kawasekit 0.5.0 → 0.6.0

package/dist/cli/index.js

@@ -6,11 +6,11 @@ import '../chunk-LEHWRDVS.js';
 import '../chunk-TTX3RBIZ.js';
 import '../chunk-QHUCU5YX.js';
 import { issueSessionKey, serializeSessionEnvelope, restoreSessionAccount, revokeSessionKey, rotateSessionKey, parseSessionEnvelope } from '../chunk-N3CVLISJ.js';
-import '../chunk-S2ZSX2VS.js';
+import '../chunk-NY6VLXQB.js';
 import '../chunk-VJUXTVSW.js';
 import '../chunk-WMVJNPX2.js';
-import { createJpycDailyLimitPolicies } from '../chunk-E47SIVFY.js';
-import '../chunk-6CNAYQOL.js';
+import { createJpycDailyLimitPolicies } from '../chunk-X54U6GU4.js';
+import '../chunk-7YKRKV6D.js';
 import { JPYC_DECIMALS, getJpycAddress, jpycAbi } from '../chunk-KT7XDT2T.js';
 import { zerodevRpcUrl, polygon, polygonAmoy } from '../chunk-SOTYGX67.js';
 import { __commonJS, __require, __toESM } from '../chunk-7D4SUZUM.js';
@@ -980,7 +980,7 @@ function registerTransferCommand(program2) {
 }
 
 // cli/index.ts
-var CLI_VERSION = "0.5.0" ;
+var CLI_VERSION = "0.6.0" ;
 var program = new Command();
 program.name("kawasekit").description(
   "kawasekit \u2014 CLI for the kawasekit SDK (AI-agent stablecoin payments, Japan-first, JPYC-native)."

package/dist/index.cjs

@@ -363,6 +363,20 @@ async function transferJpyc(kernelClient, params) {
     success: receipt.success
   };
 }
+function normalizeRecipientAllowlist(allowlist) {
+  const seen = /* @__PURE__ */ new Set();
+  const normalized = [];
+  for (const entry of allowlist) {
+    const checksummed = viem.getAddress(entry);
+    if (!seen.has(checksummed)) {
+      seen.add(checksummed);
+      normalized.push(checksummed);
+    }
+  }
+  return normalized;
+}
+
+// src/policy/daily-limit.ts
 var ONE_DAY_SECONDS = 86400;
 function createJpycDailyLimitPolicies(params) {
   if (params.maxPerTransfer <= 0n) {
@@ -375,6 +389,17 @@ function createJpycDailyLimitPolicies(params) {
       `createJpycDailyLimitPolicies: maxTransfersPerDay must be a positive integer, got ${params.maxTransfersPerDay}.`
     );
   }
+  const recipients = params.recipientAllowlist === void 0 || params.recipientAllowlist === "any" ? null : normalizeRecipientAllowlist(params.recipientAllowlist);
+  if (recipients !== null && recipients.length === 0) {
+    throw new Error(
+      'createJpycDailyLimitPolicies: recipientAllowlist must not be empty \u2014 omit it or pass "any" to allow any recipient.'
+    );
+  }
+  if (recipients !== null && params.callPolicyVersion === policies.CallPolicyVersion.V0_0_1) {
+    throw new Error(
+      "createJpycDailyLimitPolicies: recipientAllowlist requires callPolicyVersion V0_0_2 or later (the ONE_OF condition is unsupported on V0_0_1)."
+    );
+  }
   const callPolicy = policies.toCallPolicy({
     policyVersion: params.callPolicyVersion ?? policies.CallPolicyVersion.V0_0_4,
     permissions: [
@@ -383,8 +408,9 @@ function createJpycDailyLimitPolicies(params) {
         abi: jpycAbi,
         functionName: "transfer",
         args: [
-          // Recipient: any address allowed (no allowlist in M2).
-          null,
+          // Recipient (`to`): unrestricted (`null`) unless an allowlist resolved
+          // above, in which case it is constrained via the ONE_OF condition.
+          recipients === null ? null : { condition: policies.ParamCondition.ONE_OF, value: recipients },
           // value: must be ≤ maxPerTransfer.
           {
             condition: policies.ParamCondition.LESS_THAN_OR_EQUAL,
@@ -501,7 +527,7 @@ function createSpendingPolicy(params) {
     }
     return { token, maxPerSign: l.maxPerSign };
   });
-  const recipientAllowlist = params.recipientAllowlist === "any" ? "any" : params.recipientAllowlist.map((a) => viem.getAddress(a));
+  const recipientAllowlist = params.recipientAllowlist === "any" ? "any" : normalizeRecipientAllowlist(params.recipientAllowlist);
   return {
     version: "1",
     session: { id: params.session.id, notAfter: params.session.notAfter },