@naculus/connect-appkit-core 0.2.5 → 0.2.6

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem } from '@naculus/connect-core';
+import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, SimulationResult, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem, SessionKeyManagerConfig, SessionKeyManager, Hex, UserOperationReceipt, Address, SmartAccountConfig, AtomicityRequirement, ExecutionPlan, SessionKeyInfo, SessionKeyTransaction, SessionKeyScope, ScopeCheckResult } from '@naculus/connect-core';
 
 /**
  * The types the framework-neutral half of appkit is built on.
@@ -362,6 +362,13 @@ declare function createDecimalsCache(token: TokenIdentity, known?: number): Deci
 declare function readDecimals(cache: DecimalsCache, token: TokenIdentity, known?: number): number | undefined;
 declare function writeDecimals(cache: DecimalsCache, token: TokenIdentity, value: number): void;
 
+/** Encode ERC-20 transfer(address,uint256), without signing or broadcasting. */
+declare function encodeErc20Transfer(to: string, amount: bigint): `0x${string}`;
+/** Encode ERC-20 approve(address,uint256), without signing or broadcasting. */
+declare function encodeErc20Approve(spender: string, amount: bigint): `0x${string}`;
+/** Encode ERC-20 transferFrom(address,address,uint256), without signing or broadcasting. */
+declare function encodeErc20TransferFrom(from: string, to: string, amount: bigint): `0x${string}`;
+
 /**
  * Normalize an EIP-1193 provider error into a WalletError.
  *
@@ -407,6 +414,44 @@ declare function decodeRevertReason(data: unknown): string | undefined;
 /** Decoded reason if available, otherwise the node's own message. */
 declare function resolveRevertReason(data: unknown, fallbackMessage: string): string;
 
+/** Resolve a simulation target without ever guessing a default chain. */
+declare function resolveSimulationEndpoint(requestedChainId: number | undefined, fallbackChainId: number | undefined, requestedRpcUrl?: string, fallbackRpcUrl?: string): {
+    chainId: number;
+    rpcUrl: string | undefined;
+};
+/** Resolve the chain from an explicit override or CAIP-2 chain context. */
+declare function resolveContextSimulationEndpoint(requestedChainId: number | undefined, currentChain: WalletChain | null | undefined): {
+    chainId: number;
+    rpcUrl: string | undefined;
+};
+
+interface SimulationTransaction {
+    to: string;
+    value?: string;
+    data?: string;
+    gas?: string;
+}
+interface SimulationCallClient {
+    chain?: {
+        id: number;
+    };
+    call(args: {
+        to: `0x${string}`;
+        data: `0x${string}`;
+        value: bigint;
+        from?: `0x${string}`;
+    }): Promise<unknown>;
+}
+interface TransactionSimulationContext {
+    chainId?: number;
+    currentChain?: WalletChain | null;
+    publicClient?: SimulationCallClient | null;
+    evmAccount?: string | null;
+    fetcher?: typeof fetch;
+}
+/** Basic revert check only: never claims asset changes or risk coverage. */
+declare function simulateTransactionPreview(tx: SimulationTransaction | undefined, context: TransactionSimulationContext): Promise<SimulationResult>;
+
 /**
  * Shared NameResolver instance for the name-resolution hooks.
  *
@@ -567,6 +612,173 @@ declare function validateRouteRecipient(quote: ExecutableQuote | null | undefine
 /** Normalise whatever an executor threw into the hook's error shape. */
 declare function toExecuteRouteError(cause: unknown): ExecuteRouteError;
 
+/** The subset of the config that changes what a key may spend or how it is sealed. */
+declare function sessionKeyConfigFingerprint(config?: SessionKeyManagerConfig): string;
+declare function getSharedSessionKeyManager(config?: SessionKeyManagerConfig): SessionKeyManager;
+/** Drop the shared instance. For tests and for a full sign-out that must forget keys. */
+declare function resetSharedSessionKeyManager(): void;
+
+/**
+ * Validation of an ERC-4337 `eth_getUserOperationReceipt` result, shared by
+ * the React hook and the Vue composable. A bundler is an untrusted party:
+ * every field is checked, the hash must match the one asked for, and a
+ * malformed receipt is refused instead of banked as a confirmation.
+ */
+declare class InvalidUserOperationReceiptError extends Error {
+    constructor(message: string);
+}
+declare function parseUserOperationReceipt(value: unknown, expectedHash: Hex): UserOperationReceipt;
+/**
+ * One `eth_getUserOperationReceipt` call. Resolves to the validated receipt,
+ * or null while the operation is not yet included. HTTP and JSON-RPC
+ * failures throw a plain Error (retryable); a malformed receipt throws
+ * InvalidUserOperationReceiptError (not retryable — the bundler is lying).
+ */
+declare function fetchUserOperationReceipt(bundlerUrl: string, hash: Hex, signal?: AbortSignal): Promise<UserOperationReceipt | null>;
+
+/**
+ * The decisions the smart-account hooks share, kept out of both framework
+ * shells: which chain a UserOperation targets, how the account config is
+ * assembled from options, and what a wallet's signature must look like.
+ */
+type SmartAccountType = "simple" | "light" | "kernel" | "safe";
+interface SmartAccountOptionsLike {
+    chainId?: string;
+    entryPoint?: Address;
+    accountType?: SmartAccountType;
+    salt?: bigint;
+}
+/**
+ * Target chain for a UserOperation. Fails closed: no chain → error rather
+ * than mainnet; a connected wallet on a different chain → chain_mismatch,
+ * because the signature it would produce is for the wrong domain.
+ */
+declare function resolveUserOpChain(optionsChainId: string | undefined, connectedChainId: string | null | undefined): string;
+/** Account config from owner, CAIP-2 chain and options; entry point falls back per chain. */
+declare function buildSmartAccountConfig(owner: Address, chainId: string, options?: SmartAccountOptionsLike): SmartAccountConfig;
+/** A wallet's answer to a signing request must be non-empty even-length hex. */
+declare function assertHexSignature(value: unknown): Hex;
+
+/**
+ * Signed off-chain delegation policies: the complete product flow, shared by
+ * React and Vue. Everything that decides whether a policy may be created,
+ * is still valid, or may sign or broadcast lives here; the framework shells
+ * only add state and wiring.
+ *
+ * Only `offchain` mode is created. An EIP-7702 or AA-module policy needs a
+ * real on-chain executor; accepting those here would turn a local record into
+ * a false delegation claim.
+ */
+/** What the execution planner says about a batch, plus the route it chose. */
+interface PolicyExecutionPreview extends ExecutionPlan {
+    route: string | null;
+}
+interface DelegationPolicyPreview {
+    policy: SessionKeyInfo | null;
+    scope: ScopeCheckResult;
+    execution: PolicyExecutionPreview;
+    signerMatches: boolean;
+    authorizationVerified: boolean;
+    ready: boolean;
+    broadcastReady: boolean;
+    broadcastRoute: PolicyExecutionRoute | null;
+    onchainAuthorizationVerified: boolean;
+    broadcastSponsored: boolean | null;
+    broadcastPromptless: boolean;
+    reason: string;
+}
+type PolicyExecutionRoute = "erc4337" | "eip7702";
+interface PolicyExecutionCheck {
+    ready: boolean;
+    authorizationInstalled: boolean;
+    sponsored: boolean;
+    promptless: boolean;
+    executorAddress?: `0x${string}`;
+    reason: string;
+}
+interface PreparedPolicyExecution {
+    digest: Hex;
+    transaction: SessionKeyTransaction;
+    payload: unknown;
+}
+interface PolicyExecutionSubmission {
+    route: PolicyExecutionRoute;
+    hash: Hex;
+    status: "submitted";
+}
+interface PolicyExecutionAdapter {
+    route: PolicyExecutionRoute;
+    check: (request: {
+        policy: SessionKeyInfo;
+        transaction: SessionKeyTransaction;
+    }) => Promise<PolicyExecutionCheck>;
+    prepare: (request: {
+        policy: SessionKeyInfo;
+        transaction: SessionKeyTransaction;
+    }) => Promise<PreparedPolicyExecution>;
+    broadcast: (request: {
+        policy: SessionKeyInfo;
+        prepared: PreparedPolicyExecution;
+        signature: Hex;
+    }) => Promise<PolicyExecutionSubmission>;
+}
+/** Recovers the signer of an EIP-191 message and compares; the flow never trusts a signature unrecovered. */
+type PolicySignatureVerifier = (input: {
+    message: string;
+    signature: `0x${string}`;
+    signerAddress: `0x${string}`;
+}) => Promise<boolean> | boolean;
+interface DelegationPolicyDeps {
+    manager: SessionKeyManager;
+    /** Origin bound into the signed message. */
+    origin: string;
+    /** Connected EOA, bare 0x form, or null. Read at call time. */
+    signer: () => `0x${string}` | null;
+    signMessage: (message: string) => Promise<string>;
+    verifySignature: PolicySignatureVerifier;
+    previewExecution: (callCount: number, atomicity: AtomicityRequirement) => PolicyExecutionPreview;
+    /** Whether gas must be sponsored for a broadcast to count as ready. */
+    sponsorship?: AtomicityRequirement;
+    adapter?: PolicyExecutionAdapter;
+    /** Current on-chain EIP-7702 delegation of the account. Read at call time. */
+    delegation: () => {
+        delegated: boolean | null;
+        delegate: `0x${string}` | null;
+    };
+    /** A host-provided encryption key is required for persistent policies. */
+    encryptionKeyConfigured: boolean;
+    storageAvailable: () => boolean;
+    /** Re-read the policy list after a mutation. */
+    refresh: () => Promise<void>;
+}
+/**
+ * True when the adapter's prepared transaction still means what was
+ * requested. Fail-closed: a field the caller left undefined is not a
+ * wildcard. An adapter may not add a target to a creation, add calldata to
+ * a plain transfer, or pick a chain the caller did not name — each of those
+ * changes what the session key ends up signing. Only "no value" and "0"
+ * (and "no data" and "0x") are treated as the same thing.
+ */
+declare function sameExecutionIntent(requested: SessionKeyTransaction, prepared: SessionKeyTransaction): boolean;
+/**
+ * The exact, deterministic message the main wallet signs. Every scope field
+ * is included in canonical order so a stored policy whose scope, signer or
+ * origin was altered no longer verifies. There must be exactly one copy of
+ * this function.
+ */
+declare function buildDelegationPolicyMessage(policy: SessionKeyInfo, origin: string): string;
+/** A stored policy is a verification candidate only in this state. */
+declare function isVerifiablePolicy(policy: SessionKeyInfo): boolean;
+interface DelegationPolicyFlow {
+    verifyStoredPolicy: (policy: SessionKeyInfo) => Promise<boolean>;
+    createPolicy: (scope: Partial<SessionKeyScope>) => Promise<SessionKeyInfo>;
+    revokePolicy: (policyId: string) => Promise<void>;
+    previewPolicyExecution: (policyId: string, tx: SessionKeyTransaction, callCount?: number, atomicity?: AtomicityRequirement) => Promise<DelegationPolicyPreview>;
+    signPolicyDigest: (policyId: string, digest: `0x${string}`, tx: SessionKeyTransaction) => Promise<`0x${string}`>;
+    executePolicy: (policyId: string, tx: SessionKeyTransaction) => Promise<PolicyExecutionSubmission>;
+}
+declare function createDelegationPolicyFlow(deps: DelegationPolicyDeps): DelegationPolicyFlow;
+
 declare function withTimeout<T>(promise: Promise<T>, ms: number, label?: string): Promise<T>;
 interface RetryOptions {
     maxRetries: number;
@@ -607,4 +819,36 @@ type Web3Action = {
 declare const initialWeb3State: Web3State;
 declare function web3Reducer(state: Web3State, action: Web3Action): Web3State;
 
-export { type AddressValidationLevel, type AtomicSupport, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, type DecimalsCache, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SolanaIdentity, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSigner, type SolanaWalletFeatures, type TokenIdentity, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, __resetResolverForTests, addInAppNotification, atomicSupportFor, bareEvmAddress, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createNotification, createNotificationSettingsStorage, decodeRevertReason, describeChain, eip155ChainIdToNumber, getResolver, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, readDecimals, readSolanaRoles, resolveChain, resolveEvmChainId, resolveRevertReason, saveNotificationSettings, selectChainCapabilities, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };
+interface SiwxLocation {
+    host: string;
+    origin: string;
+}
+interface SiwxMessageLike {
+    chainId: string;
+    address: string;
+    domain: string;
+    issuedAt?: string | null;
+    expirationTime?: string | null;
+    notBefore?: string | null;
+}
+interface SiwxResultLike<M extends SiwxMessageLike = SiwxMessageLike> {
+    message: M;
+    signature: string;
+}
+declare function defaultSiwxDomain(location?: SiwxLocation): string;
+declare function defaultSiwxUri(location?: SiwxLocation): string;
+declare function isSiwxExpired(result: SiwxResultLike, now: Date): boolean;
+declare function isSiwxNotBeforeValid(result: SiwxResultLike, now: Date): boolean;
+declare function siwxResultToSession<M extends SiwxMessageLike>(result: SiwxResultLike<M>, now?: Date): {
+    id: string;
+    chainId: string;
+    address: string;
+    domain: string;
+    message: M;
+    signature: string;
+    issuedAt: string;
+    expiresAt: string | null;
+    refreshedAt: null;
+};
+
+export { type AddressValidationLevel, type AtomicSupport, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, type DecimalsCache, type DelegationPolicyDeps, type DelegationPolicyFlow, type DelegationPolicyPreview, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, InvalidUserOperationReceiptError, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type PolicyExecutionAdapter, type PolicyExecutionCheck, type PolicyExecutionPreview, type PolicyExecutionRoute, type PolicyExecutionSubmission, type PolicySignatureVerifier, type PreparedPolicyExecution, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SimulationCallClient, type SimulationTransaction, type SiwxLocation, type SiwxMessageLike, type SiwxResultLike, type SmartAccountOptionsLike, type SmartAccountType, type SolanaIdentity, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSigner, type SolanaWalletFeatures, type TokenIdentity, type TransactionSimulationContext, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, __resetResolverForTests, addInAppNotification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeChain, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, fetchUserOperationReceipt, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readDecimals, readSolanaRoles, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem } from '@naculus/connect-core';
+import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, SimulationResult, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem, SessionKeyManagerConfig, SessionKeyManager, Hex, UserOperationReceipt, Address, SmartAccountConfig, AtomicityRequirement, ExecutionPlan, SessionKeyInfo, SessionKeyTransaction, SessionKeyScope, ScopeCheckResult } from '@naculus/connect-core';
 
 /**
  * The types the framework-neutral half of appkit is built on.
@@ -362,6 +362,13 @@ declare function createDecimalsCache(token: TokenIdentity, known?: number): Deci
 declare function readDecimals(cache: DecimalsCache, token: TokenIdentity, known?: number): number | undefined;
 declare function writeDecimals(cache: DecimalsCache, token: TokenIdentity, value: number): void;
 
+/** Encode ERC-20 transfer(address,uint256), without signing or broadcasting. */
+declare function encodeErc20Transfer(to: string, amount: bigint): `0x${string}`;
+/** Encode ERC-20 approve(address,uint256), without signing or broadcasting. */
+declare function encodeErc20Approve(spender: string, amount: bigint): `0x${string}`;
+/** Encode ERC-20 transferFrom(address,address,uint256), without signing or broadcasting. */
+declare function encodeErc20TransferFrom(from: string, to: string, amount: bigint): `0x${string}`;
+
 /**
  * Normalize an EIP-1193 provider error into a WalletError.
  *
@@ -407,6 +414,44 @@ declare function decodeRevertReason(data: unknown): string | undefined;
 /** Decoded reason if available, otherwise the node's own message. */
 declare function resolveRevertReason(data: unknown, fallbackMessage: string): string;
 
+/** Resolve a simulation target without ever guessing a default chain. */
+declare function resolveSimulationEndpoint(requestedChainId: number | undefined, fallbackChainId: number | undefined, requestedRpcUrl?: string, fallbackRpcUrl?: string): {
+    chainId: number;
+    rpcUrl: string | undefined;
+};
+/** Resolve the chain from an explicit override or CAIP-2 chain context. */
+declare function resolveContextSimulationEndpoint(requestedChainId: number | undefined, currentChain: WalletChain | null | undefined): {
+    chainId: number;
+    rpcUrl: string | undefined;
+};
+
+interface SimulationTransaction {
+    to: string;
+    value?: string;
+    data?: string;
+    gas?: string;
+}
+interface SimulationCallClient {
+    chain?: {
+        id: number;
+    };
+    call(args: {
+        to: `0x${string}`;
+        data: `0x${string}`;
+        value: bigint;
+        from?: `0x${string}`;
+    }): Promise<unknown>;
+}
+interface TransactionSimulationContext {
+    chainId?: number;
+    currentChain?: WalletChain | null;
+    publicClient?: SimulationCallClient | null;
+    evmAccount?: string | null;
+    fetcher?: typeof fetch;
+}
+/** Basic revert check only: never claims asset changes or risk coverage. */
+declare function simulateTransactionPreview(tx: SimulationTransaction | undefined, context: TransactionSimulationContext): Promise<SimulationResult>;
+
 /**
  * Shared NameResolver instance for the name-resolution hooks.
  *
@@ -567,6 +612,173 @@ declare function validateRouteRecipient(quote: ExecutableQuote | null | undefine
 /** Normalise whatever an executor threw into the hook's error shape. */
 declare function toExecuteRouteError(cause: unknown): ExecuteRouteError;
 
+/** The subset of the config that changes what a key may spend or how it is sealed. */
+declare function sessionKeyConfigFingerprint(config?: SessionKeyManagerConfig): string;
+declare function getSharedSessionKeyManager(config?: SessionKeyManagerConfig): SessionKeyManager;
+/** Drop the shared instance. For tests and for a full sign-out that must forget keys. */
+declare function resetSharedSessionKeyManager(): void;
+
+/**
+ * Validation of an ERC-4337 `eth_getUserOperationReceipt` result, shared by
+ * the React hook and the Vue composable. A bundler is an untrusted party:
+ * every field is checked, the hash must match the one asked for, and a
+ * malformed receipt is refused instead of banked as a confirmation.
+ */
+declare class InvalidUserOperationReceiptError extends Error {
+    constructor(message: string);
+}
+declare function parseUserOperationReceipt(value: unknown, expectedHash: Hex): UserOperationReceipt;
+/**
+ * One `eth_getUserOperationReceipt` call. Resolves to the validated receipt,
+ * or null while the operation is not yet included. HTTP and JSON-RPC
+ * failures throw a plain Error (retryable); a malformed receipt throws
+ * InvalidUserOperationReceiptError (not retryable — the bundler is lying).
+ */
+declare function fetchUserOperationReceipt(bundlerUrl: string, hash: Hex, signal?: AbortSignal): Promise<UserOperationReceipt | null>;
+
+/**
+ * The decisions the smart-account hooks share, kept out of both framework
+ * shells: which chain a UserOperation targets, how the account config is
+ * assembled from options, and what a wallet's signature must look like.
+ */
+type SmartAccountType = "simple" | "light" | "kernel" | "safe";
+interface SmartAccountOptionsLike {
+    chainId?: string;
+    entryPoint?: Address;
+    accountType?: SmartAccountType;
+    salt?: bigint;
+}
+/**
+ * Target chain for a UserOperation. Fails closed: no chain → error rather
+ * than mainnet; a connected wallet on a different chain → chain_mismatch,
+ * because the signature it would produce is for the wrong domain.
+ */
+declare function resolveUserOpChain(optionsChainId: string | undefined, connectedChainId: string | null | undefined): string;
+/** Account config from owner, CAIP-2 chain and options; entry point falls back per chain. */
+declare function buildSmartAccountConfig(owner: Address, chainId: string, options?: SmartAccountOptionsLike): SmartAccountConfig;
+/** A wallet's answer to a signing request must be non-empty even-length hex. */
+declare function assertHexSignature(value: unknown): Hex;
+
+/**
+ * Signed off-chain delegation policies: the complete product flow, shared by
+ * React and Vue. Everything that decides whether a policy may be created,
+ * is still valid, or may sign or broadcast lives here; the framework shells
+ * only add state and wiring.
+ *
+ * Only `offchain` mode is created. An EIP-7702 or AA-module policy needs a
+ * real on-chain executor; accepting those here would turn a local record into
+ * a false delegation claim.
+ */
+/** What the execution planner says about a batch, plus the route it chose. */
+interface PolicyExecutionPreview extends ExecutionPlan {
+    route: string | null;
+}
+interface DelegationPolicyPreview {
+    policy: SessionKeyInfo | null;
+    scope: ScopeCheckResult;
+    execution: PolicyExecutionPreview;
+    signerMatches: boolean;
+    authorizationVerified: boolean;
+    ready: boolean;
+    broadcastReady: boolean;
+    broadcastRoute: PolicyExecutionRoute | null;
+    onchainAuthorizationVerified: boolean;
+    broadcastSponsored: boolean | null;
+    broadcastPromptless: boolean;
+    reason: string;
+}
+type PolicyExecutionRoute = "erc4337" | "eip7702";
+interface PolicyExecutionCheck {
+    ready: boolean;
+    authorizationInstalled: boolean;
+    sponsored: boolean;
+    promptless: boolean;
+    executorAddress?: `0x${string}`;
+    reason: string;
+}
+interface PreparedPolicyExecution {
+    digest: Hex;
+    transaction: SessionKeyTransaction;
+    payload: unknown;
+}
+interface PolicyExecutionSubmission {
+    route: PolicyExecutionRoute;
+    hash: Hex;
+    status: "submitted";
+}
+interface PolicyExecutionAdapter {
+    route: PolicyExecutionRoute;
+    check: (request: {
+        policy: SessionKeyInfo;
+        transaction: SessionKeyTransaction;
+    }) => Promise<PolicyExecutionCheck>;
+    prepare: (request: {
+        policy: SessionKeyInfo;
+        transaction: SessionKeyTransaction;
+    }) => Promise<PreparedPolicyExecution>;
+    broadcast: (request: {
+        policy: SessionKeyInfo;
+        prepared: PreparedPolicyExecution;
+        signature: Hex;
+    }) => Promise<PolicyExecutionSubmission>;
+}
+/** Recovers the signer of an EIP-191 message and compares; the flow never trusts a signature unrecovered. */
+type PolicySignatureVerifier = (input: {
+    message: string;
+    signature: `0x${string}`;
+    signerAddress: `0x${string}`;
+}) => Promise<boolean> | boolean;
+interface DelegationPolicyDeps {
+    manager: SessionKeyManager;
+    /** Origin bound into the signed message. */
+    origin: string;
+    /** Connected EOA, bare 0x form, or null. Read at call time. */
+    signer: () => `0x${string}` | null;
+    signMessage: (message: string) => Promise<string>;
+    verifySignature: PolicySignatureVerifier;
+    previewExecution: (callCount: number, atomicity: AtomicityRequirement) => PolicyExecutionPreview;
+    /** Whether gas must be sponsored for a broadcast to count as ready. */
+    sponsorship?: AtomicityRequirement;
+    adapter?: PolicyExecutionAdapter;
+    /** Current on-chain EIP-7702 delegation of the account. Read at call time. */
+    delegation: () => {
+        delegated: boolean | null;
+        delegate: `0x${string}` | null;
+    };
+    /** A host-provided encryption key is required for persistent policies. */
+    encryptionKeyConfigured: boolean;
+    storageAvailable: () => boolean;
+    /** Re-read the policy list after a mutation. */
+    refresh: () => Promise<void>;
+}
+/**
+ * True when the adapter's prepared transaction still means what was
+ * requested. Fail-closed: a field the caller left undefined is not a
+ * wildcard. An adapter may not add a target to a creation, add calldata to
+ * a plain transfer, or pick a chain the caller did not name — each of those
+ * changes what the session key ends up signing. Only "no value" and "0"
+ * (and "no data" and "0x") are treated as the same thing.
+ */
+declare function sameExecutionIntent(requested: SessionKeyTransaction, prepared: SessionKeyTransaction): boolean;
+/**
+ * The exact, deterministic message the main wallet signs. Every scope field
+ * is included in canonical order so a stored policy whose scope, signer or
+ * origin was altered no longer verifies. There must be exactly one copy of
+ * this function.
+ */
+declare function buildDelegationPolicyMessage(policy: SessionKeyInfo, origin: string): string;
+/** A stored policy is a verification candidate only in this state. */
+declare function isVerifiablePolicy(policy: SessionKeyInfo): boolean;
+interface DelegationPolicyFlow {
+    verifyStoredPolicy: (policy: SessionKeyInfo) => Promise<boolean>;
+    createPolicy: (scope: Partial<SessionKeyScope>) => Promise<SessionKeyInfo>;
+    revokePolicy: (policyId: string) => Promise<void>;
+    previewPolicyExecution: (policyId: string, tx: SessionKeyTransaction, callCount?: number, atomicity?: AtomicityRequirement) => Promise<DelegationPolicyPreview>;
+    signPolicyDigest: (policyId: string, digest: `0x${string}`, tx: SessionKeyTransaction) => Promise<`0x${string}`>;
+    executePolicy: (policyId: string, tx: SessionKeyTransaction) => Promise<PolicyExecutionSubmission>;
+}
+declare function createDelegationPolicyFlow(deps: DelegationPolicyDeps): DelegationPolicyFlow;
+
 declare function withTimeout<T>(promise: Promise<T>, ms: number, label?: string): Promise<T>;
 interface RetryOptions {
     maxRetries: number;
@@ -607,4 +819,36 @@ type Web3Action = {
 declare const initialWeb3State: Web3State;
 declare function web3Reducer(state: Web3State, action: Web3Action): Web3State;
 
-export { type AddressValidationLevel, type AtomicSupport, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, type DecimalsCache, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SolanaIdentity, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSigner, type SolanaWalletFeatures, type TokenIdentity, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, __resetResolverForTests, addInAppNotification, atomicSupportFor, bareEvmAddress, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createNotification, createNotificationSettingsStorage, decodeRevertReason, describeChain, eip155ChainIdToNumber, getResolver, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, readDecimals, readSolanaRoles, resolveChain, resolveEvmChainId, resolveRevertReason, saveNotificationSettings, selectChainCapabilities, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };
+interface SiwxLocation {
+    host: string;
+    origin: string;
+}
+interface SiwxMessageLike {
+    chainId: string;
+    address: string;
+    domain: string;
+    issuedAt?: string | null;
+    expirationTime?: string | null;
+    notBefore?: string | null;
+}
+interface SiwxResultLike<M extends SiwxMessageLike = SiwxMessageLike> {
+    message: M;
+    signature: string;
+}
+declare function defaultSiwxDomain(location?: SiwxLocation): string;
+declare function defaultSiwxUri(location?: SiwxLocation): string;
+declare function isSiwxExpired(result: SiwxResultLike, now: Date): boolean;
+declare function isSiwxNotBeforeValid(result: SiwxResultLike, now: Date): boolean;
+declare function siwxResultToSession<M extends SiwxMessageLike>(result: SiwxResultLike<M>, now?: Date): {
+    id: string;
+    chainId: string;
+    address: string;
+    domain: string;
+    message: M;
+    signature: string;
+    issuedAt: string;
+    expiresAt: string | null;
+    refreshedAt: null;
+};
+
+export { type AddressValidationLevel, type AtomicSupport, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, type DecimalsCache, type DelegationPolicyDeps, type DelegationPolicyFlow, type DelegationPolicyPreview, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, InvalidUserOperationReceiptError, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type PolicyExecutionAdapter, type PolicyExecutionCheck, type PolicyExecutionPreview, type PolicyExecutionRoute, type PolicyExecutionSubmission, type PolicySignatureVerifier, type PreparedPolicyExecution, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SimulationCallClient, type SimulationTransaction, type SiwxLocation, type SiwxMessageLike, type SiwxResultLike, type SmartAccountOptionsLike, type SmartAccountType, type SolanaIdentity, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSigner, type SolanaWalletFeatures, type TokenIdentity, type TransactionSimulationContext, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, __resetResolverForTests, addInAppNotification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeChain, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, fetchUserOperationReceipt, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readDecimals, readSolanaRoles, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };