@1sat/permission-module 0.0.49 → 0.0.51

package/dist/listOutputsScope.test.js

@@ -0,0 +1,116 @@
+import { describe, expect, test } from 'bun:test';
+import { handleListOutputsRequest } from './basketAccess';
+import { CommitmentCache } from './commitmentCache';
+function mockStore() {
+    const map = new Map();
+    const keyOf = (k) => `${k.type}|${k.originator}|${k.basket ?? ''}`;
+    return {
+        async findGrant(key) {
+            const g = map.get(keyOf(key));
+            return g
+                ? {
+                    key,
+                    expiry: g.expiry,
+                    grantedAt: 0,
+                }
+                : null;
+        },
+        async putGrant(grant) {
+            map.set(keyOf(grant.key), { expiry: grant.expiry });
+        },
+    };
+}
+function deps(opts) {
+    return {
+        wallet: {},
+        promptHandler: opts.promptHandler ?? (async () => true),
+        cache: new CommitmentCache(60),
+        schemeId: '1sat',
+        ownedBaskets: new Set(['1sat']),
+        adminOriginator: opts.adminOriginator,
+        permissionStore: opts.permissionStore,
+    };
+}
+const COLL = 'collection:a1b2c3d4e5f6070890abcdef1234567890abcdef1234567890abcdef12345678_0';
+describe('handleListOutputsRequest scopes', () => {
+    test('rejects bare p 1sat', async () => {
+        await expect(handleListOutputsRequest(deps({}), { basket: 'p 1sat' }, 'app.example')).rejects.toThrow(/requires a scope/);
+    });
+    test('rejects collection scope without axis tag', async () => {
+        await expect(handleListOutputsRequest(deps({}), { basket: 'p 1sat collection' }, 'app.example')).rejects.toThrow(/requires at least one collection:/);
+    });
+    test('normalizes collection scope; keeps tags; forces all', async () => {
+        const next = await handleListOutputsRequest(deps({ promptHandler: async () => true }), {
+            basket: 'p 1sat collection',
+            tags: [COLL, 'type:image/png'],
+            tagQueryMode: 'any',
+        }, 'app.example');
+        expect(next.basket).toBe('1sat');
+        expect(next.tags).toEqual([COLL, 'type:image/png']);
+        expect(next.tagQueryMode).toBe('all');
+    });
+    test('p 1sat all does not require axis tags', async () => {
+        const next = await handleListOutputsRequest(deps({ promptHandler: async () => true }), {
+            basket: 'p 1sat all',
+            tags: ['type:image/png'],
+            tagQueryMode: 'any',
+        }, 'app.example');
+        expect(next.basket).toBe('1sat');
+        expect(next.tags).toEqual(['type:image/png']);
+        expect(next.tagQueryMode).toBe('any');
+    });
+    test('admin skips prompt', async () => {
+        let prompted = false;
+        await handleListOutputsRequest(deps({
+            adminOriginator: 'admin.local',
+            promptHandler: async () => {
+                prompted = true;
+                return true;
+            },
+        }), { basket: 'p 1sat all' }, 'admin.local');
+        expect(prompted).toBe(false);
+    });
+    test('p 1sat id auto-allows without view grant prompt', async () => {
+        let prompted = false;
+        const next = await handleListOutputsRequest(deps({
+            promptHandler: async () => {
+                prompted = true;
+                return true;
+            },
+        }), {
+            basket: 'p 1sat id',
+            tags: ['id:abc123'],
+        }, 'app.example');
+        expect(prompted).toBe(false);
+        expect(next.basket).toBe('1sat');
+        expect(next.tags).toEqual(['id:abc123']);
+        expect(next.tagQueryMode).toBe('all');
+    });
+    test('p 1sat id requires id: tag', async () => {
+        await expect(handleListOutputsRequest(deps({}), { basket: 'p 1sat id' }, 'app.example')).rejects.toThrow(/requires at least one id:/);
+    });
+    test('collection grant is per tag value', async () => {
+        const prompts = [];
+        const d = deps({
+            permissionStore: mockStore(),
+            promptHandler: async (req) => {
+                if (req.kind === 'basketAccess') {
+                    const baskets = req.payload.baskets;
+                    prompts.push(baskets.map((b) => b.basket));
+                }
+                return true;
+            },
+        });
+        const collB = 'collection:b1b2c3d4e5f6070890abcdef1234567890abcdef1234567890abcdef12345678_0';
+        await handleListOutputsRequest(d, { basket: 'p 1sat collection', tags: [COLL] }, 'app.example');
+        expect(prompts).toHaveLength(1);
+        expect(prompts[0][0]).toContain('a1b2c3d4');
+        prompts.length = 0;
+        await handleListOutputsRequest(d, { basket: 'p 1sat collection', tags: [COLL] }, 'app.example');
+        expect(prompts).toHaveLength(0);
+        await handleListOutputsRequest(d, { basket: 'p 1sat collection', tags: [collB] }, 'app.example');
+        expect(prompts).toHaveLength(1);
+        expect(prompts[0][0]).toContain('b1b2c3d4');
+    });
+});
+//# sourceMappingURL=listOutputsScope.test.js.map

package/dist/listOutputsScope.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listOutputsScope.test.js","sourceRoot":"","sources":["../src/listOutputsScope.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAEjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AAGzD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,SAAS,SAAS;IACjB,MAAM,GAAG,GAAG,IAAI,GAAG,EAA8B,CAAA;IACjD,MAAM,KAAK,GAAG,CAAC,CAAwD,EAAE,EAAE,CAC1E,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAA;IAC9C,OAAO;QACN,KAAK,CAAC,SAAS,CAAC,GAIf;YACA,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;YAC7B,OAAO,CAAC;gBACP,CAAC,CAAC;oBACA,GAAG;oBACH,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,SAAS,EAAE,CAAC;iBACZ;gBACF,CAAC,CAAC,IAAI,CAAA;QACR,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,KAGd;YACA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QACpD,CAAC;KACsC,CAAA;AACzC,CAAC;AAED,SAAS,IAAI,CAAC,IAIb;IACA,OAAO;QACN,MAAM,EAAE,EAAW;QACnB,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;QACvD,KAAK,EAAE,IAAI,eAAe,CAAC,EAAE,CAAC;QAC9B,QAAQ,EAAE,MAAe;QACzB,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,eAAe,EAAE,IAAI,CAAC,eAAe;KACrC,CAAA;AACF,CAAC;AAED,MAAM,IAAI,GACT,+EAA+E,CAAA;AAEhF,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAChD,IAAI,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,MAAM,CACX,wBAAwB,CACvB,IAAI,CAAC,EAAE,CAAC,EACR,EAAE,MAAM,EAAE,QAAQ,EAAqB,EACvC,aAAa,CACb,CACD,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,CACX,wBAAwB,CACvB,IAAI,CAAC,EAAE,CAAC,EACR,EAAE,MAAM,EAAE,mBAAmB,EAAqB,EAClD,aAAa,CACb,CACD,CAAC,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAC1C,IAAI,CAAC,EAAE,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,EACzC;YACC,MAAM,EAAE,mBAAmB;YAC3B,IAAI,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC;YAC9B,YAAY,EAAE,KAAK;SACA,EACpB,aAAa,CACb,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAA;QACnD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAC1C,IAAI,CAAC,EAAE,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,EACzC;YACC,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,CAAC,gBAAgB,CAAC;YACxB,YAAY,EAAE,KAAK;SACA,EACpB,aAAa,CACb,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAA;QAC7C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;QACrC,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,MAAM,wBAAwB,CAC7B,IAAI,CAAC;YACJ,eAAe,EAAE,aAAa;YAC9B,aAAa,EAAE,KAAK,IAAI,EAAE;gBACzB,QAAQ,GAAG,IAAI,CAAA;gBACf,OAAO,IAAI,CAAA;YACZ,CAAC;SACD,CAAC,EACF,EAAE,MAAM,EAAE,YAAY,EAAqB,EAC3C,aAAa,CACb,CAAA;QACD,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAClE,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAC1C,IAAI,CAAC;YACJ,aAAa,EAAE,KAAK,IAAI,EAAE;gBACzB,QAAQ,GAAG,IAAI,CAAA;gBACf,OAAO,IAAI,CAAA;YACZ,CAAC;SACD,CAAC,EACF;YACC,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,CAAC,WAAW,CAAC;SACA,EACpB,aAAa,CACb,CAAA;QACD,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,CACX,wBAAwB,CACvB,IAAI,CAAC,EAAE,CAAC,EACR,EAAE,MAAM,EAAE,WAAW,EAAqB,EAC1C,aAAa,CACb,CACD,CAAC,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,OAAO,GAAe,EAAE,CAAA;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC;YACd,eAAe,EAAE,SAAS,EAAE;YAC5B,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBACjC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,OAA+B,CAAA;oBAC3D,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;gBAC3C,CAAC;gBACD,OAAO,IAAI,CAAA;YACZ,CAAC;SACD,CAAC,CAAA;QACF,MAAM,KAAK,GACV,+EAA+E,CAAA;QAEhF,MAAM,wBAAwB,CAC7B,CAAC,EACD,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAqB,EAChE,aAAa,CACb,CAAA;QACD,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAE3C,OAAO,CAAC,MAAM,GAAG,CAAC,CAAA;QAClB,MAAM,wBAAwB,CAC7B,CAAC,EACD,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAqB,EAChE,aAAa,CACb,CAAA;QACD,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAE/B,MAAM,wBAAwB,CAC7B,CAAC,EACD,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAqB,EACjE,aAAa,CACb,CAAA;QACD,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/promptModel.d.ts

@@ -0,0 +1,115 @@
+import type { TrustState } from './enrichIntent';
+/**
+ * Serializable prompt IR.
+ *
+ * Built once in the permission module after parse/enrich. The UI only renders
+ * these fields — it does not re-classify scripts, tags, or baskets.
+ */
+export type PreviewKind = 'image' | 'text' | 'json' | 'html' | 'svg' | 'opns' | 'none';
+export type PanelVariant = 'ordinal' | 'token' | 'value';
+/** Visual tone — burn panels use danger. */
+export type PanelTone = 'default' | 'danger';
+export type ValueIcon = 'lock' | 'unlock' | 'pay';
+/** One labeled detail line under a panel title. */
+export interface PromptDetailRow {
+    key: string;
+    /** Display value (may be shortened for addresses/origins). */
+    value: string;
+    /** Full string for clipboard when shortened. */
+    copyValue?: string;
+}
+/**
+ * One self-contained card block (ordinal edge, lock/pay, token, …).
+ * Media and action copy are settled before this crosses the wire.
+ */
+export interface PromptPanel {
+    title: string;
+    subtitle?: string;
+    subtitleCopy?: string;
+    meta?: PromptDetailRow[];
+    variant?: PanelVariant;
+    previewKind?: PreviewKind;
+    /** Image / avatar URL when preview is image or opns avatar. */
+    imageUrl?: string;
+    /** Fetch URL for text/json/html/svg previews. */
+    contentUrl?: string;
+    /** Inline body when the script was decoded (mint / no OrdFS URL yet). */
+    previewText?: string;
+    /** Full sat amount for value panels — never truncated in the UI. */
+    amountSats?: number;
+    valueIcon?: ValueIcon;
+    /** OpNS profile name shown as hero text when previewKind is opns. */
+    opnsHero?: string;
+    /** Burn / destructive ops — subtle danger chrome. */
+    tone?: PanelTone;
+}
+/**
+ * Reserved for admin pre-fund (BRC-29 payment UTXOs applied before prompt).
+ * Omit until pre-fund lands — structure is here so panels are not ordinal-only.
+ */
+export interface PromptFunding {
+    networkFeeSats?: number;
+    fundingInputSats?: number;
+    changeSats?: number;
+    note?: string;
+}
+/** Overlay/indexer fee (not miner fee). */
+export interface PromptIndexerFee {
+    sats: number;
+    note?: string;
+}
+export interface PromptTrust {
+    state: TrustState;
+    note?: string;
+}
+/**
+ * Facts verifyIntent needs without the UI re-deriving them from tags.
+ * Optional — only purchases/hint paths set trust + verify.
+ */
+export interface PromptVerifyContext {
+    kind: string;
+    inputs: Array<{
+        basket: string;
+        id: string;
+        outpoint: string;
+        satoshis: number;
+        tags: string[];
+        /** Case-preserving fields (sym, name) — tags are lowercased by BRC-100. */
+        customInstructions?: string;
+    }>;
+    outputs: Array<{
+        index: number;
+        satoshis: number;
+        basket?: string;
+        tags: string[];
+        recipient?: string;
+        listingPriceSats?: number;
+    }>;
+    contentUrls?: Record<string, string>;
+}
+/**
+ * Transaction prompt payload (`PromptRequest.kind === 'transaction'`).
+ * Pure data — no functions, safe across process boundaries.
+ */
+/**
+ * Serializable transaction approval view: title, panels, fees.
+ * Not a classification taxonomy — pure display IR from one parse.
+ */
+export interface TransactionPrompt {
+    /** Header title — currently always "Transaction Request". */
+    title: string;
+    /** Header subtitle — originator line. */
+    subtitle: string;
+    /** Primary body: one panel per op (ordinal edge, lock, pay, …). */
+    panels: PromptPanel[];
+    /** Secondary lines that are not full panels (leftover seals, etc.). */
+    rows: PromptDetailRow[];
+    trust?: PromptTrust;
+    indexerFee?: PromptIndexerFee;
+    /** Present after pre-fund; reserved until then. */
+    funding?: PromptFunding;
+    /** Purchase verification context for the host UI. */
+    verify?: PromptVerifyContext;
+}
+export declare function isTransactionPrompt(value: unknown): value is TransactionPrompt;
+//# sourceMappingURL=promptModel.d.ts.map

package/dist/promptModel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptModel.d.ts","sourceRoot":"","sources":["../src/promptModel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEhD;;;;;GAKG;AAEH,MAAM,MAAM,WAAW,GACpB,OAAO,GACP,MAAM,GACN,MAAM,GACN,MAAM,GACN,KAAK,GACL,MAAM,GACN,MAAM,CAAA;AAET,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAA;AAExD,4CAA4C;AAC5C,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAA;AAE5C,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;AAEjD,mDAAmD;AACnD,MAAM,WAAW,eAAe;IAC/B,GAAG,EAAE,MAAM,CAAA;IACX,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAA;IACb,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,IAAI,CAAC,EAAE,eAAe,EAAE,CAAA;IACxB,OAAO,CAAC,EAAE,YAAY,CAAA;IACtB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,qDAAqD;IACrD,IAAI,CAAC,EAAE,SAAS,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;CACb;AAED,2CAA2C;AAC3C,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,WAAW;IAC3B,KAAK,EAAE,UAAU,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,KAAK,CAAC;QACb,MAAM,EAAE,MAAM,CAAA;QACd,EAAE,EAAE,MAAM,CAAA;QACV,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,IAAI,EAAE,MAAM,EAAE,CAAA;QACd,2EAA2E;QAC3E,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAC3B,CAAC,CAAA;IACF,OAAO,EAAE,KAAK,CAAC;QACd,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,IAAI,EAAE,MAAM,EAAE,CAAA;QACd,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,gBAAgB,CAAC,EAAE,MAAM,CAAA;KACzB,CAAC,CAAA;IACF,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACpC;AAED;;;GAGG;AACH;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IACjC,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAA;IACb,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,MAAM,EAAE,WAAW,EAAE,CAAA;IACrB,uEAAuE;IACvE,IAAI,EAAE,eAAe,EAAE,CAAA;IACvB,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B,mDAAmD;IACnD,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,qDAAqD;IACrD,MAAM,CAAC,EAAE,mBAAmB,CAAA;CAC5B;AAED,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,OAAO,GACZ,KAAK,IAAI,iBAAiB,CAI5B"}

package/dist/promptModel.js

@@ -0,0 +1,7 @@
+export function isTransactionPrompt(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const o = value;
+    return Array.isArray(o.panels) && typeof o.title === 'string';
+}
+//# sourceMappingURL=promptModel.js.map

package/dist/promptModel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptModel.js","sourceRoot":"","sources":["../src/promptModel.ts"],"names":[],"mappings":"AAqIA,MAAM,UAAU,mBAAmB,CAClC,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACrD,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAA;AAC9D,CAAC"}

package/dist/types.d.ts

@@ -1,3 +1,4 @@
+import type { PermissionSchemeId } from '@1sat/types';
 import type { IPermissionStore } from '@1sat/wallet';
 import type { WalletInterface } from '@bsv/sdk';
 /**
@@ -33,17 +34,13 @@ export interface PromptRequest {
     kind: PromptKind;
     originator: string;
     /**
-     * Context payload for the host UI.
+     * Host UI data.
      *
-     * Transaction kind (typical fields the UI consumes):
-     * - `p1satIntent` — e.g. `opns.register`, `ordinal.transfer`
-     * - `inputs` / `outputs` / `contentUrls` — assets, recipients, ORDFS/icon URLs
-     * - `trust?` — `{ state: 'verified'|'unverified'|'mismatch', note? }` purchases
-     * - `indexerFeeSats?` / `indexerFeeNote?` — overlay fee (not miner/DSAP)
-     *
-     * For `kind: 'basketAccess'`: `{ baskets: BasketAccessRequest[] }`.
+     * Transaction: {@link import('./promptModel').TransactionPrompt}
+     * (panels already built — UI only renders).
+     * basketAccess: `{ baskets: BasketAccessRequest[] }`.
      */
-    intent: Record<string, unknown>;
+    payload: Record<string, unknown>;
     /** Short human-readable summary line. Filled in by the module. */
     summary: string;
 }
@@ -52,8 +49,17 @@ export interface PromptRequest {
  * `kind: 'basketAccess'` prompt intent.
  */
 export interface BasketAccessRequest {
+    /** Grant key (e.g. `p 1sat collection <id>` or plain `1sat`). */
     basket: string;
     description?: string;
+    /** View axis when this is a scoped grant (`collection` / `app` / `creator` / `all`). */
+    scope?: string;
+    /** Axis filter value (e.g. collection outpoint). Always show when set. */
+    value?: string;
+    /** Optional display name (e.g. OrdFS MAP name for a collection). */
+    name?: string;
+    /** Optional preview image URL (OrdFS content). */
+    imageUrl?: string;
 }
 /**
  * Callback the host wallet provides for showing prompts and awaiting
@@ -93,14 +99,24 @@ export interface VerificationServices {
             token?: {
                 sym?: string;
                 dec?: string | number;
+                icon?: string;
             };
             status?: {
                 is_active?: boolean;
             };
         } | null>;
+        /**
+         * Validate outpoints against the token overlay topic.
+         * Returns only those found (optionally unspent).
+         */
+        validateOutputs?(tokenId: string, outpoints: string[], opts?: {
+            unspent?: boolean;
+        }): Promise<Array<{
+            outpoint: string;
+        }>>;
     };
 }
-/** Args accepted by `createOneSatPermissionModule`. */
+/** Args accepted by `createOneSatPermissionModule` / scheme modules. */
 export interface CreateOneSatPermissionModuleArgs {
     /**
      * The underlying wallet (NOT the WalletPermissionsManager wrapper).
@@ -110,6 +126,16 @@ export interface CreateOneSatPermissionModuleArgs {
     wallet: WalletInterface;
     /** UI callback for prompting the user. */
     promptHandler: PromptHandler;
+    /**
+     * BRC-99 scheme id this module instance handles (e.g. `1sat`, `opns`, `bsv21`).
+     * Default `1sat`.
+     */
+    schemeId?: PermissionSchemeId;
+    /**
+     * Storage baskets this module may gate on list/internalize.
+     * Default: `[schemeId]` (scheme id === basket name).
+     */
+    baskets?: readonly string[];
     /**
      * Optional persistent grant store consulted before prompting for
      * basket-access on P-baskets. Same `IPermissionStore` instance the

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAE/C;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,KAAK,CAAA;AAEhD,iEAAiE;AACjE,MAAM,WAAW,kBAAkB;IAClC,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAA;IACnB,+DAA+D;IAC/D,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAChC,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAClB,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,gEAAgE;AAChE,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,cAAc,CAAA;AAElF;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,UAAU,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB;;;;;;;;;;OAUG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IACnC,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAExE;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACpC,KAAK,CAAC,EAAE;QACP,YAAY,CAAC,CACZ,SAAS,EAAE,MAAM,EAAE,GACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,GAAG,IAAI,CAAC,CAAC,CAAA;QACnI;;;WAGG;QACH,aAAa,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAA;KACxC,CAAA;IACD,IAAI,CAAC,EAAE;QACN,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC,CAAA;KAC5E,CAAA;IACD,KAAK,CAAC,EAAE;QACP,eAAe,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;YAC1C,KAAK,CAAC,EAAE;gBAAE,GAAG,CAAC,EAAE,MAAM,CAAC;gBAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;aAAE,CAAA;YAC/C,MAAM,CAAC,EAAE;gBAAE,SAAS,CAAC,EAAE,OAAO,CAAA;aAAE,CAAA;SAChC,GAAG,IAAI,CAAC,CAAA;KACT,CAAA;CACD;AAED,uDAAuD;AACvD,MAAM,WAAW,gCAAgC;IAChD;;;;OAIG;IACH,MAAM,EAAE,eAAe,CAAA;IACvB,0CAA0C;IAC1C,aAAa,EAAE,aAAa,CAAA;IAC5B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,gBAAgB,CAAA;IAClC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,oBAAoB,CAAA;IAC/B,4DAA4D;IAC5D,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;CACxB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAE/C;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,KAAK,CAAA;AAEhD,iEAAiE;AACjE,MAAM,WAAW,kBAAkB;IAClC,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAA;IACnB,+DAA+D;IAC/D,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAChC,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAClB,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,gEAAgE;AAChE,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,cAAc,CAAA;AAElF;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,UAAU,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB;;;;;;OAMG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IACnC,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,wFAAwF;IACxF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAExE;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACpC,KAAK,CAAC,EAAE;QACP,YAAY,CAAC,CACZ,SAAS,EAAE,MAAM,EAAE,GACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,GAAG,IAAI,CAAC,CAAC,CAAA;QACnI;;;WAGG;QACH,aAAa,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAA;KACxC,CAAA;IACD,IAAI,CAAC,EAAE;QACN,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC,CAAA;KAC5E,CAAA;IACD,KAAK,CAAC,EAAE;QACP,eAAe,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;YAC1C,KAAK,CAAC,EAAE;gBACP,GAAG,CAAC,EAAE,MAAM,CAAA;gBACZ,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;gBACrB,IAAI,CAAC,EAAE,MAAM,CAAA;aACb,CAAA;YACD,MAAM,CAAC,EAAE;gBAAE,SAAS,CAAC,EAAE,OAAO,CAAA;aAAE,CAAA;SAChC,GAAG,IAAI,CAAC,CAAA;QACT;;;WAGG;QACH,eAAe,CAAC,CACf,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EAAE,EACnB,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,GAC1B,OAAO,CAAC,KAAK,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAA;KACvC,CAAA;CACD;AAED,wEAAwE;AACxE,MAAM,WAAW,gCAAgC;IAChD;;;;OAIG;IACH,MAAM,EAAE,eAAe,CAAA;IACvB,0CAA0C;IAC1C,aAAa,EAAE,aAAa,CAAA;IAC5B;;;OAGG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B;;;OAGG;IACH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,gBAAgB,CAAA;IAClC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,oBAAoB,CAAA;IAC/B,4DAA4D;IAC5D,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;CACxB"}

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAA"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAA"}

package/dist/verifyIntent.d.ts

@@ -8,8 +8,6 @@ export interface VerificationResult {
     note?: string;
     /** Content type confirmed by ORDFS, when it answered. */
     contentType?: string;
-    /** Content length in bytes confirmed by ORDFS, when it answered. */
-    contentLength?: number;
     /**
      * True origin as resolved by ORDFS.
      *
@@ -24,10 +22,12 @@ export interface VerificationResult {
     contentUrl?: string;
 }
 /**
- * Verify the assets on a purchase intent.
+ * Verify assets on a purchase or BSV21 transfer.
  *
  * Returns `unverified` for anything we cannot positively confirm, including
  * when no services are wired at all. Never throws.
  */
-export declare function verifyIntent(services: VerificationServices | undefined, p1satIntent: string | undefined, inputs: EnrichedAsset[], outputs: EnrichedOutput[], contentUrlForOrigin?: (origin: string) => string): Promise<VerificationResult>;
+export declare function verifyIntent(services: VerificationServices | undefined, 
+/** Prompt kind from script/heuristic classify, or legacy intent id. */
+kindOrIntent: string | undefined, inputs: EnrichedAsset[], outputs: EnrichedOutput[], contentUrlForOrigin?: (origin: string) => string): Promise<VerificationResult>;
 //# sourceMappingURL=verifyIntent.d.ts.map

package/dist/verifyIntent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verifyIntent.d.ts","sourceRoot":"","sources":["../src/verifyIntent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAEnD,+EAA+E;AAC/E,eAAO,MAAM,uBAAuB,OAAO,CAAA;AAE3C,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,UAAU,CAAA;IACjB,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oEAAoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAA;CACnB;AA8HD;;;;;GAKG;AACH,wBAAsB,YAAY,CACjC,QAAQ,EAAE,oBAAoB,GAAG,SAAS,EAC1C,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,MAAM,EAAE,aAAa,EAAE,EACvB,OAAO,EAAE,cAAc,EAAE,EACzB,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAC9C,OAAO,CAAC,kBAAkB,CAAC,CA+C7B"}
+{"version":3,"file":"verifyIntent.d.ts","sourceRoot":"","sources":["../src/verifyIntent.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAEnD,+EAA+E;AAC/E,eAAO,MAAM,uBAAuB,OAAO,CAAA;AAE3C,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,UAAU,CAAA;IACjB,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAA;CACnB;AAyKD;;;;;GAKG;AACH,wBAAsB,YAAY,CACjC,QAAQ,EAAE,oBAAoB,GAAG,SAAS;AAC1C,uEAAuE;AACvE,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,MAAM,EAAE,aAAa,EAAE,EACvB,OAAO,EAAE,cAAc,EAAE,EACzB,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAC9C,OAAO,CAAC,kBAAkB,CAAC,CA4G7B"}

package/dist/verifyIntent.js

@@ -1,3 +1,4 @@
+import { formatOrdinalOutpoint } from '@1sat/types';
 /** How long any single verification lookup may take before it is abandoned. */
 export const VERIFICATION_TIMEOUT_MS = 2000;
 /**
@@ -36,21 +37,21 @@ async function verifyOrdinal(services, origin, claimedTypes = []) {
     const ordfs = services.ordfs;
     if (typeof ordfs?.bulkMetadata !== 'function')
         return { state: 'unverified' };
-    // `:-2` resolves the outpoint to its origin before returning metadata.
-    // Querying the raw outpoint is wrong for anything already moved or listed —
-    // an OrdLock output carries no inscription, so ORDFS answers with an empty
-    // record rather than the asset.
+    // `:-2` is only an ORDFS request suffix (resolve tip → origin metadata).
+    // It is not part of asset identity and must not be required to match
+    // response map keys beyond looking up the bulk result.
     const key = `${origin}:-2`;
-    // Called on the client, not detached — these are class methods that use `this`.
     const res = await withTimeout(ordfs.bulkMetadata([key]));
-    const meta = res?.[key] ?? res?.[origin];
+    // Prefer exact key, then bare origin, then any record that carried content.
+    const meta = res?.[key] ??
+        res?.[origin] ??
+        Object.values(res ?? {}).find((m) => !!m?.contentType);
     // An empty record means "nothing inscribed here", not a description of the
     // asset — treat it as no answer rather than as evidence.
     if (!meta?.contentType)
         return { state: 'unverified' };
     const resolved = {
         contentType: meta.contentType,
-        contentLength: meta.contentLength,
         // ORDFS resolves the true genesis; the tagged value is usually the
         // seller's listing outpoint. Not treated as a mismatch — the claimed
         // value is an outpoint by construction, not a competing assertion.
@@ -86,8 +87,11 @@ async function verifyOpns(services, name, origin) {
     }
     return { state: 'verified' };
 }
-/** Verify a BSV21 token is active on the overlay. */
-async function verifyBsv21(services, tokenId, claimedSym) {
+/**
+ * Verify a BSV21 token is active and that spent inputs are valid unspent
+ * outs on the token overlay topic.
+ */
+async function verifyBsv21(services, tokenId, claimedSym, inputOutpoints = []) {
     const bsv21 = services.bsv21;
     if (typeof bsv21?.getTokenDetails !== 'function')
         return { state: 'unverified' };
@@ -98,20 +102,60 @@ async function verifyBsv21(services, tokenId, claimedSym) {
         return { state: 'mismatch', note: 'Token is not active on the overlay' };
     }
     const sym = res.token?.sym;
-    if (claimedSym && sym && claimedSym !== sym) {
-        return { state: 'mismatch', note: `Token symbol is ${sym}, not ${claimedSym}` };
+    // Tags are lowercased by BRC-100; CI/overlay preserve case — compare ignore-case.
+    if (claimedSym &&
+        sym &&
+        claimedSym.toLowerCase() !== sym.toLowerCase()) {
+        return {
+            state: 'mismatch',
+            note: `Token symbol is ${sym}, not ${claimedSym}`,
+        };
     }
-    return { state: 'verified' };
+    // Validate spent token UTXOs against the overlay (same check sendBsv21 uses).
+    if (inputOutpoints.length > 0 && typeof bsv21.validateOutputs === 'function') {
+        const validated = await withTimeout(bsv21.validateOutputs(tokenId, inputOutpoints, { unspent: true }));
+        if (!validated)
+            return { state: 'unverified' };
+        const ok = new Set(validated.map((v) => formatOrdinalOutpoint(v.outpoint)));
+        const missing = inputOutpoints.filter((op) => !ok.has(formatOrdinalOutpoint(op)));
+        if (missing.length > 0) {
+            return {
+                state: 'mismatch',
+                note: missing.length === 1
+                    ? 'A spent token output is not valid on the overlay'
+                    : `${missing.length} spent token outputs are not valid on the overlay`,
+            };
+        }
+    }
+    return {
+        state: 'verified',
+        // Case-preserving symbol from overlay for the card subtitle.
+        ...(sym ? { name: sym } : {}),
+    };
 }
 /**
- * Verify the assets on a purchase intent.
+ * Verify assets on a purchase or BSV21 transfer.
  *
  * Returns `unverified` for anything we cannot positively confirm, including
  * when no services are wired at all. Never throws.
  */
-export async function verifyIntent(services, p1satIntent, inputs, outputs, contentUrlForOrigin) {
-    if (!services || !p1satIntent)
+export async function verifyIntent(services, 
+/** Prompt kind from script/heuristic classify, or legacy intent id. */
+kindOrIntent, inputs, outputs, contentUrlForOrigin) {
+    if (!services || !kindOrIntent)
         return { state: 'unverified' };
+    const isPurchase = kindOrIntent === 'purchase' || kindOrIntent.endsWith('.purchase');
+    const isTokenTransfer = kindOrIntent === 'token-transfer' ||
+        kindOrIntent.startsWith('bsv21.');
+    if (!isPurchase && !isTokenTransfer)
+        return { state: 'unverified' };
+    const debug = {
+        kindOrIntent,
+        hasOrdfs: !!services.ordfs,
+        hasBulk: typeof services.ordfs?.bulkMetadata === 'function',
+        inputTagSets: inputs.map((i) => i.tags),
+        outputTagSets: outputs.map((o) => o.tags),
+    };
     try {
         const allTags = [...inputs.map((i) => i.tags), ...outputs.map((o) => o.tags)];
         const findAll = (key) => allTags.flatMap((tags) => tags
@@ -125,36 +169,72 @@ export async function verifyIntent(services, p1satIntent, inputs, outputs, conte
             }
             return undefined;
         };
-        switch (p1satIntent) {
-            case 'ordinal.purchase': {
-                const origin = find('origin');
-                if (!origin)
-                    return { state: 'unverified' };
-                const res = await verifyOrdinal(services, origin, findAll('type'));
-                // Preview URL follows the *resolved* origin, not the tagged one —
-                // a listing outpoint has no content to serve.
-                return res.origin && contentUrlForOrigin
-                    ? { ...res, contentUrl: contentUrlForOrigin(res.origin) }
-                    : res;
+        // BSV21: token active + spent inputs valid on overlay.
+        const tokenId = find('bsv21');
+        if (tokenId ||
+            kindOrIntent === 'bsv21.purchase' ||
+            kindOrIntent === 'token-transfer' ||
+            kindOrIntent.startsWith('bsv21.')) {
+            if (!tokenId)
+                return { state: 'unverified' };
+            const tokenInputs = inputs.filter((i) => i.basket?.includes('bsv21') ||
+                i.tags.some((t) => t.startsWith('bsv21:')));
+            const outpoints = tokenInputs
+                .map((i) => i.outpoint)
+                .filter(Boolean);
+            // Prefer case-preserving CI sym over lowercased tags.
+            let claimedSym = find('sym');
+            for (const inp of inputs) {
+                if (!inp.customInstructions)
+                    continue;
+                try {
+                    const s = JSON.parse(inp.customInstructions).sym;
+                    if (typeof s === 'string' && s.trim()) {
+                        claimedSym = s.trim();
+                        break;
+                    }
+                }
+                catch {
+                    // ignore
+                }
             }
-            case 'opns.purchase': {
-                const name = find('name');
-                const origin = find('origin');
-                if (!name || !origin)
-                    return { state: 'unverified' };
-                return await verifyOpns(services, name, origin);
+            return await verifyBsv21(services, tokenId, claimedSym, outpoints);
+        }
+        const name = find('name');
+        const origin = find('origin');
+        debug.name = name;
+        debug.origin = origin;
+        if ((name && origin && outputs.some((o) => o.basket?.includes('opns'))) ||
+            kindOrIntent === 'opns.purchase') {
+            if (!name || !origin)
+                return { state: 'unverified' };
+            return await verifyOpns(services, name, origin);
+        }
+        if (!origin) {
+            debug.reason = 'no-origin-tag';
+            globalThis.__lastVerify = debug;
+            return { state: 'unverified' };
+        }
+        const res = await verifyOrdinal(services, origin, findAll('type'));
+        debug.verifyOrdinal = res;
+        // contentUrl is optional polish — never let a URL helper wipe a verified result
+        // (e.g. unbound getContentUrl losing `this` and throwing).
+        if (res.origin && contentUrlForOrigin) {
+            try {
+                res.contentUrl = contentUrlForOrigin(res.origin);
             }
-            case 'bsv21.purchase': {
-                const tokenId = find('bsv21');
-                if (!tokenId)
-                    return { state: 'unverified' };
-                return await verifyBsv21(services, tokenId, find('sym'));
+            catch (e) {
+                debug.contentUrlError = String(e);
             }
-            default:
-                return { state: 'unverified' };
         }
+        ;
+        globalThis.__lastVerify = debug;
+        return res;
     }
-    catch {
+    catch (e) {
+        debug.error = String(e);
+        globalThis.__lastVerify =
+            debug;
         return { state: 'unverified' };
     }
 }