@meantjs/profile 0.3.0 → 0.4.0

package/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 The five Candid Profile library packages (`@meantjs/profile`, `/format`, `/consent`, `/tools`, `/reconcile`) release together under one version and pin each other exactly; a version appears here even when this package did not change. Release steps: `docs/releasing.md` in the repository.
 
+## 0.4.0 — 2026-10-30
+
+- What a call grants (spec §5.3, D-056): an `effect` of kind `transfer` or `approve` may carry `grant`, the positions of
+  who may take the tokens (`spender` or `to`), the `amount` and the `ends`. The validator checks them (new code
+  `E_GRANT`); a pack whose grant does not hold where it applies keeps its effect and loses the grant
+  (`I_PACK_ANNOTATION_SKIPPED`). The resolved form carries `grant` inside `effect`.
+- The packs carry grants: `icrc1`, `icrc2`, `erc20` and `erc2612`, and the contract profiles `permit2` and
+  `dai-permit`. Their profile ids changed with them.
+
 ## 0.3.0 — 2026-10-29
 
 - EIP-712 typed messages, experimental (spec §15.9, D-055). A contract profile or EVM pack may carry

package/data/packs/dai-permit.profile.json

@@ -58,7 +58,11 @@
       "tag": "effect",
       "args": {
         "kind": "approve",
-        "irreversible": false
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "allowed"
+        }
       }
     },
     {

package/data/packs/erc20.profile.json

@@ -33,7 +33,11 @@
       "tag": "effect",
       "args": {
         "kind": "transfer",
-        "irreversible": true
+        "irreversible": true,
+        "grant": {
+          "to": "to",
+          "amount": "value"
+        }
       }
     },
     {
@@ -75,7 +79,11 @@
       "tag": "effect",
       "args": {
         "kind": "approve",
-        "irreversible": false
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "value"
+        }
       }
     },
     {

package/data/packs/erc2612.profile.json

@@ -57,7 +57,11 @@
       "tag": "effect",
       "args": {
         "kind": "approve",
-        "irreversible": false
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "value"
+        }
       }
     },
     {
@@ -131,7 +135,11 @@
       "tag": "effect",
       "args": {
         "kind": "approve",
-        "irreversible": false
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "value"
+        }
       }
     },
     {

package/data/packs/icrc1.profile.json

@@ -25,7 +25,11 @@
       "tag": "effect",
       "args": {
         "kind": "transfer",
-        "irreversible": true
+        "irreversible": true,
+        "grant": {
+          "to": "to",
+          "amount": "amount"
+        }
       }
     },
     {

package/data/packs/icrc2.profile.json

@@ -25,7 +25,14 @@
       "tag": "effect",
       "args": {
         "kind": "approve",
-        "irreversible": false
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "amount",
+          "ends": [
+            "expires_at"
+          ]
+        }
       }
     },
     {

package/data/packs/permit2.profile.json

@@ -131,7 +131,15 @@
       "tag": "effect",
       "args": {
         "kind": "approve",
-        "irreversible": false
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "details.amount",
+          "ends": [
+            "details.expiration",
+            "sigDeadline"
+          ]
+        }
       }
     },
     {
@@ -309,7 +317,14 @@
       "tag": "effect",
       "args": {
         "kind": "transfer",
-        "irreversible": true
+        "irreversible": true,
+        "grant": {
+          "spender": "spender",
+          "amount": "permitted.amount",
+          "ends": [
+            "deadline"
+          ]
+        }
       }
     },
     {

package/data/profile-v0.schema.json

@@ -1140,9 +1140,62 @@
         },
         "replicated": {
           "type": "boolean"
+        },
+        "grant": {
+          "$ref": "#/$defs/grant",
+          "description": "What a transfer or approve lets someone take (spec section 5.3, D-056), for a check against terms the user confirmed."
         }
       }
     },
+    "grant": {
+      "type": "object",
+      "description": "Who may take the tokens, how many and until when, as relative paths into the method's arguments (spec section 5.3, D-056). Exactly one of spender and to.",
+      "required": [
+        "amount"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "spender": {
+          "$ref": "#/$defs/relpath",
+          "description": "Who may take the tokens through an allowance, or with a signature someone else submits: an address, or a position with an account tag."
+        },
+        "to": {
+          "$ref": "#/$defs/relpath",
+          "description": "Who a transfer pays directly: an address, or a position with an account tag."
+        },
+        "amount": {
+          "$ref": "#/$defs/relpath",
+          "description": "A position with an amount tag, whose threshold means unlimited; or a bool, where true is unlimited and false grants nothing."
+        },
+        "ends": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 8,
+          "items": {
+            "$ref": "#/$defs/relpath"
+          },
+          "description": "Positions with a timestamp tag; the grant ends at the latest of them, and one at its threshold or left out means never. Without ends, an approve never ends and a transfer ends when it is done."
+        }
+      },
+      "oneOf": [
+        {
+          "required": [
+            "spender"
+          ],
+          "properties": {
+            "spender": true
+          }
+        },
+        {
+          "required": [
+            "to"
+          ],
+          "properties": {
+            "to": true
+          }
+        }
+      ]
+    },
     "args_idempotency": {
       "type": "object",
       "required": [