@naculus/connect-appkit-core 0.13.0 → 0.15.0

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, SimulationResult, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem, SessionKeyManagerConfig, SessionKeyManager, Hex, UserOperationReceipt, Address, SmartAccountConfig, AtomicityRequirement, ExecutionPlan, SessionKeyInfo, SessionKeyTransaction, delegationTypedData, SessionKeyScope, ScopeCheckResult, SpendRefusal, Authorization, ListedAuthorization, SpendRequest, SettlementVerification, SolanaSessionKeyInfo, SolanaSessionKeyScope, SolanaSessionKeyManager, SolanaPaymentRpc } from '@naculus/connect-core';
+import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, SimulationResult, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem, SessionKeyManagerConfig, SessionKeyManager, SessionKeyRail, SessionKeyScope, Hex, UserOperationReceipt, Address, SmartAccountConfig, AtomicityRequirement, ExecutionPlan, SessionKeyInfo, SessionKeyTransaction, TransactionRequest, delegationTypedData, ScopeCheckResult, SpendRefusal, Authorization, ListedAuthorization, SpendRequest, SettlementVerification, SolanaSessionKeyInfo, SolanaSessionKeyScope, SolanaSessionKeyManager, SolanaPaymentRpc } from '@naculus/connect-core';
 import { X402TypedDataSigner } from '@naculus/payments-x402';
 export { X402TypedDataSigner } from '@naculus/payments-x402';
 
@@ -632,6 +632,21 @@ declare function getSharedSessionKeyManager(config?: SessionKeyManagerConfig): S
 /** Drop the shared instance. For tests and for a full sign-out that must forget keys. */
 declare function resetSharedSessionKeyManager(): void;
 
+type Eip3009SessionKeyRail = Extract<SessionKeyRail, "x402-exact" | "mpp-charge">;
+type SessionKeyRailGrantCheck = {
+    status: "ok";
+    rail: Eip3009SessionKeyRail;
+} | {
+    status: "needs-regrant";
+    missingRail: Eip3009SessionKeyRail;
+};
+/**
+ * Checks whether a stored session-key scope can sign EIP-3009 for `rail`.
+ * Legacy, empty, unknown, and malformed rail lists fail closed and require a
+ * new wallet-approved grant.
+ */
+declare function checkSessionKeyRailGrant(scope: SessionKeyScope | null | undefined, rail: Eip3009SessionKeyRail): SessionKeyRailGrantCheck;
+
 /**
  * Validation of an ERC-4337 `eth_getUserOperationReceipt` result, shared by
  * the React hook and the Vue composable. A bundler is an untrusted party:
@@ -710,8 +725,17 @@ interface PolicyExecutionCheck {
     executorAddress?: `0x${string}`;
     reason: string;
 }
+/**
+ * What an execution adapter prepared for one policy execution.
+ *
+ * Breaking change: `request` is new and required. Adapters must return the
+ * exact transaction they will broadcast as a `TransactionRequest`; `digest`
+ * must equal `transactionSigningHash(request)`. Signing refuses any mismatch.
+ */
 interface PreparedPolicyExecution {
     digest: Hex;
+    /** The exact transaction to sign, as connect-core's transaction request. */
+    request: TransactionRequest;
     transaction: SessionKeyTransaction;
     payload: unknown;
 }
@@ -798,7 +822,7 @@ interface DelegationPolicyFlow {
     createPolicy: (scope: Partial<SessionKeyScope>) => Promise<SessionKeyInfo>;
     revokePolicy: (policyId: string) => Promise<void>;
     previewPolicyExecution: (policyId: string, tx: SessionKeyTransaction, callCount?: number, atomicity?: AtomicityRequirement) => Promise<DelegationPolicyPreview>;
-    signPolicyDigest: (policyId: string, digest: `0x${string}`, tx: SessionKeyTransaction) => Promise<`0x${string}`>;
+    signPolicyDigest: (policyId: string, prepared: PreparedPolicyExecution) => Promise<`0x${string}`>;
     executePolicy: (policyId: string, tx: SessionKeyTransaction) => Promise<PolicyExecutionSubmission>;
 }
 declare function createDelegationPolicyFlow(deps: DelegationPolicyDeps): DelegationPolicyFlow;
@@ -810,7 +834,7 @@ declare function createDelegationPolicyFlow(deps: DelegationPolicyDeps): Delegat
  * The session key sends `DelegationManager.redeemDelegations` from its own
  * address and pays the gas; the chain enforces the delegation's caveats. The
  * adapter builds that transaction and broadcasts it; the delegation-policy
- * flow signs it with connect-core's `signDelegationRedemption`, which
+ * flow signs it with connect-core's `signTransactionDelegationRedemption`, which
  * re-encodes the redemption from the stored delegation and refuses anything
  * else.
  *
@@ -1215,4 +1239,5 @@ declare function siwxResultToSession<M extends SiwxMessageLike>(result: SiwxResu
     refreshedAt: null;
 };
 
-export { type AddressValidationLevel, type AssetId, type AtomicSupport, type AuthorizationAmountView, type AuthorizationAssetMetadata, type AuthorizationDescription, type AuthorizationExpiryView, type AuthorizationGrantView, type AuthorizationRecipientView, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, DEFAULT_VERIFY_RETRY, type DecimalsCache, type DelegationFrameworkAdapterOptions, type DelegationPolicyDeps, type DelegationPolicyFlow, type DelegationPolicyPreview, type DelegationTypedData, type DescribeAuthorizationOptions, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, InvalidUserOperationReceiptError, type MppSessionChannel, type MppSessionFetch, type MppSessionFetchResult, type MppSessionForceCloseResult, type MppSessionMeter, type MppSessionReceipt, type MppSessionRequest, type MppSessionRequestInit, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type NotificationSettingsUpdate, type PaymentFetch, type PaymentFetchResult, type PaymentRecord, type PaymentVerification, type PaymentVerificationStatus, type PolicyExecutionAdapter, type PolicyExecutionCheck, type PolicyExecutionPreview, type PolicyExecutionRoute, type PolicyExecutionSubmission, type PolicySignatureVerifier, type PreparedPolicyExecution, type RedemptionCodec, type RedemptionRpc, type RedemptionTransaction, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SimulationCallClient, type SimulationTransaction, type SiwxLocation, type SiwxMessageLike, type SiwxResultLike, type SmartAccountOptionsLike, type SmartAccountType, type SolanaIdentity, type SolanaOwnerSigner, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSessionKeyFlow, type SolanaSessionKeyFlowDeps, type SolanaSigner, type SolanaWalletFeatures, type SpendExplanation, type TokenIdentity, type TransactionSimulationContext, type VerifyRetryOptions, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, type X402Eip1193Provider, type X402ProviderSources, type X402SignerResolution, type X402SignerUnavailableReason, type X402WalletResolution, __resetResolverForTests, addInAppNotification, applySettlementVerification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationFrameworkAdapter, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, createSolanaSessionKeyFlow, createX402WalletSigner, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeAuthorization, describeChain, describePayment, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, errorMessage, explainSpend, fetchUserOperationReceipt, findX402Provider, formatAuthorizationAmount, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readCurrentMppSessionChannel, readDecimals, readMppRecoveryChannelId, readMppSessionChannel, readMppSessionReceipt, readSolanaRoles, replayNotificationSettings, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, resolveX402Wallet, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };
+export { DEFAULT_NOTIFICATION_SETTINGS, DEFAULT_VERIFY_RETRY, InvalidUserOperationReceiptError, NOTIFICATION_SETTINGS_KEY, __resetResolverForTests, addInAppNotification, applySettlementVerification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, checkSessionKeyRailGrant, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationFrameworkAdapter, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, createSolanaSessionKeyFlow, createX402WalletSigner, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeAuthorization, describeChain, describePayment, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, errorMessage, explainSpend, fetchUserOperationReceipt, findX402Provider, formatAuthorizationAmount, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readCurrentMppSessionChannel, readDecimals, readMppRecoveryChannelId, readMppSessionChannel, readMppSessionReceipt, readSolanaRoles, replayNotificationSettings, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, resolveX402Wallet, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };
+export type { AddressValidationLevel, AssetId, AtomicSupport, AuthorizationAmountView, AuthorizationAssetMetadata, AuthorizationDescription, AuthorizationExpiryView, AuthorizationGrantView, AuthorizationRecipientView, ChainCapabilities, ChainInfo, CompareCosts, CompareCostsInput, ConnectionStatus, CostComparison, CostComparisonOperation, CostComparisonOptions, DecimalsCache, DelegationFrameworkAdapterOptions, DelegationPolicyDeps, DelegationPolicyFlow, DelegationPolicyPreview, DelegationTypedData, DescribeAuthorizationOptions, DestinationIssue, DestinationValidation, Eip3009SessionKeyRail, ExecutableQuote, ExecuteRoute, ExecuteRouteError, ExecuteRouteOptions, ExecuteRouteResult, GetRouteQuotes, MppSessionChannel, MppSessionFetch, MppSessionFetchResult, MppSessionForceCloseResult, MppSessionMeter, MppSessionReceipt, MppSessionRequest, MppSessionRequestInit, NotificationSettingsStorage, NotificationSettingsUpdate, PaymentFetch, PaymentFetchResult, PaymentRecord, PaymentVerification, PaymentVerificationStatus, PolicyExecutionAdapter, PolicyExecutionCheck, PolicyExecutionPreview, PolicyExecutionRoute, PolicyExecutionSubmission, PolicySignatureVerifier, PreparedPolicyExecution, RedemptionCodec, RedemptionRpc, RedemptionTransaction, RetryOptions, RouteQuote, RouteQuoteInput, RouteQuoteOptions, SessionKeyRailGrantCheck, SimulationCallClient, SimulationTransaction, SiwxLocation, SiwxMessageLike, SiwxResultLike, SmartAccountOptionsLike, SmartAccountType, SolanaIdentity, SolanaOwnerSigner, SolanaPayer, SolanaRoles, SolanaRolesAbsence, SolanaRolesSource, SolanaRolesState, SolanaSessionKeyFlow, SolanaSessionKeyFlowDeps, SolanaSigner, SolanaWalletFeatures, SpendExplanation, TokenIdentity, TransactionSimulationContext, VerifyRetryOptions, ViemChainShape, WalletChain, Web3Action, Web3State, X402Eip1193Provider, X402ProviderSources, X402SignerResolution, X402SignerUnavailableReason, X402WalletResolution };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, SimulationResult, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem, SessionKeyManagerConfig, SessionKeyManager, Hex, UserOperationReceipt, Address, SmartAccountConfig, AtomicityRequirement, ExecutionPlan, SessionKeyInfo, SessionKeyTransaction, delegationTypedData, SessionKeyScope, ScopeCheckResult, SpendRefusal, Authorization, ListedAuthorization, SpendRequest, SettlementVerification, SolanaSessionKeyInfo, SolanaSessionKeyScope, SolanaSessionKeyManager, SolanaPaymentRpc } from '@naculus/connect-core';
+import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, SimulationResult, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem, SessionKeyManagerConfig, SessionKeyManager, SessionKeyRail, SessionKeyScope, Hex, UserOperationReceipt, Address, SmartAccountConfig, AtomicityRequirement, ExecutionPlan, SessionKeyInfo, SessionKeyTransaction, TransactionRequest, delegationTypedData, ScopeCheckResult, SpendRefusal, Authorization, ListedAuthorization, SpendRequest, SettlementVerification, SolanaSessionKeyInfo, SolanaSessionKeyScope, SolanaSessionKeyManager, SolanaPaymentRpc } from '@naculus/connect-core';
 import { X402TypedDataSigner } from '@naculus/payments-x402';
 export { X402TypedDataSigner } from '@naculus/payments-x402';
 
@@ -632,6 +632,21 @@ declare function getSharedSessionKeyManager(config?: SessionKeyManagerConfig): S
 /** Drop the shared instance. For tests and for a full sign-out that must forget keys. */
 declare function resetSharedSessionKeyManager(): void;
 
+type Eip3009SessionKeyRail = Extract<SessionKeyRail, "x402-exact" | "mpp-charge">;
+type SessionKeyRailGrantCheck = {
+    status: "ok";
+    rail: Eip3009SessionKeyRail;
+} | {
+    status: "needs-regrant";
+    missingRail: Eip3009SessionKeyRail;
+};
+/**
+ * Checks whether a stored session-key scope can sign EIP-3009 for `rail`.
+ * Legacy, empty, unknown, and malformed rail lists fail closed and require a
+ * new wallet-approved grant.
+ */
+declare function checkSessionKeyRailGrant(scope: SessionKeyScope | null | undefined, rail: Eip3009SessionKeyRail): SessionKeyRailGrantCheck;
+
 /**
  * Validation of an ERC-4337 `eth_getUserOperationReceipt` result, shared by
  * the React hook and the Vue composable. A bundler is an untrusted party:
@@ -710,8 +725,17 @@ interface PolicyExecutionCheck {
     executorAddress?: `0x${string}`;
     reason: string;
 }
+/**
+ * What an execution adapter prepared for one policy execution.
+ *
+ * Breaking change: `request` is new and required. Adapters must return the
+ * exact transaction they will broadcast as a `TransactionRequest`; `digest`
+ * must equal `transactionSigningHash(request)`. Signing refuses any mismatch.
+ */
 interface PreparedPolicyExecution {
     digest: Hex;
+    /** The exact transaction to sign, as connect-core's transaction request. */
+    request: TransactionRequest;
     transaction: SessionKeyTransaction;
     payload: unknown;
 }
@@ -798,7 +822,7 @@ interface DelegationPolicyFlow {
     createPolicy: (scope: Partial<SessionKeyScope>) => Promise<SessionKeyInfo>;
     revokePolicy: (policyId: string) => Promise<void>;
     previewPolicyExecution: (policyId: string, tx: SessionKeyTransaction, callCount?: number, atomicity?: AtomicityRequirement) => Promise<DelegationPolicyPreview>;
-    signPolicyDigest: (policyId: string, digest: `0x${string}`, tx: SessionKeyTransaction) => Promise<`0x${string}`>;
+    signPolicyDigest: (policyId: string, prepared: PreparedPolicyExecution) => Promise<`0x${string}`>;
     executePolicy: (policyId: string, tx: SessionKeyTransaction) => Promise<PolicyExecutionSubmission>;
 }
 declare function createDelegationPolicyFlow(deps: DelegationPolicyDeps): DelegationPolicyFlow;
@@ -810,7 +834,7 @@ declare function createDelegationPolicyFlow(deps: DelegationPolicyDeps): Delegat
  * The session key sends `DelegationManager.redeemDelegations` from its own
  * address and pays the gas; the chain enforces the delegation's caveats. The
  * adapter builds that transaction and broadcasts it; the delegation-policy
- * flow signs it with connect-core's `signDelegationRedemption`, which
+ * flow signs it with connect-core's `signTransactionDelegationRedemption`, which
  * re-encodes the redemption from the stored delegation and refuses anything
  * else.
  *
@@ -1215,4 +1239,5 @@ declare function siwxResultToSession<M extends SiwxMessageLike>(result: SiwxResu
     refreshedAt: null;
 };
 
-export { type AddressValidationLevel, type AssetId, type AtomicSupport, type AuthorizationAmountView, type AuthorizationAssetMetadata, type AuthorizationDescription, type AuthorizationExpiryView, type AuthorizationGrantView, type AuthorizationRecipientView, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, DEFAULT_VERIFY_RETRY, type DecimalsCache, type DelegationFrameworkAdapterOptions, type DelegationPolicyDeps, type DelegationPolicyFlow, type DelegationPolicyPreview, type DelegationTypedData, type DescribeAuthorizationOptions, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, InvalidUserOperationReceiptError, type MppSessionChannel, type MppSessionFetch, type MppSessionFetchResult, type MppSessionForceCloseResult, type MppSessionMeter, type MppSessionReceipt, type MppSessionRequest, type MppSessionRequestInit, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type NotificationSettingsUpdate, type PaymentFetch, type PaymentFetchResult, type PaymentRecord, type PaymentVerification, type PaymentVerificationStatus, type PolicyExecutionAdapter, type PolicyExecutionCheck, type PolicyExecutionPreview, type PolicyExecutionRoute, type PolicyExecutionSubmission, type PolicySignatureVerifier, type PreparedPolicyExecution, type RedemptionCodec, type RedemptionRpc, type RedemptionTransaction, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SimulationCallClient, type SimulationTransaction, type SiwxLocation, type SiwxMessageLike, type SiwxResultLike, type SmartAccountOptionsLike, type SmartAccountType, type SolanaIdentity, type SolanaOwnerSigner, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSessionKeyFlow, type SolanaSessionKeyFlowDeps, type SolanaSigner, type SolanaWalletFeatures, type SpendExplanation, type TokenIdentity, type TransactionSimulationContext, type VerifyRetryOptions, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, type X402Eip1193Provider, type X402ProviderSources, type X402SignerResolution, type X402SignerUnavailableReason, type X402WalletResolution, __resetResolverForTests, addInAppNotification, applySettlementVerification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationFrameworkAdapter, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, createSolanaSessionKeyFlow, createX402WalletSigner, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeAuthorization, describeChain, describePayment, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, errorMessage, explainSpend, fetchUserOperationReceipt, findX402Provider, formatAuthorizationAmount, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readCurrentMppSessionChannel, readDecimals, readMppRecoveryChannelId, readMppSessionChannel, readMppSessionReceipt, readSolanaRoles, replayNotificationSettings, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, resolveX402Wallet, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };
+export { DEFAULT_NOTIFICATION_SETTINGS, DEFAULT_VERIFY_RETRY, InvalidUserOperationReceiptError, NOTIFICATION_SETTINGS_KEY, __resetResolverForTests, addInAppNotification, applySettlementVerification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, checkSessionKeyRailGrant, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationFrameworkAdapter, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, createSolanaSessionKeyFlow, createX402WalletSigner, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeAuthorization, describeChain, describePayment, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, errorMessage, explainSpend, fetchUserOperationReceipt, findX402Provider, formatAuthorizationAmount, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readCurrentMppSessionChannel, readDecimals, readMppRecoveryChannelId, readMppSessionChannel, readMppSessionReceipt, readSolanaRoles, replayNotificationSettings, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, resolveX402Wallet, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };
+export type { AddressValidationLevel, AssetId, AtomicSupport, AuthorizationAmountView, AuthorizationAssetMetadata, AuthorizationDescription, AuthorizationExpiryView, AuthorizationGrantView, AuthorizationRecipientView, ChainCapabilities, ChainInfo, CompareCosts, CompareCostsInput, ConnectionStatus, CostComparison, CostComparisonOperation, CostComparisonOptions, DecimalsCache, DelegationFrameworkAdapterOptions, DelegationPolicyDeps, DelegationPolicyFlow, DelegationPolicyPreview, DelegationTypedData, DescribeAuthorizationOptions, DestinationIssue, DestinationValidation, Eip3009SessionKeyRail, ExecutableQuote, ExecuteRoute, ExecuteRouteError, ExecuteRouteOptions, ExecuteRouteResult, GetRouteQuotes, MppSessionChannel, MppSessionFetch, MppSessionFetchResult, MppSessionForceCloseResult, MppSessionMeter, MppSessionReceipt, MppSessionRequest, MppSessionRequestInit, NotificationSettingsStorage, NotificationSettingsUpdate, PaymentFetch, PaymentFetchResult, PaymentRecord, PaymentVerification, PaymentVerificationStatus, PolicyExecutionAdapter, PolicyExecutionCheck, PolicyExecutionPreview, PolicyExecutionRoute, PolicyExecutionSubmission, PolicySignatureVerifier, PreparedPolicyExecution, RedemptionCodec, RedemptionRpc, RedemptionTransaction, RetryOptions, RouteQuote, RouteQuoteInput, RouteQuoteOptions, SessionKeyRailGrantCheck, SimulationCallClient, SimulationTransaction, SiwxLocation, SiwxMessageLike, SiwxResultLike, SmartAccountOptionsLike, SmartAccountType, SolanaIdentity, SolanaOwnerSigner, SolanaPayer, SolanaRoles, SolanaRolesAbsence, SolanaRolesSource, SolanaRolesState, SolanaSessionKeyFlow, SolanaSessionKeyFlowDeps, SolanaSigner, SolanaWalletFeatures, SpendExplanation, TokenIdentity, TransactionSimulationContext, VerifyRetryOptions, ViemChainShape, WalletChain, Web3Action, Web3State, X402Eip1193Provider, X402ProviderSources, X402SignerResolution, X402SignerUnavailableReason, X402WalletResolution };

package/dist/index.js

@@ -670,6 +670,22 @@ function resetSharedSessionKeyManager() {
   sharedFingerprint = null;
 }
 
+// src/session-key-rail.ts
+var knownRails = /* @__PURE__ */ new Set([
+  "transfer",
+  "x402-exact",
+  "mpp-charge"
+]);
+function checkSessionKeyRailGrant(scope, rail) {
+  const rails = scope?.rails;
+  if (!Array.isArray(rails) || rails.length === 0 || new Set(rails).size !== rails.length || !Array.from(rails).every(
+    (candidate) => typeof candidate === "string" && knownRails.has(candidate)
+  ) || !rails.includes(rail)) {
+    return { status: "needs-regrant", missingRail: rail };
+  }
+  return { status: "ok", rail };
+}
+
 // src/user-op-receipt.ts
 var InvalidUserOperationReceiptError = class extends Error {
   constructor(message) {
@@ -902,8 +918,21 @@ function createDelegationFrameworkAdapter(options) {
         execution,
         unsigned
       };
+      const hex = (value2) => `0x${value2.toString(16)}`;
       return {
         digest: codec.signingHash(unsigned),
+        // The same redemption as `unsigned`, as a request for the digest check.
+        request: {
+          type: "eip1559",
+          chainId: unsigned.chainId,
+          nonce: hex(unsigned.nonce),
+          to: unsigned.to,
+          value: hex(unsigned.value),
+          data: unsigned.data,
+          gas: hex(unsigned.gas),
+          maxFeePerGas: hex(unsigned.maxFeePerGas),
+          maxPriorityFeePerGas: hex(unsigned.maxPriorityFeePerGas)
+        },
         transaction,
         payload
       };
@@ -924,6 +953,7 @@ import {
   delegationTypedData,
   WalletError as WalletError8
 } from "@naculus/connect-core";
+import { transactionSigningHash } from "@naculus/connect-core/signing";
 function delegatesToStatelessDeleGator(delegation) {
   return delegation.delegated === true && delegation.delegate?.toLowerCase() === DELEGATION_FRAMEWORK2.eip7702StatelessDeleGator.toLowerCase();
 }
@@ -1199,16 +1229,39 @@ function createDelegationPolicyFlow(deps) {
       reason
     };
   };
-  const signVerified = (policyId, digest, tx) => manager.signWithVerifiedOffchainAuthorization(
-    policyId,
-    (authoritativePolicy) => buildDelegationPolicyMessage(authoritativePolicy, origin),
-    deps.verifySignature,
-    digest,
-    tx
-  );
+  const signVerified = (policyId, prepared) => {
+    const { request } = prepared;
+    const computed = `0x${Array.from(
+      transactionSigningHash(request),
+      (byte) => byte.toString(16).padStart(2, "0")
+    ).join("")}`;
+    if (computed !== prepared.digest.toLowerCase()) {
+      throw new WalletError8(
+        "invalid_input",
+        `The prepared digest ${prepared.digest} does not match the signing hash ${computed} of the prepared transaction request.`
+      );
+    }
+    if (!sameExecutionIntent(prepared.transaction, {
+      to: request.to,
+      value: request.value,
+      data: request.data,
+      chainId: request.chainId
+    })) {
+      throw new WalletError8(
+        "invalid_input",
+        "The prepared transaction request differs from the prepared transaction checked by the policy."
+      );
+    }
+    return manager.signTransactionWithVerifiedOffchainAuthorization(
+      policyId,
+      (authoritativePolicy) => buildDelegationPolicyMessage(authoritativePolicy, origin),
+      deps.verifySignature,
+      request
+    );
+  };
   const signRedemption = (policyId, prepared) => {
     const payload = prepared.payload;
-    if (!payload?.outerTx || !payload.execution) {
+    if (!payload?.outerTx || !payload.execution || !payload.unsigned) {
       throw new WalletError8(
         "invalid_input",
         "The EIP-7702 adapter did not return a redemption to sign."
@@ -1232,15 +1285,33 @@ function createDelegationPolicyFlow(deps) {
         "The EIP-7702 adapter's execution differs from the requested transaction."
       );
     }
-    return manager.signDelegationRedemption(
+    const { unsigned } = payload;
+    const hex = (value) => `0x${value.toString(16)}`;
+    const tx = {
+      type: "eip1559",
+      chainId: unsigned.chainId,
+      nonce: hex(unsigned.nonce),
+      to: unsigned.to,
+      value: hex(unsigned.value),
+      data: unsigned.data,
+      gas: hex(unsigned.gas),
+      maxFeePerGas: hex(unsigned.maxFeePerGas),
+      maxPriorityFeePerGas: hex(unsigned.maxPriorityFeePerGas)
+    };
+    return manager.signTransactionDelegationRedemption(
       policyId,
-      prepared.digest,
-      payload.outerTx,
+      tx,
+      { gas: payload.outerTx.gas },
       payload.execution
     );
   };
-  const signPolicyDigest = async (policyId, digest, tx) => {
-    const preview = await previewPolicyExecution(policyId, tx, 1, "any");
+  const signPolicyDigest = async (policyId, prepared) => {
+    const preview = await previewPolicyExecution(
+      policyId,
+      prepared.transaction,
+      1,
+      "any"
+    );
     if (preview.policy?.scope.mode === "eip7702") {
       throw new WalletError8(
         "method_not_allowed",
@@ -1250,7 +1321,7 @@ function createDelegationPolicyFlow(deps) {
     if (!preview.ready) {
       throw new WalletError8("method_not_allowed", preview.reason);
     }
-    return signVerified(policyId, digest, tx);
+    return signVerified(policyId, prepared);
   };
   const executePolicy = async (policyId, tx) => {
     const adapter = deps.adapter;
@@ -1292,7 +1363,7 @@ function createDelegationPolicyFlow(deps) {
         currentCheck.reason || "The on-chain policy authorization is not ready."
       );
     }
-    const signature = preview.policy.scope.mode === "eip7702" ? await signRedemption(policyId, prepared) : await signVerified(policyId, prepared.digest, prepared.transaction);
+    const signature = preview.policy.scope.mode === "eip7702" ? await signRedemption(policyId, prepared) : await signVerified(policyId, prepared);
     const submission = await adapter.broadcast({
       policy: preview.policy,
       prepared,
@@ -1856,6 +1927,7 @@ export {
   chainNumber,
   chainsForNamespace,
   channelsUpdate,
+  checkSessionKeyRailGrant,
   clearOneInAppNotification,
   compareCostsKey,
   createDecimalsCache,