chipi-stack 2.0.0__tar.gz → 2.2.0__tar.gz

{chipi_stack-2.0.0/chipi_stack.egg-info → chipi_stack-2.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: chipi-stack
-Version: 2.0.0
+Version: 2.2.0
 Summary: Python SDK for Starknet Gasless Transactions via Chipi
 Author-email: Carlos Castillo <carlos@chipipay.com>, Roberto Yamanaka <roberto@chipipay.com>
 License-Expression: MIT
@@ -25,6 +25,10 @@ Requires-Dist: pydantic>=2.0.0
 Requires-Dist: httpx>=0.27.0
 Requires-Dist: cryptography>=42.0.0
 Requires-Dist: typing-extensions>=4.9.0
+Requires-Dist: poseidon-py>=0.1.5
+Requires-Dist: pycryptodome>=3.20.0
+Requires-Dist: garaga==1.1.0
+Requires-Dist: eth-keys>=0.5.0
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
 Requires-Dist: pytest-asyncio>=0.23.0; extra == "dev"
@@ -34,17 +38,18 @@ Requires-Dist: black>=24.0.0; extra == "dev"
 Requires-Dist: ruff>=0.3.0; extra == "dev"
 Requires-Dist: mypy>=1.8.0; extra == "dev"
 Requires-Dist: build>=1.0.0; extra == "dev"
-Requires-Dist: twine>=5.0.0; extra == "dev"
 Dynamic: license-file
 
 # Chipi Python SDK
 
-[![PyPI version](https://badge.fury.io/py/chipi-python.svg)](https://badge.fury.io/py/chipi-python)
+[![PyPI version](https://badge.fury.io/py/chipi-stack.svg)](https://badge.fury.io/py/chipi-stack)
 [![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
 Python SDK for executing gasless transactions on Starknet via Chipi's paymaster infrastructure.
 
+> Published to PyPI as **`chipi-stack`** — matches the `@chipi-stack/*` npm scope. The legacy `chipi-python` package on PyPI is deprecated.
+
 ## Features
 
 - 🚀 **Gasless Transactions** - Execute transactions without paying gas fees
@@ -57,13 +62,13 @@ Python SDK for executing gasless transactions on Starknet via Chipi's paymaster
 ## Installation
 
 ```bash
-pip install chipi-python
+pip install chipi-stack
 ```
 
 Or with uv:
 
 ```bash
-uv add chipi-python
+uv add chipi-stack
 ```
 
 ### Requirements
@@ -74,6 +79,28 @@ uv add chipi-python
   - `pydantic>=2.0.0` - Data validation
   - `httpx>=0.27.0` - HTTP client
   - `cryptography>=42.0.0` - AES encryption
+  - `garaga==1.1.0` - Cairo-compatible BN-curve math for SHHH Ed25519 signing
+  - `eth-keys>=0.5.0` - secp256k1 ECDSA for SHHH EIP-191 signing
+  - `poseidon-py>=0.1.5` - Poseidon hash (used by SHHH SNIP-12 envelopes)
+  - `pycryptodome>=3.20.0` - keccak256 (used by SHHH EIP-191)
+
+### macOS Apple Silicon installation note
+
+Garaga's BN-curve math links against libssl. On macOS 14 Sonoma+ on
+Apple Silicon, the system libssl can mis-link during the garaga build.
+If `pip install chipi-stack` fails with "library not loaded" or
+"Symbol not found" mentioning `libssl` / `libcrypto`, install OpenSSL 3
+via Homebrew and re-install:
+
+```bash
+brew install openssl@3
+export LDFLAGS="-L$(brew --prefix openssl@3)/lib"
+export CPPFLAGS="-I$(brew --prefix openssl@3)/include"
+pip install --force-reinstall chipi-stack
+```
+
+Linux and Intel Macs are unaffected. Windows is untested for the SHHH
+Ed25519 signer specifically; the rest of the SDK works on Windows.
 
 ## Quick Start
 

{chipi_stack-2.0.0 → chipi_stack-2.2.0}/README.md

@@ -1,11 +1,13 @@
 # Chipi Python SDK
 
-[![PyPI version](https://badge.fury.io/py/chipi-python.svg)](https://badge.fury.io/py/chipi-python)
+[![PyPI version](https://badge.fury.io/py/chipi-stack.svg)](https://badge.fury.io/py/chipi-stack)
 [![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
 Python SDK for executing gasless transactions on Starknet via Chipi's paymaster infrastructure.
 
+> Published to PyPI as **`chipi-stack`** — matches the `@chipi-stack/*` npm scope. The legacy `chipi-python` package on PyPI is deprecated.
+
 ## Features
 
 - 🚀 **Gasless Transactions** - Execute transactions without paying gas fees
@@ -18,13 +20,13 @@ Python SDK for executing gasless transactions on Starknet via Chipi's paymaster
 ## Installation
 
 ```bash
-pip install chipi-python
+pip install chipi-stack
 ```
 
 Or with uv:
 
 ```bash
-uv add chipi-python
+uv add chipi-stack
 ```
 
 ### Requirements
@@ -35,6 +37,28 @@ uv add chipi-python
   - `pydantic>=2.0.0` - Data validation
   - `httpx>=0.27.0` - HTTP client
   - `cryptography>=42.0.0` - AES encryption
+  - `garaga==1.1.0` - Cairo-compatible BN-curve math for SHHH Ed25519 signing
+  - `eth-keys>=0.5.0` - secp256k1 ECDSA for SHHH EIP-191 signing
+  - `poseidon-py>=0.1.5` - Poseidon hash (used by SHHH SNIP-12 envelopes)
+  - `pycryptodome>=3.20.0` - keccak256 (used by SHHH EIP-191)
+
+### macOS Apple Silicon installation note
+
+Garaga's BN-curve math links against libssl. On macOS 14 Sonoma+ on
+Apple Silicon, the system libssl can mis-link during the garaga build.
+If `pip install chipi-stack` fails with "library not loaded" or
+"Symbol not found" mentioning `libssl` / `libcrypto`, install OpenSSL 3
+via Homebrew and re-install:
+
+```bash
+brew install openssl@3
+export LDFLAGS="-L$(brew --prefix openssl@3)/lib"
+export CPPFLAGS="-I$(brew --prefix openssl@3)/include"
+pip install --force-reinstall chipi-stack
+```
+
+Linux and Intel Macs are unaffected. Windows is untested for the SHHH
+Ed25519 signer specifically; the rest of the SDK works on Windows.
 
 ## Quick Start
 

{chipi_stack-2.0.0 → chipi_stack-2.2.0}/chipi_sdk/__init__.py

@@ -5,7 +5,7 @@ A Python SDK for interacting with Chipi's gasless transaction infrastructure on
 Supports wallet creation, transaction execution, session keys, and more.
 """
 
-__version__ = "2.0.0"
+__version__ = "2.1.0"
 
 # Main SDK class
 from .sdk import ChipiSDK
@@ -19,6 +19,7 @@ from .transactions import ChipiTransactions
 from .sessions import ChipiSessions
 from .skus import ChipiSkus
 from .sku_transactions import ChipiSkuTransactions
+from .sku_purchases import ChipiSkuPurchases
 from .users import ChipiUsers
 
 # Models - Core
@@ -26,6 +27,7 @@ from .models.core import (
     Chain,
     ChainToken,
     ChipiSDKConfig,
+    Currency,
     PaginatedResponse,
     PaginationQuery,
     StarknetContract,
@@ -44,6 +46,7 @@ from .models.wallet import (
     GetWalletResponse,
     PasskeyMetadata,
     PrepareWalletCreationResponse,
+    ShhhSignerKind,
     WalletData,
     WalletType,
     PrepareWalletUpgradeParams,
@@ -103,6 +106,11 @@ from .models.sku_transaction import (
     SkuTransaction,
 )
 
+# Models - SKU Purchase (bill payments)
+from .models.sku_purchase import (
+    CreateSkuPurchaseParams,
+)
+
 # Models - User
 from .models.user import (
     CreateUserParams,
@@ -156,17 +164,22 @@ from .constants import (
     DEFAULT_PAGINATION,
     ERRORS,
     LEGACY_CHIPI_CLASS_HASHES,
+    LEGACY_SHHH_CLASS_HASHES,
     PAYMASTER_CONFIG,
     SERVICE_TYPES,
     SESSION_DEFAULTS,
     SESSION_ENTRYPOINTS,
     SESSION_ERRORS,
+    SHHH_ENVELOPE_TAGS,
+    SHHH_KIND_GAS_OVERHEAD,
+    SHHH_VERIFIER_CLASS_HASHES,
     SKU_CONTRACTS,
     STARKNET_NETWORKS,
     TOKEN_DECIMALS,
     WALLET_CLASS_HASHES,
     WALLET_RPC_ENDPOINTS,
     get_wallet_type_from_class_hash,
+    is_known_shhh_class_hash,
 )
 
 # Utilities
@@ -205,11 +218,13 @@ __all__ = [
     "ChipiSessions",
     "ChipiSkus",
     "ChipiSkuTransactions",
+    "ChipiSkuPurchases",
     "ChipiUsers",
     # Core models
     "Chain",
     "ChainToken",
     "ChipiSDKConfig",
+    "Currency",
     "PaginatedResponse",
     "PaginationQuery",
     "StarknetContract",
@@ -227,6 +242,7 @@ __all__ = [
     "PrepareWalletCreationResponse",
     "WalletData",
     "WalletType",
+    "ShhhSignerKind",
     "PrepareWalletUpgradeParams",
     "PrepareWalletUpgradeResponse",
     "ExecuteWalletUpgradeParams",
@@ -270,6 +286,8 @@ __all__ = [
     # SKU Transaction models
     "CreateSkuTransactionParams",
     "SkuTransaction",
+    # SKU Purchase models (bill payments)
+    "CreateSkuPurchaseParams",
     # User models
     "CreateUserParams",
     "GetUserParams",
@@ -308,7 +326,12 @@ __all__ = [
     "TOKEN_DECIMALS",
     "WALLET_CLASS_HASHES",
     "LEGACY_CHIPI_CLASS_HASHES",
+    "LEGACY_SHHH_CLASS_HASHES",
+    "SHHH_ENVELOPE_TAGS",
+    "SHHH_KIND_GAS_OVERHEAD",
+    "SHHH_VERIFIER_CLASS_HASHES",
     "get_wallet_type_from_class_hash",
+    "is_known_shhh_class_hash",
     "WALLET_RPC_ENDPOINTS",
     # Utilities
     "camel_to_snake",

{chipi_stack-2.0.0 → chipi_stack-2.2.0}/chipi_sdk/constants.py

@@ -1,7 +1,7 @@
 """Constants used across Chipi SDK."""
 
 from typing import Optional
-from .models.wallet import WalletType
+from .models.wallet import ShhhSignerKind, WalletType
 
 
 # API Versioning
@@ -35,7 +35,8 @@ API_ENDPOINTS = {
     "CHIPI_WALLETS": "/chipi-wallets",
     "TRANSACTIONS": "/transactions",
     "SKUS": "/skus",
-    "SKU_TRANSACTIONS": "/sku-transactions",
+    "SKU_PURCHASES": "/sku-purchases",
+    "SKU_TRANSACTIONS": "/sku-transactions",  # legacy / deprecated — see purchase_sku
     "EXCHANGES": "/exchanges",
     "USERS": "/users",
 }
@@ -94,6 +95,7 @@ CHAIN_TOKEN_TYPES = {
 WALLET_CLASS_HASHES: dict[WalletType, str] = {
     WalletType.CHIPI: "0x0484bbd2404b3c7264bea271f7267d6d4004821ac7787a9eed7f472e79ef40d1",  # v33 — latest, spending policy + audit fixes
     WalletType.READY: "0x036078334509b514626504edc9fb252328d1a240e4e948bef8d0c08dff45927f",
+    WalletType.SHHH: "0x075dfb396145926bffa6beb659897f46cc082a50b211d80871cff7f1038fa58a",  # V8.4 ShhhAccount — declared 2026-05-15, audit-closed
 }
 
 # Previous CHIPI wallet class hashes still deployed on-chain (newest → oldest)
@@ -105,6 +107,54 @@ LEGACY_CHIPI_CLASS_HASHES: list[str] = [
     "0x02de1565226d5215a38b68c4d9a4913989b54edff64c68c45e453c417b44cd83", # v28
 ]
 
+# Deprecated SHHH class hashes still deployed on-chain. V8 series ships
+# without an `upgrade` selector, so existing instances at deprecated classes
+# cannot self-upgrade — they redeploy at the current SHHH class hash.
+LEGACY_SHHH_CLASS_HASHES: list[str] = [
+    "0x03bc539295abd3e59bd9ea799d12fe3331748d484bc77bff45b302b1636a87d9",  # V8.3 — deprecated 2026-05-15
+]
+
+# SHHH ShhhAccount verifier class hashes (V8.4, mainnet).
+# Account dispatches `verify` to one of these via library_call_syscall based
+# on the owner's `kind_tag`. Chipi routes as consumer; we do not redeclare.
+SHHH_VERIFIER_CLASS_HASHES: dict[ShhhSignerKind, str] = {
+    ShhhSignerKind.STARK: "0x00d09209b2da9d49fc805ba26380ba4ce25aa641116c10eb178e1051a71dbf68",
+    ShhhSignerKind.ED25519: "0x030a7dfc03e59cef6e41699e734abd2df53ce393a052221c02c6e07665949f74",
+    ShhhSignerKind.SECP256K1: "0x03e81667a46bd5287e09a9600fa98d28fdc477735f2689f5f4e8e95f37b67b74",
+    ShhhSignerKind.EIP191_SECP256K1: "0x03a75997862059c36cb8e204fb3027eb6d1fdf933488d42c2db4528118d084e6",
+    ShhhSignerKind.EIP712_SECP256K1: "0x072a3f77e8c28bfea2ade91ec3fb83b6290169d1ed8c1b2396704231841c6474",
+    ShhhSignerKind.P256: "0x01b600709af54c8838e5f18ddad3a26feeb47cb124c239f55a0f1b7a780e2d8a",
+    ShhhSignerKind.WEBAUTHN_P256: "0x074f6efd2af9025cd8cab41a4565bc73b6ef097214c31352838fcdbac0a44657",
+    ShhhSignerKind.JWT_ES256: "0x002efce875fa3e73e04d825d8ebade53e188cc995dfe0c55a6a2f7fa6c59f497",
+    ShhhSignerKind.JWT_ES256_APPLE_SUB: "0x06b67762218a25fdd28e25b063480893a5cef9cdeecbc663e32d444d5734c471",
+    ShhhSignerKind.BLS12_381: "0x02623721e74a9ad3e0ba639065f5631a09bf900913de6ab21ea6984973cd2cd1",
+}
+
+# Upper-bound l2_gas overhead per SHHH signer kind, in addition to base
+# paymaster execution cost. Numbers from snforge runs at tag v8.4
+# (252-byte calls, single owner, no session key). Paymaster adds ~5M margin.
+# Threshold envelopes: sum the per-owner cost + ~3M aggregation overhead.
+# Session-key envelopes (SNIP-163 4-felt): ~2M + session-policy enforcement.
+SHHH_KIND_GAS_OVERHEAD: dict[ShhhSignerKind, int] = {
+    ShhhSignerKind.STARK: 2_000_000,
+    ShhhSignerKind.SECP256K1: 5_000_000,
+    ShhhSignerKind.EIP191_SECP256K1: 10_000_000,
+    ShhhSignerKind.EIP712_SECP256K1: 12_000_000,
+    ShhhSignerKind.P256: 30_000_000,
+    ShhhSignerKind.ED25519: 33_000_000,
+    ShhhSignerKind.WEBAUTHN_P256: 35_000_000,
+    ShhhSignerKind.JWT_ES256: 60_000_000,
+    ShhhSignerKind.JWT_ES256_APPLE_SUB: 62_000_000,
+    ShhhSignerKind.BLS12_381: 80_000_000,
+}
+
+# Inner-envelope routing tags per the V8.4 Pluggable-Signer SNIP draft.
+SHHH_ENVELOPE_TAGS = {
+    "V2_SNIP12": "V2_SNIP12",
+    "V2_THRESHOLD": "V2_THRESHOLD",
+    # Session-key envelopes are the SNIP-163 4-felt format (no version tag).
+}
+
 
 def get_wallet_type_from_class_hash(class_hash: str) -> Optional[str]:
     """
@@ -114,7 +164,7 @@ def get_wallet_type_from_class_hash(class_hash: str) -> Optional[str]:
         class_hash: Class hash to look up
 
     Returns:
-        Wallet type string ("CHIPI" or "READY"), or None if unknown
+        Wallet type string ("CHIPI", "READY", or "SHHH"), or None if unknown
     """
     def normalize(h: str) -> str:
         import re
@@ -128,12 +178,39 @@ def get_wallet_type_from_class_hash(class_hash: str) -> Optional[str]:
         return "CHIPI"
     if any(normalize(h) == normalized for h in LEGACY_CHIPI_CLASS_HASHES):
         return "CHIPI"
+    if normalize(WALLET_CLASS_HASHES[WalletType.SHHH]) == normalized:
+        return "SHHH"
+    if any(normalize(h) == normalized for h in LEGACY_SHHH_CLASS_HASHES):
+        return "SHHH"
     return None
 
+
+def is_known_shhh_class_hash(class_hash: str) -> bool:
+    """
+    True if a class hash is a registered SHHH ShhhAccount class (current or
+    legacy) OR one of the 10 V8.4 verifier classes. Used by the backend to
+    reject unknown class hashes when an integrator opts into SHHH via
+    wallet_type="SHHH" (plan D4 safety net — open SDK option, no per-org gate).
+    """
+    import re
+
+    def normalize(h: str) -> str:
+        return re.sub(r"^0x0+", "0x", h.lower())
+
+    normalized = normalize(class_hash)
+
+    if normalize(WALLET_CLASS_HASHES[WalletType.SHHH]) == normalized:
+        return True
+    if any(normalize(h) == normalized for h in LEGACY_SHHH_CLASS_HASHES):
+        return True
+    return any(normalize(h) == normalized for h in SHHH_VERIFIER_CLASS_HASHES.values())
+
+
 # RPC Endpoints per Wallet Type
 WALLET_RPC_ENDPOINTS: dict[WalletType, str] = {
     WalletType.CHIPI: "https://starknet-mainnet.public.blastapi.io/rpc/v0_7",
     WalletType.READY: "https://cloud.argent-api.com/v1/starknet/mainnet/rpc/v0.7",
+    WalletType.SHHH: "https://starknet-mainnet.public.blastapi.io/rpc/v0_7",
 }
 
 # Paymaster Configuration

{chipi_stack-2.0.0 → chipi_stack-2.2.0}/chipi_sdk/execute_paymaster.py

@@ -58,6 +58,34 @@ async def execute_paymaster_transaction(
             )
             raise ValueError(error_msg)
 
+        # SHHH V8.4 ShhhAccount wallets cannot use the legacy
+        # prepare-typed-data → sign → execute-sponsored-transaction
+        # flow because the Chipi paymaster cannot synthesize SHHH
+        # envelopes server-side. Route SHHH OEs through the
+        # execute-sponsored-raw forwarder which expects pre-signed
+        # calldata. The legacy flow below is unchanged for
+        # CHIPI / READY.
+        if wallet.wallet_type == WalletType.SHHH:
+            from .shhh.execute_paymaster_raw import execute_shhh_sponsored_raw
+            from .shhh.snip12_hash import Call as ShhhCall
+
+            shhh_calls = [
+                ShhhCall(
+                    contract_address=c.get("contractAddress") or c.get("to"),
+                    entrypoint=c["entrypoint"],
+                    calldata=list(c.get("calldata") or []),
+                )
+                for c in calls
+            ]
+            return await execute_shhh_sponsored_raw(
+                client=client,
+                bearer_token=bearer_token,
+                wallet_public_key=wallet.public_key,
+                wallet_encrypted_private_key=wallet.encrypted_private_key,
+                encrypt_key=encrypt_key,
+                calls=shhh_calls,
+            )
+
         # Use READY RPC endpoint for now (matches TypeScript implementation)
         rpc_url = WALLET_RPC_ENDPOINTS[WalletType.READY]
         account_class_hash = WALLET_CLASS_HASHES[WalletType.READY]
@@ -168,6 +196,33 @@ def execute_paymaster_transaction_sync(
             )
             raise ValueError(error_msg)
 
+        # SHHH parity for the sync API. Sync callers with WalletType.SHHH
+        # would otherwise fall into the legacy prepare-typed-data flow,
+        # which the paymaster cannot synthesize an envelope for and
+        # returns TRANSACTION_EXECUTION_ERROR. Mirror the async branch
+        # above via execute_shhh_sponsored_raw_sync (shared payload
+        # construction, sync HTTP).
+        if wallet.wallet_type == WalletType.SHHH:
+            from .shhh.execute_paymaster_raw import execute_shhh_sponsored_raw_sync
+            from .shhh.snip12_hash import Call as ShhhCall
+
+            shhh_calls = [
+                ShhhCall(
+                    contract_address=c.get("contractAddress") or c.get("to"),
+                    entrypoint=c["entrypoint"],
+                    calldata=list(c.get("calldata") or []),
+                )
+                for c in calls
+            ]
+            return execute_shhh_sponsored_raw_sync(
+                client=client,
+                bearer_token=bearer_token,
+                wallet_public_key=wallet.public_key,
+                wallet_encrypted_private_key=wallet.encrypted_private_key,
+                encrypt_key=encrypt_key,
+                calls=shhh_calls,
+            )
+
         # Use READY account class hash (matches TypeScript implementation)
         account_class_hash = WALLET_CLASS_HASHES[WalletType.READY]
 
@@ -260,10 +315,15 @@ async def execute_paymaster_transaction_with_session(
         else:
             session = session_dict
 
-        # Validate this is a CHIPI wallet
-        if wallet.wallet_type and wallet.wallet_type != WalletType.CHIPI:
+        # Accept CHIPI v29 + SHHH V8.4 (both embed SNIP-163 sessions;
+        # the 4-felt session sig fast path at account.cairo:389 runs
+        # the same on either class).
+        if wallet.wallet_type and wallet.wallet_type not in (
+            WalletType.CHIPI,
+            WalletType.SHHH,
+        ):
             raise ChipiSessionError(
-                f"Session keys only work with CHIPI wallets. Got: {wallet.wallet_type}",
+                f"Session execution requires CHIPI or SHHH wallet type. Got: {wallet.wallet_type}",
                 SESSION_ERRORS["INVALID_WALLET_TYPE_FOR_SESSION"],
             )
 
@@ -275,6 +335,34 @@ async def execute_paymaster_transaction_with_session(
         if not session_private_key:
             raise ValueError("Failed to decrypt session private key")
 
+        # SHHH branch — route through V8.4 OE path with the 4-felt
+        # session sig (bypasses chipi-back's CHIPI-shaped
+        # prepare-typed-data + execute-sponsored-transaction). Mirrors
+        # the TypeScript SHHH branch shipped in sdks#288.
+        if wallet.wallet_type == WalletType.SHHH:
+            from .shhh.execute_paymaster_raw import (
+                execute_shhh_session_sponsored_raw,
+            )
+            from .shhh.snip12_hash import Call as ShhhCall
+
+            shhh_calls = [
+                ShhhCall(
+                    contract_address=c.get("contractAddress") or c.get("to"),
+                    entrypoint=c["entrypoint"],
+                    calldata=list(c.get("calldata") or []),
+                )
+                for c in calls
+            ]
+            return await execute_shhh_session_sponsored_raw(
+                client=client,
+                bearer_token=bearer_token,
+                wallet_public_key=wallet.public_key,
+                session_private_key=session_private_key,
+                session_public_key=session.public_key,
+                session_valid_until=session.valid_until,
+                calls=shhh_calls,
+            )
+
         # Use CHIPI RPC endpoint and class hash
         account_class_hash = WALLET_CLASS_HASHES[WalletType.CHIPI]
 
@@ -375,13 +463,47 @@ def execute_paymaster_transaction_with_session_sync(
         else:
             session = session_dict
 
-        # Validate this is a CHIPI wallet
-        if wallet.wallet_type and wallet.wallet_type != WalletType.CHIPI:
+        # Accept CHIPI v29 + SHHH V8.4 — see async path above for details.
+        if wallet.wallet_type and wallet.wallet_type not in (
+            WalletType.CHIPI,
+            WalletType.SHHH,
+        ):
             raise ChipiSessionError(
-                f"Session keys only work with CHIPI wallets. Got: {wallet.wallet_type}",
+                f"Session execution requires CHIPI or SHHH wallet type. Got: {wallet.wallet_type}",
                 SESSION_ERRORS["INVALID_WALLET_TYPE_FOR_SESSION"],
             )
 
+        # SHHH branch (sync) — same shape as the async path.
+        if wallet.wallet_type == WalletType.SHHH:
+            session_private_key_sync = decrypt_private_key(
+                session.encrypted_private_key, params["encryptKey"]
+            )
+            if not session_private_key_sync:
+                raise ValueError("Failed to decrypt session private key")
+
+            from .shhh.execute_paymaster_raw import (
+                execute_shhh_session_sponsored_raw_sync,
+            )
+            from .shhh.snip12_hash import Call as ShhhCall
+
+            shhh_calls = [
+                ShhhCall(
+                    contract_address=c.get("contractAddress") or c.get("to"),
+                    entrypoint=c["entrypoint"],
+                    calldata=list(c.get("calldata") or []),
+                )
+                for c in calls
+            ]
+            return execute_shhh_session_sponsored_raw_sync(
+                client=client,
+                bearer_token=bearer_token,
+                wallet_public_key=wallet.public_key,
+                session_private_key=session_private_key_sync,
+                session_public_key=session.public_key,
+                session_valid_until=session.valid_until,
+                calls=shhh_calls,
+            )
+
         # Use CHIPI account class hash
         account_class_hash = WALLET_CLASS_HASHES[WalletType.CHIPI]
 

{chipi_stack-2.0.0 → chipi_stack-2.2.0}/chipi_sdk/models/__init__.py

@@ -23,6 +23,7 @@ from .wallet import (
     GetWalletResponse,
     PasskeyMetadata,
     PrepareWalletCreationResponse,
+    ShhhSignerKind,
     WalletData,
     WalletType,
 )
@@ -101,6 +102,7 @@ __all__ = [
     "GetWalletResponse",
     "PasskeyMetadata",
     "PrepareWalletCreationResponse",
+    "ShhhSignerKind",
     "WalletData",
     "WalletType",
     # Transaction

{chipi_stack-2.0.0 → chipi_stack-2.2.0}/chipi_sdk/models/core.py

@@ -22,6 +22,12 @@ class ChainToken(str, Enum):
     OTHER = "OTHER"
 
 
+class Currency(str, Enum):
+    """Local currencies supported by Chipi services (e.g. SKU purchases)."""
+    MXN = "MXN"
+    USD = "USD"
+
+
 class ChipiSDKConfig(BaseModel):
     """Configuration for initializing the Chipi SDK."""
     

chipi_stack-2.2.0/chipi_sdk/models/sku_purchase.py

@@ -0,0 +1,40 @@
+"""Bill payment / SKU purchase types — mirrors @chipi-stack/types CreateSkuPurchaseParams."""
+
+from pydantic import BaseModel, ConfigDict, Field
+
+from .core import Chain, ChainToken, Currency
+from .wallet import WalletData, to_camel
+
+
+class CreateSkuPurchaseParams(BaseModel):
+    """
+    Parameters for charging a user's gasless wallet for a SKU (bill payment,
+    gift card, etc.). Mirrors @chipi-stack/types CreateSkuPurchaseParams; the
+    backend endpoint is POST /sku-purchases.
+    """
+
+    model_config = ConfigDict(populate_by_name=True, alias_generator=to_camel)
+
+    sku_id: str = Field(..., description="SKU identifier from getSkuList / getSku")
+    sku_reference: str = Field(
+        ...,
+        description=(
+            "User-facing reference required by the SKU (e.g. phone number for a "
+            "phone recharge, account number for a utility bill). Validated "
+            "server-side against the SKU's referenceRegexValidation."
+        ),
+    )
+    currency_amount: float = Field(
+        ...,
+        gt=0,
+        description="Amount in the SKU's local currency (e.g. 200 for $200 MXN). Must be > 0.",
+    )
+    currency: Currency = Field(..., description="Local currency of currency_amount.")
+    chain: Chain = Field(..., description="Settlement chain (currently STARKNET).")
+    token: ChainToken = Field(
+        ..., description="Token used to pay (typically USDC)."
+    )
+    encrypt_key: str = Field(..., description="User PIN that decrypts the wallet.")
+    wallet: WalletData = Field(
+        ..., description="The user's gasless wallet (publicKey + encryptedPrivateKey)."
+    )