@getpara/shared 1.23.0 → 1.25.0

package/dist/cjs/index.js

@@ -38,6 +38,8 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.transactionTypes = void 0;
 __exportStar(require("./types/index.js"), exports);
+__exportStar(require("./types/permissions.js"), exports);
+__exportStar(require("./schemas/permissionsV2.js"), exports);
 __exportStar(require("./utils/index.js"), exports);
 const transactionTypes = __importStar(require("./types/transaction.js"));
 exports.transactionTypes = transactionTypes;

package/dist/cjs/schemas/permissionsV2.js

@@ -0,0 +1,188 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.permissionsV2ValidationErrorSchema = exports.permissionsV2DelegationConsentDiscoveryResponseSchema = exports.permissionsV2DelegationConsentRequestSchema = exports.permissionsV2DelegationConsentViewSchema = exports.permissionsV2DelegationConsentStandingMutationSchema = exports.permissionsV2DelegationConsentMutationSchema = exports.permissionsV2DelegationConsentApiStatusSchema = exports.permissionsV2DelegationPolicyDefinitionSchema = exports.permissionsV2PartnerAuthoredPolicyDefinitionSchema = exports.permissionsV2PartnerPolicyCandidateSchema = exports.permissionsV2PolicyRuleSchema = exports.permissionsV2PartnerPolicyMetadataSchema = exports.permissionsV2PolicyMetadataSchema = exports.permissionsV2PartnerAuthoredPolicySelectorSchema = exports.permissionsV2ConditionSchema = exports.policyAuthoringJsonObjectSchema = exports.policyAuthoringJsonValueSchema = exports.policyAuthoringJsonPrimitiveSchema = exports.permissionsV2SigningRequestTypeSchema = exports.permissionsV2SigningRequestRouteSchema = exports.permissionsV2SigningWalletTypeSchema = exports.permissionsV2AggregateOperatorSchema = exports.permissionsV2CompareOperatorSchema = exports.permissionsV2PolicyEffectSchema = exports.permissionsV2PolicyModeSchema = exports.permissionsV2PolicyLayerSchema = exports.permissionsV2SigningRequestTypes = exports.policyAuthoringSigningRequestRoutes = exports.policyAuthoringSigningWalletTypes = void 0;
+const zod_1 = require("zod");
+exports.policyAuthoringSigningWalletTypes = ['EVM'];
+exports.policyAuthoringSigningRequestRoutes = [
+    'evm.sign_transaction',
+    'evm.sign_raw',
+    'evm.sign_typed_data',
+    'evm.sign_authorization',
+    'evm.sign_message',
+    'smart_account.user_operation',
+];
+exports.permissionsV2SigningRequestTypes = [
+    'evm_transaction',
+    'evm_message',
+    'evm_raw',
+    'evm_typed_data',
+    'evm_authorization',
+    'smart_account_user_operation',
+];
+const nonEmptyStringSchema = zod_1.z.string().min(1);
+const uniqueNonEmptyStringsSchema = zod_1.z
+    .array(nonEmptyStringSchema)
+    .min(1)
+    .refine((values) => new Set(values).size === values.length, 'values must be unique');
+exports.permissionsV2PolicyLayerSchema = zod_1.z.enum(['para', 'partner']);
+exports.permissionsV2PolicyModeSchema = zod_1.z.enum(['guardrail', 'delegation']);
+exports.permissionsV2PolicyEffectSchema = zod_1.z.enum(['allow', 'deny', 'require_approval']);
+exports.permissionsV2CompareOperatorSchema = zod_1.z.enum(['eq', 'ne', 'lt', 'lte', 'gt', 'gte', 'in']);
+exports.permissionsV2AggregateOperatorSchema = zod_1.z.enum(['lt', 'lte', 'gt', 'gte']);
+exports.permissionsV2SigningWalletTypeSchema = zod_1.z.enum(exports.policyAuthoringSigningWalletTypes);
+exports.permissionsV2SigningRequestRouteSchema = zod_1.z.enum(exports.policyAuthoringSigningRequestRoutes);
+exports.permissionsV2SigningRequestTypeSchema = zod_1.z.enum(exports.permissionsV2SigningRequestTypes);
+exports.policyAuthoringJsonPrimitiveSchema = zod_1.z.union([
+    zod_1.z.string(),
+    zod_1.z.number(),
+    zod_1.z.boolean(),
+    zod_1.z.null(),
+]);
+exports.policyAuthoringJsonValueSchema = zod_1.z.lazy(() => zod_1.z.union([
+    exports.policyAuthoringJsonPrimitiveSchema,
+    zod_1.z.array(exports.policyAuthoringJsonValueSchema),
+    zod_1.z.record(exports.policyAuthoringJsonValueSchema),
+]));
+exports.policyAuthoringJsonObjectSchema = zod_1.z.record(exports.policyAuthoringJsonValueSchema);
+exports.permissionsV2ConditionSchema = zod_1.z.lazy(() => zod_1.z.discriminatedUnion('kind', [
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal('compare'),
+        fact: nonEmptyStringSchema,
+        op: exports.permissionsV2CompareOperatorSchema,
+        value: exports.policyAuthoringJsonValueSchema,
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal('aggregate'),
+        fact: nonEmptyStringSchema,
+        op: exports.permissionsV2AggregateOperatorSchema,
+        value: nonEmptyStringSchema,
+        window: nonEmptyStringSchema,
+        asset: nonEmptyStringSchema.optional(),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal('all'),
+        of: zod_1.z.array(exports.permissionsV2ConditionSchema).min(1),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal('any'),
+        of: zod_1.z.array(exports.permissionsV2ConditionSchema).min(1),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal('not'),
+        of: exports.permissionsV2ConditionSchema,
+    })
+        .strict(),
+]));
+exports.permissionsV2PartnerAuthoredPolicySelectorSchema = zod_1.z
+    .object({
+    walletId: nonEmptyStringSchema.optional(),
+    chainId: zod_1.z.union([nonEmptyStringSchema, uniqueNonEmptyStringsSchema]).optional(),
+    walletType: exports.permissionsV2SigningWalletTypeSchema.optional(),
+    requestRoute: exports.permissionsV2SigningRequestRouteSchema.optional(),
+    requestType: exports.permissionsV2SigningRequestTypeSchema.optional(),
+})
+    .strict();
+exports.permissionsV2PolicyMetadataSchema = zod_1.z
+    .object({
+    label: zod_1.z.string().optional(),
+    productMode: exports.permissionsV2PolicyModeSchema.optional(),
+    description: zod_1.z.string().optional(),
+    annotations: exports.policyAuthoringJsonObjectSchema.optional(),
+})
+    .strict();
+exports.permissionsV2PartnerPolicyMetadataSchema = exports.permissionsV2PolicyMetadataSchema.extend({
+    productMode: exports.permissionsV2PolicyModeSchema,
+});
+exports.permissionsV2PolicyRuleSchema = zod_1.z
+    .object({
+    id: nonEmptyStringSchema,
+    effect: exports.permissionsV2PolicyEffectSchema,
+    when: exports.permissionsV2ConditionSchema,
+})
+    .strict();
+const partnerPolicyCandidateFields = {
+    id: nonEmptyStringSchema,
+    schemaVersion: zod_1.z.literal('permissions.policy.v1'),
+    version: nonEmptyStringSchema,
+    selector: exports.permissionsV2PartnerAuthoredPolicySelectorSchema,
+    rules: zod_1.z.array(exports.permissionsV2PolicyRuleSchema).min(1),
+    metadata: exports.permissionsV2PolicyMetadataSchema.optional(),
+};
+exports.permissionsV2PartnerPolicyCandidateSchema = zod_1.z.object(partnerPolicyCandidateFields).strict();
+exports.permissionsV2PartnerAuthoredPolicyDefinitionSchema = exports.permissionsV2PartnerPolicyCandidateSchema.extend({
+    metadata: exports.permissionsV2PartnerPolicyMetadataSchema,
+});
+exports.permissionsV2DelegationPolicyDefinitionSchema = exports.permissionsV2PartnerAuthoredPolicyDefinitionSchema.extend({
+    layer: zod_1.z.literal('partner'),
+    selector: exports.permissionsV2PartnerAuthoredPolicySelectorSchema.extend({
+        partnerId: nonEmptyStringSchema,
+        appId: nonEmptyStringSchema,
+    }),
+    metadata: exports.permissionsV2PartnerPolicyMetadataSchema.extend({
+        productMode: zod_1.z.literal('delegation'),
+    }),
+});
+exports.permissionsV2DelegationConsentApiStatusSchema = zod_1.z.enum([
+    'pending',
+    'standing',
+    'manual_review',
+    'revoked',
+    'expired',
+]);
+exports.permissionsV2DelegationConsentMutationSchema = zod_1.z
+    .object({
+    partnerId: nonEmptyStringSchema,
+    appId: nonEmptyStringSchema,
+    walletId: nonEmptyStringSchema,
+    policyVersion: nonEmptyStringSchema,
+    policyHash: nonEmptyStringSchema,
+    expiresAt: zod_1.z.string().datetime().optional(),
+})
+    .strict();
+exports.permissionsV2DelegationConsentStandingMutationSchema = exports.permissionsV2DelegationConsentMutationSchema
+    .extend({
+    pendingTransactionId: nonEmptyStringSchema,
+})
+    .strict();
+exports.permissionsV2DelegationConsentViewSchema = zod_1.z
+    .object({
+    status: exports.permissionsV2DelegationConsentApiStatusSchema,
+    userId: nonEmptyStringSchema,
+    partnerId: nonEmptyStringSchema,
+    appId: nonEmptyStringSchema,
+    walletId: nonEmptyStringSchema,
+    policyId: nonEmptyStringSchema,
+    policyVersion: nonEmptyStringSchema,
+    policyHash: nonEmptyStringSchema,
+    grantedAt: zod_1.z.string().datetime().optional(),
+    expiresAt: zod_1.z.string().datetime().optional(),
+    revokedAt: zod_1.z.string().datetime().optional(),
+})
+    .strict();
+exports.permissionsV2DelegationConsentRequestSchema = zod_1.z
+    .object({
+    policy: exports.permissionsV2DelegationPolicyDefinitionSchema,
+    consent: exports.permissionsV2DelegationConsentViewSchema,
+})
+    .strict();
+exports.permissionsV2DelegationConsentDiscoveryResponseSchema = zod_1.z
+    .object({
+    requests: zod_1.z.array(exports.permissionsV2DelegationConsentRequestSchema),
+})
+    .strict();
+exports.permissionsV2ValidationErrorSchema = zod_1.z
+    .object({
+    code: zod_1.z.string(),
+    path: zod_1.z.string(),
+    message: zod_1.z.string(),
+})
+    .strict();

package/dist/cjs/types/assets.js

@@ -1,12 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OnRampMethod = exports.OnRampPurchaseStatus = exports.OnRampPurchaseType = exports.ON_RAMP_ASSETS = exports.OnRampAsset = exports.OnRampProvider = void 0;
+exports.OnRampMethod = exports.OnRampPurchaseStatus = exports.OnRampPurchaseType = exports.ON_RAMP_ASSETS = exports.OnRampAsset = exports.ON_RAMP_PROVIDERS = exports.OnRampProvider = void 0;
+/** @deprecated use `OnRampProvider` string union instead */
 var OnRampProvider;
 (function (OnRampProvider) {
     OnRampProvider["RAMP"] = "RAMP";
     OnRampProvider["STRIPE"] = "STRIPE";
     OnRampProvider["MOONPAY"] = "MOONPAY";
+    OnRampProvider["CDP"] = "CDP";
+    OnRampProvider["MERCURYO"] = "MERCURYO";
 })(OnRampProvider || (exports.OnRampProvider = OnRampProvider = {}));
+exports.ON_RAMP_PROVIDERS = ['RAMP', 'STRIPE', 'MOONPAY', 'CDP', 'MERCURYO'];
 /** @deprecated use `TOnRampAsset` string union instead */
 var OnRampAsset;
 (function (OnRampAsset) {

package/dist/cjs/types/auth.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RecoveryStatus = exports.LegacyAuthMethod = exports.AUTH_METHODS = exports.AuthMethod = exports.LINKED_ACCOUNT_TYPES = exports.OAUTH_METHODS = exports.OAuthMethod = exports.PublicKeyType = exports.AuthMethodStatus = exports.KeyShareType = exports.EncryptorType = exports.AUTH_TYPES = void 0;
+exports.RecoveryStatus = exports.LOGIN_METHODS = exports.LegacyAuthMethod = exports.AUTH_METHODS = exports.AuthMethod = exports.LINKED_ACCOUNT_TYPES = exports.OAUTH_METHODS = exports.OAuthMethod = exports.PublicKeyType = exports.AuthMethodStatus = exports.KeyShareType = exports.EncryptorType = exports.AUTH_TYPES = void 0;
 exports.AUTH_TYPES = [
     'email',
     'phone',
@@ -57,6 +57,10 @@ exports.OAUTH_METHODS = [
     'FARCASTER',
     'TELEGRAM',
     'CUSTOM_OIDC',
+    // A partner-configured OAuth2 provider Para ships no first-party adapter for (e.g. Spotify). The specific
+    // connection rides on the flow's providerConfigHandle; the generic OAuth2 client uses the connection's
+    // stored endpoints. (ENG-7008)
+    'CUSTOM_OAUTH',
 ];
 exports.LINKED_ACCOUNT_TYPES = [
     'EMAIL',
@@ -84,6 +88,20 @@ var LegacyAuthMethod;
     LegacyAuthMethod["PASSWORD"] = "PASSWORD";
     LegacyAuthMethod["BIOMETRIC"] = "BIOMETRIC";
 })(LegacyAuthMethod || (exports.LegacyAuthMethod = LegacyAuthMethod = {}));
+/**
+ * Every way a user row can be established/authenticated. Runtime tuple (mirrors OAUTH_METHODS) so code
+ * can iterate the canonical set instead of hand-maintaining parallel lists. OAuth providers are folded
+ * in from OAUTH_METHODS; the tail is the non-OAuth methods + the non-login events (PREGEN/REST_API).
+ */
+exports.LOGIN_METHODS = [
+    ...exports.OAUTH_METHODS,
+    'EMAIL',
+    'PHONE',
+    'EXTERNAL_WALLET',
+    'PASSKEY',
+    'PREGEN',
+    'REST_API',
+];
 var RecoveryStatus;
 (function (RecoveryStatus) {
     RecoveryStatus["INITIATED"] = "INITIATED";

package/dist/cjs/types/authState.js

@@ -23,5 +23,10 @@ exports.AUTH_STATUSES = [
     'needs_second_factor', // first factor passed; awaiting a login-time MFA challenge (ENG-6906)
     'authenticated', // done; a session has been established
 ];
-/** First-factor methods the `/v2/auth` flow currently handles. */
-exports.AUTH_FLOW_METHODS = ['EMAIL', 'PHONE'];
+/**
+ * First-factor methods the `/v2/auth` flow handles. Email/phone authenticate via a delivered
+ * one-time code; external-wallet by signing a SIWE challenge; passkey by a WebAuthn assertion
+ * (usernameless — resolved from the credential at `continue`); oauth by a provider redirect
+ * (the specific provider rides on the flow; the account is resolved at `continue`). (ENG-6911)
+ */
+exports.AUTH_FLOW_METHODS = ['EMAIL', 'PHONE', 'EXTERNAL_WALLET', 'PASSKEY', 'OAUTH'];

package/dist/cjs/types/index.js

@@ -24,6 +24,8 @@ __exportStar(require("./params.js"), exports);
 __exportStar(require("./partner.js"), exports);
 __exportStar(require("./partnerAppConfig.js"), exports);
 __exportStar(require("./pending-transaction.js"), exports);
+__exportStar(require("./permissions.js"), exports);
+__exportStar(require("./signing.js"), exports);
 __exportStar(require("./theme.js"), exports);
 __exportStar(require("./transaction.js"), exports);
 __exportStar(require("./wallet.js"), exports);

package/dist/cjs/types/permissions.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/types/signing.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/types/wallet.js

@@ -16,8 +16,9 @@ var WalletType;
     WalletType["SOLANA"] = "SOLANA";
     WalletType["COSMOS"] = "COSMOS";
     WalletType["STELLAR"] = "STELLAR";
+    WalletType["SUI"] = "SUI";
 })(WalletType || (exports.WalletType = WalletType = {}));
-exports.WALLET_TYPES = ['EVM', 'SOLANA', 'COSMOS', 'STELLAR'];
+exports.WALLET_TYPES = ['EVM', 'SOLANA', 'COSMOS', 'STELLAR', 'SUI'];
 /* @deprecated */
 var Chain;
 (function (Chain) {
@@ -42,6 +43,9 @@ var Network;
     Network["BERACHAIN"] = "BERACHAIN";
     Network["STELLAR"] = "STELLAR";
     Network["STELLAR_TESTNET"] = "STELLAR_TESTNET";
+    Network["SUI"] = "SUI";
+    Network["SUI_TESTNET"] = "SUI_TESTNET";
+    Network["SUI_DEVNET"] = "SUI_DEVNET";
 })(Network || (exports.Network = Network = {}));
 exports.NETWORKS = [
     'ETHEREUM',
@@ -56,6 +60,9 @@ exports.NETWORKS = [
     'SOLANA_DEVNET',
     'STELLAR',
     'STELLAR_TESTNET',
+    'SUI',
+    'SUI_TESTNET',
+    'SUI_DEVNET',
     'COSMOS',
     'NOBLE',
 ];

package/dist/cjs/utils/index.js

@@ -449,6 +449,9 @@ exports.NETWORK_METADATA = [
     },
     { type: 'STELLAR', internalId: 'STELLAR', name: 'Stellar' },
     { type: 'STELLAR', internalId: 'STELLAR_TESTNET', name: 'Stellar Testnet' },
+    { type: 'SUI', internalId: 'SUI', name: 'Sui' },
+    { type: 'SUI', internalId: 'SUI_TESTNET', name: 'Sui Testnet' },
+    { type: 'SUI', internalId: 'SUI_DEVNET', name: 'Sui Devnet' },
     { type: 'COSMOS', internalId: 'COSMOS', name: 'Cosmos' },
 ];
 function getChainId(network) {

package/dist/esm/index.js

@@ -1,4 +1,6 @@
 export * from './types/index.js';
+export * from './types/permissions.js';
+export * from './schemas/permissionsV2.js';
 export * from './utils/index.js';
 import * as transactionTypes from './types/transaction.js';
 export { transactionTypes };

package/dist/esm/schemas/permissionsV2.js

@@ -0,0 +1,185 @@
+import { z } from 'zod';
+export const policyAuthoringSigningWalletTypes = ['EVM'];
+export const policyAuthoringSigningRequestRoutes = [
+    'evm.sign_transaction',
+    'evm.sign_raw',
+    'evm.sign_typed_data',
+    'evm.sign_authorization',
+    'evm.sign_message',
+    'smart_account.user_operation',
+];
+export const permissionsV2SigningRequestTypes = [
+    'evm_transaction',
+    'evm_message',
+    'evm_raw',
+    'evm_typed_data',
+    'evm_authorization',
+    'smart_account_user_operation',
+];
+const nonEmptyStringSchema = z.string().min(1);
+const uniqueNonEmptyStringsSchema = z
+    .array(nonEmptyStringSchema)
+    .min(1)
+    .refine((values) => new Set(values).size === values.length, 'values must be unique');
+export const permissionsV2PolicyLayerSchema = z.enum(['para', 'partner']);
+export const permissionsV2PolicyModeSchema = z.enum(['guardrail', 'delegation']);
+export const permissionsV2PolicyEffectSchema = z.enum(['allow', 'deny', 'require_approval']);
+export const permissionsV2CompareOperatorSchema = z.enum(['eq', 'ne', 'lt', 'lte', 'gt', 'gte', 'in']);
+export const permissionsV2AggregateOperatorSchema = z.enum(['lt', 'lte', 'gt', 'gte']);
+export const permissionsV2SigningWalletTypeSchema = z.enum(policyAuthoringSigningWalletTypes);
+export const permissionsV2SigningRequestRouteSchema = z.enum(policyAuthoringSigningRequestRoutes);
+export const permissionsV2SigningRequestTypeSchema = z.enum(permissionsV2SigningRequestTypes);
+export const policyAuthoringJsonPrimitiveSchema = z.union([
+    z.string(),
+    z.number(),
+    z.boolean(),
+    z.null(),
+]);
+export const policyAuthoringJsonValueSchema = z.lazy(() => z.union([
+    policyAuthoringJsonPrimitiveSchema,
+    z.array(policyAuthoringJsonValueSchema),
+    z.record(policyAuthoringJsonValueSchema),
+]));
+export const policyAuthoringJsonObjectSchema = z.record(policyAuthoringJsonValueSchema);
+export const permissionsV2ConditionSchema = z.lazy(() => z.discriminatedUnion('kind', [
+    z
+        .object({
+        kind: z.literal('compare'),
+        fact: nonEmptyStringSchema,
+        op: permissionsV2CompareOperatorSchema,
+        value: policyAuthoringJsonValueSchema,
+    })
+        .strict(),
+    z
+        .object({
+        kind: z.literal('aggregate'),
+        fact: nonEmptyStringSchema,
+        op: permissionsV2AggregateOperatorSchema,
+        value: nonEmptyStringSchema,
+        window: nonEmptyStringSchema,
+        asset: nonEmptyStringSchema.optional(),
+    })
+        .strict(),
+    z
+        .object({
+        kind: z.literal('all'),
+        of: z.array(permissionsV2ConditionSchema).min(1),
+    })
+        .strict(),
+    z
+        .object({
+        kind: z.literal('any'),
+        of: z.array(permissionsV2ConditionSchema).min(1),
+    })
+        .strict(),
+    z
+        .object({
+        kind: z.literal('not'),
+        of: permissionsV2ConditionSchema,
+    })
+        .strict(),
+]));
+export const permissionsV2PartnerAuthoredPolicySelectorSchema = z
+    .object({
+    walletId: nonEmptyStringSchema.optional(),
+    chainId: z.union([nonEmptyStringSchema, uniqueNonEmptyStringsSchema]).optional(),
+    walletType: permissionsV2SigningWalletTypeSchema.optional(),
+    requestRoute: permissionsV2SigningRequestRouteSchema.optional(),
+    requestType: permissionsV2SigningRequestTypeSchema.optional(),
+})
+    .strict();
+export const permissionsV2PolicyMetadataSchema = z
+    .object({
+    label: z.string().optional(),
+    productMode: permissionsV2PolicyModeSchema.optional(),
+    description: z.string().optional(),
+    annotations: policyAuthoringJsonObjectSchema.optional(),
+})
+    .strict();
+export const permissionsV2PartnerPolicyMetadataSchema = permissionsV2PolicyMetadataSchema.extend({
+    productMode: permissionsV2PolicyModeSchema,
+});
+export const permissionsV2PolicyRuleSchema = z
+    .object({
+    id: nonEmptyStringSchema,
+    effect: permissionsV2PolicyEffectSchema,
+    when: permissionsV2ConditionSchema,
+})
+    .strict();
+const partnerPolicyCandidateFields = {
+    id: nonEmptyStringSchema,
+    schemaVersion: z.literal('permissions.policy.v1'),
+    version: nonEmptyStringSchema,
+    selector: permissionsV2PartnerAuthoredPolicySelectorSchema,
+    rules: z.array(permissionsV2PolicyRuleSchema).min(1),
+    metadata: permissionsV2PolicyMetadataSchema.optional(),
+};
+export const permissionsV2PartnerPolicyCandidateSchema = z.object(partnerPolicyCandidateFields).strict();
+export const permissionsV2PartnerAuthoredPolicyDefinitionSchema = permissionsV2PartnerPolicyCandidateSchema.extend({
+    metadata: permissionsV2PartnerPolicyMetadataSchema,
+});
+export const permissionsV2DelegationPolicyDefinitionSchema = permissionsV2PartnerAuthoredPolicyDefinitionSchema.extend({
+    layer: z.literal('partner'),
+    selector: permissionsV2PartnerAuthoredPolicySelectorSchema.extend({
+        partnerId: nonEmptyStringSchema,
+        appId: nonEmptyStringSchema,
+    }),
+    metadata: permissionsV2PartnerPolicyMetadataSchema.extend({
+        productMode: z.literal('delegation'),
+    }),
+});
+export const permissionsV2DelegationConsentApiStatusSchema = z.enum([
+    'pending',
+    'standing',
+    'manual_review',
+    'revoked',
+    'expired',
+]);
+export const permissionsV2DelegationConsentMutationSchema = z
+    .object({
+    partnerId: nonEmptyStringSchema,
+    appId: nonEmptyStringSchema,
+    walletId: nonEmptyStringSchema,
+    policyVersion: nonEmptyStringSchema,
+    policyHash: nonEmptyStringSchema,
+    expiresAt: z.string().datetime().optional(),
+})
+    .strict();
+export const permissionsV2DelegationConsentStandingMutationSchema = permissionsV2DelegationConsentMutationSchema
+    .extend({
+    pendingTransactionId: nonEmptyStringSchema,
+})
+    .strict();
+export const permissionsV2DelegationConsentViewSchema = z
+    .object({
+    status: permissionsV2DelegationConsentApiStatusSchema,
+    userId: nonEmptyStringSchema,
+    partnerId: nonEmptyStringSchema,
+    appId: nonEmptyStringSchema,
+    walletId: nonEmptyStringSchema,
+    policyId: nonEmptyStringSchema,
+    policyVersion: nonEmptyStringSchema,
+    policyHash: nonEmptyStringSchema,
+    grantedAt: z.string().datetime().optional(),
+    expiresAt: z.string().datetime().optional(),
+    revokedAt: z.string().datetime().optional(),
+})
+    .strict();
+export const permissionsV2DelegationConsentRequestSchema = z
+    .object({
+    policy: permissionsV2DelegationPolicyDefinitionSchema,
+    consent: permissionsV2DelegationConsentViewSchema,
+})
+    .strict();
+export const permissionsV2DelegationConsentDiscoveryResponseSchema = z
+    .object({
+    requests: z.array(permissionsV2DelegationConsentRequestSchema),
+})
+    .strict();
+export const permissionsV2ValidationErrorSchema = z
+    .object({
+    code: z.string(),
+    path: z.string(),
+    message: z.string(),
+})
+    .strict();

package/dist/esm/types/assets.js

@@ -1,9 +1,13 @@
+/** @deprecated use `OnRampProvider` string union instead */
 export var OnRampProvider;
 (function (OnRampProvider) {
     OnRampProvider["RAMP"] = "RAMP";
     OnRampProvider["STRIPE"] = "STRIPE";
     OnRampProvider["MOONPAY"] = "MOONPAY";
+    OnRampProvider["CDP"] = "CDP";
+    OnRampProvider["MERCURYO"] = "MERCURYO";
 })(OnRampProvider || (OnRampProvider = {}));
+export const ON_RAMP_PROVIDERS = ['RAMP', 'STRIPE', 'MOONPAY', 'CDP', 'MERCURYO'];
 /** @deprecated use `TOnRampAsset` string union instead */
 export var OnRampAsset;
 (function (OnRampAsset) {

package/dist/esm/types/auth.js

@@ -54,6 +54,10 @@ export const OAUTH_METHODS = [
     'FARCASTER',
     'TELEGRAM',
     'CUSTOM_OIDC',
+    // A partner-configured OAuth2 provider Para ships no first-party adapter for (e.g. Spotify). The specific
+    // connection rides on the flow's providerConfigHandle; the generic OAuth2 client uses the connection's
+    // stored endpoints. (ENG-7008)
+    'CUSTOM_OAUTH',
 ];
 export const LINKED_ACCOUNT_TYPES = [
     'EMAIL',
@@ -81,6 +85,20 @@ export var LegacyAuthMethod;
     LegacyAuthMethod["PASSWORD"] = "PASSWORD";
     LegacyAuthMethod["BIOMETRIC"] = "BIOMETRIC";
 })(LegacyAuthMethod || (LegacyAuthMethod = {}));
+/**
+ * Every way a user row can be established/authenticated. Runtime tuple (mirrors OAUTH_METHODS) so code
+ * can iterate the canonical set instead of hand-maintaining parallel lists. OAuth providers are folded
+ * in from OAUTH_METHODS; the tail is the non-OAuth methods + the non-login events (PREGEN/REST_API).
+ */
+export const LOGIN_METHODS = [
+    ...OAUTH_METHODS,
+    'EMAIL',
+    'PHONE',
+    'EXTERNAL_WALLET',
+    'PASSKEY',
+    'PREGEN',
+    'REST_API',
+];
 export var RecoveryStatus;
 (function (RecoveryStatus) {
     RecoveryStatus["INITIATED"] = "INITIATED";

package/dist/esm/types/authState.js

@@ -20,5 +20,10 @@ export const AUTH_STATUSES = [
     'needs_second_factor', // first factor passed; awaiting a login-time MFA challenge (ENG-6906)
     'authenticated', // done; a session has been established
 ];
-/** First-factor methods the `/v2/auth` flow currently handles. */
-export const AUTH_FLOW_METHODS = ['EMAIL', 'PHONE'];
+/**
+ * First-factor methods the `/v2/auth` flow handles. Email/phone authenticate via a delivered
+ * one-time code; external-wallet by signing a SIWE challenge; passkey by a WebAuthn assertion
+ * (usernameless — resolved from the credential at `continue`); oauth by a provider redirect
+ * (the specific provider rides on the flow; the account is resolved at `continue`). (ENG-6911)
+ */
+export const AUTH_FLOW_METHODS = ['EMAIL', 'PHONE', 'EXTERNAL_WALLET', 'PASSKEY', 'OAUTH'];

package/dist/esm/types/index.js

@@ -8,6 +8,8 @@ export * from './params.js';
 export * from './partner.js';
 export * from './partnerAppConfig.js';
 export * from './pending-transaction.js';
+export * from './permissions.js';
+export * from './signing.js';
 export * from './theme.js';
 export * from './transaction.js';
 export * from './wallet.js';

package/dist/esm/types/permissions.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/types/signing.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/types/wallet.js

@@ -13,8 +13,9 @@ export var WalletType;
     WalletType["SOLANA"] = "SOLANA";
     WalletType["COSMOS"] = "COSMOS";
     WalletType["STELLAR"] = "STELLAR";
+    WalletType["SUI"] = "SUI";
 })(WalletType || (WalletType = {}));
-export const WALLET_TYPES = ['EVM', 'SOLANA', 'COSMOS', 'STELLAR'];
+export const WALLET_TYPES = ['EVM', 'SOLANA', 'COSMOS', 'STELLAR', 'SUI'];
 /* @deprecated */
 export var Chain;
 (function (Chain) {
@@ -39,6 +40,9 @@ export var Network;
     Network["BERACHAIN"] = "BERACHAIN";
     Network["STELLAR"] = "STELLAR";
     Network["STELLAR_TESTNET"] = "STELLAR_TESTNET";
+    Network["SUI"] = "SUI";
+    Network["SUI_TESTNET"] = "SUI_TESTNET";
+    Network["SUI_DEVNET"] = "SUI_DEVNET";
 })(Network || (Network = {}));
 export const NETWORKS = [
     'ETHEREUM',
@@ -53,6 +57,9 @@ export const NETWORKS = [
     'SOLANA_DEVNET',
     'STELLAR',
     'STELLAR_TESTNET',
+    'SUI',
+    'SUI_TESTNET',
+    'SUI_DEVNET',
     'COSMOS',
     'NOBLE',
 ];

package/dist/esm/utils/index.js

@@ -430,6 +430,9 @@ export const NETWORK_METADATA = [
     },
     { type: 'STELLAR', internalId: 'STELLAR', name: 'Stellar' },
     { type: 'STELLAR', internalId: 'STELLAR_TESTNET', name: 'Stellar Testnet' },
+    { type: 'SUI', internalId: 'SUI', name: 'Sui' },
+    { type: 'SUI', internalId: 'SUI_TESTNET', name: 'Sui Testnet' },
+    { type: 'SUI', internalId: 'SUI_DEVNET', name: 'Sui Devnet' },
     { type: 'COSMOS', internalId: 'COSMOS', name: 'Cosmos' },
 ];
 export function getChainId(network) {

package/dist/types/index.d.ts

@@ -1,4 +1,6 @@
 export * from './types/index.js';
+export * from './types/permissions.js';
+export * from './schemas/permissionsV2.js';
 export * from './utils/index.js';
 import * as transactionTypes from './types/transaction.js';
 export { transactionTypes };

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AAEjC,OAAO,KAAK,gBAAgB,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AAEjC,OAAO,KAAK,gBAAgB,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,CAAC"}