@rhinestone/deposit-modal 0.0.0-dev-20260727145407 → 0.0.0-dev-20260727165236

package/README.md

@@ -80,7 +80,7 @@ The user picks the destination chain, token, recipient, and amount in the modal;
 
 ## Claim a failed deposit
 
-`ClaimModal` lets the smart-account owner recover a failed or rejected EVM deposit to any recipient on its source chain. The connected wallet signs one EIP-712 authorization that binds the deposit, amount, recipient, and deadline, the client never handles the processor API key.
+`ClaimModal` lets a user get a failed or rejected EVM deposit sent back to them on its source chain. They paste the deposit's transaction hash and name a destination — **no wallet connection is involved at any point**.
 
 ```tsx
 import { ClaimModal } from "@rhinestone/deposit-modal/claim";
@@ -88,16 +88,58 @@ import { ClaimModal } from "@rhinestone/deposit-modal/claim";
 <ClaimModal
   isOpen={claimOpen}
   onClose={() => setClaimOpen(false)}
-  dappWalletClient={walletClient}
-  // Optional lookup/recipient prefills:
+  refundEndpoint="/api/refund"
+  // Optional lookup/destination prefills:
   defaultSourceChain={42161}
   defaultTxHash={depositTxHash}
-  defaultRecipient={address}
   onLifecycle={(event) => console.log(event)}
 />
 ```
 
-The backend must proxy both `GET /deposits` and `POST /deposits/recover` while injecting its existing processor API key. A separate recovery API key is not required: the API key scopes the tenant, while the owner signature authorizes the transfer.
+### Why you have to authorize it
+
+Deposit accounts are owned by the Rhinestone service, so there is no user wallet that can sign for a refund — and when the deposit arrived from an exchange, the sender can't sign either. Whether a deposit belongs to a given user is something **only your app knows**: you authenticated them, and you chose the `recipient` you passed to the widget.
+
+So `refundEndpoint` points at something you control. Two shapes:
+
+**Your own backend** — same-origin, so the session cookie authenticates it. `createRefundHandler` does everything except the auth decision:
+
+```ts
+// app/api/refund/route.ts
+import { createRefundHandler } from "@rhinestone/deposit-modal/server";
+
+export const POST = createRefundHandler({
+  apiKey: process.env.RHINESTONE_API_KEY!,
+  async authorize(request) {
+    const session = await getSession(request);
+    if (!session) return null;                     // → 401
+    return { recipient: session.depositRecipient }; // the one YOU passed the widget
+  },
+});
+```
+
+It verifies the deposit really belongs to that recipient before spending your API key, and 403s otherwise. Return a `destination` from `authorize` to pin where funds go and take that choice away from the browser — the handler reports the effective destination back, so the modal's success screen and `complete` event name the address that was actually paid rather than the one the browser asked for.
+
+If you write your own endpoint instead, echo a `destination` in the success body whenever you override the requested one, for the same reason.
+
+**A deposit-widget-proxy** — cross-origin, so cookies don't travel. Set `REFUND_TOKEN_SECRET` on the proxy and mint a short-lived token instead:
+
+```tsx
+<ClaimModal
+  refundEndpoint="https://your-proxy.example/deposits/refund"
+  getUserToken={(refund) =>
+    fetch("/api/refund-token", {
+      method: "POST",
+      body: JSON.stringify(refund),
+    }).then((r) => r.json()).then((r) => r.token)
+  }
+  /* … */
+/>
+```
+
+Bind the token to the specific refund it authorizes, not just to the user — an identity-only token is a bearer credential spendable on any destination. See the deposit-widget-proxy README for the mint endpoint.
+
+`GET /deposits` still needs to be proxied for the lookup step, as before.
 
 ## Fiat on-ramp (Swapped)
 

package/dist/{chunk-QMN3IYME.cjs → DepositModalReown-EI63MROO.cjs}

@@ -1,14 +1,23 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
+var _chunkQYYGX36Tcjs = require('./chunk-QYYGX36T.cjs');
+require('./chunk-VULYPMCV.cjs');
+require('./chunk-UKN74GQZ.cjs');
 
-var _chunkKLTJCZCHcjs = require('./chunk-KLTJCZCH.cjs');
 
 
+var _chunkO35FIERScjs = require('./chunk-O35FIERS.cjs');
 
-var _chunkA4VMWNDEcjs = require('./chunk-A4VMWNDE.cjs');
 
-// src/core/reown.tsx
+
+var _chunkYGBHFYTWcjs = require('./chunk-YGBHFYTW.cjs');
+require('./chunk-XBNXKZHQ.cjs');
+
+// src/DepositModalReown.tsx
 var _react = require('react');
+
+// src/core/reown.tsx
+
 var _reactquery = require('@tanstack/react-query');
 var _appkitadapterwagmi = require('@reown/appkit-adapter-wagmi');
 var _appkitadaptersolana = require('@reown/appkit-adapter-solana');
@@ -59,7 +68,7 @@ var APPKIT_NETWORK_BY_ID = {
   [_networks.katana.id]: _networks.katana,
   [_networks.hyperEvm.id]: _networks.hyperEvm
 };
-var EVM_NETWORKS = _chunkA4VMWNDEcjs.SUPPORTED_CHAINS.map((chain) => {
+var EVM_NETWORKS = _chunkYGBHFYTWcjs.SUPPORTED_CHAINS.map((chain) => {
   const network = APPKIT_NETWORK_BY_ID[chain.id];
   if (!network) {
     throw new Error(
@@ -78,14 +87,14 @@ function buildTransports(rpcUrls) {
   const transports = {};
   for (const network of EVM_NETWORKS) {
     const id = Number(network.id);
-    transports[id] = _viem.http.call(void 0, _chunkKLTJCZCHcjs.rpcUrlFor.call(void 0, rpcUrls, id));
+    transports[id] = _viem.http.call(void 0, _chunkO35FIERScjs.rpcUrlFor.call(void 0, rpcUrls, id));
   }
   return transports;
 }
 function getEvmRpcFingerprint(rpcUrls) {
   return EVM_NETWORKS.map((network) => {
     const id = Number(network.id);
-    return `${id}=${_nullishCoalesce(_chunkKLTJCZCHcjs.rpcUrlFor.call(void 0, rpcUrls, id), () => ( ""))}`;
+    return `${id}=${_nullishCoalesce(_chunkO35FIERScjs.rpcUrlFor.call(void 0, rpcUrls, id), () => ( ""))}`;
   }).join("|");
 }
 var cachedAdapter = null;
@@ -179,9 +188,9 @@ function useReownWallet() {
           await switchChainAsync({ chainId });
         }
       } catch (err) {
-        if (_chunkKLTJCZCHcjs.isUnsupportedChainSwitchError.call(void 0, err)) {
+        if (_chunkO35FIERScjs.isUnsupportedChainSwitchError.call(void 0, err)) {
           throw new Error(
-            `Switch to ${_chunkA4VMWNDEcjs.getChainName.call(void 0, chainId)} in your wallet to continue`
+            `Switch to ${_chunkYGBHFYTWcjs.getChainName.call(void 0, chainId)} in your wallet to continue`
           );
         }
         throw err;
@@ -190,7 +199,53 @@ function useReownWallet() {
   };
 }
 
+// src/DepositModalReown.tsx
+
+var _react5 = require('@reown/appkit-adapter-solana/react');
+
+function DepositModalWithReown(props) {
+  const reown = useReownWallet();
+  const enableSolana = _nullishCoalesce(props.enableSolana, () => ( true));
+  const { walletProvider: solanaWalletProvider } = _react3.useAppKitProvider.call(void 0, 
+    enableSolana ? "solana" : "eip155"
+  );
+  const { connection: solanaConnection } = _react5.useAppKitConnection.call(void 0, );
+  const reownWithSolana = _react.useMemo.call(void 0, 
+    () => ({
+      ...reown,
+      solanaProvider: enableSolana && reown.isSolana ? solanaWalletProvider : void 0,
+      solanaConnection: enableSolana && reown.isSolana ? solanaConnection : void 0
+    }),
+    [enableSolana, reown, solanaWalletProvider, solanaConnection]
+  );
+  const handleConnect = _react.useCallback.call(void 0, () => {
+    reown.openConnect();
+  }, [reown.openConnect]);
+  const handleDisconnect = _react.useCallback.call(void 0, () => {
+    reown.disconnect();
+  }, [reown.disconnect]);
+  return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+    _chunkQYYGX36Tcjs.DepositModalInner,
+    {
+      ...props,
+      reownWallet: reownWithSolana,
+      onConnect: handleConnect,
+      onDisconnect: handleDisconnect
+    }
+  );
+}
+function DepositModalReown(props) {
+  return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+    ReownWalletProvider,
+    {
+      projectId: props.reownAppId,
+      theme: props.theme,
+      enableSolana: props.enableSolana,
+      rpcUrls: props.rpcUrls,
+      children: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, DepositModalWithReown, { ...props })
+    }
+  );
+}
 
 
-
-exports.ReownWalletProvider = ReownWalletProvider; exports.useReownWallet = useReownWallet;
+exports.DepositModalReown = DepositModalReown;

package/dist/{chunk-UMVDMKCX.mjs → DepositModalReown-ZU3CPDTC.mjs}

@@ -1,11 +1,20 @@
+import {
+  DepositModalInner
+} from "./chunk-YVI7Q7P7.mjs";
+import "./chunk-YNRJ643P.mjs";
+import "./chunk-GQXT6UL7.mjs";
 import {
   isUnsupportedChainSwitchError,
   rpcUrlFor
-} from "./chunk-ORYDX7FS.mjs";
+} from "./chunk-VXYJ432Q.mjs";
 import {
   SUPPORTED_CHAINS,
   getChainName
-} from "./chunk-7S4WRVJ4.mjs";
+} from "./chunk-G5JWMTDR.mjs";
+import "./chunk-OMREKQB2.mjs";
+
+// src/DepositModalReown.tsx
+import { useCallback, useMemo } from "react";
 
 // src/core/reown.tsx
 import { useState } from "react";
@@ -190,7 +199,53 @@ function useReownWallet() {
   };
 }
 
+// src/DepositModalReown.tsx
+import { useAppKitProvider } from "@reown/appkit/react";
+import { useAppKitConnection } from "@reown/appkit-adapter-solana/react";
+import { jsx as jsx2 } from "react/jsx-runtime";
+function DepositModalWithReown(props) {
+  const reown = useReownWallet();
+  const enableSolana = props.enableSolana ?? true;
+  const { walletProvider: solanaWalletProvider } = useAppKitProvider(
+    enableSolana ? "solana" : "eip155"
+  );
+  const { connection: solanaConnection } = useAppKitConnection();
+  const reownWithSolana = useMemo(
+    () => ({
+      ...reown,
+      solanaProvider: enableSolana && reown.isSolana ? solanaWalletProvider : void 0,
+      solanaConnection: enableSolana && reown.isSolana ? solanaConnection : void 0
+    }),
+    [enableSolana, reown, solanaWalletProvider, solanaConnection]
+  );
+  const handleConnect = useCallback(() => {
+    reown.openConnect();
+  }, [reown.openConnect]);
+  const handleDisconnect = useCallback(() => {
+    reown.disconnect();
+  }, [reown.disconnect]);
+  return /* @__PURE__ */ jsx2(
+    DepositModalInner,
+    {
+      ...props,
+      reownWallet: reownWithSolana,
+      onConnect: handleConnect,
+      onDisconnect: handleDisconnect
+    }
+  );
+}
+function DepositModalReown(props) {
+  return /* @__PURE__ */ jsx2(
+    ReownWalletProvider,
+    {
+      projectId: props.reownAppId,
+      theme: props.theme,
+      enableSolana: props.enableSolana,
+      rpcUrls: props.rpcUrls,
+      children: /* @__PURE__ */ jsx2(DepositModalWithReown, { ...props })
+    }
+  );
+}
 export {
-  ReownWalletProvider,
-  useReownWallet
+  DepositModalReown
 };