feat: passing paymaster transactions

still need to setup tests and then integrate via auth server,
but root cause was entirely unrelated

Author: cpb8010

PASSKEY_PAYMASTER_DEBUG.md

@@ -2,11 +2,11 @@
 
 ## Problem Statement
 
-The **"Send with Paymaster (Passkey)"** button fails with AA23 error
-(signature validation failure) during gas estimation, while:
+The **"Send with Paymaster (Passkey)"** button fails with AA23 error (signature
+validation failure) during gas estimation, while:
 
-- ✅ **EOA + Paymaster** works correctly (confirmed: balance changed
-  0.1 → 0.09 ETH)
+- ✅ **EOA + Paymaster** works correctly (confirmed: balance changed 0.1 → 0.09
+  ETH)
 - ✅ **Passkey without Paymaster** works correctly
 - ✅ **Rust integration test** with passkey + paymaster passes all assertions
 - ❌ **Vue button** with passkey + paymaster consistently fails with AA23
@@ -29,8 +29,8 @@ The **"Send with Paymaster (Passkey)"** button fails with AA23 error
   - This sets `data: Bytes::default()` (**empty bytes**, not a flow type)
 - Calls `passkey_send_transaction()` which internally uses `send_user_op()`
 - Validates: sender only loses transfer amount (no gas fees paid by sender)
-- **Test assertion:** `sender_delta == amount` (only 1000 wei transferred,
-  no gas)
+- **Test assertion:** `sender_delta == amount` (only 1000 wei transferred, no
+  gas)
 
 ## Failing Implementation: Vue Button
 
@@ -69,8 +69,7 @@ AA23 reverted
 
 ### Error Code Meaning
 
-- **AA23** = Account's `validateAccountSignature()` reverted during
-  validation
+- **AA23** = Account's `validateAccountSignature()` reverted during validation
 - This is **NOT** a paymaster error (which would be AA33)
 - Occurs during gas estimation (`eth_call`) with state overrides
 - Not during actual transaction submission
@@ -81,8 +80,8 @@ The AA23 error during gas estimation suggests one of these:
 
 1. **Account state issue**: The passkey hasn't been registered properly or
    WebAuthn validator isn't installed as a module
-2. **Stub signature mismatch**: The stub signature used during gas
-   estimation doesn't match what the validator expects
+2. **Stub signature mismatch**: The stub signature used during gas estimation
+   doesn't match what the validator expects
 3. **Nonce state issue**: If account already used the passkey for other
    transactions, nonce validation might fail
 4. **State override problem**: The state override in the bundler's gas
@@ -178,8 +177,7 @@ in PaymasterParams constructor
 - [ ] Deploy Account
 - [ ] Fund Account (0.1 ETH)
 - [ ] Load WebAuthn Validator Address
-- [ ] Register Passkey (critical - installs WebAuthn validator
-  module)
+- [ ] Register Passkey (critical - installs WebAuthn validator module)
 - [ ] Fund Paymaster (1 ETH)
 - [ ] Verify Paymaster Balance shows > 0
 
@@ -188,8 +186,7 @@ in PaymasterParams constructor
 - ✅ Steps 1-5 complete successfully
 - ✅ Console logs show addresses are loaded
 - ❌ "Send with Paymaster (Passkey)" fails with AA23
-- Error occurs during bundler's gas estimation (eth_call
-  simulateValidation)
+- Error occurs during bundler's gas estimation (eth_call simulateValidation)
 
 ## Areas to Investigate
 
@@ -246,14 +243,12 @@ The WebAuthnValidator might have specific requirements:
 - Expected signature format (from `stub_signature_passkey_core`)
 - Validation might fail if account state isn't properly simulated
 - Validator code location:
-  `packages/erc4337-contracts/contracts/validators/
-  WebAuthnValidator.sol`
+  `packages/erc4337-contracts/contracts/validators/ WebAuthnValidator.sol`
 
 ## WASM FFI Flow Details
 
 **File:**
-`packages/sdk-platforms/rust/zksync-sso-erc4337/crates/
-zksync-sso-erc4337-ffi-web/src/lib.rs`
+`packages/sdk-platforms/rust/zksync-sso-erc4337/crates/ zksync-sso-erc4337-ffi-web/src/lib.rs`
 
 ### Paymaster Normalization (lines 340-379)
 
@@ -272,9 +267,8 @@ fn normalize_paymaster_params(pm: Option<PaymasterParams>) -> Option<PaymasterPa
 }
 ```
 
-**Note:** Hex decoding failures silently fall back to empty bytes.
-This is why "0x05" vs null shouldn't matter, but might indicate other
-issues.
+**Note:** Hex decoding failures silently fall back to empty bytes. This is why
+"0x05" vs null shouldn't matter, but might indicate other issues.
 
 ### UserOperation Preparation (lines 1186-1500)
 
@@ -327,8 +321,7 @@ const balance = await publicClient.getBalance({
 
 ### Anvil Logs
 
-Watch the Anvil terminal (Terminal "a") during "Send with Paymaster
-(Passkey)":
+Watch the Anvil terminal (Terminal "a") during "Send with Paymaster (Passkey)":
 
 - Should show `eth_call` with state overrides
 - Look for the account address in the calls
@@ -349,8 +342,7 @@ Check the bundler RPC calls in browser DevTools:
 
 ### Hypothesis 1: Module Not Installed
 
-After clicking "Register Passkey", the WebAuthn validator should be
-installed.
+After clicking "Register Passkey", the WebAuthn validator should be installed.
 
 **Test:**
 
@@ -370,8 +362,7 @@ console.log("WebAuthn validator installed:", isInstalled)
 
 The passkey credentials might not be stored properly.
 
-**Test:** Check the account's storage for passkey after "Register
-Passkey":
+**Test:** Check the account's storage for passkey after "Register Passkey":
 
 ```typescript
 // Get account's passkey registry state
@@ -423,11 +414,11 @@ const paymaster = new PaymasterParams(paymasterAddress, null, null, null);
 ### Core Logic
 
 - [lib.rs](packages/sdk-platforms/rust/zksync-sso-erc4337/crates/
-  zksync-sso-erc4337-ffi-web/src/lib.rs) -
-  `prepare_passkey_user_operation()`, `normalize_paymaster_params()`
+  zksync-sso-erc4337-ffi-web/src/lib.rs) - `prepare_passkey_user_operation()`,
+  `normalize_paymaster_params()`
 - [send.rs](packages/sdk-platforms/rust/zksync-sso-erc4337/crates/
-  zksync-sso-erc4337-core/src/erc4337/account/modular_smart_account/
-  send.rs) - `send_user_op()`
+  zksync-sso-erc4337-core/src/erc4337/account/modular_smart_account/ send.rs) -
+  `send_user_op()`
 - [passkey.rs](packages/sdk-platforms/rust/zksync-sso-erc4337/crates/
   zksync-sso-erc4337-core/src/erc4337/account/modular_smart_account/
   send/passkey.rs) - `passkey_send_transaction()`
@@ -443,28 +434,32 @@ const paymaster = new PaymasterParams(paymasterAddress, null, null, null);
 
 - [web-sdk-test.vue](examples/demo-app/pages/web-sdk-test.vue) -
   `sendWithPasskeyPaymaster()` (line 1449)
-- [TransactionSender.vue](examples/demo-app/components/
-  TransactionSender.vue) - Paymaster checkbox and submission
+- [TransactionSender.vue](examples/demo-app/components/ TransactionSender.vue) -
+  Paymaster checkbox and submission
 
 ## Next Steps for Debugging
 
 1. **Enable verbose logging:**
-   - Add `console.log()` statements in `prepare_passkey_user_operation()`
-     (Rust WASM)
+
+   - Add `console.log()` statements in `prepare_passkey_user_operation()` (Rust
+     WASM)
    - Log the prepared UserOperation before signing
    - Log the final paymaster field values
 
 2. **Test with reduced scope:**
+
    - Try sending without paymaster to confirm passkey works
    - Try EOA with paymaster to confirm paymaster works
    - Combine both to identify interaction issue
 
 3. **Compare UserOperations:**
+
    - Print full UserOp from working EOA + paymaster
    - Print full UserOp from failing Passkey + paymaster
    - Diff the two to find structural differences
 
 4. **Check state machine:**
+
    - Ensure "Register Passkey" actually installed the module
    - Verify account state includes registered passkey
    - Confirm nonce is correct before sending

examples/demo-app/pages/web-sdk-test.vue

@@ -1420,17 +1420,39 @@ async function fundPaymaster() {
     const deployerKey = eoaSignerPrivateKey;
     const deployerAccount = privateKeyToAccount(`0x${deployerKey}`);
 
-    // Create a simple transfer transaction
-    await createWalletClient({
+    const walletClient = createWalletClient({
       account: deployerAccount,
       chain: getChainConfig(contracts),
       transport: http(rpcUrl),
-    }).sendTransaction({
+    });
+
+    // Create a simple transfer transaction to fund the paymaster
+    await walletClient.sendTransaction({
       to: paymasterAddress as Address,
       value: parseEther(paymasterFundAmount.value),
       account: deployerAccount,
     });
 
+    // eslint-disable-next-line no-console
+    console.log("💰 Funded paymaster with", paymasterFundAmount.value, "ETH");
+
+    // Wait for confirmation
+    await new Promise((resolve) => setTimeout(resolve, 2000));
+
+    // Now deposit the funds into the EntryPoint by calling deposit()
+    // eslint-disable-next-line no-console
+    console.log("💳 Depositing funds into EntryPoint...");
+
+    await walletClient.sendTransaction({
+      to: paymasterAddress as Address,
+      data: "0xd0e30db0" as `0x${string}`, // deposit() function selector
+      value: parseEther(paymasterFundAmount.value),
+      account: deployerAccount,
+    });
+
+    // eslint-disable-next-line no-console
+    console.log("✅ Deposit complete");
+
     // Wait for confirmation
     await new Promise((resolve) => setTimeout(resolve, 2000));
     await fetchPaymasterBalance();
@@ -1488,8 +1510,26 @@ async function sendWithPasskeyPaymaster() {
 
     // Build config and paymaster params
     const config = new SendTransactionConfig(rpcUrl, bundlerUrl, entryPoint);
-    // Use empty data for paymaster (matching Rust test's default_paymaster)
-    const paymaster = new PaymasterParams(paymasterAddress, null, null, null);
+    // Passkey signatures are large and need more gas than ECDSA
+    // verificationGasLimit: 500k (passkey validation is expensive)
+    // postOpGasLimit: 1M (default)
+    const paymaster = new PaymasterParams(
+      paymasterAddress,
+      null,
+      "500000", // verification gas limit
+      null, // postOp will default to 1M
+    );
+
+    // eslint-disable-next-line no-console
+    console.log("🔧 Preparing passkey transaction with paymaster:", paymasterAddress);
+    // eslint-disable-next-line no-console
+    console.log("   EntryPoint:", entryPoint);
+    // eslint-disable-next-line no-console
+    console.log("   Account:", accountAddress);
+    // eslint-disable-next-line no-console
+    console.log("   To:", toAddress);
+    // eslint-disable-next-line no-console
+    console.log("   Amount:", amountWei, "wei");
 
     // Prepare user operation (includes paymaster into the prepared payload)
     const prepared = await prepare_passkey_user_operation(

examples/demo-app/scripts/deploy-msa-anvil.sh

@@ -55,6 +55,10 @@ echo "💰 Funding paymaster with 10 ETH..."
 ANVIL_ACCOUNT_0_KEY="0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80"
 cast send "$PAYMASTER" --value 10ether --private-key "$ANVIL_ACCOUNT_0_KEY" --rpc-url "$RPC_URL" 2>&1 || echo "Fund transfer initiated"
 
+# Deposit the paymaster's ETH into the EntryPoint
+echo "💳 Depositing 10 ETH into EntryPoint for paymaster..."
+cast send "$PAYMASTER" "deposit()" --value 10ether --private-key "$ANVIL_ACCOUNT_0_KEY" --rpc-url "$RPC_URL" 2>&1 || echo "Deposit initiated"
+
 # Verify all addresses were extracted
 if [ -z "$EOA_VALIDATOR" ] || [ -z "$SESSION_VALIDATOR" ] || [ -z "$WEBAUTHN_VALIDATOR" ] || \
   [ -z "$GUARDIAN_EXECUTOR" ] || [ -z "$ACCOUNT_IMPL" ] || [ -z "$BEACON" ] || [ -z "$FACTORY" ] || [ -z "$PAYMASTER" ]; then

examples/demo-app/smart-contracts/DeployPaymaster.s.sol

@@ -6,13 +6,17 @@ import { console } from "forge-std/console.sol";
 import { TestPaymaster } from "./TestPaymaster.sol";
 
 contract DeployPaymaster is Script {
+  // EntryPoint v0.8 canonical address
+  address constant ENTRY_POINT = 0x4337084D9E255Ff0702461CF8895CE9E3b5Ff108;
+
   function run() public {
     vm.startBroadcast();
 
-    TestPaymaster paymaster = new TestPaymaster();
+    TestPaymaster paymaster = new TestPaymaster(ENTRY_POINT);
 
     vm.stopBroadcast();
 
     console.log("TestPaymaster:", address(paymaster));
+    console.log("EntryPoint:", ENTRY_POINT);
   }
 }

examples/demo-app/smart-contracts/TestPaymaster.sol

@@ -3,6 +3,7 @@ pragma solidity ^0.8.28;
 
 import { IPaymaster } from "account-abstraction/interfaces/IPaymaster.sol";
 import { PackedUserOperation } from "account-abstraction/interfaces/PackedUserOperation.sol";
+import { IEntryPoint } from "account-abstraction/interfaces/IEntryPoint.sol";
 
 /// !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
 /// !!!                                !!!
@@ -14,6 +15,12 @@ import { PackedUserOperation } from "account-abstraction/interfaces/PackedUserOp
 /// !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
 
 contract TestPaymaster is IPaymaster {
+  IEntryPoint public immutable entryPoint;
+
+  constructor(address _entryPoint) {
+    entryPoint = IEntryPoint(_entryPoint);
+  }
+
   function validatePaymasterUserOp(
     PackedUserOperation calldata,
     bytes32,
@@ -24,5 +31,15 @@ contract TestPaymaster is IPaymaster {
 
   function postOp(PostOpMode, bytes calldata, uint256, uint256) external override {}
 
+  /// @notice Deposit funds into the EntryPoint for this paymaster
+  function deposit() external payable {
+    entryPoint.depositTo{ value: msg.value }(address(this));
+  }
+
+  /// @notice Withdraw funds from the EntryPoint
+  function withdrawTo(address payable withdrawAddress, uint256 amount) external {
+    entryPoint.withdrawTo(withdrawAddress, amount);
+  }
+
   receive() external payable {}
 }

packages/auth-server/stores/local-node.json

@@ -2,14 +2,14 @@
   "rpcUrl": "http://localhost:8545",
   "chainId": 1337,
   "deployer": "0xa0Ee7A142d267C1f36714E4a8F75612F20a79720",
-  "eoaValidator": "0xBf344DA0c5847266B9D7a8fcFcbb9449fc804B6B",
-  "sessionValidator": "0x2C94D758140037d36c139409c2380Bd4AC3f082b",
-  "webauthnValidator": "0x7fB73973d71dA68b5B7b9D29AEc7d278A16aA661",
-  "guardianExecutor": "0x1edB03d812A15782143E05ac212CC74baD076a43",
-  "accountImplementation": "0xE28FaF4bd406b7AE43e5DaA02cd5a53F96ADAb66",
-  "beacon": "0x3Cb6Ce4F4733420Ca17dAaC6B11c74a392d7EB10",
-  "factory": "0x48D1a5AD729a60Ab481cb61468474E36724eF33F",
-  "testPaymaster": "0x4A37478214848aD7362800934Ba0483Aa15A63aF",
+  "eoaValidator": "0xc6Dee041f1282a37Dad5693fb40fB7Bc48D9fBcA",
+  "sessionValidator": "0x94875ccFAD36B6d05E256be5CD8a4e006DEd81c8",
+  "webauthnValidator": "0x92729Db48438805E124b22c4750D25BEfc4aD27b",
+  "guardianExecutor": "0xdb2C5779eD86cBbFeD7cc2f184a120f3a6c71f02",
+  "accountImplementation": "0xd49b4bf75E90f8A839e2a93D8aa950370062259a",
+  "beacon": "0xED3D305AB07913c83d25993C114F43540D776a3F",
+  "factory": "0x2A45F0fbAbd71F1557737d13e7ad995b5162904e",
+  "testPaymaster": "0xDd72e46653662b0118A2743574467FAA582D633e",
   "entryPoint": "0x4337084D9E255Ff0702461CF8895CE9E3b5Ff108",
   "bundlerUrl": "http://localhost:4337"
 }