diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 799148a..eccfa7f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -43,8 +43,8 @@ catalogs:
       specifier: 0.3.0
       version: 0.3.0
     zod:
-      specifier: 4.4.3
-      version: 4.4.3
+      specifier: 4.6.6
+      version: 4.6.6
 
 overrides:
   esbuild@<0.24.3: ^0.25.0
@@ -147,13 +147,13 @@ importers:
     dependencies:
       '@ai-sdk/anthropic':
         specifier: 4.0.42
-        version: 4.0.42(zod@4.4.3)
+        version: 4.0.42(zod@4.6.6)
       '@ai-sdk/openai':
         specifier: 4.0.47
-        version: 4.0.47(zod@4.4.3)
+        version: 4.0.47(zod@4.6.6)
       '@ai-sdk/valibot':
         specifier: 3.0.30
-        version: 3.0.30(@valibot/to-json-schema@1.7.1(valibot@1.4.2(typescript@7.0.2)))(valibot@1.4.2(typescript@7.0.2))(zod@4.4.3)
+        version: 3.0.30(@valibot/to-json-schema@1.7.1(valibot@1.4.2(typescript@7.0.2)))(valibot@1.4.2(typescript@7.0.2))(zod@4.6.6)
       '@hono/node-server':
         specifier: 'catalog:'
         version: 2.1.1(hono@4.13.7)
@@ -171,7 +171,7 @@ importers:
         version: link:../../packages/agentcommercekit
       ai:
         specifier: 7.0.79
-        version: 7.0.79(zod@4.4.3)
+        version: 7.0.79(zod@4.6.6)
       hono:
         specifier: 'catalog:'
         version: 4.13.7
@@ -180,7 +180,7 @@ importers:
         version: 1.4.2(typescript@7.0.2)
       zod:
         specifier: 'catalog:'
-        version: 4.4.3
+        version: 4.6.6
 
   demos/identity-a2a:
     dependencies:
@@ -235,7 +235,7 @@ importers:
         version: 1.4.2(typescript@7.0.2)
       viem:
         specifier: 'catalog:'
-        version: 2.55.19(typescript@7.0.2)(zod@4.4.3)
+        version: 2.55.19(typescript@7.0.2)(zod@4.6.6)
 
   demos/skyfire-kya:
     dependencies:
@@ -250,7 +250,7 @@ importers:
         version: 6.2.10
       zod:
         specifier: 'catalog:'
-        version: 4.4.3
+        version: 4.6.6
 
   docs:
     devDependencies:
@@ -369,7 +369,7 @@ importers:
         version: 0.3.13(express@5.2.1)
       zod:
         specifier: 'catalog:'
-        version: 4.4.3
+        version: 4.6.6
 
   packages/ack-pay:
     dependencies:
@@ -391,7 +391,7 @@ importers:
     devDependencies:
       zod:
         specifier: 'catalog:'
-        version: 4.4.3
+        version: 4.6.6
 
   packages/agentcommercekit:
     dependencies:
@@ -425,19 +425,19 @@ importers:
         version: 1.4.2(typescript@7.0.2)
       zod:
         specifier: 'catalog:'
-        version: 4.4.3
+        version: 4.6.6
 
   packages/caip:
     devDependencies:
       standard-matchers:
         specifier: 'catalog:'
-        version: 0.1.0(arktype@2.2.3)(valibot@1.4.2(typescript@7.0.2))(vitest@4.1.11(@opentelemetry/api@1.9.1)(@types/node@26.3.0)(vite@7.3.6(@types/node@26.3.0)(jiti@2.7.0)(tsx@4.23.12)(yaml@2.9.0)))(zod@4.4.3)
+        version: 0.1.0(arktype@2.2.3)(valibot@1.4.2(typescript@7.0.2))(vitest@4.1.11(@opentelemetry/api@1.9.1)(@types/node@26.3.0)(vite@7.3.6(@types/node@26.3.0)(jiti@2.7.0)(tsx@4.23.12)(yaml@2.9.0)))(zod@4.6.6)
       valibot:
         specifier: 'catalog:'
         version: 1.4.2(typescript@7.0.2)
       zod:
         specifier: 'catalog:'
-        version: 4.4.3
+        version: 4.6.6
 
   packages/did:
     dependencies:
@@ -452,7 +452,7 @@ importers:
         version: 4.1.0
       jwks-did-resolver:
         specifier: 1.1.0
-        version: 1.1.0(typescript@7.0.2)(zod@4.4.3)
+        version: 1.1.0(typescript@7.0.2)(zod@4.6.6)
       key-did-resolver:
         specifier: 4.0.0
         version: 4.0.0
@@ -464,17 +464,17 @@ importers:
         version: 6.0.0
       web-identity-schemas:
         specifier: 'catalog:'
-        version: 0.3.0(valibot@1.4.2(typescript@7.0.2))(zod@4.4.3)
+        version: 0.3.0(valibot@1.4.2(typescript@7.0.2))(zod@4.6.6)
     devDependencies:
       '@types/varint':
         specifier: 6.0.3
         version: 6.0.3
       standard-matchers:
         specifier: 'catalog:'
-        version: 0.1.0(arktype@2.2.3)(valibot@1.4.2(typescript@7.0.2))(vitest@4.1.11(@opentelemetry/api@1.9.1)(@types/node@26.3.0)(vite@7.3.6(@types/node@26.3.0)(jiti@2.7.0)(tsx@4.23.12)(yaml@2.9.0)))(zod@4.4.3)
+        version: 0.1.0(arktype@2.2.3)(valibot@1.4.2(typescript@7.0.2))(vitest@4.1.11(@opentelemetry/api@1.9.1)(@types/node@26.3.0)(vite@7.3.6(@types/node@26.3.0)(jiti@2.7.0)(tsx@4.23.12)(yaml@2.9.0)))(zod@4.6.6)
       zod:
         specifier: 'catalog:'
-        version: 4.4.3
+        version: 4.6.6
 
   packages/jwt:
     dependencies:
@@ -486,14 +486,14 @@ importers:
         version: 8.0.18
       web-identity-schemas:
         specifier: 'catalog:'
-        version: 0.3.0(valibot@1.4.2(typescript@7.0.2))(zod@4.4.3)
+        version: 0.3.0(valibot@1.4.2(typescript@7.0.2))(zod@4.6.6)
     devDependencies:
       valibot:
         specifier: 'catalog:'
         version: 1.4.2(typescript@7.0.2)
       zod:
         specifier: 'catalog:'
-        version: 4.4.3
+        version: 4.6.6
 
   packages/keys:
     dependencies:
@@ -532,11 +532,11 @@ importers:
         version: 1.4.2(typescript@7.0.2)
       web-identity-schemas:
         specifier: 'catalog:'
-        version: 0.3.0(valibot@1.4.2(typescript@7.0.2))(zod@4.4.3)
+        version: 0.3.0(valibot@1.4.2(typescript@7.0.2))(zod@4.6.6)
     devDependencies:
       zod:
         specifier: 'catalog:'
-        version: 4.4.3
+        version: 4.6.6
 
   tools/api-utils:
     dependencies:
@@ -6991,6 +6991,9 @@ packages:
   zod@4.4.3:
     resolution: {integrity: sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==}
 
+  zod@4.6.6:
+    resolution: {integrity: sha512-4UmzQUF5fxvfcYHlbjBmejU+w+hbDnWFx4aS8kBx7nPBHcO2SqPbpAG8snbdg+Xse4pRefR98hgjFgIMCI/UhA==}
+
   zwitch@2.0.4:
     resolution: {integrity: sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==}
 
@@ -7004,41 +7007,41 @@ snapshots:
 
   '@adraffy/ens-normalize@1.11.1': {}
 
-  '@ai-sdk/anthropic@4.0.42(zod@4.4.3)':
+  '@ai-sdk/anthropic@4.0.42(zod@4.6.6)':
     dependencies:
       '@ai-sdk/provider': 4.0.8
-      '@ai-sdk/provider-utils': 5.0.30(zod@4.4.3)
-      zod: 4.4.3
+      '@ai-sdk/provider-utils': 5.0.30(zod@4.6.6)
+      zod: 4.6.6
 
-  '@ai-sdk/gateway@4.0.64(zod@4.4.3)':
+  '@ai-sdk/gateway@4.0.64(zod@4.6.6)':
     dependencies:
       '@ai-sdk/provider': 4.0.8
-      '@ai-sdk/provider-utils': 5.0.30(zod@4.4.3)
+      '@ai-sdk/provider-utils': 5.0.30(zod@4.6.6)
       '@vercel/oidc': 3.2.0
-      zod: 4.4.3
+      zod: 4.6.6
 
-  '@ai-sdk/openai@4.0.47(zod@4.4.3)':
+  '@ai-sdk/openai@4.0.47(zod@4.6.6)':
     dependencies:
       '@ai-sdk/provider': 4.0.8
-      '@ai-sdk/provider-utils': 5.0.30(zod@4.4.3)
-      zod: 4.4.3
+      '@ai-sdk/provider-utils': 5.0.30(zod@4.6.6)
+      zod: 4.6.6
 
-  '@ai-sdk/provider-utils@5.0.30(zod@4.4.3)':
+  '@ai-sdk/provider-utils@5.0.30(zod@4.6.6)':
     dependencies:
       '@ai-sdk/provider': 4.0.8
       '@standard-schema/spec': 1.1.0
       '@workflow/serde': 4.1.0
       eventsource-parser: 3.1.1
       undici: 7.30.0
-      zod: 4.4.3
+      zod: 4.6.6
 
   '@ai-sdk/provider@4.0.8':
     dependencies:
       json-schema: 0.4.0
 
-  '@ai-sdk/valibot@3.0.30(@valibot/to-json-schema@1.7.1(valibot@1.4.2(typescript@7.0.2)))(valibot@1.4.2(typescript@7.0.2))(zod@4.4.3)':
+  '@ai-sdk/valibot@3.0.30(@valibot/to-json-schema@1.7.1(valibot@1.4.2(typescript@7.0.2)))(valibot@1.4.2(typescript@7.0.2))(zod@4.6.6)':
     dependencies:
-      '@ai-sdk/provider-utils': 5.0.30(zod@4.4.3)
+      '@ai-sdk/provider-utils': 5.0.30(zod@4.6.6)
       '@valibot/to-json-schema': 1.7.1(valibot@1.4.2(typescript@7.0.2))
       valibot: 1.4.2(typescript@7.0.2)
     transitivePeerDependencies:
@@ -9758,6 +9761,11 @@ snapshots:
       typescript: 7.0.2
       zod: 4.4.3
 
+  abitype@1.2.3(typescript@7.0.2)(zod@4.6.6):
+    optionalDependencies:
+      typescript: 7.0.2
+      zod: 4.6.6
+
   accepts@1.3.8:
     dependencies:
       mime-types: 2.1.35
@@ -9789,12 +9797,12 @@ snapshots:
       clean-stack: 4.2.0
       indent-string: 5.0.0
 
-  ai@7.0.79(zod@4.4.3):
+  ai@7.0.79(zod@4.6.6):
     dependencies:
-      '@ai-sdk/gateway': 4.0.64(zod@4.4.3)
+      '@ai-sdk/gateway': 4.0.64(zod@4.6.6)
       '@ai-sdk/provider': 4.0.8
-      '@ai-sdk/provider-utils': 5.0.30(zod@4.4.3)
-      zod: 4.4.3
+      '@ai-sdk/provider-utils': 5.0.30(zod@4.6.6)
+      zod: 4.6.6
 
   ajv-draft-04@1.0.0(ajv@8.20.0):
     optionalDependencies:
@@ -10287,10 +10295,10 @@ snapshots:
 
   devtools-protocol@0.0.1666840: {}
 
-  did-jwks@1.1.0(typescript@7.0.2)(zod@4.4.3):
+  did-jwks@1.1.0(typescript@7.0.2)(zod@4.6.6):
     dependencies:
       valibot: 1.4.2(typescript@7.0.2)
-      web-identity-schemas: 0.1.6(valibot@1.4.2(typescript@7.0.2))(zod@4.4.3)
+      web-identity-schemas: 0.1.6(valibot@1.4.2(typescript@7.0.2))(zod@4.6.6)
     transitivePeerDependencies:
       - typescript
       - zod
@@ -11523,9 +11531,9 @@ snapshots:
 
   jsonpointer@5.0.1: {}
 
-  jwks-did-resolver@1.1.0(typescript@7.0.2)(zod@4.4.3):
+  jwks-did-resolver@1.1.0(typescript@7.0.2)(zod@4.6.6):
     dependencies:
-      did-jwks: 1.1.0(typescript@7.0.2)(zod@4.4.3)
+      did-jwks: 1.1.0(typescript@7.0.2)(zod@4.6.6)
     transitivePeerDependencies:
       - typescript
       - zod
@@ -12373,6 +12381,21 @@ snapshots:
     transitivePeerDependencies:
       - zod
 
+  ox@0.14.34(typescript@7.0.2)(zod@4.6.6):
+    dependencies:
+      '@adraffy/ens-normalize': 1.11.1
+      '@noble/ciphers': 1.3.0
+      '@noble/curves': 1.9.1
+      '@noble/hashes': 1.8.0
+      '@scure/bip32': 1.7.0
+      '@scure/bip39': 1.6.0
+      abitype: 1.2.3(typescript@7.0.2)(zod@4.6.6)
+      eventemitter3: 5.0.1
+    optionalDependencies:
+      typescript: 7.0.2
+    transitivePeerDependencies:
+      - zod
+
   oxc-parser@0.143.0:
     dependencies:
       '@oxc-project/types': 0.143.0
@@ -13360,22 +13383,22 @@ snapshots:
 
   stackback@0.0.2: {}
 
-  standard-matchers@0.1.0(arktype@2.2.3)(valibot@1.4.2(typescript@7.0.2))(vitest@4.1.11(@opentelemetry/api@1.9.1)(@types/node@26.3.0)(vite@7.3.6(@types/node@26.3.0)(jiti@2.7.0)(tsx@4.23.12)(yaml@2.9.0)))(zod@4.4.3):
+  standard-matchers@0.1.0(arktype@2.2.3)(valibot@1.4.2(typescript@7.0.2))(vitest@4.1.11(@opentelemetry/api@1.9.1)(@types/node@26.3.0)(vite@7.3.6(@types/node@26.3.0)(jiti@2.7.0)(tsx@4.23.12)(yaml@2.9.0)))(zod@4.6.6):
     dependencies:
-      standard-parse: 0.6.0(arktype@2.2.3)(valibot@1.4.2(typescript@7.0.2))(zod@4.4.3)
+      standard-parse: 0.6.0(arktype@2.2.3)(valibot@1.4.2(typescript@7.0.2))(zod@4.6.6)
       vitest: 4.1.11(@opentelemetry/api@1.9.1)(@types/node@26.3.0)(vite@7.3.6(@types/node@26.3.0)(jiti@2.7.0)(tsx@4.23.12)(yaml@2.9.0))
     transitivePeerDependencies:
       - arktype
       - valibot
       - zod
 
-  standard-parse@0.6.0(arktype@2.2.3)(valibot@1.4.2(typescript@7.0.2))(zod@4.4.3):
+  standard-parse@0.6.0(arktype@2.2.3)(valibot@1.4.2(typescript@7.0.2))(zod@4.6.6):
     dependencies:
       '@standard-schema/spec': 1.1.0
     optionalDependencies:
       arktype: 2.2.3
       valibot: 1.4.2(typescript@7.0.2)
-      zod: 4.4.3
+      zod: 4.6.6
 
   statuses@2.0.2: {}
 
@@ -13909,6 +13932,23 @@ snapshots:
       - utf-8-validate
       - zod
 
+  viem@2.55.19(typescript@7.0.2)(zod@4.6.6):
+    dependencies:
+      '@noble/curves': 1.9.1
+      '@noble/hashes': 1.8.0
+      '@scure/bip32': 1.7.0
+      '@scure/bip39': 1.6.0
+      abitype: 1.2.3(typescript@7.0.2)(zod@4.6.6)
+      isows: 1.0.7(ws@8.21.0)
+      ox: 0.14.34(typescript@7.0.2)(zod@4.6.6)
+      ws: 8.21.0
+    optionalDependencies:
+      typescript: 7.0.2
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+      - zod
+
   vite-tsconfig-paths@6.1.1(typescript@7.0.2)(vite@7.3.6(@types/node@26.3.0)(jiti@2.7.0)(tsx@4.23.12)(yaml@2.9.0)):
     dependencies:
       debug: 4.4.3
@@ -13964,15 +14004,15 @@ snapshots:
 
   walk-up-path@4.0.0: {}
 
-  web-identity-schemas@0.1.6(valibot@1.4.2(typescript@7.0.2))(zod@4.4.3):
+  web-identity-schemas@0.1.6(valibot@1.4.2(typescript@7.0.2))(zod@4.6.6):
     optionalDependencies:
       valibot: 1.4.2(typescript@7.0.2)
-      zod: 4.4.3
+      zod: 4.6.6
 
-  web-identity-schemas@0.3.0(valibot@1.4.2(typescript@7.0.2))(zod@4.4.3):
+  web-identity-schemas@0.3.0(valibot@1.4.2(typescript@7.0.2))(zod@4.6.6):
     optionalDependencies:
       valibot: 1.4.2(typescript@7.0.2)
-      zod: 4.4.3
+      zod: 4.6.6
 
   web-namespaces@2.0.1: {}
 
@@ -14174,4 +14214,6 @@ snapshots:
 
   zod@4.4.3: {}
 
+  zod@4.6.6: {}
+
   zwitch@2.0.4: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index f63c40c..6c68e34 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -28,7 +28,7 @@ catalog:
   valibot: 1.4.2
   viem: 2.55.19
   web-identity-schemas: 0.3.0
-  zod: 4.4.3
+  zod: 4.6.6
 
 # Force patched versions of vulnerable transitive dependencies (pnpm audit).
 # Scoped by major or range so only the vulnerable lines move.