@tokenops/sdk 1.1.1 → 1.6.0

package/dist/{chunk-23F7JIK5.cjs → chunk-YFIWCYHC.cjs}

@@ -1,13 +1,12 @@
 'use strict';
 
-var chunkNS44KBV5_cjs = require('./chunk-NS44KBV5.cjs');
-var chunkQ7ARQSUH_cjs = require('./chunk-Q7ARQSUH.cjs');
-var chunkVDXVNZCO_cjs = require('./chunk-VDXVNZCO.cjs');
-var chunk3ZRHDTEX_cjs = require('./chunk-3ZRHDTEX.cjs');
-var chunkCQIPRNS7_cjs = require('./chunk-CQIPRNS7.cjs');
+var chunkUJS4N2XM_cjs = require('./chunk-UJS4N2XM.cjs');
+var chunkSYHNZSZZ_cjs = require('./chunk-SYHNZSZZ.cjs');
+var chunk43RFBQ73_cjs = require('./chunk-43RFBQ73.cjs');
+var chunkWUXUWTFW_cjs = require('./chunk-WUXUWTFW.cjs');
+var chunkVR3FREBX_cjs = require('./chunk-VR3FREBX.cjs');
+var chunk2RNW4MIJ_cjs = require('./chunk-2RNW4MIJ.cjs');
 var chunkVJKZWYYJ_cjs = require('./chunk-VJKZWYYJ.cjs');
-var chunk66IHPTOK_cjs = require('./chunk-66IHPTOK.cjs');
-var chunk56UI7LUR_cjs = require('./chunk-56UI7LUR.cjs');
 var viem = require('viem');
 
 // src/fhe-disperse/abis/singleton.ts
@@ -1689,7 +1688,7 @@ function resolveEncryptor(source) {
 var MAX_UINT64 = (1n << 64n) - 1n;
 function assertUint64(value, label) {
   if (value < 0n || value > MAX_UINT64) {
-    throw new chunk56UI7LUR_cjs.InvalidArgumentError({
+    throw new chunk2RNW4MIJ_cjs.InvalidArgumentError({
       method: "encryptUint64",
       argument: label,
       reason: "exceeds uint64 range (0..2^64-1)",
@@ -1710,7 +1709,7 @@ async function encryptUint64({
     userAddress
   });
   if (handles.length !== 1) {
-    throw new chunk56UI7LUR_cjs.InvalidArgumentError({
+    throw new chunk2RNW4MIJ_cjs.InvalidArgumentError({
       method: "encryptUint64",
       argument: "handles",
       reason: `expected 1 handle, got ${handles.length}`,
@@ -1718,8 +1717,8 @@ async function encryptUint64({
     });
   }
   return {
-    handle: chunk66IHPTOK_cjs.asEncryptedHandle(viem.bytesToHex(handles[0])),
-    inputProof: chunk66IHPTOK_cjs.asExternalInputProof(viem.bytesToHex(inputProof))
+    handle: chunk2RNW4MIJ_cjs.asEncryptedHandle(viem.bytesToHex(handles[0])),
+    inputProof: chunk2RNW4MIJ_cjs.asExternalInputProof(viem.bytesToHex(inputProof))
   };
 }
 async function encryptUint64Batch({
@@ -1729,7 +1728,7 @@ async function encryptUint64Batch({
   values
 }) {
   if (values.length === 0) {
-    throw new chunk56UI7LUR_cjs.InvalidArgumentError({
+    throw new chunk2RNW4MIJ_cjs.InvalidArgumentError({
       method: "encryptUint64Batch",
       argument: "values",
       reason: "must be non-empty"
@@ -1742,7 +1741,7 @@ async function encryptUint64Batch({
     userAddress
   });
   if (handles.length !== values.length) {
-    throw new chunk56UI7LUR_cjs.InvalidArgumentError({
+    throw new chunk2RNW4MIJ_cjs.InvalidArgumentError({
       method: "encryptUint64Batch",
       argument: "handles",
       reason: `expected ${values.length} handles, got ${handles.length}`,
@@ -1750,13 +1749,13 @@ async function encryptUint64Batch({
     });
   }
   return {
-    handles: handles.map((h) => chunk66IHPTOK_cjs.asEncryptedHandle(viem.bytesToHex(h))),
-    inputProof: chunk66IHPTOK_cjs.asExternalInputProof(viem.bytesToHex(inputProof))
+    handles: handles.map((h) => chunk2RNW4MIJ_cjs.asEncryptedHandle(viem.bytesToHex(h))),
+    inputProof: chunk2RNW4MIJ_cjs.asExternalInputProof(viem.bytesToHex(inputProof))
   };
 }
 
 // src/fhe-disperse/errors.ts
-var NotRegisteredError = class extends chunk56UI7LUR_cjs.TokenOpsSdkError {
+var NotRegisteredError = class extends chunk2RNW4MIJ_cjs.TokenOpsSdkError {
   name = "NotRegisteredError";
   constructor(args) {
     super(
@@ -1773,7 +1772,45 @@ var NotRegisteredError = class extends chunk56UI7LUR_cjs.TokenOpsSdkError {
     );
   }
 };
-var AlreadyRegisteredError = class extends chunk56UI7LUR_cjs.TokenOpsSdkError {
+var SubwalletsNotApprovedError = class extends chunk2RNW4MIJ_cjs.TokenOpsSdkError {
+  name = "SubwalletsNotApprovedError";
+  constructor(args) {
+    super(
+      `${args.method}: sub-wallets are not fully approved for token ${args.token} \u2014 wallet0: ${args.wallet0Approved}, wallet1: ${args.wallet1Approved}. Call \`approveUserWalletsForToken\` first.`,
+      {
+        code: "TOKENOPS_SUBWALLETS_NOT_APPROVED",
+        cause: args.cause,
+        context: {
+          method: args.method,
+          contractAddress: args.contractAddress,
+          user: args.user,
+          token: args.token,
+          wallet0Approved: args.wallet0Approved,
+          wallet1Approved: args.wallet1Approved
+        }
+      }
+    );
+  }
+};
+var SingletonNotApprovedError = class extends chunk2RNW4MIJ_cjs.TokenOpsSdkError {
+  name = "SingletonNotApprovedError";
+  constructor(args) {
+    super(
+      `${args.method}: ${args.user} has not approved the singleton ${args.contractAddress} as an operator on token ${args.token}. Call setOperator() (see @tokenops/sdk/fhe) before this transaction.`,
+      {
+        code: "TOKENOPS_SINGLETON_NOT_APPROVED",
+        cause: args.cause,
+        context: {
+          method: args.method,
+          contractAddress: args.contractAddress,
+          user: args.user,
+          token: args.token
+        }
+      }
+    );
+  }
+};
+var AlreadyRegisteredError = class extends chunk2RNW4MIJ_cjs.TokenOpsSdkError {
   name = "AlreadyRegisteredError";
   constructor(args) {
     super(
@@ -1810,7 +1847,7 @@ function validateDisperseInputs(args) {
   const errors = [];
   if (recipients.length === 0) {
     errors.push(
-      new chunk56UI7LUR_cjs.InvalidArgumentError({
+      new chunk2RNW4MIJ_cjs.InvalidArgumentError({
         method,
         argument: "recipients",
         reason: "must be non-empty"
@@ -1819,7 +1856,7 @@ function validateDisperseInputs(args) {
   }
   if (amounts.length !== recipients.length) {
     errors.push(
-      new chunk56UI7LUR_cjs.InvalidArgumentError({
+      new chunk2RNW4MIJ_cjs.InvalidArgumentError({
         method,
         argument: "amounts",
         reason: `length mismatch: recipients.length (${recipients.length}) !== amounts.length (${amounts.length})`
@@ -1829,7 +1866,7 @@ function validateDisperseInputs(args) {
   recipients.forEach((r, i) => {
     if (!viem.isAddress(r, { strict: true })) {
       errors.push(
-        new chunk56UI7LUR_cjs.InvalidArgumentError({
+        new chunk2RNW4MIJ_cjs.InvalidArgumentError({
           method,
           argument: `recipients[${i}]`,
           reason: "must be a valid EIP-55 checksummed address",
@@ -1840,7 +1877,7 @@ function validateDisperseInputs(args) {
     }
     if (r === ZERO_ADDRESS) {
       errors.push(
-        new chunk56UI7LUR_cjs.InvalidArgumentError({
+        new chunk2RNW4MIJ_cjs.InvalidArgumentError({
           method,
           argument: `recipients[${i}]`,
           reason: "zero address",
@@ -1852,7 +1889,7 @@ function validateDisperseInputs(args) {
   amounts.forEach((v, i) => {
     if (v < 0n || v > MAX_UINT642) {
       errors.push(
-        new chunk56UI7LUR_cjs.InvalidArgumentError({
+        new chunk2RNW4MIJ_cjs.InvalidArgumentError({
           method,
           argument: `amounts[${i}]`,
           reason: "exceeds uint64 range (0..2^64-1)"
@@ -1866,7 +1903,7 @@ function validateDisperseInputs(args) {
     const { group0, group1 } = computeSubtotals([...amounts]);
     if (group0 > MAX_UINT642) {
       errors.push(
-        new chunk56UI7LUR_cjs.InvalidArgumentError({
+        new chunk2RNW4MIJ_cjs.InvalidArgumentError({
           method,
           argument: "amounts",
           reason: "wallet-mode subtotal exceeds uint64 range"
@@ -1875,7 +1912,7 @@ function validateDisperseInputs(args) {
     }
     if (group1 > MAX_UINT642) {
       errors.push(
-        new chunk56UI7LUR_cjs.InvalidArgumentError({
+        new chunk2RNW4MIJ_cjs.InvalidArgumentError({
           method,
           argument: "amounts",
           reason: "wallet-mode subtotal exceeds uint64 range"
@@ -1884,7 +1921,7 @@ function validateDisperseInputs(args) {
     }
     if (group0 <= MAX_UINT642 && group1 <= MAX_UINT642 && group0 + group1 > MAX_UINT642) {
       errors.push(
-        new chunk56UI7LUR_cjs.InvalidArgumentError({
+        new chunk2RNW4MIJ_cjs.InvalidArgumentError({
           method,
           argument: "amounts",
           reason: "wallet-mode subtotals sum exceeds uint64 range (would silently zero on-chain)"
@@ -1894,7 +1931,7 @@ function validateDisperseInputs(args) {
   }
   if (batchLimit > 0n && BigInt(recipients.length) > batchLimit) {
     errors.push(
-      new chunk56UI7LUR_cjs.BatchTooLargeError({
+      new chunk2RNW4MIJ_cjs.BatchTooLargeError({
         method,
         contractAddress,
         requested: recipients.length,
@@ -1907,7 +1944,7 @@ function validateDisperseInputs(args) {
 function assertChecksumAddress(value, argument, method) {
   if (value === void 0) return;
   if (!viem.isAddress(value, { strict: true })) {
-    throw new chunk56UI7LUR_cjs.InvalidArgumentError({
+    throw new chunk2RNW4MIJ_cjs.InvalidArgumentError({
       method,
       argument,
       reason: "must be a valid EIP-55 checksummed address \u2014 use viem's getAddress(addr) to fix the checksum",
@@ -1919,7 +1956,7 @@ function assertNonZeroChecksumAddress(value, argument, method) {
   if (value === void 0) return;
   assertChecksumAddress(value, argument, method);
   if (value === ZERO_ADDRESS) {
-    throw new chunk56UI7LUR_cjs.InvalidArgumentError({
+    throw new chunk2RNW4MIJ_cjs.InvalidArgumentError({
       method,
       argument,
       reason: "must not be the zero address",
@@ -1934,7 +1971,7 @@ function batchLimitForMode(mode, limits) {
 }
 
 // src/fhe-disperse/types.ts
-var DisperseSubwalletNotFoundError = class extends chunk56UI7LUR_cjs.TokenOpsSdkError {
+var DisperseSubwalletNotFoundError = class extends chunk2RNW4MIJ_cjs.TokenOpsSdkError {
   name = "DisperseSubwalletNotFoundError";
   constructor(txHash, singletonAddress) {
     super(
@@ -1946,7 +1983,7 @@ var DisperseSubwalletNotFoundError = class extends chunk56UI7LUR_cjs.TokenOpsSdk
     );
   }
 };
-var DisperseEncryptedReserveNotGrantedError = class extends chunk56UI7LUR_cjs.TokenOpsSdkError {
+var DisperseEncryptedReserveNotGrantedError = class extends chunk2RNW4MIJ_cjs.TokenOpsSdkError {
   name = "DisperseEncryptedReserveNotGrantedError";
   constructor(txHash, callerAddress) {
     super(
@@ -1968,7 +2005,7 @@ var disperseProductMapper = (name, _args, ctx) => {
     case "UserNotRegistered":
       return new NotRegisteredError({ ...ctx, user });
     case "ContractNotAllowed":
-      return new chunk56UI7LUR_cjs.InvalidArgumentError({
+      return new chunk2RNW4MIJ_cjs.InvalidArgumentError({
         method: ctx.method,
         argument: "handle",
         reason: "the handle's origin contract did not grant this singleton persistent ACL on the handle. ERC-7984 `transferred` handles are scoped to the token contract \u2014 disclose them through the token, not through `DisperseConfidential`."
@@ -2012,10 +2049,10 @@ var ConfidentialDisperseClient = class {
     this.encryptor = config.encryptor;
     this.#telemetry = config.telemetry;
     const chainId = config.chainId ?? config.publicClient.chain?.id;
-    const addressOverride = config.address ? chunkCQIPRNS7_cjs.normaliseAddress(config.address) : void 0;
-    const resolved = addressOverride ?? (chainId === void 0 ? void 0 : chunk3ZRHDTEX_cjs.getFheDisperseSingletonAddress(chainId));
+    const addressOverride = config.address ? chunkVR3FREBX_cjs.normaliseAddress(config.address) : void 0;
+    const resolved = addressOverride ?? (chainId === void 0 ? void 0 : chunkWUXUWTFW_cjs.getFheDisperseSingletonAddress(chainId));
     if (!resolved) {
-      throw new chunk56UI7LUR_cjs.DeploymentAddressUnavailableError({
+      throw new chunk2RNW4MIJ_cjs.DeploymentAddressUnavailableError({
         reason: chainId === void 0 ? "chain-id-missing" : "registry-not-deployed",
         product: "fheDisperse",
         contract: "disperseConfidentialSingleton",
@@ -2029,8 +2066,8 @@ var ConfidentialDisperseClient = class {
       surface: "singleton",
       chainId: chainId ?? null,
       hasWallet: !!this.walletClient,
-      aclResolved: !!config.aclAddress || chainId !== void 0 && !!chunkQ7ARQSUH_cjs.getFhevmAclAddress(chainId),
-      sdkVersion: chunkVDXVNZCO_cjs.SDK_VERSION
+      aclResolved: !!config.aclAddress || chainId !== void 0 && !!chunkSYHNZSZZ_cjs.getFhevmAclAddress(chainId),
+      sdkVersion: chunk43RFBQ73_cjs.SDK_VERSION
     });
   }
   /**
@@ -2041,7 +2078,7 @@ var ConfidentialDisperseClient = class {
    */
   get aclAddress() {
     if (this.#cachedAclAddress) return this.#cachedAclAddress;
-    this.#cachedAclAddress = this.#aclAddressOverride ?? chunkQ7ARQSUH_cjs.requireFhevmAclAddress(this.publicClient.chain?.id, "ConfidentialDisperseClient");
+    this.#cachedAclAddress = this.#aclAddressOverride ?? chunkSYHNZSZZ_cjs.requireFhevmAclAddress(this.publicClient.chain?.id, "ConfidentialDisperseClient");
     return this.#cachedAclAddress;
   }
   // ============================================================
@@ -2168,13 +2205,20 @@ var ConfidentialDisperseClient = class {
    * subtotal1` for the result to match the on-chain computation. Both this
    * SDK and the contract round the BPS multiplication down (floor division).
    *
+   * **Amount units:** TokenOps confidential (ERC-7984) tokens use a 6-decimals
+   * convention (1 token = 1_000_000 base units), not the 18 decimals typical of
+   * ERC-20. Amount parameters are base units of the token's actual decimals:
+   * for the CTTT test token (6 decimals) `1_000_000n` = 1 CTTT, while the
+   * transparent TTT test token uses 18 decimals. `totalTokens` follows this
+   * convention.
+   *
    * @throws {TokenOpsSdkError} if mode is `"wallet-token-fee"` and `totalTokens` is not provided.
    */
   async calculateFee(args) {
     const fees = await this.getFees(args.user);
     if (args.mode === "wallet-token-fee") {
       if (args.totalTokens === void 0) {
-        throw new chunk56UI7LUR_cjs.InvalidArgumentError({
+        throw new chunk2RNW4MIJ_cjs.InvalidArgumentError({
           method: "calculateFee",
           argument: "totalTokens",
           reason: "is required for wallet-token-fee mode"
@@ -2231,6 +2275,13 @@ var ConfidentialDisperseClient = class {
    * - `hasApprovedSubwallets` (wallet modes) or `isOperator(sender, singleton)` (direct mode)
    * - `calculateFee` / `getBatchLimits`
    * - Structural recipient + amount validation
+   *
+   * **Amount units:** TokenOps confidential (ERC-7984) tokens use a 6-decimals
+   * convention (1 token = 1_000_000 base units), not the 18 decimals typical of
+   * ERC-20. Amount parameters are base units of the token's actual decimals:
+   * for the CTTT test token (6 decimals) `1_000_000n` = 1 CTTT, while the
+   * transparent TTT test token uses 18 decimals. Pass `amounts[]` in the same
+   * units you will pass to `disperse` so the report reflects the real call.
    */
   async preflightDisperse(args) {
     const { user, token, recipients, amounts, mode } = args;
@@ -2323,23 +2374,42 @@ var ConfidentialDisperseClient = class {
         })
       );
     } else if (mode === "wallet" || mode === "wallet-token-fee") {
-      if (!hasApprovedSubwallets.both)
+      if (!hasApprovedSubwallets.both) {
         blockers.push(
           `Wallets not fully approved for token \u2014 wallet0: ${hasApprovedSubwallets.wallet0}, wallet1: ${hasApprovedSubwallets.wallet1}`
         );
+        blockerErrors.push(
+          new SubwalletsNotApprovedError({
+            method: "preflightDisperse",
+            contractAddress: this.address,
+            user: args.user,
+            token: args.token,
+            wallet0Approved: hasApprovedSubwallets.wallet0,
+            wallet1Approved: hasApprovedSubwallets.wallet1
+          })
+        );
+      }
     }
     if (mode === "direct" && hasApprovedSingleton === false) {
       blockers.push("Sender has not approved the singleton as operator on the token");
+      blockerErrors.push(
+        new SingletonNotApprovedError({
+          method: "preflightDisperse",
+          contractAddress: this.address,
+          user: args.user,
+          token: args.token
+        })
+      );
     }
     if (isPaused) {
       blockers.push("Singleton is paused");
       blockerErrors.push(
-        new chunk56UI7LUR_cjs.PausedError({ method: "preflightDisperse", contractAddress: this.address })
+        new chunk2RNW4MIJ_cjs.PausedError({ method: "preflightDisperse", contractAddress: this.address })
       );
     }
     if (callerBalance < fee.ethValue) {
       blockerErrors.push(
-        new chunk56UI7LUR_cjs.InsufficientFeeError({
+        new chunk2RNW4MIJ_cjs.InsufficientFeeError({
           method: "preflightDisperse",
           contractAddress: this.address,
           feeKind: "gas",
@@ -2476,6 +2546,15 @@ var ConfidentialDisperseClient = class {
    * 4. Computes `msg.value` for gas-fee modes; `0` for token-fee mode.
    * 5. Dispatches to the correct contract function based on `mode`.
    *
+   * **Silent-zero transfers.** ERC-7984 transfers do not revert when the sender's encrypted balance is insufficient — the transfer succeeds and moves an encrypted zero instead. This is by design: reverting would leak balance information. The transaction receipt alone cannot tell you whether value actually moved.
+   *
+   * **Amount units:** TokenOps confidential (ERC-7984) tokens use a 6-decimals
+   * convention (1 token = 1_000_000 base units), not the 18 decimals typical of
+   * ERC-20. Amount parameters are base units of the token's actual decimals:
+   * for the CTTT test token (6 decimals) `1_000_000n` = 1 CTTT, while the
+   * transparent TTT test token uses 18 decimals. Every entry of `amounts[]`
+   * follows this convention.
+   *
    * @throws {TokenOpsSdkError} on input validation failure (first deterministic error).
    * @throws {TokenOpsSdkError} if no encryptor is available at call time.
    */
@@ -2487,7 +2566,7 @@ var ConfidentialDisperseClient = class {
       const account = this.#resolveAccount(wallet, args.account, "disperse");
       const enc = resolveEncryptor(this.encryptor);
       if (!enc) {
-        throw new chunk56UI7LUR_cjs.MissingEncryptorError("disperse", {
+        throw new chunk2RNW4MIJ_cjs.MissingEncryptorError("disperse", {
           hint: "Pass `encryptor` to the call or the client config."
         });
       }
@@ -2582,7 +2661,7 @@ var ConfidentialDisperseClient = class {
     const aclLogs = receipt.logs.filter(
       (log) => log.address.toLowerCase() === this.aclAddress.toLowerCase()
     );
-    const events = viem.parseEventLogs({ abi: [chunkQ7ARQSUH_cjs.ACL_ALLOWED_EVENT], logs: aclLogs });
+    const events = viem.parseEventLogs({ abi: [chunkSYHNZSZZ_cjs.ACL_ALLOWED_EVENT], logs: aclLogs });
     const granted = events.filter(
       (ev) => ev.args.account.toLowerCase() === callerAddress && ev.args.caller.toLowerCase() === this.address.toLowerCase()
     );
@@ -2590,7 +2669,7 @@ var ConfidentialDisperseClient = class {
       throw new DisperseEncryptedReserveNotGrantedError(hash, accountAddress(account));
     }
     if (granted.length > 1) {
-      throw new chunk56UI7LUR_cjs.ReceiptEventAmbiguousError({
+      throw new chunk2RNW4MIJ_cjs.ReceiptEventAmbiguousError({
         method: "getEncryptedFeeReserve",
         eventName: "Allowed",
         contractAddress: this.aclAddress,
@@ -2791,6 +2870,12 @@ var ConfidentialDisperseClient = class {
    * encryptor, or pass `encryptedInput` directly. The contract caps the
    * withdrawal at the available reserve via `FHE.min`.
    *
+   * **Amount units:** TokenOps confidential (ERC-7984) tokens use a 6-decimals
+   * convention (1 token = 1_000_000 base units), not the 18 decimals typical of
+   * ERC-20. Amount parameters are base units of the token's actual decimals:
+   * for the CTTT test token (6 decimals) `1_000_000n` = 1 CTTT, while the
+   * transparent TTT test token uses 18 decimals.
+   *
    * Returns the tx hash plus the **transferred** handle parsed from the
    * `TokenFeeWithdrawn` event. Decrypt the handle via Zama's `userDecrypt`
    * to view the actual amount moved (which can be less than requested when
@@ -2936,7 +3021,7 @@ var ConfidentialDisperseClient = class {
         values: amounts
       });
     } catch (err) {
-      throw chunkNS44KBV5_cjs.mapZamaError(err, { method: "disperse[direct]", operation: "encrypt" });
+      throw chunkUJS4N2XM_cjs.mapZamaError(err, { method: "disperse[direct]", operation: "encrypt" });
     }
     let ethValue = gasFeeOverride;
     if (ethValue === void 0) {
@@ -2982,7 +3067,7 @@ var ConfidentialDisperseClient = class {
         values: allValues
       });
     } catch (err) {
-      throw chunkNS44KBV5_cjs.mapZamaError(err, { method: `disperse[${mode}]`, operation: "encrypt" });
+      throw chunkUJS4N2XM_cjs.mapZamaError(err, { method: `disperse[${mode}]`, operation: "encrypt" });
     }
     const amountHandles = encrypted.handles.slice(0, count);
     const subtotal0Handle = encrypted.handles[count];
@@ -3109,14 +3194,14 @@ var ConfidentialDisperseClient = class {
     const hasAmount = amount !== void 0;
     const hasInput = preEncrypted !== void 0;
     if (hasAmount && hasInput) {
-      throw new chunk56UI7LUR_cjs.InvalidArgumentError({
+      throw new chunk2RNW4MIJ_cjs.InvalidArgumentError({
         method,
         argument: "amount/encryptedInput",
         reason: "exactly one of `amount` (plaintext, SDK encrypts) or `encryptedInput` (pre-encrypted) must be supplied \u2014 got both"
       });
     }
     if (!hasAmount && !hasInput) {
-      throw new chunk56UI7LUR_cjs.InvalidArgumentError({
+      throw new chunk2RNW4MIJ_cjs.InvalidArgumentError({
         method,
         argument: "amount/encryptedInput",
         reason: "exactly one of `amount` (plaintext, SDK encrypts) or `encryptedInput` (pre-encrypted) must be supplied \u2014 got neither"
@@ -3125,7 +3210,7 @@ var ConfidentialDisperseClient = class {
     if (hasInput) return preEncrypted;
     const enc = encryptor ?? resolveEncryptor(this.encryptor);
     if (!enc) {
-      throw new chunk56UI7LUR_cjs.MissingEncryptorError("encryptSingle", {
+      throw new chunk2RNW4MIJ_cjs.MissingEncryptorError("encryptSingle", {
         hint: "Pass `encryptor` to the call or the client config (eager or lazy factory)."
       });
     }
@@ -3137,19 +3222,19 @@ var ConfidentialDisperseClient = class {
         value: amount
       });
     } catch (err) {
-      throw chunkNS44KBV5_cjs.mapZamaError(err, { method: "encryptSingle", operation: "encrypt" });
+      throw chunkUJS4N2XM_cjs.mapZamaError(err, { method: "encryptSingle", operation: "encrypt" });
     }
   }
   #requireWallet(method) {
     if (!this.walletClient) {
-      throw new chunk56UI7LUR_cjs.MissingWalletClientError(method);
+      throw new chunk2RNW4MIJ_cjs.MissingWalletClientError(method);
     }
     return this.walletClient;
   }
   #resolveAccount(wallet, override, method) {
     const acct = override ?? wallet.account;
     if (!acct) {
-      throw new chunk56UI7LUR_cjs.MissingAccountError(method);
+      throw new chunk2RNW4MIJ_cjs.MissingAccountError(method);
     }
     return acct;
   }
@@ -3202,13 +3287,13 @@ var ConfidentialDisperseClient = class {
         ...value !== void 0 ? { value } : {}
       });
     } catch (err) {
-      if (chunkVDXVNZCO_cjs.isContractRevert(err)) {
+      if (chunk43RFBQ73_cjs.isContractRevert(err)) {
         throw this.#mapRevert(method, err, productContext, accountAddress(account));
       }
     }
   }
   #mapRevert(method, err, productContext, account) {
-    return chunkVDXVNZCO_cjs.mapContractRevert(err, {
+    return chunk43RFBQ73_cjs.mapContractRevert(err, {
       method,
       contractAddress: this.address,
       abi: disperseConfidentialAbi,
@@ -3396,6 +3481,8 @@ exports.FEE_COLLECTOR_ROLE = FEE_COLLECTOR_ROLE;
 exports.FEE_MANAGER_ROLE = FEE_MANAGER_ROLE;
 exports.NotRegisteredError = NotRegisteredError;
 exports.PAUSER_ROLE = PAUSER_ROLE;
+exports.SingletonNotApprovedError = SingletonNotApprovedError;
+exports.SubwalletsNotApprovedError = SubwalletsNotApprovedError;
 exports.WITHDRAWER_ROLE = WITHDRAWER_ROLE;
 exports.computeSubtotals = computeSubtotals;
 exports.createConfidentialDisperseClient = createConfidentialDisperseClient;

package/dist/{chunk-FYQ2UW4T.js → chunk-YPYCWLYP.js}

@@ -1,4 +1,4 @@
-import { DeploymentAddressUnavailableError } from './chunk-IVE3QEGD.js';
+import { DeploymentAddressUnavailableError } from './chunk-DRSPMIZ7.js';
 import { parseAbiItem } from 'viem';
 
 var FHEVM_ACL_ADDRESS_BY_CHAIN = {

package/dist/chunk-ZQUE2B3Q.cjs

@@ -0,0 +1,33 @@
+'use strict';
+
+var wagmi = require('wagmi');
+
+function _interopNamespace(e) {
+  if (e && e.__esModule) return e;
+  var n = Object.create(null);
+  if (e) {
+    Object.keys(e).forEach(function (k) {
+      if (k !== 'default') {
+        var d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: function () { return e[k]; }
+        });
+      }
+    });
+  }
+  n.default = e;
+  return Object.freeze(n);
+}
+
+var wagmi__namespace = /*#__PURE__*/_interopNamespace(wagmi);
+
+// src/core/wagmi-compat.ts
+var wagmiModule = wagmi__namespace;
+var useWagmiAccount = wagmiModule.useConnection ?? wagmiModule.useAccount ?? (() => {
+  throw new Error(
+    "@tokenops/sdk: the installed `wagmi` package exposes neither `useConnection` (v3) nor `useAccount` (v2). Install wagmi ^2.0.0 or ^3.0.0 \u2014 the SDK's /react subpaths support both majors."
+  );
+});
+
+exports.useWagmiAccount = useWagmiAccount;

package/dist/core/addresses.d.ts

@@ -10,7 +10,7 @@ import type { Address } from "viem";
 export declare const DEPLOYED_ADDRESSES: {
     readonly fheVesting: {
         readonly confidentialVestingFactory: {
-            readonly 11155111: "0xA87701CE9A52D43681600583a99c85b50DbE3150";
+            readonly 11155111: "0x059d6Bb8ff9a13E794fe416d4757d7310CdC69ab";
         };
     };
     readonly fheAirdrop: {

package/dist/core/errors.d.ts

@@ -12,7 +12,7 @@ declare const TOKENOPS_SDK_ERROR_BRAND: unique symbol;
  * on `error.code` in `onError` handlers and UI surfaces. Messages stay
  * human-readable and may evolve between versions.
  */
-export type TokenOpsSdkErrorCode = "TOKENOPS_UNSUPPORTED_CHAIN" | "TOKENOPS_DEPLOYMENT_ADDRESS_UNAVAILABLE" | "TOKENOPS_MISSING_PUBLIC_CLIENT" | "TOKENOPS_MISSING_WALLET_CLIENT" | "TOKENOPS_MISSING_ACCOUNT" | "TOKENOPS_MISSING_ENCRYPTOR" | "TOKENOPS_MISSING_CLIENT" | "TOKENOPS_INVALID_ARGUMENT" | "TOKENOPS_RECEIPT_EVENT_NOT_FOUND" | "TOKENOPS_RECEIPT_EVENT_AMBIGUOUS" | "TOKENOPS_CONTRACT_REVERT" | "TOKENOPS_PAUSED" | "TOKENOPS_ACCESS_DENIED" | "TOKENOPS_INSUFFICIENT_FEE" | "TOKENOPS_INSUFFICIENT_BALANCE" | "TOKENOPS_BATCH_TOO_LARGE" | "TOKENOPS_FEATURE_DISABLED" | "TOKENOPS_TRANSFER_FAILED" | "TOKENOPS_FHE_HANDLE_NOT_ALLOWED" | "TOKENOPS_ALREADY_INITIALIZED" | "TOKENOPS_REENTRANCY" | "TOKENOPS_INVALID_SIGNATURE" | "TOKENOPS_WALLET_REJECTED" | "TOKENOPS_WALLET_CHAIN_MISMATCH" | "TOKENOPS_NETWORK_ERROR" | "TOKENOPS_INSUFFICIENT_GAS_FUNDS" | "TOKENOPS_UNKNOWN_WRITE_FAILURE" | "TOKENOPS_USER_REJECTED" | "TOKENOPS_SIGNING_FAILED" | "TOKENOPS_RELAYER_UNREACHABLE" | "TOKENOPS_ENCRYPTION_FAILED" | "TOKENOPS_DECRYPTION_FAILED" | "TOKENOPS_USER_DECRYPT_NOT_ALLOWED" | "TOKENOPS_VESTING_NOT_FOUND" | "TOKENOPS_NOT_RECIPIENT" | "TOKENOPS_CLAIM_LOCKED" | "TOKENOPS_VESTING_REVOKED" | "TOKENOPS_NOT_REVOCABLE" | "TOKENOPS_VESTING_EXPIRED" | "TOKENOPS_TRANSFER_ALREADY_PENDING" | "TOKENOPS_NO_PENDING_TRANSFER" | "TOKENOPS_NOT_PENDING_RECIPIENT" | "TOKENOPS_TRANSFER_EXPIRED" | "TOKENOPS_ALREADY_CLAIMED" | "TOKENOPS_CLAIM_NOT_STARTED" | "TOKENOPS_CLAIM_WINDOW_CLOSED" | "TOKENOPS_NOT_REGISTERED" | "TOKENOPS_ALREADY_REGISTERED" | "TOKENOPS_FAUCET_SUPPLY_EXHAUSTED";
+export type TokenOpsSdkErrorCode = "TOKENOPS_UNSUPPORTED_CHAIN" | "TOKENOPS_DEPLOYMENT_ADDRESS_UNAVAILABLE" | "TOKENOPS_MISSING_PUBLIC_CLIENT" | "TOKENOPS_MISSING_WALLET_CLIENT" | "TOKENOPS_MISSING_ACCOUNT" | "TOKENOPS_MISSING_ENCRYPTOR" | "TOKENOPS_MISSING_CLIENT" | "TOKENOPS_INVALID_ARGUMENT" | "TOKENOPS_RECEIPT_EVENT_NOT_FOUND" | "TOKENOPS_RECEIPT_EVENT_AMBIGUOUS" | "TOKENOPS_CONTRACT_REVERT" | "TOKENOPS_PAUSED" | "TOKENOPS_ACCESS_DENIED" | "TOKENOPS_OPERATOR_NOT_APPROVED" | "TOKENOPS_INSUFFICIENT_FEE" | "TOKENOPS_INSUFFICIENT_BALANCE" | "TOKENOPS_BATCH_TOO_LARGE" | "TOKENOPS_FEATURE_DISABLED" | "TOKENOPS_TRANSFER_FAILED" | "TOKENOPS_FHE_HANDLE_NOT_ALLOWED" | "TOKENOPS_ALREADY_INITIALIZED" | "TOKENOPS_REENTRANCY" | "TOKENOPS_INVALID_SIGNATURE" | "TOKENOPS_WALLET_REJECTED" | "TOKENOPS_WALLET_CHAIN_MISMATCH" | "TOKENOPS_NETWORK_ERROR" | "TOKENOPS_INSUFFICIENT_GAS_FUNDS" | "TOKENOPS_UNKNOWN_WRITE_FAILURE" | "TOKENOPS_USER_REJECTED" | "TOKENOPS_SIGNING_FAILED" | "TOKENOPS_RELAYER_UNREACHABLE" | "TOKENOPS_ENCRYPTION_FAILED" | "TOKENOPS_DECRYPTION_FAILED" | "TOKENOPS_USER_DECRYPT_NOT_ALLOWED" | "TOKENOPS_VESTING_NOT_FOUND" | "TOKENOPS_NOT_RECIPIENT" | "TOKENOPS_CLAIM_LOCKED" | "TOKENOPS_VESTING_REVOKED" | "TOKENOPS_NOT_REVOCABLE" | "TOKENOPS_VESTING_EXPIRED" | "TOKENOPS_TRANSFER_ALREADY_PENDING" | "TOKENOPS_NO_PENDING_TRANSFER" | "TOKENOPS_NOT_PENDING_RECIPIENT" | "TOKENOPS_TRANSFER_EXPIRED" | "TOKENOPS_ALREADY_CLAIMED" | "TOKENOPS_CLAIM_NOT_STARTED" | "TOKENOPS_CLAIM_WINDOW_CLOSED" | "TOKENOPS_NOT_REGISTERED" | "TOKENOPS_ALREADY_REGISTERED" | "TOKENOPS_SUBWALLETS_NOT_APPROVED" | "TOKENOPS_SINGLETON_NOT_APPROVED" | "TOKENOPS_FAUCET_SUPPLY_EXHAUSTED";
 export interface TokenOpsSdkErrorInit {
     code: TokenOpsSdkErrorCode;
     cause?: unknown;
@@ -286,6 +286,46 @@ export declare class AccessDeniedError extends TokenOpsSdkError {
         cause?: unknown;
     });
 }
+/**
+ * Canonical remediation copy for the ERC-7984 operator prerequisite. Kept as
+ * a single exported constant so every surface that mentions the prerequisite
+ * (this error, operator helpers, docs) reuses the exact same wording.
+ * Do NOT reword — the string is shared verbatim with the docs repo.
+ */
+export declare const OPERATOR_NOT_APPROVED_REMEDIATION: "The token has not approved this contract as an operator. Call `setOperator()` (see `/fhe` operators) before this transaction.";
+/**
+ * The ERC-7984 token rejected the product contract as a spender —
+ * `ERC7984UnauthorizedSpender(address holder, address spender)` (selector
+ * `0x79f2cb38`). Raised whenever a TokenOps contract tries to pull
+ * confidential tokens from a holder that never called `setOperator()` for it
+ * (vesting `createVesting`, airdrop funding, disperse pulls). Also surfaced
+ * pre-write as a `blockerErrors[]` entry by the create-side preflights
+ * (`preflightCreateVesting` / `preflightCreateAirdrop`).
+ *
+ * Remediation: call `setOperator()` on the token (see the `/fhe` operator
+ * helpers) with the product contract as operator, then retry.
+ */
+export declare class OperatorNotApprovedError extends TokenOpsSdkError {
+    readonly name = "OperatorNotApprovedError";
+    readonly context: {
+        method: string;
+        contractAddress: Address;
+        /** ERC-7984 token whose operator approval is missing (known statically on preflight paths). */
+        tokenAddress?: Address;
+        /** Token holder whose balance the contract tried to pull (decoded from the revert when available). */
+        holder?: Address;
+        /** Address the token refused as a spender — the product contract needing operator approval. */
+        spender?: Address;
+    };
+    constructor(args: {
+        method: string;
+        contractAddress: Address;
+        tokenAddress?: Address;
+        holder?: Address;
+        spender?: Address;
+        cause?: unknown;
+    });
+}
 /**
  * Native ETH (gas) fee or token fee did not match what the contract requires.
  * `feeKind === "gas"` means the `msg.value` was wrong; `"token"` means the