@swivy/core 1.0.0 → 1.0.1

package/dist/packages/core/src/hpke-open.d.ts

@@ -5,6 +5,8 @@ export interface SealedExportEncryption {
     encapsulatedKey: string;
     ciphertext: string;
     aead?: string;
+    kem?: string;
+    kdf?: string;
 }
 /** A one-time X25519 key pair for receiving a sealed export. Send `publicKeyBase64`. */
 export declare function generateExportRecipientKeyPair(): {

package/dist/packages/core/src/hpke-open.js

@@ -49,6 +49,9 @@ export function generateExportRecipientKeyPair() {
 }
 export function openHpkeBase(params) {
     const aead = params.aead ?? "aes-256-gcm";
+    if (aead !== "aes-128-gcm" && aead !== "aes-256-gcm") {
+        throw new Error("unsupported_hpke_aead");
+    }
     const aeadId = aead === "aes-128-gcm" ? 0x0001 : 0x0002;
     const keyLength = aead === "aes-128-gcm" ? 16 : 32;
     const recipientPublic = x25519.getPublicKey(params.recipientPrivateKey);
@@ -67,6 +70,14 @@ export function openHpkeBase(params) {
 }
 /** Open the `encryption` object a sealed export returns. Throws if it was tampered with. */
 export function openSealedExport(encryption, recipientPrivateKey) {
+    // Older v1 clients omitted suite labels. Preserve that fixed-suite format,
+    // but never interpret an explicitly different or future suite as v1.
+    if (encryption.info !== "swivy-export-v1"
+        || (encryption.kem !== undefined && encryption.kem !== "DHKEM(X25519, HKDF-SHA256)")
+        || (encryption.kdf !== undefined && encryption.kdf !== "HKDF-SHA256")
+        || (encryption.aead !== undefined && encryption.aead !== "AES-256-GCM")) {
+        throw new Error("unsupported_sealed_export_suite");
+    }
     const plaintext = openHpkeBase({
         recipientPrivateKey,
         encapsulatedKey: fromBase64(encryption.encapsulatedKey),

package/dist/packages/core/src/index.d.ts

@@ -376,6 +376,8 @@ export interface SessionGrantRules {
         allowedSelectors?: string[];
         /** Max native value per transaction, in wei (decimal string). */
         maxValueWei?: string | null;
+        /** Maximum gasLimit × gasPrice/maxFeePerGas, in wei. Excludes L2 data fees and sponsor costs. */
+        maxExecutionGasCostWei?: string;
         allowedChainIds?: number[];
         /**
          * EIP-712. `allowedVerifyingContracts` is required to sign typed data at all. The
@@ -427,6 +429,13 @@ export interface SessionGrantScope {
     /** Valid until revoked (Privy-style standing signer). Needs sessionPolicy.allowStandingGrants and rules. */
     standing?: boolean;
     rules?: SessionGrantRules;
+    /** Gross encoded components only; not total wallet loss or USD. Never automatically refunded. */
+    cumulativeEvmComponents?: {
+        mode: "encoded_native_components_v1";
+        chainId: 1 | 11155111;
+        maxValueWei: string;
+        maxExecutionGasCostWei: string;
+    };
 }
 export interface SessionGrantDescriptor {
     id: string;
@@ -438,6 +447,11 @@ export interface SessionGrantDescriptor {
     publicKey: string;
     label: string | null;
     scope: SessionGrantScope;
+    /** Null means unavailable/corrupt state; never interpret it as a zero balance. */
+    cumulativeEvmUsage?: {
+        reservedValueWei: string;
+        reservedExecutionGasCostWei: string;
+    } | null;
     uses: number;
     expiresAt: string;
     lastUsedAt: string | null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swivy/core",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Swivy shared domain types",
   "type": "module",
   "main": "dist/packages/core/src/index.js",