four-flap-meme-sdk 1.5.20 → 1.5.22

package/dist/contracts/tm-bundle-merkle/index.d.ts

@@ -6,7 +6,7 @@ export * from './config.js';
 export * from './types.js';
 export { createTokenWithBundleBuyMerkle, batchBuyWithBundleMerkle, batchSellWithBundleMerkle } from './core.js';
 export { fourPrivateBuyMerkle, fourPrivateSellMerkle, fourBatchPrivateBuyMerkle, fourBatchPrivateSellMerkle } from './private.js';
-export { disperseWithBundleMerkle, sweepWithBundleMerkle } from './utils.js';
+export { disperseWithBundleMerkle, sweepWithBundleMerkle, pairwiseTransferWithBundleMerkle } from './utils.js';
 export { fourPancakeProxyBatchBuyMerkle, fourPancakeProxyBatchSellMerkle, approveFourPancakeProxy, approveFourPancakeProxyBatch } from './pancake-proxy.js';
 export { approveFourTokenManagerBatch, type ApproveFourTokenManagerBatchParams, type ApproveFourTokenManagerBatchResult } from './approve-tokenmanager.js';
 export { submitBundleToMerkle, submitMultipleBundles, submitMultipleBundlesParallel, type MerkleSubmitConfig, type SubmitBundleResult, submitBundleToBlockRazor, submitMultipleBundlesToBlockRazor, submitMultipleBundlesToBlockRazorParallel, type BlockRazorSubmitConfig, type BlockRazorSubmitResult, submitDirectToRpc, submitDirectToRpcSequential, // ✅ 新增：顺序广播并等待确认（用于多跳）

package/dist/contracts/tm-bundle-merkle/index.js

@@ -10,7 +10,7 @@ export { createTokenWithBundleBuyMerkle, batchBuyWithBundleMerkle, batchSellWith
 // 私有交易方法
 export { fourPrivateBuyMerkle, fourPrivateSellMerkle, fourBatchPrivateBuyMerkle, fourBatchPrivateSellMerkle } from './private.js';
 // 工具方法
-export { disperseWithBundleMerkle, sweepWithBundleMerkle } from './utils.js';
+export { disperseWithBundleMerkle, sweepWithBundleMerkle, pairwiseTransferWithBundleMerkle } from './utils.js';
 // PancakeSwapProxy 代理交易方法
 export { fourPancakeProxyBatchBuyMerkle, fourPancakeProxyBatchSellMerkle, approveFourPancakeProxy, approveFourPancakeProxyBatch } from './pancake-proxy.js';
 // TokenManager 授权方法

package/dist/contracts/tm-bundle-merkle/types.d.ts

@@ -337,6 +337,30 @@ export type SweepSignParams = {
  * 包含 hopWallets 用于返回生成的多跳钱包私钥
  */
 export type SweepMerkleResult = MerkleSignedResult;
+/**
+ * 多对多（地址一一对应）转账参数（仅签名版本）
+ * - senderPrivateKeys / receiverAddresses 必须等长
+ * - amount / amounts 二选一（amounts 优先）
+ * - 支持多跳：hopCount 可为 number 或逐对数组
+ * - 支持利润刮取：利润由第一个 sender 支付（作为额外费用，不扣减每对转账金额）
+ */
+export type PairwiseTransferSignParams = {
+    senderPrivateKeys: string[];
+    receiverAddresses: string[];
+    amount?: AmountLike;
+    amounts?: AmountLike[];
+    tokenAddress?: string;
+    tokenDecimals?: number;
+    hopCount?: number | number[];
+    hopPrivateKeys?: string[][];
+    config: FourSignConfig;
+    /** ✅ 起始 nonce（仅对第一个 sender 生效，用于并行调用避免 nonce 冲突） */
+    startNonce?: number;
+    tokenPoolType?: TokenPoolType;
+    quoteToken?: QuoteTokenType;
+    userType?: UserType;
+};
+export type PairwiseTransferMerkleResult = MerkleSignedResult;
 /** ✅ PancakeProxy 批量购买参数（Merkle 版本 - 完整） */
 export type FourPancakeProxyBatchBuyParams = {
     privateKeys: string[];

package/dist/contracts/tm-bundle-merkle/utils.d.ts

@@ -1,4 +1,4 @@
-import { DisperseSignParams, DisperseMerkleResult, SweepSignParams, SweepMerkleResult } from './types.js';
+import { DisperseSignParams, DisperseMerkleResult, SweepSignParams, SweepMerkleResult, PairwiseTransferSignParams, PairwiseTransferMerkleResult } from './types.js';
 /**
  * 分发（仅签名版本 - 不依赖 Merkle）
  * ✅ 精简版：只负责签名交易，不提交到 Merkle
@@ -11,3 +11,10 @@ export declare function disperseWithBundleMerkle(params: DisperseSignParams): Pr
  * ✅ 优化版：支持 startNonce 参数避免并行调用时的 nonce 冲突
  */
 export declare function sweepWithBundleMerkle(params: SweepSignParams): Promise<SweepMerkleResult>;
+/**
+ * 多对多（地址一一对应）转账（仅签名版本 - 不依赖 Merkle）
+ * - 支持原生币 / ERC20
+ * - 支持多跳（逐对）
+ * - 支持利润刮取：利润由第一个 sender 支付（作为额外费用，不扣减每对转账金额）
+ */
+export declare function pairwiseTransferWithBundleMerkle(params: PairwiseTransferSignParams): Promise<PairwiseTransferMerkleResult>;

package/dist/contracts/tm-bundle-merkle/utils.js

@@ -1389,3 +1389,290 @@ export async function sweepWithBundleMerkle(params) {
         } : undefined
     };
 }
+/**
+ * 多对多（地址一一对应）转账（仅签名版本 - 不依赖 Merkle）
+ * - 支持原生币 / ERC20
+ * - 支持多跳（逐对）
+ * - 支持利润刮取：利润由第一个 sender 支付（作为额外费用，不扣减每对转账金额）
+ */
+export async function pairwiseTransferWithBundleMerkle(params) {
+    const { senderPrivateKeys, receiverAddresses, amount, amounts, tokenAddress, tokenDecimals, hopCount = 0, hopPrivateKeys, config, startNonce, tokenPoolType = 'v2', quoteToken = 'native', userType = 'v0', } = params;
+    if (!senderPrivateKeys || senderPrivateKeys.length === 0) {
+        return { signedTransactions: [], hopWallets: undefined };
+    }
+    if (!receiverAddresses || receiverAddresses.length === 0) {
+        return { signedTransactions: [], hopWallets: undefined };
+    }
+    if (senderPrivateKeys.length !== receiverAddresses.length) {
+        throw new Error(`senderPrivateKeys length (${senderPrivateKeys.length}) must match receiverAddresses length (${receiverAddresses.length})`);
+    }
+    const pairCount = senderPrivateKeys.length;
+    const normalizedAmounts = (() => {
+        if (amounts && amounts.length > 0) {
+            if (amounts.length !== pairCount) {
+                throw new Error(`amounts length (${amounts.length}) must match pair count (${pairCount})`);
+            }
+            return amounts.map(a => (typeof a === 'bigint' ? a.toString() : String(a)));
+        }
+        if (amount !== undefined && String(amount).trim().length > 0) {
+            const v = typeof amount === 'bigint' ? amount.toString() : String(amount);
+            return new Array(pairCount).fill(v);
+        }
+        throw new Error('Either amount or amounts must be provided');
+    })();
+    const chainIdNum = config.chainId ?? 56;
+    const chainName = chainIdNum === 143 ? 'Monad' : chainIdNum === 56 ? 'BSC' : `Chain-${chainIdNum}`;
+    const provider = new ethers.JsonRpcProvider(config.rpcUrl, { chainId: chainIdNum, name: chainName });
+    const txType = getTxType(config);
+    const isNative = _isNativeTokenAddress(tokenAddress);
+    const nonceManager = new NonceManager(provider);
+    // hop 私钥链优先使用传入
+    const providedHops = (() => {
+        if (hopPrivateKeys && hopPrivateKeys.length > 0) {
+            if (hopPrivateKeys.length !== pairCount) {
+                throw new Error(`hopPrivateKeys length (${hopPrivateKeys.length}) must match pair count (${pairCount})`);
+            }
+            return hopPrivateKeys.every(h => h.length === 0) ? null : hopPrivateKeys;
+        }
+        return null;
+    })();
+    const preparedHops = providedHops ?? _generateHopWallets(pairCount, hopCount);
+    const hasHops = preparedHops !== null;
+    const maxHopCount = hasHops ? Math.max(...preparedHops.map(h => h.length)) : 0;
+    const finalGasLimit = _calculateGasLimit(config, isNative, hasHops, maxHopCount);
+    const nativeGasLimit = (config.prefer21000ForNative ?? false) ? 21000n : finalGasLimit;
+    // 与 disperse 保持一致：多跳场景固定 gas limit
+    const nativeTransferGasLimit = 21000n;
+    const erc20TransferGasLimit = 65000n;
+    const [gasPrice, decimals] = await Promise.all([
+        getOptimizedGasPrice(provider, getGasPriceConfig(config)),
+        isNative ? Promise.resolve(18) : Promise.resolve(tokenDecimals ?? await _getErc20DecimalsMerkle(provider, tokenAddress, chainIdNum))
+    ]);
+    const iface = isNative ? null : new ethers.Interface(['function transfer(address,uint256) returns (bool)']);
+    // 利润：按每对金额计算，但由第一个 sender 支付（额外费用）
+    const extractProfit = shouldExtractProfit(config);
+    let totalAmountBeforeProfit = 0n;
+    let totalTokenProfit = 0n;
+    let totalProfitNative = 0n;
+    const parsedAmountsWei = normalizedAmounts.map(v => {
+        const amt = isNative ? ethers.parseEther(v) : ethers.parseUnits(v, decimals);
+        totalAmountBeforeProfit += amt;
+        if (extractProfit && amt > 0n) {
+            const { profit } = calculateProfit(amt, userType);
+            if (isNative)
+                totalProfitNative += profit;
+            else
+                totalTokenProfit += profit;
+        }
+        return amt;
+    });
+    if (!isNative && extractProfit && totalTokenProfit > 0n) {
+        totalProfitNative = await getTokenToNativeQuote(provider, tokenAddress, totalTokenProfit, chainIdNum, tokenPoolType, quoteToken, config.rpcUrl);
+    }
+    // 计算每个 sender 需要的 nonce 数量（聚合到地址）
+    const senderWallets = senderPrivateKeys.map(pk => new Wallet(pk, provider));
+    const senderAddrLowerList = senderWallets.map(w => w.address.toLowerCase());
+    const firstSenderAddrLower = senderAddrLowerList[0];
+    const nonceNeedBySender = new Map();
+    for (let i = 0; i < pairCount; i++) {
+        const addrLower = senderAddrLowerList[i];
+        const hopLen = preparedHops ? preparedHops[i].length : 0;
+        const perPairTxCount = (() => {
+            if (isNative)
+                return 1;
+            return hopLen > 0 ? 2 : 1;
+        })();
+        const cur = nonceNeedBySender.get(addrLower);
+        if (cur)
+            cur.count += perPairTxCount;
+        else
+            nonceNeedBySender.set(addrLower, { wallet: senderWallets[i], count: perPairTxCount });
+    }
+    if (extractProfit && totalProfitNative > 0n) {
+        const cur = nonceNeedBySender.get(firstSenderAddrLower);
+        if (cur)
+            cur.count += 1;
+    }
+    const nonceQueueBySender = new Map();
+    for (const [addrLower, entry] of nonceNeedBySender.entries()) {
+        const count = entry.count;
+        const nonces = (addrLower === firstSenderAddrLower && startNonce !== undefined)
+            ? Array.from({ length: count }, (_, i) => startNonce + i)
+            : await nonceManager.getNextNonceBatch(entry.wallet, count);
+        nonceQueueBySender.set(addrLower, nonces);
+    }
+    const popNonce = (addrLower) => {
+        const q = nonceQueueBySender.get(addrLower);
+        if (!q || q.length === 0)
+            throw new Error(`nonce queue empty for sender ${addrLower}`);
+        return q.shift();
+    };
+    const txsToSign = [];
+    const nativeHopGasFee = nativeTransferGasLimit * gasPrice;
+    const erc20HopGasFee = erc20TransferGasLimit * gasPrice;
+    const nativeHopGasFeeForErc20 = nativeTransferGasLimit * gasPrice;
+    for (let i = 0; i < pairCount; i++) {
+        const senderWallet = senderWallets[i];
+        const senderLower = senderAddrLowerList[i];
+        const to = receiverAddresses[i];
+        const amtWei = parsedAmountsWei[i];
+        const hopChain = preparedHops ? preparedHops[i] : [];
+        if (!hopChain || hopChain.length === 0) {
+            const nonce = popNonce(senderLower);
+            if (isNative) {
+                txsToSign.push({
+                    wallet: senderWallet,
+                    tx: { to, value: amtWei, nonce, gasPrice, gasLimit: nativeGasLimit, chainId: chainIdNum, type: txType }
+                });
+            }
+            else {
+                const data = iface.encodeFunctionData('transfer', [to, amtWei]);
+                txsToSign.push({
+                    wallet: senderWallet,
+                    tx: { to: tokenAddress, data, value: 0n, nonce, gasPrice, gasLimit: finalGasLimit, chainId: chainIdNum, type: txType }
+                });
+            }
+            continue;
+        }
+        const fullChain = [senderWallet, ...hopChain.map(w => new Wallet(typeof w === 'string' ? w : w.privateKey, provider))];
+        const addresses = [...fullChain.map(w => w.address), to];
+        if (isNative) {
+            for (let j = 0; j < addresses.length - 1; j++) {
+                const fromWallet = fullChain[j];
+                const toAddress = addresses[j + 1];
+                const nonce = j === 0 ? popNonce(senderLower) : 0;
+                const remainingHops = addresses.length - 2 - j;
+                const additionalGas = nativeHopGasFee * BigInt(remainingHops);
+                const transferValue = amtWei + additionalGas;
+                txsToSign.push({
+                    wallet: fromWallet,
+                    tx: { to: toAddress, value: transferValue, nonce, gasPrice, gasLimit: nativeTransferGasLimit, chainId: chainIdNum, type: txType }
+                });
+            }
+        }
+        else {
+            // ERC20 多跳：gas + ERC20 逐层传递（与 disperse 一致）
+            const hopGasNeeds = [];
+            for (let j = hopChain.length - 1; j >= 0; j--) {
+                if (j === hopChain.length - 1)
+                    hopGasNeeds.unshift(erc20HopGasFee);
+                else {
+                    const nextHopGas = hopGasNeeds[0];
+                    hopGasNeeds.unshift(nativeHopGasFeeForErc20 + erc20HopGasFee + nextHopGas);
+                }
+            }
+            // sender -> firstHop：转 gas
+            txsToSign.push({
+                wallet: senderWallet,
+                tx: {
+                    to: fullChain[1].address,
+                    value: hopGasNeeds[0],
+                    nonce: popNonce(senderLower),
+                    gasPrice,
+                    gasLimit: nativeTransferGasLimit,
+                    chainId: chainIdNum,
+                    type: txType
+                }
+            });
+            // sender -> firstHop：转 ERC20
+            const mainToFirstHopData = iface.encodeFunctionData('transfer', [fullChain[1].address, amtWei]);
+            txsToSign.push({
+                wallet: senderWallet,
+                tx: {
+                    to: tokenAddress,
+                    data: mainToFirstHopData,
+                    value: 0n,
+                    nonce: popNonce(senderLower),
+                    gasPrice,
+                    gasLimit: erc20TransferGasLimit,
+                    chainId: chainIdNum,
+                    type: txType
+                }
+            });
+            // hop wallets：逐层传递
+            for (let j = 1; j < fullChain.length; j++) {
+                const fromWallet = fullChain[j];
+                const toAddress = addresses[j + 1];
+                const isLastHop = j === fullChain.length - 1;
+                if (!isLastHop) {
+                    const gasToTransfer = hopGasNeeds[j];
+                    txsToSign.push({
+                        wallet: fromWallet,
+                        tx: {
+                            to: toAddress,
+                            value: gasToTransfer,
+                            nonce: 0,
+                            gasPrice,
+                            gasLimit: nativeTransferGasLimit,
+                            chainId: chainIdNum,
+                            type: txType
+                        }
+                    });
+                    const erc20Data = iface.encodeFunctionData('transfer', [toAddress, amtWei]);
+                    txsToSign.push({
+                        wallet: fromWallet,
+                        tx: {
+                            to: tokenAddress,
+                            data: erc20Data,
+                            value: 0n,
+                            nonce: 1,
+                            gasPrice,
+                            gasLimit: erc20TransferGasLimit,
+                            chainId: chainIdNum,
+                            type: txType
+                        }
+                    });
+                }
+                else {
+                    const erc20Data = iface.encodeFunctionData('transfer', [toAddress, amtWei]);
+                    txsToSign.push({
+                        wallet: fromWallet,
+                        tx: {
+                            to: tokenAddress,
+                            data: erc20Data,
+                            value: 0n,
+                            nonce: 0,
+                            gasPrice,
+                            gasLimit: erc20TransferGasLimit,
+                            chainId: chainIdNum,
+                            type: txType
+                        }
+                    });
+                }
+            }
+        }
+    }
+    const signedTxs = await Promise.all(txsToSign.map(({ wallet, tx }) => wallet.signTransaction(tx)));
+    // 利润多跳（固定 2 hop）
+    let profitHopWallets;
+    if (extractProfit && totalProfitNative > 0n) {
+        const firstSenderWallet = senderWallets[0];
+        const profitNonce = popNonce(firstSenderAddrLower);
+        const profitHopResult = await buildProfitHopTransactions({
+            provider,
+            payerWallet: firstSenderWallet,
+            profitAmount: totalProfitNative,
+            profitRecipient: getProfitRecipient(),
+            hopCount: PROFIT_HOP_COUNT,
+            gasPrice,
+            chainId: chainIdNum,
+            txType,
+            startNonce: profitNonce
+        });
+        signedTxs.push(...profitHopResult.signedTransactions);
+        profitHopWallets = profitHopResult.hopWallets;
+    }
+    return {
+        signedTransactions: signedTxs,
+        hopWallets: preparedHops || undefined,
+        profitHopWallets,
+        metadata: extractProfit ? {
+            pairCount,
+            isNative,
+            tokenAddress: isNative ? undefined : tokenAddress,
+            totalAmount: isNative ? ethers.formatEther(totalAmountBeforeProfit) : ethers.formatUnits(totalAmountBeforeProfit, decimals),
+            profitAmount: ethers.formatEther(totalProfitNative),
+            profitRecipient: getProfitRecipient(),
+        } : undefined
+    };
+}

package/dist/flap/portal-bundle-merkle/encryption.d.ts

@@ -0,0 +1,16 @@
+/**
+ * ECDH + AES-GCM 加密工具（浏览器兼容）
+ * 用于将签名交易用服务器公钥加密
+ */
+/**
+ * 用服务器公钥加密签名交易（ECDH + AES-GCM）
+ *
+ * @param signedTransactions 签名后的交易数组
+ * @param publicKeyBase64 服务器提供的公钥（Base64 格式）
+ * @returns JSON 字符串 {e: 临时公钥, i: IV, d: 密文}
+ */
+export declare function encryptWithPublicKey(signedTransactions: string[], publicKeyBase64: string): Promise<string>;
+/**
+ * 验证公钥格式（Base64）
+ */
+export declare function validatePublicKey(publicKeyBase64: string): boolean;

package/dist/flap/portal-bundle-merkle/encryption.js

@@ -0,0 +1,146 @@
+/**
+ * ECDH + AES-GCM 加密工具（浏览器兼容）
+ * 用于将签名交易用服务器公钥加密
+ */
+/**
+ * 获取全局 crypto 对象（最简单直接的方式）
+ */
+function getCryptoAPI() {
+    // 尝试所有可能的全局对象，优先浏览器环境
+    const cryptoObj = (typeof window !== 'undefined' && window.crypto) ||
+        (typeof self !== 'undefined' && self.crypto) ||
+        (typeof global !== 'undefined' && global.crypto) ||
+        (typeof globalThis !== 'undefined' && globalThis.crypto);
+    if (!cryptoObj) {
+        const env = typeof window !== 'undefined' ? 'Browser' : 'Node.js';
+        const protocol = typeof location !== 'undefined' ? location.protocol : 'unknown';
+        throw new Error(`❌ Crypto API 不可用。环境: ${env}, 协议: ${protocol}. ` +
+            '请确保在 HTTPS 或 localhost 下运行');
+    }
+    return cryptoObj;
+}
+/**
+ * 获取 SubtleCrypto（用于加密操作）
+ */
+function getSubtleCrypto() {
+    const crypto = getCryptoAPI();
+    if (!crypto.subtle) {
+        const protocol = typeof location !== 'undefined' ? location.protocol : 'unknown';
+        const hostname = typeof location !== 'undefined' ? location.hostname : 'unknown';
+        throw new Error(`❌ SubtleCrypto API 不可用。协议: ${protocol}, 主机: ${hostname}. ` +
+            '请确保：1) 使用 HTTPS (或 localhost)；2) 浏览器支持 Web Crypto API；' +
+            '3) 不在无痕/隐私浏览模式下');
+    }
+    return crypto.subtle;
+}
+/**
+ * Base64 转 ArrayBuffer（优先使用浏览器 API）
+ */
+function base64ToArrayBuffer(base64) {
+    // 浏览器环境（优先）
+    if (typeof atob !== 'undefined') {
+        const binaryString = atob(base64);
+        const bytes = new Uint8Array(binaryString.length);
+        for (let i = 0; i < binaryString.length; i++) {
+            bytes[i] = binaryString.charCodeAt(i);
+        }
+        return bytes.buffer;
+    }
+    // Node.js 环境（fallback）
+    if (typeof Buffer !== 'undefined') {
+        return Buffer.from(base64, 'base64').buffer;
+    }
+    throw new Error('❌ Base64 解码不可用');
+}
+/**
+ * ArrayBuffer 转 Base64（优先使用浏览器 API）
+ */
+function arrayBufferToBase64(buffer) {
+    // 浏览器环境（优先）
+    if (typeof btoa !== 'undefined') {
+        const bytes = new Uint8Array(buffer);
+        let binary = '';
+        for (let i = 0; i < bytes.length; i++) {
+            binary += String.fromCharCode(bytes[i]);
+        }
+        return btoa(binary);
+    }
+    // Node.js 环境（fallback）
+    if (typeof Buffer !== 'undefined') {
+        return Buffer.from(buffer).toString('base64');
+    }
+    throw new Error('❌ Base64 编码不可用');
+}
+/**
+ * 生成随机 Hex 字符串
+ */
+function randomHex(length) {
+    const crypto = getCryptoAPI();
+    const array = new Uint8Array(length);
+    crypto.getRandomValues(array);
+    return Array.from(array)
+        .map(b => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+/**
+ * 用服务器公钥加密签名交易（ECDH + AES-GCM）
+ *
+ * @param signedTransactions 签名后的交易数组
+ * @param publicKeyBase64 服务器提供的公钥（Base64 格式）
+ * @returns JSON 字符串 {e: 临时公钥, i: IV, d: 密文}
+ */
+export async function encryptWithPublicKey(signedTransactions, publicKeyBase64) {
+    try {
+        // 0. 获取 SubtleCrypto 和 Crypto API
+        const subtle = getSubtleCrypto();
+        const crypto = getCryptoAPI();
+        // 1. 准备数据
+        const payload = {
+            signedTransactions,
+            timestamp: Date.now(),
+            nonce: randomHex(8)
+        };
+        const plaintext = JSON.stringify(payload);
+        // 2. 生成临时 ECDH 密钥对
+        const ephemeralKeyPair = await subtle.generateKey({ name: 'ECDH', namedCurve: 'P-256' }, true, ['deriveKey']);
+        // 3. 导入服务器公钥
+        const publicKeyBuffer = base64ToArrayBuffer(publicKeyBase64);
+        const publicKey = await subtle.importKey('raw', publicKeyBuffer, { name: 'ECDH', namedCurve: 'P-256' }, false, []);
+        // 4. 派生共享密钥（AES-256）
+        const sharedKey = await subtle.deriveKey({ name: 'ECDH', public: publicKey }, ephemeralKeyPair.privateKey, { name: 'AES-GCM', length: 256 }, false, ['encrypt']);
+        // 5. AES-GCM 加密
+        const iv = crypto.getRandomValues(new Uint8Array(12));
+        const encrypted = await subtle.encrypt({ name: 'AES-GCM', iv }, sharedKey, new TextEncoder().encode(plaintext));
+        // 6. 导出临时公钥
+        const ephemeralPublicKeyRaw = await subtle.exportKey('raw', ephemeralKeyPair.publicKey);
+        // 7. 返回加密包（JSON 格式）
+        return JSON.stringify({
+            e: arrayBufferToBase64(ephemeralPublicKeyRaw), // 临时公钥
+            i: arrayBufferToBase64(iv.buffer), // IV
+            d: arrayBufferToBase64(encrypted) // 密文
+        });
+    }
+    catch (error) {
+        throw new Error(`加密失败: ${error?.message || String(error)}`);
+    }
+}
+/**
+ * 验证公钥格式（Base64）
+ */
+export function validatePublicKey(publicKeyBase64) {
+    try {
+        if (!publicKeyBase64)
+            return false;
+        // Base64 字符集验证
+        if (!/^[A-Za-z0-9+/=]+$/.test(publicKeyBase64))
+            return false;
+        // ECDH P-256 公钥固定长度 65 字节（未压缩）
+        // Base64 编码后约 88 字符
+        if (publicKeyBase64.length < 80 || publicKeyBase64.length > 100)
+            return false;
+        return true;
+    }
+    catch {
+        return false;
+    }
+}

package/dist/index.d.ts

@@ -28,7 +28,7 @@ export { createTokenWithBundleBuy as flapCreateTokenWithBundleBuy, batchBuyWithB
 export { fourPrivateBuy, fourPrivateSell, fourBatchPrivateBuy, fourBatchPrivateSell, type FourPrivateBuyParams, type FourPrivateSellParams, type FourBatchPrivateBuyParams, type FourBatchPrivateSellParams } from './contracts/tm-bundle.js';
 export { flapPrivateBuy, flapPrivateSell, flapBatchPrivateBuy, flapBatchPrivateSell, type FlapPrivateBuyParams, type FlapPrivateSellParams, type FlapBatchPrivateBuyParams, type FlapBatchPrivateSellParams, type FlapBatchPrivateSellResult } from './flap/portal-bundle.js';
 export { createTokenWithBundleBuyMerkle as flapCreateTokenWithBundleBuyMerkle, batchBuyWithBundleMerkle as flapBatchBuyWithBundleMerkle, batchSellWithBundleMerkle as flapBatchSellWithBundleMerkle, flapPrivateBuyMerkle, flapPrivateSellMerkle, flapBatchPrivateBuyMerkle, flapBatchPrivateSellMerkle, pancakeProxyBatchBuyMerkle, pancakeProxyBatchSellMerkle, approvePancakeProxy, approvePancakeProxyBatch, flapDisperseWithBundleMerkle, flapSweepWithBundleMerkle, type FlapBundleMerkleConfig, type FlapSignConfig, type FlapChainForMerkleBundle, type FlapCreateWithBundleBuySignParams, type FlapCreateWithBundleBuyMerkleParams, type FlapCreateWithBundleBuyMerkleResult, type FlapBatchBuySignParams, type FlapBatchBuyMerkleParams, type FlapBatchBuyMerkleResult, type FlapBatchSellSignParams, type FlapBatchSellMerkleParams, type FlapBatchSellMerkleResult, type MerkleTransactionStatus, type MerkleBundleStatus, type FlapPrivateBuyMerkleParams, type FlapPrivateSellMerkleParams, type FlapBatchPrivateBuyMerkleParams, type FlapBatchPrivateSellMerkleParams, type FlapBatchPrivateMerkleResult, type FlapPrivateTransactionResult, type PancakeProxyBatchBuyParams, type PancakeProxyBatchBuyResult, type PancakeProxyBatchSellParams, type PancakeProxyBatchSellResult, type PancakeProxyApprovalParams, type PancakeProxyApprovalBatchParams, type PancakeProxyApprovalBatchResult, type FlapDisperseSignParams, type FlapDisperseMerkleResult, type FlapSweepSignParams, type FlapSweepMerkleResult } from './flap/portal-bundle-merkle/index.js';
-export { createTokenWithBundleBuyMerkle as fourCreateTokenWithBundleBuyMerkle, batchBuyWithBundleMerkle as fourBatchBuyWithBundleMerkle, batchSellWithBundleMerkle as fourBatchSellWithBundleMerkle, fourPrivateBuyMerkle, fourPrivateSellMerkle, fourBatchPrivateBuyMerkle, fourBatchPrivateSellMerkle, disperseWithBundleMerkle, sweepWithBundleMerkle, fourPancakeProxyBatchBuyMerkle, fourPancakeProxyBatchSellMerkle, approveFourPancakeProxy, approveFourPancakeProxyBatch, approveFourTokenManagerBatch, submitBundleToMerkle, submitMultipleBundles, submitMultipleBundlesParallel, submitBundleToBlockRazor, submitMultipleBundlesToBlockRazor, submitMultipleBundlesToBlockRazorParallel, type MerkleSubmitConfig, type SubmitBundleResult, type BlockRazorSubmitConfig, type BlockRazorSubmitResult, type FourBundleMerkleConfig, type FourSignConfig, type FourCreateWithBundleBuySignParams, type FourBatchBuySignParams, type FourBatchSellSignParams, type FourPrivateBuySignParams, type FourPrivateSellSignParams, type FourBatchPrivateBuySignParams, type FourBatchPrivateSellSignParams, type FourPancakeProxyBatchBuySignParams, type FourPancakeProxyBatchSellSignParams, type DisperseSignParams as FourDisperseSignParams, type SweepSignParams as FourSweepSignParams, type FourCreateWithBundleBuyMerkleParams, type FourCreateWithBundleBuyMerkleResult, type FourBatchBuyMerkleParams, type FourBatchBuyMerkleResult, type FourBatchSellMerkleParams, type FourBatchSellMerkleResult, type FourPrivateBuyMerkleParams, type FourPrivateSellMerkleParams, type FourBatchPrivateBuyMerkleParams, type FourBatchPrivateSellMerkleParams, type FourBatchPrivateMerkleResult, type FourPrivateTransactionResult, type DisperseMerkleParams, type DisperseMerkleResult, type SweepMerkleParams, type SweepMerkleResult, type FourPancakeProxyBatchBuyParams, type FourPancakeProxyBatchBuyResult, type FourPancakeProxyBatchSellParams, type FourPancakeProxyBatchSellResult, type FourPancakeProxyApprovalParams, type FourPancakeProxyApprovalBatchParams, type FourPancakeProxyApprovalBatchResult, type ApproveFourTokenManagerBatchParams, type ApproveFourTokenManagerBatchResult } from './contracts/tm-bundle-merkle/index.js';
+export { createTokenWithBundleBuyMerkle as fourCreateTokenWithBundleBuyMerkle, batchBuyWithBundleMerkle as fourBatchBuyWithBundleMerkle, batchSellWithBundleMerkle as fourBatchSellWithBundleMerkle, fourPrivateBuyMerkle, fourPrivateSellMerkle, fourBatchPrivateBuyMerkle, fourBatchPrivateSellMerkle, disperseWithBundleMerkle, sweepWithBundleMerkle, pairwiseTransferWithBundleMerkle, fourPancakeProxyBatchBuyMerkle, fourPancakeProxyBatchSellMerkle, approveFourPancakeProxy, approveFourPancakeProxyBatch, approveFourTokenManagerBatch, submitBundleToMerkle, submitMultipleBundles, submitMultipleBundlesParallel, submitBundleToBlockRazor, submitMultipleBundlesToBlockRazor, submitMultipleBundlesToBlockRazorParallel, type MerkleSubmitConfig, type SubmitBundleResult, type BlockRazorSubmitConfig, type BlockRazorSubmitResult, type FourBundleMerkleConfig, type FourSignConfig, type FourCreateWithBundleBuySignParams, type FourBatchBuySignParams, type FourBatchSellSignParams, type FourPrivateBuySignParams, type FourPrivateSellSignParams, type FourBatchPrivateBuySignParams, type FourBatchPrivateSellSignParams, type FourPancakeProxyBatchBuySignParams, type FourPancakeProxyBatchSellSignParams, type DisperseSignParams as FourDisperseSignParams, type SweepSignParams as FourSweepSignParams, type FourCreateWithBundleBuyMerkleParams, type FourCreateWithBundleBuyMerkleResult, type FourBatchBuyMerkleParams, type FourBatchBuyMerkleResult, type FourBatchSellMerkleParams, type FourBatchSellMerkleResult, type FourPrivateBuyMerkleParams, type FourPrivateSellMerkleParams, type FourBatchPrivateBuyMerkleParams, type FourBatchPrivateSellMerkleParams, type FourBatchPrivateMerkleResult, type FourPrivateTransactionResult, type DisperseMerkleParams, type DisperseMerkleResult, type SweepMerkleParams, type SweepMerkleResult, type FourPancakeProxyBatchBuyParams, type FourPancakeProxyBatchBuyResult, type FourPancakeProxyBatchSellParams, type FourPancakeProxyBatchSellResult, type FourPancakeProxyApprovalParams, type FourPancakeProxyApprovalBatchParams, type FourPancakeProxyApprovalBatchResult, type ApproveFourTokenManagerBatchParams, type ApproveFourTokenManagerBatchResult } from './contracts/tm-bundle-merkle/index.js';
 export { PinataClient, type PinataConfig } from './flap/pinata.js';
 export { pinFileToIPFSWithJWT, pinImageByPath, pinFileToIPFSWithJWTWeb, pinDataURLWithJWTWeb, dataURLToBlob, type PinataPinResp } from './flap/pinata.js';
 export { generateWallets, type GeneratedWallet } from './utils/wallet.js';

package/dist/index.js

@@ -47,7 +47,7 @@ export { createTokenWithBundleBuy as flapCreateTokenWithBundleBuy, batchBuyWithB
 export { fourPrivateBuy, fourPrivateSell, fourBatchPrivateBuy, fourBatchPrivateSell } from './contracts/tm-bundle.js';
 export { flapPrivateBuy, flapPrivateSell, flapBatchPrivateBuy, flapBatchPrivateSell } from './flap/portal-bundle.js';
 export { createTokenWithBundleBuyMerkle as flapCreateTokenWithBundleBuyMerkle, batchBuyWithBundleMerkle as flapBatchBuyWithBundleMerkle, batchSellWithBundleMerkle as flapBatchSellWithBundleMerkle, flapPrivateBuyMerkle, flapPrivateSellMerkle, flapBatchPrivateBuyMerkle, flapBatchPrivateSellMerkle, pancakeProxyBatchBuyMerkle, pancakeProxyBatchSellMerkle, approvePancakeProxy, approvePancakeProxyBatch, flapDisperseWithBundleMerkle, flapSweepWithBundleMerkle } from './flap/portal-bundle-merkle/index.js';
-export { createTokenWithBundleBuyMerkle as fourCreateTokenWithBundleBuyMerkle, batchBuyWithBundleMerkle as fourBatchBuyWithBundleMerkle, batchSellWithBundleMerkle as fourBatchSellWithBundleMerkle, fourPrivateBuyMerkle, fourPrivateSellMerkle, fourBatchPrivateBuyMerkle, fourBatchPrivateSellMerkle, disperseWithBundleMerkle, sweepWithBundleMerkle, fourPancakeProxyBatchBuyMerkle, fourPancakeProxyBatchSellMerkle, approveFourPancakeProxy, approveFourPancakeProxyBatch, approveFourTokenManagerBatch, submitBundleToMerkle, submitMultipleBundles, submitMultipleBundlesParallel, submitBundleToBlockRazor, submitMultipleBundlesToBlockRazor, submitMultipleBundlesToBlockRazorParallel } from './contracts/tm-bundle-merkle/index.js';
+export { createTokenWithBundleBuyMerkle as fourCreateTokenWithBundleBuyMerkle, batchBuyWithBundleMerkle as fourBatchBuyWithBundleMerkle, batchSellWithBundleMerkle as fourBatchSellWithBundleMerkle, fourPrivateBuyMerkle, fourPrivateSellMerkle, fourBatchPrivateBuyMerkle, fourBatchPrivateSellMerkle, disperseWithBundleMerkle, sweepWithBundleMerkle, pairwiseTransferWithBundleMerkle, fourPancakeProxyBatchBuyMerkle, fourPancakeProxyBatchSellMerkle, approveFourPancakeProxy, approveFourPancakeProxyBatch, approveFourTokenManagerBatch, submitBundleToMerkle, submitMultipleBundles, submitMultipleBundlesParallel, submitBundleToBlockRazor, submitMultipleBundlesToBlockRazor, submitMultipleBundlesToBlockRazorParallel } from './contracts/tm-bundle-merkle/index.js';
 export { PinataClient } from './flap/pinata.js';
 export { pinFileToIPFSWithJWT, pinImageByPath, pinFileToIPFSWithJWTWeb, pinDataURLWithJWTWeb, dataURLToBlob } from './flap/pinata.js';
 export { generateWallets } from './utils/wallet.js';

package/dist/utils/concurrency.d.ts

@@ -0,0 +1,5 @@
+/**
+ * 并发映射工具（SDK 内部使用）
+ * - 用于将可并行的异步任务按并发上限执行，避免 RPC/Bundler 限流或超时
+ */
+export declare function mapWithConcurrency<T, R>(items: T[], limit: number, fn: (item: T, idx: number) => Promise<R>): Promise<R[]>;

package/dist/utils/concurrency.js

@@ -0,0 +1,19 @@
+/**
+ * 并发映射工具（SDK 内部使用）
+ * - 用于将可并行的异步任务按并发上限执行，避免 RPC/Bundler 限流或超时
+ */
+export async function mapWithConcurrency(items, limit, fn) {
+    const res = new Array(items.length);
+    let idx = 0;
+    const n = Math.max(1, Math.min(Number(limit || 1), items.length || 1));
+    const workers = Array.from({ length: n }).map(async () => {
+        while (true) {
+            const i = idx++;
+            if (i >= items.length)
+                return;
+            res[i] = await fn(items[i], i);
+        }
+    });
+    await Promise.all(workers);
+    return res;
+}

package/dist/xlayer/aa-account.d.ts

@@ -21,6 +21,7 @@ import { BundlerClient } from './bundler.js';
  */
 export declare class AAAccountManager {
     private provider;
+    private rpcUrl;
     private chainId;
     private factory;
     private entryPoint;
@@ -31,6 +32,7 @@ export declare class AAAccountManager {
     private paymaster?;
     private paymasterData?;
     private gasLimitMultiplier;
+    private senderCache;
     constructor(config?: XLayerConfig);
     /**
      * 获取 Provider
@@ -60,6 +62,14 @@ export declare class AAAccountManager {
      * @returns 预测的 Sender 地址
      */
     predictSenderAddress(ownerAddress: string, salt?: bigint): Promise<string>;
+    private rpcBatch;
+    private multicallAggregate3;
+    private predictSendersByOwnersFast;
+    /**
+     * 批量预测 Sender 地址（只做地址预测，不额外查询 nonce/balance/code）
+     * - 用于“生成/导入钱包”场景：更快、更省 RPC
+     */
+    predictSendersBatch(ownerAddresses: string[], salt?: bigint): Promise<string[]>;
     /**
      * 获取完整的 AA 账户信息
      */