@tokenops/sdk 1.6.0 → 2.0.0-alpha.2

package/dist/chunk-GADGBQJO.js

@@ -0,0 +1,423 @@
+import { resolveEncryptor, encryptUint64Batch, encryptUint64 } from './chunk-X7WBPCEU.js';
+import { assertPredictionFresh, FeeCollectorSelfAdministeredError } from './chunk-VW356KR3.js';
+import { normaliseAddress } from './chunk-ZA673I3O.js';
+import { InvalidArgumentError, MissingWalletClientError, MissingAccountError, ContractRevertError, MissingEncryptorError, isTokenOpsSdkError, UnknownWriteFailureError } from './chunk-QBJ7O2B4.js';
+import { StandardMerkleTree } from '@openzeppelin/merkle-tree';
+import { keccak256, encodeAbiParameters, isAddress, isAddressEqual, zeroAddress } from 'viem';
+
+function leafOf(args) {
+  const inner = keccak256(
+    encodeAbiParameters(
+      [{ type: "address" }, { type: "address" }, { type: "bytes32" }],
+      [args.instance, args.account, args.handle]
+    )
+  );
+  return keccak256(inner);
+}
+var HANDLE_PATTERN = /^0x[0-9a-fA-F]{64}$/;
+function assertLeaves(instance, leaves, method) {
+  if (!isAddress(instance, { strict: false })) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "instance",
+      reason: "is not a 20-byte hex address",
+      value: instance
+    });
+  }
+  if (isAddressEqual(instance, zeroAddress)) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "instance",
+      reason: "is the zero address; leaves must be scoped to the airdrop instance"
+    });
+  }
+  if (leaves.length === 0) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "leaves",
+      reason: "a tree needs at least one leaf"
+    });
+  }
+  const seen = /* @__PURE__ */ new Map();
+  leaves.forEach((leaf, index) => {
+    if (!isAddress(leaf.account, { strict: false })) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `leaves[${index}].account`,
+        reason: "is not a 20-byte hex address",
+        value: leaf.account
+      });
+    }
+    if (isAddressEqual(leaf.account, zeroAddress)) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `leaves[${index}].account`,
+        reason: "is the zero address; the contract rejects it with ZeroAccount"
+      });
+    }
+    if (!HANDLE_PATTERN.test(leaf.handle)) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `leaves[${index}].handle`,
+        reason: "is not a 32-byte hex handle; the tree would commit to a value no claim can reproduce",
+        value: leaf.handle
+      });
+    }
+    const key = leaf.account.toLowerCase();
+    const first = seen.get(key);
+    if (first !== void 0) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `leaves[${index}].account`,
+        reason: `appears twice (also at index ${first}); one root pays max, not sum, of an account's leaves \u2014 merge them into a single cumulative total`
+      });
+    }
+    seen.set(key, index);
+  });
+}
+function buildMerkleTree(args) {
+  return buildMerkleTreeInternal(args, "buildMerkleTree");
+}
+function buildMerkleTreeInternal({ instance, leaves }, method) {
+  assertLeaves(instance, leaves, method);
+  const airdrop = normaliseAddress(instance);
+  const accounts = leaves.map((leaf) => normaliseAddress(leaf.account));
+  const rows = accounts.map((account, i) => [airdrop, account, leaves[i].handle]);
+  const tree = StandardMerkleTree.of(rows, ["address", "address", "bytes32"]);
+  return {
+    root: tree.root,
+    // `getProof(i)` indexes the INPUT array, not the tree: `StandardMerkleTree` sorts
+    // leaves internally but keeps `values` in insertion order, so entry `i` always belongs
+    // to `leaves[i]`.
+    entries: leaves.map((leaf, i) => ({
+      ...leaf,
+      account: accounts[i],
+      merkleProof: tree.getProof(i)
+    }))
+  };
+}
+var MAX_UINT64 = (1n << 64n) - 1n;
+var MERKLE_BATCH_LIMIT = 2048 / 64;
+function validateCampaignRecipients(recipients) {
+  validateCampaignRecipientsInternal(recipients, "validateCampaignRecipients");
+}
+function validateCampaignRecipientsInternal(recipients, method) {
+  if (recipients.length === 0) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "recipients",
+      reason: "a campaign needs at least one recipient"
+    });
+  }
+  const seen = /* @__PURE__ */ new Map();
+  recipients.forEach((entry, index) => {
+    if (!isAddress(entry.recipient, { strict: false })) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `recipients[${index}].recipient`,
+        reason: "is not a 20-byte hex address",
+        value: entry.recipient
+      });
+    }
+    if (isAddressEqual(entry.recipient, zeroAddress)) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `recipients[${index}].recipient`,
+        reason: "is the zero address, whose leaf can never be claimed"
+      });
+    }
+    if (entry.cumulativeTotal < 0n || entry.cumulativeTotal > MAX_UINT64) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `recipients[${index}].cumulativeTotal`,
+        // Deliberately no `value`: the total is confidential.
+        reason: "is outside uint64 range (0..2^64-1)"
+      });
+    }
+    const key = entry.recipient.toLowerCase();
+    const first = seen.get(key);
+    if (first !== void 0) {
+      throw new InvalidArgumentError({
+        method,
+        argument: `recipients[${index}].recipient`,
+        reason: `appears twice (also at index ${first}); one root pays max, not sum, of a recipient's leaves \u2014 merge them into a single cumulative total`
+      });
+    }
+    seen.set(key, index);
+  });
+}
+async function encryptRoster({ instance, recipients, encryptor, submitter }, method) {
+  validateCampaignRecipientsInternal(recipients, method);
+  if (!isAddress(instance, { strict: false })) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "instance",
+      reason: "is not a 20-byte hex address",
+      value: instance
+    });
+  }
+  if (isAddressEqual(instance, zeroAddress)) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "instance",
+      reason: "is the zero address; inputs must be bound to the airdrop instance"
+    });
+  }
+  const enc = resolveEncryptor(encryptor);
+  if (!enc) {
+    throw new MissingEncryptorError(method, {
+      hint: "Pass an encryptor instance, or a lazy factory that returns one."
+    });
+  }
+  if (submitter !== void 0) {
+    if (!isAddress(submitter, { strict: false })) {
+      throw new InvalidArgumentError({
+        method,
+        argument: "submitter",
+        reason: "is not a 20-byte hex address",
+        value: submitter
+      });
+    }
+    if (isAddressEqual(submitter, zeroAddress)) {
+      throw new InvalidArgumentError({
+        method,
+        argument: "submitter",
+        reason: "is the zero address; no proof can be bound to it, so no leaf would be claimable"
+      });
+    }
+  }
+  const airdrop = normaliseAddress(instance);
+  const accounts = recipients.map((r) => normaliseAddress(r.recipient));
+  if (submitter !== void 0) {
+    const boundTo = normaliseAddress(submitter);
+    const chunks = [];
+    for (let i = 0; i < recipients.length; i += MERKLE_BATCH_LIMIT) {
+      chunks.push(recipients.slice(i, i + MERKLE_BATCH_LIMIT));
+    }
+    const encryptedChunks = await Promise.all(
+      chunks.map(
+        (chunk) => encryptUint64Batch({
+          encryptor: enc,
+          contractAddress: airdrop,
+          userAddress: boundTo,
+          values: chunk.map((r) => r.cumulativeTotal)
+        })
+      )
+    );
+    return accounts.map((account, i) => {
+      const chunk = encryptedChunks[Math.floor(i / MERKLE_BATCH_LIMIT)];
+      return {
+        account,
+        boundTo,
+        handle: chunk.handles[i % MERKLE_BATCH_LIMIT],
+        inputProof: chunk.inputProof
+      };
+    });
+  }
+  const encrypted = await Promise.all(
+    recipients.map(
+      (r, i) => encryptUint64({
+        encryptor: enc,
+        contractAddress: airdrop,
+        userAddress: accounts[i],
+        value: r.cumulativeTotal
+      })
+    )
+  );
+  return accounts.map((account, i) => ({
+    account,
+    boundTo: account,
+    handle: encrypted[i].handle,
+    inputProof: encrypted[i].inputProof
+  }));
+}
+async function encryptCampaignAmounts(args) {
+  return encryptRoster(args, "encryptCampaignAmounts");
+}
+async function buildMerkleCampaign({
+  instance,
+  recipients,
+  encryptor,
+  submitter
+}) {
+  const leaves = await encryptRoster(
+    { instance, recipients, encryptor, submitter },
+    "buildMerkleCampaign"
+  );
+  return buildMerkleTreeInternal({ instance, leaves }, "buildMerkleCampaign");
+}
+async function planMerkleCampaign({
+  factory,
+  params,
+  mode,
+  creator,
+  userSalt,
+  recipients,
+  encryptor,
+  submitter
+}) {
+  validateCampaignRecipientsInternal(recipients, "planMerkleCampaign");
+  const initCodeHashBefore = await factory.getMerkleInitCodeHash({ params, mode });
+  const predictedAddress = await factory.predictMerkleAirdropAddress({
+    params,
+    mode,
+    deployer: creator,
+    userSalt
+  });
+  const campaign = await buildMerkleCampaign({
+    instance: predictedAddress,
+    recipients,
+    encryptor,
+    submitter
+  });
+  const initCodeHashAfter = await factory.getMerkleInitCodeHash({ params, mode });
+  assertPredictionFresh({
+    variant: "merkle",
+    initCodeHashBefore,
+    initCodeHashAfter,
+    predictedAddress,
+    method: "planMerkleCampaign"
+  });
+  return { ...campaign, predictedAddress, initCodeHashBefore, initCodeHashAfter };
+}
+async function rotateMerkleRoot({
+  airdrop,
+  recipients,
+  encryptor,
+  submitter,
+  account
+}) {
+  const campaign = await buildMerkleCampaign({
+    instance: airdrop.address,
+    recipients,
+    encryptor,
+    submitter
+  });
+  const hash = await airdrop.setMerkleRoot({ newRoot: campaign.root, account });
+  return { ...campaign, hash };
+}
+var ASSIGNABLE_ROLES = [
+  { key: "pauser", role: "PAUSER_ROLE" },
+  { key: "windowAdmin", role: "WINDOW_ADMIN_ROLE" },
+  { key: "treasury", role: "TREASURY_ROLE" },
+  { key: "rescuer", role: "RESCUER_ROLE" },
+  { key: "disclosureAdmin", role: "DISCLOSURE_ADMIN_ROLE" },
+  { key: "upgrader", role: "UPGRADER_ROLE" },
+  { key: "merkleAdmin", role: "MERKLE_ADMIN_ROLE", variant: "merkle" },
+  { key: "signer", role: "SIGNER_ROLE", variant: "ecdsa" }
+];
+function planInstanceRoleSplit(args) {
+  const { assignment, caller, airdropType } = args;
+  if (assignment.feeCollector !== void 0) {
+    throw new FeeCollectorSelfAdministeredError({ requestedGrantee: assignment.feeCollector });
+  }
+  const steps = [];
+  for (const { key, role, variant } of ASSIGNABLE_ROLES) {
+    const account = assignment[key];
+    if (account === void 0) continue;
+    if (variant !== void 0 && variant !== airdropType) {
+      throw new InvalidArgumentError({
+        method: "planInstanceRoleSplit",
+        argument: `assignment.${key}`,
+        reason: `${role} only exists on ${variant} campaigns; this is a(n) ${airdropType} campaign`
+      });
+    }
+    steps.push({ kind: "grant", role, account });
+  }
+  if (assignment.admin !== void 0) {
+    if (isAddressEqual(assignment.admin, zeroAddress)) {
+      throw new InvalidArgumentError({
+        method: "planInstanceRoleSplit",
+        argument: "assignment.admin",
+        reason: "granting DEFAULT_ADMIN_ROLE to the zero address is never valid"
+      });
+    }
+    steps.push({ kind: "grant", role: "DEFAULT_ADMIN_ROLE", account: assignment.admin });
+    steps.push({ kind: "revoke", role: "DEFAULT_ADMIN_ROLE", account: caller });
+  }
+  return steps;
+}
+function roleGetterAbiEntry(name) {
+  return {
+    inputs: [],
+    name,
+    outputs: [{ internalType: "bytes32", name: "", type: "bytes32" }],
+    stateMutability: "view",
+    type: "function"
+  };
+}
+var ROLE_GETTER_ABI = [
+  roleGetterAbiEntry("PAUSER_ROLE"),
+  roleGetterAbiEntry("WINDOW_ADMIN_ROLE"),
+  roleGetterAbiEntry("TREASURY_ROLE"),
+  roleGetterAbiEntry("RESCUER_ROLE"),
+  roleGetterAbiEntry("DISCLOSURE_ADMIN_ROLE"),
+  roleGetterAbiEntry("UPGRADER_ROLE"),
+  roleGetterAbiEntry("MERKLE_ADMIN_ROLE"),
+  roleGetterAbiEntry("SIGNER_ROLE")
+];
+var DEFAULT_ADMIN_ROLE_CONSTANT = `0x${"0".repeat(64)}`;
+async function resolveRoleConstant(airdrop, role) {
+  if (role === "DEFAULT_ADMIN_ROLE") return DEFAULT_ADMIN_ROLE_CONSTANT;
+  const result = await airdrop.publicClient.readContract({
+    address: airdrop.address,
+    abi: ROLE_GETTER_ABI,
+    functionName: role
+  });
+  return result;
+}
+function toOutcomeError(step, airdrop, error) {
+  if (isTokenOpsSdkError(error)) return error;
+  return new UnknownWriteFailureError({
+    method: `grantInstanceRoles.${step.kind}.${step.role}`,
+    contractAddress: airdrop.address,
+    cause: error
+  });
+}
+async function grantInstanceRoles(args) {
+  const { airdrop, assignment, revokeFromCreator = true } = args;
+  const wallet = airdrop.walletClient;
+  if (!wallet) {
+    throw new MissingWalletClientError("grantInstanceRoles");
+  }
+  const callerAccount = wallet.account;
+  if (!callerAccount) {
+    throw new MissingAccountError("grantInstanceRoles");
+  }
+  const caller = typeof callerAccount === "string" ? callerAccount : callerAccount.address;
+  const airdropType = await airdrop.airdropType() === 1 ? "merkle" : "ecdsa";
+  let steps = planInstanceRoleSplit({ assignment, caller, airdropType });
+  if (!revokeFromCreator) {
+    steps = steps.filter((step) => !(step.kind === "revoke" && step.role === "DEFAULT_ADMIN_ROLE"));
+  }
+  const outcomes = [];
+  for (const step of steps) {
+    try {
+      const role = await resolveRoleConstant(airdrop, step.role);
+      const hash = step.kind === "grant" ? await airdrop.grantRole({ role, holder: step.account, account: caller }) : await airdrop.revokeRole({ role, holder: step.account, account: caller });
+      const receipt = await airdrop.publicClient.waitForTransactionReceipt({ hash });
+      if (receipt.status !== "success") {
+        outcomes.push({
+          role: step.role,
+          account: step.account,
+          error: new ContractRevertError({
+            method: `grantInstanceRoles.${step.kind}.${step.role}`,
+            contractAddress: airdrop.address,
+            message: `grantInstanceRoles.${step.kind}.${step.role}: transaction ${hash} was mined with a reverted status; the role change did not apply.`
+          })
+        });
+        continue;
+      }
+      outcomes.push({ role: step.role, account: step.account, hash });
+    } catch (error) {
+      outcomes.push({
+        role: step.role,
+        account: step.account,
+        error: toOutcomeError(step, airdrop, error)
+      });
+    }
+  }
+  return outcomes;
+}
+
+export { buildMerkleCampaign, buildMerkleTree, encryptCampaignAmounts, grantInstanceRoles, leafOf, planInstanceRoleSplit, planMerkleCampaign, rotateMerkleRoot, validateCampaignRecipients };

package/dist/{chunk-VHSNYUYV.js → chunk-IGO5XSPS.js}

@@ -1,8 +1,8 @@
-import { createConfidentialVestingManagerClient } from './chunk-TN65XNTI.js';
-import { resolveEncryptor } from './chunk-PD7ME2BT.js';
-import { createConfidentialVestingFactoryClient } from './chunk-V5D7BHW3.js';
-import { getFheVestingFactoryAddress } from './chunk-QKKBBH7I.js';
-import { DeploymentAddressUnavailableError } from './chunk-DRSPMIZ7.js';
+import { createConfidentialVestingManagerClient } from './chunk-TWT3STIX.js';
+import { resolveEncryptor } from './chunk-6GNR22OV.js';
+import { createConfidentialVestingFactoryClient } from './chunk-WJMEBBU7.js';
+import { getFheVestingFactoryAddress } from './chunk-A4DCEE33.js';
+import { DeploymentAddressUnavailableError } from './chunk-QBJ7O2B4.js';
 import { useMemo, useRef, useEffect } from 'react';
 import { usePublicClient, useWalletClient } from 'wagmi';