@chipi-stack/backend 14.13.0 → 14.14.0

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import * as _chipi_stack_types from '@chipi-stack/types';
-import { CreateSessionKeyParams, SessionKeyData, AddSessionKeyParams, RevokeSessionKeyParams, GetSessionDataParams, SessionDataResponse, ExecuteWithSessionParams, SetSpendingPolicyParams, GetSpendingPolicyParams, SpendingPolicyData, RemoveSpendingPolicyParams, Currency, PaymasterAdapter, PaymasterAccount, X402FacilitatorConfig, NonceStore, PaymentPayload, VerifyResponse, SettleResponse, ChipiSDKConfig, ExecuteTransactionParams, SignTypedDataParams, SignTypedDataResult, TransferParams, ApproveParams, CallAnyContractParams, CreateWalletParams, CreateWalletResponse, RecordSendTransactionParams, Transaction, GetTransactionListQuery, PaginatedResponse, GetWalletParams, GetTokenBalanceParams, GetTokenBalanceResponse, CreateSkuPurchaseParams, GetSkuListQuery, Sku, TransactionStatusResponse, PrepareWalletUpgradeParams, PrepareWalletUpgradeResponse, ExecuteWalletUpgradeParams, ExecuteWalletUpgradeResponse, ChipiServerSDKConfig, ChipiBrowserSDKConfig, X402ClientConfig, PaymentRequirement, X402PaymentConfig, ShhhSignerKind } from '@chipi-stack/types';
+import { CreateSessionKeyParams, SessionKeyData, AddSessionKeyParams, SetupSessionParams, RevokeSessionKeyParams, GetSessionDataParams, SessionDataResponse, ExecuteWithSessionParams, SetSpendingPolicyParams, GetSpendingPolicyParams, SpendingPolicyData, RemoveSpendingPolicyParams, Currency, AiSignalsParams, AiSignals, ThinkParams, ThinkResponse, AiExecuteParams, AiExecuteResponse, AiChatParams, AiChatResponse, AiPricesParams, AiPrices, AiModelsResponse, ThinkDecision, PaymasterAdapter, PaymasterAccount, X402FacilitatorConfig, NonceStore, PaymentPayload, VerifyResponse, SettleResponse, ChipiSDKConfig, ExecuteTransactionParams, SignTypedDataParams, SignTypedDataResult, TransferParams, ApproveParams, CallAnyContractParams, CreateWalletParams, CreateWalletResponse, RecordSendTransactionParams, Transaction, GetTransactionListQuery, PaginatedResponse, GetWalletParams, GetTokenBalanceParams, GetTokenBalanceResponse, CreateSkuPurchaseParams, GetSkuListQuery, Sku, TransactionStatusResponse, PrepareWalletUpgradeParams, PrepareWalletUpgradeResponse, ExecuteWalletUpgradeParams, ExecuteWalletUpgradeResponse, ChipiServerSDKConfig, ChipiBrowserSDKConfig, SessionConfig, Call as Call$1, SpendingPolicyConfig, X402ClientConfig, PaymentRequirement, X402PaymentConfig, ShhhSignerKind } from '@chipi-stack/types';
 export * from '@chipi-stack/types';
 export { Chain, ChainToken, Currency } from '@chipi-stack/types';
 import { C as ChipiWallets } from './wallets-CYCLyyXY.mjs';
@@ -101,6 +101,31 @@ declare class ChipiSessions {
      * ```
      */
     addSessionKeyToContract(params: AddSessionKeyParams, bearerToken: string): Promise<string>;
+    /**
+     * Register a session and its spending policies in ONE owner-signed transaction.
+     *
+     * Equivalent to `addSessionKeyToContract` followed by one `setSpendingPolicy`
+     * per token, but the owner signs once (one passkey prompt) and the session
+     * never exists on-chain without its caps.
+     *
+     * @example
+     * ```typescript
+     * const txHash = await sdk.sessions.setupSession({
+     *   encryptKey,
+     *   wallet,
+     *   sessionConfig: {
+     *     sessionPublicKey: session.publicKey,
+     *     validUntil: session.validUntil,
+     *     maxCalls: 500,
+     *     allowedEntrypoints: ["transfer", "approve"],
+     *   },
+     *   spendingPolicies: [
+     *     { token: USDC, maxPerCall: 5_000_000n, maxPerWindow: 20_000_000n, windowSeconds: 86400 },
+     *   ],
+     * }, bearerToken);
+     * ```
+     */
+    setupSession(params: SetupSessionParams, bearerToken: string): Promise<string>;
     /**
      * Revoke a session key from the smart contract.
      *
@@ -192,10 +217,6 @@ declare class ChipiSessions {
      * ```
      */
     executeTransactionWithSession(params: ExecuteWithSessionParams, bearerToken: string): Promise<string>;
-    /**
-     * Split a bigint into Cairo u256 representation (low u128, high u128).
-     */
-    private splitU256;
     /**
      * Reconstruct a bigint from Cairo u256 (low, high) hex strings.
      */
@@ -564,6 +585,80 @@ declare class ChipiTreasury {
     forTreasury(config: ForTreasuryConfig): TreasuryTransport;
 }
 
+/**
+ * Whether `/v1/ai/think` returned a structured decision you can act on.
+ *
+ * `false` for a non-JSON reply (`{ raw }`) and for any `action` outside
+ * `swap | supply | withdraw | hold`. Treat `false` as `hold`. This checks the
+ * shape only: the amounts and tokens are still yours to validate.
+ */
+declare function isThinkDecision(decision: unknown): decision is ThinkDecision;
+/**
+ * Chipi AI API: prices, market signals, a DeFi decision engine, swap call
+ * building and general chat, billed to your organization's credits.
+ *
+ * Server-only. Every method authenticates with the SDK's secret key (`sk_`)
+ * and refuses to run without one, so a public key in the browser can never
+ * spend your credits through this client.
+ *
+ * Errors come back as `ChipiApiError` with the API's code and HTTP status:
+ * `INSUFFICIENT_BALANCE` (402) when credits run out, `MODEL_RATE_LIMITED`
+ * (429), `SIGNALS_UNAVAILABLE` (503) while signals warm up after a backend restart.
+ *
+ * @example
+ * ```typescript
+ * const sdk = new ChipiServerSDK({ apiPublicKey, apiSecretKey });
+ *
+ * const signals = await sdk.ai.signals({ tokens: ["ETH", "STRK"] });
+ * const { decision } = await sdk.ai.think({ portfolio, riskScore: 4 });
+ * if (isThinkDecision(decision) && decision.action === "swap") {
+ *   const { calls } = await sdk.ai.execute({
+ *     chain: "starknet",
+ *     action: "swap",
+ *     from: decision.from!,
+ *     to: decision.to!,
+ *     amountUsd: 10,
+ *     walletAddress,
+ *   });
+ * }
+ * ```
+ */
+declare class ChipiAi {
+    private client;
+    private apiSecretKey?;
+    constructor(client: ChipiClient, apiSecretKey?: string | undefined);
+    private secret;
+    /**
+     * `GET /v1/ai/signals`: technical signals per token, market sentiment and
+     * DeFi yields. Free up to a monthly quota per organization, then billed per call.
+     */
+    signals(params?: AiSignalsParams): Promise<AiSignals>;
+    /**
+     * `POST /v1/ai/think`: one DeFi decision for a portfolio, with the latest
+     * signals and your risk parameters injected into the prompt.
+     *
+     * The decision is advice, not an order: check it with `isThinkDecision` and
+     * enforce your own limits before executing anything.
+     */
+    think(params: ThinkParams): Promise<ThinkResponse>;
+    /**
+     * `POST /v1/ai/execute`: unsigned AVNU swap calls (approve + swap) for
+     * `walletAddress`. Nothing is submitted; sign the calls with a session key
+     * or the owner's key.
+     */
+    execute(params: AiExecuteParams): Promise<AiExecuteResponse>;
+    /** `POST /v1/ai/chat`: general-purpose chat, billed per token. */
+    chat(params: AiChatParams): Promise<AiChatResponse>;
+    /**
+     * `GET /v1/ai/prices`: USD prices and 1h / 24h / 7d changes, refreshed about
+     * every 30 seconds. No credits are charged, but like every `sdk.ai` method it
+     * needs the SDK's secret key (`sk_`).
+     */
+    prices(params?: AiPricesParams): Promise<AiPrices>;
+    /** `GET /v1/ai/models`: available models, prices and limits. */
+    models(): Promise<AiModelsResponse>;
+}
+
 /**
  * PaymasterAdapter implementation that uses Chipi's backend API for gasless transactions.
  *
@@ -666,6 +761,8 @@ declare class ChipiSDK {
     readonly sessions: ChipiSessions;
     readonly exchanges: ChipiExchanges;
     readonly treasury: ChipiTreasury;
+    /** AI API (`/v1/ai/*`). Server-only: needs `apiSecretKey` (`sk_`). */
+    readonly ai: ChipiAi;
     constructor(config: ChipiSDKConfig);
     /**
      * Resolve bearer token - uses provided token or falls back to apiSecretKey
@@ -953,6 +1050,47 @@ declare const signTypedDataArray: ({ params, }: {
     params: SignTypedDataParams;
 }) => Promise<string[]>;
 
+/** `add_or_update_session_key(session_key, valid_until, max_calls, allowed_entrypoints)` */
+declare function buildAddSessionKeyCall(walletAddress: string, sessionConfig: SessionConfig): Call$1;
+/** `revoke_session_key(session_key)` */
+declare function buildRevokeSessionKeyCall(walletAddress: string, sessionPublicKey: string): Call$1;
+/**
+ * Validate a spending policy the way the contract interprets it.
+ * Throws `INVALID_SPENDING_POLICY`.
+ */
+declare function validateSpendingPolicyConfig(config: SpendingPolicyConfig): void;
+/**
+ * `set_spending_policy(session_key, token, max_per_call: u256, max_per_window: u256, window_seconds: u64)`
+ *
+ * Contract semantics worth knowing: `maxPerWindow = 0` disables the policy
+ * (unlimited), `maxPerCall = 0` with a window blocks every metered spend, and
+ * only `transfer` / `approve` / `increase_allowance` are metered.
+ */
+declare function buildSetSpendingPolicyCall(walletAddress: string, config: SpendingPolicyConfig): Call$1;
+/** `remove_spending_policy(session_key, token)` */
+declare function buildRemoveSpendingPolicyCall(walletAddress: string, sessionPublicKey: string, token: string): Call$1;
+/**
+ * Register a session and cap it per token in one multicall: the session is
+ * added first, then one `set_spending_policy` per entry. Each policy's
+ * `sessionPublicKey` must match the session being registered.
+ */
+declare function buildSessionSetupCalls(walletAddress: string, sessionConfig: SessionConfig, spendingPolicies?: ReadonlyArray<Omit<SpendingPolicyConfig, "sessionPublicKey">>): Call$1[];
+
+/**
+ * Normalize a session whitelist to the hex selectors the contract compares against.
+ *
+ * `add_or_update_session_key` stores raw felts and the account matches them
+ * against `call.selector`, so every entry must be a selector. Names were
+ * previously forwarded unchanged: on CHIPI the paymaster encoded `"transfer"`
+ * as a short string (registration succeeded, every session call then failed the
+ * whitelist); on SHHH `BigInt("transfer")` threw while serialising calldata.
+ *
+ * - `0x…` hex and decimal felts pass through (as hex).
+ * - Cairo identifiers (`"transfer"`, `"multi_route_swap"`) become their selector.
+ * - Anything else throws `SESSION_ENTRYPOINT_NOT_ALLOWED`.
+ */
+declare function normalizeEntrypoints(entrypoints: readonly string[]): string[];
+
 /**
  * Wait for a Starknet transaction and report what happened, without throwing
  * on an on-chain revert.
@@ -1200,6 +1338,107 @@ interface X402MiddlewareFlatConfig {
  */
 declare function x402Middleware(config: X402MiddlewareConfig | X402MiddlewareFlatConfig): (req: any, res: any, next: any) => Promise<any>;
 
+/**
+ * Remembers which transaction hashes already paid for something.
+ *
+ * `consume` must be atomic: return `true` the first time a hash is seen and
+ * `false` on every later call, also across concurrent requests. Back it with a
+ * unique index in your database (`INSERT ... ON CONFLICT DO NOTHING`) in
+ * production; the default in-memory store forgets everything on restart and is
+ * not shared between instances.
+ */
+interface TxHashStore {
+    /**
+     * `transactionHash` arrives normalised: lowercase `0x` hex without leading
+     * zeros, so `0x0abc` and `0x000…abc` are the same key. Pad it yourself if you
+     * compare it with RPC output.
+     */
+    consume(transactionHash: string): boolean | Promise<boolean>;
+}
+interface SessionTxVerifierConfig extends WaitForTransactionOptions {
+    /** Default: in memory (single process, lost on restart). */
+    txHashStore?: TxHashStore;
+    /** Receipt source. Default: `waitForTransaction` with the options above. */
+    getReceipt?: (transactionHash: string, options: WaitForTransactionOptions) => Promise<WaitForTransactionResult>;
+}
+interface VerifyTransferParams {
+    /** The hash the payer sent you, e.g. from `executeTransactionWithSession`. */
+    transactionHash: string;
+    /** ERC-20 contract, e.g. USDC. */
+    token: string;
+    /** The paying wallet. */
+    from: string;
+    /** Your receiving address. */
+    to: string;
+    /** Smallest acceptable amount, in the token's base units. */
+    minAmount: bigint;
+}
+type VerifyTransferFailure = 
+/** The transaction reverted on chain. */
+"REVERTED"
+/** No `Transfer` from `token` with this `from` and `to`. */
+ | "TRANSFER_NOT_FOUND"
+/** A matching `Transfer` exists but moved less than `minAmount`. */
+ | "AMOUNT_TOO_LOW"
+/** This hash already paid for something (replay). */
+ | "ALREADY_USED";
+type VerifyTransferResult = {
+    valid: true;
+    transactionHash: string;
+    amount: bigint;
+    blockNumber?: number;
+} | {
+    valid: false;
+    transactionHash: string;
+    reason: VerifyTransferFailure;
+    detail?: string;
+};
+/**
+ * Check on chain that a transaction paid you, and that it pays only once.
+ *
+ * Use it when a client pays by sending the transfer itself (for example an
+ * agent with a session key calling `executeTransactionWithSession`) and hands
+ * you the hash. A transaction hash, or a `SUCCESS` status from an API, is not
+ * proof of payment: the transfer may have reverted, gone elsewhere, moved less,
+ * or already been used for an earlier request. This reads the receipt and
+ * accepts only a successful transaction whose `Transfer` event from `token`
+ * moves at least `minAmount` from `from` to `to`, then consumes the hash.
+ *
+ * Opt-in and independent of `X402Facilitator`, whose behaviour is unchanged.
+ *
+ * **Who is `from`.** Transaction hashes and `Transfer` events are public. If
+ * `from` comes from the request, anyone watching your address can submit a
+ * payer's hash first and consume it: they get the service, the payer gets
+ * `ALREADY_USED`. Take `from` from the caller's authenticated identity (your
+ * session, an API key bound to a wallet) whenever you have one. For anonymous
+ * payers this is first-come-first-served; keep it to low-value calls.
+ *
+ * `verifyTransfer` waits for the transaction to be sequenced and throws only
+ * when it cannot tell (timeout, RPC failure): retry those. Every other outcome
+ * is a result.
+ *
+ * @example
+ * ```typescript
+ * const verifier = new SessionTxVerifier({ txHashStore: dbStore });
+ *
+ * const result = await verifier.verifyTransfer({
+ *   transactionHash,
+ *   token: USDC,
+ *   from: agentWallet,
+ *   to: TREASURY,
+ *   minAmount: 1_000n, // $0.001 in USDC base units
+ * });
+ * if (!result.valid) return new Response(result.reason, { status: 402 });
+ * ```
+ */
+declare class SessionTxVerifier {
+    private readonly store;
+    private readonly getReceipt;
+    private readonly receiptOptions;
+    constructor(config?: SessionTxVerifierConfig);
+    verifyTransfer(params: VerifyTransferParams): Promise<VerifyTransferResult>;
+}
+
 /**
  * SNIP-12 typed-data hash for `OutsideExecution` — TypeScript reference.
  *
@@ -2777,4 +3016,4 @@ declare class ShhhAccount {
  */
 declare function submitViaAccount(funded: Account): ShhhSubmit;
 
-export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, type ApproveBody, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiTreasury, ChipiWallets, type ComputeAddressInput, type ContractEventLog, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, type ExecuteResult, type ForTreasuryConfig, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, type ListTreasuriesOptions, type ListTreasuriesResult, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type MultisigAllowance, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, type ProposeBody, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, type SetTreasuryPolicyOptions, ShhhAccount, type ShhhAccountOptions, type ShhhExecuteOptions, type ShhhSignedExecution, type ShhhSubmit, type ShhhX402Wallet, TIMELOCK_SECONDS, type TreasuryPolicy, type TreasuryProposal, type TreasuryProposalSignature, type TreasurySummary, type TreasuryTransport, VIEW_SELECTORS, type WaitForTransactionOptions, type WaitForTransactionResult, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519OwnerPubkeyParam, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191OwnerPubkeyParam, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, signTypedDataArray, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, submitViaAccount, waitForTransaction, webauthnOwnerId, webauthnOwnerPubkeyParam, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };
+export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, type ApproveBody, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiAi, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiTreasury, ChipiWallets, type ComputeAddressInput, type ContractEventLog, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, type ExecuteResult, type ForTreasuryConfig, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, type ListTreasuriesOptions, type ListTreasuriesResult, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type MultisigAllowance, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, type ProposeBody, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, SessionTxVerifier, type SessionTxVerifierConfig, type SetTreasuryPolicyOptions, ShhhAccount, type ShhhAccountOptions, type ShhhExecuteOptions, type ShhhSignedExecution, type ShhhSubmit, type ShhhX402Wallet, TIMELOCK_SECONDS, type TreasuryPolicy, type TreasuryProposal, type TreasuryProposalSignature, type TreasurySummary, type TreasuryTransport, type TxHashStore, VIEW_SELECTORS, type VerifyTransferFailure, type VerifyTransferParams, type VerifyTransferResult, type WaitForTransactionOptions, type WaitForTransactionResult, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildAddSessionKeyCall, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildRemoveSpendingPolicyCall, buildRevokeSessionKeyCall, buildSessionSetupCalls, buildSetSpendingPolicyCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519OwnerPubkeyParam, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191OwnerPubkeyParam, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, isThinkDecision, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, normalizeEntrypoints, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, signTypedDataArray, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, submitViaAccount, validateSpendingPolicyConfig, waitForTransaction, webauthnOwnerId, webauthnOwnerPubkeyParam, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import * as _chipi_stack_types from '@chipi-stack/types';
-import { CreateSessionKeyParams, SessionKeyData, AddSessionKeyParams, RevokeSessionKeyParams, GetSessionDataParams, SessionDataResponse, ExecuteWithSessionParams, SetSpendingPolicyParams, GetSpendingPolicyParams, SpendingPolicyData, RemoveSpendingPolicyParams, Currency, PaymasterAdapter, PaymasterAccount, X402FacilitatorConfig, NonceStore, PaymentPayload, VerifyResponse, SettleResponse, ChipiSDKConfig, ExecuteTransactionParams, SignTypedDataParams, SignTypedDataResult, TransferParams, ApproveParams, CallAnyContractParams, CreateWalletParams, CreateWalletResponse, RecordSendTransactionParams, Transaction, GetTransactionListQuery, PaginatedResponse, GetWalletParams, GetTokenBalanceParams, GetTokenBalanceResponse, CreateSkuPurchaseParams, GetSkuListQuery, Sku, TransactionStatusResponse, PrepareWalletUpgradeParams, PrepareWalletUpgradeResponse, ExecuteWalletUpgradeParams, ExecuteWalletUpgradeResponse, ChipiServerSDKConfig, ChipiBrowserSDKConfig, X402ClientConfig, PaymentRequirement, X402PaymentConfig, ShhhSignerKind } from '@chipi-stack/types';
+import { CreateSessionKeyParams, SessionKeyData, AddSessionKeyParams, SetupSessionParams, RevokeSessionKeyParams, GetSessionDataParams, SessionDataResponse, ExecuteWithSessionParams, SetSpendingPolicyParams, GetSpendingPolicyParams, SpendingPolicyData, RemoveSpendingPolicyParams, Currency, AiSignalsParams, AiSignals, ThinkParams, ThinkResponse, AiExecuteParams, AiExecuteResponse, AiChatParams, AiChatResponse, AiPricesParams, AiPrices, AiModelsResponse, ThinkDecision, PaymasterAdapter, PaymasterAccount, X402FacilitatorConfig, NonceStore, PaymentPayload, VerifyResponse, SettleResponse, ChipiSDKConfig, ExecuteTransactionParams, SignTypedDataParams, SignTypedDataResult, TransferParams, ApproveParams, CallAnyContractParams, CreateWalletParams, CreateWalletResponse, RecordSendTransactionParams, Transaction, GetTransactionListQuery, PaginatedResponse, GetWalletParams, GetTokenBalanceParams, GetTokenBalanceResponse, CreateSkuPurchaseParams, GetSkuListQuery, Sku, TransactionStatusResponse, PrepareWalletUpgradeParams, PrepareWalletUpgradeResponse, ExecuteWalletUpgradeParams, ExecuteWalletUpgradeResponse, ChipiServerSDKConfig, ChipiBrowserSDKConfig, SessionConfig, Call as Call$1, SpendingPolicyConfig, X402ClientConfig, PaymentRequirement, X402PaymentConfig, ShhhSignerKind } from '@chipi-stack/types';
 export * from '@chipi-stack/types';
 export { Chain, ChainToken, Currency } from '@chipi-stack/types';
 import { C as ChipiWallets } from './wallets-DxKnh21Q.js';
@@ -101,6 +101,31 @@ declare class ChipiSessions {
      * ```
      */
     addSessionKeyToContract(params: AddSessionKeyParams, bearerToken: string): Promise<string>;
+    /**
+     * Register a session and its spending policies in ONE owner-signed transaction.
+     *
+     * Equivalent to `addSessionKeyToContract` followed by one `setSpendingPolicy`
+     * per token, but the owner signs once (one passkey prompt) and the session
+     * never exists on-chain without its caps.
+     *
+     * @example
+     * ```typescript
+     * const txHash = await sdk.sessions.setupSession({
+     *   encryptKey,
+     *   wallet,
+     *   sessionConfig: {
+     *     sessionPublicKey: session.publicKey,
+     *     validUntil: session.validUntil,
+     *     maxCalls: 500,
+     *     allowedEntrypoints: ["transfer", "approve"],
+     *   },
+     *   spendingPolicies: [
+     *     { token: USDC, maxPerCall: 5_000_000n, maxPerWindow: 20_000_000n, windowSeconds: 86400 },
+     *   ],
+     * }, bearerToken);
+     * ```
+     */
+    setupSession(params: SetupSessionParams, bearerToken: string): Promise<string>;
     /**
      * Revoke a session key from the smart contract.
      *
@@ -192,10 +217,6 @@ declare class ChipiSessions {
      * ```
      */
     executeTransactionWithSession(params: ExecuteWithSessionParams, bearerToken: string): Promise<string>;
-    /**
-     * Split a bigint into Cairo u256 representation (low u128, high u128).
-     */
-    private splitU256;
     /**
      * Reconstruct a bigint from Cairo u256 (low, high) hex strings.
      */
@@ -564,6 +585,80 @@ declare class ChipiTreasury {
     forTreasury(config: ForTreasuryConfig): TreasuryTransport;
 }
 
+/**
+ * Whether `/v1/ai/think` returned a structured decision you can act on.
+ *
+ * `false` for a non-JSON reply (`{ raw }`) and for any `action` outside
+ * `swap | supply | withdraw | hold`. Treat `false` as `hold`. This checks the
+ * shape only: the amounts and tokens are still yours to validate.
+ */
+declare function isThinkDecision(decision: unknown): decision is ThinkDecision;
+/**
+ * Chipi AI API: prices, market signals, a DeFi decision engine, swap call
+ * building and general chat, billed to your organization's credits.
+ *
+ * Server-only. Every method authenticates with the SDK's secret key (`sk_`)
+ * and refuses to run without one, so a public key in the browser can never
+ * spend your credits through this client.
+ *
+ * Errors come back as `ChipiApiError` with the API's code and HTTP status:
+ * `INSUFFICIENT_BALANCE` (402) when credits run out, `MODEL_RATE_LIMITED`
+ * (429), `SIGNALS_UNAVAILABLE` (503) while signals warm up after a backend restart.
+ *
+ * @example
+ * ```typescript
+ * const sdk = new ChipiServerSDK({ apiPublicKey, apiSecretKey });
+ *
+ * const signals = await sdk.ai.signals({ tokens: ["ETH", "STRK"] });
+ * const { decision } = await sdk.ai.think({ portfolio, riskScore: 4 });
+ * if (isThinkDecision(decision) && decision.action === "swap") {
+ *   const { calls } = await sdk.ai.execute({
+ *     chain: "starknet",
+ *     action: "swap",
+ *     from: decision.from!,
+ *     to: decision.to!,
+ *     amountUsd: 10,
+ *     walletAddress,
+ *   });
+ * }
+ * ```
+ */
+declare class ChipiAi {
+    private client;
+    private apiSecretKey?;
+    constructor(client: ChipiClient, apiSecretKey?: string | undefined);
+    private secret;
+    /**
+     * `GET /v1/ai/signals`: technical signals per token, market sentiment and
+     * DeFi yields. Free up to a monthly quota per organization, then billed per call.
+     */
+    signals(params?: AiSignalsParams): Promise<AiSignals>;
+    /**
+     * `POST /v1/ai/think`: one DeFi decision for a portfolio, with the latest
+     * signals and your risk parameters injected into the prompt.
+     *
+     * The decision is advice, not an order: check it with `isThinkDecision` and
+     * enforce your own limits before executing anything.
+     */
+    think(params: ThinkParams): Promise<ThinkResponse>;
+    /**
+     * `POST /v1/ai/execute`: unsigned AVNU swap calls (approve + swap) for
+     * `walletAddress`. Nothing is submitted; sign the calls with a session key
+     * or the owner's key.
+     */
+    execute(params: AiExecuteParams): Promise<AiExecuteResponse>;
+    /** `POST /v1/ai/chat`: general-purpose chat, billed per token. */
+    chat(params: AiChatParams): Promise<AiChatResponse>;
+    /**
+     * `GET /v1/ai/prices`: USD prices and 1h / 24h / 7d changes, refreshed about
+     * every 30 seconds. No credits are charged, but like every `sdk.ai` method it
+     * needs the SDK's secret key (`sk_`).
+     */
+    prices(params?: AiPricesParams): Promise<AiPrices>;
+    /** `GET /v1/ai/models`: available models, prices and limits. */
+    models(): Promise<AiModelsResponse>;
+}
+
 /**
  * PaymasterAdapter implementation that uses Chipi's backend API for gasless transactions.
  *
@@ -666,6 +761,8 @@ declare class ChipiSDK {
     readonly sessions: ChipiSessions;
     readonly exchanges: ChipiExchanges;
     readonly treasury: ChipiTreasury;
+    /** AI API (`/v1/ai/*`). Server-only: needs `apiSecretKey` (`sk_`). */
+    readonly ai: ChipiAi;
     constructor(config: ChipiSDKConfig);
     /**
      * Resolve bearer token - uses provided token or falls back to apiSecretKey
@@ -953,6 +1050,47 @@ declare const signTypedDataArray: ({ params, }: {
     params: SignTypedDataParams;
 }) => Promise<string[]>;
 
+/** `add_or_update_session_key(session_key, valid_until, max_calls, allowed_entrypoints)` */
+declare function buildAddSessionKeyCall(walletAddress: string, sessionConfig: SessionConfig): Call$1;
+/** `revoke_session_key(session_key)` */
+declare function buildRevokeSessionKeyCall(walletAddress: string, sessionPublicKey: string): Call$1;
+/**
+ * Validate a spending policy the way the contract interprets it.
+ * Throws `INVALID_SPENDING_POLICY`.
+ */
+declare function validateSpendingPolicyConfig(config: SpendingPolicyConfig): void;
+/**
+ * `set_spending_policy(session_key, token, max_per_call: u256, max_per_window: u256, window_seconds: u64)`
+ *
+ * Contract semantics worth knowing: `maxPerWindow = 0` disables the policy
+ * (unlimited), `maxPerCall = 0` with a window blocks every metered spend, and
+ * only `transfer` / `approve` / `increase_allowance` are metered.
+ */
+declare function buildSetSpendingPolicyCall(walletAddress: string, config: SpendingPolicyConfig): Call$1;
+/** `remove_spending_policy(session_key, token)` */
+declare function buildRemoveSpendingPolicyCall(walletAddress: string, sessionPublicKey: string, token: string): Call$1;
+/**
+ * Register a session and cap it per token in one multicall: the session is
+ * added first, then one `set_spending_policy` per entry. Each policy's
+ * `sessionPublicKey` must match the session being registered.
+ */
+declare function buildSessionSetupCalls(walletAddress: string, sessionConfig: SessionConfig, spendingPolicies?: ReadonlyArray<Omit<SpendingPolicyConfig, "sessionPublicKey">>): Call$1[];
+
+/**
+ * Normalize a session whitelist to the hex selectors the contract compares against.
+ *
+ * `add_or_update_session_key` stores raw felts and the account matches them
+ * against `call.selector`, so every entry must be a selector. Names were
+ * previously forwarded unchanged: on CHIPI the paymaster encoded `"transfer"`
+ * as a short string (registration succeeded, every session call then failed the
+ * whitelist); on SHHH `BigInt("transfer")` threw while serialising calldata.
+ *
+ * - `0x…` hex and decimal felts pass through (as hex).
+ * - Cairo identifiers (`"transfer"`, `"multi_route_swap"`) become their selector.
+ * - Anything else throws `SESSION_ENTRYPOINT_NOT_ALLOWED`.
+ */
+declare function normalizeEntrypoints(entrypoints: readonly string[]): string[];
+
 /**
  * Wait for a Starknet transaction and report what happened, without throwing
  * on an on-chain revert.
@@ -1200,6 +1338,107 @@ interface X402MiddlewareFlatConfig {
  */
 declare function x402Middleware(config: X402MiddlewareConfig | X402MiddlewareFlatConfig): (req: any, res: any, next: any) => Promise<any>;
 
+/**
+ * Remembers which transaction hashes already paid for something.
+ *
+ * `consume` must be atomic: return `true` the first time a hash is seen and
+ * `false` on every later call, also across concurrent requests. Back it with a
+ * unique index in your database (`INSERT ... ON CONFLICT DO NOTHING`) in
+ * production; the default in-memory store forgets everything on restart and is
+ * not shared between instances.
+ */
+interface TxHashStore {
+    /**
+     * `transactionHash` arrives normalised: lowercase `0x` hex without leading
+     * zeros, so `0x0abc` and `0x000…abc` are the same key. Pad it yourself if you
+     * compare it with RPC output.
+     */
+    consume(transactionHash: string): boolean | Promise<boolean>;
+}
+interface SessionTxVerifierConfig extends WaitForTransactionOptions {
+    /** Default: in memory (single process, lost on restart). */
+    txHashStore?: TxHashStore;
+    /** Receipt source. Default: `waitForTransaction` with the options above. */
+    getReceipt?: (transactionHash: string, options: WaitForTransactionOptions) => Promise<WaitForTransactionResult>;
+}
+interface VerifyTransferParams {
+    /** The hash the payer sent you, e.g. from `executeTransactionWithSession`. */
+    transactionHash: string;
+    /** ERC-20 contract, e.g. USDC. */
+    token: string;
+    /** The paying wallet. */
+    from: string;
+    /** Your receiving address. */
+    to: string;
+    /** Smallest acceptable amount, in the token's base units. */
+    minAmount: bigint;
+}
+type VerifyTransferFailure = 
+/** The transaction reverted on chain. */
+"REVERTED"
+/** No `Transfer` from `token` with this `from` and `to`. */
+ | "TRANSFER_NOT_FOUND"
+/** A matching `Transfer` exists but moved less than `minAmount`. */
+ | "AMOUNT_TOO_LOW"
+/** This hash already paid for something (replay). */
+ | "ALREADY_USED";
+type VerifyTransferResult = {
+    valid: true;
+    transactionHash: string;
+    amount: bigint;
+    blockNumber?: number;
+} | {
+    valid: false;
+    transactionHash: string;
+    reason: VerifyTransferFailure;
+    detail?: string;
+};
+/**
+ * Check on chain that a transaction paid you, and that it pays only once.
+ *
+ * Use it when a client pays by sending the transfer itself (for example an
+ * agent with a session key calling `executeTransactionWithSession`) and hands
+ * you the hash. A transaction hash, or a `SUCCESS` status from an API, is not
+ * proof of payment: the transfer may have reverted, gone elsewhere, moved less,
+ * or already been used for an earlier request. This reads the receipt and
+ * accepts only a successful transaction whose `Transfer` event from `token`
+ * moves at least `minAmount` from `from` to `to`, then consumes the hash.
+ *
+ * Opt-in and independent of `X402Facilitator`, whose behaviour is unchanged.
+ *
+ * **Who is `from`.** Transaction hashes and `Transfer` events are public. If
+ * `from` comes from the request, anyone watching your address can submit a
+ * payer's hash first and consume it: they get the service, the payer gets
+ * `ALREADY_USED`. Take `from` from the caller's authenticated identity (your
+ * session, an API key bound to a wallet) whenever you have one. For anonymous
+ * payers this is first-come-first-served; keep it to low-value calls.
+ *
+ * `verifyTransfer` waits for the transaction to be sequenced and throws only
+ * when it cannot tell (timeout, RPC failure): retry those. Every other outcome
+ * is a result.
+ *
+ * @example
+ * ```typescript
+ * const verifier = new SessionTxVerifier({ txHashStore: dbStore });
+ *
+ * const result = await verifier.verifyTransfer({
+ *   transactionHash,
+ *   token: USDC,
+ *   from: agentWallet,
+ *   to: TREASURY,
+ *   minAmount: 1_000n, // $0.001 in USDC base units
+ * });
+ * if (!result.valid) return new Response(result.reason, { status: 402 });
+ * ```
+ */
+declare class SessionTxVerifier {
+    private readonly store;
+    private readonly getReceipt;
+    private readonly receiptOptions;
+    constructor(config?: SessionTxVerifierConfig);
+    verifyTransfer(params: VerifyTransferParams): Promise<VerifyTransferResult>;
+}
+
 /**
  * SNIP-12 typed-data hash for `OutsideExecution` — TypeScript reference.
  *
@@ -2777,4 +3016,4 @@ declare class ShhhAccount {
  */
 declare function submitViaAccount(funded: Account): ShhhSubmit;
 
-export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, type ApproveBody, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiTreasury, ChipiWallets, type ComputeAddressInput, type ContractEventLog, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, type ExecuteResult, type ForTreasuryConfig, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, type ListTreasuriesOptions, type ListTreasuriesResult, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type MultisigAllowance, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, type ProposeBody, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, type SetTreasuryPolicyOptions, ShhhAccount, type ShhhAccountOptions, type ShhhExecuteOptions, type ShhhSignedExecution, type ShhhSubmit, type ShhhX402Wallet, TIMELOCK_SECONDS, type TreasuryPolicy, type TreasuryProposal, type TreasuryProposalSignature, type TreasurySummary, type TreasuryTransport, VIEW_SELECTORS, type WaitForTransactionOptions, type WaitForTransactionResult, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519OwnerPubkeyParam, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191OwnerPubkeyParam, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, signTypedDataArray, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, submitViaAccount, waitForTransaction, webauthnOwnerId, webauthnOwnerPubkeyParam, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };
+export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, type ApproveBody, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiAi, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiTreasury, ChipiWallets, type ComputeAddressInput, type ContractEventLog, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, type ExecuteResult, type ForTreasuryConfig, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, type ListTreasuriesOptions, type ListTreasuriesResult, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type MultisigAllowance, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, type ProposeBody, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, SessionTxVerifier, type SessionTxVerifierConfig, type SetTreasuryPolicyOptions, ShhhAccount, type ShhhAccountOptions, type ShhhExecuteOptions, type ShhhSignedExecution, type ShhhSubmit, type ShhhX402Wallet, TIMELOCK_SECONDS, type TreasuryPolicy, type TreasuryProposal, type TreasuryProposalSignature, type TreasurySummary, type TreasuryTransport, type TxHashStore, VIEW_SELECTORS, type VerifyTransferFailure, type VerifyTransferParams, type VerifyTransferResult, type WaitForTransactionOptions, type WaitForTransactionResult, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildAddSessionKeyCall, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildRemoveSpendingPolicyCall, buildRevokeSessionKeyCall, buildSessionSetupCalls, buildSetSpendingPolicyCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519OwnerPubkeyParam, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191OwnerPubkeyParam, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, isThinkDecision, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, normalizeEntrypoints, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, signTypedDataArray, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, submitViaAccount, validateSpendingPolicyConfig, waitForTransaction, webauthnOwnerId, webauthnOwnerPubkeyParam, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };