@gvnrdao/dh-sdk 0.0.311 → 0.0.313

package/dist/interfaces/chunks/config.i.d.ts

@@ -37,6 +37,10 @@ export interface ContractAddresses {
     positionDelegateRegistry?: string;
     /** BitcoinWithdrawalAddressRegistry proxy; per-wallet allowlist that gates borrower-initiated BTC withdrawal destinations (24h time-lock). */
     bitcoinWithdrawalAddressRegistry?: string;
+    /** AgentDelegationRegistry proxy; protocol agent-delegation policy layer (MVP: auto-renew). Sepolia only. */
+    agentDelegationRegistry?: string;
+    /** DHAgentDelegate; EIP-7702 execution adapter (Gate 2) the borrower EOA delegates to. Sepolia only. */
+    dhAgentDelegate?: string;
     mockUsdcToken?: string;
     mockUsdcOwner?: string;
     mockUsdtToken?: string;
@@ -71,6 +75,19 @@ interface BaseSDKConfig {
         /** Custom store (e.g. a file-backed store for CLI daemons). */
         store?: ServerSessionStore;
     };
+    /**
+     * Audit M-8 audience the server-session login binds to. Defaults to
+     * `serviceEndpoint`.
+     *
+     * Set this only when ONE signature must authenticate several services — the
+     * browser frontend signs a single envelope and spends it at both
+     * lit-ops-server and the api, and a per-endpoint audience cannot name two
+     * endpoints. Every server the envelope is presented to must list this value as
+     * an accepted audience, so changing it requires a server-side config change
+     * FIRST. Node callers (CLI, MCP, cr-monitor) omit it and keep binding to the
+     * endpoint they call.
+     */
+    loginAudience?: string;
     /**
      * Fires immediately before the server-session login requests a wallet
      * signature — never on the silent re-mint paths. Lets UIs show a

package/dist/modules/diamond-hands-sdk.d.ts

@@ -18,6 +18,7 @@ import { SDKError } from "../utils/error-handler";
 import type { CreateLoanRequest, CreateLoanResult, LoanDataDetail, UCDMintRequest, UCDMintResult, PartialPaymentRequest, PartialPaymentResult, BTCWithdrawalResult, RenewPositionRequest, RenewPositionResult, LiquidationRequest, LiquidationResult, ConfirmBalanceRequest, ConfirmBalanceResult, TermsWithFeesResult } from "../interfaces/chunks/loan-operations.i";
 import type { DiamondHandsSDKConfig } from "../interfaces/chunks/config.i";
 import type { PKPData } from "../interfaces/chunks/pkp-integration.i";
+import type { DhServerLoginPayload } from "../utils/eip712-login";
 import { type ReconciledWithdrawal } from "../utils/withdrawal-reconciliation.utils";
 import { ContractManager } from "./contract/contract-manager.module";
 import { WithdrawalAddressModule } from "./withdrawal-address/withdrawal-address.module";
@@ -125,6 +126,28 @@ export declare class DiamondHandsSDK {
      * and never prompts the wallet.
      */
     clearServerSession(): Promise<void>;
+    /**
+     * Establish the lit-ops-server session from a login envelope the CALLER already
+     * had signed, instead of prompting the wallet for one.
+     *
+     * For a host that authenticates several services from one wallet signature (the
+     * browser frontend signs once and spends the same envelope at the api and here),
+     * this is what turns two wallet prompts into one — and for a multi-sig Safe each
+     * prompt saved is a whole propose-and-confirm ceremony across owners.
+     *
+     * Call it PROMPTLY after signing: each server pins the nonce on first use and
+     * requires that first use to be fresh (±120s EOA, ±600s contract wallet), and
+     * the two servers' replay stores are independent, so a late hand-off is rejected
+     * as stale even though the other service already accepted the same envelope.
+     * Once accepted, silent re-mint covers the next 24h with no further prompts.
+     *
+     * Requires `loginAudience` to be configured to a value BOTH servers accept —
+     * otherwise this service rejects the envelope as `audience_mismatch`.
+     *
+     * Throws if the exchange fails, so a caller can fall back to the prompt path.
+     * No-op in standalone mode (no server session to prime).
+     */
+    primeServerSession(payload: DhServerLoginPayload): Promise<void>;
     /**
      * Audit H-9: invalidate the LoanQuery cache so subsequent reads return
      * the post-write state. We clear the entire loan-query cache (not just
@@ -864,6 +887,42 @@ export declare class DiamondHandsSDK {
      * @param options - Override timeout/interval for this call
      * @throws if timeout is reached before subgraph catches up
      */
+    /** Guard: the AgentDelegationRegistry MVP is deployed on Sepolia only. */
+    private assertAgentDelegationSepolia;
+    /**
+     * Read a position's auto-renew delegation state (used to drive the Enable/Disable toggle).
+     * Pure view — no signer required.
+     */
+    getAutoRenewStatus(positionId: string, user?: string): Promise<{
+        enabled: boolean;
+        borrower: string;
+        maxRenewals: number;
+        renewalsUsed: number;
+        agentActive: boolean | null;
+        canRenew: {
+            ok: boolean;
+            reason: number;
+        } | null;
+    }>;
+    /**
+     * Enable auto-renew delegation for a position. Orchestrates the first-time setup: if the
+     * borrower has no active agent, mints a fresh per-user agent PKP (via lit-ops-server) and
+     * registers it, then records the position's renew grant. Borrower-signed.
+     */
+    enableAutoRenew(positionId: string, options?: {
+        maxRenewals?: number;
+        maxEndTimestamp?: number;
+        agentValiditySeconds?: number;
+    }): Promise<{
+        hash: string;
+        blockNumber: number;
+        agentAddress?: string;
+    }>;
+    /** Disable auto-renew delegation for a position (clears the grant). Borrower-signed. */
+    disableAutoRenew(positionId: string): Promise<{
+        hash: string;
+        blockNumber: number;
+    }>;
     /**
      * Get Bitcoin balance for an address
      *

package/dist/modules/loan/loan-creator.module.d.ts

@@ -46,6 +46,15 @@ export interface LoanCreatorConfig {
     debug?: boolean;
     /** Transaction timeout (ms) */
     transactionTimeoutMs?: number;
+    /**
+     * Confirmations to wait for before trusting the `positionId` read from a
+     * createPosition receipt. Defaults to 1 on local chains and 3 elsewhere.
+     *
+     * `positionId` is derived on-chain from `block.timestamp` and a global counter, so a
+     * reorg re-executes the same transaction into a different id. Raise this on chains
+     * with deep reorgs; it trades loan-creation latency for id stability.
+     */
+    createPositionConfirmations?: number;
     /** Validator version for loan creation (createPosition) - REQUIRED */
     loanCreationValidatorVersion: number;
     /** EVM JSON-RPC URL for service-mode PKP flow (forwards to lit-ops-server) */
@@ -117,6 +126,23 @@ export declare class LoanCreator {
      * Step 3: Submit loan creation transaction
      */
     private submitLoanCreation;
+    /**
+     * Confirmation depth to wait for before trusting `positionId` from a receipt.
+     *
+     * Deeper is safer but slower, so local chains (instant mining, no reorgs) stay at 1.
+     * Override with `createPositionConfirmations` when a chain needs more.
+     */
+    private createPositionConfirmations;
+    /**
+     * Re-read the receipt after confirmations and re-derive `positionId`, so a reorg
+     * cannot leave the caller holding an id that never survived to the canonical chain.
+     *
+     * Returns the authoritative id. If the re-read disagrees with what was first
+     * extracted, the fresh value wins and the divergence is logged loudly — silently
+     * returning a phantom id is how this surfaced as a `PositionNotFound()` hundreds of
+     * lines downstream, long after the real cause.
+     */
+    private confirmPositionId;
     /**
      * Extract position ID from transaction receipt
      */

package/dist/utils/agent-delegation.utils.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Agent-delegation service helpers (auto-renew MVP).
+ *
+ * Kept separate from the generic `PKPManager` so that module stays focused on PKP lifecycle —
+ * this file owns the feature-specific orchestration (the lit-ops-server mint-agent endpoint).
+ */
+/**
+ * Mint a fresh per-user AGENT PKP via lit-ops-server and return its Ethereum address, to be
+ * registered as the renewal agent in `AgentDelegationRegistry`. Each call yields a unique
+ * address (satisfies the registry's AR-1 non-reuse). Throws on failure.
+ *
+ * @param serviceEndpoint lit-ops-server base URL (the SDK's `serviceEndpoint`).
+ * @param authHeader      Optional async/sync provider of auth headers (the SDK's session token).
+ * @param timeoutMs       Request timeout (default 30s).
+ */
+export declare function mintAgentPkp(params: {
+    serviceEndpoint: string;
+    authHeader?: () => Promise<Record<string, string>> | Record<string, string>;
+    timeoutMs?: number;
+}): Promise<string>;

package/dist/utils/server-session.d.ts

@@ -22,6 +22,7 @@
  * `~/.diamond-hands/session.json` for cross-invocation reuse.
  */
 import type { Signer } from "ethers";
+import { type DhServerLoginPayload } from "./eip712-login";
 import { type ServerSessionStore } from "./server-session-store";
 export interface ServerSessionOptions {
     signer: Signer;
@@ -34,6 +35,16 @@ export interface ServerSessionOptions {
     sessionStore?: ServerSessionStore;
     /** Set false to disable persistence entirely (fresh signature per instance + expiry). */
     persistSession?: boolean;
+    /**
+     * Audit M-8 audience to bind the login to. Defaults to `serviceEndpoint`.
+     *
+     * A caller that shares ONE signature across several services (the browser
+     * frontend, which authenticates both lit-ops-server and the api from a single
+     * wallet prompt) cannot bind to a single endpoint, so it passes the app audience
+     * instead — and every server it talks to must accept that value. Node callers
+     * (CLI, MCP, cr-monitor) omit it and keep the endpoint binding unchanged.
+     */
+    loginAudience?: string;
     /**
      * Fires immediately before a wallet signature is requested — i.e. only when
      * neither the cached JWT nor the persisted envelope could renew the session,
@@ -59,6 +70,7 @@ export declare class ServerLoginError extends Error {
 export declare class ServerSession {
     private readonly signer;
     private readonly serviceEndpoint;
+    private readonly loginAudience;
     private readonly chainId;
     private readonly store;
     private readonly onSignaturePrompt?;
@@ -118,6 +130,24 @@ export declare class ServerSession {
      * of server response so the client stops presenting the token.
      */
     logout(): Promise<void>;
+    /**
+     * Adopt a login envelope signed ELSEWHERE and exchange it for a session now.
+     *
+     * The browser frontend collects one wallet signature and spends it at both the
+     * api and this service, so the envelope is minted outside the SDK. Without this
+     * seam the SDK would mint its own — a second wallet prompt, which for a
+     * multi-sig Safe is another full propose-and-confirm ceremony across owners.
+     *
+     * Must be called PROMPTLY after signing. Each server pins the nonce on FIRST
+     * use and requires that first use to be fresh (±120s EOA, ±600s contract
+     * wallet); the stores are independent, so a late hand-off is rejected as
+     * `stale_first_use` even though the other service already accepted it. After a
+     * successful first use, silent re-mint covers the next 24h.
+     *
+     * No-ops the prompt path entirely: on success the session is cached and
+     * persisted exactly as a self-minted login would be.
+     */
+    adoptLoginPayload(payload: DhServerLoginPayload): Promise<void>;
     /**
      * Resolve a session WITHOUT ever prompting for a wallet signature: a live
      * cached token, else the persisted JWT (adopted if still fresh, otherwise

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gvnrdao/dh-sdk",
-  "version": "0.0.311",
+  "version": "0.0.313",
   "description": "TypeScript SDK for Diamond Hands Protocol - Bitcoin-backed lending with LIT Protocol PKPs",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -82,8 +82,8 @@
   },
   "sideEffects": false,
   "dependencies": {
-    "@gvnrdao/dh-lit-actions": "^0.0.316",
-    "@gvnrdao/dh-lit-ops": "^0.0.307",
+    "@gvnrdao/dh-lit-actions": "^0.0.317",
+    "@gvnrdao/dh-lit-ops": "^0.0.308",
     "@noble/hashes": "^1.5.0",
     "axios": "^1.17.0",
     "bech32": "^2.0.0",