@rhinestone/deposit-modal 0.17.0 → 0.19.0

package/dist/offramp.mjs

@@ -0,0 +1,25 @@
+import {
+  rampQuery,
+  rampResourceId
+} from "./chunk-PP4QE32S.mjs";
+import {
+  ScopedRequestError,
+  createBearerTransport
+} from "./chunk-ZGHVJ2XM.mjs";
+import "./chunk-X6N2XPTO.mjs";
+
+// src/core/offramp-service.ts
+function createOfframpService(options) {
+  const request = createBearerTransport(options);
+  return {
+    createSession: (body) => request("/offramp/noah/sessions", body),
+    getSession: (id) => request(`/offramp/noah/sessions/${rampResourceId(id)}`),
+    getOptions: (intent) => request(`/offramp/noah/options?${rampQuery(intent)}`),
+    listPayments: (page = {}) => request(`/offramp/noah/payments?${rampQuery(page)}`),
+    getPayment: (id) => request(`/offramp/noah/payments/${rampResourceId(id)}`)
+  };
+}
+export {
+  ScopedRequestError,
+  createOfframpService
+};

package/dist/onramp.cjs

@@ -0,0 +1,40 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+var _chunkADEWTBSNcjs = require('./chunk-ADEWTBSN.cjs');
+
+
+
+var _chunkISLVD5HQcjs = require('./chunk-ISLVD5HQ.cjs');
+require('./chunk-PYOC6K24.cjs');
+
+// src/core/onramp-service.ts
+function createOnrampService(options) {
+  const request = _chunkISLVD5HQcjs.createBearerTransport.call(void 0, options);
+  return {
+    createSetup: (body) => request("/onramp/noah/setup", body),
+    getSetup: (id) => request(`/onramp/noah/setup/${_chunkADEWTBSNcjs.rampResourceId.call(void 0, id)}`),
+    getOptions: (intent) => request(`/onramp/noah/options?${_chunkADEWTBSNcjs.rampQuery.call(void 0, intent)}`),
+    listAccounts: (page = {}) => request(
+      `/onramp/noah/accounts?${_chunkADEWTBSNcjs.rampQuery.call(void 0, page)}`
+    ),
+    getAccount: (id) => request(`/onramp/noah/accounts/${_chunkADEWTBSNcjs.rampResourceId.call(void 0, id)}`),
+    /**
+     * Mint a hosted address for the customer to read their account number or
+     * international account number from. A POST because minting one is a
+     * provider write; the coordinates themselves never cross this API.
+     */
+    getAccountDetails: (id) => request(
+      `/onramp/noah/accounts/${_chunkADEWTBSNcjs.rampResourceId.call(void 0, id)}/details`,
+      {}
+    ),
+    listPayments: (page = {}) => request(
+      `/onramp/noah/payments?${_chunkADEWTBSNcjs.rampQuery.call(void 0, page)}`
+    ),
+    getPayment: (id) => request(`/onramp/noah/payments/${_chunkADEWTBSNcjs.rampResourceId.call(void 0, id)}`)
+  };
+}
+
+
+
+exports.ScopedRequestError = _chunkISLVD5HQcjs.ScopedRequestError; exports.createOnrampService = createOnrampService;

package/dist/onramp.d.cts

@@ -0,0 +1,55 @@
+import { C as CustomerSessionOptions } from './bearer-transport-CVHNBgoV.cjs';
+export { a as CustomerSession, S as ScopedRequestError } from './bearer-transport-CVHNBgoV.cjs';
+import { f as RampCurrency, H as HostedNextAction, B as BankIntent, R as RampPayment, P as PaymentLegStatus, a as PaymentReturnStatus, c as RampPage, d as RampOption, e as RampPagination } from './ramp-types-C6aUz4SZ.cjs';
+
+interface OnrampSetupRequest extends BankIntent {
+    purpose: "account_setup";
+}
+interface OnrampOptionsRequest extends BankIntent {
+    /** Decimal fiat major units sent; the actual transfer determines payment amount. */
+    amount?: string;
+}
+interface OnrampPayment extends RampPayment {
+    bankReceipt: PaymentLegStatus;
+    conversion: PaymentLegStatus;
+    cryptoDelivery: PaymentLegStatus;
+    refund: PaymentReturnStatus;
+    adjustment: PaymentReturnStatus;
+}
+interface OnrampAccount {
+    id: string;
+    currency: RampCurrency;
+    paymentMethod: "bank_transfer";
+    status: "pending" | "active" | "disabled";
+}
+/**
+ * The result of one account setup. Unlike an offramp session it carries no
+ * status and no expiry: the call either configured the account named here, or
+ * it failed. There is nothing to poll and nothing that lapses.
+ */
+interface OnrampSetup {
+    id: string;
+    account: OnrampAccount;
+}
+/** Where the customer reads their own bank coordinates; never returned here. */
+interface OnrampAccountDetails {
+    nextAction: HostedNextAction;
+}
+/** No requests until an onramp method is called. */
+declare function createOnrampService(options: CustomerSessionOptions): {
+    createSetup: (body: OnrampSetupRequest) => Promise<OnrampSetup>;
+    getSetup: (id: string) => Promise<OnrampSetup>;
+    getOptions: (intent: OnrampOptionsRequest) => Promise<RampPage<RampOption>>;
+    listAccounts: (page?: RampPagination) => Promise<RampPage<OnrampAccount>>;
+    getAccount: (id: string) => Promise<OnrampAccount>;
+    /**
+     * Mint a hosted address for the customer to read their account number or
+     * international account number from. A POST because minting one is a
+     * provider write; the coordinates themselves never cross this API.
+     */
+    getAccountDetails: (id: string) => Promise<OnrampAccountDetails>;
+    listPayments: (page?: RampPagination) => Promise<RampPage<OnrampPayment>>;
+    getPayment: (id: string) => Promise<OnrampPayment>;
+};
+
+export { CustomerSessionOptions, HostedNextAction, type OnrampAccount, type OnrampAccountDetails, type OnrampOptionsRequest, type OnrampPayment, type OnrampSetup, type OnrampSetupRequest, PaymentLegStatus, PaymentReturnStatus, RampCurrency, RampOption, RampPage, RampPagination, createOnrampService };

package/dist/onramp.d.ts

@@ -0,0 +1,55 @@
+import { C as CustomerSessionOptions } from './bearer-transport-CVHNBgoV.js';
+export { a as CustomerSession, S as ScopedRequestError } from './bearer-transport-CVHNBgoV.js';
+import { f as RampCurrency, H as HostedNextAction, B as BankIntent, R as RampPayment, P as PaymentLegStatus, a as PaymentReturnStatus, c as RampPage, d as RampOption, e as RampPagination } from './ramp-types-C6aUz4SZ.js';
+
+interface OnrampSetupRequest extends BankIntent {
+    purpose: "account_setup";
+}
+interface OnrampOptionsRequest extends BankIntent {
+    /** Decimal fiat major units sent; the actual transfer determines payment amount. */
+    amount?: string;
+}
+interface OnrampPayment extends RampPayment {
+    bankReceipt: PaymentLegStatus;
+    conversion: PaymentLegStatus;
+    cryptoDelivery: PaymentLegStatus;
+    refund: PaymentReturnStatus;
+    adjustment: PaymentReturnStatus;
+}
+interface OnrampAccount {
+    id: string;
+    currency: RampCurrency;
+    paymentMethod: "bank_transfer";
+    status: "pending" | "active" | "disabled";
+}
+/**
+ * The result of one account setup. Unlike an offramp session it carries no
+ * status and no expiry: the call either configured the account named here, or
+ * it failed. There is nothing to poll and nothing that lapses.
+ */
+interface OnrampSetup {
+    id: string;
+    account: OnrampAccount;
+}
+/** Where the customer reads their own bank coordinates; never returned here. */
+interface OnrampAccountDetails {
+    nextAction: HostedNextAction;
+}
+/** No requests until an onramp method is called. */
+declare function createOnrampService(options: CustomerSessionOptions): {
+    createSetup: (body: OnrampSetupRequest) => Promise<OnrampSetup>;
+    getSetup: (id: string) => Promise<OnrampSetup>;
+    getOptions: (intent: OnrampOptionsRequest) => Promise<RampPage<RampOption>>;
+    listAccounts: (page?: RampPagination) => Promise<RampPage<OnrampAccount>>;
+    getAccount: (id: string) => Promise<OnrampAccount>;
+    /**
+     * Mint a hosted address for the customer to read their account number or
+     * international account number from. A POST because minting one is a
+     * provider write; the coordinates themselves never cross this API.
+     */
+    getAccountDetails: (id: string) => Promise<OnrampAccountDetails>;
+    listPayments: (page?: RampPagination) => Promise<RampPage<OnrampPayment>>;
+    getPayment: (id: string) => Promise<OnrampPayment>;
+};
+
+export { CustomerSessionOptions, HostedNextAction, type OnrampAccount, type OnrampAccountDetails, type OnrampOptionsRequest, type OnrampPayment, type OnrampSetup, type OnrampSetupRequest, PaymentLegStatus, PaymentReturnStatus, RampCurrency, RampOption, RampPage, RampPagination, createOnrampService };

package/dist/onramp.mjs

@@ -0,0 +1,40 @@
+import {
+  rampQuery,
+  rampResourceId
+} from "./chunk-PP4QE32S.mjs";
+import {
+  ScopedRequestError,
+  createBearerTransport
+} from "./chunk-ZGHVJ2XM.mjs";
+import "./chunk-X6N2XPTO.mjs";
+
+// src/core/onramp-service.ts
+function createOnrampService(options) {
+  const request = createBearerTransport(options);
+  return {
+    createSetup: (body) => request("/onramp/noah/setup", body),
+    getSetup: (id) => request(`/onramp/noah/setup/${rampResourceId(id)}`),
+    getOptions: (intent) => request(`/onramp/noah/options?${rampQuery(intent)}`),
+    listAccounts: (page = {}) => request(
+      `/onramp/noah/accounts?${rampQuery(page)}`
+    ),
+    getAccount: (id) => request(`/onramp/noah/accounts/${rampResourceId(id)}`),
+    /**
+     * Mint a hosted address for the customer to read their account number or
+     * international account number from. A POST because minting one is a
+     * provider write; the coordinates themselves never cross this API.
+     */
+    getAccountDetails: (id) => request(
+      `/onramp/noah/accounts/${rampResourceId(id)}/details`,
+      {}
+    ),
+    listPayments: (page = {}) => request(
+      `/onramp/noah/payments?${rampQuery(page)}`
+    ),
+    getPayment: (id) => request(`/onramp/noah/payments/${rampResourceId(id)}`)
+  };
+}
+export {
+  ScopedRequestError,
+  createOnrampService
+};

package/dist/ramp-types-C6aUz4SZ.d.cts

@@ -0,0 +1,43 @@
+type RampCurrency = "EUR" | "USD";
+interface BankIntent {
+    country: string;
+    currency: RampCurrency;
+    paymentMethod: "bank_transfer";
+    optionId?: string;
+}
+interface HostedNextAction {
+    type: "hosted";
+    url: string;
+    presentation: "iframe";
+}
+interface RampSession {
+    id: string;
+    /** Interaction completion never proves settlement. */
+    status: "pending" | "completed" | "expired" | "failed";
+    expiresAt: string;
+    nextAction?: HostedNextAction;
+}
+interface RampOption {
+    optionId: string;
+    currency: RampCurrency;
+    paymentMethod: "bank_transfer";
+}
+type PaymentLegStatus = "not_started" | "pending" | "on_hold" | "processing" | "submitted" | "completed" | "failed";
+type PaymentReturnStatus = "none" | "pending" | "processing" | "completed" | "failed";
+interface RampPayment {
+    id: string;
+    amount: string;
+    currency: RampCurrency;
+    createdAt: string;
+    updatedAt: string;
+}
+interface RampPage<T> {
+    items: T[];
+    nextCursor?: string;
+}
+interface RampPagination {
+    cursor?: string;
+    limit?: number;
+}
+
+export type { BankIntent as B, HostedNextAction as H, PaymentLegStatus as P, RampPayment as R, PaymentReturnStatus as a, RampSession as b, RampPage as c, RampOption as d, RampPagination as e, RampCurrency as f };

package/dist/ramp-types-C6aUz4SZ.d.ts

@@ -0,0 +1,43 @@
+type RampCurrency = "EUR" | "USD";
+interface BankIntent {
+    country: string;
+    currency: RampCurrency;
+    paymentMethod: "bank_transfer";
+    optionId?: string;
+}
+interface HostedNextAction {
+    type: "hosted";
+    url: string;
+    presentation: "iframe";
+}
+interface RampSession {
+    id: string;
+    /** Interaction completion never proves settlement. */
+    status: "pending" | "completed" | "expired" | "failed";
+    expiresAt: string;
+    nextAction?: HostedNextAction;
+}
+interface RampOption {
+    optionId: string;
+    currency: RampCurrency;
+    paymentMethod: "bank_transfer";
+}
+type PaymentLegStatus = "not_started" | "pending" | "on_hold" | "processing" | "submitted" | "completed" | "failed";
+type PaymentReturnStatus = "none" | "pending" | "processing" | "completed" | "failed";
+interface RampPayment {
+    id: string;
+    amount: string;
+    currency: RampCurrency;
+    createdAt: string;
+    updatedAt: string;
+}
+interface RampPage<T> {
+    items: T[];
+    nextCursor?: string;
+}
+interface RampPagination {
+    cursor?: string;
+    limit?: number;
+}
+
+export type { BankIntent as B, HostedNextAction as H, PaymentLegStatus as P, RampPayment as R, PaymentReturnStatus as a, RampSession as b, RampPage as c, RampOption as d, RampPagination as e, RampCurrency as f };

package/dist/server.cjs

@@ -1,5 +1,56 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }// src/server.ts
 var DEFAULT_PROCESSOR_URL = "https://v1.orchestrator.rhinestone.dev/deposit-processor";
+function createCustomerSessionHandler(options) {
+  const url = `${(_nullishCoalesce(options.processorUrl, () => ( DEFAULT_PROCESSOR_URL))).replace(
+    /\/$/,
+    ""
+  )}/compliance/sessions`;
+  const responseHeaders = {
+    "Content-Type": "application/json",
+    "Cache-Control": "no-store"
+  };
+  const error = (status, message) => new Response(JSON.stringify({ error: message }), {
+    status,
+    headers: responseHeaders
+  });
+  return async (request) => {
+    if (request.method !== "POST") return error(405, "Method not allowed");
+    try {
+      const identity = await options.authorize(request);
+      if (!identity) return error(401, "Unauthorized");
+      const upstream = await fetch(url, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "x-api-key": options.apiKey
+        },
+        body: JSON.stringify({
+          externalCustomerId: identity.externalCustomerId,
+          ...identity.smartAccount ? { smartAccount: identity.smartAccount } : {}
+        }),
+        cache: "no-store",
+        redirect: "manual",
+        signal: AbortSignal.timeout(15e3)
+      });
+      if (!upstream.ok)
+        return error(
+          upstream.status >= 400 && upstream.status < 500 ? upstream.status : 502,
+          "Customer session unavailable"
+        );
+      const value = await upstream.json();
+      if (!value || typeof value !== "object")
+        return error(502, "Invalid customer session");
+      const { token, expiresAt } = value;
+      if (typeof token !== "string" || !token || /\s/.test(token) || typeof expiresAt !== "string" || !Number.isFinite(Date.parse(expiresAt)) || Date.parse(expiresAt) <= Date.now() || Date.parse(expiresAt) > Date.now() + 15 * 6e4)
+        return error(502, "Invalid customer session");
+      return new Response(JSON.stringify({ token, expiresAt }), {
+        headers: responseHeaders
+      });
+    } catch (e) {
+      return error(502, "Customer session unavailable");
+    }
+  };
+}
 function jsonError(message, status) {
   return new Response(JSON.stringify({ error: message }), {
     status,
@@ -79,7 +130,7 @@ function createRefundHandler(options) {
     let body_;
     try {
       body_ = JSON.parse(text);
-    } catch (e) {
+    } catch (e2) {
       return new Response(text, {
         status: upstream.status,
         headers: { "Content-Type": "application/json" }
@@ -93,4 +144,5 @@ function createRefundHandler(options) {
 }
 
 
-exports.createRefundHandler = createRefundHandler;
+
+exports.createCustomerSessionHandler = createCustomerSessionHandler; exports.createRefundHandler = createRefundHandler;

package/dist/server.d.cts

@@ -8,6 +8,18 @@
  * Whether a deposit belongs to a given user is something only your app knows,
  * so that one decision is yours (`authorize`) and everything else is here.
  */
+interface CustomerSessionAuthorization {
+    externalCustomerId: string;
+    smartAccount?: string;
+}
+interface CreateCustomerSessionHandlerOptions {
+    apiKey: string;
+    processorUrl?: string;
+    /** Authenticate and enforce your CSRF policy. Derive identity server-side, never from the request body. */
+    authorize: (request: Request) => CustomerSessionAuthorization | null | Promise<CustomerSessionAuthorization | null>;
+}
+/** Server-only token minting endpoint. Never mount this on an unauthenticated proxy. */
+declare function createCustomerSessionHandler(options: CreateCustomerSessionHandlerOptions): (request: Request) => Promise<Response>;
 /** Body your own UI POSTs to your endpoint. Never trusted on its own. */
 interface RefundRequestBody {
     chain: string;
@@ -62,4 +74,4 @@ interface CreateRefundHandlerOptions {
  */
 declare function createRefundHandler(options: CreateRefundHandlerOptions): (request: Request) => Promise<Response>;
 
-export { type CreateRefundHandlerOptions, type RefundAuthorization, createRefundHandler };
+export { type CreateCustomerSessionHandlerOptions, type CreateRefundHandlerOptions, type CustomerSessionAuthorization, type RefundAuthorization, createCustomerSessionHandler, createRefundHandler };

package/dist/server.d.ts

@@ -8,6 +8,18 @@
  * Whether a deposit belongs to a given user is something only your app knows,
  * so that one decision is yours (`authorize`) and everything else is here.
  */
+interface CustomerSessionAuthorization {
+    externalCustomerId: string;
+    smartAccount?: string;
+}
+interface CreateCustomerSessionHandlerOptions {
+    apiKey: string;
+    processorUrl?: string;
+    /** Authenticate and enforce your CSRF policy. Derive identity server-side, never from the request body. */
+    authorize: (request: Request) => CustomerSessionAuthorization | null | Promise<CustomerSessionAuthorization | null>;
+}
+/** Server-only token minting endpoint. Never mount this on an unauthenticated proxy. */
+declare function createCustomerSessionHandler(options: CreateCustomerSessionHandlerOptions): (request: Request) => Promise<Response>;
 /** Body your own UI POSTs to your endpoint. Never trusted on its own. */
 interface RefundRequestBody {
     chain: string;
@@ -62,4 +74,4 @@ interface CreateRefundHandlerOptions {
  */
 declare function createRefundHandler(options: CreateRefundHandlerOptions): (request: Request) => Promise<Response>;
 
-export { type CreateRefundHandlerOptions, type RefundAuthorization, createRefundHandler };
+export { type CreateCustomerSessionHandlerOptions, type CreateRefundHandlerOptions, type CustomerSessionAuthorization, type RefundAuthorization, createCustomerSessionHandler, createRefundHandler };

package/dist/server.mjs

@@ -1,5 +1,56 @@
 // src/server.ts
 var DEFAULT_PROCESSOR_URL = "https://v1.orchestrator.rhinestone.dev/deposit-processor";
+function createCustomerSessionHandler(options) {
+  const url = `${(options.processorUrl ?? DEFAULT_PROCESSOR_URL).replace(
+    /\/$/,
+    ""
+  )}/compliance/sessions`;
+  const responseHeaders = {
+    "Content-Type": "application/json",
+    "Cache-Control": "no-store"
+  };
+  const error = (status, message) => new Response(JSON.stringify({ error: message }), {
+    status,
+    headers: responseHeaders
+  });
+  return async (request) => {
+    if (request.method !== "POST") return error(405, "Method not allowed");
+    try {
+      const identity = await options.authorize(request);
+      if (!identity) return error(401, "Unauthorized");
+      const upstream = await fetch(url, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "x-api-key": options.apiKey
+        },
+        body: JSON.stringify({
+          externalCustomerId: identity.externalCustomerId,
+          ...identity.smartAccount ? { smartAccount: identity.smartAccount } : {}
+        }),
+        cache: "no-store",
+        redirect: "manual",
+        signal: AbortSignal.timeout(15e3)
+      });
+      if (!upstream.ok)
+        return error(
+          upstream.status >= 400 && upstream.status < 500 ? upstream.status : 502,
+          "Customer session unavailable"
+        );
+      const value = await upstream.json();
+      if (!value || typeof value !== "object")
+        return error(502, "Invalid customer session");
+      const { token, expiresAt } = value;
+      if (typeof token !== "string" || !token || /\s/.test(token) || typeof expiresAt !== "string" || !Number.isFinite(Date.parse(expiresAt)) || Date.parse(expiresAt) <= Date.now() || Date.parse(expiresAt) > Date.now() + 15 * 6e4)
+        return error(502, "Invalid customer session");
+      return new Response(JSON.stringify({ token, expiresAt }), {
+        headers: responseHeaders
+      });
+    } catch {
+      return error(502, "Customer session unavailable");
+    }
+  };
+}
 function jsonError(message, status) {
   return new Response(JSON.stringify({ error: message }), {
     status,
@@ -92,5 +143,6 @@ function createRefundHandler(options) {
   };
 }
 export {
+  createCustomerSessionHandler,
   createRefundHandler
 };

package/dist/styles.css

@@ -2176,6 +2176,18 @@
   font-feature-settings: "tnum";
 }
 
+/* Payment mode's price. Same weight as the input it replaces, but sized down:
+   a token amount carries more digits than a USD figure and must not wrap. */
+.rs-amount-fixed {
+  width: 100%;
+  font-size: 40px;
+  font-weight: 700;
+  line-height: 1.1;
+  color: var(--rs-foreground);
+  font-feature-settings: "tnum";
+  overflow-wrap: anywhere;
+}
+
 .rs-amount-prefix {
   flex: none;
   user-select: none;
@@ -3491,6 +3503,19 @@
   height: 190px;
 }
 
+/* Sits above the address and outranks it: the amount is the instruction the
+   payer has to get right, the address is what the QR already carries. */
+.rs-deposit-address-amount {
+  width: 100%;
+  padding: 0 16px 4px;
+  font-size: 15px;
+  font-weight: 600;
+  line-height: normal;
+  color: var(--rs-foreground);
+  text-align: center;
+  font-feature-settings: "tnum";
+}
+
 .rs-deposit-address-value {
   width: 100%;
   padding: 0 16px 12px;

package/dist/{types-B9SbZQIG.d.ts → types-BOxa1DE-.d.ts}

@@ -87,8 +87,9 @@ type RecoveryErrorCode = "DEPOSIT_NOT_RECOVERABLE" | "RECOVERY_UNSUPPORTED" | "S
 /**
  * How a `GET /deposits` row reads on screen, and which rows are on screen at
  * all. Shared rather than private to the history panel: the header's status dot
- * derives from the same rows the panel lists, and a second copy of either
- * answer would let the badge and the list disagree.
+ * derives from the same rows the panel lists, the arrival expectation inside a
+ * row is gated on the same statuses, and a second copy of any of those answers
+ * would let the badge, the list and the arrival line disagree.
  */
 type HistoryStatus = "pending" | "processing" | "completed" | "failed" | "refunded" | "spam";
 
@@ -198,6 +199,32 @@ interface FiatMethodsConfig {
     "bank-transfer"?: boolean;
     "apple-pay"?: boolean;
 }
+/**
+ * Turns the modal into a checkout for one order: the amount is the merchant's
+ * price rather than the payer's choice, and the account is the order's rather
+ * than the recipient's.
+ *
+ * Every funding method stays available, and only the wallet path can hold a
+ * payer to the amount — a QR, exchange or card payer can still send the wrong
+ * one. Reconcile what arrives; `destinationAmount` on the `complete` lifecycle
+ * event is the delivered figure.
+ */
+interface PaymentConfig {
+    /**
+     * The order's account salt, as the merchant's server registered it. Both sides
+     * must pass the same 32 bytes: the address is derived from it, so a different
+     * salt is a different account and the payment lands somewhere the merchant is
+     * not watching. It replaces the (recipient, target) derivation entirely, which
+     * is what lets one recipient hold many orders.
+     */
+    salt: Hex;
+    /**
+     * Required destination amount, in base units of `targetToken`. NOT a USD
+     * figure — the amount screen's own input is USD, and this is deliberately not
+     * that, since it is the quantity the merchant must receive.
+     */
+    amount: string;
+}
 interface DepositModalProps {
     /**
      * A wallet the host app already has connected. Pass this to reuse the user's
@@ -226,6 +253,8 @@ interface DepositModalProps {
      */
     defaultAmount?: string;
     recipient: Address | string;
+    /** Renders the modal as a checkout for one order. See {@link PaymentConfig}. */
+    payment?: PaymentConfig;
     /**
      * The user's current in-app balance, in USD, as the consuming app displays
      * it. When provided, the amount screen shows a "Balance after deposit" row
@@ -486,6 +515,13 @@ type DepositLifecycleEvent = {
     destinationTxHash?: string;
     /** Source-token base units (e.g. "1100000" for 1.10 USDC). */
     amount: string;
+    /**
+     * What actually arrived, in `targetToken` base units, once the bridge
+     * reports it — the only field that answers "was the invoice paid in
+     * full?". `amount` is the source side and says nothing about delivery.
+     * Absent until the completing event carries a destination leg.
+     */
+    destinationAmount?: string;
     sourceChain: ChainId | "unknown";
     sourceToken?: string;
     /**
@@ -893,7 +929,7 @@ type WithdrawAnalyticsEvent = WithdrawAnalyticsEventPayload & AnalyticsEventEnve
  */
 type ClaimAnalyticsStep = "lookup" | "select" | "review" | "submit";
 /** Every reason has a call site in the claim flow; none is aspirational. */
-type ClaimAnalyticsFailureReason = RoutableAnalyticsReason<"lookup_transaction_hash_invalid" | "lookup_failed" | "lookup_no_deposits_found" | "lookup_no_eligible_deposits" | "refund_destination_invalid" | "recovery_deposit_data_incomplete" | "signature_rejected" | "signature_invalid" | "recovery_deposit_not_recoverable" | "recovery_unsupported" | "signature_verification_unavailable" | "refund_reconciliation_required" | "refund_failed" | "refund_service_unreachable" | "modal_close_refused_in_flight">;
+type ClaimAnalyticsFailureReason = RoutableAnalyticsReason<"lookup_transaction_hash_invalid" | "lookup_failed" | "lookup_no_deposits_found" | "lookup_no_eligible_deposits" | "refund_destination_invalid" | "refund_destination_is_deposit_address" | "recovery_deposit_data_incomplete" | "signature_rejected" | "signature_invalid" | "recovery_deposit_not_recoverable" | "recovery_unsupported" | "signature_verification_unavailable" | "refund_reconciliation_required" | "refund_failed" | "refund_service_unreachable" | "modal_close_refused_in_flight">;
 type ClaimAnalyticsAbandonmentReason = "back" | "modal_close";
 type ClaimAnalyticsCloseSource = "header_button" | "escape" | "overlay" | "host_controlled" | "success_done" | "failure_cancel"
 /** The labelled control back to the history list a recovery was started from. */
@@ -1016,4 +1052,4 @@ interface AnalyticsIngestFailureEvent {
 }
 type ModalAnalyticsEvent = DepositAnalyticsEvent | WithdrawAnalyticsEvent | ClaimAnalyticsEvent | AnalyticsIngestFailureEvent;
 
-export type { OutputTokenRule as $, AnalyticsEventEnvelope as A, DepositAnalyticsStep as B, ChainId as C, DepositAnalyticsAbandonmentReason as D, DepositAnalyticsTransferStep as E, DepositAnalyticsUiOutcome as F, DepositAnalyticsWalletStep as G, DepositAssetMigrationMethodIdentifiers as H, DepositCompleteEventData as I, DepositExchangeConnectMethodIdentifiers as J, DepositFailedEventData as K, DepositFiatOnrampMethodIdentifiers as L, DepositFundingMethod as M, DepositLifecycleEvent as N, DepositModalProps as O, DepositModalTheme as P, DepositModalUIConfig as Q, DepositSubmittedEventData as R, DepositTransferHandoffIdentifiers as S, DepositWalletIntegration as T, DepositWalletMethodIdentifiers as U, ErrorEventData as V, FiatMethodsConfig as W, HistoryAnalyticsBadge as X, HistoryClaimEntrySource as Y, HistoryStatus as Z, ModalAnalyticsEvent as _, AnalyticsIngestFailureEvent as a, RecoveryErrorCode as a0, RpcUrlMap as a1, SignRecovery as a2, SignRecoveryPayload as a3, WithdrawAnalyticsAbandonmentReason as a4, WithdrawAnalyticsCloseSource as a5, WithdrawAnalyticsEvent as a6, WithdrawAnalyticsEventPayload as a7, WithdrawAnalyticsFailureReason as a8, WithdrawAnalyticsSessionProperties as a9, WithdrawAnalyticsStep as aa, WithdrawAnalyticsUiOutcome as ab, WithdrawCompleteEventData as ac, WithdrawFailedEventData as ad, WithdrawLifecycleEvent as ae, WithdrawModalProps as af, WithdrawSubmittedEventData as ag, WithdrawTransferRequest as ah, AnalyticsIngestFailureReason as b, AnalyticsReasonFamily as c, AssetMigrationsConfig as d, AssetOption as e, ClaimAnalyticsAbandonmentReason as f, ClaimAnalyticsCloseSource as g, ClaimAnalyticsCorrelation as h, ClaimAnalyticsEntrySource as i, ClaimAnalyticsEvent as j, ClaimAnalyticsEventPayload as k, ClaimAnalyticsFailureReason as l, ClaimAnalyticsSessionProperties as m, ClaimAnalyticsStep as n, ClaimAnalyticsUiOutcome as o, ConnectedEventData as p, DepositAnalyticsCloseSource as q, DepositAnalyticsCorrelator as r, DepositAnalyticsEvent as s, DepositAnalyticsEventPayload as t, DepositAnalyticsExchangeStep as u, DepositAnalyticsFailureReason as v, DepositAnalyticsFiatStep as w, DepositAnalyticsMigrationStep as x, DepositAnalyticsSessionProperties as y, DepositAnalyticsSharedStep as z };
+export type { OutputTokenRule as $, AnalyticsEventEnvelope as A, DepositAnalyticsStep as B, ChainId as C, DepositAnalyticsAbandonmentReason as D, DepositAnalyticsTransferStep as E, DepositAnalyticsUiOutcome as F, DepositAnalyticsWalletStep as G, DepositAssetMigrationMethodIdentifiers as H, DepositCompleteEventData as I, DepositExchangeConnectMethodIdentifiers as J, DepositFailedEventData as K, DepositFiatOnrampMethodIdentifiers as L, DepositFundingMethod as M, DepositLifecycleEvent as N, DepositModalProps as O, DepositModalTheme as P, DepositModalUIConfig as Q, DepositSubmittedEventData as R, DepositTransferHandoffIdentifiers as S, DepositWalletIntegration as T, DepositWalletMethodIdentifiers as U, ErrorEventData as V, FiatMethodsConfig as W, HistoryAnalyticsBadge as X, HistoryClaimEntrySource as Y, HistoryStatus as Z, ModalAnalyticsEvent as _, AnalyticsIngestFailureEvent as a, PaymentConfig as a0, RecoveryErrorCode as a1, RpcUrlMap as a2, SignRecovery as a3, SignRecoveryPayload as a4, WithdrawAnalyticsAbandonmentReason as a5, WithdrawAnalyticsCloseSource as a6, WithdrawAnalyticsEvent as a7, WithdrawAnalyticsEventPayload as a8, WithdrawAnalyticsFailureReason as a9, WithdrawAnalyticsSessionProperties as aa, WithdrawAnalyticsStep as ab, WithdrawAnalyticsUiOutcome as ac, WithdrawCompleteEventData as ad, WithdrawFailedEventData as ae, WithdrawLifecycleEvent as af, WithdrawModalProps as ag, WithdrawSubmittedEventData as ah, WithdrawTransferRequest as ai, AnalyticsIngestFailureReason as b, AnalyticsReasonFamily as c, AssetMigrationsConfig as d, AssetOption as e, ClaimAnalyticsAbandonmentReason as f, ClaimAnalyticsCloseSource as g, ClaimAnalyticsCorrelation as h, ClaimAnalyticsEntrySource as i, ClaimAnalyticsEvent as j, ClaimAnalyticsEventPayload as k, ClaimAnalyticsFailureReason as l, ClaimAnalyticsSessionProperties as m, ClaimAnalyticsStep as n, ClaimAnalyticsUiOutcome as o, ConnectedEventData as p, DepositAnalyticsCloseSource as q, DepositAnalyticsCorrelator as r, DepositAnalyticsEvent as s, DepositAnalyticsEventPayload as t, DepositAnalyticsExchangeStep as u, DepositAnalyticsFailureReason as v, DepositAnalyticsFiatStep as w, DepositAnalyticsMigrationStep as x, DepositAnalyticsSessionProperties as y, DepositAnalyticsSharedStep as z };