Smart Contracts & Multi-sigs

interface IOnchainActionManager {
    function submit(uint256 actionType, bytes calldata data) external payable returns (uint256 actionId);
}

uint256 constant SET_SESSION_KEY = 51;
// Protocol scope codes — see /authentication/access-scopes.
uint256 constant SCOPE_TRADE_ALL = 2;
uint256 constant SCOPE_TRANSFER_EXISTING_SUBACCOUNT = 12;

/// Called by the owner contract itself, so msg.sender is the account owner.
function authorizeSessionKey(IOnchainActionManager manager, address sessionKey, uint256 expirySec) external {
    // SetSessionKeyActionData — standard `abi.encode(address, uint256,
    // uint256[] scopes, uint256[] subaccountIds)`.
    uint256[] memory scopes = new uint256[](2);
    scopes[0] = SCOPE_TRADE_ALL;
    scopes[1] = SCOPE_TRANSFER_EXISTING_SUBACCOUNT;
    uint256[] memory subaccountIds = new uint256[](0); // empty = all subaccounts
    bytes memory data = abi.encode(sessionKey, expirySec, scopes, subaccountIds);
    manager.submit(SET_SESSION_KEY, data);
}

import { DeriveClient, ProtocolScopeCode } from '@derivexyz/derive-ts';
import { Wallet } from 'ethers';

const client = new DeriveClient({ network: 'mainnet', ownerAddress: MULTISIG_ADDRESS });

// A signer connected to the chain RPC that executes the OnchainActionManager
// transaction as the account owner (an owner EOA, a Safe module, etc.).
const signer = new Wallet(process.env.OWNER_KEY!, provider);

// Register a trading session key via L1.
await client.onchainActions.setSessionKey({
  signer,
  sessionKey: SESSION_KEY_ADDRESS,
  expirySec: Math.floor(Date.now() / 1000) + 30 * 24 * 3600,
  scopes: [ProtocolScopeCode.TradeAll, ProtocolScopeCode.TransferExistingSubaccount],
});

# Open an issue in derivexyz/derive-py if you'd like this implemented in the SDK.

// Open an issue in derivexyz/derive-rs if you'd like this implemented in the SDK.

// Revoke: a Set Session Key with expiry 0.
await client.onchainActions.revokeSessionKey({ signer, sessionKey: SESSION_KEY_ADDRESS });

// Revoke = Set Session Key with expiry 0 (deletes the key).
// IOnchainActionManager as declared in the previous step.
function revokeSessionKey(IOnchainActionManager manager, address sessionKey) external {
    uint256[] memory empty = new uint256[](0);
    bytes memory data = abi.encode(sessionKey, uint256(0), empty, empty); // expiry 0 = delete
    manager.submit(51, data);
}