request-wallet-sign 0.1.1 → 0.2.0

package/bin/index.js

@@ -600,6 +600,7 @@ function txDataText() {
     out.valueEth = formatEther(REQUEST.value) + ' ' + (meta.symbol || 'ETH');
     if (REQUEST.data) out.data = REQUEST.data;
     if (REQUEST.gas) out.gas = REQUEST.gas;
+    if (REQUEST.authorizationList) out.authorizationList = REQUEST.authorizationList;
   } else if (REQUEST._type === 'signTypedData') {
     out.typedData = REQUEST.typedData;
   } else {
@@ -681,14 +682,19 @@ async function switchChain(account) {
 }
 
 async function buildTx(account) {
+  // An EIP-7702 authorizationList (e.g. relaying someone else's signed
+  // authorization) makes this a type-4 transaction; otherwise plain EIP-1559.
+  const authList = Array.isArray(REQUEST.authorizationList) && REQUEST.authorizationList.length
+    ? REQUEST.authorizationList : null;
   const tx = {
-    type: '0x2',
+    type: authList ? '0x4' : '0x2',
     from: account,
     chainId: hex(REQUEST.chainId),
     value: REQUEST.value || '0x0',
   };
   if (REQUEST.to)   tx.to   = REQUEST.to;
   if (REQUEST.data) tx.data = REQUEST.data;
+  if (authList)     tx.authorizationList = authList;
 
   // Gas limit
   if (REQUEST.gas) {
@@ -913,6 +919,19 @@ async function renderWhatThisDoes() {
 
   const { to, data, value } = REQUEST;
 
+  // EIP-7702: this tx also installs account delegation(s) — the highest-impact
+  // part, so surface each delegate target up front (Details shows the full tx).
+  if (Array.isArray(REQUEST.authorizationList) && REQUEST.authorizationList.length) {
+    const fields = REQUEST.authorizationList.map((a, i) => ({
+      label: 'Delegate #' + (i + 1),
+      value: (a && a.address) ? a.address : '(unknown target)',
+      danger: true,
+    }));
+    if (to) fields.push({ label: 'Then calls', value: to });
+    showWhat('Authorize account delegation (EIP-7702)', fields);
+    return;
+  }
+
   // Contract deployment
   if (!to && data && data.length > 2) {
     const bytes = Math.floor((data.length - 2) / 2);
@@ -1132,10 +1151,18 @@ export async function run(argv) {
 }
 
 // ── Entry point ───────────────────────────────────────────────────────────────
-// Only execute when run directly (not when imported by tests).
-
-const isMain = process.argv[1] &&
-  new URL(import.meta.url).pathname === process.argv[1];
+// Only execute when run directly (not when imported by tests). Resolve symlinks
+// on both sides: when launched via an installed bin (npx / global install),
+// process.argv[1] is a symlink in node_modules/.bin whose realpath is this file,
+// while import.meta.url is already the resolved path — comparing them raw fails.
+import { realpathSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+let isMain = false;
+try {
+  isMain = !!process.argv[1] &&
+    realpathSync(process.argv[1]) === realpathSync(fileURLToPath(import.meta.url));
+} catch { isMain = false; }
 
 if (isMain) {
   run(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "request-wallet-sign",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Let AI agents surface wallet signing requests to users via a local browser page",
   "type": "module",
   "engines": {