@rhinestone/sdk 0.0.0-dev-20261009082022 → 0.0.0-dev-20261009113356

package/dist/src/api/account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../../api/account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,OAAO,EACP,KAAK,EACL,uBAAuB,EACvB,GAAG,EACH,eAAe,EACf,uBAAuB,EACvB,SAAS,EACT,mBAAmB,EACpB,MAAM,MAAM,CAAA;AACb,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAGpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAEzD,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,SAAS,EAET,QAAQ,EACT,MAAM,gCAAgC,CAAA;AAKvC,OAAO,KAAK,EAEV,uBAAuB,EACvB,OAAO,EACP,SAAS,EAIT,WAAW,EACX,wBAAwB,EACzB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAK3D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAWlE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAA;AAChF,OAAO,KAAK,EACV,cAAc,EAEd,kBAAkB,EACnB,MAAM,kBAAkB,CAAA;AAUzB,OAAO,KAAK,EACV,WAAW,EAEX,uBAAuB,EACvB,cAAc,EAEd,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,+BAA+B,CAAA;AACtC,OAAO,KAAK,EAEV,yBAAyB,EACzB,uBAAuB,EACvB,mBAAmB,EACpB,MAAM,uCAAuC,CAAA;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAMtD,UAAU,wBAAwB;IAChC,cAAc,CAAC,EAAE,uBAAuB,CAAA;IACxC;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,eAAe,EAAE,CAAA;IACnC,oBAAoB,EAAE,GAAG,CAAA;IACzB,wBAAwB,EAAE,GAAG,GAAG,SAAS,CAAA;CAC1C;AAED,KAAK,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;AAE1C;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,MAAM,EAAE,uBAAuB,CAAA;IAC/B;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACxE;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrC;;;OAGG;IACH,WAAW,IAAI;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,GAAG,CAAA;KAAE,CAAA;IACrD;;;OAGG;IACH,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,CAAA;IACnC;;;;;;OAMG;IACH,kBAAkB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAC9E;;;;;;OAMG;IACH,sBAAsB,CACpB,mBAAmB,EAAE,uBAAuB,EAC5C,OAAO,CAAC,EAAE,cAAc,GACvB;QACD,MAAM,EAAE,mBAAmB,EAAE,CAAA;QAC7B,WAAW,EAAE,mBAAmB,CAAA;QAChC,eAAe,CAAC,EAAE,mBAAmB,CAAA;KACtC,CAAA;IACD;;;;;;;;OAQG;IACH,eAAe,CACb,mBAAmB,EAAE,uBAAuB,EAC5C,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,cAAc,CAAC,CAAA;IAC1B;;;;;;;OAOG;IACH,eAAe,CACb,mBAAmB,EAAE,uBAAuB,EAC5C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACjC;;;;;;;;;;;OAWG;IACH,mBAAmB,CACjB,mBAAmB,EAAE,uBAAuB,EAC5C,UAAU,EAAE,cAAc,EAAE,GAC3B,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACjC;;;;;OAKG;IACH,kBAAkB,CAChB,mBAAmB,EAAE,uBAAuB,GAC3C,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACnC;;;;;;;OAOG;IACH,WAAW,CACT,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,SAAS,GAAG,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC,CAAA;IACf;;;;;;;OAOG;IACH,aAAa,CACX,SAAS,SAAS,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACjE,WAAW,SAAS,MAAM,SAAS,GAAG,cAAc,GAAG,MAAM,SAAS,EAEtE,UAAU,EAAE,uBAAuB,CAAC,SAAS,EAAE,WAAW,CAAC,EAC3D,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,SAAS,GAAG,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC,CAAA;IACf;;;;;;;;;OASG;IACH,UAAU,CACR,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,gBAAgB,EAC7B,OAAO,CAAC,EAAE,SAAS,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5B;;;;;;;;OAQG;IACH,iBAAiB,CACf,iBAAiB,EAAE,qBAAqB,EACxC,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC7B;;;;;;;OAOG;IACH,oBAAoB,CAClB,WAAW,EAAE,wBAAwB,GACpC,OAAO,CAAC,yBAAyB,CAAC,CAAA;IACrC;;;;;;OAMG;IACH,iBAAiB,CACf,qBAAqB,EAAE,yBAAyB,GAC/C,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACnC;;;;;;OAMG;IACH,mBAAmB,CACjB,mBAAmB,EAAE,uBAAuB,GAC3C,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC/B;;;;;OAKG;IACH,iBAAiB,CACf,WAAW,EAAE,wBAAwB,GACpC,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC/B;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACvE,gBAAgB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC5E;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAA;IACrB;;;;OAIG;IACH,YAAY,CAAC,UAAU,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtD;;;;OAIG;IACH,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IAC/D;;;;OAIG;IACH,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACpD;;;;OAIG;IACH,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACxD;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC;QAC/B,QAAQ,EAAE,OAAO,EAAE,CAAA;QACnB,SAAS,EAAE,MAAM,CAAA;KAClB,GAAG,IAAI,CAAC,CAAA;IACT;;;;OAIG;IACH,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/C;;;;OAIG;IACH,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;CAC/C;AA4GD,wBAAgB,mBAAmB,CACjC,mBAAmB,EAAE,mBAAmB,CAAC,OAAO,CAAC,EACjD,WAAW,EAAE,eAAe,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,GACzD,iBAAiB,CAoYnB;AAiPD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,wBAAwB,CAAC,MAAM,CAAC,EACzC,WAAW,EAAE,WAAW,EACxB,eAAe,CAAC,EAAE,eAAe,GAChC,WAAW,CA0Ib;AA0CD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,WAAW,GACjB,SAAS,WAAW,CAAC,aAAa,CAAC,EAAE,CAQvC"}
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../../api/account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,OAAO,EACP,KAAK,EACL,uBAAuB,EACvB,GAAG,EACH,eAAe,EACf,uBAAuB,EACvB,SAAS,EACT,mBAAmB,EACpB,MAAM,MAAM,CAAA;AACb,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAGpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAEzD,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,SAAS,EAET,QAAQ,EACT,MAAM,gCAAgC,CAAA;AAKvC,OAAO,KAAK,EAEV,uBAAuB,EACvB,OAAO,EACP,SAAS,EAIT,WAAW,EACX,wBAAwB,EACzB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAK3D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAWlE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAA;AAChF,OAAO,KAAK,EACV,cAAc,EAEd,kBAAkB,EACnB,MAAM,kBAAkB,CAAA;AAUzB,OAAO,KAAK,EACV,WAAW,EAEX,uBAAuB,EACvB,cAAc,EAEd,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,+BAA+B,CAAA;AACtC,OAAO,KAAK,EAEV,yBAAyB,EACzB,uBAAuB,EACvB,mBAAmB,EACpB,MAAM,uCAAuC,CAAA;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAMtD,UAAU,wBAAwB;IAChC,cAAc,CAAC,EAAE,uBAAuB,CAAA;IACxC;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,eAAe,EAAE,CAAA;IACnC,oBAAoB,EAAE,GAAG,CAAA;IACzB,wBAAwB,EAAE,GAAG,GAAG,SAAS,CAAA;CAC1C;AAED,KAAK,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;AAE1C;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,MAAM,EAAE,uBAAuB,CAAA;IAC/B;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACxE;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrC;;;OAGG;IACH,WAAW,IAAI;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,GAAG,CAAA;KAAE,CAAA;IACrD;;;OAGG;IACH,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,CAAA;IACnC;;;;;;OAMG;IACH,kBAAkB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAC9E;;;;;;OAMG;IACH,sBAAsB,CACpB,mBAAmB,EAAE,uBAAuB,EAC5C,OAAO,CAAC,EAAE,cAAc,GACvB;QACD,MAAM,EAAE,mBAAmB,EAAE,CAAA;QAC7B,WAAW,EAAE,mBAAmB,CAAA;QAChC,eAAe,CAAC,EAAE,mBAAmB,CAAA;KACtC,CAAA;IACD;;;;;;;;OAQG;IACH,eAAe,CACb,mBAAmB,EAAE,uBAAuB,EAC5C,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,cAAc,CAAC,CAAA;IAC1B;;;;;;;OAOG;IACH,eAAe,CACb,mBAAmB,EAAE,uBAAuB,EAC5C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACjC;;;;;;;;;;;OAWG;IACH,mBAAmB,CACjB,mBAAmB,EAAE,uBAAuB,EAC5C,UAAU,EAAE,cAAc,EAAE,GAC3B,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACjC;;;;;OAKG;IACH,kBAAkB,CAChB,mBAAmB,EAAE,uBAAuB,GAC3C,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACnC;;;;;;;OAOG;IACH,WAAW,CACT,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,SAAS,GAAG,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC,CAAA;IACf;;;;;;;OAOG;IACH,aAAa,CACX,SAAS,SAAS,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACjE,WAAW,SAAS,MAAM,SAAS,GAAG,cAAc,GAAG,MAAM,SAAS,EAEtE,UAAU,EAAE,uBAAuB,CAAC,SAAS,EAAE,WAAW,CAAC,EAC3D,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,SAAS,GAAG,SAAS,GAC7B,OAAO,CAAC,GAAG,CAAC,CAAA;IACf;;;;;;;;;OASG;IACH,UAAU,CACR,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,gBAAgB,EAC7B,OAAO,CAAC,EAAE,SAAS,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5B;;;;;;;;OAQG;IACH,iBAAiB,CACf,iBAAiB,EAAE,qBAAqB,EACxC,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC7B;;;;;;;OAOG;IACH,oBAAoB,CAClB,WAAW,EAAE,wBAAwB,GACpC,OAAO,CAAC,yBAAyB,CAAC,CAAA;IACrC;;;;;;OAMG;IACH,iBAAiB,CACf,qBAAqB,EAAE,yBAAyB,GAC/C,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACnC;;;;;;OAMG;IACH,mBAAmB,CACjB,mBAAmB,EAAE,uBAAuB,GAC3C,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC/B;;;;;OAKG;IACH,iBAAiB,CACf,WAAW,EAAE,wBAAwB,GACpC,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC/B;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACvE,gBAAgB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC5E;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAA;IACrB;;;;OAIG;IACH,YAAY,CAAC,UAAU,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtD;;;;OAIG;IACH,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IAC/D;;;;OAIG;IACH,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACpD;;;;OAIG;IACH,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACxD;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC;QAC/B,QAAQ,EAAE,OAAO,EAAE,CAAA;QACnB,SAAS,EAAE,MAAM,CAAA;KAClB,GAAG,IAAI,CAAC,CAAA;IACT;;;;OAIG;IACH,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/C;;;;OAIG;IACH,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;CAC/C;AA4GD,wBAAgB,mBAAmB,CACjC,mBAAmB,EAAE,mBAAmB,CAAC,OAAO,CAAC,EACjD,WAAW,EAAE,eAAe,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,GACzD,iBAAiB,CAoYnB;AAgVD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,wBAAwB,CAAC,MAAM,CAAC,EACzC,WAAW,EAAE,WAAW,EACxB,eAAe,CAAC,EAAE,eAAe,GAChC,WAAW,CAsJb;AA0CD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,WAAW,GACjB,SAAS,WAAW,CAAC,aAAa,CAAC,EAAE,CAQvC"}

package/dist/src/api/account.js

@@ -550,23 +550,88 @@ const PERMIT2_LAYERS = new Set([
 ]);
 /**
  * The settlement layers a session admits, narrowed by any explicit filter. A
- * settlement-scoped session admits only its own layers. A Permit2 session keeps
- * the intent-execution fallback, so it admits every route except the Permit2
+ * settlement-scoped or scoped Permit2-route session admits only its own layers.
+ * A Permit2 session with a `fallback` admits every route except the Permit2
  * arbiters its permit does not name. Like the quoter pin, an explicit filter
  * can only narrow.
  */
-function settlementLayerPin(signers, chainIds, explicit) {
+function signingSessions(signers, chainIds) {
     if (signers?.type !== 'session')
-        return explicit;
-    const relevant = new Set(chainIds);
-    const sessions = 'session' in signers
+        return [];
+    return 'session' in signers
         ? [signers.session]
         : Object.entries(signers.sessions ?? {})
-            .filter(([chainId]) => relevant.has(Number(chainId)))
+            .filter(([chainId]) => chainIds.includes(Number(chainId)))
             .map(([, s]) => s.session);
+}
+/**
+ * The source assets a scoped Permit2-route session can fund, narrowed by any
+ * explicit `sourceAssets`: its claim moves only the permit's `from` tokens, so
+ * an origin swap or a native wrap of anything else would not settle. A capped
+ * token goes in `chainTokenAmounts`, which the orchestrator treats as a cap,
+ * so it never plans a spend above `maxAmount`.
+ */
+function sourceAssetPin(signers, chainIds, explicit, sameChain) {
+    const legs = signingSessions(signers, chainIds).flatMap((session) => session.permit2Sources ?? []);
+    if (legs.length === 0)
+        return explicit;
+    // The orchestrator settles a smart account's same-chain intent through the
+    // IntentExecutor, which a scoped Permit2 session cannot sign for.
+    if (sameChain) {
+        throw new Error('A scoped Permit2 session settles cross-chain intents only; sign a same-chain intent with a SAME_CHAIN_IE session, or set `fallback`');
+    }
+    const leg = (chainId, token) => legs.find((l) => l.chain.id === chainId && l.token.toLowerCase() === token.toLowerCase());
+    const listed = (chainId, token) => (!explicit?.chainIds || explicit.chainIds.includes(chainId)) &&
+        (!explicit?.tokens ||
+            explicit.tokens.some((t) => t.toLowerCase() === token.toLowerCase()));
+    // The explicit tokens (with any amounts), else every leg.
+    const wanted = explicit?.chainTokens || explicit?.chainTokenAmounts
+        ? [
+            ...Object.entries(explicit.chainTokens ?? {}).flatMap(([chainId, tokens]) => tokens.map((token) => [
+                Number(chainId),
+                token,
+                undefined,
+            ])),
+            ...Object.entries(explicit.chainTokenAmounts ?? {}).flatMap(([chainId, amounts]) => Object.entries(amounts).map(([token, amount]) => [
+                Number(chainId),
+                token,
+                amount,
+            ])),
+        ]
+        : legs.map(({ chain, token }) => [chain.id, token, undefined]);
+    const chainTokens = {};
+    const chainTokenAmounts = {};
+    for (const [chainId, token, amount] of wanted) {
+        const cap = leg(chainId, token);
+        if (!cap || !listed(chainId, token))
+            continue;
+        const bound = cap.maxAmount === undefined ||
+            (amount !== undefined && amount < cap.maxAmount)
+            ? amount
+            : cap.maxAmount;
+        if (bound === undefined) {
+            if (!chainTokens[chainId]?.includes(token))
+                (chainTokens[chainId] ??= []).push(token);
+        }
+        else
+            (chainTokenAmounts[chainId] ??= {})[token] = bound;
+    }
+    const pinned = {
+        ...(Object.keys(chainTokens).length && { chainTokens }),
+        ...(Object.keys(chainTokenAmounts).length && { chainTokenAmounts }),
+    };
+    if (Object.keys(pinned).length === 0) {
+        throw new Error("No source asset is left for the intent: a scoped Permit2 session funds it only from its permit's `from` tokens on the intent's source chains");
+    }
+    return pinned;
+}
+function settlementLayerPin(signers, chainIds, explicit) {
+    if (signers?.type !== 'session')
+        return explicit;
+    const sessions = signingSessions(signers, chainIds);
     // The orchestrator layers that settle through a Permit2 arbiter. Permit2's
-    // SAME_CHAIN and ECO are retired arbiters the orchestrator no longer routes
-    // a smart account through (its ECO is ECO_IE's solver network).
+    // ECO is a retired arbiter (the orchestrator's ECO is ECO_IE's solver
+    // network), and SAME_CHAIN takes no bridge, so neither is filtered.
     const permit2Arbiters = ['ACROSS'];
     // The session's layer names are the SDK's; the filter speaks the
     // orchestrator's, where Eco's solver network is `ECO`. SAME_CHAIN_IE takes
@@ -577,14 +642,17 @@ function settlementLayerPin(signers, chainIds, explicit) {
     for (const session of sessions) {
         const named = session.settlementLayers ?? [];
         // A Permit2 permit never shares a session with IntentExecutor layers.
-        if (named.some((layer) => PERMIT2_LAYERS.has(layer))) {
+        if (named.some((layer) => PERMIT2_LAYERS.has(layer)) &&
+            session.access?.kind !== 'scoped') {
             for (const arbiter of permit2Arbiters) {
                 if (!named.includes(arbiter))
                     excluded.add(arbiter);
             }
             continue;
         }
-        const layers = named.flatMap((layer) => layer === 'SAME_CHAIN_IE'
+        // A scoped Permit2-route session names its live arbiters; Permit2's
+        // SAME_CHAIN, like SAME_CHAIN_IE, narrows nothing.
+        const layers = named.flatMap((layer) => layer === 'SAME_CHAIN_IE' || layer === 'SAME_CHAIN'
             ? []
             : [layer === 'ECO_IE' ? 'ECO' : layer]);
         if (layers.length)
@@ -650,11 +718,16 @@ export function adaptTransaction(context, transaction, hyperCoreAction) {
         ...(transaction.eip7702InitSignature
             ? { eip7702InitSignature: transaction.eip7702InitSignature }
             : {}),
-        ...(transaction.sourceAssets || sourceChains
-            ? {
-                accountAccessList: adaptSourceAssets(transaction.sourceAssets, evmSources?.map(({ id }) => id)),
-            }
-            : {}),
+        ...(() => {
+            const accountAccessList = sourceAssetPin(transaction.signers, [
+                ...(destinationChainId === undefined ? [] : [destinationChainId]),
+                ...(evmSources?.map(({ id }) => id) ?? []),
+            ], transaction.sourceAssets || sourceChains
+                ? adaptSourceAssets(transaction.sourceAssets, evmSources?.map(({ id }) => id))
+                : undefined, Boolean(evmSources?.length &&
+                evmSources.every(({ id }) => id === destinationChainId)));
+            return accountAccessList ? { accountAccessList } : {};
+        })(),
         options: {
             ...(transaction.appFees ? { appFees: transaction.appFees } : {}),
             ...(transaction.protocolFees

package/dist/src/clients/orchestrator/client.js

@@ -3,7 +3,7 @@ import { createOrchestratorAuth } from './auth.js';
 import { ChainCatalog, parseChains } from './chain-catalog.js';
 import { fetchOrchestratorJson } from './fetch.js';
 import { mapIntentRequestToWire, mapIntentStatusFromWire, mapPortfolioFromWire, mapQuoteResponseFromWire, mapSignedIntentToWire, mapSplitRequestToWire, mapSplitResultFromWire, } from './mappers.js';
-const SDK_VERSION = '0.0.0-dev-20261009082022';
+const SDK_VERSION = '0.0.0-dev-20261009113356';
 const API_VERSION = '2026-04.blanc';
 // Bounds how long a killed layer or pulled settlement address stays pinnable.
 const CHAIN_CATALOG_TTL_MS = 10 * 60 * 1000;

package/dist/src/config/account.d.ts

@@ -204,15 +204,22 @@ interface Permit2ClaimPolicy {
         min?: bigint;
         max?: bigint;
     }[];
+    /** Whether a claim must (`true`) or may not (`false`) carry pre-claim calls, per origin chain */
+    originOps?: {
+        chain: Chain;
+        required: boolean;
+    }[];
 }
 /**
  * Settlement layers supported by the cross-chain session abstraction.
  *
- * - `SAME_CHAIN`, `ECO`, `ACROSS` settle through Permit2: each maps to one or
- *   more arbiter addresses from the SDK's bundled allow-set (`ECO` is the
- *   retired Standard Eco arbiter).
- *   `SAME_CHAIN` and `ECO` are deprecated: their arbiter paths are retired, so
- *   use `SAME_CHAIN_IE` and `ECO_IE` instead.
+ * - `SAME_CHAIN` and `ACROSS` settle through Permit2: each maps to one or
+ *   more arbiter addresses from the SDK's bundled allow-set. A smart account
+ *   settles cross-chain through `ACROSS` and same-chain through
+ *   `SAME_CHAIN_IE`, so a permit without `fallback` must name only `ACROSS`
+ *   (or no layer).
+ *   `ECO` is the retired Standard Eco arbiter and a permit naming it is
+ *   refused: use `ECO_IE` instead.
  * - `CCTP` (USDC), `OFT` (USDT0, with an optional `to.minAmount` floor),
  *   `ECO_IE` (Eco's solver network: the USD stablecoins the orchestrator
  *   serves for it), `SAME_CHAIN_IE` (a transfer, or a Rhinestone Swapper swap
@@ -288,9 +295,10 @@ type CrossChainSettlementLayer = 'SAME_CHAIN' | 'ECO' | 'ACROSS' | 'CCTP' | 'OFT
  * A high-level permit that authorises a session key to move funds
  * between two chains via Permit2 arbiter settlement. The SDK expands
  * one `CrossChainPermit` into a {@link Permit2ClaimPolicy} (claim-side)
- * plus an optional `SpendingLimitsPolicy` on the fallback action — the
- * claim policy itself doesn't enforce amounts on-chain, so the SDK lifts
- * that guarantee into an action-level policy that does.
+ * plus a capped `approve(Permit2, amount)` per `from` token. The claim
+ * policy itself doesn't check amounts, and the cap bounds only what the
+ * session approves: an allowance the account already holds for Permit2 is
+ * not bounded by it.
  *
  * Resolved from {@link CrossChainPermissionInput} by the SDK; consumers
  * normally set `SessionDefinition.crossChainPermits` with the input shape,
@@ -302,7 +310,7 @@ interface CrossChainPermit {
      * Omit for no source-token restriction (any token on any chain may be
      * pulled) — only the arbiter whitelist, deadline, and bridge-to-self
      * flag then constrain the source side. On a Permit2-route permit,
-     * `maxAmount` requires `oneTimeUse`.
+     * `maxAmount` requires `oneTimeUse`, and a native token is refused.
      */
     from?: {
         chain: Chain;
@@ -337,24 +345,24 @@ interface CrossChainPermit {
     recipientIsAccount?: boolean;
     /**
      * Settlement layers this session is permitted to use. Omit (or pass
-     * `[]`) for any supported layer — the SDK resolves to the union of
-     * every arbiter in its bundled allow-set.
+     * `[]`) for `ACROSS`.
      *
      * `CCTP`, `OFT`, `ECO_IE`, `SAME_CHAIN_IE` and `LZ` are IntentExecutor layers: naming them scopes the
      * session to those layers' calls instead, and `'all'` to every bridging one
      * that can settle the permit (see {@link CrossChainSettlementLayer}).
      *
-     * `SAME_CHAIN` and `ECO` are deprecated (retired Permit2 arbiters): use
-     * `SAME_CHAIN_IE` and `ECO_IE`.
+     * `ECO` is the retired Permit2 Eco arbiter: a permit naming it is refused,
+     * with or without `fallback`. Use `ECO_IE`.
      *
      * Intents signed with the session never offer the orchestrator a route the
      * session would refuse. IntentExecutor layers restrict them to the layers
-     * the session kept. Permit2 layers exclude only the Permit2 arbiters the
-     * permit does not name (a permit without `ACROSS` sends
-     * `settlementLayers: { exclude: ['ACROSS'] }`); the session keeps the
-     * intent-execution fallback, so other routes stay open. An intent's own
-     * `settlementLayers` can only narrow this, and one that leaves no layer
-     * throws.
+     * the session kept, and a Permit2-layer permit that admits `ACROSS` to
+     * `ACROSS` (`SAME_CHAIN` takes no bridge, so it adds no filter). With
+     * `fallback` set, Permit2 layers instead exclude only the Permit2 arbiters
+     * the permit does not name (a permit without `ACROSS` sends
+     * `settlementLayers: { exclude: ['ACROSS'] }`), so other routes stay open.
+     * An intent's own `settlementLayers` can only narrow this, and one that
+     * leaves no layer throws.
      */
     settlementLayers?: CrossChainSettlementLayer[] | 'all';
     /**
@@ -365,34 +373,57 @@ interface CrossChainPermit {
      */
     maxFeeBps?: number;
     /**
-     * IntentExecutor layers only: also let the session pay the intent's app fee
-     * (and a user-paid protocol fee) to the orchestrator's fee collector, and
-     * approve and call its paymaster for unsponsored gas. Defaults to `false`:
-     * only sponsored intents without an app fee settle.
+     * Also let the session pay the intent's app fee (and a user-paid protocol
+     * fee) to the orchestrator's fee collector, and approve and call its
+     * paymaster for unsponsored gas. Defaults to `false`: an intent that carries
+     * an app fee or a protocol fee taken from the `from` token does not settle,
+     * nor, on IntentExecutor layers, one with unsponsored gas. On a Permit2
+     * layer it also needs a `from` token on the session's chain, even with
+     * `fallback`, and cannot be combined with `preClaimOps: 'none'`.
      *
-     * - Each fee call has its own cumulative 5 USD cap, not one per session: the
-     *   collector transfer and the paymaster approve one per `from` token, the
-     *   paymaster callback one shared across tokens. So one token can pay up to
-     *   about 10 USD (app fee plus gas), and N tokens up to N × 5 USD of app fee.
+     * - Each fee call has its own cumulative cap of 5 USD (30 USD on Ethereum
+     *   mainnet), not one per session: the collector transfer and the paymaster
+     *   approve one per `from` token, the paymaster callback one shared across
+     *   tokens. So one token can pay up to about twice the cap (app fee plus
+     *   gas), and N tokens up to N times the cap of app fee.
      * - Every `from` token on the session's chain must be one the orchestrator
-     *   serves for these layers (USD stablecoins today).
+     *   serves for these layers (USD stablecoins today) and lists in
+     *   `settlement.usdStablecoins` with 6 or 18 decimals; the cap is scaled to
+     *   them. All `from` tokens on the chain must have the same decimals.
      * - The fee addresses come from the orchestrator's `GET /chains`, so create
      *   the session with `sdk.createSession`.
      * - The orchestrator sizes the paymaster approve and callback at the refund
      *   ceiling (about 1.8x the gas estimate) and the fee transfer at the full
      *   fee. An intent whose ceiling or fee exceeds the remaining cap (e.g.
-     *   Ethereum mainnet gas at high prices, an app fee over 5 USD, or a reusable
+     *   Ethereum mainnet gas at high prices, an app fee over the cap, or a reusable
      *   session that has used its budget) is refused: it fails closed.
      */
     allowFees?: boolean;
+    /**
+     * Permit2 layers only: the claim may not carry pre-claim calls. This bounds
+     * a session without `oneTimeUse`, so it can be scoped and reusable. The
+     * session then settles only intents that need no pre-claim call: the
+     * account already holds enough Permit2 allowance for the `from` token, no
+     * fee is taken from it, and no native token is wrapped; one that needs a
+     * pre-claim call is refused before signing. Intents must list their
+     * `sourceChains`. It cannot be combined with `oneTimeUse`, whose burn is
+     * itself a pre-claim call, or with `allowFees`.
+     *
+     * The session must be enabled before its first intent, since an enable
+     * rides a pre-claim call: sign `account.getSessionDetails([session])` with
+     * `account.signEnableSession`, then send `enableSession` from
+     * `@rhinestone/sdk/actions/smart-sessions` as an owner-signed transaction.
+     */
+    preClaimOps?: 'none';
 }
 interface FromLeg {
     chain: Chain;
     token: Address;
     /**
      * Cap on the amount the session may move from this leg. On a Permit2-route
-     * permit (`SAME_CHAIN`, `ECO`, `ACROSS`, or `settlementLayers` omitted) it
-     * requires `oneTimeUse`; without it the session is refused.
+     * permit (`SAME_CHAIN`, `ACROSS`, or `settlementLayers` omitted) it
+     * requires `oneTimeUse`, and caps what the session approves to Permit2: an
+     * allowance the account already holds is not bounded by it.
      */
     maxAmount?: bigint;
 }
@@ -444,8 +475,8 @@ interface ToLeg {
  * `SessionDefinition.crossChainPermits`; token fields are per-chain ERC-20
  * addresses (v2 no longer accepts symbols) and the SDK resolves `Date`s to
  * on-chain deadlines, then expands
- * each entry into a {@link Permit2ClaimPolicy} (claim-side) plus an optional
- * `SpendingLimitsPolicy` guardrail.
+ * each entry into a {@link Permit2ClaimPolicy} (claim-side) plus the capped
+ * Permit2 approve its settlement needs.
  */
 interface CrossChainPermissionInput {
     /**
@@ -453,13 +484,23 @@ interface CrossChainPermissionInput {
      * or an array for multi-leg permits. Omit for no source-token
      * restriction (any token on any chain may be pulled) — the arbiter
      * whitelist, deadline, and bridge-to-self flag still apply.
+     *
+     * On a Permit2 layer, each `from` token on the session's chain gets the
+     * `approve(Permit2, amount)` its settlement needs, capped at the largest
+     * `maxAmount` of its legs (uncapped if any leg sets none). A Permit2-layer
+     * permit must name an ERC-20 `from` token on the session's chain unless the
+     * session sets `fallback`. A wrapped native `from` leg with a `maxAmount`
+     * also gets the wrapped native `deposit()`, its value capped at that amount,
+     * so native funds can be wrapped; the wrapped native address comes from
+     * the orchestrator's `GET /chains`, which `sdk.createSession` reads.
      */
     from?: FromLeg | FromLeg[];
     /**
      * Destination chain + token (+ optional recipient pin). Pass a single
      * leg or an array for fan-out destinations. Omit for no
      * destination-token restriction; `recipientIsAccount` still constrains
-     * the recipient.
+     * the recipient. On a Permit2 layer without `fallback`, a native token is
+     * refused: name the wrapped native token.
      */
     to?: ToLeg | ToLeg[];
     /**
@@ -492,25 +533,24 @@ interface CrossChainPermissionInput {
     allowRecipientNotAccount?: boolean;
     /**
      * Settlement layers this session is permitted to use. Omit (or pass
-     * `[]`) to allow **any of the supported settlement layers** — the SDK
-     * resolves to the union of every arbiter in its bundled allow-set. Pass
-     * a subset (e.g. `['ACROSS']`) to narrow.
+     * `[]`) for `ACROSS`. A permit without `fallback` may name only `ACROSS`.
      *
      * `CCTP`, `OFT`, `ECO_IE`, `SAME_CHAIN_IE` and `LZ` are IntentExecutor layers: naming them scopes the
      * session to those layers' calls instead, and `'all'` to every bridging one
      * that can settle the permit (see {@link CrossChainSettlementLayer}).
      *
-     * `SAME_CHAIN` and `ECO` are deprecated (retired Permit2 arbiters): use
-     * `SAME_CHAIN_IE` and `ECO_IE`.
+     * `ECO` is the retired Permit2 Eco arbiter: a permit naming it is refused,
+     * with or without `fallback`. Use `ECO_IE`.
      *
      * Intents signed with the session never offer the orchestrator a route the
      * session would refuse. IntentExecutor layers restrict them to the layers
-     * the session kept. Permit2 layers exclude only the Permit2 arbiters the
-     * permit does not name (a permit without `ACROSS` sends
-     * `settlementLayers: { exclude: ['ACROSS'] }`); the session keeps the
-     * intent-execution fallback, so other routes stay open. An intent's own
-     * `settlementLayers` can only narrow this, and one that leaves no layer
-     * throws.
+     * the session kept, and a Permit2-layer permit that admits `ACROSS` to
+     * `ACROSS` (`SAME_CHAIN` takes no bridge, so it adds no filter). With
+     * `fallback` set, Permit2 layers instead exclude only the Permit2 arbiters
+     * the permit does not name (a permit without `ACROSS` sends
+     * `settlementLayers: { exclude: ['ACROSS'] }`), so other routes stay open.
+     * An intent's own `settlementLayers` can only narrow this, and one that
+     * leaves no layer throws.
      */
     settlementLayers?: CrossChainSettlementLayer[] | 'all';
     /**
@@ -521,26 +561,48 @@ interface CrossChainPermissionInput {
      */
     maxFeeBps?: number;
     /**
-     * IntentExecutor layers only: also let the session pay the intent's app fee
-     * (and a user-paid protocol fee) to the orchestrator's fee collector, and
-     * approve and call its paymaster for unsponsored gas. Defaults to `false`:
-     * only sponsored intents without an app fee settle.
+     * Also let the session pay the intent's app fee (and a user-paid protocol
+     * fee) to the orchestrator's fee collector, and approve and call its
+     * paymaster for unsponsored gas. Defaults to `false`: an intent that carries
+     * an app fee or a protocol fee taken from the `from` token does not settle,
+     * nor, on IntentExecutor layers, one with unsponsored gas. On a Permit2
+     * layer it also needs a `from` token on the session's chain, even with
+     * `fallback`, and cannot be combined with `preClaimOps: 'none'`.
      *
-     * - Each fee call has its own cumulative 5 USD cap, not one per session: the
-     *   collector transfer and the paymaster approve one per `from` token, the
-     *   paymaster callback one shared across tokens. So one token can pay up to
-     *   about 10 USD (app fee plus gas), and N tokens up to N × 5 USD of app fee.
+     * - Each fee call has its own cumulative cap of 5 USD (30 USD on Ethereum
+     *   mainnet), not one per session: the collector transfer and the paymaster
+     *   approve one per `from` token, the paymaster callback one shared across
+     *   tokens. So one token can pay up to about twice the cap (app fee plus
+     *   gas), and N tokens up to N times the cap of app fee.
      * - Every `from` token on the session's chain must be one the orchestrator
-     *   serves for these layers (USD stablecoins today).
+     *   serves for these layers (USD stablecoins today) and lists in
+     *   `settlement.usdStablecoins` with 6 or 18 decimals; the cap is scaled to
+     *   them. All `from` tokens on the chain must have the same decimals.
      * - The fee addresses come from the orchestrator's `GET /chains`, so create
      *   the session with `sdk.createSession`.
      * - The orchestrator sizes the paymaster approve and callback at the refund
      *   ceiling (about 1.8x the gas estimate) and the fee transfer at the full
      *   fee. An intent whose ceiling or fee exceeds the remaining cap (e.g.
-     *   Ethereum mainnet gas at high prices, an app fee over 5 USD, or a reusable
+     *   Ethereum mainnet gas at high prices, an app fee over the cap, or a reusable
      *   session that has used its budget) is refused: it fails closed.
      */
     allowFees?: boolean;
+    /**
+     * Permit2 layers only: the claim may not carry pre-claim calls. This bounds
+     * a session without `oneTimeUse`, so it can be scoped and reusable. The
+     * session then settles only intents that need no pre-claim call: the
+     * account already holds enough Permit2 allowance for the `from` token, no
+     * fee is taken from it, and no native token is wrapped; one that needs a
+     * pre-claim call is refused before signing. Intents must list their
+     * `sourceChains`. It cannot be combined with `oneTimeUse`, whose burn is
+     * itself a pre-claim call, or with `allowFees`.
+     *
+     * The session must be enabled before its first intent, since an enable
+     * rides a pre-claim call: sign `account.getSessionDetails([session])` with
+     * `account.signEnableSession`, then send `enableSession` from
+     * `@rhinestone/sdk/actions/smart-sessions` as an owner-signed transaction.
+     */
+    preClaimOps?: 'none';
 }
 type Policy = SudoPolicy | UniversalActionPolicy | ArgPolicy | SpendingLimitsPolicy | TimeFramePolicy | UsageLimitPolicy | ValueLimitPolicy | IntentExecutionPolicy;
 /** @internal */
@@ -877,8 +939,8 @@ interface SessionDefinition<TAbis extends readonly Abi[] = readonly Abi[], TChai
     chain: TChain;
     /**
      * Venue-scoped swap permissions. See {@link SwapScope}. Implies
-     * `restrictToActions`, and is mutually exclusive with
-     * `crossChainPermits`/`claimPolicies`.
+     * `restrictToActions`, and is mutually exclusive with `claimPolicies` and
+     * `fallback`.
      */
     swap?: SwapScope<TChain['id']>;
     owners: OwnerSet;
@@ -900,8 +962,9 @@ interface SessionDefinition<TAbis extends readonly Abi[] = readonly Abi[], TChai
     claimPolicies?: readonly Permit2ClaimPolicy[];
     /**
      * Cross-chain permits expanded by the SDK into matching
-     * {@link Permit2ClaimPolicy} (claim-side) plus an action-level
-     * `SpendingLimitsPolicy` guardrail.
+     * {@link Permit2ClaimPolicy} (claim-side) plus the scoped actions their
+     * settlement needs. A session holding one is scoped to those actions (see
+     * `fallback`).
      * See {@link CrossChainPermissionInput}. A permit naming `CCTP`, `OFT`,
      * `ECO_IE` or `LZ` needs `sdk.createSession`, which supplies the addresses
      * it pins from the orchestrator's `GET /chains`. To see every refusal at
@@ -918,10 +981,34 @@ interface SessionDefinition<TAbis extends readonly Abi[] = readonly Abi[], TChai
      * Drop the wildcard intent-execution fallback so the session's explicit
      * permissions/actions are the ONLY ops it can run — any other (target,
      * selector) reverts. Requires at least one permission or action, and is
-     * mutually exclusive with `crossChainPermits`/`claimPolicies` (which rely on
-     * the fallback for their guardrails).
+     * mutually exclusive with `claimPolicies` (which rely on the fallback for
+     * their guardrails) and with `fallback`. A session with `crossChainPermits`
+     * is already scoped unless it sets `fallback`.
      */
     restrictToActions?: boolean;
+    /**
+     * Add a wildcard action to a session holding a Permit2-layer
+     * `crossChainPermits` entry. Without it, such a session is scoped to the
+     * calls its settlement needs, and needs `oneTimeUse` or the permit's
+     * `preClaimOps: 'none'` (refused with `PERMIT2_ROUTE_NEEDS_BOUND`
+     * otherwise).
+     *
+     * - `'intentExecution'`: the session key may also make the calls
+     *   Rhinestone's intent-execution policy admits, with the permit's
+     *   `maxAmount` as a spending limit. That policy is set by Rhinestone and
+     *   may admit more over time.
+     * - `'sudo'`: the session key may call any contract, any function, with any
+     *   arguments and native value.
+     *
+     * Either one reports `access.kind: 'open'`, admits a permit without `from`,
+     * one naming `SAME_CHAIN` or one with a native `to` token, and leaves
+     * intents free to take routes other than `ACROSS` and to fund them from any
+     * asset. A scoped session settles cross-chain intents only, and a
+     * destination call or leftover sweep on the destination chain needs the
+     * destination session to declare those actions or set a fallback. Refused with `FALLBACK_NOT_APPLICABLE` on a session
+     * without a Permit2-layer permit, and with `restrictToActions` or `swap`.
+     */
+    fallback?: 'intentExecution' | 'sudo';
     /**
      * Configure ERC-1271 signing. Omission is unrestricted for backwards
      * compatibility; use `disabled` to remove signing capability explicitly.
@@ -1025,12 +1112,12 @@ interface Session {
     /** The venue scope this session was built from. Metadata only — it lets the
      *  SDK derive the matching quoter pin when transacting with the session. */
     swap?: SwapScope;
-    /** The layers the session's cross-chain permit names: the IntentExecutor
-     *  layers a settlement-scoped permit restricted it to, or the Permit2 layers
-     *  a Permit2 permit lists (absent when it lists none, which admits them all).
-     *  Metadata only — intents with the session are limited to the IntentExecutor
-     *  layers (`SAME_CHAIN_IE` adds no bridge filter), and exclude the Permit2
-     *  arbiters a Permit2 permit does not name. */
+    /** The layers the session's cross-chain permit settles through. For a
+     *  settlement-scoped permit, the IntentExecutor layers kept
+     *  (`SAME_CHAIN_IE` adds no bridge filter); for a scoped Permit2 permit,
+     *  `['ACROSS']`, which intents are limited to. With `fallback`, the Permit2 layers the permit lists
+     *  (absent when it lists none), and intents exclude only the Permit2
+     *  arbiters it does not name. Metadata only. */
     settlementLayers?: readonly CrossChainSettlementLayer[];
     /** The layers `settlementLayers: 'all'` left out of a settlement-scoped permit
      *  on the session's chain, each with the refusal that dropped it; the kept
@@ -1038,6 +1125,15 @@ interface Session {
      *  permission id. Absent on sessions without such a permit and on sessions
      *  stored before this field existed. */
     settlementCoverage?: SettlementCoverage;
+    /** A scoped Permit2-route session's `from` tokens per chain, each with the
+     *  largest `maxAmount` of its legs (none if one leg sets none). Intents
+     *  signed with the session take them as their source assets, capped at that
+     *  amount. Metadata only — it does not change the permission id. */
+    permit2Sources?: readonly {
+        readonly chain: Chain;
+        readonly token: Address;
+        readonly maxAmount?: bigint;
+    }[];
     /** Whether the session's key is held to its own actions (`'scoped'`) or keeps
      *  the wildcard fallback action (`'open'`), with a human-readable reason that
      *  is not a stable contract. Metadata only — it does not change the