@naculus/connect-appkit-core 0.9.0 → 0.11.0

package/dist/index.d.cts

@@ -1,4 +1,6 @@
 import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, SimulationResult, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem, SessionKeyManagerConfig, SessionKeyManager, Hex, UserOperationReceipt, Address, SmartAccountConfig, AtomicityRequirement, ExecutionPlan, SessionKeyInfo, SessionKeyTransaction, delegationTypedData, SessionKeyScope, ScopeCheckResult, SpendRefusal, Authorization, ListedAuthorization, SpendRequest, SettlementVerification, SolanaSessionKeyInfo, SolanaSessionKeyScope, SolanaSessionKeyManager, SolanaPaymentRpc } from '@naculus/connect-core';
+import { X402TypedDataSigner } from '@naculus/payments-x402';
+export { X402TypedDataSigner } from '@naculus/payments-x402';
 
 /**
  * The types the framework-neutral half of appkit is built on.
@@ -861,9 +863,12 @@ interface AuthorizationAssetMetadata {
 }
 interface DescribeAuthorizationOptions {
     assets?: Record<AssetId, AuthorizationAssetMetadata>;
+    trustedAssets?: readonly string[];
     locale?: string;
     /** Unix timestamp in seconds. */
     now?: number;
+    /** Enforcement reported by a successful authorization compile result. */
+    enforcement?: "on-chain" | "device";
 }
 interface AuthorizationRecipientView {
     shortened: string;
@@ -874,11 +879,17 @@ interface AuthorizationAmountView {
 }
 interface AuthorizationGrantView {
     asset: AssetId;
+    assetTrust: "trusted" | "unverified" | "unchecked";
     assetLabel: string;
     recipients: AuthorizationRecipientView[];
     perPayment: AuthorizationAmountView;
     total: AuthorizationAmountView;
     count: number | null;
+    period: {
+        amount: AuthorizationAmountView;
+        every: string;
+        startsAt: string;
+    } | null;
     rails: string[];
 }
 interface AuthorizationExpiryView {
@@ -891,6 +902,8 @@ interface AuthorizationDescription {
     principal: string | null;
     grants: AuthorizationGrantView[];
     expiry: AuthorizationExpiryView;
+    enforcement: "on-chain" | "device" | null;
+    enforcementLabel: string | null;
     warnings: string[];
 }
 declare function formatAuthorizationAmount(amount: bigint, metadata: AuthorizationAssetMetadata | undefined): AuthorizationAmountView;
@@ -972,6 +985,53 @@ declare function applySettlementVerification(payment: PaymentRecord, result: Set
  */
 declare function describePayment(input: RequestInfo | URL, result: PaymentFetchResult): PaymentRecord | null;
 
+type X402SignerUnavailableReason = "no-session" | "not-evm" | "unsupported-wallet-type";
+interface X402Eip1193Provider {
+    request(args: {
+        method: string;
+        params?: unknown[];
+    }): Promise<unknown>;
+}
+type X402WalletResolution = {
+    provider: X402Eip1193Provider;
+    address: `0x${string}`;
+    reason: null;
+} | {
+    provider: null;
+    address: null;
+    reason: X402SignerUnavailableReason;
+};
+/** Where a session's EIP-1193 provider can come from; each framework supplies its own. */
+interface X402ProviderSources {
+    /** EIP-6963 wallets discovered on the page (`eip6963Connector.getDiscoveredWallets()`). */
+    injected?: readonly {
+        id: string;
+        provider: X402Eip1193Provider;
+    }[];
+    /** The WalletConnect connector, whose `request` routes to its last session. */
+    walletConnect?: X402Eip1193Provider | null;
+}
+/**
+ * The provider that belongs to `session`, chosen by the session's wallet
+ * type (never by connector identity): the injected wallet the session was
+ * made with, or the WalletConnect connector. Null for anything else.
+ */
+declare function findX402Provider(session: UniversalWalletSession | null | undefined, sources: X402ProviderSources): X402Eip1193Provider | null;
+interface X402SignerResolution {
+    signer: X402TypedDataSigner | null;
+    reason: X402SignerUnavailableReason | null;
+}
+/**
+ * Resolve the connected EVM payer without coupling appkit-core to a connector.
+ *
+ * Framework bindings supply the EIP-1193 request facade owned by the active
+ * session. Classification remains session-based: connector identity is never
+ * used as a routing input.
+ */
+declare function resolveX402Wallet(session: UniversalWalletSession | null | undefined, provider: X402Eip1193Provider | null | undefined): X402WalletResolution;
+/** Build the signer after applying the shared session-routing policy. */
+declare function createX402WalletSigner(session: UniversalWalletSession | null | undefined, provider: X402Eip1193Provider | null | undefined, switchChain: (chainId: string) => Promise<void>): X402SignerResolution;
+
 /** Request options accepted by a caller-built MPP session fetch. */
 interface MppSessionRequestInit extends RequestInit {
     units?: bigint;
@@ -1152,4 +1212,4 @@ declare function siwxResultToSession<M extends SiwxMessageLike>(result: SiwxResu
     refreshedAt: null;
 };
 
-export { type AddressValidationLevel, type AssetId, type AtomicSupport, type AuthorizationAmountView, type AuthorizationAssetMetadata, type AuthorizationDescription, type AuthorizationExpiryView, type AuthorizationGrantView, type AuthorizationRecipientView, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, DEFAULT_VERIFY_RETRY, type DecimalsCache, type DelegationFrameworkAdapterOptions, type DelegationPolicyDeps, type DelegationPolicyFlow, type DelegationPolicyPreview, type DelegationTypedData, type DescribeAuthorizationOptions, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, InvalidUserOperationReceiptError, type MppSessionChannel, type MppSessionFetch, type MppSessionFetchResult, type MppSessionForceCloseResult, type MppSessionMeter, type MppSessionReceipt, type MppSessionRequest, type MppSessionRequestInit, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type NotificationSettingsUpdate, type PaymentFetch, type PaymentFetchResult, type PaymentRecord, type PaymentVerification, type PaymentVerificationStatus, type PolicyExecutionAdapter, type PolicyExecutionCheck, type PolicyExecutionPreview, type PolicyExecutionRoute, type PolicyExecutionSubmission, type PolicySignatureVerifier, type PreparedPolicyExecution, type RedemptionCodec, type RedemptionRpc, type RedemptionTransaction, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SimulationCallClient, type SimulationTransaction, type SiwxLocation, type SiwxMessageLike, type SiwxResultLike, type SmartAccountOptionsLike, type SmartAccountType, type SolanaIdentity, type SolanaOwnerSigner, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSessionKeyFlow, type SolanaSessionKeyFlowDeps, type SolanaSigner, type SolanaWalletFeatures, type SpendExplanation, type TokenIdentity, type TransactionSimulationContext, type VerifyRetryOptions, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, __resetResolverForTests, addInAppNotification, applySettlementVerification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationFrameworkAdapter, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, createSolanaSessionKeyFlow, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeAuthorization, describeChain, describePayment, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, explainSpend, fetchUserOperationReceipt, formatAuthorizationAmount, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readCurrentMppSessionChannel, readDecimals, readMppRecoveryChannelId, readMppSessionChannel, readMppSessionReceipt, readSolanaRoles, replayNotificationSettings, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };
+export { type AddressValidationLevel, type AssetId, type AtomicSupport, type AuthorizationAmountView, type AuthorizationAssetMetadata, type AuthorizationDescription, type AuthorizationExpiryView, type AuthorizationGrantView, type AuthorizationRecipientView, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, DEFAULT_VERIFY_RETRY, type DecimalsCache, type DelegationFrameworkAdapterOptions, type DelegationPolicyDeps, type DelegationPolicyFlow, type DelegationPolicyPreview, type DelegationTypedData, type DescribeAuthorizationOptions, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, InvalidUserOperationReceiptError, type MppSessionChannel, type MppSessionFetch, type MppSessionFetchResult, type MppSessionForceCloseResult, type MppSessionMeter, type MppSessionReceipt, type MppSessionRequest, type MppSessionRequestInit, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type NotificationSettingsUpdate, type PaymentFetch, type PaymentFetchResult, type PaymentRecord, type PaymentVerification, type PaymentVerificationStatus, type PolicyExecutionAdapter, type PolicyExecutionCheck, type PolicyExecutionPreview, type PolicyExecutionRoute, type PolicyExecutionSubmission, type PolicySignatureVerifier, type PreparedPolicyExecution, type RedemptionCodec, type RedemptionRpc, type RedemptionTransaction, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SimulationCallClient, type SimulationTransaction, type SiwxLocation, type SiwxMessageLike, type SiwxResultLike, type SmartAccountOptionsLike, type SmartAccountType, type SolanaIdentity, type SolanaOwnerSigner, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSessionKeyFlow, type SolanaSessionKeyFlowDeps, type SolanaSigner, type SolanaWalletFeatures, type SpendExplanation, type TokenIdentity, type TransactionSimulationContext, type VerifyRetryOptions, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, type X402Eip1193Provider, type X402ProviderSources, type X402SignerResolution, type X402SignerUnavailableReason, type X402WalletResolution, __resetResolverForTests, addInAppNotification, applySettlementVerification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationFrameworkAdapter, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, createSolanaSessionKeyFlow, createX402WalletSigner, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeAuthorization, describeChain, describePayment, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, explainSpend, fetchUserOperationReceipt, findX402Provider, formatAuthorizationAmount, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readCurrentMppSessionChannel, readDecimals, readMppRecoveryChannelId, readMppSessionChannel, readMppSessionReceipt, readSolanaRoles, replayNotificationSettings, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, resolveX402Wallet, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };

package/dist/index.d.ts

@@ -1,4 +1,6 @@
 import { Namespace, UniversalWalletSession, WalletCapabilities, TokenConfig, WalletError, WalletErrorCode, SimulationResult, NameResolverConfig, NameResolver, NotificationSettings, InAppChannel, NotificationItem, SessionKeyManagerConfig, SessionKeyManager, Hex, UserOperationReceipt, Address, SmartAccountConfig, AtomicityRequirement, ExecutionPlan, SessionKeyInfo, SessionKeyTransaction, delegationTypedData, SessionKeyScope, ScopeCheckResult, SpendRefusal, Authorization, ListedAuthorization, SpendRequest, SettlementVerification, SolanaSessionKeyInfo, SolanaSessionKeyScope, SolanaSessionKeyManager, SolanaPaymentRpc } from '@naculus/connect-core';
+import { X402TypedDataSigner } from '@naculus/payments-x402';
+export { X402TypedDataSigner } from '@naculus/payments-x402';
 
 /**
  * The types the framework-neutral half of appkit is built on.
@@ -861,9 +863,12 @@ interface AuthorizationAssetMetadata {
 }
 interface DescribeAuthorizationOptions {
     assets?: Record<AssetId, AuthorizationAssetMetadata>;
+    trustedAssets?: readonly string[];
     locale?: string;
     /** Unix timestamp in seconds. */
     now?: number;
+    /** Enforcement reported by a successful authorization compile result. */
+    enforcement?: "on-chain" | "device";
 }
 interface AuthorizationRecipientView {
     shortened: string;
@@ -874,11 +879,17 @@ interface AuthorizationAmountView {
 }
 interface AuthorizationGrantView {
     asset: AssetId;
+    assetTrust: "trusted" | "unverified" | "unchecked";
     assetLabel: string;
     recipients: AuthorizationRecipientView[];
     perPayment: AuthorizationAmountView;
     total: AuthorizationAmountView;
     count: number | null;
+    period: {
+        amount: AuthorizationAmountView;
+        every: string;
+        startsAt: string;
+    } | null;
     rails: string[];
 }
 interface AuthorizationExpiryView {
@@ -891,6 +902,8 @@ interface AuthorizationDescription {
     principal: string | null;
     grants: AuthorizationGrantView[];
     expiry: AuthorizationExpiryView;
+    enforcement: "on-chain" | "device" | null;
+    enforcementLabel: string | null;
     warnings: string[];
 }
 declare function formatAuthorizationAmount(amount: bigint, metadata: AuthorizationAssetMetadata | undefined): AuthorizationAmountView;
@@ -972,6 +985,53 @@ declare function applySettlementVerification(payment: PaymentRecord, result: Set
  */
 declare function describePayment(input: RequestInfo | URL, result: PaymentFetchResult): PaymentRecord | null;
 
+type X402SignerUnavailableReason = "no-session" | "not-evm" | "unsupported-wallet-type";
+interface X402Eip1193Provider {
+    request(args: {
+        method: string;
+        params?: unknown[];
+    }): Promise<unknown>;
+}
+type X402WalletResolution = {
+    provider: X402Eip1193Provider;
+    address: `0x${string}`;
+    reason: null;
+} | {
+    provider: null;
+    address: null;
+    reason: X402SignerUnavailableReason;
+};
+/** Where a session's EIP-1193 provider can come from; each framework supplies its own. */
+interface X402ProviderSources {
+    /** EIP-6963 wallets discovered on the page (`eip6963Connector.getDiscoveredWallets()`). */
+    injected?: readonly {
+        id: string;
+        provider: X402Eip1193Provider;
+    }[];
+    /** The WalletConnect connector, whose `request` routes to its last session. */
+    walletConnect?: X402Eip1193Provider | null;
+}
+/**
+ * The provider that belongs to `session`, chosen by the session's wallet
+ * type (never by connector identity): the injected wallet the session was
+ * made with, or the WalletConnect connector. Null for anything else.
+ */
+declare function findX402Provider(session: UniversalWalletSession | null | undefined, sources: X402ProviderSources): X402Eip1193Provider | null;
+interface X402SignerResolution {
+    signer: X402TypedDataSigner | null;
+    reason: X402SignerUnavailableReason | null;
+}
+/**
+ * Resolve the connected EVM payer without coupling appkit-core to a connector.
+ *
+ * Framework bindings supply the EIP-1193 request facade owned by the active
+ * session. Classification remains session-based: connector identity is never
+ * used as a routing input.
+ */
+declare function resolveX402Wallet(session: UniversalWalletSession | null | undefined, provider: X402Eip1193Provider | null | undefined): X402WalletResolution;
+/** Build the signer after applying the shared session-routing policy. */
+declare function createX402WalletSigner(session: UniversalWalletSession | null | undefined, provider: X402Eip1193Provider | null | undefined, switchChain: (chainId: string) => Promise<void>): X402SignerResolution;
+
 /** Request options accepted by a caller-built MPP session fetch. */
 interface MppSessionRequestInit extends RequestInit {
     units?: bigint;
@@ -1152,4 +1212,4 @@ declare function siwxResultToSession<M extends SiwxMessageLike>(result: SiwxResu
     refreshedAt: null;
 };
 
-export { type AddressValidationLevel, type AssetId, type AtomicSupport, type AuthorizationAmountView, type AuthorizationAssetMetadata, type AuthorizationDescription, type AuthorizationExpiryView, type AuthorizationGrantView, type AuthorizationRecipientView, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, DEFAULT_VERIFY_RETRY, type DecimalsCache, type DelegationFrameworkAdapterOptions, type DelegationPolicyDeps, type DelegationPolicyFlow, type DelegationPolicyPreview, type DelegationTypedData, type DescribeAuthorizationOptions, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, InvalidUserOperationReceiptError, type MppSessionChannel, type MppSessionFetch, type MppSessionFetchResult, type MppSessionForceCloseResult, type MppSessionMeter, type MppSessionReceipt, type MppSessionRequest, type MppSessionRequestInit, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type NotificationSettingsUpdate, type PaymentFetch, type PaymentFetchResult, type PaymentRecord, type PaymentVerification, type PaymentVerificationStatus, type PolicyExecutionAdapter, type PolicyExecutionCheck, type PolicyExecutionPreview, type PolicyExecutionRoute, type PolicyExecutionSubmission, type PolicySignatureVerifier, type PreparedPolicyExecution, type RedemptionCodec, type RedemptionRpc, type RedemptionTransaction, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SimulationCallClient, type SimulationTransaction, type SiwxLocation, type SiwxMessageLike, type SiwxResultLike, type SmartAccountOptionsLike, type SmartAccountType, type SolanaIdentity, type SolanaOwnerSigner, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSessionKeyFlow, type SolanaSessionKeyFlowDeps, type SolanaSigner, type SolanaWalletFeatures, type SpendExplanation, type TokenIdentity, type TransactionSimulationContext, type VerifyRetryOptions, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, __resetResolverForTests, addInAppNotification, applySettlementVerification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationFrameworkAdapter, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, createSolanaSessionKeyFlow, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeAuthorization, describeChain, describePayment, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, explainSpend, fetchUserOperationReceipt, formatAuthorizationAmount, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readCurrentMppSessionChannel, readDecimals, readMppRecoveryChannelId, readMppSessionChannel, readMppSessionReceipt, readSolanaRoles, replayNotificationSettings, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };
+export { type AddressValidationLevel, type AssetId, type AtomicSupport, type AuthorizationAmountView, type AuthorizationAssetMetadata, type AuthorizationDescription, type AuthorizationExpiryView, type AuthorizationGrantView, type AuthorizationRecipientView, type ChainCapabilities, type ChainInfo, type CompareCosts, type CompareCostsInput, type ConnectionStatus, type CostComparison, type CostComparisonOperation, type CostComparisonOptions, DEFAULT_NOTIFICATION_SETTINGS, DEFAULT_VERIFY_RETRY, type DecimalsCache, type DelegationFrameworkAdapterOptions, type DelegationPolicyDeps, type DelegationPolicyFlow, type DelegationPolicyPreview, type DelegationTypedData, type DescribeAuthorizationOptions, type DestinationIssue, type DestinationValidation, type ExecutableQuote, type ExecuteRoute, type ExecuteRouteError, type ExecuteRouteOptions, type ExecuteRouteResult, type GetRouteQuotes, InvalidUserOperationReceiptError, type MppSessionChannel, type MppSessionFetch, type MppSessionFetchResult, type MppSessionForceCloseResult, type MppSessionMeter, type MppSessionReceipt, type MppSessionRequest, type MppSessionRequestInit, NOTIFICATION_SETTINGS_KEY, type NotificationSettingsStorage, type NotificationSettingsUpdate, type PaymentFetch, type PaymentFetchResult, type PaymentRecord, type PaymentVerification, type PaymentVerificationStatus, type PolicyExecutionAdapter, type PolicyExecutionCheck, type PolicyExecutionPreview, type PolicyExecutionRoute, type PolicyExecutionSubmission, type PolicySignatureVerifier, type PreparedPolicyExecution, type RedemptionCodec, type RedemptionRpc, type RedemptionTransaction, type RetryOptions, type RouteQuote, type RouteQuoteInput, type RouteQuoteOptions, type SimulationCallClient, type SimulationTransaction, type SiwxLocation, type SiwxMessageLike, type SiwxResultLike, type SmartAccountOptionsLike, type SmartAccountType, type SolanaIdentity, type SolanaOwnerSigner, type SolanaPayer, type SolanaRoles, type SolanaRolesAbsence, type SolanaRolesSource, type SolanaRolesState, type SolanaSessionKeyFlow, type SolanaSessionKeyFlowDeps, type SolanaSigner, type SolanaWalletFeatures, type SpendExplanation, type TokenIdentity, type TransactionSimulationContext, type VerifyRetryOptions, type ViemChainShape, type WalletChain, type Web3Action, type Web3State, type X402Eip1193Provider, type X402ProviderSources, type X402SignerResolution, type X402SignerUnavailableReason, type X402WalletResolution, __resetResolverForTests, addInAppNotification, applySettlementVerification, assertHexSignature, atomicSupportFor, bareEvmAddress, buildDelegationPolicyMessage, buildSmartAccountConfig, chainNamespace, chainNumber, chainsForNamespace, channelsUpdate, clearOneInAppNotification, compareCostsKey, createDecimalsCache, createDelegationFrameworkAdapter, createDelegationPolicyFlow, createNotification, createNotificationSettingsStorage, createSolanaSessionKeyFlow, createX402WalletSigner, decodeRevertReason, defaultSiwxDomain, defaultSiwxUri, describeAuthorization, describeChain, describePayment, eip155ChainIdToNumber, encodeErc20Approve, encodeErc20Transfer, encodeErc20TransferFrom, explainSpend, fetchUserOperationReceipt, findX402Provider, formatAuthorizationAmount, getResolver, getSharedSessionKeyManager, initialWeb3State, isBurnDestination, isEvmChainId, isPositiveIntegerAmount, isQuotableInput, isSiwxExpired, isSiwxNotBeforeValid, isVerifiablePolicy, loadNotificationSettings, mutedChainSettings, normalizeCapabilities, normalizeEip155ChainId, parseUserOperationReceipt, readCurrentMppSessionChannel, readDecimals, readMppRecoveryChannelId, readMppSessionChannel, readMppSessionReceipt, readSolanaRoles, replayNotificationSettings, resetSharedSessionKeyManager, resolveChain, resolveContextSimulationEndpoint, resolveEvmChainId, resolveRevertReason, resolveSimulationEndpoint, resolveUserOpChain, resolveX402Wallet, sameExecutionIntent, saveNotificationSettings, selectChainCapabilities, sessionKeyConfigFingerprint, simulateTransactionPreview, siwxResultToSession, toChainSwitchError, toEip155Accounts, toExecuteRouteError, toViemChain, tokenChainMismatch, tokenKey, updateNotificationSettings, validateDestination, validateRouteRecipient, web3Reducer, withRetry, withTimeout, writeDecimals };

package/dist/index.js

@@ -1300,39 +1300,44 @@ function createDelegationPolicyFlow(deps) {
 import {
   evaluateSpend
 } from "@naculus/connect-core";
-function assetAddress(asset) {
-  return asset.split(/[:/]/).at(-1);
-}
 function groupDigits(value) {
   let out = "";
   for (let i = 0; i < value.length; i++)
     out += (i && (value.length - i) % 3 === 0 ? "," : "") + value[i];
   return out;
 }
-function trimTrailingZeros(value) {
-  let end = value.length;
-  while (value[end - 1] === "0") end--;
-  return value.slice(0, end);
+function trustedMetadata(asset, options) {
+  const trust = !options.trustedAssets ? "unchecked" : options.trustedAssets.some(
+    (t) => canonicalAssetId(t) === canonicalAssetId(asset)
+  ) ? "trusted" : "unverified";
+  return [trust, trust === "unverified" ? void 0 : options.assets?.[asset]];
+}
+function canonicalAssetId(asset) {
+  return asset.replace(
+    /^(eip155:[^/]+\/erc20:)(.+)$/,
+    (_, prefix, reference) => prefix + reference.toLowerCase()
+  );
 }
 function formatAuthorizationAmount(amount, metadata) {
   const baseUnits = amount.toString();
-  if (!metadata || !metadata.symbol || !Number.isSafeInteger(metadata.decimals) || metadata.decimals < 0 || metadata.decimals > 255) {
+  if (!metadata?.symbol || !Number.isSafeInteger(metadata.decimals) || metadata.decimals < 0 || metadata.decimals > 255) {
     return {
       formatted: `${groupDigits(baseUnits)} base units`
     };
   }
   const decimals = metadata.decimals;
   const padded = baseUnits.padStart(decimals + 1, "0");
-  const integer = decimals === 0 ? padded : padded.slice(0, -decimals);
-  const fraction = decimals === 0 ? "" : trimTrailingZeros(padded.slice(-decimals));
-  const value = `${groupDigits(integer)}${fraction ? `.${fraction}` : ""}`;
-  return { formatted: `${value} ${metadata.symbol}` };
+  const integer = padded.slice(0, decimals ? -decimals : void 0);
+  let fraction = decimals ? padded.slice(-decimals) : "";
+  while (fraction.endsWith("0")) fraction = fraction.slice(0, -1);
+  return {
+    formatted: `${groupDigits(integer)}${fraction ? `.${fraction}` : ""} ${metadata.symbol}`
+  };
 }
 function relativeExpiry(expiresAt, now, locale) {
   const seconds = expiresAt - now;
   const absolute = Math.abs(seconds);
-  const divisor = absolute >= 31536e3 ? 31536e3 : absolute >= 2592e3 ? 2592e3 : absolute >= 86400 ? 86400 : absolute >= 3600 ? 3600 : absolute >= 60 ? 60 : 1;
-  const unit = divisor === 31536e3 ? "year" : divisor === 2592e3 ? "month" : divisor === 86400 ? "day" : divisor === 3600 ? "hour" : divisor === 60 ? "minute" : "second";
+  const [divisor, unit] = absolute >= 31536e3 ? [31536e3, "year"] : absolute >= 2592e3 ? [2592e3, "month"] : absolute >= 86400 ? [86400, "day"] : absolute >= 3600 ? [3600, "hour"] : absolute >= 60 ? [60, "minute"] : [1, "second"];
   const value = Math.round(seconds / divisor);
   if (typeof Intl.RelativeTimeFormat !== "function") {
     const count = Math.abs(value);
@@ -1341,6 +1346,25 @@ function relativeExpiry(expiresAt, now, locale) {
   }
   return new Intl.RelativeTimeFormat(locale).format(value, unit);
 }
+function absoluteUtc(timestamp, locale) {
+  return new Intl.DateTimeFormat(locale, {
+    year: "numeric",
+    month: "short",
+    day: "numeric",
+    hour: "2-digit",
+    minute: "2-digit",
+    hourCycle: "h23",
+    timeZone: "UTC",
+    timeZoneName: "short"
+  }).format(timestamp * 1e3);
+}
+function formatPeriodLength(seconds) {
+  const [amount, unit] = seconds % 604800 === 0 ? [seconds / 604800, "week"] : seconds % 86400 === 0 ? [seconds / 86400, "day"] : seconds % 3600 === 0 ? [seconds / 3600, "hour"] : seconds % 60 === 0 ? [seconds / 60, "minute"] : [seconds, "second"];
+  return `${amount} ${unit}${amount === 1 ? "" : "s"}`;
+}
+function formatAuthorizationEnforcement(enforcement) {
+  return enforcement === "on-chain" ? "Limits enforced by the blockchain" : enforcement === "device" ? "Limits enforced by this device" : null;
+}
 function describeAuthorization(input, options = {}) {
   const now = options.now ?? Math.floor(Date.now() / 1e3);
   const locale = options.locale ?? "en";
@@ -1350,10 +1374,11 @@ function describeAuthorization(input, options = {}) {
     label,
     principal: input.principal ?? null,
     grants: input.grants.map((grant) => {
-      const metadata = options.assets?.[grant.asset];
+      const [assetTrust, metadata] = trustedMetadata(grant.asset, options);
       return {
         asset: grant.asset,
-        assetLabel: metadata?.symbol || assetAddress(grant.asset),
+        assetTrust,
+        assetLabel: metadata?.symbol || grant.asset.split(":").at(-1),
         recipients: grant.recipients.map((full) => ({
           shortened: full.length <= 14 ? full : `${full.slice(0, 6)}\u2026${full.slice(-6)}`,
           full
@@ -1361,23 +1386,23 @@ function describeAuthorization(input, options = {}) {
         perPayment: formatAuthorizationAmount(grant.maxPerPayment, metadata),
         total: formatAuthorizationAmount(grant.maxTotal, metadata),
         count: grant.maxCount ?? null,
+        period: grant.period ? {
+          amount: formatAuthorizationAmount(grant.period.amount, metadata),
+          every: formatPeriodLength(grant.period.seconds),
+          startsAt: absoluteUtc(grant.period.start, locale)
+        } : null,
         rails: grant.rails.map((r) => r.replace("-", " "))
       };
     }),
     expiry: {
       timestamp: input.expiresAt,
-      absolute: new Intl.DateTimeFormat(locale, {
-        year: "numeric",
-        month: "short",
-        day: "numeric",
-        hour: "2-digit",
-        minute: "2-digit",
-        hourCycle: "h23",
-        timeZone: "UTC",
-        timeZoneName: "short"
-      }).format(input.expiresAt * 1e3),
+      absolute: absoluteUtc(input.expiresAt, locale),
       relative: relativeExpiry(input.expiresAt, now, locale)
     },
+    enforcement: options.enforcement ?? null,
+    enforcementLabel: formatAuthorizationEnforcement(
+      options.enforcement ?? null
+    ),
     warnings: flags.map(
       (flag) => flag === "unrestricted-recipient-legacy" ? "This key can pay any recipient." : "This key can do more than shown here."
     )
@@ -1391,6 +1416,7 @@ var REFUSAL_SENTENCES = {
   "over-per-payment": "This amount exceeds the per-payment limit.",
   "over-total": "This amount exceeds the remaining total limit.",
   "over-count": "This authorization has reached its payment count limit.",
+  "period-limit-exceeded": "This amount exceeds the limit for the current period.",
   "rail-not-allowed": "This payment rail is not allowed.",
   "invalid-authorization": "The authorization or spend request is invalid."
 };
@@ -1406,7 +1432,7 @@ function explainSpend(authorization, request, options = {}) {
   const remainingTotal = authorization.grants[verdict.grant].maxTotal - request.spentSoFar - request.amount;
   const remainingTotalFormatted = formatAuthorizationAmount(
     remainingTotal,
-    options.assets?.[authorization.grants[verdict.grant].asset]
+    trustedMetadata(authorization.grants[verdict.grant].asset, options)[1]
   );
   return {
     allowed: true,
@@ -1488,6 +1514,62 @@ function describePayment(input, result) {
   };
 }
 
+// src/x402-wallet.ts
+import {
+  isEvmAddress as isEvmAddress2,
+  parseCaip10
+} from "@naculus/connect-core";
+import {
+  walletX402Signer
+} from "@naculus/payments-x402";
+function findX402Provider(session, sources) {
+  if (!session) return null;
+  if (session.walletType === "eip6963" || session.id.startsWith("eip6963-")) {
+    return sources.injected?.find((wallet) => wallet.id === session.walletId)?.provider ?? null;
+  }
+  if (session.walletType === "walletconnect") {
+    return sources.walletConnect ?? null;
+  }
+  return null;
+}
+function unavailable(reason) {
+  return { provider: null, address: null, reason };
+}
+function resolveX402Wallet(session, provider) {
+  if (!session) return unavailable("no-session");
+  const namespace = session.namespaces.eip155;
+  if (!namespace) return unavailable("not-evm");
+  const isInjected = session.walletType === "eip6963" || session.id.startsWith("eip6963-");
+  const isWalletConnect = session.walletType === "walletconnect";
+  if (!isInjected && !isWalletConnect || !provider?.request) {
+    return unavailable("unsupported-wallet-type");
+  }
+  for (const account of namespace.accounts) {
+    const parsed = parseCaip10(account);
+    const address = parsed?.namespace === "eip155" ? parsed.address : account;
+    if (isEvmAddress2(address)) {
+      return {
+        provider,
+        address,
+        reason: null
+      };
+    }
+  }
+  return unavailable("not-evm");
+}
+function createX402WalletSigner(session, provider, switchChain) {
+  const resolved = resolveX402Wallet(session, provider);
+  if (resolved.reason) return { signer: null, reason: resolved.reason };
+  return {
+    signer: walletX402Signer({
+      provider: resolved.provider,
+      address: resolved.address,
+      switchChain
+    }),
+    reason: null
+  };
+}
+
 // src/mpp-session.ts
 function record2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
@@ -1761,6 +1843,7 @@ export {
   createNotification,
   createNotificationSettingsStorage,
   createSolanaSessionKeyFlow,
+  createX402WalletSigner,
   decodeRevertReason,
   defaultSiwxDomain,
   defaultSiwxUri,
@@ -1773,6 +1856,7 @@ export {
   encodeErc20TransferFrom,
   explainSpend,
   fetchUserOperationReceipt,
+  findX402Provider,
   formatAuthorizationAmount,
   getResolver,
   getSharedSessionKeyManager,
@@ -1803,6 +1887,7 @@ export {
   resolveRevertReason,
   resolveSimulationEndpoint,
   resolveUserOpChain,
+  resolveX402Wallet,
   sameExecutionIntent,
   saveNotificationSettings,
   selectChainCapabilities,