@rhinestone/deposit-modal 0.0.0-dev-20260729013445 → 0.0.0-dev-20260729102711

package/README.md

@@ -45,6 +45,10 @@ export function DepositButton({ walletClient, publicClient, recipient }) {
         walletClient={walletClient}
         publicClient={publicClient}
         recipient={recipient}
+        // Required. A proxy you control that holds your Rhinestone API key and
+        // forwards to the deposit processor — the modal runs in the browser and
+        // cannot hold the key itself.
+        backendUrl={process.env.NEXT_PUBLIC_DEPOSIT_PROXY_URL}
         targetChain={8453}
         targetToken="0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
         onLifecycle={(event) => {
@@ -80,6 +84,7 @@ import { WithdrawModal } from "@rhinestone/deposit-modal/withdraw";
   isOpen={open}
   onClose={() => setOpen(false)}
   accountAddress={userWallet}
+  backendUrl={process.env.NEXT_PUBLIC_DEPOSIT_PROXY_URL}
   sourceChain={137}
   sourceToken={USDC_POLYGON}
   targetChain={8453}
@@ -107,8 +112,10 @@ import { ClaimModal } from "@rhinestone/deposit-modal/claim";
   isOpen={claimOpen}
   onClose={() => setClaimOpen(false)}
   refundEndpoint="/api/refund"
+  backendUrl={process.env.NEXT_PUBLIC_DEPOSIT_PROXY_URL}
   // Optional prefills:
   defaultTxHash={depositTxHash}
+  defaultRefundDestination={knownSelfCustodialAddress}
   onLifecycle={(event) => console.log(event)}
 />
 ```
@@ -129,13 +136,17 @@ export const POST = createRefundHandler({
   apiKey: process.env.RHINESTONE_API_KEY!,
   async authorize(request) {
     const session = await getSession(request);
-    if (!session) return null;                     // → 401
-    return { recipient: session.depositRecipient }; // the one YOU passed the widget
+    if (!session) return null; // → 401
+    // The deposit `recipient` you passed the widget. Used ONLY to prove the
+    // deposit is this user's — it does not decide where the money goes.
+    return { depositRecipient: session.depositRecipient };
   },
 });
 ```
 
-It verifies the deposit really belongs to that recipient before spending your API key, and 403s otherwise. Return a `destination` from `authorize` to pin where funds go and take that choice away from the browser — the handler reports the effective destination back, so the modal's success screen and `complete` event name the address that was actually paid rather than the one the browser asked for.
+It verifies the deposit really belongs to that recipient before spending your API key, and 403s otherwise. Return `refundDestination` from `authorize` to pin where funds go and take that choice away from the browser — the handler reports the effective destination back, so the modal's success screen and `complete` event name the address that was actually paid rather than the one the browser asked for.
+
+`defaultRefundDestination` on the modal only *seeds* that field and the user can edit it; `refundDestination` from `authorize` overrides whatever they submitted.
 
 If you write your own endpoint instead, echo a `destination` in the success body whenever you override the requested one, for the same reason.
 
@@ -144,6 +155,7 @@ If you write your own endpoint instead, echo a `destination` in the success body
 ```tsx
 <ClaimModal
   refundEndpoint="https://your-proxy.example/deposits/refund"
+  backendUrl={process.env.NEXT_PUBLIC_DEPOSIT_PROXY_URL}
   getUserToken={(refund) =>
     fetch("/api/refund-token", {
       method: "POST",

package/dist/{DepositModalReown-7IKZUY34.cjs → DepositModalReown-G7QBA2WT.cjs}

@@ -1,18 +1,18 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkM3HAQUVOcjs = require('./chunk-M3HAQUVO.cjs');
-require('./chunk-HDZUPOUJ.cjs');
-require('./chunk-D52L6CAO.cjs');
+var _chunk2JJHOAVWcjs = require('./chunk-2JJHOAVW.cjs');
+require('./chunk-55L3Z4XN.cjs');
+require('./chunk-TVCRLV7L.cjs');
 
 
 
-var _chunkKWXEW5SVcjs = require('./chunk-KWXEW5SV.cjs');
-require('./chunk-AA37G5O2.cjs');
-require('./chunk-W3WWC4LD.cjs');
+var _chunkKQ2CB6FYcjs = require('./chunk-KQ2CB6FY.cjs');
+require('./chunk-XPYV35FC.cjs');
+require('./chunk-OU5AFKDR.cjs');
 
 
 
-var _chunkEGB3NWMLcjs = require('./chunk-EGB3NWML.cjs');
+var _chunkJWX33GHXcjs = require('./chunk-JWX33GHX.cjs');
 
 // src/DepositModalReown.tsx
 var _react = require('react');
@@ -69,7 +69,7 @@ var APPKIT_NETWORK_BY_ID = {
   [_networks.katana.id]: _networks.katana,
   [_networks.hyperEvm.id]: _networks.hyperEvm
 };
-var EVM_NETWORKS = _chunkEGB3NWMLcjs.SUPPORTED_CHAINS.map((chain) => {
+var EVM_NETWORKS = _chunkJWX33GHXcjs.SUPPORTED_CHAINS.map((chain) => {
   const network = APPKIT_NETWORK_BY_ID[chain.id];
   if (!network) {
     throw new Error(
@@ -88,14 +88,14 @@ function buildTransports(rpcUrls) {
   const transports = {};
   for (const network of EVM_NETWORKS) {
     const id = Number(network.id);
-    transports[id] = _viem.http.call(void 0, _chunkKWXEW5SVcjs.rpcUrlFor.call(void 0, rpcUrls, id));
+    transports[id] = _viem.http.call(void 0, _chunkKQ2CB6FYcjs.rpcUrlFor.call(void 0, rpcUrls, id));
   }
   return transports;
 }
 function getEvmRpcFingerprint(rpcUrls) {
   return EVM_NETWORKS.map((network) => {
     const id = Number(network.id);
-    return `${id}=${_nullishCoalesce(_chunkKWXEW5SVcjs.rpcUrlFor.call(void 0, rpcUrls, id), () => ( ""))}`;
+    return `${id}=${_nullishCoalesce(_chunkKQ2CB6FYcjs.rpcUrlFor.call(void 0, rpcUrls, id), () => ( ""))}`;
   }).join("|");
 }
 var cachedAdapter = null;
@@ -189,9 +189,9 @@ function useReownWallet() {
           await switchChainAsync({ chainId });
         }
       } catch (err) {
-        if (_chunkKWXEW5SVcjs.isUnsupportedChainSwitchError.call(void 0, err)) {
+        if (_chunkKQ2CB6FYcjs.isUnsupportedChainSwitchError.call(void 0, err)) {
           throw new Error(
-            `Switch to ${_chunkEGB3NWMLcjs.getChainName.call(void 0, chainId)} in your wallet to continue`
+            `Switch to ${_chunkJWX33GHXcjs.getChainName.call(void 0, chainId)} in your wallet to continue`
           );
         }
         throw err;
@@ -223,7 +223,7 @@ function DepositModalWithReown(props) {
     reown.disconnect();
   }, [reown.disconnect]);
   return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
-    _chunkM3HAQUVOcjs.DepositModalInner,
+    _chunk2JJHOAVWcjs.DepositModalInner,
     {
       ...props,
       reownWallet: reownWithSolana,

package/dist/{DepositModalReown-RLSGDANC.mjs → DepositModalReown-PXZ3VRDG.mjs}

@@ -1,18 +1,18 @@
 import {
   DepositModalInner
-} from "./chunk-SLAJQ5BS.mjs";
-import "./chunk-X73URRGG.mjs";
-import "./chunk-2APKKVQK.mjs";
+} from "./chunk-IYRT3PQK.mjs";
+import "./chunk-VVAGYN2B.mjs";
+import "./chunk-CSUTQI7V.mjs";
 import {
   isUnsupportedChainSwitchError,
   rpcUrlFor
-} from "./chunk-CUSYITEG.mjs";
-import "./chunk-IQ6P2TBV.mjs";
-import "./chunk-YJP274QC.mjs";
+} from "./chunk-LPXQ65KL.mjs";
+import "./chunk-6STXGQE3.mjs";
+import "./chunk-M5PWZT2F.mjs";
 import {
   SUPPORTED_CHAINS,
   getChainName
-} from "./chunk-KZGITCZT.mjs";
+} from "./chunk-2IHE3ZZA.mjs";
 
 // src/DepositModalReown.tsx
 import { useCallback, useMemo } from "react";

package/dist/{caip-CA6s0-GB.d.cts → caip-523Zrc3r.d.cts}

@@ -12,7 +12,6 @@ declare function tokenIconUrl(symbol: string): string;
  */
 declare function getTokenIcon(symbol: string): string;
 
-declare const DEFAULT_BACKEND_URL = "https://v1.orchestrator.rhinestone.dev/deposit-widget";
 declare const NATIVE_TOKEN_ADDRESS: Address;
 declare const CHAIN_BY_ID: Record<number, Chain>;
 declare const SOURCE_CHAINS: Chain[];
@@ -73,4 +72,4 @@ declare const HYPERCORE_USDC_ADDRESS = "0xb88339CB7199b77E23DB6E890353E22632Ba63
  */
 declare const HYPERCORE_USDT0_ADDRESS = "0xB8CE59FC3717ada4C02eaDF9682A9e934F625ebb";
 
-export { type SupportedTokenOption as A, CHAIN_BY_ID as C, DEFAULT_BACKEND_URL as D, HYPERCORE_CHAIN_ID as H, NATIVE_TOKEN_ADDRESS as N, SOURCE_CHAINS as S, HYPERCORE_USDC_ADDRESS as a, HYPERCORE_USDT0_ADDRESS as b, SUPPORTED_CHAINS as c, chainRegistry as d, getChainIcon as e, findChainIdForToken as f, getChainBadge as g, getChainId as h, getChainName as i, getChainObject as j, getExplorerName as k, getExplorerTxUrl as l, getExplorerUrl as m, getSupportedChainIds as n, getSupportedTargetTokens as o, getSupportedTokenSymbolsForChain as p, getTargetTokenSymbolsForChain as q, getTokenAddress as r, getTokenDecimals as s, getTokenDecimalsByAddress as t, getTokenIcon as u, getTokenSymbol as v, getUsdcAddress as w, getUsdcDecimals as x, isSupportedTokenAddressForChain as y, tokenIconUrl as z };
+export { type SupportedTokenOption as A, CHAIN_BY_ID as C, HYPERCORE_CHAIN_ID as H, NATIVE_TOKEN_ADDRESS as N, SOURCE_CHAINS as S, HYPERCORE_USDC_ADDRESS as a, HYPERCORE_USDT0_ADDRESS as b, SUPPORTED_CHAINS as c, chainRegistry as d, getChainIcon as e, findChainIdForToken as f, getChainBadge as g, getChainId as h, getChainName as i, getChainObject as j, getExplorerName as k, getExplorerTxUrl as l, getExplorerUrl as m, getSupportedChainIds as n, getSupportedTargetTokens as o, getSupportedTokenSymbolsForChain as p, getTargetTokenSymbolsForChain as q, getTokenAddress as r, getTokenDecimals as s, getTokenDecimalsByAddress as t, getTokenIcon as u, getTokenSymbol as v, getUsdcAddress as w, getUsdcDecimals as x, isSupportedTokenAddressForChain as y, tokenIconUrl as z };

package/dist/{caip-CA6s0-GB.d.ts → caip-523Zrc3r.d.ts}

@@ -12,7 +12,6 @@ declare function tokenIconUrl(symbol: string): string;
  */
 declare function getTokenIcon(symbol: string): string;
 
-declare const DEFAULT_BACKEND_URL = "https://v1.orchestrator.rhinestone.dev/deposit-widget";
 declare const NATIVE_TOKEN_ADDRESS: Address;
 declare const CHAIN_BY_ID: Record<number, Chain>;
 declare const SOURCE_CHAINS: Chain[];
@@ -73,4 +72,4 @@ declare const HYPERCORE_USDC_ADDRESS = "0xb88339CB7199b77E23DB6E890353E22632Ba63
  */
 declare const HYPERCORE_USDT0_ADDRESS = "0xB8CE59FC3717ada4C02eaDF9682A9e934F625ebb";
 
-export { type SupportedTokenOption as A, CHAIN_BY_ID as C, DEFAULT_BACKEND_URL as D, HYPERCORE_CHAIN_ID as H, NATIVE_TOKEN_ADDRESS as N, SOURCE_CHAINS as S, HYPERCORE_USDC_ADDRESS as a, HYPERCORE_USDT0_ADDRESS as b, SUPPORTED_CHAINS as c, chainRegistry as d, getChainIcon as e, findChainIdForToken as f, getChainBadge as g, getChainId as h, getChainName as i, getChainObject as j, getExplorerName as k, getExplorerTxUrl as l, getExplorerUrl as m, getSupportedChainIds as n, getSupportedTargetTokens as o, getSupportedTokenSymbolsForChain as p, getTargetTokenSymbolsForChain as q, getTokenAddress as r, getTokenDecimals as s, getTokenDecimalsByAddress as t, getTokenIcon as u, getTokenSymbol as v, getUsdcAddress as w, getUsdcDecimals as x, isSupportedTokenAddressForChain as y, tokenIconUrl as z };
+export { type SupportedTokenOption as A, CHAIN_BY_ID as C, HYPERCORE_CHAIN_ID as H, NATIVE_TOKEN_ADDRESS as N, SOURCE_CHAINS as S, HYPERCORE_USDC_ADDRESS as a, HYPERCORE_USDT0_ADDRESS as b, SUPPORTED_CHAINS as c, chainRegistry as d, getChainIcon as e, findChainIdForToken as f, getChainBadge as g, getChainId as h, getChainName as i, getChainObject as j, getExplorerName as k, getExplorerTxUrl as l, getExplorerUrl as m, getSupportedChainIds as n, getSupportedTargetTokens as o, getSupportedTokenSymbolsForChain as p, getTargetTokenSymbolsForChain as q, getTokenAddress as r, getTokenDecimals as s, getTokenDecimalsByAddress as t, getTokenIcon as u, getTokenSymbol as v, getUsdcAddress as w, getUsdcDecimals as x, isSupportedTokenAddressForChain as y, tokenIconUrl as z };

package/dist/{chunk-KZGITCZT.mjs → chunk-2IHE3ZZA.mjs}

@@ -151,7 +151,6 @@ import {
   soneium as soneium2,
   unichain as unichain2
 } from "viem/chains";
-var DEFAULT_BACKEND_URL = "https://v1.orchestrator.rhinestone.dev/deposit-widget";
 var NATIVE_TOKEN_ADDRESS = "0x0000000000000000000000000000000000000000";
 var ALL_CHAINS_BY_ID = {
   [mainnet2.id]: mainnet2,
@@ -776,7 +775,6 @@ export {
   getChainIcon,
   tokenIconUrl,
   getTokenIcon,
-  DEFAULT_BACKEND_URL,
   NATIVE_TOKEN_ADDRESS,
   CHAIN_BY_ID,
   SOURCE_CHAINS,