@continuumdao/ctm-mpc-defi 0.2.26 → 0.2.28

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { C as ChainCategory, a as ChainSupportContext, E as EvmTokenKind, K as KeyGenSubset, b as KeyGenSubsetForPermit, M as MultisignBuildResult, c as MultisignCommonArgs, N as NearTokenKind, P as ParamDoc, d as ProtocolActionDescriptor, e as ProtocolModule, S as SolanaTokenKind, T as TokenRef } from './types-PZrvtjv8.js';
 export { getClientIdFromKeyGenResult as firstClientIdFromKeyGen } from '@continuumdao/continuum-node-sdk';
-export { BuildPayloadSignEd25519MultisignBodyArgs, DEFAULT_DEFI_MULTISIGN_EXPIRY_SECONDS, DEFI_PROTOCOLS_WITH_30MIN_EXPIRY, PAYLOAD_SIGN_ED25519_REQUEST_KIND, PayloadSignEd25519Delivery, buildPayloadSignEd25519MultisignBody, defiMultisignExpiryUnixSeconds, getAaveGraphqlProxyUrl, getCoingeckoProxyUrl, getEulerGraphqlProxyUrl, getMapleGraphqlProxyUrl, getMorphoGraphqlProxyUrl, mergePurposeText, postJsonViaOptionalProxy, setAaveGraphqlProxyUrl, setCoingeckoProxyUrl, setEulerGraphqlProxyUrl, setMapleGraphqlProxyUrl, setMorphoGraphqlProxyUrl } from './core/index.js';
+export { BuildPayloadSignEd25519MultisignBodyArgs, DEFAULT_DEFI_MULTISIGN_EXPIRY_SECONDS, DEFI_PROTOCOLS_WITH_30MIN_EXPIRY, PAYLOAD_SIGN_ED25519_REQUEST_KIND, PayloadSignEd25519Delivery, buildPayloadSignEd25519MultisignBody, defiMultisignExpiryUnixSeconds, getAaveGraphqlProxyUrl, getCoingeckoProxyUrl, getEulerGraphqlProxyUrl, getJsonViaOptionalProxy, getMapleGraphqlProxyUrl, getMorphoGraphqlProxyUrl, getMorphoMidnightRestProxyUrl, mergePurposeText, postJsonViaOptionalProxy, setAaveGraphqlProxyUrl, setCoingeckoProxyUrl, setEulerGraphqlProxyUrl, setMapleGraphqlProxyUrl, setMorphoGraphqlProxyUrl, setMorphoMidnightRestProxyUrl } from './core/index.js';
 export { C as ChainCategoryBuildInput, a as ChainCategoryModule, M as MultisignLeg, c as coreChainCategoryModule, f as finalizeMultisign } from './envelope-C_bfuKab.js';
 export { g as getActionsByChainCategory, a as getProtocolModule, b as getProtocolModules, r as registerProtocolModule } from './registry-DxDSPQ-p.js';
 export { B as BuildEip712MultisignBodyArgs, E as EIP712_SIGN_REQUEST_KIND, a as Eip712MultisignDelivery, b as Eip712TypedDataField, c as Eip712TypedDataPayload, d as buildEip712MultisignBody } from './eip712Multisign-xhXpUYp3.js';

package/dist/index.js

@@ -120,6 +120,13 @@ function setMorphoGraphqlProxyUrl(url) {
 function getMorphoGraphqlProxyUrl() {
   return morphoGraphqlProxyUrl;
 }
+var morphoMidnightRestProxyUrl;
+function setMorphoMidnightRestProxyUrl(url) {
+  morphoMidnightRestProxyUrl = url?.trim() || void 0;
+}
+function getMorphoMidnightRestProxyUrl() {
+  return morphoMidnightRestProxyUrl;
+}
 function setCoingeckoProxyUrl(url) {
   coingeckoProxyUrl = url?.trim() || void 0;
 }
@@ -151,6 +158,15 @@ async function postJsonViaOptionalProxy(args) {
   }
   return await r.json();
 }
+async function getJsonViaOptionalProxy(args) {
+  const url = args.proxyUrl?.trim() || args.directUrl;
+  const r = await fetch(url, { method: "GET", headers: { accept: "application/json" } });
+  if (!r.ok) {
+    const t = await r.text().catch(() => "");
+    throw new Error(t ? `HTTP ${r.status}: ${t.slice(0, 200)}` : `HTTP ${r.status}`);
+  }
+  return await r.json();
+}
 var EIP712_SIGN_REQUEST_KIND = "eip712";
 function msgHashNo0x(digest) {
   return digest.startsWith("0x") ? digest.slice(2) : digest;
@@ -672,11 +688,23 @@ var UNIVERSAL_ROUTER_SPENDER = {
   /** Robinhood Chain mainnet — Universal Router v2.1.1 (Trade API / interface) */
   4663: "0x8876789976decbfcbbbe364623c63652db8c0904"
 };
+var UNIVERSAL_ROUTER_V2_2_SPENDER = {
+  1: "0xCb640A86855f1A828c27241bA364348de28abe66",
+  11155111: "0xB0C89059d7190EDb17eFF19829cc009cEe923916"
+};
 var UNIVERSAL_ROUTER_VERSION_BY_CHAIN = {
   /** Robinhood has UR 2.1.1 only in the supported-chains table (no 2.0 Trade API column). */
   4663: "2.1.1"
 };
-function getUniswapUniversalRouterVersion(chainId) {
+var UNISWAP_UNIVERSAL_ROUTER_VERSION_DEFAULT = "2.0";
+var UNISWAP_UNIVERSAL_ROUTER_VERSION_PERMISSIONED = "2.2.0";
+function getUniswapUniversalRouterVersion(chainId, opts) {
+  if (opts?.permissioned) {
+    const v22 = UNIVERSAL_ROUTER_V2_2_SPENDER[chainId];
+    if (typeof v22 === "string" && v22.startsWith("0x")) {
+      return UNISWAP_UNIVERSAL_ROUTER_VERSION_PERMISSIONED;
+    }
+  }
   const v = UNIVERSAL_ROUTER_VERSION_BY_CHAIN[chainId];
   return typeof v === "string" && v.trim() ? v.trim() : UNISWAP_UNIVERSAL_ROUTER_VERSION_DEFAULT;
 }
@@ -687,7 +715,11 @@ function isUniswapV4ChainSupported(chainId) {
   const a = UNIVERSAL_ROUTER_SPENDER[n];
   return typeof a === "string" && a.startsWith("0x");
 }
-function getUniswapUniversalRouterSpenderOrThrow(chainId) {
+function getUniswapUniversalRouterSpenderOrThrow(chainId, opts) {
+  if (opts?.permissioned) {
+    const raw22 = UNIVERSAL_ROUTER_V2_2_SPENDER[chainId];
+    if (raw22 && raw22.startsWith("0x")) return getAddress(raw22);
+  }
   const raw = UNIVERSAL_ROUTER_SPENDER[chainId];
   if (!raw || !raw.startsWith("0x")) {
     throw new Error(
@@ -700,7 +732,6 @@ var MAX_UINT160 = (1n << 160n) - 1n;
 var MAX_UINT48 = (1n << 48n) - 1n;
 var UNISWAP_UNIVERSAL_ROUTER_DEFAULT_GAS_UNITS = 1500000n;
 var UNISWAP_TRADE_BASE_DEFAULT = "https://trade-api.gateway.uniswap.org/v1";
-var UNISWAP_UNIVERSAL_ROUTER_VERSION_DEFAULT = "2.0";
 var UNISWAP_SWAP_DEFAULT_EXPIRY_MINUTES = 30;
 var UNISWAP_LP_DEFAULT_EXPIRY_MINUTES = 30;
 var UNISWAP_LP_DEFAULT_DEADLINE_SEC_OFFSET = UNISWAP_LP_DEFAULT_EXPIRY_MINUTES * 60;
@@ -718,6 +749,10 @@ var POSITION_MANAGER_BY_CHAIN = {
   /** Robinhood Chain mainnet */
   4663: "0x58daec3116aae6D93017bAAea7749052E8a04fA7"
 };
+var PERMISSIONED_POSITION_MANAGER_BY_CHAIN = {
+  1: "0x89628C9B4CE81951a9BC1F36F0688Fad6A6ee248",
+  11155111: "0x68fC145BB20b388965bED184Df5ef912215bb3C7"
+};
 function getUniswapV4PositionManagerOrThrow(chainId) {
   const raw = POSITION_MANAGER_BY_CHAIN[chainId];
   if (!raw || !raw.startsWith("0x") || raw.length !== 42) {
@@ -727,6 +762,32 @@ function getUniswapV4PositionManagerOrThrow(chainId) {
   }
   return getAddress(raw);
 }
+function getUniswapV4PermissionedPositionManagerOrThrow(chainId) {
+  const raw = PERMISSIONED_POSITION_MANAGER_BY_CHAIN[chainId];
+  if (!raw || !raw.startsWith("0x") || raw.length !== 42) {
+    throw new Error(
+      `No Uniswap V4 Permissioned PositionManager is configured for chainId ${chainId}.`
+    );
+  }
+  return getAddress(raw);
+}
+function tryGetUniswapV4PermissionedPositionManager(chainId) {
+  try {
+    return getUniswapV4PermissionedPositionManagerOrThrow(chainId);
+  } catch {
+    return null;
+  }
+}
+function isUniswapV4PermissionedPositionManager(chainId, address) {
+  if (!address?.toString().trim()) return false;
+  const perm = tryGetUniswapV4PermissionedPositionManager(chainId);
+  if (!perm) return false;
+  try {
+    return getAddress(address) === perm;
+  } catch {
+    return false;
+  }
+}
 var POSITION_MANAGER_DEPLOY_BLOCK_BY_CHAIN = {
   /** Ethereum mainnet — Uniswap v4 launch (Jan 2025). */
   1: 22938741n
@@ -742,6 +803,152 @@ var UNISWAP_V4_LP_DECREASE_DEFAULT_GAS_UNITS = 1200000n;
 var UNISWAP_V4_LP_COLLECT_DEFAULT_GAS_UNITS = 900000n;
 var UNISWAP_V4_LP_ERC20_APPROVE_FALLBACK = 100000n;
 var UNISWAP_V4_LP_WETH_DEPOSIT_FALLBACK = 120000n;
+var UNISWAP_V4_LP_PERMIT2_APPROVE_FALLBACK = 100000n;
+parseAbi([
+  "function isAllowed(address account, uint8 permission) view returns (bool)",
+  "function PERMISSIONED_TOKEN() view returns (address)"
+]);
+parseAbi([
+  "function verifiedPermissionsAdapterOf(address permissionsAdapter) view returns (address)"
+]);
+function normalizeTokenList(tokens) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of tokens) {
+    const t = (raw ?? "").toString().trim();
+    if (!t) continue;
+    if (isUniswapNativeTokenAddress(t)) continue;
+    let addr;
+    try {
+      addr = getAddress(t);
+    } catch {
+      continue;
+    }
+    if (addr === zeroAddress) continue;
+    const key = addr.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push(addr);
+    if (out.length >= 2) break;
+  }
+  return out;
+}
+function parsePermissionRow(raw) {
+  const tokenRaw = (raw.token ?? raw.address ?? "").toString().trim();
+  if (!tokenRaw) return null;
+  let token;
+  try {
+    token = getAddress(tokenRaw);
+  } catch {
+    return null;
+  }
+  const isPermissioned = Boolean(raw.isPermissioned);
+  const isAllowlisted = isPermissioned ? Boolean(raw.isAllowlisted) : true;
+  let adapterTokenAddress;
+  const adapterRaw = (raw.adapterTokenAddress ?? "").toString().trim();
+  if (adapterRaw) {
+    try {
+      adapterTokenAddress = getAddress(adapterRaw);
+    } catch {
+    }
+  }
+  const kycUrl = typeof raw.kycUrl === "string" && raw.kycUrl.trim() ? raw.kycUrl.trim() : void 0;
+  const issuer = typeof raw.issuer === "string" && raw.issuer.trim() ? raw.issuer.trim() : void 0;
+  return { token, isPermissioned, isAllowlisted, adapterTokenAddress, kycUrl, issuer };
+}
+async function uniswapV4CheckPermissions(args) {
+  const apiKey = args.uniswapApiKey?.trim();
+  if (!apiKey) throw new Error("uniswapApiKey is required for POST /v1/permissions");
+  const walletAddress = getAddress(args.walletAddress.trim());
+  const chainId = parseUniswapChainId(args.chainId);
+  const tokens = normalizeTokenList(args.tokens);
+  if (tokens.length === 0) {
+    return {
+      results: [],
+      anyPermissioned: false,
+      allAllowlisted: true,
+      requiresUniversalRouterV22: false
+    };
+  }
+  const base = (args.baseUrl?.trim() || UNISWAP_TRADE_BASE_DEFAULT).replace(/\/$/, "");
+  const url = `${base}/permissions`;
+  const fetchFn = args.fetchImpl ?? globalThis.fetch;
+  const res = await fetchFn(url, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "User-Agent": "ctm-mpc-defi uniswapPermissions/1.0 (TS)",
+      "x-api-key": apiKey
+    },
+    body: JSON.stringify({
+      walletAddress,
+      tokens,
+      chainId
+    }),
+    signal: args.signal
+  });
+  const text = await res.text();
+  if (!res.ok) {
+    throw new Error(
+      `Uniswap POST /permissions failed: ${messageFromUniswapHttpResponseBody(text, res.status, res.statusText)}`
+    );
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(text.replace(/^\uFEFF/, ""));
+  } catch {
+    throw new Error(
+      `Uniswap POST /permissions: ${messageFromUniswapHttpResponseBody(text, res.status, res.statusText)}`
+    );
+  }
+  const rawResults = Array.isArray(parsed.results) ? parsed.results : [];
+  const results = [];
+  for (const row of rawResults) {
+    if (!row || typeof row !== "object" || Array.isArray(row)) continue;
+    const parsedRow = parsePermissionRow(row);
+    if (parsedRow) results.push(parsedRow);
+  }
+  for (const token of tokens) {
+    if (!results.some((r) => r.token === token)) {
+      results.push({ token, isPermissioned: false, isAllowlisted: true });
+    }
+  }
+  const anyPermissioned = results.some((r) => r.isPermissioned);
+  const allAllowlisted = results.every((r) => !r.isPermissioned || r.isAllowlisted);
+  return {
+    requestId: typeof parsed.requestId === "string" ? parsed.requestId : void 0,
+    results,
+    anyPermissioned,
+    allAllowlisted,
+    requiresUniversalRouterV22: anyPermissioned
+  };
+}
+var UniswapV4PermissionDeniedError = class extends Error {
+  code = "UNISWAP_V4_PERMISSION_DENIED";
+  permissions;
+  blocked;
+  constructor(permissions) {
+    const blocked = permissions.results.filter((r) => r.isPermissioned && !r.isAllowlisted);
+    const issuer = blocked.find((b) => b.issuer)?.issuer;
+    const kycUrl = blocked.find((b) => b.kycUrl)?.kycUrl;
+    const parts = [
+      "Wallet is not allowlisted for one or more permissioned Uniswap V4 tokens.",
+      issuer ? `Issuer: ${issuer}.` : null,
+      kycUrl ? `Complete KYC at: ${kycUrl}` : "Open the issuer KYC URL from check_permissions."
+    ].filter(Boolean);
+    super(parts.join(" "));
+    this.name = "UniswapV4PermissionDeniedError";
+    this.permissions = permissions;
+    this.blocked = blocked;
+  }
+};
+function assertUniswapV4PermissionsAllowlisted(permissions) {
+  if (!permissions.allAllowlisted) {
+    throw new UniswapV4PermissionDeniedError(permissions);
+  }
+}
+
+// src/protocols/evm/uniswap-v4/quote.ts
 var DEFAULT_TRADE_BASE = "https://trade-api.gateway.uniswap.org/v1";
 var UNISWAP_QUOTE_HEADERS_BASE = {
   "Content-Type": "application/json",
@@ -988,7 +1195,25 @@ async function uniswapTradeQuote(args) {
   const base = args.baseUrl && args.baseUrl.trim() ? args.baseUrl.trim().replace(/\/$/, "") : DEFAULT_TRADE_BASE;
   const quoteUrl = `${base}/quote`;
   const chainIdForRouter = parseUniswapChainId(resolveInputChainId(args));
-  const urv = args.universalRouterVersion && args.universalRouterVersion.trim() || getUniswapUniversalRouterVersion(chainIdForRouter);
+  let permissions;
+  const shouldCheckPermissions = args.forcePermissionedRouter !== true && args.skipPermissionCheck !== true && args.checkPermissions !== false;
+  if (shouldCheckPermissions) {
+    try {
+      permissions = await uniswapV4CheckPermissions({
+        walletAddress: swapper,
+        tokens: [args.tokenIn, args.tokenOut],
+        chainId: chainIdForRouter,
+        uniswapApiKey: apiKey,
+        baseUrl: base,
+        signal: args.signal,
+        fetchImpl: args.fetchImpl
+      });
+    } catch {
+      permissions = void 0;
+    }
+  }
+  const permissionedRouter = args.forcePermissionedRouter === true || Boolean(permissions?.requiresUniversalRouterV22);
+  const urv = args.universalRouterVersion && args.universalRouterVersion.trim() || getUniswapUniversalRouterVersion(chainIdForRouter, { permissioned: permissionedRouter });
   const body = buildUniswapQuoteRequestBody({ ...args, swapper });
   const nativeIn = isUniswapNativeTokenAddress(args.tokenIn);
   const nativeOut = isUniswapNativeTokenAddress(args.tokenOut);
@@ -1017,13 +1242,27 @@ async function uniswapTradeQuote(args) {
   }
   const forParse = text.replace(/^\uFEFF/, "");
   try {
-    return JSON.parse(forParse);
+    const parsed = JSON.parse(forParse);
+    if (permissionedRouter || urv === UNISWAP_UNIVERSAL_ROUTER_VERSION_PERMISSIONED) {
+      parsed._continuumPermissioned = true;
+      parsed._continuumUniversalRouterVersion = urv;
+    }
+    if (permissions) {
+      parsed._continuumPermissions = permissions;
+    }
+    return parsed;
   } catch {
     throw new Error(
       `Trade API: ${messageFromUniswapHttpResponseBody(text, res.status, res.statusText)}`
     );
   }
 }
+function isUniswapStoredQuotePermissioned(stored) {
+  if (!stored) return false;
+  if (stored._continuumPermissioned === true) return true;
+  const v = stored._continuumUniversalRouterVersion;
+  return typeof v === "string" && v.trim() === UNISWAP_UNIVERSAL_ROUTER_VERSION_PERMISSIONED;
+}
 function parseUniswapQuoteClassicInOut(res) {
   const inner = res.quote;
   if (!inner || typeof inner !== "object" || Array.isArray(inner)) return null;
@@ -1120,7 +1359,9 @@ async function uniswapCreateSwap(args) {
     quote: classic,
     deadline
   };
-  const urv = (args.universalRouterVersion ?? "").trim() || getUniswapUniversalRouterVersion(resolveChainIdFromStoredUniswapQuote(args.fullQuoteFromPermit));
+  const chainIdForRouter = resolveChainIdFromStoredUniswapQuote(args.fullQuoteFromPermit);
+  const permissioned = isUniswapStoredQuotePermissioned(args.fullQuoteFromPermit);
+  const urv = (args.universalRouterVersion ?? "").trim() || getUniswapUniversalRouterVersion(chainIdForRouter, { permissioned });
   const fn = args.fetchImpl ?? globalThis.fetch;
   const nativeIn = isUniswapFullQuoteResponseNativeIn(args.fullQuoteFromPermit);
   const nativeOut = isUniswapFullQuoteResponseNativeOut(args.fullQuoteFromPermit);
@@ -1248,8 +1489,8 @@ function applySlippagePercentToApproveWei(baseWei, slippagePercent) {
   if (bps <= 0) return baseWei;
   return (baseWei * BigInt(1e4 + bps) + 9999n) / 10000n;
 }
-function permit2SpenderAndApproveWeiFromSwapCalldata(dataHex, tokenIn, quoteInputWei, chainId) {
-  const canonical = getUniswapUniversalRouterSpenderOrThrow(chainId);
+function permit2SpenderAndApproveWeiFromSwapCalldata(dataHex, tokenIn, quoteInputWei, chainId, permissioned = false) {
+  const canonical = getUniswapUniversalRouterSpenderOrThrow(chainId, { permissioned });
   try {
     const d = decodeFunctionData({ abi: uniswapDispatchExecuteAbi, data: dataHex });
     if (d.functionName !== "execute") {
@@ -1385,6 +1626,27 @@ async function buildEvmMultisignBodyUniswapV4SkipPermit2Batch(args) {
       "Could not read a positive input amount from the quote. Refresh the quote and ensure the Trade API returned classic quote.input.amount."
     );
   }
+  const permissioned = isUniswapStoredQuotePermissioned(args.fullQuoteSnapshot);
+  if (args.skipPermissionCheck !== true) {
+    const cached = args.fullQuoteSnapshot._continuumPermissions;
+    if (cached && typeof cached === "object" && cached.allAllowlisted === false) {
+      assertUniswapV4PermissionsAllowlisted({
+        results: cached.results ?? [],
+        anyPermissioned: Boolean(cached.anyPermissioned),
+        allAllowlisted: false,
+        requiresUniversalRouterV22: Boolean(cached.requiresUniversalRouterV22)
+      });
+    } else if (args.uniswapApiKey?.trim() && (permissioned || args.tokenOut)) {
+      const tokens = [args.tokenIn, args.tokenOut].filter(Boolean);
+      const permissions = await uniswapV4CheckPermissions({
+        walletAddress: args.executorAddress,
+        tokens,
+        chainId: args.chainId,
+        uniswapApiKey: args.uniswapApiKey.trim()
+      });
+      assertUniswapV4PermissionsAllowlisted(permissions);
+    }
+  }
   if (tokenIn === zeroAddress) {
     return buildEvmMultisignBodyUniswapV4NativeInOnly(args, quoteInputWei);
   }
@@ -1395,12 +1657,15 @@ async function buildEvmMultisignBodyUniswapV4SkipPermit2Batch(args) {
     const d = (args.swap.data ?? "0x").toString().trim();
     return d.startsWith("0x") ? d : `0x${d}`;
   })();
-  const canonicalUniversalRouter = getUniswapUniversalRouterSpenderOrThrow(args.chainId);
+  const canonicalUniversalRouter = getUniswapUniversalRouterSpenderOrThrow(args.chainId, {
+    permissioned
+  });
   const { permit2Spender, approveWei: baseApproveWei, calldataAmountWei } = permit2SpenderAndApproveWeiFromSwapCalldata(
     dataHex,
     tokenIn,
     quoteInputWei,
-    args.chainId
+    args.chainId,
+    permissioned
   );
   const approveAmountWei = applySlippagePercentToApproveWei(baseApproveWei, args.slippagePercent);
   const usePermit2Triple = toRouter.toLowerCase() === permit2Spender.toLowerCase();
@@ -2068,6 +2333,9 @@ var erc20AllowanceAbi2 = parseAbi([
   "function allowance(address owner, address spender) view returns (uint256)",
   "function decimals() view returns (uint8)"
 ]);
+var permit2ApproveAbi = parseAbi([
+  "function approve(address token, address spender, uint160 amount, uint48 expiration)"
+]);
 function parseOptionalGasLimitString2(raw) {
   if (raw == null) return null;
   const s = String(raw).trim();
@@ -2155,7 +2423,9 @@ async function buildEvmMultisignBodyUniswapV4LiquidityBatchInternal(args) {
   const dataHex = dataHexFromTx(tx);
   const valueWei = parseTxValueWei(tx);
   const executor = getAddress(args.executorAddress);
-  const spender = to;
+  const positionManagerKind = args.positionManagerKind === "permissioned" || args.positionManagerKind === "standard" ? args.positionManagerKind : isUniswapV4PermissionedPositionManager(args.chainId, to) ? "permissioned" : "standard";
+  const usePermit2 = args.usePermit2Approvals === true || args.usePermit2Approvals !== false && positionManagerKind === "permissioned";
+  const erc20Spender = usePermit2 ? PERMIT2_ADDRESS : to;
   const chain = defineChain({
     id: args.chainId,
     name: `uniswap-v4-lp-${args.chainId}`,
@@ -2163,15 +2433,21 @@ async function buildEvmMultisignBodyUniswapV4LiquidityBatchInternal(args) {
     rpcUrls: { default: { http: [args.rpcUrl] } }
   });
   const publicClient = createPublicClient({ chain, transport: http(args.rpcUrl) });
-  const approveTargets = await resolveApproveTargets({
+  const needsTokenApproves = args.action === "mint" || args.action === "increase";
+  const approveTargets = needsTokenApproves ? await resolveApproveTargets({
     publicClient,
     executor,
-    spender,
+    spender: erc20Spender,
     token0: parsed.token0,
     token1: parsed.token1,
     nativeWrapped: args.nativeWrapped
-  });
+  }) : [];
   const steps = [];
+  let permit2Expiration48 = 0n;
+  if (usePermit2 && needsTokenApproves) {
+    permit2Expiration48 = BigInt(Math.floor(Date.now() / 1e3) + UNISWAP_LP_DEFAULT_DEADLINE_SEC_OFFSET);
+    if (permit2Expiration48 > MAX_UINT48) permit2Expiration48 = MAX_UINT48;
+  }
   for (const target of approveTargets) {
     if (target.kind === "weth_deposit") {
       steps.push({
@@ -2184,13 +2460,17 @@ async function buildEvmMultisignBodyUniswapV4LiquidityBatchInternal(args) {
         address: target.token,
         abi: erc20AllowanceAbi2,
         functionName: "allowance",
-        args: [executor, spender]
+        args: [executor, erc20Spender]
       });
       if (wethAllowance < target.amount) {
-        if (wethAllowance > 0n) {
+        if (wethAllowance > 0n && !usePermit2) {
           steps.push({
             to: target.token,
-            data: encodeFunctionData({ abi: erc20Abi, functionName: "approve", args: [spender, 0n] }),
+            data: encodeFunctionData({
+              abi: erc20Abi,
+              functionName: "approve",
+              args: [erc20Spender, 0n]
+            }),
             value: 0n,
             fallbackGas: UNISWAP_V4_LP_ERC20_APPROVE_FALLBACK
           });
@@ -2200,7 +2480,7 @@ async function buildEvmMultisignBodyUniswapV4LiquidityBatchInternal(args) {
           data: encodeFunctionData({
             abi: erc20Abi,
             functionName: "approve",
-            args: [spender, target.amount]
+            args: [erc20Spender, target.amount]
           }),
           value: 0n,
           fallbackGas: UNISWAP_V4_LP_ERC20_APPROVE_FALLBACK
@@ -2212,13 +2492,66 @@ async function buildEvmMultisignBodyUniswapV4LiquidityBatchInternal(args) {
         data: encodeFunctionData({
           abi: erc20Abi,
           functionName: "approve",
-          args: [spender, target.amount]
+          args: [erc20Spender, target.amount]
         }),
         value: 0n,
         fallbackGas: UNISWAP_V4_LP_ERC20_APPROVE_FALLBACK
       });
     }
   }
+  if (usePermit2 && needsTokenApproves) {
+    const pairs = [parsed.token0, parsed.token1].filter(Boolean);
+    for (const row of pairs) {
+      const amt = BigInt(row.amount);
+      if (amt <= 0n) continue;
+      let token;
+      if (isNativeUniswapLpTokenAddress(row.tokenAddress)) {
+        if (!args.nativeWrapped) {
+          throw new Error("nativeWrapped is required when LP uses native ETH (0x0) token.");
+        }
+        token = getAddress(args.nativeWrapped);
+        if (!approveTargets.some((a) => a.token === token && a.kind === "weth_deposit")) {
+          steps.push({
+            to: token,
+            data: encodeFunctionData({ abi: wethDepositAbi, functionName: "deposit" }),
+            value: amt,
+            fallbackGas: UNISWAP_V4_LP_WETH_DEPOSIT_FALLBACK
+          });
+          const wethAllowance = await publicClient.readContract({
+            address: token,
+            abi: erc20AllowanceAbi2,
+            functionName: "allowance",
+            args: [executor, PERMIT2_ADDRESS]
+          });
+          if (wethAllowance < amt) {
+            steps.push({
+              to: token,
+              data: encodeFunctionData({
+                abi: erc20Abi,
+                functionName: "approve",
+                args: [PERMIT2_ADDRESS, amt]
+              }),
+              value: 0n,
+              fallbackGas: UNISWAP_V4_LP_ERC20_APPROVE_FALLBACK
+            });
+          }
+        }
+      } else {
+        token = getAddress(row.tokenAddress);
+      }
+      const amount160 = amt > MAX_UINT160 ? MAX_UINT160 : amt;
+      steps.push({
+        to: PERMIT2_ADDRESS,
+        data: encodeFunctionData({
+          abi: permit2ApproveAbi,
+          functionName: "approve",
+          args: [token, to, amount160, Number(permit2Expiration48)]
+        }),
+        value: 0n,
+        fallbackGas: UNISWAP_V4_LP_PERMIT2_APPROVE_FALLBACK
+      });
+    }
+  }
   const lpFallbackGas = defaultGasForAction(args.action);
   const fromTradeApi = parseOptionalGasLimitString2(tx.gasLimit) ?? parseOptionalGasLimitString2(tx.gas);
   steps.push({
@@ -2230,6 +2563,7 @@ async function buildEvmMultisignBodyUniswapV4LiquidityBatchInternal(args) {
   const actionLabel = args.action === "mint" ? "mint liquidity" : args.action === "increase" ? "increase liquidity" : args.action === "decrease" ? "decrease liquidity" : "collect fees";
   const dataNo0x = dataHex.startsWith("0x") ? dataHex.slice(2) : dataHex;
   const lpIndex = steps.length - 1;
+  const purposeSuffix = usePermit2 ? `Uniswap V4 permissioned: ${steps.length}-tx batch \u2014 ${actionLabel} (ERC-20\u2192Permit2, Permit2\u2192PosM, Position Manager).` : `Uniswap V4: ${steps.length}-tx batch \u2014 ${actionLabel} (classic ERC-20 approve + Position Manager).`;
   return buildEvmMultisignBatch({
     context: {
       chainCategory: "evm",
@@ -2243,7 +2577,7 @@ async function buildEvmMultisignBodyUniswapV4LiquidityBatchInternal(args) {
       customGasChainDetails: args.customGasChainDetails
     },
     steps,
-    purposeSuffix: `Uniswap V4: ${steps.length}-tx batch \u2014 ${actionLabel} (classic ERC-20 approve + Position Manager).`,
+    purposeSuffix,
     firstMsgRawNo0x: dataNo0x,
     destinationAddress: to,
     buildBatchMeta: ({ index }) => {
@@ -2253,13 +2587,17 @@ async function buildEvmMultisignBodyUniswapV4LiquidityBatchInternal(args) {
           kind: "UniswapV4Liquidity",
           action: args.action,
           step: index,
-          lpTx: isLpStep
+          lpTx: isLpStep,
+          positionManagerKind,
+          usePermit2
         }),
         ...isLpStep ? {
           evm: { type: "uniswap_v4_liquidity_tx", version: 1, chainId: String(args.chainId) },
           uniswapV4Liquidity: {
             action: args.action,
-            skipPermit2Batch: true,
+            skipPermit2Batch: !usePermit2,
+            usePermit2Approvals: usePermit2,
+            positionManagerKind,
             nftTokenId: args.nftTokenId != null ? String(args.nftTokenId) : void 0,
             poolReference: args.poolReference,
             lpResponseSnapshot: args.lpResponse,
@@ -3090,6 +3428,6 @@ var curveDao = {
 registerProtocolModule(uniswapV4ProtocolModule);
 registerProtocolModule(curveDaoProtocolModule);
 
-export { COINGECKO_PLATFORM_BY_CHAIN_ID, DEFAULT_DEFI_MULTISIGN_EXPIRY_SECONDS, DEFI_PROTOCOLS_WITH_30MIN_EXPIRY, EIP712_SIGN_REQUEST_KIND, NEAR_CHAIN_CATEGORY, PAYLOAD_SIGN_ED25519_REQUEST_KIND, SOLANA_CHAIN_CATEGORY, approveStepsToEvmTxSteps, buildConditionalErc20ApproveSteps, buildEip712MultisignBody, buildEvmMultisignBatch, buildPayloadSignEd25519MultisignBody, coingeckoPlatformForChainId, coreChainCategoryModule, curveDao, curveDaoProtocolModule, defiMultisignExpiryUnixSeconds, evmChainCategoryModule, finalizeMultisign, getAaveGraphqlProxyUrl, getActionsByChainCategory, getCoingeckoProxyUrl, getEulerGraphqlProxyUrl, getMapleGraphqlProxyUrl, getMorphoGraphqlProxyUrl, getProtocolModule, getProtocolModules, isEvmNativeToken, matchEvmTokenKind, mergePurposeText, nearChainCategoryModule, normalizeCurveRouterAmountString, normalizeHumanDecimalAmount, parseEvmChainIdToNumber, postJsonViaOptionalProxy, publicClientForRpc, registerProtocolModule, resolveErc20Decimals, routerSwapGasLimitFromEstimate, setAaveGraphqlProxyUrl, setCoingeckoProxyUrl, setEulerGraphqlProxyUrl, setMapleGraphqlProxyUrl, setMorphoGraphqlProxyUrl, solanaChainCategoryModule, uniswapV4, uniswapV4ProtocolModule };
+export { COINGECKO_PLATFORM_BY_CHAIN_ID, DEFAULT_DEFI_MULTISIGN_EXPIRY_SECONDS, DEFI_PROTOCOLS_WITH_30MIN_EXPIRY, EIP712_SIGN_REQUEST_KIND, NEAR_CHAIN_CATEGORY, PAYLOAD_SIGN_ED25519_REQUEST_KIND, SOLANA_CHAIN_CATEGORY, approveStepsToEvmTxSteps, buildConditionalErc20ApproveSteps, buildEip712MultisignBody, buildEvmMultisignBatch, buildPayloadSignEd25519MultisignBody, coingeckoPlatformForChainId, coreChainCategoryModule, curveDao, curveDaoProtocolModule, defiMultisignExpiryUnixSeconds, evmChainCategoryModule, finalizeMultisign, getAaveGraphqlProxyUrl, getActionsByChainCategory, getCoingeckoProxyUrl, getEulerGraphqlProxyUrl, getJsonViaOptionalProxy, getMapleGraphqlProxyUrl, getMorphoGraphqlProxyUrl, getMorphoMidnightRestProxyUrl, getProtocolModule, getProtocolModules, isEvmNativeToken, matchEvmTokenKind, mergePurposeText, nearChainCategoryModule, normalizeCurveRouterAmountString, normalizeHumanDecimalAmount, parseEvmChainIdToNumber, postJsonViaOptionalProxy, publicClientForRpc, registerProtocolModule, resolveErc20Decimals, routerSwapGasLimitFromEstimate, setAaveGraphqlProxyUrl, setCoingeckoProxyUrl, setEulerGraphqlProxyUrl, setMapleGraphqlProxyUrl, setMorphoGraphqlProxyUrl, setMorphoMidnightRestProxyUrl, solanaChainCategoryModule, uniswapV4, uniswapV4ProtocolModule };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map