Security

import type { SerializedIntentInput } from '@rhinestone/sdk'
import { createJwtSigner } from '@rhinestone/sdk/jwt-server'
import { encodeFunctionData, erc20Abi } from 'viem'
import { isDeepStrictEqual } from 'node:util'
import { parseApprovalBody } from './intent-schema'
import { requireSession } from './session'
import { reserveApprovalBudget } from './sponsorship-budget'

const usdc = '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913' as const
const chainId = 'eip155:8453' as const

function allowsIntent(
  input: SerializedIntentInput,
  walletAddress: `0x${string}`,
  approvedAccount: NonNullable<SerializedIntentInput['account']['evm']>,
): boolean {
  if (input.contractVersion !== 'sdk-3.0.0-caucasus') return false
  if (input.account.svm || !input.account.evm) return false
  if (input.account.evm.address.toLowerCase() !== walletAddress.toLowerCase()) {
    return false
  }
  if (!isDeepStrictEqual(input.account.evm, approvedAccount)) return false

  const { source, destination, options } = input
  if (!source || source.vm !== 'evm' || source.chainId !== chainId) return false
  if (source.token.toLowerCase() !== usdc.toLowerCase()) return false
  if (source.execution !== undefined || source.auxiliaryFunds !== undefined) {
    return false
  }
  if (source.maxAmount === undefined) return false
  const maxAmount = BigInt(source.maxAmount)
  if (maxAmount <= 0n || maxAmount > 10_000_000n) return false

  const { sponsorship, ...otherOptions } = options
  if (Object.keys(otherOptions).length > 0 || sponsorship?.gas !== true) {
    return false
  }
  if (sponsorship.bridgeFees === true || sponsorship.swapFees === true ||
      sponsorship.protocolFees === true) return false
  if (destination.vm !== 'evm' || destination.chainId !== chainId) return false

  if (destination.execution === undefined) {
    if (destination.token?.toLowerCase() !== usdc.toLowerCase()) return false
    if (destination.amount === undefined) return false
    const amount = BigInt(destination.amount)
    return amount > 0n && amount <= 1_000_000n &&
      isDeepStrictEqual(destination.recipient, { address: walletAddress })
  }

  if (destination.token !== undefined || destination.amount !== undefined ||
      destination.recipient !== undefined) return false
  const { calls, gasLimit } = destination.execution
  if (gasLimit === undefined || BigInt(gasLimit) <= 0n ||
      BigInt(gasLimit) > 150_000n || calls.length !== 1) return false
  const call = calls[0]
  const allowedData = encodeFunctionData({
    abi: erc20Abi,
    functionName: 'transfer',
    args: [walletAddress, 1_000_000n],
  })
  return call.to.toLowerCase() === usdc.toLowerCase() &&
    BigInt(call.value) === 0n && call.data === allowedData
}

const signer = createJwtSigner({
  jwt: {
    privateKey: JSON.parse(process.env.RHINESTONE_JWT_PRIVATE_JWK!),
    integratorId: process.env.RHINESTONE_INTEGRATOR_ID!,
    projectId: process.env.RHINESTONE_PROJECT_ID!,
    appId: process.env.RHINESTONE_APP_ID!,
    keyId: process.env.RHINESTONE_KEY_ID!,
  },
})

export async function POST(request: Request) {
  const session = await requireSession(request)
  let intentInput: SerializedIntentInput
  try {
    intentInput = parseApprovalBody(await request.json())
  } catch {
    return Response.json({ error: 'Invalid intent' }, { status: 400 })
  }

  if (!allowsIntent(intentInput, session.walletAddress, session.approvedAccount)) {
    return Response.json({ error: 'Sponsorship denied' }, { status: 403 })
  }

  await reserveApprovalBudget(session.userId, intentInput)
  const token = await signer.getIntentExtensionToken(intentInput)
  return Response.json({ token })
}

import type { SerializedIntentInput } from '@rhinestone/sdk'
import { solanaDevnet } from '@rhinestone/sdk/solana'
import { isDeepStrictEqual } from 'node:util'

const solanaUsdc = '4zMMC9srt5Ri5X14GAgXhaHii3GnPAEERYPJgZJDncDU'

function allowsSolanaDelivery(
  input: SerializedIntentInput,
  walletAddress: string,
  recipientAddress: string,
  approvedAccount: NonNullable<SerializedIntentInput['account']['svm']>,
): boolean {
  if (recipientAddress === walletAddress) return false
  if (input.contractVersion !== 'sdk-3.0.0-caucasus') return false
  if (input.account.evm || !input.account.svm) return false
  if (input.account.svm.initData !== undefined) return false
  if (input.account.svm.address !== walletAddress) return false
  if (!isDeepStrictEqual(input.account.svm, approvedAccount)) return false

  const { source, destination, options } = input
  if (!source || source.vm !== 'svm' ||
      source.chainId !== solanaDevnet.caip2) return false
  if (source.token !== solanaUsdc || source.execution !== undefined ||
      source.auxiliaryFunds !== undefined) return false
  if (source.maxAmount === undefined) return false
  const maxAmount = BigInt(source.maxAmount)
  if (maxAmount <= 0n || maxAmount > 10_000_000n) return false

  if (destination.vm !== 'svm' ||
      destination.chainId !== solanaDevnet.caip2) return false
  if (destination.execution !== undefined ||
      destination.token !== solanaUsdc ||
      destination.amount === undefined) return false
  const amount = BigInt(destination.amount)
  if (amount <= 0n || amount > 1_000_000n) return false
  if (!isDeepStrictEqual(destination.recipient, { address: recipientAddress })) {
    return false
  }

  const { sponsorship, ...otherOptions } = options
  return Object.keys(otherOptions).length === 0 &&
    sponsorship?.gas === true && sponsorship.bridgeFees !== true &&
    sponsorship.swapFees !== true && sponsorship.protocolFees !== true
}

export async function approveSolanaDelivery(request: Request) {
  const session = await requireSession(request)
  let intentInput: SerializedIntentInput
  try {
    intentInput = parseApprovalBody(await request.json())
  } catch {
    return Response.json({ error: 'Invalid intent' }, { status: 400 })
  }
  if (!allowsSolanaDelivery(
    intentInput,
    session.solanaWalletAddress,
    session.approvedSolanaRecipient,
    session.approvedSolanaAccount,
  )) {
    return Response.json({ error: 'Sponsorship denied' }, { status: 403 })
  }
  await reserveApprovalBudget(session.userId, intentInput)
  return Response.json({
    token: await signer.getIntentExtensionToken(intentInput),
  })
}