@naculus/connect-appkit-core 0.9.0 → 0.11.0

package/dist/index.cjs

@@ -44,6 +44,7 @@ __export(src_exports, {
   createNotification: () => createNotification,
   createNotificationSettingsStorage: () => createNotificationSettingsStorage,
   createSolanaSessionKeyFlow: () => createSolanaSessionKeyFlow,
+  createX402WalletSigner: () => createX402WalletSigner,
   decodeRevertReason: () => decodeRevertReason,
   defaultSiwxDomain: () => defaultSiwxDomain,
   defaultSiwxUri: () => defaultSiwxUri,
@@ -56,6 +57,7 @@ __export(src_exports, {
   encodeErc20TransferFrom: () => encodeErc20TransferFrom,
   explainSpend: () => explainSpend,
   fetchUserOperationReceipt: () => fetchUserOperationReceipt,
+  findX402Provider: () => findX402Provider,
   formatAuthorizationAmount: () => formatAuthorizationAmount,
   getResolver: () => getResolver,
   getSharedSessionKeyManager: () => getSharedSessionKeyManager,
@@ -86,6 +88,7 @@ __export(src_exports, {
   resolveRevertReason: () => resolveRevertReason,
   resolveSimulationEndpoint: () => resolveSimulationEndpoint,
   resolveUserOpChain: () => resolveUserOpChain,
+  resolveX402Wallet: () => resolveX402Wallet,
   sameExecutionIntent: () => sameExecutionIntent,
   saveNotificationSettings: () => saveNotificationSettings,
   selectChainCapabilities: () => selectChainCapabilities,
@@ -1381,39 +1384,44 @@ function createDelegationPolicyFlow(deps) {
 
 // src/authorization.ts
 var import_connect_core17 = require("@naculus/connect-core");
-function assetAddress(asset) {
-  return asset.split(/[:/]/).at(-1);
-}
 function groupDigits(value) {
   let out = "";
   for (let i = 0; i < value.length; i++)
     out += (i && (value.length - i) % 3 === 0 ? "," : "") + value[i];
   return out;
 }
-function trimTrailingZeros(value) {
-  let end = value.length;
-  while (value[end - 1] === "0") end--;
-  return value.slice(0, end);
+function trustedMetadata(asset, options) {
+  const trust = !options.trustedAssets ? "unchecked" : options.trustedAssets.some(
+    (t) => canonicalAssetId(t) === canonicalAssetId(asset)
+  ) ? "trusted" : "unverified";
+  return [trust, trust === "unverified" ? void 0 : options.assets?.[asset]];
+}
+function canonicalAssetId(asset) {
+  return asset.replace(
+    /^(eip155:[^/]+\/erc20:)(.+)$/,
+    (_, prefix, reference) => prefix + reference.toLowerCase()
+  );
 }
 function formatAuthorizationAmount(amount, metadata) {
   const baseUnits = amount.toString();
-  if (!metadata || !metadata.symbol || !Number.isSafeInteger(metadata.decimals) || metadata.decimals < 0 || metadata.decimals > 255) {
+  if (!metadata?.symbol || !Number.isSafeInteger(metadata.decimals) || metadata.decimals < 0 || metadata.decimals > 255) {
     return {
       formatted: `${groupDigits(baseUnits)} base units`
     };
   }
   const decimals = metadata.decimals;
   const padded = baseUnits.padStart(decimals + 1, "0");
-  const integer = decimals === 0 ? padded : padded.slice(0, -decimals);
-  const fraction = decimals === 0 ? "" : trimTrailingZeros(padded.slice(-decimals));
-  const value = `${groupDigits(integer)}${fraction ? `.${fraction}` : ""}`;
-  return { formatted: `${value} ${metadata.symbol}` };
+  const integer = padded.slice(0, decimals ? -decimals : void 0);
+  let fraction = decimals ? padded.slice(-decimals) : "";
+  while (fraction.endsWith("0")) fraction = fraction.slice(0, -1);
+  return {
+    formatted: `${groupDigits(integer)}${fraction ? `.${fraction}` : ""} ${metadata.symbol}`
+  };
 }
 function relativeExpiry(expiresAt, now, locale) {
   const seconds = expiresAt - now;
   const absolute = Math.abs(seconds);
-  const divisor = absolute >= 31536e3 ? 31536e3 : absolute >= 2592e3 ? 2592e3 : absolute >= 86400 ? 86400 : absolute >= 3600 ? 3600 : absolute >= 60 ? 60 : 1;
-  const unit = divisor === 31536e3 ? "year" : divisor === 2592e3 ? "month" : divisor === 86400 ? "day" : divisor === 3600 ? "hour" : divisor === 60 ? "minute" : "second";
+  const [divisor, unit] = absolute >= 31536e3 ? [31536e3, "year"] : absolute >= 2592e3 ? [2592e3, "month"] : absolute >= 86400 ? [86400, "day"] : absolute >= 3600 ? [3600, "hour"] : absolute >= 60 ? [60, "minute"] : [1, "second"];
   const value = Math.round(seconds / divisor);
   if (typeof Intl.RelativeTimeFormat !== "function") {
     const count = Math.abs(value);
@@ -1422,6 +1430,25 @@ function relativeExpiry(expiresAt, now, locale) {
   }
   return new Intl.RelativeTimeFormat(locale).format(value, unit);
 }
+function absoluteUtc(timestamp, locale) {
+  return new Intl.DateTimeFormat(locale, {
+    year: "numeric",
+    month: "short",
+    day: "numeric",
+    hour: "2-digit",
+    minute: "2-digit",
+    hourCycle: "h23",
+    timeZone: "UTC",
+    timeZoneName: "short"
+  }).format(timestamp * 1e3);
+}
+function formatPeriodLength(seconds) {
+  const [amount, unit] = seconds % 604800 === 0 ? [seconds / 604800, "week"] : seconds % 86400 === 0 ? [seconds / 86400, "day"] : seconds % 3600 === 0 ? [seconds / 3600, "hour"] : seconds % 60 === 0 ? [seconds / 60, "minute"] : [seconds, "second"];
+  return `${amount} ${unit}${amount === 1 ? "" : "s"}`;
+}
+function formatAuthorizationEnforcement(enforcement) {
+  return enforcement === "on-chain" ? "Limits enforced by the blockchain" : enforcement === "device" ? "Limits enforced by this device" : null;
+}
 function describeAuthorization(input, options = {}) {
   const now = options.now ?? Math.floor(Date.now() / 1e3);
   const locale = options.locale ?? "en";
@@ -1431,10 +1458,11 @@ function describeAuthorization(input, options = {}) {
     label,
     principal: input.principal ?? null,
     grants: input.grants.map((grant) => {
-      const metadata = options.assets?.[grant.asset];
+      const [assetTrust, metadata] = trustedMetadata(grant.asset, options);
       return {
         asset: grant.asset,
-        assetLabel: metadata?.symbol || assetAddress(grant.asset),
+        assetTrust,
+        assetLabel: metadata?.symbol || grant.asset.split(":").at(-1),
         recipients: grant.recipients.map((full) => ({
           shortened: full.length <= 14 ? full : `${full.slice(0, 6)}\u2026${full.slice(-6)}`,
           full
@@ -1442,23 +1470,23 @@ function describeAuthorization(input, options = {}) {
         perPayment: formatAuthorizationAmount(grant.maxPerPayment, metadata),
         total: formatAuthorizationAmount(grant.maxTotal, metadata),
         count: grant.maxCount ?? null,
+        period: grant.period ? {
+          amount: formatAuthorizationAmount(grant.period.amount, metadata),
+          every: formatPeriodLength(grant.period.seconds),
+          startsAt: absoluteUtc(grant.period.start, locale)
+        } : null,
         rails: grant.rails.map((r) => r.replace("-", " "))
       };
     }),
     expiry: {
       timestamp: input.expiresAt,
-      absolute: new Intl.DateTimeFormat(locale, {
-        year: "numeric",
-        month: "short",
-        day: "numeric",
-        hour: "2-digit",
-        minute: "2-digit",
-        hourCycle: "h23",
-        timeZone: "UTC",
-        timeZoneName: "short"
-      }).format(input.expiresAt * 1e3),
+      absolute: absoluteUtc(input.expiresAt, locale),
       relative: relativeExpiry(input.expiresAt, now, locale)
     },
+    enforcement: options.enforcement ?? null,
+    enforcementLabel: formatAuthorizationEnforcement(
+      options.enforcement ?? null
+    ),
     warnings: flags.map(
       (flag) => flag === "unrestricted-recipient-legacy" ? "This key can pay any recipient." : "This key can do more than shown here."
     )
@@ -1472,6 +1500,7 @@ var REFUSAL_SENTENCES = {
   "over-per-payment": "This amount exceeds the per-payment limit.",
   "over-total": "This amount exceeds the remaining total limit.",
   "over-count": "This authorization has reached its payment count limit.",
+  "period-limit-exceeded": "This amount exceeds the limit for the current period.",
   "rail-not-allowed": "This payment rail is not allowed.",
   "invalid-authorization": "The authorization or spend request is invalid."
 };
@@ -1487,7 +1516,7 @@ function explainSpend(authorization, request, options = {}) {
   const remainingTotal = authorization.grants[verdict.grant].maxTotal - request.spentSoFar - request.amount;
   const remainingTotalFormatted = formatAuthorizationAmount(
     remainingTotal,
-    options.assets?.[authorization.grants[verdict.grant].asset]
+    trustedMetadata(authorization.grants[verdict.grant].asset, options)[1]
   );
   return {
     allowed: true,
@@ -1569,6 +1598,57 @@ function describePayment(input, result) {
   };
 }
 
+// src/x402-wallet.ts
+var import_connect_core18 = require("@naculus/connect-core");
+var import_payments_x402 = require("@naculus/payments-x402");
+function findX402Provider(session, sources) {
+  if (!session) return null;
+  if (session.walletType === "eip6963" || session.id.startsWith("eip6963-")) {
+    return sources.injected?.find((wallet) => wallet.id === session.walletId)?.provider ?? null;
+  }
+  if (session.walletType === "walletconnect") {
+    return sources.walletConnect ?? null;
+  }
+  return null;
+}
+function unavailable(reason) {
+  return { provider: null, address: null, reason };
+}
+function resolveX402Wallet(session, provider) {
+  if (!session) return unavailable("no-session");
+  const namespace = session.namespaces.eip155;
+  if (!namespace) return unavailable("not-evm");
+  const isInjected = session.walletType === "eip6963" || session.id.startsWith("eip6963-");
+  const isWalletConnect = session.walletType === "walletconnect";
+  if (!isInjected && !isWalletConnect || !provider?.request) {
+    return unavailable("unsupported-wallet-type");
+  }
+  for (const account of namespace.accounts) {
+    const parsed = (0, import_connect_core18.parseCaip10)(account);
+    const address = parsed?.namespace === "eip155" ? parsed.address : account;
+    if ((0, import_connect_core18.isEvmAddress)(address)) {
+      return {
+        provider,
+        address,
+        reason: null
+      };
+    }
+  }
+  return unavailable("not-evm");
+}
+function createX402WalletSigner(session, provider, switchChain) {
+  const resolved = resolveX402Wallet(session, provider);
+  if (resolved.reason) return { signer: null, reason: resolved.reason };
+  return {
+    signer: (0, import_payments_x402.walletX402Signer)({
+      provider: resolved.provider,
+      address: resolved.address,
+      switchChain
+    }),
+    reason: null
+  };
+}
+
 // src/mpp-session.ts
 function record2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
@@ -1600,11 +1680,11 @@ function readMppRecoveryChannelId(error) {
 }
 
 // src/solana-session-key.ts
-var import_connect_core18 = require("@naculus/connect-core");
+var import_connect_core19 = require("@naculus/connect-core");
 function send(rpc) {
   const sendTransaction = rpc.sendTransaction;
   if (!sendTransaction) {
-    throw new import_connect_core18.WalletError(
+    throw new import_connect_core19.WalletError(
       "invalid_input",
       "The Solana RPC must implement sendTransaction to approve or revoke."
     );
@@ -1642,7 +1722,7 @@ function createSolanaSessionKeyFlow(deps) {
       } catch (cause) {
         await manager.revoke(draft.id).catch(() => {
         });
-        throw new import_connect_core18.WalletError(
+        throw new import_connect_core19.WalletError(
           "rpc_error",
           `The approval could not be confirmed as sent (${cause instanceof Error ? cause.message : String(cause)}); the key is revoked here. Call revoke("${draft.id}") to send the on-chain Revoke in case it landed.`
         );
@@ -1653,7 +1733,7 @@ function createSolanaSessionKeyFlow(deps) {
     async revoke(id) {
       const key = (await list()).find((k) => k.id === id);
       if (!key) {
-        throw new import_connect_core18.WalletError(
+        throw new import_connect_core19.WalletError(
           "invalid_input",
           `No Solana session key ${id} for this owner.`
         );
@@ -1665,7 +1745,7 @@ function createSolanaSessionKeyFlow(deps) {
         rpc
       );
       const signed = await owner.signTransaction(transaction);
-      const revocation = (0, import_connect_core18.verifySignedOwnerTransaction)(signed, {
+      const revocation = (0, import_connect_core19.verifySignedOwnerTransaction)(signed, {
         kind: "revoke",
         revocation: {
           owner: key.owner,
@@ -1680,7 +1760,7 @@ function createSolanaSessionKeyFlow(deps) {
 }
 
 // src/web3-store.ts
-var import_connect_core19 = require("@naculus/connect-core");
+var import_connect_core20 = require("@naculus/connect-core");
 function withTimeout(promise, ms, label = "Operation") {
   let timeoutId;
   const timeout = new Promise((_, reject) => {
@@ -1702,7 +1782,7 @@ async function withRetry(fn, options) {
       lastError = error;
       if (attempt < options.maxRetries) {
         const delay = options.baseDelay * 2 ** attempt;
-        import_connect_core19.logger.warn(
+        import_connect_core20.logger.warn(
           "appkit/core",
           `Retry attempt ${attempt + 1}/${options.maxRetries} after ${delay}ms`
         );
@@ -1840,6 +1920,7 @@ function siwxResultToSession(result, now = /* @__PURE__ */ new Date()) {
   createNotification,
   createNotificationSettingsStorage,
   createSolanaSessionKeyFlow,
+  createX402WalletSigner,
   decodeRevertReason,
   defaultSiwxDomain,
   defaultSiwxUri,
@@ -1852,6 +1933,7 @@ function siwxResultToSession(result, now = /* @__PURE__ */ new Date()) {
   encodeErc20TransferFrom,
   explainSpend,
   fetchUserOperationReceipt,
+  findX402Provider,
   formatAuthorizationAmount,
   getResolver,
   getSharedSessionKeyManager,
@@ -1882,6 +1964,7 @@ function siwxResultToSession(result, now = /* @__PURE__ */ new Date()) {
   resolveRevertReason,
   resolveSimulationEndpoint,
   resolveUserOpChain,
+  resolveX402Wallet,
   sameExecutionIntent,
   saveNotificationSettings,
   selectChainCapabilities,