@spicenet-io/spiceflow-ui 4.16.0 → 4.17.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md DELETED
@@ -1,546 +0,0 @@
1
- # SpiceFlow UI SDK
2
-
3
- A React component library for building DeFi swap interfaces with multi-chain support.
4
-
5
- ## Version and migration
6
-
7
- Release `4.11.0` includes quote prewarming, scoped fee-hint reuse, concurrent fee
8
- checks, configurable fee-estimate tolerance, and faster execution-status polling.
9
- It uses `@spicenet-io/spiceflow-core@0.7.3`. Source spend caps, destination minimums
10
- and required destination receipts remain enforced. See the fee-estimate tolerance
11
- section below for the default and configuration.
12
-
13
- Check the actual registry tag and client pin before adopting it. See
14
- [CONSISTENCY-MIGRATION.md](CONSISTENCY-MIGRATION.md) for the earlier inventory/action
15
- migration. Publishing the SDK does not upgrade consuming apps automatically.
16
-
17
- ## Installation and provider setup
18
-
19
- Select an approved exact version, preserving the app's dependency-age and security policies:
20
-
21
- ```bash
22
- bun add --exact @spicenet-io/spiceflow-ui@4.11.0
23
- ```
24
-
25
- Reuse compatible host-owned Privy, wagmi and QueryClient providers. Read the exact
26
- package's peer dependencies; do not replace the wallet stack as part of a version bump.
27
-
28
- The SDK adds its stylesheet (spinner keyframes, focus ring, reduced-motion rule) to the
29
- page when it loads, so no CSS import is needed. `@spicenet-io/spiceflow-ui/styles.css`
30
- is still exported for a host whose Content Security Policy forbids inline styles;
31
- importing it as well is harmless.
32
-
33
- ```tsx
34
- import { SpiceFlowProvider } from "@spicenet-io/spiceflow-ui";
35
-
36
- // Inside the host's existing WagmiProvider → QueryClientProvider → PrivyProvider stack.
37
- <SpiceFlowProvider
38
- provider="privy"
39
- network="mainnet"
40
- nativeChainId={8453}
41
- rpcOverrides={clientRpcUrls}
42
- >
43
- {children}
44
- </SpiceFlowProvider>;
45
- ```
46
-
47
- Configure Privy credentials/policy on the host's `PrivyProvider`. Supply client RPCs
48
- through `rpcOverrides` for the chains you exercise, and keep the SDK/wallet chain sets
49
- aligned. An entry in `rpcOverrides` always wins; a chain without one uses the chain's
50
- built-in endpoint, so an integration that passes none keeps working. Wallet-library
51
- transports alone do not configure SDK reads. Rollup price lookups read only a
52
- host-configured RPC. Keep private credentials out of browser bundles.
53
-
54
- ## Integration ownership
55
-
56
- - Use stock components when they fit the approved UI; use `useSpiceSupply` for custom
57
- action forms. `useSpiceLock` and legacy `useSpiceAction` delegate to that controller.
58
- - In this source (not yet published), `useSpiceSupply` defaults `enabled` to `true`.
59
- Omit it for a mounted action form, or pass `enabled: isOpen` when a hidden form stays
60
- mounted. Use `canExecute` for submit-button readiness; fee calculation does not
61
- require toggling `enabled`. Published 4.10.0 still requires an explicit value.
62
- - Declare the destination token by chain and address:
63
- `destinationToken={{ chainId: 8453, address: USDC }}`. The SDK takes the symbol and
64
- decimals from the chain's token registry, then from the token contract, and holds the
65
- action until they are known. Decimals that cannot be read block the action; a symbol
66
- that cannot be read falls back to the shortened address. Any field you pass wins, so a
67
- full `{ address, symbol, decimals, chainId }` object behaves exactly as before.
68
- - Supply destination metadata, protocol `buildActionCalls` or destination-only
69
- `lockBatches`, beneficiary semantics, and awaited application updates. The SDK owns
70
- inventory, routing, Max, fees, accepted plans, funding, execution and recovery.
71
- - For the account, use `useSpiceAccount()` instead of reading `SpiceFlowProviderContext`:
72
- `mode` (`"embedded"` or `"external"`), `setMode`, `ownerAddress` for the current mode,
73
- both wallet addresses and the whitelist state. A provider with a fixed `mode` prop
74
- ignores `setMode`.
75
- - For custom holdings, use `useSpiceInventory` and `assetPositionId`. Keep raw balance,
76
- default visibility and spend eligibility separate. Preserve rows during refresh;
77
- stale/failed balances cannot authorize spending, and confirmed zero wins.
78
- - In this unreleased source, eligible External-mode actions with a matching wallet token
79
- and destination chain execute directly from the external signer, without embedded funding.
80
- Other assets/chains still use embedded funding and the shared routed executor.
81
- A controlled ERC20 action can opt into `actionExecution: { wallet: "external", recoveryKey: "my-action" }`
82
- when its contract requires the external caller. The SDK routes funds to that wallet,
83
- verifies delivery, then submits the captured host calls. This also permits a matching
84
- external source to execute directly while the app remains in Embedded mode.
85
- `onPayExecute` and `onLockExecute` remain blocked. Verify contract caller/beneficiary and NFT receiver behavior.
86
- Published `.16` does not contain this restoration.
87
- - Supply `input` adds fees to principal; `input-inclusive` uses a total budget; Pay
88
- `output` fixes the destination amount. Use controller readiness/Max/status instead of
89
- constructing an executor context or duplicating fee arithmetic in the host.
90
- - Use controller recovery for uncertain funding and `retryFinalization()` for failed
91
- application updates after settlement. Preserve original host terms across reload.
92
- - Deposit and rollup Withdraw retain distinct execution semantics while sharing
93
- inventory/policy. Account wallet withdrawal uses the fee-only Supply path.
94
-
95
- Inventory isolation does not establish support for simultaneous differently configured
96
- providers: underlying quote/execution transports still have global state.
97
-
98
- ## Liquidity venues
99
-
100
- When a flow has to swap on the destination chain, the SDK quotes every liquidity
101
- venue that covers that chain and takes the best fill: the most output on a
102
- supply, the least input on a pay. Routing is decided here, on your RPC. The
103
- solver only executes the calls the winning quote produced.
104
-
105
- Leave `liquidityVenues` off and you get the built-in venues. Declare it once on
106
- the provider to add your own, and every component picks them up.
107
-
108
- ```tsx
109
- <SpiceFlowProvider
110
- network="mainnet"
111
- nativeChainId={4663}
112
- rpcOverrides={{ 4663: ROBINHOOD_RPC }}
113
- liquidityVenues={{
114
- venues: [
115
- {
116
- protocol: "uniswap-v3",
117
- chainId: 4663,
118
- swapRouter: "0x1e406484F1F204b23cE84B9901C0171a738fd406",
119
- quoterV2: "0x3E290e5E01818002A0b672148BdC7514D861C7B3",
120
- hubCurrencies: ["0x0bd7d308f8e1639fab988df18a8011f41eacad73"],
121
- },
122
- ],
123
- }}
124
- >
125
- ```
126
-
127
- Your venues race the built-ins on price; they do not override them. Set
128
- `includeDefaults: false` to drop the built-ins and route only through what you
129
- declared. On a chain with no venue at all, quoting fails with that chain named
130
- rather than falling back to something you did not configure.
131
-
132
- Every entry names one chain and one protocol family, and serves both swap
133
- directions. Supply the **deployment's** addresses, not a pool address: a
134
- v3-style pool calls back into `msg.sender`, so swaps go through the router and
135
- quotes through the quoter. The SDK finds the pools from the fee tiers (or tick
136
- spacings) and hub currencies.
137
-
138
- | `protocol` | Required | Optional |
139
- | ---------------------- | ------------------------------------------------- | -------------------------------------------------------- |
140
- | `uniswap-v3` | `chainId`, `swapRouter`, `quoterV2` | `name`, `feeTiers`, `hubCurrencies`, `routerHasDeadline` |
141
- | `uniswap-v4` | `chainId`, `quoter`, `universalRouter`, `permit2` | `name`, `hubCurrencies` |
142
- | `aerodrome-slipstream` | `chainId`, `swapRouter`, `quoterV2` | `name`, `tickSpacings`, `hubCurrencies` |
143
-
144
- `name` is the label shown to the user as "via <name>" once a swap is quoted, so
145
- give it the name people know the venue by. It defaults to the protocol, which
146
- means a swap always names something real rather than a family it does not belong
147
- to.
148
-
149
- `hubCurrencies` are the intermediate tokens tried for two-hop routes, usually
150
- wrapped native and the chain's main stablecoin. Set `routerHasDeadline` when the
151
- deployment forked the original Uniswap `SwapRouter`, whose exact-output structs
152
- carry a deadline; SwapRouter02 forks do not.
153
-
154
- Most DEXs are forks of one of these families, so adding one is addresses only.
155
- A venue from a different family (a Uniswap v2 pair, Curve, Balancer) needs an
156
- adapter in the SDK — send us the chain, router, quoter and one funded pool and
157
- it becomes a `protocol` everyone can name.
158
-
159
- ## Components
160
-
161
- - **SwapWidget** - Main swap interface component
162
- - **AssetSelector** - Token selection component
163
- - **SpiceDeposit** - Deposit modal component
164
- - **StatusDisplay** - Transaction status display
165
- - **ProviderLogin** - Wallet connection component
166
- - **DebugWidget** - Development debugging component
167
- - **Button**, **Input**, **Modal** - UI primitives
168
-
169
- ## Development
170
-
171
- ### Rollup balance pricing
172
-
173
- Rollup USD values use the host-configured RPC provider's pricing capability when the balance API has no valid value. The built-in account panel and withdrawal modal enable this while open; custom `useSpiceAssets` consumers can opt in with `priceEnabled`. Quantities arrive independently. Lookups follow receipt mappings, prefer `nativeChainId`, and fall back to other supported chains with a configured Alchemy endpoint. Explicit account `tokenPrices` overrides still take precedence over provider quotes.
174
-
175
- Wallet discovery and rollup balances share a one-minute quote cache. Pricing polls only while the view is open and the page is visible. A failed refresh can retain a marked stale quote for up to five minutes; an unavailable quote displays `—`. No extra key, internal RPC, or symbol-based ERC-20 price fallback is used.
176
-
177
- ### Host tokens
178
-
179
- A token the SDK does not know (a protocol's own token, a receipt token) is declared
180
- once on the provider. Every surface that lists balances then reads it: Supply, Pay,
181
- Lock, the account panel and Withdraw.
182
-
183
- ```tsx
184
- <SpiceFlowProvider
185
- additionalSourceTokens={[{ address: TOKEN, chainId: 8453, symbol: "TOKEN", decimals: 18 }]}
186
- >
187
- ```
188
-
189
- A component's or hook's own `additionalSourceTokens` still works and is added to the
190
- provider's list.
191
-
192
- ### Host token prices
193
-
194
- A host token usually has no price the SDK can find, so the account panel lists it
195
- without a USD value. `AccountDisplay.tokenPrices` takes the host's own price for it,
196
- keyed by `chainId:address`. The value counts toward the account total and the row
197
- sorts with the rest.
198
-
199
- ```tsx
200
- <AccountDisplay tokenPrices={{ [`8453:${TOKEN}`]: tokenUsdPrice }} />
201
- ```
202
-
203
- The SDK's own price wins whenever it has one. A symbol key prices rollup balances
204
- only: any wallet token can carry any symbol, so a wallet balance is matched by address
205
- alone. The price is for display and never changes which balance an action spends.
206
-
207
- ### Host-supplied token logos
208
-
209
- `AccountDisplay.tokenLogos` maps a token symbol to a logo URL, the same key
210
- shape `tokenPrices` uses. A discovered embedded-wallet balance falls back to
211
- it when the RPC provider returns no logo, which is what happens for a token
212
- that is not in the chain's configured token list. Provider metadata still
213
- wins when it has a logo.
214
-
215
- ```tsx
216
- <AccountDisplay tokenLogos={{ TOKEN: tokenLogoUrl }} />
217
- ```
218
-
219
- For a host-rendered asset row, this source also exports the SDK's existing logo
220
- resolver from the package root:
221
-
222
- ```tsx
223
- const logo = useTokenLogo(asset.logoURI, asset.chainId, asset.address);
224
- ```
225
-
226
- Import `useTokenLogo` from `@spicenet-io/spiceflow-ui`. It returns the supplied logo
227
- immediately, otherwise resolves the shared chain/address token list asynchronously.
228
- Until a logo is available, it returns `undefined`; keep the balance and selection
229
- usable and render the host's usual fallback. This source export requires an SDK
230
- release before a consuming app can adopt it.
231
-
232
- ### Account with Deposit and Withdraw
233
-
234
- `SpiceAccount` renders `AccountDisplay` together with `SpiceDeposit` and
235
- `SpiceWithdraw`, and owns their open state. Withdraw on an idle rollup balance opens
236
- the modal with that balance selected. It takes every `AccountDisplay` prop except the
237
- two click handlers; `depositProps` and `withdrawProps` pass through to the modals.
238
- `styles` and `onDepositSuccess` are shared with the modals unless those props set
239
- their own.
240
-
241
- ```tsx
242
- <SpiceAccount appName="MyApp" onDepositSuccess={refresh} />
243
- ```
244
-
245
- Use `AccountDisplay` directly to hide one of the buttons or to open your own flow
246
- from them.
247
-
248
- ### Withdraw from an account balance
249
-
250
- `AccountDisplay.onWithdrawClick` receives the rollup receipt-token ID when a
251
- user clicks Withdraw on an idle rollup balance. The main Withdraw button calls
252
- it without an ID. Pass the ID to `SpiceWithdraw.initialSourceAssetId` to open
253
- the existing modal with that asset selected; the user chooses the destination
254
- network inside the modal. Existing callbacks that take no arguments continue
255
- to work.
256
-
257
- ```tsx
258
- const [withdrawOpen, setWithdrawOpen] = useState(false);
259
- const [withdrawAssetId, setWithdrawAssetId] = useState<string>();
260
-
261
- <AccountDisplay
262
- onWithdrawClick={(receiptTokenId) => {
263
- setWithdrawAssetId(receiptTokenId);
264
- setWithdrawOpen(true);
265
- }}
266
- />
267
- <SpiceWithdraw
268
- isOpen={withdrawOpen}
269
- onClose={() => setWithdrawOpen(false)}
270
- initialSourceAssetId={withdrawAssetId}
271
- />
272
- ```
273
-
274
- `buildSpicenetBatch` defaults to the SDK's `buildSpicenetWithdrawalBatch`. An
275
- integration that already passes a builder keeps it as an override, and its
276
- callbacks are unchanged.
277
- `initialSourceAssetId` selects a current balance by ID; it does not supply a
278
- cached balance or change the receipt's supported withdrawal routes.
279
-
280
- ### Funding sources
281
-
282
- Supply, Pay and Lock list every balance that can fund the action: the embedded wallet
283
- and rollup balances, and the connected external wallet, in either wallet mode. To keep a
284
- mode to its own wallet, pass `includeExternalWalletAssets={false}` (Embedded mode) or
285
- `includeCrossChainEmbeddedAssets={false}` (External mode). A user who holds the same
286
- token in both wallets sees one row per wallet; a host that preselects a source should
287
- match on `assetPositionId`, not on symbol or address alone.
288
-
289
- ### Routed external callers
290
-
291
- The controlled hook supports positive ERC20 input, input-inclusive and fixed-output
292
- actions with an explicit external caller. Configure `rpcOverrides` for the destination
293
- and any wallet-source chain. Quotes bind the source spend cap, destination delivery,
294
- external caller and host calls before funding. The SDK checks the destination receipt,
295
- ERC20 transfer amount and caller balance before requesting the host transactions.
296
- Only the final external transaction hash reaches awaited application finalization.
297
-
298
- Below one destination transaction's native gas cost, the accepted route buys gas for
299
- the pending external calls plus three later transactions. At or above that threshold
300
- it adds no reserve; direct execution still pays its own native gas. Native destinations,
301
- zero-principal, proceeds-funded and explicit source-escrow caller actions remain
302
- unsupported capability gaps. This does not add a stock-component prop or a durable
303
- execution journal: after signing fails, delivered tokens remain ordinary wallet assets
304
- and retrying the original route can fund again. Use `retryFinalization()` to retry only
305
- a failed application callback after the external action has confirmed.
306
-
307
- ### Action Fee Readiness
308
-
309
- - Routed Supply, Pay and Lock actions must surface fee estimation before enabling submission.
310
- - Eligible direct external actions still require an accepted plan but charge no Spicenet fee. Network gas remains payable in the external wallet; native Max reserves gas.
311
- - Deposit gas and rollup withdrawal semantics remain distinct from action intent fees. Preserve their existing quote/readiness requirements.
312
- - Account wallet withdrawal is a fee-only Supply action. Do not bypass its fee/readiness gates based on the label "withdraw".
313
- - Custom actions use the shared controller's `canExecute`; an available balance or old quote alone is insufficient.
314
- - `onSubmit` on `SpiceSupply`, `SpiceLock`, `SpiceDeposit` and the shared controller fires once when the user submits and the SDK accepts it, before any wallet prompt. Use it for "transaction in progress" feedback instead of listening for clicks on SDK buttons.
315
- - `max()` on the shared controller (`useSpiceSupply`, `useSpiceLock`) resolves the fee-aware Max for the selected source, or `null` when there is none or the action fixes its output. The host sets the result as the amount.
316
-
317
- ### Native action review
318
-
319
- `SpiceSupply` displays the actual fee total for `feeOnlyAction` even when no
320
- source is selected and the principal payment is zero. It omits the zero-value
321
- payment estimate. Pass `feeFundingReserve: { asset, amount }` when principal
322
- already in the executor must remain unavailable for fee funding.
323
-
324
- Use `onStateChange(state: SupplyModalState)` to review the native controller's
325
- `feeQuote`, `feePreview`, selected asset, operation key, readiness, progress and
326
- transaction hash. Do not create a second controller to approximate its fees.
327
- `submitDisabled` vetoes a new confirmation while native quoting remains active.
328
-
329
- `beforeSubmit(review: SupplySubmissionReview)` can await application checks such
330
- as a fresh position read. The SDK captures the accepted quote and rejects changed
331
- quotes, wallets, policies, closed forms and retired components before calling
332
- the synchronous `onSubmit` callback or starting execution. Use `onSubmit` for
333
- application feedback that the action was accepted. The controller
334
- holds submission readiness while those checks run, including across rerenders.
335
- After acceptance, `submitDisabled` may become true to reflect host busy state;
336
- it does not cancel that accepted execution. Application checks
337
- must still reject revoked consent in their `beforeSubmit` callback.
338
-
339
- Return the application receipt-verification promise from `onSuccess`. A failed
340
- application update uses the existing finalization retry without submitting the
341
- financial action again.
342
-
343
- ### Fee funding for funded actions
344
-
345
- Set `feeFunding: ["input", "proceeds", "balance"]` on `useSpiceSupply`,
346
- `SpiceSupply`, `useSpiceAction`, `useSpiceLock` or `SpiceLock` to use the shared
347
- hierarchy for wallet-funded actions on the destination chain. This applies to
348
- arbitrary protocol calls: swaps, deposits, staking, lending and repayments.
349
- Direct payment precedes conversion **within each tier**. Existing defaults remain
350
- unchanged; `feeFunding: []` retains the existing selected-source path.
351
-
352
- - `amountDirection: "input-inclusive"` offers the selected budget as input.
353
- Fees reduce that input and the SDK requotes the conversion before building
354
- protocol calls. The builder must honour the amount passed to it.
355
- - `"input"` preserves the selected principal; `"output"` preserves the exact
356
- payment or repayment. Neither offers required principal to the input tier.
357
- - `actionProceeds: { token, resolve }` declares an amount remaining in the
358
- executor **after all protocol calls**. Conversion output that is deposited,
359
- staked, used for repayment or sent away is not available for fees. The SDK
360
- resolves proceeds only if it reaches that tier and rechecks them before signing.
361
- The object declaration alone does not opt a funded action in: it requires a
362
- nonempty `feeFunding` order, preserving existing callers' selected-source planning.
363
- - Balance fallback reserves the selected principal. Only the remaining amount
364
- of that exact position can pay fees. `fees.sourceSpendCap` includes fee spending
365
- from the same position, and `fees.fundingSource` reports the chosen source.
366
-
367
- For an input-inclusive swap whose output stays in the executor,
368
- `actionProceeds: "output"` enables the same hierarchy and declares the output as
369
- available proceeds. If proceeds pay fees, `fees.destinationAmount` and
370
- `quote.estimatedOutput` show the net minimum and expected output respectively.
371
- Do not use this shortcut for calls that consume or send away the conversion output.
372
-
373
- Local external-wallet funding still transfers the principal to the executor
374
- first. Direct external execution keeps its native-gas path. External native Max
375
- reserves transfer gas, and fixed-principal Max reserves execution fees.
376
- Cross-chain and rollup **principal** routes retain their existing funding planner;
377
- this extension does not let destination proceeds pay earlier source or bridge
378
- costs, or add balance fallback to those routes. Custom fee orders on those routes fail
379
- explicitly instead of silently charging a different tier. Rollup balances can still fund
380
- fees for a local action through the existing fee-funding withdrawal leg. Standalone
381
- `SpiceDeposit` and rollup `SpiceWithdraw` retain their distinct transfer semantics;
382
- protocol deposits/withdrawals through the action controller use the contract above.
383
-
384
- All paths retain fee readiness and accepted-plan validation. This capability
385
- requires an SDK release and explicit integration opt-in; it does not upgrade
386
- published packages or deployed apps.
387
-
388
- ### Supply fee-estimate tolerance
389
-
390
- In `4.11.0`, `SpiceFlowProvider` defaults `feeToleranceBps` to
391
- `4000` (40%). Clients can override it, for example:
392
-
393
- ```tsx
394
- <SpiceFlowProvider {...config} feeToleranceBps={100}>
395
- {children}
396
- </SpiceFlowProvider>
397
- ```
398
-
399
- `100` is 1%; `0` disables the drift allowance. Existing conservative fixed-fee
400
- retention still applies when estimates fall. Values must be integers from `0` to
401
- `10000`. The allowance is relative to each accepted fee component: a fee of 100
402
- allows a fresh estimate up to 140 at the default. A zero fee cannot become positive.
403
-
404
- This setting covers fee convergence and pre-sign validation for user-transfer
405
- Supply plans, including stock/controlled Supply and input-mode Lock consumers.
406
- Within tolerance, the SDK keeps the quoted fee amounts and transaction calls;
407
- it does not add a 40% fee buffer, increase the source spend cap, or relax swap
408
- slippage/minimum outputs. Changing the setting invalidates prepared plans.
409
- Backend acceptance and funding checks still apply. Exact-output Pay, fee-only
410
- funding, deposits and backend-transfer convergence retain their separate rules.
411
-
412
- The open Supply controller retains fee construction hints for at most 30 seconds
413
- across amount edits in the same wallet, route and configuration scope. These hints
414
- do not enable submission: the SDK rebuilds the current calls, then checks source
415
- gas and destination fees concurrently. User-transfer source gas uses the same
416
- configured fee tolerance; accepted amounts and source caps stay unchanged. A hint
417
- that no longer fits falls back to full preparation. Closing the form clears hints.
418
- Servers advertising fee validation price the already constructed destination fee
419
- calls; older servers retain the estimate path. Cold preparation still sizes fees
420
- from scratch. Input route quotes debounce for 100 ms; routed fee preparation adds
421
- no second debounce. These optimizations do not establish a latency SLA.
422
-
423
- Fee-inclusive, user-transfer Supply also prewarms when an eligible source is
424
- selected with an empty/zero amount. It constructs a provisional quote for at most
425
- one token, capped by the available balance, and retains only fee hints. The amount,
426
- fee preview and executable plan remain empty. Typing can await in-flight prewarming
427
- before validating the real amount; closing or changing wallet/configuration
428
- cancels it. Failed provisional preparation leaves normal quoting available.
429
- This does not apply to direct external actions, exact-output Pay, fee-only actions
430
- or actions with explicit funding inputs/proceeds. No signature or submission occurs
431
- during prewarming. The time available before typing determines how much work it hides.
432
-
433
- ### Fee funding for fee-only actions
434
-
435
- - A fee-only action (`feeOnlyAction`) runs on what the executing wallet already holds; the SDK funds only the Spicenet fees, in the chain's fee token (`destinationToken`).
436
- - With no `selectedAsset`, the SDK picks the fee source and the user is never asked. The action's input (`actionInput`) comes first, then its proceeds (`actionProceeds`), so the fee stays inside the action the user submitted; then other balances: same-chain embedded wallet before rollup, and within each, balances already in the fee token before balances that swap into it. The first source that simulates and covers the fee wins and is reported as `fees.fundingSource`; a source whose swap has no route, or that cannot cover the fee within slippage, is skipped for the next.
437
- - Declare `actionInput` for every token the action consumes and honour the amount passed to `buildActionCalls`: when fees come from an input, the action is built for the remainder. Declare `actionProceeds` for a token the action leaves in the wallet. Both are optional; with neither, only balances can pay. Omit `actionProceeds` when the output is delivered to another owner.
438
- - `feeFunding` overrides the level order per transaction, for example `["proceeds", "input", "balance"]`; the order inside the balance level is fixed. An empty list leaves the choice to the host's `selectedAsset`.
439
- - A `selectedAsset` on a fee-only action is an explicit host choice and funds the fee from that balance as before.
440
- - Account wallet withdrawals use this hierarchy automatically and display the chosen fee asset without a selector. The exact withdrawal amount is reserved before ranking balances; only its remainder can pay fees. Custom `useSpiceSupply` actions that must preserve an exact principal can declare `feeFundingReserve: { asset, amount }` instead of offering that principal as `actionInput`.
441
- - `feeOnlyAction` alone declares the action: `amountDirection` defaults to `"output"` and `paymentAmount` to `"0"`. Explicit values still win.
442
- - `submit()` on the controller runs the executor that matches `amountDirection`. `submitSupply()` and `submitPay()` remain for existing callers.
443
-
444
- ### Updating and releasing
445
-
446
- Change the shared inventory/policy/controller owner and audit affected stock and custom
447
- consumers. Use the central team's `workflow`, `ui-quality` and `shared/sdk.md` guidance;
448
- keep skills in the skills repo rather than copying them here.
449
-
450
- Read the central `shared/client-design-decisions.md` register before an upgrade. Map
451
- applicable decision IDs to affected consumers and regression scenarios, and report each
452
- result with exact candidate evidence. Preserve agreed behavior and ownership even when
453
- types compile; a deliberate change needs an explicit product decision and migration plan.
454
-
455
- Run focused regressions, `bun test`, `bun run typecheck` and `bun run build`, then validate
456
- affected consumer builds and rendered/financial behavior on the exact candidate. Record
457
- package identity, configuration, acceptance coverage and untested cases. Earlier candidate
458
- results do not automatically apply to newer main or a new client.
459
-
460
- If core/API changes are needed, resolve those dependencies before their UI/app consumers.
461
- An inventory/controller-only change does not inherently require a core release. After
462
- explicit release authorization, publish a prerelease with a non-`latest` tag, verify its
463
- registry artifact, and pin/test that exact version in each adopting app. Stable promotion,
464
- client deployment and docs targeting are separate release decisions. This refactor adds
465
- no automatic npm publishing.
466
-
467
- ### Building the Library
468
-
469
- ```bash
470
- bun run build
471
- ```
472
-
473
- ### Type Checking
474
-
475
- ```bash
476
- bun run typecheck
477
- ```
478
-
479
- CI runs this on every pull request, so a type error fails the build.
480
-
481
- ### Formatting
482
-
483
- ```bash
484
- bun run format
485
- ```
486
-
487
- Prettier runs over staged files on commit via lint-staged. There is no ESLint
488
- setup in this repository.
489
-
490
- ## Component Playground
491
-
492
- This repository includes a lightweight React playground app for viewing and testing all components without the complexity of Storybook.
493
-
494
- ### Running the Playground
495
-
496
- 1. Install dependencies (if not already done):
497
-
498
- ```bash
499
- bun install --frozen-lockfile
500
- ```
501
-
502
- 2. Navigate to the playground directory:
503
-
504
- ```bash
505
- cd playground
506
- ```
507
-
508
- 3. Install playground dependencies:
509
-
510
- ```bash
511
- bun install --frozen-lockfile
512
- ```
513
-
514
- 4. Start the development server:
515
-
516
- ```bash
517
- bun run dev
518
- ```
519
-
520
- The playground will open automatically at `http://localhost:3000`
521
-
522
- ### Using the Playground
523
-
524
- - **Left Sidebar**: Browse available components
525
- - **Main Area**: View the selected component with different example variants
526
- - **Example Tabs**: Switch between different states/examples for each component
527
-
528
- ### Adding a New Component Example
529
-
530
- To add a new example variant for a component:
531
-
532
- 1. Open `playground/src/ComponentRegistry.tsx`
533
- 2. Find the component's entry in the `examples` object
534
- 3. Add a new entry to the array:
535
- ```tsx
536
- {
537
- label: 'Your Example Name',
538
- render: () => <YourComponent {...props} />,
539
- }
540
- ```
541
-
542
- The playground will automatically pick up the new example and display it as a tab.
543
-
544
- ## License
545
-
546
- MIT