@oasisprotocol/privana-sdk 0.3.0 → 0.4.0

package/dist/chunk-RDMJGMI3.cjs

@@ -0,0 +1,1757 @@
+"use client";
+'use strict';
+
+var react = require('react');
+var wagmi = require('wagmi');
+var actions = require('wagmi/actions');
+var siwe = require('viem/siwe');
+var jsxRuntime = require('react/jsx-runtime');
+var viem = require('viem');
+var reactQuery = require('@tanstack/react-query');
+var reactSlot = require('@radix-ui/react-slot');
+var classVarianceAuthority = require('class-variance-authority');
+var clsx = require('clsx');
+var tailwindMerge = require('tailwind-merge');
+var actions$1 = require('viem/actions');
+
+// ../../shared/config.json
+var config_default = {
+  chains: [
+    {
+      id: 84532,
+      name: "Base Sepolia",
+      explorerUrl: "https://sepolia.basescan.org"
+    },
+    {
+      id: 11155111,
+      name: "Ethereum Sepolia",
+      explorerUrl: "https://sepolia.etherscan.io"
+    }
+  ],
+  networks: {
+    testnet: {
+      chainId: 23295,
+      name: "Sapphire Testnet",
+      accountingContract: "0xaF8e5de153A584528B57DD4B9B0195956BBDF571",
+      apiUrl: "https://testnet.privana.finance"
+    },
+    mainnet: {
+      chainId: 23294,
+      name: "Sapphire Mainnet",
+      accountingContract: "0x0000000000000000000000000000000000000000",
+      apiUrl: ""
+    }
+  }
+};
+
+// src/sdk/types/common.ts
+var NETWORK_CONFIG = {
+  testnet: {
+    ...config_default.networks.testnet,
+    accountingContract: config_default.networks.testnet.accountingContract
+  },
+  mainnet: {
+    ...config_default.networks.mainnet,
+    accountingContract: config_default.networks.mainnet.accountingContract
+  }
+};
+function getChainId(network) {
+  return NETWORK_CONFIG[network].chainId;
+}
+function getAccountingContract(network) {
+  return NETWORK_CONFIG[network].accountingContract;
+}
+function getApiUrl(network) {
+  return NETWORK_CONFIG[network].apiUrl;
+}
+function normalizeHex(value) {
+  const normalized = value.trim().toLowerCase();
+  return normalized.startsWith("0x") ? normalized : `0x${normalized}`;
+}
+function normalizeAddress(value) {
+  return normalizeHex(value);
+}
+
+// src/sdk/types/chains.ts
+var SUPPORTED_CHAINS = config_default.chains.map((chain) => ({
+  id: chain.id,
+  name: chain.name,
+  explorerUrl: chain.explorerUrl
+}));
+function getChainById(chainId) {
+  return SUPPORTED_CHAINS.find((c) => c.id === chainId);
+}
+function getExplorerAddressUrl(chainId, address) {
+  const chain = getChainById(chainId);
+  if (!chain) return void 0;
+  return `${chain.explorerUrl}/address/${address}#tokentxns`;
+}
+
+// src/sdk/auth/hosted-auth.ts
+var HOSTED_AUTH_CLOCK_SKEW_MS = 3e4;
+var PKCE_CHARSET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~";
+var DEFAULT_RANDOM_LENGTH = 64;
+var HOSTED_AUTH_CALLBACK_QUERY_KEYS = ["code", "error", "error_description", "state"];
+function randomString(length) {
+  const values = new Uint8Array(length);
+  crypto.getRandomValues(values);
+  let output = "";
+  for (const value of values) {
+    output += PKCE_CHARSET[value % PKCE_CHARSET.length];
+  }
+  return output;
+}
+function toBase64Url(bytes) {
+  let binary = "";
+  bytes.forEach((byte) => {
+    binary += String.fromCharCode(byte);
+  });
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
+}
+function createPkceVerifier(length = DEFAULT_RANDOM_LENGTH) {
+  return randomString(length);
+}
+async function createPkceChallenge(verifier) {
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(verifier));
+  return toBase64Url(new Uint8Array(digest));
+}
+function createHostedAuthState(length = DEFAULT_RANDOM_LENGTH) {
+  return randomString(length);
+}
+function createHostedAuthStorageKey(apiUrl, config) {
+  const normalizedApiUrl = apiUrl.replace(/\/$/, "");
+  return [
+    "privana",
+    "hosted-auth",
+    normalizedApiUrl,
+    config.clientId.trim(),
+    config.redirectUri.trim()
+  ].join(":");
+}
+function createHostedAuthPendingStorageKey(apiUrl, config) {
+  return `${createHostedAuthStorageKey(apiUrl, config)}:pending`;
+}
+function persistHostedAuthPendingTransaction(storage, key, transaction) {
+  storage.setItem(key, JSON.stringify(transaction));
+}
+function readHostedAuthPendingTransaction(storage, key) {
+  const raw = storage.getItem(key);
+  if (!raw) return null;
+  try {
+    const parsed = JSON.parse(raw);
+    if (typeof parsed.codeVerifier !== "string" || typeof parsed.state !== "string") {
+      return null;
+    }
+    return {
+      codeVerifier: parsed.codeVerifier,
+      state: parsed.state
+    };
+  } catch {
+    return null;
+  }
+}
+function clearHostedAuthPendingTransaction(storage, key) {
+  storage.removeItem(key);
+}
+function parseHostedAuthCallback(url, redirectUri) {
+  const expectedUrl = new URL(redirectUri);
+  if (url.origin !== expectedUrl.origin || url.pathname !== expectedUrl.pathname) {
+    return null;
+  }
+  const code = url.searchParams.get("code");
+  if (code) {
+    return {
+      code,
+      state: url.searchParams.get("state")
+    };
+  }
+  const error = url.searchParams.get("error");
+  if (error) {
+    return {
+      error,
+      errorDescription: url.searchParams.get("error_description") ?? void 0,
+      state: url.searchParams.get("state")
+    };
+  }
+  return null;
+}
+function stripHostedAuthCallbackParams(url) {
+  const nextUrl = new URL(url.toString());
+  HOSTED_AUTH_CALLBACK_QUERY_KEYS.forEach((key) => {
+    nextUrl.searchParams.delete(key);
+  });
+  return `${nextUrl.pathname}${nextUrl.search}${nextUrl.hash}`;
+}
+function buildHostedAuthSession(response, config, now = Date.now()) {
+  return {
+    accessToken: response.access_token,
+    refreshToken: response.refresh_token,
+    idToken: response.id_token,
+    tokenType: response.token_type,
+    address: response.address,
+    clientId: config.clientId,
+    redirectUri: config.redirectUri,
+    expiresAt: now + response.expires_in * 1e3,
+    refreshExpiresAt: now + response.refresh_expires_in * 1e3
+  };
+}
+function applyRefreshResponse(session, response, now = Date.now()) {
+  return {
+    ...session,
+    accessToken: response.token,
+    refreshToken: response.refresh_token,
+    expiresAt: now + response.expires_in * 1e3,
+    refreshExpiresAt: now + response.refresh_expires_in * 1e3
+  };
+}
+function isHostedAuthSessionActive(session, now = Date.now(), skewMs = HOSTED_AUTH_CLOCK_SKEW_MS) {
+  return session.expiresAt > now + skewMs;
+}
+function isHostedAuthRefreshActive(session, now = Date.now(), skewMs = HOSTED_AUTH_CLOCK_SKEW_MS) {
+  return session.refreshExpiresAt > now + skewMs;
+}
+
+// src/sdk/client/errors.ts
+var AccountingApiError = class _AccountingApiError extends Error {
+  constructor(message, statusCode, detail) {
+    super(message);
+    this.statusCode = statusCode;
+    this.detail = detail;
+    this.name = "AccountingApiError";
+    Object.setPrototypeOf(this, _AccountingApiError.prototype);
+  }
+};
+var NetworkError = class _NetworkError extends Error {
+  constructor(message, cause) {
+    super(message);
+    this.cause = cause;
+    this.name = "NetworkError";
+    Object.setPrototypeOf(this, _NetworkError.prototype);
+  }
+};
+var ValidationError = class _ValidationError extends Error {
+  constructor(message, field) {
+    super(message);
+    this.field = field;
+    this.name = "ValidationError";
+    Object.setPrototypeOf(this, _ValidationError.prototype);
+  }
+};
+var HostedAuthError = class _HostedAuthError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "HostedAuthError";
+    Object.setPrototypeOf(this, _HostedAuthError.prototype);
+  }
+};
+var HostedAuthRequiredError = class _HostedAuthRequiredError extends HostedAuthError {
+  constructor(message = "Hosted redirect authentication is required. Start login with useHostedRedirectAuth().") {
+    super(message);
+    this.name = "HostedAuthRequiredError";
+    Object.setPrototypeOf(this, _HostedAuthRequiredError.prototype);
+  }
+};
+var HostedAuthStateMismatchError = class _HostedAuthStateMismatchError extends HostedAuthError {
+  constructor(message = "Hosted authentication returned an invalid state value.") {
+    super(message);
+    this.name = "HostedAuthStateMismatchError";
+    Object.setPrototypeOf(this, _HostedAuthStateMismatchError.prototype);
+  }
+};
+
+// src/sdk/client/http-client.ts
+var HttpClient = class {
+  constructor(config) {
+    this.baseUrl = config.baseUrl.replace(/\/$/, "");
+    this.timeout = config.timeout ?? 3e4;
+    this.headers = {
+      "Content-Type": "application/json",
+      ...config.headers
+    };
+  }
+  async get(path) {
+    return this.request("GET", path);
+  }
+  async post(path, body) {
+    return this.request("POST", path, body);
+  }
+  getBaseUrl() {
+    return this.baseUrl;
+  }
+  setHeader(name, value) {
+    this.headers[name] = value;
+  }
+  removeHeader(name) {
+    delete this.headers[name];
+  }
+  getHeader(name) {
+    return this.headers[name];
+  }
+  async request(method, path, body) {
+    const url = `${this.baseUrl}${path}`;
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+    try {
+      const response = await fetch(url, {
+        method,
+        headers: this.headers,
+        body: body ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+      clearTimeout(timeoutId);
+      if (!response.ok) {
+        let detail;
+        try {
+          const errorBody = await response.json();
+          detail = errorBody.detail || errorBody.error_description || errorBody.message;
+        } catch {
+          detail = await response.text().catch(() => void 0);
+        }
+        throw new AccountingApiError(
+          `API request failed: ${response.status} ${response.statusText}`,
+          response.status,
+          detail
+        );
+      }
+      return response.json();
+    } catch (error) {
+      clearTimeout(timeoutId);
+      if (error instanceof AccountingApiError) {
+        throw error;
+      }
+      if (error instanceof Error) {
+        if (error.name === "AbortError") {
+          throw new NetworkError(`Request timeout after ${this.timeout}ms`);
+        }
+        throw new NetworkError(`Network request failed: ${error.message}`, error);
+      }
+      throw new NetworkError("Unknown network error occurred");
+    }
+  }
+};
+
+// src/sdk/client/privana-client.ts
+var PRIVATE_READ_TOKEN_HEADER = "X-SIWE-Token";
+var MAX_BATCH_BALANCE_TOKEN_IDS = 100;
+var MAX_HISTORY_PAGE_SIZE = 100;
+var PrivanaClient = class {
+  constructor(config) {
+    this.http = new HttpClient(config);
+  }
+  getBaseUrl() {
+    return this.http.getBaseUrl();
+  }
+  async getDepositAddress(request = {}) {
+    return this.http.post("/v1/accounting/deposits/address", {
+      chain_type: request.chain_type ?? "evm",
+      version: request.version ?? 0
+    });
+  }
+  async checkDeposit(request) {
+    return this.http.post("/v1/accounting/deposits/check", {
+      chain_type: request.chain_type ?? "evm",
+      chain_id: request.chain_id,
+      tx_hash: normalizeHex(request.tx_hash),
+      amount: String(request.amount),
+      log_index: request.log_index ?? 0,
+      version: request.version ?? 0
+    });
+  }
+  async getDepositStatus(depositId) {
+    return this.http.get(`/v1/accounting/deposits/status/${depositId}`);
+  }
+  async getBalance(tokenId) {
+    const token = normalizeHex(tokenId);
+    return this.http.get(`/v1/accounting/balances/${token}`);
+  }
+  async getBatchBalances(request) {
+    if (request.token_ids.length > MAX_BATCH_BALANCE_TOKEN_IDS) {
+      throw new Error(
+        `Batch balance requests support at most ${MAX_BATCH_BALANCE_TOKEN_IDS} token IDs`
+      );
+    }
+    return this.http.post("/v1/accounting/balances/batch", {
+      token_ids: request.token_ids.map((id) => normalizeHex(id))
+    });
+  }
+  async getHistory(request = {}) {
+    const offset = request.offset ?? -1;
+    const limit = request.limit ?? 50;
+    if (!Number.isSafeInteger(offset)) {
+      throw new Error("History offset must be an integer");
+    }
+    if (!Number.isSafeInteger(limit)) {
+      throw new Error("History limit must be an integer");
+    }
+    if (limit < 0 || limit > MAX_HISTORY_PAGE_SIZE) {
+      throw new Error(`History requests support between 0 and ${MAX_HISTORY_PAGE_SIZE} entries`);
+    }
+    const params = new URLSearchParams({
+      offset: String(offset),
+      limit: String(limit)
+    });
+    return this.http.get(`/v1/accounting/history?${params.toString()}`);
+  }
+  async listTokens() {
+    return this.http.get("/v1/accounting/tokens");
+  }
+  async getTokenInfo(tokenId) {
+    const token = normalizeHex(tokenId);
+    return this.http.get(`/v1/accounting/tokens/${token}`);
+  }
+  async lockFunds(request) {
+    return this.http.post("/v1/accounting/funds/lock", {
+      service_address: normalizeAddress(request.service_address),
+      token_id: normalizeHex(request.token_id),
+      amount: String(request.amount),
+      expiry: String(request.expiry),
+      nonce: String(request.nonce),
+      signature: normalizeHex(request.signature)
+    });
+  }
+  async modifyLock(request) {
+    return this.http.post("/v1/accounting/funds/modify-lock", {
+      lock_id: request.lock_id,
+      amount: String(request.amount),
+      new_expiry: String(request.new_expiry),
+      nonce: String(request.nonce),
+      signature: normalizeHex(request.signature)
+    });
+  }
+  async unlockFunds(request) {
+    return this.http.post("/v1/accounting/funds/unlock", {
+      user_address: normalizeAddress(request.user_address),
+      lock_id: request.lock_id
+    });
+  }
+  async unlockAllExpired(request) {
+    return this.http.post(
+      "/v1/accounting/funds/unlock-all-expired",
+      {
+        user_address: normalizeAddress(request.user_address)
+      }
+    );
+  }
+  async getLockedFunds(serviceAddress) {
+    const queryParams = serviceAddress ? `?service_address=${normalizeAddress(serviceAddress)}` : "";
+    return this.http.get(`/v1/accounting/funds/locked${queryParams}`);
+  }
+  async getTotalLockedBalance(tokenId) {
+    const token = normalizeHex(tokenId);
+    return this.http.get(`/v1/accounting/funds/locked/total/${token}`);
+  }
+  async getExpiredLocks() {
+    return this.http.get("/v1/accounting/funds/expired");
+  }
+  async transferFunds(request) {
+    return this.http.post("/v1/accounting/funds/transfer", {
+      to_address: normalizeAddress(request.to_address),
+      token_id: normalizeHex(request.token_id),
+      amount: String(request.amount),
+      nonce: String(request.nonce),
+      signature: normalizeHex(request.signature)
+    });
+  }
+  async getTransferNonce(userAddress) {
+    const user = normalizeAddress(userAddress);
+    return this.http.get(`/v1/accounting/funds/transfer/nonce/${user}`);
+  }
+  async getLockNonce(userAddress) {
+    const user = normalizeAddress(userAddress);
+    return this.http.get(`/v1/accounting/funds/lock/nonce/${user}`);
+  }
+  async getModifyLockNonce(userAddress) {
+    const user = normalizeAddress(userAddress);
+    return this.http.get(`/v1/accounting/funds/modify-lock/nonce/${user}`);
+  }
+  async transferLockedFunds(request) {
+    return this.http.post("/v1/accounting/funds/transfer-locked", {
+      user_address: normalizeAddress(request.user_address),
+      lock_id: request.lock_id,
+      to_address: normalizeAddress(request.to_address),
+      amount: String(request.amount),
+      service_address: normalizeAddress(request.service_address),
+      nonce: String(request.nonce),
+      signature: normalizeHex(request.signature)
+    });
+  }
+  async withdrawFromLock(request) {
+    return this.http.post(
+      "/v1/accounting/funds/withdraw-from-lock",
+      {
+        to_address: normalizeAddress(request.to_address),
+        lock_id: request.lock_id,
+        amount: String(request.amount),
+        nonce: String(request.nonce),
+        signature: normalizeHex(request.signature)
+      }
+    );
+  }
+  async requestWithdrawal(request) {
+    return this.http.post("/v1/accounting/withdraw", {
+      token_id: normalizeHex(request.token_id),
+      amount: String(request.amount),
+      nonce: String(request.nonce),
+      signature: normalizeHex(request.signature)
+    });
+  }
+  async getWithdrawalNonce(userAddress) {
+    const user = normalizeAddress(userAddress);
+    return this.http.get(`/v1/accounting/withdraw/nonce/${user}`);
+  }
+  async getTransferLockedNonce(serviceAddress) {
+    const service = normalizeAddress(serviceAddress);
+    return this.http.get(
+      `/v1/accounting/funds/transfer-locked/nonce/${service}`
+    );
+  }
+  async getPendingWithdrawals(userAddress) {
+    const user = normalizeAddress(userAddress);
+    return this.http.get(`/v1/accounting/withdraw/pending/${user}`);
+  }
+  async getWithdrawalInfo(index) {
+    return this.http.get(`/v1/accounting/withdraw/${index}`);
+  }
+  async getSiweDomain() {
+    return this.http.get("/v1/accounting/auth/domain");
+  }
+  async getSiweNonce(userAddress) {
+    const user = normalizeAddress(userAddress);
+    return this.http.get(`/v1/accounting/auth/nonce?address=${user}`);
+  }
+  async loginWithSiwe(request) {
+    return this.http.post("/v1/accounting/auth/login", {
+      siwe_message: request.siwe_message,
+      signature: normalizeHex(request.signature)
+    });
+  }
+  getHostedAuthAuthorizeUrl(request) {
+    const url = new URL(
+      "v1/accounting/auth/authorize",
+      `${this.http.getBaseUrl().replace(/\/$/, "")}/`
+    );
+    url.searchParams.set("client_id", request.client_id);
+    url.searchParams.set("redirect_uri", request.redirect_uri);
+    url.searchParams.set("code_challenge", request.code_challenge);
+    url.searchParams.set("state", request.state);
+    url.searchParams.set("chain_id", String(request.chain_id));
+    url.searchParams.set("response_mode", request.response_mode ?? "redirect");
+    url.searchParams.set("code_challenge_method", request.code_challenge_method ?? "S256");
+    return url.toString();
+  }
+  async exchangeHostedAuthCode(request) {
+    return this.http.post("/v1/accounting/auth/token", {
+      grant_type: request.grant_type ?? "authorization_code",
+      code: request.code,
+      code_verifier: request.code_verifier,
+      client_id: request.client_id,
+      redirect_uri: request.redirect_uri
+    });
+  }
+  async refreshJwtSession(request) {
+    return this.http.post("/v1/accounting/auth/jwt/refresh", {
+      refresh_token: request.refresh_token
+    });
+  }
+  async logoutJwtSession(request = {}) {
+    return this.http.post("/v1/accounting/auth/jwt/logout", {
+      refresh_token: request.refresh_token,
+      revoke_all: request.revoke_all ?? false
+    });
+  }
+  async signOnRampUrl(request) {
+    return this.http.post("/v1/accounting/onramp/sign-url", {
+      url: request.url
+    });
+  }
+  async createOnRampIntent(request) {
+    return this.http.post("/v1/accounting/onramp/intent", {
+      wallet_address: request.wallet_address ? normalizeAddress(request.wallet_address) : void 0,
+      token_id: normalizeHex(request.token_id),
+      chain_id: request.chain_id,
+      moonpay_currency_code: request.moonpay_currency_code,
+      base_currency_code: request.base_currency_code,
+      base_currency_amount: request.base_currency_amount
+    });
+  }
+  async updateOnRamp(transactionId, request) {
+    return this.http.post(
+      `/v1/accounting/onramp/${encodeURIComponent(transactionId)}`,
+      {
+        wallet_address: request.wallet_address ? normalizeAddress(request.wallet_address) : void 0,
+        token_id: request.token_id ? normalizeHex(request.token_id) : void 0,
+        chain_id: request.chain_id,
+        moonpay_transaction_id: request.moonpay_transaction_id,
+        base_currency_code: request.base_currency_code,
+        base_currency_amount: request.base_currency_amount,
+        quote_currency_amount: request.quote_currency_amount,
+        on_chain_tx_hash: request.on_chain_tx_hash ? normalizeHex(request.on_chain_tx_hash) : void 0,
+        deposit_tx_hash: request.deposit_tx_hash ? normalizeHex(request.deposit_tx_hash) : void 0
+      }
+    );
+  }
+  async getPendingOnRamps() {
+    return this.http.get("/v1/accounting/onramp/pending");
+  }
+  setPrivateReadToken(token) {
+    this.http.removeHeader("Authorization");
+    this.http.setHeader(PRIVATE_READ_TOKEN_HEADER, token);
+  }
+  getPrivateReadToken() {
+    return this.http.getHeader(PRIVATE_READ_TOKEN_HEADER);
+  }
+  clearPrivateReadToken() {
+    this.http.removeHeader(PRIVATE_READ_TOKEN_HEADER);
+  }
+  setBearerToken(token) {
+    this.http.removeHeader(PRIVATE_READ_TOKEN_HEADER);
+    this.http.setHeader("Authorization", `Bearer ${token}`);
+  }
+  clearBearerToken() {
+    this.http.removeHeader("Authorization");
+  }
+};
+var defaultResult = {
+  address: void 0,
+  isConnected: false,
+  status: "disconnected"
+};
+function useSafeAccount() {
+  const context = react.useContext(wagmi.WagmiContext);
+  const cacheRef = react.useRef(defaultResult);
+  const subscribe = react.useCallback(
+    (onChange) => {
+      if (!context) return () => {
+      };
+      return actions.watchAccount(context, { onChange });
+    },
+    [context]
+  );
+  const getSnapshot = react.useCallback(() => {
+    if (!context) return defaultResult;
+    const account = actions.getAccount(context);
+    if (cacheRef.current.address !== account.address || cacheRef.current.isConnected !== account.isConnected || cacheRef.current.status !== account.status) {
+      cacheRef.current = {
+        address: account.address,
+        isConnected: account.isConnected,
+        status: account.status
+      };
+    }
+    return cacheRef.current;
+  }, [context]);
+  const getServerSnapshot = react.useCallback(() => defaultResult, []);
+  return react.useSyncExternalStore(subscribe, getSnapshot, getServerSnapshot);
+}
+
+// src/sdk/hooks/private-read-token-store.ts
+var AUTH_CLOCK_SKEW_MS = 3e4;
+var cache = /* @__PURE__ */ new Map();
+function createScopeKey(apiUrl, chainId, address) {
+  return `${apiUrl.replace(/\/$/, "")}:${chainId}:${address.toLowerCase()}`;
+}
+function getCachedPrivateReadToken(scopeKey) {
+  const cached = cache.get(scopeKey);
+  if (!cached) return null;
+  if (cached.expiresAt <= Date.now() + AUTH_CLOCK_SKEW_MS) {
+    cache.delete(scopeKey);
+    return null;
+  }
+  return cached.token;
+}
+function setCachedPrivateReadToken(scopeKey, token, expiresAt) {
+  cache.set(scopeKey, { token, expiresAt });
+}
+function deleteCachedPrivateReadToken(scopeKey) {
+  cache.delete(scopeKey);
+}
+var DEFAULT_SIWE_VALIDITY_MS = 24 * 60 * 60 * 1e3;
+var DEFAULT_STATEMENT = "Sign in to access your private account data.";
+var AUTH_REFRESH_SKEW_MS = 3e4;
+var SiweAuthContext = react.createContext(null);
+function SiweAuthProvider({
+  children,
+  client,
+  networkConfig,
+  autoLogin = true,
+  statement
+}) {
+  const wagmiContext = react.useContext(wagmi.WagmiContext);
+  const { address, isConnected, status } = useSafeAccount();
+  const [session, setSession] = react.useState(null);
+  const [tokens, setTokens] = react.useState(null);
+  const [isLoading, setIsLoading] = react.useState(false);
+  const [error, setError] = react.useState(null);
+  const [accessTokenExpiresAt, setAccessTokenExpiresAt] = react.useState(null);
+  const loginInFlight = react.useRef(false);
+  const autoAttemptedAddress = react.useRef(null);
+  const refreshInFlight = react.useRef(false);
+  const refreshDataRef = react.useRef(null);
+  const clearSession = react.useCallback(() => {
+    refreshDataRef.current = null;
+    setAccessTokenExpiresAt(null);
+    client.clearPrivateReadToken();
+    client.clearBearerToken();
+    setSession(null);
+    setTokens(null);
+    setError(null);
+    autoAttemptedAddress.current = null;
+  }, [client]);
+  const logout = react.useCallback(async () => {
+    setError(null);
+    const refreshToken = refreshDataRef.current?.refreshToken;
+    try {
+      if (refreshToken) {
+        await client.logoutJwtSession({ refresh_token: refreshToken });
+      }
+    } finally {
+      clearSession();
+      autoAttemptedAddress.current = address ?? null;
+    }
+  }, [clearSession, client, address]);
+  const login = react.useCallback(async () => {
+    if (!wagmiContext) throw new Error("WagmiProvider is required for SIWE auth");
+    if (!address) throw new Error("No wallet connected");
+    if (loginInFlight.current) return;
+    loginInFlight.current = true;
+    setIsLoading(true);
+    setError(null);
+    try {
+      const walletClient = await actions.getWalletClient(wagmiContext);
+      if (!walletClient) throw new Error("No wallet client available");
+      const [{ domain }, nonceRes] = await Promise.all([
+        client.getSiweDomain(),
+        client.getSiweNonce(address)
+      ]);
+      const issuedAt = /* @__PURE__ */ new Date();
+      const expirationTime = new Date(issuedAt.getTime() + DEFAULT_SIWE_VALIDITY_MS);
+      const uri = typeof window !== "undefined" && window.location.origin ? window.location.origin : networkConfig.apiUrl;
+      const message = siwe.createSiweMessage({
+        address,
+        chainId: networkConfig.chainId,
+        domain,
+        uri,
+        version: "1",
+        nonce: nonceRes.nonce,
+        statement: statement ?? DEFAULT_STATEMENT,
+        issuedAt,
+        expirationTime
+      });
+      const signature = await walletClient.signMessage({
+        account: walletClient.account ?? address,
+        message
+      });
+      const res = await client.loginWithSiwe({ siwe_message: message, signature });
+      const loggedInAt = Date.now();
+      client.setPrivateReadToken(res.siwe_token);
+      client.setBearerToken(res.jwt_access_token);
+      refreshDataRef.current = {
+        refreshToken: res.jwt_refresh_token,
+        refreshExpiresAt: loggedInAt + res.jwt_refresh_expires_in * 1e3
+      };
+      setCachedPrivateReadToken(
+        createScopeKey(networkConfig.apiUrl, networkConfig.chainId, address),
+        res.siwe_token,
+        expirationTime.getTime()
+      );
+      setSession({ address: res.address });
+      setTokens({
+        siwe_token: res.siwe_token,
+        jwt_access_token: res.jwt_access_token,
+        jwt_refresh_token: res.jwt_refresh_token,
+        address: res.address
+      });
+      setAccessTokenExpiresAt(loggedInAt + res.jwt_expires_in * 1e3);
+    } catch (err) {
+      setError(err instanceof Error ? err : new Error("Sign-in failed"));
+      throw err;
+    } finally {
+      setIsLoading(false);
+      loginInFlight.current = false;
+    }
+  }, [wagmiContext, address, client, networkConfig.chainId, networkConfig.apiUrl, statement]);
+  const refreshAccessToken = react.useCallback(async () => {
+    const data = refreshDataRef.current;
+    if (!data || refreshInFlight.current) return;
+    if (Date.now() >= data.refreshExpiresAt - AUTH_REFRESH_SKEW_MS) {
+      clearSession();
+      return;
+    }
+    refreshInFlight.current = true;
+    try {
+      const res = await client.refreshJwtSession({ refresh_token: data.refreshToken });
+      const refreshedAt = Date.now();
+      client.setBearerToken(res.token);
+      refreshDataRef.current = {
+        refreshToken: res.refresh_token,
+        refreshExpiresAt: refreshedAt + res.refresh_expires_in * 1e3
+      };
+      setTokens(
+        (prev) => prev ? { ...prev, jwt_access_token: res.token, jwt_refresh_token: res.refresh_token } : prev
+      );
+      setAccessTokenExpiresAt(refreshedAt + res.expires_in * 1e3);
+    } catch {
+      clearSession();
+    } finally {
+      refreshInFlight.current = false;
+    }
+  }, [client, clearSession]);
+  react.useEffect(() => {
+    if (accessTokenExpiresAt == null) return;
+    const delay = Math.max(accessTokenExpiresAt - AUTH_REFRESH_SKEW_MS - Date.now(), 0);
+    const timer = setTimeout(() => {
+      void refreshAccessToken();
+    }, delay);
+    return () => clearTimeout(timer);
+  }, [accessTokenExpiresAt, refreshAccessToken]);
+  react.useEffect(() => {
+    if (!autoLogin) return;
+    if (status === "connecting" || status === "reconnecting") return;
+    if (!isConnected && session) {
+      clearSession();
+      return;
+    }
+    if (isConnected && address && session && address.toLowerCase() !== session.address.toLowerCase()) {
+      clearSession();
+      return;
+    }
+    if (isConnected && address && !session && !isLoading && autoAttemptedAddress.current !== address) {
+      autoAttemptedAddress.current = address;
+      void login().catch(() => {
+      });
+    }
+  }, [autoLogin, status, isConnected, address, session, isLoading, login, clearSession]);
+  const value = react.useMemo(
+    () => ({
+      isAuthenticated: !!session,
+      isLoading,
+      error,
+      session,
+      accessToken: tokens?.jwt_access_token,
+      tokens,
+      login,
+      logout
+    }),
+    [session, isLoading, error, tokens, login, logout]
+  );
+  return /* @__PURE__ */ jsxRuntime.jsx(SiweAuthContext.Provider, { value, children });
+}
+function useSiweAuth() {
+  const ctx = react.useContext(SiweAuthContext);
+  if (!ctx) throw new Error("useSiweAuth must be used within SiweAuthProvider");
+  return ctx;
+}
+var PrivanaContext = react.createContext(null);
+function readStoredHostedAuthSession(storage, hostedAuthStorageKey, now = Date.now()) {
+  const raw = storage.getItem(hostedAuthStorageKey);
+  if (!raw) {
+    return null;
+  }
+  try {
+    const parsed = JSON.parse(raw);
+    if (!isHostedAuthRefreshActive(parsed, now, 0)) {
+      storage.removeItem(hostedAuthStorageKey);
+      return null;
+    }
+    return parsed;
+  } catch {
+    storage.removeItem(hostedAuthStorageKey);
+    return null;
+  }
+}
+function syncHostedAuthSessionToClient(client, hostedAuthConfig, hostedAuthSession) {
+  if (!hostedAuthConfig) {
+    client.clearBearerToken();
+    client.clearPrivateReadToken();
+    return;
+  }
+  if (hostedAuthSession && isHostedAuthSessionActive(hostedAuthSession)) {
+    client.setBearerToken(hostedAuthSession.accessToken);
+    client.clearPrivateReadToken();
+    return;
+  }
+  client.clearBearerToken();
+  client.clearPrivateReadToken();
+}
+var DEFAULT_NETWORK_CONFIG = NETWORK_CONFIG.testnet;
+function PrivanaProvider({
+  children,
+  networkConfig: networkConfigOverride,
+  tokens,
+  chains,
+  pollingInterval = 1e4,
+  serviceAddress,
+  hostedAuth,
+  siweAuth
+}) {
+  if (hostedAuth && siweAuth) {
+    throw new Error(
+      "PrivanaProvider: `hostedAuth` and `siweAuth` are mutually exclusive - provide only one. When both are set, private reads use hosted auth and the in-app SIWE login is ignored."
+    );
+  }
+  const networkConfig = react.useMemo(() => {
+    const config = {
+      ...DEFAULT_NETWORK_CONFIG,
+      ...networkConfigOverride
+    };
+    if (!config.chainId || config.chainId <= 0) {
+      throw new Error("PrivanaProvider: networkConfig.chainId must be a positive number");
+    }
+    if (!config.accountingContract || !config.accountingContract.startsWith("0x")) {
+      throw new Error("PrivanaProvider: networkConfig.accountingContract must be a valid address");
+    }
+    if (!config.apiUrl) {
+      throw new Error("PrivanaProvider: networkConfig.apiUrl must be provided");
+    }
+    return config;
+  }, [
+    networkConfigOverride?.chainId,
+    networkConfigOverride?.name,
+    networkConfigOverride?.accountingContract,
+    networkConfigOverride?.apiUrl
+  ]);
+  const resolvedChains = react.useMemo(() => {
+    if (chains && chains.length > 0) return chains;
+    return SUPPORTED_CHAINS;
+  }, [chains]);
+  const client = react.useMemo(
+    () => new PrivanaClient({ baseUrl: networkConfig.apiUrl }),
+    [networkConfig.apiUrl]
+  );
+  const [allTokens, setAllTokens] = react.useState([]);
+  const [tokensStatus, setTokensStatus] = react.useState("loading");
+  const [tokensError, setTokensError] = react.useState();
+  react.useEffect(() => {
+    setTokensStatus("loading");
+    setTokensError(void 0);
+    client.listTokens().then(({ tokens: list }) => {
+      setAllTokens(
+        list.map((t) => ({
+          id: t.token_id,
+          symbol: t.symbol,
+          decimals: t.decimals,
+          contract: t.token_address ?? viem.zeroAddress,
+          name: t.name,
+          chainId: t.chain_id
+        }))
+      );
+      setTokensStatus("ready");
+    }).catch((err) => {
+      setTokensError(err instanceof Error ? err : new Error(String(err)));
+      setTokensStatus("error");
+    });
+  }, [client]);
+  const enabledTokens = react.useMemo(() => {
+    if (tokens && tokens.length > 0) {
+      const allowed = new Set(tokens.map((id) => id.toLowerCase()));
+      return allTokens.filter((t) => allowed.has(t.id.toLowerCase()));
+    }
+    return allTokens;
+  }, [allTokens, tokens]);
+  const tokenById = react.useMemo(
+    () => Object.fromEntries(enabledTokens.map((t) => [t.id.toLowerCase(), t])),
+    [enabledTokens]
+  );
+  const getTokenById = react.useMemo(() => (id) => tokenById[id.toLowerCase()], [tokenById]);
+  const chainById = react.useMemo(
+    () => Object.fromEntries(resolvedChains.map((c) => [c.id, c])),
+    [resolvedChains]
+  );
+  const getChainById2 = react.useMemo(() => (id) => chainById[id], [chainById]);
+  const hostedAuthConfig = react.useMemo(() => {
+    if (!hostedAuth) return null;
+    const clientId = hostedAuth.clientId.trim();
+    const redirectUri = hostedAuth.redirectUri.trim();
+    if (!clientId) {
+      throw new Error(
+        "PrivanaProvider: hostedAuth.clientId must be provided when hostedAuth is enabled"
+      );
+    }
+    if (!redirectUri) {
+      throw new Error(
+        "PrivanaProvider: hostedAuth.redirectUri must be provided when hostedAuth is enabled"
+      );
+    }
+    return {
+      clientId,
+      redirectUri
+    };
+  }, [hostedAuth]);
+  const hostedAuthStorageKey = react.useMemo(
+    () => hostedAuthConfig ? createHostedAuthStorageKey(networkConfig.apiUrl, hostedAuthConfig) : null,
+    [hostedAuthConfig, networkConfig.apiUrl]
+  );
+  const [hostedAuthSession, setHostedAuthSessionState] = react.useState(null);
+  const hostedAuthSessionRef = react.useRef(null);
+  const hostedAuthStateVersionRef = react.useRef(0);
+  const hostedAuthRefreshInflight = react.useRef(null);
+  const clearHostedAuthSession = react.useCallback(() => {
+    hostedAuthStateVersionRef.current += 1;
+    hostedAuthSessionRef.current = null;
+    hostedAuthRefreshInflight.current = null;
+    setHostedAuthSessionState(null);
+    client.clearBearerToken();
+    client.clearPrivateReadToken();
+    if (hostedAuthStorageKey && typeof window !== "undefined") {
+      window.sessionStorage.removeItem(hostedAuthStorageKey);
+    }
+  }, [client, hostedAuthStorageKey]);
+  const setHostedAuthSession = react.useCallback(
+    (session) => {
+      if (!session) {
+        clearHostedAuthSession();
+        return;
+      }
+      hostedAuthStateVersionRef.current += 1;
+      hostedAuthSessionRef.current = session;
+      setHostedAuthSessionState(session);
+      if (isHostedAuthSessionActive(session)) {
+        client.setBearerToken(session.accessToken);
+      } else {
+        client.clearBearerToken();
+      }
+      client.clearPrivateReadToken();
+      if (hostedAuthStorageKey && typeof window !== "undefined") {
+        window.sessionStorage.setItem(hostedAuthStorageKey, JSON.stringify(session));
+      }
+    },
+    [clearHostedAuthSession, client, hostedAuthStorageKey]
+  );
+  const refreshHostedAuthSession = react.useCallback(async () => {
+    if (!hostedAuthConfig) {
+      throw new HostedAuthRequiredError(
+        "Hosted redirect authentication is not configured for this provider."
+      );
+    }
+    const currentSession = hostedAuthSessionRef.current;
+    if (!currentSession) {
+      throw new HostedAuthRequiredError();
+    }
+    if (!isHostedAuthRefreshActive(currentSession)) {
+      clearHostedAuthSession();
+      throw new HostedAuthRequiredError(
+        "Hosted redirect authentication has expired. Start login again."
+      );
+    }
+    if (hostedAuthRefreshInflight.current) {
+      return hostedAuthRefreshInflight.current;
+    }
+    const refreshPromise = (async () => {
+      const refreshVersion = hostedAuthStateVersionRef.current;
+      try {
+        const response = await client.refreshJwtSession({
+          refresh_token: currentSession.refreshToken
+        });
+        if (refreshVersion !== hostedAuthStateVersionRef.current) {
+          const latestSession = hostedAuthSessionRef.current;
+          if (latestSession) {
+            return latestSession;
+          }
+          throw new HostedAuthRequiredError(
+            "Hosted redirect authentication has changed. Start login again."
+          );
+        }
+        const nextSession = applyRefreshResponse(currentSession, response);
+        setHostedAuthSession(nextSession);
+        return nextSession;
+      } catch (error) {
+        if (refreshVersion === hostedAuthStateVersionRef.current) {
+          clearHostedAuthSession();
+        }
+        throw error;
+      } finally {
+        hostedAuthRefreshInflight.current = null;
+      }
+    })();
+    hostedAuthRefreshInflight.current = refreshPromise;
+    return refreshPromise;
+  }, [clearHostedAuthSession, client, hostedAuthConfig, setHostedAuthSession]);
+  react.useEffect(() => {
+    hostedAuthSessionRef.current = hostedAuthSession;
+  }, [hostedAuthSession]);
+  react.useEffect(() => {
+    if (!hostedAuthStorageKey || typeof window === "undefined") {
+      hostedAuthStateVersionRef.current += 1;
+      hostedAuthSessionRef.current = null;
+      hostedAuthRefreshInflight.current = null;
+      setHostedAuthSessionState(null);
+      return;
+    }
+    const restoredSession = readStoredHostedAuthSession(window.sessionStorage, hostedAuthStorageKey);
+    hostedAuthStateVersionRef.current += 1;
+    hostedAuthSessionRef.current = restoredSession;
+    hostedAuthRefreshInflight.current = null;
+    setHostedAuthSessionState(restoredSession);
+  }, [hostedAuthStorageKey]);
+  react.useEffect(() => {
+    syncHostedAuthSessionToClient(client, hostedAuthConfig, hostedAuthSession);
+  }, [client, hostedAuthConfig, hostedAuthSession]);
+  const value = react.useMemo(
+    () => ({
+      client,
+      networkConfig,
+      enabledTokens,
+      defaultToken: enabledTokens[0],
+      getTokenById,
+      getChainById: getChainById2,
+      chains: resolvedChains,
+      tokensStatus,
+      tokensError,
+      pollingInterval,
+      serviceAddress,
+      hostedAuthConfig,
+      hostedAuthSession,
+      setHostedAuthSession,
+      clearHostedAuthSession,
+      refreshHostedAuthSession
+    }),
+    [
+      client,
+      networkConfig,
+      enabledTokens,
+      getTokenById,
+      getChainById2,
+      resolvedChains,
+      tokensStatus,
+      tokensError,
+      pollingInterval,
+      serviceAddress,
+      hostedAuthConfig,
+      hostedAuthSession,
+      setHostedAuthSession,
+      clearHostedAuthSession,
+      refreshHostedAuthSession
+    ]
+  );
+  return /* @__PURE__ */ jsxRuntime.jsx(PrivanaContext.Provider, { value, children: siweAuth ? /* @__PURE__ */ jsxRuntime.jsx(
+    SiweAuthProvider,
+    {
+      client,
+      networkConfig,
+      autoLogin: siweAuth.autoLogin,
+      statement: siweAuth.statement,
+      children
+    }
+  ) : children });
+}
+function usePrivanaContext() {
+  const context = react.useContext(PrivanaContext);
+  if (!context) {
+    throw new Error("usePrivanaContext must be used within a PrivanaProvider");
+  }
+  return context;
+}
+function useSafePrivanaContext() {
+  return react.useContext(PrivanaContext);
+}
+var INITIAL_AUTH_BACKOFF_MS = 5e3;
+var MAX_AUTH_BACKOFF_MS = 6e4;
+var DEFAULT_SIWE_AUTH_VALIDITY_MS = 24 * 60 * 60 * 1e3;
+var PRIVATE_READ_STATEMENT = "Sign in to Privana to access private account data.";
+var privateReadFailureCache = /* @__PURE__ */ new Map();
+var privateReadInflight = /* @__PURE__ */ new Map();
+async function executeHostedAuthPrivateReadRequest({
+  client,
+  hostedAuthSession,
+  refreshHostedAuthSession,
+  request
+}) {
+  const ensureHostedAuth = async (forceRefresh) => {
+    if (!hostedAuthSession) {
+      throw new HostedAuthRequiredError();
+    }
+    if (!forceRefresh && isHostedAuthSessionActive(hostedAuthSession)) {
+      client.clearPrivateReadToken();
+      client.setBearerToken(hostedAuthSession.accessToken);
+      return hostedAuthSession.accessToken;
+    }
+    const refreshed = await refreshHostedAuthSession();
+    client.clearPrivateReadToken();
+    client.setBearerToken(refreshed.accessToken);
+    return refreshed.accessToken;
+  };
+  await ensureHostedAuth(false);
+  try {
+    return await request();
+  } catch (error) {
+    if (!(error instanceof AccountingApiError) || error.statusCode !== 401) {
+      throw error;
+    }
+    await ensureHostedAuth(true);
+    return request();
+  }
+}
+function clearPrivateReadScope(scopeKey, client) {
+  deleteCachedPrivateReadToken(scopeKey);
+  privateReadFailureCache.delete(scopeKey);
+  client.clearPrivateReadToken();
+}
+function recordPrivateReadFailure(scopeKey) {
+  const previous = privateReadFailureCache.get(scopeKey);
+  const backoffMs = Math.min(
+    previous ? previous.backoffMs * 2 : INITIAL_AUTH_BACKOFF_MS,
+    MAX_AUTH_BACKOFF_MS
+  );
+  privateReadFailureCache.set(scopeKey, {
+    backoffMs,
+    retryAt: Date.now() + backoffMs
+  });
+}
+function ensureFailureBackoff(scopeKey) {
+  const failure = privateReadFailureCache.get(scopeKey);
+  if (!failure) return;
+  if (failure.retryAt <= Date.now()) {
+    privateReadFailureCache.delete(scopeKey);
+    return;
+  }
+  throw new Error(
+    `Private-read authentication is temporarily paused after a recent failure. Retry in ${Math.ceil(
+      (failure.retryAt - Date.now()) / 1e3
+    )}s.`
+  );
+}
+function usePrivateReadRequest() {
+  const wagmiContext = react.useContext(wagmi.WagmiContext);
+  const { client, networkConfig, hostedAuthConfig, hostedAuthSession, refreshHostedAuthSession } = usePrivanaContext();
+  const { address: walletAddress } = useSafeAccount();
+  const privateReadAddress = hostedAuthConfig ? hostedAuthSession?.address ?? null : walletAddress ?? null;
+  const privateReadReady = hostedAuthConfig ? !!hostedAuthSession : !!walletAddress;
+  const executePrivateRead = react.useCallback(
+    async (request) => {
+      if (hostedAuthConfig) {
+        return executeHostedAuthPrivateReadRequest({
+          client,
+          hostedAuthSession,
+          refreshHostedAuthSession,
+          request
+        });
+      }
+      if (!wagmiContext) {
+        throw new Error("WagmiProvider is required for authenticated private reads");
+      }
+      if (!walletAddress) {
+        throw new Error("No wallet connected");
+      }
+      const walletClient = await actions.getWalletClient(wagmiContext);
+      if (!walletClient) {
+        throw new Error("No wallet client available");
+      }
+      const apiUrl = networkConfig.apiUrl;
+      const scopeKey = createScopeKey(apiUrl, networkConfig.chainId, walletAddress);
+      const getToken = async (forceRefresh) => {
+        const inflight = privateReadInflight.get(scopeKey);
+        if (inflight) {
+          const token = await inflight;
+          client.setPrivateReadToken(token);
+          return token;
+        }
+        if (!forceRefresh) {
+          const cached = getCachedPrivateReadToken(scopeKey);
+          if (cached) {
+            client.setPrivateReadToken(cached);
+            return cached;
+          }
+        }
+        ensureFailureBackoff(scopeKey);
+        const authPromise = (async () => {
+          try {
+            const [{ domain }, nonceResponse] = await Promise.all([
+              client.getSiweDomain(),
+              client.getSiweNonce(walletAddress)
+            ]);
+            const issuedAt = /* @__PURE__ */ new Date();
+            const expirationTime = new Date(issuedAt.getTime() + DEFAULT_SIWE_AUTH_VALIDITY_MS);
+            const uri = typeof window !== "undefined" && window.location.origin ? window.location.origin : apiUrl;
+            const message = siwe.createSiweMessage({
+              address: walletAddress,
+              chainId: walletClient.chain?.id ?? networkConfig.chainId,
+              domain,
+              expirationTime,
+              issuedAt,
+              nonce: nonceResponse.nonce,
+              statement: PRIVATE_READ_STATEMENT,
+              uri,
+              version: "1"
+            });
+            const signature = await walletClient.signMessage({
+              account: walletClient.account ?? walletAddress,
+              message
+            });
+            const login = await client.loginWithSiwe({
+              siwe_message: message,
+              signature
+            });
+            setCachedPrivateReadToken(scopeKey, login.siwe_token, expirationTime.getTime());
+            privateReadFailureCache.delete(scopeKey);
+            client.setPrivateReadToken(login.siwe_token);
+            return login.siwe_token;
+          } catch (error) {
+            const authError = error instanceof Error ? error : new Error("Failed to authenticate private reads");
+            clearPrivateReadScope(scopeKey, client);
+            recordPrivateReadFailure(scopeKey);
+            throw authError;
+          } finally {
+            privateReadInflight.delete(scopeKey);
+          }
+        })();
+        privateReadInflight.set(scopeKey, authPromise);
+        return authPromise;
+      };
+      await getToken(false);
+      try {
+        return await request();
+      } catch (error) {
+        if (!(error instanceof AccountingApiError) || error.statusCode !== 401) {
+          throw error;
+        }
+        clearPrivateReadScope(scopeKey, client);
+        await getToken(true);
+        return request();
+      }
+    },
+    [
+      client,
+      hostedAuthConfig,
+      hostedAuthSession,
+      networkConfig.apiUrl,
+      networkConfig.chainId,
+      refreshHostedAuthSession,
+      walletAddress,
+      wagmiContext
+    ]
+  );
+  const privateReadQueryScope = react.useMemo(
+    () => [networkConfig.apiUrl, networkConfig.chainId, privateReadAddress],
+    [networkConfig.apiUrl, networkConfig.chainId, privateReadAddress]
+  );
+  return {
+    executePrivateRead,
+    privateReadAddress,
+    privateReadReady,
+    privateReadQueryScope
+  };
+}
+
+// src/sdk/hooks/use-deposit-verification.ts
+function useDepositVerification(options = {}) {
+  const { client } = usePrivanaContext();
+  const queryClient = reactQuery.useQueryClient();
+  const { executePrivateRead } = usePrivateReadRequest();
+  const pollInterval = options.pollInterval ?? 5e3;
+  const finalityRetryInterval = options.finalityRetryInterval ?? pollInterval;
+  const pollTimeout = options.pollTimeout ?? 18e4;
+  const [isVerifying, setIsVerifying] = react.useState(false);
+  const [didTimeout, setDidTimeout] = react.useState(false);
+  const [verificationFailed, setVerificationFailed] = react.useState(false);
+  const [error, setError] = react.useState(null);
+  const [txHash, setTxHash] = react.useState();
+  const generationRef = react.useRef(0);
+  const pollIntervalRef = react.useRef(null);
+  const verificationContextRef = react.useRef(null);
+  const onCreditedRef = react.useRef(options.onCredited);
+  const onCheckTimeoutRef = react.useRef(options.onCheckTimeout);
+  const onErrorRef = react.useRef(options.onError);
+  react.useEffect(() => {
+    onCreditedRef.current = options.onCredited;
+    onCheckTimeoutRef.current = options.onCheckTimeout;
+    onErrorRef.current = options.onError;
+  }, [options.onCredited, options.onCheckTimeout, options.onError]);
+  const stopPolling = react.useCallback(() => {
+    if (pollIntervalRef.current) {
+      clearTimeout(pollIntervalRef.current);
+      pollIntervalRef.current = null;
+    }
+  }, []);
+  const invalidateGeneration = react.useCallback(() => {
+    generationRef.current++;
+  }, []);
+  react.useEffect(() => {
+    return () => {
+      invalidateGeneration();
+      stopPolling();
+    };
+  }, [invalidateGeneration, stopPolling]);
+  const runVerification = react.useCallback(
+    async (ctx, generation) => {
+      const isStale = () => generation !== generationRef.current;
+      const { hash, chainId, amount } = ctx;
+      setVerificationFailed(false);
+      setError(null);
+      setDidTimeout(false);
+      setIsVerifying(true);
+      const pollStartTime = Date.now();
+      const markVerificationFailed = (err) => {
+        setIsVerifying(false);
+        setError(err);
+        setVerificationFailed(true);
+        onErrorRef.current?.(err);
+      };
+      const markVerificationTimedOut = () => {
+        stopPolling();
+        setIsVerifying(false);
+        setDidTimeout(true);
+        onCheckTimeoutRef.current?.(hash);
+        queryClient.invalidateQueries({ queryKey: ["accounting-balance"] });
+      };
+      try {
+        let triggerResult;
+        while (!triggerResult) {
+          if (isStale()) return;
+          try {
+            const result = await executePrivateRead(
+              () => client.checkDeposit({
+                chain_id: chainId,
+                tx_hash: hash,
+                amount: amount.toString()
+              })
+            );
+            if (result.status === "error" && isInsufficientFinalityMessage(result.detail)) {
+              if (Date.now() - pollStartTime > pollTimeout) {
+                markVerificationTimedOut();
+                return;
+              }
+              await sleep(finalityRetryInterval);
+              if (isStale()) return;
+              continue;
+            }
+            triggerResult = result;
+          } catch (err) {
+            if (isStale()) return;
+            if (!isInsufficientFinalityError(err)) {
+              throw err;
+            }
+            if (Date.now() - pollStartTime > pollTimeout) {
+              markVerificationTimedOut();
+              return;
+            }
+            await sleep(finalityRetryInterval);
+            if (isStale()) return;
+          }
+        }
+        if (isStale()) return;
+        if (triggerResult.status === "credited") {
+          setIsVerifying(false);
+          verificationContextRef.current = null;
+          queryClient.invalidateQueries({ queryKey: ["accounting-balance"] });
+          queryClient.invalidateQueries({ queryKey: ["accounting-history"] });
+          onCreditedRef.current?.(hash, triggerResult);
+          return;
+        }
+        if (triggerResult.status === "error") {
+          markVerificationFailed(new Error(triggerResult.detail ?? "Deposit verification failed"));
+          return;
+        }
+        const depositId = triggerResult.deposit_id;
+        if (!depositId) {
+          markVerificationFailed(new Error("Deposit check did not return a deposit id"));
+          return;
+        }
+        let consecutiveFailures = 0;
+        const checkStatus = async () => {
+          if (isStale()) return true;
+          if (Date.now() - pollStartTime > pollTimeout) {
+            markVerificationTimedOut();
+            return true;
+          }
+          try {
+            const result = await executePrivateRead(() => client.getDepositStatus(depositId));
+            if (isStale()) return true;
+            consecutiveFailures = 0;
+            if (result.status === "credited") {
+              stopPolling();
+              setIsVerifying(false);
+              verificationContextRef.current = null;
+              queryClient.invalidateQueries({ queryKey: ["accounting-balance"] });
+              queryClient.invalidateQueries({ queryKey: ["accounting-history"] });
+              onCreditedRef.current?.(hash, result);
+              return true;
+            }
+            if (result.status === "error") {
+              stopPolling();
+              markVerificationFailed(new Error(result.detail ?? "Deposit verification failed"));
+              return true;
+            }
+          } catch (err) {
+            if (isStale()) return true;
+            consecutiveFailures++;
+            console.warn("Error polling deposit status:", err);
+            if (consecutiveFailures >= 3) {
+              stopPolling();
+              markVerificationFailed(
+                err instanceof Error ? err : new Error("Deposit status polling failed")
+              );
+              return true;
+            }
+          }
+          return false;
+        };
+        const pollLoop = async () => {
+          const done = await checkStatus();
+          if (!done && !isStale() && pollIntervalRef.current !== null) {
+            pollIntervalRef.current = setTimeout(pollLoop, pollInterval);
+          }
+        };
+        pollIntervalRef.current = setTimeout(pollLoop, pollInterval);
+      } catch (err) {
+        if (isStale()) return;
+        stopPolling();
+        markVerificationFailed(
+          err instanceof Error ? err : new Error("Deposit verification failed")
+        );
+      }
+    },
+    [
+      client,
+      executePrivateRead,
+      finalityRetryInterval,
+      pollInterval,
+      pollTimeout,
+      queryClient,
+      stopPolling
+    ]
+  );
+  const verify = react.useCallback(
+    async (ctx) => {
+      generationRef.current++;
+      stopPolling();
+      verificationContextRef.current = ctx;
+      setTxHash(ctx.hash);
+      const generation = generationRef.current;
+      await runVerification(ctx, generation);
+    },
+    [runVerification, stopPolling]
+  );
+  const retryVerification = react.useCallback(async () => {
+    const ctx = verificationContextRef.current;
+    if (!ctx) {
+      throw new Error("No pending verification to retry");
+    }
+    generationRef.current++;
+    stopPolling();
+    const generation = generationRef.current;
+    await runVerification(ctx, generation);
+  }, [runVerification, stopPolling]);
+  const reset = react.useCallback(() => {
+    generationRef.current++;
+    stopPolling();
+    verificationContextRef.current = null;
+    setTxHash(void 0);
+    setIsVerifying(false);
+    setDidTimeout(false);
+    setVerificationFailed(false);
+    setError(null);
+  }, [stopPolling]);
+  return {
+    isVerifying,
+    didTimeout,
+    verificationFailed,
+    error,
+    txHash,
+    verify,
+    retryVerification,
+    reset
+  };
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function isInsufficientFinalityError(error) {
+  if (error instanceof AccountingApiError) {
+    return isInsufficientFinalityMessage(error.detail) || isInsufficientFinalityMessage(error.message);
+  }
+  return error instanceof Error && isInsufficientFinalityMessage(error.message);
+}
+function isInsufficientFinalityMessage(message) {
+  return message?.includes("Insufficient finality") ?? false;
+}
+function cn(...inputs) {
+  return tailwindMerge.twMerge(clsx.clsx(inputs));
+}
+function formatTokenAmount(amount, decimals = 18) {
+  const value = typeof amount === "string" ? BigInt(amount) : amount;
+  const divisor = BigInt(10 ** decimals);
+  const integerPart = value / divisor;
+  const fractionalPart = value % divisor;
+  const fractionalStr = fractionalPart.toString().padStart(decimals, "0");
+  const twoDecimals = fractionalStr.slice(0, 2).padEnd(2, "0");
+  const integerWithSpaces = integerPart.toString().replace(/\B(?=(\d{3})+(?!\d))/g, "\u2009");
+  return `${integerWithSpaces}.${twoDecimals}`;
+}
+function parseTokenAmount(amount, decimals = 18) {
+  const sanitized = amount.replace(/[\s\u2009]/g, "").replace(/,/g, ".");
+  const lastDot = sanitized.lastIndexOf(".");
+  const integerPart = lastDot === -1 ? sanitized : sanitized.slice(0, lastDot).replace(/\./g, "");
+  const fractionalPart = lastDot === -1 ? "" : sanitized.slice(lastDot + 1);
+  const paddedFractional = fractionalPart.padEnd(decimals, "0").slice(0, decimals);
+  return BigInt(integerPart + paddedFractional);
+}
+function shortenAddress(address, chars = 4) {
+  if (!address || address.length < chars * 2 + 2) return address;
+  return `${address.slice(0, chars + 2)}...${address.slice(-chars)}`;
+}
+function formatTimeRemaining(expiryTimestamp) {
+  const now = Math.floor(Date.now() / 1e3);
+  const diff = expiryTimestamp - now;
+  if (diff <= 0) return "Expired";
+  const days = Math.floor(diff / 86400);
+  const hours = Math.floor(diff % 86400 / 3600);
+  const minutes = Math.floor(diff % 3600 / 60);
+  if (days > 0) {
+    return hours > 0 ? `${days}d ${hours}h left` : `${days}d left`;
+  }
+  if (hours > 0) {
+    return minutes > 0 ? `${hours}h ${minutes}m left` : `${hours}h left`;
+  }
+  return `${minutes}m left`;
+}
+var buttonVariants = classVarianceAuthority.cva(
+  "inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-md text-sm font-medium transition-all disabled:pointer-events-none disabled:opacity-50 [&_svg]:pointer-events-none [&_svg:not([class*='size-'])]:size-4 shrink-0 [&_svg]:shrink-0 outline-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive",
+  {
+    variants: {
+      variant: {
+        default: "bg-primary text-primary-foreground hover:bg-primary/90",
+        destructive: "bg-destructive text-white hover:bg-destructive/90 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40 dark:bg-destructive/60",
+        outline: "border bg-background shadow-xs hover:bg-accent hover:text-accent-foreground dark:bg-input/30 dark:border-input dark:hover:bg-input/50",
+        secondary: "bg-secondary text-secondary-foreground hover:bg-secondary/80",
+        ghost: "hover:bg-accent hover:text-accent-foreground dark:hover:bg-accent/50",
+        link: "text-primary underline-offset-4 hover:underline"
+      },
+      size: {
+        default: "h-9 px-4 py-2 has-[>svg]:px-3",
+        sm: "h-8 rounded-md gap-1.5 px-3 has-[>svg]:px-2.5",
+        lg: "h-10 rounded-md px-6 has-[>svg]:px-4",
+        icon: "size-9",
+        "icon-sm": "size-8",
+        "icon-lg": "size-10"
+      }
+    },
+    defaultVariants: {
+      variant: "default",
+      size: "default"
+    }
+  }
+);
+function Button({
+  className,
+  variant = "default",
+  size = "default",
+  asChild = false,
+  ...props
+}) {
+  const Comp = asChild ? reactSlot.Slot : "button";
+  return /* @__PURE__ */ jsxRuntime.jsx(
+    Comp,
+    {
+      "data-slot": "button",
+      "data-variant": variant,
+      "data-size": size,
+      className: cn(buttonVariants({ variant, size, className })),
+      ...props
+    }
+  );
+}
+
+// ../../node_modules/@wagmi/core/dist/esm/utils/getAction.js
+function getAction(client, actionFn, name) {
+  const action_implicit = client[actionFn.name];
+  if (typeof action_implicit === "function")
+    return action_implicit;
+  const action_explicit = client[name];
+  if (typeof action_explicit === "function")
+    return action_explicit;
+  return (params) => actionFn(client, params);
+}
+
+// ../../node_modules/@wagmi/core/dist/esm/actions/getTransactionReceipt.js
+async function getTransactionReceipt(config, parameters) {
+  const { chainId, ...rest } = parameters;
+  const client = config.getClient({ chainId });
+  const action = getAction(client, actions$1.getTransactionReceipt, "getTransactionReceipt");
+  return action(rest);
+}
+async function waitForTransactionReceipt(config, parameters) {
+  const { chainId, timeout = 0, ...rest } = parameters;
+  const client = config.getClient({ chainId });
+  const action = getAction(client, actions$1.waitForTransactionReceipt, "waitForTransactionReceipt");
+  const receipt = await action({ ...rest, timeout });
+  if (receipt.status === "reverted") {
+    const action_getTransaction = getAction(client, actions$1.getTransaction, "getTransaction");
+    const { from: account, ...txn } = await action_getTransaction({
+      hash: receipt.transactionHash
+    });
+    const action_call = getAction(client, actions$1.call, "call");
+    const code = await action_call({
+      ...txn,
+      account,
+      data: txn.input,
+      gasPrice: txn.type !== "eip1559" ? txn.gasPrice : void 0,
+      maxFeePerGas: txn.type === "eip1559" ? txn.maxFeePerGas : void 0,
+      maxPriorityFeePerGas: txn.type === "eip1559" ? txn.maxPriorityFeePerGas : void 0
+    });
+    const reason = code?.data ? viem.hexToString(`0x${code.data.substring(138)}`) : "unknown reason";
+    throw new Error(reason);
+  }
+  return {
+    ...receipt,
+    chainId: client.chain.id
+  };
+}
+
+// ../../node_modules/@wagmi/core/dist/esm/actions/getChainId.js
+function getChainId2(config) {
+  return config.state.chainId;
+}
+
+exports.AccountingApiError = AccountingApiError;
+exports.Button = Button;
+exports.HOSTED_AUTH_CLOCK_SKEW_MS = HOSTED_AUTH_CLOCK_SKEW_MS;
+exports.HostedAuthError = HostedAuthError;
+exports.HostedAuthRequiredError = HostedAuthRequiredError;
+exports.HostedAuthStateMismatchError = HostedAuthStateMismatchError;
+exports.HttpClient = HttpClient;
+exports.NETWORK_CONFIG = NETWORK_CONFIG;
+exports.NetworkError = NetworkError;
+exports.PrivanaClient = PrivanaClient;
+exports.PrivanaProvider = PrivanaProvider;
+exports.SUPPORTED_CHAINS = SUPPORTED_CHAINS;
+exports.SiweAuthProvider = SiweAuthProvider;
+exports.ValidationError = ValidationError;
+exports.applyRefreshResponse = applyRefreshResponse;
+exports.buildHostedAuthSession = buildHostedAuthSession;
+exports.buttonVariants = buttonVariants;
+exports.clearHostedAuthPendingTransaction = clearHostedAuthPendingTransaction;
+exports.cn = cn;
+exports.createHostedAuthPendingStorageKey = createHostedAuthPendingStorageKey;
+exports.createHostedAuthState = createHostedAuthState;
+exports.createHostedAuthStorageKey = createHostedAuthStorageKey;
+exports.createPkceChallenge = createPkceChallenge;
+exports.createPkceVerifier = createPkceVerifier;
+exports.formatTimeRemaining = formatTimeRemaining;
+exports.formatTokenAmount = formatTokenAmount;
+exports.getAccountingContract = getAccountingContract;
+exports.getApiUrl = getApiUrl;
+exports.getChainById = getChainById;
+exports.getChainId = getChainId;
+exports.getChainId2 = getChainId2;
+exports.getExplorerAddressUrl = getExplorerAddressUrl;
+exports.getTransactionReceipt = getTransactionReceipt;
+exports.isHostedAuthRefreshActive = isHostedAuthRefreshActive;
+exports.isHostedAuthSessionActive = isHostedAuthSessionActive;
+exports.normalizeAddress = normalizeAddress;
+exports.normalizeHex = normalizeHex;
+exports.parseHostedAuthCallback = parseHostedAuthCallback;
+exports.parseTokenAmount = parseTokenAmount;
+exports.persistHostedAuthPendingTransaction = persistHostedAuthPendingTransaction;
+exports.readHostedAuthPendingTransaction = readHostedAuthPendingTransaction;
+exports.readStoredHostedAuthSession = readStoredHostedAuthSession;
+exports.shortenAddress = shortenAddress;
+exports.stripHostedAuthCallbackParams = stripHostedAuthCallbackParams;
+exports.syncHostedAuthSessionToClient = syncHostedAuthSessionToClient;
+exports.useDepositVerification = useDepositVerification;
+exports.usePrivanaContext = usePrivanaContext;
+exports.usePrivateReadRequest = usePrivateReadRequest;
+exports.useSafeAccount = useSafeAccount;
+exports.useSafePrivanaContext = useSafePrivanaContext;
+exports.useSiweAuth = useSiweAuth;
+exports.waitForTransactionReceipt = waitForTransactionReceipt;
+//# sourceMappingURL=chunk-RDMJGMI3.cjs.map
+//# sourceMappingURL=chunk-RDMJGMI3.cjs.map