@axonfi/sdk 0.10.0 → 0.11.0

package/dist/index.d.cts

@@ -249,13 +249,20 @@ declare const EXPLORER_TX: Record<number, string>;
 declare const EXPLORER_ADDR: Record<number, string>;
 /** Default intent validity window when no deadline is specified. */
 declare const DEFAULT_DEADLINE_SECONDS = 300;
-/** Window presets for SpendingLimit.windowSeconds. */
+/**
+ * Allowed window presets for SpendingLimit.windowSeconds.
+ * These are the ONLY values accepted by the contract — arbitrary
+ * durations are rejected on-chain with InvalidSpendingWindow().
+ */
 declare const WINDOW: {
     readonly ONE_HOUR: 3600n;
+    readonly THREE_HOURS: 10800n;
     readonly ONE_DAY: 86400n;
     readonly ONE_WEEK: 604800n;
     readonly THIRTY_DAYS: 2592000n;
 };
+/** Set of all allowed window values for validation. */
+declare const ALLOWED_WINDOWS: ReadonlySet<bigint>;
 /**
  * Structured error codes returned by the relayer when a payment is rejected.
  * Bots should import these to programmatically handle failures.
@@ -346,7 +353,7 @@ interface SpendingLimit {
     amount: bigint;
     /** Max number of transactions in this window. 0 = no count limit. */
     maxCount: bigint;
-    /** Window size: 3600=1h, 86400=1d, 604800=1w, 2592000=30d */
+    /** Window duration. Must be one of the allowed WINDOW values: 1h, 3h, 24h, 7d, 30d. */
     windowSeconds: bigint;
 }
 /** Per-bot configuration returned by getBotConfig(). */
@@ -379,7 +386,7 @@ interface SpendingLimitInput {
     amount: number;
     /** Max transactions in this window. 0 = no count limit. */
     maxCount: number;
-    /** Window size in seconds: 3600=1h, 86400=1d, 604800=1w. Use WINDOW constants. */
+    /** Window duration. Must be one of the allowed WINDOW values: 1h, 3h, 24h, 7d, 30d. */
     windowSeconds: number;
 }
 /**
@@ -812,6 +819,12 @@ declare class AxonClient {
      * The vault approves `token` to `protocol`, calls it with `callData`,
      * then revokes the approval. Tokens stay in the vault or go to the protocol
      * as specified by the calldata.
+     *
+     * **Approval rules for default tokens** (USDC, WETH, etc.): when calling
+     * `approve()` on a default token, the spender must be an approved protocol
+     * or swap router — the contract rejects arbitrary addresses. The approve
+     * amount is capped by the bot's `maxPerTxAmount` and counts toward
+     * spending limits.
      */
     execute(input: ExecuteInput): Promise<PaymentResult>;
     /**
@@ -1649,22 +1662,6 @@ declare const AxonVaultAbi: readonly [{
         readonly name: "signature";
         readonly type: "bytes";
         readonly internalType: "bytes";
-    }, {
-        readonly name: "fromToken";
-        readonly type: "address";
-        readonly internalType: "address";
-    }, {
-        readonly name: "maxFromAmount";
-        readonly type: "uint256";
-        readonly internalType: "uint256";
-    }, {
-        readonly name: "swapRouter";
-        readonly type: "address";
-        readonly internalType: "address";
-    }, {
-        readonly name: "swapCalldata";
-        readonly type: "bytes";
-        readonly internalType: "bytes";
     }];
     readonly outputs: readonly [];
     readonly stateMutability: "nonpayable";
@@ -1716,22 +1713,6 @@ declare const AxonVaultAbi: readonly [{
         readonly name: "callData";
         readonly type: "bytes";
         readonly internalType: "bytes";
-    }, {
-        readonly name: "fromToken";
-        readonly type: "address";
-        readonly internalType: "address";
-    }, {
-        readonly name: "maxFromAmount";
-        readonly type: "uint256";
-        readonly internalType: "uint256";
-    }, {
-        readonly name: "swapRouter";
-        readonly type: "address";
-        readonly internalType: "address";
-    }, {
-        readonly name: "swapCalldata";
-        readonly type: "bytes";
-        readonly internalType: "bytes";
     }];
     readonly outputs: readonly [{
         readonly name: "";
@@ -2863,46 +2844,6 @@ declare const AxonVaultAbi: readonly [{
         readonly internalType: "bytes32";
     }];
     readonly anonymous: false;
-}, {
-    readonly type: "event";
-    readonly name: "SwapPaymentExecuted";
-    readonly inputs: readonly [{
-        readonly name: "bot";
-        readonly type: "address";
-        readonly indexed: true;
-        readonly internalType: "address";
-    }, {
-        readonly name: "to";
-        readonly type: "address";
-        readonly indexed: true;
-        readonly internalType: "address";
-    }, {
-        readonly name: "fromToken";
-        readonly type: "address";
-        readonly indexed: false;
-        readonly internalType: "address";
-    }, {
-        readonly name: "toToken";
-        readonly type: "address";
-        readonly indexed: false;
-        readonly internalType: "address";
-    }, {
-        readonly name: "fromAmount";
-        readonly type: "uint256";
-        readonly indexed: false;
-        readonly internalType: "uint256";
-    }, {
-        readonly name: "toAmount";
-        readonly type: "uint256";
-        readonly indexed: false;
-        readonly internalType: "uint256";
-    }, {
-        readonly name: "ref";
-        readonly type: "bytes32";
-        readonly indexed: false;
-        readonly internalType: "bytes32";
-    }];
-    readonly anonymous: false;
 }, {
     readonly type: "event";
     readonly name: "Unpaused";
@@ -3013,10 +2954,6 @@ declare const AxonVaultAbi: readonly [{
     readonly type: "error";
     readonly name: "ExpectedPause";
     readonly inputs: readonly [];
-}, {
-    readonly type: "error";
-    readonly name: "InsufficientBalance";
-    readonly inputs: readonly [];
 }, {
     readonly type: "error";
     readonly name: "IntentAlreadyUsed";
@@ -3029,6 +2966,10 @@ declare const AxonVaultAbi: readonly [{
     readonly type: "error";
     readonly name: "InvalidSignature";
     readonly inputs: readonly [];
+}, {
+    readonly type: "error";
+    readonly name: "InvalidSpendingWindow";
+    readonly inputs: readonly [];
 }, {
     readonly type: "error";
     readonly name: "MaxPerTxExceeded";
@@ -3822,4 +3763,4 @@ declare const AxonRegistryAbi: readonly [{
     readonly inputs: readonly [];
 }];
 
-export { type AmountInput, AxonClient, type AxonClientConfig, AxonRegistryAbi, AxonVaultAbi, AxonVaultFactoryAbi, type BotConfig, type BotConfigInput, type BotConfigParams, CHAIN_NAMES, Chain, DEFAULT_APPROVED_TOKENS, DEFAULT_DEADLINE_SECONDS, type DestinationCheckResult, EIP712_DOMAIN_NAME, EIP712_DOMAIN_VERSION, EXECUTE_INTENT_TYPEHASH, EXPLORER_ADDR, EXPLORER_TX, type ExecuteInput, type ExecuteIntent, KNOWN_TOKENS, type KeystoreV3, type KnownToken, type KnownTokenSymbol, NATIVE_ETH, type OperatorCeilings, PAYMENT_INTENT_TYPEHASH, PERMIT2_ADDRESS, type PayInput, PaymentErrorCode, type PaymentIntent, type PaymentResult, type PaymentStatus, type Permit2Authorization, RELAYER_API, type RebalanceTokensResult, SUPPORTED_CHAIN_IDS, SWAP_INTENT_TYPEHASH, type SpendingLimit, type SpendingLimitInput, type SupportedChainId, type SwapInput, type SwapIntent, Token, type TokenInput, type TosStatus, type TransferAuthorization, USDC, USDC_EIP712_DOMAIN, type VaultInfo, WINDOW, WITNESS_TYPE_STRING, type X402HandleResult, type X402PaymentOption, type X402PaymentRequired, type X402Resource, X402_PROXY_ADDRESS, addBot, createAxonPublicClient, createAxonWalletClient, decryptKeystore, deployVault, deposit, encodeRef, encryptKeystore, extractX402Metadata, findMatchingOption, formatPaymentSignature, getBotConfig, getChain, getDefaultApprovedTokens, getDomainSeparator, getKnownTokensForChain, getOperatorCeilings, getRebalanceTokenCount, getTokenSymbolByAddress, getVaultOperator, getVaultOwner, getVaultVersion, isBotActive, isDestinationAllowed, isErc1271BotsEnabled, isRebalanceTokenWhitelisted, isVaultPaused, operatorMaxDrainPerDay, parseAmount, parseChainId, parsePaymentRequired, predictVaultAddress, randomNonce, randomPermit2Nonce, removeBot, resolveToken, resolveTokenDecimals, signExecuteIntent, signPayment, signPermit2WitnessTransfer, signSwapIntent, signTransferWithAuthorization, toBotConfigParams, updateBotConfig };
+export { ALLOWED_WINDOWS, type AmountInput, AxonClient, type AxonClientConfig, AxonRegistryAbi, AxonVaultAbi, AxonVaultFactoryAbi, type BotConfig, type BotConfigInput, type BotConfigParams, CHAIN_NAMES, Chain, DEFAULT_APPROVED_TOKENS, DEFAULT_DEADLINE_SECONDS, type DestinationCheckResult, EIP712_DOMAIN_NAME, EIP712_DOMAIN_VERSION, EXECUTE_INTENT_TYPEHASH, EXPLORER_ADDR, EXPLORER_TX, type ExecuteInput, type ExecuteIntent, KNOWN_TOKENS, type KeystoreV3, type KnownToken, type KnownTokenSymbol, NATIVE_ETH, type OperatorCeilings, PAYMENT_INTENT_TYPEHASH, PERMIT2_ADDRESS, type PayInput, PaymentErrorCode, type PaymentIntent, type PaymentResult, type PaymentStatus, type Permit2Authorization, RELAYER_API, type RebalanceTokensResult, SUPPORTED_CHAIN_IDS, SWAP_INTENT_TYPEHASH, type SpendingLimit, type SpendingLimitInput, type SupportedChainId, type SwapInput, type SwapIntent, Token, type TokenInput, type TosStatus, type TransferAuthorization, USDC, USDC_EIP712_DOMAIN, type VaultInfo, WINDOW, WITNESS_TYPE_STRING, type X402HandleResult, type X402PaymentOption, type X402PaymentRequired, type X402Resource, X402_PROXY_ADDRESS, addBot, createAxonPublicClient, createAxonWalletClient, decryptKeystore, deployVault, deposit, encodeRef, encryptKeystore, extractX402Metadata, findMatchingOption, formatPaymentSignature, getBotConfig, getChain, getDefaultApprovedTokens, getDomainSeparator, getKnownTokensForChain, getOperatorCeilings, getRebalanceTokenCount, getTokenSymbolByAddress, getVaultOperator, getVaultOwner, getVaultVersion, isBotActive, isDestinationAllowed, isErc1271BotsEnabled, isRebalanceTokenWhitelisted, isVaultPaused, operatorMaxDrainPerDay, parseAmount, parseChainId, parsePaymentRequired, predictVaultAddress, randomNonce, randomPermit2Nonce, removeBot, resolveToken, resolveTokenDecimals, signExecuteIntent, signPayment, signPermit2WitnessTransfer, signSwapIntent, signTransferWithAuthorization, toBotConfigParams, updateBotConfig };

package/dist/index.d.ts

@@ -249,13 +249,20 @@ declare const EXPLORER_TX: Record<number, string>;
 declare const EXPLORER_ADDR: Record<number, string>;
 /** Default intent validity window when no deadline is specified. */
 declare const DEFAULT_DEADLINE_SECONDS = 300;
-/** Window presets for SpendingLimit.windowSeconds. */
+/**
+ * Allowed window presets for SpendingLimit.windowSeconds.
+ * These are the ONLY values accepted by the contract — arbitrary
+ * durations are rejected on-chain with InvalidSpendingWindow().
+ */
 declare const WINDOW: {
     readonly ONE_HOUR: 3600n;
+    readonly THREE_HOURS: 10800n;
     readonly ONE_DAY: 86400n;
     readonly ONE_WEEK: 604800n;
     readonly THIRTY_DAYS: 2592000n;
 };
+/** Set of all allowed window values for validation. */
+declare const ALLOWED_WINDOWS: ReadonlySet<bigint>;
 /**
  * Structured error codes returned by the relayer when a payment is rejected.
  * Bots should import these to programmatically handle failures.
@@ -346,7 +353,7 @@ interface SpendingLimit {
     amount: bigint;
     /** Max number of transactions in this window. 0 = no count limit. */
     maxCount: bigint;
-    /** Window size: 3600=1h, 86400=1d, 604800=1w, 2592000=30d */
+    /** Window duration. Must be one of the allowed WINDOW values: 1h, 3h, 24h, 7d, 30d. */
     windowSeconds: bigint;
 }
 /** Per-bot configuration returned by getBotConfig(). */
@@ -379,7 +386,7 @@ interface SpendingLimitInput {
     amount: number;
     /** Max transactions in this window. 0 = no count limit. */
     maxCount: number;
-    /** Window size in seconds: 3600=1h, 86400=1d, 604800=1w. Use WINDOW constants. */
+    /** Window duration. Must be one of the allowed WINDOW values: 1h, 3h, 24h, 7d, 30d. */
     windowSeconds: number;
 }
 /**
@@ -812,6 +819,12 @@ declare class AxonClient {
      * The vault approves `token` to `protocol`, calls it with `callData`,
      * then revokes the approval. Tokens stay in the vault or go to the protocol
      * as specified by the calldata.
+     *
+     * **Approval rules for default tokens** (USDC, WETH, etc.): when calling
+     * `approve()` on a default token, the spender must be an approved protocol
+     * or swap router — the contract rejects arbitrary addresses. The approve
+     * amount is capped by the bot's `maxPerTxAmount` and counts toward
+     * spending limits.
      */
     execute(input: ExecuteInput): Promise<PaymentResult>;
     /**
@@ -1649,22 +1662,6 @@ declare const AxonVaultAbi: readonly [{
         readonly name: "signature";
         readonly type: "bytes";
         readonly internalType: "bytes";
-    }, {
-        readonly name: "fromToken";
-        readonly type: "address";
-        readonly internalType: "address";
-    }, {
-        readonly name: "maxFromAmount";
-        readonly type: "uint256";
-        readonly internalType: "uint256";
-    }, {
-        readonly name: "swapRouter";
-        readonly type: "address";
-        readonly internalType: "address";
-    }, {
-        readonly name: "swapCalldata";
-        readonly type: "bytes";
-        readonly internalType: "bytes";
     }];
     readonly outputs: readonly [];
     readonly stateMutability: "nonpayable";
@@ -1716,22 +1713,6 @@ declare const AxonVaultAbi: readonly [{
         readonly name: "callData";
         readonly type: "bytes";
         readonly internalType: "bytes";
-    }, {
-        readonly name: "fromToken";
-        readonly type: "address";
-        readonly internalType: "address";
-    }, {
-        readonly name: "maxFromAmount";
-        readonly type: "uint256";
-        readonly internalType: "uint256";
-    }, {
-        readonly name: "swapRouter";
-        readonly type: "address";
-        readonly internalType: "address";
-    }, {
-        readonly name: "swapCalldata";
-        readonly type: "bytes";
-        readonly internalType: "bytes";
     }];
     readonly outputs: readonly [{
         readonly name: "";
@@ -2863,46 +2844,6 @@ declare const AxonVaultAbi: readonly [{
         readonly internalType: "bytes32";
     }];
     readonly anonymous: false;
-}, {
-    readonly type: "event";
-    readonly name: "SwapPaymentExecuted";
-    readonly inputs: readonly [{
-        readonly name: "bot";
-        readonly type: "address";
-        readonly indexed: true;
-        readonly internalType: "address";
-    }, {
-        readonly name: "to";
-        readonly type: "address";
-        readonly indexed: true;
-        readonly internalType: "address";
-    }, {
-        readonly name: "fromToken";
-        readonly type: "address";
-        readonly indexed: false;
-        readonly internalType: "address";
-    }, {
-        readonly name: "toToken";
-        readonly type: "address";
-        readonly indexed: false;
-        readonly internalType: "address";
-    }, {
-        readonly name: "fromAmount";
-        readonly type: "uint256";
-        readonly indexed: false;
-        readonly internalType: "uint256";
-    }, {
-        readonly name: "toAmount";
-        readonly type: "uint256";
-        readonly indexed: false;
-        readonly internalType: "uint256";
-    }, {
-        readonly name: "ref";
-        readonly type: "bytes32";
-        readonly indexed: false;
-        readonly internalType: "bytes32";
-    }];
-    readonly anonymous: false;
 }, {
     readonly type: "event";
     readonly name: "Unpaused";
@@ -3013,10 +2954,6 @@ declare const AxonVaultAbi: readonly [{
     readonly type: "error";
     readonly name: "ExpectedPause";
     readonly inputs: readonly [];
-}, {
-    readonly type: "error";
-    readonly name: "InsufficientBalance";
-    readonly inputs: readonly [];
 }, {
     readonly type: "error";
     readonly name: "IntentAlreadyUsed";
@@ -3029,6 +2966,10 @@ declare const AxonVaultAbi: readonly [{
     readonly type: "error";
     readonly name: "InvalidSignature";
     readonly inputs: readonly [];
+}, {
+    readonly type: "error";
+    readonly name: "InvalidSpendingWindow";
+    readonly inputs: readonly [];
 }, {
     readonly type: "error";
     readonly name: "MaxPerTxExceeded";
@@ -3822,4 +3763,4 @@ declare const AxonRegistryAbi: readonly [{
     readonly inputs: readonly [];
 }];
 
-export { type AmountInput, AxonClient, type AxonClientConfig, AxonRegistryAbi, AxonVaultAbi, AxonVaultFactoryAbi, type BotConfig, type BotConfigInput, type BotConfigParams, CHAIN_NAMES, Chain, DEFAULT_APPROVED_TOKENS, DEFAULT_DEADLINE_SECONDS, type DestinationCheckResult, EIP712_DOMAIN_NAME, EIP712_DOMAIN_VERSION, EXECUTE_INTENT_TYPEHASH, EXPLORER_ADDR, EXPLORER_TX, type ExecuteInput, type ExecuteIntent, KNOWN_TOKENS, type KeystoreV3, type KnownToken, type KnownTokenSymbol, NATIVE_ETH, type OperatorCeilings, PAYMENT_INTENT_TYPEHASH, PERMIT2_ADDRESS, type PayInput, PaymentErrorCode, type PaymentIntent, type PaymentResult, type PaymentStatus, type Permit2Authorization, RELAYER_API, type RebalanceTokensResult, SUPPORTED_CHAIN_IDS, SWAP_INTENT_TYPEHASH, type SpendingLimit, type SpendingLimitInput, type SupportedChainId, type SwapInput, type SwapIntent, Token, type TokenInput, type TosStatus, type TransferAuthorization, USDC, USDC_EIP712_DOMAIN, type VaultInfo, WINDOW, WITNESS_TYPE_STRING, type X402HandleResult, type X402PaymentOption, type X402PaymentRequired, type X402Resource, X402_PROXY_ADDRESS, addBot, createAxonPublicClient, createAxonWalletClient, decryptKeystore, deployVault, deposit, encodeRef, encryptKeystore, extractX402Metadata, findMatchingOption, formatPaymentSignature, getBotConfig, getChain, getDefaultApprovedTokens, getDomainSeparator, getKnownTokensForChain, getOperatorCeilings, getRebalanceTokenCount, getTokenSymbolByAddress, getVaultOperator, getVaultOwner, getVaultVersion, isBotActive, isDestinationAllowed, isErc1271BotsEnabled, isRebalanceTokenWhitelisted, isVaultPaused, operatorMaxDrainPerDay, parseAmount, parseChainId, parsePaymentRequired, predictVaultAddress, randomNonce, randomPermit2Nonce, removeBot, resolveToken, resolveTokenDecimals, signExecuteIntent, signPayment, signPermit2WitnessTransfer, signSwapIntent, signTransferWithAuthorization, toBotConfigParams, updateBotConfig };
+export { ALLOWED_WINDOWS, type AmountInput, AxonClient, type AxonClientConfig, AxonRegistryAbi, AxonVaultAbi, AxonVaultFactoryAbi, type BotConfig, type BotConfigInput, type BotConfigParams, CHAIN_NAMES, Chain, DEFAULT_APPROVED_TOKENS, DEFAULT_DEADLINE_SECONDS, type DestinationCheckResult, EIP712_DOMAIN_NAME, EIP712_DOMAIN_VERSION, EXECUTE_INTENT_TYPEHASH, EXPLORER_ADDR, EXPLORER_TX, type ExecuteInput, type ExecuteIntent, KNOWN_TOKENS, type KeystoreV3, type KnownToken, type KnownTokenSymbol, NATIVE_ETH, type OperatorCeilings, PAYMENT_INTENT_TYPEHASH, PERMIT2_ADDRESS, type PayInput, PaymentErrorCode, type PaymentIntent, type PaymentResult, type PaymentStatus, type Permit2Authorization, RELAYER_API, type RebalanceTokensResult, SUPPORTED_CHAIN_IDS, SWAP_INTENT_TYPEHASH, type SpendingLimit, type SpendingLimitInput, type SupportedChainId, type SwapInput, type SwapIntent, Token, type TokenInput, type TosStatus, type TransferAuthorization, USDC, USDC_EIP712_DOMAIN, type VaultInfo, WINDOW, WITNESS_TYPE_STRING, type X402HandleResult, type X402PaymentOption, type X402PaymentRequired, type X402Resource, X402_PROXY_ADDRESS, addBot, createAxonPublicClient, createAxonWalletClient, decryptKeystore, deployVault, deposit, encodeRef, encryptKeystore, extractX402Metadata, findMatchingOption, formatPaymentSignature, getBotConfig, getChain, getDefaultApprovedTokens, getDomainSeparator, getKnownTokensForChain, getOperatorCeilings, getRebalanceTokenCount, getTokenSymbolByAddress, getVaultOperator, getVaultOwner, getVaultVersion, isBotActive, isDestinationAllowed, isErc1271BotsEnabled, isRebalanceTokenWhitelisted, isVaultPaused, operatorMaxDrainPerDay, parseAmount, parseChainId, parsePaymentRequired, predictVaultAddress, randomNonce, randomPermit2Nonce, removeBot, resolveToken, resolveTokenDecimals, signExecuteIntent, signPayment, signPermit2WitnessTransfer, signSwapIntent, signTransferWithAuthorization, toBotConfigParams, updateBotConfig };

package/dist/index.js

@@ -64,10 +64,12 @@ var EXPLORER_ADDR = {
 var DEFAULT_DEADLINE_SECONDS = 300;
 var WINDOW = {
   ONE_HOUR: 3600n,
+  THREE_HOURS: 10800n,
   ONE_DAY: 86400n,
   ONE_WEEK: 604800n,
   THIRTY_DAYS: 2592000n
 };
+var ALLOWED_WINDOWS = new Set(Object.values(WINDOW));
 var PaymentErrorCode = {
   /** Payment destination is the vault itself */
   SELF_PAYMENT: "SELF_PAYMENT",
@@ -670,26 +672,6 @@ var AxonVaultAbi = [
         "name": "signature",
         "type": "bytes",
         "internalType": "bytes"
-      },
-      {
-        "name": "fromToken",
-        "type": "address",
-        "internalType": "address"
-      },
-      {
-        "name": "maxFromAmount",
-        "type": "uint256",
-        "internalType": "uint256"
-      },
-      {
-        "name": "swapRouter",
-        "type": "address",
-        "internalType": "address"
-      },
-      {
-        "name": "swapCalldata",
-        "type": "bytes",
-        "internalType": "bytes"
       }
     ],
     "outputs": [],
@@ -755,26 +737,6 @@ var AxonVaultAbi = [
         "name": "callData",
         "type": "bytes",
         "internalType": "bytes"
-      },
-      {
-        "name": "fromToken",
-        "type": "address",
-        "internalType": "address"
-      },
-      {
-        "name": "maxFromAmount",
-        "type": "uint256",
-        "internalType": "uint256"
-      },
-      {
-        "name": "swapRouter",
-        "type": "address",
-        "internalType": "address"
-      },
-      {
-        "name": "swapCalldata",
-        "type": "bytes",
-        "internalType": "bytes"
       }
     ],
     "outputs": [
@@ -2231,55 +2193,6 @@ var AxonVaultAbi = [
     ],
     "anonymous": false
   },
-  {
-    "type": "event",
-    "name": "SwapPaymentExecuted",
-    "inputs": [
-      {
-        "name": "bot",
-        "type": "address",
-        "indexed": true,
-        "internalType": "address"
-      },
-      {
-        "name": "to",
-        "type": "address",
-        "indexed": true,
-        "internalType": "address"
-      },
-      {
-        "name": "fromToken",
-        "type": "address",
-        "indexed": false,
-        "internalType": "address"
-      },
-      {
-        "name": "toToken",
-        "type": "address",
-        "indexed": false,
-        "internalType": "address"
-      },
-      {
-        "name": "fromAmount",
-        "type": "uint256",
-        "indexed": false,
-        "internalType": "uint256"
-      },
-      {
-        "name": "toAmount",
-        "type": "uint256",
-        "indexed": false,
-        "internalType": "uint256"
-      },
-      {
-        "name": "ref",
-        "type": "bytes32",
-        "indexed": false,
-        "internalType": "bytes32"
-      }
-    ],
-    "anonymous": false
-  },
   {
     "type": "event",
     "name": "Unpaused",
@@ -2422,22 +2335,22 @@ var AxonVaultAbi = [
   },
   {
     "type": "error",
-    "name": "InsufficientBalance",
+    "name": "IntentAlreadyUsed",
     "inputs": []
   },
   {
     "type": "error",
-    "name": "IntentAlreadyUsed",
+    "name": "InvalidInitialization",
     "inputs": []
   },
   {
     "type": "error",
-    "name": "InvalidInitialization",
+    "name": "InvalidSignature",
     "inputs": []
   },
   {
     "type": "error",
-    "name": "InvalidSignature",
+    "name": "InvalidSpendingWindow",
     "inputs": []
   },
   {
@@ -3248,6 +3161,12 @@ function createAxonWalletClient(privateKey, chainId) {
 var USDC_DECIMALS = 6n;
 var USDC_UNIT = 10n ** USDC_DECIMALS;
 function toBotConfigParams(input) {
+  for (const sl of input.spendingLimits) {
+    if (!ALLOWED_WINDOWS.has(BigInt(sl.windowSeconds))) {
+      const allowed = [...ALLOWED_WINDOWS].map((w) => `${Number(w)}s`).join(", ");
+      throw new Error(`Invalid spending window: ${sl.windowSeconds}s. Allowed values: ${allowed}. Use WINDOW constants.`);
+    }
+  }
   return {
     maxPerTxAmount: BigInt(Math.round(input.maxPerTxAmount * Number(USDC_UNIT))),
     maxRebalanceAmount: BigInt(Math.round(input.maxRebalanceAmount * Number(USDC_UNIT))),
@@ -4007,6 +3926,12 @@ var AxonClient = class {
    * The vault approves `token` to `protocol`, calls it with `callData`,
    * then revokes the approval. Tokens stay in the vault or go to the protocol
    * as specified by the calldata.
+   *
+   * **Approval rules for default tokens** (USDC, WETH, etc.): when calling
+   * `approve()` on a default token, the spender must be an approved protocol
+   * or swap router — the contract rejects arbitrary addresses. The approve
+   * amount is capped by the bot's `maxPerTxAmount` and counts toward
+   * spending limits.
    */
   async execute(input) {
     const intent = this._buildExecuteIntent(input);
@@ -5033,6 +4958,6 @@ var AxonRegistryAbi = [
   }
 ];
 
-export { AxonClient, AxonRegistryAbi, AxonVaultAbi, AxonVaultFactoryAbi, CHAIN_NAMES, Chain, DEFAULT_APPROVED_TOKENS, DEFAULT_DEADLINE_SECONDS, EIP712_DOMAIN_NAME, EIP712_DOMAIN_VERSION, EXECUTE_INTENT_TYPEHASH, EXPLORER_ADDR, EXPLORER_TX, KNOWN_TOKENS, NATIVE_ETH, PAYMENT_INTENT_TYPEHASH, PERMIT2_ADDRESS, PaymentErrorCode, RELAYER_API, SUPPORTED_CHAIN_IDS, SWAP_INTENT_TYPEHASH, Token, USDC, USDC_EIP712_DOMAIN, WINDOW, WITNESS_TYPE_STRING, X402_PROXY_ADDRESS, addBot, createAxonPublicClient, createAxonWalletClient, decryptKeystore, deployVault, deposit, encodeRef, encryptKeystore, extractX402Metadata, findMatchingOption, formatPaymentSignature, getBotConfig, getChain, getDefaultApprovedTokens, getDomainSeparator, getKnownTokensForChain, getOperatorCeilings, getRebalanceTokenCount, getTokenSymbolByAddress, getVaultOperator, getVaultOwner, getVaultVersion, isBotActive, isDestinationAllowed, isErc1271BotsEnabled, isRebalanceTokenWhitelisted, isVaultPaused, operatorMaxDrainPerDay, parseAmount, parseChainId, parsePaymentRequired, predictVaultAddress, randomNonce, randomPermit2Nonce, removeBot, resolveToken, resolveTokenDecimals, signExecuteIntent, signPayment, signPermit2WitnessTransfer, signSwapIntent, signTransferWithAuthorization, toBotConfigParams, updateBotConfig };
+export { ALLOWED_WINDOWS, AxonClient, AxonRegistryAbi, AxonVaultAbi, AxonVaultFactoryAbi, CHAIN_NAMES, Chain, DEFAULT_APPROVED_TOKENS, DEFAULT_DEADLINE_SECONDS, EIP712_DOMAIN_NAME, EIP712_DOMAIN_VERSION, EXECUTE_INTENT_TYPEHASH, EXPLORER_ADDR, EXPLORER_TX, KNOWN_TOKENS, NATIVE_ETH, PAYMENT_INTENT_TYPEHASH, PERMIT2_ADDRESS, PaymentErrorCode, RELAYER_API, SUPPORTED_CHAIN_IDS, SWAP_INTENT_TYPEHASH, Token, USDC, USDC_EIP712_DOMAIN, WINDOW, WITNESS_TYPE_STRING, X402_PROXY_ADDRESS, addBot, createAxonPublicClient, createAxonWalletClient, decryptKeystore, deployVault, deposit, encodeRef, encryptKeystore, extractX402Metadata, findMatchingOption, formatPaymentSignature, getBotConfig, getChain, getDefaultApprovedTokens, getDomainSeparator, getKnownTokensForChain, getOperatorCeilings, getRebalanceTokenCount, getTokenSymbolByAddress, getVaultOperator, getVaultOwner, getVaultVersion, isBotActive, isDestinationAllowed, isErc1271BotsEnabled, isRebalanceTokenWhitelisted, isVaultPaused, operatorMaxDrainPerDay, parseAmount, parseChainId, parsePaymentRequired, predictVaultAddress, randomNonce, randomPermit2Nonce, removeBot, resolveToken, resolveTokenDecimals, signExecuteIntent, signPayment, signPermit2WitnessTransfer, signSwapIntent, signTransferWithAuthorization, toBotConfigParams, updateBotConfig };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map