kokio-sdk 3.4.0 → 3.5.0

package/dist/esm/logic/admin/reads/eSIMWallet.reads.js

@@ -36,6 +36,18 @@ export const _priceCapUSDCents = async (client, eSIMWalletAddress) => {
         args: []
     });
 };
+/**
+ * What the admin key may still charge this eSIM wallet, in USD cents. Only the
+ * owner can raise it, so a purchase above it needs the user first.
+ */
+export const _adminAllowanceUSDCents = async (client, eSIMWalletAddress) => {
+    return client.extend(publicActions).readContract({
+        address: eSIMWalletAddress,
+        abi: ESIMWallet,
+        functionName: "adminAllowanceUSDCents",
+        args: []
+    });
+};
 /** The pending owner proposed via `requestTransferOwnership` (zero if none). */
 export const _newRequestedOwner = async (client, eSIMWalletAddress) => {
     return client.extend(publicActions).readContract({

package/dist/esm/logic/admin/reads/registry.reads.js

@@ -83,6 +83,18 @@ export const _defaultPriceCapUSDCents = async (client) => {
         args: []
     });
 };
+/** What the admin key may charge a newly created eSIM wallet in total, in USD cents. */
+export const _defaultAdminAllowanceUSDCents = async (client) => {
+    const chainID = await _chainId(client);
+    const rpcURL = client.transport.url;
+    const values = _getChainSpecificConstants(chainID, rpcURL);
+    return client.extend(publicActions).readContract({
+        address: values.factoryAddresses.REGISTRY,
+        abi: Registry,
+        functionName: "defaultAdminAllowanceUSDCents",
+        args: []
+    });
+};
 /** The vault EOA recorded in the registry. */
 export const _vault = async (client) => {
     const chainID = await _chainId(client);

package/dist/esm/logic/constants.js

@@ -25,18 +25,17 @@ export var CHAIN_ID;
     CHAIN_ID[CHAIN_ID["BASE_MAINNET"] = 8453] = "BASE_MAINNET";
     CHAIN_ID[CHAIN_ID["BASE_SEPOLIA"] = 84532] = "BASE_SEPOLIA";
 })(CHAIN_ID || (CHAIN_ID = {}));
-// Not yet deployed. Kept as a placeholder so mainnet has a documented shape to
-// fill in once the protocol ships there, following Base Sepolia's soak.
+// From smart-contract-suite `deployments/base-8453-entrypoint-v8.json`.
 export const baseMainnetFactoryAddresses = {
-    DEVICE_WALLET_FACTORY: '0x',
-    ESIM_WALLET_FACTORY: '0x',
-    LAZY_WALLET_REGISTRY: '0x',
-    REGISTRY: '0x',
-    ENTRY_POINT: '0x',
-    SENDER_CREATOR: '0x',
-    P256VERIFIER: '0x',
-    PROTOCOL_ADMIN: '0x',
-    PAYMENT_ADAPTER: '0x'
+    DEVICE_WALLET_FACTORY: '0xAC6B6A9F905e2593d587D244cEee6a0886952a6D',
+    ESIM_WALLET_FACTORY: '0xC88723826B9070ea89d9040387DE4C22A490EdB6',
+    LAZY_WALLET_REGISTRY: '0x2046aE906FB940Ad99147f233711Bb6711A2Ab0C',
+    REGISTRY: '0x76fB7F8C97457A5a6dF19a7041a66a7f1b3c910c',
+    ENTRY_POINT: '0x4337084D9E255Ff0702461CF8895CE9E3b5Ff108',
+    SENDER_CREATOR: '0x449ED7C3e6Fee6a97311d4b55475DF59C44AdD33',
+    P256VERIFIER: '0x4E2C5B9B88184464162d581D6BF36615f0040fE6',
+    PROTOCOL_ADMIN: '0x0E664e956aAD2599D17dE2381cc22687a066778B',
+    PAYMENT_ADAPTER: '0xbb80B10BECB997b02a4BA4068C145Ef18129943d'
 };
 export const baseSepoliaFactoryAddresses = {
     DEVICE_WALLET_FACTORY: '0x0BB3BA8D9233514a4aA6D72c243a2473f9cFf0bb',
@@ -73,9 +72,7 @@ export const _extractChainID = async (client) => {
     }
     return _chainId(client);
 };
-// Maps each supported chain id to its factory-address book + viem chain. Base
-// Mainnet is listed with '0x' placeholders so the guard below rejects it with a
-// clear message rather than leaking '0x' into viem calls.
+// Maps each supported chain id to its factory-address book + viem chain.
 const CHAIN_CONFIG = {
     [CHAIN_ID.BASE_MAINNET]: { factoryAddresses: baseMainnetFactoryAddresses, chain: base },
     [CHAIN_ID.BASE_SEPOLIA]: { factoryAddresses: baseSepoliaFactoryAddresses, chain: baseSepolia },

package/dist/esm/logic/deviceWallet.js

@@ -134,12 +134,12 @@ export const _removeESIMWallet = async (client, address, eSIMWalletAddress, call
  * Rotate the P256 key that owns this wallet. The registry is told in the same
  * call, so its record of the owner cannot drift from the wallet's.
  *
- * A key that cannot produce a verifiable signature bricks the wallet: this is
- * reachable only through a signed userOp, so there is no rotating back and no
- * reaching the balance afterwards. The contract rejects a key it can tell is
- * unusable, but check the new key can sign before calling.
+ * `newOwnerSignature` is the new passkey's WebAuthn assertion over
+ * `rotationChallenge(newOwner)`, ABI-encoded as a `WebAuthnSignature` with no
+ * version or validUntil header. Without it the contract reverts with
+ * `NewOwnerKeyCannotSign`, so a wallet can only move to a key that can sign.
  */
-export const _transferOwnership = async (client, address, newOwner) => {
+export const _transferOwnership = async (client, address, newOwner, newOwnerSignature) => {
     if (!client.account)
         throw new MissingSmartWalletError();
     // UserOp - `onlySelf`.
@@ -150,7 +150,7 @@ export const _transferOwnership = async (client, address, newOwner) => {
                 data: encodeFunctionData({
                     abi: DeviceWallet,
                     functionName: "transferOwnership",
-                    args: [newOwner]
+                    args: [newOwner, newOwnerSignature]
                 })
             }]
     });
@@ -259,6 +259,19 @@ export const _isValidSignature = async (client, address, messageHash, signature)
         args: [messageHash, signature]
     });
 };
+/**
+ * The bytes the new passkey must sign before `transferOwnership` accepts it.
+ * Bound to this wallet, this chain and `newOwner`, so it cannot be reused for
+ * another rotation.
+ */
+export const _rotationChallenge = async (client, address, newOwner) => {
+    return client.readContract({
+        address,
+        abi: DeviceWallet,
+        functionName: "rotationChallenge",
+        args: [newOwner]
+    });
+};
 /** The registry this wallet reports its ownership changes to. */
 export const _registry = async (client, address) => {
     return client.readContract({

package/dist/esm/logic/eSIMWallet.js

@@ -37,6 +37,29 @@ export const _setPriceCapUSDCents = async (client, address, cap) => {
             }]
     });
 };
+/**
+ * Set the total the admin key may charge this eSIM wallet, in USD cents. It
+ * replaces what is left rather than adding to it, and zero stops admin charges.
+ *
+ * `onlyDeviceWallet`, so only the user can raise what the admin may spend. A
+ * handover resets it to the registry default.
+ */
+export const _setAdminAllowanceUSDCents = async (client, address, allowance) => {
+    if (!client.account)
+        throw new MissingSmartWalletError();
+    // UserOp - `onlyDeviceWallet`.
+    return client.sendUserOperation({
+        account: client.account,
+        calls: [{
+                to: address,
+                data: encodeFunctionData({
+                    abi: ESIMWallet,
+                    functionName: "setAdminAllowanceUSDCents",
+                    args: [allowance]
+                })
+            }]
+    });
+};
 /**
  * Buy a data bundle in `asset`, an ERC-20 the payment adapter accepts.
  *
@@ -135,6 +158,19 @@ export const _priceCapUSDCents = async (client, address) => {
     const registryCap = await _defaultPriceCapUSDCents(client);
     return registryCap === 0n ? maxUint256 : registryCap;
 };
+/**
+ * What the admin key may still charge this eSIM wallet, in USD cents. Each admin
+ * purchase lowers it and nothing refills it, so the owner tops it up with
+ * `setAdminAllowanceUSDCents`. The owner's own purchases do not touch it.
+ */
+export const _adminAllowanceUSDCents = async (client, address) => {
+    return client.readContract({
+        address,
+        abi: ESIMWallet,
+        functionName: "adminAllowanceUSDCents",
+        args: []
+    });
+};
 /**
  * The device wallet this eSIM wallet belongs to. Tracks `owner`, but it is its
  * own storage slot with its own getter, so read whichever one you mean.

package/dist/esm/logic/errors.js

@@ -228,6 +228,20 @@ export class PriceOutOfRangeError extends KokioError {
         this.priceUSDCents = priceUSDCents;
     }
 }
+/**
+ * An admin purchase priced above what the eSIM wallet's owner still allows the
+ * admin key to charge. Thrown before sending, since the contract would revert
+ * with `AdminAllowanceExceeded`. The owner raises it with `setAdminAllowanceUSDCents`.
+ */
+export class AdminAllowanceExceededError extends KokioError {
+    priceUSDCents;
+    remainingUSDCents;
+    constructor(priceUSDCents, remainingUSDCents) {
+        super("ADMIN_ALLOWANCE_EXCEEDED", `${priceUSDCents} cents is more than the ${remainingUSDCents} cents the owner still allows the admin to charge.`);
+        this.priceUSDCents = priceUSDCents;
+        this.remainingUSDCents = remainingUSDCents;
+    }
+}
 /**
  * A payment reference that is not 32 bytes, has an empty order part, or
  * carries a tag this SDK cannot write over or read back.

package/dist/esm/logic/registry.js

@@ -218,6 +218,18 @@ export const _defaultPriceCapUSDCents = async (client) => {
         args: []
     });
 };
+/** What the admin key may charge a newly created eSIM wallet in total, in USD cents. */
+export const _defaultAdminAllowanceUSDCents = async (client) => {
+    const chainID = await _chainId(client);
+    const rpcURL = client.transport.url;
+    const values = _getChainSpecificConstants(chainID, rpcURL);
+    return client.readContract({
+        address: values.factoryAddresses.REGISTRY,
+        abi: Registry,
+        functionName: "defaultAdminAllowanceUSDCents",
+        args: []
+    });
+};
 /** The payment adapter this registry currently points at. */
 export const _paymentAdapter = async (client) => {
     const chainID = await _chainId(client);

package/dist/types/abis/DeviceWallet.d.ts

@@ -345,6 +345,20 @@ declare const DeviceWallet: readonly [{
     }];
     readonly outputs: readonly [];
     readonly stateMutability: "nonpayable";
+}, {
+    readonly type: "function";
+    readonly name: "rotationChallenge";
+    readonly inputs: readonly [{
+        readonly name: "newOwner";
+        readonly type: "bytes32[2]";
+        readonly internalType: "bytes32[2]";
+    }];
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly type: "bytes";
+        readonly internalType: "bytes";
+    }];
+    readonly stateMutability: "view";
 }, {
     readonly type: "function";
     readonly name: "supportsInterface";
@@ -380,6 +394,10 @@ declare const DeviceWallet: readonly [{
         readonly name: "newOwner";
         readonly type: "bytes32[2]";
         readonly internalType: "bytes32[2]";
+    }, {
+        readonly name: "newOwnerSignature";
+        readonly type: "bytes";
+        readonly internalType: "bytes";
     }];
     readonly outputs: readonly [{
         readonly name: "";
@@ -643,6 +661,10 @@ declare const DeviceWallet: readonly [{
     readonly type: "error";
     readonly name: "InvalidInitialization";
     readonly inputs: readonly [];
+}, {
+    readonly type: "error";
+    readonly name: "NewOwnerKeyCannotSign";
+    readonly inputs: readonly [];
 }, {
     readonly type: "error";
     readonly name: "NotInitializing";

package/dist/types/abis/ESIMWallet.d.ts

@@ -7,6 +7,16 @@ declare const ESIMWallet: readonly [{
     readonly inputs: readonly [];
     readonly outputs: readonly [];
     readonly stateMutability: "nonpayable";
+}, {
+    readonly type: "function";
+    readonly name: "adminAllowanceUSDCents";
+    readonly inputs: readonly [];
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly type: "uint64";
+        readonly internalType: "uint64";
+    }];
+    readonly stateMutability: "view";
 }, {
     readonly type: "function";
     readonly name: "buyDataBundleWithToken";
@@ -218,6 +228,16 @@ declare const ESIMWallet: readonly [{
         readonly internalType: "uint256";
     }];
     readonly stateMutability: "nonpayable";
+}, {
+    readonly type: "function";
+    readonly name: "setAdminAllowanceUSDCents";
+    readonly inputs: readonly [{
+        readonly name: "_allowance";
+        readonly type: "uint64";
+        readonly internalType: "uint64";
+    }];
+    readonly outputs: readonly [];
+    readonly stateMutability: "nonpayable";
 }, {
     readonly type: "function";
     readonly name: "setESIMUniqueIdentifier";
@@ -270,6 +290,16 @@ declare const ESIMWallet: readonly [{
     }];
     readonly outputs: readonly [];
     readonly stateMutability: "pure";
+}, {
+    readonly type: "event";
+    readonly name: "AdminAllowanceUSDCentsUpdated";
+    readonly inputs: readonly [{
+        readonly name: "_allowance";
+        readonly type: "uint64";
+        readonly indexed: false;
+        readonly internalType: "uint64";
+    }];
+    readonly anonymous: false;
 }, {
     readonly type: "event";
     readonly name: "DataBundleBoughtWithToken";
@@ -483,6 +513,18 @@ declare const ESIMWallet: readonly [{
         readonly internalType: "uint256";
     }];
     readonly anonymous: false;
+}, {
+    readonly type: "error";
+    readonly name: "AdminAllowanceExceeded";
+    readonly inputs: readonly [{
+        readonly name: "priceUSDCents";
+        readonly type: "uint64";
+        readonly internalType: "uint64";
+    }, {
+        readonly name: "remaining";
+        readonly type: "uint64";
+        readonly internalType: "uint64";
+    }];
 }, {
     readonly type: "error";
     readonly name: "AssetNotTransferable";

package/dist/types/abis/PaymentAdapter.d.ts

@@ -116,6 +116,24 @@ declare const PaymentAdapter: readonly [{
         readonly internalType: "uint256";
     }];
     readonly stateMutability: "view";
+}, {
+    readonly type: "function";
+    readonly name: "recoverTokens";
+    readonly inputs: readonly [{
+        readonly name: "_token";
+        readonly type: "address";
+        readonly internalType: "address";
+    }, {
+        readonly name: "_to";
+        readonly type: "address";
+        readonly internalType: "address";
+    }, {
+        readonly name: "_amount";
+        readonly type: "uint256";
+        readonly internalType: "uint256";
+    }];
+    readonly outputs: readonly [];
+    readonly stateMutability: "nonpayable";
 }, {
     readonly type: "function";
     readonly name: "registerAsset";
@@ -443,6 +461,26 @@ declare const PaymentAdapter: readonly [{
         readonly internalType: "uint256";
     }];
     readonly anonymous: false;
+}, {
+    readonly type: "event";
+    readonly name: "TokensRecovered";
+    readonly inputs: readonly [{
+        readonly name: "_token";
+        readonly type: "address";
+        readonly indexed: true;
+        readonly internalType: "address";
+    }, {
+        readonly name: "_to";
+        readonly type: "address";
+        readonly indexed: true;
+        readonly internalType: "address";
+    }, {
+        readonly name: "_amount";
+        readonly type: "uint256";
+        readonly indexed: false;
+        readonly internalType: "uint256";
+    }];
+    readonly anonymous: false;
 }, {
     readonly type: "event";
     readonly name: "Upgraded";
@@ -653,6 +691,10 @@ declare const PaymentAdapter: readonly [{
         readonly type: "string";
         readonly internalType: "string";
     }];
+}, {
+    readonly type: "error";
+    readonly name: "ZeroAmount";
+    readonly inputs: readonly [];
 }, {
     readonly type: "error";
     readonly name: "ZeroDataBundlePrice";

package/dist/types/abis/ProtocolAdmin.d.ts

@@ -443,6 +443,16 @@ declare const ProtocolAdmin: readonly [{
         readonly internalType: "bytes4";
     }];
     readonly stateMutability: "nonpayable";
+}, {
+    readonly type: "function";
+    readonly name: "pauseInstantly";
+    readonly inputs: readonly [{
+        readonly name: "target";
+        readonly type: "address";
+        readonly internalType: "address";
+    }];
+    readonly outputs: readonly [];
+    readonly stateMutability: "nonpayable";
 }, {
     readonly type: "function";
     readonly name: "renounceRole";
@@ -740,6 +750,21 @@ declare const ProtocolAdmin: readonly [{
         readonly internalType: "address";
     }];
     readonly anonymous: false;
+}, {
+    readonly type: "event";
+    readonly name: "PauseRaised";
+    readonly inputs: readonly [{
+        readonly name: "target";
+        readonly type: "address";
+        readonly indexed: true;
+        readonly internalType: "address";
+    }, {
+        readonly name: "guardian";
+        readonly type: "address";
+        readonly indexed: true;
+        readonly internalType: "address";
+    }];
+    readonly anonymous: false;
 }, {
     readonly type: "event";
     readonly name: "PauseReleased";
@@ -855,6 +880,18 @@ declare const ProtocolAdmin: readonly [{
     readonly type: "error";
     readonly name: "NoProposers";
     readonly inputs: readonly [];
+}, {
+    readonly type: "error";
+    readonly name: "NomineeIsTheIncumbent";
+    readonly inputs: readonly [{
+        readonly name: "target";
+        readonly type: "address";
+        readonly internalType: "address";
+    }, {
+        readonly name: "admin";
+        readonly type: "address";
+        readonly internalType: "address";
+    }];
 }, {
     readonly type: "error";
     readonly name: "NotACanceller";

package/dist/types/abis/Registry.d.ts

@@ -114,6 +114,16 @@ declare const Registry: readonly [{
     }];
     readonly outputs: readonly [];
     readonly stateMutability: "nonpayable";
+}, {
+    readonly type: "function";
+    readonly name: "defaultAdminAllowanceUSDCents";
+    readonly inputs: readonly [];
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly type: "uint64";
+        readonly internalType: "uint64";
+    }];
+    readonly stateMutability: "view";
 }, {
     readonly type: "function";
     readonly name: "defaultPriceCapUSDCents";
@@ -303,6 +313,10 @@ declare const Registry: readonly [{
         readonly name: "_defaultPriceCapUSDCents";
         readonly type: "uint64";
         readonly internalType: "uint64";
+    }, {
+        readonly name: "_defaultAdminAllowanceUSDCents";
+        readonly type: "uint64";
+        readonly internalType: "uint64";
     }];
     readonly outputs: readonly [];
     readonly stateMutability: "nonpayable";
@@ -574,6 +588,16 @@ declare const Registry: readonly [{
     readonly inputs: readonly [];
     readonly outputs: readonly [];
     readonly stateMutability: "view";
+}, {
+    readonly type: "function";
+    readonly name: "setDefaultAdminAllowanceUSDCents";
+    readonly inputs: readonly [{
+        readonly name: "_allowance";
+        readonly type: "uint64";
+        readonly internalType: "uint64";
+    }];
+    readonly outputs: readonly [];
+    readonly stateMutability: "nonpayable";
 }, {
     readonly type: "function";
     readonly name: "setDefaultPriceCapUSDCents";
@@ -843,6 +867,16 @@ declare const Registry: readonly [{
         readonly internalType: "bytes32";
     }];
     readonly anonymous: false;
+}, {
+    readonly type: "event";
+    readonly name: "DefaultAdminAllowanceUSDCentsUpdated";
+    readonly inputs: readonly [{
+        readonly name: "_allowance";
+        readonly type: "uint64";
+        readonly indexed: false;
+        readonly internalType: "uint64";
+    }];
+    readonly anonymous: false;
 }, {
     readonly type: "event";
     readonly name: "DefaultPriceCapUSDCentsUpdated";
@@ -1326,6 +1360,14 @@ declare const Registry: readonly [{
         readonly type: "bytes32";
         readonly internalType: "bytes32";
     }];
+}, {
+    readonly type: "error";
+    readonly name: "OwnerKeyNotHeldByWallet";
+    readonly inputs: readonly [{
+        readonly name: "deviceWallet";
+        readonly type: "address";
+        readonly internalType: "address";
+    }];
 }, {
     readonly type: "error";
     readonly name: "OwnershipCannotBeRenounced";

package/dist/types/abis/RegistryHelper.d.ts

@@ -378,6 +378,16 @@ declare const RegistryHelper: readonly [{
         readonly internalType: "bytes32";
     }];
     readonly anonymous: false;
+}, {
+    readonly type: "event";
+    readonly name: "DefaultAdminAllowanceUSDCentsUpdated";
+    readonly inputs: readonly [{
+        readonly name: "_allowance";
+        readonly type: "uint64";
+        readonly indexed: false;
+        readonly internalType: "uint64";
+    }];
+    readonly anonymous: false;
 }, {
     readonly type: "event";
     readonly name: "DefaultPriceCapUSDCentsUpdated";

package/dist/types/admin/config-admin.d.ts

@@ -10,7 +10,7 @@ import { AdminESIMWalletSubPackage } from "./interface/eSIMWalletClass.js";
 import { AdminPaymentAdapterSubPackage } from "./interface/paymentAdapterClass.js";
 import { AdminCallsSubPackage } from "./interface/callsClass.js";
 import { AdminUtilsSubPackage } from "./interface/utilsClass.js";
-export { KokioError, NullOrUndefinedValueError, MissingSmartWalletError, MissingEOAWalletError, InvalidClientError, UnsupportedChainError, UnconfiguredChainError, CounterfactualMismatchError, BatchSizeOutOfRangeError, DepositOnResumeError, ESIMWalletNotLazyDeployedError, MissingBatchEventError, StalledBatchError, InvalidAddressError, InvalidSymbolError, TokenNotAcceptedError, NotAProtocolESIMWalletError, UnknownTransactionError, TransactionRevertedError, ReceiptNotCanonicalError, NotAnERC20TokenError, UnmatchedPaymentEventsError, PriceOutOfRangeError, InvalidPaymentReferenceError, CouponSplitOutOfRangeError, ContractRevertError, decodeContractRevert, } from "../logic/errors.js";
+export { KokioError, NullOrUndefinedValueError, MissingSmartWalletError, MissingEOAWalletError, InvalidClientError, UnsupportedChainError, UnconfiguredChainError, CounterfactualMismatchError, BatchSizeOutOfRangeError, DepositOnResumeError, ESIMWalletNotLazyDeployedError, MissingBatchEventError, StalledBatchError, InvalidAddressError, InvalidSymbolError, TokenNotAcceptedError, NotAProtocolESIMWalletError, UnknownTransactionError, TransactionRevertedError, ReceiptNotCanonicalError, NotAnERC20TokenError, UnmatchedPaymentEventsError, PriceOutOfRangeError, AdminAllowanceExceededError, InvalidPaymentReferenceError, CouponSplitOutOfRangeError, ContractRevertError, decodeContractRevert, } from "../logic/errors.js";
 export type { DecodedRevert } from "../logic/errors.js";
 export { OperationState } from "../logic/admin/reads/protocolAdmin.reads.js";
 export { PaymentReferenceKind } from "../logic/admin/utils/paymentReference.js";

package/dist/types/admin/interface/eSIMWalletClass.d.ts

@@ -15,6 +15,7 @@ export declare class AdminESIMWalletSubPackage {
     newRequestedOwner(): Promise<`0x${string}`>;
     owner(): Promise<`0x${string}`>;
     priceCapUSDCents(): Promise<bigint>;
+    adminAllowanceUSDCents(): Promise<bigint>;
     deviceWallet(): Promise<`0x${string}`>;
     transactionHistory(index: bigint): Promise<DataBundleDetails>;
 }

package/dist/types/admin/interface/paymentAdapterClass.d.ts

@@ -14,6 +14,7 @@ export declare class AdminPaymentAdapterSubPackage {
     updateAsset(symbol: Hex, asset: Asset): Promise<`0x${string}`>;
     acceptOwnership(): Promise<`0x${string}`>;
     registerAssetCall(symbol: Hex, asset: Asset): Promise<import("../../types.js").OwnerCall>;
+    recoverTokensCall(token: Address, to: Address, amount: bigint): Promise<import("../../types.js").OwnerCall>;
     updateAssetCall(symbol: Hex, asset: Asset): Promise<import("../../types.js").OwnerCall>;
     transferOwnershipCall(newOwner: Address): Promise<import("../../types.js").OwnerCall>;
     upgradeCall(newImplementation: Address, data?: Hex): Promise<import("../../types.js").OwnerCall>;

package/dist/types/admin/interface/protocolAdminClass.d.ts

@@ -33,6 +33,7 @@ export declare class ProtocolAdminCancellerSubPackage {
 export declare class ProtocolAdminGuardianSubPackage {
     walletClient: WalletClient;
     constructor(walletClient: WalletClient);
+    pauseInstantly(target: Address): Promise<`0x${string}`>;
     unpauseInstantly(target: Address): Promise<`0x${string}`>;
     revokeCancellersInstantly(accounts: readonly Address[]): Promise<`0x${string}`>;
     disableAdminInstantly(target?: Address): Promise<`0x${string}`>;
@@ -73,6 +74,7 @@ export declare class AdminProtocolAdminSubPackage {
     enableAdminCall(target?: Address): Promise<OwnerCall>;
     unpauseCall(target?: Address): Promise<OwnerCall>;
     setDefaultPriceCapUSDCentsCall(cap: bigint, target?: Address): Promise<OwnerCall>;
+    setDefaultAdminAllowanceUSDCentsCall(allowance: bigint, target?: Address): Promise<OwnerCall>;
     setPaymentAdapterCall(paymentAdapter: Address, target?: Address): Promise<OwnerCall>;
     operationId(call: OwnerCall, opts?: OperationOptions): Promise<`0x${string}`>;
     operationIdBatch(calls: readonly OwnerCall[], opts?: OperationOptions): Promise<`0x${string}`>;

package/dist/types/admin/interface/registryClass.d.ts

@@ -46,6 +46,7 @@ export declare class AdminRegistrySubPackage {
     isESIMWalletOnStandby(eSIMWallet: Address): Promise<boolean>;
     paused(): Promise<boolean>;
     defaultPriceCapUSDCents(): Promise<bigint>;
+    defaultAdminAllowanceUSDCents(): Promise<bigint>;
     paymentAdapter(): Promise<`0x${string}`>;
     usedPaymentReferences(scopedReference: Hex): Promise<boolean>;
     isDeviceIdentifierAlreadyUsed(deviceUniqueIdentifier: string): Promise<boolean>;

package/dist/types/interface/deviceWalletClass.d.ts

@@ -23,7 +23,7 @@ export declare class DeviceWalletSubPackage {
     getVaultAddress(): Promise<`0x${string}`>;
     removeESIMWallet(eSIMWalletAddress: Address, callBackETH: boolean): Promise<`0x${string}`>;
     toggleAccessToFunds(eSIMWalletAddress: Address, hasAccessToFunds: boolean): Promise<`0x${string}`>;
-    transferOwnership(newOwner: P256Key): Promise<`0x${string}`>;
+    transferOwnership(newOwner: P256Key, newOwnerSignature: Hex): Promise<`0x${string}`>;
     withdrawDepositTo(withdrawAddress: Address, amount: bigint): Promise<`0x${string}`>;
     canPullFunds(eSIMWalletAddress: Address): Promise<boolean>;
     deviceUniqueIdentifier(): Promise<string>;
@@ -34,5 +34,6 @@ export declare class DeviceWalletSubPackage {
     isValidESIMWallet(eSIMWalletAddress: Address): Promise<boolean>;
     isValidSignature(messageHash: Hex, signature: Hex): Promise<`0x${string}`>;
     registry(): Promise<`0x${string}`>;
+    rotationChallenge(newOwner: P256Key): Promise<`0x${string}`>;
     verifier(): Promise<`0x${string}`>;
 }

package/dist/types/interface/eSIMWalletClass.d.ts

@@ -22,6 +22,8 @@ export declare class ESIMWalletSubPackage {
      */
     buyDataBundleWithTransfer(dataBundleDetails: DataBundleDetails, asset: Hex, maxAmountIn: bigint, paymentReference: Hex): Promise<`0x${string}`>;
     priceCapUSDCents(): Promise<bigint>;
+    adminAllowanceUSDCents(): Promise<bigint>;
+    setAdminAllowanceUSDCents(allowance: bigint): Promise<`0x${string}`>;
     deviceWallet(): Promise<`0x${string}`>;
     owner(): Promise<`0x${string}`>;
     requestTransferOwnership(newOwner: Address): Promise<`0x${string}`>;

package/dist/types/interface/registryClass.d.ts

@@ -23,6 +23,7 @@ export declare class RegistrySubPackage {
     isESIMIdentifierClaimed(eSIMUniqueIdentifier: string): Promise<boolean>;
     eSIMWalletForIdentifier(eSIMUniqueIdentifier: string): Promise<`0x${string}`>;
     defaultPriceCapUSDCents(): Promise<bigint>;
+    defaultAdminAllowanceUSDCents(): Promise<bigint>;
     paymentAdapter(): Promise<`0x${string}`>;
     usedPaymentReferences(scopedReference: Hex): Promise<boolean>;
     requireLazyHistoryCopied(eSIMWallet: Address): Promise<void>;

package/dist/types/logic/admin/eSIMWallet.eoa.d.ts

@@ -8,5 +8,8 @@ import { DataBundleDetails } from "../../types.js";
  * unit - read it from `paymentAdapter.quote(asset, dataBundleDetails.priceUSDCents)`
  * first. `paymentReference` ties this purchase to its offchain order and is
  * spendable once per eSIM wallet.
+ *
+ * Throws `AdminAllowanceExceededError` without sending when the price is above
+ * what the wallet's owner still allows the admin to charge.
  */
 export declare const _buyDataBundleWithToken: (client: WalletClient, eSIMWalletAddress: Address, dataBundleDetails: DataBundleDetails, asset: Hex, maxAmountIn: bigint, paymentReference: Hex) => Promise<`0x${string}`>;

package/dist/types/logic/admin/paymentAdapter.eoa.d.ts

@@ -6,6 +6,12 @@ export declare const _registerAsset: (client: WalletClient, symbol: Hex, asset:
 export declare const _updateAsset: (client: WalletClient, symbol: Hex, asset: Asset) => Promise<`0x${string}`>;
 /** Add or change a currency, scheduled through the timelock. Pass the result to `schedule`. */
 export declare const _registerAssetCall: (client: WalletClient, symbol: Hex, asset: Asset) => Promise<OwnerCall>;
+/**
+ * Send back `amount` of `token` someone sent to the adapter by mistake. Pass the
+ * result to `schedule`. Purchases never leave tokens in the adapter, so anything
+ * it holds arrived by mistake.
+ */
+export declare const _recoverTokensCall: (client: WalletClient, token: Address, to: Address, amount: bigint) => Promise<OwnerCall>;
 /** Change a currency already in the table, scheduled through the timelock. Pass the result to `schedule`. */
 export declare const _updateAssetCall: (client: WalletClient, symbol: Hex, asset: Asset) => Promise<OwnerCall>;
 /**