@tokenops/sdk 1.5.1 → 1.6.0

package/dist/fhe/react/index.cjs

@@ -1,7 +1,12 @@
 'use strict';
 
-require('../../chunk-66IHPTOK.cjs');
-var chunk67OV5CX2_cjs = require('../../chunk-67OV5CX2.cjs');
+var chunkWOEETTH7_cjs = require('../../chunk-WOEETTH7.cjs');
+require('../../chunk-ZQUE2B3Q.cjs');
+require('../../chunk-4ZCXK4VI.cjs');
+require('../../chunk-FWHYQZ5E.cjs');
+require('../../chunk-VR3FREBX.cjs');
+var chunk2RNW4MIJ_cjs = require('../../chunk-2RNW4MIJ.cjs');
+require('../../chunk-VJKZWYYJ.cjs');
 var react = require('react');
 
 function resolveUserDecryptor(source) {
@@ -35,7 +40,7 @@ function useDecryptedHandle(opts) {
       setState({
         status: "error",
         value: void 0,
-        error: new chunk67OV5CX2_cjs.TokenOpsValidationError(
+        error: new chunk2RNW4MIJ_cjs.TokenOpsValidationError(
           "useDecryptedHandle: no `userDecryptor` resolved \u2014 pass `userDecryptor: () => useZamaSDK().relayer` (or an eager RelayerSDK / MockFhevmInstance).",
           { method: "useDecryptedHandle" }
         )
@@ -52,7 +57,7 @@ function useDecryptedHandle(opts) {
         });
         const plain = result[handleStr];
         if (plain === void 0) {
-          throw new chunk67OV5CX2_cjs.TokenOpsValidationError(
+          throw new chunk2RNW4MIJ_cjs.TokenOpsValidationError(
             `useDecryptedHandle: relayer returned no value for handle ${handleStr} on contract ${contractStr} \u2014 check ACL grant + (handle, contractAddress, userAddress) triple`,
             { method: "useDecryptedHandle", contractAddress: contractStr }
           );
@@ -83,20 +88,28 @@ function serializableSlice(v) {
   return out;
 }
 
+Object.defineProperty(exports, "useEnsureOperator", {
+  enumerable: true,
+  get: function () { return chunkWOEETTH7_cjs.useEnsureOperator; }
+});
+Object.defineProperty(exports, "useIsOperator", {
+  enumerable: true,
+  get: function () { return chunkWOEETTH7_cjs.useIsOperator; }
+});
 Object.defineProperty(exports, "TokenOpsContractError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.TokenOpsContractError; }
+  get: function () { return chunk2RNW4MIJ_cjs.TokenOpsContractError; }
 });
 Object.defineProperty(exports, "TokenOpsSdkError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.TokenOpsSdkError; }
+  get: function () { return chunk2RNW4MIJ_cjs.TokenOpsSdkError; }
 });
 Object.defineProperty(exports, "TokenOpsValidationError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.TokenOpsValidationError; }
+  get: function () { return chunk2RNW4MIJ_cjs.TokenOpsValidationError; }
 });
 Object.defineProperty(exports, "isTokenOpsSdkError", {
   enumerable: true,
-  get: function () { return chunk67OV5CX2_cjs.isTokenOpsSdkError; }
+  get: function () { return chunk2RNW4MIJ_cjs.isTokenOpsSdkError; }
 });
 exports.useDecryptedHandle = useDecryptedHandle;

package/dist/fhe/react/index.d.cts

@@ -7,4 +7,6 @@
  * `EncryptedHandle` return value).
  */
 export { useDecryptedHandle, type UseDecryptedHandleOptions, type UseDecryptedHandleResult, type UserDecryptor, type UserDecryptorSource, } from "./use-decrypted-handle.js";
+export { useIsOperator, type UseIsOperatorOptions } from "./useIsOperator.js";
+export { useEnsureOperator, type UseEnsureOperatorOptions, type EnsureOperatorVariables, } from "./useEnsureOperator.js";
 export { TokenOpsSdkError, isTokenOpsSdkError, TokenOpsValidationError, TokenOpsContractError, } from "../../core/errors.js";

package/dist/fhe/react/index.d.ts

@@ -7,4 +7,6 @@
  * `EncryptedHandle` return value).
  */
 export { useDecryptedHandle, type UseDecryptedHandleOptions, type UseDecryptedHandleResult, type UserDecryptor, type UserDecryptorSource, } from "./use-decrypted-handle.js";
+export { useIsOperator, type UseIsOperatorOptions } from "./useIsOperator.js";
+export { useEnsureOperator, type UseEnsureOperatorOptions, type EnsureOperatorVariables, } from "./useEnsureOperator.js";
 export { TokenOpsSdkError, isTokenOpsSdkError, TokenOpsValidationError, TokenOpsContractError, } from "../../core/errors.js";

package/dist/fhe/react/index.js

@@ -1,6 +1,11 @@
-import '../../chunk-KWFFIJYX.js';
-import { TokenOpsValidationError } from '../../chunk-QBJ7O2B4.js';
-export { TokenOpsContractError, TokenOpsSdkError, TokenOpsValidationError, isTokenOpsSdkError } from '../../chunk-QBJ7O2B4.js';
+export { useEnsureOperator, useIsOperator } from '../../chunk-U57COLUE.js';
+import '../../chunk-FT4LNBOS.js';
+import '../../chunk-4KJ66YRH.js';
+import '../../chunk-7VELUOMI.js';
+import '../../chunk-46T67CE2.js';
+import { TokenOpsValidationError } from '../../chunk-DRSPMIZ7.js';
+export { TokenOpsContractError, TokenOpsSdkError, TokenOpsValidationError, isTokenOpsSdkError } from '../../chunk-DRSPMIZ7.js';
+import '../../chunk-Q2GP5UDC.js';
 import { useState, useRef, useEffect } from 'react';
 
 function resolveUserDecryptor(source) {

package/dist/fhe/react/useEnsureOperator.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Cross-product mutation hook over {@link ensureOperator} — check-then-set
+ * operator authorization that sends no transaction when the grant already
+ * exists.
+ *
+ * Lives in `/fhe/react` (not a product subpath) because the operator
+ * prerequisite is identical across all three product flows; the product
+ * `react/` barrels re-export it for discoverability.
+ */
+import { type UseMutationResult } from "@tanstack/react-query";
+import type { Account, Address } from "viem";
+import type { SdkTelemetry } from "../../core/telemetry.js";
+import { type EnsureOperatorResult } from "../operators.js";
+/** Hook-level options for {@link useEnsureOperator}. */
+export interface UseEnsureOperatorOptions {
+    /** Override the chain id used for client resolution. */
+    chainId?: number | undefined;
+    /** Optional telemetry adapter — forwarded to the headless helper. */
+    telemetry?: SdkTelemetry | undefined;
+}
+/** Per-mutation variables for {@link useEnsureOperator}. */
+export interface EnsureOperatorVariables {
+    /** ERC-7984 token contract address. */
+    token: Address;
+    /** Address being authorized to pull tokens. */
+    spender: Address;
+    /**
+     * `uint48` unix timestamp after which the authorization expires. Required
+     * — the expiry window is an explicit caller decision (see
+     * {@link ensureOperator}). Pass `ERC7984_OPERATOR_MAX_DEADLINE` only when
+     * you explicitly want a never-expiring grant.
+     */
+    deadline: bigint;
+    /** Override the from-account; defaults to the connected wallet's account. */
+    account?: Account | Address;
+    /** If `true` (default), waits for the transaction to be mined. */
+    waitForReceipt?: boolean;
+}
+/**
+ * Ensure `spender` is an ERC-7984 operator for the connected account on
+ * `token`, sending a `setOperator` transaction only when the grant is
+ * missing. Resolves to `{ alreadyOperator, hash }` — `hash` is `null` on
+ * the no-op path.
+ *
+ * This is the mutation half of the operator-prerequisite pair; use
+ * {@link useIsOperator} for the read side, and invalidate/refetch it after
+ * this mutation succeeds.
+ *
+ * @example
+ * ```tsx
+ * const ensure = useEnsureOperator();
+ * const oneHour = BigInt(Math.floor(Date.now() / 1000) + 3600);
+ * ensure.mutate({ token, spender: manager, deadline: oneHour });
+ * ```
+ */
+export declare function useEnsureOperator(options?: UseEnsureOperatorOptions): UseMutationResult<EnsureOperatorResult, Error, EnsureOperatorVariables>;

package/dist/fhe/react/useIsOperator.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Cross-product query hook over {@link isOperator} — "is `spender` currently
+ * an authorized ERC-7984 operator for `holder` on `token`?".
+ *
+ * Lives in `/fhe/react` (not a product subpath) because the operator
+ * prerequisite is identical across all three product flows; the product
+ * `react/` barrels re-export it for discoverability.
+ */
+import { type UseQueryResult } from "@tanstack/react-query";
+import type { Address } from "viem";
+import type { SdkTelemetry } from "../../core/telemetry.js";
+/** Options accepted by {@link useIsOperator}. */
+export interface UseIsOperatorOptions {
+    /** ERC-7984 token contract address. Query stays disabled while `undefined`. */
+    token?: Address | undefined;
+    /**
+     * Address whose operator status is being checked — typically a manager
+     * clone, an airdrop factory/clone, or the disperse singleton. Query stays
+     * disabled while `undefined`.
+     */
+    spender?: Address | undefined;
+    /**
+     * Account that owns the tokens. Defaults to the connected wallet's
+     * account. Query stays disabled while neither is available.
+     */
+    holder?: Address | undefined;
+    /** Override the chain id used for client resolution. */
+    chainId?: number | undefined;
+    /** Set `false` to pause the query without unmounting. Defaults to `true`. */
+    enabled?: boolean | undefined;
+    /** Optional telemetry adapter — forwarded to the headless helper. */
+    telemetry?: SdkTelemetry | undefined;
+}
+/**
+ * Read `spender`'s ERC-7984 operator status for `holder` on `token`.
+ *
+ * Typical use: gate the "create" call-to-action behind the operator
+ * prerequisite so builders never hit {@link OperatorNotApprovedError} — the
+ * SDK's mapping of the on-chain `ERC7984UnauthorizedSpender` revert, whose
+ * message is the canonical {@link OPERATOR_NOT_APPROVED_REMEDIATION} copy:
+ *
+ * @example
+ * ```tsx
+ * const { data: authorized } = useIsOperator({ token, spender: manager });
+ * return authorized
+ *   ? <CreateVestingButton />
+ *   : <ApproveOperatorButton />; // wire to useEnsureOperator
+ * ```
+ *
+ * After a successful {@link useEnsureOperator} / `setOperator` mutation,
+ * invalidate this query (its key starts with
+ * `["tokenops-sdk", "fhe", "isOperator", ...]`) or refetch it.
+ */
+export declare function useIsOperator(options?: UseIsOperatorOptions): UseQueryResult<boolean, Error>;

package/dist/fhe/sepolia-encryptor-web.d.ts

@@ -3,9 +3,10 @@ import type { Encryptor } from "../fhe-vesting/encryption.js";
 import { type EncryptorInitPhase, type SepoliaEncryptorLogger } from "./sepolia-encryptor.js";
 /**
  * Configuration for {@link createSepoliaEncryptorWeb}. Minimal by design:
- * the browser path doesn't expose worker pool sizing or storage knobs (the
- * Web Worker is single-threaded by default, and `RelayerWeb` already
- * defaults to `IndexedDBStorage` for FHE artifact caching).
+ * the browser path doesn't expose storage knobs (`RelayerWeb` already
+ * defaults to `IndexedDBStorage` for FHE artifact caching). Worker-pool
+ * sizing is the one opt-in performance knob — see `threads`; the default
+ * stays single-threaded so no special headers are required.
  */
 export interface CreateSepoliaEncryptorWebOpts {
     /** Viem `PublicClient` — used only to resolve the chain id for the
@@ -68,6 +69,20 @@ export interface CreateSepoliaEncryptorWebOpts {
      * swallowed so a UI observer can never break encryption.
      */
     onPhase?: (phase: EncryptorInitPhase) => void;
+    /**
+     * Opt-in WASM worker-pool size for multi-threaded encryption (forwarded
+     * to `RelayerWeb`'s config). `4`–`8` gives ~2–3× faster encryption but
+     * requires the page to be **cross-origin isolated** — headers
+     * `Cross-Origin-Opener-Policy: same-origin` and
+     * `Cross-Origin-Embedder-Policy: require-corp` — without which browsers
+     * hide `SharedArrayBuffer` and encryption silently falls back to
+     * single-threaded. The SDK logs a loud warning when `threads > 1` is set
+     * on a non-isolated page.
+     *
+     * Omit for the default single-threaded worker — no special headers
+     * required.
+     */
+    threads?: number;
 }
 /**
  * Returned by {@link createSepoliaEncryptorWeb}. Same structural

package/dist/fhe-airdrop/advanced/index.cjs

@@ -1,22 +1,21 @@
 'use strict';
 
-var chunk4WPGQSNT_cjs = require('../../chunk-4WPGQSNT.cjs');
-require('../../chunk-TIUKIY5V.cjs');
+var chunkOL6SHN3D_cjs = require('../../chunk-OL6SHN3D.cjs');
+require('../../chunk-LBWRFZR3.cjs');
 require('../../chunk-FWHYQZ5E.cjs');
-require('../../chunk-KLKI352M.cjs');
-require('../../chunk-PUPKNW3R.cjs');
-require('../../chunk-JK4XMMKM.cjs');
+require('../../chunk-43RFBQ73.cjs');
+require('../../chunk-WUXUWTFW.cjs');
+require('../../chunk-VR3FREBX.cjs');
+require('../../chunk-2RNW4MIJ.cjs');
 require('../../chunk-VJKZWYYJ.cjs');
-require('../../chunk-66IHPTOK.cjs');
-require('../../chunk-67OV5CX2.cjs');
 
 
 
 Object.defineProperty(exports, "ConfidentialAirdropFactoryAdvancedClient", {
   enumerable: true,
-  get: function () { return chunk4WPGQSNT_cjs.ConfidentialAirdropFactoryAdvancedClient; }
+  get: function () { return chunkOL6SHN3D_cjs.ConfidentialAirdropFactoryAdvancedClient; }
 });
 Object.defineProperty(exports, "createConfidentialAirdropFactoryAdvancedClient", {
   enumerable: true,
-  get: function () { return chunk4WPGQSNT_cjs.createConfidentialAirdropFactoryAdvancedClient; }
+  get: function () { return chunkOL6SHN3D_cjs.createConfidentialAirdropFactoryAdvancedClient; }
 });

package/dist/fhe-airdrop/advanced/index.js

@@ -1,9 +1,8 @@
-export { ConfidentialAirdropFactoryAdvancedClient, createConfidentialAirdropFactoryAdvancedClient } from '../../chunk-ODLTEGHB.js';
-import '../../chunk-DUZIIRPF.js';
+export { ConfidentialAirdropFactoryAdvancedClient, createConfidentialAirdropFactoryAdvancedClient } from '../../chunk-KSDSXJ34.js';
+import '../../chunk-UE5XK2SY.js';
 import '../../chunk-7VELUOMI.js';
-import '../../chunk-SG65XWH7.js';
-import '../../chunk-XGGTQQFH.js';
-import '../../chunk-ZA673I3O.js';
+import '../../chunk-6WSNS3UV.js';
+import '../../chunk-QKKBBH7I.js';
+import '../../chunk-46T67CE2.js';
+import '../../chunk-DRSPMIZ7.js';
 import '../../chunk-Q2GP5UDC.js';
-import '../../chunk-KWFFIJYX.js';
-import '../../chunk-QBJ7O2B4.js';

package/dist/fhe-airdrop/advanced/react/index.cjs

@@ -1,17 +1,16 @@
 'use strict';
 
-var chunkT46YXSBP_cjs = require('../../../chunk-T46YXSBP.cjs');
-require('../../../chunk-MCRBVJGZ.cjs');
-var chunk4WPGQSNT_cjs = require('../../../chunk-4WPGQSNT.cjs');
-var chunkTIUKIY5V_cjs = require('../../../chunk-TIUKIY5V.cjs');
-require('../../../chunk-FAXIIH5R.cjs');
+var chunkWO72UBQD_cjs = require('../../../chunk-WO72UBQD.cjs');
+require('../../../chunk-SPGSO5SO.cjs');
+var chunkOL6SHN3D_cjs = require('../../../chunk-OL6SHN3D.cjs');
+var chunkLBWRFZR3_cjs = require('../../../chunk-LBWRFZR3.cjs');
+require('../../../chunk-SYHNZSZZ.cjs');
 require('../../../chunk-FWHYQZ5E.cjs');
-require('../../../chunk-KLKI352M.cjs');
-var chunkPUPKNW3R_cjs = require('../../../chunk-PUPKNW3R.cjs');
-require('../../../chunk-JK4XMMKM.cjs');
+require('../../../chunk-43RFBQ73.cjs');
+var chunkWUXUWTFW_cjs = require('../../../chunk-WUXUWTFW.cjs');
+require('../../../chunk-VR3FREBX.cjs');
+require('../../../chunk-2RNW4MIJ.cjs');
 require('../../../chunk-VJKZWYYJ.cjs');
-require('../../../chunk-66IHPTOK.cjs');
-require('../../../chunk-67OV5CX2.cjs');
 var react = require('react');
 var reactQuery = require('@tanstack/react-query');
 var wagmi = require('wagmi');
@@ -24,22 +23,22 @@ function usePredictAirdropAddress(args = {}) {
     ...chainId !== void 0 ? { chainId } : {}
   });
   const resolvedChainId = chainId ?? resolvedPublicClient?.chain?.id;
-  const resolvedAddress = address ?? (resolvedChainId === void 0 ? void 0 : chunkPUPKNW3R_cjs.DEPLOYED_ADDRESSES.fheAirdrop?.confidentialAirdropFactory?.[resolvedChainId] ?? void 0);
+  const resolvedAddress = address ?? (resolvedChainId === void 0 ? void 0 : chunkWUXUWTFW_cjs.DEPLOYED_ADDRESSES.fheAirdrop?.confidentialAirdropFactory?.[resolvedChainId] ?? void 0);
   const encryptorSourceRef = react.useRef(encryptor);
   encryptorSourceRef.current = encryptor;
   const client = react.useMemo(() => {
     if (!resolvedPublicClient) return void 0;
     if (!resolvedAddress) return void 0;
-    return chunk4WPGQSNT_cjs.createConfidentialAirdropFactoryAdvancedClient({
+    return chunkOL6SHN3D_cjs.createConfidentialAirdropFactoryAdvancedClient({
       publicClient: resolvedPublicClient,
       ...walletClient ? { walletClient } : {},
       address: resolvedAddress,
       ...resolvedChainId !== void 0 ? { chainId: resolvedChainId } : {},
-      encryptor: () => chunkTIUKIY5V_cjs.resolveEncryptor(encryptorSourceRef.current)
+      encryptor: () => chunkLBWRFZR3_cjs.resolveEncryptor(encryptorSourceRef.current)
     });
   }, [resolvedPublicClient, walletClient, resolvedAddress, resolvedChainId]);
   return reactQuery.useQuery({
-    queryKey: chunkT46YXSBP_cjs.buildQueryKey(
+    queryKey: chunkWO72UBQD_cjs.buildQueryKey(
       "factory:predictAirdropAddress",
       resolvedChainId,
       resolvedAddress,

package/dist/fhe-airdrop/advanced/react/index.js

@@ -1,15 +1,14 @@
-import { buildQueryKey } from '../../../chunk-ORFTDNFZ.js';
-import '../../../chunk-6R4KNAPK.js';
-import { createConfidentialAirdropFactoryAdvancedClient } from '../../../chunk-ODLTEGHB.js';
-import { resolveEncryptor } from '../../../chunk-DUZIIRPF.js';
-import '../../../chunk-ZWXJTBZO.js';
+import { buildQueryKey } from '../../../chunk-CNP4L3GF.js';
+import '../../../chunk-S2XD75JM.js';
+import { createConfidentialAirdropFactoryAdvancedClient } from '../../../chunk-KSDSXJ34.js';
+import { resolveEncryptor } from '../../../chunk-UE5XK2SY.js';
+import '../../../chunk-YPYCWLYP.js';
 import '../../../chunk-7VELUOMI.js';
-import '../../../chunk-SG65XWH7.js';
-import { DEPLOYED_ADDRESSES } from '../../../chunk-XGGTQQFH.js';
-import '../../../chunk-ZA673I3O.js';
+import '../../../chunk-6WSNS3UV.js';
+import { DEPLOYED_ADDRESSES } from '../../../chunk-QKKBBH7I.js';
+import '../../../chunk-46T67CE2.js';
+import '../../../chunk-DRSPMIZ7.js';
 import '../../../chunk-Q2GP5UDC.js';
-import '../../../chunk-KWFFIJYX.js';
-import '../../../chunk-QBJ7O2B4.js';
 import { useRef, useMemo } from 'react';
 import { useQuery } from '@tanstack/react-query';
 import { usePublicClient, useWalletClient } from 'wagmi';

package/dist/fhe-airdrop/airdrop.d.ts

@@ -241,6 +241,13 @@ export declare class ConfidentialAirdropClient {
      *
      * **Silent-zero transfers.** ERC-7984 transfers do not revert when the sender's encrypted balance is insufficient — the transfer succeeds and moves an encrypted zero instead. This is by design: reverting would leak balance information. The transaction receipt alone cannot tell you whether value actually moved.
      *
+     * **An unfunded pool is the opposite case — it reverts loudly.** Do not
+     * generalize the silent-zero rule above to a clone whose pool was never
+     * funded: that claim throws {@link FheHandleNotAllowedError} (the FHEVM ACL
+     * rejects `FHE.allowTransient` on an uninitialized handle), and
+     * {@link preflightClaim} cannot detect it because the pool balance is an
+     * encrypted `euint64` the SDK cannot read in plaintext.
+     *
      * @returns Transaction hash.
      * @example
      * const fee = await airdrop.gasFee();