@meantjs/profile 0.3.0 → 0.5.0

package/CHANGELOG.md

@@ -2,6 +2,35 @@
 
 The five Candid Profile library packages (`@meantjs/profile`, `/format`, `/consent`, `/tools`, `/reconcile`) release together under one version and pin each other exactly; a version appears here even when this package did not change. Release steps: `docs/releasing.md` in the repository.
 
+## 0.5.0 — 2026-10-30
+
+- Pins, experimental (spec §15.4, D-058): the new tag `fixed`, with `value` one address, says that a profile describes
+  a call or an EIP-712 message only with that address at an `address` position of its arguments. Elsewhere it is
+  `E_TAG_TARGET` or `E_TAG_NOT_APPLICABLE`, a value with a bad checksum `E_ADDRESS_CHECKSUM`, and two profiles that pin
+  one position to different addresses conflict in any layers (`E_CONFLICT`, at the lower one). A profile with a pin
+  that does not hold supplies only its effects, without grants, and its pins that hold; a pin's error is never an
+  `I_PACK_ANNOTATION_SKIPPED`. The resolved form carries the tag.
+- New standard contract profiles, shipped beside the packs: `usdc` and `usdc-base-sepolia` (USDC's EIP-3009
+  messages `TransferWithAuthorization`, `ReceiveWithAuthorization` and `CancelAuthorization` on Ethereum, Base and
+  Arbitrum, and on Base Sepolia, whose USDC signs under another domain name), and `x402-exact-permit2` (x402's
+  `exact` payment through Permit2, its spender pinned to x402's proxy). The `permit2` profile also lists Base and Base
+  Sepolia (chains 8453 and 84532), so its profile id changed.
+- A contract profile resolved against another ABI (`resolveService({ abi })`, `candid-profile resolve --abi`) reports
+  `W_REBOUND` and `E_STALE` at `binds.abi`, naming the identity of its ABI (spec §15.3, D-057). They were reported at
+  `binds.interface_id`, which a contract profile does not have, and `W_REBOUND` read "profile is bound to undefined".
+  Canister profiles are unchanged.
+- Docs: the spec now lists `named` among the tags a stale profile does not supply, as the resolver has done since D-045;
+  the README and `served.mjs` no longer point at the kit, which is not public yet.
+
+## 0.4.0 — 2026-10-30
+
+- What a call grants (spec §5.3, D-056): an `effect` of kind `transfer` or `approve` may carry `grant`, the positions of
+  who may take the tokens (`spender` or `to`), the `amount` and the `ends`. The validator checks them (new code
+  `E_GRANT`); a pack whose grant does not hold where it applies keeps its effect and loses the grant
+  (`I_PACK_ANNOTATION_SKIPPED`). The resolved form carries `grant` inside `effect`.
+- The packs carry grants: `icrc1`, `icrc2`, `erc20` and `erc2612`, and the contract profiles `permit2` and
+  `dai-permit`. Their profile ids changed with them.
+
 ## 0.3.0 — 2026-10-29
 
 - EIP-712 typed messages, experimental (spec §15.9, D-055). A contract profile or EVM pack may carry

package/README.md

@@ -146,7 +146,7 @@ const r = await resolveService({ did, validateSchema, profiles: doc ? [{ doc }]
 
 A canister serves its profile as the public custom section `icp:public candid:profile`. Reading the bytes is the
 consumer's job (one certified `read_state` of `/canister/<id>/metadata/candid:service` and `.../candid:profile`;
-`packages/kit` `fetch` does it with `@icp-sdk/core`); this package checks what came back:
+the project's kit, not public yet, does it with `@icp-sdk/core`); this package checks what came back:
 
 ```js
 import { readServedProfile, resolveService } from "@meantjs/profile";
@@ -162,7 +162,7 @@ const r = await resolveService({ did: serviceText, profiles: served.ok ? [{ doc:
   installed yet (a module does not know the id it will run as); any other non-string throws.
 - Binding is the resolver's usual rule (spec section 7): resolve against the `candid:service` the same canister
   serves, so a profile for another interface is `rebound` or `stale` as any other.
-- Tests: `test/served.test.mjs`; end to end on PocketIC in `packages/kit/pocketic/`.
+- Tests: `test/served.test.mjs`; end to end on PocketIC in the kit's tests, which are not public yet.
 
 ## EVM contracts (experimental, spec section 15, D-054 and D-055)
 
@@ -186,8 +186,12 @@ r.resolved.methods.transfer.tags.intent.args.template; // "Send {wad} to {dst}":
   (`PermitSingle(0).details.amount`) and listed under the resolved form's `messages` with its `encode_type` and
   `type_hash`. `amount.token` names an amount's token by an `address` field (`E_TOKEN_PATH` otherwise). Bad types, a
   message named like a function and two meanings for one type name are `E_EIP712`. Standard files: the `erc2612`
-  pack, and the `permit2` and `dai-permit` contract profiles shipped beside the packs
-  (`@meantjs/profile/packs/permit2.profile.json`); `loadPacks()` returns the packs only.
+  pack, and the contract profiles `permit2`, `dai-permit`, `usdc`, `usdc-base-sepolia` and `x402-exact-permit2`
+  shipped beside the packs (`@meantjs/profile/packs/permit2.profile.json`); `loadPacks()` returns the packs only.
+- **Pins** (`fixed`, spec §15.4, D-058): an `address` in the arguments of a function or a message that the profile
+  describes only with one value, as x402's Permit2 payment holds x402's proxy as its spender. A pin that does not hold
+  (another place or type, a bad checksum, an address that does not resolve, another value pinned by any profile) is
+  an error, and its profile then supplies only its effects, without grants, and its pins that hold.
 - **Refused for now:** overloaded function names and unreadable fragments (`E_ABI`); `idempotency`, `outcome`, `list`,
   `names` and `named` on a contract (`E_TAG_TARGET`); `account` and `subaccount` (`E_TAG_NOT_APPLICABLE`); `[ ]`
   template segments (`E_TEMPLATE`).

package/data/packs/dai-permit.profile.json

@@ -58,7 +58,11 @@
       "tag": "effect",
       "args": {
         "kind": "approve",
-        "irreversible": false
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "allowed"
+        }
       }
     },
     {

package/data/packs/erc20.profile.json

@@ -33,7 +33,11 @@
       "tag": "effect",
       "args": {
         "kind": "transfer",
-        "irreversible": true
+        "irreversible": true,
+        "grant": {
+          "to": "to",
+          "amount": "value"
+        }
       }
     },
     {
@@ -75,7 +79,11 @@
       "tag": "effect",
       "args": {
         "kind": "approve",
-        "irreversible": false
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "value"
+        }
       }
     },
     {

package/data/packs/erc2612.profile.json

@@ -57,7 +57,11 @@
       "tag": "effect",
       "args": {
         "kind": "approve",
-        "irreversible": false
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "value"
+        }
       }
     },
     {
@@ -131,7 +135,11 @@
       "tag": "effect",
       "args": {
         "kind": "approve",
-        "irreversible": false
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "value"
+        }
       }
     },
     {

package/data/packs/icrc1.profile.json

@@ -25,7 +25,11 @@
       "tag": "effect",
       "args": {
         "kind": "transfer",
-        "irreversible": true
+        "irreversible": true,
+        "grant": {
+          "to": "to",
+          "amount": "amount"
+        }
       }
     },
     {

package/data/packs/icrc2.profile.json

@@ -25,7 +25,14 @@
       "tag": "effect",
       "args": {
         "kind": "approve",
-        "irreversible": false
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "amount",
+          "ends": [
+            "expires_at"
+          ]
+        }
       }
     },
     {

package/data/packs/permit2.profile.json

@@ -5,7 +5,7 @@
   "name": "permit2",
   "origin": "third_party",
   "language": "en",
-  "description": "Uniswap's Permit2 (spec section 15.9, experimental): its AllowanceTransfer messages (PermitSingle, PermitBatch), which set allowances, and its SignatureTransfer messages (PermitTransferFrom, PermitBatchTransferFrom), which authorize one transfer. Witness messages (PermitWitnessTransferFrom) are left out: each protocol adds its own witness type (O1). Bound to the deployments ERC-7730's own Permit2 example lists, so a look-alike contract named \"Permit2\" gets none of these words. Amounts are in the token the message names: a consumer supplies that token's decimals() and symbol(), and shows its address beside the symbol.",
+  "description": "Uniswap's Permit2 (spec section 15.9, experimental): its AllowanceTransfer messages (PermitSingle, PermitBatch), which set allowances, and its SignatureTransfer messages (PermitTransferFrom, PermitBatchTransferFrom), which authorize one transfer. Witness messages (PermitWitnessTransferFrom) are left out: each protocol adds its own witness type, in a profile of its own (O9; x402's is x402-exact-permit2). Bound to the deployments ERC-7730's own Permit2 example lists (chains 1 and 42161) and to Base and Base Sepolia (8453 and 84532), whose Permit2 code and domain were read on chain on 2026-10-30, so a look-alike contract named \"Permit2\" gets none of these words. Amounts are in the token the message names: a consumer supplies that token's decimals() and symbol(), and shows its address beside the symbol.",
   "binds": {
     "eip712": {
       "domain": {
@@ -111,9 +111,17 @@
         "chain_id": 1,
         "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
       },
+      {
+        "chain_id": 8453,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
       {
         "chain_id": 42161,
         "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 84532,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
       }
     ]
   },
@@ -131,7 +139,15 @@
       "tag": "effect",
       "args": {
         "kind": "approve",
-        "irreversible": false
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "details.amount",
+          "ends": [
+            "details.expiration",
+            "sigDeadline"
+          ]
+        }
       }
     },
     {
@@ -309,7 +325,14 @@
       "tag": "effect",
       "args": {
         "kind": "transfer",
-        "irreversible": true
+        "irreversible": true,
+        "grant": {
+          "spender": "spender",
+          "amount": "permitted.amount",
+          "ends": [
+            "deadline"
+          ]
+        }
       }
     },
     {

package/data/packs/usdc-base-sepolia.profile.json

@@ -0,0 +1,301 @@
+{
+  "format": "candid-profile",
+  "format_version": 0,
+  "kind": "contract",
+  "name": "usdc-base-sepolia",
+  "origin": "third_party",
+  "language": "en",
+  "description": "USDC's EIP-3009 messages on Base Sepolia, a test network (spec section 15.9, experimental), with the usdc profile's words. TransferWithAuthorization and ReceiveWithAuthorization pay `to` once, by a signature that someone else submits (only the payee, for ReceiveWithAuthorization), and CancelAuthorization cancels one that is unused (EIP-3009; Circle stablecoin-evm, FiatTokenV2.sol). x402's `exact` scheme pays by TransferWithAuthorization by default (coinbase/x402, specs/schemes/exact/scheme_exact_evm.md). Only the messages are described: USDC's ABI names transferWithAuthorization, receiveWithAuthorization, cancelAuthorization and permit twice each, which the resolver refuses (O1). Base Sepolia's USDC signs under the domain name `USDC`, not the mainnets' `USD Coin`, and a profile binds one domain, so it has a profile of its own. Read on chain on 2026-10-30 (DOMAIN_SEPARATOR, decimals 6, the three type hashes); x402's own examples use it.",
+  "binds": {
+    "eip712": {
+      "domain": {
+        "name": "USDC",
+        "version": "2"
+      },
+      "types": {
+        "CancelAuthorization": [
+          {
+            "name": "authorizer",
+            "type": "address"
+          },
+          {
+            "name": "nonce",
+            "type": "bytes32"
+          }
+        ],
+        "ReceiveWithAuthorization": [
+          {
+            "name": "from",
+            "type": "address"
+          },
+          {
+            "name": "to",
+            "type": "address"
+          },
+          {
+            "name": "value",
+            "type": "uint256"
+          },
+          {
+            "name": "validAfter",
+            "type": "uint256"
+          },
+          {
+            "name": "validBefore",
+            "type": "uint256"
+          },
+          {
+            "name": "nonce",
+            "type": "bytes32"
+          }
+        ],
+        "TransferWithAuthorization": [
+          {
+            "name": "from",
+            "type": "address"
+          },
+          {
+            "name": "to",
+            "type": "address"
+          },
+          {
+            "name": "value",
+            "type": "uint256"
+          },
+          {
+            "name": "validAfter",
+            "type": "uint256"
+          },
+          {
+            "name": "validBefore",
+            "type": "uint256"
+          },
+          {
+            "name": "nonce",
+            "type": "bytes32"
+          }
+        ]
+      }
+    },
+    "deployments": [
+      {
+        "chain_id": 84532,
+        "address": "0x036CbD53842c5426634e7929541eC2318f3dCF7e"
+      }
+    ]
+  },
+  "annotations": [
+    {
+      "at": "TransferWithAuthorization",
+      "tag": "intent",
+      "args": {
+        "title": "Pay USDC by signature",
+        "template": "Send {value} from {from} to {to}, once. Valid after {validAfter}. Expires: {validBefore}."
+      }
+    },
+    {
+      "at": "TransferWithAuthorization",
+      "tag": "effect",
+      "args": {
+        "kind": "transfer",
+        "irreversible": true,
+        "grant": {
+          "to": "to",
+          "amount": "value",
+          "ends": [
+            "validBefore"
+          ]
+        }
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).from",
+      "tag": "describe",
+      "args": {
+        "label": "From"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).to",
+      "tag": "describe",
+      "args": {
+        "label": "To"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).value",
+      "tag": "amount",
+      "args": {
+        "decimals": 6,
+        "symbol": "USDC"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).value",
+      "tag": "describe",
+      "args": {
+        "label": "Amount"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).validAfter",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).validAfter",
+      "tag": "describe",
+      "args": {
+        "label": "Valid after"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).validBefore",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix",
+        "threshold": "115792089237316195423570985008687907853269984665640564039457584007913129639935",
+        "message": "Never"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).validBefore",
+      "tag": "describe",
+      "args": {
+        "label": "Expires"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).nonce",
+      "tag": "describe",
+      "args": {
+        "label": "Nonce"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization",
+      "tag": "intent",
+      "args": {
+        "title": "Pay USDC by signature, collected by the payee",
+        "template": "Send {value} from {from} to {to}, once; only {to} can submit it. Valid after {validAfter}. Expires: {validBefore}."
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization",
+      "tag": "effect",
+      "args": {
+        "kind": "transfer",
+        "irreversible": true,
+        "grant": {
+          "to": "to",
+          "amount": "value",
+          "ends": [
+            "validBefore"
+          ]
+        }
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).from",
+      "tag": "describe",
+      "args": {
+        "label": "From"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).to",
+      "tag": "describe",
+      "args": {
+        "label": "To"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).value",
+      "tag": "amount",
+      "args": {
+        "decimals": 6,
+        "symbol": "USDC"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).value",
+      "tag": "describe",
+      "args": {
+        "label": "Amount"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).validAfter",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).validAfter",
+      "tag": "describe",
+      "args": {
+        "label": "Valid after"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).validBefore",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix",
+        "threshold": "115792089237316195423570985008687907853269984665640564039457584007913129639935",
+        "message": "Never"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).validBefore",
+      "tag": "describe",
+      "args": {
+        "label": "Expires"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).nonce",
+      "tag": "describe",
+      "args": {
+        "label": "Nonce"
+      }
+    },
+    {
+      "at": "CancelAuthorization",
+      "tag": "intent",
+      "args": {
+        "title": "Cancel a USDC payment signature",
+        "template": "Cancel the unused USDC payment signature of {authorizer} with nonce {nonce}."
+      }
+    },
+    {
+      "at": "CancelAuthorization",
+      "tag": "effect",
+      "args": {
+        "kind": "write",
+        "irreversible": true
+      }
+    },
+    {
+      "at": "CancelAuthorization(0).authorizer",
+      "tag": "describe",
+      "args": {
+        "label": "Signer of the payment"
+      }
+    },
+    {
+      "at": "CancelAuthorization(0).nonce",
+      "tag": "describe",
+      "args": {
+        "label": "Nonce"
+      }
+    }
+  ]
+}