Repository navigation
fix(tempo): harden relay sponsorship with fixes from the Tempo API relay - #5236
Conversation
Ports relay-handler fixes made in tempoxyz/api since the relay handler landed: - Recover raw sponsorship senders from their signatures (including keychain access keys) instead of trusting the envelope sender placeholder. - Reject raw Tempo transactions whose encoding is not canonical. - Let the sponsor's fee token override a raw envelope's `feeToken`. - Accept a per-chain `feePayer.feeToken` resolver; external fee payers choose their own token. - Bound returned fee-payer signatures by `validBefore` (`feePayer.validity`, default 1 hour); `eth_signRawTransaction` requires one. - Add `feePayer.onRejected` for base-fee-floor broadcast rejections. - Add `feePayer` to `SponsoredEvent`. - Estimate sponsored fills without the sender's fee cap. - Cap Relay fetch request bodies at 16 MiB. - Require the full 12-byte TIP-20 address prefix. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01D3wHL22Gq6TxRjXBPMiWL8
🦋 Changeset detectedLatest commit: f885912 The changes in this PR will be included in the next version bump. This PR includes changesets to release 1 package
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01D3wHL22Gq6TxRjXBPMiWL8
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01D3wHL22Gq6TxRjXBPMiWL8
commit: |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: dd97418e12
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Sponsored fills that set only `maxPriorityFeePerGas` without `gas` now estimate unpriced too, and restore the caller's tip (raising the node fee cap when needed). Drops an unreachable malformed-envelope guard in `requestsRawSponsorship`, since `compose` rejects those first. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01D3wHL22Gq6TxRjXBPMiWL8
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 2e9e230f6e
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
`Relay.feePayer` now refuses a non-positive or non-integer `validity`, which would otherwise admit unbounded `validBefore` values. Sponsored fills whose tip exceeds their fee cap now reach the node unchanged so it rejects them. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01D3wHL22Gq6TxRjXBPMiWL8
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 63881db784
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Non-canonical fee values (leading zeros, over 256 bits) now reach the node unchanged instead of being stripped and rewritten. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01D3wHL22Gq6TxRjXBPMiWL8
|
Generated by Claude Code |
Raw sponsorship now accepts a configurable account, as sender or as a same-transaction key authorization signer, only when its config matches the on-chain commitment and its owner approvals reach quorum. Adds `feePayer.minimumBaseFee` (default 600_000_000n) to set the floor below which `onRejected` treats a base-fee rejection as permanent. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01D3wHL22Gq6TxRjXBPMiWL8
No description provided.