@rhinestone/1auth 0.6.8 → 0.6.9

package/dist/index.d.ts

@@ -1,10 +1,71 @@
-import { O as OneAuthClient, W as WebAuthnSignature, I as IntentCall, S as SendIntentResult } from './client-BrMrhetG.js';
-export { A as AuthResult, i as AuthenticateOptions, j as AuthenticateResult, B as BalanceRequirement, _ as BatchIntentItem, a1 as BatchIntentItemResult, V as CheckConsentOptions, X as CheckConsentResult, z as CloseOnStatus, h as ConnectResult, R as ConsentData, Q as ConsentField, C as CreateSigningRequestResponse, p as EIP712Domain, r as EIP712TypeField, q as EIP712Types, E as EmbedOptions, F as ExecuteIntentResponse, H as IntentHistoryItem, G as IntentHistoryOptions, J as IntentHistoryResult, w as IntentQuote, x as IntentStatus, u as IntentTokenRequest, y as OrchestratorStatus, g as PasskeyCredential, P as PasskeyProviderConfig, a3 as PrepareBatchIntentResponse, D as PrepareIntentResponse, a2 as PreparedBatchIntent, Y as RequestConsentOptions, Z as RequestConsentResult, $ as SendBatchIntentOptions, a0 as SendBatchIntentResult, v as SendIntentOptions, K as SendSwapOptions, L as SendSwapResult, l as SignMessageOptions, m as SignMessageResult, n as SignTypedDataOptions, o as SignTypedDataResult, d as SigningError, e as SigningErrorCode, a as SigningRequestOptions, f as SigningRequestStatus, b as SigningResult, k as SigningResultBase, c as SigningSuccess, M as SwapQuote, N as ThemeConfig, T as TransactionAction, t as TransactionDetails, s as TransactionFees, U as UserPasskeysResponse } from './client-BrMrhetG.js';
-export { O as OneAuthProvider, a as OneAuthProviderOptions, c as createOneAuthProvider } from './provider-Dgv533YQ.js';
-import { Address, LocalAccount, Chain, Transport, Hex, WalletClient, Hash } from 'viem';
+import { O as OneAuthClient } from './client-BNluVe4_.js';
+import { Abi, Address, LocalAccount, WalletClient, Hash, Chain } from 'viem';
+import { Permission } from '@rhinestone/sdk';
+export { Permission } from '@rhinestone/sdk';
+import { h as IntentCall, i as SendIntentResult } from './types-1BMD1PSH.js';
+export { a7 as AssetBalance, a8 as AssetBalanceBucket, a9 as AssetsResponse, u as AuthFlow, A as AuthResult, v as AuthWithModalOptions, z as AuthenticateOptions, B as AuthenticateResult, R as BalanceRequirement, ap as BatchIntentItem, as as BatchIntentItemResult, ad as CheckConsentOptions, ae as CheckConsentResult, a0 as CloseOnStatus, y as ConnectResult, ac as ConsentData, ab as ConsentField, w as CreateAccountWithModalOptions, C as CreateCrossChainPermissionInput, r as CreateSigningRequestResponse, k as CrossChainPermit, l as CrossChainSettlementLayer, M as EIP712Domain, O as EIP712TypeField, N as EIP712Types, E as EmbedOptions, a2 as ExecuteIntentResponse, a6 as GetAssetsOptions, an as GrantPermissionContractMetadata, ah as GrantPermissionsOptions, ai as GrantPermissionsResult, a4 as IntentHistoryItem, a3 as IntentHistoryOptions, a5 as IntentHistoryResult, Z as IntentQuote, _ as IntentStatus, X as IntentTokenRequest, aj as ListSessionGrantsOptions, ak as ListSessionGrantsResult, L as LoginWithModalOptions, ax as OneAuthTelemetryAttributeValue, ay as OneAuthTelemetryAttributes, az as OneAuthTelemetryConfig, aA as OneAuthTelemetryEvent, aB as OneAuthTelemetryEventName, aC as OneAuthTelemetryFlow, aD as OneAuthTelemetryTraceContext, $ as OrchestratorStatus, t as PasskeyCredential, P as PasskeyProviderConfig, au as PrepareBatchIntentResponse, a1 as PrepareIntentResponse, at as PreparedBatchIntent, af as RequestConsentOptions, ag as RequestConsentResult, aq as SendBatchIntentOptions, ar as SendBatchIntentResult, Y as SendIntentOptions, am as SessionGrantChain, al as SessionGrantRecord, F as SignMessageOptions, G as SignMessageResult, J as SignTypedDataOptions, K as SignTypedDataResult, x as SignerType, p as SigningError, q as SigningErrorCode, m as SigningRequestOptions, s as SigningRequestStatus, n as SigningResult, D as SigningResultBase, o as SigningSuccess, ao as SmartSessionPolicy, av as SponsorshipCallbackConfig, S as SponsorshipConfig, aw as SponsorshipUrlConfig, aa as ThemeConfig, T as TransactionAction, V as TransactionDetails, Q as TransactionFees, U as UserPasskeysResponse, W as WebAuthnSignature, j as createCrossChainPermission } from './types-1BMD1PSH.js';
+export { O as OneAuthProvider, a as OneAuthProviderOptions, c as createOneAuthProvider } from './provider-BgD9PeDX.js';
+import { P as PasskeyWalletClientConfig, S as SendCallsParams } from './verify-CZe-m_Vf.js';
+export { E as ETHEREUM_MESSAGE_PREFIX, T as TransactionCall, e as encodeWebAuthnSignature, h as hashCalls, a as hashMessage, v as verifyMessageHash } from './verify-CZe-m_Vf.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as React from 'react';
-export { getTokenAddress, getTokenDecimals } from '@rhinestone/sdk';
+
+type DefinePermissionsConfig<TAbi extends Abi> = Permission<TAbi> & {
+    /** Optional human-readable name surfaced in the review UI. */
+    name?: string;
+};
+interface DefinedPermissions<TAbi extends Abi = Abi> {
+    /**
+     * v2 SmartSession permissions, ready to pass to
+     * `OneAuthClient.grantPermissions({ ...definePermissions(...) })`.
+     *
+     * Always a single-element array so the `...spread` pattern works cleanly
+     * with `grantPermissions`, which accepts `permissions: Permission[]`.
+     *
+     * Widened to `Permission<Abi>` (rather than `Permission<TAbi>`) so the
+     * spread composes with `GrantPermissionsOptions.permissions: Permission<Abi>[]`.
+     * The SDK's v2 `Permission<TAbi>` includes conditional `SpendingLimitField<TFn>` /
+     * `ValueLimitField<TFn>` types that break covariance over `TAbi`, so an inferred
+     * narrow `Permission<erc20Abi>` is no longer assignable to `Permission<Abi>`.
+     * We keep `TAbi` on the type parameter so `contracts[].abi` retains its
+     * narrow shape for the review UI.
+     */
+    permissions: [Permission<Abi>];
+    /**
+     * Contract metadata for the permission review UI. The address and ABI
+     * here mirror the entry in `permissions[0]`; `name` is optional and
+     * purely cosmetic (it's never sent to a contract).
+     */
+    contracts: Array<{
+        address: Address;
+        name?: string;
+        abi: TAbi;
+    }>;
+}
+/**
+ * Build a v2 SmartSession `Permission` from an ABI + function map.
+ *
+ * The Rhinestone SDK derives function selectors and universal-action
+ * calldata offsets from the ABI internally, so app code no longer needs
+ * to spell out raw 4-byte selectors or parameter indices. The accepted
+ * shape is the SDK's own `Permission<TAbi>` plus an optional `name` for
+ * the review UI.
+ *
+ * @example
+ * const permissions = definePermissions({
+ *   address: USDC,
+ *   abi: erc20Abi,
+ *   name: "USDC",
+ *   functions: {
+ *     transfer: {
+ *       params: { to: { condition: "equal", value: RECIPIENT } },
+ *     },
+ *   },
+ * });
+ *
+ * await oneAuth.grantPermissions({ ...permissions, sessionKeyAddress });
+ */
+declare function definePermissions<const TAbi extends Abi>(config: DefinePermissionsConfig<TAbi>): DefinedPermissions<TAbi>;
 
 /**
  * viem LocalAccount adapter for 1auth passkey-controlled smart accounts.
@@ -18,7 +79,10 @@ export { getTokenAddress, getTokenDecimals } from '@rhinestone/sdk';
  */
 
 type PasskeyAccount = LocalAccount<"1auth"> & {
-    username: string;
+    /** Optional username hint retained for legacy integrations. */
+    username?: string;
+    /** Smart account address used as the canonical signer identity. */
+    accountAddress: Address;
 };
 /**
  * Creates a viem `LocalAccount` that delegates signing to the 1auth passkey service.
@@ -34,9 +98,8 @@ type PasskeyAccount = LocalAccount<"1auth"> & {
  *
  * @param client - A configured `OneAuthClient` instance
  * @param params.address - The EVM address of the user's smart account
- * @param params.username - The 1auth username associated with the account; included
- *   in signing requests so the passkey service can look up the correct credential
- * @returns A `PasskeyAccount` extending `LocalAccount<"1auth">` with a `username` field
+ * @param params.username - Optional 1auth username hint for older accounts
+ * @returns A `PasskeyAccount` extending `LocalAccount<"1auth">`
  *
  * @example
  * ```typescript
@@ -47,7 +110,6 @@ type PasskeyAccount = LocalAccount<"1auth"> & {
  * const client = new OneAuthClient({ clientId: "my-app" });
  * const account = createPasskeyAccount(client, {
  *   address: "0xYourSmartAccountAddress",
- *   username: "alice",
  * });
  *
  * const walletClient = createWalletClient({
@@ -61,82 +123,8 @@ type PasskeyAccount = LocalAccount<"1auth"> & {
  */
 declare function createPasskeyAccount(client: OneAuthClient, params: {
     address: Address;
-    username: string;
-}): PasskeyAccount;
-
-/**
- * Configuration for creating a passkey-enabled WalletClient
- */
-interface PasskeyWalletClientConfig {
-    /** User's smart account address */
-    accountAddress: Address;
-    /** Username for the passkey provider (defaults to accountAddress) */
     username?: string;
-    /** Base URL of the auth API (defaults to https://passkey.1auth.box) */
-    providerUrl?: string;
-    /** Client identifier for this application */
-    clientId: string;
-    /** Optional URL of the dialog UI */
-    dialogUrl?: string;
-    /** Chain configuration */
-    chain: Chain;
-    /** Transport (e.g., http(), webSocket()) */
-    transport: Transport;
-    /** Wait for a transaction hash before resolving send calls. */
-    waitForHash?: boolean;
-    /** Maximum time to wait for a transaction hash in ms. */
-    hashTimeoutMs?: number;
-    /** Poll interval for transaction hash in ms. */
-    hashIntervalMs?: number;
-}
-/**
- * A single call in a batch transaction
- */
-interface TransactionCall {
-    /** Target contract address */
-    to: Address;
-    /** Calldata to send */
-    data?: Hex;
-    /** Value in wei to send */
-    value?: bigint;
-    /** Optional label for the transaction review UI (e.g., "Swap ETH for USDC") */
-    label?: string;
-    /** Optional sublabel for additional context (e.g., "1 ETH → 2,500 USDC") */
-    sublabel?: string;
-}
-/**
- * Parameters for sendCalls (batched transactions)
- */
-interface SendCallsParams {
-    /** Array of calls to execute */
-    calls: TransactionCall[];
-    /** Optional chain id override */
-    chainId?: number;
-    /** Optional token requests for orchestrator output (what tokens/amounts to deliver) */
-    tokenRequests?: {
-        token: string;
-        amount: bigint;
-    }[];
-    /** Constrain which tokens the orchestrator can use as input/payment */
-    sourceAssets?: string[];
-    /** Which chain to look for source assets on */
-    sourceChainId?: number;
-}
-
-/**
- * Encode a WebAuthn signature for ERC-1271 verification on-chain
- *
- * @param sig - The WebAuthn signature from the passkey
- * @returns ABI-encoded signature bytes
- */
-declare function encodeWebAuthnSignature(sig: WebAuthnSignature): Hex;
-/**
- * Hash an array of transaction calls for signing
- *
- * @param calls - Array of transaction calls
- * @returns keccak256 hash of the encoded calls
- */
-declare function hashCalls(calls: TransactionCall[]): Hex;
+}): PasskeyAccount;
 
 /**
  * @file viem WalletClient factory backed by passkey signing.
@@ -196,6 +184,13 @@ type PasskeyWalletClient = WalletClient & {
  */
 declare function createPasskeyWalletClient(config: PasskeyWalletClientConfig): PasskeyWalletClient;
 
+/** Identity used to sign a queued batch. Account address is the canonical path. */
+interface BatchQueueIdentity {
+    /** Optional username hint for legacy accounts. */
+    username?: string;
+    /** Smart account address of the signer. */
+    accountAddress?: string;
+}
 /**
  * A batched call in the queue
  */
@@ -228,7 +223,7 @@ interface BatchQueueContextValue {
     /** Clear all calls from the batch */
     clearBatch: () => void;
     /** Sign and execute all batched calls */
-    signAll: (username: string) => Promise<SendIntentResult>;
+    signAll: (identity?: string | BatchQueueIdentity) => Promise<SendIntentResult>;
     /** Whether the widget is expanded */
     isExpanded: boolean;
     /** Set widget expanded state */
@@ -245,15 +240,17 @@ declare function useBatchQueue(): BatchQueueContextValue;
 interface BatchQueueProviderProps {
     /** The OneAuthClient instance */
     client: OneAuthClient;
-    /** Optional username for localStorage persistence key */
+    /** Optional username for legacy localStorage persistence and account lookup. */
     username?: string;
+    /** Optional account address for address-only sessions and persistence. */
+    accountAddress?: string;
     /** Children to render */
     children: React.ReactNode;
 }
 /**
  * Provider component for the batch queue
  */
-declare function BatchQueueProvider({ client, username, children, }: BatchQueueProviderProps): react_jsx_runtime.JSX.Element;
+declare function BatchQueueProvider({ client, username, accountAddress, children, }: BatchQueueProviderProps): react_jsx_runtime.JSX.Element;
 
 /**
  * @file Floating UI widget for the 1auth batch transaction queue.
@@ -268,7 +265,7 @@ declare function BatchQueueProvider({ client, username, children, }: BatchQueueP
  * consumer's bundler.
  */
 interface BatchQueueWidgetProps {
-    /** Callback when "Sign All" is clicked - should provide username */
+    /** Callback when "Sign All" is clicked. */
     onSignAll: () => void;
 }
 /**
@@ -287,18 +284,19 @@ interface BatchQueueWidgetProps {
  * Must be rendered inside a `BatchQueueProvider`.
  *
  * @param props.onSignAll - Called when the user clicks "Sign All". The
- *   implementor is responsible for resolving the username and passing it to
- *   `useBatchQueue().signAll(username)`.
+ *   implementor is responsible for resolving the account identity and passing
+ *   it to `useBatchQueue().signAll({ accountAddress, username })`.
  */
 declare function BatchQueueWidget({ onSignAll }: BatchQueueWidgetProps): react_jsx_runtime.JSX.Element | null;
 
 /**
  * @file Chain and token registry for the 1auth SDK.
  *
- * Wraps `@rhinestone/sdk` chain/token data and combines it with viem's chain
- * definitions to expose a filtered, testnet-aware registry. Consumers can
- * look up supported chains and tokens, resolve token addresses by symbol, and
- * retrieve chain metadata such as explorer URLs and default RPC endpoints.
+ * Wraps `@rhinestone/shared-configs` chain/token data and combines it with
+ * viem's chain definitions to expose a filtered, testnet-aware registry.
+ * Consumers can look up supported chains and tokens, resolve token addresses
+ * by symbol, and retrieve chain metadata such as explorer URLs and default RPC
+ * endpoints.
  *
  * Testnet inclusion is controlled by the `includeTestnets` option on each
  * function or, as a project-wide default, by the environment variables
@@ -309,8 +307,6 @@ type TokenConfig = {
     symbol: string;
     address: Address;
     decimals: number;
-    supportsMultichain?: boolean;
-    [key: string]: unknown;
 };
 type ChainFilterOptions = {
     includeTestnets?: boolean;
@@ -327,55 +323,11 @@ declare function getChainExplorerUrl(chainId: number): string | undefined;
 declare function getChainRpcUrl(chainId: number): string | undefined;
 declare function getSupportedTokens(chainId: number): TokenConfig[];
 declare function getSupportedTokenSymbols(chainId: number): string[];
+declare function getTokenAddress(symbolOrAddress: string, chainId: number): Address;
+declare function getTokenDecimals(symbolOrAddress: string, chainId: number): number;
 declare function resolveTokenAddress(token: string, chainId: number): Address;
 declare function isTestnet(chainId: number): boolean;
 declare function getTokenSymbol(tokenAddress: Address, chainId: number): string;
 declare function isTokenAddressSupported(tokenAddress: Address, chainId: number): boolean;
 
-/**
- * The EIP-191 prefix used for personal message signing.
- * This is the standard Ethereum message prefix for `personal_sign`.
- */
-declare const ETHEREUM_MESSAGE_PREFIX = "\u0019Ethereum Signed Message:\n";
-/**
- * Hash a message with the EIP-191 Ethereum prefix.
- *
- * This is the same hashing function used by the passkey sign dialog.
- * Use this to verify that the `signedHash` returned from `signMessage()`
- * matches your original message.
- *
- * Format: keccak256("\x19Ethereum Signed Message:\n" + len + message)
- *
- * @example
- * ```typescript
- * const message = "Sign in to MyApp\nTimestamp: 1234567890";
- * const result = await client.signMessage({ username: 'alice', message });
- *
- * // Verify the hash matches
- * const expectedHash = hashMessage(message);
- * if (result.signedHash === expectedHash) {
- *   console.log('Hash matches - signature is for this message');
- * }
- * ```
- */
-declare function hashMessage(message: string): `0x${string}`;
-/**
- * Verify that a signedHash matches the expected message.
- *
- * This is a convenience wrapper around `hashMessage()` that returns
- * a boolean. For full cryptographic verification of the P256 signature,
- * use on-chain verification via the WebAuthn.sol contract.
- *
- * @example
- * ```typescript
- * const result = await client.signMessage({ username: 'alice', message });
- *
- * if (result.success && verifyMessageHash(message, result.signedHash)) {
- *   // The signature is for this exact message
- *   // For full verification, verify the P256 signature on-chain or server-side
- * }
- * ```
- */
-declare function verifyMessageHash(message: string, signedHash: string | undefined): boolean;
-
-export { type BatchQueueContextValue, BatchQueueProvider, type BatchQueueProviderProps, BatchQueueWidget, type BatchQueueWidgetProps, type BatchedCall, type ChainFilterOptions, ETHEREUM_MESSAGE_PREFIX, IntentCall, OneAuthClient, type PasskeyAccount, type PasskeyWalletClient, type PasskeyWalletClientConfig, type SendCallsParams, SendIntentResult, type TokenConfig, type TransactionCall, WebAuthnSignature, createPasskeyAccount, createPasskeyWalletClient, encodeWebAuthnSignature, getAllSupportedChainsAndTokens, getChainById, getChainExplorerUrl, getChainName, getChainRpcUrl, getSupportedChainIds, getSupportedChains, getSupportedTokenSymbols, getSupportedTokens, getTokenSymbol, hashCalls, hashMessage, isTestnet, isTokenAddressSupported, resolveTokenAddress, useBatchQueue, verifyMessageHash };
+export { type BatchQueueContextValue, type BatchQueueIdentity, BatchQueueProvider, type BatchQueueProviderProps, BatchQueueWidget, type BatchQueueWidgetProps, type BatchedCall, type ChainFilterOptions, type DefinePermissionsConfig, type DefinedPermissions, IntentCall, OneAuthClient, type PasskeyAccount, type PasskeyWalletClient, PasskeyWalletClientConfig, SendCallsParams, SendIntentResult, type TokenConfig, createPasskeyAccount, createPasskeyWalletClient, definePermissions, getAllSupportedChainsAndTokens, getChainById, getChainExplorerUrl, getChainName, getChainRpcUrl, getSupportedChainIds, getSupportedChains, getSupportedTokenSymbols, getSupportedTokens, getTokenAddress, getTokenDecimals, getTokenSymbol, isTestnet, isTokenAddressSupported, resolveTokenAddress, useBatchQueue };