@tokenops/sdk 1.6.0 → 2.0.0-alpha.1

package/dist/{chunk-EUKPOXWR.cjs → chunk-6PXXGACR.cjs}

@@ -1,9 +1,11 @@
 'use strict';
 
-var chunk43RFBQ73_cjs = require('./chunk-43RFBQ73.cjs');
-var chunkWUXUWTFW_cjs = require('./chunk-WUXUWTFW.cjs');
-var chunkVR3FREBX_cjs = require('./chunk-VR3FREBX.cjs');
-var chunk2RNW4MIJ_cjs = require('./chunk-2RNW4MIJ.cjs');
+var chunkUG5RKLU2_cjs = require('./chunk-UG5RKLU2.cjs');
+var chunkMVDQMV25_cjs = require('./chunk-MVDQMV25.cjs');
+var chunk5576FRT3_cjs = require('./chunk-5576FRT3.cjs');
+var chunkJK4XMMKM_cjs = require('./chunk-JK4XMMKM.cjs');
+var chunk66IHPTOK_cjs = require('./chunk-66IHPTOK.cjs');
+var chunk67OV5CX2_cjs = require('./chunk-67OV5CX2.cjs');
 var chunkVJKZWYYJ_cjs = require('./chunk-VJKZWYYJ.cjs');
 var viem = require('viem');
 
@@ -443,10 +445,10 @@ var ConfidentialVestingFactoryClient = class {
     this.publicClient = config.publicClient;
     this.walletClient = config.walletClient;
     const chainId = config.chainId ?? config.publicClient.chain?.id;
-    const addressOverride = config.address ? chunkVR3FREBX_cjs.normaliseAddress(config.address) : void 0;
-    const resolved = addressOverride ?? (chainId === void 0 ? void 0 : chunkWUXUWTFW_cjs.getFheVestingFactoryAddress(chainId));
+    const addressOverride = config.address ? chunkJK4XMMKM_cjs.normaliseAddress(config.address) : void 0;
+    const resolved = addressOverride ?? (chainId === void 0 ? void 0 : chunk5576FRT3_cjs.getFheVestingFactoryAddress(chainId));
     if (!resolved) {
-      throw new chunk2RNW4MIJ_cjs.DeploymentAddressUnavailableError({
+      throw new chunk67OV5CX2_cjs.DeploymentAddressUnavailableError({
         reason: chainId === void 0 ? "chain-id-missing" : "registry-not-deployed",
         product: "fheVesting",
         contract: "confidentialVestingFactory",
@@ -462,7 +464,7 @@ var ConfidentialVestingFactoryClient = class {
       hasWallet: !!this.walletClient,
       aclResolved: true,
       // factory has no ACL dependency; constant for funnel-shape parity with manager.
-      sdkVersion: chunk43RFBQ73_cjs.SDK_VERSION
+      sdkVersion: chunkUG5RKLU2_cjs.SDK_VERSION
     });
   }
   // ----------------------- writes -----------------------
@@ -652,20 +654,20 @@ var ConfidentialVestingFactoryClient = class {
     });
     const ours = events.filter((ev) => ev.address.toLowerCase() === this.address.toLowerCase());
     if (ours.length === 0) {
-      throw new chunk2RNW4MIJ_cjs.TokenOpsSdkError(
+      throw new chunk67OV5CX2_cjs.TokenOpsSdkError(
         `${method}: no ManagerCreated event from factory ${this.address} in tx ${hash}`
       );
     }
     if (ours.length > 1) {
-      throw new chunk2RNW4MIJ_cjs.TokenOpsSdkError(
+      throw new chunk67OV5CX2_cjs.TokenOpsSdkError(
         `${method}: ${ours.length} ManagerCreated events from factory ${this.address} in tx ${hash}; ambiguous result`
       );
     }
-    return { hash: chunk2RNW4MIJ_cjs.asTxHash(hash), manager: ours[0].args.manager };
+    return { hash: chunk66IHPTOK_cjs.asTxHash(hash), manager: ours[0].args.manager };
   }
   #requireWallet(method) {
     if (!this.walletClient) {
-      throw new chunk2RNW4MIJ_cjs.MissingWalletClientError(method);
+      throw new chunk67OV5CX2_cjs.MissingWalletClientError(method);
     }
     return this.walletClient;
   }
@@ -673,7 +675,7 @@ var ConfidentialVestingFactoryClient = class {
     const wallet = this.#requireWallet(functionName);
     const acct = account ?? wallet.account;
     if (!acct) {
-      throw new chunk2RNW4MIJ_cjs.MissingAccountError(String(functionName));
+      throw new chunk67OV5CX2_cjs.MissingAccountError(String(functionName));
     }
     await this.#preflightWrite(String(functionName), functionName, args, acct);
     try {
@@ -690,7 +692,7 @@ var ConfidentialVestingFactoryClient = class {
     }
   }
   #mapRevert(method, err, account) {
-    return chunk43RFBQ73_cjs.mapContractRevert(err, {
+    return chunkMVDQMV25_cjs.mapContractRevert(err, {
       method,
       contractAddress: this.address,
       abi: confidentialVestingFactoryAbi,
@@ -715,7 +717,7 @@ var ConfidentialVestingFactoryClient = class {
         ...value !== void 0 ? { value } : {}
       });
     } catch (err) {
-      if (chunk43RFBQ73_cjs.isContractRevert(err)) {
+      if (chunkMVDQMV25_cjs.isContractRevert(err)) {
         throw this.#mapRevert(method, err, accountAddress(account));
       }
     }

package/dist/{chunk-WTK6JDSI.js → chunk-74QFZ5MK.js}

@@ -1,7 +1,9 @@
-import { SDK_VERSION, isContractRevert, mapContractRevert } from './chunk-6WSNS3UV.js';
-import { getConfidentialTestTokenAddress, getTestTokenAddress } from './chunk-QKKBBH7I.js';
-import { normaliseAddress } from './chunk-46T67CE2.js';
-import { TokenOpsSdkError, UnsupportedChainError, DeploymentAddressUnavailableError, asEncryptedHandle, TokenOpsContractError, ReceiptEventNotFoundError, ReceiptEventAmbiguousError, asTxHash, MissingWalletClientError, MissingAccountError, InvalidArgumentError } from './chunk-DRSPMIZ7.js';
+import { SDK_VERSION } from './chunk-NWFMBLSQ.js';
+import { isContractRevert, mapContractRevert } from './chunk-4RAAATVY.js';
+import { getConfidentialTestTokenAddress, getTestTokenAddress } from './chunk-DZHYSUGY.js';
+import { normaliseAddress } from './chunk-ZA673I3O.js';
+import { asEncryptedHandle, asTxHash } from './chunk-KWFFIJYX.js';
+import { TokenOpsSdkError, UnsupportedChainError, DeploymentAddressUnavailableError, TokenOpsContractError, ReceiptEventNotFoundError, ReceiptEventAmbiguousError, MissingWalletClientError, MissingAccountError, InvalidArgumentError } from './chunk-QBJ7O2B4.js';
 import { withTelemetry } from './chunk-Q2GP5UDC.js';
 import { sepolia } from 'viem/chains';
 import { parseEventLogs } from 'viem';

package/dist/{chunk-WOEETTH7.cjs → chunk-7AFPOE7N.cjs}

@@ -1,8 +1,8 @@
 'use strict';
 
 var chunkZQUE2B3Q_cjs = require('./chunk-ZQUE2B3Q.cjs');
-var chunk4ZCXK4VI_cjs = require('./chunk-4ZCXK4VI.cjs');
-var chunk2RNW4MIJ_cjs = require('./chunk-2RNW4MIJ.cjs');
+var chunkKFRDLKMA_cjs = require('./chunk-KFRDLKMA.cjs');
+var chunk67OV5CX2_cjs = require('./chunk-67OV5CX2.cjs');
 var reactQuery = require('@tanstack/react-query');
 var wagmi = require('wagmi');
 
@@ -22,7 +22,7 @@ function useIsOperator(options = {}) {
       holder ? holder.toLowerCase() : null,
       spender ? spender.toLowerCase() : null
     ],
-    queryFn: () => chunk4ZCXK4VI_cjs.isOperator({
+    queryFn: () => chunkKFRDLKMA_cjs.isOperator({
       publicClient,
       token,
       holder,
@@ -39,9 +39,9 @@ function useEnsureOperator(options = {}) {
   const telemetry = options.telemetry;
   return reactQuery.useMutation({
     mutationFn: async (vars) => {
-      if (!publicClient) throw new chunk2RNW4MIJ_cjs.MissingPublicClientError("useEnsureOperator");
-      if (!walletClient) throw new chunk2RNW4MIJ_cjs.MissingWalletClientError("useEnsureOperator");
-      return chunk4ZCXK4VI_cjs.ensureOperator({
+      if (!publicClient) throw new chunk67OV5CX2_cjs.MissingPublicClientError("useEnsureOperator");
+      if (!walletClient) throw new chunk67OV5CX2_cjs.MissingWalletClientError("useEnsureOperator");
+      return chunkKFRDLKMA_cjs.ensureOperator({
         publicClient,
         walletClient,
         token: vars.token,

package/dist/{chunk-U57COLUE.js → chunk-AXIPOR3C.js}

@@ -1,6 +1,6 @@
 import { useWagmiAccount } from './chunk-FT4LNBOS.js';
-import { isOperator, ensureOperator } from './chunk-4KJ66YRH.js';
-import { MissingPublicClientError, MissingWalletClientError } from './chunk-DRSPMIZ7.js';
+import { isOperator, ensureOperator } from './chunk-4TSDNZQ3.js';
+import { MissingPublicClientError, MissingWalletClientError } from './chunk-QBJ7O2B4.js';
 import { useQuery, useMutation } from '@tanstack/react-query';
 import { usePublicClient, useWalletClient } from 'wagmi';
 

package/dist/chunk-CTED3MTR.cjs

@@ -0,0 +1,380 @@
+'use strict';
+
+var chunkPUX5VXDB_cjs = require('./chunk-PUX5VXDB.cjs');
+var chunkM4IT6DNJ_cjs = require('./chunk-M4IT6DNJ.cjs');
+var chunkJK4XMMKM_cjs = require('./chunk-JK4XMMKM.cjs');
+var chunk67OV5CX2_cjs = require('./chunk-67OV5CX2.cjs');
+var merkleTree = require('@openzeppelin/merkle-tree');
+var viem = require('viem');
+
+function leafOf(args) {
+  const inner = viem.keccak256(
+    viem.encodeAbiParameters(
+      [{ type: "address" }, { type: "address" }, { type: "bytes32" }],
+      [args.instance, args.recipient, args.handle]
+    )
+  );
+  return viem.keccak256(inner);
+}
+var HANDLE_PATTERN = /^0x[0-9a-fA-F]{64}$/;
+function assertLeaves(instance, leaves, method) {
+  if (!viem.isAddress(instance, { strict: false })) {
+    throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+      method,
+      argument: "instance",
+      reason: "is not a 20-byte hex address",
+      value: instance
+    });
+  }
+  if (viem.isAddressEqual(instance, viem.zeroAddress)) {
+    throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+      method,
+      argument: "instance",
+      reason: "is the zero address; leaves must be scoped to the airdrop instance"
+    });
+  }
+  if (leaves.length === 0) {
+    throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+      method,
+      argument: "leaves",
+      reason: "a tree needs at least one leaf"
+    });
+  }
+  const seen = /* @__PURE__ */ new Map();
+  leaves.forEach((leaf, index) => {
+    if (!viem.isAddress(leaf.recipient, { strict: false })) {
+      throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+        method,
+        argument: `leaves[${index}].recipient`,
+        reason: "is not a 20-byte hex address",
+        value: leaf.recipient
+      });
+    }
+    if (viem.isAddressEqual(leaf.recipient, viem.zeroAddress)) {
+      throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+        method,
+        argument: `leaves[${index}].recipient`,
+        reason: "is the zero address, whose leaf can never be claimed"
+      });
+    }
+    if (!HANDLE_PATTERN.test(leaf.handle)) {
+      throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+        method,
+        argument: `leaves[${index}].handle`,
+        reason: "is not a 32-byte hex handle; the tree would commit to a value no claim can reproduce",
+        value: leaf.handle
+      });
+    }
+    const key = leaf.recipient.toLowerCase();
+    const first = seen.get(key);
+    if (first !== void 0) {
+      throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+        method,
+        argument: `leaves[${index}].recipient`,
+        reason: `appears twice (also at index ${first}); one root pays max, not sum, of a recipient's leaves \u2014 merge them into a single cumulative total`
+      });
+    }
+    seen.set(key, index);
+  });
+}
+function buildMerkleTree(args) {
+  return buildMerkleTreeInternal(args, "buildMerkleTree");
+}
+function buildMerkleTreeInternal({ instance, leaves }, method) {
+  assertLeaves(instance, leaves, method);
+  const airdrop = chunkJK4XMMKM_cjs.normaliseAddress(instance);
+  const accounts = leaves.map((leaf) => chunkJK4XMMKM_cjs.normaliseAddress(leaf.recipient));
+  const rows = accounts.map((account, i) => [airdrop, account, leaves[i].handle]);
+  const tree = merkleTree.StandardMerkleTree.of(rows, ["address", "address", "bytes32"]);
+  return {
+    root: tree.root,
+    // `getProof(i)` indexes the INPUT array, not the tree: `StandardMerkleTree`
+    // sorts leaves internally but keeps `values` in insertion order, so entry
+    // `i` always belongs to `leaves[i]`.
+    entries: leaves.map((leaf, i) => ({
+      ...leaf,
+      recipient: accounts[i],
+      merkleProof: tree.getProof(i)
+    }))
+  };
+}
+var MAX_UINT64 = (1n << 64n) - 1n;
+function validateCampaignRecipients(recipients) {
+  validateCampaignRecipientsInternal(recipients, "validateCampaignRecipients");
+}
+function validateCampaignRecipientsInternal(recipients, method) {
+  if (recipients.length === 0) {
+    throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+      method,
+      argument: "recipients",
+      reason: "a campaign needs at least one recipient"
+    });
+  }
+  const seen = /* @__PURE__ */ new Map();
+  recipients.forEach((entry, index) => {
+    if (!viem.isAddress(entry.recipient, { strict: false })) {
+      throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+        method,
+        argument: `recipients[${index}].recipient`,
+        reason: "is not a 20-byte hex address",
+        value: entry.recipient
+      });
+    }
+    if (viem.isAddressEqual(entry.recipient, viem.zeroAddress)) {
+      throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+        method,
+        argument: `recipients[${index}].recipient`,
+        reason: "is the zero address, whose leaf can never be claimed"
+      });
+    }
+    if (entry.cumulativeTotal < 0n || entry.cumulativeTotal > MAX_UINT64) {
+      throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+        method,
+        argument: `recipients[${index}].cumulativeTotal`,
+        // Deliberately no `value`: the total is confidential.
+        reason: "is outside uint64 range (0..2^64-1)"
+      });
+    }
+    const key = entry.recipient.toLowerCase();
+    const first = seen.get(key);
+    if (first !== void 0) {
+      throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+        method,
+        argument: `recipients[${index}].recipient`,
+        reason: `appears twice (also at index ${first}); one root pays max, not sum, of a recipient's leaves \u2014 merge them into a single cumulative total`
+      });
+    }
+    seen.set(key, index);
+  });
+}
+async function encryptRoster({ instance, recipients, encryptor }, method) {
+  validateCampaignRecipientsInternal(recipients, method);
+  if (!viem.isAddress(instance, { strict: false })) {
+    throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+      method,
+      argument: "instance",
+      reason: "is not a 20-byte hex address",
+      value: instance
+    });
+  }
+  if (viem.isAddressEqual(instance, viem.zeroAddress)) {
+    throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+      method,
+      argument: "instance",
+      reason: "is the zero address; inputs must be bound to the airdrop instance"
+    });
+  }
+  const enc = chunkPUX5VXDB_cjs.resolveEncryptor(encryptor);
+  if (!enc) {
+    throw new chunk67OV5CX2_cjs.MissingEncryptorError(method, {
+      hint: "Pass an encryptor instance, or a lazy factory that returns one."
+    });
+  }
+  const airdrop = chunkJK4XMMKM_cjs.normaliseAddress(instance);
+  const accounts = recipients.map((r) => chunkJK4XMMKM_cjs.normaliseAddress(r.recipient));
+  const encrypted = await Promise.all(
+    recipients.map(
+      (r, i) => chunkPUX5VXDB_cjs.encryptUint64({
+        encryptor: enc,
+        contractAddress: airdrop,
+        userAddress: accounts[i],
+        value: r.cumulativeTotal
+      })
+    )
+  );
+  return accounts.map((recipient, i) => ({
+    recipient,
+    handle: encrypted[i].handle,
+    inputProof: encrypted[i].inputProof
+  }));
+}
+async function encryptCampaignAmounts(args) {
+  return encryptRoster(args, "encryptCampaignAmounts");
+}
+async function buildMerkleCampaign({
+  instance,
+  recipients,
+  encryptor
+}) {
+  const leaves = await encryptRoster({ instance, recipients, encryptor }, "buildMerkleCampaign");
+  return buildMerkleTreeInternal({ instance, leaves }, "buildMerkleCampaign");
+}
+async function planMerkleCampaign({
+  factory,
+  params,
+  mode,
+  creator,
+  userSalt,
+  recipients,
+  encryptor
+}) {
+  validateCampaignRecipientsInternal(recipients, "planMerkleCampaign");
+  const initCodeHashBefore = await factory.getMerkleInitCodeHash({ params, mode });
+  const predictedAddress = await factory.predictMerkleAirdropAddress({
+    params,
+    mode,
+    deployer: creator,
+    userSalt
+  });
+  const campaign = await buildMerkleCampaign({
+    instance: predictedAddress,
+    recipients,
+    encryptor
+  });
+  const initCodeHashAfter = await factory.getMerkleInitCodeHash({ params, mode });
+  chunkM4IT6DNJ_cjs.assertPredictionFresh({
+    variant: "merkle",
+    initCodeHashBefore,
+    initCodeHashAfter,
+    predictedAddress,
+    method: "planMerkleCampaign"
+  });
+  return { ...campaign, predictedAddress, initCodeHashBefore, initCodeHashAfter };
+}
+async function rotateMerkleRoot({
+  airdrop,
+  recipients,
+  encryptor,
+  account
+}) {
+  const campaign = await buildMerkleCampaign({
+    instance: airdrop.address,
+    recipients,
+    encryptor
+  });
+  const hash = await airdrop.setMerkleRoot({ newRoot: campaign.root, account });
+  return { ...campaign, hash };
+}
+var ASSIGNABLE_ROLES = [
+  { key: "pauser", role: "PAUSER_ROLE" },
+  { key: "windowAdmin", role: "WINDOW_ADMIN_ROLE" },
+  { key: "treasury", role: "TREASURY_ROLE" },
+  { key: "rescuer", role: "RESCUER_ROLE" },
+  { key: "disclosureAdmin", role: "DISCLOSURE_ADMIN_ROLE" },
+  { key: "upgrader", role: "UPGRADER_ROLE" },
+  { key: "merkleAdmin", role: "MERKLE_ADMIN_ROLE", variant: "merkle" },
+  { key: "signer", role: "SIGNER_ROLE", variant: "ecdsa" }
+];
+function planInstanceRoleSplit(args) {
+  const { assignment, caller, airdropType } = args;
+  if (assignment.feeCollector !== void 0) {
+    throw new chunkM4IT6DNJ_cjs.FeeCollectorSelfAdministeredError({ requestedGrantee: assignment.feeCollector });
+  }
+  const steps = [];
+  for (const { key, role, variant } of ASSIGNABLE_ROLES) {
+    const account = assignment[key];
+    if (account === void 0) continue;
+    if (variant !== void 0 && variant !== airdropType) {
+      throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+        method: "planInstanceRoleSplit",
+        argument: `assignment.${key}`,
+        reason: `${role} only exists on ${variant} campaigns; this is a(n) ${airdropType} campaign`
+      });
+    }
+    steps.push({ kind: "grant", role, account });
+  }
+  if (assignment.admin !== void 0) {
+    if (viem.isAddressEqual(assignment.admin, viem.zeroAddress)) {
+      throw new chunk67OV5CX2_cjs.InvalidArgumentError({
+        method: "planInstanceRoleSplit",
+        argument: "assignment.admin",
+        reason: "granting DEFAULT_ADMIN_ROLE to the zero address is never valid"
+      });
+    }
+    steps.push({ kind: "grant", role: "DEFAULT_ADMIN_ROLE", account: assignment.admin });
+    steps.push({ kind: "revoke", role: "DEFAULT_ADMIN_ROLE", account: caller });
+  }
+  return steps;
+}
+function roleGetterAbiEntry(name) {
+  return {
+    inputs: [],
+    name,
+    outputs: [{ internalType: "bytes32", name: "", type: "bytes32" }],
+    stateMutability: "view",
+    type: "function"
+  };
+}
+var ROLE_GETTER_ABI = [
+  roleGetterAbiEntry("PAUSER_ROLE"),
+  roleGetterAbiEntry("WINDOW_ADMIN_ROLE"),
+  roleGetterAbiEntry("TREASURY_ROLE"),
+  roleGetterAbiEntry("RESCUER_ROLE"),
+  roleGetterAbiEntry("DISCLOSURE_ADMIN_ROLE"),
+  roleGetterAbiEntry("UPGRADER_ROLE"),
+  roleGetterAbiEntry("MERKLE_ADMIN_ROLE"),
+  roleGetterAbiEntry("SIGNER_ROLE")
+];
+var DEFAULT_ADMIN_ROLE_CONSTANT = `0x${"0".repeat(64)}`;
+async function resolveRoleConstant(airdrop, role) {
+  if (role === "DEFAULT_ADMIN_ROLE") return DEFAULT_ADMIN_ROLE_CONSTANT;
+  const result = await airdrop.publicClient.readContract({
+    address: airdrop.address,
+    abi: ROLE_GETTER_ABI,
+    functionName: role
+  });
+  return result;
+}
+function toOutcomeError(step, airdrop, error) {
+  if (chunk67OV5CX2_cjs.isTokenOpsSdkError(error)) return error;
+  return new chunk67OV5CX2_cjs.UnknownWriteFailureError({
+    method: `grantInstanceRoles.${step.kind}.${step.role}`,
+    contractAddress: airdrop.address,
+    cause: error
+  });
+}
+async function grantInstanceRoles(args) {
+  const { airdrop, assignment, revokeFromCreator = true } = args;
+  const wallet = airdrop.walletClient;
+  if (!wallet) {
+    throw new chunk67OV5CX2_cjs.MissingWalletClientError("grantInstanceRoles");
+  }
+  const callerAccount = wallet.account;
+  if (!callerAccount) {
+    throw new chunk67OV5CX2_cjs.MissingAccountError("grantInstanceRoles");
+  }
+  const caller = typeof callerAccount === "string" ? callerAccount : callerAccount.address;
+  const airdropType = await airdrop.airdropType() === 1 ? "merkle" : "ecdsa";
+  let steps = planInstanceRoleSplit({ assignment, caller, airdropType });
+  if (!revokeFromCreator) {
+    steps = steps.filter((step) => !(step.kind === "revoke" && step.role === "DEFAULT_ADMIN_ROLE"));
+  }
+  const outcomes = [];
+  for (const step of steps) {
+    try {
+      const role = await resolveRoleConstant(airdrop, step.role);
+      const hash = step.kind === "grant" ? await airdrop.grantRole({ role, holder: step.account, account: caller }) : await airdrop.revokeRole({ role, holder: step.account, account: caller });
+      const receipt = await airdrop.publicClient.waitForTransactionReceipt({ hash });
+      if (receipt.status !== "success") {
+        outcomes.push({
+          role: step.role,
+          account: step.account,
+          error: new chunk67OV5CX2_cjs.ContractRevertError({
+            method: `grantInstanceRoles.${step.kind}.${step.role}`,
+            contractAddress: airdrop.address,
+            message: `grantInstanceRoles.${step.kind}.${step.role}: transaction ${hash} was mined with a reverted status; the role change did not apply.`
+          })
+        });
+        continue;
+      }
+      outcomes.push({ role: step.role, account: step.account, hash });
+    } catch (error) {
+      outcomes.push({
+        role: step.role,
+        account: step.account,
+        error: toOutcomeError(step, airdrop, error)
+      });
+    }
+  }
+  return outcomes;
+}
+
+exports.buildMerkleCampaign = buildMerkleCampaign;
+exports.buildMerkleTree = buildMerkleTree;
+exports.encryptCampaignAmounts = encryptCampaignAmounts;
+exports.grantInstanceRoles = grantInstanceRoles;
+exports.leafOf = leafOf;
+exports.planInstanceRoleSplit = planInstanceRoleSplit;
+exports.planMerkleCampaign = planMerkleCampaign;
+exports.rotateMerkleRoot = rotateMerkleRoot;
+exports.validateCampaignRecipients = validateCampaignRecipients;

package/dist/{chunk-QKKBBH7I.js → chunk-DZHYSUGY.js}

@@ -1,4 +1,4 @@
-import { DeploymentAddressUnavailableError } from './chunk-DRSPMIZ7.js';
+import { DeploymentAddressUnavailableError } from './chunk-QBJ7O2B4.js';
 import { sepolia, mainnet } from 'viem/chains';
 
 var DEPLOYED_ADDRESSES = {
@@ -8,10 +8,22 @@ var DEPLOYED_ADDRESSES = {
       // mainnet omitted — not deployed.
     }
   },
+  // Airdrop v2 (tokenops-fhe-airdrop-v2 @ 8e5b144). The four contracts deploy
+  // together in one scripted run, so a chain either has all of them or none —
+  // which is what `chainsWithDeployment` assumes.
   fheAirdrop: {
-    confidentialAirdropFactory: {
-      [sepolia.id]: "0xbE6A3B78B36684fFee48De77d47Bc3393F5Acd4c"
-      // mainnet omitted — not deployed.
+    airdropFactory: {
+      [sepolia.id]: "0x383083B6f13a0ee513596A6750B511c5E482d2d1"
+      // mainnet omitted — ZamaConfig-gated, not deployed.
+    },
+    ecdsaImplementation: {
+      [sepolia.id]: "0xefE40570C1837210f8E4Ae938635e11bd1ae788E"
+    },
+    merkleImplementation: {
+      [sepolia.id]: "0x9f3156546744F3ceE98Dc44bed817d98A8b8ae74"
+    },
+    complianceManagerImplementation: {
+      [sepolia.id]: "0x6adA841250C048364d1d3027958C662Dd4E62136"
     }
   },
   fheDisperse: {
@@ -62,10 +74,19 @@ function requireFheVestingFactoryAddress(chainId) {
   return requireDeployedAddress("fheVesting", "confidentialVestingFactory", chainId);
 }
 function getFheAirdropFactoryAddress(chainId) {
-  return getDeployedAddress("fheAirdrop", "confidentialAirdropFactory", chainId);
+  return getDeployedAddress("fheAirdrop", "airdropFactory", chainId);
 }
 function requireFheAirdropFactoryAddress(chainId) {
-  return requireDeployedAddress("fheAirdrop", "confidentialAirdropFactory", chainId);
+  return requireDeployedAddress("fheAirdrop", "airdropFactory", chainId);
+}
+function getFheAirdropEcdsaImplementationAddress(chainId) {
+  return getDeployedAddress("fheAirdrop", "ecdsaImplementation", chainId);
+}
+function getFheAirdropMerkleImplementationAddress(chainId) {
+  return getDeployedAddress("fheAirdrop", "merkleImplementation", chainId);
+}
+function getFheAirdropComplianceImplementationAddress(chainId) {
+  return getDeployedAddress("fheAirdrop", "complianceManagerImplementation", chainId);
 }
 function getFheDisperseSingletonAddress(chainId) {
   return getDeployedAddress("fheDisperse", "disperseConfidentialSingleton", chainId);
@@ -108,4 +129,4 @@ function chainsWithDeployment(product) {
   ).sort((a, b) => a - b);
 }
 
-export { DEPLOYED_ADDRESSES, chainsWithDeployment, chainsWithKnownRegistryEntry, getConfidentialTestTokenAddress, getDeployedAddress, getFheAirdropFactoryAddress, getFheDisperseSingletonAddress, getFheVestingFactoryAddress, getTestTokenAddress, requireConfidentialTestTokenAddress, requireFheAirdropFactoryAddress, requireFheDisperseSingletonAddress, requireFheVestingFactoryAddress, requireTestTokenAddress };
+export { DEPLOYED_ADDRESSES, chainsWithDeployment, chainsWithKnownRegistryEntry, getConfidentialTestTokenAddress, getDeployedAddress, getFheAirdropComplianceImplementationAddress, getFheAirdropEcdsaImplementationAddress, getFheAirdropFactoryAddress, getFheAirdropMerkleImplementationAddress, getFheDisperseSingletonAddress, getFheVestingFactoryAddress, getTestTokenAddress, requireConfidentialTestTokenAddress, requireFheAirdropFactoryAddress, requireFheDisperseSingletonAddress, requireFheVestingFactoryAddress, requireTestTokenAddress };

package/dist/{chunk-V5D7BHW3.js → chunk-EAJ7SYHE.js}

@@ -1,7 +1,9 @@
-import { SDK_VERSION, mapContractRevert, isContractRevert } from './chunk-6WSNS3UV.js';
-import { getFheVestingFactoryAddress } from './chunk-QKKBBH7I.js';
-import { normaliseAddress } from './chunk-46T67CE2.js';
-import { DeploymentAddressUnavailableError, TokenOpsSdkError, asTxHash, MissingWalletClientError, MissingAccountError } from './chunk-DRSPMIZ7.js';
+import { SDK_VERSION } from './chunk-NWFMBLSQ.js';
+import { mapContractRevert, isContractRevert } from './chunk-4RAAATVY.js';
+import { getFheVestingFactoryAddress } from './chunk-DZHYSUGY.js';
+import { normaliseAddress } from './chunk-ZA673I3O.js';
+import { asTxHash } from './chunk-KWFFIJYX.js';
+import { DeploymentAddressUnavailableError, TokenOpsSdkError, MissingWalletClientError, MissingAccountError } from './chunk-QBJ7O2B4.js';
 import { withTelemetry } from './chunk-Q2GP5UDC.js';
 import { parseEventLogs } from 'viem';
 

package/dist/{chunk-SYHNZSZZ.cjs → chunk-FAXIIH5R.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunk2RNW4MIJ_cjs = require('./chunk-2RNW4MIJ.cjs');
+var chunk67OV5CX2_cjs = require('./chunk-67OV5CX2.cjs');
 var viem = require('viem');
 
 var FHEVM_ACL_ADDRESS_BY_CHAIN = {
@@ -16,7 +16,7 @@ function getFhevmAclAddress(chainId) {
 }
 function requireFhevmAclAddress(chainId, clientLabel) {
   if (chainId === void 0) {
-    throw new chunk2RNW4MIJ_cjs.DeploymentAddressUnavailableError({
+    throw new chunk67OV5CX2_cjs.DeploymentAddressUnavailableError({
       reason: "chain-id-missing",
       product: "fhevm",
       contract: "acl",
@@ -26,7 +26,7 @@ function requireFhevmAclAddress(chainId, clientLabel) {
   }
   const addr = FHEVM_ACL_ADDRESS_BY_CHAIN[chainId];
   if (addr) return addr;
-  throw new chunk2RNW4MIJ_cjs.DeploymentAddressUnavailableError({
+  throw new chunk67OV5CX2_cjs.DeploymentAddressUnavailableError({
     reason: "registry-unknown-chain",
     product: "fhevm",
     contract: "acl",

package/dist/{chunk-7G7UOQV4.cjs → chunk-FGEB7RMY.cjs}

@@ -1,9 +1,9 @@
 'use strict';
 
-var chunkEUKPOXWR_cjs = require('./chunk-EUKPOXWR.cjs');
+var chunk6PXXGACR_cjs = require('./chunk-6PXXGACR.cjs');
 
 // src/fhe-vesting/advanced/factory-advanced.ts
-var ConfidentialVestingFactoryAdvancedClient = class extends chunkEUKPOXWR_cjs.ConfidentialVestingFactoryClient {
+var ConfidentialVestingFactoryAdvancedClient = class extends chunk6PXXGACR_cjs.ConfidentialVestingFactoryClient {
   /**
    * Compute the deterministic CREATE2 clone address as the factory would have
    * computed it at `args.blockNumber`.
@@ -20,7 +20,7 @@ var ConfidentialVestingFactoryAdvancedClient = class extends chunkEUKPOXWR_cjs.C
     if (hasOptions) {
       return this.publicClient.readContract({
         address: this.address,
-        abi: chunkEUKPOXWR_cjs.confidentialVestingFactoryAbi,
+        abi: chunk6PXXGACR_cjs.confidentialVestingFactoryAbi,
         functionName: "predictManagerAddressWithOptions",
         args: [
           args.token,
@@ -34,7 +34,7 @@ var ConfidentialVestingFactoryAdvancedClient = class extends chunkEUKPOXWR_cjs.C
     }
     return this.publicClient.readContract({
       address: this.address,
-      abi: chunkEUKPOXWR_cjs.confidentialVestingFactoryAbi,
+      abi: chunk6PXXGACR_cjs.confidentialVestingFactoryAbi,
       functionName: "predictManagerAddress",
       args: [args.token, args.userSalt, args.deployer],
       blockNumber: args.blockNumber