1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
// -------------------------------------------------------------------------------------------------
// Copyright (C) 2015-2026 Nautech Systems Pty Ltd. All rights reserved.
// https://nautechsystems.io
//
// Licensed under the GNU Lesser General Public License Version 3.0 (the "License");
// You may not use this file except in compliance with the License.
// You may obtain a copy of the License at https://www.gnu.org/licenses/lgpl-3.0.en.html
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
// -------------------------------------------------------------------------------------------------
//! Derive self-custodial action signing.
//!
//! Derive signs every state-changing request with an EIP-712 typed-data
//! signature over secp256k1, against per-action module contracts on the Derive
//! Chain. The pipeline (matching `derive_action_signing/signed_action.py` from
//! the upstream Python SDK [`derivexyz/v2-action-signing-python`]) is:
//!
//! ```text
//! action_hash = keccak256(abi.encode(
//! [bytes32, uint, uint, address, bytes32, uint, address, address],
//! [ACTION_TYPEHASH, subaccount_id, nonce, module_address,
//! keccak256(module_data_abi_encoded), signature_expiry_sec, owner, signer],
//! ))
//! typed_data_hash = keccak256(0x1901 || DOMAIN_SEPARATOR || action_hash)
//! signature = secp256k1_sign(typed_data_hash, signer_key)
//! ```
//!
//! Per-action `module_data` ABI encodings live under [`modules`]. REST and
//! WebSocket session authentication use the simpler `eth_sign(timestamp_ms)`
//! pattern in [`auth`]. Per-`(wallet, subaccount)` nonce allocation lives in
//! [`nonce`].
//!
//! The byte-equivalence oracle is
//! `test_data/common/signing_trade_action_vectors.json`, generated by
//! `tests/oracle-py/generate_oracle.py` from the upstream Python SDK at a
//! revision pinned in the fixture metadata and replayed against this
//! implementation in [`eip712`] tests. A future re-pin (for example a V3
//! signer) regenerates the fixture through the generator; the Rust test
//! structure stays unchanged. Third-party attribution for the oracle is
//! recorded in `licenses/THIRD_PARTY_LICENSES.md`.
//!
//! Protocol constants (`DOMAIN_SEPARATOR`, `ACTION_TYPEHASH`, module addresses)
//! are sourced from the Protocol Constants reference at
//! <https://docs.derive.xyz>.
//!
//! [`derivexyz/v2-action-signing-python`]: https://github.com/derivexyz/v2-action-signing-python