@meantjs/profile 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -2,6 +2,17 @@
 
 The five Candid Profile library packages (`@meantjs/profile`, `/format`, `/consent`, `/tools`, `/reconcile`) release together under one version and pin each other exactly; a version appears here even when this package did not change. Release steps: `docs/releasing.md` in the repository.
 
+## 0.6.0 — 2026-11-01
+
+- x402's usage-based payment, x402's other networks and USDC's permit (D-059, experimental). New standard contract
+  profiles, shipped beside the packs: `x402-upto-permit2`, x402's `upto` payment through Permit2 (witness
+  `Witness(address to,address facilitator,uint256 validAfter)`), its spender pinned to x402's `upto` proxy and its
+  grant the maximum to `witness.to`; and `usdc-domain-usdc`, USDC's messages on the eleven chains where it signs under
+  the domain name `USDC` (Base Sepolia among them). `usdc` and `usdc-domain-usdc` also read USDC's EIP-2612 `Permit`
+  (`approve`, a grant to `spender` that never ends). `usdc` lists chains 1, 137, 8453, 42161, 43113, 43114 and 421614;
+  `x402-exact-permit2` 20 networks; `permit2` 23. Their profile ids changed. `usdc-base-sepolia` is unchanged and kept
+  for 0.5.0 code; `usdc-domain-usdc` reads the same messages there with the same words.
+
 ## 0.5.0 — 2026-10-30
 
 - Pins, experimental (spec §15.4, D-058): the new tag `fixed`, with `value` one address, says that a profile describes

package/README.md

@@ -186,12 +186,15 @@ r.resolved.methods.transfer.tags.intent.args.template; // "Send {wad} to {dst}":
   (`PermitSingle(0).details.amount`) and listed under the resolved form's `messages` with its `encode_type` and
   `type_hash`. `amount.token` names an amount's token by an `address` field (`E_TOKEN_PATH` otherwise). Bad types, a
   message named like a function and two meanings for one type name are `E_EIP712`. Standard files: the `erc2612`
-  pack, and the contract profiles `permit2`, `dai-permit`, `usdc`, `usdc-base-sepolia` and `x402-exact-permit2`
-  shipped beside the packs (`@meantjs/profile/packs/permit2.profile.json`); `loadPacks()` returns the packs only.
+  pack, and the contract profiles `permit2`, `dai-permit`, `usdc` and `usdc-domain-usdc` (USDC's EIP-3009 messages
+  and permit, under its two domain names), `usdc-base-sepolia` (as 0.5.0 published it), `x402-exact-permit2` and
+  `x402-upto-permit2`, shipped beside the packs (`@meantjs/profile/packs/permit2.profile.json`); `loadPacks()`
+  returns the packs only.
 - **Pins** (`fixed`, spec §15.4, D-058): an `address` in the arguments of a function or a message that the profile
-  describes only with one value, as x402's Permit2 payment holds x402's proxy as its spender. A pin that does not hold
-  (another place or type, a bad checksum, an address that does not resolve, another value pinned by any profile) is
-  an error, and its profile then supplies only its effects, without grants, and its pins that hold.
+  describes only with one value, as each of x402's Permit2 payments holds its scheme's proxy as its spender. A pin
+  that does not hold (another place or type, a bad checksum, an address that does not resolve, another value pinned
+  by any profile) is an error, and its profile then supplies only its effects, without grants, and its pins that
+  hold.
 - **Refused for now:** overloaded function names and unreadable fragments (`E_ABI`); `idempotency`, `outcome`, `list`,
   `names` and `named` on a contract (`E_TAG_TARGET`); `account` and `subaccount` (`E_TAG_NOT_APPLICABLE`); `[ ]`
   template segments (`E_TEMPLATE`).

package/data/packs/permit2.profile.json

@@ -5,7 +5,7 @@
   "name": "permit2",
   "origin": "third_party",
   "language": "en",
-  "description": "Uniswap's Permit2 (spec section 15.9, experimental): its AllowanceTransfer messages (PermitSingle, PermitBatch), which set allowances, and its SignatureTransfer messages (PermitTransferFrom, PermitBatchTransferFrom), which authorize one transfer. Witness messages (PermitWitnessTransferFrom) are left out: each protocol adds its own witness type, in a profile of its own (O9; x402's is x402-exact-permit2). Bound to the deployments ERC-7730's own Permit2 example lists (chains 1 and 42161) and to Base and Base Sepolia (8453 and 84532), whose Permit2 code and domain were read on chain on 2026-10-30, so a look-alike contract named \"Permit2\" gets none of these words. Amounts are in the token the message names: a consumer supplies that token's decimals() and symbol(), and shows its address beside the symbol.",
+  "description": "Uniswap's Permit2 (spec section 15.9, experimental): its AllowanceTransfer messages (PermitSingle, PermitBatch), which set allowances, and its SignatureTransfer messages (PermitTransferFrom, PermitBatchTransferFrom), which authorize one transfer. Witness messages (PermitWitnessTransferFrom) are left out: each protocol adds its own witness type, in a profile of its own (O9; x402's are x402-exact-permit2 and x402-upto-permit2). Bound to the deployments ERC-7730's own Permit2 example lists (chains 1 and 42161) and to the other networks x402 names, whose Permit2 code and domain were read on chain (Base and Base Sepolia on 2026-10-30, the others on 2026-11-01), so a look-alike contract named \"Permit2\" gets none of these words. Amounts are in the token the message names: a consumer supplies that token's decimals() and symbol(), and shows its address beside the symbol.",
   "binds": {
     "eip712": {
       "domain": {
@@ -111,17 +111,93 @@
         "chain_id": 1,
         "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
       },
+      {
+        "chain_id": 14,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 50,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 51,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 137,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 143,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 988,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 1328,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 1329,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 2201,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 4326,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
       {
         "chain_id": 8453,
         "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
       },
+      {
+        "chain_id": 10143,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 31612,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
       {
         "chain_id": 42161,
         "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
       },
+      {
+        "chain_id": 42220,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 43113,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 43114,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 80002,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
       {
         "chain_id": 84532,
         "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 421614,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 5042002,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 11142220,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
       }
     ]
   },

package/data/packs/usdc-domain-usdc.profile.json

@@ -0,0 +1,437 @@
+{
+  "format": "candid-profile",
+  "format_version": 0,
+  "kind": "contract",
+  "name": "usdc-domain-usdc",
+  "origin": "third_party",
+  "language": "en",
+  "description": "USDC's EIP-3009 messages and its EIP-2612 permit where USDC signs under the domain name `USDC`, not `USD Coin`: Monad, Sei, Celo and XDC, and the test networks Base Sepolia, Polygon Amoy, Monad testnet, Sei testnet, Celo Sepolia, Arc testnet and XDC Apothem (spec section 15.9, experimental), with the usdc profile's words. TransferWithAuthorization and ReceiveWithAuthorization pay `to` once, by a signature that someone else submits (only the payee, for ReceiveWithAuthorization), and CancelAuthorization cancels one that is unused (EIP-3009; Circle stablecoin-evm, FiatTokenV2.sol). Permit sets an allowance (EIP-2612), which never ends once it is submitted; x402's payments through Permit2 may come with one for Permit2 (coinbase/x402, specs/extensions/eip2612_gas_sponsoring.md). x402's `exact` scheme pays by TransferWithAuthorization by default (coinbase/x402, specs/schemes/exact/scheme_exact_evm.md). Only the messages are described: USDC's ABI names transferWithAuthorization, receiveWithAuthorization, cancelAuthorization and permit twice each, which the resolver refuses (O1). A profile binds one domain, so these chains have a profile of their own; it replaces usdc-base-sepolia, which describes Base Sepolia alone and is kept as it was published. Bound to USDC's domain (`USDC`, version `2`) and to its contracts, each read on chain on 2026-11-01 (DOMAIN_SEPARATOR, decimals 6, the four type hashes), so a look-alike token gets none of these words. x402 names each of these networks.",
+  "binds": {
+    "eip712": {
+      "domain": {
+        "name": "USDC",
+        "version": "2"
+      },
+      "types": {
+        "CancelAuthorization": [
+          {
+            "name": "authorizer",
+            "type": "address"
+          },
+          {
+            "name": "nonce",
+            "type": "bytes32"
+          }
+        ],
+        "Permit": [
+          {
+            "name": "owner",
+            "type": "address"
+          },
+          {
+            "name": "spender",
+            "type": "address"
+          },
+          {
+            "name": "value",
+            "type": "uint256"
+          },
+          {
+            "name": "nonce",
+            "type": "uint256"
+          },
+          {
+            "name": "deadline",
+            "type": "uint256"
+          }
+        ],
+        "ReceiveWithAuthorization": [
+          {
+            "name": "from",
+            "type": "address"
+          },
+          {
+            "name": "to",
+            "type": "address"
+          },
+          {
+            "name": "value",
+            "type": "uint256"
+          },
+          {
+            "name": "validAfter",
+            "type": "uint256"
+          },
+          {
+            "name": "validBefore",
+            "type": "uint256"
+          },
+          {
+            "name": "nonce",
+            "type": "bytes32"
+          }
+        ],
+        "TransferWithAuthorization": [
+          {
+            "name": "from",
+            "type": "address"
+          },
+          {
+            "name": "to",
+            "type": "address"
+          },
+          {
+            "name": "value",
+            "type": "uint256"
+          },
+          {
+            "name": "validAfter",
+            "type": "uint256"
+          },
+          {
+            "name": "validBefore",
+            "type": "uint256"
+          },
+          {
+            "name": "nonce",
+            "type": "bytes32"
+          }
+        ]
+      }
+    },
+    "deployments": [
+      {
+        "chain_id": 50,
+        "address": "0xfA2958CB79b0491CC627c1557F441eF849Ca8eb1"
+      },
+      {
+        "chain_id": 51,
+        "address": "0xb5AB69F7bBada22B28e79C8FFAECe55eF1c771D4"
+      },
+      {
+        "chain_id": 143,
+        "address": "0x754704Bc059F8C67012fEd69BC8A327a5aafb603"
+      },
+      {
+        "chain_id": 1328,
+        "address": "0x4fCF1784B31630811181f670Aea7A7bEF803eaED"
+      },
+      {
+        "chain_id": 1329,
+        "address": "0xe15fC38F6D8c56aF07bbCBe3BAf5708A2Bf42392"
+      },
+      {
+        "chain_id": 10143,
+        "address": "0x534b2f3A21130d7a60830c2Df862319e593943A3"
+      },
+      {
+        "chain_id": 42220,
+        "address": "0xcebA9300f2b948710d2653dD7B07f33A8B32118C"
+      },
+      {
+        "chain_id": 80002,
+        "address": "0x41E94Eb019C0762f9Bfcf9Fb1E58725BfB0e7582"
+      },
+      {
+        "chain_id": 84532,
+        "address": "0x036CbD53842c5426634e7929541eC2318f3dCF7e"
+      },
+      {
+        "chain_id": 5042002,
+        "address": "0x3600000000000000000000000000000000000000"
+      },
+      {
+        "chain_id": 11142220,
+        "address": "0x01C5C0122039549AD1493B8220cABEdD739BC44E"
+      }
+    ]
+  },
+  "annotations": [
+    {
+      "at": "TransferWithAuthorization",
+      "tag": "intent",
+      "args": {
+        "title": "Pay USDC by signature",
+        "template": "Send {value} from {from} to {to}, once. Valid after {validAfter}. Expires: {validBefore}."
+      }
+    },
+    {
+      "at": "TransferWithAuthorization",
+      "tag": "effect",
+      "args": {
+        "kind": "transfer",
+        "irreversible": true,
+        "grant": {
+          "to": "to",
+          "amount": "value",
+          "ends": [
+            "validBefore"
+          ]
+        }
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).from",
+      "tag": "describe",
+      "args": {
+        "label": "From"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).to",
+      "tag": "describe",
+      "args": {
+        "label": "To"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).value",
+      "tag": "amount",
+      "args": {
+        "decimals": 6,
+        "symbol": "USDC"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).value",
+      "tag": "describe",
+      "args": {
+        "label": "Amount"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).validAfter",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).validAfter",
+      "tag": "describe",
+      "args": {
+        "label": "Valid after"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).validBefore",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix",
+        "threshold": "115792089237316195423570985008687907853269984665640564039457584007913129639935",
+        "message": "Never"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).validBefore",
+      "tag": "describe",
+      "args": {
+        "label": "Expires"
+      }
+    },
+    {
+      "at": "TransferWithAuthorization(0).nonce",
+      "tag": "describe",
+      "args": {
+        "label": "Nonce"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization",
+      "tag": "intent",
+      "args": {
+        "title": "Pay USDC by signature, collected by the payee",
+        "template": "Send {value} from {from} to {to}, once; only {to} can submit it. Valid after {validAfter}. Expires: {validBefore}."
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization",
+      "tag": "effect",
+      "args": {
+        "kind": "transfer",
+        "irreversible": true,
+        "grant": {
+          "to": "to",
+          "amount": "value",
+          "ends": [
+            "validBefore"
+          ]
+        }
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).from",
+      "tag": "describe",
+      "args": {
+        "label": "From"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).to",
+      "tag": "describe",
+      "args": {
+        "label": "To"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).value",
+      "tag": "amount",
+      "args": {
+        "decimals": 6,
+        "symbol": "USDC"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).value",
+      "tag": "describe",
+      "args": {
+        "label": "Amount"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).validAfter",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).validAfter",
+      "tag": "describe",
+      "args": {
+        "label": "Valid after"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).validBefore",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix",
+        "threshold": "115792089237316195423570985008687907853269984665640564039457584007913129639935",
+        "message": "Never"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).validBefore",
+      "tag": "describe",
+      "args": {
+        "label": "Expires"
+      }
+    },
+    {
+      "at": "ReceiveWithAuthorization(0).nonce",
+      "tag": "describe",
+      "args": {
+        "label": "Nonce"
+      }
+    },
+    {
+      "at": "CancelAuthorization",
+      "tag": "intent",
+      "args": {
+        "title": "Cancel a USDC payment signature",
+        "template": "Cancel the unused USDC payment signature of {authorizer} with nonce {nonce}."
+      }
+    },
+    {
+      "at": "CancelAuthorization",
+      "tag": "effect",
+      "args": {
+        "kind": "write",
+        "irreversible": true
+      }
+    },
+    {
+      "at": "CancelAuthorization(0).authorizer",
+      "tag": "describe",
+      "args": {
+        "label": "Signer of the payment"
+      }
+    },
+    {
+      "at": "CancelAuthorization(0).nonce",
+      "tag": "describe",
+      "args": {
+        "label": "Nonce"
+      }
+    },
+    {
+      "at": "Permit",
+      "tag": "intent",
+      "args": {
+        "title": "Permit USDC spending",
+        "template": "Allow {spender} to spend up to {value} from {owner}. Signature expires: {deadline}."
+      }
+    },
+    {
+      "at": "Permit",
+      "tag": "effect",
+      "args": {
+        "kind": "approve",
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "value"
+        }
+      }
+    },
+    {
+      "at": "Permit(0).owner",
+      "tag": "describe",
+      "args": {
+        "label": "Owner"
+      }
+    },
+    {
+      "at": "Permit(0).spender",
+      "tag": "describe",
+      "args": {
+        "label": "Spender"
+      }
+    },
+    {
+      "at": "Permit(0).value",
+      "tag": "amount",
+      "args": {
+        "decimals": 6,
+        "symbol": "USDC",
+        "threshold": "115792089237316195423570985008687907853269984665640564039457584007913129639935"
+      }
+    },
+    {
+      "at": "Permit(0).value",
+      "tag": "describe",
+      "args": {
+        "label": "Amount"
+      }
+    },
+    {
+      "at": "Permit(0).nonce",
+      "tag": "describe",
+      "args": {
+        "label": "Nonce"
+      }
+    },
+    {
+      "at": "Permit(0).deadline",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix",
+        "threshold": "115792089237316195423570985008687907853269984665640564039457584007913129639935",
+        "message": "Never"
+      }
+    },
+    {
+      "at": "Permit(0).deadline",
+      "tag": "describe",
+      "args": {
+        "label": "Signature expires"
+      }
+    }
+  ]
+}

package/data/packs/usdc.profile.json

@@ -5,7 +5,7 @@
   "name": "usdc",
   "origin": "third_party",
   "language": "en",
-  "description": "USDC's EIP-3009 messages on Ethereum, Base and Arbitrum (spec section 15.9, experimental). TransferWithAuthorization and ReceiveWithAuthorization pay `to` once, by a signature that someone else submits (only the payee, for ReceiveWithAuthorization), and CancelAuthorization cancels one that is unused (EIP-3009; Circle stablecoin-evm, FiatTokenV2.sol). x402's `exact` scheme pays by TransferWithAuthorization by default (coinbase/x402, specs/schemes/exact/scheme_exact_evm.md). Only the messages are described: USDC's ABI names transferWithAuthorization, receiveWithAuthorization, cancelAuthorization and permit twice each, which the resolver refuses (O1). Bound to USDC's domain (`USD Coin`, version `2`) and to its contracts, each read on chain on 2026-10-30 (DOMAIN_SEPARATOR, decimals 6, the three type hashes), so a look-alike token gets none of these words.",
+  "description": "USDC's EIP-3009 messages and its EIP-2612 permit where USDC signs as `USD Coin`: Ethereum, Polygon, Base, Arbitrum and Avalanche, and the test networks Avalanche Fuji and Arbitrum Sepolia (spec section 15.9, experimental). TransferWithAuthorization and ReceiveWithAuthorization pay `to` once, by a signature that someone else submits (only the payee, for ReceiveWithAuthorization), and CancelAuthorization cancels one that is unused (EIP-3009; Circle stablecoin-evm, FiatTokenV2.sol). Permit sets an allowance (EIP-2612), which never ends once it is submitted; x402's payments through Permit2 may come with one for Permit2 (coinbase/x402, specs/extensions/eip2612_gas_sponsoring.md). x402's `exact` scheme pays by TransferWithAuthorization by default (coinbase/x402, specs/schemes/exact/scheme_exact_evm.md). Only the messages are described: USDC's ABI names transferWithAuthorization, receiveWithAuthorization, cancelAuthorization and permit twice each, which the resolver refuses (O1). Bound to USDC's domain (`USD Coin`, version `2`) and to its contracts, each read on chain (DOMAIN_SEPARATOR, decimals 6, the four type hashes; chains 1, 8453 and 42161 on 2026-10-30, the others on 2026-11-01), so a look-alike token gets none of these words. Where USDC signs as `USDC`, the usdc-domain-usdc profile has the same words.",
   "binds": {
     "eip712": {
       "domain": {
@@ -23,6 +23,28 @@
             "type": "bytes32"
           }
         ],
+        "Permit": [
+          {
+            "name": "owner",
+            "type": "address"
+          },
+          {
+            "name": "spender",
+            "type": "address"
+          },
+          {
+            "name": "value",
+            "type": "uint256"
+          },
+          {
+            "name": "nonce",
+            "type": "uint256"
+          },
+          {
+            "name": "deadline",
+            "type": "uint256"
+          }
+        ],
         "ReceiveWithAuthorization": [
           {
             "name": "from",
@@ -82,6 +104,10 @@
         "chain_id": 1,
         "address": "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"
       },
+      {
+        "chain_id": 137,
+        "address": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359"
+      },
       {
         "chain_id": 8453,
         "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
@@ -89,6 +115,18 @@
       {
         "chain_id": 42161,
         "address": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831"
+      },
+      {
+        "chain_id": 43113,
+        "address": "0x5425890298aed601595a70AB815c96711a31Bc65"
+      },
+      {
+        "chain_id": 43114,
+        "address": "0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"
+      },
+      {
+        "chain_id": 421614,
+        "address": "0x75faf114eafb1BDbe2F0316DF893fd58CE46AA4d"
       }
     ]
   },
@@ -304,6 +342,80 @@
       "args": {
         "label": "Nonce"
       }
+    },
+    {
+      "at": "Permit",
+      "tag": "intent",
+      "args": {
+        "title": "Permit USDC spending",
+        "template": "Allow {spender} to spend up to {value} from {owner}. Signature expires: {deadline}."
+      }
+    },
+    {
+      "at": "Permit",
+      "tag": "effect",
+      "args": {
+        "kind": "approve",
+        "irreversible": false,
+        "grant": {
+          "spender": "spender",
+          "amount": "value"
+        }
+      }
+    },
+    {
+      "at": "Permit(0).owner",
+      "tag": "describe",
+      "args": {
+        "label": "Owner"
+      }
+    },
+    {
+      "at": "Permit(0).spender",
+      "tag": "describe",
+      "args": {
+        "label": "Spender"
+      }
+    },
+    {
+      "at": "Permit(0).value",
+      "tag": "amount",
+      "args": {
+        "decimals": 6,
+        "symbol": "USDC",
+        "threshold": "115792089237316195423570985008687907853269984665640564039457584007913129639935"
+      }
+    },
+    {
+      "at": "Permit(0).value",
+      "tag": "describe",
+      "args": {
+        "label": "Amount"
+      }
+    },
+    {
+      "at": "Permit(0).nonce",
+      "tag": "describe",
+      "args": {
+        "label": "Nonce"
+      }
+    },
+    {
+      "at": "Permit(0).deadline",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix",
+        "threshold": "115792089237316195423570985008687907853269984665640564039457584007913129639935",
+        "message": "Never"
+      }
+    },
+    {
+      "at": "Permit(0).deadline",
+      "tag": "describe",
+      "args": {
+        "label": "Signature expires"
+      }
     }
   ]
 }

package/data/packs/x402-exact-permit2.profile.json

@@ -5,7 +5,7 @@
   "name": "x402-exact-permit2",
   "origin": "third_party",
   "language": "en",
-  "description": "x402's `exact` payment through Permit2 (spec section 15.9, experimental): Permit2's PermitWitnessTransferFrom with x402's witness, Witness(address to,uint256 validAfter), which x402 uses for tokens without EIP-3009 (coinbase/x402, specs/schemes/exact/scheme_exact_evm.md). Permit2 lets the spender choose where the tokens go and never reads the witness, so the witness's `to` is the payee only when the spender is x402's proxy, 0x402085c248EeA27D92E8b30b2C58ed07f9E20001, whose `settle` sends exactly `permitted.amount` to `witness.to`, not before `validAfter` (contracts/evm/src/x402BasePermit2Proxy.sol). The spender is therefore fixed to the proxy, and a request with any other spender gets no text (E_FIXED). Bound to Permit2's domain and deployments; the proxy has the same code on each of these chains (read on chain on 2026-10-30). Amounts are in the token the message names: a consumer supplies that token's decimals() and symbol(), and shows its address beside the symbol.",
+  "description": "x402's `exact` payment through Permit2 (spec section 15.9, experimental): Permit2's PermitWitnessTransferFrom with x402's witness, Witness(address to,uint256 validAfter), which x402 uses for tokens without EIP-3009 (coinbase/x402, specs/schemes/exact/scheme_exact_evm.md). Permit2 lets the spender choose where the tokens go and never reads the witness, so the witness's `to` is the payee only when the spender is x402's proxy, 0x402085c248EeA27D92E8b30b2C58ed07f9E20001, whose `settle` sends exactly `permitted.amount` to `witness.to`, not before `validAfter` (contracts/evm/src/x402BasePermit2Proxy.sol). The spender is therefore fixed to the proxy, and a request with any other spender gets no text (E_FIXED). Bound to Permit2's domain and to its deployments on the networks x402 names where the proxy has the same code (read on chain: chains 1, 8453, 42161 and 84532 on 2026-10-30, the others on 2026-11-01). x402's `upto` payment signs another witness, described by the x402-upto-permit2 profile. Amounts are in the token the message names: a consumer supplies that token's decimals() and symbol(), and shows its address beside the symbol.",
   "binds": {
     "eip712": {
       "domain": {
@@ -61,17 +61,81 @@
         "chain_id": 1,
         "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
       },
+      {
+        "chain_id": 50,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 51,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 137,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 143,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 1328,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 1329,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 4326,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
       {
         "chain_id": 8453,
         "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
       },
+      {
+        "chain_id": 10143,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 31612,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
       {
         "chain_id": 42161,
         "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
       },
+      {
+        "chain_id": 42220,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 43113,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 43114,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 80002,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
       {
         "chain_id": 84532,
         "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 421614,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 5042002,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 11142220,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
       }
     ]
   },

package/data/packs/x402-upto-permit2.profile.json

@@ -0,0 +1,254 @@
+{
+  "format": "candid-profile",
+  "format_version": 0,
+  "kind": "contract",
+  "name": "x402-upto-permit2",
+  "origin": "third_party",
+  "language": "en",
+  "description": "x402's `upto` payment through Permit2 (spec section 15.9, experimental): Permit2's PermitWitnessTransferFrom with x402's usage-based witness, Witness(address to,address facilitator,uint256 validAfter) (coinbase/x402, specs/schemes/upto/scheme_upto_evm.md). The payer signs a maximum, and the facilitator the witness names settles it once, for any amount from one unit up to that maximum, to `witness.to`, not before `validAfter` (contracts/evm/src/x402UptoPermit2Proxy.sol and x402BasePermit2Proxy.sol). Permit2 lets the spender choose where the tokens go and never reads the witness, so the witness's `to` is the payee only when the spender is x402's `upto` proxy, 0x4020A4f3b7b90ccA423B9fabCc0CE57C6C240002. The spender is therefore fixed to the proxy, and a request with any other spender gets no text (E_FIXED). The grant is the maximum, since the payer bears the risk of all of it being charged. Bound to Permit2's domain and to its deployments on the networks x402 names where the proxy has the same code (read on chain on 2026-11-01). Amounts are in the token the message names: a consumer supplies that token's decimals() and symbol(), and shows its address beside the symbol.",
+  "binds": {
+    "eip712": {
+      "domain": {
+        "name": "Permit2"
+      },
+      "types": {
+        "PermitWitnessTransferFrom": [
+          {
+            "name": "permitted",
+            "type": "TokenPermissions"
+          },
+          {
+            "name": "spender",
+            "type": "address"
+          },
+          {
+            "name": "nonce",
+            "type": "uint256"
+          },
+          {
+            "name": "deadline",
+            "type": "uint256"
+          },
+          {
+            "name": "witness",
+            "type": "Witness"
+          }
+        ],
+        "TokenPermissions": [
+          {
+            "name": "token",
+            "type": "address"
+          },
+          {
+            "name": "amount",
+            "type": "uint256"
+          }
+        ],
+        "Witness": [
+          {
+            "name": "to",
+            "type": "address"
+          },
+          {
+            "name": "facilitator",
+            "type": "address"
+          },
+          {
+            "name": "validAfter",
+            "type": "uint256"
+          }
+        ]
+      }
+    },
+    "deployments": [
+      {
+        "chain_id": 1,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 50,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 51,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 137,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 143,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 1328,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 1329,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 4326,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 8453,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 10143,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 31612,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 42161,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 43113,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 43114,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 80002,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 84532,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 421614,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      },
+      {
+        "chain_id": 5042002,
+        "address": "0x000000000022D473030F116dDEE9F6B43aC78BA3"
+      }
+    ]
+  },
+  "annotations": [
+    {
+      "at": "PermitWitnessTransferFrom",
+      "tag": "intent",
+      "args": {
+        "title": "Pay by x402 up to a maximum, through Permit2",
+        "template": "Send at most {permitted.amount} to {witness.to}, once, through x402's usage-based payment contract. Only {witness.facilitator} can settle it, and it chooses the amount. Usable from {witness.validAfter}. Signature expires: {deadline}."
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom",
+      "tag": "effect",
+      "args": {
+        "kind": "transfer",
+        "irreversible": true,
+        "grant": {
+          "to": "witness.to",
+          "amount": "permitted.amount",
+          "ends": [
+            "deadline"
+          ]
+        }
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom(0).permitted.token",
+      "tag": "describe",
+      "args": {
+        "label": "Token"
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom(0).permitted.amount",
+      "tag": "amount",
+      "args": {
+        "token": "permitted.token"
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom(0).permitted.amount",
+      "tag": "describe",
+      "args": {
+        "label": "Maximum amount"
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom(0).spender",
+      "tag": "fixed",
+      "args": {
+        "value": "0x4020A4f3b7b90ccA423B9fabCc0CE57C6C240002"
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom(0).spender",
+      "tag": "describe",
+      "args": {
+        "label": "x402's usage-based payment contract"
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom(0).nonce",
+      "tag": "describe",
+      "args": {
+        "label": "Nonce"
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom(0).deadline",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix",
+        "threshold": "115792089237316195423570985008687907853269984665640564039457584007913129639935",
+        "message": "Never"
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom(0).deadline",
+      "tag": "describe",
+      "args": {
+        "label": "Signature expires"
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom(0).witness.to",
+      "tag": "describe",
+      "args": {
+        "label": "To"
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom(0).witness.facilitator",
+      "tag": "describe",
+      "args": {
+        "label": "Settled by"
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom(0).witness.validAfter",
+      "tag": "timestamp",
+      "args": {
+        "unit": "s",
+        "epoch": "unix",
+        "labels": {
+          "0": "now"
+        }
+      }
+    },
+    {
+      "at": "PermitWitnessTransferFrom(0).witness.validAfter",
+      "tag": "describe",
+      "args": {
+        "label": "Usable from"
+      }
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meantjs/profile",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Candid Profile resolver: validates profiles, matches packs by Candid subtyping, merges layers (spec section 8) and emits the resolved form (spec section 10).",
   "license": "Apache-2.0",
   "repository": {

package/src/browser.mjs

@@ -35,8 +35,8 @@ export const PROFILE_SCHEMA = schema;
 
 /**
  * The standard packs (copies of packs/*.profile.json whose kind is "pack"), sorted by file name, in the shape
- * `loadPacks` returns. The standard contract profiles there (Permit2, DAI's permit, USDC, x402's Permit2 payment) are
- * under `./packs/*` too.
+ * `loadPacks` returns. The standard contract profiles there (Permit2, DAI's permit, USDC under its two domain names,
+ * x402's two Permit2 payments) are under `./packs/*` too.
  */
 export const STANDARD_PACKS = Object.freeze([
   { file: "erc20.profile.json", doc: erc20 },