@rhinestone/1auth 0.7.8-dev.0 → 0.8.1

package/dist/{types-Dzm5lZK-.d.mts → types-BN6cCuAd.d.mts}

@@ -226,6 +226,12 @@ interface PasskeyProviderConfig {
      * can use this callback to create spans/logs in their own OTEL setup.
      */
     telemetry?: OneAuthTelemetryConfig;
+    /**
+     * Called when the trusted passkey dialog invalidates the current application
+     * session, including deployment-forced logout. Use this to clear host-app
+     * in-memory auth state that cannot be inferred from localStorage alone.
+     */
+    onDisconnect?: () => void;
     /**
      * When `true`, the SDK schedules a one-time {@link OneAuthClient.prewarm} on
      * an idle callback after construction — loading the dialog bundle into a
@@ -395,6 +401,40 @@ interface SignMessageOptions {
     /** Override the client's blind signing setting for this request. */
     blind_signing?: boolean;
 }
+/** A sanitized candidate failure returned by intent preparation. */
+interface OneAuthCandidateError {
+    code?: string;
+    message?: string;
+    details?: OneAuthErrorDetails;
+}
+/** Provider and orchestrator diagnostics safe to expose to the integrating app. */
+interface OneAuthErrorDetails {
+    /** Rhinestone request trace ID for support and log correlation. */
+    traceId?: string;
+    /** Machine-readable Rhinestone error code, when supplied. */
+    providerCode?: string;
+    /** HTTP status returned by the upstream provider, when supplied. */
+    statusCode?: number;
+    /** Execution-error category returned by the orchestrator. */
+    errorType?: string;
+    /** Tenderly or provider simulation links for failed execution. */
+    simulationUrls?: string[];
+    /** Human-readable reason supplied by a prepare-stage failure. */
+    reason?: string;
+    /** Sanitized alternatives returned when no preparation candidate succeeded. */
+    candidateErrors?: OneAuthCandidateError[];
+}
+/** Common structured error returned by signing and intent operations. */
+interface OneAuthResultError<Code extends string = string> {
+    code: Code;
+    message: string;
+    details?: OneAuthErrorDetails;
+}
+/** Runtime signing codes accepted from redirects, HTTP results, and dialog messages. */
+declare const SIGNING_ERROR_CODES: readonly ["USER_REJECTED", "EXPIRED", "INVALID_REQUEST", "NETWORK_ERROR", "POPUP_BLOCKED", "SIGNING_FAILED", "UNKNOWN"];
+type SigningErrorCode = (typeof SIGNING_ERROR_CODES)[number];
+/** Returns whether an untrusted value is a public signing error code. */
+declare function isSigningErrorCode(value: unknown): value is SigningErrorCode;
 /**
  * Base result for all signing operations (message signing, typed data signing).
  */
@@ -407,10 +447,7 @@ interface SigningResultBase {
     /** Passkey credentials used for signing */
     passkey?: PasskeyCredentials;
     /** Error details if failed */
-    error?: {
-        code: SigningErrorCode;
-        message: string;
-    };
+    error?: OneAuthResultError<SigningErrorCode>;
 }
 /**
  * Result of signMessage
@@ -478,15 +515,6 @@ interface SigningRequestOptions {
     /** Override the client's blind signing setting for this request. */
     blind_signing?: boolean;
 }
-interface PasskeyCredential {
-    id: string;
-    deviceName: string | null;
-    publicKeyX: string;
-    publicKeyY: string;
-}
-interface UserPasskeysResponse {
-    passkeys: PasskeyCredential[];
-}
 interface WebAuthnSignature {
     authenticatorData: string;
     clientDataJSON: string;
@@ -496,10 +524,13 @@ interface WebAuthnSignature {
     s: string;
     topOrigin: string | null;
 }
+/** Passkey identity returned after server-side verification. */
 interface PasskeyCredentials {
     credentialId: string;
     publicKeyX: string;
     publicKeyY: string;
+    /** Server-owned on-chain slot. Optional for compatibility with pre-slot SDK consumers. */
+    keyId?: number;
 }
 interface SigningSuccess {
     success: true;
@@ -513,7 +544,6 @@ interface SigningSuccess {
     /** Intent ID - present for intent signing (after execute in dialog) */
     intentId?: string;
 }
-type SigningErrorCode = "USER_REJECTED" | "EXPIRED" | "INVALID_REQUEST" | "NETWORK_ERROR" | "POPUP_BLOCKED" | "SIGNING_FAILED" | "UNKNOWN";
 interface EmbedOptions {
     container: HTMLElement;
     width?: string;
@@ -524,10 +554,7 @@ interface EmbedOptions {
 interface SigningError {
     success: false;
     requestId?: string;
-    error: {
-        code: SigningErrorCode;
-        message: string;
-    };
+    error: OneAuthResultError<SigningErrorCode>;
 }
 type SigningResult = SigningSuccess | SigningError;
 interface CreateSigningRequestResponse {
@@ -540,10 +567,7 @@ interface SigningRequestStatus {
     id: string;
     status: "PENDING" | "COMPLETED" | "REJECTED" | "EXPIRED" | "FAILED";
     signature?: WebAuthnSignature;
-    error?: {
-        code: SigningErrorCode;
-        message: string;
-    };
+    error?: OneAuthResultError<SigningErrorCode>;
 }
 /**
  * Low-level sponsorship config: caller supplies callbacks that produce tokens.
@@ -680,6 +704,14 @@ interface IntentTokenRequest {
     /** Amount in base units (use parseUnits for decimals) */
     amount: bigint;
 }
+/**
+ * Funding policy for an intent.
+ *
+ * - `required`: app sponsorship must succeed or the intent fails.
+ * - `preferred`: try app sponsorship, then explicitly re-quote as self-funded.
+ * - `disabled`: quote and submit as self-funded without an extension grant.
+ */
+type SponsorshipMode = "required" | "preferred" | "disabled";
 /**
  * Options for sendIntent
  */
@@ -716,12 +748,12 @@ interface SendIntentOptions {
     /** Poll interval for transaction hash in ms. */
     hashIntervalMs?: number;
     /**
-     * Whether to request sponsorship (app pays gas) for this intent.
-     * Defaults to `true`. When `false`, the intent authenticates with the
-     * app's JWT but pays its own gas from source assets — no extension
-     * token is fetched. Requires `sponsorship` to be configured on the
-     * client either way; there is no anonymous fallback.
+     * Funding policy. Defaults to `required`, so sponsorship failures never
+     * silently charge the user. Use `preferred` to opt into a reviewed,
+     * self-funded fallback, or `disabled` to request self-funding directly.
      */
+    sponsorshipMode?: SponsorshipMode;
+    /** @deprecated Use `sponsorshipMode: "disabled"` instead of `sponsor: false`. */
     sponsor?: boolean;
     /** Override the client's blind signing setting for this request. */
     blind_signing?: boolean;
@@ -778,12 +810,7 @@ interface SendIntentResult {
     /** Operation ID from orchestrator */
     operationId?: string;
     /** Error details if failed */
-    error?: {
-        code: string;
-        message: string;
-        /** Structured provider details, when the auth service returns them. */
-        details?: unknown;
-    };
+    error?: OneAuthResultError;
 }
 /**
  * Prepare intent response from auth service
@@ -828,12 +855,7 @@ interface ExecuteIntentResponse {
     transactionHash?: string;
     /** Transaction result data needed for waiting via POST /api/intent/wait */
     transactionResult?: unknown;
-    error?: {
-        code: string;
-        message: string;
-        /** Structured provider details, when the auth service returns them. */
-        details?: unknown;
-    };
+    error?: OneAuthResultError;
 }
 /**
  * EIP-712 Domain parameters
@@ -956,11 +978,9 @@ interface BatchIntentItem {
         moduleAddress: string;
         initData?: string;
     };
-    /**
-     * Whether to request sponsorship for this item. Defaults to `true`.
-     * When `false`, the item authenticates with the app's JWT but no
-     * extension token is fetched for it.
-     */
+    /** Funding policy for this item. Defaults to `required`. */
+    sponsorshipMode?: SponsorshipMode;
+    /** @deprecated Use `sponsorshipMode: "disabled"` instead of `sponsor: false`. */
     sponsor?: boolean;
 }
 /**
@@ -1118,23 +1138,16 @@ interface RequestConsentResult {
  * key may do. This triggers a passkey-signed management transaction
  * that installs the SmartSession validator and registers the session.
  */
-interface InstallSmartSessionOptions {
+interface InstallSmartSessionBaseOptions {
     /** Account address of the owner — the sole account identity. */
     accountAddress: string;
     /** Target chain to install the validator on. */
     targetChain: number;
     /** Public address of the ECDSA session-key the app holds in localStorage. */
     sessionKeyAddress: `0x${string}`;
-    /**
-     * Per-contract permission specs from `definePermissions()`. 1auth
-     * re-validates server-side against an allowlist before asking the
-     * user to passkey-sign.
-     */
+    /** Per-contract permission specs re-validated by 1auth before signing. */
     permissions: Permission<Abi>[];
-    /**
-     * Cross-chain asset movement permits. The upstream SmartSession SDK expands
-     * these into Permit2 claim policy plus fallback guardrails for bridge fills.
-     */
+    /** Cross-chain asset movement permits used by the SmartSession policies. */
     crossChainPermits?: CrossChainPermit[];
     /** Unix seconds. Session is invalid after this time. */
     validUntil?: number;
@@ -1142,16 +1155,20 @@ interface InstallSmartSessionOptions {
     validAfter?: number;
     /** Optional max number of uses across the session lifetime. */
     maxUses?: number;
-    /**
-     * Passkey EIP-712 signature over `sessionEnable.typedData`.
-     * Omit on the first request to discover whether this exact
-     * permission needs owner authorization; include on the second
-     * request to receive the on-chain enable call.
-     */
-    enableSessionSignature?: `0x${string}` | WebAuthnSignature;
     /** Optional human label shown in the install dialog. */
     label?: string;
 }
+/**
+ * A WebAuthn enable signature must name the exact credential that produced it.
+ * Unsigned discovery/preflight requests intentionally omit both fields.
+ */
+type InstallSmartSessionOptions = InstallSmartSessionBaseOptions & ({
+    enableSessionSignature: WebAuthnSignature;
+    credentialId: string;
+} | {
+    enableSessionSignature?: `0x${string}` | undefined;
+    credentialId?: never;
+});
 interface SmartSessionEnableRequest {
     alreadyEnabled: boolean;
     /**
@@ -1386,8 +1403,8 @@ interface HeadlessIntentOptions {
     sourceChainId?: number;
     /** Persisted handle from `installSmartSession`; required for SmartSession headless quotes. */
     sessionKeyHandle?: SessionKeyHandle;
-    /** Whether to request sponsorship for this intent. Defaults to `true`. */
-    sponsor?: boolean;
+    /** Funding policy chosen at prepare time. Defaults to `required`. */
+    sponsorshipMode?: SponsorshipMode;
 }
 /**
  * Result of {@link OneAuthHeadlessClient.prepareIntent}. The host app
@@ -1421,11 +1438,13 @@ interface HeadlessPrepareResult {
     accountAddress: `0x${string}`;
     /** Cost / token-requirement breakdown from the orchestrator quote. */
     quote?: IntentQuote;
+    /** Funding mode of the authoritative quote. */
+    sponsorshipMode?: "sponsored" | "self-funded";
 }
 /**
- * Options for {@link OneAuthHeadlessClient.submitIntent}. The caller
- * supplies pre-encoded validator-prefixed signatures; 1auth forwards
- * them unchanged to the orchestrator.
+ * Options for {@link OneAuthHeadlessClient.submitIntent}. The caller supplies
+ * pre-encoded validator-prefixed signatures; 1auth forwards them unchanged.
+ * Funding mode and authorization come from the authoritative prepare result.
  */
 interface HeadlessSubmitOptions {
     /** Echoed verbatim from the prepare result. */
@@ -1443,8 +1462,8 @@ interface HeadlessSubmitOptions {
     destinationSignature: `0x${string}`;
     /** Extra SmartSession signature required by SAME_CHAIN / INTENT_EXECUTOR execution. */
     targetExecutionSignature?: `0x${string}`;
-    /** Whether to request sponsorship at submit time. Defaults to `true`. */
-    sponsor?: boolean;
+    /** Funding mode returned by prepareIntent; sponsored submit mints a fresh grant. */
+    sponsorshipMode: "sponsored" | "self-funded";
 }
 /** Result of {@link OneAuthHeadlessClient.submitIntent}. */
 interface HeadlessSubmitResult {
@@ -1467,4 +1486,4 @@ interface HeadlessIntentStatusResult {
     transactionHash?: string;
 }
 
-export { type IntentQuote as $, type AuthResult as A, type AuthenticateOptions as B, type CloseOnStatus as C, type AuthenticateResult as D, type EmbedOptions as E, type SigningResultBase as F, type SignMessageOptions as G, type HeadlessIntentOptions as H, type InstallSmartSessionOptions as I, type SignMessageResult as J, type SignTypedDataOptions as K, type LoginWithModalOptions as L, type SignTypedDataResult as M, type EIP712Domain as N, type EIP712Types as O, type PasskeyProviderConfig as P, type EIP712TypeField as Q, type TransactionAction as R, type SponsorshipConfig as S, type ThemeConfig as T, type UserPasskeysResponse as U, type TransactionFees as V, type WebAuthnSignature as W, type BalanceRequirement as X, type TransactionDetails as Y, type IntentTokenRequest as Z, type SendIntentOptions as _, type HeadlessPrepareResult as a, type IntentStatus as a0, type OrchestratorStatus as a1, type PrepareIntentResponse as a2, type ExecuteIntentResponse as a3, type IntentHistoryOptions as a4, type IntentHistoryItem as a5, type IntentHistoryResult as a6, type GetAssetsOptions as a7, type AssetBalance as a8, type AssetBalanceBucket as a9, type OneAuthTelemetryEvent as aA, type OneAuthTelemetryEventName as aB, type OneAuthTelemetryFlow as aC, type OneAuthTelemetryTraceContext as aD, type AssetsResponse as aa, type ConsentField as ab, type ConsentData as ac, type CheckConsentOptions as ad, type CheckConsentResult as ae, type RequestConsentOptions as af, type RequestConsentResult as ag, type GrantPermissionsOptions as ah, type GrantPermissionsResult as ai, type ListSessionGrantsOptions as aj, type ListSessionGrantsResult as ak, type SessionGrantRecord as al, type SessionGrantChain as am, type GrantPermissionContractMetadata as an, type SmartSessionPolicy as ao, type BatchIntentItem as ap, type SendBatchIntentOptions as aq, type SendBatchIntentResult as ar, type BatchIntentItemResult as as, type PreparedBatchIntent as at, type PrepareBatchIntentResponse as au, type SponsorshipCallbackConfig as av, type SponsorshipUrlConfig as aw, type OneAuthTelemetryAttributeValue as ax, type OneAuthTelemetryAttributes as ay, type OneAuthTelemetryConfig as az, type HeadlessSubmitOptions as b, type HeadlessSubmitResult as c, type HeadlessIntentStatusResult as d, type InstallSmartSessionResult as e, type SessionKeyHandle as f, type SmartSessionEnableRequest as g, type SignerType as h, type IntentCall as i, type SendIntentResult as j, createCrossChainPermission as k, type CreateCrossChainPermissionInput as l, type CrossChainPermit as m, type CrossChainSettlementLayer as n, type SigningRequestOptions as o, type SigningResult as p, type SigningSuccess as q, type SigningError as r, type SigningErrorCode as s, type CreateSigningRequestResponse as t, type SigningRequestStatus as u, type PasskeyCredential as v, type AuthFlow as w, type AuthWithModalOptions as x, type CreateAccountWithModalOptions as y, type ConnectResult as z };
+export { type OneAuthCandidateError as $, type AuthResult as A, type CreateAccountWithModalOptions as B, type CloseOnStatus as C, type ConnectResult as D, type EmbedOptions as E, type AuthenticateOptions as F, type AuthenticateResult as G, type HeadlessIntentOptions as H, type InstallSmartSessionOptions as I, type SigningResultBase as J, type SignMessageOptions as K, type LoginWithModalOptions as L, type SignMessageResult as M, type SignTypedDataOptions as N, type SignTypedDataResult as O, type PasskeyProviderConfig as P, type EIP712Domain as Q, type EIP712Types as R, type SponsorshipConfig as S, type ThemeConfig as T, type EIP712TypeField as U, type TransactionAction as V, type WebAuthnSignature as W, type TransactionFees as X, type BalanceRequirement as Y, type TransactionDetails as Z, type OneAuthErrorDetails as _, type HeadlessPrepareResult as a, type OneAuthResultError as a0, type IntentTokenRequest as a1, type SendIntentOptions as a2, type IntentQuote as a3, type IntentStatus as a4, type OrchestratorStatus as a5, type PrepareIntentResponse as a6, type ExecuteIntentResponse as a7, type IntentHistoryOptions as a8, type IntentHistoryItem as a9, type SponsorshipUrlConfig as aA, type OneAuthTelemetryAttributeValue as aB, type OneAuthTelemetryAttributes as aC, type OneAuthTelemetryConfig as aD, type OneAuthTelemetryEvent as aE, type OneAuthTelemetryEventName as aF, type OneAuthTelemetryFlow as aG, type OneAuthTelemetryTraceContext as aH, type IntentHistoryResult as aa, type GetAssetsOptions as ab, type AssetBalance as ac, type AssetBalanceBucket as ad, type AssetsResponse as ae, type ConsentField as af, type ConsentData as ag, type CheckConsentOptions as ah, type CheckConsentResult as ai, type RequestConsentOptions as aj, type RequestConsentResult as ak, type GrantPermissionsOptions as al, type GrantPermissionsResult as am, type ListSessionGrantsOptions as an, type ListSessionGrantsResult as ao, type SessionGrantRecord as ap, type SessionGrantChain as aq, type GrantPermissionContractMetadata as ar, type SmartSessionPolicy as as, type BatchIntentItem as at, type SendBatchIntentOptions as au, type SendBatchIntentResult as av, type BatchIntentItemResult as aw, type PreparedBatchIntent as ax, type PrepareBatchIntentResponse as ay, type SponsorshipCallbackConfig as az, type HeadlessSubmitOptions as b, type HeadlessSubmitResult as c, type HeadlessIntentStatusResult as d, type InstallSmartSessionResult as e, type SessionKeyHandle as f, type SmartSessionEnableRequest as g, type SignerType as h, type IntentCall as i, type SendIntentResult as j, SIGNING_ERROR_CODES as k, isSigningErrorCode as l, createCrossChainPermission as m, type CreateCrossChainPermissionInput as n, type CrossChainPermit as o, type CrossChainSettlementLayer as p, type SigningRequestOptions as q, type SigningResult as r, type SigningSuccess as s, type SigningError as t, type SigningErrorCode as u, type PasskeyCredentials as v, type CreateSigningRequestResponse as w, type SigningRequestStatus as x, type AuthFlow as y, type AuthWithModalOptions as z };

package/dist/{types-Dzm5lZK-.d.ts → types-BN6cCuAd.d.ts}

@@ -226,6 +226,12 @@ interface PasskeyProviderConfig {
      * can use this callback to create spans/logs in their own OTEL setup.
      */
     telemetry?: OneAuthTelemetryConfig;
+    /**
+     * Called when the trusted passkey dialog invalidates the current application
+     * session, including deployment-forced logout. Use this to clear host-app
+     * in-memory auth state that cannot be inferred from localStorage alone.
+     */
+    onDisconnect?: () => void;
     /**
      * When `true`, the SDK schedules a one-time {@link OneAuthClient.prewarm} on
      * an idle callback after construction — loading the dialog bundle into a
@@ -395,6 +401,40 @@ interface SignMessageOptions {
     /** Override the client's blind signing setting for this request. */
     blind_signing?: boolean;
 }
+/** A sanitized candidate failure returned by intent preparation. */
+interface OneAuthCandidateError {
+    code?: string;
+    message?: string;
+    details?: OneAuthErrorDetails;
+}
+/** Provider and orchestrator diagnostics safe to expose to the integrating app. */
+interface OneAuthErrorDetails {
+    /** Rhinestone request trace ID for support and log correlation. */
+    traceId?: string;
+    /** Machine-readable Rhinestone error code, when supplied. */
+    providerCode?: string;
+    /** HTTP status returned by the upstream provider, when supplied. */
+    statusCode?: number;
+    /** Execution-error category returned by the orchestrator. */
+    errorType?: string;
+    /** Tenderly or provider simulation links for failed execution. */
+    simulationUrls?: string[];
+    /** Human-readable reason supplied by a prepare-stage failure. */
+    reason?: string;
+    /** Sanitized alternatives returned when no preparation candidate succeeded. */
+    candidateErrors?: OneAuthCandidateError[];
+}
+/** Common structured error returned by signing and intent operations. */
+interface OneAuthResultError<Code extends string = string> {
+    code: Code;
+    message: string;
+    details?: OneAuthErrorDetails;
+}
+/** Runtime signing codes accepted from redirects, HTTP results, and dialog messages. */
+declare const SIGNING_ERROR_CODES: readonly ["USER_REJECTED", "EXPIRED", "INVALID_REQUEST", "NETWORK_ERROR", "POPUP_BLOCKED", "SIGNING_FAILED", "UNKNOWN"];
+type SigningErrorCode = (typeof SIGNING_ERROR_CODES)[number];
+/** Returns whether an untrusted value is a public signing error code. */
+declare function isSigningErrorCode(value: unknown): value is SigningErrorCode;
 /**
  * Base result for all signing operations (message signing, typed data signing).
  */
@@ -407,10 +447,7 @@ interface SigningResultBase {
     /** Passkey credentials used for signing */
     passkey?: PasskeyCredentials;
     /** Error details if failed */
-    error?: {
-        code: SigningErrorCode;
-        message: string;
-    };
+    error?: OneAuthResultError<SigningErrorCode>;
 }
 /**
  * Result of signMessage
@@ -478,15 +515,6 @@ interface SigningRequestOptions {
     /** Override the client's blind signing setting for this request. */
     blind_signing?: boolean;
 }
-interface PasskeyCredential {
-    id: string;
-    deviceName: string | null;
-    publicKeyX: string;
-    publicKeyY: string;
-}
-interface UserPasskeysResponse {
-    passkeys: PasskeyCredential[];
-}
 interface WebAuthnSignature {
     authenticatorData: string;
     clientDataJSON: string;
@@ -496,10 +524,13 @@ interface WebAuthnSignature {
     s: string;
     topOrigin: string | null;
 }
+/** Passkey identity returned after server-side verification. */
 interface PasskeyCredentials {
     credentialId: string;
     publicKeyX: string;
     publicKeyY: string;
+    /** Server-owned on-chain slot. Optional for compatibility with pre-slot SDK consumers. */
+    keyId?: number;
 }
 interface SigningSuccess {
     success: true;
@@ -513,7 +544,6 @@ interface SigningSuccess {
     /** Intent ID - present for intent signing (after execute in dialog) */
     intentId?: string;
 }
-type SigningErrorCode = "USER_REJECTED" | "EXPIRED" | "INVALID_REQUEST" | "NETWORK_ERROR" | "POPUP_BLOCKED" | "SIGNING_FAILED" | "UNKNOWN";
 interface EmbedOptions {
     container: HTMLElement;
     width?: string;
@@ -524,10 +554,7 @@ interface EmbedOptions {
 interface SigningError {
     success: false;
     requestId?: string;
-    error: {
-        code: SigningErrorCode;
-        message: string;
-    };
+    error: OneAuthResultError<SigningErrorCode>;
 }
 type SigningResult = SigningSuccess | SigningError;
 interface CreateSigningRequestResponse {
@@ -540,10 +567,7 @@ interface SigningRequestStatus {
     id: string;
     status: "PENDING" | "COMPLETED" | "REJECTED" | "EXPIRED" | "FAILED";
     signature?: WebAuthnSignature;
-    error?: {
-        code: SigningErrorCode;
-        message: string;
-    };
+    error?: OneAuthResultError<SigningErrorCode>;
 }
 /**
  * Low-level sponsorship config: caller supplies callbacks that produce tokens.
@@ -680,6 +704,14 @@ interface IntentTokenRequest {
     /** Amount in base units (use parseUnits for decimals) */
     amount: bigint;
 }
+/**
+ * Funding policy for an intent.
+ *
+ * - `required`: app sponsorship must succeed or the intent fails.
+ * - `preferred`: try app sponsorship, then explicitly re-quote as self-funded.
+ * - `disabled`: quote and submit as self-funded without an extension grant.
+ */
+type SponsorshipMode = "required" | "preferred" | "disabled";
 /**
  * Options for sendIntent
  */
@@ -716,12 +748,12 @@ interface SendIntentOptions {
     /** Poll interval for transaction hash in ms. */
     hashIntervalMs?: number;
     /**
-     * Whether to request sponsorship (app pays gas) for this intent.
-     * Defaults to `true`. When `false`, the intent authenticates with the
-     * app's JWT but pays its own gas from source assets — no extension
-     * token is fetched. Requires `sponsorship` to be configured on the
-     * client either way; there is no anonymous fallback.
+     * Funding policy. Defaults to `required`, so sponsorship failures never
+     * silently charge the user. Use `preferred` to opt into a reviewed,
+     * self-funded fallback, or `disabled` to request self-funding directly.
      */
+    sponsorshipMode?: SponsorshipMode;
+    /** @deprecated Use `sponsorshipMode: "disabled"` instead of `sponsor: false`. */
     sponsor?: boolean;
     /** Override the client's blind signing setting for this request. */
     blind_signing?: boolean;
@@ -778,12 +810,7 @@ interface SendIntentResult {
     /** Operation ID from orchestrator */
     operationId?: string;
     /** Error details if failed */
-    error?: {
-        code: string;
-        message: string;
-        /** Structured provider details, when the auth service returns them. */
-        details?: unknown;
-    };
+    error?: OneAuthResultError;
 }
 /**
  * Prepare intent response from auth service
@@ -828,12 +855,7 @@ interface ExecuteIntentResponse {
     transactionHash?: string;
     /** Transaction result data needed for waiting via POST /api/intent/wait */
     transactionResult?: unknown;
-    error?: {
-        code: string;
-        message: string;
-        /** Structured provider details, when the auth service returns them. */
-        details?: unknown;
-    };
+    error?: OneAuthResultError;
 }
 /**
  * EIP-712 Domain parameters
@@ -956,11 +978,9 @@ interface BatchIntentItem {
         moduleAddress: string;
         initData?: string;
     };
-    /**
-     * Whether to request sponsorship for this item. Defaults to `true`.
-     * When `false`, the item authenticates with the app's JWT but no
-     * extension token is fetched for it.
-     */
+    /** Funding policy for this item. Defaults to `required`. */
+    sponsorshipMode?: SponsorshipMode;
+    /** @deprecated Use `sponsorshipMode: "disabled"` instead of `sponsor: false`. */
     sponsor?: boolean;
 }
 /**
@@ -1118,23 +1138,16 @@ interface RequestConsentResult {
  * key may do. This triggers a passkey-signed management transaction
  * that installs the SmartSession validator and registers the session.
  */
-interface InstallSmartSessionOptions {
+interface InstallSmartSessionBaseOptions {
     /** Account address of the owner — the sole account identity. */
     accountAddress: string;
     /** Target chain to install the validator on. */
     targetChain: number;
     /** Public address of the ECDSA session-key the app holds in localStorage. */
     sessionKeyAddress: `0x${string}`;
-    /**
-     * Per-contract permission specs from `definePermissions()`. 1auth
-     * re-validates server-side against an allowlist before asking the
-     * user to passkey-sign.
-     */
+    /** Per-contract permission specs re-validated by 1auth before signing. */
     permissions: Permission<Abi>[];
-    /**
-     * Cross-chain asset movement permits. The upstream SmartSession SDK expands
-     * these into Permit2 claim policy plus fallback guardrails for bridge fills.
-     */
+    /** Cross-chain asset movement permits used by the SmartSession policies. */
     crossChainPermits?: CrossChainPermit[];
     /** Unix seconds. Session is invalid after this time. */
     validUntil?: number;
@@ -1142,16 +1155,20 @@ interface InstallSmartSessionOptions {
     validAfter?: number;
     /** Optional max number of uses across the session lifetime. */
     maxUses?: number;
-    /**
-     * Passkey EIP-712 signature over `sessionEnable.typedData`.
-     * Omit on the first request to discover whether this exact
-     * permission needs owner authorization; include on the second
-     * request to receive the on-chain enable call.
-     */
-    enableSessionSignature?: `0x${string}` | WebAuthnSignature;
     /** Optional human label shown in the install dialog. */
     label?: string;
 }
+/**
+ * A WebAuthn enable signature must name the exact credential that produced it.
+ * Unsigned discovery/preflight requests intentionally omit both fields.
+ */
+type InstallSmartSessionOptions = InstallSmartSessionBaseOptions & ({
+    enableSessionSignature: WebAuthnSignature;
+    credentialId: string;
+} | {
+    enableSessionSignature?: `0x${string}` | undefined;
+    credentialId?: never;
+});
 interface SmartSessionEnableRequest {
     alreadyEnabled: boolean;
     /**
@@ -1386,8 +1403,8 @@ interface HeadlessIntentOptions {
     sourceChainId?: number;
     /** Persisted handle from `installSmartSession`; required for SmartSession headless quotes. */
     sessionKeyHandle?: SessionKeyHandle;
-    /** Whether to request sponsorship for this intent. Defaults to `true`. */
-    sponsor?: boolean;
+    /** Funding policy chosen at prepare time. Defaults to `required`. */
+    sponsorshipMode?: SponsorshipMode;
 }
 /**
  * Result of {@link OneAuthHeadlessClient.prepareIntent}. The host app
@@ -1421,11 +1438,13 @@ interface HeadlessPrepareResult {
     accountAddress: `0x${string}`;
     /** Cost / token-requirement breakdown from the orchestrator quote. */
     quote?: IntentQuote;
+    /** Funding mode of the authoritative quote. */
+    sponsorshipMode?: "sponsored" | "self-funded";
 }
 /**
- * Options for {@link OneAuthHeadlessClient.submitIntent}. The caller
- * supplies pre-encoded validator-prefixed signatures; 1auth forwards
- * them unchanged to the orchestrator.
+ * Options for {@link OneAuthHeadlessClient.submitIntent}. The caller supplies
+ * pre-encoded validator-prefixed signatures; 1auth forwards them unchanged.
+ * Funding mode and authorization come from the authoritative prepare result.
  */
 interface HeadlessSubmitOptions {
     /** Echoed verbatim from the prepare result. */
@@ -1443,8 +1462,8 @@ interface HeadlessSubmitOptions {
     destinationSignature: `0x${string}`;
     /** Extra SmartSession signature required by SAME_CHAIN / INTENT_EXECUTOR execution. */
     targetExecutionSignature?: `0x${string}`;
-    /** Whether to request sponsorship at submit time. Defaults to `true`. */
-    sponsor?: boolean;
+    /** Funding mode returned by prepareIntent; sponsored submit mints a fresh grant. */
+    sponsorshipMode: "sponsored" | "self-funded";
 }
 /** Result of {@link OneAuthHeadlessClient.submitIntent}. */
 interface HeadlessSubmitResult {
@@ -1467,4 +1486,4 @@ interface HeadlessIntentStatusResult {
     transactionHash?: string;
 }
 
-export { type IntentQuote as $, type AuthResult as A, type AuthenticateOptions as B, type CloseOnStatus as C, type AuthenticateResult as D, type EmbedOptions as E, type SigningResultBase as F, type SignMessageOptions as G, type HeadlessIntentOptions as H, type InstallSmartSessionOptions as I, type SignMessageResult as J, type SignTypedDataOptions as K, type LoginWithModalOptions as L, type SignTypedDataResult as M, type EIP712Domain as N, type EIP712Types as O, type PasskeyProviderConfig as P, type EIP712TypeField as Q, type TransactionAction as R, type SponsorshipConfig as S, type ThemeConfig as T, type UserPasskeysResponse as U, type TransactionFees as V, type WebAuthnSignature as W, type BalanceRequirement as X, type TransactionDetails as Y, type IntentTokenRequest as Z, type SendIntentOptions as _, type HeadlessPrepareResult as a, type IntentStatus as a0, type OrchestratorStatus as a1, type PrepareIntentResponse as a2, type ExecuteIntentResponse as a3, type IntentHistoryOptions as a4, type IntentHistoryItem as a5, type IntentHistoryResult as a6, type GetAssetsOptions as a7, type AssetBalance as a8, type AssetBalanceBucket as a9, type OneAuthTelemetryEvent as aA, type OneAuthTelemetryEventName as aB, type OneAuthTelemetryFlow as aC, type OneAuthTelemetryTraceContext as aD, type AssetsResponse as aa, type ConsentField as ab, type ConsentData as ac, type CheckConsentOptions as ad, type CheckConsentResult as ae, type RequestConsentOptions as af, type RequestConsentResult as ag, type GrantPermissionsOptions as ah, type GrantPermissionsResult as ai, type ListSessionGrantsOptions as aj, type ListSessionGrantsResult as ak, type SessionGrantRecord as al, type SessionGrantChain as am, type GrantPermissionContractMetadata as an, type SmartSessionPolicy as ao, type BatchIntentItem as ap, type SendBatchIntentOptions as aq, type SendBatchIntentResult as ar, type BatchIntentItemResult as as, type PreparedBatchIntent as at, type PrepareBatchIntentResponse as au, type SponsorshipCallbackConfig as av, type SponsorshipUrlConfig as aw, type OneAuthTelemetryAttributeValue as ax, type OneAuthTelemetryAttributes as ay, type OneAuthTelemetryConfig as az, type HeadlessSubmitOptions as b, type HeadlessSubmitResult as c, type HeadlessIntentStatusResult as d, type InstallSmartSessionResult as e, type SessionKeyHandle as f, type SmartSessionEnableRequest as g, type SignerType as h, type IntentCall as i, type SendIntentResult as j, createCrossChainPermission as k, type CreateCrossChainPermissionInput as l, type CrossChainPermit as m, type CrossChainSettlementLayer as n, type SigningRequestOptions as o, type SigningResult as p, type SigningSuccess as q, type SigningError as r, type SigningErrorCode as s, type CreateSigningRequestResponse as t, type SigningRequestStatus as u, type PasskeyCredential as v, type AuthFlow as w, type AuthWithModalOptions as x, type CreateAccountWithModalOptions as y, type ConnectResult as z };
+export { type OneAuthCandidateError as $, type AuthResult as A, type CreateAccountWithModalOptions as B, type CloseOnStatus as C, type ConnectResult as D, type EmbedOptions as E, type AuthenticateOptions as F, type AuthenticateResult as G, type HeadlessIntentOptions as H, type InstallSmartSessionOptions as I, type SigningResultBase as J, type SignMessageOptions as K, type LoginWithModalOptions as L, type SignMessageResult as M, type SignTypedDataOptions as N, type SignTypedDataResult as O, type PasskeyProviderConfig as P, type EIP712Domain as Q, type EIP712Types as R, type SponsorshipConfig as S, type ThemeConfig as T, type EIP712TypeField as U, type TransactionAction as V, type WebAuthnSignature as W, type TransactionFees as X, type BalanceRequirement as Y, type TransactionDetails as Z, type OneAuthErrorDetails as _, type HeadlessPrepareResult as a, type OneAuthResultError as a0, type IntentTokenRequest as a1, type SendIntentOptions as a2, type IntentQuote as a3, type IntentStatus as a4, type OrchestratorStatus as a5, type PrepareIntentResponse as a6, type ExecuteIntentResponse as a7, type IntentHistoryOptions as a8, type IntentHistoryItem as a9, type SponsorshipUrlConfig as aA, type OneAuthTelemetryAttributeValue as aB, type OneAuthTelemetryAttributes as aC, type OneAuthTelemetryConfig as aD, type OneAuthTelemetryEvent as aE, type OneAuthTelemetryEventName as aF, type OneAuthTelemetryFlow as aG, type OneAuthTelemetryTraceContext as aH, type IntentHistoryResult as aa, type GetAssetsOptions as ab, type AssetBalance as ac, type AssetBalanceBucket as ad, type AssetsResponse as ae, type ConsentField as af, type ConsentData as ag, type CheckConsentOptions as ah, type CheckConsentResult as ai, type RequestConsentOptions as aj, type RequestConsentResult as ak, type GrantPermissionsOptions as al, type GrantPermissionsResult as am, type ListSessionGrantsOptions as an, type ListSessionGrantsResult as ao, type SessionGrantRecord as ap, type SessionGrantChain as aq, type GrantPermissionContractMetadata as ar, type SmartSessionPolicy as as, type BatchIntentItem as at, type SendBatchIntentOptions as au, type SendBatchIntentResult as av, type BatchIntentItemResult as aw, type PreparedBatchIntent as ax, type PrepareBatchIntentResponse as ay, type SponsorshipCallbackConfig as az, type HeadlessSubmitOptions as b, type HeadlessSubmitResult as c, type HeadlessIntentStatusResult as d, type InstallSmartSessionResult as e, type SessionKeyHandle as f, type SmartSessionEnableRequest as g, type SignerType as h, type IntentCall as i, type SendIntentResult as j, SIGNING_ERROR_CODES as k, isSigningErrorCode as l, createCrossChainPermission as m, type CreateCrossChainPermissionInput as n, type CrossChainPermit as o, type CrossChainSettlementLayer as p, type SigningRequestOptions as q, type SigningResult as r, type SigningSuccess as s, type SigningError as t, type SigningErrorCode as u, type PasskeyCredentials as v, type CreateSigningRequestResponse as w, type SigningRequestStatus as x, type AuthFlow as y, type AuthWithModalOptions as z };

package/dist/{verify-0VXQpQBJ.d.mts → verify-CEzkfM92.d.mts}

@@ -1,5 +1,5 @@
 import { Address, Chain, Transport, Hex } from 'viem';
-import { T as ThemeConfig, S as SponsorshipConfig, W as WebAuthnSignature } from './types-Dzm5lZK-.mjs';
+import { T as ThemeConfig, S as SponsorshipConfig, W as WebAuthnSignature } from './types-BN6cCuAd.mjs';
 
 /**
  * Configuration for creating a passkey-enabled WalletClient

package/dist/{verify-9UgxLSdo.d.ts → verify-DhEkGnym.d.ts}

@@ -1,5 +1,5 @@
 import { Address, Chain, Transport, Hex } from 'viem';
-import { T as ThemeConfig, S as SponsorshipConfig, W as WebAuthnSignature } from './types-Dzm5lZK-.js';
+import { T as ThemeConfig, S as SponsorshipConfig, W as WebAuthnSignature } from './types-BN6cCuAd.js';
 
 /**
  * Configuration for creating a passkey-enabled WalletClient

package/dist/wagmi.d.mts

@@ -1,8 +1,8 @@
 import * as _wagmi_core from '@wagmi/core';
-import { O as OneAuthProvider } from './provider-CJv38fIK.mjs';
-import { O as OneAuthClient } from './client-C8QSA1th.mjs';
+import { O as OneAuthProvider } from './provider-CNDrBzGs.mjs';
+import { O as OneAuthClient } from './client-B0vb_deA.mjs';
 import 'viem';
-import './types-Dzm5lZK-.mjs';
+import './types-BN6cCuAd.mjs';
 import '@rhinestone/sdk';
 
 type OneAuthConnectorOptions = {

package/dist/wagmi.d.ts

@@ -1,8 +1,8 @@
 import * as _wagmi_core from '@wagmi/core';
-import { O as OneAuthProvider } from './provider-BsVmPgkQ.js';
-import { O as OneAuthClient } from './client-Dn6mL7BZ.js';
+import { O as OneAuthProvider } from './provider-DwZPA2N1.js';
+import { O as OneAuthClient } from './client-CPt1hn4_.js';
 import 'viem';
-import './types-Dzm5lZK-.js';
+import './types-BN6cCuAd.js';
 import '@rhinestone/sdk';
 
 type OneAuthConnectorOptions = {