@chipi-stack/chipi-react 14.15.1 → 14.17.0

package/dist/{index-gNLTF6ix.d.mts → index-CUfzUBgv.d.mts}

@@ -2,7 +2,7 @@ import { CreateWalletParams, CreateWalletResponse, GetWalletParams, GetWalletRes
 import * as _tanstack_react_query from '@tanstack/react-query';
 import { UseQueryOptions, UseQueryResult } from '@tanstack/react-query';
 import { SyntheticEvent } from 'react';
-import { MigrateChipiWalletToShhhParams, MigrationOutcome, Eip191Pubkey, WebAuthnPubkey, JwtAppleSubPubkey, NewOwnerInput, buildProposeAddOwnerCall, TIMELOCK_SECONDS, DEFAULT_OP_EXPIRY_SECONDS, ROLE_OWNER, ROLE_GUARDIAN, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, ShhhSignerKind, MIN_THRESHOLD_OWNERS } from '@chipi-stack/backend';
+import { MigrateChipiWalletToShhhParams, MigrationOutcome, ChipiSDK, Eip191Pubkey, WebAuthnPubkey, JwtAppleSubPubkey, NewOwnerInput, buildProposeAddOwnerCall, TIMELOCK_SECONDS, DEFAULT_OP_EXPIRY_SECONDS, ROLE_OWNER, ROLE_GUARDIAN, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, ShhhSignerKind, MIN_THRESHOLD_OWNERS } from '@chipi-stack/backend';
 import { Call as Call$2 } from 'starknet';
 import { TypedData, AccountDeploymentData } from '@starknet-io/types-js';
 import { ShieldResult } from '@chipi-stack/core';
@@ -1872,6 +1872,24 @@ declare function useSignTypedData(): {
     reset: () => void;
 };
 
+type ExternalSignerExecuteInput = Parameters<ChipiSDK["executeWithExternalSigner"]>[0];
+/**
+ * Run calls on a SHHH wallet signed by an external Starknet wallet that is one
+ * of its `STARK_SNIP12` owners: Bramble, Braavos, Ready/Argent or another
+ * Chipi wallet. Pass the wallet's `wallet_signTypedData` as `signTypedData`;
+ * the key never leaves that wallet. Returns the tx hash (wait for it).
+ */
+declare function useExternalSignerExecute(): {
+    execute: (input: ExternalSignerExecuteInput) => void;
+    executeAsync: (input: ExternalSignerExecuteInput) => Promise<string>;
+    data: string | undefined;
+    isLoading: boolean;
+    isError: boolean;
+    error: Error | null;
+    isSuccess: boolean;
+    reset: () => void;
+};
+
 /**
  * An approval the host (walletv2, the hosted web-wallet, or a harness) must
  * resolve before the SWO performs a sensitive action. Returning `false`
@@ -1897,19 +1915,52 @@ type ChipiApprovalRequest = {
  * `[session_pubkey, r, s, valid_until]`.
  */
 interface ChipiSessionPolicy {
-    /** Allowed (contractAddress, entrypoint) pairs the session may call. */
+    /**
+     * Allowed (contractAddress, entrypoint) pairs the session may call.
+     *
+     * Client side, `useChipiWalletObject` only routes a call through the session
+     * when its exact (contract, entrypoint) pair is listed. On-chain, though, the
+     * session whitelist is per entrypoint selector only: allowing `transfer` lets
+     * the session call `transfer` on ANY contract. Use `spendCaps` to bound what
+     * the session can move per token.
+     */
     allowedCalls: Array<{
         contractAddress: string;
         entrypoint: string;
     }>;
     /** Unix seconds after which the session is invalid. */
     validUntil: number;
-    /** Optional per-token spend caps, by token address. */
-    spendCaps?: Array<{
-        token: string;
-        amount: string;
-    }>;
+    /**
+     * Optional per-token spend caps, registered on-chain as spending policies in
+     * the same transaction as the session. A cap must never resolve to a window
+     * limit of 0 (on-chain, 0 means unlimited); that is rejected.
+     */
+    spendCaps?: ChipiSessionSpendCap[];
 }
+/**
+ * Simple per-token cap: `amount` (base units, decimal or hex string) is used as
+ * both the per-call and the per-window limit, with a window equal to the
+ * session lifetime.
+ */
+interface ChipiSessionSpendCapAmount {
+    /** ERC-20 token contract address. */
+    token: string;
+    /** Cap in token base units (e.g. "5000000" = 5 USDC). Must be > 0. */
+    amount: string;
+}
+/** Full per-token spending policy (mirrors `SpendingPolicyConfig`). */
+interface ChipiSessionSpendCapPolicy {
+    /** ERC-20 token contract address. */
+    token: string;
+    /** Max amount per single call, in token base units. */
+    maxPerCall: string | bigint;
+    /** Max cumulative amount within the rolling window, in base units. Must be > 0. */
+    maxPerWindow: string | bigint;
+    /** Rolling window duration in seconds (positive integer). */
+    windowSeconds: number;
+}
+/** A per-token spend cap: the simple `{ token, amount }` form or a full policy. */
+type ChipiSessionSpendCap = ChipiSessionSpendCapAmount | ChipiSessionSpendCapPolicy;
 /**
  * Everything the framework-agnostic SWO needs, supplied by the host layer
  * (`@chipi-stack/react`'s `useChipiWalletObject`, the hosted web-wallet, etc.).
@@ -1935,11 +1986,20 @@ interface ChipiWindowObjectDeps {
     executeCalls: (calls: Call$2[]) => Promise<string>;
     /** Sign SNIP-12 typed data → signature felts (envelope-aware for SHHH). */
     signTypedData: (typedData: TypedData) => Promise<string[]>;
-    /** Counterfactual deployment data for an undeployed account. */
+    /**
+     * Counterfactual deployment data for an undeployed account. Throw
+     * `Error("account_already_deployed")` for a deployed account (the dApp gets
+     * 115) or `Error("account_deployment_data_unavailable")` when the data can't
+     * be derived (116). Any other error reaches the dApp as 163.
+     */
     getDeploymentData: () => Promise<AccountDeploymentData>;
     /** Optional: establish a session from a dApp-proposed policy (approve once). */
     createSession?: (policy: ChipiSessionPolicy) => Promise<void>;
-    /** Host approval gate. Defaults to auto-approve (harness) when omitted. */
+    /**
+     * Host approval gate: render the prompt and resolve `true` to approve.
+     * When omitted, every approval is denied (deny by default) and a single
+     * `console.warn` explains that `requestApproval` must be provided.
+     */
     requestApproval?: (req: ChipiApprovalRequest) => Promise<boolean>;
 }
 
@@ -1958,7 +2018,18 @@ interface UseChipiWalletObjectConfig {
     sessionPolicy?: ChipiSessionPolicy | null;
     /** Chain id felt; defaults to SN_MAIN. */
     chainId?: string;
-    /** Host approval gate (connect / execute / signTypedData / session). */
+    /**
+     * Whether the account is deployed on-chain (e.g. `isDeployed` from the
+     * wallet row). Only `true` makes `wallet_deploymentData` answer 115
+     * ("already deployed"); otherwise it answers 116 ("deployment data is not
+     * available"), since this hook can't derive a Chipi account's deployment data.
+     */
+    isDeployed?: boolean;
+    /**
+     * Host approval gate (connect / execute / signTypedData / session). When
+     * omitted, every approval is denied and a single `console.warn` explains
+     * that `requestApproval` must be provided.
+     */
     requestApproval?: (req: ChipiApprovalRequest) => Promise<boolean>;
 }
 /**
@@ -1971,6 +2042,15 @@ interface UseChipiWalletObjectConfig {
  * `injectChipiWallet`. `createSession(policy)` establishes a session on-chain
  * from a dApp-proposed policy (the "approve once" flow); the host stores the
  * returned SessionKeyData and feeds it back via `config.session`.
+ *
+ * Note: `allowedCalls` is matched per (contract, entrypoint) only client-side,
+ * for routing. On-chain the session whitelist is per entrypoint selector, not
+ * per contract, so pass `spendCaps` to bound token spend; with caps, the
+ * session and its spending policies are registered in one owner-signed
+ * transaction (`sdk.sessions.setupSession`).
+ *
+ * Approvals are deny-by-default: without `config.requestApproval`, every
+ * approval is denied and a single `console.warn` says so.
  */
 declare function useChipiWalletObject(config: UseChipiWalletObjectConfig): {
     deps: ChipiWindowObjectDeps;
@@ -2542,7 +2622,7 @@ type Call = ReturnType<typeof buildProposeAddOwnerCall>;
  *   1. ADD DEVICE (user has wallet access, wants a second owner)
  *      a. `proposeAddOwner` (owner-signed OE)
  *      b. wait 48h timelock
- *      c. `executeAddOwner` (owner-signed OE, with the opId from 1a)
+ *      c. `executeAddOwner` (permissionless after the timelock: any account, or an owner OE; opId from 1a)
  *
  *   2. RECOVER VIA GUARDIAN (user lost key)
  *      a. `initiateRecovery` (guardian-signed OE)
@@ -2916,4 +2996,4 @@ declare function usePrivateBalance(input: PrivateBalanceInput): {
     refetch: (options?: _tanstack_react_query.RefetchOptions) => Promise<_tanstack_react_query.QueryObserverResult<Record<string, bigint>, Error>>;
 };
 
-export { usePrivateBalance as $, useCallAnyContract as A, useSignTypedData as B, type ChipiWindowObjectDeps as C, useChipiWalletObject as D, useRecordSendTransaction as E, useGetTokenBalance as F, useCreateSessionKey as G, useAddSessionKeyToContract as H, useRevokeSessionKey as I, useGetSessionData as J, useExecuteWithSession as K, useX402Payment as L, type UseX402PaymentConfig as M, type UseX402PaymentReturn as N, useShhhSigner as O, type UseShhhSignerReturn as P, useGuardianRecovery as Q, type RegisterSessionConfig as R, type SessionState as S, type UseGuardianRecoveryReturn as T, type UseChipiWalletObjectConfig as U, useThresholdSign as V, type UseThresholdSignReturn as W, type UseThresholdSignOptions as X, type ThresholdSignState as Y, useShield as Z, useUnshield as _, type ChipiApprovalRequest as a, derivePrivacyAccount as a0, netPrivateBalance as a1, type PrivacyConfig as a2, type PrivacyKeys as a3, type PrivacyStep as a4, type ShieldHookInput as a5, type PrivacyLedgerEvent as a6, type PrivateBalanceInput as a7, type ChipiSessionPolicy as b, useGetWallet as c, useChipiWallet as d, type UseChipiWalletConfig as e, type UseChipiWalletReturn as f, type ChipiWalletData as g, useChipiSession as h, type UseChipiSessionConfig as i, type UseChipiSessionReturn as j, type SessionWallet as k, useMigrateWalletToPasskey as l, useUpdateWalletEncryption as m, useMigrateWalletToShhh as n, useTransfer as o, type UseTransferConfig as p, useApprove as q, useGetTransactionList as r, useGetTransaction as s, useGetTransactionStatus as t, useCreateWallet as u, useSyncOnChainTransfers as v, usePurchaseSku as w, useGetSkuPurchase as x, useGetSkuList as y, useGetSku as z };
+export { type UseThresholdSignReturn as $, useGetSkuPurchase as A, useGetSkuList as B, type ChipiWindowObjectDeps as C, useGetSku as D, useCallAnyContract as E, useSignTypedData as F, useExternalSignerExecute as G, type ExternalSignerExecuteInput as H, useChipiWalletObject as I, useRecordSendTransaction as J, useGetTokenBalance as K, useCreateSessionKey as L, useAddSessionKeyToContract as M, useRevokeSessionKey as N, useGetSessionData as O, useExecuteWithSession as P, useX402Payment as Q, type RegisterSessionConfig as R, type SessionState as S, type UseX402PaymentConfig as T, type UseChipiWalletObjectConfig as U, type UseX402PaymentReturn as V, useShhhSigner as W, type UseShhhSignerReturn as X, useGuardianRecovery as Y, type UseGuardianRecoveryReturn as Z, useThresholdSign as _, type ChipiApprovalRequest as a, type UseThresholdSignOptions as a0, type ThresholdSignState as a1, useShield as a2, useUnshield as a3, usePrivateBalance as a4, derivePrivacyAccount as a5, netPrivateBalance as a6, type PrivacyConfig as a7, type PrivacyKeys as a8, type PrivacyStep as a9, type ShieldHookInput as aa, type PrivacyLedgerEvent as ab, type PrivateBalanceInput as ac, type ChipiSessionPolicy as b, type ChipiSessionSpendCap as c, type ChipiSessionSpendCapAmount as d, type ChipiSessionSpendCapPolicy as e, useGetWallet as f, useChipiWallet as g, type UseChipiWalletConfig as h, type UseChipiWalletReturn as i, type ChipiWalletData as j, useChipiSession as k, type UseChipiSessionConfig as l, type UseChipiSessionReturn as m, type SessionWallet as n, useMigrateWalletToPasskey as o, useUpdateWalletEncryption as p, useMigrateWalletToShhh as q, useTransfer as r, type UseTransferConfig as s, useApprove as t, useCreateWallet as u, useGetTransactionList as v, useGetTransaction as w, useGetTransactionStatus as x, useSyncOnChainTransfers as y, usePurchaseSku as z };

package/dist/{index-gNLTF6ix.d.ts → index-CUfzUBgv.d.ts}

@@ -2,7 +2,7 @@ import { CreateWalletParams, CreateWalletResponse, GetWalletParams, GetWalletRes
 import * as _tanstack_react_query from '@tanstack/react-query';
 import { UseQueryOptions, UseQueryResult } from '@tanstack/react-query';
 import { SyntheticEvent } from 'react';
-import { MigrateChipiWalletToShhhParams, MigrationOutcome, Eip191Pubkey, WebAuthnPubkey, JwtAppleSubPubkey, NewOwnerInput, buildProposeAddOwnerCall, TIMELOCK_SECONDS, DEFAULT_OP_EXPIRY_SECONDS, ROLE_OWNER, ROLE_GUARDIAN, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, ShhhSignerKind, MIN_THRESHOLD_OWNERS } from '@chipi-stack/backend';
+import { MigrateChipiWalletToShhhParams, MigrationOutcome, ChipiSDK, Eip191Pubkey, WebAuthnPubkey, JwtAppleSubPubkey, NewOwnerInput, buildProposeAddOwnerCall, TIMELOCK_SECONDS, DEFAULT_OP_EXPIRY_SECONDS, ROLE_OWNER, ROLE_GUARDIAN, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, ShhhSignerKind, MIN_THRESHOLD_OWNERS } from '@chipi-stack/backend';
 import { Call as Call$2 } from 'starknet';
 import { TypedData, AccountDeploymentData } from '@starknet-io/types-js';
 import { ShieldResult } from '@chipi-stack/core';
@@ -1872,6 +1872,24 @@ declare function useSignTypedData(): {
     reset: () => void;
 };
 
+type ExternalSignerExecuteInput = Parameters<ChipiSDK["executeWithExternalSigner"]>[0];
+/**
+ * Run calls on a SHHH wallet signed by an external Starknet wallet that is one
+ * of its `STARK_SNIP12` owners: Bramble, Braavos, Ready/Argent or another
+ * Chipi wallet. Pass the wallet's `wallet_signTypedData` as `signTypedData`;
+ * the key never leaves that wallet. Returns the tx hash (wait for it).
+ */
+declare function useExternalSignerExecute(): {
+    execute: (input: ExternalSignerExecuteInput) => void;
+    executeAsync: (input: ExternalSignerExecuteInput) => Promise<string>;
+    data: string | undefined;
+    isLoading: boolean;
+    isError: boolean;
+    error: Error | null;
+    isSuccess: boolean;
+    reset: () => void;
+};
+
 /**
  * An approval the host (walletv2, the hosted web-wallet, or a harness) must
  * resolve before the SWO performs a sensitive action. Returning `false`
@@ -1897,19 +1915,52 @@ type ChipiApprovalRequest = {
  * `[session_pubkey, r, s, valid_until]`.
  */
 interface ChipiSessionPolicy {
-    /** Allowed (contractAddress, entrypoint) pairs the session may call. */
+    /**
+     * Allowed (contractAddress, entrypoint) pairs the session may call.
+     *
+     * Client side, `useChipiWalletObject` only routes a call through the session
+     * when its exact (contract, entrypoint) pair is listed. On-chain, though, the
+     * session whitelist is per entrypoint selector only: allowing `transfer` lets
+     * the session call `transfer` on ANY contract. Use `spendCaps` to bound what
+     * the session can move per token.
+     */
     allowedCalls: Array<{
         contractAddress: string;
         entrypoint: string;
     }>;
     /** Unix seconds after which the session is invalid. */
     validUntil: number;
-    /** Optional per-token spend caps, by token address. */
-    spendCaps?: Array<{
-        token: string;
-        amount: string;
-    }>;
+    /**
+     * Optional per-token spend caps, registered on-chain as spending policies in
+     * the same transaction as the session. A cap must never resolve to a window
+     * limit of 0 (on-chain, 0 means unlimited); that is rejected.
+     */
+    spendCaps?: ChipiSessionSpendCap[];
 }
+/**
+ * Simple per-token cap: `amount` (base units, decimal or hex string) is used as
+ * both the per-call and the per-window limit, with a window equal to the
+ * session lifetime.
+ */
+interface ChipiSessionSpendCapAmount {
+    /** ERC-20 token contract address. */
+    token: string;
+    /** Cap in token base units (e.g. "5000000" = 5 USDC). Must be > 0. */
+    amount: string;
+}
+/** Full per-token spending policy (mirrors `SpendingPolicyConfig`). */
+interface ChipiSessionSpendCapPolicy {
+    /** ERC-20 token contract address. */
+    token: string;
+    /** Max amount per single call, in token base units. */
+    maxPerCall: string | bigint;
+    /** Max cumulative amount within the rolling window, in base units. Must be > 0. */
+    maxPerWindow: string | bigint;
+    /** Rolling window duration in seconds (positive integer). */
+    windowSeconds: number;
+}
+/** A per-token spend cap: the simple `{ token, amount }` form or a full policy. */
+type ChipiSessionSpendCap = ChipiSessionSpendCapAmount | ChipiSessionSpendCapPolicy;
 /**
  * Everything the framework-agnostic SWO needs, supplied by the host layer
  * (`@chipi-stack/react`'s `useChipiWalletObject`, the hosted web-wallet, etc.).
@@ -1935,11 +1986,20 @@ interface ChipiWindowObjectDeps {
     executeCalls: (calls: Call$2[]) => Promise<string>;
     /** Sign SNIP-12 typed data → signature felts (envelope-aware for SHHH). */
     signTypedData: (typedData: TypedData) => Promise<string[]>;
-    /** Counterfactual deployment data for an undeployed account. */
+    /**
+     * Counterfactual deployment data for an undeployed account. Throw
+     * `Error("account_already_deployed")` for a deployed account (the dApp gets
+     * 115) or `Error("account_deployment_data_unavailable")` when the data can't
+     * be derived (116). Any other error reaches the dApp as 163.
+     */
     getDeploymentData: () => Promise<AccountDeploymentData>;
     /** Optional: establish a session from a dApp-proposed policy (approve once). */
     createSession?: (policy: ChipiSessionPolicy) => Promise<void>;
-    /** Host approval gate. Defaults to auto-approve (harness) when omitted. */
+    /**
+     * Host approval gate: render the prompt and resolve `true` to approve.
+     * When omitted, every approval is denied (deny by default) and a single
+     * `console.warn` explains that `requestApproval` must be provided.
+     */
     requestApproval?: (req: ChipiApprovalRequest) => Promise<boolean>;
 }
 
@@ -1958,7 +2018,18 @@ interface UseChipiWalletObjectConfig {
     sessionPolicy?: ChipiSessionPolicy | null;
     /** Chain id felt; defaults to SN_MAIN. */
     chainId?: string;
-    /** Host approval gate (connect / execute / signTypedData / session). */
+    /**
+     * Whether the account is deployed on-chain (e.g. `isDeployed` from the
+     * wallet row). Only `true` makes `wallet_deploymentData` answer 115
+     * ("already deployed"); otherwise it answers 116 ("deployment data is not
+     * available"), since this hook can't derive a Chipi account's deployment data.
+     */
+    isDeployed?: boolean;
+    /**
+     * Host approval gate (connect / execute / signTypedData / session). When
+     * omitted, every approval is denied and a single `console.warn` explains
+     * that `requestApproval` must be provided.
+     */
     requestApproval?: (req: ChipiApprovalRequest) => Promise<boolean>;
 }
 /**
@@ -1971,6 +2042,15 @@ interface UseChipiWalletObjectConfig {
  * `injectChipiWallet`. `createSession(policy)` establishes a session on-chain
  * from a dApp-proposed policy (the "approve once" flow); the host stores the
  * returned SessionKeyData and feeds it back via `config.session`.
+ *
+ * Note: `allowedCalls` is matched per (contract, entrypoint) only client-side,
+ * for routing. On-chain the session whitelist is per entrypoint selector, not
+ * per contract, so pass `spendCaps` to bound token spend; with caps, the
+ * session and its spending policies are registered in one owner-signed
+ * transaction (`sdk.sessions.setupSession`).
+ *
+ * Approvals are deny-by-default: without `config.requestApproval`, every
+ * approval is denied and a single `console.warn` says so.
  */
 declare function useChipiWalletObject(config: UseChipiWalletObjectConfig): {
     deps: ChipiWindowObjectDeps;
@@ -2542,7 +2622,7 @@ type Call = ReturnType<typeof buildProposeAddOwnerCall>;
  *   1. ADD DEVICE (user has wallet access, wants a second owner)
  *      a. `proposeAddOwner` (owner-signed OE)
  *      b. wait 48h timelock
- *      c. `executeAddOwner` (owner-signed OE, with the opId from 1a)
+ *      c. `executeAddOwner` (permissionless after the timelock: any account, or an owner OE; opId from 1a)
  *
  *   2. RECOVER VIA GUARDIAN (user lost key)
  *      a. `initiateRecovery` (guardian-signed OE)
@@ -2916,4 +2996,4 @@ declare function usePrivateBalance(input: PrivateBalanceInput): {
     refetch: (options?: _tanstack_react_query.RefetchOptions) => Promise<_tanstack_react_query.QueryObserverResult<Record<string, bigint>, Error>>;
 };
 
-export { usePrivateBalance as $, useCallAnyContract as A, useSignTypedData as B, type ChipiWindowObjectDeps as C, useChipiWalletObject as D, useRecordSendTransaction as E, useGetTokenBalance as F, useCreateSessionKey as G, useAddSessionKeyToContract as H, useRevokeSessionKey as I, useGetSessionData as J, useExecuteWithSession as K, useX402Payment as L, type UseX402PaymentConfig as M, type UseX402PaymentReturn as N, useShhhSigner as O, type UseShhhSignerReturn as P, useGuardianRecovery as Q, type RegisterSessionConfig as R, type SessionState as S, type UseGuardianRecoveryReturn as T, type UseChipiWalletObjectConfig as U, useThresholdSign as V, type UseThresholdSignReturn as W, type UseThresholdSignOptions as X, type ThresholdSignState as Y, useShield as Z, useUnshield as _, type ChipiApprovalRequest as a, derivePrivacyAccount as a0, netPrivateBalance as a1, type PrivacyConfig as a2, type PrivacyKeys as a3, type PrivacyStep as a4, type ShieldHookInput as a5, type PrivacyLedgerEvent as a6, type PrivateBalanceInput as a7, type ChipiSessionPolicy as b, useGetWallet as c, useChipiWallet as d, type UseChipiWalletConfig as e, type UseChipiWalletReturn as f, type ChipiWalletData as g, useChipiSession as h, type UseChipiSessionConfig as i, type UseChipiSessionReturn as j, type SessionWallet as k, useMigrateWalletToPasskey as l, useUpdateWalletEncryption as m, useMigrateWalletToShhh as n, useTransfer as o, type UseTransferConfig as p, useApprove as q, useGetTransactionList as r, useGetTransaction as s, useGetTransactionStatus as t, useCreateWallet as u, useSyncOnChainTransfers as v, usePurchaseSku as w, useGetSkuPurchase as x, useGetSkuList as y, useGetSku as z };
+export { type UseThresholdSignReturn as $, useGetSkuPurchase as A, useGetSkuList as B, type ChipiWindowObjectDeps as C, useGetSku as D, useCallAnyContract as E, useSignTypedData as F, useExternalSignerExecute as G, type ExternalSignerExecuteInput as H, useChipiWalletObject as I, useRecordSendTransaction as J, useGetTokenBalance as K, useCreateSessionKey as L, useAddSessionKeyToContract as M, useRevokeSessionKey as N, useGetSessionData as O, useExecuteWithSession as P, useX402Payment as Q, type RegisterSessionConfig as R, type SessionState as S, type UseX402PaymentConfig as T, type UseChipiWalletObjectConfig as U, type UseX402PaymentReturn as V, useShhhSigner as W, type UseShhhSignerReturn as X, useGuardianRecovery as Y, type UseGuardianRecoveryReturn as Z, useThresholdSign as _, type ChipiApprovalRequest as a, type UseThresholdSignOptions as a0, type ThresholdSignState as a1, useShield as a2, useUnshield as a3, usePrivateBalance as a4, derivePrivacyAccount as a5, netPrivateBalance as a6, type PrivacyConfig as a7, type PrivacyKeys as a8, type PrivacyStep as a9, type ShieldHookInput as aa, type PrivacyLedgerEvent as ab, type PrivateBalanceInput as ac, type ChipiSessionPolicy as b, type ChipiSessionSpendCap as c, type ChipiSessionSpendCapAmount as d, type ChipiSessionSpendCapPolicy as e, useGetWallet as f, useChipiWallet as g, type UseChipiWalletConfig as h, type UseChipiWalletReturn as i, type ChipiWalletData as j, useChipiSession as k, type UseChipiSessionConfig as l, type UseChipiSessionReturn as m, type SessionWallet as n, useMigrateWalletToPasskey as o, useUpdateWalletEncryption as p, useMigrateWalletToShhh as q, useTransfer as r, type UseTransferConfig as s, useApprove as t, useCreateWallet as u, useGetTransactionList as v, useGetTransaction as w, useGetTransactionStatus as x, useSyncOnChainTransfers as y, usePurchaseSku as z };

package/dist/index.d.mts

@@ -4,8 +4,8 @@ import { ChipiSDK, NewOwnerInput } from '@chipi-stack/backend';
 import { ChipiSDKConfig, WalletType } from '@chipi-stack/types';
 export * from '@chipi-stack/types';
 export { Chain, ChainToken } from '@chipi-stack/types';
-import { C as ChipiWindowObjectDeps, U as UseChipiWalletObjectConfig } from './index-gNLTF6ix.mjs';
-export { a as ChipiApprovalRequest, b as ChipiSessionPolicy, g as ChipiWalletData, a2 as PrivacyConfig, a3 as PrivacyKeys, a6 as PrivacyLedgerEvent, a4 as PrivacyStep, a7 as PrivateBalanceInput, R as RegisterSessionConfig, S as SessionState, k as SessionWallet, a5 as ShieldHookInput, Y as ThresholdSignState, i as UseChipiSessionConfig, j as UseChipiSessionReturn, e as UseChipiWalletConfig, f as UseChipiWalletReturn, T as UseGuardianRecoveryReturn, P as UseShhhSignerReturn, X as UseThresholdSignOptions, W as UseThresholdSignReturn, p as UseTransferConfig, M as UseX402PaymentConfig, N as UseX402PaymentReturn, a0 as derivePrivacyAccount, a1 as netPrivateBalance, H as useAddSessionKeyToContract, q as useApprove, A as useCallAnyContract, h as useChipiSession, d as useChipiWallet, D as useChipiWalletObject, G as useCreateSessionKey, u as useCreateWallet, K as useExecuteWithSession, J as useGetSessionData, z as useGetSku, y as useGetSkuList, x as useGetSkuPurchase, F as useGetTokenBalance, s as useGetTransaction, r as useGetTransactionList, t as useGetTransactionStatus, c as useGetWallet, Q as useGuardianRecovery, l as useMigrateWalletToPasskey, n as useMigrateWalletToShhh, $ as usePrivateBalance, w as usePurchaseSku, E as useRecordSendTransaction, I as useRevokeSessionKey, O as useShhhSigner, Z as useShield, B as useSignTypedData, v as useSyncOnChainTransfers, V as useThresholdSign, o as useTransfer, _ as useUnshield, m as useUpdateWalletEncryption, L as useX402Payment } from './index-gNLTF6ix.mjs';
+import { C as ChipiWindowObjectDeps, U as UseChipiWalletObjectConfig } from './index-CUfzUBgv.mjs';
+export { a as ChipiApprovalRequest, b as ChipiSessionPolicy, c as ChipiSessionSpendCap, d as ChipiSessionSpendCapAmount, e as ChipiSessionSpendCapPolicy, j as ChipiWalletData, H as ExternalSignerExecuteInput, a7 as PrivacyConfig, a8 as PrivacyKeys, ab as PrivacyLedgerEvent, a9 as PrivacyStep, ac as PrivateBalanceInput, R as RegisterSessionConfig, S as SessionState, n as SessionWallet, aa as ShieldHookInput, a1 as ThresholdSignState, l as UseChipiSessionConfig, m as UseChipiSessionReturn, h as UseChipiWalletConfig, i as UseChipiWalletReturn, Z as UseGuardianRecoveryReturn, X as UseShhhSignerReturn, a0 as UseThresholdSignOptions, $ as UseThresholdSignReturn, s as UseTransferConfig, T as UseX402PaymentConfig, V as UseX402PaymentReturn, a5 as derivePrivacyAccount, a6 as netPrivateBalance, M as useAddSessionKeyToContract, t as useApprove, E as useCallAnyContract, k as useChipiSession, g as useChipiWallet, I as useChipiWalletObject, L as useCreateSessionKey, u as useCreateWallet, P as useExecuteWithSession, G as useExternalSignerExecute, O as useGetSessionData, D as useGetSku, B as useGetSkuList, A as useGetSkuPurchase, K as useGetTokenBalance, w as useGetTransaction, v as useGetTransactionList, x as useGetTransactionStatus, f as useGetWallet, Y as useGuardianRecovery, o as useMigrateWalletToPasskey, q as useMigrateWalletToShhh, a4 as usePrivateBalance, z as usePurchaseSku, J as useRecordSendTransaction, N as useRevokeSessionKey, W as useShhhSigner, a2 as useShield, F as useSignTypedData, y as useSyncOnChainTransfers, _ as useThresholdSign, r as useTransfer, a3 as useUnshield, p as useUpdateWalletEncryption, Q as useX402Payment } from './index-CUfzUBgv.mjs';
 import { StarknetWindowObject } from '@starknet-io/types-js';
 import '@tanstack/react-query';
 import 'starknet';
@@ -61,6 +61,19 @@ declare function walletSupportsSessions(wallet: {
  * `deps`, so the same object powers walletv2's in-app browser, the hosted
  * web-wallet connector, and WalletConnect transport identically.
  *
+ * Approvals are deny-by-default: every sensitive action goes through
+ * `deps.requestApproval`. When it is omitted, every approval is denied (and a
+ * single `console.warn` says so) instead of being auto-approved.
+ *
+ * Connection model (per window object, i.e. per injected dApp page):
+ *  - `wallet_requestAccounts` asks for a `connect` approval once, even when the
+ *    wallet is unlocked and has accounts. With `silent_mode: true` it never
+ *    prompts: it returns the accounts if already approved, else `[]`.
+ *  - `wallet_getPermissions` returns `[]` until that approval, `["accounts"]` after.
+ *  - `wallet_signTypedData` rejects (INVALID_REQUEST_PAYLOAD, no prompt) when
+ *    the typed data's `domain.chainId` is set and differs from `deps.chainId`.
+ *    "SN_MAIN" and "0x534e5f4d41494e" are treated as the same chain.
+ *
  * Returns the wallet plus an `emit` controller so the host can fire
  * accountsChanged / networkChanged on connect, disconnect, or lock.
  */
@@ -199,7 +212,7 @@ interface RecoverProps {
     /**
      * Optional cancel handler. When omitted the cancel button is hidden.
      * Add-device uses `cancel_pending_op` (any owner); guardian-recovery
-     * uses `cancel_recovery` (the original owner, if they resurface).
+     * uses `cancel_recovery` (any non-revoked owner, signing with its own owner id).
      */
     onCancel?: (opId: bigint | string) => Promise<void>;
     /**

package/dist/index.d.ts

@@ -4,8 +4,8 @@ import { ChipiSDK, NewOwnerInput } from '@chipi-stack/backend';
 import { ChipiSDKConfig, WalletType } from '@chipi-stack/types';
 export * from '@chipi-stack/types';
 export { Chain, ChainToken } from '@chipi-stack/types';
-import { C as ChipiWindowObjectDeps, U as UseChipiWalletObjectConfig } from './index-gNLTF6ix.js';
-export { a as ChipiApprovalRequest, b as ChipiSessionPolicy, g as ChipiWalletData, a2 as PrivacyConfig, a3 as PrivacyKeys, a6 as PrivacyLedgerEvent, a4 as PrivacyStep, a7 as PrivateBalanceInput, R as RegisterSessionConfig, S as SessionState, k as SessionWallet, a5 as ShieldHookInput, Y as ThresholdSignState, i as UseChipiSessionConfig, j as UseChipiSessionReturn, e as UseChipiWalletConfig, f as UseChipiWalletReturn, T as UseGuardianRecoveryReturn, P as UseShhhSignerReturn, X as UseThresholdSignOptions, W as UseThresholdSignReturn, p as UseTransferConfig, M as UseX402PaymentConfig, N as UseX402PaymentReturn, a0 as derivePrivacyAccount, a1 as netPrivateBalance, H as useAddSessionKeyToContract, q as useApprove, A as useCallAnyContract, h as useChipiSession, d as useChipiWallet, D as useChipiWalletObject, G as useCreateSessionKey, u as useCreateWallet, K as useExecuteWithSession, J as useGetSessionData, z as useGetSku, y as useGetSkuList, x as useGetSkuPurchase, F as useGetTokenBalance, s as useGetTransaction, r as useGetTransactionList, t as useGetTransactionStatus, c as useGetWallet, Q as useGuardianRecovery, l as useMigrateWalletToPasskey, n as useMigrateWalletToShhh, $ as usePrivateBalance, w as usePurchaseSku, E as useRecordSendTransaction, I as useRevokeSessionKey, O as useShhhSigner, Z as useShield, B as useSignTypedData, v as useSyncOnChainTransfers, V as useThresholdSign, o as useTransfer, _ as useUnshield, m as useUpdateWalletEncryption, L as useX402Payment } from './index-gNLTF6ix.js';
+import { C as ChipiWindowObjectDeps, U as UseChipiWalletObjectConfig } from './index-CUfzUBgv.js';
+export { a as ChipiApprovalRequest, b as ChipiSessionPolicy, c as ChipiSessionSpendCap, d as ChipiSessionSpendCapAmount, e as ChipiSessionSpendCapPolicy, j as ChipiWalletData, H as ExternalSignerExecuteInput, a7 as PrivacyConfig, a8 as PrivacyKeys, ab as PrivacyLedgerEvent, a9 as PrivacyStep, ac as PrivateBalanceInput, R as RegisterSessionConfig, S as SessionState, n as SessionWallet, aa as ShieldHookInput, a1 as ThresholdSignState, l as UseChipiSessionConfig, m as UseChipiSessionReturn, h as UseChipiWalletConfig, i as UseChipiWalletReturn, Z as UseGuardianRecoveryReturn, X as UseShhhSignerReturn, a0 as UseThresholdSignOptions, $ as UseThresholdSignReturn, s as UseTransferConfig, T as UseX402PaymentConfig, V as UseX402PaymentReturn, a5 as derivePrivacyAccount, a6 as netPrivateBalance, M as useAddSessionKeyToContract, t as useApprove, E as useCallAnyContract, k as useChipiSession, g as useChipiWallet, I as useChipiWalletObject, L as useCreateSessionKey, u as useCreateWallet, P as useExecuteWithSession, G as useExternalSignerExecute, O as useGetSessionData, D as useGetSku, B as useGetSkuList, A as useGetSkuPurchase, K as useGetTokenBalance, w as useGetTransaction, v as useGetTransactionList, x as useGetTransactionStatus, f as useGetWallet, Y as useGuardianRecovery, o as useMigrateWalletToPasskey, q as useMigrateWalletToShhh, a4 as usePrivateBalance, z as usePurchaseSku, J as useRecordSendTransaction, N as useRevokeSessionKey, W as useShhhSigner, a2 as useShield, F as useSignTypedData, y as useSyncOnChainTransfers, _ as useThresholdSign, r as useTransfer, a3 as useUnshield, p as useUpdateWalletEncryption, Q as useX402Payment } from './index-CUfzUBgv.js';
 import { StarknetWindowObject } from '@starknet-io/types-js';
 import '@tanstack/react-query';
 import 'starknet';
@@ -61,6 +61,19 @@ declare function walletSupportsSessions(wallet: {
  * `deps`, so the same object powers walletv2's in-app browser, the hosted
  * web-wallet connector, and WalletConnect transport identically.
  *
+ * Approvals are deny-by-default: every sensitive action goes through
+ * `deps.requestApproval`. When it is omitted, every approval is denied (and a
+ * single `console.warn` says so) instead of being auto-approved.
+ *
+ * Connection model (per window object, i.e. per injected dApp page):
+ *  - `wallet_requestAccounts` asks for a `connect` approval once, even when the
+ *    wallet is unlocked and has accounts. With `silent_mode: true` it never
+ *    prompts: it returns the accounts if already approved, else `[]`.
+ *  - `wallet_getPermissions` returns `[]` until that approval, `["accounts"]` after.
+ *  - `wallet_signTypedData` rejects (INVALID_REQUEST_PAYLOAD, no prompt) when
+ *    the typed data's `domain.chainId` is set and differs from `deps.chainId`.
+ *    "SN_MAIN" and "0x534e5f4d41494e" are treated as the same chain.
+ *
  * Returns the wallet plus an `emit` controller so the host can fire
  * accountsChanged / networkChanged on connect, disconnect, or lock.
  */
@@ -199,7 +212,7 @@ interface RecoverProps {
     /**
      * Optional cancel handler. When omitted the cancel button is hidden.
      * Add-device uses `cancel_pending_op` (any owner); guardian-recovery
-     * uses `cancel_recovery` (the original owner, if they resurface).
+     * uses `cancel_recovery` (any non-revoked owner, signing with its own owner id).
      */
     onCancel?: (opId: bigint | string) => Promise<void>;
     /**