four-flap-meme-sdk 1.5.24 → 1.5.25

package/dist/xlayer/aa-account.d.ts

@@ -8,7 +8,7 @@
  * - initCode 生成
  */
 import { ethers, JsonRpcProvider, Wallet, Contract } from 'ethers';
-import type { UserOperation, SignedUserOp, AAAccount, XLayerConfig } from './types.js';
+import type { UserOperation, SignedUserOp, AAAccount, XLayerConfig, GasPolicy, FixedGasConfig } from './types.js';
 import { BundlerClient } from './bundler.js';
 /**
  * AA 账户管理器
@@ -33,6 +33,11 @@ export declare class AAAccountManager {
     private paymasterData?;
     private gasLimitMultiplier;
     private senderCache;
+    private deployedSenderSet;
+    private feeDataCache?;
+    private readonly feeDataCacheTtlMs;
+    private defaultGasPolicy?;
+    private defaultFixedGas?;
     constructor(config?: XLayerConfig);
     /**
      * 获取 Provider
@@ -127,6 +132,23 @@ export declare class AAAccountManager {
         userOp: UserOperation;
         prefundWei: bigint;
     }>;
+    /**
+     * 构建未签名的 UserOperation（固定 Gas，不做任何 estimate）
+     *
+     * 适用于大规模（1000 地址）场景：尽量减少 RPC 调用量。
+     */
+    buildUserOpWithFixedGas(params: {
+        ownerWallet: Wallet;
+        sender: string;
+        callData: string;
+        nonce: bigint;
+        initCode?: string;
+        deployed?: boolean;
+        fixedGas?: FixedGasConfig;
+    }): Promise<{
+        userOp: UserOperation;
+        prefundWei: bigint;
+    }>;
     /**
      * 签名 UserOperation
      */
@@ -138,6 +160,8 @@ export declare class AAAccountManager {
         ownerWallet: Wallet;
         callData: string;
         value?: bigint;
+        gasPolicy?: GasPolicy;
+        fixedGas?: FixedGasConfig;
         useBundlerEstimate?: boolean;
         callGasLimit?: bigint;
     }): Promise<SignedUserOp>;
@@ -159,6 +183,13 @@ export declare class AAAccountManager {
      */
     getMultipleAccountInfo(ownerAddresses: string[]): Promise<AAAccount[]>;
 }
+/**
+ * ERC-4337 v0.6 userOpHash 本地计算
+ *
+ * pack 规则（v0.6）：对 (sender,nonce,keccak(initCode),keccak(callData),callGasLimit,verificationGasLimit,preVerificationGas,maxFeePerGas,maxPriorityFeePerGas,keccak(paymasterAndData))
+ * 做 abi.encode 后 keccak 得到 packHash；再 abi.encode(packHash, entryPoint, chainId) 后 keccak 得到 userOpHash。
+ */
+export declare function computeUserOpHashV06(userOp: UserOperation, entryPoint: string, chainId: number | bigint): string;
 /**
  * 编码 SimpleAccount.execute 调用
  */

package/dist/xlayer/aa-account.js

@@ -8,7 +8,7 @@
  * - initCode 生成
  */
 import { ethers, JsonRpcProvider, Wallet, Contract, Interface } from 'ethers';
-import { XLAYER_CHAIN_ID, DEFAULT_RPC_URL, ENTRYPOINT_V06, SIMPLE_ACCOUNT_FACTORY, DEFAULT_SALT, DEFAULT_GAS_PRICE, GAS_LIMIT_MULTIPLIER, VERIFICATION_GAS_LIMIT_DEPLOY, VERIFICATION_GAS_LIMIT_NORMAL, PRE_VERIFICATION_GAS, FACTORY_ABI, ENTRYPOINT_ABI, SIMPLE_ACCOUNT_ABI, ZERO_ADDRESS, MULTICALL3, } from './constants.js';
+import { XLAYER_CHAIN_ID, DEFAULT_RPC_URL, ENTRYPOINT_V06, SIMPLE_ACCOUNT_FACTORY, DEFAULT_SALT, DEFAULT_GAS_PRICE, DEFAULT_CALL_GAS_LIMIT_SELL, GAS_LIMIT_MULTIPLIER, VERIFICATION_GAS_LIMIT_DEPLOY, VERIFICATION_GAS_LIMIT_NORMAL, PRE_VERIFICATION_GAS, FACTORY_ABI, ENTRYPOINT_ABI, SIMPLE_ACCOUNT_ABI, ZERO_ADDRESS, MULTICALL3, } from './constants.js';
 import { BundlerClient } from './bundler.js';
 import { mapWithConcurrency } from '../utils/concurrency.js';
 // ============================================================================
@@ -26,12 +26,16 @@ import { mapWithConcurrency } from '../utils/concurrency.js';
 export class AAAccountManager {
     constructor(config = {}) {
         this.senderCache = new Map(); // key: ownerLower -> sender
+        // PERF: 本文件的改造会尽量减少逐地址 RPC 调用
+        this.deployedSenderSet = new Set(); // key: senderLower（只缓存 deployed=true）
+        this.feeDataCacheTtlMs = 1200;
         this.chainId = config.chainId ?? XLAYER_CHAIN_ID;
         const rpcUrl = config.rpcUrl ?? DEFAULT_RPC_URL;
         this.rpcUrl = rpcUrl;
-        this.provider = new JsonRpcProvider(rpcUrl, {
-            chainId: this.chainId,
-            name: 'xlayer',
+        this.provider = new JsonRpcProvider(rpcUrl, { chainId: this.chainId, name: 'xlayer' }, {
+            // 防止 ethers 自动攒太大的 JSON-RPC batch（XLayer 节点对“大 batch”很敏感）
+            batchMaxCount: 20,
+            batchStallTime: 30,
         });
         this.factoryAddress = config.factory ?? SIMPLE_ACCOUNT_FACTORY;
         this.entryPointAddress = config.entryPoint ?? ENTRYPOINT_V06;
@@ -39,6 +43,9 @@ export class AAAccountManager {
         this.paymaster = config.paymaster;
         this.paymasterData = config.paymasterData;
         this.gasLimitMultiplier = config.gasLimitMultiplier ?? GAS_LIMIT_MULTIPLIER;
+        // 默认 fixed：最大化降低 RPC / bundler 请求；如需更稳可显式传 bundlerEstimate
+        this.defaultGasPolicy = config.gasPolicy ?? 'fixed';
+        this.defaultFixedGas = config.fixedGas;
         this.factory = new Contract(this.factoryAddress, FACTORY_ABI, this.provider);
         this.entryPoint = new Contract(this.entryPointAddress, ENTRYPOINT_ABI, this.provider);
         this.bundler = new BundlerClient({
@@ -76,7 +83,14 @@ export class AAAccountManager {
      * 获取当前 Fee Data
      */
     async getFeeData() {
-        return await this.provider.getFeeData();
+        // 费率在“批量构建 userOp”时会被大量复用；加短 TTL 缓存可显著减少 RPC
+        const now = Date.now();
+        const hit = this.feeDataCache;
+        if (hit && hit.expiresAt > now)
+            return hit.value;
+        const value = await this.provider.getFeeData();
+        this.feeDataCache = { expiresAt: now + this.feeDataCacheTtlMs, value };
+        return value;
     }
     /**
      * 预测 AA Sender 地址
@@ -275,7 +289,7 @@ export class AAAccountManager {
      * 构建未签名的 UserOperation（使用 Bundler 估算 Gas）
      */
     async buildUserOpWithBundlerEstimate(params) {
-        const feeData = await this.provider.getFeeData();
+        const feeData = await this.getFeeData();
         const legacyGasPrice = feeData.gasPrice ?? feeData.maxFeePerGas ?? DEFAULT_GAS_PRICE;
         const paymasterAndData = this.buildPaymasterAndData();
         // 构建初步 UserOp（Gas 字段为 0，等待估算）
@@ -324,7 +338,7 @@ export class AAAccountManager {
         if (params.ops.length === 0) {
             return { userOps: [], prefundWeis: [] };
         }
-        const feeData = await this.provider.getFeeData();
+        const feeData = await this.getFeeData();
         const legacyGasPrice = feeData.gasPrice ?? feeData.maxFeePerGas ?? DEFAULT_GAS_PRICE;
         const paymasterAndData = this.buildPaymasterAndData();
         // 先构建 skeleton（Gas=0），然后批量估算
@@ -375,7 +389,7 @@ export class AAAccountManager {
      * 适用于无法通过 Bundler 估算的场景（如尚未授权的 sell 操作）
      */
     async buildUserOpWithLocalEstimate(params) {
-        const feeData = await this.provider.getFeeData();
+        const feeData = await this.getFeeData();
         const legacyGasPrice = feeData.gasPrice ?? feeData.maxFeePerGas ?? DEFAULT_GAS_PRICE;
         const paymasterAndData = this.buildPaymasterAndData();
         // 估算 callGasLimit
@@ -417,11 +431,43 @@ export class AAAccountManager {
         const prefundWei = paymasterAndData !== '0x' ? 0n : gasTotal * legacyGasPrice;
         return { userOp, prefundWei };
     }
+    /**
+     * 构建未签名的 UserOperation（固定 Gas，不做任何 estimate）
+     *
+     * 适用于大规模（1000 地址）场景：尽量减少 RPC 调用量。
+     */
+    async buildUserOpWithFixedGas(params) {
+        const feeData = await this.getFeeData();
+        const legacyGasPrice = feeData.gasPrice ?? feeData.maxFeePerGas ?? DEFAULT_GAS_PRICE;
+        const paymasterAndData = this.buildPaymasterAndData();
+        const callGasLimit = params.fixedGas?.callGasLimit ?? DEFAULT_CALL_GAS_LIMIT_SELL;
+        const verificationGasLimit = params.deployed
+            ? (params.fixedGas?.verificationGasLimitDeployed ?? VERIFICATION_GAS_LIMIT_NORMAL)
+            : (params.fixedGas?.verificationGasLimitUndeployed ?? VERIFICATION_GAS_LIMIT_DEPLOY);
+        const preVerificationGas = params.fixedGas?.preVerificationGas ?? PRE_VERIFICATION_GAS;
+        const userOp = {
+            sender: params.sender,
+            nonce: ethers.toBeHex(params.nonce),
+            initCode: params.initCode ?? '0x',
+            callData: params.callData,
+            callGasLimit: ethers.toBeHex(callGasLimit),
+            verificationGasLimit: ethers.toBeHex(verificationGasLimit),
+            preVerificationGas: ethers.toBeHex(preVerificationGas),
+            // XLayer 更像 legacy gasPrice 语义
+            maxFeePerGas: ethers.toBeHex(legacyGasPrice),
+            maxPriorityFeePerGas: ethers.toBeHex(legacyGasPrice),
+            paymasterAndData,
+            signature: '0x',
+        };
+        const gasTotal = callGasLimit + verificationGasLimit + preVerificationGas;
+        const prefundWei = paymasterAndData !== '0x' ? 0n : gasTotal * legacyGasPrice;
+        return { userOp, prefundWei };
+    }
     /**
      * 签名 UserOperation
      */
     async signUserOp(userOp, ownerWallet) {
-        const userOpHash = await this.entryPoint.getUserOpHash(userOp);
+        const userOpHash = computeUserOpHashV06(userOp, this.entryPointAddress, this.chainId);
         const signature = await ownerWallet.signMessage(ethers.getBytes(userOpHash));
         return {
             userOp: { ...userOp, signature },
@@ -446,7 +492,25 @@ export class AAAccountManager {
         };
         let userOp;
         let prefundWei;
-        if (params.useBundlerEstimate !== false) {
+        const policy = params.gasPolicy ??
+            this.defaultGasPolicy ??
+            (params.useBundlerEstimate === false ? 'localEstimate' : 'bundlerEstimate');
+        if (policy === 'fixed') {
+            const fixedGasMerged = {
+                ...(this.defaultFixedGas ?? {}),
+                ...(params.fixedGas ?? {}),
+                ...(params.callGasLimit ? { callGasLimit: params.callGasLimit } : {}),
+            };
+            const fixedGas = Object.keys(fixedGasMerged).length > 0 ? fixedGasMerged : undefined;
+            const result = await this.buildUserOpWithFixedGas({
+                ...buildParams,
+                deployed: accountInfo.deployed,
+                fixedGas,
+            });
+            userOp = result.userOp;
+            prefundWei = result.prefundWei;
+        }
+        else if (policy === 'bundlerEstimate') {
             const result = await this.buildUserOpWithBundlerEstimate(buildParams);
             userOp = result.userOp;
             prefundWei = result.prefundWei;
@@ -520,59 +584,133 @@ export class AAAccountManager {
                 catch { /* ignore */ }
             }
         }
-        // 3) 批量 getCode + getBalance（JSON-RPC batch；分块避免请求体过大）
-        const codes = new Array(senders.length).fill('0x');
-        const balances = new Array(senders.length).fill(0n);
-        const CHUNK = 200;
-        for (let cursor = 0; cursor < senders.length; cursor += CHUNK) {
-            const slice = senders.slice(cursor, cursor + CHUNK);
-            try {
-                const reqs = [];
-                for (const s of slice) {
-                    reqs.push({ method: 'eth_getCode', params: [s, 'latest'] });
+        // 3) deployed(getCode)：小分片 + 并发上限 + 缓存 deployed=true，避免 -32014 “batch request too many”
+        const deployed = new Array(senders.length).fill(false);
+        const needCode = [];
+        for (let i = 0; i < senders.length; i++) {
+            const sender = senders[i];
+            const key = sender.toLowerCase();
+            if (this.deployedSenderSet.has(key)) {
+                deployed[i] = true;
+                continue;
+            }
+            needCode.push({ idx: i, sender, key });
+        }
+        if (needCode.length > 0) {
+            const CHUNK = 20;
+            const chunks = [];
+            for (let c = 0; c < needCode.length; c += CHUNK)
+                chunks.push(needCode.slice(c, c + CHUNK));
+            const batchResults = await mapWithConcurrency(chunks, 2, async (chunk) => {
+                try {
+                    const reqs = chunk.map((x) => ({ method: 'eth_getCode', params: [x.sender, 'latest'] }));
+                    const codes = await this.rpcBatch(reqs);
+                    return { ok: true, chunk, codes };
                 }
-                for (const s of slice) {
-                    reqs.push({ method: 'eth_getBalance', params: [s, 'latest'] });
+                catch (err) {
+                    return { ok: false, chunk, err };
                 }
-                const results = await this.rpcBatch(reqs);
-                const codePart = results.slice(0, slice.length);
-                const balPart = results.slice(slice.length);
-                for (let i = 0; i < slice.length; i++) {
-                    const idx = cursor + i;
-                    const c = codePart[i];
-                    const b = balPart[i];
-                    if (typeof c === 'string')
-                        codes[idx] = c;
-                    try {
-                        balances[idx] = typeof b === 'string' ? BigInt(b) : 0n;
-                    }
-                    catch {
-                        balances[idx] = 0n;
+            });
+            for (const r of batchResults) {
+                if (r.ok) {
+                    for (let i = 0; i < r.chunk.length; i++) {
+                        const it = r.chunk[i];
+                        const code = r.codes[i];
+                        const isDeployed = !!code && code !== '0x';
+                        deployed[it.idx] = isDeployed;
+                        if (isDeployed)
+                            this.deployedSenderSet.add(it.key);
                     }
+                    continue;
                 }
-            }
-            catch {
-                // fallback：节点不支持 batch 时，改为并发单请求（控制并发）
-                const fetched = await mapWithConcurrency(slice, 8, async (s) => {
-                    const [code, bal] = await Promise.all([this.provider.getCode(s), this.provider.getBalance(s)]);
-                    return { s, code, bal };
+                // fallback：单请求但受控并发
+                const fetched = await mapWithConcurrency(r.chunk, 4, async (it) => {
+                    const code = await this.provider.getCode(it.sender);
+                    return { it, code };
                 });
-                for (let i = 0; i < fetched.length; i++) {
+                for (const f of fetched) {
+                    const isDeployed = !!f.code && f.code !== '0x';
+                    deployed[f.it.idx] = isDeployed;
+                    if (isDeployed)
+                        this.deployedSenderSet.add(f.it.key);
+                }
+            }
+        }
+        // 4) balance(getEthBalance)：用 Multicall3.getEthBalance 分片批量查询 OKB（减少 N 次 eth_getBalance）
+        const balances = new Array(senders.length).fill(0n);
+        const ethBalIface = new Interface(['function getEthBalance(address addr) view returns (uint256)']);
+        const balCalls = senders.map((sender) => ({
+            target: MULTICALL3,
+            allowFailure: true,
+            callData: ethBalIface.encodeFunctionData('getEthBalance', [sender]),
+        }));
+        const BAL_BATCH = 300;
+        try {
+            for (let cursor = 0; cursor < balCalls.length; cursor += BAL_BATCH) {
+                const sliceCalls = balCalls.slice(cursor, cursor + BAL_BATCH);
+                const res = await this.multicallAggregate3({ calls: sliceCalls });
+                for (let i = 0; i < res.length; i++) {
+                    const r = res[i];
                     const idx = cursor + i;
-                    codes[idx] = fetched[i].code ?? '0x';
-                    balances[idx] = fetched[i].bal ?? 0n;
+                    if (!r?.success || !r.returnData || r.returnData === '0x')
+                        continue;
+                    try {
+                        const decoded = ethBalIface.decodeFunctionResult('getEthBalance', r.returnData);
+                        balances[idx] = BigInt(decoded?.[0] ?? 0n);
+                    }
+                    catch { /* ignore */ }
                 }
             }
         }
+        catch {
+            const fetched = await mapWithConcurrency(senders, 6, async (s) => await this.provider.getBalance(s));
+            for (let i = 0; i < fetched.length; i++)
+                balances[i] = fetched[i] ?? 0n;
+        }
         return owners.map((owner, i) => ({
             owner,
             sender: senders[i],
-            deployed: codes[i] != null && String(codes[i]) !== '0x',
+            deployed: deployed[i] ?? false,
             balance: balances[i] ?? 0n,
             nonce: nonces[i] ?? 0n,
         }));
     }
 }
+/**
+ * ERC-4337 v0.6 userOpHash 本地计算
+ *
+ * pack 规则（v0.6）：对 (sender,nonce,keccak(initCode),keccak(callData),callGasLimit,verificationGasLimit,preVerificationGas,maxFeePerGas,maxPriorityFeePerGas,keccak(paymasterAndData))
+ * 做 abi.encode 后 keccak 得到 packHash；再 abi.encode(packHash, entryPoint, chainId) 后 keccak 得到 userOpHash。
+ */
+export function computeUserOpHashV06(userOp, entryPoint, chainId) {
+    const coder = ethers.AbiCoder.defaultAbiCoder();
+    const packed = coder.encode([
+        'address',
+        'uint256',
+        'bytes32',
+        'bytes32',
+        'uint256',
+        'uint256',
+        'uint256',
+        'uint256',
+        'uint256',
+        'bytes32',
+    ], [
+        userOp.sender,
+        BigInt(userOp.nonce),
+        ethers.keccak256(userOp.initCode ?? '0x'),
+        ethers.keccak256(userOp.callData ?? '0x'),
+        BigInt(userOp.callGasLimit),
+        BigInt(userOp.verificationGasLimit),
+        BigInt(userOp.preVerificationGas),
+        BigInt(userOp.maxFeePerGas),
+        BigInt(userOp.maxPriorityFeePerGas),
+        ethers.keccak256(userOp.paymasterAndData ?? '0x'),
+    ]);
+    const packHash = ethers.keccak256(packed);
+    const enc = coder.encode(['bytes32', 'address', 'uint256'], [packHash, entryPoint, BigInt(chainId)]);
+    return ethers.keccak256(enc);
+}
 // ============================================================================
 // 工具函数
 // ============================================================================

package/dist/xlayer/bundle.js

@@ -67,6 +67,11 @@ class AANonceMap {
 // ============================================================================
 // 捆绑交易执行器
 // ============================================================================
+// 固定 gas（用于大规模减少 RPC）；具体值允许通过 config.fixedGas 覆盖
+const DEFAULT_CALL_GAS_LIMIT_BUY = DEFAULT_CALL_GAS_LIMIT_SELL; // buy 与 sell 共享一个保守值
+const DEFAULT_CALL_GAS_LIMIT_APPROVE = 200000n;
+const DEFAULT_CALL_GAS_LIMIT_TRANSFER = 150000n;
+const DEFAULT_CALL_GAS_LIMIT_WITHDRAW = 120000n;
 /**
  * XLayer 捆绑交易执行器
  *
@@ -161,14 +166,27 @@ export class BundleExecutor {
         const callData = encodeExecute(this.portalAddress, buyAmountWei, swapData);
         // 估算前确保 sender 有足够余额（用于模拟）
         await this.aaManager.ensureSenderBalance(ownerWallet, accountInfo.sender, buyAmountWei + parseOkb('0.0003'), `${ownerName ?? 'owner'}/buy-prefund-before-estimate`);
-        // 使用 Bundler 估算
-        const { userOp, prefundWei } = await this.aaManager.buildUserOpWithBundlerEstimate({
-            ownerWallet,
-            sender: accountInfo.sender,
-            callData,
-            nonce: accountInfo.nonce,
-            initCode,
-        });
+        const gasPolicy = this.config.gasPolicy ?? 'bundlerEstimate';
+        const { userOp, prefundWei } = gasPolicy === 'fixed'
+            ? await this.aaManager.buildUserOpWithFixedGas({
+                ownerWallet,
+                sender: accountInfo.sender,
+                callData,
+                nonce: accountInfo.nonce,
+                initCode,
+                deployed: accountInfo.deployed,
+                fixedGas: {
+                    ...(this.config.fixedGas ?? {}),
+                    callGasLimit: this.config.fixedGas?.callGasLimit ?? DEFAULT_CALL_GAS_LIMIT_BUY,
+                },
+            })
+            : await this.aaManager.buildUserOpWithBundlerEstimate({
+                ownerWallet,
+                sender: accountInfo.sender,
+                callData,
+                nonce: accountInfo.nonce,
+                initCode,
+            });
         // 补足 prefund + 买入金额
         await this.aaManager.ensureSenderBalance(ownerWallet, accountInfo.sender, buyAmountWei + prefundWei + parseOkb('0.0002'), `${ownerName ?? 'owner'}/buy-fund`);
         // 签名
@@ -186,13 +204,27 @@ export class BundleExecutor {
         const approveData = encodeApproveCall(spender);
         const callData = encodeExecute(tokenAddress, 0n, approveData);
         await this.aaManager.ensureSenderBalance(ownerWallet, sender, parseOkb('0.0002'), `${ownerName ?? 'owner'}/approve-prefund`);
-        const { userOp, prefundWei } = await this.aaManager.buildUserOpWithLocalEstimate({
-            ownerWallet,
-            sender,
-            callData,
-            nonce,
-            initCode,
-        });
+        const gasPolicy = this.config.gasPolicy ?? 'bundlerEstimate';
+        const { userOp, prefundWei } = gasPolicy === 'fixed'
+            ? await this.aaManager.buildUserOpWithFixedGas({
+                ownerWallet,
+                sender,
+                callData,
+                nonce,
+                initCode,
+                deployed: initCode === '0x',
+                fixedGas: {
+                    ...(this.config.fixedGas ?? {}),
+                    callGasLimit: this.config.fixedGas?.callGasLimit ?? DEFAULT_CALL_GAS_LIMIT_APPROVE,
+                },
+            })
+            : await this.aaManager.buildUserOpWithLocalEstimate({
+                ownerWallet,
+                sender,
+                callData,
+                nonce,
+                initCode,
+            });
         await this.aaManager.ensureSenderBalance(ownerWallet, sender, prefundWei + parseOkb('0.00005'), `${ownerName ?? 'owner'}/approve-fund`);
         const signed = await this.aaManager.signUserOp(userOp, ownerWallet);
         return { ...signed, prefundWei, ownerName };
@@ -204,23 +236,37 @@ export class BundleExecutor {
         const sellData = encodeSellCall(tokenAddress, sellAmount, 0n);
         const callData = encodeExecute(this.portalAddress, 0n, sellData);
         await this.aaManager.ensureSenderBalance(ownerWallet, sender, parseOkb('0.0003'), `${ownerName ?? 'owner'}/sell-prefund`);
-        // 如果需要 approve（还未执行），estimateGas 会 revert，使用固定值
-        const { userOp, prefundWei } = needApprove
-            ? await this.aaManager.buildUserOpWithLocalEstimate({
+        const gasPolicy = this.config.gasPolicy ?? 'bundlerEstimate';
+        // 如果需要 approve（还未执行），estimateGas 可能 revert；因此默认就用固定 callGasLimit
+        const { userOp, prefundWei } = gasPolicy === 'fixed'
+            ? await this.aaManager.buildUserOpWithFixedGas({
                 ownerWallet,
                 sender,
                 callData,
                 nonce,
                 initCode,
-                callGasLimit: DEFAULT_CALL_GAS_LIMIT_SELL,
+                deployed: initCode === '0x',
+                fixedGas: {
+                    ...(this.config.fixedGas ?? {}),
+                    callGasLimit: this.config.fixedGas?.callGasLimit ?? DEFAULT_CALL_GAS_LIMIT_SELL,
+                },
             })
-            : await this.aaManager.buildUserOpWithLocalEstimate({
-                ownerWallet,
-                sender,
-                callData,
-                nonce,
-                initCode,
-            });
+            : needApprove
+                ? await this.aaManager.buildUserOpWithLocalEstimate({
+                    ownerWallet,
+                    sender,
+                    callData,
+                    nonce,
+                    initCode,
+                    callGasLimit: DEFAULT_CALL_GAS_LIMIT_SELL,
+                })
+                : await this.aaManager.buildUserOpWithLocalEstimate({
+                    ownerWallet,
+                    sender,
+                    callData,
+                    nonce,
+                    initCode,
+                });
         await this.aaManager.ensureSenderBalance(ownerWallet, sender, prefundWei + parseOkb('0.00005'), `${ownerName ?? 'owner'}/sell-fund`);
         const signed = await this.aaManager.signUserOp(userOp, ownerWallet);
         return { ...signed, prefundWei, ownerName };
@@ -255,13 +301,27 @@ export class BundleExecutor {
         // 先估算 prefund（使用空调用）
         const tempCallData = encodeExecute(params.ownerWallet.address, 0n, '0x');
         await this.aaManager.ensureSenderBalance(params.ownerWallet, params.sender, parseOkb('0.0002'), `${params.ownerName ?? 'owner'}/withdraw-prefund`);
-        const { prefundWei } = await this.aaManager.buildUserOpWithLocalEstimate({
-            ownerWallet: params.ownerWallet,
-            sender: params.sender,
-            callData: tempCallData,
-            nonce: params.nonce,
-            initCode: params.initCode,
-        });
+        const gasPolicy = this.config.gasPolicy ?? 'bundlerEstimate';
+        const { prefundWei } = gasPolicy === 'fixed'
+            ? await this.aaManager.buildUserOpWithFixedGas({
+                ownerWallet: params.ownerWallet,
+                sender: params.sender,
+                callData: tempCallData,
+                nonce: params.nonce,
+                initCode: params.initCode,
+                deployed: params.initCode === '0x',
+                fixedGas: {
+                    ...(this.config.fixedGas ?? {}),
+                    callGasLimit: this.config.fixedGas?.callGasLimit ?? DEFAULT_CALL_GAS_LIMIT_WITHDRAW,
+                },
+            })
+            : await this.aaManager.buildUserOpWithLocalEstimate({
+                ownerWallet: params.ownerWallet,
+                sender: params.sender,
+                callData: tempCallData,
+                nonce: params.nonce,
+                initCode: params.initCode,
+            });
         // 计算可归集金额（用已知余额近似；fund 发生时余额会变大，属于可接受的保守近似）
         const withdrawAmount = senderBalance > prefundWei + params.reserveWei
             ? senderBalance - prefundWei - params.reserveWei
@@ -271,13 +331,26 @@ export class BundleExecutor {
             return null;
         }
         const callData = encodeExecute(params.ownerWallet.address, withdrawAmount, '0x');
-        const { userOp } = await this.aaManager.buildUserOpWithLocalEstimate({
-            ownerWallet: params.ownerWallet,
-            sender: params.sender,
-            callData,
-            nonce: params.nonce,
-            initCode: params.initCode,
-        });
+        const { userOp } = gasPolicy === 'fixed'
+            ? await this.aaManager.buildUserOpWithFixedGas({
+                ownerWallet: params.ownerWallet,
+                sender: params.sender,
+                callData,
+                nonce: params.nonce,
+                initCode: params.initCode,
+                deployed: params.initCode === '0x',
+                fixedGas: {
+                    ...(this.config.fixedGas ?? {}),
+                    callGasLimit: this.config.fixedGas?.callGasLimit ?? DEFAULT_CALL_GAS_LIMIT_WITHDRAW,
+                },
+            })
+            : await this.aaManager.buildUserOpWithLocalEstimate({
+                ownerWallet: params.ownerWallet,
+                sender: params.sender,
+                callData,
+                nonce: params.nonce,
+                initCode: params.initCode,
+            });
         console.log(`\n[${params.ownerName ?? 'owner'}] withdraw: ${formatOkb(withdrawAmount)} OKB`);
         const signed = await this.aaManager.signUserOp(userOp, params.ownerWallet);
         return { ...signed, prefundWei, ownerName: params.ownerName };
@@ -295,12 +368,26 @@ export class BundleExecutor {
         const transferData = encodeTransferCall(ownerWallet.address, tokenBalance);
         const callData = encodeExecute(tokenAddress, 0n, transferData);
         await this.aaManager.ensureSenderBalance(ownerWallet, accountInfo.sender, parseOkb('0.0002'), `${ownerName ?? 'owner'}/transfer-prefund`);
-        const { userOp, prefundWei } = await this.aaManager.buildUserOpWithBundlerEstimate({
-            ownerWallet,
-            sender: accountInfo.sender,
-            callData,
-            nonce: accountInfo.nonce,
-        });
+        const gasPolicy = this.config.gasPolicy ?? 'bundlerEstimate';
+        const { userOp, prefundWei } = gasPolicy === 'fixed'
+            ? await this.aaManager.buildUserOpWithFixedGas({
+                ownerWallet,
+                sender: accountInfo.sender,
+                callData,
+                nonce: accountInfo.nonce,
+                initCode: accountInfo.deployed ? '0x' : this.aaManager.generateInitCode(ownerWallet.address),
+                deployed: accountInfo.deployed,
+                fixedGas: {
+                    ...(this.config.fixedGas ?? {}),
+                    callGasLimit: this.config.fixedGas?.callGasLimit ?? DEFAULT_CALL_GAS_LIMIT_TRANSFER,
+                },
+            })
+            : await this.aaManager.buildUserOpWithBundlerEstimate({
+                ownerWallet,
+                sender: accountInfo.sender,
+                callData,
+                nonce: accountInfo.nonce,
+            });
         await this.aaManager.ensureSenderBalance(ownerWallet, accountInfo.sender, prefundWei + parseOkb('0.00005'), `${ownerName ?? 'owner'}/transfer-fund`);
         console.log(`\n[${ownerName ?? 'owner'}] transfer token: ${tokenBalance.toString()}`);
         const signed = await this.aaManager.signUserOp(userOp, ownerWallet);
@@ -334,7 +421,10 @@ export class BundleExecutor {
         for (const ai of accountInfos)
             nonceMap.init(ai.sender, ai.nonce);
         // 估算前确保 sender 有足够余额（用于 bundler 模拟；paymaster 场景会自动跳过）
-        await Promise.all(accountInfos.map((ai, i) => this.aaManager.ensureSenderBalance(wallets[i], ai.sender, buyWeis[i] + parseOkb('0.0003'), `owner${i + 1}/buy-prefund-before-estimate`)));
+        // 避免 Promise.all 突发并发（大规模地址会触发 RPC 限流）
+        await mapWithConcurrency(accountInfos, 6, async (ai, i) => {
+            await this.aaManager.ensureSenderBalance(wallets[i], ai.sender, buyWeis[i] + parseOkb('0.0003'), `owner${i + 1}/buy-prefund-before-estimate`);
+        });
         const buyCallDatas = buyWeis.map((buyWei) => {
             const swapData = encodeBuyCall(tokenAddress, buyWei, 0n);
             return encodeExecute(this.portalAddress, buyWei, swapData);
@@ -349,9 +439,11 @@ export class BundleExecutor {
             })),
         });
         // 补足 prefund + 买入金额（多数情况下上一步的 0.0003 已足够，这里通常不会再转账）
-        await Promise.all(accountInfos.map((ai, i) => this.aaManager.ensureSenderBalance(wallets[i], ai.sender, buyWeis[i] + prefundWeis[i] + parseOkb('0.0002'), `owner${i + 1}/buy-fund`)));
-        // 签名
-        const signedBuy = await Promise.all(buyUserOps.map((op, i) => this.aaManager.signUserOp(op, wallets[i])));
+        await mapWithConcurrency(accountInfos, 6, async (ai, i) => {
+            await this.aaManager.ensureSenderBalance(wallets[i], ai.sender, buyWeis[i] + prefundWeis[i] + parseOkb('0.0002'), `owner${i + 1}/buy-fund`);
+        });
+        // 签名（受控并发，避免大规模时阻塞）
+        const signedBuy = await mapWithConcurrency(buyUserOps, 10, async (op, i) => this.aaManager.signUserOp(op, wallets[i]));
         const buyOps = signedBuy.map((s) => s.userOp);
         // 2. 执行买入
         const buyResult = await this.runHandleOps('buyBundle', buyOps, bundlerSigner, beneficiary);
@@ -379,7 +471,9 @@ export class BundleExecutor {
             }
             if (idxs.length > 0) {
                 // 估算前补一点余额（paymaster 会自动跳过）
-                await Promise.all(idxs.map((i) => this.aaManager.ensureSenderBalance(wallets[i], senders[i], parseOkb('0.0002'), `owner${i + 1}/transfer-prefund`)));
+                await mapWithConcurrency(idxs, 6, async (i) => {
+                    await this.aaManager.ensureSenderBalance(wallets[i], senders[i], parseOkb('0.0002'), `owner${i + 1}/transfer-prefund`);
+                });
                 // buy 已经成功过一次，因此 transfer 的 nonce = 原 nonce + 1，且 initCode = 0x
                 const { userOps: transferUserOps, prefundWeis: transferPrefunds } = await this.aaManager.buildUserOpsWithBundlerEstimateBatch({
                     ops: idxs.map((i, k) => ({
@@ -389,8 +483,10 @@ export class BundleExecutor {
                         initCode: '0x',
                     })),
                 });
-                await Promise.all(idxs.map((i, k) => this.aaManager.ensureSenderBalance(wallets[i], senders[i], transferPrefunds[k] + parseOkb('0.00005'), `owner${i + 1}/transfer-fund`)));
-                const signedTransfer = await Promise.all(transferUserOps.map((op, k) => this.aaManager.signUserOp(op, wallets[idxs[k]])));
+                await mapWithConcurrency(idxs, 6, async (i, k) => {
+                    await this.aaManager.ensureSenderBalance(wallets[i], senders[i], transferPrefunds[k] + parseOkb('0.00005'), `owner${i + 1}/transfer-fund`);
+                });
+                const signedTransfer = await mapWithConcurrency(transferUserOps, 10, async (op, k) => this.aaManager.signUserOp(op, wallets[idxs[k]]));
                 const transferOps = signedTransfer.map((s) => s.userOp);
                 transferResult =
                     (await this.runHandleOps('transferBundle', transferOps, bundlerSigner, beneficiary)) ?? undefined;

package/dist/xlayer/bundler.js

@@ -4,6 +4,7 @@
  * 与 Particle Bundler 交互，提供 ERC-4337 相关 RPC 方法
  */
 import { PARTICLE_BUNDLER_URL, XLAYER_CHAIN_ID, ENTRYPOINT_V06, } from './constants.js';
+import { mapWithConcurrency } from '../utils/concurrency.js';
 // ============================================================================
 // Bundler 客户端类
 // ============================================================================
@@ -151,17 +152,35 @@ export class BundlerClient {
     async estimateUserOperationGasBatch(userOps) {
         if (userOps.length === 0)
             return [];
-        // 先尝试 batch（显著降低 HTTP 往返次数）
-        try {
-            return await this.rpcBatch(userOps.map((op) => ({
-                method: 'eth_estimateUserOperationGas',
-                params: [op, this.entryPoint],
-            })));
-        }
-        catch {
-            // fallback：并发单请求（比串行快，但可能触发限流）
-            return await Promise.all(userOps.map((op) => this.estimateUserOperationGas(op)));
-        }
+        const maxBatchSize = 30;
+        const maxSingleConcurrency = 4;
+        const estimateChunk = async (chunk, batchSize) => {
+            if (chunk.length === 0)
+                return [];
+            if (batchSize <= 1 || chunk.length === 1) {
+                // 最终兜底：受控并发的单请求（避免 Promise.all 突发）
+                return await mapWithConcurrency(chunk, maxSingleConcurrency, async (op) => await this.estimateUserOperationGas(op));
+            }
+            const out = [];
+            for (let cursor = 0; cursor < chunk.length; cursor += batchSize) {
+                const slice = chunk.slice(cursor, cursor + batchSize);
+                try {
+                    const res = await this.rpcBatch(slice.map((op) => ({
+                        method: 'eth_estimateUserOperationGas',
+                        params: [op, this.entryPoint],
+                    })));
+                    out.push(...res);
+                }
+                catch (err) {
+                    // 降级：拆分为更小 batch（直到 1）
+                    const next = Math.max(1, Math.floor(batchSize / 2));
+                    const res = await estimateChunk(slice, next);
+                    out.push(...res);
+                }
+            }
+            return out;
+        };
+        return await estimateChunk(userOps, Math.min(maxBatchSize, userOps.length));
     }
     /**
      * 发送 UserOperation

package/dist/xlayer/portal-ops.d.ts

@@ -57,6 +57,7 @@ export declare class PortalQuery {
     private portal;
     private portalAddress;
     constructor(config?: PortalQueryConfig);
+    private multicallAggregate3;
     /**
      * 获取 Provider
      */

package/dist/xlayer/portal-ops.js

@@ -8,7 +8,8 @@
  * - 代币转账
  */
 import { ethers, Interface, Contract, JsonRpcProvider } from 'ethers';
-import { FLAP_PORTAL, ZERO_ADDRESS, PORTAL_ABI, ERC20_ABI, DEFAULT_RPC_URL, XLAYER_CHAIN_ID, } from './constants.js';
+import { FLAP_PORTAL, ZERO_ADDRESS, PORTAL_ABI, ERC20_ABI, MULTICALL3, DEFAULT_RPC_URL, XLAYER_CHAIN_ID, } from './constants.js';
+import { mapWithConcurrency } from '../utils/concurrency.js';
 // ============================================================================
 // Portal 操作编码器
 // ============================================================================
@@ -81,10 +82,22 @@ export class PortalQuery {
     constructor(config = {}) {
         const rpcUrl = config.rpcUrl ?? DEFAULT_RPC_URL;
         const chainId = config.chainId ?? XLAYER_CHAIN_ID;
-        this.provider = new JsonRpcProvider(rpcUrl, { chainId, name: 'xlayer' });
+        this.provider = new JsonRpcProvider(rpcUrl, { chainId, name: 'xlayer' }, {
+            batchMaxCount: 20,
+            batchStallTime: 30,
+        });
         this.portalAddress = config.portalAddress ?? FLAP_PORTAL;
         this.portal = new Contract(this.portalAddress, PORTAL_ABI, this.provider);
     }
+    async multicallAggregate3(params) {
+        const mcIface = new Interface([
+            'function aggregate3((address target,bool allowFailure,bytes callData)[] calls) view returns ((bool success,bytes returnData)[] returnData)',
+        ]);
+        const data = mcIface.encodeFunctionData('aggregate3', [params.calls]);
+        const raw = await this.provider.call({ to: MULTICALL3, data });
+        const decoded = mcIface.decodeFunctionResult('aggregate3', raw)?.[0];
+        return decoded || [];
+    }
     /**
      * 获取 Provider
      */
@@ -171,8 +184,42 @@ export class PortalQuery {
      */
     async getMultipleTokenBalances(tokenAddress, accounts) {
         const balances = new Map();
-        const results = await Promise.all(accounts.map((acc) => this.getTokenBalance(tokenAddress, acc)));
-        accounts.forEach((acc, i) => balances.set(acc, results[i]));
+        const list = accounts.map((a) => String(a || '').trim()).filter(Boolean);
+        if (list.length === 0)
+            return balances;
+        const calls = list.map((acc) => ({
+            target: tokenAddress,
+            allowFailure: true,
+            callData: erc20Iface.encodeFunctionData('balanceOf', [acc]),
+        }));
+        const BATCH = 350;
+        try {
+            for (let cursor = 0; cursor < calls.length; cursor += BATCH) {
+                const sliceCalls = calls.slice(cursor, cursor + BATCH);
+                const res = await this.multicallAggregate3({ calls: sliceCalls });
+                for (let i = 0; i < res.length; i++) {
+                    const r = res[i];
+                    const idx = cursor + i;
+                    const acc = list[idx];
+                    if (!r?.success || !r.returnData || r.returnData === '0x') {
+                        balances.set(acc, 0n);
+                        continue;
+                    }
+                    try {
+                        const decoded = erc20Iface.decodeFunctionResult('balanceOf', r.returnData);
+                        balances.set(acc, BigInt(decoded?.[0] ?? 0n));
+                    }
+                    catch {
+                        balances.set(acc, 0n);
+                    }
+                }
+            }
+            return balances;
+        }
+        catch {
+            const results = await mapWithConcurrency(list, 8, async (acc) => this.getTokenBalance(tokenAddress, acc));
+            list.forEach((acc, i) => balances.set(acc, results[i] ?? 0n));
+        }
         return balances;
     }
     /**
@@ -180,8 +227,43 @@ export class PortalQuery {
      */
     async getMultipleOkbBalances(accounts) {
         const balances = new Map();
-        const results = await Promise.all(accounts.map((acc) => this.getOkbBalance(acc)));
-        accounts.forEach((acc, i) => balances.set(acc, results[i]));
+        const list = accounts.map((a) => String(a || '').trim()).filter(Boolean);
+        if (list.length === 0)
+            return balances;
+        const ethBalIface = new Interface(['function getEthBalance(address addr) view returns (uint256)']);
+        const calls = list.map((acc) => ({
+            target: MULTICALL3,
+            allowFailure: true,
+            callData: ethBalIface.encodeFunctionData('getEthBalance', [acc]),
+        }));
+        const BATCH = 350;
+        try {
+            for (let cursor = 0; cursor < calls.length; cursor += BATCH) {
+                const sliceCalls = calls.slice(cursor, cursor + BATCH);
+                const res = await this.multicallAggregate3({ calls: sliceCalls });
+                for (let i = 0; i < res.length; i++) {
+                    const r = res[i];
+                    const idx = cursor + i;
+                    const acc = list[idx];
+                    if (!r?.success || !r.returnData || r.returnData === '0x') {
+                        balances.set(acc, 0n);
+                        continue;
+                    }
+                    try {
+                        const decoded = ethBalIface.decodeFunctionResult('getEthBalance', r.returnData);
+                        balances.set(acc, BigInt(decoded?.[0] ?? 0n));
+                    }
+                    catch {
+                        balances.set(acc, 0n);
+                    }
+                }
+            }
+            return balances;
+        }
+        catch {
+            const results = await mapWithConcurrency(list, 8, async (acc) => this.getOkbBalance(acc));
+            list.forEach((acc, i) => balances.set(acc, results[i] ?? 0n));
+        }
         return balances;
     }
     /**
@@ -189,8 +271,43 @@ export class PortalQuery {
      */
     async getMultipleAllowances(tokenAddress, owners, spender) {
         const allowances = new Map();
-        const results = await Promise.all(owners.map((owner) => this.getAllowance(tokenAddress, owner, spender)));
-        owners.forEach((owner, i) => allowances.set(owner, results[i]));
+        const list = owners.map((a) => String(a || '').trim()).filter(Boolean);
+        if (list.length === 0)
+            return allowances;
+        const useSpender = spender ?? this.portalAddress;
+        const calls = list.map((owner) => ({
+            target: tokenAddress,
+            allowFailure: true,
+            callData: erc20Iface.encodeFunctionData('allowance', [owner, useSpender]),
+        }));
+        const BATCH = 350;
+        try {
+            for (let cursor = 0; cursor < calls.length; cursor += BATCH) {
+                const sliceCalls = calls.slice(cursor, cursor + BATCH);
+                const res = await this.multicallAggregate3({ calls: sliceCalls });
+                for (let i = 0; i < res.length; i++) {
+                    const r = res[i];
+                    const idx = cursor + i;
+                    const owner = list[idx];
+                    if (!r?.success || !r.returnData || r.returnData === '0x') {
+                        allowances.set(owner, 0n);
+                        continue;
+                    }
+                    try {
+                        const decoded = erc20Iface.decodeFunctionResult('allowance', r.returnData);
+                        allowances.set(owner, BigInt(decoded?.[0] ?? 0n));
+                    }
+                    catch {
+                        allowances.set(owner, 0n);
+                    }
+                }
+            }
+            return allowances;
+        }
+        catch {
+            const results = await mapWithConcurrency(list, 8, async (owner) => this.getAllowance(tokenAddress, owner, useSpender));
+            list.forEach((owner, i) => allowances.set(owner, results[i] ?? 0n));
+        }
         return allowances;
     }
 }

package/dist/xlayer/types.d.ts

@@ -41,6 +41,17 @@ export interface GasEstimate {
     maxFeePerGas?: HexString;
     maxPriorityFeePerGas?: HexString;
 }
+export type GasPolicy = 'fixed' | 'localEstimate' | 'bundlerEstimate';
+export interface FixedGasConfig {
+    /** callGasLimit（若不提供，SDK 会使用较保守的默认值） */
+    callGasLimit?: bigint;
+    /** 已部署 sender 的 verificationGasLimit（默认用 SDK 常量） */
+    verificationGasLimitDeployed?: bigint;
+    /** 未部署 sender 的 verificationGasLimit（默认用 SDK 常量） */
+    verificationGasLimitUndeployed?: bigint;
+    /** preVerificationGas（默认用 SDK 常量） */
+    preVerificationGas?: bigint;
+}
 /**
  * XLayer SDK 基础配置
  */
@@ -65,6 +76,15 @@ export interface XLayerConfig {
     timeoutMs?: number;
     /** Gas 估算安全余量倍数 */
     gasLimitMultiplier?: number;
+    /**
+     * AA Gas 策略（用于大规模地址时减少 RPC）
+     * - fixed：固定 gas（不 estimate）
+     * - localEstimate：eth_estimateGas（不走 bundler）
+     * - bundlerEstimate：eth_estimateUserOperationGas（最慢但最稳）
+     */
+    gasPolicy?: GasPolicy;
+    /** fixed 策略的默认 gas 配置（可被每次调用覆盖） */
+    fixedGas?: FixedGasConfig;
 }
 /**
  * AA 账户信息

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "four-flap-meme-sdk",
-  "version": "1.5.24",
+  "version": "1.5.25",
   "description": "SDK for Flap bonding curve and four.meme TokenManager",
   "type": "module",
   "main": "dist/index.js",

package/dist/flap/portal-bundle-merkle/encryption.d.ts

@@ -1,16 +0,0 @@
-/**
- * ECDH + AES-GCM 加密工具（浏览器兼容）
- * 用于将签名交易用服务器公钥加密
- */
-/**
- * 用服务器公钥加密签名交易（ECDH + AES-GCM）
- *
- * @param signedTransactions 签名后的交易数组
- * @param publicKeyBase64 服务器提供的公钥（Base64 格式）
- * @returns JSON 字符串 {e: 临时公钥, i: IV, d: 密文}
- */
-export declare function encryptWithPublicKey(signedTransactions: string[], publicKeyBase64: string): Promise<string>;
-/**
- * 验证公钥格式（Base64）
- */
-export declare function validatePublicKey(publicKeyBase64: string): boolean;

package/dist/flap/portal-bundle-merkle/encryption.js

@@ -1,146 +0,0 @@
-/**
- * ECDH + AES-GCM 加密工具（浏览器兼容）
- * 用于将签名交易用服务器公钥加密
- */
-/**
- * 获取全局 crypto 对象（最简单直接的方式）
- */
-function getCryptoAPI() {
-    // 尝试所有可能的全局对象，优先浏览器环境
-    const cryptoObj = (typeof window !== 'undefined' && window.crypto) ||
-        (typeof self !== 'undefined' && self.crypto) ||
-        (typeof global !== 'undefined' && global.crypto) ||
-        (typeof globalThis !== 'undefined' && globalThis.crypto);
-    if (!cryptoObj) {
-        const env = typeof window !== 'undefined' ? 'Browser' : 'Node.js';
-        const protocol = typeof location !== 'undefined' ? location.protocol : 'unknown';
-        throw new Error(`❌ Crypto API 不可用。环境: ${env}, 协议: ${protocol}. ` +
-            '请确保在 HTTPS 或 localhost 下运行');
-    }
-    return cryptoObj;
-}
-/**
- * 获取 SubtleCrypto（用于加密操作）
- */
-function getSubtleCrypto() {
-    const crypto = getCryptoAPI();
-    if (!crypto.subtle) {
-        const protocol = typeof location !== 'undefined' ? location.protocol : 'unknown';
-        const hostname = typeof location !== 'undefined' ? location.hostname : 'unknown';
-        throw new Error(`❌ SubtleCrypto API 不可用。协议: ${protocol}, 主机: ${hostname}. ` +
-            '请确保：1) 使用 HTTPS (或 localhost)；2) 浏览器支持 Web Crypto API；' +
-            '3) 不在无痕/隐私浏览模式下');
-    }
-    return crypto.subtle;
-}
-/**
- * Base64 转 ArrayBuffer（优先使用浏览器 API）
- */
-function base64ToArrayBuffer(base64) {
-    // 浏览器环境（优先）
-    if (typeof atob !== 'undefined') {
-        const binaryString = atob(base64);
-        const bytes = new Uint8Array(binaryString.length);
-        for (let i = 0; i < binaryString.length; i++) {
-            bytes[i] = binaryString.charCodeAt(i);
-        }
-        return bytes.buffer;
-    }
-    // Node.js 环境（fallback）
-    if (typeof Buffer !== 'undefined') {
-        return Buffer.from(base64, 'base64').buffer;
-    }
-    throw new Error('❌ Base64 解码不可用');
-}
-/**
- * ArrayBuffer 转 Base64（优先使用浏览器 API）
- */
-function arrayBufferToBase64(buffer) {
-    // 浏览器环境（优先）
-    if (typeof btoa !== 'undefined') {
-        const bytes = new Uint8Array(buffer);
-        let binary = '';
-        for (let i = 0; i < bytes.length; i++) {
-            binary += String.fromCharCode(bytes[i]);
-        }
-        return btoa(binary);
-    }
-    // Node.js 环境（fallback）
-    if (typeof Buffer !== 'undefined') {
-        return Buffer.from(buffer).toString('base64');
-    }
-    throw new Error('❌ Base64 编码不可用');
-}
-/**
- * 生成随机 Hex 字符串
- */
-function randomHex(length) {
-    const crypto = getCryptoAPI();
-    const array = new Uint8Array(length);
-    crypto.getRandomValues(array);
-    return Array.from(array)
-        .map(b => b.toString(16).padStart(2, '0'))
-        .join('');
-}
-/**
- * 用服务器公钥加密签名交易（ECDH + AES-GCM）
- *
- * @param signedTransactions 签名后的交易数组
- * @param publicKeyBase64 服务器提供的公钥（Base64 格式）
- * @returns JSON 字符串 {e: 临时公钥, i: IV, d: 密文}
- */
-export async function encryptWithPublicKey(signedTransactions, publicKeyBase64) {
-    try {
-        // 0. 获取 SubtleCrypto 和 Crypto API
-        const subtle = getSubtleCrypto();
-        const crypto = getCryptoAPI();
-        // 1. 准备数据
-        const payload = {
-            signedTransactions,
-            timestamp: Date.now(),
-            nonce: randomHex(8)
-        };
-        const plaintext = JSON.stringify(payload);
-        // 2. 生成临时 ECDH 密钥对
-        const ephemeralKeyPair = await subtle.generateKey({ name: 'ECDH', namedCurve: 'P-256' }, true, ['deriveKey']);
-        // 3. 导入服务器公钥
-        const publicKeyBuffer = base64ToArrayBuffer(publicKeyBase64);
-        const publicKey = await subtle.importKey('raw', publicKeyBuffer, { name: 'ECDH', namedCurve: 'P-256' }, false, []);
-        // 4. 派生共享密钥（AES-256）
-        const sharedKey = await subtle.deriveKey({ name: 'ECDH', public: publicKey }, ephemeralKeyPair.privateKey, { name: 'AES-GCM', length: 256 }, false, ['encrypt']);
-        // 5. AES-GCM 加密
-        const iv = crypto.getRandomValues(new Uint8Array(12));
-        const encrypted = await subtle.encrypt({ name: 'AES-GCM', iv }, sharedKey, new TextEncoder().encode(plaintext));
-        // 6. 导出临时公钥
-        const ephemeralPublicKeyRaw = await subtle.exportKey('raw', ephemeralKeyPair.publicKey);
-        // 7. 返回加密包（JSON 格式）
-        return JSON.stringify({
-            e: arrayBufferToBase64(ephemeralPublicKeyRaw), // 临时公钥
-            i: arrayBufferToBase64(iv.buffer), // IV
-            d: arrayBufferToBase64(encrypted) // 密文
-        });
-    }
-    catch (error) {
-        throw new Error(`加密失败: ${error?.message || String(error)}`);
-    }
-}
-/**
- * 验证公钥格式（Base64）
- */
-export function validatePublicKey(publicKeyBase64) {
-    try {
-        if (!publicKeyBase64)
-            return false;
-        // Base64 字符集验证
-        if (!/^[A-Za-z0-9+/=]+$/.test(publicKeyBase64))
-            return false;
-        // ECDH P-256 公钥固定长度 65 字节（未压缩）
-        // Base64 编码后约 88 字符
-        if (publicKeyBase64.length < 80 || publicKeyBase64.length > 100)
-            return false;
-        return true;
-    }
-    catch {
-        return false;
-    }
-}