@naculus/connect-appkit-core 0.3.0 → 0.5.0

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, SimulationResult, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem, SessionKeyManagerConfig, SessionKeyManager, Hex, UserOperationReceipt, Address, SmartAccountConfig, AtomicityRequirement, ExecutionPlan, SessionKeyInfo, SessionKeyTransaction, SessionKeyScope, ScopeCheckResult } from '@naculus/connect-core';
+import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, SimulationResult, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem, SessionKeyManagerConfig, SessionKeyManager, Hex, UserOperationReceipt, Address, SmartAccountConfig, AtomicityRequirement, ExecutionPlan, SessionKeyInfo, SessionKeyTransaction, delegationTypedData, SessionKeyScope, ScopeCheckResult, SolanaSessionKeyInfo, SolanaSessionKeyScope, SolanaSessionKeyManager, SolanaPaymentRpc } from '@naculus/connect-core';
 
 /**
  * The types the framework-neutral half of appkit is built on.
@@ -745,12 +745,22 @@ interface DelegationPolicyDeps {
         delegated: boolean | null;
         delegate: `0x${string}` | null;
     };
+    /**
+     * For `eip7702` policies: the connected wallet's EIP-712 signature
+     * (eth_signTypedData_v4) over `{ domain, types, primaryType, message }` —
+     * viem-style typed data, without an `EIP712Domain` entry in `types`.
+     */
+    signTypedData?: (typedData: DelegationTypedData) => Promise<string>;
+    /** For `eip7702` policies: the connected EIP-155 chain number, or null. */
+    chainId?: () => number | null;
     /** A host-provided encryption key is required for persistent policies. */
     encryptionKeyConfigured: boolean;
     storageAvailable: () => boolean;
     /** Re-read the policy list after a mutation. */
     refresh: () => Promise<void>;
 }
+/** The typed data an owner signs to authorize an `eip7702` policy. */
+type DelegationTypedData = ReturnType<typeof delegationTypedData>;
 /**
  * True when the adapter's prepared transaction still means what was
  * requested. Fail-closed: a field the caller left undefined is not a
@@ -779,6 +789,156 @@ interface DelegationPolicyFlow {
 }
 declare function createDelegationPolicyFlow(deps: DelegationPolicyDeps): DelegationPolicyFlow;
 
+/**
+ * The execution adapter for `eip7702` policies (MetaMask Delegation Framework
+ * v1.3.0; docs/design/eip7702-session-delegation.md in connect-lib).
+ *
+ * The session key sends `DelegationManager.redeemDelegations` from its own
+ * address and pays the gas; the chain enforces the delegation's caveats. The
+ * adapter builds that transaction and broadcasts it; the delegation-policy
+ * flow signs it with connect-core's `signDelegationRedemption`, which
+ * re-encodes the redemption from the stored delegation and refuses anything
+ * else.
+ *
+ * Transaction encoding is the app's (`codec`), so this package takes no
+ * dependency: pass viem's `serializeTransaction` / `keccak256`, or
+ * wallet-engine's encoder.
+ */
+/** An unsigned EIP-1559 transaction, in the codec's terms. */
+interface RedemptionTransaction {
+    type: "eip1559";
+    chainId: number;
+    nonce: number;
+    to: `0x${string}`;
+    value: bigint;
+    data: `0x${string}`;
+    gas: bigint;
+    maxFeePerGas: bigint;
+    maxPriorityFeePerGas: bigint;
+}
+interface RedemptionCodec {
+    /** keccak256 of the unsigned transaction's signing payload. */
+    signingHash: (tx: RedemptionTransaction) => `0x${string}`;
+    /** The raw signed transaction, from a 65-byte r‖s‖v (v 27/28) signature. */
+    serialize: (tx: RedemptionTransaction, signature: `0x${string}`) => `0x${string}`;
+}
+interface RedemptionRpc {
+    /** Pending nonce of `address`. */
+    getTransactionCount: (address: `0x${string}`) => Promise<number>;
+    estimateGas: (tx: {
+        from: `0x${string}`;
+        to: `0x${string}`;
+        data: `0x${string}`;
+    }) => Promise<bigint>;
+    fees: () => Promise<{
+        maxFeePerGas: bigint;
+        maxPriorityFeePerGas: bigint;
+    }>;
+    sendRawTransaction: (raw: `0x${string}`) => Promise<`0x${string}`>;
+}
+interface DelegationFrameworkAdapterOptions {
+    manager: SessionKeyManager;
+    rpc: RedemptionRpc;
+    codec: RedemptionCodec;
+    /** The connected chain; must be the one the delegation was signed for. */
+    chainId: () => number | null;
+}
+declare function createDelegationFrameworkAdapter(options: DelegationFrameworkAdapterOptions): PolicyExecutionAdapter;
+
+/**
+ * Agentic payments (x402 / MPP) for the appkit shells.
+ *
+ * The app builds the paying fetch itself — `createX402Fetch` from
+ * `@naculus/payments-x402` or `createMppFetch` from `@naculus/payments-mpp`,
+ * with the session key and limits it chooses — and the hooks only track its
+ * state. So appkit takes no dependency on either package: their results are
+ * read here by shape, and a shape this does not recognise is reported as
+ * `protocol: "unknown"` rather than guessed at.
+ */
+/** What `createX402Fetch` and `createMppFetch` return, structurally. */
+interface PaymentFetchResult {
+    response: Response;
+    /** The requirement (x402) or charge (MPP) paid; null when nothing was. */
+    paid: unknown;
+    /** x402 `PAYMENT-RESPONSE`. */
+    settlement?: unknown;
+    /** MPP `Payment-Receipt`. */
+    receipt?: unknown;
+}
+type PaymentFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<PaymentFetchResult>;
+/** One payment, in the terms a UI shows. Amounts are token base units. */
+interface PaymentRecord {
+    protocol: "x402" | "mpp" | "unknown";
+    /** The URL that was requested. */
+    resource: string;
+    /** CAIP-2 chain, e.g. `eip155:8453`; null when unknown. */
+    chainId: string | null;
+    /** Token contract; null when unknown. */
+    asset: string | null;
+    payTo: string | null;
+    amount: string | null;
+    /**
+     * Settlement transaction hash as the server reported it — unverified; the
+     * other fields are what the client signed.
+     */
+    reference: string | null;
+}
+/**
+ * The payment a paying fetch made, or null when it paid nothing. Reads the
+ * x402 requirement / settlement (EVM or Solana) or the MPP `evm` / `solana`
+ * charge / receipt by shape.
+ */
+declare function describePayment(input: RequestInfo | URL, result: PaymentFetchResult): PaymentRecord | null;
+
+/**
+ * Solana session keys for the appkit shells (connect-lib STATE thread 18).
+ *
+ * The app builds the `SolanaSessionKeyManager` (its storage and password) and
+ * the RPC; the owner is the connected wallet's Solana signer role. Creating a
+ * key asks the wallet once to sign an SPL `ApproveChecked` (the key becomes
+ * the delegate of the owner's token account for that mint, up to the budget)
+ * and broadcasts it; revoking asks it to sign `Revoke`. Payments then go
+ * through `createX402Fetch` / `createMppFetch` with
+ * `solana: { sessionKey: { manager, id }, rpc }` — no prompt.
+ */
+interface SolanaOwnerSigner {
+    address: string;
+    signTransaction(transaction: Uint8Array): Promise<Uint8Array>;
+}
+interface SolanaSessionKeyFlowDeps {
+    manager: SolanaSessionKeyManager;
+    /** Must implement `sendTransaction` (e.g. `solanaPaymentRpc(url)`). */
+    rpc: SolanaPaymentRpc;
+    owner: SolanaOwnerSigner;
+}
+interface SolanaSessionKeyFlow {
+    /** The owner's keys, newest first. */
+    list(): Promise<SolanaSessionKeyInfo[]>;
+    /**
+     * Create a key, have the owner approve it, broadcast the approval.
+     * Approving replaces any delegate the owner's token account already had.
+     *
+     * On any failure the new key is revoked here, so it never signs. A failed
+     * broadcast does not prove the approval did not land (a timeout after
+     * submission): the error then says so, and `revoke(id)` sends the owner's
+     * on-chain `Revoke` to be sure.
+     */
+    create(scope: SolanaSessionKeyScope): Promise<{
+        key: SolanaSessionKeyInfo;
+        signature: string;
+    }>;
+    /**
+     * Stop the key here at once (before anything else can fail), then have the
+     * owner sign `Revoke` and broadcast it. If that fails, the key stays
+     * revoked locally; the on-chain delegate stays until a later revoke lands.
+     * Also works on a key already revoked locally.
+     */
+    revoke(id: string): Promise<{
+        signature: string;
+    }>;
+}
+declare function createSolanaSessionKeyFlow(deps: SolanaSessionKeyFlowDeps): SolanaSessionKeyFlow;
+
 declare function withTimeout<T>(promise: Promise<T>, ms: number, label?: string): Promise<T>;
 interface RetryOptions {
     maxRetries: number;
@@ -851,4 +1011,4 @@ declare function siwxResultToSession<M extends SiwxMessageLike>(result: SiwxResu
     refreshedAt: null;
 };
 
-export { type AddressValidationLevel, type AtomicSupport, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, type DecimalsCache, type DelegationPolicyDeps, type DelegationPolicyFlow, type DelegationPolicyPreview, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, InvalidUserOperationReceiptError, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type PolicyExecutionAdapter, type PolicyExecutionCheck, type PolicyExecutionPreview, type PolicyExecutionRoute, type PolicyExecutionSubmission, type PolicySignatureVerifier, type PreparedPolicyExecution, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SimulationCallClient, type SimulationTransaction, type SiwxLocation, type SiwxMessageLike, type SiwxResultLike, type SmartAccountOptionsLike, type SmartAccountType, type SolanaIdentity, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSigner, type SolanaWalletFeatures, type TokenIdentity, type TransactionSimulationContext, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, __resetResolverForTests, addInAppNotification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeChain, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, fetchUserOperationReceipt, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readDecimals, readSolanaRoles, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };
+export { type AddressValidationLevel, type AtomicSupport, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, type DecimalsCache, type DelegationFrameworkAdapterOptions, type DelegationPolicyDeps, type DelegationPolicyFlow, type DelegationPolicyPreview, type DelegationTypedData, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, InvalidUserOperationReceiptError, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type PaymentFetch, type PaymentFetchResult, type PaymentRecord, type PolicyExecutionAdapter, type PolicyExecutionCheck, type PolicyExecutionPreview, type PolicyExecutionRoute, type PolicyExecutionSubmission, type PolicySignatureVerifier, type PreparedPolicyExecution, type RedemptionCodec, type RedemptionRpc, type RedemptionTransaction, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SimulationCallClient, type SimulationTransaction, type SiwxLocation, type SiwxMessageLike, type SiwxResultLike, type SmartAccountOptionsLike, type SmartAccountType, type SolanaIdentity, type SolanaOwnerSigner, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSessionKeyFlow, type SolanaSessionKeyFlowDeps, type SolanaSigner, type SolanaWalletFeatures, type TokenIdentity, type TransactionSimulationContext, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, __resetResolverForTests, addInAppNotification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationFrameworkAdapter, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, createSolanaSessionKeyFlow, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeChain, describePayment, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, fetchUserOperationReceipt, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readDecimals, readSolanaRoles, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, SimulationResult, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem, SessionKeyManagerConfig, SessionKeyManager, Hex, UserOperationReceipt, Address, SmartAccountConfig, AtomicityRequirement, ExecutionPlan, SessionKeyInfo, SessionKeyTransaction, SessionKeyScope, ScopeCheckResult } from '@naculus/connect-core';
+import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, SimulationResult, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem, SessionKeyManagerConfig, SessionKeyManager, Hex, UserOperationReceipt, Address, SmartAccountConfig, AtomicityRequirement, ExecutionPlan, SessionKeyInfo, SessionKeyTransaction, delegationTypedData, SessionKeyScope, ScopeCheckResult, SolanaSessionKeyInfo, SolanaSessionKeyScope, SolanaSessionKeyManager, SolanaPaymentRpc } from '@naculus/connect-core';
 
 /**
  * The types the framework-neutral half of appkit is built on.
@@ -745,12 +745,22 @@ interface DelegationPolicyDeps {
         delegated: boolean | null;
         delegate: `0x${string}` | null;
     };
+    /**
+     * For `eip7702` policies: the connected wallet's EIP-712 signature
+     * (eth_signTypedData_v4) over `{ domain, types, primaryType, message }` —
+     * viem-style typed data, without an `EIP712Domain` entry in `types`.
+     */
+    signTypedData?: (typedData: DelegationTypedData) => Promise<string>;
+    /** For `eip7702` policies: the connected EIP-155 chain number, or null. */
+    chainId?: () => number | null;
     /** A host-provided encryption key is required for persistent policies. */
     encryptionKeyConfigured: boolean;
     storageAvailable: () => boolean;
     /** Re-read the policy list after a mutation. */
     refresh: () => Promise<void>;
 }
+/** The typed data an owner signs to authorize an `eip7702` policy. */
+type DelegationTypedData = ReturnType<typeof delegationTypedData>;
 /**
  * True when the adapter's prepared transaction still means what was
  * requested. Fail-closed: a field the caller left undefined is not a
@@ -779,6 +789,156 @@ interface DelegationPolicyFlow {
 }
 declare function createDelegationPolicyFlow(deps: DelegationPolicyDeps): DelegationPolicyFlow;
 
+/**
+ * The execution adapter for `eip7702` policies (MetaMask Delegation Framework
+ * v1.3.0; docs/design/eip7702-session-delegation.md in connect-lib).
+ *
+ * The session key sends `DelegationManager.redeemDelegations` from its own
+ * address and pays the gas; the chain enforces the delegation's caveats. The
+ * adapter builds that transaction and broadcasts it; the delegation-policy
+ * flow signs it with connect-core's `signDelegationRedemption`, which
+ * re-encodes the redemption from the stored delegation and refuses anything
+ * else.
+ *
+ * Transaction encoding is the app's (`codec`), so this package takes no
+ * dependency: pass viem's `serializeTransaction` / `keccak256`, or
+ * wallet-engine's encoder.
+ */
+/** An unsigned EIP-1559 transaction, in the codec's terms. */
+interface RedemptionTransaction {
+    type: "eip1559";
+    chainId: number;
+    nonce: number;
+    to: `0x${string}`;
+    value: bigint;
+    data: `0x${string}`;
+    gas: bigint;
+    maxFeePerGas: bigint;
+    maxPriorityFeePerGas: bigint;
+}
+interface RedemptionCodec {
+    /** keccak256 of the unsigned transaction's signing payload. */
+    signingHash: (tx: RedemptionTransaction) => `0x${string}`;
+    /** The raw signed transaction, from a 65-byte r‖s‖v (v 27/28) signature. */
+    serialize: (tx: RedemptionTransaction, signature: `0x${string}`) => `0x${string}`;
+}
+interface RedemptionRpc {
+    /** Pending nonce of `address`. */
+    getTransactionCount: (address: `0x${string}`) => Promise<number>;
+    estimateGas: (tx: {
+        from: `0x${string}`;
+        to: `0x${string}`;
+        data: `0x${string}`;
+    }) => Promise<bigint>;
+    fees: () => Promise<{
+        maxFeePerGas: bigint;
+        maxPriorityFeePerGas: bigint;
+    }>;
+    sendRawTransaction: (raw: `0x${string}`) => Promise<`0x${string}`>;
+}
+interface DelegationFrameworkAdapterOptions {
+    manager: SessionKeyManager;
+    rpc: RedemptionRpc;
+    codec: RedemptionCodec;
+    /** The connected chain; must be the one the delegation was signed for. */
+    chainId: () => number | null;
+}
+declare function createDelegationFrameworkAdapter(options: DelegationFrameworkAdapterOptions): PolicyExecutionAdapter;
+
+/**
+ * Agentic payments (x402 / MPP) for the appkit shells.
+ *
+ * The app builds the paying fetch itself — `createX402Fetch` from
+ * `@naculus/payments-x402` or `createMppFetch` from `@naculus/payments-mpp`,
+ * with the session key and limits it chooses — and the hooks only track its
+ * state. So appkit takes no dependency on either package: their results are
+ * read here by shape, and a shape this does not recognise is reported as
+ * `protocol: "unknown"` rather than guessed at.
+ */
+/** What `createX402Fetch` and `createMppFetch` return, structurally. */
+interface PaymentFetchResult {
+    response: Response;
+    /** The requirement (x402) or charge (MPP) paid; null when nothing was. */
+    paid: unknown;
+    /** x402 `PAYMENT-RESPONSE`. */
+    settlement?: unknown;
+    /** MPP `Payment-Receipt`. */
+    receipt?: unknown;
+}
+type PaymentFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<PaymentFetchResult>;
+/** One payment, in the terms a UI shows. Amounts are token base units. */
+interface PaymentRecord {
+    protocol: "x402" | "mpp" | "unknown";
+    /** The URL that was requested. */
+    resource: string;
+    /** CAIP-2 chain, e.g. `eip155:8453`; null when unknown. */
+    chainId: string | null;
+    /** Token contract; null when unknown. */
+    asset: string | null;
+    payTo: string | null;
+    amount: string | null;
+    /**
+     * Settlement transaction hash as the server reported it — unverified; the
+     * other fields are what the client signed.
+     */
+    reference: string | null;
+}
+/**
+ * The payment a paying fetch made, or null when it paid nothing. Reads the
+ * x402 requirement / settlement (EVM or Solana) or the MPP `evm` / `solana`
+ * charge / receipt by shape.
+ */
+declare function describePayment(input: RequestInfo | URL, result: PaymentFetchResult): PaymentRecord | null;
+
+/**
+ * Solana session keys for the appkit shells (connect-lib STATE thread 18).
+ *
+ * The app builds the `SolanaSessionKeyManager` (its storage and password) and
+ * the RPC; the owner is the connected wallet's Solana signer role. Creating a
+ * key asks the wallet once to sign an SPL `ApproveChecked` (the key becomes
+ * the delegate of the owner's token account for that mint, up to the budget)
+ * and broadcasts it; revoking asks it to sign `Revoke`. Payments then go
+ * through `createX402Fetch` / `createMppFetch` with
+ * `solana: { sessionKey: { manager, id }, rpc }` — no prompt.
+ */
+interface SolanaOwnerSigner {
+    address: string;
+    signTransaction(transaction: Uint8Array): Promise<Uint8Array>;
+}
+interface SolanaSessionKeyFlowDeps {
+    manager: SolanaSessionKeyManager;
+    /** Must implement `sendTransaction` (e.g. `solanaPaymentRpc(url)`). */
+    rpc: SolanaPaymentRpc;
+    owner: SolanaOwnerSigner;
+}
+interface SolanaSessionKeyFlow {
+    /** The owner's keys, newest first. */
+    list(): Promise<SolanaSessionKeyInfo[]>;
+    /**
+     * Create a key, have the owner approve it, broadcast the approval.
+     * Approving replaces any delegate the owner's token account already had.
+     *
+     * On any failure the new key is revoked here, so it never signs. A failed
+     * broadcast does not prove the approval did not land (a timeout after
+     * submission): the error then says so, and `revoke(id)` sends the owner's
+     * on-chain `Revoke` to be sure.
+     */
+    create(scope: SolanaSessionKeyScope): Promise<{
+        key: SolanaSessionKeyInfo;
+        signature: string;
+    }>;
+    /**
+     * Stop the key here at once (before anything else can fail), then have the
+     * owner sign `Revoke` and broadcast it. If that fails, the key stays
+     * revoked locally; the on-chain delegate stays until a later revoke lands.
+     * Also works on a key already revoked locally.
+     */
+    revoke(id: string): Promise<{
+        signature: string;
+    }>;
+}
+declare function createSolanaSessionKeyFlow(deps: SolanaSessionKeyFlowDeps): SolanaSessionKeyFlow;
+
 declare function withTimeout<T>(promise: Promise<T>, ms: number, label?: string): Promise<T>;
 interface RetryOptions {
     maxRetries: number;
@@ -851,4 +1011,4 @@ declare function siwxResultToSession<M extends SiwxMessageLike>(result: SiwxResu
     refreshedAt: null;
 };
 
-export { type AddressValidationLevel, type AtomicSupport, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, type DecimalsCache, type DelegationPolicyDeps, type DelegationPolicyFlow, type DelegationPolicyPreview, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, InvalidUserOperationReceiptError, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type PolicyExecutionAdapter, type PolicyExecutionCheck, type PolicyExecutionPreview, type PolicyExecutionRoute, type PolicyExecutionSubmission, type PolicySignatureVerifier, type PreparedPolicyExecution, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SimulationCallClient, type SimulationTransaction, type SiwxLocation, type SiwxMessageLike, type SiwxResultLike, type SmartAccountOptionsLike, type SmartAccountType, type SolanaIdentity, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSigner, type SolanaWalletFeatures, type TokenIdentity, type TransactionSimulationContext, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, __resetResolverForTests, addInAppNotification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeChain, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, fetchUserOperationReceipt, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readDecimals, readSolanaRoles, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };
+export { type AddressValidationLevel, type AtomicSupport, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, type DecimalsCache, type DelegationFrameworkAdapterOptions, type DelegationPolicyDeps, type DelegationPolicyFlow, type DelegationPolicyPreview, type DelegationTypedData, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, InvalidUserOperationReceiptError, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type PaymentFetch, type PaymentFetchResult, type PaymentRecord, type PolicyExecutionAdapter, type PolicyExecutionCheck, type PolicyExecutionPreview, type PolicyExecutionRoute, type PolicyExecutionSubmission, type PolicySignatureVerifier, type PreparedPolicyExecution, type RedemptionCodec, type RedemptionRpc, type RedemptionTransaction, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SimulationCallClient, type SimulationTransaction, type SiwxLocation, type SiwxMessageLike, type SiwxResultLike, type SmartAccountOptionsLike, type SmartAccountType, type SolanaIdentity, type SolanaOwnerSigner, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSessionKeyFlow, type SolanaSessionKeyFlowDeps, type SolanaSigner, type SolanaWalletFeatures, type TokenIdentity, type TransactionSimulationContext, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, __resetResolverForTests, addInAppNotification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationFrameworkAdapter, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, createSolanaSessionKeyFlow, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeChain, describePayment, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, fetchUserOperationReceipt, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readDecimals, readSolanaRoles, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };