kawasekit 0.8.0 → 0.10.0

package/dist/index.d.cts

@@ -1,12 +1,11 @@
-import { Policy } from '@zerodev/permissions';
-import { CreateKernelAccountReturnType } from '@zerodev/sdk';
-import { EntryPointType, GetKernelVersion } from '@zerodev/sdk/types';
-import * as viem from 'viem';
-import { PublicClient, Transport, Chain, LocalAccount, Address } from 'viem';
+import { C as ConfiguredKernelClient } from './index-FxiMeqpl.cjs';
+export { A as AgentOwner, B as BuildRevokeSessionKeyCallParams, a as CreateAgentSmartAccountParams, I as IssueSessionKeyParams, K as KAWASEKIT_SESSION_ENVELOPE_VERSION, b as KawasekitSessionEnvelope, c as KawasekitSessionEnvelopeVersion, d as KawasekitSessionPolicySummary, R as RestoreSessionAccountParams, e as RevokeSessionKeyParams, f as RevokeSessionKeyResult, g as RotateSessionKeyParams, h as RotateSessionKeyResult, S as SessionEnvelopeChainMismatchError, i as SessionEnvelopeParseError, j as SessionEnvelopeSignerMismatchError, k as SessionEnvelopeVersionError, T as TransferJpycInputError, l as TransferJpycParams, m as TransferJpycResult, n as buildRevokeSessionKeyCall, o as createAgentSmartAccount, p as issueSessionKey, q as parseSessionEnvelope, r as restoreSessionAccount, s as revokeSessionKey, t as rotateSessionKey, u as serializeSessionEnvelope, v as transferJpyc } from './index-FxiMeqpl.cjs';
 import { S as SupportedChainId } from './index-2fEOL83n.cjs';
 export { C as ChainNotSupportedError, g as getChain, i as isSupportedChainId, s as supportedChains } from './index-2fEOL83n.cjs';
-import { C as ConfiguredKernelClient } from './index-DFChv_fT.cjs';
-export { I as IssueSessionKeyParams, K as KAWASEKIT_SESSION_ENVELOPE_VERSION, a as KawasekitSessionEnvelope, b as KawasekitSessionEnvelopeVersion, c as KawasekitSessionPolicySummary, R as RestoreSessionAccountParams, d as RevokeSessionKeyParams, e as RevokeSessionKeyResult, f as RotateSessionKeyParams, g as RotateSessionKeyResult, S as SessionEnvelopeChainMismatchError, h as SessionEnvelopeParseError, i as SessionEnvelopeSignerMismatchError, j as SessionEnvelopeVersionError, T as TransferJpycInputError, k as TransferJpycParams, l as TransferJpycResult, m as issueSessionKey, p as parseSessionEnvelope, r as restoreSessionAccount, n as revokeSessionKey, o as rotateSessionKey, s as serializeSessionEnvelope, t as transferJpyc } from './index-DFChv_fT.cjs';
+import { CreateKernelAccountReturnType } from '@zerodev/sdk';
+import * as viem from 'viem';
+import { Chain, PublicClient, Transport, Address } from 'viem';
+import { Policy } from '@zerodev/permissions';
 import { CallPolicyVersion } from '@zerodev/permissions/policies';
 export { CreateJpycDailyLimitPoliciesParams, ONE_DAY_SECONDS, createJpycDailyLimitPolicies } from './policy/index.cjs';
 export { C as CreateSpendingPolicyParams, P as PolicyDecision, S as SpendState, a as SpendingPolicy, b as SpendingPolicyConfigError, T as TokenLimit, c as createSpendingPolicy, e as evaluateSpendingPolicy, m as mergeSpendState } from './spending-policy-CwXcTFD_.cjs';
@@ -19,85 +18,9 @@ export { F as Facilitator, X as X402AssetTransferMethod, a as X402ExactEvmAuthor
 export { ClientPaymentEvent, HookCallback, ObservabilityEvent, ObservabilityEventBase, ObservabilityHooks, PaymentAcceptedEvent, PaymentRequiredEvent, SettleEvent, VerifyEvent, extractAcceptedNetworks, invokeHookSafely } from './observability/index.cjs';
 export { CanonicalRequestIdentity, CreateIdempotencyKeyBuilderParams, IdempotencyConfigError, IdempotencyKeyBuilder, IdempotencyRecordParseError, IdempotencyRecordVersionError, createIdempotencyKeyBuilder, deriveIdempotencyKey, normalizeIntentText } from './idempotency/index.cjs';
 export { C as CreateInMemoryIdempotencyStoreParams, I as IdempotencyLease, a as IdempotencyLookupResult, b as IdempotencyRecord, c as IdempotencyResponseSnapshot, d as IdempotencyStore, K as KAWASEKIT_IDEMPOTENCY_RECORD_VERSION, e as KawasekitIdempotencyRecordVersion, f as createInMemoryIdempotencyStore, p as parseIdempotencyRecord, s as serializeIdempotencyRecord } from './store-DPOLS6yp.cjs';
+import '@zerodev/sdk/types';
 import 'viem/account-abstraction';
 
-/**
- * Agent smart account = Kernel v3.1 + ECDSA sudo validator + session-key
- * permission validator.
- *
- * The owner EOA keeps full control (sudo) and can revoke / rotate the session
- * key at any time. The session key is the day-to-day signer the AI agent
- * holds; whatever policies you attach (see {@link createJpycDailyLimitPolicies})
- * are enforced at the ERC-4337 validation phase by ZeroDev's
- * `PermissionValidator`. Violating userOps revert before execution — they
- * never spend any of the smart account's funds, and a sponsored bundler
- * cannot be tricked into paying for them either.
- *
- * @packageDocumentation
- */
-
-/** Parameters for {@link createAgentSmartAccount}. */
-interface CreateAgentSmartAccountParams {
-    /**
-     * viem `PublicClient` used to read on-chain state during account derivation.
-     */
-    readonly publicClient: PublicClient<Transport, Chain | undefined>;
-    /**
-     * The owner EOA. Retains sudo authority — can install new plugins,
-     * revoke / rotate the session key, and bypass any policy.
-     */
-    readonly ownerSigner: LocalAccount;
-    /**
-     * The day-to-day signer the agent holds. Authority is limited to whatever
-     * `policies` allow — by default it can do nothing.
-     */
-    readonly sessionKeySigner: LocalAccount;
-    /**
-     * ZeroDev policies (e.g. {@link createJpycDailyLimitPolicies}) the session
-     * key must satisfy at userOp validation time.
-     */
-    readonly policies: readonly Policy[];
-    /**
-     * EntryPoint version + address. Defaults to v0.7 at the canonical
-     * ERC-4337 entry-point address.
-     */
-    readonly entryPoint?: EntryPointType<"0.7">;
-    /** Kernel version. Defaults to {@link KERNEL_V3_1}. */
-    readonly kernelVersion?: GetKernelVersion<"0.7">;
-}
-/**
- * Builds a Kernel v3.1 smart account with sudo (owner) + regular (session key)
- * validators wired up.
- *
- * @example
- * ```ts
- * import { parseUnits } from "viem";
- * import { privateKeyToAccount } from "viem/accounts";
- * import {
- *   createAgentSmartAccount,
- *   createJpycDailyLimitPolicies,
- *   getJpycAddress,
- *   JPYC_DECIMALS,
- *   polygonAmoy,
- * } from "kawasekit";
- *
- * const owner = privateKeyToAccount(process.env.OWNER_PRIVATE_KEY as `0x${string}`);
- * const sessionKey = privateKeyToAccount(process.env.SESSION_KEY_PRIVATE_KEY as `0x${string}`);
- *
- * const account = await createAgentSmartAccount({
- *   publicClient,
- *   ownerSigner: owner,
- *   sessionKeySigner: sessionKey,
- *   policies: createJpycDailyLimitPolicies({
- *     jpycAddress: getJpycAddress(polygonAmoy.id),
- *     maxPerTransfer: parseUnits("100", JPYC_DECIMALS),
- *     maxTransfersPerDay: 10,
- *   }),
- * });
- * ```
- */
-declare function createAgentSmartAccount(params: CreateAgentSmartAccountParams): Promise<CreateKernelAccountReturnType<"0.7">>;
-
 /**
  * Avalanche C-Chain — priority 3 production chain.
  *
@@ -627,23 +550,29 @@ declare function createSponsoredKernelClient(params: CreateSponsoredKernelClient
  * Buy-list → ZeroDev policy bundle for a **disposable, scoped session key**
  * (the Agent Commerce Hub authorization flow).
  *
- * A user's resolved buy-list (its merchants + a per-transfer cap + a total
- * transfer count + a schedule window) is baked into a single-use session key by
- * composing three on-chain policies:
+ * A user's resolved buy-list (its merchants + a per-transfer cap + a schedule
+ * window) is baked into a single-use session key by composing two on-chain
+ * policies:
  * 1. **callPolicy** — `JPYC.transfer(to, value)` with `value ≤ maxPerTransfer`
  *    and `to ∈ merchants` (the allowlist; shared with
  *    {@link createJpycDailyLimitPolicies} via {@link buildJpycTransferCallPolicy}).
- * 2. **rateLimitPolicy** — a **total** cap of `maxTransfers` over the whole
- *    schedule window (the rate window is set to span `[validAfter, validUntil]`,
- *    so `count` does NOT reset within the session — it is a session total, not a
- *    per-day limit).
- * 3. **timestampPolicy** — the session key is only valid within
+ * 2. **timestampPolicy** — the session key is only valid within
  *    `[validAfter, validUntil]`.
  *
  * Cumulative budget ("spend ≤ ¥X total") is NOT a policy field — it is the
  * amount the user funds the account with (funding is the user's responsibility,
  * out of the SDK's scope). These policies bound *who* (allowlist), *how much per
- * transfer* (cap), *how many* (count), and *when* (window).
+ * transfer* (cap), and *when* (window).
+ *
+ * The transfer **count** / sponsored-op bound is intentionally NOT a session-key
+ * policy — total value is bounded by the funded balance, and an op-count / gas
+ * bound (if desired) belongs to the consumer's **sponsor-gas policy**, not this
+ * permission bundle. A prior version included a `rateLimitPolicy` for a
+ * `maxTransfers` count, but it was built on ZeroDev's **scheduled-release** rate-
+ * limit contract (`0xf63d4139…`, which gates op *i* at `startAt + i·interval`)
+ * with `interval` = the whole window, so the 2nd transfer was *not-due until
+ * `validUntil`* and the 3rd+ never — back-to-back multi-merchant payment reverted
+ * `AA22`. It was dropped in `0.10.0`; see `docs/rfc/0004-buylist-drop-scheduled-rate-limit.md`.
  *
  * @packageDocumentation
  */
@@ -660,11 +589,6 @@ interface CreateBuyListPoliciesParams {
     readonly merchants: readonly Address[];
     /** Maximum JPYC (raw units) per single transfer. Must be positive. */
     readonly maxPerTransfer: bigint;
-    /**
-     * Maximum number of transfers over the WHOLE window — a session total, not a
-     * per-day limit. Must be a positive integer.
-     */
-    readonly maxTransfers: number;
     /** Schedule-window end (unix seconds); the key is invalid after this. Must be a positive integer. */
     readonly validUntil: number;
     /**
@@ -690,13 +614,12 @@ interface CreateBuyListPoliciesParams {
  *   jpycAddress: getJpycAddress(polygonAmoy.id),
  *   merchants: [merchantA, merchantB],          // pay ONLY these (allowlist)
  *   maxPerTransfer: parseUnits("500", JPYC_DECIMALS),
- *   maxTransfers: 3,                             // at most 3 transfers, total
  *   validUntil: Math.floor(Date.now() / 1000) + 3 * 86_400, // valid 3 days
  * });
- * // user funds the account with their budget; the policies bound who/how-much/how-many/when.
+ * // user funds the account with their budget; the policies bound who/how-much/when.
  * ```
  */
-declare function createBuyListPolicies(params: CreateBuyListPoliciesParams): readonly [Policy, Policy, Policy];
+declare function createBuyListPolicies(params: CreateBuyListPoliciesParams): readonly [Policy, Policy];
 
 /**
  * JPYC stablecoin metadata, deployments, and ABI.
@@ -1064,4 +987,4 @@ declare const jpycAbi: readonly [{
     }];
 }];
 
-export { ConfiguredKernelClient, type CreateAgentSmartAccountParams, type CreateBuyListPoliciesParams, type CreateSponsoredKernelClientParams, JPYC_DECIMALS, JPYC_EIP712_DOMAIN_HINT, JPYC_V2_ADDRESS, type JpycDeployment, JpycNotAvailableError, type SponsoredKernelClientObservability, SupportedChainId, avalanche, avalancheFuji, createAgentSmartAccount, createBuyListPolicies, createSponsoredKernelClient, ethereum, getJpycAddress, jpycAbi, jpycDeployments, kaia, kairos, polygon, polygonAmoy, sepolia };
+export { ConfiguredKernelClient, type CreateBuyListPoliciesParams, type CreateSponsoredKernelClientParams, JPYC_DECIMALS, JPYC_EIP712_DOMAIN_HINT, JPYC_V2_ADDRESS, type JpycDeployment, JpycNotAvailableError, type SponsoredKernelClientObservability, SupportedChainId, avalanche, avalancheFuji, createBuyListPolicies, createSponsoredKernelClient, ethereum, getJpycAddress, jpycAbi, jpycDeployments, kaia, kairos, polygon, polygonAmoy, sepolia };

package/dist/index.d.ts

@@ -1,12 +1,11 @@
-import { Policy } from '@zerodev/permissions';
-import { CreateKernelAccountReturnType } from '@zerodev/sdk';
-import { EntryPointType, GetKernelVersion } from '@zerodev/sdk/types';
-import * as viem from 'viem';
-import { PublicClient, Transport, Chain, LocalAccount, Address } from 'viem';
+import { C as ConfiguredKernelClient } from './index-RsuBt-Xw.js';
+export { A as AgentOwner, B as BuildRevokeSessionKeyCallParams, a as CreateAgentSmartAccountParams, I as IssueSessionKeyParams, K as KAWASEKIT_SESSION_ENVELOPE_VERSION, b as KawasekitSessionEnvelope, c as KawasekitSessionEnvelopeVersion, d as KawasekitSessionPolicySummary, R as RestoreSessionAccountParams, e as RevokeSessionKeyParams, f as RevokeSessionKeyResult, g as RotateSessionKeyParams, h as RotateSessionKeyResult, S as SessionEnvelopeChainMismatchError, i as SessionEnvelopeParseError, j as SessionEnvelopeSignerMismatchError, k as SessionEnvelopeVersionError, T as TransferJpycInputError, l as TransferJpycParams, m as TransferJpycResult, n as buildRevokeSessionKeyCall, o as createAgentSmartAccount, p as issueSessionKey, q as parseSessionEnvelope, r as restoreSessionAccount, s as revokeSessionKey, t as rotateSessionKey, u as serializeSessionEnvelope, v as transferJpyc } from './index-RsuBt-Xw.js';
 import { S as SupportedChainId } from './index-2fEOL83n.js';
 export { C as ChainNotSupportedError, g as getChain, i as isSupportedChainId, s as supportedChains } from './index-2fEOL83n.js';
-import { C as ConfiguredKernelClient } from './index-CSpNGigO.js';
-export { I as IssueSessionKeyParams, K as KAWASEKIT_SESSION_ENVELOPE_VERSION, a as KawasekitSessionEnvelope, b as KawasekitSessionEnvelopeVersion, c as KawasekitSessionPolicySummary, R as RestoreSessionAccountParams, d as RevokeSessionKeyParams, e as RevokeSessionKeyResult, f as RotateSessionKeyParams, g as RotateSessionKeyResult, S as SessionEnvelopeChainMismatchError, h as SessionEnvelopeParseError, i as SessionEnvelopeSignerMismatchError, j as SessionEnvelopeVersionError, T as TransferJpycInputError, k as TransferJpycParams, l as TransferJpycResult, m as issueSessionKey, p as parseSessionEnvelope, r as restoreSessionAccount, n as revokeSessionKey, o as rotateSessionKey, s as serializeSessionEnvelope, t as transferJpyc } from './index-CSpNGigO.js';
+import { CreateKernelAccountReturnType } from '@zerodev/sdk';
+import * as viem from 'viem';
+import { Chain, PublicClient, Transport, Address } from 'viem';
+import { Policy } from '@zerodev/permissions';
 import { CallPolicyVersion } from '@zerodev/permissions/policies';
 export { CreateJpycDailyLimitPoliciesParams, ONE_DAY_SECONDS, createJpycDailyLimitPolicies } from './policy/index.js';
 export { C as CreateSpendingPolicyParams, P as PolicyDecision, S as SpendState, a as SpendingPolicy, b as SpendingPolicyConfigError, T as TokenLimit, c as createSpendingPolicy, e as evaluateSpendingPolicy, m as mergeSpendState } from './spending-policy-BBgXDrVD.js';
@@ -19,85 +18,9 @@ export { F as Facilitator, X as X402AssetTransferMethod, a as X402ExactEvmAuthor
 export { ClientPaymentEvent, HookCallback, ObservabilityEvent, ObservabilityEventBase, ObservabilityHooks, PaymentAcceptedEvent, PaymentRequiredEvent, SettleEvent, VerifyEvent, extractAcceptedNetworks, invokeHookSafely } from './observability/index.js';
 export { CanonicalRequestIdentity, CreateIdempotencyKeyBuilderParams, IdempotencyConfigError, IdempotencyKeyBuilder, IdempotencyRecordParseError, IdempotencyRecordVersionError, createIdempotencyKeyBuilder, deriveIdempotencyKey, normalizeIntentText } from './idempotency/index.js';
 export { C as CreateInMemoryIdempotencyStoreParams, I as IdempotencyLease, a as IdempotencyLookupResult, b as IdempotencyRecord, c as IdempotencyResponseSnapshot, d as IdempotencyStore, K as KAWASEKIT_IDEMPOTENCY_RECORD_VERSION, e as KawasekitIdempotencyRecordVersion, f as createInMemoryIdempotencyStore, p as parseIdempotencyRecord, s as serializeIdempotencyRecord } from './store-DmdoV3Ii.js';
+import '@zerodev/sdk/types';
 import 'viem/account-abstraction';
 
-/**
- * Agent smart account = Kernel v3.1 + ECDSA sudo validator + session-key
- * permission validator.
- *
- * The owner EOA keeps full control (sudo) and can revoke / rotate the session
- * key at any time. The session key is the day-to-day signer the AI agent
- * holds; whatever policies you attach (see {@link createJpycDailyLimitPolicies})
- * are enforced at the ERC-4337 validation phase by ZeroDev's
- * `PermissionValidator`. Violating userOps revert before execution — they
- * never spend any of the smart account's funds, and a sponsored bundler
- * cannot be tricked into paying for them either.
- *
- * @packageDocumentation
- */
-
-/** Parameters for {@link createAgentSmartAccount}. */
-interface CreateAgentSmartAccountParams {
-    /**
-     * viem `PublicClient` used to read on-chain state during account derivation.
-     */
-    readonly publicClient: PublicClient<Transport, Chain | undefined>;
-    /**
-     * The owner EOA. Retains sudo authority — can install new plugins,
-     * revoke / rotate the session key, and bypass any policy.
-     */
-    readonly ownerSigner: LocalAccount;
-    /**
-     * The day-to-day signer the agent holds. Authority is limited to whatever
-     * `policies` allow — by default it can do nothing.
-     */
-    readonly sessionKeySigner: LocalAccount;
-    /**
-     * ZeroDev policies (e.g. {@link createJpycDailyLimitPolicies}) the session
-     * key must satisfy at userOp validation time.
-     */
-    readonly policies: readonly Policy[];
-    /**
-     * EntryPoint version + address. Defaults to v0.7 at the canonical
-     * ERC-4337 entry-point address.
-     */
-    readonly entryPoint?: EntryPointType<"0.7">;
-    /** Kernel version. Defaults to {@link KERNEL_V3_1}. */
-    readonly kernelVersion?: GetKernelVersion<"0.7">;
-}
-/**
- * Builds a Kernel v3.1 smart account with sudo (owner) + regular (session key)
- * validators wired up.
- *
- * @example
- * ```ts
- * import { parseUnits } from "viem";
- * import { privateKeyToAccount } from "viem/accounts";
- * import {
- *   createAgentSmartAccount,
- *   createJpycDailyLimitPolicies,
- *   getJpycAddress,
- *   JPYC_DECIMALS,
- *   polygonAmoy,
- * } from "kawasekit";
- *
- * const owner = privateKeyToAccount(process.env.OWNER_PRIVATE_KEY as `0x${string}`);
- * const sessionKey = privateKeyToAccount(process.env.SESSION_KEY_PRIVATE_KEY as `0x${string}`);
- *
- * const account = await createAgentSmartAccount({
- *   publicClient,
- *   ownerSigner: owner,
- *   sessionKeySigner: sessionKey,
- *   policies: createJpycDailyLimitPolicies({
- *     jpycAddress: getJpycAddress(polygonAmoy.id),
- *     maxPerTransfer: parseUnits("100", JPYC_DECIMALS),
- *     maxTransfersPerDay: 10,
- *   }),
- * });
- * ```
- */
-declare function createAgentSmartAccount(params: CreateAgentSmartAccountParams): Promise<CreateKernelAccountReturnType<"0.7">>;
-
 /**
  * Avalanche C-Chain — priority 3 production chain.
  *
@@ -627,23 +550,29 @@ declare function createSponsoredKernelClient(params: CreateSponsoredKernelClient
  * Buy-list → ZeroDev policy bundle for a **disposable, scoped session key**
  * (the Agent Commerce Hub authorization flow).
  *
- * A user's resolved buy-list (its merchants + a per-transfer cap + a total
- * transfer count + a schedule window) is baked into a single-use session key by
- * composing three on-chain policies:
+ * A user's resolved buy-list (its merchants + a per-transfer cap + a schedule
+ * window) is baked into a single-use session key by composing two on-chain
+ * policies:
  * 1. **callPolicy** — `JPYC.transfer(to, value)` with `value ≤ maxPerTransfer`
  *    and `to ∈ merchants` (the allowlist; shared with
  *    {@link createJpycDailyLimitPolicies} via {@link buildJpycTransferCallPolicy}).
- * 2. **rateLimitPolicy** — a **total** cap of `maxTransfers` over the whole
- *    schedule window (the rate window is set to span `[validAfter, validUntil]`,
- *    so `count` does NOT reset within the session — it is a session total, not a
- *    per-day limit).
- * 3. **timestampPolicy** — the session key is only valid within
+ * 2. **timestampPolicy** — the session key is only valid within
  *    `[validAfter, validUntil]`.
  *
  * Cumulative budget ("spend ≤ ¥X total") is NOT a policy field — it is the
  * amount the user funds the account with (funding is the user's responsibility,
  * out of the SDK's scope). These policies bound *who* (allowlist), *how much per
- * transfer* (cap), *how many* (count), and *when* (window).
+ * transfer* (cap), and *when* (window).
+ *
+ * The transfer **count** / sponsored-op bound is intentionally NOT a session-key
+ * policy — total value is bounded by the funded balance, and an op-count / gas
+ * bound (if desired) belongs to the consumer's **sponsor-gas policy**, not this
+ * permission bundle. A prior version included a `rateLimitPolicy` for a
+ * `maxTransfers` count, but it was built on ZeroDev's **scheduled-release** rate-
+ * limit contract (`0xf63d4139…`, which gates op *i* at `startAt + i·interval`)
+ * with `interval` = the whole window, so the 2nd transfer was *not-due until
+ * `validUntil`* and the 3rd+ never — back-to-back multi-merchant payment reverted
+ * `AA22`. It was dropped in `0.10.0`; see `docs/rfc/0004-buylist-drop-scheduled-rate-limit.md`.
  *
  * @packageDocumentation
  */
@@ -660,11 +589,6 @@ interface CreateBuyListPoliciesParams {
     readonly merchants: readonly Address[];
     /** Maximum JPYC (raw units) per single transfer. Must be positive. */
     readonly maxPerTransfer: bigint;
-    /**
-     * Maximum number of transfers over the WHOLE window — a session total, not a
-     * per-day limit. Must be a positive integer.
-     */
-    readonly maxTransfers: number;
     /** Schedule-window end (unix seconds); the key is invalid after this. Must be a positive integer. */
     readonly validUntil: number;
     /**
@@ -690,13 +614,12 @@ interface CreateBuyListPoliciesParams {
  *   jpycAddress: getJpycAddress(polygonAmoy.id),
  *   merchants: [merchantA, merchantB],          // pay ONLY these (allowlist)
  *   maxPerTransfer: parseUnits("500", JPYC_DECIMALS),
- *   maxTransfers: 3,                             // at most 3 transfers, total
  *   validUntil: Math.floor(Date.now() / 1000) + 3 * 86_400, // valid 3 days
  * });
- * // user funds the account with their budget; the policies bound who/how-much/how-many/when.
+ * // user funds the account with their budget; the policies bound who/how-much/when.
  * ```
  */
-declare function createBuyListPolicies(params: CreateBuyListPoliciesParams): readonly [Policy, Policy, Policy];
+declare function createBuyListPolicies(params: CreateBuyListPoliciesParams): readonly [Policy, Policy];
 
 /**
  * JPYC stablecoin metadata, deployments, and ABI.
@@ -1064,4 +987,4 @@ declare const jpycAbi: readonly [{
     }];
 }];
 
-export { ConfiguredKernelClient, type CreateAgentSmartAccountParams, type CreateBuyListPoliciesParams, type CreateSponsoredKernelClientParams, JPYC_DECIMALS, JPYC_EIP712_DOMAIN_HINT, JPYC_V2_ADDRESS, type JpycDeployment, JpycNotAvailableError, type SponsoredKernelClientObservability, SupportedChainId, avalanche, avalancheFuji, createAgentSmartAccount, createBuyListPolicies, createSponsoredKernelClient, ethereum, getJpycAddress, jpycAbi, jpycDeployments, kaia, kairos, polygon, polygonAmoy, sepolia };
+export { ConfiguredKernelClient, type CreateBuyListPoliciesParams, type CreateSponsoredKernelClientParams, JPYC_DECIMALS, JPYC_EIP712_DOMAIN_HINT, JPYC_V2_ADDRESS, type JpycDeployment, JpycNotAvailableError, type SponsoredKernelClientObservability, SupportedChainId, avalanche, avalancheFuji, createBuyListPolicies, createSponsoredKernelClient, ethereum, getJpycAddress, jpycAbi, jpycDeployments, kaia, kairos, polygon, polygonAmoy, sepolia };

package/dist/index.js

@@ -1,10 +1,10 @@
-export { TransferJpycInputError, createBuyListPolicies, createSponsoredKernelClient, transferJpyc } from './chunk-DMP7YFGA.js';
+export { TransferJpycInputError, createBuyListPolicies, createSponsoredKernelClient, transferJpyc } from './chunk-OUCIKHS2.js';
 export { X402_DEFAULT_AUTHORIZATION_LIFETIME_SECONDS, X402_FACILITATOR_ERROR_CODES, createCoinbaseFacilitator, createHttpFacilitator, createSelfFacilitator, createX402PaymentSigner, deriveReceiptTimeoutMs, wrapFetch } from './chunk-P5563RGP.js';
 export { X402_DEFAULT_MAX_TIMEOUT_SECONDS, X402_HEADER_IDEMPOTENCY_KEY, X402_HEADER_PAYMENT_REQUIRED, X402_HEADER_PAYMENT_RESPONSE, X402_HEADER_PAYMENT_SIGNATURE, buildPaymentRequiredResponse, buildPaymentRequirements, createX402Handler, decodePaymentRequiredHeader, decodePaymentResponseHeader, decodePaymentSignatureHeader, encodePaymentRequiredHeader, encodePaymentResponseHeader, encodePaymentSignatureHeader } from './chunk-PVUKX6IF.js';
 export { extractAcceptedNetworks, invokeHookSafely } from './chunk-LEHWRDVS.js';
 export { createIdempotencyKeyBuilder, createInMemoryIdempotencyStore, deriveIdempotencyKey, normalizeIntentText } from './chunk-TTX3RBIZ.js';
 export { IdempotencyConfigError, IdempotencyRecordParseError, IdempotencyRecordVersionError, KAWASEKIT_IDEMPOTENCY_RECORD_VERSION, X402_VERSION, chainIdToX402Network, isX402Network, parseIdempotencyRecord, serializeIdempotencyRecord, x402NetworkToChainId } from './chunk-QHUCU5YX.js';
-export { KAWASEKIT_SESSION_ENVELOPE_VERSION, SessionEnvelopeChainMismatchError, SessionEnvelopeParseError, SessionEnvelopeSignerMismatchError, SessionEnvelopeVersionError, createAgentSmartAccount, issueSessionKey, parseSessionEnvelope, restoreSessionAccount, revokeSessionKey, rotateSessionKey, serializeSessionEnvelope } from './chunk-N3CVLISJ.js';
+export { KAWASEKIT_SESSION_ENVELOPE_VERSION, SessionEnvelopeChainMismatchError, SessionEnvelopeParseError, SessionEnvelopeSignerMismatchError, SessionEnvelopeVersionError, buildRevokeSessionKeyCall, createAgentSmartAccount, issueSessionKey, parseSessionEnvelope, restoreSessionAccount, revokeSessionKey, rotateSessionKey, serializeSessionEnvelope } from './chunk-KYVAOUQV.js';
 export { WIRE_VERSION, canonicalRequestBytes, createLocalPolicyGatedSigner, createMpc2pPolicyGatedSigner, toWireIntent } from './chunk-NY6VLXQB.js';
 export { CoSignUnavailableError, PolicyGatedSignerConfigError, assertNonBypassable, authorizationDeadlineFromNow, cancelAuthorizationTypes, deriveAuthorizationNonce, generateAuthorizationNonce, getKnownAssetDomain, listKnownAssetIds, receiveWithAuthorizationTypes, requireNonBypassable, resolvedAssetToEip3009Domain, signCancelAuthorization, signReceiveWithAuthorization, signTransferWithAuthorization, transferWithAuthorizationTypes } from './chunk-VJUXTVSW.js';
 export { X402InvalidConfigError, X402InvalidPayloadError, X402PolicyRejectedError } from './chunk-WMVJNPX2.js';

package/dist/session/index.cjs

@@ -3,10 +3,10 @@
 var viem = require('viem');
 var chains = require('viem/chains');
 var permissions = require('@zerodev/permissions');
+var sdk = require('@zerodev/sdk');
 var constants = require('@zerodev/sdk/constants');
 var ecdsaValidator = require('@zerodev/ecdsa-validator');
 var signers = require('@zerodev/permissions/signers');
-var sdk = require('@zerodev/sdk');
 
 // src/session/envelope.ts
 var avalanche = {
@@ -222,28 +222,27 @@ function parseSessionEnvelope(input) {
   }
   return base;
 }
-async function createAgentSmartAccount(params) {
-  const entryPoint = params.entryPoint ?? constants.getEntryPoint("0.7");
-  const kernelVersion = params.kernelVersion ?? constants.KERNEL_V3_1;
-  const sudoValidator = await ecdsaValidator.signerToEcdsaValidator(params.publicClient, {
+async function resolveSudoValidator(params) {
+  if (params.ownerSigner !== void 0 && params.sudoValidator !== void 0) {
+    throw new Error("kawasekit: pass exactly one of `ownerSigner` or `sudoValidator`, not both.");
+  }
+  if (params.sudoValidator !== void 0) return params.sudoValidator;
+  if (params.ownerSigner === void 0) {
+    throw new Error("kawasekit: pass one of `ownerSigner` (ECDSA) or `sudoValidator` (pre-built).");
+  }
+  return ecdsaValidator.signerToEcdsaValidator(params.publicClient, {
     signer: params.ownerSigner,
-    entryPoint,
-    kernelVersion
+    entryPoint: params.entryPoint,
+    kernelVersion: params.kernelVersion
   });
-  const modularSessionSigner = await signers.toECDSASigner({ signer: params.sessionKeySigner });
-  const permissionValidator = await permissions.toPermissionValidator(params.publicClient, {
-    signer: modularSessionSigner,
+}
+async function buildSessionPermissionValidator(params) {
+  const signer = await signers.toECDSASigner({ signer: params.sessionKeySigner });
+  return permissions.toPermissionValidator(params.publicClient, {
+    signer,
     policies: [...params.policies],
-    entryPoint,
-    kernelVersion
-  });
-  return sdk.createKernelAccount(params.publicClient, {
-    plugins: {
-      sudo: sudoValidator,
-      regular: permissionValidator
-    },
-    entryPoint,
-    kernelVersion
+    entryPoint: params.entryPoint,
+    kernelVersion: params.kernelVersion
   });
 }
 
@@ -258,15 +257,28 @@ async function issueSessionKey(params) {
   const supportedChainId = chainId;
   const entryPoint = params.entryPoint ?? constants.getEntryPoint("0.7");
   const kernelVersion = params.kernelVersion ?? constants.KERNEL_V3_1;
-  const account = await createAgentSmartAccount({
+  const sudoValidator = await resolveSudoValidator({
     publicClient: params.publicClient,
     ownerSigner: params.ownerSigner,
+    sudoValidator: params.sudoValidator,
+    entryPoint,
+    kernelVersion
+  });
+  const permissionValidator = await buildSessionPermissionValidator({
+    publicClient: params.publicClient,
     sessionKeySigner: params.sessionKeySigner,
     policies: params.policies,
     entryPoint,
     kernelVersion
   });
-  const serialized = await permissions.serializePermissionAccount(account);
+  const account = await sdk.createKernelAccount(params.publicClient, {
+    plugins: { sudo: sudoValidator, regular: permissionValidator },
+    ...params.address !== void 0 ? { address: params.address } : {},
+    entryPoint,
+    kernelVersion
+  });
+  const enableSignature = params.approveEnable ? await params.approveEnable(permissionValidator) : void 0;
+  const serialized = enableSignature ? await permissions.serializePermissionAccount(account, void 0, enableSignature) : await permissions.serializePermissionAccount(account);
   const base = {
     kawasekitVersion: KAWASEKIT_SESSION_ENVELOPE_VERSION,
     chainId: supportedChainId,
@@ -342,10 +354,10 @@ async function revokeSessionKey(params) {
       "revokeSessionKey: ownerKernelClient.client is undefined \u2014 pass `client: publicClient` when constructing the Kernel client so the validator can be reconstructed."
     );
   }
-  const modularSigner = await signers.toECDSASigner({ signer: sessionKeySigner });
-  const permissionPlugin = await permissions.toPermissionValidator(ownerKernelClient.client, {
-    signer: modularSigner,
-    policies: [...policies],
+  const permissionPlugin = await buildSessionPermissionValidator({
+    publicClient: ownerKernelClient.client,
+    sessionKeySigner,
+    policies,
     entryPoint,
     kernelVersion
   });
@@ -364,6 +376,9 @@ async function revokeSessionKey(params) {
     success: receipt.success
   };
 }
+viem.parseAbi([
+  "function uninstallValidation(bytes21 vId, bytes deinitData, bytes hookDeinitData)"
+]);
 
 // src/session/rotate.ts
 async function rotateSessionKey(params) {