@circle-fin/app-kit 1.12.0 → 1.13.0

package/swap.mjs

@@ -2981,6 +2981,8 @@ class KitError extends Error {
     Blockchain["Optimism_Sepolia"] = "Optimism_Sepolia";
     Blockchain["Pharos"] = "Pharos";
     Blockchain["Pharos_Testnet"] = "Pharos_Testnet";
+    Blockchain["Plasma"] = "Plasma";
+    Blockchain["Plasma_Testnet"] = "Plasma_Testnet";
     Blockchain["Polkadot_Asset_Hub"] = "Polkadot_Asset_Hub";
     Blockchain["Polkadot_Westmint"] = "Polkadot_Westmint";
     Blockchain["Plume"] = "Plume";
@@ -3050,6 +3052,7 @@ var BridgeChain;
     BridgeChain["Morph"] = "Morph";
     BridgeChain["Optimism"] = "Optimism";
     BridgeChain["Pharos"] = "Pharos";
+    BridgeChain["Plasma"] = "Plasma";
     BridgeChain["Plume"] = "Plume";
     BridgeChain["Polygon"] = "Polygon";
     BridgeChain["Sei"] = "Sei";
@@ -3076,6 +3079,7 @@ var BridgeChain;
     BridgeChain["Morph_Testnet"] = "Morph_Testnet";
     BridgeChain["Optimism_Sepolia"] = "Optimism_Sepolia";
     BridgeChain["Pharos_Testnet"] = "Pharos_Testnet";
+    BridgeChain["Plasma_Testnet"] = "Plasma_Testnet";
     BridgeChain["Plume_Testnet"] = "Plume_Testnet";
     BridgeChain["Polygon_Amoy_Testnet"] = "Polygon_Amoy_Testnet";
     BridgeChain["Sei_Testnet"] = "Sei_Testnet";
@@ -3533,6 +3537,8 @@ var EarnChain;
  * This program handles minting operations for Gateway transactions
  * on Solana devnet.
  */ const GATEWAY_MINTER_SOLANA_DEVNET = 'GATEmKK2ECL1brEngQZWCgMWPbvrEYqsV6u29dAaHavr';
+/** TokenMessengerWithFees address shared by enabled EVM mainnet sources. */ const TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET = '0x71f54F818671cD0D7ea140Da213e5C8b5C92a408';
+/** TokenMessengerWithFees address shared by enabled EVM testnet sources. */ const TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET = '0x8745D906D67C346E5eb1aEEED38Eb87F34DF0C0A';
 
 /**
  * Arc Testnet chain definition
@@ -3570,6 +3576,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8FE6B999Dc680CcFDD5Bf7EB0974218be2542DAA',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xE737e5cEBEEBa77EFE34D4aa090756590b1CE275',
                 confirmations: 1,
                 fastConfirmations: 1
@@ -3637,6 +3644,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -3701,6 +3709,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8FE6B999Dc680CcFDD5Bf7EB0974218be2542DAA',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xE737e5cEBEEBa77EFE34D4aa090756590b1CE275',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -3765,6 +3774,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 1,
                 fastConfirmations: 1
@@ -3826,6 +3836,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8fe6b999dc680ccfdd5bf7eb0974218be2542daa',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xe737e5cebeeba77efe34d4aa090756590b1ce275',
                 confirmations: 1,
                 fastConfirmations: 1
@@ -3893,6 +3904,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -3957,6 +3969,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8fe6b999dc680ccfdd5bf7eb0974218be2542daa',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xe737e5cebeeba77efe34d4aa090756590b1ce275',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -4067,6 +4080,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -4111,6 +4125,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8fe6b999dc680ccfdd5bf7eb0974218be2542daa',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xe737e5cebeeba77efe34d4aa090756590b1ce275',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -4342,6 +4357,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 65,
                 fastConfirmations: 2
@@ -4406,6 +4422,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8fe6b999dc680ccfdd5bf7eb0974218be2542daa',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xe737e5cebeeba77efe34d4aa090756590b1ce275',
                 confirmations: 65,
                 fastConfirmations: 2
@@ -4516,6 +4533,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 1,
                 fastConfirmations: 1
@@ -4575,6 +4593,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8FE6B999Dc680CcFDD5Bf7EB0974218be2542DAA',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xE737e5cEBEEBa77EFE34D4aa090756590b1CE275',
                 confirmations: 1,
                 fastConfirmations: 1
@@ -4729,6 +4748,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -4776,6 +4796,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8FE6B999Dc680CcFDD5Bf7EB0974218be2542DAA',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xE737e5cEBEEBa77EFE34D4aa090756590b1CE275',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -4820,6 +4841,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 1,
                 fastConfirmations: 1
@@ -4865,6 +4887,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8fe6b999dc680ccfdd5bf7eb0974218be2542daa',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xe737e5cebeeba77efe34d4aa090756590b1ce275',
                 confirmations: 1,
                 fastConfirmations: 1
@@ -4911,6 +4934,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 1,
                 fastConfirmations: 1
@@ -5224,6 +5248,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -5288,6 +5313,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8fe6b999dc680ccfdd5bf7eb0974218be2542daa',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xe737e5cebeeba77efe34d4aa090756590b1ce275',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -5408,6 +5434,98 @@ var EarnChain;
     }
 });
 
+/**
+ * Plasma Mainnet chain definition
+ * @remarks
+ * This represents the official production network for the Plasma blockchain.
+ * Plasma is an EVM-equivalent Layer 1 blockchain purpose-built for global
+ * stablecoin payments, with deterministic BFT finality (PlasmaBFT/Fast-HotStuff).
+ */ const Plasma = defineChain({
+    type: 'evm',
+    chain: Blockchain.Plasma,
+    name: 'Plasma',
+    title: 'Plasma Mainnet',
+    nativeCurrency: {
+        name: 'Plasma',
+        symbol: 'XPL',
+        decimals: 18
+    },
+    chainId: 9745,
+    isTestnet: false,
+    explorerUrl: 'https://plasmascan.to/tx/{hash}',
+    rpcEndpoints: [
+        'https://rpc.plasma.to'
+    ],
+    eurcAddress: '0x3EE196E78d4d4248b849B8E1C7F44C5457FAFD2C',
+    usdcAddress: '0x2d661C89D812261039AF9764eceaAee884f5F67F',
+    usdtAddress: null,
+    cctp: {
+        domain: 33,
+        contracts: {
+            v2: {
+                type: 'split',
+                tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
+                confirmations: 3,
+                fastConfirmations: 1
+            }
+        },
+        forwarderSupported: {
+            source: false,
+            destination: false
+        }
+    },
+    kitContracts: {
+        bridge: BRIDGE_CONTRACT_EVM_MAINNET
+    }
+});
+
+/**
+ * Plasma Testnet chain definition
+ * @remarks
+ * This represents the official test network for the Plasma blockchain.
+ * Plasma is an EVM-equivalent Layer 1 blockchain purpose-built for global
+ * stablecoin payments, with deterministic BFT finality (PlasmaBFT/Fast-HotStuff).
+ */ const PlasmaTestnet = defineChain({
+    type: 'evm',
+    chain: Blockchain.Plasma_Testnet,
+    name: 'Plasma Testnet',
+    title: 'Plasma Testnet',
+    nativeCurrency: {
+        name: 'Plasma',
+        symbol: 'XPL',
+        decimals: 18
+    },
+    chainId: 9746,
+    isTestnet: true,
+    explorerUrl: 'https://testnet.plasmascan.to/tx/{hash}',
+    rpcEndpoints: [
+        'https://testnet-rpc.plasma.to'
+    ],
+    eurcAddress: '0x98AfA0F93Dd993B736399f9074eDcEBD1985A330',
+    usdcAddress: '0xE67Fb267022cBA8064Dd388CC2FED724F3120D9D',
+    usdtAddress: null,
+    cctp: {
+        domain: 33,
+        contracts: {
+            v2: {
+                type: 'split',
+                tokenMessenger: '0x8FE6B999Dc680CcFDD5Bf7EB0974218be2542DAA',
+                messageTransmitter: '0xE737e5cEBEEBa77EFE34D4aa090756590b1CE275',
+                confirmations: 3,
+                fastConfirmations: 1
+            }
+        },
+        forwarderSupported: {
+            source: false,
+            destination: false
+        }
+    },
+    kitContracts: {
+        bridge: BRIDGE_CONTRACT_EVM_TESTNET
+    }
+});
+
 /**
  * Plume Mainnet chain definition
  * @remarks
@@ -5439,6 +5557,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -5485,6 +5604,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8FE6B999Dc680CcFDD5Bf7EB0974218be2542DAA',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xE737e5cEBEEBa77EFE34D4aa090756590b1CE275',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -5586,6 +5706,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 33,
                 fastConfirmations: 13
@@ -5651,6 +5772,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8FE6B999Dc680CcFDD5Bf7EB0974218be2542DAA',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xE737e5cEBEEBa77EFE34D4aa090756590b1CE275',
                 confirmations: 33,
                 fastConfirmations: 13
@@ -5710,6 +5832,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 1,
                 fastConfirmations: 1
@@ -5769,6 +5892,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8FE6B999Dc680CcFDD5Bf7EB0974218be2542DAA',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xE737e5cEBEEBa77EFE34D4aa090756590b1CE275',
                 confirmations: 1,
                 fastConfirmations: 1
@@ -5826,6 +5950,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 1,
                 fastConfirmations: 1
@@ -5884,6 +6009,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8FE6B999Dc680CcFDD5Bf7EB0974218be2542DAA',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xE737e5cEBEEBa77EFE34D4aa090756590b1CE275',
                 confirmations: 1,
                 fastConfirmations: 1
@@ -6199,6 +6325,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -6263,6 +6390,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8FE6B999Dc680CcFDD5Bf7EB0974218be2542DAA',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xE737e5cEBEEBa77EFE34D4aa090756590b1CE275',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -6320,6 +6448,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cF5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -6379,6 +6508,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8fe6b999dc680ccfdd5bf7eb0974218be2542daa',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xe737e5cebeeba77efe34d4aa090756590b1ce275',
                 confirmations: 65,
                 fastConfirmations: 1
@@ -6439,6 +6569,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x28b5a0e9C621a5BadaA536219b3a228C8168cf5d',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_MAINNET,
                 messageTransmitter: '0x81D40F21F12A8F0E3252Bccb954D722d4c464B64',
                 confirmations: 3,
                 fastConfirmations: 3
@@ -6484,6 +6615,7 @@ var EarnChain;
             v2: {
                 type: 'split',
                 tokenMessenger: '0x8FE6B999Dc680CcFDD5Bf7EB0974218be2542DAA',
+                tokenMessengerWithFees: TOKEN_MESSENGER_WITH_FEES_EVM_TESTNET,
                 messageTransmitter: '0xE737e5cEBEEBa77EFE34D4aa090756590b1CE275',
                 confirmations: 3,
                 fastConfirmations: 1
@@ -6694,6 +6826,8 @@ var Chains = /*#__PURE__*/Object.freeze({
   OptimismSepolia: OptimismSepolia,
   Pharos: Pharos,
   PharosTestnet: PharosTestnet,
+  Plasma: Plasma,
+  PlasmaTestnet: PlasmaTestnet,
   Plume: Plume,
   PlumeTestnet: PlumeTestnet,
   PolkadotAssetHub: PolkadotAssetHub,
@@ -8735,6 +8869,7 @@ const swapTokenEnumSchema = z.enum([
         [Blockchain.Noble]: 'uusdc',
         [Blockchain.Optimism]: '0x0b2c639c533813f4aa9d7837caf62653d097ff85',
         [Blockchain.Pharos]: '0xC879C018dB60520F4355C26eD1a6D572cdAC1815',
+        [Blockchain.Plasma]: '0x2d661C89D812261039AF9764eceaAee884f5F67F',
         [Blockchain.Plume]: '0x222365EF19F7947e5484218551B56bb3965Aa7aF',
         [Blockchain.Polkadot_Asset_Hub]: '1337',
         [Blockchain.Polygon]: '0x3c499c542cef5e3811e1192ce70d8cc03d5c3359',
@@ -8755,6 +8890,7 @@ const swapTokenEnumSchema = z.enum([
         [Blockchain.Arbitrum_Sepolia]: '0x75faf114eafb1BDbe2F0316DF893fd58CE46AA4d',
         [Blockchain.Avalanche_Fuji]: '0x5425890298aed601595a70AB815c96711a31Bc65',
         [Blockchain.Base_Sepolia]: '0x036CbD53842c5426634e7929541eC2318f3dCF7e',
+        [Blockchain.Celo_Alfajores_Testnet]: '0x2F25deB3848C207fc8E0c34035B3Ba7fC157602B',
         [Blockchain.Codex_Testnet]: '0x6d7f141b6819C2c9CC2f818e6ad549E7Ca090F8f',
         [Blockchain.Cronos_Testnet]: '0xEb33dc5fac03833e132593659e1dE7256aB59794',
         [Blockchain.Edge_Testnet]: '0x2d9F7CAD728051AA35Ecdc472a14cf8cDF5CFD6B',
@@ -8770,6 +8906,7 @@ const swapTokenEnumSchema = z.enum([
         [Blockchain.Noble_Testnet]: 'uusdc',
         [Blockchain.Optimism_Sepolia]: '0x5fd84259d66Cd46123540766Be93DFE6D43130D7',
         [Blockchain.Pharos_Testnet]: '0xcfC8330f4BCAB529c625D12781b1C19466A9Fc8B',
+        [Blockchain.Plasma_Testnet]: '0xE67Fb267022cBA8064Dd388CC2FED724F3120D9D',
         [Blockchain.Plume_Testnet]: '0xcB5f30e335672893c7eb944B374c196392C19D18',
         [Blockchain.Polkadot_Westmint]: '31337',
         [Blockchain.Polygon_Amoy_Testnet]: '0x41e94eb019c0762f9bfcf9fb1e58725bfb0e7582',
@@ -8832,6 +8969,7 @@ const swapTokenEnumSchema = z.enum([
         [Blockchain.Base]: '0x60a3E35Cc302bFA44Cb288Bc5a4F316Fdb1adb42',
         [Blockchain.Cronos]: '0xA6dE01a2d62C6B5f3525d768f34d276652C554c8',
         [Blockchain.Ethereum]: '0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c',
+        [Blockchain.Plasma]: '0x3EE196E78d4d4248b849B8E1C7F44C5457FAFD2C',
         [Blockchain.Solana]: 'HzwqbKZw8HxMN6bF2yFZNrht3c2iXXzpKcFu7uBEDKtr',
         [Blockchain.World_Chain]: '0x1C60ba0A0eD1019e8Eb035E6daF4155A5cE2380B',
         // =========================================================================
@@ -8840,7 +8978,8 @@ const swapTokenEnumSchema = z.enum([
         [Blockchain.Arc_Testnet]: '0x89B50855Aa3bE2F677cD6303Cec089B5F319D72a',
         [Blockchain.Base_Sepolia]: '0x808456652fdb597867f38412077A9182bf77359F',
         [Blockchain.Cronos_Testnet]: '0x31f7538adb53cF16350e6B0c89d03D91b7D12c46',
-        [Blockchain.Ethereum_Sepolia]: '0x08210F9170F89Ab7658F0B5E3fF39b0E03C594D4'
+        [Blockchain.Ethereum_Sepolia]: '0x08210F9170F89Ab7658F0B5E3fF39b0E03C594D4',
+        [Blockchain.Plasma_Testnet]: '0x98AfA0F93Dd993B736399f9074eDcEBD1985A330'
     }
 };
 
@@ -10069,7 +10208,7 @@ const swapTokenEnumSchema = z.enum([
 }
 
 var name$2 = "@circle-fin/bridge-kit";
-var version$2 = "1.13.0";
+var version$2 = "1.14.0";
 var pkg$2 = {
 	name: name$2,
 	version: version$2};
@@ -10122,6 +10261,44 @@ var pkg$2 = {
     }
 });
 
+/**
+ * Canonical list of actions that do not prepare or submit transactions.
+ *
+ * @internal
+ */ const READ_ACTION_KEYS = [
+    'token.allowance',
+    'token.balanceOf',
+    'token.name',
+    'native.balanceOf',
+    'usdc.allowance',
+    'usdc.balanceOf',
+    'usdc.name',
+    'gateway.v1.isDelegate',
+    'gateway.v1.withdrawingBalance',
+    'gateway.v1.withdrawalBlock',
+    'gateway.v1.signBurnIntents'
+];
+const READ_ACTION_KEY_SET = new Set(READ_ACTION_KEYS);
+/**
+ * Check whether a runtime value identifies a read action.
+ *
+ * @param action - The value to classify.
+ * @returns Whether the value is a registered read-action key.
+ *
+ * @example
+ * ```typescript
+ * import { isReadActionKey } from '@core/adapter'
+ *
+ * if (isReadActionKey(value)) {
+ *   await adapter.readAction(value, params, context)
+ * }
+ * ```
+ *
+ * @internal
+ */ function isReadActionKey(action) {
+    return typeof action === 'string' && READ_ACTION_KEY_SET.has(action);
+}
+
 /**
  * Resolves an operation context into concrete chain and address values.
  *
@@ -10201,6 +10378,141 @@ var pkg$2 = {
     };
 }
 
+/**
+ * Create the standard error for a missing or non-read action.
+ *
+ * @param action - The unsupported action value.
+ * @returns A fatal unsupported-action error.
+ *
+ * @internal
+ */ function createUnsupportedReadActionError(action) {
+    return new KitError({
+        ...InputError.UNSUPPORTED_ACTION,
+        recoverability: 'FATAL',
+        message: `Read action "${String(action)}" is not registered in this adapter.`
+    });
+}
+/**
+ * Execute a read through the adapter's dedicated read seam when available.
+ *
+ * @remarks
+ * Fall back to the legacy `prepareAction().execute()` contract so providers
+ * remain runtime-compatible with adapter versions released before `readAction`.
+ * Consumers must upgrade their adapter package for reads to bypass custom
+ * `prepareAction` wrappers.
+ *
+ * @typeParam TAdapterCapabilities - The adapter capabilities type.
+ * @typeParam TActionKey - The read action key.
+ * @param adapter - The adapter that owns the read action.
+ * @param action - The read action to execute.
+ * @param params - The parameters for the read action.
+ * @param ctx - The operation context.
+ * @returns The raw read-action result.
+ * @throws {KitError} When `action` is not a supported read-action key.
+ *
+ * @example
+ * ```typescript
+ * import { executeAdapterReadAction } from '@core/adapter'
+ * import { Ethereum } from '@core/chains'
+ *
+ * const allowance = await executeAdapterReadAction(
+ *   adapter,
+ *   'token.allowance',
+ *   { tokenAddress, delegate },
+ *   { chain: Ethereum },
+ * )
+ * ```
+ *
+ * @internal
+ */ async function executeAdapterReadAction(adapter, action, params, ctx) {
+    if (!isReadActionKey(action)) {
+        throw createUnsupportedReadActionError(action);
+    }
+    const runtimeAdapter = adapter;
+    if (typeof runtimeAdapter.readAction === 'function') {
+        return runtimeAdapter.readAction(action, params, ctx);
+    }
+    let request;
+    try {
+        request = await adapter.prepareAction(action, params, ctx);
+    } catch (error) {
+        if (error instanceof Error && error.message === `Action ${action} is not supported`) {
+            throw createUnsupportedReadActionError(action);
+        }
+        throw error;
+    }
+    return request.execute();
+}
+/**
+ * Read and parse a token allowance while supporting older adapter versions.
+ *
+ * @remarks
+ * Prefer the adapter's dedicated read seam and fall back to the legacy
+ * `prepareAction().execute()` contract when the runtime adapter predates it.
+ *
+ * @typeParam TAdapterCapabilities - The adapter capabilities type.
+ * @param adapter - The adapter that owns the allowance action.
+ * @param params - The token and delegate whose allowance is being read.
+ * @param ctx - The operation context.
+ * @returns The non-negative allowance in token base units.
+ * @throws {KitError} When the action is unsupported or its response is malformed.
+ *
+ * @example
+ * ```typescript
+ * import { readTokenAllowance } from '@core/adapter'
+ * import { Ethereum } from '@core/chains'
+ *
+ * const allowance = await readTokenAllowance(
+ *   adapter,
+ *   { tokenAddress, delegate },
+ *   { chain: Ethereum },
+ * )
+ * ```
+ *
+ * @internal
+ */ async function readTokenAllowance(adapter, params, ctx) {
+    return parseAllowanceResponse(await executeAdapterReadAction(adapter, 'token.allowance', params, ctx));
+}
+/**
+ * Parse a raw token allowance response into base units.
+ *
+ * @param allowanceRaw - The adapter response, optionally wrapped as an Amount output.
+ * @returns The non-negative allowance as a bigint, or zero for a missing value.
+ * @throws {KitError} When the response cannot represent a non-negative bigint.
+ *
+ * @example
+ * ```typescript
+ * import { parseAllowanceResponse } from '@core/adapter'
+ *
+ * const allowance = parseAllowanceResponse({ amount: { raw: 1000000n } })
+ * ```
+ */ function parseAllowanceResponse(allowanceRaw) {
+    let value = allowanceRaw;
+    if (typeof value === 'object' && value !== null && 'amount' in value) {
+        const amount = value.amount;
+        if (typeof amount === 'object' && amount !== null && 'raw' in amount) {
+            value = amount.raw;
+        }
+    }
+    if (value === undefined || value === null) {
+        return 0n;
+    }
+    let allowance;
+    if (typeof value === 'bigint') {
+        allowance = value;
+    } else if (typeof value === 'string') {
+        try {
+            allowance = BigInt(value);
+        } catch  {
+            allowance = undefined;
+        }
+    }
+    if (allowance === undefined || allowance < 0n) {
+        throw createValidationFailedError$1('token.allowance', value, 'token.allowance response must be a non-negative bigint-compatible string or bigint');
+    }
+    return allowance;
+}
+
 /**
  * Schema for validating hexadecimal strings with '0x' prefix.
  *
@@ -10250,7 +10562,7 @@ var pkg$2 = {
  * const result = evmAddressSchema.safeParse(validAddress)
  * console.log(result.success) // true
  * ```
- */ const evmAddressSchema = hexStringSchema.refine((value)=>value.length === 42, 'EVM address must be exactly 42 characters long (0x + 40 hex characters)').transform((value)=>value);
+ */ const evmAddressSchema$1 = hexStringSchema.refine((value)=>value.length === 42, 'EVM address must be exactly 42 characters long (0x + 40 hex characters)').transform((value)=>value);
 /**
  * Schema for validating transaction hashes.
  *
@@ -10787,6 +11099,10 @@ var TransferSpeed;
     token: z.literal('USDC').optional(),
     config: z.object({
         transferSpeed: z.nativeEnum(TransferSpeed).optional(),
+        feePayment: z.enum([
+            'source',
+            'destination'
+        ]).optional(),
         maxFee: z.string().min(1, 'Required').pipe(createDecimalStringValidator({
             allowZero: true,
             regexMessage: MAX_FEE_FORMAT_ERROR_MESSAGE,
@@ -10794,7 +11110,8 @@ var TransferSpeed;
             maxDecimals: 6
         })(z.string())).optional(),
         customFee: customFeeSchema.optional()
-    }).optional()
+    }).optional(),
+    quote: z.string().regex(/^0x([a-fA-F0-9]{2})+$/, 'must be non-empty 0x hex').optional()
 });
 
 /**
@@ -10972,13 +11289,182 @@ var TransferSpeed;
  * @internal
  */ Object.values(Chains).filter((chain)=>isCCTPV2Supported(chain));
 
+/** Decimal string in token minor units, constrained to be strictly positive. */ const positiveAmountSchema = z.string().regex(/^\d+$/, 'must be a non-negative integer string')// Re-check the digit shape here: zod still runs this refinement when the
+// regex check above fails ("dirty"), so guard BigInt() against throwing on a
+// non-numeric value before comparing.
+.refine((value)=>/^\d+$/.test(value) && BigInt(value) > 0n, 'must be greater than zero');
+/**
+ * A 20-byte EVM address in `0x` hex.
+ *
+ * The MVP prepaid-`FORWARD` `burn/usdc` path targets EVM contracts
+ * (`TokenMessengerWithFees` / `GenericExecutor`), so `feeToken` and
+ * `destinationCaller` are constrained to EVM addresses by design. This is an
+ * intentional scope limit, not a permanent one: it can be widened to other
+ * address formats as the fee service expands to more chains.
+ */ const evmAddressSchema = z.string().regex(/^0x[a-fA-F0-9]{40}$/, 'must be a 20-byte 0x address');
+/** Even-length `0x` hex (the empty `0x` is allowed). */ const hexSchema = z.string().regex(/^0x([a-fA-F0-9]{2})*$/, 'must be even-length 0x hex');
+/** Non-empty, even-length `0x` hex. */ const nonEmptyHexSchema = z.string().regex(/^0x([a-fA-F0-9]{2})+$/, 'must be non-empty 0x hex');
+/** A 32-byte `0x` hex hash. */ const bytes32Schema = z.string().regex(/^0x[a-fA-F0-9]{64}$/, 'must be a 32-byte 0x hash');
+/** Decimal string in minor units, allowing zero. */ const numericStringSchema = z.string().regex(/^\d+$/, 'must be a non-negative integer string');
+/** An `https:` URL, used for the optional base-URL override. */ const httpsUrlSchema = z.string().refine((value)=>{
+    try {
+        return new URL(value).protocol === 'https:';
+    } catch  {
+        return false;
+    }
+}, 'must be an https URL');
+const forwardParamsSchema = z.object({
+    hookData: hexSchema.optional(),
+    destinationCaller: evmAddressSchema.optional()
+}).strict();
+const forwardRequestSchema = z.object({
+    type: z.literal('FORWARD'),
+    params: forwardParamsSchema.optional()
+}).strict();
+const preFinalityRequestSchema = z.object({
+    type: z.literal('PRE_FINALITY')
+}).strict();
+/** A single quote request item (`FORWARD` or `PRE_FINALITY`). */ const feeQuoteRequestSchema = z.discriminatedUnion('type', [
+    forwardRequestSchema,
+    preFinalityRequestSchema
+]);
+/** A non-empty list of quote request items with unique types. */ const feeQuoteRequestsSchema = z.array(feeQuoteRequestSchema).min(1, 'at least one request item is required').refine((items)=>new Set(items.map((item)=>item.type)).size === items.length, 'request item types must be unique');
+/**
+ * A structured `Partial<ApiPollingConfig>` polling override.
+ *
+ * Validates the field types callers actually set, so a plain-JS caller passing
+ * `{ timeout: 'soon' }` is rejected at the boundary rather than failing opaquely
+ * inside the transport. Unknown keys pass through so a future `ApiPollingConfig`
+ * field is forwarded rather than silently dropped.
+ */ const apiPollingConfigSchema = z.object({
+    timeout: z.number().int().positive().optional(),
+    maxRetries: z.number().int().nonnegative().optional(),
+    retryDelay: z.number().int().nonnegative().optional(),
+    backoff: z.enum([
+        'fixed',
+        'exponential'
+    ]).optional(),
+    maxRetryDelayMs: z.number().int().positive().optional(),
+    headers: z.record(z.string()).optional()
+}).passthrough();
+/**
+ * The validatable input for {@link fetchFeeQuote}.
+ *
+ * This is the single source of truth for input validation, including the CCTP
+ * domains and the `isTestnet` environment flag. Validating `isTestnet` at
+ * runtime matters because a plain-JS caller who omits it would otherwise leave
+ * it `undefined`, which is falsy and silently selects the production base URL.
+ * (`buildFeeQuoteUrl` independently re-validates the domains for standalone
+ * callers.)
+ */ z.object({
+    sourceDomain: z.number().int().nonnegative(),
+    destinationDomain: z.number().int().nonnegative(),
+    amount: positiveAmountSchema,
+    feeToken: evmAddressSchema.optional(),
+    requests: feeQuoteRequestsSchema,
+    isTestnet: z.boolean(),
+    baseUrl: httpsUrlSchema.optional(),
+    config: apiPollingConfigSchema.optional()
+}).strict();
+const feeQuoteItemSchema = z.object({
+    type: z.string().min(1),
+    amount: numericStringSchema,
+    args: z.array(z.string()),
+    argsHash: bytes32Schema
+}).passthrough();
+const exchangeRatesSchema = z.object({
+    feeTokenUsd: z.string(),
+    destinationTokenUsd: z.string()
+}).passthrough();
+const metadataSchema = z.object({
+    destinationGasPrice: z.string().optional(),
+    exchangeRates: exchangeRatesSchema.optional()
+}).passthrough();
+/** The `expiry` object the Quote API nests the quote TTL under. */ const expirySchema = z.discriminatedUnion('mode', [
+    z.object({
+        mode: z.literal('TIMESTAMP'),
+        expiresAt: z.number().int().nonnegative()
+    }).passthrough(),
+    z.object({
+        mode: z.literal('BLOCK_NUMBER'),
+        expiresAtBlock: z.number().int().nonnegative(),
+        blockEstimatedAt: z.number().int().nonnegative().optional()
+    }).passthrough()
+]);
+/** Schema for a signed fee quote returned by the Quote API. */ z.object({
+    // The runtime YAML spec maps signedQuote to a looser `hex` (which allows
+    // an empty `0x`); we keep the stricter non-empty form. Do not relax
+    // without a reason.
+    signedQuote: nonEmptyHexSchema,
+    issuedAt: z.number().int().nonnegative(),
+    // The API returns a mode-specific timestamp or source-block deadline.
+    expiry: expirySchema,
+    feeTotalAmount: numericStringSchema,
+    feeToken: evmAddressSchema,
+    nonce: numericStringSchema,
+    items: z.array(feeQuoteItemSchema),
+    metadata: metadataSchema.optional()
+}).passthrough();
+/** Validate input to {@link validateQuote}. */ z.object({
+    sourceDomain: z.number().int().nonnegative(),
+    abiSignature: z.string().min(1),
+    args: z.array(z.union([
+        z.string(),
+        z.array(z.string())
+    ])),
+    isTestnet: z.boolean(),
+    baseUrl: httpsUrlSchema.optional(),
+    config: apiPollingConfigSchema.optional()
+}).strict();
+const quoteExpiryStatusSchema = z.discriminatedUnion('mode', [
+    z.object({
+        mode: z.literal('TIMESTAMP'),
+        expired: z.boolean(),
+        secondsRemaining: z.number().int().nonnegative(),
+        expiresAt: z.number().int().nonnegative()
+    }).passthrough(),
+    z.object({
+        mode: z.literal('BLOCK_NUMBER'),
+        expired: z.boolean(),
+        secondsRemaining: z.number().int().nonnegative(),
+        expiresAtBlock: z.number().int().nonnegative(),
+        blockEstimatedAt: z.number().int().nonnegative().optional()
+    }).passthrough()
+]);
+const validateQuoteItemSchema = z.object({
+    type: z.string().min(1),
+    argsMatch: z.boolean(),
+    amount: numericStringSchema.optional(),
+    args: z.array(z.string()).optional(),
+    argsHash: bytes32Schema.optional(),
+    computedArgsHash: bytes32Schema.optional()
+}).passthrough();
+/**
+ * Schema for a response from the Quote API validation endpoint.
+ *
+ * The endpoint takes the source domain as a URL path parameter and does not
+ * return it in the response body, so `sourceDomain` is intentionally not part
+ * of this schema.
+ */ z.object({
+    signedQuote: nonEmptyHexSchema,
+    expiry: quoteExpiryStatusSchema,
+    feeTotalAmount: numericStringSchema,
+    feeToken: evmAddressSchema,
+    nonce: numericStringSchema,
+    claimable: z.boolean(),
+    // Preserve newly introduced server-side reasons as opaque strings rather
+    // than rejecting the entire safety response before the SDK is updated.
+    failedChecks: z.array(z.string().min(1)),
+    items: z.array(validateQuoteItemSchema)
+}).passthrough();
+
 /** SDK name used in telemetry payloads. */ resolveKitSdkName(pkg$2.name);
 
 // Auto-register this kit for user agent tracking
 registerKit(`${pkg$2.name}/${pkg$2.version}`);
 
 var name$1 = "@circle-fin/swap-kit";
-var version$1 = "1.5.1";
+var version$1 = "1.6.0";
 var pkg$1 = {
 	name: name$1,
 	version: version$1};
@@ -10992,7 +11478,7 @@ const optionalChainIdentifierField = chainIdentifierField.optional();
  * Catches obviously malformed addresses at parse time; chain-specific validation
  * is performed in buildServiceParams.
  */ const destinationAddressSchema = z.union([
-    evmAddressSchema,
+    evmAddressSchema$1,
     solanaAddressSchema
 ]);
 /**
@@ -11038,9 +11524,16 @@ const optionalChainIdentifierField = chainIdentifierField.optional();
         message: 'stopLimit must be greater than 0'
     }).optional(),
     customFee: serviceSwapCustomFeeSchema.optional(),
+    apiKey: z.string({
+        invalid_type_error: 'apiKey must be a string'
+    })// Tolerate '' so the `process.env.CIRCLE_API_KEY ?? ''` idiom falls back to
+    // kitKey via resolveApiKey instead of being rejected here.
+    .optional(),
     kitKey: z.string({
         invalid_type_error: 'kitKey must be a string'
-    }).min(1, 'kitKey must be a non-empty string').optional(),
+    })// Tolerate '' so an unset kit-key env var yields the permissionless path,
+    // matching buildServiceParams (which already omits an empty credential).
+    .optional(),
     provider: z.string({
         invalid_type_error: 'provider must be a string'
     }).min(1, 'provider must be a non-empty string').optional(),
@@ -11205,23 +11698,49 @@ const optionalChainIdentifierField = chainIdentifierField.optional();
     fees: z.array(serviceSwapFeeSchema).optional()
 }).passthrough();
 
-/** Placeholder used wherever a kit key is scrubbed from logs, traces, or errors. */ const REDACTED_KIT_KEY = '[redacted]';
+/** Placeholder used wherever a credential is scrubbed from logs, traces, or errors. */ const REDACTED_CREDENTIAL = '[redacted]';
+/**
+ * Config fields that carry a Stablecoin Service credential.
+ *
+ * `apiKey` is the supported field; `kitKey` is the deprecated alias. Redaction
+ * and credential resolution both read this list so a newly added field is
+ * scrubbed everywhere it needs to be.
+ */ const CREDENTIAL_CONFIG_FIELDS = [
+    'apiKey',
+    'kitKey'
+];
 
+/**
+ * Replaces any credential field present on a config with a redaction marker.
+ *
+ * Covers `apiKey` and the deprecated `kitKey`, so adding a credential field
+ * without extending this list cannot silently leak it into a trace. Returns the
+ * config unchanged when it carries no credential.
+ */ const redactCredentialFields = (config)=>{
+    const present = CREDENTIAL_CONFIG_FIELDS.filter((field)=>field in config);
+    if (present.length === 0) {
+        return config;
+    }
+    return present.reduce((acc, field)=>({
+            ...acc,
+            [field]: REDACTED_CREDENTIAL
+        }), {
+        ...config
+    });
+};
 /**
  * Builds a redacted projection of swap params that is safe to embed in error
  * traces (which may be logged downstream). Allow-lists only non-sensitive
  * fields and drops `from` entirely — `from.adapter` can carry signer/private-key
- * material for signer-backed (viem/ethers) flows — and redacts `config.kitKey`.
+ * material for signer-backed (viem/ethers) flows — and redacts every credential
+ * field on `config`.
  */ const redactSwapParamsForTrace = (params)=>{
     if (typeof params !== 'object' || params === null) {
         return params;
     }
     const record = params;
     const config = record['config'];
-    const redactedConfig = typeof config === 'object' && config !== null && 'kitKey' in config ? {
-        ...config,
-        kitKey: REDACTED_KIT_KEY
-    } : config;
+    const redactedConfig = typeof config === 'object' && config !== null ? redactCredentialFields(config) : config;
     return {
         tokenIn: record['tokenIn'],
         tokenOut: record['tokenOut'],
@@ -11305,6 +11824,41 @@ const optionalChainIdentifierField = chainIdentifierField.optional();
  *
  * @internal
  */ const MAX_RATE_ADDRESSES_PER_REQUEST = 100;
+/**
+ * Environment prefixes carried by Circle platform API keys.
+ *
+ * A Circle API key is `<ENV>_API_KEY:<keyId>:<keySecret>`, where `<ENV>` is one
+ * of these prefixes.
+ *
+ * @internal
+ */ const API_KEY_ENV_PREFIXES = [
+    'TEST',
+    'LIVE',
+    'SAND',
+    'SANDBOX',
+    'SMOK',
+    'PROD',
+    'STAG',
+    'DEV'
+];
+/**
+ * Accepted credential formats for Stablecoin Service authentication.
+ *
+ * Matches a Circle platform API key (`<ENV>_API_KEY:<keyId>:<keySecret>`) and
+ * the legacy kit key (`KIT_KEY:<keyId>:<keySecret>`). API keys are the
+ * recommended credential; kit keys remain accepted as the legacy path.
+ *
+ * @remarks
+ * This is a local pre-flight check, not the authority — the Stablecoin Service
+ * validates the credential and answers 401 when it rejects one. The prefix list
+ * is therefore deliberately permissive: a valid key carrying a prefix this SDK
+ * has not been taught about should reach the service and be judged there rather
+ * than be refused locally, since refusing locally is indistinguishable from an
+ * outage to the caller. Kept as the single source of truth so the pattern is
+ * not restated per call site.
+ *
+ * @internal
+ */ const API_KEY_PATTERN = new RegExp(`^(?:KIT_KEY|(?:${API_KEY_ENV_PREFIXES.join('|')})_API_KEY)` + ':[a-zA-Z0-9._-]+:[a-zA-Z0-9._-]+$');
 
 /**
  * Zod schema for validating stop limits.
@@ -11373,13 +11927,14 @@ const optionalChainIdentifierField = chainIdentifierField.optional();
 /**
  * Zod schema for validating API keys.
  *
- * Validates that the API key is a valid API key format.
+ * Accepts a Circle platform API key (`<ENV>_API_KEY:<keyId>:<keySecret>`) and
+ * the legacy kit key (`KIT_KEY:<keyId>:<keySecret>`).
  *
  * @example
  * ```typescript
  * import { apiKeySchema } from '@core/service-client'
  *
- * const result = apiKeySchema.safeParse('KIT_KEY:e84d2546d4e321b2ff427dc988c89503:f84d2548d4e322b2ff427fc989c87503')
+ * const result = apiKeySchema.safeParse('TEST_API_KEY:e84d2546d4e321b2ff427dc988c89503:f84d2548d4e322b2ff427fc989c87503')
  * if (!result.success) {
  *   console.error('Invalid API key format:', result.error.issues)
  * }
@@ -11387,7 +11942,7 @@ const optionalChainIdentifierField = chainIdentifierField.optional();
  */ const apiKeySchema = z.string({
     required_error: 'API key is required',
     invalid_type_error: 'Invalid API key format'
-}).regex(/^KIT_KEY:[a-zA-Z0-9._-]+:[a-zA-Z0-9._-]+$/, 'Invalid API key format');
+}).regex(API_KEY_PATTERN, 'Invalid API key format');
 /**
  * Zod schema for platform fees configuration.
  *
@@ -11908,21 +12463,55 @@ getQuoteRequestBaseSchema.superRefine(requireCrossChainQuoteToAddress);
  * ```
  */ const isGetTokenRatesResponse = (obj)=>getTokenRatesResponseSchema.safeParse(obj).success;
 /**
- * Assert that a Stablecoin Service kit key is not being supplied from a browser.
+ * Resolve the credential to authenticate a Stablecoin Service request with.
+ *
+ * `apiKey` is the supported field; `kitKey` is the deprecated alias kept for
+ * existing integrations. When both are supplied `apiKey` wins, so a caller
+ * migrating field-by-field cannot be silently pinned to a stale credential.
+ *
+ * An empty-string value is treated as absent on either field. Without this, the
+ * common `process.env.CIRCLE_API_KEY ?? ''` idiom (which yields `''` when the
+ * variable is unset) would either shadow a working `kitKey` or, on a bare
+ * `kitKey: ''`, reach downstream validation as an invalid credential instead of
+ * falling through to the permissionless path.
+ *
+ * @param source - Object carrying either credential field, or neither.
+ * @returns The credential to use, or `undefined` for the permissionless
+ *   (keyless) path.
+ *
+ * @example
+ * ```typescript
+ * import { resolveApiKey } from '@core/service-client'
+ *
+ * resolveApiKey({ apiKey: 'TEST_API_KEY:id:secret' }) // 'TEST_API_KEY:id:secret'
+ * resolveApiKey({ kitKey: 'KIT_KEY:id:secret' }) // 'KIT_KEY:id:secret'
+ * resolveApiKey({ apiKey: '', kitKey: 'KIT_KEY:id:secret' }) // 'KIT_KEY:id:secret'
+ * resolveApiKey({ kitKey: '' }) // undefined
+ * resolveApiKey({}) // undefined
+ * ```
+ */ const resolveApiKey = (source)=>{
+    // Treat an empty-string value as absent on either field so the
+    // `env ?? ''` idiom falls through to the next credential (or permissionless).
+    const normalize = (value)=>value !== undefined && value !== '' ? value : undefined;
+    return normalize(source.apiKey) ?? normalize(source.kitKey);
+};
+/**
+ * Assert that a Stablecoin Service credential is not supplied from a browser.
  *
- * The kit key (`KIT_KEY:<id>:<secret>`) is a server-only secret. Every
- * Stablecoin Service request that attaches an `Authorization: Bearer` header
- * funnels through this package, so calling this guard before that header is
- * built prevents the secret from being sent from — and thus bundled into — a
- * client application. In Node.js the check is a no-op, preserving the
- * legitimate "hold the kit key on the server, forward the prepared transaction
- * to the client" flow. When no kit key is supplied the permissionless (keyless)
- * client path remains fully allowed.
+ * An API key (`<ENV>_API_KEY:<id>:<secret>`) and a legacy kit key
+ * (`KIT_KEY:<id>:<secret>`) are both server-only secrets. Every Stablecoin
+ * Service request that attaches an `Authorization: Bearer` header funnels
+ * through this package, so calling this guard before that header is built
+ * prevents the secret from being sent from — and thus bundled into — a client
+ * application. In Node.js the check is a no-op, preserving the legitimate "hold
+ * the credential on the server, forward the prepared transaction to the client"
+ * flow. When no credential is supplied the permissionless (keyless) client path
+ * remains fully allowed.
  *
- * @param apiKey - The inline kit key for the request, or `undefined` when none
- *   was supplied (permissionless mode).
+ * @param apiKey - The inline credential for the request, or `undefined` when
+ *   none was supplied (permissionless mode).
  * @returns Nothing.
- * @throws KitError with VALIDATION_FAILED when a kit key is supplied while
+ * @throws KitError with VALIDATION_FAILED when a credential is supplied while
  *   running in a browser environment. The secret value is never echoed.
  *
  * @example
@@ -11930,10 +12519,10 @@ getQuoteRequestBaseSchema.superRefine(requireCrossChainQuoteToAddress);
  * import { assertBrowserSafeApiKey } from '@core/service-client'
  *
  * // Server (Node.js): no-op, request proceeds with the Authorization header.
- * assertBrowserSafeApiKey('KIT_KEY:my-id:my-secret')
+ * assertBrowserSafeApiKey('TEST_API_KEY:my-id:my-secret')
  *
  * // Browser: throws to stop the secret from leaking into the client bundle.
- * assertBrowserSafeApiKey('KIT_KEY:my-id:my-secret')
+ * assertBrowserSafeApiKey('TEST_API_KEY:my-id:my-secret')
  *
  * // Browser, permissionless: allowed.
  * assertBrowserSafeApiKey(undefined)
@@ -11943,7 +12532,7 @@ getQuoteRequestBaseSchema.superRefine(requireCrossChainQuoteToAddress);
         return;
     }
     if (isBrowserEnvironment()) {
-        throw createValidationFailedError$1('kitKey', '[redacted]', 'kitKey must not be provided in a browser environment — it is a server-only secret. Run kit operations that use a kit key on your server, or omit kitKey to use the permissionless (keyless) client path');
+        throw createValidationFailedError$1('apiKey', '[redacted]', 'apiKey must not be provided in a browser environment — it is a server-only secret. Run kit operations that use an API key on your server, or omit apiKey (and the legacy kitKey) to use the permissionless (keyless) client path');
     }
 };
 
@@ -11955,7 +12544,8 @@ getQuoteRequestBaseSchema.superRefine(requireCrossChainQuoteToAddress);
  *
  * @remarks
  * - Input validation leverages Zod schemas to surface actionable KitErrors.
- * - API key format must match `KIT_KEY:<keyId>:<keySecret>`
+ * - API key format must match `<ENV>_API_KEY:<keyId>:<keySecret>`, or the
+ *   legacy `KIT_KEY:<keyId>:<keySecret>`
  *
  * @param params - The create transaction request parameters with API key.
  * @returns A promise that resolves to a typed {@link CreateSwapResponse}.
@@ -11984,7 +12574,7 @@ getQuoteRequestBaseSchema.superRefine(requireCrossChainQuoteToAddress);
  *       recipientAddress: '0x050928e1f9086b20539c767c96909663ff7fbdf2',
  *     },
  *   },
- *   apiKey: 'KIT_KEY:example-key:example-secret',
+ *   apiKey: 'TEST_API_KEY:example-key:example-secret',
  * })
  *
  * console.log(`Transaction target: ${transaction.transaction.target}`)
@@ -12003,13 +12593,13 @@ getQuoteRequestBaseSchema.superRefine(requireCrossChainQuoteToAddress);
     const url = new URL('/v1/stablecoinKits/swap', STABLECOIN_SERVICE_BASE_URL).toString();
     // Remove the API key from the request body
     const { apiKey, ...requestBody } = validatedParams;
-    // Never let a server-only kit key leave a browser (no-op in Node.js).
+    // Never let a server-only credential leave a browser (no-op in Node.js).
     assertBrowserSafeApiKey(apiKey);
     const effectiveConfig = {
         ...DEFAULT_CONFIG,
         headers: {
             ...DEFAULT_CONFIG.headers,
-            // Permissionless mode: no Authorization header when the kit key is absent.
+            // Permissionless mode: no Authorization header when the credential is absent.
             ...apiKey !== undefined && {
                 Authorization: `Bearer ${apiKey}`
             }
@@ -12159,7 +12749,7 @@ getQuoteRequestBaseSchema.superRefine(requireCrossChainQuoteToAddress);
     }
     // Use validated data
     const validatedParams = result.data;
-    // Never let a server-only kit key leave a browser (no-op in Node.js).
+    // Never let a server-only credential leave a browser (no-op in Node.js).
     assertBrowserSafeApiKey(validatedParams.apiKey);
     // Build the API URL
     const url = buildQuoteUrl(validatedParams);
@@ -12168,7 +12758,7 @@ getQuoteRequestBaseSchema.superRefine(requireCrossChainQuoteToAddress);
         ...DEFAULT_CONFIG,
         headers: {
             ...DEFAULT_CONFIG.headers,
-            // Permissionless mode: no Authorization header when the kit key is absent.
+            // Permissionless mode: no Authorization header when the credential is absent.
             ...validatedParams.apiKey !== undefined && {
                 Authorization: `Bearer ${validatedParams.apiKey}`
             }
@@ -12233,14 +12823,14 @@ getQuoteRequestBaseSchema.superRefine(requireCrossChainQuoteToAddress);
             toChain: result.data.toChain
         }
     };
-    // Never let a server-only kit key leave a browser (no-op in Node.js).
+    // Never let a server-only credential leave a browser (no-op in Node.js).
     assertBrowserSafeApiKey(validatedParams.apiKey);
     const url = buildSwapStatusUrl(validatedParams);
     const effectiveConfig = {
         ...DEFAULT_CONFIG,
         headers: {
             ...DEFAULT_CONFIG.headers,
-            // Permissionless mode: no Authorization header when the kit key is absent.
+            // Permissionless mode: no Authorization header when the credential is absent.
             ...validatedParams.apiKey !== undefined && {
                 Authorization: `Bearer ${validatedParams.apiKey}`
             }
@@ -12266,7 +12856,7 @@ getQuoteRequestBaseSchema.superRefine(requireCrossChainQuoteToAddress);
  * const url = buildTokenRatesUrl({
  *   chain: 'Ethereum',
  *   addresses: ['0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48'],
- *   apiKey: 'KIT_KEY:key:secret',
+ *   apiKey: 'TEST_API_KEY:key:secret',
  * })
  * // => 'https://api.circle.com/v1/stablecoinKits/rates?chain=Ethereum&addresses=...'
  * ```
@@ -12339,14 +12929,14 @@ getQuoteRequestBaseSchema.superRefine(requireCrossChainQuoteToAddress);
             addresses: result.data.addresses
         }
     };
-    // Never let a server-only kit key leave a browser (no-op in Node.js).
+    // Never let a server-only credential leave a browser (no-op in Node.js).
     assertBrowserSafeApiKey(validatedParams.apiKey);
     const url = buildTokenRatesUrl(validatedParams);
     const effectiveConfig = {
         ...DEFAULT_CONFIG,
         headers: {
             ...DEFAULT_CONFIG.headers,
-            // Permissionless mode: no Authorization header when the kit key is absent.
+            // Permissionless mode: no Authorization header when the credential is absent.
             ...validatedParams.apiKey !== undefined && {
                 Authorization: `Bearer ${validatedParams.apiKey}`
             }
@@ -12784,7 +13374,7 @@ const abiParameterSchema = z.object({
  */ z.object({
     type: z.literal('evm'),
     abi: abiSchema,
-    address: evmAddressSchema,
+    address: evmAddressSchema$1,
     functionName: z.string({
         required_error: 'Function name is required',
         invalid_type_error: 'Function name must be a string'
@@ -12821,7 +13411,7 @@ const abiParameterSchema = z.object({
  * }
  * ```
  */ z.object({
-    address: evmAddressSchema,
+    address: evmAddressSchema$1,
     value: z.bigint({
         required_error: 'Value is required for native transfers',
         invalid_type_error: 'Value must be a bigint'
@@ -13353,7 +13943,7 @@ z.object({
     signature: evmSignatureSchema,
     tokenInputs: z.array(z.object({
         permitType: z.nativeEnum(PermitType),
-        token: evmAddressSchema,
+        token: evmAddressSchema$1,
         amount: z.bigint().refine((value)=>value >= 0n, {
             message: 'amount must be a non-negative bigint'
         }),
@@ -13614,7 +14204,7 @@ enc.encode('used_transfer_spec_hash');
 });
 
 /**
- * Assert that the kit key is valid for swap operations.
+ * Assert that the credential is valid for swap operations.
  *
  * @remarks
  * This validation is called when swap operations are executed, not at construction time.
@@ -13622,34 +14212,35 @@ enc.encode('used_transfer_spec_hash');
  * at usage time rather than construction time.
  *
  * Validates:
- * - Kit key matches the required format (KIT_KEY:id:secret) when provided.
- *   An absent or empty kit key is permitted (permissionless mode) — the swap
- *   service now treats the key as optional.
+ * - The credential matches an accepted format when provided — a Circle API key
+ *   (`<ENV>_API_KEY:id:secret`) or a legacy kit key (`KIT_KEY:id:secret`).
+ *   An absent or empty credential is permitted (permissionless mode) — the swap
+ *   service treats the credential as optional.
  *
- * @param kitKey - The inline kit key from the swap operation config (optional)
- * @throws KitError with VALIDATION_FAILED if a kit key is provided but does not
- *   match the KIT_KEY:<keyId>:<keySecret> format
+ * @param apiKey - The inline credential from the swap operation config (optional)
+ * @throws KitError with VALIDATION_FAILED if a credential is provided but does
+ *   not match an accepted format
  *
  * @example
  * ```typescript
- * import { assertKitKey } from './assertKitKey'
+ * import { assertApiKey } from './assertApiKey'
  *
- * const kitKey = 'KIT_KEY:9d1bd085-bad2-4a2b-ae67-5814b85167c9:secretvalue'
+ * const apiKey = 'TEST_API_KEY:9d1bd085-bad2-4a2b-ae67-5814b85167c9:secretvalue'
  *
- * // Validate kit key before use
- * assertKitKey(kitKey)
+ * // Validate the credential before use
+ * assertApiKey(apiKey)
  * ```
- */ function assertKitKey(kitKey) {
-    // Permissionless mode: the swap service treats the kit key as optional, so an
-    // absent (or empty) key is valid. Only validate the format when a key is
+ */ function assertApiKey(apiKey) {
+    // Permissionless mode: the swap service treats the credential as optional, so
+    // an absent (or empty) value is valid. Only validate the format when one is
     // actually provided.
-    if (!kitKey) {
+    if (!apiKey) {
         return;
     }
-    const apiKeyResult = apiKeySchema.safeParse(kitKey);
+    const apiKeyResult = apiKeySchema.safeParse(apiKey);
     if (!apiKeyResult.success) {
         const errors = apiKeyResult.error.issues.map((issue)=>issue.message).join(', ');
-        throw createValidationFailedError$1('kitKey', REDACTED_KIT_KEY, `Invalid API key format. ${errors}. Expected format: KIT_KEY:<keyId>:<keySecret>. Get your free Kit Key at: https://developers.circle.com/w3s/keys#kit-keys`);
+        throw createValidationFailedError$1('apiKey', REDACTED_CREDENTIAL, `Invalid API key format. ${errors}. Expected format: <ENV>_API_KEY:<keyId>:<keySecret> (for example TEST_API_KEY:... or LIVE_API_KEY:...). Legacy KIT_KEY:<keyId>:<keySecret> values are still accepted. Get your key at: https://developers.circle.com/w3s/keys`);
     }
 }
 
@@ -13841,7 +14432,7 @@ const TOKEN_REGISTRY$3 = createTokenRegistry();
     }
     // Validate recipient address format matches the chain type
     if (chain.type === 'evm') {
-        const result = evmAddressSchema.safeParse(recipientAddress);
+        const result = evmAddressSchema$1.safeParse(recipientAddress);
         if (!result.success) {
             throw createInvalidAddressError(recipientAddress, chain.name, '0x-prefixed 42-character hex string (0x + 40 hex characters)');
         }
@@ -13903,7 +14494,7 @@ function resolveFeePayoutChain(tokenIn, tokenOut, sourceChain, destinationChain)
  *   to: '0x742d35Cc6634C0532925a3b844Bc454e4438f44e',
  *   config: {
  *     slippageBps: 300,
- *     kitKey: 'KIT_KEY:...:...'  // Required inline kit key
+ *     apiKey: 'TEST_API_KEY:...:...'  // Inline credential (optional)
  *   }
  * }
  *
@@ -13941,18 +14532,17 @@ function resolveFeePayoutChain(tokenIn, tokenOut, sourceChain, destinationChain)
     validateResolvedAddress(resolvedTokenInAddress, chain);
     validateResolvedAddress(resolvedTokenOutAddress, destinationChain);
     validateResolvedAddress(to, destinationChain);
-    const kitKey = config?.kitKey;
-    // Validate the kit key format when one is provided (permissionless otherwise).
-    assertKitKey(kitKey);
+    const apiKey = resolveApiKey(config ?? {});
+    // Validate the credential format when one is provided (permissionless
+    // otherwise).
+    assertApiKey(apiKey);
     // Validate custom fee configuration if present
     const customFee = config?.customFee;
     if (customFee !== undefined) {
         const feePayoutChain = resolveFeePayoutChain(tokenIn, tokenOut, chain, destinationChain);
         validateCustomFeeConfig(customFee, feePayoutChain);
     }
-    // Build CreateSwapParams for service client
-    // Use object spread to conditionally include optional properties
-    // Note: Service client expects 'apiKey' field, so we map kitKey → apiKey
+    // Build CreateSwapParams for service client, spreading optional properties.
     const chainName = chain.chain // The API expects the Blockchain enum value format like "World_Chain"
     ;
     const destinationChainName = destinationChain.chain;
@@ -13987,9 +14577,9 @@ function resolveFeePayoutChain(tokenIn, tokenOut, sourceChain, destinationChain)
                 }
             }
         },
-        // Map kitKey → apiKey for the service client; omitted in permissionless mode.
-        ...kitKey ? {
-            apiKey: kitKey
+        // Omitted in permissionless mode.
+        ...apiKey ? {
+            apiKey
         } : {}
     };
 }
@@ -15298,14 +15888,13 @@ const TOKEN_REGISTRY$2 = createTokenRegistry();
         return;
     }
     // For non-native tokens (SPL tokens, ERC-20 tokens), check the token balance
-    const balancePrepared = await adapter.prepareAction('token.balanceOf', {
+    const balance = await executeAdapterReadAction(adapter, 'token.balanceOf', {
         tokenAddress: tokenInAddress,
         walletAddress
     }, context);
-    const balance = await balancePrepared.execute();
     // Compare balances
     const requiredAmount = BigInt(amount);
-    const currentBalance = BigInt(balance);
+    const currentBalance = BigInt(String(balance));
     if (currentBalance < requiredAmount) {
         throw new KitError({
             ...BalanceError.INSUFFICIENT_TOKEN,
@@ -15894,9 +16483,9 @@ async function fetchSameChainStatusSnapshot({ isCrossChainSwap, txHash, chain, a
  * ```typescript
  * import { StablecoinServiceSwapProvider } from '@circle-fin/provider-stablecoin-service-swap'
  *
- * // Create provider with developer fee (1 USDC)
+ * // Create provider with developer fee (1 USDC).
+ * // Credentials are supplied per operation via `config.apiKey`, not here.
  * const provider = new StablecoinServiceSwapProvider({
- *   kitKey: process.env.STABLECOIN_KIT_API_KEY,
  *   customFee: {
  *     amount: '1000000', // 1 USDC in base units (6 decimals)
  *     recipientAddress: '0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb0'
@@ -16466,11 +17055,10 @@ async function fetchSameChainStatusSnapshot({ isCrossChainSwap, txHash, chain, a
    * @throws Error if the adapter fails to prepare or execute approval transactions
    * @throws Error if transaction confirmation fails or times out
    */ async handleUsdtApproval(adapter, chain, executionCtx, adapterContractAddress, resolvedContext, executedTransactions) {
-        const allowanceRequest = await adapter.prepareAction('token.allowance', {
+        const current = await readTokenAllowance(adapter, {
             tokenAddress: executionCtx.tokenInAddress,
             delegate: adapterContractAddress
         }, resolvedContext);
-        const current = BigInt(await allowanceRequest.execute());
         const required = BigInt(executionCtx.amount);
         if (current >= required) {
             // Sufficient allowance - proceed to swap
@@ -16559,9 +17147,7 @@ async function fetchSameChainStatusSnapshot({ isCrossChainSwap, txHash, chain, a
    * import { createAdapterFromPrivateKey } from '@circle-fin/adapter-viem-v2'
    * import { Ethereum } from '@core/chains'
    *
-   * const provider = new StablecoinServiceSwapProvider({
-   *   kitKey: process.env.STABLECOIN_KIT_API_KEY
-   * })
+   * const provider = new StablecoinServiceSwapProvider()
    *
    * const adapter = createAdapterFromPrivateKey({
    *   privateKey: process.env.PRIVATE_KEY
@@ -17055,7 +17641,7 @@ const optionalSwapChainIdentifierField = swapChainIdentifierField.optional();
     /**
      * Fee recipient address (required).
      * Must be a valid EVM address or Solana address.
-     */ recipientAddress: z.string().refine((value)=>evmAddressSchema.safeParse(value).success || solanaAddressSchema.safeParse(value).success, {
+     */ recipientAddress: z.string().refine((value)=>evmAddressSchema$1.safeParse(value).success || solanaAddressSchema.safeParse(value).success, {
         message: 'recipientAddress must be a valid blockchain address: EVM (0x + 40 hex chars) or Solana (base58, 32-44 chars)'
     })
 }).strict();
@@ -17067,7 +17653,8 @@ const optionalSwapChainIdentifierField = swapChainIdentifierField.optional();
  * - slippageBps: Optional positive number for slippage tolerance
  * - stopLimit: Optional decimal string for minimum output
  * - customFee: Optional fee configuration
- * - kitKey: Optional string identifier
+ * - apiKey: Optional credential string
+ * - kitKey: Optional credential string (deprecated alias for apiKey)
  */ const swapConfigSchema = z.object({
     allowanceStrategy: allowanceStrategySchema.optional(),
     slippageBps: z.number().int().min(0).optional(),
@@ -17077,11 +17664,12 @@ const optionalSwapChainIdentifierField = swapChainIdentifierField.optional();
         attributeName: 'stopLimit'
     })(z.string())).optional(),
     customFee: swapCustomFeeSchema.optional(),
+    apiKey: z.string().optional(),
     kitKey: z.string().optional()
 });
 const swapDestinationSchema = z.object({
     chain: optionalSwapChainIdentifierField,
-    recipientAddress: z.string().refine((value)=>evmAddressSchema.safeParse(value).success || solanaAddressSchema.safeParse(value).success, {
+    recipientAddress: z.string().refine((value)=>evmAddressSchema$1.safeParse(value).success || solanaAddressSchema.safeParse(value).success, {
         message: 'recipientAddress must be a valid blockchain address: EVM (0x + 40 hex chars) or Solana (base58, 32-44 chars)'
     }).optional()
 }).strict();
@@ -19188,7 +19776,8 @@ const transformAmount = (value, direction, decimals)=>formatUnits(value, decimal
 /**
  * Helper to format the config section of a swap result, transforming fee amounts.
  *
- * Strips sensitive fields like kitKey from the config before returning.
+ * Strips the credential fields (`apiKey` and the deprecated `kitKey`) from the
+ * config before returning, so a result is safe to log or serialize.
  *
  * @param config - The swap config from the provider.
  * @param outputTokenTransform - The amount transformer for output-token-denominated values (fees and amountOut).
@@ -19197,11 +19786,11 @@ const transformAmount = (value, direction, decimals)=>formatUnits(value, decimal
     if (!config) {
         return undefined;
     }
-    // Remove kitKey from the config
-    const cloneConfig = {
-        ...config
-    };
-    delete cloneConfig.kitKey;
+    // Rebuild the config without any credential field. Filtering entries rather
+    // than deleting them avoids reading the deprecated `kitKey` property
+    // directly, and keeps the credential list in one place.
+    const credentialFields = CREDENTIAL_CONFIG_FIELDS;
+    const cloneConfig = Object.fromEntries(Object.entries(config).filter(([key])=>!credentialFields.includes(key)));
     if (Object.keys(cloneConfig).length === 0) {
         return undefined;
     }
@@ -19402,9 +19991,9 @@ const transformAmount = (value, direction, decimals)=>formatUnits(value, decimal
     try {
         // Step 1: Build quote params directly (no need for buildServiceParams)
         // Use chain.chain (Blockchain enum value like "World_Chain") not chain.name
-        // The kit key is optional (permissionless mode); when absent the quote is
-        // fetched without an Authorization header.
-        const kitKey = params.config?.kitKey;
+        // The credential is optional (permissionless mode); when absent the quote
+        // is fetched without an Authorization header.
+        const apiKey = resolveApiKey(params.config ?? {});
         // Resolve token aliases to addresses for the quote API
         // The quote endpoint requires resolved addresses, not aliases like 'USDC'
         const chain = params.from.chain;
@@ -19429,8 +20018,8 @@ const transformAmount = (value, direction, decimals)=>formatUnits(value, decimal
             ...params.config?.slippageBps !== undefined && {
                 slippageBps: params.config.slippageBps
             },
-            ...kitKey ? {
-                apiKey: kitKey
+            ...apiKey ? {
+                apiKey
             } : {}
         };
         // Step 2: Get quote from service
@@ -19834,7 +20423,7 @@ const sleep$1 = async (ms)=>new Promise((resolve)=>setTimeout(resolve, ms));
  * the service returns `receivingTokenDecimals`. When decimals are missing
  * the field is omitted entirely (never raw base units).
  *
- * @param params - `txHash`, `chainIn`, optional `chainOut`, and `kitKey`.
+ * @param params - `txHash`, `chainIn`, optional `chainOut`, and `apiKey`.
  * @returns A single snapshot of the swap's status.
  * @throws \{KitError\} If `chainIn` or `chainOut` is malformed.
  *
@@ -19850,7 +20439,7 @@ const sleep$1 = async (ms)=>new Promise((resolve)=>setTimeout(resolve, ms));
  *   txHash: result.txHash,
  *   chainIn: result.chainIn,
  *   chainOut: result.chainOut,
- *   kitKey: process.env.KIT_KEY ?? '',
+ *   apiKey: process.env.CIRCLE_API_KEY,
  * })
  * while (status.progress.status === 'PENDING') {
  *   await new Promise((r) => setTimeout(r, 3_000))
@@ -19858,7 +20447,7 @@ const sleep$1 = async (ms)=>new Promise((resolve)=>setTimeout(resolve, ms));
  *     txHash: result.txHash,
  *     chainIn: result.chainIn,
  *     chainOut: result.chainOut,
- *     kitKey: process.env.KIT_KEY ?? '',
+ *     apiKey: process.env.CIRCLE_API_KEY,
  *   })
  * }
  *
@@ -19876,14 +20465,15 @@ const sleep$1 = async (ms)=>new Promise((resolve)=>setTimeout(resolve, ms));
     const chainIn = normalizeChain(params.chainIn, 'chainIn');
     const chainOut = params.chainOut === undefined ? undefined : normalizeChain(params.chainOut, 'chainOut');
     const isCrossChain = chainOut !== undefined && chainOut !== chainIn;
+    const apiKey = resolveApiKey(params);
     const request = {
         txHash: params.txHash,
         chain: chainIn,
         ...isCrossChain && {
             toChain: chainOut
         },
-        ...params.kitKey ? {
-            apiKey: params.kitKey
+        ...apiKey ? {
+            apiKey
         } : {}
     };
     let raw = await getSwapStatus$1(request);
@@ -19962,9 +20552,9 @@ const isResultShape = (params)=>'result' in params;
  *
  * Two parameter shapes are accepted:
  *
- * - Pass the {@link SwapResult} directly: `{ result, kitKey, ... }`.
+ * - Pass the {@link SwapResult} directly: `{ result, apiKey, ... }`.
  *   Cleanest when chaining off `kit.swap()`.
- * - Pass discrete fields: `{ txHash, chainIn, chainOut?, kitKey, ... }`.
+ * - Pass discrete fields: `{ txHash, chainIn, chainOut?, apiKey, ... }`.
  *   Useful for resuming an in-flight swap from a persisted record.
  *
  * @param params - Wait configuration. See {@link WaitForSwapParams}.
@@ -19984,7 +20574,7 @@ const isResultShape = (params)=>'result' in params;
  *
  * const final = await waitForSwap({
  *   result,
- *   kitKey: process.env.KIT_KEY ?? '',
+ *   apiKey: process.env.CIRCLE_API_KEY,
  *   onProgress: (snapshot) => {
  *     console.log(snapshot.progress.substatus ?? snapshot.progress.status)
  *   },
@@ -20002,7 +20592,7 @@ const isResultShape = (params)=>'result' in params;
  *   txHash: '0x…',
  *   chainIn: 'Ethereum',
  *   chainOut: 'Base',
- *   kitKey: process.env.KIT_KEY ?? '',
+ *   apiKey: process.env.CIRCLE_API_KEY,
  * })
  * ```
  */ async function waitForSwap(params) {
@@ -20018,14 +20608,15 @@ const isResultShape = (params)=>'result' in params;
     const chainOut = isResultShape(params) ? params.result.chainOut : params.chainOut;
     // Delegate parameter validation (txHash, chainIn, chainOut) to
     // getSwapStatus so the same rules apply to both helpers.
+    const apiKey = resolveApiKey(params);
     const statusParams = {
         txHash,
         chainIn,
         ...chainOut !== undefined && {
             chainOut
         },
-        ...params.kitKey ? {
-            kitKey: params.kitKey
+        ...apiKey ? {
+            apiKey
         } : {}
     };
     const deadline = Date.now() + timeoutMs;
@@ -20149,7 +20740,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
  *
  * @param context - SwapKit context (provides the `TokenRegistry` used for
  *                  symbol resolution).
- * @param params - `chain`, optional `tokens`, and `kitKey`.
+ * @param params - `chain`, optional `tokens`, and `apiKey`.
  * @returns A nested map of `[chain][address] → { priceUSD, fetchedAt }`.
  * @throws \{KitError\} If `chain` cannot be resolved, `tokens` exceeds 100
  *         entries, or any entry is neither a registered symbol nor a
@@ -20164,7 +20755,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
  * const { rates } = await getTokenRates(context, {
  *   chain: Blockchain.Ethereum,
  *   tokens: ['USDC', 'EURC', 'NATIVE'],
- *   kitKey: process.env.KIT_KEY ?? '',
+ *   apiKey: process.env.CIRCLE_API_KEY,
  * })
  *
  * const usdc = rates['Ethereum']?.['0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48']
@@ -20185,10 +20776,11 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
     // valid Blockchain enum string, so `getChainByEnum` is guaranteed to resolve.
     const chainDef = getChainByEnum(chain);
     const resolvedAddresses = params.tokens?.map((entry, index)=>resolveTokenEntry(entry, index, chain, chainDef, context));
+    const apiKey = resolveApiKey(params);
     return getTokenRates$1({
         chain,
-        ...params.kitKey ? {
-            apiKey: params.kitKey
+        ...apiKey ? {
+            apiKey
         } : {},
         ...resolvedAddresses !== undefined && {
             addresses: resolvedAddresses
@@ -20819,7 +21411,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
    * is formatted as a human-readable decimal string; when decimals are
    * missing the field is omitted entirely (never raw base units).
    *
-   * @param params - `txHash`, `chainIn`, optional `chainOut`, and `kitKey`.
+   * @param params - `txHash`, `chainIn`, optional `chainOut`, and `apiKey`.
    * @returns A snapshot of the swap's status at the time of the call.
    * @throws \{KitError\} If `chainIn` or `chainOut` is malformed.
    *
@@ -20832,7 +21424,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
    *   txHash: result.txHash,
    *   chainIn: result.chainIn,
    *   chainOut: result.chainOut,
-   *   kitKey: process.env.KIT_KEY ?? '',
+   *   apiKey: process.env.CIRCLE_API_KEY,
    * })
    * console.log(status.progress.status, status.progress.substatus)
    * ```
@@ -20844,7 +21436,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
    *   txHash: result.txHash,
    *   chainIn: result.chainIn,
    *   chainOut: result.chainOut,
-   *   kitKey: process.env.KIT_KEY ?? '',
+   *   apiKey: process.env.CIRCLE_API_KEY,
    * })
    * while (status.progress.status === 'PENDING') {
    *   await new Promise((r) => setTimeout(r, 3_000))
@@ -20852,7 +21444,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
    *     txHash: result.txHash,
    *     chainIn: result.chainIn,
    *     chainOut: result.chainOut,
-   *     kitKey: process.env.KIT_KEY ?? '',
+   *     apiKey: process.env.CIRCLE_API_KEY,
    *   })
    * }
    *
@@ -20883,7 +21475,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
    * 5xx, etc.) surface unchanged so the caller can decide whether to
    * retry the whole wait. The wait itself only emits a timeout error.
    *
-   * @param params - Wait configuration including identifiers, kit key,
+   * @param params - Wait configuration including identifiers, API key,
    *                 optional `timeoutMs`, and an optional `onProgress`
    *                 callback fired on every successful poll.
    * @returns The first terminal {@link SwapStatusResult} observed.
@@ -20902,7 +21494,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
    *
    * const final = await kit.waitForSwap({
    *   result,
-   *   kitKey: process.env.KIT_KEY ?? '',
+   *   apiKey: process.env.CIRCLE_API_KEY,
    *   onProgress: (snap) => console.log(snap.progress.substatus ?? snap.progress.status),
    * })
    *
@@ -20920,7 +21512,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
    *   txHash: persisted.txHash,
    *   chainIn: persisted.chainIn,
    *   chainOut: persisted.chainOut,
-   *   kitKey: process.env.KIT_KEY ?? '',
+   *   apiKey: process.env.CIRCLE_API_KEY,
    * })
    * ```
    */ async waitForSwap(params) {
@@ -20954,7 +21546,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
    * not cache a rate for the native asset on that chain, the response simply
    * omits the address.
    *
-   * @param params - `chain`, optional `tokens`, and `kitKey`.
+   * @param params - `chain`, optional `tokens`, and `apiKey`.
    * @returns A nested map of `[chain][address] → { priceUSD, fetchedAt }`.
    * @throws \{KitError\} If `chain` is malformed, `tokens` exceeds 100
    *         entries, or any entry is neither a registered symbol nor a
@@ -20966,7 +21558,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
    * const { rates } = await kit.getTokenRates({
    *   chain: 'Ethereum',
    *   tokens: ['USDC', 'EURC', 'NATIVE'],
-   *   kitKey: process.env.KIT_KEY ?? '',
+   *   apiKey: process.env.CIRCLE_API_KEY,
    * })
    *
    * const usdc = rates['Ethereum']?.['0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48']
@@ -20980,7 +21572,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
    *   chain: 'Ethereum',
    *   // 'USDC' (registry symbol) + raw USDT address
    *   tokens: ['USDC', '0xdAC17F958D2ee523a2206206994597C13D831ec7'],
-   *   kitKey: process.env.KIT_KEY ?? '',
+   *   apiKey: process.env.CIRCLE_API_KEY,
    * })
    * ```
    *
@@ -20989,7 +21581,7 @@ function resolveTokenEntry(entry, index, chain, chainDef, context) {
    * ```typescript
    * const { rates } = await kit.getTokenRates({
    *   chain: 'Base',
-   *   kitKey: process.env.KIT_KEY ?? '',
+   *   apiKey: process.env.CIRCLE_API_KEY,
    * })
    * ```
    */ async getTokenRates(params) {
@@ -21244,7 +21836,7 @@ registerKit(`${pkg$1.name}/${pkg$1.version}`);
 };
 
 var name = "@circle-fin/earn-kit";
-var version = "1.5.0";
+var version = "1.6.0";
 var pkg = {
 	name: name,
 	version: version};
@@ -21316,7 +21908,7 @@ function isNonNegativeBigIntLike(value) {
     }
 }
 const hexSignatureSchema = evmSignatureSchema;
-const hexAddressSchema = evmAddressSchema;
+const hexAddressSchema = evmAddressSchema$1;
 // '0x' prefix + 32 bytes * 2 hex chars.
 const BYTES32_HEX_LENGTH = 66;
 const bridgeFeeTokenSchema = hexAddressSchema;
@@ -22221,7 +22813,7 @@ createTokenRegistry();
  * fast instead of round-tripping to the service.
  *
  * @internal
- */ const recipientEvmAddressSchema = evmAddressSchema.refine((address)=>!ZERO_EVM_ADDRESS_REGEX.test(address), 'address must not be the zero address').refine(isValidEip55Checksum, 'address has an invalid EIP-55 checksum');
+ */ const recipientEvmAddressSchema = evmAddressSchema$1.refine((address)=>!ZERO_EVM_ADDRESS_REGEX.test(address), 'address must not be the zero address').refine(isValidEip55Checksum, 'address has an invalid EIP-55 checksum');
 /**
  * Schema for the adapter context within earn operations.
  *
@@ -22253,19 +22845,39 @@ const sourceAdapterContextSchema = z.object({
 /**
  * Schema for the EarnConfig options.
  *
- * Validate the optional Kit Key field using the standard `apiKeySchema`
- * format (`KIT_KEY:<keyId>:<keySecret>`). When omitted, the SDK
- * operates in permissionless mode. `baseUrl` overrides the Earn Service
- * endpoint (e.g. staging); `batchTransactions: false` opts out of atomic
- * batched execution. Both are forwarded to the provider, so this `.strict()`
- * schema must accept them or a valid config object is rejected.
+ * Validate the *resolved* credential using the standard `apiKeySchema` format
+ * (`<ENV>_API_KEY:<keyId>:<keySecret>`, or a legacy
+ * `KIT_KEY:<keyId>:<keySecret>`). `apiKey` takes precedence over the deprecated
+ * `kitKey`, so a malformed `kitKey` that is being ignored must not fail a config
+ * that supplies a valid `apiKey` (and vice versa) — only the credential that
+ * would actually be sent is format-checked. When neither is supplied the SDK
+ * operates in permissionless mode. `baseUrl` overrides the Earn Service endpoint
+ * (e.g. staging); `batchTransactions: false` opts out of atomic batched
+ * execution. All are forwarded to the provider, so this `.strict()` schema must
+ * accept them or a valid config object is rejected.
  *
  * @internal
  */ const earnConfigSchema = z.object({
-    kitKey: apiKeySchema.optional(),
+    apiKey: z.string().optional(),
+    kitKey: z.string().optional(),
     baseUrl: z.string().optional(),
     batchTransactions: z.boolean().optional()
-}).strict();
+}).strict().superRefine((config, ctx)=>{
+    const credential = resolveApiKey(config);
+    if (credential === undefined) {
+        return;
+    }
+    const result = apiKeySchema.safeParse(credential);
+    if (!result.success) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: [
+                credential === config.apiKey ? 'apiKey' : 'kitKey'
+            ],
+            message: result.error.issues[0]?.message ?? 'Invalid API key format'
+        });
+    }
+});
 /**
  * Canonical decimal form: a leading digit with no leading zeros (a single
  * '0' is only allowed immediately before the decimal point). Rejects the
@@ -22337,7 +22949,7 @@ const sourceAdapterContextSchema = z.object({
  * currently supports EVM vault addresses on Arc Testnet.
  *
  * @internal
- */ const vaultAddressSchema = evmAddressSchema.refine(isValidEip55Checksum, 'address has an invalid EIP-55 checksum');
+ */ const vaultAddressSchema = evmAddressSchema$1.refine(isValidEip55Checksum, 'address has an invalid EIP-55 checksum');
 /**
  * Validation schema for VaultQuery.
  *
@@ -22612,7 +23224,7 @@ const sameChainGetDepositQuoteParamsSchema = z.object({
 const crossChainGetDepositQuoteParamsSchema = z.object({
     from: sourceAdapterContextSchema,
     chain: earnBridgeDestinationChainIdentifierSchema,
-    address: evmAddressSchema,
+    address: evmAddressSchema$1,
     vaultAddress: vaultAddressSchema,
     amount: amountSchema,
     transferSpeed: z.enum([