@tokenops/sdk 1.6.0 → 2.0.0-alpha.2

package/dist/{chunk-46T67CE2.js → chunk-ZA673I3O.js}

@@ -1,4 +1,4 @@
-import { TokenOpsValidationError } from './chunk-DRSPMIZ7.js';
+import { TokenOpsValidationError } from './chunk-QBJ7O2B4.js';
 import { isAddress, getAddress } from 'viem';
 
 function normaliseAddress(input) {

package/dist/{chunk-YPYCWLYP.js → chunk-ZWXJTBZO.js}

@@ -1,4 +1,4 @@
-import { DeploymentAddressUnavailableError } from './chunk-DRSPMIZ7.js';
+import { DeploymentAddressUnavailableError } from './chunk-QBJ7O2B4.js';
 import { parseAbiItem } from 'viem';
 
 var FHEVM_ACL_ADDRESS_BY_CHAIN = {

package/dist/core/addresses.d.ts

@@ -14,8 +14,17 @@ export declare const DEPLOYED_ADDRESSES: {
         };
     };
     readonly fheAirdrop: {
-        readonly confidentialAirdropFactory: {
-            readonly 11155111: "0xbE6A3B78B36684fFee48De77d47Bc3393F5Acd4c";
+        readonly airdropFactory: {
+            readonly 11155111: "0x174A7CB40F64aBC4C95CecB4172A066Cf531e4E9";
+        };
+        readonly ecdsaImplementation: {
+            readonly 11155111: "0xDeD7AB391f87B8F891F89AaEC64C7c9C800C6645";
+        };
+        readonly merkleImplementation: {
+            readonly 11155111: "0x815E65Cdd707F07F09332537b47C530d0E87aAf5";
+        };
+        readonly complianceManagerImplementation: {
+            readonly 11155111: "0x885474FA494748C85410482244a406C6Ad570CCe";
         };
     };
     readonly fheDisperse: {
@@ -47,6 +56,9 @@ export declare function getFheVestingFactoryAddress(chainId: number): Address |
 export declare function requireFheVestingFactoryAddress(chainId: number): Address;
 export declare function getFheAirdropFactoryAddress(chainId: number): Address | undefined;
 export declare function requireFheAirdropFactoryAddress(chainId: number): Address;
+export declare function getFheAirdropEcdsaImplementationAddress(chainId: number): Address | undefined;
+export declare function getFheAirdropMerkleImplementationAddress(chainId: number): Address | undefined;
+export declare function getFheAirdropComplianceImplementationAddress(chainId: number): Address | undefined;
 export declare function getFheDisperseSingletonAddress(chainId: number): Address | undefined;
 export declare function requireFheDisperseSingletonAddress(chainId: number): Address;
 /**

package/dist/core/brands.d.ts

@@ -44,7 +44,12 @@ export type ExternalInputProof = Hex;
 export type TxHash = Hex;
 /** `bytes32` vesting schedule id, emitted in `VestingCreated`. */
 export type VestingId = Hex;
-/** `bytes32` airdrop id, emitted in `AirdropCreated`. */
+/**
+ * `bytes32` campaign id chosen by the consumer. Airdrop v2 identifies an
+ * instance by its address (`ConfidentialAirdropCreated(address airdrop, …)`),
+ * not by an on-chain id, so this brand exists for consumers that key
+ * campaigns by their own `bytes32` identifier.
+ */
 export type AirdropId = Hex;
 /** `bytes32` disperse id, emitted in `DisperseExecuted`. */
 export type DisperseId = Hex;
@@ -55,7 +60,8 @@ export type Role = Hex;
  * or `walletClient.signMessage` (EIP-191). NOT a transaction hash — these
  * bytes are never broadcast directly; they're handed off-chain to a verifier.
  *
- * Canonical producer: {@link useSignClaimAuthorization} in `/fhe-airdrop/react`.
+ * Canonical producer: `signClaimAuthorization` in `/fhe-airdrop`, which signs
+ * the ECDSA campaign's EIP-712 `Claim` struct.
  */
 export type Signature = Hex;
 /**

package/dist/core/errors.d.ts

@@ -11,8 +11,10 @@ declare const TOKENOPS_SDK_ERROR_BRAND: unique symbol;
  * Stable, string-literal error codes. Codes are the machine contract — match
  * on `error.code` in `onError` handlers and UI surfaces. Messages stay
  * human-readable and may evolve between versions.
+ * @public
  */
-export type TokenOpsSdkErrorCode = "TOKENOPS_UNSUPPORTED_CHAIN" | "TOKENOPS_DEPLOYMENT_ADDRESS_UNAVAILABLE" | "TOKENOPS_MISSING_PUBLIC_CLIENT" | "TOKENOPS_MISSING_WALLET_CLIENT" | "TOKENOPS_MISSING_ACCOUNT" | "TOKENOPS_MISSING_ENCRYPTOR" | "TOKENOPS_MISSING_CLIENT" | "TOKENOPS_INVALID_ARGUMENT" | "TOKENOPS_RECEIPT_EVENT_NOT_FOUND" | "TOKENOPS_RECEIPT_EVENT_AMBIGUOUS" | "TOKENOPS_CONTRACT_REVERT" | "TOKENOPS_PAUSED" | "TOKENOPS_ACCESS_DENIED" | "TOKENOPS_OPERATOR_NOT_APPROVED" | "TOKENOPS_INSUFFICIENT_FEE" | "TOKENOPS_INSUFFICIENT_BALANCE" | "TOKENOPS_BATCH_TOO_LARGE" | "TOKENOPS_FEATURE_DISABLED" | "TOKENOPS_TRANSFER_FAILED" | "TOKENOPS_FHE_HANDLE_NOT_ALLOWED" | "TOKENOPS_ALREADY_INITIALIZED" | "TOKENOPS_REENTRANCY" | "TOKENOPS_INVALID_SIGNATURE" | "TOKENOPS_WALLET_REJECTED" | "TOKENOPS_WALLET_CHAIN_MISMATCH" | "TOKENOPS_NETWORK_ERROR" | "TOKENOPS_INSUFFICIENT_GAS_FUNDS" | "TOKENOPS_UNKNOWN_WRITE_FAILURE" | "TOKENOPS_USER_REJECTED" | "TOKENOPS_SIGNING_FAILED" | "TOKENOPS_RELAYER_UNREACHABLE" | "TOKENOPS_ENCRYPTION_FAILED" | "TOKENOPS_DECRYPTION_FAILED" | "TOKENOPS_USER_DECRYPT_NOT_ALLOWED" | "TOKENOPS_VESTING_NOT_FOUND" | "TOKENOPS_NOT_RECIPIENT" | "TOKENOPS_CLAIM_LOCKED" | "TOKENOPS_VESTING_REVOKED" | "TOKENOPS_NOT_REVOCABLE" | "TOKENOPS_VESTING_EXPIRED" | "TOKENOPS_TRANSFER_ALREADY_PENDING" | "TOKENOPS_NO_PENDING_TRANSFER" | "TOKENOPS_NOT_PENDING_RECIPIENT" | "TOKENOPS_TRANSFER_EXPIRED" | "TOKENOPS_ALREADY_CLAIMED" | "TOKENOPS_CLAIM_NOT_STARTED" | "TOKENOPS_CLAIM_WINDOW_CLOSED" | "TOKENOPS_NOT_REGISTERED" | "TOKENOPS_ALREADY_REGISTERED" | "TOKENOPS_SUBWALLETS_NOT_APPROVED" | "TOKENOPS_SINGLETON_NOT_APPROVED" | "TOKENOPS_FAUCET_SUPPLY_EXHAUSTED";
+export type TokenOpsSdkErrorCode = "TOKENOPS_UNSUPPORTED_CHAIN" | "TOKENOPS_DEPLOYMENT_ADDRESS_UNAVAILABLE" | "TOKENOPS_MISSING_PUBLIC_CLIENT" | "TOKENOPS_MISSING_WALLET_CLIENT" | "TOKENOPS_MISSING_ACCOUNT" | "TOKENOPS_MISSING_ENCRYPTOR" | "TOKENOPS_MISSING_CLIENT" | "TOKENOPS_INVALID_ARGUMENT" | "TOKENOPS_RECEIPT_EVENT_NOT_FOUND" | "TOKENOPS_RECEIPT_EVENT_AMBIGUOUS" | "TOKENOPS_CONTRACT_REVERT" | "TOKENOPS_PAUSED" | "TOKENOPS_ACCESS_DENIED" | "TOKENOPS_OPERATOR_NOT_APPROVED" | "TOKENOPS_INSUFFICIENT_FEE" | "TOKENOPS_INSUFFICIENT_BALANCE" | "TOKENOPS_BATCH_TOO_LARGE" | "TOKENOPS_FEATURE_DISABLED" | "TOKENOPS_TRANSFER_FAILED" | "TOKENOPS_FHE_HANDLE_NOT_ALLOWED" | "TOKENOPS_ALREADY_INITIALIZED" | "TOKENOPS_REENTRANCY" | "TOKENOPS_INVALID_SIGNATURE" | "TOKENOPS_WALLET_REJECTED" | "TOKENOPS_WALLET_CHAIN_MISMATCH" | "TOKENOPS_NETWORK_ERROR" | "TOKENOPS_INSUFFICIENT_GAS_FUNDS" | "TOKENOPS_UNKNOWN_WRITE_FAILURE" | "TOKENOPS_USER_REJECTED" | "TOKENOPS_SIGNING_FAILED" | "TOKENOPS_RELAYER_UNREACHABLE" | "TOKENOPS_ENCRYPTION_FAILED" | "TOKENOPS_DECRYPTION_FAILED" | "TOKENOPS_USER_DECRYPT_NOT_ALLOWED" | "TOKENOPS_VESTING_NOT_FOUND" | "TOKENOPS_NOT_RECIPIENT" | "TOKENOPS_CLAIM_LOCKED" | "TOKENOPS_VESTING_REVOKED" | "TOKENOPS_NOT_REVOCABLE" | "TOKENOPS_VESTING_EXPIRED" | "TOKENOPS_TRANSFER_ALREADY_PENDING" | "TOKENOPS_NO_PENDING_TRANSFER" | "TOKENOPS_NOT_PENDING_RECIPIENT" | "TOKENOPS_TRANSFER_EXPIRED" | "TOKENOPS_ALREADY_CLAIMED" | "TOKENOPS_CLAIM_NOT_STARTED" | "TOKENOPS_CLAIM_WINDOW_CLOSED" | "TOKENOPS_NOT_REGISTERED" | "TOKENOPS_ALREADY_REGISTERED" | "TOKENOPS_SUBWALLETS_NOT_APPROVED" | "TOKENOPS_SINGLETON_NOT_APPROVED" | "TOKENOPS_FAUCET_SUPPLY_EXHAUSTED" | "TOKENOPS_MERKLE_UUPS_UNSUPPORTED" | "TOKENOPS_NON_STOCK_WRAPPER" | "TOKENOPS_UPGRADEABILITY_NOT_ALLOWED" | "TOKENOPS_FEE_COLLECTOR_SELF_ADMINISTERED" | "TOKENOPS_DEDUP_ID_CONSUMED" | "TOKENOPS_SIGNATURE_EXPIRED" | "TOKENOPS_SALT_COLLISION" | "TOKENOPS_PREDICTION_DRIFT" | "TOKENOPS_UNAUTHORIZED_REDIRECT";
+/** @public */
 export interface TokenOpsSdkErrorInit {
     code: TokenOpsSdkErrorCode;
     cause?: unknown;
@@ -26,6 +28,7 @@ export interface TokenOpsSdkErrorInit {
  *
  * Subclasses narrow `context` to a concrete shape and pin `code` to a single
  * literal — `if (error.code === "TOKENOPS_MISSING_ENCRYPTOR") error.context.method` typechecks.
+ * @public
  */
 export declare class TokenOpsSdkError extends Error {
     readonly name: string;
@@ -38,8 +41,10 @@ export declare class TokenOpsSdkError extends Error {
  * Brand-based predicate. Prefer over `instanceof` when bundling boundaries
  * may have caused duplicate SDK copies — `Symbol.for` is realm-global, so the
  * brand survives.
+ * @public
  */
 export declare function isTokenOpsSdkError(error: unknown): error is TokenOpsSdkError;
+/** @public */
 export declare class UnsupportedChainError extends TokenOpsSdkError {
     readonly name = "UnsupportedChainError";
     readonly context: {
@@ -49,6 +54,7 @@ export declare class UnsupportedChainError extends TokenOpsSdkError {
         cause?: unknown;
     });
 }
+/** @public */
 export type DeploymentAddressUnavailableReason = "chain-id-missing" | "registry-not-deployed" | "registry-unknown-chain";
 /**
  * Thrown when the SDK cannot resolve a deployed contract address for the
@@ -61,6 +67,7 @@ export type DeploymentAddressUnavailableReason = "chain-id-missing" | "registry-
  * to bypass the registry (defaults to `"address"`). Infra contracts whose
  * override lives under a different key — e.g. `aclAddress` on the FHE
  * clients — set this so the error message points users at the right field.
+ * @public
  */
 export declare class DeploymentAddressUnavailableError extends TokenOpsSdkError {
     readonly name = "DeploymentAddressUnavailableError";
@@ -82,6 +89,7 @@ export declare class DeploymentAddressUnavailableError extends TokenOpsSdkError
         cause?: unknown;
     });
 }
+/** @public */
 export declare class MissingPublicClientError extends TokenOpsSdkError {
     readonly name = "MissingPublicClientError";
     readonly context: {
@@ -91,6 +99,7 @@ export declare class MissingPublicClientError extends TokenOpsSdkError {
         cause?: unknown;
     });
 }
+/** @public */
 export declare class MissingWalletClientError extends TokenOpsSdkError {
     readonly name = "MissingWalletClientError";
     readonly context: {
@@ -100,6 +109,7 @@ export declare class MissingWalletClientError extends TokenOpsSdkError {
         cause?: unknown;
     });
 }
+/** @public */
 export declare class MissingAccountError extends TokenOpsSdkError {
     readonly name = "MissingAccountError";
     readonly context: {
@@ -109,6 +119,7 @@ export declare class MissingAccountError extends TokenOpsSdkError {
         cause?: unknown;
     });
 }
+/** @public */
 export declare class MissingEncryptorError extends TokenOpsSdkError {
     readonly name = "MissingEncryptorError";
     readonly context: {
@@ -125,6 +136,7 @@ export declare class MissingEncryptorError extends TokenOpsSdkError {
  * airdrop / disperse) could not be constructed — usually because the wagmi
  * `publicClient` isn't ready yet or the chain id has no resolvable address.
  * Tests gate on `enabled: !!client`, so this fires only on the mutation path.
+ * @public
  */
 export declare class MissingClientError extends TokenOpsSdkError {
     readonly name = "MissingClientError";
@@ -141,6 +153,7 @@ export declare class MissingClientError extends TokenOpsSdkError {
  * uint range, matching lengths, valid address, etc.). `context.argument`
  * names the offending parameter; `context.reason` is the short explanation
  * that's also embedded in the message.
+ * @public
  */
 export declare class InvalidArgumentError extends TokenOpsSdkError {
     readonly name = "InvalidArgumentError";
@@ -167,6 +180,7 @@ export declare class InvalidArgumentError extends TokenOpsSdkError {
  * Wraps the receipt-based handle extraction pattern described in
  * CLAUDE.md Pitfall #1: SDK methods that return an encrypted handle MUST
  * parse the receipt's ACL `Allowed` event, never `simulateContract().result`.
+ * @public
  */
 export declare class ReceiptEventNotFoundError extends TokenOpsSdkError {
     readonly name = "ReceiptEventNotFoundError";
@@ -197,6 +211,7 @@ export declare class ReceiptEventNotFoundError extends TokenOpsSdkError {
  * appear, either a compound view emitted several or two encrypted views
  * landed in the same tx. File a bug with the tx hash so the SDK can add a
  * caller-specific helper rather than picking heuristically.
+ * @public
  */
 export declare class ReceiptEventAmbiguousError extends TokenOpsSdkError {
     readonly name = "ReceiptEventAmbiguousError";
@@ -227,6 +242,7 @@ export declare class ReceiptEventAmbiguousError extends TokenOpsSdkError {
  * in the ABI, raw `revert()` with no data, etc.), all three fields stay
  * `undefined` and `context.rawRevertData` holds the original calldata. Always
  * prefer this over letting viem's `ContractFunctionExecutionError` escape.
+ * @public
  */
 export declare class ContractRevertError extends TokenOpsSdkError {
     readonly name = "ContractRevertError";
@@ -251,7 +267,11 @@ export declare class ContractRevertError extends TokenOpsSdkError {
         cause?: unknown;
     });
 }
-/** Contract is paused. Read `paused()` before retrying. */
+/**
+ * Contract is paused. Read `paused()` before retrying.
+ *
+ * @public
+ */
 export declare class PausedError extends TokenOpsSdkError {
     readonly name = "PausedError";
     readonly context: {
@@ -269,6 +289,7 @@ export declare class PausedError extends TokenOpsSdkError {
  * role selector when the SDK can decode it (`AccessControlUnauthorizedAccount`
  * carries `(account, role)`); otherwise `undefined`. Callers can map the role
  * selector back to a human name via the client's `roleConstants()` helper.
+ * @public
  */
 export declare class AccessDeniedError extends TokenOpsSdkError {
     readonly name = "AccessDeniedError";
@@ -291,6 +312,7 @@ export declare class AccessDeniedError extends TokenOpsSdkError {
  * a single exported constant so every surface that mentions the prerequisite
  * (this error, operator helpers, docs) reuses the exact same wording.
  * Do NOT reword — the string is shared verbatim with the docs repo.
+ * @public
  */
 export declare const OPERATOR_NOT_APPROVED_REMEDIATION: "The token has not approved this contract as an operator. Call `setOperator()` (see `/fhe` operators) before this transaction.";
 /**
@@ -299,11 +321,12 @@ export declare const OPERATOR_NOT_APPROVED_REMEDIATION: "The token has not appro
  * `0x79f2cb38`). Raised whenever a TokenOps contract tries to pull
  * confidential tokens from a holder that never called `setOperator()` for it
  * (vesting `createVesting`, airdrop funding, disperse pulls). Also surfaced
- * pre-write as a `blockerErrors[]` entry by the create-side preflights
- * (`preflightCreateVesting` / `preflightCreateAirdrop`).
+ * pre-write as a `blockerErrors[]` entry by `preflightCreateVesting`
+ * (`/fhe-vesting`) rather than thrown.
  *
  * Remediation: call `setOperator()` on the token (see the `/fhe` operator
  * helpers) with the product contract as operator, then retry.
+ * @public
  */
 export declare class OperatorNotApprovedError extends TokenOpsSdkError {
     readonly name = "OperatorNotApprovedError";
@@ -333,6 +356,7 @@ export declare class OperatorNotApprovedError extends TokenOpsSdkError {
  *
  * The SDK does not echo plaintext FHE values — `provided` and `required` are
  * populated only for the `gas` case where both sides are public.
+ * @public
  */
 export declare class InsufficientFeeError extends TokenOpsSdkError {
     readonly name = "InsufficientFeeError";
@@ -357,6 +381,7 @@ export declare class InsufficientFeeError extends TokenOpsSdkError {
  * asset class. For confidential balances the underlying value is encrypted, so
  * `requested` / `available` stay `undefined` — the SDK never echoes plaintext
  * FHE values into `context`.
+ * @public
  */
 export declare class InsufficientBalanceError extends TokenOpsSdkError {
     readonly name = "InsufficientBalanceError";
@@ -382,6 +407,7 @@ export declare class InsufficientBalanceError extends TokenOpsSdkError {
  * Note: `context.max` is `bigint` (the contract returns `uint256` for batch
  * limits, even though realistic values fit comfortably in `Number`). Call
  * `Number(error.context.max)` or `.toString()` before string-interpolating.
+ * @public
  */
 export declare class BatchTooLargeError extends TokenOpsSdkError {
     readonly name = "BatchTooLargeError";
@@ -404,6 +430,7 @@ export declare class BatchTooLargeError extends TokenOpsSdkError {
  * A feature toggle baked into the contract clone is off. For LibClone
  * deployments these toggles are immutable (set at clone time) — the user
  * cannot enable them after the fact and must deploy a new clone.
+ * @public
  */
 export declare class FeatureDisabledError extends TokenOpsSdkError {
     readonly name = "FeatureDisabledError";
@@ -423,6 +450,7 @@ export declare class FeatureDisabledError extends TokenOpsSdkError {
  * Native ETH or ERC-20 transfer failed at the contract layer (e.g. recipient
  * is a contract that rejects `receive()`, or the underlying ERC-20 returned
  * false from `transfer`).
+ * @public
  */
 export declare class TransferFailedError extends TokenOpsSdkError {
     readonly name = "TransferFailedError";
@@ -455,6 +483,7 @@ export declare class TransferFailedError extends TokenOpsSdkError {
  * `context.handle` is the offending handle (the public 32-byte ciphertext
  * identifier), when extractable from the revert args. The SDK never decodes
  * the underlying plaintext.
+ * @public
  */
 export declare class FheHandleNotAllowedError extends TokenOpsSdkError {
     readonly name = "FheHandleNotAllowedError";
@@ -472,7 +501,11 @@ export declare class FheHandleNotAllowedError extends TokenOpsSdkError {
         cause?: unknown;
     });
 }
-/** Contract has already been initialized — `initialize()` may only run once. */
+/**
+ * Contract has already been initialized — `initialize()` may only run once.
+ *
+ * @public
+ */
 export declare class AlreadyInitializedError extends TokenOpsSdkError {
     readonly name = "AlreadyInitializedError";
     readonly context: {
@@ -485,7 +518,11 @@ export declare class AlreadyInitializedError extends TokenOpsSdkError {
         cause?: unknown;
     });
 }
-/** OpenZeppelin ReentrancyGuardTransient blocked a nested call. */
+/**
+ * OpenZeppelin ReentrancyGuardTransient blocked a nested call.
+ *
+ * @public
+ */
 export declare class ReentrancyError extends TokenOpsSdkError {
     readonly name = "ReentrancyError";
     readonly context: {
@@ -500,8 +537,10 @@ export declare class ReentrancyError extends TokenOpsSdkError {
 }
 /**
  * EIP-712 signature was malformed or did not recover to an authorized signer.
- * Used by airdrop claims where the admin signs a `Claim(recipient, encryptedAmount)`
+ * Used by ECDSA airdrop claims, where a `SIGNER_ROLE` holder signs a
+ * `Claim(address recipient,bytes32 encryptedAmount,bytes32 dedupId,uint256 deadline)`
  * struct off-chain.
+ * @public
  */
 export declare class InvalidSignatureError extends TokenOpsSdkError {
     readonly name = "InvalidSignatureError";
@@ -519,6 +558,7 @@ export declare class InvalidSignatureError extends TokenOpsSdkError {
  * Wallet UI cancelled the request — e.g. the user clicked "Reject" on the
  * transaction prompt, or the wallet bridge returned EIP-1193 code 4001.
  * Retrying is safe; the underlying tx never reached the network.
+ * @public
  */
 export declare class WalletRejectedError extends TokenOpsSdkError {
     readonly name = "WalletRejectedError";
@@ -535,6 +575,7 @@ export declare class WalletRejectedError extends TokenOpsSdkError {
 /**
  * The connected wallet is on a different chain than the contract we tried to
  * call. The user must switch networks before retrying.
+ * @public
  */
 export declare class WalletChainMismatchError extends TokenOpsSdkError {
     readonly name = "WalletChainMismatchError";
@@ -552,6 +593,7 @@ export declare class WalletChainMismatchError extends TokenOpsSdkError {
  * Network-level failure reaching the RPC endpoint (HTTP non-2xx, timeout,
  * DNS, socket close). `statusCode` is set when the underlying viem
  * `HttpRequestError` exposed an HTTP status. No on-chain state changed.
+ * @public
  */
 export declare class NetworkError extends TokenOpsSdkError {
     readonly name = "NetworkError";
@@ -571,6 +613,7 @@ export declare class NetworkError extends TokenOpsSdkError {
  * Wallet account does not hold enough native balance to cover the
  * transaction's gas estimate. Distinct from {@link InsufficientFeeError},
  * which fires when the contract itself enforces a fee.
+ * @public
  */
 export declare class InsufficientGasFundsError extends TokenOpsSdkError {
     readonly name = "InsufficientGasFundsError";
@@ -588,6 +631,7 @@ export declare class InsufficientGasFundsError extends TokenOpsSdkError {
  * Fallback for write failures the SDK could not classify against either an
  * on-chain revert frame or a known viem non-revert error class. Inspect
  * `error.cause` for diagnostics; this is the case to file a bug for.
+ * @public
  */
 export declare class UnknownWriteFailureError extends TokenOpsSdkError {
     readonly name = "UnknownWriteFailureError";
@@ -601,7 +645,11 @@ export declare class UnknownWriteFailureError extends TokenOpsSdkError {
         cause?: unknown;
     });
 }
-/** User cancelled the wallet signature prompt. */
+/**
+ * User cancelled the wallet signature prompt.
+ *
+ * @public
+ */
 export declare class UserRejectedSignatureError extends TokenOpsSdkError {
     readonly name = "UserRejectedSignatureError";
     readonly context: {
@@ -617,6 +665,7 @@ export declare class UserRejectedSignatureError extends TokenOpsSdkError {
 /**
  * Wallet signature failed for a reason other than the user explicitly
  * rejecting it (timeout, wallet crash, malformed request, etc.).
+ * @public
  */
 export declare class SigningFailedError extends TokenOpsSdkError {
     readonly name = "SigningFailedError";
@@ -633,6 +682,7 @@ export declare class SigningFailedError extends TokenOpsSdkError {
 /**
  * Network call to the Zama relayer failed (HTTP non-2xx, timeout, DNS, etc.).
  * `statusCode` is set when the underlying error exposed it.
+ * @public
  */
 export declare class RelayerUnreachableError extends TokenOpsSdkError {
     readonly name = "RelayerUnreachableError";
@@ -648,7 +698,11 @@ export declare class RelayerUnreachableError extends TokenOpsSdkError {
         cause?: unknown;
     });
 }
-/** Encryption flow (input proof generation) failed. */
+/**
+ * Encryption flow (input proof generation) failed.
+ *
+ * @public
+ */
 export declare class EncryptionFailedError extends TokenOpsSdkError {
     readonly name = "EncryptionFailedError";
     readonly context: {
@@ -661,7 +715,11 @@ export declare class EncryptionFailedError extends TokenOpsSdkError {
         cause?: unknown;
     });
 }
-/** Decryption flow (user-decrypt, public-decrypt) failed. */
+/**
+ * Decryption flow (user-decrypt, public-decrypt) failed.
+ *
+ * @public
+ */
 export declare class DecryptionFailedError extends TokenOpsSdkError {
     readonly name = "DecryptionFailedError";
     readonly context: {
@@ -688,6 +746,7 @@ export declare class DecryptionFailedError extends TokenOpsSdkError {
  * - `FheHandleNotAllowedError` fires when a contract entrypoint calls
  *   `FHE.isSenderAllowed(handle)` on-chain and reverts. The tx made it to
  *   the EVM but the contract refused.
+ * @public
  */
 export declare class UserDecryptNotAllowedError extends TokenOpsSdkError {
     readonly name = "UserDecryptNotAllowedError";
@@ -709,6 +768,7 @@ export declare class UserDecryptNotAllowedError extends TokenOpsSdkError {
  * `context` object so call sites can attach whatever per-throw metadata they
  * need; consumers branch on `error.code === "TOKENOPS_INVALID_ARGUMENT"` (the
  * same code `InvalidArgumentError` uses).
+ * @public
  */
 export declare class TokenOpsValidationError extends TokenOpsSdkError {
     readonly name = "TokenOpsValidationError";
@@ -719,6 +779,7 @@ export declare class TokenOpsValidationError extends TokenOpsSdkError {
  * `writeContract` + receipt-wait (e.g. `setOperator`, `mintMockERC7984`)
  * outside the typed revert-mapper path. Accepts a free-form `context` object;
  * consumers branch on `error.code === "TOKENOPS_CONTRACT_REVERT"`.
+ * @public
  */
 export declare class TokenOpsContractError extends TokenOpsSdkError {
     readonly name = "TokenOpsContractError";

package/dist/core/preflight.d.ts

@@ -12,6 +12,7 @@ import type { TokenOpsSdkError } from "./errors.js";
  *
  * Preflight is opt-in. Consumers who have already validated state can skip the
  * preflight and call the write directly.
+ * @public
  */
 export interface PreflightResult {
     /** `true` when no blockers were detected — green light to submit the write. */

package/dist/fhe/erc7984-abi.d.ts

@@ -1,3 +1,4 @@
+/** @public */
 export declare const erc7984OperatorAbi: readonly [{
     readonly inputs: readonly [{
         readonly internalType: "address";