@rhinestone/deposit-modal 0.17.0 → 0.18.0

package/README.md

@@ -347,3 +347,71 @@ Local setup, the release process and where the docs live are in
 ## License
 
 MIT
+
+## Onramp and offramp services
+
+Deploy an updated `deposit-widget-proxy` before enabling these opt-in clients.
+Custom proxies must allow Authorization in CORS and forward customer routes
+without injecting `x-api-key`. Never proxy `POST /compliance/sessions` publicly.
+
+On your server, import `createCustomerSessionHandler` from
+`@rhinestone/deposit-modal/server`. Supply your server-held `apiKey` and an
+`authorize(request)` callback that authenticates the user, enforces CSRF policy,
+and returns `{ externalCustomerId, smartAccount? }` from trusted server state.
+Mount its returned handler on your authenticated POST endpoint. It returns only
+the 15-minute `token` and `expiresAt`, with no-store response headers.
+
+Use separate scoped clients for onramp and offramp. The transport is internal;
+the package does not expose a generic customer service or arbitrary request method.
+
+```ts
+import { createOnrampService } from '@rhinestone/deposit-modal/onramp';
+import { createOfframpService } from '@rhinestone/deposit-modal/offramp';
+import { getComplianceStatus } from '@rhinestone/deposit-modal/compliance';
+
+const options = {
+  backendUrl: proxyUrl,
+  getSession: () => authenticatedSessionClient.getCustomerSession(),
+};
+const onramp = createOnrampService(options);
+const offramp = createOfframpService(options);
+const interaction = await onramp.createSession({
+  purpose: 'account_setup',
+  country: 'DE',
+  currency: 'EUR',
+  paymentMethod: 'bank_transfer',
+});
+// The hosted journey handles verification through interaction.nextAction.
+const status = await getComplianceStatus(options);
+```
+
+The onramp client has `createSession`, `getSession`, `getOptions`, `listAccounts`,
+`getAccount`, `listPayments` and `getPayment`. The offramp client has the same
+session/options/payment methods, without accounts. `getComplianceStatus` retains
+the existing `/compliance/status` read separately; it is not a preliminary step.
+Shared types include `RampSession`, `RampOption` and `RampCurrency`.
+`CustomerSession` remains the browser bearer/expiry pair. Catch `ScopedRequestError`
+and inspect its `status` for HTTP failures; response bodies are not included.
+
+The three lightweight subpaths replace the unpublished `/customer` entry point.
+They do not import React, wallet connectors or the server-only token helper.
+
+`getSession` is called per request. Keep tokens in memory, scoped to the logged-in
+user, and refresh them through your authenticated server. The clients reject
+expired sessions and never fall back to an application key. They make no calls
+until explicitly invoked, so existing modals and Swapped flows remain unchanged.
+There is no preliminary capability request. Support/recovery methods belong to
+the future provider lifecycle implementation and are not exposed here.
+
+The initial contracts support EUR/USD bank transfers only. Onramp hosted setup
+uses `purpose: 'account_setup'` without an amount; the actual transfer determines
+fiat sent. Offramp hosted beneficiary collection uses
+`purpose: 'beneficiary_collection'`, separately from quoting and funding.
+Offramp options use `amount` as decimal fiat major units the recipient receives.
+No crypto-input quoting is exposed. Accounts return safe references/config/status,
+not bank instructions. Hosted interaction completion never means payment
+settlement; funding, payout and late returns have independent status fields.
+
+The provider adapter and journey execution are not connected by this release.
+Expect 503 until those implementations are deployed. Render hosted URLs only
+after the journey's iframe presentation has been verified; do not log/store URLs.

package/dist/{DepositModalReown-6CXXGQ7X.cjs → DepositModalReown-TVO3ZQQK.cjs}

@@ -1,7 +1,8 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
 
-var _chunkXJMDCBHScjs = require('./chunk-XJMDCBHS.cjs');
+var _chunkJV5OGG53cjs = require('./chunk-JV5OGG53.cjs');
+require('./chunk-LVCD6RHF.cjs');
 
 
 
@@ -10,13 +11,12 @@ var _chunkXJMDCBHScjs = require('./chunk-XJMDCBHS.cjs');
 
 
 
-var _chunkQGNJFDEOcjs = require('./chunk-QGNJFDEO.cjs');
-require('./chunk-JCWJ6HW7.cjs');
-require('./chunk-LVCD6RHF.cjs');
+var _chunkN3AAT6BScjs = require('./chunk-N3AAT6BS.cjs');
 
 
 
 var _chunkOY5N3E6Lcjs = require('./chunk-OY5N3E6L.cjs');
+require('./chunk-N6JJG57R.cjs');
 
 // src/DepositModalReown.tsx
 var _react = require('react');
@@ -44,7 +44,7 @@ var {
   unichain,
   katana,
   hyperEvm
-} = _chunkXJMDCBHScjs.getReownDependencies.call(void 0, )[1];
+} = _chunkJV5OGG53cjs.getReownDependencies.call(void 0, )[1];
 var APPKIT_NETWORK_BY_ID = {
   [mainnet.id]: mainnet,
   [optimism.id]: optimism,
@@ -76,7 +76,7 @@ function getAppKitNetwork(chainId) {
 
 // src/core/reown-theme.ts
 function mapTheme(theme) {
-  const themeMode = _chunkQGNJFDEOcjs.resolveThemeMode.call(void 0, _optionalChain([theme, 'optionalAccess', _ => _.mode])) === "light" ? "light" : "dark";
+  const themeMode = _chunkN3AAT6BScjs.resolveThemeMode.call(void 0, _optionalChain([theme, 'optionalAccess', _ => _.mode])) === "light" ? "light" : "dark";
   const themeVariables = {
     "--apkt-accent": _optionalChain([theme, 'optionalAccess', _2 => _2.ctaColor])
   };
@@ -93,7 +93,7 @@ function setAppKitTheme(appKit, theme) {
 
 // src/core/reown.tsx
 var _jsxruntime = require('react/jsx-runtime');
-var [appKitReact, appKitNetworks, wagmiAdapter, solanaAdapter] = _chunkXJMDCBHScjs.getReownDependencies.call(void 0, );
+var [appKitReact, appKitNetworks, wagmiAdapter, solanaAdapter] = _chunkJV5OGG53cjs.getReownDependencies.call(void 0, );
 var {
   createAppKit,
   useAppKit,
@@ -109,14 +109,14 @@ function buildTransports(rpcUrls, networks = EVM_NETWORKS) {
   const transports = {};
   for (const network of networks) {
     const id = Number(network.id);
-    transports[id] = _viem.http.call(void 0, _chunkQGNJFDEOcjs.rpcUrlFor.call(void 0, rpcUrls, id));
+    transports[id] = _viem.http.call(void 0, _chunkN3AAT6BScjs.rpcUrlFor.call(void 0, rpcUrls, id));
   }
   return transports;
 }
 function getEvmRpcFingerprint(rpcUrls, networks) {
   return networks.map((network) => {
     const id = Number(network.id);
-    return `${id}=${_nullishCoalesce(_chunkQGNJFDEOcjs.rpcUrlFor.call(void 0, rpcUrls, id), () => ( ""))}`;
+    return `${id}=${_nullishCoalesce(_chunkN3AAT6BScjs.rpcUrlFor.call(void 0, rpcUrls, id), () => ( ""))}`;
   }).join("|");
 }
 var cachedAdapter = null;
@@ -187,7 +187,7 @@ function ReownWalletProvider({
   backendUrl,
   children
 }) {
-  const rpcUrls = _chunkQGNJFDEOcjs.useStableRpcUrls.call(void 0, rpcUrlsProp);
+  const rpcUrls = _chunkN3AAT6BScjs.useStableRpcUrls.call(void 0, rpcUrlsProp);
   const [queryClient] = _react.useState.call(void 0, () => new (0, _reactquery.QueryClient)());
   const overrides = _react.useMemo.call(void 0, () => {
     if (!rpcUrls) return void 0;
@@ -199,14 +199,14 @@ function ReownWalletProvider({
     return out;
   }, [rpcUrls]);
   const [state, setState] = _react.useState.call(void 0, () => {
-    const primed = _chunkQGNJFDEOcjs.peekRuntimeChains.call(void 0, backendUrl, overrides);
+    const primed = _chunkN3AAT6BScjs.peekRuntimeChains.call(void 0, backendUrl, overrides);
     return { ready: primed !== null, chains: _nullishCoalesce(primed, () => ( [])) };
   });
   _react.useEffect.call(void 0, () => {
     let active = true;
-    const primed = _chunkQGNJFDEOcjs.peekRuntimeChains.call(void 0, backendUrl, overrides);
+    const primed = _chunkN3AAT6BScjs.peekRuntimeChains.call(void 0, backendUrl, overrides);
     setState({ ready: primed !== null, chains: _nullishCoalesce(primed, () => ( [])) });
-    _chunkQGNJFDEOcjs.primeRuntimeChains.call(void 0, backendUrl, overrides).then((chains) => {
+    _chunkN3AAT6BScjs.primeRuntimeChains.call(void 0, backendUrl, overrides).then((chains) => {
       if (active) setState({ ready: true, chains });
     });
     return () => {
@@ -215,7 +215,7 @@ function ReownWalletProvider({
   }, [backendUrl, overrides]);
   _react.useEffect.call(void 0, () => {
     setAppKitTheme(appKitReact.modal, theme);
-    return _chunkQGNJFDEOcjs.followSystemAppearance.call(void 0, 
+    return _chunkN3AAT6BScjs.followSystemAppearance.call(void 0, 
       _optionalChain([theme, 'optionalAccess', _7 => _7.mode]),
       () => setAppKitTheme(appKitReact.modal, theme)
     );
@@ -279,7 +279,7 @@ function useReownWalletSession() {
           await switchChainAsync({ chainId });
         }
       } catch (err) {
-        if (_chunkQGNJFDEOcjs.isUnsupportedChainSwitchError.call(void 0, err)) {
+        if (_chunkN3AAT6BScjs.isUnsupportedChainSwitchError.call(void 0, err)) {
           throw new Error(
             `Switch to ${chainDisplayName(chainId)} in your wallet to continue`
           );
@@ -292,7 +292,7 @@ function useReownWalletSession() {
 
 // src/DepositModalReown.tsx
 
-var [appKitReact2, , , , solanaAdapterReact] = _chunkXJMDCBHScjs.getReownDependencies.call(void 0, );
+var [appKitReact2, , , , solanaAdapterReact] = _chunkJV5OGG53cjs.getReownDependencies.call(void 0, );
 var { useAppKitProvider } = appKitReact2;
 var { useAppKitConnection } = solanaAdapterReact;
 function DepositModalWithReown(props) {
@@ -314,7 +314,7 @@ function DepositModalWithReown(props) {
     reown.disconnect();
   }, [reown.disconnect]);
   return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
-    _chunkXJMDCBHScjs.DepositModalInner,
+    _chunkJV5OGG53cjs.DepositModalInner,
     {
       ...props,
       walletSession: reownWithSolana,

package/dist/{DepositModalReown-ELDSTIME.mjs → DepositModalReown-VCY65DJX.mjs}

@@ -1,7 +1,8 @@
 import {
   DepositModalInner,
   getReownDependencies
-} from "./chunk-H66WM5AO.mjs";
+} from "./chunk-EKC2IRQG.mjs";
+import "./chunk-FTWKAJGN.mjs";
 import {
   followSystemAppearance,
   isUnsupportedChainSwitchError,
@@ -10,13 +11,12 @@ import {
   resolveThemeMode,
   rpcUrlFor,
   useStableRpcUrls
-} from "./chunk-QMGEK623.mjs";
-import "./chunk-XCBDJPBD.mjs";
-import "./chunk-FTWKAJGN.mjs";
+} from "./chunk-AIZKGFVA.mjs";
 import {
   SUPPORTED_CHAIN_IDS,
   getChainName
 } from "./chunk-EAGMY3QE.mjs";
+import "./chunk-3TEVMP76.mjs";
 
 // src/DepositModalReown.tsx
 import { useCallback, useMemo as useMemo2 } from "react";

package/dist/WithdrawModal-GR3HLYXU.cjs

@@ -0,0 +1,11 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+var _chunk34JVJZEZcjs = require('./chunk-34JVJZEZ.cjs');
+require('./chunk-N3AAT6BS.cjs');
+require('./chunk-OY5N3E6L.cjs');
+require('./chunk-N6JJG57R.cjs');
+
+
+
+exports.WithdrawModal = _chunk34JVJZEZcjs.WithdrawModal; exports.buildWithdrawAnalyticsSessionProperties = _chunk34JVJZEZcjs.buildWithdrawAnalyticsSessionProperties;

package/dist/{WithdrawModal-QRMDR5T4.mjs → WithdrawModal-RMCYJJ4S.mjs}

@@ -1,10 +1,10 @@
 import {
   WithdrawModal,
   buildWithdrawAnalyticsSessionProperties
-} from "./chunk-ZHX4QROC.mjs";
-import "./chunk-QMGEK623.mjs";
-import "./chunk-XCBDJPBD.mjs";
+} from "./chunk-R2B6VD4E.mjs";
+import "./chunk-AIZKGFVA.mjs";
 import "./chunk-EAGMY3QE.mjs";
+import "./chunk-3TEVMP76.mjs";
 export {
   WithdrawModal,
   buildWithdrawAnalyticsSessionProperties

package/dist/bearer-transport-CVHNBgoV.d.cts

@@ -0,0 +1,14 @@
+interface CustomerSession {
+    token: string;
+    expiresAt: string;
+}
+interface CustomerSessionOptions {
+    backendUrl: string;
+    getSession: () => CustomerSession | Promise<CustomerSession>;
+}
+declare class ScopedRequestError extends Error {
+    readonly status: number;
+    constructor(status: number);
+}
+
+export { type CustomerSessionOptions as C, ScopedRequestError as S, type CustomerSession as a };

package/dist/bearer-transport-CVHNBgoV.d.ts

@@ -0,0 +1,14 @@
+interface CustomerSession {
+    token: string;
+    expiresAt: string;
+}
+interface CustomerSessionOptions {
+    backendUrl: string;
+    getSession: () => CustomerSession | Promise<CustomerSession>;
+}
+declare class ScopedRequestError extends Error {
+    readonly status: number;
+    constructor(status: number);
+}
+
+export { type CustomerSessionOptions as C, ScopedRequestError as S, type CustomerSession as a };