@pepu-chain/sdk 0.0.0-stage → 0.2.0

package/dist/chunk-KIIFL4VM.js

@@ -0,0 +1,274 @@
+import { redactSecrets } from './chunk-D52PADVY.js';
+import { getContract } from './chunk-FCXSP2YF.js';
+import { resolvePepuEndpoints, PEPU_ENV } from './chunk-XC4IBCI2.js';
+import { pepuMainnet } from './chunk-VTQIHMF3.js';
+import { PepuBundlerError, PepuConfigError } from './chunk-6DSZ4Z2N.js';
+import { parseAbi } from 'viem';
+
+var kernelFactoryAbi = parseAbi([
+  "function implementation() view returns (address)",
+  "function getAddress(bytes calldata data, bytes32 salt) view returns (address)",
+  "function createAccount(bytes calldata data, bytes32 salt) payable returns (address)"
+]);
+var KERNEL_V3_1_IMPLEMENTATION_ADDRESS = "0xbAC849bB641841b44E965fb01A4Bf5F074F84B4d";
+var entryPointV07Abi = parseAbi([
+  "function getNonce(address sender, uint192 key) view returns (uint256 nonce)",
+  "function balanceOf(address account) view returns (uint256)",
+  "function depositTo(address account) payable",
+  "function withdrawTo(address payable withdrawAddress, uint256 withdrawAmount)",
+  "function getDepositInfo(address account) view returns ((uint256 deposit, bool staked, uint96 stake, uint32 unstakeDelaySec, uint48 withdrawTime) info)",
+  "event Deposited(address indexed account, uint256 totalDeposit)",
+  "event Withdrawn(address indexed account, address withdrawAddress, uint256 amount)"
+]);
+
+// src/aa/probes.ts
+var BUNDLER_METHODS = [
+  "eth_sendUserOperation",
+  "eth_estimateUserOperationGas",
+  "eth_getUserOperationReceipt",
+  "eth_getUserOperationByHash",
+  "pimlico_getUserOperationGasPrice",
+  "zd_getUserOperationGasPrice"
+];
+var METHOD_NOT_FOUND = -32601;
+function hostOf(url) {
+  try {
+    return new URL(url).host;
+  } catch {
+    return "the configured host";
+  }
+}
+function checkUrl(url, label) {
+  let u;
+  try {
+    u = new URL(url);
+  } catch {
+    throw new PepuConfigError("CONFIG_BAD_URL", `${label} is not a valid URL.`);
+  }
+  if (u.protocol !== "http:" && u.protocol !== "https:") {
+    throw new PepuConfigError("CONFIG_BAD_URL", `${label} must be an http(s) URL.`);
+  }
+}
+async function timedFetch(f, url, init, timeoutMs) {
+  const ctl = new AbortController();
+  const t = setTimeout(() => ctl.abort(), timeoutMs);
+  try {
+    return await f(url, { ...init, signal: ctl.signal });
+  } finally {
+    clearTimeout(t);
+  }
+}
+async function rpc(f, url, method, params, timeoutMs) {
+  const res = await timedFetch(
+    f,
+    url,
+    {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ jsonrpc: "2.0", id: 1, method, params })
+    },
+    timeoutMs
+  );
+  let body;
+  try {
+    body = await res.json();
+  } catch {
+    throw new Error(`HTTP ${res.status} with a non-JSON body`);
+  }
+  if (!body || typeof body !== "object") throw new Error(`HTTP ${res.status} with an unexpected body`);
+  return body;
+}
+function unreachable(url, e) {
+  const reason = e instanceof Error && e.name === "AbortError" ? "timed out" : redactSecrets(e instanceof Error ? e.message : String(e)).replace(/https?:\/\/\S+/g, "[url]");
+  return new PepuBundlerError("BUNDLER_UNREACHABLE", `Could not reach ${hostOf(url)}: ${reason}`, { cause: e });
+}
+async function probeBundler(url, o = {}) {
+  checkUrl(url, "Bundler URL");
+  const f = o.fetch ?? ((i, init) => fetch(i, init));
+  const timeoutMs = o.timeoutMs ?? 8e3;
+  const started = Date.now();
+  try {
+    const chain = await rpc(f, url, "eth_chainId", [], timeoutMs);
+    const eps = await rpc(f, url, "eth_supportedEntryPoints", [], timeoutMs);
+    const chainId = typeof chain.result === "string" ? Number(BigInt(chain.result)) : void 0;
+    const entryPoints = Array.isArray(eps.result) ? eps.result : void 0;
+    const supportedMethods = {};
+    for (const m of BUNDLER_METHODS) {
+      try {
+        const r = await rpc(f, url, m, [], timeoutMs);
+        supportedMethods[m] = r.error?.code !== METHOD_NOT_FOUND;
+      } catch {
+        supportedMethods[m] = false;
+      }
+    }
+    const ep07 = getContract(pepuMainnet.id, "entryPoint07");
+    const want = ep07?.status === "deployed" ? ep07.address.toLowerCase() : void 0;
+    const ok = chainId === pepuMainnet.id && (want === void 0 || (entryPoints?.some((a) => a.toLowerCase() === want) ?? false));
+    const out = { ok, latencyMs: Date.now() - started, supportedMethods };
+    if (chainId !== void 0) out.chainId = chainId;
+    if (entryPoints) out.entryPoints = entryPoints;
+    if (!ok) {
+      out.error = new PepuBundlerError(
+        "BUNDLER_UNREACHABLE",
+        chainId !== void 0 && chainId !== pepuMainnet.id ? `The bundler serves chain ${chainId}, not ${pepuMainnet.id}.` : "The bundler does not list EntryPoint v0.7.",
+        { hint: "Point PEPU_BUNDLER_URL at a bundler for chain 97741 that supports EntryPoint v0.7." }
+      );
+    }
+    return out;
+  } catch (e) {
+    return { ok: false, latencyMs: Date.now() - started, error: unreachable(url, e) };
+  }
+}
+var STUB_PROBE_OP = {
+  sender: "0x0000000000000000000000000000000000000001",
+  nonce: "0x0",
+  callData: "0x",
+  callGasLimit: "0x0",
+  verificationGasLimit: "0x0",
+  preVerificationGas: "0x0",
+  maxFeePerGas: "0x0",
+  maxPriorityFeePerGas: "0x0",
+  signature: "0x"
+};
+async function probePaymaster(url, o = {}) {
+  checkUrl(url, "Paymaster URL");
+  const f = o.fetch ?? ((i, init) => fetch(i, init));
+  const timeoutMs = o.timeoutMs ?? 8e3;
+  const started = Date.now();
+  const origin = new URL(url).origin;
+  const out = { ok: false, latencyMs: 0 };
+  let reached = false;
+  let lastError;
+  try {
+    const res = await timedFetch(f, `${origin}/health`, { method: "GET" }, timeoutMs);
+    reached = true;
+    const body = await res.json().catch(() => null);
+    out.health = res.ok && body?.status === "ok";
+  } catch (e) {
+    lastError = e;
+    out.health = false;
+  }
+  try {
+    const res = await timedFetch(f, `${origin}/v2/free-tier`, { method: "GET" }, timeoutMs);
+    reached = true;
+    if (res.ok) out.freeTier = await res.json().catch(() => void 0);
+  } catch (e) {
+    lastError = e;
+  }
+  let speaksRpc = false;
+  try {
+    const ep07 = getContract(pepuMainnet.id, "entryPoint07");
+    const ep = ep07?.status === "deployed" ? ep07.address : "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
+    const reply = await rpc(
+      f,
+      url,
+      "pm_getPaymasterStubData",
+      [STUB_PROBE_OP, ep, `0x${pepuMainnet.id.toString(16)}`, {}],
+      timeoutMs
+    );
+    reached = true;
+    speaksRpc = reply.result !== void 0 || reply.error !== void 0;
+    out.erc7677StubOk = reply.result !== void 0;
+  } catch (e) {
+    lastError = e;
+    out.erc7677StubOk = false;
+  }
+  out.latencyMs = Date.now() - started;
+  out.ok = out.health === true || speaksRpc;
+  if (!reached) out.error = unreachable(url, lastError);
+  else if (!out.ok) {
+    out.error = new PepuBundlerError("BUNDLER_UNREACHABLE", `${hostOf(url)} answered but is not a PEPU paymaster service.`, {
+      hint: "Check PEPU_PAYMASTER_URL points at the policy service (https://paymaster.pepeunchained.com), or its /v2/paymaster/<client token> endpoint."
+    });
+  }
+  return out;
+}
+async function getPaymasterDeposit(client, paymaster) {
+  const pm = getContract(pepuMainnet.id, "paymaster");
+  const ep = getContract(pepuMainnet.id, "entryPoint07");
+  const account = paymaster ?? (pm?.status === "deployed" ? pm.address : void 0);
+  if (!account || ep?.status !== "deployed") {
+    throw new PepuConfigError("CONFIG_MISSING_ENV", "No paymaster address is known; pass one explicitly.", {
+      hint: "Pass the paymaster address as the second argument."
+    });
+  }
+  return client.readContract({
+    address: ep.address,
+    abi: entryPointV07Abi,
+    functionName: "balanceOf",
+    args: [account]
+  });
+}
+
+// src/aa/status.ts
+function getPepuKernelStack(chainId) {
+  const entryPoint06 = getContract(chainId, "entryPoint06");
+  const entryPoint07 = getContract(chainId, "entryPoint07");
+  const kernelFactory = getContract(chainId, "kernelFactory");
+  const kernelMetaFactory = getContract(chainId, "kernelMetaFactory");
+  const ecdsaValidator = getContract(chainId, "ecdsaValidator");
+  if (entryPoint06?.status !== "deployed" || entryPoint07?.status !== "deployed" || kernelFactory?.status !== "deployed" || kernelMetaFactory?.status !== "deployed" || ecdsaValidator?.status !== "deployed") {
+    return void 0;
+  }
+  return { entryPoint06, entryPoint07, kernelFactory, kernelMetaFactory, ecdsaValidator };
+}
+function getSponsorshipStatus(options) {
+  const reason = "This deprecated function never probes anything and always reports unavailable. The hosted bundler (bundler.pepeunchained.com) and paymaster service (paymaster.pepeunchained.com) are live, and sponsorship is proven end to end on mainnet through them. Call checkSponsorship() for the live status. A Kernel v3 smart account without a funded project or free-tier token must still fund its own EntryPoint deposit and pay its own gas, like a normal EOA-sent transaction.";
+  return options?.bundlerUrl === void 0 ? { available: false, reason } : { available: false, reason, bundlerUrl: options.bundlerUrl };
+}
+async function getKernelAccountAddress(client, factory, args) {
+  return client.readContract({
+    address: factory.address,
+    abi: kernelFactoryAbi,
+    functionName: "getAddress",
+    args: [args.data, args.salt]
+  });
+}
+async function checkSponsorship(options = {}) {
+  const { bundlerUrl, paymasterUrl: erc7677Url, paymasterBaseUrl } = resolvePepuEndpoints({
+    ...options.bundlerUrl !== void 0 ? { bundlerUrl: options.bundlerUrl } : {},
+    ...options.paymasterUrl !== void 0 ? { paymasterUrl: options.paymasterUrl } : {},
+    ...options.env ? { env: options.env } : {}
+  });
+  const paymasterUrl = erc7677Url ?? paymasterBaseUrl;
+  const probeOpts = {
+    ...options.fetch ? { fetch: options.fetch } : {},
+    ...options.timeoutMs !== void 0 ? { timeoutMs: options.timeoutMs } : {}
+  };
+  const fixes = [];
+  if (bundlerUrl === null) fixes.push(`Set ${PEPU_ENV.bundlerUrl} to a bundler for chain 97741 (EntryPoint v0.7).`);
+  if (paymasterUrl === null) fixes.push(`Set ${PEPU_ENV.paymasterUrl} to your ERC-7677 paymaster endpoint (https://paymaster.pepeunchained.com/v2/paymaster/<client token>).`);
+  const [bProbe, pProbe] = await Promise.all([
+    bundlerUrl === null ? void 0 : probeBundler(bundlerUrl, probeOpts),
+    paymasterUrl === null ? void 0 : probePaymaster(paymasterUrl, probeOpts)
+  ]);
+  if (bProbe && !bProbe.ok) fixes.push(bProbe.error?.hint ?? "The bundler did not answer correctly.");
+  if (pProbe && !pProbe.ok) fixes.push(pProbe.error?.hint ?? "The paymaster did not answer correctly.");
+  let depositWei;
+  if (options.publicClient) {
+    try {
+      depositWei = await getPaymasterDeposit(options.publicClient, options.paymasterAddress);
+      if (depositWei === 0n) fixes.push("The paymaster's EntryPoint deposit is empty. Deposit PEPU to it.");
+    } catch {
+    }
+  }
+  const available = !!bProbe?.ok && !!pProbe?.ok && depositWei !== 0n;
+  const configured = bundlerUrl !== null || paymasterUrl !== null;
+  const reason = available ? "Bundler and paymaster are reachable; sponsored UserOperations can be sent." : !configured ? "No bundler or paymaster URL is configured. Set PEPU_BUNDLER_URL and PEPU_PAYMASTER_URL, or use the hosted defaults." : "A bundler or paymaster is configured but not fully working. See fixes.";
+  return {
+    available,
+    transport: configured ? "direct" : "none",
+    bundler: { configured: bundlerUrl !== null, ...bProbe ? { probe: bProbe } : {} },
+    paymaster: {
+      configured: paymasterUrl !== null,
+      ...pProbe ? { probe: pProbe } : {},
+      ...depositWei !== void 0 ? { depositWei } : {}
+    },
+    reason,
+    fixes
+  };
+}
+
+export { KERNEL_V3_1_IMPLEMENTATION_ADDRESS, checkSponsorship, entryPointV07Abi, getKernelAccountAddress, getPaymasterDeposit, getPepuKernelStack, getSponsorshipStatus, kernelFactoryAbi, probeBundler, probePaymaster };
+//# sourceMappingURL=chunk-KIIFL4VM.js.map
+//# sourceMappingURL=chunk-KIIFL4VM.js.map

package/dist/chunk-KIIFL4VM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/abi/kernelFactory.ts","../src/abi/entryPointV07.ts","../src/aa/probes.ts","../src/aa/status.ts"],"names":["parseAbi"],"mappings":";;;;;;;AA6BO,IAAM,mBAAmB,QAAA,CAAS;AAAA,EACvC,kDAAA;AAAA,EACA,+EAAA;AAAA,EACA;AACF,CAAC;AAOM,IAAM,kCAAA,GACX;ACdK,IAAM,mBAAmBA,QAAAA,CAAS;AAAA,EACvC,6EAAA;AAAA,EACA,4DAAA;AAAA,EACA,6CAAA;AAAA,EACA,8EAAA;AAAA,EACA,wJAAA;AAAA,EACA,gEAAA;AAAA,EACA;AACF,CAAC;;;ACSD,IAAM,eAAA,GAAkB;AAAA,EACtB,uBAAA;AAAA,EACA,8BAAA;AAAA,EACA,6BAAA;AAAA,EACA,4BAAA;AAAA,EACA,kCAAA;AAAA,EACA;AACF,CAAA;AAEA,IAAM,gBAAA,GAAmB,MAAA;AAEzB,SAAS,OAAO,GAAA,EAAqB;AACnC,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,GAAG,CAAA,CAAE,IAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,qBAAA;AAAA,EACT;AACF;AAEA,SAAS,QAAA,CAAS,KAAa,KAAA,EAAqB;AAClD,EAAA,IAAI,CAAA;AACJ,EAAA,IAAI;AACF,IAAA,CAAA,GAAI,IAAI,IAAI,GAAG,CAAA;AAAA,EACjB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,eAAA,CAAgB,gBAAA,EAAkB,CAAA,EAAG,KAAK,CAAA,oBAAA,CAAsB,CAAA;AAAA,EAC5E;AACA,EAAA,IAAI,CAAA,CAAE,QAAA,KAAa,OAAA,IAAW,CAAA,CAAE,aAAa,QAAA,EAAU;AACrD,IAAA,MAAM,IAAI,eAAA,CAAgB,gBAAA,EAAkB,CAAA,EAAG,KAAK,CAAA,wBAAA,CAA0B,CAAA;AAAA,EAChF;AACF;AAEA,eAAe,UAAA,CAAW,CAAA,EAAc,GAAA,EAAa,IAAA,EAAmB,SAAA,EAAsC;AAC5G,EAAA,MAAM,GAAA,GAAM,IAAI,eAAA,EAAgB;AAChC,EAAA,MAAM,IAAI,UAAA,CAAW,MAAM,GAAA,CAAI,KAAA,IAAS,SAAS,CAAA;AACjD,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,EAAE,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAQ,CAAA;AAAA,EACrD,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,CAAC,CAAA;AAAA,EAChB;AACF;AAOA,eAAe,GAAA,CAAI,CAAA,EAAc,GAAA,EAAa,MAAA,EAAgB,QAAmB,SAAA,EAAsC;AACrH,EAAA,MAAM,MAAM,MAAM,UAAA;AAAA,IAChB,CAAA;AAAA,IACA,GAAA;AAAA,IACA;AAAA,MACE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,OAAA,EAAS,OAAO,EAAA,EAAI,CAAA,EAAG,MAAA,EAAQ,MAAA,EAAQ;AAAA,KAChE;AAAA,IACA;AAAA,GACF;AACA,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,MAAM,IAAI,IAAA,EAAK;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,qBAAA,CAAuB,CAAA;AAAA,EAC3D;AACA,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU,MAAM,IAAI,KAAA,CAAM,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,wBAAA,CAA0B,CAAA;AACnG,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,WAAA,CAAY,KAAa,CAAA,EAA8B;AAC9D,EAAA,MAAM,SAAS,CAAA,YAAa,KAAA,IAAS,EAAE,IAAA,KAAS,YAAA,GAAe,cAAc,aAAA,CAAc,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,UAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAE,OAAA,CAAQ,mBAAmB,OAAO,CAAA;AACzK,EAAA,OAAO,IAAI,gBAAA,CAAiB,qBAAA,EAAuB,CAAA,gBAAA,EAAmB,MAAA,CAAO,GAAG,CAAC,CAAA,EAAA,EAAK,MAAM,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,GAAG,CAAA;AAC9G;AAaA,eAAsB,YAAA,CAAa,GAAA,EAAa,CAAA,GAAkB,EAAC,EAAgC;AACjG,EAAA,QAAA,CAAS,KAAK,aAAa,CAAA;AAC3B,EAAA,MAAM,CAAA,GAAe,EAAE,KAAA,KAAU,CAAC,GAAG,IAAA,KAAS,KAAA,CAAM,GAAG,IAAI,CAAA,CAAA;AAC3D,EAAA,MAAM,SAAA,GAAY,EAAE,SAAA,IAAa,GAAA;AACjC,EAAA,MAAM,OAAA,GAAU,KAAK,GAAA,EAAI;AACzB,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAQ,MAAM,GAAA,CAAI,CAAA,EAAG,KAAK,aAAA,EAAe,IAAI,SAAS,CAAA;AAC5D,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,CAAA,EAAG,KAAK,0BAAA,EAA4B,IAAI,SAAS,CAAA;AACvE,IAAA,MAAM,OAAA,GAAU,OAAO,KAAA,CAAM,MAAA,KAAW,QAAA,GAAW,OAAO,MAAA,CAAO,KAAA,CAAM,MAAM,CAAC,CAAA,GAAI,KAAA,CAAA;AAClF,IAAA,MAAM,cAAc,KAAA,CAAM,OAAA,CAAQ,IAAI,MAAM,CAAA,GAAK,IAAI,MAAA,GAAuB,KAAA,CAAA;AAC5E,IAAA,MAAM,mBAA4C,EAAC;AACnD,IAAA,KAAA,MAAW,KAAK,eAAA,EAAiB;AAC/B,MAAA,IAAI;AACF,QAAA,MAAM,CAAA,GAAI,MAAM,GAAA,CAAI,CAAA,EAAG,KAAK,CAAA,EAAG,IAAI,SAAS,CAAA;AAC5C,QAAA,gBAAA,CAAiB,CAAC,CAAA,GAAI,CAAA,CAAE,KAAA,EAAO,IAAA,KAAS,gBAAA;AAAA,MAC1C,CAAA,CAAA,MAAQ;AACN,QAAA,gBAAA,CAAiB,CAAC,CAAA,GAAI,KAAA;AAAA,MACxB;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAO,WAAA,CAAY,WAAA,CAAY,EAAA,EAAI,cAAc,CAAA;AACvD,IAAA,MAAM,OAAO,IAAA,EAAM,MAAA,KAAW,aAAa,IAAA,CAAK,OAAA,CAAQ,aAAY,GAAI,KAAA,CAAA;AACxE,IAAA,MAAM,EAAA,GACJ,OAAA,KAAY,WAAA,CAAY,EAAA,KACvB,SAAS,KAAA,CAAA,KAAc,WAAA,EAAa,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,WAAA,EAAY,KAAM,IAAI,CAAA,IAAK,KAAA,CAAA,CAAA;AAChF,IAAA,MAAM,GAAA,GAA0B,EAAE,EAAA,EAAI,SAAA,EAAW,KAAK,GAAA,EAAI,GAAI,SAAS,gBAAA,EAAiB;AACxF,IAAA,IAAI,OAAA,KAAY,KAAA,CAAA,EAAW,GAAA,CAAI,OAAA,GAAU,OAAA;AACzC,IAAA,IAAI,WAAA,MAAiB,WAAA,GAAc,WAAA;AACnC,IAAA,IAAI,CAAC,EAAA,EAAI;AACP,MAAA,GAAA,CAAI,QAAQ,IAAI,gBAAA;AAAA,QACd,qBAAA;AAAA,QACA,OAAA,KAAY,KAAA,CAAA,IAAa,OAAA,KAAY,WAAA,CAAY,EAAA,GAC7C,4BAA4B,OAAO,CAAA,MAAA,EAAS,WAAA,CAAY,EAAE,CAAA,CAAA,CAAA,GAC1D,4CAAA;AAAA,QACJ,EAAE,MAAM,oFAAA;AAAqF,OAC/F;AAAA,IACF;AACA,IAAA,OAAO,GAAA;AAAA,EACT,SAAS,CAAA,EAAG;AACV,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,SAAA,EAAW,IAAA,CAAK,GAAA,EAAI,GAAI,OAAA,EAAS,KAAA,EAAO,WAAA,CAAY,GAAA,EAAK,CAAC,CAAA,EAAE;AAAA,EAClF;AACF;AAEA,IAAM,aAAA,GAAgB;AAAA,EACpB,MAAA,EAAQ,4CAAA;AAAA,EACR,KAAA,EAAO,KAAA;AAAA,EACP,QAAA,EAAU,IAAA;AAAA,EACV,YAAA,EAAc,KAAA;AAAA,EACd,oBAAA,EAAsB,KAAA;AAAA,EACtB,kBAAA,EAAoB,KAAA;AAAA,EACpB,YAAA,EAAc,KAAA;AAAA,EACd,oBAAA,EAAsB,KAAA;AAAA,EACtB,SAAA,EAAW;AACb,CAAA;AAcA,eAAsB,cAAA,CAAe,GAAA,EAAa,CAAA,GAAkB,EAAC,EAAkC;AACrG,EAAA,QAAA,CAAS,KAAK,eAAe,CAAA;AAC7B,EAAA,MAAM,CAAA,GAAe,EAAE,KAAA,KAAU,CAAC,GAAG,IAAA,KAAS,KAAA,CAAM,GAAG,IAAI,CAAA,CAAA;AAC3D,EAAA,MAAM,SAAA,GAAY,EAAE,SAAA,IAAa,GAAA;AACjC,EAAA,MAAM,OAAA,GAAU,KAAK,GAAA,EAAI;AACzB,EAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,GAAG,CAAA,CAAE,MAAA;AAC5B,EAAA,MAAM,GAAA,GAA4B,EAAE,EAAA,EAAI,KAAA,EAAO,WAAW,CAAA,EAAE;AAC5D,EAAA,IAAI,OAAA,GAAU,KAAA;AACd,EAAA,IAAI,SAAA;AAEJ,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,UAAA,CAAW,CAAA,EAAG,CAAA,EAAG,MAAM,CAAA,OAAA,CAAA,EAAW,EAAE,MAAA,EAAQ,KAAA,EAAM,EAAG,SAAS,CAAA;AAChF,IAAA,OAAA,GAAU,IAAA;AACV,IAAA,MAAM,OAAQ,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAC/C,IAAA,GAAA,CAAI,MAAA,GAAS,GAAA,CAAI,EAAA,IAAM,IAAA,EAAM,MAAA,KAAW,IAAA;AAAA,EAC1C,SAAS,CAAA,EAAG;AACV,IAAA,SAAA,GAAY,CAAA;AACZ,IAAA,GAAA,CAAI,MAAA,GAAS,KAAA;AAAA,EACf;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,UAAA,CAAW,CAAA,EAAG,CAAA,EAAG,MAAM,CAAA,aAAA,CAAA,EAAiB,EAAE,MAAA,EAAQ,KAAA,EAAM,EAAG,SAAS,CAAA;AACtF,IAAA,OAAA,GAAU,IAAA;AACV,IAAA,IAAI,GAAA,CAAI,EAAA,EAAI,GAAA,CAAI,QAAA,GAAW,MAAM,IAAI,IAAA,EAAK,CAAE,KAAA,CAAM,MAAM,KAAA,CAAS,CAAA;AAAA,EACnE,SAAS,CAAA,EAAG;AACV,IAAA,SAAA,GAAY,CAAA;AAAA,EACd;AAEA,EAAA,IAAI,SAAA,GAAY,KAAA;AAChB,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,WAAA,CAAY,WAAA,CAAY,EAAA,EAAI,cAAc,CAAA;AACvD,IAAA,MAAM,EAAA,GAAK,IAAA,EAAM,MAAA,KAAW,UAAA,GAAa,KAAK,OAAA,GAAU,4CAAA;AACxD,IAAA,MAAM,QAAQ,MAAM,GAAA;AAAA,MAClB,CAAA;AAAA,MACA,GAAA;AAAA,MACA,yBAAA;AAAA,MACA,CAAC,aAAA,EAAe,EAAA,EAAI,CAAA,EAAA,EAAK,WAAA,CAAY,EAAA,CAAG,QAAA,CAAS,EAAE,CAAC,CAAA,CAAA,EAAI,EAAE,CAAA;AAAA,MAC1D;AAAA,KACF;AACA,IAAA,OAAA,GAAU,IAAA;AACV,IAAA,SAAA,GAAY,KAAA,CAAM,MAAA,KAAW,KAAA,CAAA,IAAa,KAAA,CAAM,KAAA,KAAU,KAAA,CAAA;AAC1D,IAAA,GAAA,CAAI,aAAA,GAAgB,MAAM,MAAA,KAAW,KAAA,CAAA;AAAA,EACvC,SAAS,CAAA,EAAG;AACV,IAAA,SAAA,GAAY,CAAA;AACZ,IAAA,GAAA,CAAI,aAAA,GAAgB,KAAA;AAAA,EACtB;AAEA,EAAA,GAAA,CAAI,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,GAAI,OAAA;AAC7B,EAAA,GAAA,CAAI,EAAA,GAAK,GAAA,CAAI,MAAA,KAAW,IAAA,IAAQ,SAAA;AAChC,EAAA,IAAI,CAAC,OAAA,EAAS,GAAA,CAAI,KAAA,GAAQ,WAAA,CAAY,KAAK,SAAS,CAAA;AAAA,OAAA,IAC3C,CAAC,IAAI,EAAA,EAAI;AAChB,IAAA,GAAA,CAAI,KAAA,GAAQ,IAAI,gBAAA,CAAiB,qBAAA,EAAuB,GAAG,MAAA,CAAO,GAAG,CAAC,CAAA,8CAAA,CAAA,EAAkD;AAAA,MACtH,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AACA,EAAA,OAAO,GAAA;AACT;AASA,eAAsB,mBAAA,CAAoB,QAAsB,SAAA,EAAsC;AACpG,EAAA,MAAM,EAAA,GAAK,WAAA,CAAY,WAAA,CAAY,EAAA,EAAI,WAAW,CAAA;AAClD,EAAA,MAAM,EAAA,GAAK,WAAA,CAAY,WAAA,CAAY,EAAA,EAAI,cAAc,CAAA;AACrD,EAAA,MAAM,UAAU,SAAA,KAAc,EAAA,EAAI,MAAA,KAAW,UAAA,GAAa,GAAG,OAAA,GAAU,MAAA,CAAA;AACvE,EAAA,IAAI,CAAC,OAAA,IAAW,EAAA,EAAI,MAAA,KAAW,UAAA,EAAY;AACzC,IAAA,MAAM,IAAI,eAAA,CAAgB,oBAAA,EAAsB,qDAAA,EAAuD;AAAA,MACrG,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AACA,EAAA,OAAO,OAAO,YAAA,CAAa;AAAA,IACzB,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,GAAA,EAAK,gBAAA;AAAA,IACL,YAAA,EAAc,WAAA;AAAA,IACd,IAAA,EAAM,CAAC,OAAO;AAAA,GACf,CAAA;AACH;;;AC9OO,SAAS,mBAAmB,OAAA,EAA8C;AAC/E,EAAA,MAAM,YAAA,GAAe,WAAA,CAAY,OAAA,EAAS,cAAc,CAAA;AACxD,EAAA,MAAM,YAAA,GAAe,WAAA,CAAY,OAAA,EAAS,cAAc,CAAA;AACxD,EAAA,MAAM,aAAA,GAAgB,WAAA,CAAY,OAAA,EAAS,eAAe,CAAA;AAC1D,EAAA,MAAM,iBAAA,GAAoB,WAAA,CAAY,OAAA,EAAS,mBAAmB,CAAA;AAClE,EAAA,MAAM,cAAA,GAAiB,WAAA,CAAY,OAAA,EAAS,gBAAgB,CAAA;AAE5D,EAAA,IACE,YAAA,EAAc,MAAA,KAAW,UAAA,IACzB,YAAA,EAAc,WAAW,UAAA,IACzB,aAAA,EAAe,MAAA,KAAW,UAAA,IAC1B,iBAAA,EAAmB,MAAA,KAAW,UAAA,IAC9B,cAAA,EAAgB,WAAW,UAAA,EAC3B;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,OAAO,EAAE,YAAA,EAAc,YAAA,EAAc,aAAA,EAAe,mBAAmB,cAAA,EAAe;AACxF;AA0CO,SAAS,qBACd,OAAA,EACmB;AACnB,EAAA,MAAM,MAAA,GACJ,kdAAA;AAOF,EAAA,OAAO,OAAA,EAAS,UAAA,KAAe,MAAA,GAC3B,EAAE,WAAW,KAAA,EAAO,MAAA,EAAO,GAC3B,EAAE,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,UAAA,EAAY,QAAQ,UAAA,EAAW;AACjE;AAiBA,eAAsB,uBAAA,CACpB,MAAA,EACA,OAAA,EACA,IAAA,EACkB;AAClB,EAAA,OAAO,OAAO,YAAA,CAAa;AAAA,IACzB,SAAS,OAAA,CAAQ,OAAA;AAAA,IACjB,GAAA,EAAK,gBAAA;AAAA,IACL,YAAA,EAAc,YAAA;AAAA,IACd,IAAA,EAAM,CAAC,IAAA,CAAK,IAAA,EAAM,KAAK,IAAI;AAAA,GAC5B,CAAA;AACH;AAyCA,eAAsB,gBAAA,CAAiB,OAAA,GAAmC,EAAC,EAA+B;AACxG,EAAA,MAAM,EAAE,UAAA,EAAY,YAAA,EAAc,UAAA,EAAY,gBAAA,KAAqB,oBAAA,CAAqB;AAAA,IACtF,GAAI,QAAQ,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,OAAA,CAAQ,UAAA,EAAW,GAAI,EAAC;AAAA,IAC7E,GAAI,QAAQ,YAAA,KAAiB,MAAA,GAAY,EAAE,YAAA,EAAc,OAAA,CAAQ,YAAA,EAAa,GAAI,EAAC;AAAA,IACnF,GAAI,QAAQ,GAAA,GAAM,EAAE,KAAK,OAAA,CAAQ,GAAA,KAAQ;AAAC,GAC3C,CAAA;AAED,EAAA,MAAM,eAAe,UAAA,IAAc,gBAAA;AACnC,EAAA,MAAM,SAAA,GAAY;AAAA,IAChB,GAAI,QAAQ,KAAA,GAAQ,EAAE,OAAO,OAAA,CAAQ,KAAA,KAAU,EAAC;AAAA,IAChD,GAAI,QAAQ,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,OAAA,CAAQ,SAAA,EAAU,GAAI;AAAC,GAC5E;AACA,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,IAAI,eAAe,IAAA,EAAM,KAAA,CAAM,KAAK,CAAA,IAAA,EAAO,QAAA,CAAS,UAAU,CAAA,gDAAA,CAAkD,CAAA;AAChH,EAAA,IAAI,iBAAiB,IAAA,EAAM,KAAA,CAAM,KAAK,CAAA,IAAA,EAAO,QAAA,CAAS,YAAY,CAAA,uGAAA,CAAyG,CAAA;AAE3K,EAAA,MAAM,CAAC,MAAA,EAAQ,MAAM,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,IACzC,UAAA,KAAe,IAAA,GAAO,MAAA,GAAY,YAAA,CAAa,YAAY,SAAS,CAAA;AAAA,IACpE,YAAA,KAAiB,IAAA,GAAO,MAAA,GAAY,cAAA,CAAe,cAAc,SAAS;AAAA,GAC3E,CAAA;AACD,EAAA,IAAI,MAAA,IAAU,CAAC,MAAA,CAAO,EAAA,QAAU,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,IAAQ,uCAAuC,CAAA;AAClG,EAAA,IAAI,MAAA,IAAU,CAAC,MAAA,CAAO,EAAA,QAAU,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,IAAA,IAAQ,yCAAyC,CAAA;AAEpG,EAAA,IAAI,UAAA;AACJ,EAAA,IAAI,QAAQ,YAAA,EAAc;AACxB,IAAA,IAAI;AACF,MAAA,UAAA,GAAa,MAAM,mBAAA,CAAoB,OAAA,CAAQ,YAAA,EAAc,QAAQ,gBAAgB,CAAA;AACrF,MAAA,IAAI,UAAA,KAAe,EAAA,EAAI,KAAA,CAAM,IAAA,CAAK,kEAAkE,CAAA;AAAA,IACtG,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,CAAC,CAAC,MAAA,EAAQ,MAAM,CAAC,CAAC,MAAA,EAAQ,EAAA,IAAM,UAAA,KAAe,EAAA;AACjE,EAAA,MAAM,UAAA,GAAa,UAAA,KAAe,IAAA,IAAQ,YAAA,KAAiB,IAAA;AAC3D,EAAA,MAAM,MAAA,GAAS,SAAA,GACX,4EAAA,GACA,CAAC,aACC,qHAAA,GACA,wEAAA;AACN,EAAA,OAAO;AAAA,IACL,SAAA;AAAA,IACA,SAAA,EAAW,aAAa,QAAA,GAAW,MAAA;AAAA,IACnC,OAAA,EAAS,EAAE,UAAA,EAAY,UAAA,KAAe,IAAA,EAAM,GAAI,MAAA,GAAS,EAAE,KAAA,EAAO,MAAA,EAAO,GAAI,EAAC,EAAG;AAAA,IACjF,SAAA,EAAW;AAAA,MACT,YAAY,YAAA,KAAiB,IAAA;AAAA,MAC7B,GAAI,MAAA,GAAS,EAAE,KAAA,EAAO,MAAA,KAAW,EAAC;AAAA,MAClC,GAAI,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,KAAe;AAAC,KACnD;AAAA,IACA,MAAA;AAAA,IACA;AAAA,GACF;AACF","file":"chunk-KIIFL4VM.js","sourcesContent":["import { parseAbi } from \"viem\";\n\n/**\n * ZeroDev Kernel v3 account factory ABI, at\n * `0xaac5D4240AF87249B3f71BC8E4A2cae074A3E419` (deployed on PEPU mainnet\n * only; see `pepuContracts.kernelFactory` in `../contracts.js`).\n *\n * Verified live against mainnet 2026-09-24 via `eth_call`:\n * - `implementation()` returns `0xbAC849bB641841b44E965fb01A4Bf5F074F84B4d` —\n *   ZeroDev's Kernel v3.1 singleton implementation address, deployed at the\n *   same address on every chain that has it via CREATE2.\n * - `getAddress(bytes,bytes32)`, called with empty `data` and a zero salt,\n *   returns a computed address without reverting.\n * - `createAccount(bytes,bytes32)`, simulated (not sent) with the same\n *   empty `data` and zero salt via `eth_call`, returns the **same** address\n *   `getAddress` computed for those inputs — exactly the counterfactual-\n *   address behavior a CREATE2 account factory is supposed to have.\n *\n * What this package does NOT ship: a helper that encodes the `data`\n * argument (Kernel v3.1's `initialize(...)` calldata — root validator,\n * hook, validator data, hook data, init config). No account has ever been\n * created through this factory on PEPU yet (its transaction history is\n * empty as of the verification date above), so there was nothing on-chain\n * to check a hand-rolled encoding against, and guessing one here would be\n * exactly the kind of invented byte layout this package's rules forbid.\n * Use ZeroDev's own `@zerodev/sdk` (or the public Kernel contracts source)\n * to build that payload, then pass the resulting bytes into\n * `getAddress`/`createAccount` from this ABI.\n */\nexport const kernelFactoryAbi = parseAbi([\n  \"function implementation() view returns (address)\",\n  \"function getAddress(bytes calldata data, bytes32 salt) view returns (address)\",\n  \"function createAccount(bytes calldata data, bytes32 salt) payable returns (address)\",\n]);\n\n/**\n * The verified Kernel v3.1 singleton implementation address that\n * `kernelFactoryAbi`'s `implementation()` resolves to on PEPU mainnet. Same\n * address ZeroDev uses across every chain that has this Kernel version.\n */\nexport const KERNEL_V3_1_IMPLEMENTATION_ADDRESS =\n  \"0xbAC849bB641841b44E965fb01A4Bf5F074F84B4d\" as const;\n","import { parseAbi } from \"viem\";\n\n/**\n * ERC-4337 EntryPoint v0.7 ABI — the subset a dapp actually needs to manage\n * a smart account's gas deposit and read its nonce, at the canonical address\n * `0x0000000071727De22E5E9d8BAf0edAc6f37da032` (deployed on PEPU mainnet\n * only; see `pepuContracts.entryPoint07` in `../contracts.js`).\n *\n * This is NOT the full `IEntryPoint` interface (no `handleOps`,\n * `simulateValidation`, etc.) — those are normally called by a bundler, and\n * PEPU has no publicly hosted bundler yet (see `getSponsorshipStatus` in\n * `../aa/status.js`). This ABI only covers deposit/nonce management, which works\n * today with a plain viem wallet client and no bundler at all.\n *\n * Verified live against mainnet 2026-09-24 via `eth_call`:\n * - `getNonce(address,uint192)` for the zero address/key returns `0`.\n * - `balanceOf(address)` for the zero address returns `0`.\n * - `getDepositInfo(address)` for the zero address returns a 5-word\n *   (all-zero) tuple, matching the v0.7 `DepositInfo` struct shape\n *   `(uint256 deposit, bool staked, uint96 stake, uint32 unstakeDelaySec,\n *   uint48 withdrawTime)` field-for-field.\n * `depositTo`/`withdrawTo` share the same `IStakeManager` interface as the\n * verified `getDepositInfo`/`balanceOf` pair and are standard across every\n * EntryPoint version; they were not separately simulated (both mutate\n * state, and simulating a withdrawal from an empty deposit would only prove\n * it reverts, not that it works).\n */\nexport const entryPointV07Abi = parseAbi([\n  \"function getNonce(address sender, uint192 key) view returns (uint256 nonce)\",\n  \"function balanceOf(address account) view returns (uint256)\",\n  \"function depositTo(address account) payable\",\n  \"function withdrawTo(address payable withdrawAddress, uint256 withdrawAmount)\",\n  \"function getDepositInfo(address account) view returns ((uint256 deposit, bool staked, uint96 stake, uint32 unstakeDelaySec, uint48 withdrawTime) info)\",\n  \"event Deposited(address indexed account, uint256 totalDeposit)\",\n  \"event Withdrawn(address indexed account, address withdrawAddress, uint256 amount)\",\n]);\n","import type { Address, PublicClient } from \"viem\";\n\nimport { entryPointV07Abi } from \"../abi/entryPointV07.js\";\nimport { pepuMainnet } from \"../chains.js\";\nimport { getContract } from \"../contracts.js\";\nimport { PepuBundlerError, PepuConfigError } from \"../errors.js\";\nimport { redactSecrets } from \"./describe.js\";\n\n/** Minimal fetch signature, so tests and non-browser hosts can inject one. */\nexport type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;\n\nexport interface ProbeOptions {\n  fetch?: FetchLike;\n  /** Per-request timeout. Default 8000. */\n  timeoutMs?: number;\n}\n\nexport interface BundlerProbeResult {\n  ok: boolean;\n  chainId?: number;\n  entryPoints?: Address[];\n  /** `true` when the method exists (any answer but \"method not found\"). */\n  supportedMethods?: Record<string, boolean>;\n  latencyMs: number;\n  error?: PepuBundlerError;\n}\n\nexport interface PaymasterProbeResult {\n  ok: boolean;\n  /** `GET <origin>/health` answered `{ status: \"ok\" }`. */\n  health?: boolean;\n  /** Body of `GET <origin>/v2/free-tier` when the service exposes it. */\n  freeTier?: unknown;\n  /**\n   * The URL answered a `pm_getPaymasterStubData` call with a stub result. A\n   * JSON-RPC denial (no credential, unknown sender) is NOT a stub result:\n   * the endpoint is alive and speaks ERC-7677, but the probe has no\n   * credential, so this stays `false`.\n   */\n  erc7677StubOk?: boolean;\n  latencyMs: number;\n  error?: PepuBundlerError;\n}\n\nconst BUNDLER_METHODS = [\n  \"eth_sendUserOperation\",\n  \"eth_estimateUserOperationGas\",\n  \"eth_getUserOperationReceipt\",\n  \"eth_getUserOperationByHash\",\n  \"pimlico_getUserOperationGasPrice\",\n  \"zd_getUserOperationGasPrice\",\n] as const;\n\nconst METHOD_NOT_FOUND = -32601;\n\nfunction hostOf(url: string): string {\n  try {\n    return new URL(url).host;\n  } catch {\n    return \"the configured host\";\n  }\n}\n\nfunction checkUrl(url: string, label: string): void {\n  let u: URL;\n  try {\n    u = new URL(url);\n  } catch {\n    throw new PepuConfigError(\"CONFIG_BAD_URL\", `${label} is not a valid URL.`);\n  }\n  if (u.protocol !== \"http:\" && u.protocol !== \"https:\") {\n    throw new PepuConfigError(\"CONFIG_BAD_URL\", `${label} must be an http(s) URL.`);\n  }\n}\n\nasync function timedFetch(f: FetchLike, url: string, init: RequestInit, timeoutMs: number): Promise<Response> {\n  const ctl = new AbortController();\n  const t = setTimeout(() => ctl.abort(), timeoutMs);\n  try {\n    return await f(url, { ...init, signal: ctl.signal });\n  } finally {\n    clearTimeout(t);\n  }\n}\n\ninterface RpcReply {\n  result?: unknown;\n  error?: { code?: number; message?: string; data?: unknown };\n}\n\nasync function rpc(f: FetchLike, url: string, method: string, params: unknown[], timeoutMs: number): Promise<RpcReply> {\n  const res = await timedFetch(\n    f,\n    url,\n    {\n      method: \"POST\",\n      headers: { \"content-type\": \"application/json\" },\n      body: JSON.stringify({ jsonrpc: \"2.0\", id: 1, method, params }),\n    },\n    timeoutMs,\n  );\n  let body: unknown;\n  try {\n    body = await res.json();\n  } catch {\n    throw new Error(`HTTP ${res.status} with a non-JSON body`);\n  }\n  if (!body || typeof body !== \"object\") throw new Error(`HTTP ${res.status} with an unexpected body`);\n  return body as RpcReply;\n}\n\nfunction unreachable(url: string, e: unknown): PepuBundlerError {\n  const reason = e instanceof Error && e.name === \"AbortError\" ? \"timed out\" : redactSecrets(e instanceof Error ? e.message : String(e)).replace(/https?:\\/\\/\\S+/g, \"[url]\");\n  return new PepuBundlerError(\"BUNDLER_UNREACHABLE\", `Could not reach ${hostOf(url)}: ${reason}`, { cause: e });\n}\n\n/**\n * Probe a bundler URL: `eth_chainId`, `eth_supportedEntryPoints` and a\n * capability check of the methods PEPU apps use (a method answered with\n * anything but \"method not found\" counts as supported; nothing is sent\n * on-chain). Never throws for network trouble; returns `ok: false` with a\n * `BUNDLER_UNREACHABLE` error. Throws `CONFIG_BAD_URL` for a malformed URL.\n *\n * @example\n * const r = await probeBundler(\"https://bundler.example.com\");\n * if (!r.ok) console.log(r.error?.hint);\n */\nexport async function probeBundler(url: string, o: ProbeOptions = {}): Promise<BundlerProbeResult> {\n  checkUrl(url, \"Bundler URL\");\n  const f: FetchLike = o.fetch ?? ((i, init) => fetch(i, init));\n  const timeoutMs = o.timeoutMs ?? 8000;\n  const started = Date.now();\n  try {\n    const chain = await rpc(f, url, \"eth_chainId\", [], timeoutMs);\n    const eps = await rpc(f, url, \"eth_supportedEntryPoints\", [], timeoutMs);\n    const chainId = typeof chain.result === \"string\" ? Number(BigInt(chain.result)) : undefined;\n    const entryPoints = Array.isArray(eps.result) ? (eps.result as Address[]) : undefined;\n    const supportedMethods: Record<string, boolean> = {};\n    for (const m of BUNDLER_METHODS) {\n      try {\n        const r = await rpc(f, url, m, [], timeoutMs);\n        supportedMethods[m] = r.error?.code !== METHOD_NOT_FOUND;\n      } catch {\n        supportedMethods[m] = false;\n      }\n    }\n    const ep07 = getContract(pepuMainnet.id, \"entryPoint07\");\n    const want = ep07?.status === \"deployed\" ? ep07.address.toLowerCase() : undefined;\n    const ok =\n      chainId === pepuMainnet.id &&\n      (want === undefined || (entryPoints?.some((a) => a.toLowerCase() === want) ?? false));\n    const out: BundlerProbeResult = { ok, latencyMs: Date.now() - started, supportedMethods };\n    if (chainId !== undefined) out.chainId = chainId;\n    if (entryPoints) out.entryPoints = entryPoints;\n    if (!ok) {\n      out.error = new PepuBundlerError(\n        \"BUNDLER_UNREACHABLE\",\n        chainId !== undefined && chainId !== pepuMainnet.id\n          ? `The bundler serves chain ${chainId}, not ${pepuMainnet.id}.`\n          : \"The bundler does not list EntryPoint v0.7.\",\n        { hint: \"Point PEPU_BUNDLER_URL at a bundler for chain 97741 that supports EntryPoint v0.7.\" },\n      );\n    }\n    return out;\n  } catch (e) {\n    return { ok: false, latencyMs: Date.now() - started, error: unreachable(url, e) };\n  }\n}\n\nconst STUB_PROBE_OP = {\n  sender: \"0x0000000000000000000000000000000000000001\",\n  nonce: \"0x0\",\n  callData: \"0x\",\n  callGasLimit: \"0x0\",\n  verificationGasLimit: \"0x0\",\n  preVerificationGas: \"0x0\",\n  maxFeePerGas: \"0x0\",\n  maxPriorityFeePerGas: \"0x0\",\n  signature: \"0x\",\n} as const;\n\n/**\n * Probe a paymaster URL: the service base (`https://paymaster.pepeunchained.com`) or the ERC-7677 endpoint\n * (`https://host/v2/paymaster/<token>`).\n * Checks `GET <origin>/health`, `GET <origin>/v2/free-tier`, and whether the URL\n * answers JSON-RPC `pm_getPaymasterStubData`. `ok` means the service is alive:\n * health is ok, or the URL spoke valid JSON-RPC. The URL (which can embed a\n * token) never appears in the returned error.\n *\n * @example\n * const r = await probePaymaster(process.env.PEPU_PAYMASTER_URL!);\n * console.log(r.ok, r.freeTier);\n */\nexport async function probePaymaster(url: string, o: ProbeOptions = {}): Promise<PaymasterProbeResult> {\n  checkUrl(url, \"Paymaster URL\");\n  const f: FetchLike = o.fetch ?? ((i, init) => fetch(i, init));\n  const timeoutMs = o.timeoutMs ?? 8000;\n  const started = Date.now();\n  const origin = new URL(url).origin;\n  const out: PaymasterProbeResult = { ok: false, latencyMs: 0 };\n  let reached = false;\n  let lastError: unknown;\n\n  try {\n    const res = await timedFetch(f, `${origin}/health`, { method: \"GET\" }, timeoutMs);\n    reached = true;\n    const body = (await res.json().catch(() => null)) as { status?: unknown } | null;\n    out.health = res.ok && body?.status === \"ok\";\n  } catch (e) {\n    lastError = e;\n    out.health = false;\n  }\n\n  try {\n    const res = await timedFetch(f, `${origin}/v2/free-tier`, { method: \"GET\" }, timeoutMs);\n    reached = true;\n    if (res.ok) out.freeTier = await res.json().catch(() => undefined);\n  } catch (e) {\n    lastError = e;\n  }\n\n  let speaksRpc = false;\n  try {\n    const ep07 = getContract(pepuMainnet.id, \"entryPoint07\");\n    const ep = ep07?.status === \"deployed\" ? ep07.address : \"0x0000000071727De22E5E9d8BAf0edAc6f37da032\";\n    const reply = await rpc(\n      f,\n      url,\n      \"pm_getPaymasterStubData\",\n      [STUB_PROBE_OP, ep, `0x${pepuMainnet.id.toString(16)}`, {}],\n      timeoutMs,\n    );\n    reached = true;\n    speaksRpc = reply.result !== undefined || reply.error !== undefined;\n    out.erc7677StubOk = reply.result !== undefined;\n  } catch (e) {\n    lastError = e;\n    out.erc7677StubOk = false;\n  }\n\n  out.latencyMs = Date.now() - started;\n  out.ok = out.health === true || speaksRpc;\n  if (!reached) out.error = unreachable(url, lastError);\n  else if (!out.ok) {\n    out.error = new PepuBundlerError(\"BUNDLER_UNREACHABLE\", `${hostOf(url)} answered but is not a PEPU paymaster service.`, {\n      hint: \"Check PEPU_PAYMASTER_URL points at the policy service (https://paymaster.pepeunchained.com), or its /v2/paymaster/<client token> endpoint.\",\n    });\n  }\n  return out;\n}\n\n/**\n * The paymaster's EntryPoint v0.7 deposit in wei. A drop across a UserOperation\n * is the proof that it was sponsored. Defaults to PEPU's deployed paymaster.\n *\n * @example\n * const before = await getPaymasterDeposit(publicClient);\n */\nexport async function getPaymasterDeposit(client: PublicClient, paymaster?: Address): Promise<bigint> {\n  const pm = getContract(pepuMainnet.id, \"paymaster\");\n  const ep = getContract(pepuMainnet.id, \"entryPoint07\");\n  const account = paymaster ?? (pm?.status === \"deployed\" ? pm.address : undefined);\n  if (!account || ep?.status !== \"deployed\") {\n    throw new PepuConfigError(\"CONFIG_MISSING_ENV\", \"No paymaster address is known; pass one explicitly.\", {\n      hint: \"Pass the paymaster address as the second argument.\",\n    });\n  }\n  return client.readContract({\n    address: ep.address,\n    abi: entryPointV07Abi,\n    functionName: \"balanceOf\",\n    args: [account],\n  });\n}\n","import type { Address, Hex, PublicClient, Transport } from \"viem\";\n\nimport { kernelFactoryAbi } from \"../abi/kernelFactory.js\";\nimport type { PepuChain } from \"../chains.js\";\nimport type { DeployedContract } from \"../contracts.js\";\nimport { getContract } from \"../contracts.js\";\nimport { PEPU_ENV, resolvePepuEndpoints } from \"../endpoints.js\";\nimport { getPaymasterDeposit, probeBundler, probePaymaster } from \"./probes.js\";\nimport type { BundlerProbeResult, FetchLike, PaymasterProbeResult } from \"./probes.js\";\n\n/**\n * The account-abstraction contracts a Kernel v3 smart account needs,\n * narrowed to their {@link DeployedContract} form for a given chain.\n * Returns `undefined` if any one of them isn't deployed on that chain\n * (today: everything except mainnet, `97741`) — this package never fabricates\n * a partial/best-effort bundle.\n */\nexport interface PepuKernelStack {\n  readonly entryPoint06: DeployedContract;\n  readonly entryPoint07: DeployedContract;\n  readonly kernelFactory: DeployedContract;\n  readonly kernelMetaFactory: DeployedContract;\n  readonly ecdsaValidator: DeployedContract;\n}\n\n/**\n * Look up every AA contract this package knows about for `chainId`, already\n * narrowed to {@link DeployedContract}. Returns `undefined` unless *all* five\n * are deployed on that chain (today, only PEPU mainnet qualifies) — a caller\n * building a Kernel account needs every one of them, so a partial result\n * would just move the \"is this actually usable\" check into every caller.\n *\n * This is a convenience grouping over `getContract` from `./contracts.js`;\n * it doesn't add any address or fact that registry doesn't already have.\n */\nexport function getPepuKernelStack(chainId: number): PepuKernelStack | undefined {\n  const entryPoint06 = getContract(chainId, \"entryPoint06\");\n  const entryPoint07 = getContract(chainId, \"entryPoint07\");\n  const kernelFactory = getContract(chainId, \"kernelFactory\");\n  const kernelMetaFactory = getContract(chainId, \"kernelMetaFactory\");\n  const ecdsaValidator = getContract(chainId, \"ecdsaValidator\");\n\n  if (\n    entryPoint06?.status !== \"deployed\" ||\n    entryPoint07?.status !== \"deployed\" ||\n    kernelFactory?.status !== \"deployed\" ||\n    kernelMetaFactory?.status !== \"deployed\" ||\n    ecdsaValidator?.status !== \"deployed\"\n  ) {\n    return undefined;\n  }\n\n  return { entryPoint06, entryPoint07, kernelFactory, kernelMetaFactory, ecdsaValidator };\n}\n\n/**\n * Legacy static gas-sponsorship status for PEPU. **Always reports\n * unavailable** (it never probes). Sponsorship is PROVEN end to end on PEPU\n * mainnet through the hosted bundler and paymaster service (a zero-balance\n * Kernel smart account transacted, paid for by the paymaster); use\n * `checkSponsorship()` for the live answer. This function\n * exists so nothing downstream (this package, `@pepu-chain/mcp`, an app)\n * has to independently invent an \"is sponsorship on?\" check, and so that\n * check can't silently start lying once this file changes.\n *\n * Do not treat the presence of `kernelFactory`/`ecdsaValidator`/`paymaster`\n * addresses in {@link getPepuKernelStack} / the contract registry as\n * sponsorship support — those let you build and deploy a Kernel account and\n * send its UserOperations through a normal `eth_sendTransaction`-style flow\n * (self-paying its own gas via the EntryPoint deposit), which is a real,\n * working feature; sponsoring that gas needs a funded project or free-tier token.\n */\nexport interface SponsorshipStatus {\n  readonly available: false;\n  readonly reason: string;\n  /**\n   * Extension point for a future bundler/paymaster integration. Passing a\n   * URL here does **not** make sponsorship available — `available` stays\n   * `false` regardless — this field only exists so a caller can start\n   * wiring a URL through their own config today and have this function\n   * start using it later without an API change.\n   */\n  readonly bundlerUrl?: string;\n}\n\n/** Options for {@link getSponsorshipStatus}. */\nexport interface GetSponsorshipStatusOptions {\n  /** See {@link SponsorshipStatus.bundlerUrl}. Not yet used for anything. */\n  readonly bundlerUrl?: string;\n}\n\n/**\n * @deprecated Always reports `available: false`. Use `checkSponsorship()` (live\n * bundler and paymaster probe) from `@pepu-chain/sdk`. Kept for 0.1 callers.\n */\nexport function getSponsorshipStatus(\n  options?: GetSponsorshipStatusOptions,\n): SponsorshipStatus {\n  const reason =\n    \"This deprecated function never probes anything and always reports \" +\n    \"unavailable. The hosted bundler (bundler.pepeunchained.com) and \" +\n    \"paymaster service (paymaster.pepeunchained.com) are live, and \" +\n    \"sponsorship is proven end to end on mainnet through them. Call \" +\n    \"checkSponsorship() for the live status. A Kernel v3 smart account \" +\n    \"without a funded project or free-tier token must still fund its own \" +\n    \"EntryPoint deposit and pay its own gas, like a normal EOA-sent transaction.\";\n  return options?.bundlerUrl === undefined\n    ? { available: false, reason }\n    : { available: false, reason, bundlerUrl: options.bundlerUrl };\n}\n\n/**\n * Compute (or confirm) the counterfactual address of a Kernel v3 smart\n * account via the verified factory's `getAddress(data, salt)` — a thin,\n * typed pass-through, not a re-implementation.\n *\n * Deliberately does **not** build `data` (Kernel v3.1's `initialize(...)`\n * calldata: root validator, hook, validator data, hook data, init config)\n * for you. A hand-rolled encoding here would be a second, unverified copy of\n * the byte layout that ZeroDev's SDK already produces (and that has been\n * exercised against PEPU's factory through the sponsored-transaction run),\n * which is exactly the kind of invented encoding this package's rules\n * forbid for addresses. Build `data` with ZeroDev's\n * `@zerodev/sdk` (or by hand from the public Kernel v3 contracts source),\n * then pass the result here.\n */\nexport async function getKernelAccountAddress(\n  client: PublicClient<Transport, PepuChain>,\n  factory: Pick<DeployedContract, \"address\">,\n  args: { readonly data: Hex; readonly salt: Hex },\n): Promise<Address> {\n  return client.readContract({\n    address: factory.address,\n    abi: kernelFactoryAbi,\n    functionName: \"getAddress\",\n    args: [args.data, args.salt],\n  });\n}\n\n/** Live sponsorship report from {@link checkSponsorship}. */\nexport interface SponsorshipReport {\n  /** True only when a bundler and a paymaster are configured and both answer. */\n  available: boolean;\n  /** `direct` when you bring your own bundler and paymaster URLs; `none` when nothing is configured. */\n  transport: \"direct\" | \"none\";\n  bundler: { configured: boolean; probe?: BundlerProbeResult };\n  paymaster: { configured: boolean; probe?: PaymasterProbeResult; depositWei?: bigint };\n  /** One sentence for a human or an agent. */\n  reason: string;\n  /** Concrete next steps, empty when `available`. */\n  fixes: string[];\n}\n\n/** Options for {@link checkSponsorship}. */\nexport interface CheckSponsorshipOptions {\n  bundlerUrl?: string;\n  paymasterUrl?: string;\n  env?: Record<string, string | undefined>;\n  fetch?: FetchLike;\n  /** When given, also read the paymaster's EntryPoint deposit. */\n  publicClient?: PublicClient;\n  /** Paymaster contract to read the deposit of. Defaults to PEPU's deployed paymaster. */\n  paymasterAddress?: Address;\n  timeoutMs?: number;\n}\n\n/**\n * Live gas-sponsorship status. Resolves the bundler and paymaster URLs from\n * options, env, then the hosted defaults (bundler.pepeunchained.com and the paymaster\n * service base; with no token URL the service is probed at its base), probes both,\n * and optionally reads the paymaster deposit. Never throws for an\n * unreachable service; it reports `available: false` with `fixes`.\n * Replaces the hard-coded {@link getSponsorshipStatus}.\n *\n * @example\n * const s = await checkSponsorship({ publicClient });\n * if (!s.available) console.log(s.reason, s.fixes);\n */\nexport async function checkSponsorship(options: CheckSponsorshipOptions = {}): Promise<SponsorshipReport> {\n  const { bundlerUrl, paymasterUrl: erc7677Url, paymasterBaseUrl } = resolvePepuEndpoints({\n    ...(options.bundlerUrl !== undefined ? { bundlerUrl: options.bundlerUrl } : {}),\n    ...(options.paymasterUrl !== undefined ? { paymasterUrl: options.paymasterUrl } : {}),\n    ...(options.env ? { env: options.env } : {}),\n  });\n  // No token means no complete ERC-7677 URL: probe the service base (health + free-tier state) instead.\n  const paymasterUrl = erc7677Url ?? paymasterBaseUrl;\n  const probeOpts = {\n    ...(options.fetch ? { fetch: options.fetch } : {}),\n    ...(options.timeoutMs !== undefined ? { timeoutMs: options.timeoutMs } : {}),\n  };\n  const fixes: string[] = [];\n  if (bundlerUrl === null) fixes.push(`Set ${PEPU_ENV.bundlerUrl} to a bundler for chain 97741 (EntryPoint v0.7).`);\n  if (paymasterUrl === null) fixes.push(`Set ${PEPU_ENV.paymasterUrl} to your ERC-7677 paymaster endpoint (https://paymaster.pepeunchained.com/v2/paymaster/<client token>).`);\n\n  const [bProbe, pProbe] = await Promise.all([\n    bundlerUrl === null ? undefined : probeBundler(bundlerUrl, probeOpts),\n    paymasterUrl === null ? undefined : probePaymaster(paymasterUrl, probeOpts),\n  ]);\n  if (bProbe && !bProbe.ok) fixes.push(bProbe.error?.hint ?? \"The bundler did not answer correctly.\");\n  if (pProbe && !pProbe.ok) fixes.push(pProbe.error?.hint ?? \"The paymaster did not answer correctly.\");\n\n  let depositWei: bigint | undefined;\n  if (options.publicClient) {\n    try {\n      depositWei = await getPaymasterDeposit(options.publicClient, options.paymasterAddress);\n      if (depositWei === 0n) fixes.push(\"The paymaster's EntryPoint deposit is empty. Deposit PEPU to it.\");\n    } catch {\n      // A failed read must not flip availability; the probes are the source of truth.\n    }\n  }\n\n  const available = !!bProbe?.ok && !!pProbe?.ok && depositWei !== 0n;\n  const configured = bundlerUrl !== null || paymasterUrl !== null;\n  const reason = available\n    ? \"Bundler and paymaster are reachable; sponsored UserOperations can be sent.\"\n    : !configured\n      ? \"No bundler or paymaster URL is configured. Set PEPU_BUNDLER_URL and PEPU_PAYMASTER_URL, or use the hosted defaults.\"\n      : \"A bundler or paymaster is configured but not fully working. See fixes.\";\n  return {\n    available,\n    transport: configured ? \"direct\" : \"none\",\n    bundler: { configured: bundlerUrl !== null, ...(bProbe ? { probe: bProbe } : {}) },\n    paymaster: {\n      configured: paymasterUrl !== null,\n      ...(pProbe ? { probe: pProbe } : {}),\n      ...(depositWei !== undefined ? { depositWei } : {}),\n    },\n    reason,\n    fixes,\n  };\n}\n"]}

package/dist/chunk-KVG3AYYR.js

@@ -0,0 +1,99 @@
+import { toPepuKernelAccount, KERNEL_VERSION } from './chunk-ZB6SVBK4.js';
+import { ENTRY_POINT_V07 } from './chunk-IB2FSPMJ.js';
+import { assertCalls, findFunction } from './chunk-ESMNAXUI.js';
+import { serializePermissionAccount, deserializePermissionAccount, toPermissionValidator } from '@zerodev/permissions';
+import { toCallPolicy, CallPolicyVersion, toTimestampPolicy } from '@zerodev/permissions/policies';
+import { toECDSASigner, toEmptyECDSASigner } from '@zerodev/permissions/signers';
+import { generatePrivateKey, privateKeyToAccount } from 'viem/accounts';
+
+// src/session/store.ts
+function createMemoryStore() {
+  const records = /* @__PURE__ */ new Map();
+  const locks = /* @__PURE__ */ new Set();
+  return {
+    get: (userId) => records.get(userId),
+    set: (record) => {
+      records.set(record.userId, record);
+    },
+    delete: (userId) => {
+      records.delete(userId);
+    },
+    tryLock: (userId) => {
+      if (locks.has(userId)) return false;
+      locks.add(userId);
+      return true;
+    },
+    unlock: (userId) => {
+      locks.delete(userId);
+    }
+  };
+}
+function isLive(record, nowSeconds) {
+  return record.approval !== null && nowSeconds < record.validUntil;
+}
+
+// src/session/kernel.ts
+var CALL_POLICY_V0_0_4_ADDRESS = "0x9a52283276A0ec8740DF50bF01B28A80D880eaf2";
+var TIMESTAMP_POLICY_ADDRESS = "0xB9f8f524bE6EcD8C945b1b87f9ae5C192FdCE20F";
+var SESSION_GAS_RESERVATION_PEPU = { firstOperation: 20.5, laterOperation: 6.9 };
+function zd(client) {
+  return client;
+}
+function buildKernelSessionPolicies(p) {
+  assertCalls(p.calls);
+  return [
+    toCallPolicy({
+      policyVersion: CallPolicyVersion.V0_0_4,
+      permissions: p.calls.map((c) => ({
+        target: c.target,
+        valueLimit: c.valueLimit ?? 0n,
+        abi: [findFunction(c)],
+        functionName: c.functionName
+      }))
+    }),
+    toTimestampPolicy({ validAfter: p.validAfter ?? 0, validUntil: p.validUntil })
+  ];
+}
+function generateSessionKey() {
+  const privateKey = generatePrivateKey();
+  return { privateKey, address: privateKeyToAccount(privateKey).address };
+}
+function permissionFor(publicClient, sessionKeyAddress, policies) {
+  return toPermissionValidator(zd(publicClient), {
+    entryPoint: ENTRY_POINT_V07,
+    kernelVersion: KERNEL_VERSION,
+    signer: toEmptyECDSASigner(sessionKeyAddress),
+    policies
+  });
+}
+async function expectedPermissionId(p) {
+  const permission = await permissionFor(p.publicClient, p.sessionKeyAddress, p.policies);
+  const { permissionId } = permission.getPluginSerializationParams();
+  if (!permissionId) throw new Error("Could not derive the permission id.");
+  return permissionId;
+}
+async function approveKernelSession(p) {
+  const regular = await permissionFor(p.publicClient, p.sessionKeyAddress, p.policies);
+  const account = await toPepuKernelAccount({
+    publicClient: p.publicClient,
+    owner: p.owner,
+    plugins: { regular }
+  });
+  const approval = await serializePermissionAccount(account);
+  return { approval, kernelAddress: account.address };
+}
+async function loadKernelSessionAccount(p) {
+  const sessionSigner = await toECDSASigner({ signer: privateKeyToAccount(p.sessionPrivateKey) });
+  const account = await deserializePermissionAccount(
+    zd(p.publicClient),
+    ENTRY_POINT_V07,
+    KERNEL_VERSION,
+    p.approval,
+    sessionSigner
+  );
+  return account;
+}
+
+export { CALL_POLICY_V0_0_4_ADDRESS, SESSION_GAS_RESERVATION_PEPU, TIMESTAMP_POLICY_ADDRESS, approveKernelSession, buildKernelSessionPolicies, createMemoryStore, expectedPermissionId, generateSessionKey, isLive, loadKernelSessionAccount };
+//# sourceMappingURL=chunk-KVG3AYYR.js.map
+//# sourceMappingURL=chunk-KVG3AYYR.js.map

package/dist/chunk-KVG3AYYR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/session/store.ts","../src/session/kernel.ts"],"names":[],"mappings":";;;;;;;;;AAyDO,SAAS,iBAAA,GAAkC;AAChD,EAAA,MAAM,OAAA,uBAAc,GAAA,EAA2B;AAC/C,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAC9B,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,MAAA,KAAW,OAAA,CAAQ,IAAI,MAAM,CAAA;AAAA,IACnC,GAAA,EAAK,CAAC,MAAA,KAAW;AACf,MAAA,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,MAAA,EAAQ,MAAM,CAAA;AAAA,IACnC,CAAA;AAAA,IACA,MAAA,EAAQ,CAAC,MAAA,KAAW;AAClB,MAAA,OAAA,CAAQ,OAAO,MAAM,CAAA;AAAA,IACvB,CAAA;AAAA,IACA,OAAA,EAAS,CAAC,MAAA,KAAW;AACnB,MAAA,IAAI,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA,EAAG,OAAO,KAAA;AAC9B,MAAA,KAAA,CAAM,IAAI,MAAM,CAAA;AAChB,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA,MAAA,EAAQ,CAAC,MAAA,KAAW;AAClB,MAAA,KAAA,CAAM,OAAO,MAAM,CAAA;AAAA,IACrB;AAAA,GACF;AACF;AAQO,SAAS,MAAA,CAAO,QAAuB,UAAA,EAA6B;AACzE,EAAA,OAAO,MAAA,CAAO,QAAA,KAAa,IAAA,IAAQ,UAAA,GAAa,MAAA,CAAO,UAAA;AACzD;;;ACvCO,IAAM,0BAAA,GAAsC;AAE5C,IAAM,wBAAA,GAAoC;AAW1C,IAAM,4BAAA,GAA+B,EAAE,cAAA,EAAgB,IAAA,EAAM,gBAAgB,GAAA;AAKpF,SAAS,GAAG,MAAA,EAAqC;AAC/C,EAAA,OAAO,MAAA;AACT;AAaO,SAAS,2BAA2B,CAAA,EAI9B;AACX,EAAA,WAAA,CAAY,EAAE,KAAK,CAAA;AACnB,EAAA,OAAO;AAAA,IACL,YAAA,CAAa;AAAA,MACX,eAAe,iBAAA,CAAkB,MAAA;AAAA,MACjC,WAAA,EAAa,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QAC/B,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAA,EAAY,EAAE,UAAA,IAAc,EAAA;AAAA,QAC5B,GAAA,EAAK,CAAC,YAAA,CAAa,CAAC,CAAC,CAAA;AAAA,QACrB,cAAc,CAAA,CAAE;AAAA,OAClB,CAAE;AAAA,KACmC,CAAA;AAAA,IACvC,iBAAA,CAAkB,EAAE,UAAA,EAAY,CAAA,CAAE,cAAc,CAAA,EAAG,UAAA,EAAY,CAAA,CAAE,UAAA,EAAY;AAAA,GAC/E;AACF;AASO,SAAS,kBAAA,GAA4D;AAC1E,EAAA,MAAM,aAAa,kBAAA,EAAmB;AACtC,EAAA,OAAO,EAAE,UAAA,EAAY,OAAA,EAAS,mBAAA,CAAoB,UAAU,EAAE,OAAA,EAAQ;AACxE;AAEA,SAAS,aAAA,CAAc,YAAA,EAA4B,iBAAA,EAA4B,QAAA,EAAoB;AACjG,EAAA,OAAO,qBAAA,CAAsB,EAAA,CAAG,YAAY,CAAA,EAAG;AAAA,IAC7C,UAAA,EAAY,eAAA;AAAA,IACZ,aAAA,EAAe,cAAA;AAAA,IACf,MAAA,EAAQ,mBAAmB,iBAAiB,CAAA;AAAA,IAC5C;AAAA,GACD,CAAA;AACH;AASA,eAAsB,qBAAqB,CAAA,EAIvB;AAClB,EAAA,MAAM,UAAA,GAAa,MAAM,aAAA,CAAc,CAAA,CAAE,cAAc,CAAA,CAAE,iBAAA,EAAmB,EAAE,QAAQ,CAAA;AACtF,EAAA,MAAM,EAAE,YAAA,EAAa,GAAI,UAAA,CAAW,4BAAA,EAA6B;AACjE,EAAA,IAAI,CAAC,YAAA,EAAc,MAAM,IAAI,MAAM,qCAAqC,CAAA;AACxE,EAAA,OAAO,YAAA;AACT;AAeA,eAAsB,qBAAqB,CAAA,EAKe;AACxD,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,CAAc,CAAA,CAAE,cAAc,CAAA,CAAE,iBAAA,EAAmB,EAAE,QAAQ,CAAA;AACnF,EAAA,MAAM,OAAA,GAAU,MAAM,mBAAA,CAAoB;AAAA,IACxC,cAAc,CAAA,CAAE,YAAA;AAAA,IAChB,OAAO,CAAA,CAAE,KAAA;AAAA,IACT,OAAA,EAAS,EAAE,OAAA;AAAQ,GACpB,CAAA;AACD,EAAA,MAAM,QAAA,GAAW,MAAM,0BAAA,CAA2B,OAAgB,CAAA;AAClE,EAAA,OAAO,EAAE,QAAA,EAAU,aAAA,EAAe,OAAA,CAAQ,OAAA,EAAQ;AACpD;AAUA,eAAsB,yBAAyB,CAAA,EAIf;AAC9B,EAAA,MAAM,aAAA,GAAgB,MAAM,aAAA,CAAc,EAAE,QAAQ,mBAAA,CAAoB,CAAA,CAAE,iBAAiB,CAAA,EAAG,CAAA;AAC9F,EAAA,MAAM,UAAU,MAAM,4BAAA;AAAA,IACpB,EAAA,CAAG,EAAE,YAAY,CAAA;AAAA,IACjB,eAAA;AAAA,IACA,cAAA;AAAA,IACA,CAAA,CAAE,QAAA;AAAA,IACF;AAAA,GACF;AACA,EAAA,OAAO,OAAA;AACT","file":"chunk-KVG3AYYR.js","sourcesContent":["import type { Address, Hex } from \"viem\";\n\n/**\n * Server-side session records for the Kernel (on-chain) session flow, keyed by\n * Privy user id. Ported from templates/sponsored-session-app/lib/session-store.ts.\n *\n * WHAT IS STORED: the session private key (a hot key whose power is limited\n * ON-CHAIN by the call and timestamp policies until `validUntil`) and the\n * public approval. The owner's key never reaches the server.\n *\n * PRODUCTION: {@link createMemoryStore} is DEV-GRADE. It is lost on every\n * restart (the user simply starts a new session) and is not shared between\n * serverless instances. A production deployment must implement\n * {@link SessionStore} on a persistent database or KV AND keep\n * `sessionPrivateKey` encrypted at rest (KMS or an envelope key). Nothing else\n * in the SDK changes.\n */\nexport interface SessionRecord {\n  userId: string;\n  ownerAddress: Address;\n  kernelAddress: Address;\n  /** The session key's private half. Encrypt it at rest in any persistent store. */\n  sessionPrivateKey: Hex;\n  sessionKeyAddress: Address;\n  permissionId: string;\n  /** Unix seconds. The on-chain permission is invalid at and after this time. */\n  validUntil: number;\n  /** Present once the owner has signed the grant. */\n  approval: string | null;\n  /** Number of successful sponsored actions in this session. */\n  actions: number;\n}\n\ntype MaybePromise<T> = T | Promise<T>;\n\n/**\n * Pluggable storage for {@link SessionRecord}s. Every method may be sync or\n * async. `tryLock` must be atomic per user: it returns `false` when an action\n * is already running for that user (a multi-instance deployment needs a\n * distributed lock, for example a Redis `SET NX PX`).\n */\nexport interface SessionStore {\n  get(userId: string): MaybePromise<SessionRecord | undefined>;\n  set(record: SessionRecord): MaybePromise<void>;\n  delete(userId: string): MaybePromise<void>;\n  tryLock(userId: string): MaybePromise<boolean>;\n  unlock(userId: string): MaybePromise<void>;\n}\n\n/**\n * An in-memory {@link SessionStore} for development and tests. DEV-GRADE: not\n * persistent, not shared across instances, and the session key is held in\n * plaintext in process memory. Production needs an encrypted persistent store.\n *\n * @example\n * const store = createMemoryStore();\n */\nexport function createMemoryStore(): SessionStore {\n  const records = new Map<string, SessionRecord>();\n  const locks = new Set<string>();\n  return {\n    get: (userId) => records.get(userId),\n    set: (record) => {\n      records.set(record.userId, record);\n    },\n    delete: (userId) => {\n      records.delete(userId);\n    },\n    tryLock: (userId) => {\n      if (locks.has(userId)) return false;\n      locks.add(userId);\n      return true;\n    },\n    unlock: (userId) => {\n      locks.delete(userId);\n    },\n  };\n}\n\n/**\n * True while the on-chain permission is still valid: approved and before expiry.\n *\n * @example\n * isLive(record, Math.floor(Date.now() / 1000));\n */\nexport function isLive(record: SessionRecord, nowSeconds: number): boolean {\n  return record.approval !== null && nowSeconds < record.validUntil;\n}\n","import { deserializePermissionAccount, serializePermissionAccount, toPermissionValidator } from \"@zerodev/permissions\";\nimport type { Policy } from \"@zerodev/permissions\";\nimport { CallPolicyVersion, toCallPolicy, toTimestampPolicy } from \"@zerodev/permissions/policies\";\nimport { toECDSASigner, toEmptyECDSASigner } from \"@zerodev/permissions/signers\";\nimport type { createKernelAccount } from \"@zerodev/sdk\";\nimport type { Abi, Address, Hex, PublicClient } from \"viem\";\nimport { generatePrivateKey, privateKeyToAccount } from \"viem/accounts\";\n\nimport { ENTRY_POINT_V07 } from \"../aa/clients.js\";\nimport { KERNEL_VERSION, toPepuKernelAccount } from \"../aa/kernel.js\";\nimport type { KernelOwner, KernelSmartAccount } from \"../aa/kernel.js\";\nimport { assertCalls, findFunction } from \"./scope.js\";\nimport type { KernelSessionCall } from \"./scope.js\";\n\nexport { KERNEL_VERSION, getKernelAddress } from \"../aa/kernel.js\";\nexport type { KernelOwner, KernelSmartAccount } from \"../aa/kernel.js\";\nexport { createMemoryStore, isLive } from \"./store.js\";\nexport type { SessionRecord, SessionStore } from \"./store.js\";\nexport { checkApproval, describeKernelSessionScope, isCallInScope, parseApproval } from \"./scope.js\";\nexport type { ApprovalCheck, KernelSessionCall, KernelSessionScope, ParsedApproval } from \"./scope.js\";\n\n/**\n * `@pepu-chain/sdk/session/kernel`: on-chain session keys with ZeroDev Kernel\n * permissions. Extracted from templates/sponsored-session-app/lib/{kernel,\n * session-policy,approval}.ts and built on `toPepuKernelAccount`\n * (`plugins.regular`).\n *\n * The scope is enforced ON-CHAIN by ZeroDev's policy contracts, which the\n * user's Kernel account calls during UserOperation validation:\n *\n * - Call policy v0.0.4: only the listed targets and function selectors, with a\n *   native value no larger than `valueLimit` (default 0).\n * - Timestamp policy: the permission is invalid outside `validAfter`..`validUntil`.\n *\n * A UserOperation outside this scope is rejected by the EntryPoint itself, no\n * matter who relays it or what the app backend does.\n *\n * Deployed on PEPU mainnet (eth_getCode verified 2026-10-02): Kernel v3.1\n * factory 0xaac5D4240AF87249B3f71BC8E4A2cae074A3E419, ECDSA validator\n * 0x845ADb2C711129d4f3966735eD98a9F09fC4cE57, ECDSA signer module\n * 0x6A6F069E2a08c2468e7724Ab3250CdBFBA14D4FF, call policy v0.0.4 and the\n * timestamp policy below. Call policy v0.0.5 is NOT deployed on PEPU, so the\n * version is pinned.\n *\n * Optional peers: `@zerodev/sdk`, `@zerodev/permissions`, `@zerodev/ecdsa-validator`.\n */\n\n/** Call policy v0.0.4. Pinned: v0.0.5 is not deployed on PEPU mainnet. */\nexport const CALL_POLICY_V0_0_4_ADDRESS: Address = \"0x9a52283276A0ec8740DF50bF01B28A80D880eaf2\";\n/** ZeroDev timestamp policy on PEPU mainnet. */\nexport const TIMESTAMP_POLICY_ADDRESS: Address = \"0xB9f8f524bE6EcD8C945b1b87f9ae5C192FdCE20F\";\n\n/**\n * Worst-case gas the paymaster policy service RESERVES per sponsored operation,\n * measured on PEPU mainnet with the sponsored-session-app template: the first\n * operation of a session (account deploy plus enabling the permission) about\n * 20.5 PEPU, later operations about 6.9 PEPU. The real first-session cost was\n * about 12.8 PEPU for two operations. Size per-user hourly and daily spend\n * caps above these, or users hit `trailing-hour spend ... would exceed cap`\n * after their first action.\n */\nexport const SESSION_GAS_RESERVATION_PEPU = { firstOperation: 20.5, laterOperation: 6.9 } as const;\n\ntype ZeroDevClient = Parameters<typeof createKernelAccount>[0];\n\n/** Type-level bridge for ZeroDev's own viem copy (same object at runtime). */\nfunction zd(client: PublicClient): ZeroDevClient {\n  return client as unknown as ZeroDevClient;\n}\n\n/**\n * The on-chain policies for one session: call policy v0.0.4 plus the timestamp\n * policy. Pure and deterministic given its input. Only the named function\n * fragments go into the policy, which keeps the grant small.\n *\n * @example\n * const policies = buildKernelSessionPolicies({\n *   calls: [{ target: tapScore, abi: tapScoreAbi, functionName: \"tap\" }],\n *   validUntil: Math.floor(Date.now() / 1000) + 900,\n * });\n */\nexport function buildKernelSessionPolicies(p: {\n  calls: readonly KernelSessionCall[];\n  validUntil: number;\n  validAfter?: number;\n}): Policy[] {\n  assertCalls(p.calls);\n  return [\n    toCallPolicy({\n      policyVersion: CallPolicyVersion.V0_0_4,\n      permissions: p.calls.map((c) => ({\n        target: c.target,\n        valueLimit: c.valueLimit ?? 0n,\n        abi: [findFunction(c)] as Abi,\n        functionName: c.functionName,\n      })),\n    } as Parameters<typeof toCallPolicy>[0]),\n    toTimestampPolicy({ validAfter: p.validAfter ?? 0, validUntil: p.validUntil }),\n  ];\n}\n\n/**\n * A fresh random session key. SERVER ONLY: the private key must never reach\n * the browser. Only the address is sent to the owner for approval.\n *\n * @example\n * const { privateKey, address } = generateSessionKey();\n */\nexport function generateSessionKey(): { privateKey: Hex; address: Address } {\n  const privateKey = generatePrivateKey();\n  return { privateKey, address: privateKeyToAccount(privateKey).address };\n}\n\nfunction permissionFor(publicClient: PublicClient, sessionKeyAddress: Address, policies: Policy[]) {\n  return toPermissionValidator(zd(publicClient), {\n    entryPoint: ENTRY_POINT_V07,\n    kernelVersion: KERNEL_VERSION,\n    signer: toEmptyECDSASigner(sessionKeyAddress),\n    policies,\n  });\n}\n\n/**\n * The permission id the chain derives for this session key plus these\n * policies. The server compares it with a browser-supplied approval.\n *\n * @example\n * const permissionId = await expectedPermissionId({ publicClient, sessionKeyAddress, policies });\n */\nexport async function expectedPermissionId(p: {\n  publicClient: PublicClient;\n  sessionKeyAddress: Address;\n  policies: Policy[];\n}): Promise<string> {\n  const permission = await permissionFor(p.publicClient, p.sessionKeyAddress, p.policies);\n  const { permissionId } = permission.getPluginSerializationParams();\n  if (!permissionId) throw new Error(\"Could not derive the permission id.\");\n  return permissionId;\n}\n\n/**\n * In the user's browser: the owner (the Privy embedded wallet, the only thing\n * that can authorize a session) signs ONE EIP-712 message that enables a\n * permission validator on their Kernel account. That signature is the whole\n * grant. It names the session key's public address (never its private key)\n * and the policies. The returned `approval` holds no secret: it is the enable\n * signature plus the policy parameters, useless without the session key.\n *\n * @example\n * const { approval, kernelAddress } = await approveKernelSession({\n *   publicClient, owner: walletClient, sessionKeyAddress, policies,\n * });\n */\nexport async function approveKernelSession(p: {\n  publicClient: PublicClient;\n  owner: KernelOwner;\n  sessionKeyAddress: Address;\n  policies: Policy[];\n}): Promise<{ approval: string; kernelAddress: Address }> {\n  const regular = await permissionFor(p.publicClient, p.sessionKeyAddress, p.policies);\n  const account = await toPepuKernelAccount({\n    publicClient: p.publicClient,\n    owner: p.owner,\n    plugins: { regular },\n  });\n  const approval = await serializePermissionAccount(account as never);\n  return { approval, kernelAddress: account.address };\n}\n\n/**\n * On the server: rebuild the session's Kernel account from the approval and\n * the server-held session key (an ECDSA signer for that key). No owner\n * signature is involved. Pass the result to `createPepuSponsoredClient`.\n *\n * @example\n * const account = await loadKernelSessionAccount({ publicClient, approval, sessionPrivateKey });\n */\nexport async function loadKernelSessionAccount(p: {\n  publicClient: PublicClient;\n  approval: string;\n  sessionPrivateKey: Hex;\n}): Promise<KernelSmartAccount> {\n  const sessionSigner = await toECDSASigner({ signer: privateKeyToAccount(p.sessionPrivateKey) });\n  const account = await deserializePermissionAccount(\n    zd(p.publicClient),\n    ENTRY_POINT_V07,\n    KERNEL_VERSION,\n    p.approval,\n    sessionSigner,\n  );\n  return account as unknown as KernelSmartAccount;\n}\n"]}

package/dist/chunk-MBA4CLA5.js

@@ -0,0 +1,45 @@
+import { getContract } from './chunk-FCXSP2YF.js';
+import { pepuMainnet } from './chunk-VTQIHMF3.js';
+import { toHex } from 'viem';
+
+function buildPaymasterContext(entries = {}) {
+  const context = {};
+  for (const [key, value] of Object.entries(entries)) {
+    if (value === void 0) continue;
+    const kind = typeof value;
+    if (kind === "bigint" || kind === "function" || kind === "symbol") {
+      throw new Error(
+        `buildPaymasterContext: "${key}" is a ${kind}, which is not JSON-serializable. Convert it to a string or number first.`
+      );
+    }
+    context[key] = value;
+  }
+  return context;
+}
+function buildParams(options) {
+  const entryPointEntry = getContract(pepuMainnet.id, "entryPoint07");
+  const entryPoint = options.entryPoint ?? (entryPointEntry?.status === "deployed" ? entryPointEntry.address : void 0);
+  if (!entryPoint) throw new Error("buildPaymasterRequest: no EntryPoint v0.7 address available.");
+  const chainId = toHex(options.chainId ?? pepuMainnet.id);
+  return options.context ? [options.userOperation, entryPoint, chainId, options.context] : [options.userOperation, entryPoint, chainId];
+}
+function buildPaymasterStubDataRequest(options) {
+  return {
+    jsonrpc: "2.0",
+    id: options.id ?? 1,
+    method: "pm_getPaymasterStubData",
+    params: buildParams(options)
+  };
+}
+function buildPaymasterDataRequest(options) {
+  return {
+    jsonrpc: "2.0",
+    id: options.id ?? 1,
+    method: "pm_getPaymasterData",
+    params: buildParams(options)
+  };
+}
+
+export { buildPaymasterContext, buildPaymasterDataRequest, buildPaymasterStubDataRequest };
+//# sourceMappingURL=chunk-MBA4CLA5.js.map
+//# sourceMappingURL=chunk-MBA4CLA5.js.map

package/dist/chunk-MBA4CLA5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/erc7677.ts"],"names":[],"mappings":";;;;AAkGO,SAAS,qBAAA,CACd,OAAA,GAA6C,EAAC,EAC5B;AAClB,EAAA,MAAM,UAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,IAAI,UAAU,MAAA,EAAW;AACzB,IAAA,MAAM,OAAO,OAAO,KAAA;AACpB,IAAA,IAAI,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,UAAA,IAAc,SAAS,QAAA,EAAU;AACjE,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,wBAAA,EAA2B,GAAG,CAAA,OAAA,EAAU,IAAI,CAAA,yEAAA;AAAA,OAC9C;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,GAAG,CAAA,GAAI,KAAA;AAAA,EACjB;AACA,EAAA,OAAO,OAAA;AACT;AAYA,SAAS,YAAY,OAAA,EAA2D;AAC9E,EAAA,MAAM,eAAA,GAAkB,WAAA,CAAY,WAAA,CAAY,EAAA,EAAI,cAAc,CAAA;AAClE,EAAA,MAAM,aACJ,OAAA,CAAQ,UAAA,KACP,iBAAiB,MAAA,KAAW,UAAA,GAAa,gBAAgB,OAAA,GAAU,MAAA,CAAA;AACtE,EAAA,IAAI,CAAC,UAAA,EAAY,MAAM,IAAI,MAAM,8DAA8D,CAAA;AAC/F,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,OAAA,CAAQ,OAAA,IAAW,YAAY,EAAE,CAAA;AACvD,EAAA,OAAO,OAAA,CAAQ,OAAA,GACX,CAAC,OAAA,CAAQ,eAAe,UAAA,EAAY,OAAA,EAAS,OAAA,CAAQ,OAAO,CAAA,GAC5D,CAAC,OAAA,CAAQ,aAAA,EAAe,YAAY,OAAO,CAAA;AACjD;AAGO,SAAS,8BACd,OAAA,EAC0B;AAC1B,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,EAAA,EAAI,QAAQ,EAAA,IAAM,CAAA;AAAA,IAClB,MAAA,EAAQ,yBAAA;AAAA,IACR,MAAA,EAAQ,YAAY,OAAO;AAAA,GAC7B;AACF;AAGO,SAAS,0BACd,OAAA,EACsB;AACtB,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,EAAA,EAAI,QAAQ,EAAA,IAAM,CAAA;AAAA,IAClB,MAAA,EAAQ,qBAAA;AAAA,IACR,MAAA,EAAQ,YAAY,OAAO;AAAA,GAC7B;AACF","file":"chunk-MBA4CLA5.js","sourcesContent":["import { toHex } from \"viem\";\nimport type { Address, Hex } from \"viem\";\n\nimport { pepuMainnet } from \"./chains.js\";\nimport { getContract } from \"./contracts.js\";\n\n/**\n * ERC-7677 paymaster web-service types, for the two JSON-RPC methods PEPU's\n * paymaster policy service implements: `pm_getPaymasterStubData` and\n * `pm_getPaymasterData`. See https://eips.ethereum.org/EIPS/eip-7677.\n *\n * Pure types plus a few tiny builders: no network, no secrets, safe in a\n * browser bundle. Quantities are `0x`-prefixed hex strings, as on the wire.\n *\n * Note this package never implies sponsorship is available to an app: see\n * `getSponsorshipStatus()`. These types describe the protocol only.\n */\n\n/** An ERC-4337 v0.7 UserOperation in its unpacked JSON-RPC shape. */\nexport interface Erc7677UserOperation {\n  sender: Address;\n  nonce: Hex;\n  factory?: Address;\n  factoryData?: Hex;\n  callData: Hex;\n  callGasLimit: Hex;\n  verificationGasLimit: Hex;\n  preVerificationGas: Hex;\n  maxFeePerGas: Hex;\n  maxPriorityFeePerGas: Hex;\n  paymaster?: Address;\n  paymasterVerificationGasLimit?: Hex;\n  paymasterPostOpGasLimit?: Hex;\n  paymasterData?: Hex;\n  signature: Hex;\n}\n\n/** Paymaster-defined, JSON-serializable context (params[3]). */\nexport type PaymasterContext = Record<string, unknown>;\n\nexport type PaymasterRpcParams = readonly [\n  userOperation: Partial<Erc7677UserOperation> & Pick<Erc7677UserOperation, \"sender\" | \"callData\">,\n  entryPoint: Address,\n  chainId: Hex,\n  context?: PaymasterContext,\n];\n\nexport interface PaymasterStubDataRequest {\n  jsonrpc: \"2.0\";\n  id: number | string;\n  method: \"pm_getPaymasterStubData\";\n  params: PaymasterRpcParams;\n}\n\nexport interface PaymasterDataRequest {\n  jsonrpc: \"2.0\";\n  id: number | string;\n  method: \"pm_getPaymasterData\";\n  params: PaymasterRpcParams;\n}\n\n/** Result of `pm_getPaymasterStubData`. Stub values are for gas estimation only. */\nexport interface PaymasterStubDataResult {\n  paymaster: Address;\n  paymasterData: Hex;\n  paymasterVerificationGasLimit?: Hex;\n  paymasterPostOpGasLimit?: Hex;\n  /** `true` when the stub values are also the final values. */\n  isFinal?: boolean;\n  sponsor?: { name: string; icon?: string };\n}\n\n/** Result of `pm_getPaymasterData`: the signed values to submit. */\nexport interface PaymasterDataResult {\n  paymaster: Address;\n  paymasterData: Hex;\n  paymasterVerificationGasLimit?: Hex;\n  paymasterPostOpGasLimit?: Hex;\n}\n\nexport interface PaymasterRpcError {\n  code: number;\n  message: string;\n  /** PEPU's policy service puts the machine-readable denial reason in `data.reason`. */\n  data?: { reason?: string } & Record<string, unknown>;\n}\n\nexport type PaymasterRpcResponse<TResult> =\n  | { jsonrpc: \"2.0\"; id: number | string | null; result: TResult }\n  | { jsonrpc: \"2.0\"; id: number | string | null; error: PaymasterRpcError };\n\n/**\n * Build a paymaster `context` object: drops `undefined` entries and throws on\n * anything that would not survive `JSON.stringify` (bigint, function, symbol),\n * so a bad value fails here instead of as an opaque RPC error. Returns `{}`\n * for no input. The context is paymaster-defined; PEPU's policy service\n * currently accepts and ignores it.\n */\nexport function buildPaymasterContext(\n  entries: Readonly<Record<string, unknown>> = {},\n): PaymasterContext {\n  const context: PaymasterContext = {};\n  for (const [key, value] of Object.entries(entries)) {\n    if (value === undefined) continue;\n    const kind = typeof value;\n    if (kind === \"bigint\" || kind === \"function\" || kind === \"symbol\") {\n      throw new Error(\n        `buildPaymasterContext: \"${key}\" is a ${kind}, which is not JSON-serializable. Convert it to a string or number first.`,\n      );\n    }\n    context[key] = value;\n  }\n  return context;\n}\n\nexport interface BuildPaymasterRequestOptions {\n  userOperation: PaymasterRpcParams[0];\n  /** Defaults to PEPU mainnet's EntryPoint v0.7. */\n  entryPoint?: Address;\n  /** Defaults to 97741 (PEPU mainnet). */\n  chainId?: number;\n  context?: PaymasterContext;\n  id?: number | string;\n}\n\nfunction buildParams(options: BuildPaymasterRequestOptions): PaymasterRpcParams {\n  const entryPointEntry = getContract(pepuMainnet.id, \"entryPoint07\");\n  const entryPoint =\n    options.entryPoint ??\n    (entryPointEntry?.status === \"deployed\" ? entryPointEntry.address : undefined);\n  if (!entryPoint) throw new Error(\"buildPaymasterRequest: no EntryPoint v0.7 address available.\");\n  const chainId = toHex(options.chainId ?? pepuMainnet.id);\n  return options.context\n    ? [options.userOperation, entryPoint, chainId, options.context]\n    : [options.userOperation, entryPoint, chainId];\n}\n\n/** Build a `pm_getPaymasterStubData` JSON-RPC request body. */\nexport function buildPaymasterStubDataRequest(\n  options: BuildPaymasterRequestOptions,\n): PaymasterStubDataRequest {\n  return {\n    jsonrpc: \"2.0\",\n    id: options.id ?? 1,\n    method: \"pm_getPaymasterStubData\",\n    params: buildParams(options),\n  };\n}\n\n/** Build a `pm_getPaymasterData` JSON-RPC request body. */\nexport function buildPaymasterDataRequest(\n  options: BuildPaymasterRequestOptions,\n): PaymasterDataRequest {\n  return {\n    jsonrpc: \"2.0\",\n    id: options.id ?? 1,\n    method: \"pm_getPaymasterData\",\n    params: buildParams(options),\n  };\n}\n"]}

package/dist/chunk-NE3QKDOB.cjs

@@ -0,0 +1,24 @@
+'use strict';
+
+var chunkDPCZJLB3_cjs = require('./chunk-DPCZJLB3.cjs');
+
+// src/privy/config.ts
+function createPepuPrivyConfig(options = {}) {
+  const chain = options.chain ?? chunkDPCZJLB3_cjs.pepuMainnet;
+  return {
+    ...options.loginMethods ? { loginMethods: options.loginMethods } : {},
+    ...options.appearance ? { appearance: options.appearance } : {},
+    defaultChain: chain,
+    supportedChains: [chain],
+    embeddedWallets: {
+      ethereum: { createOnLogin: options.createOnLogin ?? "off" }
+    },
+    externalWallets: {
+      coinbaseWallet: { config: { preference: { options: "eoaOnly" } } }
+    }
+  };
+}
+
+exports.createPepuPrivyConfig = createPepuPrivyConfig;
+//# sourceMappingURL=chunk-NE3QKDOB.cjs.map
+//# sourceMappingURL=chunk-NE3QKDOB.cjs.map

package/dist/chunk-NE3QKDOB.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/privy/config.ts"],"names":["pepuMainnet"],"mappings":";;;;;AAwDO,SAAS,qBAAA,CACd,OAAA,GAAwC,EAAC,EAClB;AACvB,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAASA,6BAAA;AAC/B,EAAA,OAAO;AAAA,IACL,GAAI,QAAQ,YAAA,GAAe,EAAE,cAAc,OAAA,CAAQ,YAAA,KAAiB,EAAC;AAAA,IACrE,GAAI,QAAQ,UAAA,GAAa,EAAE,YAAY,OAAA,CAAQ,UAAA,KAAe,EAAC;AAAA,IAC/D,YAAA,EAAc,KAAA;AAAA,IACd,eAAA,EAAiB,CAAC,KAAK,CAAA;AAAA,IACvB,eAAA,EAAiB;AAAA,MACf,QAAA,EAAU,EAAE,aAAA,EAAe,OAAA,CAAQ,iBAAiB,KAAA;AAAM,KAC5D;AAAA,IACA,eAAA,EAAiB;AAAA,MACf,cAAA,EAAgB,EAAE,MAAA,EAAQ,EAAE,YAAY,EAAE,OAAA,EAAS,SAAA,EAAU,EAAE;AAAE;AACnE,GACF;AACF","file":"chunk-NE3QKDOB.cjs","sourcesContent":["import { pepuMainnet } from \"../chains.js\";\nimport type { PepuChain } from \"../chains.js\";\n\n/**\n * Typed Privy client config for PEPU (`@pepu-chain/sdk/privy`). Client-safe:\n * no secrets, no Node APIs, and no dependency on any Privy package (the result\n * is structurally assignable to `PrivyClientConfig` from\n * `@privy-io/react-auth`).\n *\n * What it encodes, each a real, reproduced PEPU requirement:\n *\n * - `defaultChain` / `supportedChains` are PEPU mainnet only.\n * - `embeddedWallets.ethereum.createOnLogin` defaults to `\"off\"`: the\n *   recommended pattern is to provision the wallet server-side (see the\n *   wallet-provisioning recipe). NOTE the Privy Dashboard's setting wins over\n *   this value at runtime; it is kept for intent and documentation.\n * - Coinbase Wallet is pinned to `eoaOnly`: Coinbase Smart Wallet does not\n *   support chain 97741, and the default floods the console with \"The\n *   configured chains are not supported by Coinbase Smart Wallet\".\n */\n\nexport type PrivyLoginMethod =\n  | \"email\"\n  | \"google\"\n  | \"wallet\"\n  | \"sms\"\n  | \"apple\"\n  | \"twitter\"\n  | \"discord\"\n  | \"github\";\n\nexport type EmbeddedWalletCreateOnLogin = \"off\" | \"users-without-wallets\" | \"all-users\";\n\nexport interface PepuPrivyClientConfig {\n  loginMethods?: PrivyLoginMethod[];\n  appearance?: { theme?: \"light\" | \"dark\" | `#${string}`; accentColor?: `#${string}`; logo?: string };\n  defaultChain: PepuChain;\n  supportedChains: PepuChain[];\n  embeddedWallets: {\n    ethereum: { createOnLogin: EmbeddedWalletCreateOnLogin };\n  };\n  externalWallets: {\n    coinbaseWallet: { config: { preference: { options: \"eoaOnly\" } } };\n  };\n}\n\nexport interface CreatePepuPrivyConfigOptions {\n  loginMethods?: PrivyLoginMethod[];\n  appearance?: PepuPrivyClientConfig[\"appearance\"];\n  /** Default `\"off\"`. The Privy Dashboard setting overrides this at runtime. */\n  createOnLogin?: EmbeddedWalletCreateOnLogin;\n  /** Default {@link pepuMainnet}. Only pass a different PEPU chain deliberately. */\n  chain?: PepuChain;\n}\n\n/** Build the `config` prop for Privy's `<PrivyProvider>` on PEPU. */\nexport function createPepuPrivyConfig(\n  options: CreatePepuPrivyConfigOptions = {},\n): PepuPrivyClientConfig {\n  const chain = options.chain ?? pepuMainnet;\n  return {\n    ...(options.loginMethods ? { loginMethods: options.loginMethods } : {}),\n    ...(options.appearance ? { appearance: options.appearance } : {}),\n    defaultChain: chain,\n    supportedChains: [chain],\n    embeddedWallets: {\n      ethereum: { createOnLogin: options.createOnLogin ?? \"off\" },\n    },\n    externalWallets: {\n      coinbaseWallet: { config: { preference: { options: \"eoaOnly\" } } },\n    },\n  };\n}\n\nexport * from \"./requirements.js\";\n"]}