app.gainforest.wallet.primary

{
  "id": "app.gainforest.wallet.primary",
  "defs": {
    "main": {
      "key": "literal:self",
      "type": "record",
      "record": {
        "type": "object",
        "required": [
          "address",
          "factory",
          "chainId",
          "owner",
          "threshold",
          "saltScheme",
          "signers",
          "createdAt"
        ],
        "properties": {
          "name": {
            "type": "string",
            "maxLength": 800,
            "description": "Plain-language wallet label.",
            "maxGraphemes": 80
          },
          "owner": {
            "type": "string",
            "description": "The vault's Ownable superuser slot. Always the zero address: only the signer set controls the vault."
          },
          "address": {
            "type": "string",
            "description": "Predicted deterministic vault address (0x…, 20 bytes)."
          },
          "chainId": {
            "type": "integer",
            "description": "EVM chain id the donation flow settles on (the address is identical on every chain where the factory is deployed)."
          },
          "factory": {
            "type": "string",
            "description": "SmartVaultFactory address the prediction was made against."
          },
          "signers": {
            "type": "array",
            "items": {
              "ref": "#passkeySigner",
              "type": "ref"
            },
            "minLength": 1,
            "description": "Founding signer set, in derivation order — a CREATE2 input, frozen once the vault is deployed."
          },
          "createdAt": {
            "type": "string",
            "format": "datetime"
          },
          "threshold": {
            "type": "integer",
            "maximum": 255,
            "minimum": 1,
            "description": "Number of distinct passkey approvals required per operation (m-of-n). A CREATE2 input — changing it re-derives the address."
          },
          "saltScheme": {
            "type": "string",
            "description": "Versioned salt derivation label; the CREATE2 salt is keccak256(saltScheme + ':' + account DID)."
          },
          "addedSigners": {
            "type": "array",
            "items": {
              "ref": "#passkeySigner",
              "type": "ref"
            },
            "description": "Passkeys enrolled ON-CHAIN after deployment — a metadata directory only (labels + WebAuthn credential ids). The chain is the authority for which signers are live; append-only, removals need no record change."
          }
        }
      },
      "description": "An account's canonical donation wallet (personal profile or organization): a Splits SmartVault (ERC-4337 passkey multisig) whose address is derived deterministically with CREATE2 from the account DID and the founding signer set. Because owner, signers, threshold, and the salt scheme are all recorded here, anyone can recompute SmartVaultFactory.getAddress(...) and verify that `address` really belongs to this account — the derivation is the proof; no signature is needed. Fixed rkey `self`: one canonical wallet per account. While no code exists at the address and it holds no funds, the signer set and threshold may still change (the address is re-derived); once the vault is deployed on-chain this record is frozen and changes happen on-chain. Succeeds the legacy `app.gainforest.wallet.splitsVault` collection: records are read from both and migrated here on their next write."
    },
    "passkeySigner": {
      "type": "object",
      "required": [
        "kind",
        "publicKeyX",
        "publicKeyY",
        "credentialId",
        "memberDid",
        "addedAt"
      ],
      "properties": {
        "kind": {
          "enum": [
            "passkey"
          ],
          "type": "string"
        },
        "label": {
          "type": "string",
          "maxLength": 800,
          "description": "Plain-language signer label.",
          "maxGraphemes": 80
        },
        "addedAt": {
          "type": "string",
          "format": "datetime"
        },
        "memberDid": {
          "type": "string",
          "format": "did",
          "description": "DID of the account member this passkey belongs to."
        },
        "publicKeyX": {
          "type": "string",
          "description": "32-byte hex, secp256r1 public key X coordinate (SmartVault Signer slot1)."
        },
        "publicKeyY": {
          "type": "string",
          "description": "32-byte hex, secp256r1 public key Y coordinate (SmartVault Signer slot2)."
        },
        "credentialId": {
          "type": "string",
          "description": "WebAuthn credential id (base64url) so the member's browser can find the passkey again."
        }
      }
    }
  },
  "$type": "com.atproto.lexicon.schema",
  "lexicon": 1
}