kawasekit 0.1.0-beta.6 → 0.2.0

package/dist/index.d.cts

@@ -2,16 +2,16 @@ import { Policy } from '@zerodev/permissions';
 import { CreateKernelAccountReturnType } from '@zerodev/sdk';
 import { EntryPointType, GetKernelVersion } from '@zerodev/sdk/types';
 import * as viem from 'viem';
-import { PublicClient, Transport, Chain, LocalAccount, Address, Hex, Account } from 'viem';
+import { PublicClient, Transport, Chain, LocalAccount, Address } from 'viem';
 import { S as SupportedChainId } from './index-2fEOL83n.cjs';
 export { C as ChainNotSupportedError, g as getChain, i as isSupportedChainId, s as supportedChains } from './index-2fEOL83n.cjs';
 export { C as ConfiguredKernelClient, I as IssueSessionKeyParams, K as KAWASEKIT_SESSION_ENVELOPE_VERSION, a as KawasekitSessionEnvelope, b as KawasekitSessionEnvelopeVersion, c as KawasekitSessionPolicySummary, R as RestoreSessionAccountParams, d as RevokeSessionKeyParams, e as RevokeSessionKeyResult, f as RotateSessionKeyParams, g as RotateSessionKeyResult, S as SessionEnvelopeChainMismatchError, h as SessionEnvelopeParseError, i as SessionEnvelopeSignerMismatchError, j as SessionEnvelopeVersionError, T as TransferJpycInputError, k as TransferJpycParams, l as TransferJpycResult, m as issueSessionKey, p as parseSessionEnvelope, r as restoreSessionAccount, n as revokeSessionKey, o as rotateSessionKey, s as serializeSessionEnvelope, t as transferJpyc } from './index-DFChv_fT.cjs';
 export { CreateJpycDailyLimitPoliciesParams, ONE_DAY_SECONDS, createJpycDailyLimitPolicies } from './policy/index.cjs';
-export { C as CreateSpendingPolicyParams, P as PolicyDecision, S as SpendState, a as SpendingPolicy, b as SpendingPolicyConfigError, T as TokenLimit, c as createSpendingPolicy, e as evaluateSpendingPolicy, m as mergeSpendState } from './spending-policy-DqBRDUxx.cjs';
+export { C as CreateSpendingPolicyParams, P as PolicyDecision, S as SpendState, a as SpendingPolicy, b as SpendingPolicyConfigError, T as TokenLimit, c as createSpendingPolicy, e as evaluateSpendingPolicy, m as mergeSpendState } from './spending-policy-DaajDg9B.cjs';
 export { CreateLocalPolicyGatedSignerParams, PolicyGatedSignerConfigError, assertNonBypassable, createLocalPolicyGatedSigner, requireNonBypassable } from './signer/index.cjs';
 export { E as EnforcementLevel, N as NonBypassableEnforcement, P as PaymentIntent, a as PolicyGatedSigner, b as PolicyRejection, S as SignResult, c as SignerDescription } from './types-IEl-iOIx.cjs';
-export { K as KnownAssetDomain, a as KnownAssetId, X as X402AssetParam, b as X402TokenDomain, g as getKnownAssetDomain, l as listKnownAssetIds } from './asset-domain-CpJuDkI2.cjs';
-export { B as BuildPaymentRequiredResponseParams, a as BuildPaymentRequirementsParams, C as CreateCoinbaseFacilitatorParams, b as CreateHttpFacilitatorParams, c as CreateSelfFacilitatorParams, d as CreateX402PaymentSignerParams, K as KawaseChain, S as SignX402PaymentParams, W as WrapFetchParams, X as X402Fetch, e as X402InvalidConfigError, f as X402InvalidPayloadError, g as X402PaymentSigner, h as X402PolicyRejectedError, i as X402_DEFAULT_AUTHORIZATION_LIFETIME_SECONDS, j as X402_DEFAULT_MAX_TIMEOUT_SECONDS, k as X402_FACILITATOR_ERROR_CODES, l as X402_HEADER_IDEMPOTENCY_KEY, m as X402_HEADER_PAYMENT_REQUIRED, n as X402_HEADER_PAYMENT_RESPONSE, o as X402_HEADER_PAYMENT_SIGNATURE, p as buildPaymentRequiredResponse, q as buildPaymentRequirements, r as createCoinbaseFacilitator, s as createHttpFacilitator, t as createSelfFacilitator, u as createX402PaymentSigner, v as decodePaymentRequiredHeader, w as decodePaymentResponseHeader, x as decodePaymentSignatureHeader, y as deriveReceiptTimeoutMs, z as encodePaymentRequiredHeader, A as encodePaymentResponseHeader, D as encodePaymentSignatureHeader, E as wrapFetch, F as zerodevRpcUrl } from './index-Z6AL1MR_.cjs';
+export { C as CancelAuthorizationMessage, E as Eip3009Domain, K as KnownAssetDomain, a as KnownAssetId, R as ReceiveWithAuthorizationMessage, b as ResolvedAsset, S as SignedAuthorization, T as TransferWithAuthorizationMessage, X as X402AssetParam, c as X402TokenDomain, d as authorizationDeadlineFromNow, e as cancelAuthorizationTypes, f as deriveAuthorizationNonce, g as generateAuthorizationNonce, h as getKnownAssetDomain, l as listKnownAssetIds, r as receiveWithAuthorizationTypes, i as resolvedAssetToEip3009Domain, s as signCancelAuthorization, j as signReceiveWithAuthorization, k as signTransferWithAuthorization, t as transferWithAuthorizationTypes } from './asset-domain-4Ioxqn28.cjs';
+export { B as BuildPaymentRequiredResponseParams, a as BuildPaymentRequirementsParams, C as CreateCoinbaseFacilitatorParams, b as CreateHttpFacilitatorParams, c as CreateSelfFacilitatorParams, d as CreateX402PaymentSignerParams, K as KawaseChain, S as SignX402PaymentParams, W as WrapFetchParams, X as X402Fetch, e as X402InvalidConfigError, f as X402InvalidPayloadError, g as X402PaymentSigner, h as X402PolicyRejectedError, i as X402_DEFAULT_AUTHORIZATION_LIFETIME_SECONDS, j as X402_DEFAULT_MAX_TIMEOUT_SECONDS, k as X402_FACILITATOR_ERROR_CODES, l as X402_HEADER_IDEMPOTENCY_KEY, m as X402_HEADER_PAYMENT_REQUIRED, n as X402_HEADER_PAYMENT_RESPONSE, o as X402_HEADER_PAYMENT_SIGNATURE, p as buildPaymentRequiredResponse, q as buildPaymentRequirements, r as createCoinbaseFacilitator, s as createHttpFacilitator, t as createSelfFacilitator, u as createX402PaymentSigner, v as decodePaymentRequiredHeader, w as decodePaymentResponseHeader, x as decodePaymentSignatureHeader, y as deriveReceiptTimeoutMs, z as encodePaymentRequiredHeader, A as encodePaymentResponseHeader, D as encodePaymentSignatureHeader, E as wrapFetch, F as zerodevRpcUrl } from './index-Cn6kg7KH.cjs';
 export { C as CreateX402HandlerParams, I as IdempotencyServerConfig, X as X402HandlerContext, a as X402InnerHandler, b as X402RequestHandler, c as createX402Handler } from './server-ov8YstNS.cjs';
 export { F as Facilitator, X as X402AssetTransferMethod, a as X402ExactEvmAuthorization, b as X402ExactEvmExtra, c as X402ExactEvmPayload, d as X402Network, e as X402PaymentPayload, f as X402PaymentRequiredResponse, g as X402PaymentRequirements, h as X402ResourceInfo, i as X402Scheme, j as X402SettleRequest, k as X402SettleResponse, l as X402SettlementResponse, m as X402SupportedKind, n as X402SupportedResponse, o as X402VerifyRequest, p as X402VerifyResponse, q as X402Version, r as X402_VERSION, s as chainIdToX402Network, t as isX402Network, x as x402NetworkToChainId } from './types-TpS_8ztt.cjs';
 export { ClientPaymentEvent, HookCallback, ObservabilityEvent, ObservabilityEventBase, ObservabilityHooks, PaymentAcceptedEvent, PaymentRequiredEvent, SettleEvent, VerifyEvent, extractAcceptedNetworks, invokeHookSafely } from './observability/index.cjs';
@@ -553,171 +553,6 @@ declare const polygonAmoy: {
     verifyHash?: ((client: viem.Client, parameters: viem.VerifyHashActionParameters) => Promise<viem.VerifyHashActionReturnType>) | undefined;
 };
 
-/**
- * EIP-3009 typed-data builders and signing helpers.
- *
- * Token-agnostic: works for any EIP-3009-compliant token (JPYC, USDC, USDP,
- * Centre FiatToken family). Pure off-chain construction — no chain RPC, no
- * submission. Submission is the caller's job (M3 x402 flow, or arbitrary
- * gas-paying relayer).
- *
- * @packageDocumentation
- */
-
-/**
- * EIP-712 domain for an EIP-3009-compliant token.
- *
- * `name` and `version` MUST match the values the token used when computing
- * its `DOMAIN_SEPARATOR`. For JPYC see {@link JPYC_EIP712_DOMAIN_HINT}.
- */
-interface Eip3009Domain {
-    readonly name: string;
-    readonly version: string;
-    readonly chainId: number;
-    readonly verifyingContract: Address;
-}
-/** Message body for {@link signTransferWithAuthorization}. */
-interface TransferWithAuthorizationMessage {
-    readonly from: Address;
-    readonly to: Address;
-    readonly value: bigint;
-    readonly validAfter: bigint;
-    readonly validBefore: bigint;
-    /** 32-byte random nonce. Generate with {@link generateAuthorizationNonce}. */
-    readonly nonce: Hex;
-}
-/** Message body for {@link signReceiveWithAuthorization}. */
-type ReceiveWithAuthorizationMessage = TransferWithAuthorizationMessage;
-/** Message body for {@link signCancelAuthorization}. */
-interface CancelAuthorizationMessage {
-    readonly authorizer: Address;
-    readonly nonce: Hex;
-}
-/**
- * A signed EIP-3009 authorization, ready to be passed to the token's
- * `*WithAuthorization` entrypoint as `(v, r, s)`.
- */
-interface SignedAuthorization<TMessage> {
-    readonly signature: Hex;
-    readonly v: number;
-    readonly r: Hex;
-    readonly s: Hex;
-    readonly domain: Eip3009Domain;
-    readonly message: TMessage;
-}
-/**
- * Generates a cryptographically random 32-byte EIP-3009 nonce.
- *
- * The nonce only needs to be unique per `(authorizer, contract)` — duplicates
- * across different tokens are harmless because the contract scopes them.
- *
- * @example
- * ```ts
- * import { generateAuthorizationNonce } from "kawasekit";
- *
- * const nonce = generateAuthorizationNonce();
- * ```
- */
-declare function generateAuthorizationNonce(): Hex;
-/**
- * Derives a **deterministic** 32-byte EIP-3009 nonce from a reasoning-step
- * idempotency key, scoped to `(from, verifyingContract, chainId)` so the same
- * key never collides across tokens or chains (M5-1, Half B).
- *
- * `nonce = keccak256(DOMAIN_TAG ‖ idempotencyKey ‖ from ‖ verifyingContract ‖
- * chainId)`. **No shared secret**: determinism across replicas / sub-agents
- * needs only a shared `conversationId` (the source of the key), not secret
- * distribution. A replayed key ⇒ identical nonce ⇒ the token contract's
- * `authorizationState` rejects the second settlement — the on-chain last line of
- * defence against re-signed same-intent duplicate payments. Use in place of
- * {@link generateAuthorizationNonce} only when a key is available.
- *
- * `chainId` is in the preimage, so the same JPYC address on Polygon / Avalanche
- * / Kaia / Ethereum yields distinct nonces (cross-chain replay safety).
- *
- * @example
- * ```ts
- * import { deriveAuthorizationNonce } from "kawasekit";
- *
- * const nonce = deriveAuthorizationNonce(
- *   { idempotencyKey },
- *   { from: account.address, verifyingContract, chainId },
- * );
- * ```
- */
-declare function deriveAuthorizationNonce(input: {
-    readonly idempotencyKey: string;
-}, scope: {
-    readonly from: Address;
-    readonly verifyingContract: Address;
-    readonly chainId: number;
-}): Hex;
-/**
- * Returns a `validBefore` UNIX timestamp `seconds` in the future.
- *
- * @param seconds - Lifetime of the authorization, in seconds.
- * @param nowSec - Optional override of "now" (defaults to {@link Date.now}).
- *
- * @example
- * ```ts
- * import { authorizationDeadlineFromNow } from "kawasekit";
- *
- * const validBefore = authorizationDeadlineFromNow(60 * 5); // 5 minutes
- * ```
- */
-declare function authorizationDeadlineFromNow(seconds: number, nowSec?: bigint): bigint;
-/**
- * Signs an EIP-3009 `TransferWithAuthorization` message.
- *
- * The signing account MUST equal `message.from` — EIP-3009 rejects signatures
- * from anyone else (the on-chain check is pure `ecrecover` against `from`).
- *
- * @example
- * ```ts
- * import { privateKeyToAccount } from "viem/accounts";
- * import {
- *   authorizationDeadlineFromNow,
- *   generateAuthorizationNonce,
- *   JPYC_EIP712_DOMAIN_HINT,
- *   polygon,
- *   signTransferWithAuthorization,
- * } from "kawasekit";
- *
- * const account = privateKeyToAccount("0x...");
- * const signed = await signTransferWithAuthorization(account, {
- *   ...JPYC_EIP712_DOMAIN_HINT,
- *   chainId: polygon.id,
- *   verifyingContract: "0xE7C3D8C9a439feDe00D2600032D5dB0Be71C3c29",
- * }, {
- *   from: account.address,
- *   to: "0xBeef...",
- *   value: 100n * 10n ** 18n,
- *   validAfter: 0n,
- *   validBefore: authorizationDeadlineFromNow(300),
- *   nonce: generateAuthorizationNonce(),
- * });
- * // → submit (v, r, s) to token.transferWithAuthorization(...)
- * ```
- */
-declare function signTransferWithAuthorization(account: Account, domain: Eip3009Domain, message: TransferWithAuthorizationMessage): Promise<SignedAuthorization<TransferWithAuthorizationMessage>>;
-/**
- * Signs an EIP-3009 `ReceiveWithAuthorization` message.
- *
- * Differs from {@link signTransferWithAuthorization} in two ways:
- * 1. Uses the `ReceiveWithAuthorization` EIP-712 type.
- * 2. The contract additionally enforces `msg.sender == to` at submission
- *    time, so only `to` (or a relayer impersonating `to` — impossible in
- *    practice) can land the tx.
- */
-declare function signReceiveWithAuthorization(account: Account, domain: Eip3009Domain, message: ReceiveWithAuthorizationMessage): Promise<SignedAuthorization<ReceiveWithAuthorizationMessage>>;
-/**
- * Signs an EIP-3009 `CancelAuthorization` message.
- *
- * Cancelling consumes the nonce so a later `transferWithAuthorization` or
- * `receiveWithAuthorization` with the same nonce will revert.
- */
-declare function signCancelAuthorization(account: Account, domain: Eip3009Domain, message: CancelAuthorizationMessage): Promise<SignedAuthorization<CancelAuthorizationMessage>>;
-
 /**
  * JPYC stablecoin metadata, deployments, and ABI.
  *
@@ -1084,4 +919,4 @@ declare const jpycAbi: readonly [{
     }];
 }];
 
-export { type CancelAuthorizationMessage, type CreateAgentSmartAccountParams, type Eip3009Domain, JPYC_DECIMALS, JPYC_EIP712_DOMAIN_HINT, JPYC_V2_ADDRESS, type JpycDeployment, JpycNotAvailableError, type ReceiveWithAuthorizationMessage, type SignedAuthorization, SupportedChainId, type TransferWithAuthorizationMessage, authorizationDeadlineFromNow, avalanche, avalancheFuji, createAgentSmartAccount, deriveAuthorizationNonce, ethereum, generateAuthorizationNonce, getJpycAddress, jpycAbi, jpycDeployments, kaia, kairos, polygon, polygonAmoy, sepolia, signCancelAuthorization, signReceiveWithAuthorization, signTransferWithAuthorization };
+export { type CreateAgentSmartAccountParams, JPYC_DECIMALS, JPYC_EIP712_DOMAIN_HINT, JPYC_V2_ADDRESS, type JpycDeployment, JpycNotAvailableError, SupportedChainId, avalanche, avalancheFuji, createAgentSmartAccount, ethereum, getJpycAddress, jpycAbi, jpycDeployments, kaia, kairos, polygon, polygonAmoy, sepolia };

package/dist/index.d.ts

@@ -2,16 +2,16 @@ import { Policy } from '@zerodev/permissions';
 import { CreateKernelAccountReturnType } from '@zerodev/sdk';
 import { EntryPointType, GetKernelVersion } from '@zerodev/sdk/types';
 import * as viem from 'viem';
-import { PublicClient, Transport, Chain, LocalAccount, Address, Hex, Account } from 'viem';
+import { PublicClient, Transport, Chain, LocalAccount, Address } from 'viem';
 import { S as SupportedChainId } from './index-2fEOL83n.js';
 export { C as ChainNotSupportedError, g as getChain, i as isSupportedChainId, s as supportedChains } from './index-2fEOL83n.js';
 export { C as ConfiguredKernelClient, I as IssueSessionKeyParams, K as KAWASEKIT_SESSION_ENVELOPE_VERSION, a as KawasekitSessionEnvelope, b as KawasekitSessionEnvelopeVersion, c as KawasekitSessionPolicySummary, R as RestoreSessionAccountParams, d as RevokeSessionKeyParams, e as RevokeSessionKeyResult, f as RotateSessionKeyParams, g as RotateSessionKeyResult, S as SessionEnvelopeChainMismatchError, h as SessionEnvelopeParseError, i as SessionEnvelopeSignerMismatchError, j as SessionEnvelopeVersionError, T as TransferJpycInputError, k as TransferJpycParams, l as TransferJpycResult, m as issueSessionKey, p as parseSessionEnvelope, r as restoreSessionAccount, n as revokeSessionKey, o as rotateSessionKey, s as serializeSessionEnvelope, t as transferJpyc } from './index-CSpNGigO.js';
 export { CreateJpycDailyLimitPoliciesParams, ONE_DAY_SECONDS, createJpycDailyLimitPolicies } from './policy/index.js';
-export { C as CreateSpendingPolicyParams, P as PolicyDecision, S as SpendState, a as SpendingPolicy, b as SpendingPolicyConfigError, T as TokenLimit, c as createSpendingPolicy, e as evaluateSpendingPolicy, m as mergeSpendState } from './spending-policy-DZSNHqnD.js';
+export { C as CreateSpendingPolicyParams, P as PolicyDecision, S as SpendState, a as SpendingPolicy, b as SpendingPolicyConfigError, T as TokenLimit, c as createSpendingPolicy, e as evaluateSpendingPolicy, m as mergeSpendState } from './spending-policy-DKZN3Sg8.js';
 export { CreateLocalPolicyGatedSignerParams, PolicyGatedSignerConfigError, assertNonBypassable, createLocalPolicyGatedSigner, requireNonBypassable } from './signer/index.js';
 export { E as EnforcementLevel, N as NonBypassableEnforcement, P as PaymentIntent, a as PolicyGatedSigner, b as PolicyRejection, S as SignResult, c as SignerDescription } from './types-IEl-iOIx.js';
-export { K as KnownAssetDomain, a as KnownAssetId, X as X402AssetParam, b as X402TokenDomain, g as getKnownAssetDomain, l as listKnownAssetIds } from './asset-domain-CpJuDkI2.js';
-export { B as BuildPaymentRequiredResponseParams, a as BuildPaymentRequirementsParams, C as CreateCoinbaseFacilitatorParams, b as CreateHttpFacilitatorParams, c as CreateSelfFacilitatorParams, d as CreateX402PaymentSignerParams, K as KawaseChain, S as SignX402PaymentParams, W as WrapFetchParams, X as X402Fetch, e as X402InvalidConfigError, f as X402InvalidPayloadError, g as X402PaymentSigner, h as X402PolicyRejectedError, i as X402_DEFAULT_AUTHORIZATION_LIFETIME_SECONDS, j as X402_DEFAULT_MAX_TIMEOUT_SECONDS, k as X402_FACILITATOR_ERROR_CODES, l as X402_HEADER_IDEMPOTENCY_KEY, m as X402_HEADER_PAYMENT_REQUIRED, n as X402_HEADER_PAYMENT_RESPONSE, o as X402_HEADER_PAYMENT_SIGNATURE, p as buildPaymentRequiredResponse, q as buildPaymentRequirements, r as createCoinbaseFacilitator, s as createHttpFacilitator, t as createSelfFacilitator, u as createX402PaymentSigner, v as decodePaymentRequiredHeader, w as decodePaymentResponseHeader, x as decodePaymentSignatureHeader, y as deriveReceiptTimeoutMs, z as encodePaymentRequiredHeader, A as encodePaymentResponseHeader, D as encodePaymentSignatureHeader, E as wrapFetch, F as zerodevRpcUrl } from './index-BaAOB0xd.js';
+export { C as CancelAuthorizationMessage, E as Eip3009Domain, K as KnownAssetDomain, a as KnownAssetId, R as ReceiveWithAuthorizationMessage, b as ResolvedAsset, S as SignedAuthorization, T as TransferWithAuthorizationMessage, X as X402AssetParam, c as X402TokenDomain, d as authorizationDeadlineFromNow, e as cancelAuthorizationTypes, f as deriveAuthorizationNonce, g as generateAuthorizationNonce, h as getKnownAssetDomain, l as listKnownAssetIds, r as receiveWithAuthorizationTypes, i as resolvedAssetToEip3009Domain, s as signCancelAuthorization, j as signReceiveWithAuthorization, k as signTransferWithAuthorization, t as transferWithAuthorizationTypes } from './asset-domain-4Ioxqn28.js';
+export { B as BuildPaymentRequiredResponseParams, a as BuildPaymentRequirementsParams, C as CreateCoinbaseFacilitatorParams, b as CreateHttpFacilitatorParams, c as CreateSelfFacilitatorParams, d as CreateX402PaymentSignerParams, K as KawaseChain, S as SignX402PaymentParams, W as WrapFetchParams, X as X402Fetch, e as X402InvalidConfigError, f as X402InvalidPayloadError, g as X402PaymentSigner, h as X402PolicyRejectedError, i as X402_DEFAULT_AUTHORIZATION_LIFETIME_SECONDS, j as X402_DEFAULT_MAX_TIMEOUT_SECONDS, k as X402_FACILITATOR_ERROR_CODES, l as X402_HEADER_IDEMPOTENCY_KEY, m as X402_HEADER_PAYMENT_REQUIRED, n as X402_HEADER_PAYMENT_RESPONSE, o as X402_HEADER_PAYMENT_SIGNATURE, p as buildPaymentRequiredResponse, q as buildPaymentRequirements, r as createCoinbaseFacilitator, s as createHttpFacilitator, t as createSelfFacilitator, u as createX402PaymentSigner, v as decodePaymentRequiredHeader, w as decodePaymentResponseHeader, x as decodePaymentSignatureHeader, y as deriveReceiptTimeoutMs, z as encodePaymentRequiredHeader, A as encodePaymentResponseHeader, D as encodePaymentSignatureHeader, E as wrapFetch, F as zerodevRpcUrl } from './index-f-Xg86P9.js';
 export { C as CreateX402HandlerParams, I as IdempotencyServerConfig, X as X402HandlerContext, a as X402InnerHandler, b as X402RequestHandler, c as createX402Handler } from './server-D_rZc-cW.js';
 export { F as Facilitator, X as X402AssetTransferMethod, a as X402ExactEvmAuthorization, b as X402ExactEvmExtra, c as X402ExactEvmPayload, d as X402Network, e as X402PaymentPayload, f as X402PaymentRequiredResponse, g as X402PaymentRequirements, h as X402ResourceInfo, i as X402Scheme, j as X402SettleRequest, k as X402SettleResponse, l as X402SettlementResponse, m as X402SupportedKind, n as X402SupportedResponse, o as X402VerifyRequest, p as X402VerifyResponse, q as X402Version, r as X402_VERSION, s as chainIdToX402Network, t as isX402Network, x as x402NetworkToChainId } from './types-BR9UcvJO.js';
 export { ClientPaymentEvent, HookCallback, ObservabilityEvent, ObservabilityEventBase, ObservabilityHooks, PaymentAcceptedEvent, PaymentRequiredEvent, SettleEvent, VerifyEvent, extractAcceptedNetworks, invokeHookSafely } from './observability/index.js';
@@ -553,171 +553,6 @@ declare const polygonAmoy: {
     verifyHash?: ((client: viem.Client, parameters: viem.VerifyHashActionParameters) => Promise<viem.VerifyHashActionReturnType>) | undefined;
 };
 
-/**
- * EIP-3009 typed-data builders and signing helpers.
- *
- * Token-agnostic: works for any EIP-3009-compliant token (JPYC, USDC, USDP,
- * Centre FiatToken family). Pure off-chain construction — no chain RPC, no
- * submission. Submission is the caller's job (M3 x402 flow, or arbitrary
- * gas-paying relayer).
- *
- * @packageDocumentation
- */
-
-/**
- * EIP-712 domain for an EIP-3009-compliant token.
- *
- * `name` and `version` MUST match the values the token used when computing
- * its `DOMAIN_SEPARATOR`. For JPYC see {@link JPYC_EIP712_DOMAIN_HINT}.
- */
-interface Eip3009Domain {
-    readonly name: string;
-    readonly version: string;
-    readonly chainId: number;
-    readonly verifyingContract: Address;
-}
-/** Message body for {@link signTransferWithAuthorization}. */
-interface TransferWithAuthorizationMessage {
-    readonly from: Address;
-    readonly to: Address;
-    readonly value: bigint;
-    readonly validAfter: bigint;
-    readonly validBefore: bigint;
-    /** 32-byte random nonce. Generate with {@link generateAuthorizationNonce}. */
-    readonly nonce: Hex;
-}
-/** Message body for {@link signReceiveWithAuthorization}. */
-type ReceiveWithAuthorizationMessage = TransferWithAuthorizationMessage;
-/** Message body for {@link signCancelAuthorization}. */
-interface CancelAuthorizationMessage {
-    readonly authorizer: Address;
-    readonly nonce: Hex;
-}
-/**
- * A signed EIP-3009 authorization, ready to be passed to the token's
- * `*WithAuthorization` entrypoint as `(v, r, s)`.
- */
-interface SignedAuthorization<TMessage> {
-    readonly signature: Hex;
-    readonly v: number;
-    readonly r: Hex;
-    readonly s: Hex;
-    readonly domain: Eip3009Domain;
-    readonly message: TMessage;
-}
-/**
- * Generates a cryptographically random 32-byte EIP-3009 nonce.
- *
- * The nonce only needs to be unique per `(authorizer, contract)` — duplicates
- * across different tokens are harmless because the contract scopes them.
- *
- * @example
- * ```ts
- * import { generateAuthorizationNonce } from "kawasekit";
- *
- * const nonce = generateAuthorizationNonce();
- * ```
- */
-declare function generateAuthorizationNonce(): Hex;
-/**
- * Derives a **deterministic** 32-byte EIP-3009 nonce from a reasoning-step
- * idempotency key, scoped to `(from, verifyingContract, chainId)` so the same
- * key never collides across tokens or chains (M5-1, Half B).
- *
- * `nonce = keccak256(DOMAIN_TAG ‖ idempotencyKey ‖ from ‖ verifyingContract ‖
- * chainId)`. **No shared secret**: determinism across replicas / sub-agents
- * needs only a shared `conversationId` (the source of the key), not secret
- * distribution. A replayed key ⇒ identical nonce ⇒ the token contract's
- * `authorizationState` rejects the second settlement — the on-chain last line of
- * defence against re-signed same-intent duplicate payments. Use in place of
- * {@link generateAuthorizationNonce} only when a key is available.
- *
- * `chainId` is in the preimage, so the same JPYC address on Polygon / Avalanche
- * / Kaia / Ethereum yields distinct nonces (cross-chain replay safety).
- *
- * @example
- * ```ts
- * import { deriveAuthorizationNonce } from "kawasekit";
- *
- * const nonce = deriveAuthorizationNonce(
- *   { idempotencyKey },
- *   { from: account.address, verifyingContract, chainId },
- * );
- * ```
- */
-declare function deriveAuthorizationNonce(input: {
-    readonly idempotencyKey: string;
-}, scope: {
-    readonly from: Address;
-    readonly verifyingContract: Address;
-    readonly chainId: number;
-}): Hex;
-/**
- * Returns a `validBefore` UNIX timestamp `seconds` in the future.
- *
- * @param seconds - Lifetime of the authorization, in seconds.
- * @param nowSec - Optional override of "now" (defaults to {@link Date.now}).
- *
- * @example
- * ```ts
- * import { authorizationDeadlineFromNow } from "kawasekit";
- *
- * const validBefore = authorizationDeadlineFromNow(60 * 5); // 5 minutes
- * ```
- */
-declare function authorizationDeadlineFromNow(seconds: number, nowSec?: bigint): bigint;
-/**
- * Signs an EIP-3009 `TransferWithAuthorization` message.
- *
- * The signing account MUST equal `message.from` — EIP-3009 rejects signatures
- * from anyone else (the on-chain check is pure `ecrecover` against `from`).
- *
- * @example
- * ```ts
- * import { privateKeyToAccount } from "viem/accounts";
- * import {
- *   authorizationDeadlineFromNow,
- *   generateAuthorizationNonce,
- *   JPYC_EIP712_DOMAIN_HINT,
- *   polygon,
- *   signTransferWithAuthorization,
- * } from "kawasekit";
- *
- * const account = privateKeyToAccount("0x...");
- * const signed = await signTransferWithAuthorization(account, {
- *   ...JPYC_EIP712_DOMAIN_HINT,
- *   chainId: polygon.id,
- *   verifyingContract: "0xE7C3D8C9a439feDe00D2600032D5dB0Be71C3c29",
- * }, {
- *   from: account.address,
- *   to: "0xBeef...",
- *   value: 100n * 10n ** 18n,
- *   validAfter: 0n,
- *   validBefore: authorizationDeadlineFromNow(300),
- *   nonce: generateAuthorizationNonce(),
- * });
- * // → submit (v, r, s) to token.transferWithAuthorization(...)
- * ```
- */
-declare function signTransferWithAuthorization(account: Account, domain: Eip3009Domain, message: TransferWithAuthorizationMessage): Promise<SignedAuthorization<TransferWithAuthorizationMessage>>;
-/**
- * Signs an EIP-3009 `ReceiveWithAuthorization` message.
- *
- * Differs from {@link signTransferWithAuthorization} in two ways:
- * 1. Uses the `ReceiveWithAuthorization` EIP-712 type.
- * 2. The contract additionally enforces `msg.sender == to` at submission
- *    time, so only `to` (or a relayer impersonating `to` — impossible in
- *    practice) can land the tx.
- */
-declare function signReceiveWithAuthorization(account: Account, domain: Eip3009Domain, message: ReceiveWithAuthorizationMessage): Promise<SignedAuthorization<ReceiveWithAuthorizationMessage>>;
-/**
- * Signs an EIP-3009 `CancelAuthorization` message.
- *
- * Cancelling consumes the nonce so a later `transferWithAuthorization` or
- * `receiveWithAuthorization` with the same nonce will revert.
- */
-declare function signCancelAuthorization(account: Account, domain: Eip3009Domain, message: CancelAuthorizationMessage): Promise<SignedAuthorization<CancelAuthorizationMessage>>;
-
 /**
  * JPYC stablecoin metadata, deployments, and ABI.
  *
@@ -1084,4 +919,4 @@ declare const jpycAbi: readonly [{
     }];
 }];
 
-export { type CancelAuthorizationMessage, type CreateAgentSmartAccountParams, type Eip3009Domain, JPYC_DECIMALS, JPYC_EIP712_DOMAIN_HINT, JPYC_V2_ADDRESS, type JpycDeployment, JpycNotAvailableError, type ReceiveWithAuthorizationMessage, type SignedAuthorization, SupportedChainId, type TransferWithAuthorizationMessage, authorizationDeadlineFromNow, avalanche, avalancheFuji, createAgentSmartAccount, deriveAuthorizationNonce, ethereum, generateAuthorizationNonce, getJpycAddress, jpycAbi, jpycDeployments, kaia, kairos, polygon, polygonAmoy, sepolia, signCancelAuthorization, signReceiveWithAuthorization, signTransferWithAuthorization };
+export { type CreateAgentSmartAccountParams, JPYC_DECIMALS, JPYC_EIP712_DOMAIN_HINT, JPYC_V2_ADDRESS, type JpycDeployment, JpycNotAvailableError, SupportedChainId, avalanche, avalancheFuji, createAgentSmartAccount, ethereum, getJpycAddress, jpycAbi, jpycDeployments, kaia, kairos, polygon, polygonAmoy, sepolia };

package/dist/index.js

@@ -1,15 +1,15 @@
-export { TransferJpycInputError, transferJpyc } from './chunk-UQ7WJY6O.js';
-export { X402_DEFAULT_AUTHORIZATION_LIFETIME_SECONDS, X402_FACILITATOR_ERROR_CODES, createCoinbaseFacilitator, createHttpFacilitator, createSelfFacilitator, createX402PaymentSigner, deriveReceiptTimeoutMs, wrapFetch } from './chunk-E2EG72U2.js';
+export { TransferJpycInputError, transferJpyc } from './chunk-XRSZTZVZ.js';
+export { X402_DEFAULT_AUTHORIZATION_LIFETIME_SECONDS, X402_FACILITATOR_ERROR_CODES, createCoinbaseFacilitator, createHttpFacilitator, createSelfFacilitator, createX402PaymentSigner, deriveReceiptTimeoutMs, wrapFetch } from './chunk-SMAZUZFO.js';
 export { X402_DEFAULT_MAX_TIMEOUT_SECONDS, X402_HEADER_IDEMPOTENCY_KEY, X402_HEADER_PAYMENT_REQUIRED, X402_HEADER_PAYMENT_RESPONSE, X402_HEADER_PAYMENT_SIGNATURE, buildPaymentRequiredResponse, buildPaymentRequirements, createX402Handler, decodePaymentRequiredHeader, decodePaymentResponseHeader, decodePaymentSignatureHeader, encodePaymentRequiredHeader, encodePaymentResponseHeader, encodePaymentSignatureHeader } from './chunk-PVUKX6IF.js';
 export { extractAcceptedNetworks, invokeHookSafely } from './chunk-LEHWRDVS.js';
 export { createIdempotencyKeyBuilder, createInMemoryIdempotencyStore, deriveIdempotencyKey, normalizeIntentText } from './chunk-TTX3RBIZ.js';
 export { IdempotencyConfigError, IdempotencyRecordParseError, IdempotencyRecordVersionError, KAWASEKIT_IDEMPOTENCY_RECORD_VERSION, X402_VERSION, chainIdToX402Network, isX402Network, parseIdempotencyRecord, serializeIdempotencyRecord, x402NetworkToChainId } from './chunk-QHUCU5YX.js';
 export { KAWASEKIT_SESSION_ENVELOPE_VERSION, SessionEnvelopeChainMismatchError, SessionEnvelopeParseError, SessionEnvelopeSignerMismatchError, SessionEnvelopeVersionError, createAgentSmartAccount, issueSessionKey, parseSessionEnvelope, restoreSessionAccount, revokeSessionKey, rotateSessionKey, serializeSessionEnvelope } from './chunk-N3CVLISJ.js';
-export { createLocalPolicyGatedSigner } from './chunk-RUWCCP37.js';
-export { PolicyGatedSignerConfigError, assertNonBypassable, authorizationDeadlineFromNow, deriveAuthorizationNonce, generateAuthorizationNonce, getKnownAssetDomain, listKnownAssetIds, requireNonBypassable, signCancelAuthorization, signReceiveWithAuthorization, signTransferWithAuthorization } from './chunk-VPRR3TNA.js';
+export { createLocalPolicyGatedSigner } from './chunk-THTVJZ2Q.js';
+export { PolicyGatedSignerConfigError, assertNonBypassable, authorizationDeadlineFromNow, cancelAuthorizationTypes, deriveAuthorizationNonce, generateAuthorizationNonce, getKnownAssetDomain, listKnownAssetIds, receiveWithAuthorizationTypes, requireNonBypassable, resolvedAssetToEip3009Domain, signCancelAuthorization, signReceiveWithAuthorization, signTransferWithAuthorization, transferWithAuthorizationTypes } from './chunk-VXZHS74W.js';
 export { X402InvalidConfigError, X402InvalidPayloadError, X402PolicyRejectedError } from './chunk-WMVJNPX2.js';
 export { ONE_DAY_SECONDS, createJpycDailyLimitPolicies } from './chunk-E47SIVFY.js';
-export { SpendingPolicyConfigError, createSpendingPolicy, evaluateSpendingPolicy, mergeSpendState } from './chunk-YMABXRCK.js';
+export { SpendingPolicyConfigError, createSpendingPolicy, evaluateSpendingPolicy, mergeSpendState } from './chunk-6CNAYQOL.js';
 export { JPYC_DECIMALS, JPYC_EIP712_DOMAIN_HINT, JPYC_V2_ADDRESS, JpycNotAvailableError, getJpycAddress, jpycAbi, jpycDeployments } from './chunk-KT7XDT2T.js';
 export { ChainNotSupportedError, avalanche, avalancheFuji, ethereum, getChain, isSupportedChainId, kaia, kairos, polygon, polygonAmoy, sepolia, supportedChains, zerodevRpcUrl } from './chunk-SOTYGX67.js';
 import './chunk-7D4SUZUM.js';