for the Combined Work, excluding any source code
+for portions of the Combined Work that, considered in isolation, are
+based on the Application, and not on the Linked Version.
+
+  The "Corresponding Application Code" for a Combined Work means the
+object code and/or source code for the Application, including any data
+and utility programs needed for reproducing the Combined Work from the
+Application, but excluding the System Libraries of the Combined Work.
+
+  1. Exception to Section 3 of the GNU GPL.
+
+  You may convey a covered work under sections 3 and 4 of this License
+without being bound by section 3 of the GNU GPL.
+
+  2. Conveying Modified Versions.
+
+  If you modify a copy of the Library, and, in your modifications, a
+facility refers to a function or data to be supplied by an Application
+that uses the facility (other than as an argument passed when the
+facility is invoked), then you may convey a copy of the modified
+version:
+
+   a) under this License, provided that you make a good faith effort to
+   ensure that, in the event an Application does not supply the
+   function or data, the facility still operates, and performs
+   whatever part of its purpose remains meaningful, or
+
+   b) under the GNU GPL, with none of the additional permissions of
+   this License applicable to that copy.
+
+  3. Object Code Incorporating Material from Library Header Files.
+
+  The object code form of an Application may incorporate material from
+a header file that is part of the Library.  You may convey such object
+code under terms of your choice, provided that, if the incorporated
+material is not limited to numerical parameters, data structure
+layouts and accessors, or small macros, inline functions and templates
+(ten or fewer lines in length), you do both of the following:
+
+   a) Give prominent notice with each copy of the object code that the
+   Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the object code with a copy of the GNU GPL and this license
+   document.
+
+  4. Combined Works.
+
+  You may convey a Combined Work under terms of your choice that,
+taken together, effectively do not restrict modification of the
+portions of the Library contained in the Combined Work and reverse
+engineering for debugging such modifications, if you also do each of
+the following:
+
+   a) Give prominent notice with each copy of the Combined Work that
+   the Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the Combined Work with a copy of the GNU GPL and this license
+   document.
+
+   c) For a Combined Work that displays copyright notices during
+   execution, include the copyright notice for the Library among
+   these notices, as well as a reference directing the user to the
+   copies of the GNU GPL and this license document.
+
+   d) Do one of the following:
+
+       0) Convey the Minimal Corresponding Source under the terms of this
+       License, and the Corresponding Application Code in a form
+       suitable for, and under terms that permit, the user to
+       recombine or relink the Application with a modified version of
+       the Linked Version to produce a modified Combined Work, in the
+       manner specified by section 6 of the GNU GPL for conveying
+       Corresponding Source.
+
+       1) Use a suitable shared library mechanism for linking with the
+       Library.  A suitable mechanism is one that (a) uses at run time
+       a copy of the Library already present on the user's computer
+       system, and (b) will operate properly with a modified version
+       of the Library that is interface-compatible with the Linked
+       Version.
+
+   e) Provide Installation Information, but only if you would otherwise
+   be required to provide such information under section 6 of the
+   GNU GPL, and only to the extent that such information is
+   necessary to install and execute a modified version of the
+   Combined Work produced by recombining or relinking the
+   Application with a modified version of the Linked Version. (If
+   you use option 4d0, the Installation Information must accompany
+   the Minimal Corresponding Source and Corresponding Application
+   Code. If you use option 4d1, you must provide the Installation
+   Information in the manner specified by section 6 of the GNU GPL
+   for conveying Corresponding Source.)
+
+  5. Combined Libraries.
+
+  You may place library facilities that are a work based on the
+Library side by side in a single library together with other library
+facilities that are not Applications and are not covered by this
+License, and convey such a combined library under terms of your
+choice, if you do both of the following:
+
+   a) Accompany the combined library with a copy of the same work based
+   on the Library, uncombined with any other library facilities,
+   conveyed under the terms of this License.
+
+   b) Give prominent notice with the combined library that part of it
+   is a work based on the Library, and explaining where to find the
+   accompanying uncombined form of the same work.
+
+  6. Revised Versions of the GNU Lesser General Public License.
+
+  The Free Software Foundation may publish revised and/or new versions
+of the GNU Lesser General Public License from time to time. Such new
+versions will be similar in spirit to the present version, but may
+differ in detail to address new problems or concerns.
+
+  Each version is given a distinguishing version number. If the
+Library as you received it specifies that a certain numbered version
+of the GNU Lesser General Public License "or any later version"
+applies to it, you have the option of following the terms and
+conditions either of that published version or of any later version
+published by the Free Software Foundation. If the Library as you
+received it does not specify a version number of the GNU Lesser
+General Public License, you may choose any version of the GNU Lesser
+General Public License ever published by the Free Software Foundation.
+
+  If the Library as you received it specifies that a proxy can decide
+whether future versions of the GNU Lesser General Public License shall
+apply, that proxy's public statement of acceptance of any version is
+permanent authorization for you to choose that version for the
+Library.

package/README.md

@@ -0,0 +1,175 @@
+# Zodiac OS SDK
+
+Programmatically manage [Zodiac](https://www.zodiac.eco) account constellations.
+
+## Getting started
+
+### 1. Install
+
+```bash
+npm install @zodiaceco/sdk
+```
+
+### 2. Authorize project
+
+```bash
+zodiac init
+```
+
+Opens a browser tab so you can sign in, pick the org you want to use, and approve a new API key. The key (and matching `ZODIAC_API_URL`) are written to a `.env` file in your project root — labeled after the directory so you can find and revoke it later from [app.zodiac.eco/admin/api-keys](https://app.zodiac.eco/admin/api-keys).
+
+**IMPORTANT:** Make sure to add `.env` to your `.gitignore`.
+
+### 3. Create a config file
+
+Create a `zodiac.config.ts` in your project root.
+
+```ts
+import { defineConfig } from '@zodiaceco/sdk/cli/config'
+
+export default defineConfig({
+  contracts: {
+    mainnet: {
+      dai: '0x6B175474E89094C44Da98b954EedeAC495271d0F',
+    },
+  },
+})
+```
+
+### 4. Pull your org data
+
+```bash
+# Pull everything (org data + contract ABIs)
+zodiac pull
+```
+
+This generates typed data in `.zodiac/` at your project root with your org's users and accounts (workspace vaults plus accounts that have been applied via a constellation). Add `.zodiac/` to your `.gitignore`.
+
+## Constellation API
+
+The `constellation()` function is the main SDK entry point. It returns an API for declaring account constellations — the set of Safes, Roles mods, and users that make up your on-chain setup.
+
+```ts
+import { constellation } from '@zodiaceco/sdk'
+```
+
+### Scoping to a workspace and chain
+
+Each constellation is scoped to a single workspace and chain. The `workspace` option must be a valid workspace name from your org.
+
+```ts
+const eth = constellation({
+  workspace: 'GG',
+  label: 'Production',
+  chain: 1,
+})
+```
+
+### Referencing existing accounts
+
+Bracket access gives you existing Safes and Roles mods from the selected workspace — both **vault accounts** (manually-promoted entries surfaced in the workspace UI) and any **constellation accounts** previously created by a `push()`. The codegen records them under the same `accounts` map, marked with a `vault` flag for the subset that are also workspace vaults. Names auto-complete from the codegen output.
+
+```ts
+// Reference an existing Safe — no invocation needed
+const ggDao = eth.safe['GG DAO']
+
+// Reference an existing Roles mod
+const ggDaoRoles = eth.roles['GG DAO Roles']
+
+// Optionally invoke with overrides
+const ggDaoOverridden = eth.safe['GG DAO']({ threshold: 5 })
+```
+
+> `bun push` runs `pull-org` first via the `prepush` hook, so re-pushing always sees the freshest existing-account values from your org.
+
+### Creating new accounts
+
+Use bracket access with a new label to create new nodes. Every mandatory field (`nonce`, `threshold`, `owners` for Safes; `nonce` for Roles mods) must be supplied explicitly — the SDK does not inject any runtime defaults. The type system surfaces a missing field as a compile-time error so you can't ship an incomplete spec.
+
+```ts
+// New Safe — nonce, threshold, owners are required
+const newSafe = eth.safe['New Safe']({
+  nonce: 0n,
+  threshold: 2,
+  owners: [
+    eth.user['Alice Sample'],
+    '0xb8e48df6818d3cbc648b3e8ec248a4f547135f7a',
+  ],
+  modules: [ggDaoRoles],
+})
+
+// New Roles mod targeting an existing Safe
+const newRoles = eth.roles['New Roles']({
+  nonce: 0n,
+  target: ggDao,
+})
+```
+
+When a bracket label matches an existing account from your codegen, all overrides become optional — you pass only the fields you want to change against the live configuration.
+
+### Circular references between new nodes
+
+New nodes can reference each other before either has been invoked — use the uninvoked factory as a forward reference:
+
+```ts
+const safe = eth.safe['New Safe']({
+  nonce: 0n,
+  threshold: 1,
+  owners: [eth.user['Alice Sample']],
+  // Forward reference to a Roles mod that doesn't exist yet
+  modules: [eth.roles['New Roles']],
+})
+
+const roles = eth.roles['New Roles']({
+  nonce: 0n,
+  target: safe,
+})
+```
+
+References are resolved by label at `push()` time, so both sides of the cycle must be included in the call.
+
+### Referencing users
+
+`eth.user[handle]` resolves a user to their personal Safe address on the current chain:
+
+```ts
+const aliceAddress = eth.user['Alice Sample']
+```
+
+### Pushing the constellation
+
+The `push()` function takes all nodes and sends them to the Zodiac OS API. Pass either a named object (keys become refs) or an array:
+
+```ts
+import { push } from '@zodiaceco/sdk'
+
+await push({ ggDao, ggDaoRoles, newSafe, newRoles })
+```
+
+All referenced nodes must be included in the `push()` call.
+
+By default, `push()` creates an API client from the `ZODIAC_API_KEY` environment variable. You can pass a custom client:
+
+```ts
+await push({ ggDao, newRoles }, { api: new ApiClient({ apiKey: '...' }) })
+```
+
+## CLI reference
+
+```
+Usage: zodiac [options] [command]
+
+Zodiac SDK CLI – pull org data and contract ABIs
+
+Options:
+  -V, --version        output the version number
+  -c, --config <path>  path to the config file (default: "zodiac.config.ts")
+  -h, --help           display help for command
+
+Commands:
+  init                 Authorize this directory with a Zodiac org. Opens a browser to mint an API key and writes it to .env.
+  pull-org             Fetch Zodiac users and accounts, generate TypeScript types
+  pull-contracts       Fetch contract ABIs, generate typed permissions kit
+  pull                 Fetch Zodiac org and contracts ABI, generate SDK functions
+  help [command]       display help for command
+```

package/dist/allow/index.d.mts

@@ -0,0 +1,2 @@
+import { a as EVERYTHING, c as Scoping, i as ConditionFunction, l as TargetPermission, n as ChainPrefix, o as FunctionPermission, r as chainIdFor, s as Options, t as CHAIN_IDS, u as buildAllowKit } from "../index-DoZbhpS6.mjs";
+export { CHAIN_IDS, ChainPrefix, ConditionFunction, EVERYTHING, FunctionPermission, Options, Scoping, TargetPermission, buildAllowKit, chainIdFor };

package/dist/allow/index.mjs

@@ -0,0 +1,3 @@
+import { n as chainIdFor, t as CHAIN_IDS } from "../networks-BTW1qAAa.mjs";
+import { n as EVERYTHING, t as buildAllowKit } from "../allow-CzPpzclq.mjs";
+export { CHAIN_IDS, EVERYTHING, buildAllowKit, chainIdFor };

package/dist/allow-CzPpzclq.mjs

@@ -0,0 +1,121 @@
+import { a as walkContracts, i as readAbi } from "./networks-BTW1qAAa.mjs";
+import { Operator, ParameterType, c, coercePermission } from "zodiac-roles-sdk";
+import { Interface, isError } from "ethers";
+//#region src/allow/types.ts
+const EVERYTHING = Symbol.for("@zodiaceco/allow-kit/EVERYTHING");
+//#endregion
+//#region src/allow/runtime.ts
+function buildAllowKit(abisDir, contractsConfig) {
+	const kit = {};
+	for (const node of walkContracts(contractsConfig)) {
+		const abi = readAbi(abisDir, node);
+		if (!abi) {
+			attachAt(kit, [node.chain, ...node.segments], missingAbiProxy(node));
+			continue;
+		}
+		attachAt(kit, [node.chain, ...node.segments], makeAllowContract(node.address, abi));
+	}
+	return kit;
+}
+function attachAt(root, segments, value) {
+	let cursor = root;
+	for (let i = 0; i < segments.length - 1; i++) {
+		const seg = segments[i];
+		if (!(seg in cursor)) cursor[seg] = {};
+		cursor = cursor[seg];
+	}
+	cursor[segments[segments.length - 1]] = value;
+}
+function missingAbiProxy(node) {
+	const explain = () => {
+		throw new Error(`ABI missing for ${node.chain}.${node.segments.join(".")} (${node.address}). Run \`zodiac pull-contracts\` to fetch it, or paste the ABI JSON manually at <abisDir>/${node.chain}/${node.segments.join("/")}.json`);
+	};
+	return new Proxy({}, {
+		get: explain,
+		has: explain
+	});
+}
+function makeAllowContract(address, abi) {
+	const iface = Interface.from(abi);
+	const lowerAddr = address.toLowerCase();
+	const allowEverything = (options) => ({
+		targetAddress: lowerAddr,
+		send: options?.send,
+		delegatecall: options?.delegatecall
+	});
+	const has = (name) => {
+		try {
+			const fn = iface.getFunction(name);
+			if (!fn) return false;
+			return fn.stateMutability !== "view" && fn.stateMutability !== "pure";
+		} catch (error) {
+			if (!isError(error, "INVALID_ARGUMENT")) throw error;
+			return false;
+		}
+	};
+	return new Proxy({}, {
+		get: (_target, prop) => {
+			if (prop === EVERYTHING) return allowEverything;
+			if (typeof prop !== "string") return void 0;
+			if (!has(prop)) return void 0;
+			return makeAllowFunction(iface.getFunction(prop), lowerAddr);
+		},
+		has: (_target, prop) => {
+			if (prop === EVERYTHING) return true;
+			return typeof prop === "string" && has(prop);
+		}
+	});
+}
+function makeAllowFunction(fn, targetAddress) {
+	const inputs = fn.inputs;
+	return (...args) => {
+		const scopings = args.slice(0, inputs.length);
+		const hasScopings = scopings.some((s) => s !== void 0 && s !== null);
+		const options = args[inputs.length] ?? {};
+		const condition = hasScopings ? c.calldataMatches(scopings, inputs)() : void 0;
+		return applyOptions(coercePermission({
+			targetAddress,
+			signature: fn.format("sighash"),
+			condition
+		}), options);
+	};
+}
+const emptyCalldataMatches = {
+	paramType: ParameterType.Calldata,
+	operator: Operator.Matches,
+	children: []
+};
+const applyGlobalAllowance = (condition, allowanceCondition) => {
+	const base = condition ?? emptyCalldataMatches;
+	if (base.paramType !== ParameterType.Calldata || base.operator !== Operator.Matches) throw new Error("Global allowance can only be applied to calldata matches nodes");
+	return {
+		...base,
+		children: [...base.children ?? [], allowanceCondition]
+	};
+};
+const applyOptions = (permission, options) => {
+	let condition = permission.condition;
+	if (options.etherWithinAllowance) {
+		if (!options.send) throw new Error("`etherWithinAllowance` can only be used if `send` is allowed");
+		condition = applyGlobalAllowance(condition, {
+			paramType: ParameterType.None,
+			operator: Operator.EtherWithinAllowance,
+			compValue: options.etherWithinAllowance
+		});
+	}
+	if (options.callWithinAllowance) condition = applyGlobalAllowance(condition, {
+		paramType: ParameterType.None,
+		operator: Operator.CallWithinAllowance,
+		compValue: options.callWithinAllowance
+	});
+	return {
+		...permission,
+		send: options.send,
+		delegatecall: options.delegatecall,
+		condition
+	};
+};
+//#endregion
+export { EVERYTHING as n, buildAllowKit as t };
+
+//# sourceMappingURL=allow-CzPpzclq.mjs.map

package/dist/allow-CzPpzclq.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow-CzPpzclq.mjs","names":[],"sources":["../src/allow/types.ts","../src/allow/runtime.ts"],"sourcesContent":["import type { BigNumberish, BytesLike, ParamType } from 'ethers'\nimport type {\n  Condition,\n  FunctionPermission,\n  TargetPermission,\n} from 'zodiac-roles-sdk'\n\nexport type Options = {\n  send?: boolean\n  delegatecall?: boolean\n  etherWithinAllowance?: `0x${string}`\n  callWithinAllowance?: `0x${string}`\n}\n\nexport type PrimitiveValue = BigNumberish | BytesLike | string | boolean\n\n// Signature matches `zodiac-roles-sdk` so values from `c.*` are assignable.\nexport type ConditionFunction<T = unknown> = (\n  abiType: ParamType,\n  _?: T\n) => Condition\n\ntype RequireAtLeastOne<T> = {\n  [K in keyof T]-?: Required<Pick<T, K>> & Partial<Pick<T, Exclude<keyof T, K>>>\n}[keyof T]\n\ntype ArrayElement<T extends readonly unknown[]> = T extends readonly (infer U)[]\n  ? U\n  : never\n\nexport type PrimitiveScoping<T extends PrimitiveValue> =\n  | T\n  | ConditionFunction<T>\n\nexport type ArrayScoping<T extends readonly any[]> =\n  | readonly Scoping<ArrayElement<T>>[]\n  | ConditionFunction<T>\n\nexport type StructScoping<T extends { [key: string]: any }> =\n  | RequireAtLeastOne<{ [K in keyof T]?: Scoping<T[K]> }>\n  | ConditionFunction<T>\n\nexport type Scoping<T> = T extends PrimitiveValue\n  ? PrimitiveScoping<T>\n  : T extends readonly any[]\n    ? ArrayScoping<T>\n    : T extends { [key: string]: any }\n      ? StructScoping<T>\n      : unknown\n\nexport type { FunctionPermission, TargetPermission }\n\nexport const EVERYTHING = Symbol.for('@zodiaceco/allow-kit/EVERYTHING')\nexport type EVERYTHING = typeof EVERYTHING\n","import { Interface, FunctionFragment, isError, type InterfaceAbi } from 'ethers'\nimport { c, coercePermission, ParameterType, Operator } from 'zodiac-roles-sdk'\nimport type {\n  Condition,\n  FunctionPermission,\n  TargetPermission,\n} from 'zodiac-roles-sdk'\nimport { readAbi, walkContracts, type ContractNode } from './abi'\nimport { EVERYTHING, type Options } from './types'\n\nexport function buildAllowKit(\n  abisDir: string,\n  contractsConfig: Record<string, any>\n): Record<string, any> {\n  const kit: Record<string, any> = {}\n  for (const node of walkContracts(contractsConfig)) {\n    const abi = readAbi(abisDir, node)\n    if (!abi) {\n      // Defer the error until the user touches this contract — otherwise an\n      // ABI missing for one chain crashes all unrelated role definitions.\n      attachAt(kit, [node.chain, ...node.segments], missingAbiProxy(node))\n      continue\n    }\n    attachAt(\n      kit,\n      [node.chain, ...node.segments],\n      makeAllowContract(node.address, abi as InterfaceAbi)\n    )\n  }\n  return kit\n}\n\nfunction attachAt(root: Record<string, any>, segments: string[], value: any) {\n  let cursor = root\n  for (let i = 0; i < segments.length - 1; i++) {\n    const seg = segments[i]!\n    if (!(seg in cursor)) cursor[seg] = {}\n    cursor = cursor[seg]\n  }\n  cursor[segments[segments.length - 1]!] = value\n}\n\nfunction missingAbiProxy(node: ContractNode) {\n  const explain = () => {\n    throw new Error(\n      `ABI missing for ${node.chain}.${node.segments.join('.')} ` +\n        `(${node.address}). Run \\`zodiac pull-contracts\\` to fetch it, or ` +\n        `paste the ABI JSON manually at <abisDir>/${node.chain}/${node.segments.join('/')}.json`\n    )\n  }\n  return new Proxy(\n    {},\n    {\n      get: explain,\n      has: explain,\n    }\n  )\n}\n\nfunction makeAllowContract(\n  address: `0x${string}`,\n  abi: InterfaceAbi\n): Record<string | symbol, any> {\n  const iface = Interface.from(abi)\n  const lowerAddr = address.toLowerCase() as `0x${string}`\n\n  const allowEverything = (options?: Options): TargetPermission => ({\n    targetAddress: lowerAddr,\n    send: options?.send,\n    delegatecall: options?.delegatecall,\n  })\n\n  const has = (name: string) => {\n    try {\n      const fn = iface.getFunction(name)\n      if (!fn) return false\n      return fn.stateMutability !== 'view' && fn.stateMutability !== 'pure'\n    } catch (error) {\n      if (!isError(error as any, 'INVALID_ARGUMENT')) throw error\n      return false\n    }\n  }\n\n  return new Proxy(\n    {},\n    {\n      get: (_target, prop) => {\n        if (prop === EVERYTHING) return allowEverything\n        if (typeof prop !== 'string') return undefined\n        if (!has(prop)) return undefined\n        const fn = iface.getFunction(prop)!\n        return makeAllowFunction(fn, lowerAddr)\n      },\n      has: (_target, prop) => {\n        if (prop === EVERYTHING) return true\n        return typeof prop === 'string' && has(prop)\n      },\n    }\n  )\n}\n\nfunction makeAllowFunction(\n  fn: FunctionFragment,\n  targetAddress: `0x${string}`\n): (...args: any[]) => FunctionPermission {\n  const inputs = fn.inputs\n  return (...args: any[]) => {\n    const scopings = args.slice(0, inputs.length)\n    const hasScopings = scopings.some((s) => s !== undefined && s !== null)\n    const options: Options = args[inputs.length] ?? {}\n    const condition = hasScopings\n      ? c.calldataMatches(scopings, inputs)()\n      : undefined\n    const preset = {\n      targetAddress,\n      signature: fn.format('sighash'),\n      condition,\n    }\n    return applyOptions(coercePermission(preset as any) as any, options)\n  }\n}\n\nconst emptyCalldataMatches: Condition = {\n  paramType: ParameterType.Calldata,\n  operator: Operator.Matches,\n  children: [],\n}\n\nconst applyGlobalAllowance = (\n  condition: Condition | undefined,\n  allowanceCondition: Condition\n): Condition => {\n  const base = condition ?? emptyCalldataMatches\n  if (\n    base.paramType !== ParameterType.Calldata ||\n    base.operator !== Operator.Matches\n  ) {\n    throw new Error(\n      'Global allowance can only be applied to calldata matches nodes'\n    )\n  }\n  return {\n    ...base,\n    children: [...(base.children ?? []), allowanceCondition],\n  }\n}\n\nconst applyOptions = (\n  permission: FunctionPermission & { condition?: Condition },\n  options: Options\n): FunctionPermission => {\n  let condition = permission.condition\n  if (options.etherWithinAllowance) {\n    if (!options.send) {\n      throw new Error(\n        '`etherWithinAllowance` can only be used if `send` is allowed'\n      )\n    }\n    condition = applyGlobalAllowance(condition, {\n      paramType: ParameterType.None,\n      operator: Operator.EtherWithinAllowance,\n      compValue: options.etherWithinAllowance,\n    })\n  }\n  if (options.callWithinAllowance) {\n    condition = applyGlobalAllowance(condition, {\n      paramType: ParameterType.None,\n      operator: Operator.CallWithinAllowance,\n      compValue: options.callWithinAllowance,\n    })\n  }\n  return {\n    ...permission,\n    send: options.send,\n    delegatecall: options.delegatecall,\n    condition,\n  }\n}\n"],"mappings":";;;;AAoDA,MAAa,aAAa,OAAO,IAAI,kCAAkC;;;AC1CvE,SAAgB,cACd,SACA,iBACqB;CACrB,MAAM,MAA2B,EAAE;AACnC,MAAK,MAAM,QAAQ,cAAc,gBAAgB,EAAE;EACjD,MAAM,MAAM,QAAQ,SAAS,KAAK;AAClC,MAAI,CAAC,KAAK;AAGR,YAAS,KAAK,CAAC,KAAK,OAAO,GAAG,KAAK,SAAS,EAAE,gBAAgB,KAAK,CAAC;AACpE;;AAEF,WACE,KACA,CAAC,KAAK,OAAO,GAAG,KAAK,SAAS,EAC9B,kBAAkB,KAAK,SAAS,IAAoB,CACrD;;AAEH,QAAO;;AAGT,SAAS,SAAS,MAA2B,UAAoB,OAAY;CAC3E,IAAI,SAAS;AACb,MAAK,IAAI,IAAI,GAAG,IAAI,SAAS,SAAS,GAAG,KAAK;EAC5C,MAAM,MAAM,SAAS;AACrB,MAAI,EAAE,OAAO,QAAS,QAAO,OAAO,EAAE;AACtC,WAAS,OAAO;;AAElB,QAAO,SAAS,SAAS,SAAS,MAAO;;AAG3C,SAAS,gBAAgB,MAAoB;CAC3C,MAAM,gBAAgB;AACpB,QAAM,IAAI,MACR,mBAAmB,KAAK,MAAM,GAAG,KAAK,SAAS,KAAK,IAAI,CAAC,IACnD,KAAK,QAAQ,4FAC2B,KAAK,MAAM,GAAG,KAAK,SAAS,KAAK,IAAI,CAAC,OACrF;;AAEH,QAAO,IAAI,MACT,EAAE,EACF;EACE,KAAK;EACL,KAAK;EACN,CACF;;AAGH,SAAS,kBACP,SACA,KAC8B;CAC9B,MAAM,QAAQ,UAAU,KAAK,IAAI;CACjC,MAAM,YAAY,QAAQ,aAAa;CAEvC,MAAM,mBAAmB,aAAyC;EAChE,eAAe;EACf,MAAM,SAAS;EACf,cAAc,SAAS;EACxB;CAED,MAAM,OAAO,SAAiB;AAC5B,MAAI;GACF,MAAM,KAAK,MAAM,YAAY,KAAK;AAClC,OAAI,CAAC,GAAI,QAAO;AAChB,UAAO,GAAG,oBAAoB,UAAU,GAAG,oBAAoB;WACxD,OAAO;AACd,OAAI,CAAC,QAAQ,OAAc,mBAAmB,CAAE,OAAM;AACtD,UAAO;;;AAIX,QAAO,IAAI,MACT,EAAE,EACF;EACE,MAAM,SAAS,SAAS;AACtB,OAAI,SAAS,WAAY,QAAO;AAChC,OAAI,OAAO,SAAS,SAAU,QAAO,KAAA;AACrC,OAAI,CAAC,IAAI,KAAK,CAAE,QAAO,KAAA;AAEvB,UAAO,kBADI,MAAM,YAAY,KAAK,EACL,UAAU;;EAEzC,MAAM,SAAS,SAAS;AACtB,OAAI,SAAS,WAAY,QAAO;AAChC,UAAO,OAAO,SAAS,YAAY,IAAI,KAAK;;EAE/C,CACF;;AAGH,SAAS,kBACP,IACA,eACwC;CACxC,MAAM,SAAS,GAAG;AAClB,SAAQ,GAAG,SAAgB;EACzB,MAAM,WAAW,KAAK,MAAM,GAAG,OAAO,OAAO;EAC7C,MAAM,cAAc,SAAS,MAAM,MAAM,MAAM,KAAA,KAAa,MAAM,KAAK;EACvE,MAAM,UAAmB,KAAK,OAAO,WAAW,EAAE;EAClD,MAAM,YAAY,cACd,EAAE,gBAAgB,UAAU,OAAO,EAAE,GACrC,KAAA;AAMJ,SAAO,aAAa,iBALL;GACb;GACA,WAAW,GAAG,OAAO,UAAU;GAC/B;GACD,CACkD,EAAS,QAAQ;;;AAIxE,MAAM,uBAAkC;CACtC,WAAW,cAAc;CACzB,UAAU,SAAS;CACnB,UAAU,EAAE;CACb;AAED,MAAM,wBACJ,WACA,uBACc;CACd,MAAM,OAAO,aAAa;AAC1B,KACE,KAAK,cAAc,cAAc,YACjC,KAAK,aAAa,SAAS,QAE3B,OAAM,IAAI,MACR,iEACD;AAEH,QAAO;EACL,GAAG;EACH,UAAU,CAAC,GAAI,KAAK,YAAY,EAAE,EAAG,mBAAmB;EACzD;;AAGH,MAAM,gBACJ,YACA,YACuB;CACvB,IAAI,YAAY,WAAW;AAC3B,KAAI,QAAQ,sBAAsB;AAChC,MAAI,CAAC,QAAQ,KACX,OAAM,IAAI,MACR,+DACD;AAEH,cAAY,qBAAqB,WAAW;GAC1C,WAAW,cAAc;GACzB,UAAU,SAAS;GACnB,WAAW,QAAQ;GACpB,CAAC;;AAEJ,KAAI,QAAQ,oBACV,aAAY,qBAAqB,WAAW;EAC1C,WAAW,cAAc;EACzB,UAAU,SAAS;EACnB,WAAW,QAAQ;EACpB,CAAC;AAEJ,QAAO;EACL,GAAG;EACH,MAAM,QAAQ;EACd,cAAc,QAAQ;EACtB;EACD"}

package/dist/api-C49DoaPC.mjs

@@ -0,0 +1,144 @@
+import { existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import assert from "assert";
+//#region src/paths.ts
+/**
+* Resolve the project's `.zodiac/` directory — the shared home for SDK
+* codegen (`pull-org` emits the importable module here, `pull-contracts`
+* writes `allow.d.ts` alongside it).
+*
+* Pass `rootDir` to anchor explicitly (CLI commands do this using the
+* directory of the loaded `zodiac.config.ts`). Without a `rootDir`, walks
+* up from `cwd` to the nearest `zodiac.config.{ts,js,mjs,cjs}` so runtime
+* callers like `constellation()` work even when invoked from a subdirectory.
+*/
+function resolveZodiacDir(rootDir) {
+	return join(rootDir ?? findProjectRoot(), ".zodiac");
+}
+const CONFIG_FILENAMES = [
+	"zodiac.config.ts",
+	"zodiac.config.js",
+	"zodiac.config.mjs",
+	"zodiac.config.cjs"
+];
+function findProjectRoot() {
+	let dir = process.cwd();
+	while (dir !== dirname(dir)) {
+		if (CONFIG_FILENAMES.some((name) => existsSync(join(dir, name)))) return dir;
+		dir = dirname(dir);
+	}
+	return process.cwd();
+}
+//#endregion
+//#region src/api.ts
+const DEFAULT_API_URL = "https://app.zodiac.eco/api/v1";
+var ApiClient = class {
+	apiKey;
+	baseUrl;
+	_fetch;
+	headers;
+	constructor({ baseUrl = process.env.ZODIAC_API_URL ?? DEFAULT_API_URL, fetch: customFetch = fetch, headers = {}, apiKey = process.env.ZODIAC_API_KEY } = {}) {
+		this.baseUrl = baseUrl.replace(/\/$/, "");
+		this._fetch = customFetch;
+		this.headers = headers;
+		assert(apiKey, "No API key provided to the API client. Either pass it as the \"apiKey\" option or set the ZODIAC_API_KEY environment variable.");
+		this.apiKey = apiKey;
+	}
+	async postJson(endpoint, payload) {
+		const res = await this._fetch(`${this.baseUrl}/${endpoint}`, {
+			method: "POST",
+			headers: {
+				...this.headers,
+				"content-type": "application/json",
+				authorization: `Bearer ${this.apiKey}`
+			},
+			body: jsonStringify(payload)
+		});
+		if (!res.ok) await handleApiError(res);
+		return res.json();
+	}
+	async get(endpoint) {
+		const res = await this._fetch(`${this.baseUrl}/${endpoint}`, { headers: {
+			...this.headers,
+			authorization: `Bearer ${this.apiKey}`
+		} });
+		if (!res.ok) await handleApiError(res);
+		return res.json();
+	}
+	listAccounts() {
+		return this.get("accounts");
+	}
+	listUsers() {
+		return this.get("users");
+	}
+	/**
+	* Applies an accounts specification to Zodiac OS.
+	*/
+	applyConstellation(workspaceId, payload) {
+		return this.postJson(`workspace/${workspaceId}/constellation/apply`, payload);
+	}
+	/**
+	* Resolves an accounts specification to Zodiac OS.
+	*/
+	resolveConstellation(workspaceId, payload) {
+		return this.postJson(`workspace/${workspaceId}/constellation/resolve`, payload);
+	}
+};
+var ApiRequestError = class ApiRequestError extends Error {
+	status;
+	statusText;
+	details;
+	constructor(message, opts) {
+		super(ApiRequestError.composeMessage(message, opts.details));
+		this.name = "ApiRequestError";
+		this.status = opts.status;
+		this.statusText = opts.statusText;
+		this.details = opts.details;
+		if (opts.cause !== void 0) this.cause = opts.cause;
+	}
+	static composeMessage(message, details) {
+		if (details == null) return message;
+		let detailsString;
+		try {
+			detailsString = typeof details === "string" ? details : jsonStringify(details, 2);
+		} catch (_err) {
+			detailsString = String(details);
+		}
+		return `${message}\nDetails: ${detailsString}`;
+	}
+	toString() {
+		return `${this.name}: ${this.message}`;
+	}
+};
+async function handleApiError(response) {
+	if (response.headers.get("content-type")?.includes("application/json")) {
+		const errorData = await response.json();
+		let error;
+		try {
+			error = new ApiRequestError(errorData.error.message, {
+				status: response.status,
+				statusText: response.statusText,
+				details: errorData.error.details
+			});
+		} catch (jsonShapeError) {
+			error = new ApiRequestError(`Failed parsing error response: ${jsonShapeError}`, {
+				status: response.status,
+				statusText: response.statusText,
+				details: errorData
+			});
+		}
+		throw error;
+	} else throw new ApiRequestError(`${response.status} ${response.statusText}: ${response.url}`, {
+		status: response.status,
+		statusText: response.statusText
+	});
+}
+/** JSON.stringify with bigint support */
+const jsonStringify = (value, indent) => JSON.stringify(value, (_, value) => {
+	if (typeof value === "bigint") return value.toString();
+	return value;
+}, indent);
+//#endregion
+export { resolveZodiacDir as n, ApiClient as t };
+
+//# sourceMappingURL=api-C49DoaPC.mjs.map

package/dist/api-C49DoaPC.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-C49DoaPC.mjs","names":[],"sources":["../src/paths.ts","../src/api.ts"],"sourcesContent":["import { existsSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\n/**\n * Resolve the project's `.zodiac/` directory — the shared home for SDK\n * codegen (`pull-org` emits the importable module here, `pull-contracts`\n * writes `allow.d.ts` alongside it).\n *\n * Pass `rootDir` to anchor explicitly (CLI commands do this using the\n * directory of the loaded `zodiac.config.ts`). Without a `rootDir`, walks\n * up from `cwd` to the nearest `zodiac.config.{ts,js,mjs,cjs}` so runtime\n * callers like `constellation()` work even when invoked from a subdirectory.\n */\nexport function resolveZodiacDir(rootDir?: string): string {\n  return join(rootDir ?? findProjectRoot(), '.zodiac')\n}\n\nconst CONFIG_FILENAMES = [\n  'zodiac.config.ts',\n  'zodiac.config.js',\n  'zodiac.config.mjs',\n  'zodiac.config.cjs',\n]\n\nfunction findProjectRoot(): string {\n  let dir = process.cwd()\n  while (dir !== dirname(dir)) {\n    if (CONFIG_FILENAMES.some((name) => existsSync(join(dir, name)))) return dir\n    dir = dirname(dir)\n  }\n  return process.cwd()\n}\n","import type {\n  ApplyConstellationPayload,\n  ApplyConstellationResult,\n  ResolveConstellationPayload,\n  ResolveConstellationResult,\n  ApiError as ApiErrorResponse,\n  ListAccountsResult,\n  ListUsersResult,\n} from '@zodiaceco/api-types'\nimport assert from 'assert'\nimport { UUID } from 'crypto'\n\nexport type Options = {\n  workspace?: string\n  apiKey?: string\n  baseUrl?: string\n  fetch?: typeof globalThis.fetch\n  headers?: Record<string, string>\n}\n\nconst DEFAULT_API_URL = 'https://app.zodiac.eco/api/v1'\n\nexport class ApiClient {\n  private apiKey: string\n  private baseUrl: string\n  private _fetch: typeof fetch\n  private headers: Record<string, string>\n\n  constructor({\n    // Read `ZODIAC_API_URL`/`ZODIAC_API_KEY` lazily at construction time\n    // rather than at module load: the CLI loads `.env` (and `init` writes a\n    // fresh one) before the first client is created, so capturing them at\n    // import time would bake in the default and ignore the user's config.\n    baseUrl = process.env.ZODIAC_API_URL ?? DEFAULT_API_URL,\n    fetch: customFetch = fetch,\n    headers = {},\n    apiKey = process.env.ZODIAC_API_KEY,\n  }: Options = {}) {\n    this.baseUrl = baseUrl.replace(/\\/$/, '')\n    this._fetch = customFetch\n    this.headers = headers\n\n    assert(\n      apiKey,\n      'No API key provided to the API client. Either pass it as the \"apiKey\" option or set the ZODIAC_API_KEY environment variable.'\n    )\n\n    this.apiKey = apiKey\n  }\n\n  protected async postJson(endpoint: string, payload: unknown) {\n    const res = await this._fetch(`${this.baseUrl}/${endpoint}`, {\n      method: 'POST',\n      headers: {\n        ...this.headers,\n        'content-type': 'application/json',\n        authorization: `Bearer ${this.apiKey}`,\n      },\n      body: jsonStringify(payload),\n    })\n    if (!res.ok) {\n      await handleApiError(res)\n    }\n\n    return res.json()\n  }\n\n  protected async get(endpoint: string) {\n    const res = await this._fetch(`${this.baseUrl}/${endpoint}`, {\n      headers: { ...this.headers, authorization: `Bearer ${this.apiKey}` },\n    })\n\n    if (!res.ok) {\n      await handleApiError(res)\n    }\n\n    return res.json()\n  }\n\n  listAccounts(): Promise<ListAccountsResult> {\n    return this.get('accounts')\n  }\n\n  listUsers(): Promise<ListUsersResult> {\n    return this.get('users')\n  }\n\n  /**\n   * Applies an accounts specification to Zodiac OS.\n   */\n  applyConstellation(\n    workspaceId: UUID,\n    payload: ApplyConstellationPayload\n  ): Promise<ApplyConstellationResult> {\n    return this.postJson(\n      `workspace/${workspaceId}/constellation/apply`,\n      payload\n    )\n  }\n\n  /**\n   * Resolves an accounts specification to Zodiac OS.\n   */\n  resolveConstellation(\n    workspaceId: UUID,\n    payload: ResolveConstellationPayload\n  ): Promise<ResolveConstellationResult> {\n    return this.postJson(\n      `workspace/${workspaceId}/constellation/resolve`,\n      payload\n    )\n  }\n}\n\nexport class ApiRequestError extends Error {\n  public readonly status: number\n  public readonly statusText: string\n  public readonly details?: unknown\n\n  constructor(\n    message: string,\n    opts: {\n      status: number\n      statusText: string\n      details?: unknown\n      cause?: unknown\n    }\n  ) {\n    super(ApiRequestError.composeMessage(message, opts.details))\n    this.name = 'ApiRequestError'\n    this.status = opts.status\n    this.statusText = opts.statusText\n    this.details = opts.details\n    if (opts.cause !== undefined) {\n      ;(this as any).cause = opts.cause\n    }\n  }\n\n  private static composeMessage(message: string, details?: unknown) {\n    if (details == null) return message\n    let detailsString: string\n    try {\n      detailsString =\n        typeof details === 'string' ? details : jsonStringify(details, 2)\n    } catch (_err) {\n      detailsString = String(details)\n    }\n    return `${message}\\nDetails: ${detailsString}`\n  }\n\n  toString() {\n    return `${this.name}: ${this.message}`\n  }\n}\n\nasync function handleApiError(response: Response): Promise<never> {\n  const contentType = response.headers.get('content-type')\n  if (contentType?.includes('application/json')) {\n    const errorData = (await response.json()) as ApiErrorResponse\n    let error: ApiRequestError\n    try {\n      error = new ApiRequestError(errorData.error.message, {\n        status: response.status,\n        statusText: response.statusText,\n        details: errorData.error.details,\n      })\n    } catch (jsonShapeError) {\n      error = new ApiRequestError(\n        `Failed parsing error response: ${jsonShapeError}`,\n        {\n          status: response.status,\n          statusText: response.statusText,\n          details: errorData,\n        }\n      )\n    }\n    throw error\n  } else {\n    throw new ApiRequestError(\n      `${response.status} ${response.statusText}: ${response.url}`,\n      {\n        status: response.status,\n        statusText: response.statusText,\n      }\n    )\n  }\n}\n\n/** JSON.stringify with bigint support */\nconst jsonStringify = (value: unknown, indent?: number) =>\n  JSON.stringify(\n    value,\n    (_, value) => {\n      if (typeof value === 'bigint') {\n        return value.toString()\n      }\n\n      return value\n    },\n    indent\n  )\n"],"mappings":";;;;;;;;;;;;;;AAaA,SAAgB,iBAAiB,SAA0B;AACzD,QAAO,KAAK,WAAW,iBAAiB,EAAE,UAAU;;AAGtD,MAAM,mBAAmB;CACvB;CACA;CACA;CACA;CACD;AAED,SAAS,kBAA0B;CACjC,IAAI,MAAM,QAAQ,KAAK;AACvB,QAAO,QAAQ,QAAQ,IAAI,EAAE;AAC3B,MAAI,iBAAiB,MAAM,SAAS,WAAW,KAAK,KAAK,KAAK,CAAC,CAAC,CAAE,QAAO;AACzE,QAAM,QAAQ,IAAI;;AAEpB,QAAO,QAAQ,KAAK;;;;ACVtB,MAAM,kBAAkB;AAExB,IAAa,YAAb,MAAuB;CACrB;CACA;CACA;CACA;CAEA,YAAY,EAKV,UAAU,QAAQ,IAAI,kBAAkB,iBACxC,OAAO,cAAc,OACrB,UAAU,EAAE,EACZ,SAAS,QAAQ,IAAI,mBACV,EAAE,EAAE;AACf,OAAK,UAAU,QAAQ,QAAQ,OAAO,GAAG;AACzC,OAAK,SAAS;AACd,OAAK,UAAU;AAEf,SACE,QACA,iIACD;AAED,OAAK,SAAS;;CAGhB,MAAgB,SAAS,UAAkB,SAAkB;EAC3D,MAAM,MAAM,MAAM,KAAK,OAAO,GAAG,KAAK,QAAQ,GAAG,YAAY;GAC3D,QAAQ;GACR,SAAS;IACP,GAAG,KAAK;IACR,gBAAgB;IAChB,eAAe,UAAU,KAAK;IAC/B;GACD,MAAM,cAAc,QAAQ;GAC7B,CAAC;AACF,MAAI,CAAC,IAAI,GACP,OAAM,eAAe,IAAI;AAG3B,SAAO,IAAI,MAAM;;CAGnB,MAAgB,IAAI,UAAkB;EACpC,MAAM,MAAM,MAAM,KAAK,OAAO,GAAG,KAAK,QAAQ,GAAG,YAAY,EAC3D,SAAS;GAAE,GAAG,KAAK;GAAS,eAAe,UAAU,KAAK;GAAU,EACrE,CAAC;AAEF,MAAI,CAAC,IAAI,GACP,OAAM,eAAe,IAAI;AAG3B,SAAO,IAAI,MAAM;;CAGnB,eAA4C;AAC1C,SAAO,KAAK,IAAI,WAAW;;CAG7B,YAAsC;AACpC,SAAO,KAAK,IAAI,QAAQ;;;;;CAM1B,mBACE,aACA,SACmC;AACnC,SAAO,KAAK,SACV,aAAa,YAAY,uBACzB,QACD;;;;;CAMH,qBACE,aACA,SACqC;AACrC,SAAO,KAAK,SACV,aAAa,YAAY,yBACzB,QACD;;;AAIL,IAAa,kBAAb,MAAa,wBAAwB,MAAM;CACzC;CACA;CACA;CAEA,YACE,SACA,MAMA;AACA,QAAM,gBAAgB,eAAe,SAAS,KAAK,QAAQ,CAAC;AAC5D,OAAK,OAAO;AACZ,OAAK,SAAS,KAAK;AACnB,OAAK,aAAa,KAAK;AACvB,OAAK,UAAU,KAAK;AACpB,MAAI,KAAK,UAAU,KAAA,EACf,MAAa,QAAQ,KAAK;;CAIhC,OAAe,eAAe,SAAiB,SAAmB;AAChE,MAAI,WAAW,KAAM,QAAO;EAC5B,IAAI;AACJ,MAAI;AACF,mBACE,OAAO,YAAY,WAAW,UAAU,cAAc,SAAS,EAAE;WAC5D,MAAM;AACb,mBAAgB,OAAO,QAAQ;;AAEjC,SAAO,GAAG,QAAQ,aAAa;;CAGjC,WAAW;AACT,SAAO,GAAG,KAAK,KAAK,IAAI,KAAK;;;AAIjC,eAAe,eAAe,UAAoC;AAEhE,KADoB,SAAS,QAAQ,IAAI,eAAe,EACvC,SAAS,mBAAmB,EAAE;EAC7C,MAAM,YAAa,MAAM,SAAS,MAAM;EACxC,IAAI;AACJ,MAAI;AACF,WAAQ,IAAI,gBAAgB,UAAU,MAAM,SAAS;IACnD,QAAQ,SAAS;IACjB,YAAY,SAAS;IACrB,SAAS,UAAU,MAAM;IAC1B,CAAC;WACK,gBAAgB;AACvB,WAAQ,IAAI,gBACV,kCAAkC,kBAClC;IACE,QAAQ,SAAS;IACjB,YAAY,SAAS;IACrB,SAAS;IACV,CACF;;AAEH,QAAM;OAEN,OAAM,IAAI,gBACR,GAAG,SAAS,OAAO,GAAG,SAAS,WAAW,IAAI,SAAS,OACvD;EACE,QAAQ,SAAS;EACjB,YAAY,SAAS;EACtB,CACF;;;AAKL,MAAM,iBAAiB,OAAgB,WACrC,KAAK,UACH,QACC,GAAG,UAAU;AACZ,KAAI,OAAO,UAAU,SACnB,QAAO,MAAM,UAAU;AAGzB,QAAO;GAET,OACD"}