@chipi-stack/chipi-react 14.15.0 → 14.16.0

package/dist/hooks.mjs

@@ -20346,6 +20346,41 @@ function hexEq(a, b) {
     return a === b;
   }
 }
+function parseCapAmount(value, field, token) {
+  try {
+    const v = typeof value === "bigint" ? value : BigInt(String(value).trim());
+    if (v < 0n) throw new Error("negative");
+    return v;
+  } catch {
+    throw new Error(
+      `session_spend_cap_invalid: ${field} for token ${token} must be a non-negative integer in base units (got "${String(value)}")`
+    );
+  }
+}
+function toSpendingPolicies(caps, lifetimeSeconds) {
+  return caps.map((cap) => {
+    const policy = "maxPerWindow" in cap ? {
+      token: cap.token,
+      maxPerCall: parseCapAmount(cap.maxPerCall, "maxPerCall", cap.token),
+      maxPerWindow: parseCapAmount(cap.maxPerWindow, "maxPerWindow", cap.token),
+      windowSeconds: cap.windowSeconds
+    } : (() => {
+      const amount = parseCapAmount(cap.amount, "amount", cap.token);
+      return {
+        token: cap.token,
+        maxPerCall: amount,
+        maxPerWindow: amount,
+        windowSeconds: Math.max(1, lifetimeSeconds)
+      };
+    })();
+    if (policy.maxPerWindow === 0n) {
+      throw new Error(
+        `session_spend_cap_zero: the cap for token ${cap.token} resolves to maxPerWindow = 0, which means unlimited on-chain. Use a positive cap.`
+      );
+    }
+    return policy;
+  });
+}
 function sessionCovers(policy, calls) {
   if (!policy?.allowedCalls?.length) return false;
   return calls.every(
@@ -20360,6 +20395,10 @@ function useChipiWalletObject(config3) {
   const { signTypedDataAsync } = useSignTypedData();
   const { createSessionKeyAsync } = useCreateSessionKey();
   const { addSessionKeyToContractAsync } = useAddSessionKeyToContract();
+  const { chipiSDK } = useChipiContext();
+  const sdk = useRef(chipiSDK);
+  sdk.current = chipiSDK;
+  const warnedMissingApproval = useRef(false);
   const cfg = useRef(config3);
   cfg.current = config3;
   const requireWallet = () => {
@@ -20372,28 +20411,33 @@ function useChipiWalletObject(config3) {
       if (policy.validUntil <= nowSec()) throw new Error("session_policy_expired");
       const c = cfg.current;
       const wallet = requireWallet();
+      const lifetimeSeconds = Math.max(1, policy.validUntil - nowSec());
+      const spendingPolicies = policy.spendCaps?.length ? toSpendingPolicies(policy.spendCaps, lifetimeSeconds) : [];
       const encryptKey = await c.getEncryptKey();
       const session = await createSessionKeyAsync({
         encryptKey,
-        durationSeconds: Math.max(1, policy.validUntil - nowSec())
+        durationSeconds: lifetimeSeconds
       });
       const bearerToken = await c.getBearerToken();
-      await addSessionKeyToContractAsync({
-        params: {
-          encryptKey,
-          wallet,
-          sessionConfig: {
-            sessionPublicKey: session.publicKey,
-            validUntil: policy.validUntil,
-            maxCalls: 1e3,
-            // selectors; empty = all entrypoints allowed
-            allowedEntrypoints: policy.allowedCalls.map(
-              (a) => hash_exports.getSelectorFromName(a.entrypoint)
-            )
-          }
-        },
-        bearerToken
-      });
+      const params = {
+        encryptKey,
+        wallet,
+        sessionConfig: {
+          sessionPublicKey: session.publicKey,
+          validUntil: policy.validUntil,
+          maxCalls: 1e3,
+          // Selectors; empty = all entrypoints allowed. On-chain this is a
+          // per-selector whitelist, NOT scoped to allowedCalls' contracts.
+          allowedEntrypoints: policy.allowedCalls.map(
+            (a) => hash_exports.getSelectorFromName(a.entrypoint)
+          )
+        }
+      };
+      if (spendingPolicies.length > 0) {
+        await sdk.current.sessions.setupSession({ ...params, spendingPolicies }, bearerToken);
+      } else {
+        await addSessionKeyToContractAsync({ params, bearerToken });
+      }
       return session;
     },
     [createSessionKeyAsync, addSessionKeyToContractAsync]
@@ -20438,7 +20482,17 @@ function useChipiWalletObject(config3) {
       createSession: async (policy) => {
         await createSession(policy);
       },
-      requestApproval: (req) => cfg.current.requestApproval?.(req) ?? Promise.resolve(true)
+      requestApproval: (req) => {
+        const gate = cfg.current.requestApproval;
+        if (gate) return gate(req);
+        if (!warnedMissingApproval.current) {
+          warnedMissingApproval.current = true;
+          console.warn(
+            "[ChipiSDK:Connect] No `requestApproval` was provided to useChipiWalletObject, so every approval (connect, execute, signTypedData, session) is denied. Pass `requestApproval` to show the user an approval UI and resolve true/false."
+          );
+        }
+        return Promise.resolve(false);
+      }
     }),
     [callAnyContractAsync, executeWithSessionAsync, signTypedDataAsync, createSession]
   );