@pushchain/core 6.0.27-alpha.0 → 6.0.27-alpha.1

package/src/lib/agentic/contracts/{v5.js → v6.js}

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.v5 = exports.UEA_MULTICALL_PREFIX = exports.SEND_OUTBOUND_SELECTOR = exports.MODE_BATCH = exports.MODE_SINGLE = void 0;
+exports.v6 = exports.UEA_MULTICALL_PREFIX = exports.SEND_OUTBOUND_SELECTOR = exports.MODE_BATCH = exports.MODE_SINGLE = void 0;
 const viem_1 = require("viem");
-const v5_1 = require("./abi/v5");
+const v6_1 = require("./abi/v6");
 exports.MODE_SINGLE = `0x${'00'.repeat(32)}`;
 exports.MODE_BATCH = `0x01${'00'.repeat(31)}`;
 exports.SEND_OUTBOUND_SELECTOR = '0x77b86bec';
@@ -22,36 +22,36 @@ const EXECUTION_TUPLE = [
         ],
     },
 ];
-exports.v5 = {
-    id: 'v5',
+exports.v6 = {
+    id: 'v6',
     abis: {
-        wallet: v5_1.AGW_ABI,
-        factory: v5_1.AGW_FACTORY_ABI,
-        engine: v5_1.SMART_SESSION_ABI,
-        policy: v5_1.UNIVERSAL_RULES_POLICY_ABI,
+        wallet: v6_1.AGW_ABI,
+        factory: v6_1.AGW_FACTORY_ABI,
+        engine: v6_1.SMART_SESSION_ABI,
+        policy: v6_1.UNIVERSAL_RULES_POLICY_ABI,
     },
     events: {
         walletDeployed: (0, viem_1.getAbiItem)({
-            abi: v5_1.AGW_FACTORY_ABI,
+            abi: v6_1.AGW_FACTORY_ABI,
             name: 'WalletDeployed',
         }),
         checkpointed: (0, viem_1.getAbiItem)({
-            abi: v5_1.AGW_ABI,
+            abi: v6_1.AGW_ABI,
             name: 'Checkpointed',
         }),
         rulesGranted: (0, viem_1.getAbiItem)({
-            abi: v5_1.AGW_ABI,
+            abi: v6_1.AGW_ABI,
             name: 'RulesGranted',
         }),
         rulesRevoked: (0, viem_1.getAbiItem)({
-            abi: v5_1.AGW_ABI,
+            abi: v6_1.AGW_ABI,
             name: 'RulesRevoked',
         }),
     },
     // ---------------------------------------------------------------- encoders
     encodeDeployWallet(label) {
         return (0, viem_1.encodeFunctionData)({
-            abi: v5_1.AGW_FACTORY_ABI,
+            abi: v6_1.AGW_FACTORY_ABI,
             functionName: 'deployWallet',
             args: [label],
         });
@@ -68,7 +68,7 @@ exports.v5 = {
         const zero32 = `0x${'00'.repeat(32)}`;
         const zeroAddress = '0x0000000000000000000000000000000000000000';
         return (0, viem_1.encodeFunctionData)({
-            abi: v5_1.AGW_FACTORY_ABI,
+            abi: v6_1.AGW_FACTORY_ABI,
             functionName: 'deployWalletWithSig',
             args: [
                 {
@@ -90,30 +90,57 @@ exports.v5 = {
             ],
         });
     },
+    encodeCreateWalletAt(owner, index, wallet, label, rules) {
+        const zero32 = `0x${'00'.repeat(32)}`;
+        const zeroAddress = '0x0000000000000000000000000000000000000000';
+        return (0, viem_1.encodeFunctionData)({
+            abi: v6_1.AGW_FACTORY_ABI,
+            functionName: 'createWalletWithSig',
+            args: [
+                {
+                    owner,
+                    wallet,
+                    executor: zeroAddress,
+                    index,
+                    sessionHash: zero32,
+                    mode: zero32,
+                    execCalldataHash: zero32,
+                    nonceKey: BigInt(0),
+                    nonceSeq: BigInt(0),
+                    grantNonce: BigInt(0),
+                    deadline: 0,
+                    signerChainId: BigInt(0),
+                },
+                '0x',
+                label,
+                rules,
+            ],
+        });
+    },
     encodeGrantRules(session) {
         return (0, viem_1.encodeFunctionData)({
-            abi: v5_1.AGW_ABI,
+            abi: v6_1.AGW_ABI,
             functionName: 'grantRules',
             args: [session],
         });
     },
     encodeRevokeRules(rulesId) {
         return (0, viem_1.encodeFunctionData)({
-            abi: v5_1.AGW_ABI,
+            abi: v6_1.AGW_ABI,
             functionName: 'revokeRules',
             args: [rulesId],
         });
     },
     encodeRevokeAllRules() {
         return (0, viem_1.encodeFunctionData)({
-            abi: v5_1.AGW_ABI,
+            abi: v6_1.AGW_ABI,
             functionName: 'revokeAllRules',
             args: [],
         });
     },
     encodeSetLabel(label) {
         return (0, viem_1.encodeFunctionData)({
-            abi: v5_1.AGW_ABI,
+            abi: v6_1.AGW_ABI,
             functionName: 'setLabel',
             args: [label],
         });
@@ -127,9 +154,9 @@ exports.v5 = {
             throw new Error('execute needs at least one call');
         if (calls.length === 1) {
             return (0, viem_1.encodeFunctionData)({
-                abi: v5_1.AGW_ABI,
+                abi: v6_1.AGW_ABI,
                 functionName: 'execute',
-                args: [exports.MODE_SINGLE, exports.v5.packSingle(calls[0])],
+                args: [exports.MODE_SINGLE, exports.v6.packSingle(calls[0])],
             });
         }
         const batch = (0, viem_1.encodeAbiParameters)(EXECUTION_TUPLE, [
@@ -140,21 +167,21 @@ exports.v5 = {
             })),
         ]);
         return (0, viem_1.encodeFunctionData)({
-            abi: v5_1.AGW_ABI,
+            abi: v6_1.AGW_ABI,
             functionName: 'execute',
             args: [exports.MODE_BATCH, batch],
         });
     },
     encodeExecuteAsAgent(rulesId, call) {
         return (0, viem_1.encodeFunctionData)({
-            abi: v5_1.AGW_ABI,
+            abi: v6_1.AGW_ABI,
             functionName: 'executeAsAgent',
-            args: [rulesId, exports.MODE_SINGLE, exports.v5.packSingle(call)],
+            args: [rulesId, exports.MODE_SINGLE, exports.v6.packSingle(call)],
         });
     },
     encodeAssertSpentNative(configId, wallet, expected) {
         return (0, viem_1.encodeFunctionData)({
-            abi: v5_1.UNIVERSAL_RULES_POLICY_ABI,
+            abi: v6_1.UNIVERSAL_RULES_POLICY_ABI,
             functionName: 'assertSpent',
             args: [
                 configId,
@@ -167,7 +194,7 @@ exports.v5 = {
     },
     encodeAssertSpentUniversal(configId, wallet, expectedSpent) {
         return (0, viem_1.encodeFunctionData)({
-            abi: v5_1.UNIVERSAL_RULES_POLICY_ABI,
+            abi: v6_1.UNIVERSAL_RULES_POLICY_ABI,
             functionName: 'assertSpent',
             args: [configId, wallet, expectedSpent],
         });
@@ -176,7 +203,7 @@ exports.v5 = {
     decodeWalletCall(data) {
         let decoded;
         try {
-            decoded = (0, viem_1.decodeFunctionData)({ abi: v5_1.AGW_ABI, data });
+            decoded = (0, viem_1.decodeFunctionData)({ abi: v6_1.AGW_ABI, data });
         }
         catch {
             return null;
@@ -215,7 +242,7 @@ exports.v5 = {
         return k;
     },
     parseWalletDeployed(logs, factory) {
-        return decodeMatching(logs, factory, exports.v5.events.walletDeployed).map((args) => ({
+        return decodeMatching(logs, factory, exports.v6.events.walletDeployed).map((args) => ({
             owner: (0, viem_1.getAddress)(args['owner']),
             index: BigInt(args['index']),
             wallet: (0, viem_1.getAddress)(args['wallet']),
@@ -223,14 +250,14 @@ exports.v5 = {
         }));
     },
     parseRulesGranted(logs, wallet) {
-        return decodeMatching(logs, wallet, exports.v5.events.rulesGranted).map((args) => ({
+        return decodeMatching(logs, wallet, exports.v6.events.rulesGranted).map((args) => ({
             rulesId: args['rulesId'],
             mode: Number(args['mode']),
             chainNamespace: args['chainNamespace'],
         }));
     },
     parseRulesRevoked(logs, wallet) {
-        return decodeMatching(logs, wallet, exports.v5.events.rulesRevoked).map((args) => ({
+        return decodeMatching(logs, wallet, exports.v6.events.rulesRevoked).map((args) => ({
             rulesId: args['rulesId'],
         }));
     },
@@ -238,11 +265,11 @@ exports.v5 = {
         return logs
             .filter((l) => sameAddress(l.address, wallet) &&
             l.topics[0]?.toLowerCase() ===
-                (0, viem_1.toEventSelector)(exports.v5.events.checkpointed).toLowerCase())
+                (0, viem_1.toEventSelector)(exports.v6.events.checkpointed).toLowerCase())
             .flatMap((log) => {
             try {
                 const ev = (0, viem_1.decodeEventLog)({
-                    abi: [exports.v5.events.checkpointed],
+                    abi: [exports.v6.events.checkpointed],
                     ...log,
                     strict: true,
                 });
@@ -254,7 +281,7 @@ exports.v5 = {
         })
             .map(({ log, args }) => ({
             seq: Number(args['seq']),
-            kind: exports.v5.decodeCheckpointKind(Number(args['kind'])),
+            kind: exports.v6.decodeCheckpointKind(Number(args['kind'])),
             ref: args['ref'],
             blockNumber: BigInt(log.blockNumber ?? BigInt(0)),
             txHash: log.transactionHash,
@@ -313,4 +340,4 @@ function decodeMatching(logs, emitter, event) {
     }
     return out;
 }
-//# sourceMappingURL=v5.js.map
+//# sourceMappingURL=v6.js.map

package/src/lib/agentic/deployments.d.ts

@@ -1,7 +1,7 @@
 import { type Address } from 'viem';
 import { PUSH_NETWORK } from '../constants/enums';
 import { AgenticCapability } from './capabilities';
-import { type AgwContracts } from './contracts/v5';
+import { type AgwContracts } from './contracts/v6';
 import type { ChainReader } from './contracts/reader';
 /**
  * A verified AGW contract generation on one Push network. The registry is the
@@ -10,7 +10,7 @@ import type { ChainReader } from './contracts/reader';
  * are NOT registered because they do not implement this ABI.
  */
 export interface AgenticGeneration {
-    /** Stable identifier, e.g. 'v5'. */
+    /** Stable identifier, e.g. 'v6'. */
     id: string;
     /** Contract source commit the ABI was generated from. */
     sourceCommit: string;
@@ -32,8 +32,8 @@ export interface AgenticGeneration {
     capabilities: ReadonlySet<AgenticCapability>;
     contracts: AgwContracts;
 }
-/** Capabilities the v5 ABI actually implements. Target-only features are absent. */
-export declare const V5_CAPABILITIES: ReadonlySet<AgenticCapability>;
+/** Capabilities the v6 ABI actually implements. Target-only features are absent. */
+export declare const V6_CAPABILITIES: ReadonlySet<AgenticCapability>;
 /**
  * @internal Register a generation that is NOT a verified release deployment —
  * the local contract harness and E2E manifest loader use this. Not exported
@@ -42,7 +42,7 @@ export declare const V5_CAPABILITIES: ReadonlySet<AgenticCapability>;
 export declare function registerAgenticGeneration(input: Omit<AgenticGeneration, 'contracts' | 'capabilities'> & {
     capabilities?: ReadonlySet<AgenticCapability>;
 }): AgenticGeneration;
-/** @internal Test/harness cleanup. Restores the checked Donut v5 registry. */
+/** @internal Test/harness cleanup. Restores the checked Donut v6 registry. */
 export declare function resetAgenticGenerations(): void;
 /** Grant compatibility check; the unrestricted owner door does not consult URP. */
 export declare function verifyPolicyVersion(reader: ChainReader, gen: AgenticGeneration): Promise<void>;

package/src/lib/agentic/deployments.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.V5_CAPABILITIES = void 0;
+exports.V6_CAPABILITIES = void 0;
 exports.registerAgenticGeneration = registerAgenticGeneration;
 exports.resetAgenticGenerations = resetAgenticGenerations;
 exports.verifyPolicyVersion = verifyPolicyVersion;
@@ -12,11 +12,11 @@ exports.resolveWalletGeneration = resolveWalletGeneration;
 const viem_1 = require("viem");
 const enums_1 = require("../constants/enums");
 const capabilities_1 = require("./capabilities");
-const v5_1 = require("./contracts/v5");
+const v6_1 = require("./contracts/v6");
 const errors_1 = require("./errors");
-const donut_v5_1 = require("./contracts/donut-v5");
-/** Capabilities the v5 ABI actually implements. Target-only features are absent. */
-exports.V5_CAPABILITIES = new Set([
+const donut_v6_1 = require("./contracts/donut-v6");
+/** Capabilities the v6 ABI actually implements. Target-only features are absent. */
+exports.V6_CAPABILITIES = new Set([
     capabilities_1.AgenticCapability.WALLET_READS,
     capabilities_1.AgenticCapability.ACTIVE_RULE_READS,
     capabilities_1.AgenticCapability.OWNER_EXECUTE,
@@ -31,19 +31,19 @@ exports.V5_CAPABILITIES = new Set([
     capabilities_1.AgenticCapability.SET_LABEL,
 ]);
 /**
- * V5 only. Unsupported networks fail before signing; no legacy adapter fallback.
+ * V6 only. Unsupported networks fail before signing; no legacy adapter fallback.
  */
 const VERIFIED_DEPLOYMENTS = [
     {
-        id: 'v5',
-        sourceCommit: donut_v5_1.V5_SOURCE_COMMIT,
+        id: 'v6',
+        sourceCommit: donut_v6_1.V6_SOURCE_COMMIT,
         network: enums_1.PUSH_NETWORK.TESTNET_DONUT,
         advertised: true,
-        addresses: donut_v5_1.DONUT_V5_ADDRESSES,
-        startBlock: donut_v5_1.DONUT_V5_START_BLOCK,
+        addresses: donut_v6_1.DONUT_V6_ADDRESSES,
+        startBlock: donut_v6_1.DONUT_V6_START_BLOCK,
         accountId: 'push.agw.1.0.0',
-        capabilities: exports.V5_CAPABILITIES,
-        contracts: v5_1.v5,
+        capabilities: exports.V6_CAPABILITIES,
+        contracts: v6_1.v6,
     },
 ];
 const registry = [...VERIFIED_DEPLOYMENTS];
@@ -53,7 +53,7 @@ const registry = [...VERIFIED_DEPLOYMENTS];
  * from the package entry point.
  */
 function registerAgenticGeneration(input) {
-    if (input.id !== v5_1.v5.id || input.sourceCommit !== donut_v5_1.V5_SOURCE_COMMIT) {
+    if (input.id !== v6_1.v6.id || input.sourceCommit !== donut_v6_1.V6_SOURCE_COMMIT) {
         throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.CAPABILITY_UNAVAILABLE, `no contract adapter for generation "${input.id}"`);
     }
     const gen = {
@@ -66,8 +66,8 @@ function registerAgenticGeneration(input) {
             sessionValidator: (0, viem_1.getAddress)(input.addresses.sessionValidator),
             gateway: (0, viem_1.getAddress)(input.addresses.gateway),
         },
-        capabilities: input.capabilities ?? exports.V5_CAPABILITIES,
-        contracts: v5_1.v5,
+        capabilities: input.capabilities ?? exports.V6_CAPABILITIES,
+        contracts: v6_1.v6,
     };
     const existing = registry.findIndex((g) => g.network === gen.network && g.addresses.factory === gen.addresses.factory);
     if (existing >= 0)
@@ -76,7 +76,7 @@ function registerAgenticGeneration(input) {
     verifiedWiring.clear();
     return gen;
 }
-/** @internal Test/harness cleanup. Restores the checked Donut v5 registry. */
+/** @internal Test/harness cleanup. Restores the checked Donut v6 registry. */
 function resetAgenticGenerations() {
     registry.splice(0, registry.length, ...VERIFIED_DEPLOYMENTS);
     verifiedWiring.clear();
@@ -89,7 +89,7 @@ async function verifyPolicyVersion(reader, gen) {
         functionName: 'version',
     });
     if (version !== '3.1.0')
-        throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.CAPABILITY_UNAVAILABLE, `URP version ${String(version)} is not supported by the v5 adapter`);
+        throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.CAPABILITY_UNAVAILABLE, `URP version ${String(version)} is not supported by the v6 adapter`);
 }
 function generationsFor(network) {
     return registry.filter((g) => g.network === network);
@@ -100,7 +100,7 @@ function currentGeneration(network) {
     const gen = gens[gens.length - 1];
     if (!gen) {
         throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.CAPABILITY_UNAVAILABLE, `no verified AGW deployment is registered for ${network}`, {
-            hint: 'AGW v5 is configured on Donut only; this Push network has no registered v5 deployment.',
+            hint: 'AGW v6 is configured on Donut only; this Push network has no registered v6 deployment.',
             details: { network, assumption: 'A07' },
         });
     }
@@ -158,7 +158,7 @@ async function resolveWalletGeneration(reader, network, wallet) {
     try {
         factory = (0, viem_1.getAddress)((await reader.readContract({
             address: wallet,
-            abi: v5_1.v5.abis.wallet,
+            abi: v6_1.v6.abis.wallet,
             functionName: 'factory',
         })));
     }

package/src/lib/agentic/errors.d.ts

@@ -25,18 +25,16 @@ export declare const AGENTIC_ERROR_CODE: {
     readonly RULE_READ_FAILED: "RULE_READ_FAILED";
     readonly INCONSISTENT_READ: "INCONSISTENT_READ";
     readonly INDEX_RACE: "INDEX_RACE";
-    readonly CREATE_PARTIAL: "CREATE_PARTIAL";
     readonly RECEIPT_MISMATCH: "RECEIPT_MISMATCH";
     readonly RECEIPT_UNAVAILABLE: "RECEIPT_UNAVAILABLE";
     readonly AGENT_GAS_INSUFFICIENT: "AGENT_GAS_INSUFFICIENT";
     readonly WALLET_BALANCE_INSUFFICIENT: "WALLET_BALANCE_INSUFFICIENT";
-    readonly GATEWAY_ALLOWANCE_INSUFFICIENT: "GATEWAY_ALLOWANCE_INSUFFICIENT";
 };
 export type AgenticErrorCode = (typeof AGENTIC_ERROR_CODE)[keyof typeof AGENTIC_ERROR_CODE];
 /**
  * Pre-signature AGW failure: invalid input, unsupported capability, failed
  * eligibility or a read that cannot be trusted. Nothing was signed or sent
- * unless `details` explicitly records committed hashes (CREATE_PARTIAL).
+ * except receipt errors, which retain the submitted transaction hash.
  */
 export declare class AgenticError extends Error {
     readonly code: AgenticErrorCode;
@@ -57,14 +55,10 @@ export declare class AgenticError extends Error {
  */
 export declare class AgenticRevertError extends PushChainExecutionError {
     readonly agenticCode?: string;
-    readonly transactionHashes?: `0x${string}`[];
-    readonly pendingTransactionHash?: `0x${string}`;
     constructor(message: string, opts?: {
         decodedError?: DecodedErrorPayload;
         gatewayTxHash?: string;
         agenticCode?: string;
-        transactionHashes?: `0x${string}`[];
-        pendingTransactionHash?: `0x${string}`;
         cause?: unknown;
     });
 }

package/src/lib/agentic/errors.js

@@ -34,17 +34,15 @@ exports.AGENTIC_ERROR_CODE = {
     RULE_READ_FAILED: 'RULE_READ_FAILED',
     INCONSISTENT_READ: 'INCONSISTENT_READ',
     INDEX_RACE: 'INDEX_RACE',
-    CREATE_PARTIAL: 'CREATE_PARTIAL',
     RECEIPT_MISMATCH: 'RECEIPT_MISMATCH',
     RECEIPT_UNAVAILABLE: 'RECEIPT_UNAVAILABLE',
     AGENT_GAS_INSUFFICIENT: 'AGENT_GAS_INSUFFICIENT',
     WALLET_BALANCE_INSUFFICIENT: 'WALLET_BALANCE_INSUFFICIENT',
-    GATEWAY_ALLOWANCE_INSUFFICIENT: 'GATEWAY_ALLOWANCE_INSUFFICIENT',
 };
 /**
  * Pre-signature AGW failure: invalid input, unsupported capability, failed
  * eligibility or a read that cannot be trusted. Nothing was signed or sent
- * unless `details` explicitly records committed hashes (CREATE_PARTIAL).
+ * except receipt errors, which retain the submitted transaction hash.
  */
 class AgenticError extends Error {
     code;
@@ -69,8 +67,6 @@ exports.AgenticError = AgenticError;
  */
 class AgenticRevertError extends errors_1.PushChainExecutionError {
     agenticCode;
-    transactionHashes;
-    pendingTransactionHash;
     constructor(message, opts = {}) {
         super(message, {
             decodedError: opts.decodedError,
@@ -79,10 +75,6 @@ class AgenticRevertError extends errors_1.PushChainExecutionError {
         });
         this.name = 'AgenticRevertError';
         this.agenticCode = opts.agenticCode;
-        this.transactionHashes = opts.transactionHashes
-            ? [...opts.transactionHashes]
-            : undefined;
-        this.pendingTransactionHash = opts.pendingTransactionHash;
     }
 }
 exports.AgenticRevertError = AgenticRevertError;

package/src/lib/agentic/execution/outbound.d.ts

@@ -3,9 +3,9 @@ import { CHAIN } from '../../constants/enums';
 import type { MoveableToken } from '../../constants/tokens';
 import type { UniversalExecuteParams, UniversalOutboundTxRequest } from '../../orchestrator/orchestrator.types';
 import type { AgenticGeneration } from '../deployments';
-import type { Call } from '../contracts/v5';
+import type { Call } from '../contracts/v6';
 import type { AgenticRuntime } from '../runtime';
-/** URP MAX_ACTIONS_PER_REQUEST at v5. */
+/** URP MAX_ACTIONS_PER_REQUEST at v6. */
 export declare const MAX_DESTINATION_CALLS = 10;
 export interface DestinationCall {
     to: Address;
@@ -46,8 +46,8 @@ export declare function destinationCalls(params: UniversalExecuteParams, ctx: {
  *  - payload   = UEA_MULTICALL ‖ abi.encode(Multicall[1..10]) executed by the AGW's CEA
  *  - value     = protocolFee + maxPCForGas, paid from the AGW's PC
  * The destination account is resolved from the AGW, never from the signer.
- * The SDK never writes a gateway allowance on either door: the gateway pulls
- * from an allowance the owner set separately with an ordinary send.
+ * The SDK does not add approval calls: the v6 wallet approves and clears
+ * the gateway allowance within its own outbound execution.
  */
 export declare function composeOutbound(runtime: AgenticRuntime, gen: AgenticGeneration, wallet: Address, params: UniversalExecuteParams, opts: {
     ruleAssets?: readonly Address[];

package/src/lib/agentic/execution/outbound.js

@@ -10,11 +10,11 @@ const abi_1 = require("../../constants/abi");
 const orchestrator_types_1 = require("../../orchestrator/orchestrator.types");
 const route_handlers_1 = require("../../orchestrator/internals/route-handlers");
 const capabilities_1 = require("../capabilities");
-const v5_1 = require("../contracts/v5");
+const v6_1 = require("../contracts/v6");
 const errors_1 = require("../errors");
 /** Includes first-use CEA deployment; explicit caller gas always takes precedence. */
 const FIRST_USE_EVM_GAS_LIMIT = BigInt(2_000_000);
-/** URP MAX_ACTIONS_PER_REQUEST at v5. */
+/** URP MAX_ACTIONS_PER_REQUEST at v6. */
 exports.MAX_DESTINATION_CALLS = 10;
 const MULTICALL_TUPLE = [
     {
@@ -81,8 +81,8 @@ function destinationCalls(params, ctx) {
  *  - payload   = UEA_MULTICALL ‖ abi.encode(Multicall[1..10]) executed by the AGW's CEA
  *  - value     = protocolFee + maxPCForGas, paid from the AGW's PC
  * The destination account is resolved from the AGW, never from the signer.
- * The SDK never writes a gateway allowance on either door: the gateway pulls
- * from an allowance the owner set separately with an ordinary send.
+ * The SDK does not add approval calls: the v6 wallet approves and clears
+ * the gateway allowance within its own outbound execution.
  */
 async function composeOutbound(runtime, gen, wallet, params, opts) {
     (0, capabilities_1.requireCapability)(gen.capabilities, capabilities_1.AgenticCapability.UNIVERSAL_EVM_OUTBOUND);
@@ -154,7 +154,7 @@ async function composeOutbound(runtime, gen, wallet, params, opts) {
     const maxPCForGas = quote.nativeValueForGas;
     const value = quote.protocolFee + maxPCForGas;
     const payload = (0, viem_1.concat)([
-        v5_1.UEA_MULTICALL_PREFIX,
+        v6_1.UEA_MULTICALL_PREFIX,
         (0, viem_1.encodeAbiParameters)(MULTICALL_TUPLE, [calls]),
     ]);
     const request = {

package/src/lib/agentic/execution/send.js

@@ -8,7 +8,7 @@ const progress_hook_types_1 = require("../../progress-hook/progress-hook.types")
 const route_detector_1 = require("../../orchestrator/route-detector");
 const helpers_1 = require("../../orchestrator/internals/helpers");
 const capabilities_1 = require("../capabilities");
-const v5_1 = require("../contracts/v5");
+const v6_1 = require("../contracts/v6");
 const ids_1 = require("../codec/ids");
 const errors_1 = require("../errors");
 const common_1 = require("../management/common");
@@ -173,7 +173,7 @@ async function agenticSend(runtime, actx, params, options) {
             }
             rulesId = rule.rulesId;
             const cfg = await snap.read(gen.addresses.rulesPolicy, gen.contracts.abis.policy, 'getConfig', [
-                (0, ids_1.configId)(wallet, rule.rulesId, (0, ids_1.actionId)(gen.addresses.gateway, v5_1.SEND_OUTBOUND_SELECTOR)),
+                (0, ids_1.configId)(wallet, rule.rulesId, (0, ids_1.actionId)(gen.addresses.gateway, v6_1.SEND_OUTBOUND_SELECTOR)),
                 wallet,
             ]);
             ruleAssets = cfg.assets.map((a) => (0, viem_1.getAddress)(a.token));
@@ -185,7 +185,7 @@ async function agenticSend(runtime, actx, params, options) {
         });
         outboundChain = out.chain;
         meta = { route: 'UOA_TO_CEA', destinationAccount: out.destinationAccount };
-        const [walletPc, tokenBalance, allowance] = await Promise.all([
+        const [walletPc, tokenBalance] = await Promise.all([
             runtime.reader.getBalance({
                 address: wallet,
                 blockNumber: snap.blockNumber,
@@ -193,7 +193,6 @@ async function agenticSend(runtime, actx, params, options) {
             out.amount > BigInt(0)
                 ? snap.read(out.token, abi_1.ERC20_EVM, 'balanceOf', [wallet])
                 : Promise.resolve(BigInt(0)),
-            snap.read(out.token, abi_1.ERC20_EVM, 'allowance', [wallet, gen.addresses.gateway]),
         ]);
         if (walletPc < out.value) {
             throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.WALLET_BALANCE_INSUFFICIENT, `wallet ${wallet} holds ${walletPc} PC wei; this outbound needs ${out.value} (protocol fee + gas cap)`, { hint: "Fund the wallet's PC with an ordinary send to its address." });
@@ -201,13 +200,6 @@ async function agenticSend(runtime, actx, params, options) {
         if (tokenBalance < out.amount) {
             throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.WALLET_BALANCE_INSUFFICIENT, `wallet ${wallet} holds ${tokenBalance} of ${out.token}; this outbound burns ${out.amount}`);
         }
-        // Both doors only consume an allowance the owner set separately; the SDK
-        // never writes one (a write from a stale read could restore revoked authority).
-        if (out.amount > allowance) {
-            throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.GATEWAY_ALLOWANCE_INSUFFICIENT, `the gateway may pull ${allowance} of ${out.token} from the wallet; this outbound needs ${out.amount}`, {
-                hint: 'Set a bounded allowance first with an owner-door send: approve(gateway, cap) on the token (approve(gateway, 0) removes it).',
-            });
-        }
         if (actx.door === 'agent') {
             if (expectedCEA && expectedCEA !== out.destinationAccount) {
                 throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.INCONSISTENT_READ, `rule ${rulesId} committed destination account ${expectedCEA}, but the wallet's account on ${out.chain} now derives to ${out.destinationAccount}`, {

package/src/lib/agentic/execution/svm-outbound.d.ts

@@ -1,6 +1,6 @@
 /** Outbound encoding plus a diagnostic-only policy preview. */
 import { type Address, type Hex } from 'viem';
-import type { Call, SvmConfigRead } from '../contracts/v5';
+import type { Call, SvmConfigRead } from '../contracts/v6';
 export interface SvmOutboundInput {
     wallet: Address;
     gateway: Address;

package/src/lib/agentic/execution/svm-payload.js

@@ -90,7 +90,7 @@ function validateAgwSvmPayload(terms, recipient, payload) {
     if (rule < 0)
         fail('ProgramNotAllowed');
     const fixed = terms.programs[rule].maxAccounts;
-    if (fixed && fixed !== v.accounts.length)
+    if (fixed !== 255 && fixed !== v.accounts.length)
         fail('SvmAccountCountMismatch');
     const pins = terms.pins.filter((p) => p.ruleIndex === rule);
     for (const p of pins) {

package/src/lib/agentic/execution/svm-public.js

@@ -94,22 +94,16 @@ async function sendPublicSvm(runtime, actx, p, options) {
             destinationTransfer = { recipient: target, token, amount };
             transferValue = quote.isNative ? amount : BigInt(0);
         }
-        const [pc, balance, allowance] = await Promise.all([
+        const [pc, balance] = await Promise.all([
             runtime.reader.getBalance({
                 address: wallet,
                 blockNumber: snap.blockNumber,
             }),
             snap.read(token, viem_1.erc20Abi, 'balanceOf', [wallet]),
-            snap.read(token, viem_1.erc20Abi, 'allowance', [
-                wallet,
-                gen.addresses.gateway,
-            ]),
         ]);
         const value = quote.protocolFee + quote.nativeValueForGas;
         if (pc < value || balance < amount)
             throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.WALLET_BALANCE_INSUFFICIENT, 'wallet cannot cover Solana outbound');
-        if (allowance < amount)
-            throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.GATEWAY_ALLOWANCE_INSUFFICIENT, 'set the wallet gateway allowance separately');
         const call = (0, svm_outbound_1.buildAgwSvmAction)({
             wallet,
             gateway: gen.addresses.gateway,

package/src/lib/agentic/execution/svm-send.d.ts

@@ -17,7 +17,7 @@ export interface PreparedSvmRequest {
 }
 export declare function prepareSvmAgentExecution(runtime: AgenticRuntime, gen: AgenticGeneration, input: PreparedSvmRequest, metadata: SvmMetadataProvider): Promise<{
     stored: import("../reads/svm").SvmRuleSnapshot;
-    call: import("../contracts/v5").Call;
+    call: import("../contracts/v6").Call;
     instruction: {
         recipient: `0x${string}`;
         payload: `0x${string}`;

package/src/lib/agentic/execution/svm-send.js

@@ -55,9 +55,6 @@ async function prepareSvmAgentExecution(runtime, gen, input, metadata) {
         const balance = await snap.read(input.token, viem_1.erc20Abi, 'balanceOf', [input.wallet]);
         if (balance < input.amount)
             throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.WALLET_BALANCE_INSUFFICIENT, 'wallet token balance is below the SVM amount');
-        const allowance = await snap.read(input.token, viem_1.erc20Abi, 'allowance', [input.wallet, gen.addresses.gateway]);
-        if (allowance < input.amount)
-            throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.GATEWAY_ALLOWANCE_INSUFFICIENT, 'owner must establish the SVM gateway allowance separately');
     }
     const signerPc = await runtime.signerBalance();
     const gasReserve = (await runtime.getGasPrice()) * BigInt(10_000_000);

package/src/lib/agentic/index.d.ts

@@ -1,4 +1,4 @@
-export type { AgenticAddress, AgenticHex, AgenticDoor, AgenticNamespace, AgenticProgressHook, AgenticTxMetadata, AgenticWallet, RuleCall as AllowedCall, RuleAsset as AssetCap, Checkpoint, CheckpointKind, CreateOptions, CreateResult, ForeignChainNamespace, DecodedSolanaRule, Rule, RuleInput, Pin, Spent, WalletMarker, RulesRecord, Selector, WalletInfo, WalletSummary, } from './agentic.types';
+export type { AgenticAddress, AgenticHex, AgenticDoor, AgenticNamespace, AgenticProgressHook, AgenticTxMetadata, AgenticWallet, RuleCall as AllowedCall, RuleAsset as AssetCap, Checkpoint, CheckpointKind, CreateOptions, CreateResult, ForeignChainNamespace, DecodedSolanaRule, Rule, RuleInput, Pin, Spent, WalletMarker, ArgumentPath, RulesRecord, Selector, WalletInfo, WalletSummary, } from './agentic.types';
 export { AGENTIC_ERROR_CODE, AgenticError, AgenticRevertError } from './errors';
 export type { AgenticErrorCode } from './errors';
 export { AGENTIC } from './constants';