@meantjs/profile 0.4.0 → 0.6.0

package/CHANGELOG.md

@@ -2,6 +2,37 @@
 
 The five Candid Profile library packages (`@meantjs/profile`, `/format`, `/consent`, `/tools`, `/reconcile`) release together under one version and pin each other exactly; a version appears here even when this package did not change. Release steps: `docs/releasing.md` in the repository.
 
+## 0.6.0 — 2026-11-01
+
+- x402's usage-based payment, x402's other networks and USDC's permit (D-059, experimental). New standard contract
+  profiles, shipped beside the packs: `x402-upto-permit2`, x402's `upto` payment through Permit2 (witness
+  `Witness(address to,address facilitator,uint256 validAfter)`), its spender pinned to x402's `upto` proxy and its
+  grant the maximum to `witness.to`; and `usdc-domain-usdc`, USDC's messages on the eleven chains where it signs under
+  the domain name `USDC` (Base Sepolia among them). `usdc` and `usdc-domain-usdc` also read USDC's EIP-2612 `Permit`
+  (`approve`, a grant to `spender` that never ends). `usdc` lists chains 1, 137, 8453, 42161, 43113, 43114 and 421614;
+  `x402-exact-permit2` 20 networks; `permit2` 23. Their profile ids changed. `usdc-base-sepolia` is unchanged and kept
+  for 0.5.0 code; `usdc-domain-usdc` reads the same messages there with the same words.
+
+## 0.5.0 — 2026-10-30
+
+- Pins, experimental (spec §15.4, D-058): the new tag `fixed`, with `value` one address, says that a profile describes
+  a call or an EIP-712 message only with that address at an `address` position of its arguments. Elsewhere it is
+  `E_TAG_TARGET` or `E_TAG_NOT_APPLICABLE`, a value with a bad checksum `E_ADDRESS_CHECKSUM`, and two profiles that pin
+  one position to different addresses conflict in any layers (`E_CONFLICT`, at the lower one). A profile with a pin
+  that does not hold supplies only its effects, without grants, and its pins that hold; a pin's error is never an
+  `I_PACK_ANNOTATION_SKIPPED`. The resolved form carries the tag.
+- New standard contract profiles, shipped beside the packs: `usdc` and `usdc-base-sepolia` (USDC's EIP-3009
+  messages `TransferWithAuthorization`, `ReceiveWithAuthorization` and `CancelAuthorization` on Ethereum, Base and
+  Arbitrum, and on Base Sepolia, whose USDC signs under another domain name), and `x402-exact-permit2` (x402's
+  `exact` payment through Permit2, its spender pinned to x402's proxy). The `permit2` profile also lists Base and Base
+  Sepolia (chains 8453 and 84532), so its profile id changed.
+- A contract profile resolved against another ABI (`resolveService({ abi })`, `candid-profile resolve --abi`) reports
+  `W_REBOUND` and `E_STALE` at `binds.abi`, naming the identity of its ABI (spec §15.3, D-057). They were reported at
+  `binds.interface_id`, which a contract profile does not have, and `W_REBOUND` read "profile is bound to undefined".
+  Canister profiles are unchanged.
+- Docs: the spec now lists `named` among the tags a stale profile does not supply, as the resolver has done since D-045;
+  the README and `served.mjs` no longer point at the kit, which is not public yet.
+
 ## 0.4.0 — 2026-10-30
 
 - What a call grants (spec §5.3, D-056): an `effect` of kind `transfer` or `approve` may carry `grant`, the positions of

package/README.md

@@ -146,7 +146,7 @@ const r = await resolveService({ did, validateSchema, profiles: doc ? [{ doc }]
 
 A canister serves its profile as the public custom section `icp:public candid:profile`. Reading the bytes is the
 consumer's job (one certified `read_state` of `/canister/<id>/metadata/candid:service` and `.../candid:profile`;
-`packages/kit` `fetch` does it with `@icp-sdk/core`); this package checks what came back:
+the project's kit, not public yet, does it with `@icp-sdk/core`); this package checks what came back:
 
 ```js
 import { readServedProfile, resolveService } from "@meantjs/profile";
@@ -162,7 +162,7 @@ const r = await resolveService({ did: serviceText, profiles: served.ok ? [{ doc:
   installed yet (a module does not know the id it will run as); any other non-string throws.
 - Binding is the resolver's usual rule (spec section 7): resolve against the `candid:service` the same canister
   serves, so a profile for another interface is `rebound` or `stale` as any other.
-- Tests: `test/served.test.mjs`; end to end on PocketIC in `packages/kit/pocketic/`.
+- Tests: `test/served.test.mjs`; end to end on PocketIC in the kit's tests, which are not public yet.
 
 ## EVM contracts (experimental, spec section 15, D-054 and D-055)
 
@@ -186,8 +186,15 @@ r.resolved.methods.transfer.tags.intent.args.template; // "Send {wad} to {dst}":
   (`PermitSingle(0).details.amount`) and listed under the resolved form's `messages` with its `encode_type` and
   `type_hash`. `amount.token` names an amount's token by an `address` field (`E_TOKEN_PATH` otherwise). Bad types, a
   message named like a function and two meanings for one type name are `E_EIP712`. Standard files: the `erc2612`
-  pack, and the `permit2` and `dai-permit` contract profiles shipped beside the packs
-  (`@meantjs/profile/packs/permit2.profile.json`); `loadPacks()` returns the packs only.
+  pack, and the contract profiles `permit2`, `dai-permit`, `usdc` and `usdc-domain-usdc` (USDC's EIP-3009 messages
+  and permit, under its two domain names), `usdc-base-sepolia` (as 0.5.0 published it), `x402-exact-permit2` and
+  `x402-upto-permit2`, shipped beside the packs (`@meantjs/profile/packs/permit2.profile.json`); `loadPacks()`
+  returns the packs only.
+- **Pins** (`fixed`, spec §15.4, D-058): an `address` in the arguments of a function or a message that the profile
+  describes only with one value, as each of x402's Permit2 payments holds its scheme's proxy as its spender. A pin
+  that does not hold (another place or type, a bad checksum, an address that does not resolve, another value pinned
+  by any profile) is an error, and its profile then supplies only its effects, without grants, and its pins that
+  hold.
 - **Refused for now:** overloaded function names and unreadable fragments (`E_ABI`); `idempotency`, `outcome`, `list`,
   `names` and `named` on a contract (`E_TAG_TARGET`); `account` and `subaccount` (`E_TAG_NOT_APPLICABLE`); `[ ]`
   template segments (`E_TEMPLATE`).

package/data/packs/permit2.profile.json

@@ -5,7 +5,7 @@
   "name": "permit2",
   "origin": "third_party",
   "language": "en",
-  "description": "Uniswap's Permit2 (spec section 15.9, experimental): its AllowanceTransfer messages (PermitSingle, PermitBatch), which set allowances, and its SignatureTransfer messages (PermitTransferFrom, PermitBatchTransferFrom), which authorize one transfer. Witness messages (PermitWitnessTransferFrom) are left out: each protocol adds its own witness type (O1). Bound to the deployments ERC-7730's own Permit2 example lists, so a look-alike contract named \"Permit2\" gets none of these words. Amounts are in the token the message names: a consumer supplies that token's decimals() and symbol(), and shows its address beside the symbol.",
+  "description": "Uniswap's Permit2 (spec section 15.9, experimental): its AllowanceTransfer messages (PermitSingle, PermitBatch), which set allowances, and its SignatureTransfer messages (PermitTransferFrom, PermitBatchTransferFrom), which authorize one transfer. Witness messages (PermitWitnessTransferFrom) are left out: each protocol adds its own witness type, in a profile of its own (O9; x402's are x402-exact-permit2 and x402-upto-permit2). Bound to the deployments ERC-7730's own Permit2 example lists (chains 1 and 42161) and to the other networks x402 names, whose Permit2 code and domain were read on chain (Base and Base Sepolia on 2026-10-30, the others on 2026-11-01), so a look-alike contract named \"Permit2\" gets none of these words. Amounts are in the token the message names: a consumer supplies that token's decimals() and symbol(), and shows its address beside the symbol.",
   "binds": {
     "eip712": {
       "domain": {
@@ -111,9 +111,93 @@
         "chain_id": 1,
         "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
       },
+      {
+        "chain_id": 14,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 50,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 51,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 137,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 143,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 988,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 1328,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 1329,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 2201,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 4326,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 8453,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 10143,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 31612,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
       {
         "chain_id": 42161,
         "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 42220,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 43113,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 43114,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 80002,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 84532,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 421614,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 5042002,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 11142220,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
       }
     ]
   },

package/data/packs/usdc-base-sepolia.profile.json

@@ -0,0 +1,301 @@
+{
+  "format": "candid-profile",
+  "format_version": 0,
+  "kind": "contract",
+  "name": "usdc-base-sepolia",
+  "origin": "third_party",
+  "language": "en",
+  "description": "USDC's EIP-3009 messages on Base Sepolia, a test network (spec section 15.9, experimental), with the usdc profile's words. TransferWithAuthorization and ReceiveWithAuthorization pay `to` once, by a signature that someone else submits (only the payee, for ReceiveWithAuthorization), and CancelAuthorization cancels one that is unused (EIP-3009; Circle stablecoin-evm, FiatTokenV2.sol). x402's `exact` scheme pays by TransferWithAuthorization by default (coinbase/x402, specs/schemes/exact/scheme_exact_evm.md). Only the messages are described: USDC's ABI names transferWithAuthorization, receiveWithAuthorization, cancelAuthorization and permit twice each, which the resolver refuses (O1). Base Sepolia's USDC signs under the domain name `USDC`, not the mainnets' `USD Coin`, and a profile binds one domain, so it has a profile of its own. Read on chain on 2026-10-30 (DOMAIN_SEPARATOR, decimals 6, the three type hashes); x402's own examples use it.",
+  "binds": {
+    "eip712": {
+      "domain": {
+        "name": "USDC",
+        "version": "2"
+      },
+      "types": {
+        "CancelAuthorization": [
+          {
+            "name": "authorizer",
+            "type": "address"
+          },
+          {
+            "name": "nonce",
+            "type": "bytes32"
+          }
+        ],
+        "ReceiveWithAuthorization": [
+          {
+            "name": "from",
+            "type": "address"
+          },
+          {
+            "name": "to",
+            "type": "address"
+          },
+          {
+            "name": "value",
+            "type": "uint256"
+          },
+          {
+            "name": "validAfter",
+            "type": "uint256"
+          },
+          {
+            "name": "validBefore",
+            "type": "uint256"
+          },
+          {
+            "name": "nonce",
+            "type": "bytes32"
+          }
+        ],
+        "TransferWithAuthorization": [
+          {
+            "name": "from",
+            "type": "address"
+          },
+          {
+            "name": "to",
+            "type": "address"
+          },
+          {
+            "name": "value",
+            "type": "uint256"
+          },
+          {
+            "name": "validAfter",
+            "type": "uint256"
+          },
+          {
+            "name": "validBefore",
+            "type": "uint256"
+          },
+          {
+            "name": "nonce",
+            "type": "bytes32"
+          }
+        ]
+      }
+    },
+    "deployments": [
+      {
+        "chain_id": 84532,
+        "address": "0x036CbD53842c5426634e7929541eC2318f3dCF7e"
+      }
+    ]
+  },
+  "annotations": [
+    {
+      "at": "TransferWithAuthorization",
+      "tag": "intent",
+      "args": {
+        "title": "Pay USDC by signature",
+        "template": "Send {value} from {from} to {to}, once. Valid after {validAfter}. Expires: {validBefore}."
+      }
+    },
+    {
+      "at": "TransferWithAuthorization",
+      "tag": "effect",
+      "args": {
+        "kind": "transfer",
+        "irreversible": true,
+        "grant": {
+          "to": "to",
+          "amount": "value",
+          "ends": [
+            "validBefore"
+          ]
+        }
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).from",
+      "tag": "describe",
+      "args": {
+        "label": "From"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).to",
+      "tag": "describe",
+      "args": {
+        "label": "To"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).value",
+      "tag": "amount",
+      "args": {
+        "decimals": 6,
+        "symbol": "USDC"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).value",
+      "tag": "describe",
+      "args": {
+        "label": "Amount"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).validAfter",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).validAfter",
+      "tag": "describe",
+      "args": {
+        "label": "Valid after"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).validBefore",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix",
+        "threshold": "115792089237316195423570985008687907853269984665640564039457584007913129639935",
+        "message": "Never"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).validBefore",
+      "tag": "describe",
+      "args": {
+        "label": "Expires"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).nonce",
+      "tag": "describe",
+      "args": {
+        "label": "Nonce"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization",
+      "tag": "intent",
+      "args": {
+        "title": "Pay USDC by signature, collected by the payee",
+        "template": "Send {value} from {from} to {to}, once; only {to} can submit it. Valid after {validAfter}. Expires: {validBefore}."
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization",
+      "tag": "effect",
+      "args": {
+        "kind": "transfer",
+        "irreversible": true,
+        "grant": {
+          "to": "to",
+          "amount": "value",
+          "ends": [
+            "validBefore"
+          ]
+        }
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).from",
+      "tag": "describe",
+      "args": {
+        "label": "From"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).to",
+      "tag": "describe",
+      "args": {
+        "label": "To"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).value",
+      "tag": "amount",
+      "args": {
+        "decimals": 6,
+        "symbol": "USDC"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).value",
+      "tag": "describe",
+      "args": {
+        "label": "Amount"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).validAfter",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).validAfter",
+      "tag": "describe",
+      "args": {
+        "label": "Valid after"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).validBefore",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix",
+        "threshold": "115792089237316195423570985008687907853269984665640564039457584007913129639935",
+        "message": "Never"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).validBefore",
+      "tag": "describe",
+      "args": {
+        "label": "Expires"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).nonce",
+      "tag": "describe",
+      "args": {
+        "label": "Nonce"
+      }
+    },
+    {
+      "at": "CancelAuthorization",
+      "tag": "intent",
+      "args": {
+        "title": "Cancel a USDC payment signature",
+        "template": "Cancel the unused USDC payment signature of {authorizer} with nonce {nonce}."
+      }
+    },
+    {
+      "at": "CancelAuthorization",
+      "tag": "effect",
+      "args": {
+        "kind": "write",
+        "irreversible": true
+      }
+    },
+    {
+      "at": "CancelAuthorization(0).authorizer",
+      "tag": "describe",
+      "args": {
+        "label": "Signer of the payment"
+      }
+    },
+    {
+      "at": "CancelAuthorization(0).nonce",
+      "tag": "describe",
+      "args": {
+        "label": "Nonce"
+      }
+    }
+  ]
+}