@tokenops/sdk 2.0.0-alpha.1 → 2.0.0-alpha.2

package/dist/{chunk-74QFZ5MK.js → chunk-SPLNGUFF.js}

@@ -1,6 +1,6 @@
 import { SDK_VERSION } from './chunk-NWFMBLSQ.js';
 import { isContractRevert, mapContractRevert } from './chunk-4RAAATVY.js';
-import { getConfidentialTestTokenAddress, getTestTokenAddress } from './chunk-DZHYSUGY.js';
+import { getConfidentialTestTokenAddress, getTestTokenAddress } from './chunk-A4DCEE33.js';
 import { normaliseAddress } from './chunk-ZA673I3O.js';
 import { asEncryptedHandle, asTxHash } from './chunk-KWFFIJYX.js';
 import { TokenOpsSdkError, UnsupportedChainError, DeploymentAddressUnavailableError, TokenOpsContractError, ReceiptEventNotFoundError, ReceiptEventAmbiguousError, MissingWalletClientError, MissingAccountError, InvalidArgumentError } from './chunk-QBJ7O2B4.js';

package/dist/{chunk-6PXXGACR.cjs → chunk-UHHMVBLU.cjs}

@@ -2,7 +2,7 @@
 
 var chunkUG5RKLU2_cjs = require('./chunk-UG5RKLU2.cjs');
 var chunkMVDQMV25_cjs = require('./chunk-MVDQMV25.cjs');
-var chunk5576FRT3_cjs = require('./chunk-5576FRT3.cjs');
+var chunkFT5H2Q7Y_cjs = require('./chunk-FT5H2Q7Y.cjs');
 var chunkJK4XMMKM_cjs = require('./chunk-JK4XMMKM.cjs');
 var chunk66IHPTOK_cjs = require('./chunk-66IHPTOK.cjs');
 var chunk67OV5CX2_cjs = require('./chunk-67OV5CX2.cjs');
@@ -446,7 +446,7 @@ var ConfidentialVestingFactoryClient = class {
     this.walletClient = config.walletClient;
     const chainId = config.chainId ?? config.publicClient.chain?.id;
     const addressOverride = config.address ? chunkJK4XMMKM_cjs.normaliseAddress(config.address) : void 0;
-    const resolved = addressOverride ?? (chainId === void 0 ? void 0 : chunk5576FRT3_cjs.getFheVestingFactoryAddress(chainId));
+    const resolved = addressOverride ?? (chainId === void 0 ? void 0 : chunkFT5H2Q7Y_cjs.getFheVestingFactoryAddress(chainId));
     if (!resolved) {
       throw new chunk67OV5CX2_cjs.DeploymentAddressUnavailableError({
         reason: chainId === void 0 ? "chain-id-missing" : "registry-not-deployed",

package/dist/{chunk-O5676ZWY.js → chunk-VW356KR3.js}

@@ -1,9 +1,9 @@
 import { isContractRevert } from './chunk-4RAAATVY.js';
 import { TokenOpsSdkError, InvalidArgumentError, FeatureDisabledError, UnsupportedChainError, FheHandleNotAllowedError, TransferFailedError, InsufficientBalanceError, InsufficientFeeError, PausedError, InvalidSignatureError, isTokenOpsSdkError } from './chunk-QBJ7O2B4.js';
-import { isAddressEqual, zeroAddress, BaseError, ContractFunctionZeroDataError } from 'viem';
+import { isAddressEqual, zeroAddress, isAddress, BaseError, ContractFunctionZeroDataError } from 'viem';
 
 // src/fhe-airdrop/constants.ts
-var AIRDROP_CONTRACTS_COMMIT = "8e5b144bdbcdf35b9f36b62f5257d795bf954e8e";
+var AIRDROP_CONTRACTS_COMMIT = "7175ac82f467f0f88c05aba1a4536892999b4251";
 var DEPLOYMENT_MODE = { clone: 0, uups: 1 };
 var DEDUP_MODE = { perAddress: 0, perDedupId: 1, both: 2, none: 3 };
 
@@ -35,6 +35,25 @@ var NonStockWrapperError = class extends TokenOpsSdkError {
     );
   }
 };
+var UnauthorizedRedirectError = class extends TokenOpsSdkError {
+  name = "UnauthorizedRedirectError";
+  constructor(args) {
+    const who = args?.submitter ? ` (submitter: ${args.submitter})` : "";
+    super(
+      `Only the claim identity may redirect its own payout${who}: \`to\` (${args?.to ?? "unknown"}) differs from \`account\` (${args?.account ?? "unknown"}) and the submitter is not that account. Leave \`to\` unset (or equal to \`account\`) when submitting on someone else's behalf.`,
+      {
+        code: "TOKENOPS_UNAUTHORIZED_REDIRECT",
+        cause: args?.cause,
+        context: {
+          constraint: "merkle-third-party-redirect",
+          account: args?.account,
+          to: args?.to,
+          submitter: args?.submitter
+        }
+      }
+    );
+  }
+};
 var SaltCollisionError = class extends TokenOpsSdkError {
   name = "SaltCollisionError";
   constructor(args) {
@@ -239,6 +258,22 @@ var airdropProductMapper = (name, errArgs, ctx) => {
       });
     case "RootImmutable":
       return new FeatureDisabledError({ ...ctx, feature: "merkleRootRotation" });
+    case "ZeroAccount":
+      return invalidArg(
+        ctx,
+        "account",
+        name,
+        "the claim identity is mandatory and is never defaulted from the caller"
+      );
+    case "UnauthorizedRedirect": {
+      const account = errArgs?.[0];
+      const to = errArgs?.[1];
+      return new UnauthorizedRedirectError({
+        account,
+        to,
+        submitter: ctx.productContext?.["creator"]
+      });
+    }
     // ---- FHEVM chain config ---------------------------------------------
     case "ZamaProtocolUnsupported": {
       const chainId = ctx.productContext?.["chainId"] ?? 0;
@@ -513,18 +548,86 @@ async function preflightCreate(args) {
   }
   return { ready: blockers.length === 0, blockers };
 }
+function assertMerkleClaimIdentity(args) {
+  const { method, account, submitter, boundTo, to, entrypoint = "claim" } = args;
+  for (const [argument, value] of [
+    ["account", account],
+    ["entry.boundTo", boundTo],
+    ["to", to],
+    ["submitter", submitter]
+  ]) {
+    if (value !== void 0 && !isAddress(value, { strict: false })) {
+      throw new InvalidArgumentError({
+        method,
+        argument,
+        reason: "is not a 20-byte hex address",
+        value
+      });
+    }
+  }
+  if (isAddressEqual(account, zeroAddress)) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "account",
+      reason: "is the zero address; the claim identity is mandatory and is never defaulted from the caller"
+    });
+  }
+  if (boundTo !== void 0 && !isAddressEqual(boundTo, submitter)) {
+    throw new InvalidArgumentError({
+      method,
+      argument: "entry.boundTo",
+      reason: `is ${boundTo}, but this transaction is sent from ${submitter}; the FHE input proof is bound to the sender, so only ${boundTo} can submit this entry`
+    });
+  }
+  if (entrypoint === "claimAndUnwrap") {
+    if (!isAddressEqual(account, submitter)) {
+      throw new InvalidArgumentError({
+        method,
+        argument: "entry.account",
+        reason: `is ${account}, but \`claimAndUnwrap\` is always submitted for the caller (${submitter}); use \`claim\` to settle on someone else's behalf`
+      });
+    }
+    return;
+  }
+  const beneficiary = to === void 0 || isAddressEqual(to, zeroAddress) ? account : to;
+  if (!isAddressEqual(beneficiary, account) && !isAddressEqual(submitter, account)) {
+    throw new UnauthorizedRedirectError({ account, to: beneficiary, submitter });
+  }
+}
 async function preflightClaim(args) {
   const { airdrop, claimant } = args;
   const method = "preflightClaim";
   const blockers = [];
   collect(blockers, () => assertSupportedChain(airdrop.chainId));
-  const [started, ended, paused, fee, balance] = await Promise.all([
+  if (args.account !== void 0 || args.entrypoint !== void 0) {
+    collect(
+      blockers,
+      () => assertMerkleClaimIdentity({
+        method,
+        account: args.account ?? claimant,
+        submitter: claimant,
+        to: args.to,
+        entrypoint: args.entrypoint
+      })
+    );
+  }
+  const [started, ended, paused, fee, balance, unwrappable] = await Promise.all([
     airdrop.hasClaimStarted(),
     airdrop.hasClaimEnded(),
     airdrop.paused(),
     airdrop.gasFee(),
-    airdrop.publicClient.getBalance({ address: claimant })
+    airdrop.publicClient.getBalance({ address: claimant }),
+    args.entrypoint === "claimAndUnwrap" && airdrop.unwrappable ? airdrop.unwrappable() : Promise.resolve(true)
   ]);
+  if (!unwrappable) {
+    blockers.push(
+      new FeatureDisabledError({
+        method,
+        contractAddress: airdrop.address,
+        feature: "claimAndUnwrap"
+      })
+    );
+  }
   if (paused) {
     blockers.push(new PausedError({ method, contractAddress: airdrop.address }));
   }
@@ -582,4 +685,4 @@ async function collectAsync(blockers, run) {
   }
 }
 
-export { AIRDROP_CONTRACTS_COMMIT, AlreadyClaimedError, ClaimNotStartedError, ClaimWindowClosedError, DEDUP_MODE, DEPLOYMENT_MODE, DedupIdConsumedError, FeeCollectorSelfAdministeredError, MerkleUupsUnsupportedError, NonStockWrapperError, PredictionDriftError, SaltCollisionError, SignatureExpiredError, UpgradeabilityNotAllowedError, airdropProductMapper, assertMerkleModeSupported, assertPredictionFresh, assertSaltAvailable, assertStockWrapper, assertSupportedChain, preflightClaim, preflightCreate };
+export { AIRDROP_CONTRACTS_COMMIT, AlreadyClaimedError, ClaimNotStartedError, ClaimWindowClosedError, DEDUP_MODE, DEPLOYMENT_MODE, DedupIdConsumedError, FeeCollectorSelfAdministeredError, MerkleUupsUnsupportedError, NonStockWrapperError, PredictionDriftError, SaltCollisionError, SignatureExpiredError, UnauthorizedRedirectError, UpgradeabilityNotAllowedError, airdropProductMapper, assertMerkleClaimIdentity, assertMerkleModeSupported, assertPredictionFresh, assertSaltAvailable, assertStockWrapper, assertSupportedChain, preflightClaim, preflightCreate };

package/dist/{chunk-EAJ7SYHE.js → chunk-WJMEBBU7.js}

@@ -1,6 +1,6 @@
 import { SDK_VERSION } from './chunk-NWFMBLSQ.js';
 import { mapContractRevert, isContractRevert } from './chunk-4RAAATVY.js';
-import { getFheVestingFactoryAddress } from './chunk-DZHYSUGY.js';
+import { getFheVestingFactoryAddress } from './chunk-A4DCEE33.js';
 import { normaliseAddress } from './chunk-ZA673I3O.js';
 import { asTxHash } from './chunk-KWFFIJYX.js';
 import { DeploymentAddressUnavailableError, TokenOpsSdkError, MissingWalletClientError, MissingAccountError } from './chunk-QBJ7O2B4.js';