kawasekit 0.5.0 → 0.7.0

package/dist/policy/index.d.cts

@@ -1,7 +1,7 @@
 import { Policy } from '@zerodev/permissions';
 import { CallPolicyVersion } from '@zerodev/permissions/policies';
 import { Address } from 'viem';
-export { C as CreateSpendingPolicyParams, P as PolicyDecision, S as SpendState, a as SpendingPolicy, b as SpendingPolicyConfigError, T as TokenLimit, c as createSpendingPolicy, e as evaluateSpendingPolicy, m as mergeSpendState } from '../spending-policy-CGIaBpg-.cjs';
+export { C as CreateSpendingPolicyParams, P as PolicyDecision, S as SpendState, a as SpendingPolicy, b as SpendingPolicyConfigError, T as TokenLimit, c as createSpendingPolicy, e as evaluateSpendingPolicy, m as mergeSpendState } from '../spending-policy-CwXcTFD_.cjs';
 import '../types-BLJU67HZ.cjs';
 
 /**
@@ -9,8 +9,12 @@ import '../types-BLJU67HZ.cjs';
  *
  * Composes two ZeroDev policies:
  * 1. **callPolicy** — locks the session key to `JPYC.transfer(to, value)`
- *    with `value ≤ maxPerTransfer`. Recipient is unrestricted in M2;
- *    add allowlisting in M3 when use cases firm up.
+ *    with `value ≤ maxPerTransfer`, and — when {@link
+ *    CreateJpycDailyLimitPoliciesParams.recipientAllowlist} is provided —
+ *    restricts `to` to the allowlisted recipients (otherwise any recipient is
+ *    allowed). This is the on-chain enforcement behind the "pay only registered
+ *    merchants" model: a buy-list resolves to its merchants' addresses, which
+ *    are baked into a disposable session key here.
  * 2. **rateLimitPolicy** — caps userOp count to `maxTransfersPerDay` in any
  *    24-hour rolling window.
  *
@@ -36,6 +40,29 @@ interface CreateJpycDailyLimitPoliciesParams {
      * time of writing). Bump only after auditing the new version's semantics.
      */
     readonly callPolicyVersion?: CallPolicyVersion;
+    /**
+     * Recipient restriction. An address list restricts the session key to
+     * `transfer` JPYC only to those recipients (enforced on-chain via the
+     * callPolicy `to` argument, condition `ONE_OF`); every other recipient is
+     * rejected before any funds move. `"any"` (or omitting the field) leaves the
+     * recipient unrestricted.
+     *
+     * The type mirrors the off-chain {@link SpendingPolicy.recipientAllowlist}
+     * (`Address[] | "any"`) so a buy-list's resolved allowlist can feed both the
+     * off-chain and on-chain policy paths unchanged. Two **deliberate** differences
+     * from that sibling, forced by on-chain semantics:
+     * - it is **optional** here (omitted = `"any"`) for backward compatibility —
+     *   the pre-allowlist policy left the recipient unrestricted;
+     * - an **empty** array `[]` **throws** (rather than meaning deny-all as it does
+     *   off-chain) — an on-chain allowlist cannot encode "match nothing"; omit it
+     *   or pass `"any"` for unrestricted, or list ≥1 recipient.
+     *
+     * Entries are checksum-normalized and de-duplicated (shared with the off-chain
+     * path via {@link normalizeRecipientAllowlist}). An address list requires
+     * `callPolicyVersion` ≥ `V0_0_2` (the `ONE_OF` condition is unsupported on
+     * `V0_0_1`); the default `V0_0_4` is fine.
+     */
+    readonly recipientAllowlist?: readonly Address[] | "any";
 }
 /**
  * Builds the ZeroDev policy bundle that enforces a JPYC daily spend limit.
@@ -60,6 +87,17 @@ interface CreateJpycDailyLimitPoliciesParams {
  *   // effective daily cap = 1000 JPYC
  * });
  * ```
+ *
+ * @example Restrict the session key to a buy-list's merchants only
+ * ```ts
+ * const policies = createJpycDailyLimitPolicies({
+ *   jpycAddress: getJpycAddress(polygonAmoy.id),
+ *   maxPerTransfer: parseUnits("100", JPYC_DECIMALS),
+ *   maxTransfersPerDay: 5,
+ *   // on-chain: any transfer to a non-allowlisted address reverts before funds move
+ *   recipientAllowlist: [merchantA, merchantB],
+ * });
+ * ```
  */
 declare function createJpycDailyLimitPolicies(params: CreateJpycDailyLimitPoliciesParams): readonly [Policy, Policy];
 

package/dist/policy/index.d.ts

@@ -1,7 +1,7 @@
 import { Policy } from '@zerodev/permissions';
 import { CallPolicyVersion } from '@zerodev/permissions/policies';
 import { Address } from 'viem';
-export { C as CreateSpendingPolicyParams, P as PolicyDecision, S as SpendState, a as SpendingPolicy, b as SpendingPolicyConfigError, T as TokenLimit, c as createSpendingPolicy, e as evaluateSpendingPolicy, m as mergeSpendState } from '../spending-policy-BD2Mpm-L.js';
+export { C as CreateSpendingPolicyParams, P as PolicyDecision, S as SpendState, a as SpendingPolicy, b as SpendingPolicyConfigError, T as TokenLimit, c as createSpendingPolicy, e as evaluateSpendingPolicy, m as mergeSpendState } from '../spending-policy-BBgXDrVD.js';
 import '../types-BLJU67HZ.js';
 
 /**
@@ -9,8 +9,12 @@ import '../types-BLJU67HZ.js';
  *
  * Composes two ZeroDev policies:
  * 1. **callPolicy** — locks the session key to `JPYC.transfer(to, value)`
- *    with `value ≤ maxPerTransfer`. Recipient is unrestricted in M2;
- *    add allowlisting in M3 when use cases firm up.
+ *    with `value ≤ maxPerTransfer`, and — when {@link
+ *    CreateJpycDailyLimitPoliciesParams.recipientAllowlist} is provided —
+ *    restricts `to` to the allowlisted recipients (otherwise any recipient is
+ *    allowed). This is the on-chain enforcement behind the "pay only registered
+ *    merchants" model: a buy-list resolves to its merchants' addresses, which
+ *    are baked into a disposable session key here.
  * 2. **rateLimitPolicy** — caps userOp count to `maxTransfersPerDay` in any
  *    24-hour rolling window.
  *
@@ -36,6 +40,29 @@ interface CreateJpycDailyLimitPoliciesParams {
      * time of writing). Bump only after auditing the new version's semantics.
      */
     readonly callPolicyVersion?: CallPolicyVersion;
+    /**
+     * Recipient restriction. An address list restricts the session key to
+     * `transfer` JPYC only to those recipients (enforced on-chain via the
+     * callPolicy `to` argument, condition `ONE_OF`); every other recipient is
+     * rejected before any funds move. `"any"` (or omitting the field) leaves the
+     * recipient unrestricted.
+     *
+     * The type mirrors the off-chain {@link SpendingPolicy.recipientAllowlist}
+     * (`Address[] | "any"`) so a buy-list's resolved allowlist can feed both the
+     * off-chain and on-chain policy paths unchanged. Two **deliberate** differences
+     * from that sibling, forced by on-chain semantics:
+     * - it is **optional** here (omitted = `"any"`) for backward compatibility —
+     *   the pre-allowlist policy left the recipient unrestricted;
+     * - an **empty** array `[]` **throws** (rather than meaning deny-all as it does
+     *   off-chain) — an on-chain allowlist cannot encode "match nothing"; omit it
+     *   or pass `"any"` for unrestricted, or list ≥1 recipient.
+     *
+     * Entries are checksum-normalized and de-duplicated (shared with the off-chain
+     * path via {@link normalizeRecipientAllowlist}). An address list requires
+     * `callPolicyVersion` ≥ `V0_0_2` (the `ONE_OF` condition is unsupported on
+     * `V0_0_1`); the default `V0_0_4` is fine.
+     */
+    readonly recipientAllowlist?: readonly Address[] | "any";
 }
 /**
  * Builds the ZeroDev policy bundle that enforces a JPYC daily spend limit.
@@ -60,6 +87,17 @@ interface CreateJpycDailyLimitPoliciesParams {
  *   // effective daily cap = 1000 JPYC
  * });
  * ```
+ *
+ * @example Restrict the session key to a buy-list's merchants only
+ * ```ts
+ * const policies = createJpycDailyLimitPolicies({
+ *   jpycAddress: getJpycAddress(polygonAmoy.id),
+ *   maxPerTransfer: parseUnits("100", JPYC_DECIMALS),
+ *   maxTransfersPerDay: 5,
+ *   // on-chain: any transfer to a non-allowlisted address reverts before funds move
+ *   recipientAllowlist: [merchantA, merchantB],
+ * });
+ * ```
  */
 declare function createJpycDailyLimitPolicies(params: CreateJpycDailyLimitPoliciesParams): readonly [Policy, Policy];
 

package/dist/policy/index.js

@@ -1,5 +1,5 @@
-export { ONE_DAY_SECONDS, createJpycDailyLimitPolicies } from '../chunk-E47SIVFY.js';
-export { SpendingPolicyConfigError, createSpendingPolicy, evaluateSpendingPolicy, mergeSpendState } from '../chunk-6CNAYQOL.js';
+export { ONE_DAY_SECONDS, createJpycDailyLimitPolicies } from '../chunk-UIDDRHLW.js';
+export { SpendingPolicyConfigError, createSpendingPolicy, evaluateSpendingPolicy, mergeSpendState } from '../chunk-7YKRKV6D.js';
 import '../chunk-KT7XDT2T.js';
 import '../chunk-SOTYGX67.js';
 import '../chunk-7D4SUZUM.js';