@trustware/sdk-staging 1.1.10-staging.0 → 1.1.11-staging.2

package/dist/{manager-B6NNV-E_.d.ts → manager-Bw8b1wSD.d.ts}

@@ -197,6 +197,13 @@ type BuildRouteBody = {
         postHook?: PostHookRequest;
     };
 };
+/**
+ * Validates a `BuildRouteBody.hooks` value before it's sent, so a malformed
+ * postHook fails fast client-side instead of round-tripping to the backend.
+ * A no-op when `hooks`/`hooks.postHook` is omitted. Exported so callers can
+ * validate a postHook ahead of time (e.g. in their own form validation).
+ */
+declare function assertValidPostHook(hooks: BuildRouteBody["hooks"]): void;
 type TxRequest = {
     to?: string;
     target?: string;
@@ -236,7 +243,36 @@ declare function submitReceipt(intentId: string, txHash: string, sponsorshipRequ
  *  executes from a smart account, so the backend records the tx against the
  *  address the user actually connects with. */
 eoaAddress?: string): Promise<any>;
+/**
+ * Reports the submitted tx hash for one execution step of a multi-step
+ * route — approve steps only; the main tx keeps going through
+ * `submitReceipt`. `stepIndex` is the step's position in
+ * `route.execution.approvals` (the backend seeds its step plan in the same
+ * order). Best-effort telemetry: callers fire-and-forget so a failed report
+ * never blocks the payment flow, but a successful one lets the backend tell
+ * "approve landed, main never followed" apart from an intent the user
+ * abandoned before signing anything.
+ */
+declare function submitStepReceipt(intentId: string, stepIndex: number, txHash: string): Promise<any>;
+/**
+ * Fetches the current status for a route intent.
+ *
+ * Response contract:
+ * - 404 (throws)              → intent doesn't exist. Stop polling.
+ * - 200 status: "pending"     → intent exists, no receipt yet. Keep polling.
+ * - 200 status: "submitted"   → receipt in, tx in flight. Keep polling.
+ * - 200 status: "bridging"    → cross-chain leg in progress. Keep polling.
+ * - 200 status: "success"/"failed" → terminal. Stop polling.
+ *
+ * A "pending" payload is a stub ({intent_id, status, intent_status,
+ * create_date}) — the full Transaction fields appear once a receipt lands.
+ */
 declare function getStatus(intentId: string): Promise<Transaction>;
+/**
+ * Polls intent status until terminal ("success"/"failed") or timeout.
+ * Non-terminal statuses ("pending", "submitted", "bridging") keep the loop
+ * going; a 404 (unknown intent) throws out of the loop — don't retry it.
+ */
 declare function pollStatus(intentId: string, { intervalMs, timeoutMs }?: {
     intervalMs?: number | undefined;
     timeoutMs?: number | undefined;
@@ -263,31 +299,90 @@ type RouteIntent = {
     fromAmountWei: string | number;
     quoteToAmountWei: string | number;
     minToAmountWei: string | number;
+    /** Trustware's own request ID (a UUID) for the call that created this
+     *  intent — the same value the response carried in `X-Request-Id`, so it is
+     *  the ID to quote in a Trustware support request. Wire field:
+     *  `request_id`. Absent on intents created before it was split from
+     *  `providerRequestId`. */
     requestId?: string;
+    /** The routing provider's own correlation ID: Squid `requestId`, LiFi/Relay
+     *  route id, or Khalani's `{quoteId,routeId}` composite — the ID *that
+     *  provider's* status API and support recognise. Wire field:
+     *  `provider_request_id`. Absent when the winning provider returned none. */
+    providerRequestId?: string;
     routeRaw?: unknown;
     status: "created" | "submitted" | "bridging" | "success" | "failed";
     createdDate: Date | string;
     updatedDate: Date | string;
 };
+/**
+ * A status payload from `getStatus`/`pollStatus`.
+ *
+ * Every field except `status` is optional, because a `"pending"` payload is a
+ * stub — the intent exists but no receipt has landed, so there is no
+ * transaction row to describe yet. Check `status` before reading anything
+ * else.
+ *
+ * The wire is snake_case (`source_tx_hash`, `intent_id`, ...) while this type
+ * is camelCase. `getStatus` maps one onto the other (see
+ * `normalizeStatusPayload` in core/routes.ts), so anything reaching you through
+ * `getStatus`/`pollStatus`/`runTopUp` has the camelCase names populated.
+ *
+ * The raw snake_case keys are still present **at runtime** — dropping them
+ * would break callers that already read them — but they are deliberately not
+ * declared here, because camelCase is the supported spelling and the raw ones
+ * are only kept for back-compat. Reading `tx.source_tx_hash` therefore needs a
+ * cast, and new code should not: use `tx.sourceTxHash`.
+ *
+ * `origin_eoa` and `landed_amount_verified` are the exception — the wire has no
+ * camelCase spelling for those two, so they are declared as-is below.
+ */
 type Transaction = {
-    id: string;
-    intentId: string;
-    fromAddress: string;
-    toAddress: string;
+    id?: string;
+    intentId?: string;
+    fromAddress?: string;
+    toAddress?: string;
     /** Connected wallet (EOA) that originated the payment when the sender is a
      *  smart account. Wire field: `origin_eoa`. */
     origin_eoa?: string;
-    fromChainId: string | number;
-    toChainId: string | number;
-    sourceTxHash: string;
-    destTxHash: string;
-    requestId: string;
-    transactionRequest: unknown;
-    status: "submitted" | "bridging" | "success" | "failed";
+    fromChainId?: string | number;
+    toChainId?: string | number;
+    sourceTxHash?: string;
+    destTxHash?: string;
+    /** Trustware's own request ID (a UUID), copied from the intent. Wire field:
+     *  `request_id`. Optional: absent on a "pending" payload, and on rows
+     *  created before it was split from `providerRequestId`. */
+    requestId?: string;
+    /** The routing provider's own correlation ID, copied from the intent — what
+     *  that provider's status API polls with. Wire field:
+     *  `provider_request_id`. See RouteIntent.providerRequestId. */
+    providerRequestId?: string;
+    transactionRequest?: unknown;
+    /**
+     * "pending" means the intent exists but no receipt has been submitted yet —
+     * the backend returns it (HTTP 200) instead of the old 404 so pollers can
+     * tell "not ready yet, keep polling" apart from "unknown intent" (a real
+     * 404, which means stop polling). A pending response carries only
+     * `intent_id`, `status`, `intent_status`, `create_date` and — once the
+     * intent has an execution step plan — `steps`; every other field here is
+     * absent until a receipt lands.
+     */
+    status: "pending" | "submitted" | "bridging" | "success" | "failed";
     statusRaw?: unknown;
     routePath?: unknown;
     routeStatus?: unknown;
+    /**
+     * Exact once landed_amount_verified is true; otherwise a pre-trade quote
+     * estimate copied in when the transaction was submitted — neither Squid's
+     * nor LiFi's status API carries a real landed-amount field, so the
+     * backend confirms it by reading the destination chain directly instead
+     * (see BVT-246). Check `landed_amount_verified` before auto-continuing
+     * on this value.
+     */
     toAmountWei?: string | number;
+    /** True once toAmountWei has been confirmed on-chain rather than being the
+     *  pre-trade quote estimate. Wire field: `landed_amount_verified`. */
+    landed_amount_verified?: boolean;
     fromChainBlock: number;
     toChainBlock: number;
     fromChainTxUrl?: string;
@@ -410,6 +505,11 @@ type RoutePlan = {
     };
     steps?: unknown[];
     provider?: string;
+    /** The winning provider's own correlation ID, not Trustware's — it is
+     *  absent when that provider issued none, and it is what lands on the
+     *  intent as `providerRequestId`. Trustware's request ID for the same call
+     *  comes back in the `X-Request-Id` response header (the provider's is also
+     *  mirrored there as `X-Provider-Request-Id`). */
     requestId?: string;
     reliabilityScore?: number;
     diagnostics?: {
@@ -628,13 +728,14 @@ type RateLimitInfo = {
     /** Seconds until rate limit resets (only present on 429 responses) */
     retryAfter?: number;
 };
+/**
+ * Rate limit *observability*. Retry timing itself is not configurable: the
+ * limit is enforced server-side per API key, so the only retry schedule that
+ * can actually succeed is the one the server dictates through Retry-After.
+ * Tuning it client-side could only make requests fail sooner or hammer a
+ * limit that is already closed — see RETRY_POLICY.
+ */
 type RetryConfig = {
-    /** Enable automatic retry on 429 responses (default: true). Note: This does NOT disable backend rate limits, only client-side retry behavior. */
-    autoRetry?: boolean;
-    /** Maximum number of retries on 429 (default: 3) */
-    maxRetries?: number;
-    /** Base delay in ms for exponential backoff (default: 1000) */
-    baseDelayMs?: number;
     /** Callback when rate limit info is received from server */
     onRateLimitInfo?: (info: RateLimitInfo) => void;
     /** Callback when rate limit is hit (429 received) */
@@ -645,15 +746,29 @@ type RetryConfig = {
     approachingThreshold?: number;
 };
 type ResolvedRetryConfig = {
-    autoRetry: boolean;
-    maxRetries: number;
-    baseDelayMs: number;
     approachingThreshold: number;
     onRateLimitInfo?: (info: RateLimitInfo) => void;
     onRateLimited?: (info: RateLimitInfo, retryCount: number) => void;
     onRateLimitApproaching?: (info: RateLimitInfo, threshold: number) => void;
 };
 declare const DEFAULT_RETRY_CONFIG: ResolvedRetryConfig;
+/**
+ * The one retry number the SDK chooses for itself: the total time it will
+ * spend waiting out rate limits before handing the caller a RateLimitError.
+ *
+ * Everything else — how long to wait, and so whether to retry at all — is read
+ * off the response. The limit is per API key and settable per key server-side
+ * (rate_limit_per_min), and the backend reports the state of *that* key on
+ * every response: X-RateLimit-Limit / -Remaining / -Reset, plus Retry-After on
+ * a 429. A schedule hardcoded here could only disagree with it.
+ *
+ * This budget stays client-side because the server cannot know it: it is a
+ * property of the caller, not of the key. A payment widget cannot sit on a
+ * spinner for the minute a fresh window might be away, so past the budget the
+ * SDK stops and reports the wait (retriesExhausted: false, retryAfter set) for
+ * the app to render.
+ */
+declare const RATE_LIMIT_WAIT_BUDGET_MS = 10000;
 declare const DEFAULT_FEATURE_FLAGS: ResolvedFeatureFlags;
 
 type WagmiConnector = {
@@ -793,4 +908,4 @@ declare function useWalletInfo(wagmi?: WagmiBridge): {
 };
 declare function useWalletExternalDisconnect(cb: () => void): void;
 
-export { type WalletConnectConfig as $, type ResolvedWalletConnectConfig as A, type BuildRouteBody as B, type RetryConfig as C, type DetectedWallet as D, type EIP1193 as E, type FeatureFlags as F, type RouteApproval as G, type RouteEstimate as H, IdentityStore as I, type RouteIntent as J, type RouteParams as K, type RoutePlan as L, type RouteSponsorship as M, type RoutesConfig as N, type SimpleWalletInterface as O, type PostHookRequest as P, type SponsorshipApproval as Q, type RateLimitInfo as R, type SolanaProviderLike as S, type TrustwareConfigOptions as T, type SwapTokenRef as U, type TrustwareTheme as V, type WalletMeta as W, type TrustwareWidgetMessages as X, type WalletAddressResolution as Y, type WalletAddressSource as Z, type WalletCategory as _, type WalletId as a, type WalletEcosystem as a0, type WalletIdentity as a1, type WalletIdentityAddress as a2, type WalletIdentityChainLike as a3, buildWalletIdentityAddress as a4, createWalletIdentity as a5, resolveWalletAddressForChain as a6, upsertWalletIdentityAddress as a7, buildRoute as a8, buildDepositAddress as a9, submitReceipt as aa, getStatus as ab, pollStatus as ac, type SolanaWalletInterface as b, type WagmiBridge as c, type WagmiConnector as d, type WalletSnapshot as e, useWalletExternalDisconnect as f, useWalletInfo as g, useWireDetectionIntoManager as h, type WalletInterFaceAPI as i, TrustwareError as j, type Transaction as k, type TrustwareEvent as l, type BuildRouteResponse as m, type BuildRouteResult as n, DEFAULT_AUTO_DETECT_PROVIDER as o, DEFAULT_FEATURE_FLAGS as p, DEFAULT_MESSAGES as q, DEFAULT_RETRY_CONFIG as r, DEFAULT_SLIPPAGE as s, type EIP6963ProviderDetail as t, useWalletConnectConnect as u, type EvmWalletInterface as v, walletManager as w, type ResolvedFeatureFlags as x, type ResolvedRetryConfig as y, type ResolvedTrustwareConfig as z };
+export { type WalletCategory as $, type ResolvedTrustwareConfig as A, type BuildRouteBody as B, type ResolvedWalletConnectConfig as C, type DetectedWallet as D, type EIP1193 as E, type FeatureFlags as F, type RetryConfig as G, type RouteApproval as H, IdentityStore as I, type RouteEstimate as J, type RouteIntent as K, type RouteParams as L, type RoutePlan as M, type RouteSponsorship as N, type RoutesConfig as O, type PostHookRequest as P, type SimpleWalletInterface as Q, type RateLimitInfo as R, type SolanaProviderLike as S, type TrustwareConfigOptions as T, type SponsorshipApproval as U, type SwapTokenRef as V, type WalletMeta as W, type TrustwareTheme as X, type TrustwareWidgetMessages as Y, type WalletAddressResolution as Z, type WalletAddressSource as _, type WalletId as a, type WalletConnectConfig as a0, type WalletEcosystem as a1, type WalletIdentity as a2, type WalletIdentityAddress as a3, type WalletIdentityChainLike as a4, assertValidPostHook as a5, buildWalletIdentityAddress as a6, createWalletIdentity as a7, resolveWalletAddressForChain as a8, upsertWalletIdentityAddress as a9, buildRoute as aa, buildDepositAddress as ab, submitReceipt as ac, submitStepReceipt as ad, getStatus as ae, pollStatus as af, type SolanaWalletInterface as b, type WagmiBridge as c, type WagmiConnector as d, type WalletSnapshot as e, useWalletExternalDisconnect as f, useWalletInfo as g, useWireDetectionIntoManager as h, type WalletInterFaceAPI as i, TrustwareError as j, type Transaction as k, type TrustwareEvent as l, type BuildRouteResponse as m, type BuildRouteResult as n, DEFAULT_AUTO_DETECT_PROVIDER as o, DEFAULT_FEATURE_FLAGS as p, DEFAULT_MESSAGES as q, DEFAULT_RETRY_CONFIG as r, DEFAULT_SLIPPAGE as s, type EIP6963ProviderDetail as t, useWalletConnectConnect as u, type EvmWalletInterface as v, walletManager as w, RATE_LIMIT_WAIT_BUDGET_MS as x, type ResolvedFeatureFlags as y, type ResolvedRetryConfig as z };

package/dist/{manager-BwjyFjjz.d.cts → manager-DNGk1YkR.d.cts}

@@ -197,6 +197,13 @@ type BuildRouteBody = {
         postHook?: PostHookRequest;
     };
 };
+/**
+ * Validates a `BuildRouteBody.hooks` value before it's sent, so a malformed
+ * postHook fails fast client-side instead of round-tripping to the backend.
+ * A no-op when `hooks`/`hooks.postHook` is omitted. Exported so callers can
+ * validate a postHook ahead of time (e.g. in their own form validation).
+ */
+declare function assertValidPostHook(hooks: BuildRouteBody["hooks"]): void;
 type TxRequest = {
     to?: string;
     target?: string;
@@ -236,7 +243,36 @@ declare function submitReceipt(intentId: string, txHash: string, sponsorshipRequ
  *  executes from a smart account, so the backend records the tx against the
  *  address the user actually connects with. */
 eoaAddress?: string): Promise<any>;
+/**
+ * Reports the submitted tx hash for one execution step of a multi-step
+ * route — approve steps only; the main tx keeps going through
+ * `submitReceipt`. `stepIndex` is the step's position in
+ * `route.execution.approvals` (the backend seeds its step plan in the same
+ * order). Best-effort telemetry: callers fire-and-forget so a failed report
+ * never blocks the payment flow, but a successful one lets the backend tell
+ * "approve landed, main never followed" apart from an intent the user
+ * abandoned before signing anything.
+ */
+declare function submitStepReceipt(intentId: string, stepIndex: number, txHash: string): Promise<any>;
+/**
+ * Fetches the current status for a route intent.
+ *
+ * Response contract:
+ * - 404 (throws)              → intent doesn't exist. Stop polling.
+ * - 200 status: "pending"     → intent exists, no receipt yet. Keep polling.
+ * - 200 status: "submitted"   → receipt in, tx in flight. Keep polling.
+ * - 200 status: "bridging"    → cross-chain leg in progress. Keep polling.
+ * - 200 status: "success"/"failed" → terminal. Stop polling.
+ *
+ * A "pending" payload is a stub ({intent_id, status, intent_status,
+ * create_date}) — the full Transaction fields appear once a receipt lands.
+ */
 declare function getStatus(intentId: string): Promise<Transaction>;
+/**
+ * Polls intent status until terminal ("success"/"failed") or timeout.
+ * Non-terminal statuses ("pending", "submitted", "bridging") keep the loop
+ * going; a 404 (unknown intent) throws out of the loop — don't retry it.
+ */
 declare function pollStatus(intentId: string, { intervalMs, timeoutMs }?: {
     intervalMs?: number | undefined;
     timeoutMs?: number | undefined;
@@ -263,31 +299,90 @@ type RouteIntent = {
     fromAmountWei: string | number;
     quoteToAmountWei: string | number;
     minToAmountWei: string | number;
+    /** Trustware's own request ID (a UUID) for the call that created this
+     *  intent — the same value the response carried in `X-Request-Id`, so it is
+     *  the ID to quote in a Trustware support request. Wire field:
+     *  `request_id`. Absent on intents created before it was split from
+     *  `providerRequestId`. */
     requestId?: string;
+    /** The routing provider's own correlation ID: Squid `requestId`, LiFi/Relay
+     *  route id, or Khalani's `{quoteId,routeId}` composite — the ID *that
+     *  provider's* status API and support recognise. Wire field:
+     *  `provider_request_id`. Absent when the winning provider returned none. */
+    providerRequestId?: string;
     routeRaw?: unknown;
     status: "created" | "submitted" | "bridging" | "success" | "failed";
     createdDate: Date | string;
     updatedDate: Date | string;
 };
+/**
+ * A status payload from `getStatus`/`pollStatus`.
+ *
+ * Every field except `status` is optional, because a `"pending"` payload is a
+ * stub — the intent exists but no receipt has landed, so there is no
+ * transaction row to describe yet. Check `status` before reading anything
+ * else.
+ *
+ * The wire is snake_case (`source_tx_hash`, `intent_id`, ...) while this type
+ * is camelCase. `getStatus` maps one onto the other (see
+ * `normalizeStatusPayload` in core/routes.ts), so anything reaching you through
+ * `getStatus`/`pollStatus`/`runTopUp` has the camelCase names populated.
+ *
+ * The raw snake_case keys are still present **at runtime** — dropping them
+ * would break callers that already read them — but they are deliberately not
+ * declared here, because camelCase is the supported spelling and the raw ones
+ * are only kept for back-compat. Reading `tx.source_tx_hash` therefore needs a
+ * cast, and new code should not: use `tx.sourceTxHash`.
+ *
+ * `origin_eoa` and `landed_amount_verified` are the exception — the wire has no
+ * camelCase spelling for those two, so they are declared as-is below.
+ */
 type Transaction = {
-    id: string;
-    intentId: string;
-    fromAddress: string;
-    toAddress: string;
+    id?: string;
+    intentId?: string;
+    fromAddress?: string;
+    toAddress?: string;
     /** Connected wallet (EOA) that originated the payment when the sender is a
      *  smart account. Wire field: `origin_eoa`. */
     origin_eoa?: string;
-    fromChainId: string | number;
-    toChainId: string | number;
-    sourceTxHash: string;
-    destTxHash: string;
-    requestId: string;
-    transactionRequest: unknown;
-    status: "submitted" | "bridging" | "success" | "failed";
+    fromChainId?: string | number;
+    toChainId?: string | number;
+    sourceTxHash?: string;
+    destTxHash?: string;
+    /** Trustware's own request ID (a UUID), copied from the intent. Wire field:
+     *  `request_id`. Optional: absent on a "pending" payload, and on rows
+     *  created before it was split from `providerRequestId`. */
+    requestId?: string;
+    /** The routing provider's own correlation ID, copied from the intent — what
+     *  that provider's status API polls with. Wire field:
+     *  `provider_request_id`. See RouteIntent.providerRequestId. */
+    providerRequestId?: string;
+    transactionRequest?: unknown;
+    /**
+     * "pending" means the intent exists but no receipt has been submitted yet —
+     * the backend returns it (HTTP 200) instead of the old 404 so pollers can
+     * tell "not ready yet, keep polling" apart from "unknown intent" (a real
+     * 404, which means stop polling). A pending response carries only
+     * `intent_id`, `status`, `intent_status`, `create_date` and — once the
+     * intent has an execution step plan — `steps`; every other field here is
+     * absent until a receipt lands.
+     */
+    status: "pending" | "submitted" | "bridging" | "success" | "failed";
     statusRaw?: unknown;
     routePath?: unknown;
     routeStatus?: unknown;
+    /**
+     * Exact once landed_amount_verified is true; otherwise a pre-trade quote
+     * estimate copied in when the transaction was submitted — neither Squid's
+     * nor LiFi's status API carries a real landed-amount field, so the
+     * backend confirms it by reading the destination chain directly instead
+     * (see BVT-246). Check `landed_amount_verified` before auto-continuing
+     * on this value.
+     */
     toAmountWei?: string | number;
+    /** True once toAmountWei has been confirmed on-chain rather than being the
+     *  pre-trade quote estimate. Wire field: `landed_amount_verified`. */
+    landed_amount_verified?: boolean;
     fromChainBlock: number;
     toChainBlock: number;
     fromChainTxUrl?: string;
@@ -410,6 +505,11 @@ type RoutePlan = {
     };
     steps?: unknown[];
     provider?: string;
+    /** The winning provider's own correlation ID, not Trustware's — it is
+     *  absent when that provider issued none, and it is what lands on the
+     *  intent as `providerRequestId`. Trustware's request ID for the same call
+     *  comes back in the `X-Request-Id` response header (the provider's is also
+     *  mirrored there as `X-Provider-Request-Id`). */
     requestId?: string;
     reliabilityScore?: number;
     diagnostics?: {
@@ -628,13 +728,14 @@ type RateLimitInfo = {
     /** Seconds until rate limit resets (only present on 429 responses) */
     retryAfter?: number;
 };
+/**
+ * Rate limit *observability*. Retry timing itself is not configurable: the
+ * limit is enforced server-side per API key, so the only retry schedule that
+ * can actually succeed is the one the server dictates through Retry-After.
+ * Tuning it client-side could only make requests fail sooner or hammer a
+ * limit that is already closed — see RETRY_POLICY.
+ */
 type RetryConfig = {
-    /** Enable automatic retry on 429 responses (default: true). Note: This does NOT disable backend rate limits, only client-side retry behavior. */
-    autoRetry?: boolean;
-    /** Maximum number of retries on 429 (default: 3) */
-    maxRetries?: number;
-    /** Base delay in ms for exponential backoff (default: 1000) */
-    baseDelayMs?: number;
     /** Callback when rate limit info is received from server */
     onRateLimitInfo?: (info: RateLimitInfo) => void;
     /** Callback when rate limit is hit (429 received) */
@@ -645,15 +746,29 @@ type RetryConfig = {
     approachingThreshold?: number;
 };
 type ResolvedRetryConfig = {
-    autoRetry: boolean;
-    maxRetries: number;
-    baseDelayMs: number;
     approachingThreshold: number;
     onRateLimitInfo?: (info: RateLimitInfo) => void;
     onRateLimited?: (info: RateLimitInfo, retryCount: number) => void;
     onRateLimitApproaching?: (info: RateLimitInfo, threshold: number) => void;
 };
 declare const DEFAULT_RETRY_CONFIG: ResolvedRetryConfig;
+/**
+ * The one retry number the SDK chooses for itself: the total time it will
+ * spend waiting out rate limits before handing the caller a RateLimitError.
+ *
+ * Everything else — how long to wait, and so whether to retry at all — is read
+ * off the response. The limit is per API key and settable per key server-side
+ * (rate_limit_per_min), and the backend reports the state of *that* key on
+ * every response: X-RateLimit-Limit / -Remaining / -Reset, plus Retry-After on
+ * a 429. A schedule hardcoded here could only disagree with it.
+ *
+ * This budget stays client-side because the server cannot know it: it is a
+ * property of the caller, not of the key. A payment widget cannot sit on a
+ * spinner for the minute a fresh window might be away, so past the budget the
+ * SDK stops and reports the wait (retriesExhausted: false, retryAfter set) for
+ * the app to render.
+ */
+declare const RATE_LIMIT_WAIT_BUDGET_MS = 10000;
 declare const DEFAULT_FEATURE_FLAGS: ResolvedFeatureFlags;
 
 type WagmiConnector = {
@@ -793,4 +908,4 @@ declare function useWalletInfo(wagmi?: WagmiBridge): {
 };
 declare function useWalletExternalDisconnect(cb: () => void): void;
 
-export { type WalletConnectConfig as $, type ResolvedWalletConnectConfig as A, type BuildRouteBody as B, type RetryConfig as C, type DetectedWallet as D, type EIP1193 as E, type FeatureFlags as F, type RouteApproval as G, type RouteEstimate as H, IdentityStore as I, type RouteIntent as J, type RouteParams as K, type RoutePlan as L, type RouteSponsorship as M, type RoutesConfig as N, type SimpleWalletInterface as O, type PostHookRequest as P, type SponsorshipApproval as Q, type RateLimitInfo as R, type SolanaProviderLike as S, type TrustwareConfigOptions as T, type SwapTokenRef as U, type TrustwareTheme as V, type WalletMeta as W, type TrustwareWidgetMessages as X, type WalletAddressResolution as Y, type WalletAddressSource as Z, type WalletCategory as _, type WalletId as a, type WalletEcosystem as a0, type WalletIdentity as a1, type WalletIdentityAddress as a2, type WalletIdentityChainLike as a3, buildWalletIdentityAddress as a4, createWalletIdentity as a5, resolveWalletAddressForChain as a6, upsertWalletIdentityAddress as a7, buildRoute as a8, buildDepositAddress as a9, submitReceipt as aa, getStatus as ab, pollStatus as ac, type SolanaWalletInterface as b, type WagmiBridge as c, type WagmiConnector as d, type WalletSnapshot as e, useWalletExternalDisconnect as f, useWalletInfo as g, useWireDetectionIntoManager as h, type WalletInterFaceAPI as i, TrustwareError as j, type Transaction as k, type TrustwareEvent as l, type BuildRouteResponse as m, type BuildRouteResult as n, DEFAULT_AUTO_DETECT_PROVIDER as o, DEFAULT_FEATURE_FLAGS as p, DEFAULT_MESSAGES as q, DEFAULT_RETRY_CONFIG as r, DEFAULT_SLIPPAGE as s, type EIP6963ProviderDetail as t, useWalletConnectConnect as u, type EvmWalletInterface as v, walletManager as w, type ResolvedFeatureFlags as x, type ResolvedRetryConfig as y, type ResolvedTrustwareConfig as z };
+export { type WalletCategory as $, type ResolvedTrustwareConfig as A, type BuildRouteBody as B, type ResolvedWalletConnectConfig as C, type DetectedWallet as D, type EIP1193 as E, type FeatureFlags as F, type RetryConfig as G, type RouteApproval as H, IdentityStore as I, type RouteEstimate as J, type RouteIntent as K, type RouteParams as L, type RoutePlan as M, type RouteSponsorship as N, type RoutesConfig as O, type PostHookRequest as P, type SimpleWalletInterface as Q, type RateLimitInfo as R, type SolanaProviderLike as S, type TrustwareConfigOptions as T, type SponsorshipApproval as U, type SwapTokenRef as V, type WalletMeta as W, type TrustwareTheme as X, type TrustwareWidgetMessages as Y, type WalletAddressResolution as Z, type WalletAddressSource as _, type WalletId as a, type WalletConnectConfig as a0, type WalletEcosystem as a1, type WalletIdentity as a2, type WalletIdentityAddress as a3, type WalletIdentityChainLike as a4, assertValidPostHook as a5, buildWalletIdentityAddress as a6, createWalletIdentity as a7, resolveWalletAddressForChain as a8, upsertWalletIdentityAddress as a9, buildRoute as aa, buildDepositAddress as ab, submitReceipt as ac, submitStepReceipt as ad, getStatus as ae, pollStatus as af, type SolanaWalletInterface as b, type WagmiBridge as c, type WagmiConnector as d, type WalletSnapshot as e, useWalletExternalDisconnect as f, useWalletInfo as g, useWireDetectionIntoManager as h, type WalletInterFaceAPI as i, TrustwareError as j, type Transaction as k, type TrustwareEvent as l, type BuildRouteResponse as m, type BuildRouteResult as n, DEFAULT_AUTO_DETECT_PROVIDER as o, DEFAULT_FEATURE_FLAGS as p, DEFAULT_MESSAGES as q, DEFAULT_RETRY_CONFIG as r, DEFAULT_SLIPPAGE as s, type EIP6963ProviderDetail as t, useWalletConnectConnect as u, type EvmWalletInterface as v, walletManager as w, RATE_LIMIT_WAIT_BUDGET_MS as x, type ResolvedFeatureFlags as y, type ResolvedRetryConfig as z };

package/dist/{metadata-BiTMMvlY.d.ts → metadata-C__KMeuz.d.ts}

@@ -1,4 +1,4 @@
-import { D as DetectedWallet, c as WagmiBridge, i as WalletInterFaceAPI, E as EIP1193, a as WalletId, t as EIP6963ProviderDetail, W as WalletMeta } from './manager-B6NNV-E_.js';
+import { D as DetectedWallet, c as WagmiBridge, i as WalletInterFaceAPI, E as EIP1193, a as WalletId, t as EIP6963ProviderDetail, W as WalletMeta } from './manager-Bw8b1wSD.js';
 
 /** Try wagmi bridge first (if provided), otherwise return EIP-1193 adapter. */
 declare function connectDetectedWallet(dw: DetectedWallet, opts?: {

package/dist/{metadata-HCflXcsF.d.cts → metadata-Dk4R8_-T.d.cts}

@@ -1,4 +1,4 @@
-import { D as DetectedWallet, c as WagmiBridge, i as WalletInterFaceAPI, E as EIP1193, a as WalletId, t as EIP6963ProviderDetail, W as WalletMeta } from './manager-BwjyFjjz.cjs';
+import { D as DetectedWallet, c as WagmiBridge, i as WalletInterFaceAPI, E as EIP1193, a as WalletId, t as EIP6963ProviderDetail, W as WalletMeta } from './manager-DNGk1YkR.cjs';
 
 /** Try wagmi bridge first (if provided), otherwise return EIP-1193 adapter. */
 declare function connectDetectedWallet(dw: DetectedWallet, opts?: {

package/dist/smart-account.cjs

@@ -12265,7 +12265,7 @@ var init_constants = __esm({
   "src/constants.ts"() {
     "use strict";
     SDK_NAME = "@trustware/sdk";
-    SDK_VERSION = "1.1.10-staging.0";
+    SDK_VERSION = "1.1.11-staging.2";
     API_ROOT = "https://bv-staging-api.trustware.io";
     API_PREFIX = "/api";
   }
@@ -12286,16 +12286,14 @@ var init_defaults3 = __esm({
 });
 
 // src/types/config.ts
-var DEFAULT_RETRY_CONFIG, DEFAULT_FEATURE_FLAGS;
+var DEFAULT_RETRY_CONFIG, RATE_LIMIT_WAIT_BUDGET_MS, DEFAULT_FEATURE_FLAGS;
 var init_config = __esm({
   "src/types/config.ts"() {
     "use strict";
     DEFAULT_RETRY_CONFIG = {
-      autoRetry: true,
-      maxRetries: 3,
-      baseDelayMs: 1e3,
       approachingThreshold: 5
     };
+    RATE_LIMIT_WAIT_BUDGET_MS = 1e4;
     DEFAULT_FEATURE_FLAGS = {
       tokensPagination: true,
       balanceStreaming: false,
@@ -13571,9 +13569,6 @@ function resolveConfig(input) {
   const theme = input.theme ?? "system";
   const messages = deepMerge(DEFAULT_MESSAGES, input.messages);
   const retry = {
-    autoRetry: input.retry?.autoRetry ?? DEFAULT_RETRY_CONFIG.autoRetry,
-    maxRetries: input.retry?.maxRetries ?? DEFAULT_RETRY_CONFIG.maxRetries,
-    baseDelayMs: input.retry?.baseDelayMs ?? DEFAULT_RETRY_CONFIG.baseDelayMs,
     approachingThreshold: input.retry?.approachingThreshold ?? DEFAULT_RETRY_CONFIG.approachingThreshold,
     onRateLimitInfo: input.retry?.onRateLimitInfo,
     onRateLimited: input.retry?.onRateLimited,
@@ -13684,60 +13679,66 @@ function notifyRateLimitCallbacks(info, isRateLimited, retryCount) {
     retry.onRateLimitApproaching(info, retry.approachingThreshold);
   }
 }
-function calculateBackoffDelay(baseDelayMs, retryCount, retryAfter) {
-  if (retryAfter && retryAfter > 0) {
-    return retryAfter * 1e3;
+function serverDirectedWaitMs(info) {
+  if (!info) return null;
+  if (typeof info.retryAfter === "number" && info.retryAfter > 0) {
+    return info.retryAfter * 1e3;
   }
-  return baseDelayMs * Math.pow(2, retryCount);
+  if (typeof info.reset === "number" && info.reset > 0) {
+    const untilReset = info.reset * 1e3 - Date.now();
+    if (untilReset > 0) return untilReset;
+  }
+  return null;
 }
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
-async function rateLimitedFetch(url, options = {}) {
-  const { skipRateLimit, ...fetchOptions } = options;
-  const cfg = TrustwareConfigStore.get();
-  if (!cfg.retry.autoRetry || skipRateLimit) {
-    return fetch(url, fetchOptions);
-  }
-  const { maxRetries, baseDelayMs } = cfg.retry;
+async function withRateLimitRetry(attempt) {
+  let waitedMs = 0;
   let retryCount = 0;
   while (true) {
-    const response = await fetch(url, fetchOptions);
+    const response = await attempt();
     const rateLimitInfo = parseRateLimitHeaders(response);
-    if (response.status === 429) {
+    if (response.status !== 429) {
       if (rateLimitInfo) {
-        notifyRateLimitCallbacks(rateLimitInfo, true, retryCount);
-      }
-      if (retryCount >= maxRetries) {
-        throw new RateLimitError(
-          rateLimitInfo || { limit: 0, remaining: 0, reset: 0 },
-          true
-        );
+        notifyRateLimitCallbacks(rateLimitInfo, false, 0);
       }
-      const delay = calculateBackoffDelay(
-        baseDelayMs,
-        retryCount,
-        rateLimitInfo?.retryAfter
-      );
-      await sleep(delay);
-      retryCount++;
-      continue;
+      return response;
     }
     if (rateLimitInfo) {
-      notifyRateLimitCallbacks(rateLimitInfo, false, 0);
+      notifyRateLimitCallbacks(rateLimitInfo, true, retryCount);
+    }
+    const waitMs = serverDirectedWaitMs(rateLimitInfo);
+    const info = rateLimitInfo || { limit: 0, remaining: 0, reset: 0 };
+    if (waitMs === null) {
+      throw new RateLimitError(info, true);
+    }
+    if (waitedMs + waitMs > RATE_LIMIT_WAIT_BUDGET_MS) {
+      throw new RateLimitError(info, false);
     }
-    return response;
+    await sleep(waitMs);
+    waitedMs += waitMs;
+    retryCount++;
   }
 }
+async function rateLimitedFetch(url, options = {}) {
+  const { skipRateLimit, ...fetchOptions } = options;
+  if (skipRateLimit) {
+    return fetch(url, fetchOptions);
+  }
+  return withRateLimitRetry(() => fetch(url, fetchOptions));
+}
 var RateLimitError;
 var init_http = __esm({
   "src/core/http.ts"() {
     "use strict";
     init_constants();
     init_config2();
+    init_config();
     RateLimitError = class extends Error {
       constructor(info, retriesExhausted) {
-        const message = retriesExhausted ? `Rate limit exceeded after max retries. Try again in ${info.retryAfter ?? Math.ceil((info.reset * 1e3 - Date.now()) / 1e3)} seconds.` : `Rate limit exceeded. Try again in ${info.retryAfter} seconds.`;
+        const seconds = info.retryAfter ?? (info.reset > 0 ? Math.max(0, Math.ceil((info.reset * 1e3 - Date.now()) / 1e3)) : null);
+        const message = seconds === null ? "Rate limit exceeded. The server did not say when to retry." : `Rate limit exceeded. Try again in ${seconds} seconds.`;
         super(message);
         this.name = "RateLimitError";
         this.rateLimitInfo = info;
@@ -13748,7 +13749,7 @@ var init_http = __esm({
 });
 
 // src/smart-account/client.ts
-async function fetchWithTimeout(url, init) {
+async function fetchOnceWithTimeout(url, init) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
   try {
@@ -13769,6 +13770,9 @@ async function fetchWithTimeout(url, init) {
     clearTimeout(timer);
   }
 }
+async function fetchWithTimeout(url, init) {
+  return withRateLimitRetry(() => fetchOnceWithTimeout(url, init));
+}
 function extractRevertHex(err) {
   if (typeof err.data === "string" && err.data.startsWith("0x"))
     return err.data;
@@ -14261,7 +14265,7 @@ async function estimateRelayFeeInToken(valueWei, fromAmountWei, fromAmountUSD, c
     tokenUnitsPerDollar = Number(fromAmountWei) / fromUSD;
   } else if (fromToken && fromDecimals !== void 0) {
     try {
-      const resp = await fetch(
+      const resp = await rateLimitedFetch(
         `${apiBase()}/v1/price/token?chainId=${cid}&address=${fromToken}`,
         { headers: jsonHeaders() }
       );
@@ -14277,9 +14281,10 @@ async function estimateRelayFeeInToken(valueWei, fromAmountWei, fromAmountUSD, c
     return 0n;
   }
   try {
-    const resp = await fetch(`${apiBase()}/v1/price/native?chainId=${cid}`, {
-      headers: jsonHeaders()
-    });
+    const resp = await rateLimitedFetch(
+      `${apiBase()}/v1/price/native?chainId=${cid}`,
+      { headers: jsonHeaders() }
+    );
     if (!resp.ok) throw new Error(`native price HTTP ${resp.status}`);
     const json = await resp.json();
     const ethPriceUSD = parseFloat(json.data?.priceUSD ?? "0");