@nexus-cross/pop 1.4.0-beta.6 → 2.4.0-beta.2

package/dist/index-2sfHzZeD.d.ts

@@ -0,0 +1,305 @@
+import { m as SafeDropApiPort, A as Address, v as SocialIdentifier, I as Id, H as Hex, O as OAuthProof, e as DropInbox, E as Envelope, L as LeaderboardPage, M as MyLeaderboardEntry, f as HistoryType, g as HistoryStatus, h as HistoryPage, X as XConnection, i as RecipientChangeSignature, j as RecipientSignature, l as BatchClaimSignature } from './SafeDropApiPort-BLewfSaK.js';
+import { X as XAuthPort, a as XTokenResult } from './XAuthPort-BNJePosj.js';
+
+/**
+ * ONEpop 배포 설정 — API와 컨트랙트 주소를 동일한 환경 식별자로 선택한다.
+ * Vite import.meta.env + Next literal process.env 컨벤션을 따른다.
+ *
+ * 우선순위 (override):
+ *   1) `VITE_ONE_POP_API_BASE_URL` (Vite 빌드)
+ *   2) `NEXT_PUBLIC_ONE_POP_API_BASE_URL` (Next.js)
+ *   3) 환경 식별(`VITE_ONE_POP_ENVIRONMENT` / `NEXT_PUBLIC_ONE_POP_ENVIRONMENT`
+ *      / `ONE_POP_ENVIRONMENT`)에 따라 DEFAULT_BASE_URL의 dev/stage/production
+ *
+ * 스펙: packages/pop/src/infrastructure/openapi.json (basePath `/api`)
+ */
+type PopEnvironment = 'dev' | 'stage' | 'production';
+interface PopContracts {
+    onePop: `0x${string}`;
+    permitErc20: `0x${string}`;
+    nft: `0x${string}`;
+    nftMinter: `0x${string}`;
+    validator: `0x${string}`;
+    feeRecipient: `0x${string}`;
+}
+interface PopDeployment {
+    apiBaseUrl: string;
+    contracts?: PopContracts;
+}
+/** ONEpop protocol fee: 5% (500 / 10,000 basis points). */
+declare const ONE_POP_FEE_BPS: bigint;
+declare const ONE_POP_BPS_DENOMINATOR: bigint;
+declare const ONE_POP_DEPLOYMENTS: Readonly<Record<PopEnvironment, PopDeployment>>;
+interface PopApiPaths {
+    /** POST — 임시 claim 지갑 생성 (Bearer JWT). */
+    createWallet: string;
+    /** POST — tx hash에 메시지/봉투 메타데이터 연결 (Bearer JWT). */
+    dropMetadata: string;
+    /** POST — pending 지갑 개인키 수령 (X OAuth 토큰). */
+    retrievePrivateKey: string;
+    /** GET — 수령 대기 인박스 (Bearer JWT + 활성 X 연결). */
+    drops: string;
+    /** POST — pending 드롭 숨김 (Bearer JWT + 활성 X 연결). */
+    rejectDrops: string;
+    /** GET — 카드 디자인 목록 (공개). */
+    envelopes: string;
+    /** GET — 토큰별 pending 잔액 상위 (공개). */
+    leaderboards: string;
+    leaderboardMe: string;
+    /** GET — 내 온체인 이벤트 히스토리 (Bearer JWT). */
+    histories: string;
+    /** GET/POST/DELETE — X 연결 (Bearer JWT). */
+    xConnections: string;
+    /** POST — 일괄 수령 validator 서명 (Bearer JWT). */
+    batchClaimSignature: string;
+    feedbacks: string;
+    revealYou: string;
+    recipientChangeSignature: string;
+    recipientResetSignature: string;
+    /** GET — SSE 알림 스트림. pop은 구독하지 않는다(앱이 EventSource로 직접). */
+    eventsSubscribe: string;
+}
+declare const DEFAULT_POP_API_PATHS: PopApiPaths;
+declare function getPopEnvironment(): PopEnvironment;
+declare function resolvePopEnvironment(raw?: string): PopEnvironment;
+declare function getOnePopDeployment(): PopDeployment;
+declare function getOnePopContracts(): PopContracts;
+/** 환경변수(override → 환경 식별)로 one-pop-api base URL을 결정한다. */
+declare function getOnePopApiBaseUrl(): string;
+/** 환경변수(override → 기본)로 cross-auth base URL을 결정한다. */
+declare function getCrossAuthBaseUrl(): string;
+
+/**
+ * one-pop-api HTTP 어댑터. 스키마: packages/pop/src/infrastructure/openapi.json
+ *   POST   /wallets                 (Bearer JWT)      → {address}
+ *   POST   /wallets/private-key      (oauth_token 본문) → {address,private_key}
+ *   GET    /drops                    (Bearer JWT)      → 수령 인박스
+ *   POST   /drops/reject             (Bearer JWT)      → 인박스에서 숨김
+ *   GET    /envelopes                (공개)            → 카드 디자인
+ *   GET    /leaderboards?token=      (공개)            → pending 상위
+ *   GET    /histories                (Bearer JWT)      → 온체인 이벤트
+ *   GET|POST|DELETE /x-connections   (Bearer JWT)      → X 연결
+ *   POST   /batch-claim-signature    (Bearer JWT)      → ValidatorClaim 서명
+ *
+ * base URL은 미지정 시 환경변수로 결정(getOnePopApiBaseUrl).
+ * wei-scale 값은 응답의 10진 문자열 → BigInt로 변환해 내보낸다(CLAUDE.md §4).
+ */
+interface HttpSafeDropApiAdapterOptions {
+    /** 미지정 시 환경변수(VITE_/NEXT_PUBLIC_ONE_POP_*)로 결정. */
+    baseUrl?: string;
+    /** SIWE JWT 공급자. Bearer 인증이 필요한 모든 호출이 사용한다. */
+    getJwt?: () => string | undefined | Promise<string | undefined>;
+    /** 테스트/SSR용 fetch 주입. 기본 globalThis.fetch. */
+    fetchImpl?: typeof fetch;
+    /** 엔드포인트 경로 override. 기본 DEFAULT_POP_API_PATHS. */
+    paths?: Partial<PopApiPaths>;
+}
+declare class HttpSafeDropApiAdapter implements SafeDropApiPort {
+    private readonly baseUrl;
+    private readonly fetchImpl;
+    private readonly getJwt?;
+    private readonly paths;
+    constructor(options?: HttpSafeDropApiAdapterOptions);
+    createClaimWallet(params: {
+        sender: Address;
+        recipient: SocialIdentifier;
+    }): Promise<{
+        claimAddress: Address;
+        id: Id;
+        isMapped: boolean;
+    }>;
+    recordDropMetadata(params: {
+        txHash: Hex;
+        message?: string;
+        envelopeId?: string;
+    }): Promise<void>;
+    retrieveClaimKey(params: {
+        claimAddress: Address;
+        senderAddress: Address;
+        oauth: OAuthProof;
+    }): Promise<{
+        isMapped: true;
+    } | {
+        isMapped: false;
+        claimKey: Hex;
+        claimAddress: Address;
+    }>;
+    listDrops(params: {
+        token: Address;
+        dropKey?: Hex;
+    }): Promise<DropInbox>;
+    rejectDrops(params: {
+        dropIds: readonly number[];
+    }): Promise<number>;
+    listEnvelopes(params?: {
+        locale?: string;
+    }): Promise<readonly Envelope[]>;
+    getLeaderboard(params: {
+        token: Address;
+        page?: number;
+        pageSize?: number;
+        identifier?: string;
+    }): Promise<LeaderboardPage>;
+    getMyLeaderboardEntry(params: {
+        token: Address;
+    }): Promise<MyLeaderboardEntry>;
+    listHistories(params: {
+        type: HistoryType;
+        token?: Address;
+        status?: HistoryStatus;
+        rejected?: boolean;
+        page?: number;
+        pageSize?: number;
+    }): Promise<HistoryPage>;
+    getXConnection(): Promise<XConnection | null>;
+    connectX(params: {
+        oauth: OAuthProof;
+    }): Promise<XConnection>;
+    disconnectX(): Promise<void>;
+    submitFeedback(params: {
+        dropId: number;
+        message: string;
+    }): Promise<string>;
+    setRevealYou(params: {
+        revealYou: boolean;
+    }): Promise<boolean>;
+    requestRecipientChangeSignature(params: {
+        id: Id;
+        oauth: OAuthProof;
+        nonce: bigint;
+        deadline: bigint;
+    }): Promise<RecipientChangeSignature>;
+    requestRecipientResetSignature(params: {
+        id: Id;
+        oauth: OAuthProof;
+        nonce: bigint;
+        deadline: bigint;
+    }): Promise<RecipientSignature>;
+    requestBatchClaimSignature(params: {
+        id: Id;
+        oauth: OAuthProof;
+        nonce: bigint;
+        deadline: bigint;
+    }): Promise<BatchClaimSignature>;
+    private request;
+}
+
+/**
+ * cross-auth SIWE 로그인 클라이언트. createClaimWallet에 필요한 플랫폼 JWT를 얻는다.
+ *   1) unsignedHash(chainId, address) → { hash, message }
+ *   2) 앱이 지갑으로 message 서명(signMessage)
+ *   3) siweToken(address, signature) → { token, refresh }
+ *
+ * 서명은 앱(wagmi/walletClient)이 수행 — 이 클라이언트는 HTTP만 담당한다.
+ * domain은 cross-auth가 SIWE domain으로 사용(기본 window.location.origin).
+ */
+interface CrossAuthClientOptions {
+    /** 미지정 시 환경변수(VITE_/NEXT_PUBLIC_CROSS_AUTH_URL) 또는 dev 기본값. */
+    baseUrl?: string;
+    /** SIWE domain. 미지정 시 globalThis.location.origin. */
+    domain?: string;
+    fetchImpl?: typeof fetch;
+}
+declare class CrossAuthClient {
+    private readonly baseUrl;
+    private readonly domain;
+    private readonly fetchImpl;
+    constructor(options?: CrossAuthClientOptions);
+    /** SIWE 서명 대상 메시지 발급. cross-auth 필드는 snake_case `chain_id`. */
+    unsignedHash(chainId: number, address: string): Promise<{
+        hash: string;
+        message: string;
+    }>;
+    /** 서명 → 플랫폼 JWT 교환. */
+    siweToken(address: string, signature: string): Promise<{
+        token: string;
+        refresh: string;
+    }>;
+    private post;
+}
+
+interface Pkce {
+    verifier: string;
+    challenge: string;
+    method: 'S256';
+}
+/** code_verifier(43자) + S256 code_challenge 생성. */
+declare function generatePkce(): Promise<Pkce>;
+/** CSRF 방지용 state (base64url 22자). */
+declare function generateState(): string;
+
+/**
+ * X OAuth2 프록시 어댑터. 앱의 same-origin Next 라우트를 호출한다(one-pop-fe와 동일 계약).
+ *   POST {tokenPath}  { clientId, redirectUri, code, verifier } → X 토큰 응답(access_token)
+ *   GET  {mePath}     Authorization: Bearer <token>            → GET /2/users/me ({ data: { username } })
+ *
+ * 프록시가 grant_type/Basic auth 조립과 X API 응답 전달을 담당한다. 다르면 옵션으로 경로만 조정.
+ */
+interface HttpXAuthAdapterOptions {
+    /** 프록시 base URL. 기본 '' (same-origin 상대경로). */
+    baseUrl?: string;
+    /** 토큰 교환 프록시 경로. 기본 '/api/x/token'. */
+    tokenPath?: string;
+    /** 핸들 조회 프록시 경로. 기본 '/api/x/me'. */
+    mePath?: string;
+    fetchImpl?: typeof fetch;
+}
+declare class HttpXAuthAdapter implements XAuthPort {
+    private readonly baseUrl;
+    private readonly tokenPath;
+    private readonly mePath;
+    private readonly fetchImpl;
+    constructor(options?: HttpXAuthAdapterOptions);
+    exchangeCode(params: {
+        clientId: string;
+        redirectUri: string;
+        code: string;
+        codeVerifier: string;
+    }): Promise<XTokenResult>;
+    getHandle(accessToken: string): Promise<{
+        handle: string;
+    }>;
+    private call;
+}
+
+/** verifier/state 임시 보관. 기본은 sessionStorage 어댑터. */
+interface SessionStore {
+    get(key: string): string | null;
+    set(key: string, value: string): void;
+    remove(key: string): void;
+}
+interface XAuthClientOptions {
+    clientId: string;
+    redirectUri: string;
+    /** 기본 'tweet.read users.read offline.access' (GET /2/users/me + refresh token). */
+    scope?: string;
+    /** 기본 X authorize 엔드포인트. */
+    authorizeUrl?: string;
+    /** 토큰 교환/핸들 조회 프록시 어댑터. */
+    port: XAuthPort;
+    /** 기본 globalThis.sessionStorage 어댑터. */
+    storage?: SessionStore;
+}
+/**
+ * X OAuth2 PKCE 플로우. UI/리다이렉트는 앱이 담당한다:
+ *   const { authorizeUrl } = await xauth.start(); location.assign(authorizeUrl);
+ *   // 콜백에서:
+ *   const { oauth, handle } = await xauth.complete(location.href);
+ *   await safeDrop.retrieveClaimKey({ senderAddress, oauth });
+ */
+declare class XAuthClient {
+    private readonly opts;
+    constructor(options: XAuthClientOptions);
+    /** PKCE·state 생성·저장 후 X authorize URL 반환. 리다이렉트는 호출자 몫. */
+    start(): Promise<{
+        authorizeUrl: string;
+        state: string;
+    }>;
+    /** 콜백 URL에서 code/state 추출 → state 검증 → 토큰 교환 → 핸들 조회. */
+    complete(callbackUrl: string): Promise<{
+        oauth: OAuthProof;
+        handle: string;
+    }>;
+}
+
+export { CrossAuthClient as C, DEFAULT_POP_API_PATHS as D, type HttpSafeDropApiAdapterOptions as H, ONE_POP_BPS_DENOMINATOR as O, type Pkce as P, type SessionStore as S, XAuthClient as X, type CrossAuthClientOptions as a, HttpSafeDropApiAdapter as b, HttpXAuthAdapter as c, type HttpXAuthAdapterOptions as d, ONE_POP_DEPLOYMENTS as e, ONE_POP_FEE_BPS as f, type PopApiPaths as g, type PopContracts as h, type PopDeployment as i, type PopEnvironment as j, type XAuthClientOptions as k, generatePkce as l, generateState as m, getCrossAuthBaseUrl as n, getOnePopApiBaseUrl as o, getOnePopContracts as p, getOnePopDeployment as q, getPopEnvironment as r, resolvePopEnvironment as s };

package/dist/index.d.ts

@@ -1,5 +1,7 @@
-import { S as SafeDropChainPort, a as SafeDropApiPort, C as CryptoPort, D as DepositParams, b as DepositResult, B as BatchClaimParams, c as BatchClaimResult, d as ClaimSignerPort, W as WithdrawParams, e as WithdrawResult, R as RefundParams, f as RefundResult, A as Address, g as Secret } from './createSafeDrop-DtWLupoE.js';
-export { h as BatchClaimSignature, i as DropInbox, j as DropSender, k as DropState, E as Envelope, H as Hex, l as HistoryEntry, m as HistoryPage, n as HistoryParty, o as HistoryReceiverParty, p as HistoryStatus, q as HistoryType, I as Id, L as LeaderboardEntry, r as LeaderboardPage, M as MappedDepositResult, s as MyLeaderboardEntry, O as OAuthProof, t as OnePopDrop, P as PendingDrop, u as RecipientChangeSignature, v as RecipientSignature, w as SafeDrop, x as SafeDropConfig, y as SafeDropDeps, z as SafeDropError, F as SafeDropErrorCode, G as SecretHash, J as SocialIdentifier, K as SocialProvider, U as UnmappedDepositResult, X as XConnection, N as createSafeDrop } from './createSafeDrop-DtWLupoE.js';
+import { m as SafeDropApiPort, D as DepositParams, b as DepositResult, B as BatchClaimParams, k as BatchClaimResult, W as WithdrawParams, c as WithdrawResult, R as RefundParams, d as RefundResult, A as Address, S as Secret } from './SafeDropApiPort-BLewfSaK.js';
+export { l as BatchClaimSignature, e as DropInbox, n as DropSender, E as Envelope, H as Hex, o as HistoryEntry, h as HistoryPage, p as HistoryParty, q as HistoryReceiverParty, g as HistoryStatus, f as HistoryType, I as Id, r as LeaderboardEntry, L as LeaderboardPage, s as MappedDepositResult, M as MyLeaderboardEntry, O as OAuthProof, P as PendingDrop, i as RecipientChangeSignature, j as RecipientSignature, t as SafeDropError, u as SafeDropErrorCode, a as SecretHash, v as SocialIdentifier, w as SocialProvider, U as UnmappedDepositResult, X as XConnection } from './SafeDropApiPort-BLewfSaK.js';
+import { a as SafeDropChainPort, C as CryptoPort, b as ClaimSignerPort } from './createSafeDrop-DfiY8vHq.js';
+export { D as DropState, O as OnePopDrop, S as SafeDrop, c as SafeDropConfig, d as SafeDropDeps, e as createSafeDrop } from './createSafeDrop-DfiY8vHq.js';
 export { X as XAuthPort, a as XTokenResult } from './XAuthPort-BNJePosj.js';
 
 /**

package/dist/index.js

@@ -1 +1 @@
-import{a as r,b as e,c as o,d as t,e as p,f as a,g as s,h as i,i as f,j as n,k as m}from"./chunk-SX7PPVTJ.js";export{i as BatchClaimUseCase,s as DepositUseCase,n as RefundUseCase,r as SafeDropError,f as WithdrawUseCase,a as buildComposeUrl,p as buildDmText,o as buildWithdrawLink,m as createSafeDrop,e as normalizeHandle,t as parseWithdrawLink};
+import{a as e,b as o,c as t,d as p,e as a,f as s,g as i,h as f,i as n,j as m}from"./chunk-GS7GCYQD.js";import{a as r}from"./chunk-5DT3H2VX.js";export{i as BatchClaimUseCase,s as DepositUseCase,n as RefundUseCase,r as SafeDropError,f as WithdrawUseCase,a as buildComposeUrl,p as buildDmText,o as buildWithdrawLink,m as createSafeDrop,e as normalizeHandle,t as parseWithdrawLink};

package/dist/react/index.d.ts

@@ -1,6 +1,7 @@
 import * as react from 'react';
 import { ReactNode } from 'react';
-import { w as SafeDrop } from '../createSafeDrop-DtWLupoE.js';
+import { S as SafeDrop } from '../createSafeDrop-DfiY8vHq.js';
+import '../SafeDropApiPort-BLewfSaK.js';
 
 interface SafeDropProviderProps {
     client: SafeDrop;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexus-cross/pop",
-  "version": "1.4.0-beta.6",
+  "version": "2.4.0-beta.2",
   "description": "pop — framework-agnostic core + React adapter.",
   "type": "module",
   "main": "./dist/index.js",
@@ -18,6 +18,10 @@
       "types": "./dist/adapters/index.d.ts",
       "import": "./dist/adapters/index.js"
     },
+    "./api": {
+      "types": "./dist/api/index.d.ts",
+      "import": "./dist/api/index.js"
+    },
     "./AGENTS.md": "./AGENTS.md",
     "./openapi.json": "./src/infrastructure/openapi.json"
   },

package/dist/chunk-SX7PPVTJ.js

@@ -1 +0,0 @@
-var i=class extends Error{constructor(e,r,n){super(r),this.name="SafeDropError",this.code=e,this.details=n}};function g(a){return a.trim().replace(/^@/,"").toLowerCase()}function w(a){let e=a.baseUrl.replace(/\/$/,""),r=e.includes("?")?"&":"?",n=a.claimAddress?`&claim=${encodeURIComponent(a.claimAddress)}`:"",s=`${e}${r}sender=${encodeURIComponent(a.sender)}${n}`;return a.secret?`${s}#${encodeURIComponent(a.secret)}`:s}function b(a){let e=a.indexOf("#"),r=e===-1?a:a.slice(0,e),n=e===-1?"":a.slice(e+1),s=r.indexOf("?"),d=s===-1?"":r.slice(s+1);return{sender:A(d,"sender"),secret:n?decodeURIComponent(n):null}}function H(a){return`\u{1F381} You've received a one-pop drop! Claim your tokens here: ${a}`}function M(a,e){let r=[`text=${encodeURIComponent(a)}`];return e&&r.push(`recipient_id=${encodeURIComponent(e)}`),`https://x.com/messages/compose?${r.join("&")}`}function A(a,e){if(!a)return null;for(let r of a.split("&")){if(!r)continue;let n=r.indexOf("=");if(decodeURIComponent(n===-1?r:r.slice(0,n))===e)return decodeURIComponent(n===-1?"":r.slice(n+1))}return null}var y=class{constructor(e,r,n,s){this.chain=e;this.api=r;this.crypto=n;this.claimBaseUrl=s}async execute(e){if(!e.sender)throw new i("MISSING_SENDER","sender address is required");if(!e.recipient?.handle)throw new i("MISSING_RECIPIENT","recipient social handle is required");if(!e.token)throw new i("INVALID_TOKEN","token address is required (ERC20 only)");if(e.amount<=0n)throw new i("INVALID_AMOUNT","amount must be a positive BigInt");if(e.message&&[...e.message].length>140)throw new i("INVALID_PARAM","message must be <= 140 runes");let r=g(e.recipient.handle);if(!r)throw new i("MISSING_RECIPIENT","recipient handle normalizes to empty");let n=await this.api.createClaimWallet({sender:e.sender,recipient:{...e.recipient,handle:r}}),s=n.id,d=async m=>{if(this.api.recordDropMetadata)try{await this.api.recordDropMetadata({txHash:m,message:e.message,envelopeId:e.envelopeId})}catch(c){if(c instanceof i&&c.details?.codeName==="ENVELOPE_NOT_FOUND"&&e.envelopeId)try{await this.api.recordDropMetadata({txHash:m,message:e.message})}catch{}}};if(n.isMapped){let{txHash:m,dropKey:c}=await this.chain.depositMapped({token:e.token,amount:e.amount,id:s,onSubmitted:d});return{isMapped:!0,dropKey:c,depositTxHash:m}}let o=e.secret??this.crypto.randomSecret();if(!o)throw new i("MISSING_SECRET","secret is empty");let t=this.crypto.keccak256(o),l={claimAddress:n.claimAddress,token:e.token,amount:e.amount,id:s,secretHash:t,onSubmitted:d},{txHash:h,dropKey:u}=await this.chain.depositWithPermit(l);return{isMapped:!1,dropKey:u,claimAddress:n.claimAddress,secretHash:t,withdrawLink:w({baseUrl:this.claimBaseUrl,sender:e.sender,claimAddress:n.claimAddress,secret:o}),depositTxHash:h}}};var N=BigInt(1800),x=30,f=class{constructor(e,r,n,s=()=>Date.now()){this.chain=e;this.api=r;this.crypto=n;this.now=s}async execute(e){let r=g(e.id);if(!r)throw new i("MISSING_RECIPIENT","batchClaim requires an id");if(!e.claimAddress)throw new i("MISSING_CLAIM_ADDRESS","claim address is required");if(!e.sponsor)throw new i("MISSING_SENDER","sponsor address is required");if(!e.claimKey)throw new i("MISSING_CLAIM_KEY","claim key is required");if(!e.secret)throw new i("MISSING_SECRET","secret is required");if(!this.api.requestBatchClaimSignature)throw new i("API_ERROR","requestBatchClaimSignature is not implemented");if(!this.chain.getValidatorNonce||!this.chain.getValidatorClaimDigest||!this.chain.getValidator)throw new i("CHAIN_ERROR","validator reads are not implemented");let n=await this.chain.getDropKeyByClaimAddress(e.claimAddress,e.sponsor);if(!n)throw new i("DROP_NOT_FOUND","anchor drop not found");let s=await this.chain.getDropByKey(n);if(!s||s.id!==r)throw new i("DROP_NOT_FOUND","anchor drop id does not match");let d=await this.chain.getPendingDropsById({id:r});if(!d.length)throw new i("DROP_NOT_FOUND",`No pending drops for ${r}`);let o=e.maxCount??x;if(!Number.isSafeInteger(o)||o<=0)throw new i("INVALID_PARAM","maxCount must be a positive safe integer");let t=e.deadline??BigInt(Math.floor(this.now()/1e3))+(e.deadlineTtlSeconds??N),l=[],h="",u=BigInt(0);for(;d.length;){let m=await this.chain.getValidatorNonce({id:r}),c=await this.api.requestBatchClaimSignature({id:r,oauth:e.oauth,nonce:m,deadline:t});if(e.recipient&&e.recipient.toLowerCase()!==c.recipient.toLowerCase())throw new i("SIGN_FAILED","validator signature is bound to a different recipient");if(h&&h.toLowerCase()!==c.recipient.toLowerCase())throw new i("SIGN_FAILED","validator recipient changed between batches");h=c.recipient,l.length||(u=c.nonce);let I=await this.chain.getValidatorClaimDigest({recipient:h,id:r,nonce:c.nonce,deadline:c.deadline});await this.assertSignedByValidator(I,c.signature);let R=d.length,C=await this.chain.withdrawUnmappedBatchByKeys({claimKey:e.claimKey,recipient:h,id:r,anchorDropKey:n,secret:e.secret,nonce:c.nonce,deadline:c.deadline,dropKeys:d.slice(0,o).map(P=>P.dropKey).filter(P=>P.toLowerCase()!==n.toLowerCase()),validatorSignature:c.signature});if(l.push(C),d=await this.chain.getPendingDropsById({id:r}),d.length>=R)throw new i("CHAIN_ERROR","batch claim made no progress",{id:r,txHash:C})}return{txHashes:l,recipient:h,id:r,nonce:u,deadline:t}}async assertSignedByValidator(e,r){if(!this.crypto.recoverAddress||!this.chain.getValidator)return;let[n,s]=await Promise.all([this.crypto.recoverAddress({digest:e,signature:r}),this.chain.getValidator()]);if(n.toLowerCase()!==s.toLowerCase())throw new i("SIGN_FAILED","batch-claim signature does not recover to validator")}};var D=class{constructor(e,r){this.chain=e;this.signer=r}async execute(e){if(!e.recipient)throw new i("MISSING_RECIPIENT","recipient address is required");if(!e.claimAddress)throw new i("MISSING_CLAIM_ADDRESS","claim address is required");if(!e.secret)throw new i("MISSING_SECRET","secret is required");if(!e.claimKey)throw new i("MISSING_CLAIM_KEY","claim key is required");if(!e.sponsor)throw new i("MISSING_SENDER","sponsor address is required");let r=await this.chain.getDropKeyByClaimAddress(e.claimAddress,e.sponsor);if(!r)throw new i("DROP_NOT_FOUND",`No drop for claim address ${e.claimAddress}`);let n=await this.chain.getDropByKey(r);if(!n)throw new i("DROP_NOT_FOUND",`No drop for key ${r}`);let s=await this.chain.getClaimDigest({recipient:e.recipient,id:n.id,dropKey:r}),d=await this.signer.signDigest({claimKey:e.claimKey,digest:s});return{txHash:await this.chain.withdrawUnmapped({claimKey:e.claimKey,recipient:e.recipient,id:n.id,dropKey:r,signature:d,secret:e.secret})}}};var S=class{constructor(e){this.chain=e}async execute(e){if(!e.claimAddress)throw new i("MISSING_CLAIM_ADDRESS","claim address is required");if(!e.sponsor)throw new i("MISSING_SENDER","sponsor address is required");let r=await this.chain.getDropKeyByClaimAddress(e.claimAddress,e.sponsor);if(!r)throw new i("DROP_NOT_FOUND",`No drop for claim address ${e.claimAddress}`);return{txHash:await this.chain.refundByKey({dropKey:r})}}};function p(a,e){if(!a)throw new i("API_ERROR",`SafeDropApiPort.${e} is not implemented by the injected api adapter`);return a}function z(a,e){let r=new y(e.chain,e.api,e.crypto,a.claimBaseUrl),n=new D(e.chain,e.signer),s=new S(e.chain),d=new f(e.chain,e.api,e.crypto),{api:o}=e;return{config:a,deposit:t=>r.execute(t),retrieveClaimKey:t=>o.retrieveClaimKey(t),withdraw:t=>n.execute(t),refund:t=>s.execute(t),getDrop:(t,l)=>e.chain.getDrop(t,l),getDropByKey:t=>e.chain.getDropByKey(t),getDropKeyByClaimAddress:(t,l)=>e.chain.getDropKeyByClaimAddress(t,l),getClaimedRecipient:t=>e.chain.getClaimedRecipient({id:t}),getPendingDropsById:t=>e.chain.getPendingDropsById({id:t}),getPendingDropsByRecipient:t=>e.chain.getPendingDropsByRecipient({recipient:t}),getPendingDropsBySponsor:t=>e.chain.getPendingDropsBySponsor({sponsor:t}),withdrawUnmapped:t=>e.chain.withdrawUnmapped(t),withdrawMapped:t=>e.chain.withdrawMapped(t),batchWithdrawMapped:t=>e.chain.batchWithdrawMapped({count:t}),batchWithdrawMappedByKeys:t=>e.chain.batchWithdrawMappedByKeys({dropKeys:t}),refundByKey:t=>e.chain.refundByKey({dropKey:t}),getChangeNonce:t=>e.chain.getChangeNonce({id:t}),getPendingRecipientChange:t=>e.chain.getPendingRecipientChange({id:t}),requestRecipientChange:(t,l)=>e.chain.requestRecipientChange({id:t,newRecipient:l}),completeRecipientChange:t=>e.chain.completeRecipientChange(t),cancelRecipientChange:t=>e.chain.cancelRecipientChange({id:t}),resetRecipient:t=>e.chain.resetRecipient(t),listDrops:t=>p(o.listDrops,"listDrops").call(o,t),rejectDrops:t=>p(o.rejectDrops,"rejectDrops").call(o,{dropIds:t}),listEnvelopes:t=>p(o.listEnvelopes,"listEnvelopes").call(o,t),getLeaderboard:t=>p(o.getLeaderboard,"getLeaderboard").call(o,t),getMyLeaderboardEntry:t=>p(o.getMyLeaderboardEntry,"getMyLeaderboardEntry").call(o,t),listHistories:t=>p(o.listHistories,"listHistories").call(o,t),getXConnection:()=>p(o.getXConnection,"getXConnection").call(o),connectX:t=>p(o.connectX,"connectX").call(o,t),disconnectX:()=>p(o.disconnectX,"disconnectX").call(o),submitFeedback:t=>p(o.submitFeedback,"submitFeedback").call(o,t),setRevealYou:t=>p(o.setRevealYou,"setRevealYou").call(o,{revealYou:t}),requestRecipientChangeSignature:t=>p(o.requestRecipientChangeSignature,"requestRecipientChangeSignature").call(o,t),requestRecipientResetSignature:t=>p(o.requestRecipientResetSignature,"requestRecipientResetSignature").call(o,t),batchClaim:t=>d.execute(t),requestBatchClaimSignature:t=>p(o.requestBatchClaimSignature,"requestBatchClaimSignature").call(o,t)}}export{i as a,g as b,w as c,b as d,H as e,M as f,y as g,f as h,D as i,S as j,z as k};