@pafi-dev/core 0.3.0-beta.9 → 0.5.0

package/dist/index.d.ts

@@ -1,14 +1,14 @@
-import { Address, Hex, PublicClient, WalletClient } from 'viem';
+import { Address, Hex, PublicClient, HttpTransport, WalletClient } from 'viem';
 import { P as PoolKey, C as ChainConfig, a as PafiSDKConfig, b as PointTokenDomainConfig, M as MintRequest, R as ReceiverConsent, E as EIP712Signature, S as SignatureVerification, B as BestQuote, Q as QuoteResult } from './types-b5_Tokjl.js';
 export { c as BurnRequest, I as Issuer, d as PathKey } from './types-b5_Tokjl.js';
 export { erc20Abi, issuerRegistryAbi, mintingOracleAbi, permit2Abi, pointTokenAbi, pointTokenFactoryAbi, universalRouterAbi, v4QuoterAbi } from './abi/index.js';
 export { buildBurnRequestTypedData, buildDomain, buildMintRequestTypedData, buildReceiverConsentTypedData, signBurnRequest, signMintRequest, signReceiverConsent, verifyBurnRequest, verifyMintRequest, verifyReceiverConsent } from './eip712/index.js';
 export { getIssuer, getMintRequestNonce, getPointTokenBalance, getPointTokenIssuer, getPointTokenIssuerAddress, getReceiverConsentNonce, getTokenName, isActiveIssuer, isMinter, verifyMintCap } from './contract/index.js';
 export { buildAllPaths, combineRoutes, findBestQuote, quoteBestRoute, quoteExactInput, quoteExactInputSingle } from './quoting/index.js';
-import { P as PartialUserOperation, O as Operation, U as UserOperation, S as SwapSimulationResult } from './index-B06IJlHe.js';
-export { B as BuildSwapWithGasDeductionParams, E as ENTRY_POINT_V07, a as PaymasterFields, b as SETTLE_ALL, c as SWAP_EXACT_IN, T as TAKE_ALL, d as UserOpReceipt, V as V4_SWAP, Z as ZERO_VALUE, e as buildErc20ApprovalCalldata, f as buildPermit2ApprovalCalldata, g as buildSwapFromQuote, h as buildSwapWithGasDeduction, i as buildUniversalRouterExecuteArgs, j as buildV4SwapInput, k as checkAllowance, s as simulateSwap } from './index-B06IJlHe.js';
+import { P as PartialUserOperation, O as Operation, U as UserOperation, S as SwapSimulationResult } from './index-r4xCdQO7.js';
+export { B as BuildSwapWithGasDeductionParams, a as PaymasterFields, b as SETTLE_ALL, c as SWAP_EXACT_IN, T as TAKE_ALL, d as UserOpReceipt, V as V4_SWAP, Z as ZERO_VALUE, e as buildErc20ApprovalCalldata, f as buildPermit2ApprovalCalldata, g as buildSwapFromQuote, h as buildSwapWithGasDeduction, i as buildUniversalRouterExecuteArgs, j as buildV4SwapInput, k as checkAllowance, s as simulateSwap } from './index-r4xCdQO7.js';
 import { LoginMessageParams } from './auth/index.js';
-export { VerifyLoginResult, createLoginMessage, parseLoginMessage, verifyLoginMessage } from './auth/index.js';
+export { SPONSOR_AUTH_DOMAIN_NAME, SPONSOR_AUTH_TYPES, SponsorAuthPayload, SponsorAuthVerifyResult, VerifyLoginResult, buildSponsorAuthDomain, buildSponsorAuthTypedData, computeCallDataHash, createLoginMessage, parseLoginMessage, signSponsorAuth, verifyLoginMessage, verifySponsorAuth } from './auth/index.js';
 
 declare const mintRequestTypes: {
     readonly MintRequest: readonly [{
@@ -67,6 +67,10 @@ declare const UNIVERSAL_ROUTER_ADDRESSES: Record<number, Address>;
 declare const COMMON_TOKENS: Record<number, Record<string, Address>>;
 declare const COMMON_POOLS: Record<number, PoolKey[]>;
 declare const POINT_TOKEN_POOLS: Record<number, Record<Address, PoolKey[]>>;
+/** ERC-4337 v0.7 EntryPoint — deployed deterministically across all EVM chains. */
+declare const ENTRY_POINT_V07: Address;
+/** Permit2 — Uniswap's universal approval contract, same address on all EVM chains. */
+declare const PERMIT2_ADDRESS: Address;
 
 declare class PafiSDKError extends Error {
     constructor(message: string);
@@ -117,7 +121,7 @@ declare class ApiError extends PafiSDKError {
  *
  * ## Sponsored vs direct
  *
- * Coinbase Paymaster sponsors GAS, not `msg.value`. So even on the
+ * ERC-4337 paymasters sponsor GAS, not `msg.value`. Even on the
  * sponsored path the user MUST hold enough native ETH on Base to cover
  * `getDepositFee()` (typically ~0.0002 ETH at quiet times).
  */
@@ -538,6 +542,182 @@ interface CheckEthAndBranchParams {
  */
 declare function checkEthAndBranch(params: CheckEthAndBranchParams): Promise<SubmissionPath>;
 
+/**
+ * Parse the implementation address out of an EIP-7702 delegation designator.
+ *
+ * Returns `null` when:
+ *   - `code` is undefined / empty / `"0x"` (plain EOA, no code)
+ *   - `code` does not contain the EIP-7702 magic prefix (regular contract)
+ *
+ * @param code - bytecode returned by `eth_getCode` / `client.getCode()`
+ * @returns the 20-byte implementation address (checksummed), or `null`
+ *
+ * @example
+ * const code = await client.getCode({ address });
+ * const impl = parseEip7702DelegatedAddress(code);
+ * // null  → not delegated
+ * // '0x7702cb554e6bFb442cb743A7dF23154544a7176C' → delegated to BatchExecutor
+ */
+declare function parseEip7702DelegatedAddress(code: Hex | string | null | undefined): Address | null;
+/**
+ * Read the EIP-7702 delegation status of an EOA from the chain.
+ *
+ * @param client  - viem PublicClient (any provider — only `eth_getCode` is called)
+ * @param address - EOA address to inspect
+ * @returns the implementation address the EOA is delegated to, or `null`
+ *
+ * @example
+ * const impl = await checkDelegation(publicClient, userAddress);
+ * if (impl === null) {
+ *   // show "Setup Wallet" button
+ * } else {
+ *   // EOA already delegated; safe to send UserOps
+ * }
+ */
+declare function checkDelegation(client: PublicClient, address: Address): Promise<Address | null>;
+/**
+ * Return `true` when the EOA at `address` is currently delegated to `target`.
+ *
+ * Useful for asserting that the delegation points specifically at the expected
+ * BatchExecutor rather than some other implementation (e.g. old deployment).
+ *
+ * @example
+ * import { BATCH_EXECUTOR_ADDRESS_BASE_MAINNET } from '@pafi-dev/core';
+ * const ok = await isDelegatedTo(client, userAddress, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET);
+ */
+declare function isDelegatedTo(client: PublicClient, address: Address, target: Address): Promise<boolean>;
+
+/**
+ * Parameters for building a delegation-only UserOperation.
+ *
+ * This UserOp carries no calldata — its sole purpose is to anchor the
+ * EIP-7702 authorization (signed externally via `signAuthorization`) into
+ * a sponsored transaction so the user doesn't need native ETH to delegate.
+ */
+interface BuildDelegationUserOpParams {
+    /** User EOA to delegate. */
+    userAddress: Address;
+    /** ERC-4337 account nonce — fetched from EntryPoint. Pass 0n on first ever op. */
+    aaNonce: bigint;
+    gasLimits?: {
+        callGasLimit?: bigint;
+        verificationGasLimit?: bigint;
+        preVerificationGas?: bigint;
+    };
+}
+/**
+ * Build the minimal `PartialUserOperation` used to sponsor the one-time
+ * EIP-7702 delegation.
+ *
+ * The caller must:
+ *   1. Sign the EIP-7702 authorization via `signAuthorization()` (Privy hook).
+ *   2. Pass the authorization as `authorization` alongside `calls` (or alone)
+ *      to `smartClient.sendTransaction()`.
+ *
+ * The permissionless SDK + Pimlico bundler handle the rest: they detect the
+ * `authorization` field and submit an EIP-7702 type-4 transaction that sets
+ * the EOA's bytecode to `0xef0100<batchExecutorAddress>`.
+ *
+ * This builder is a convenience wrapper — in practice you can also pass
+ * `{ to: userAddress, value: 0n, data: '0x', authorization }` directly to
+ * `smartClient.sendTransaction()` without calling this function at all.
+ * Use it when you need a `PartialUserOperation` struct for inspection or
+ * custom paymaster flows.
+ *
+ * @example
+ * // Typical flow — no need to call this builder directly:
+ * const nonce = await publicClient.getTransactionCount({ address, blockTag: 'pending' });
+ * const authorization = await signAuthorization({ contractAddress: BATCH_EXECUTOR, chainId: 8453, nonce });
+ * const txHash = await smartClient.sendTransaction({
+ *   to: address,
+ *   value: 0n,
+ *   data: '0x',
+ *   authorization,
+ *   paymasterContext: { sponsorshipPolicyId },
+ * });
+ */
+declare function buildDelegationUserOp(params: BuildDelegationUserOpParams): PartialUserOperation;
+/**
+ * Fetch the AA nonce for a user EOA from the EntryPoint v0.7.
+ *
+ * Convenience helper so callers don't need to import the EntryPoint ABI
+ * themselves when building the delegation UserOp.
+ *
+ * @param client     - viem PublicClient
+ * @param userAddress - EOA to query
+ * @returns bigint nonce (0n on first-ever UserOp)
+ */
+declare function getAaNonce(client: PublicClient, userAddress: Address): Promise<bigint>;
+
+/**
+ * Parameters for `createPafiProxyTransport`.
+ */
+interface PafiProxyTransportParams {
+    /**
+     * Full URL of the PAFI sponsor-relayer Pimlico proxy endpoint.
+     * @example "https://sponsor-relayer.pacificfinance.org/pimlico"
+     * @example "http://localhost:4000/pimlico"
+     */
+    proxyUrl: string;
+    /**
+     * Called on every request to get the current Privy identity token.
+     * Use a getter (or a ref's `.current`) so the transport always sends
+     * the latest token without needing to be rebuilt when it rotates.
+     *
+     * @example () => identityTokenRef.current
+     * @example () => privyHook.identityToken
+     */
+    getIdentityToken: () => string | null | undefined;
+    /**
+     * Issuer ID sent as `X-Issuer-Id` header.
+     * sponsor-relayer uses this to look up per-issuer rate limits and policy.
+     * Obtain from PAFI team during onboarding.
+     */
+    issuerId: string;
+}
+/**
+ * Create a viem `HttpTransport` that proxies all Pimlico JSON-RPC calls
+ * through the PAFI sponsor-relayer (`POST /pimlico`).
+ *
+ * The transport:
+ *   - Sets `Authorization: Bearer <identityToken>` on every request
+ *   - Sets `X-Issuer-Id: <issuerId>` on every request
+ *   - Reads the identity token lazily via `getIdentityToken()` so it is
+ *     always fresh without rebuilding the SmartAccountClient on each rotation
+ *
+ * Pass the returned transport to both `createPimlicoClient` and
+ * `createSmartAccountClient` so ALL Pimlico RPC calls (paymaster + bundler)
+ * go through the proxy with auth headers attached.
+ *
+ * @example
+ * ```ts
+ * import { createPafiProxyTransport, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET } from '@pafi-dev/core';
+ * import { createSmartAccountClient } from 'permissionless';
+ * import { createPimlicoClient } from 'permissionless/clients/pimlico';
+ * import { useIdentityToken } from '@privy-io/react-auth';
+ *
+ * const { identityToken } = useIdentityToken();
+ * const identityTokenRef = useRef<string | null>(null);
+ * useEffect(() => { identityTokenRef.current = identityToken; }, [identityToken]);
+ *
+ * const proxyTransport = createPafiProxyTransport({
+ *   proxyUrl: process.env.NEXT_PUBLIC_PIMLICO_PROXY_URL!,
+ *   getIdentityToken: () => identityTokenRef.current,
+ *   issuerId: process.env.NEXT_PUBLIC_ISSUER_ID!,
+ * });
+ *
+ * const pimlicoClient = createPimlicoClient({ chain: base, transport: proxyTransport });
+ * const smartClient  = createSmartAccountClient({
+ *   client: publicClient,
+ *   chain: base,
+ *   account,
+ *   paymaster: pimlicoClient,
+ *   bundlerTransport: proxyTransport,
+ * });
+ * ```
+ */
+declare function createPafiProxyTransport(params: PafiProxyTransportParams): HttpTransport;
+
 /**
  * Real `PointToken` ABI — matches the contract deployed on Base mainnet
  * (POINT at `0x7d25E7156E51F865D522fd3ef257a6B5DD41b97e`). Sourced from
@@ -876,26 +1056,8 @@ declare const POINT_TOKEN_ABI: readonly [{
     }];
 }];
 
-/**
- * BatchExecutor delegation target addresses.
- *
- * ## Status
- *
- * Base mainnet: points at **Coinbase Smart Wallet v2**
- * (`0x7702cb554e6bFb442cb743A7dF23154544a7176C`). Coinbase publishes
- * this as the canonical EIP-7702 delegation target on Base — every
- * user that wants gas sponsorship via Coinbase Paymaster delegates to
- * this single contract. One contract, all issuers.
- *
- * Base Sepolia: placeholder; Sepolia is not in active use for PAFI.
- *
- * The ABI (`execute(Call[])`) is exported from
- * `../../userop/batchExecute.ts` and works against the Coinbase
- * contract without change — Coinbase Smart Wallet v2 implements the
- * same call-array signature we already use.
- */
-declare const BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA: Address;
-declare const BATCH_EXECUTOR_ADDRESS_BASE_MAINNET: Address;
+declare const BATCH_EXECUTOR_ADDRESS_BASE_MAINNET: `0x${string}`;
+declare const BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA: `0x${string}`;
 
 /**
  * Per-chain deployed contract addresses — v1.4 flow.
@@ -1186,6 +1348,29 @@ declare class PafiSDK {
     private _signer?;
     private _provider?;
     private _chainId?;
+    readonly mint: {
+        buildTypedData: PafiSDK["buildMintRequestTypedData"];
+        sign: PafiSDK["signMintRequest"];
+        verify: PafiSDK["verifyMintRequest"];
+        getNonce: PafiSDK["getMintRequestNonce"];
+    };
+    readonly consent: {
+        buildTypedData: PafiSDK["buildReceiverConsentTypedData"];
+        sign: PafiSDK["signReceiverConsent"];
+        verify: PafiSDK["verifyReceiverConsent"];
+        getNonce: PafiSDK["getReceiverConsentNonce"];
+    };
+    readonly swap: {
+        buildFromQuote: PafiSDK["buildSwapFromQuote"];
+        simulate: PafiSDK["simulateSwap"];
+    };
+    readonly quote: {
+        findBest: PafiSDK["findBestQuote"];
+    };
+    readonly auth: {
+        createLoginMessage: PafiSDK["createLoginMessage"];
+        signMessage: PafiSDK["signLoginMessage"];
+    };
     constructor(config: PafiSDKConfig);
     setPointTokenAddress(address: Address): void;
     setSigner(signer: WalletClient): void;
@@ -1293,4 +1478,4 @@ declare class PafiSDK {
     signLoginMessage(message: string): Promise<Hex>;
 }
 
-export { ApiError, BATCH_EXECUTOR_ABI, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET, BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA, BROKER_HASHES, BestQuote, type BuildPartialUserOpParams, type BuildPerpDepositWithGasDeductionParams, COMMON_POOLS, COMMON_TOKENS, CONTRACT_ADDRESSES, ChainConfig, type CheckEthAndBranchParams, ConfigurationError, type ContractAddresses, EIP712Signature, LoginMessageParams, MintRequest, type ModalOpenOptions, ORDERLY_VAULT_ABI, ORDERLY_VAULT_ADDRESSES, ORDERLY_VAULT_BASE_MAINNET, Operation, POINT_TOKEN_FACTORY_ADDRESSES, POINT_TOKEN_IMPL_ADDRESSES, POINT_TOKEN_POOLS, POINT_TOKEN_ABI as POINT_TOKEN_V2_ABI, PafiSDK, PafiSDKConfig, PafiSDKError, type PafiWebModalAdapter, type PafiWebModalHandle, PartialUserOperation, type PaymasterConfig, PointTokenDomainConfig, PoolKey, QuoteResult, ReceiverConsent, SUPPORTED_CHAINS, type SignatureStruct, SignatureVerification, SigningError, SimulationError, type SponsorshipScenario, type SubmissionPath, SwapSimulationResult, TOKEN_HASHES, UNIVERSAL_ROUTER_ADDRESSES, UserOperation, V4_QUOTER_ADDRESSES, type VaultDepositFE, _resetPaymasterConfigForTests, assembleUserOperation, buildPartialUserOperation, buildPerpDepositWithGasDeduction, burnRequestTypes, checkEthAndBranch, computeAccountId, encodeBatchExecute, erc20ApproveOp, erc20BurnOp, erc20TransferOp, getContractAddresses, getPafiWebModalAdapter, getPaymasterConfig, isPaymasterConfigured, mintRequestTypes, openPafiWebModal, openWebPopup, rawCallOp, receiverConsentTypes, setPafiWebModalAdapter, setPaymasterConfig, webPopupAdapter };
+export { ApiError, BATCH_EXECUTOR_ABI, BATCH_EXECUTOR_ADDRESS_BASE_MAINNET, BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA, BROKER_HASHES, BestQuote, type BuildDelegationUserOpParams, type BuildPartialUserOpParams, type BuildPerpDepositWithGasDeductionParams, COMMON_POOLS, COMMON_TOKENS, CONTRACT_ADDRESSES, ChainConfig, type CheckEthAndBranchParams, ConfigurationError, type ContractAddresses, EIP712Signature, ENTRY_POINT_V07, LoginMessageParams, MintRequest, type ModalOpenOptions, ORDERLY_VAULT_ABI, ORDERLY_VAULT_ADDRESSES, ORDERLY_VAULT_BASE_MAINNET, Operation, PERMIT2_ADDRESS, POINT_TOKEN_FACTORY_ADDRESSES, POINT_TOKEN_IMPL_ADDRESSES, POINT_TOKEN_POOLS, POINT_TOKEN_ABI as POINT_TOKEN_V2_ABI, type PafiProxyTransportParams, PafiSDK, PafiSDKConfig, PafiSDKError, type PafiWebModalAdapter, type PafiWebModalHandle, PartialUserOperation, type PaymasterConfig, PointTokenDomainConfig, PoolKey, QuoteResult, ReceiverConsent, SUPPORTED_CHAINS, type SignatureStruct, SignatureVerification, SigningError, SimulationError, type SponsorshipScenario, type SubmissionPath, SwapSimulationResult, TOKEN_HASHES, UNIVERSAL_ROUTER_ADDRESSES, UserOperation, V4_QUOTER_ADDRESSES, type VaultDepositFE, _resetPaymasterConfigForTests, assembleUserOperation, buildDelegationUserOp, buildPartialUserOperation, buildPerpDepositWithGasDeduction, burnRequestTypes, checkDelegation, checkEthAndBranch, computeAccountId, createPafiProxyTransport, encodeBatchExecute, erc20ApproveOp, erc20BurnOp, erc20TransferOp, getAaNonce, getContractAddresses, getPafiWebModalAdapter, getPaymasterConfig, isDelegatedTo, isPaymasterConfigured, mintRequestTypes, openPafiWebModal, openWebPopup, parseEip7702DelegatedAddress, rawCallOp, receiverConsentTypes, setPafiWebModalAdapter, setPaymasterConfig, webPopupAdapter };

package/dist/index.js

@@ -2,10 +2,29 @@ import {
   pointTokenFactoryAbi
 } from "./chunk-7UBO7DY5.js";
 import {
+  SPONSOR_AUTH_DOMAIN_NAME,
+  SPONSOR_AUTH_TYPES,
+  buildSponsorAuthDomain,
+  buildSponsorAuthTypedData,
+  computeCallDataHash,
   createLoginMessage,
   parseLoginMessage,
-  verifyLoginMessage
-} from "./chunk-O4SMTUOY.js";
+  signSponsorAuth,
+  verifyLoginMessage,
+  verifySponsorAuth
+} from "./chunk-W6VULMCO.js";
+import {
+  buildBurnRequestTypedData,
+  buildDomain,
+  buildMintRequestTypedData,
+  buildReceiverConsentTypedData,
+  signBurnRequest,
+  signMintRequest,
+  signReceiverConsent,
+  verifyBurnRequest,
+  verifyMintRequest,
+  verifyReceiverConsent
+} from "./chunk-WTWG6QXP.js";
 import {
   getIssuer,
   getIssuer2,
@@ -23,18 +42,6 @@ import {
   mintingOracleAbi,
   pointTokenAbi
 } from "./chunk-FXNG4G22.js";
-import {
-  buildBurnRequestTypedData,
-  buildDomain,
-  buildMintRequestTypedData,
-  buildReceiverConsentTypedData,
-  signBurnRequest,
-  signMintRequest,
-  signReceiverConsent,
-  verifyBurnRequest,
-  verifyMintRequest,
-  verifyReceiverConsent
-} from "./chunk-DUY7Z2AI.js";
 import {
   buildAllPaths,
   combineRoutes,
@@ -42,21 +49,10 @@ import {
   quoteBestRoute,
   quoteExactInput,
   quoteExactInputSingle
-} from "./chunk-I2P3TIP7.js";
+} from "./chunk-N5M3BLOV.js";
 import {
   v4QuoterAbi
 } from "./chunk-KFWZRL7I.js";
-import {
-  COMMON_POOLS,
-  COMMON_TOKENS,
-  POINT_TOKEN_POOLS,
-  SUPPORTED_CHAINS,
-  UNIVERSAL_ROUTER_ADDRESSES,
-  V4_QUOTER_ADDRESSES,
-  burnRequestTypes,
-  mintRequestTypes,
-  receiverConsentTypes
-} from "./chunk-73CQTNLB.js";
 import {
   ApiError,
   BATCH_EXECUTOR_ABI,
@@ -83,22 +79,35 @@ import {
   erc20TransferOp,
   rawCallOp,
   simulateSwap
-} from "./chunk-W23EJNYG.js";
+} from "./chunk-T6Y32SNK.js";
 import {
   erc20Abi,
   permit2Abi,
   universalRouterAbi
 } from "./chunk-2PIXFXA2.js";
+import {
+  COMMON_POOLS,
+  COMMON_TOKENS,
+  ENTRY_POINT_V07,
+  PERMIT2_ADDRESS,
+  POINT_TOKEN_POOLS,
+  SUPPORTED_CHAINS,
+  UNIVERSAL_ROUTER_ADDRESSES,
+  V4_QUOTER_ADDRESSES,
+  burnRequestTypes,
+  mintRequestTypes,
+  receiverConsentTypes
+} from "./chunk-S5CCEO4O.js";
 
 // src/index.ts
-import { createPublicClient, http } from "viem";
+import { createPublicClient, http as http2 } from "viem";
 
 // src/perp/buildPerpDepositWithGasDeduction.ts
 import { encodeFunctionData } from "viem";
 
 // src/contracts/real/orderlyVault.ts
 import { keccak256, encodePacked, encodeAbiParameters } from "viem";
-var ORDERLY_VAULT_BASE_MAINNET = "0xDe5cE5DD048596e46Ff671b13317aCC3C5B59b01";
+var ORDERLY_VAULT_BASE_MAINNET = "0x816f722424B49Cf1275cc86DA9840Fbd5a6167e9";
 var ORDERLY_VAULT_ADDRESSES = {
   8453: ORDERLY_VAULT_BASE_MAINNET
 };
@@ -234,7 +243,6 @@ function buildPerpDepositWithGasDeduction(params) {
 }
 
 // src/userop/types.ts
-var ENTRY_POINT_V07 = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
 var ZERO_VALUE = 0n;
 
 // src/paymaster/config.ts
@@ -280,6 +288,92 @@ async function checkEthAndBranch(params) {
   return balance >= required ? "normal" : "paymaster";
 }
 
+// src/delegation/checkDelegation.ts
+var EIP7702_MAGIC = "0xef0100";
+function parseEip7702DelegatedAddress(code) {
+  if (!code || code === "0x" || code === "0x0") return null;
+  const normalized = code.toLowerCase();
+  const magic = EIP7702_MAGIC.toLowerCase();
+  const idx = normalized.indexOf(magic);
+  if (idx === -1) return null;
+  const raw = normalized.slice(idx + magic.length, idx + magic.length + 40);
+  if (raw.length !== 40) return null;
+  return `0x${raw}`;
+}
+async function checkDelegation(client, address) {
+  const code = await client.getCode({ address });
+  return parseEip7702DelegatedAddress(code);
+}
+async function isDelegatedTo(client, address, target) {
+  const impl = await checkDelegation(client, address);
+  if (!impl) return false;
+  return impl.toLowerCase() === target.toLowerCase();
+}
+
+// src/delegation/buildDelegationUserOp.ts
+function buildDelegationUserOp(params) {
+  return buildPartialUserOperation({
+    sender: params.userAddress,
+    nonce: params.aaNonce,
+    operations: [
+      {
+        // Self-call with no data — triggers EIP-7702 delegation without
+        // executing any inner logic. The BatchExecutor.execute([]) call with
+        // an empty array would revert, so we target the EOA itself (which
+        // forwards to BatchExecutor that then no-ops on empty input).
+        target: params.userAddress,
+        value: 0n,
+        data: "0x"
+      }
+    ],
+    gasLimits: {
+      callGasLimit: params.gasLimits?.callGasLimit ?? 50000n,
+      verificationGasLimit: params.gasLimits?.verificationGasLimit ?? 150000n,
+      preVerificationGas: params.gasLimits?.preVerificationGas ?? 50000n
+    }
+  });
+}
+async function getAaNonce(client, userAddress) {
+  const NONCE_ABI = [
+    {
+      inputs: [
+        { name: "sender", type: "address" },
+        { name: "key", type: "uint192" }
+      ],
+      name: "getNonce",
+      outputs: [{ name: "nonce", type: "uint256" }],
+      stateMutability: "view",
+      type: "function"
+    }
+  ];
+  return client.readContract({
+    address: ENTRY_POINT_V07,
+    abi: NONCE_ABI,
+    functionName: "getNonce",
+    args: [userAddress, 0n]
+  });
+}
+
+// src/transport/proxyTransport.ts
+import { http } from "viem";
+function createPafiProxyTransport(params) {
+  const { proxyUrl, getIdentityToken, issuerId } = params;
+  return http(proxyUrl, {
+    fetchOptions: {},
+    // fetchFn intercepts every fetch call the viem http transport makes,
+    // injecting the auth headers before the request leaves the browser.
+    fetchFn: (input, init) => {
+      const headers = new Headers(init?.headers);
+      const token = getIdentityToken();
+      if (token) {
+        headers.set("authorization", `Bearer ${token}`);
+      }
+      headers.set("x-issuer-id", issuerId);
+      return fetch(input, { ...init, headers });
+    }
+  });
+}
+
 // src/contracts/real/pointToken.ts
 import { parseAbi } from "viem";
 var POINT_TOKEN_ABI = parseAbi([
@@ -325,10 +419,6 @@ var POINT_TOKEN_ABI = parseAbi([
   "event MintingOracleUpdated(address indexed mintingOracle)"
 ]);
 
-// src/contracts/real/batchExecutor.ts
-var BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA = "0x000000000000000000000000000000000000DE01";
-var BATCH_EXECUTOR_ADDRESS_BASE_MAINNET = "0x7702cb554e6bFb442cb743A7dF23154544a7176C";
-
 // src/contracts/real/addresses.ts
 var PLACEHOLDER_DEAD = (suffix) => `0x000000000000000000000000000000000000${suffix.toLowerCase().padStart(4, "0")}`;
 var CONTRACT_ADDRESSES = {
@@ -378,6 +468,10 @@ function getContractAddresses(chainId) {
   return addrs;
 }
 
+// src/contracts/real/batchExecutor.ts
+var BATCH_EXECUTOR_ADDRESS_BASE_MAINNET = getContractAddresses(8453).batchExecutor;
+var BATCH_EXECUTOR_ADDRESS_BASE_SEPOLIA = getContractAddresses(84532).batchExecutor;
+
 // src/web-handoff/webPopup.ts
 var DEFAULT_WIDTH = 900;
 var DEFAULT_HEIGHT = 700;
@@ -505,6 +599,16 @@ var PafiSDK = class {
   _signer;
   _provider;
   _chainId;
+  // -------------------------------------------------------------------------
+  // Domain namespaces — grouped by concern for better IDE autocomplete.
+  // Each property is a plain object of bound methods; the underlying logic
+  // lives in the flat methods below so both access styles work.
+  // -------------------------------------------------------------------------
+  mint;
+  consent;
+  swap;
+  quote;
+  auth;
   constructor(config) {
     this._pointTokenAddress = config.pointTokenAddress;
     this._signer = config.signer;
@@ -513,9 +617,32 @@ var PafiSDK = class {
       this._provider = config.provider;
     } else if (config.rpcUrl) {
       this._provider = createPublicClient({
-        transport: http(config.rpcUrl)
+        transport: http2(config.rpcUrl)
       });
     }
+    this.mint = {
+      buildTypedData: this.buildMintRequestTypedData.bind(this),
+      sign: this.signMintRequest.bind(this),
+      verify: this.verifyMintRequest.bind(this),
+      getNonce: this.getMintRequestNonce.bind(this)
+    };
+    this.consent = {
+      buildTypedData: this.buildReceiverConsentTypedData.bind(this),
+      sign: this.signReceiverConsent.bind(this),
+      verify: this.verifyReceiverConsent.bind(this),
+      getNonce: this.getReceiverConsentNonce.bind(this)
+    };
+    this.swap = {
+      buildFromQuote: this.buildSwapFromQuote.bind(this),
+      simulate: this.simulateSwap.bind(this)
+    };
+    this.quote = {
+      findBest: this.findBestQuote.bind(this)
+    };
+    this.auth = {
+      createLoginMessage: this.createLoginMessage.bind(this),
+      signMessage: this.signLoginMessage.bind(this)
+    };
   }
   // -------------------------------------------------------------------------
   // Setters
@@ -699,6 +826,7 @@ export {
   ORDERLY_VAULT_ABI,
   ORDERLY_VAULT_ADDRESSES,
   ORDERLY_VAULT_BASE_MAINNET,
+  PERMIT2_ADDRESS,
   POINT_TOKEN_FACTORY_ADDRESSES,
   POINT_TOKEN_IMPL_ADDRESSES,
   POINT_TOKEN_POOLS,
@@ -706,6 +834,8 @@ export {
   PafiSDK,
   PafiSDKError,
   SETTLE_ALL,
+  SPONSOR_AUTH_DOMAIN_NAME,
+  SPONSOR_AUTH_TYPES,
   SUPPORTED_CHAINS,
   SWAP_EXACT_IN,
   SigningError,
@@ -720,6 +850,7 @@ export {
   assembleUserOperation,
   buildAllPaths,
   buildBurnRequestTypedData,
+  buildDelegationUserOp,
   buildDomain,
   buildErc20ApprovalCalldata,
   buildMintRequestTypedData,
@@ -727,22 +858,28 @@ export {
   buildPermit2ApprovalCalldata,
   buildPerpDepositWithGasDeduction,
   buildReceiverConsentTypedData,
+  buildSponsorAuthDomain,
+  buildSponsorAuthTypedData,
   buildSwapFromQuote,
   buildSwapWithGasDeduction,
   buildUniversalRouterExecuteArgs,
   buildV4SwapInput,
   burnRequestTypes,
   checkAllowance,
+  checkDelegation,
   checkEthAndBranch,
   combineRoutes,
   computeAccountId,
+  computeCallDataHash,
   createLoginMessage,
+  createPafiProxyTransport,
   encodeBatchExecute,
   erc20Abi,
   erc20ApproveOp,
   erc20BurnOp,
   erc20TransferOp,
   findBestQuote,
+  getAaNonce,
   getContractAddresses,
   getIssuer2 as getIssuer,
   getMintRequestNonce,
@@ -754,6 +891,7 @@ export {
   getReceiverConsentNonce,
   getTokenName,
   isActiveIssuer,
+  isDelegatedTo,
   isMinter,
   isPaymasterConfigured,
   issuerRegistryAbi,
@@ -761,6 +899,7 @@ export {
   mintingOracleAbi,
   openPafiWebModal,
   openWebPopup,
+  parseEip7702DelegatedAddress,
   parseLoginMessage,
   permit2Abi,
   pointTokenAbi,
@@ -775,6 +914,7 @@ export {
   signBurnRequest,
   signMintRequest,
   signReceiverConsent,
+  signSponsorAuth,
   simulateSwap,
   universalRouterAbi,
   v4QuoterAbi,
@@ -783,6 +923,7 @@ export {
   verifyMintCap,
   verifyMintRequest,
   verifyReceiverConsent,
+  verifySponsorAuth,
   webPopupAdapter
 };
 //# sourceMappingURL=index.js.map