feat: support MACHUSD deposit embeds

pnpm-workspace.yaml

@@ -76,7 +76,7 @@ minimumReleaseAgeExclude:
   - ip-address@10.3.1
   - js-yaml@3.15.1
   - js-yaml@4.3.1
-  - nanoid@3.3.17
+  - nanoid@3.3.18
   - postcss@8.5.23
   - socket.io-parser@4.2.7
   - undici@7.29.0
@@ -132,7 +132,8 @@ overrides:
   js-yaml@^3: '3.15.1'
   js-yaml@4: '4.3.1'
   mermaid: '11.16.1'
-  'nanoid@<3.3.17': '3.3.17'
+  # GHSA-2v37-7h3g-55p8: custom generators can loop indefinitely when size is zero.
+  'nanoid@<3.3.18': '3.3.18'
   ox: 0.14.30
   postcss: '8.5.23'
   protobufjs: '7.6.5'

site/src/pages/docs/cli/provider.mdx

@@ -50,6 +50,11 @@ await connect(client, { // [!code focus]
         selector: 'transfer(address,uint256)', // [!code focus]
       }], // [!code focus]
     }, // [!code focus]
+    showDeposit: { // [!code focus]
+      amount: '10', // [!code focus]
+      displayName: 'My CLI', // [!code focus]
+      token: 'MACHUSD', // [!code focus]
+    }, // [!code focus]
   }, // [!code focus]
 }) // [!code focus]
 ```

site/src/pages/docs/guides/deposits.mdx

@@ -169,6 +169,10 @@ connect.connect({
 
 :::
 
+Use `token: 'MACHUSD'` the same way as `pathUSD` or `USDC.e`. Accounts forwards
+the token symbol through the reusable Tempo Wallet iframe, which selects the
+matching deposit flow.
+
 ## Next Steps
 
 <Cards>

src/core/Dialog.browser.test.ts

@@ -72,6 +72,7 @@ describe('Dialog.iframe', () => {
     const allow = iframe.getAttribute('allow')!
     expect(allow).toContain('publickey-credentials-get')
     expect(allow).toContain('publickey-credentials-create')
+    expect(allow).toContain('payment *')
   })
 
   test('behavior: iframe src points to host', () => {

src/core/Dialog.ts

@@ -167,7 +167,7 @@ export function iframe(): Dialog {
         `publickey-credentials-get ${hostUrl.origin}`,
         `publickey-credentials-create ${hostUrl.origin}`,
         'clipboard-write',
-        'payment',
+        'payment *',
       ].join('; '),
     )
     frame.setAttribute('allowtransparency', 'true')

src/core/adapters/postMessage/mount.test.ts

@@ -36,7 +36,7 @@ describe('auto', () => {
     vi.stubGlobal('window', {
       isSecureContext: true,
       location: {
-        hostname: 'app.polyhedge.capital',
+        hostname: 'mercator.tempoxyz.dev',
         protocol: 'https:',
       },
     })

src/core/adapters/postMessage/mount.ts

@@ -122,7 +122,7 @@ export function iframe(): Factory {
           `publickey-credentials-get ${origin}`,
           `publickey-credentials-create ${origin}`,
           'clipboard-write',
-          'payment',
+          'payment *',
         ].join('; '),
       )
       frame.setAttribute('allowtransparency', 'true')

src/trusted-hosts.json

@@ -13,6 +13,7 @@
     "*.porto.workers.dev",
     "benedict.dev",
     "papercut.lol",
+    "mercator.tempoxyz.dev",
     "tempo-docs-git-jxom-accounts-sdk-docs-tempoxyz.vercel.app",
     "appkit-wagmi-tempo-wallet.vercel.app",
     "tip.bot",