@pepu-chain/sdk 0.0.0-stage → 0.2.0

package/dist/requirements-C-QiJkL9.d.cts

@@ -0,0 +1,134 @@
+/**
+ * Privy requirements table and dashboard check (`@pepu-chain/sdk/privy`).
+ * Client-safe: no secrets, no Privy packages. Re-exported from `config.ts`.
+ */
+/** Environment variable names the Privy layer reads. Names only, never values. */
+declare const PRIVY_ENV: {
+    readonly appId: "NEXT_PUBLIC_PRIVY_APP_ID";
+    readonly appSecret: "PRIVY_APP_SECRET";
+    readonly authorizationKey: "PRIVY_AUTHORIZATION_KEY";
+    readonly keyQuorumId: "NEXT_PUBLIC_PRIVY_KEY_QUORUM_ID";
+};
+/**
+ * Accepted fallback names, read only when the canonical {@link PRIVY_ENV} name
+ * is empty. The canonical name is what docs, the doctor and error messages use.
+ */
+declare const PRIVY_ENV_ALIASES: {
+    readonly appId: readonly ["PRIVY_APP_ID"];
+    readonly appSecret: readonly [];
+    readonly authorizationKey: readonly [];
+    readonly keyQuorumId: readonly ["PRIVY_KEY_QUORUM_ID"];
+};
+/**
+ * The subset of Privy's public app-config response this SDK looks at. Every
+ * field is optional: the endpoint is undocumented, so a missing field means
+ * "unknown", never "wrong".
+ */
+interface PrivyPublicAppConfig {
+    /** Origins the dashboard allows (scheme, host and port). */
+    allowed_domains?: string[];
+    /** Enabled login methods, e.g. `"google_oauth"`, `"email"`, `"wallet"`. */
+    login_methods?: string[];
+    embedded_wallet_config?: {
+        ethereum?: {
+            create_on_login?: string;
+        };
+        [key: string]: unknown;
+    };
+    smart_wallet_config?: unknown;
+    [key: string]: unknown;
+}
+/** Result of one requirement check. `"unknown"` means it could not be verified. */
+interface PrivyRequirementResult {
+    ok: boolean | "unknown";
+    detail: string;
+}
+/** One row of {@link PEPU_PRIVY_REQUIREMENTS}. */
+interface PrivyRequirement {
+    id: string;
+    where: "dashboard" | "env" | "code";
+    label: string;
+    required: boolean;
+    pillars: ("login" | "session" | "sponsor")[];
+    /** Only dashboard rows have a check, and it only sees Privy's public app config. */
+    check?: (cfg: PrivyPublicAppConfig, ctx: {
+        origin?: string;
+    }) => PrivyRequirementResult;
+    fix: string;
+    docsUrl: string;
+}
+/**
+ * Everything a PEPU app needs from Privy, as one data table. It feeds the docs,
+ * the MCP `pepu_check_privy_config` tool, the CLI `doctor` and in-app notices.
+ *
+ * @example
+ * ```ts
+ * import { PEPU_PRIVY_REQUIREMENTS } from "@pepu-chain/sdk/privy";
+ * const forSessions = PEPU_PRIVY_REQUIREMENTS.filter((r) => r.pillars.includes("session"));
+ * ```
+ */
+declare const PEPU_PRIVY_REQUIREMENTS: readonly PrivyRequirement[];
+/** One row of a {@link checkPrivyDashboardConfig} result. */
+interface PrivyDashboardCheckItem {
+    id: string;
+    ok: boolean | "unknown";
+    detail: string;
+    fix?: string;
+}
+/**
+ * Check the Privy dashboard settings that can be read without a secret, by
+ * calling the public app-config endpoint the browser SDK itself uses. Best
+ * effort and never throws: anything that cannot be verified (network error,
+ * non-200, field missing) is reported as `"unknown"`, not as a failure.
+ *
+ * Only `where: "dashboard"` requirements are returned. Env and code
+ * requirements cannot be checked from here.
+ *
+ * @example
+ * ```ts
+ * import { checkPrivyDashboardConfig } from "@pepu-chain/sdk/privy";
+ * const r = await checkPrivyDashboardConfig({ appId: "cl...", origin: "http://localhost:3001" });
+ * for (const i of r.items.filter((i) => i.ok === false)) console.log(i.id, i.fix);
+ * ```
+ */
+declare function checkPrivyDashboardConfig(o: {
+    appId: string;
+    origin?: string;
+    fetch?: typeof fetch;
+}): Promise<{
+    ok: boolean;
+    items: PrivyDashboardCheckItem[];
+}>;
+/**
+ * Structurally identical to `DoctorCheck` in `@pepu-chain/sdk/doctor`
+ * (defined locally so `/privy` does not import `/doctor`).
+ */
+interface PrivyDoctorCheck {
+    id: string;
+    status: "pass" | "fail" | "warn" | "skip";
+    message: string;
+    fix?: string;
+}
+/**
+ * Adapter matching `PrivyDashboardChecker` from `@pepu-chain/sdk/doctor`, so the
+ * doctor can run the Privy dashboard checks: pass it as the doctor's injected
+ * checker. Unknown keys fail, env and code rows are skipped (the doctor's env
+ * check covers them), and anything Privy did not report is a warning, not a
+ * failure. `appSecret` is accepted for signature compatibility and never used
+ * or logged. Messages contain no URLs or values.
+ *
+ * @example
+ * ```ts
+ * import { privyDashboardChecker } from "@pepu-chain/sdk/privy";
+ * const checks = await privyDashboardChecker({ appId, requirementKeys: ["login-methods"], fetch });
+ * ```
+ */
+declare function privyDashboardChecker(input: {
+    appId: string;
+    requirementKeys: string[];
+    appSecret?: string;
+    fetch: typeof fetch;
+    origin?: string;
+}): Promise<PrivyDoctorCheck[]>;
+
+export { PEPU_PRIVY_REQUIREMENTS as P, PRIVY_ENV as a, PRIVY_ENV_ALIASES as b, type PrivyDashboardCheckItem as c, type PrivyDoctorCheck as d, type PrivyPublicAppConfig as e, type PrivyRequirement as f, type PrivyRequirementResult as g, checkPrivyDashboardConfig as h, privyDashboardChecker as p };

package/dist/requirements-C-QiJkL9.d.ts

@@ -0,0 +1,134 @@
+/**
+ * Privy requirements table and dashboard check (`@pepu-chain/sdk/privy`).
+ * Client-safe: no secrets, no Privy packages. Re-exported from `config.ts`.
+ */
+/** Environment variable names the Privy layer reads. Names only, never values. */
+declare const PRIVY_ENV: {
+    readonly appId: "NEXT_PUBLIC_PRIVY_APP_ID";
+    readonly appSecret: "PRIVY_APP_SECRET";
+    readonly authorizationKey: "PRIVY_AUTHORIZATION_KEY";
+    readonly keyQuorumId: "NEXT_PUBLIC_PRIVY_KEY_QUORUM_ID";
+};
+/**
+ * Accepted fallback names, read only when the canonical {@link PRIVY_ENV} name
+ * is empty. The canonical name is what docs, the doctor and error messages use.
+ */
+declare const PRIVY_ENV_ALIASES: {
+    readonly appId: readonly ["PRIVY_APP_ID"];
+    readonly appSecret: readonly [];
+    readonly authorizationKey: readonly [];
+    readonly keyQuorumId: readonly ["PRIVY_KEY_QUORUM_ID"];
+};
+/**
+ * The subset of Privy's public app-config response this SDK looks at. Every
+ * field is optional: the endpoint is undocumented, so a missing field means
+ * "unknown", never "wrong".
+ */
+interface PrivyPublicAppConfig {
+    /** Origins the dashboard allows (scheme, host and port). */
+    allowed_domains?: string[];
+    /** Enabled login methods, e.g. `"google_oauth"`, `"email"`, `"wallet"`. */
+    login_methods?: string[];
+    embedded_wallet_config?: {
+        ethereum?: {
+            create_on_login?: string;
+        };
+        [key: string]: unknown;
+    };
+    smart_wallet_config?: unknown;
+    [key: string]: unknown;
+}
+/** Result of one requirement check. `"unknown"` means it could not be verified. */
+interface PrivyRequirementResult {
+    ok: boolean | "unknown";
+    detail: string;
+}
+/** One row of {@link PEPU_PRIVY_REQUIREMENTS}. */
+interface PrivyRequirement {
+    id: string;
+    where: "dashboard" | "env" | "code";
+    label: string;
+    required: boolean;
+    pillars: ("login" | "session" | "sponsor")[];
+    /** Only dashboard rows have a check, and it only sees Privy's public app config. */
+    check?: (cfg: PrivyPublicAppConfig, ctx: {
+        origin?: string;
+    }) => PrivyRequirementResult;
+    fix: string;
+    docsUrl: string;
+}
+/**
+ * Everything a PEPU app needs from Privy, as one data table. It feeds the docs,
+ * the MCP `pepu_check_privy_config` tool, the CLI `doctor` and in-app notices.
+ *
+ * @example
+ * ```ts
+ * import { PEPU_PRIVY_REQUIREMENTS } from "@pepu-chain/sdk/privy";
+ * const forSessions = PEPU_PRIVY_REQUIREMENTS.filter((r) => r.pillars.includes("session"));
+ * ```
+ */
+declare const PEPU_PRIVY_REQUIREMENTS: readonly PrivyRequirement[];
+/** One row of a {@link checkPrivyDashboardConfig} result. */
+interface PrivyDashboardCheckItem {
+    id: string;
+    ok: boolean | "unknown";
+    detail: string;
+    fix?: string;
+}
+/**
+ * Check the Privy dashboard settings that can be read without a secret, by
+ * calling the public app-config endpoint the browser SDK itself uses. Best
+ * effort and never throws: anything that cannot be verified (network error,
+ * non-200, field missing) is reported as `"unknown"`, not as a failure.
+ *
+ * Only `where: "dashboard"` requirements are returned. Env and code
+ * requirements cannot be checked from here.
+ *
+ * @example
+ * ```ts
+ * import { checkPrivyDashboardConfig } from "@pepu-chain/sdk/privy";
+ * const r = await checkPrivyDashboardConfig({ appId: "cl...", origin: "http://localhost:3001" });
+ * for (const i of r.items.filter((i) => i.ok === false)) console.log(i.id, i.fix);
+ * ```
+ */
+declare function checkPrivyDashboardConfig(o: {
+    appId: string;
+    origin?: string;
+    fetch?: typeof fetch;
+}): Promise<{
+    ok: boolean;
+    items: PrivyDashboardCheckItem[];
+}>;
+/**
+ * Structurally identical to `DoctorCheck` in `@pepu-chain/sdk/doctor`
+ * (defined locally so `/privy` does not import `/doctor`).
+ */
+interface PrivyDoctorCheck {
+    id: string;
+    status: "pass" | "fail" | "warn" | "skip";
+    message: string;
+    fix?: string;
+}
+/**
+ * Adapter matching `PrivyDashboardChecker` from `@pepu-chain/sdk/doctor`, so the
+ * doctor can run the Privy dashboard checks: pass it as the doctor's injected
+ * checker. Unknown keys fail, env and code rows are skipped (the doctor's env
+ * check covers them), and anything Privy did not report is a warning, not a
+ * failure. `appSecret` is accepted for signature compatibility and never used
+ * or logged. Messages contain no URLs or values.
+ *
+ * @example
+ * ```ts
+ * import { privyDashboardChecker } from "@pepu-chain/sdk/privy";
+ * const checks = await privyDashboardChecker({ appId, requirementKeys: ["login-methods"], fetch });
+ * ```
+ */
+declare function privyDashboardChecker(input: {
+    appId: string;
+    requirementKeys: string[];
+    appSecret?: string;
+    fetch: typeof fetch;
+    origin?: string;
+}): Promise<PrivyDoctorCheck[]>;
+
+export { PEPU_PRIVY_REQUIREMENTS as P, PRIVY_ENV as a, PRIVY_ENV_ALIASES as b, type PrivyDashboardCheckItem as c, type PrivyDoctorCheck as d, type PrivyPublicAppConfig as e, type PrivyRequirement as f, type PrivyRequirementResult as g, checkPrivyDashboardConfig as h, privyDashboardChecker as p };

package/dist/scope-DBRkN7bR.d.cts

@@ -0,0 +1,94 @@
+import { Address, Hex, Abi } from 'viem';
+
+/**
+ * Pure Kernel session helpers (scope types, consent-screen data, call-in-scope
+ * check, approval parsing). They need only `viem`, so they load without any
+ * `@zerodev/*` peer. Also re-exported from `@pepu-chain/sdk/session/kernel`.
+ */
+/** One function a session may call on one contract. */
+interface KernelSessionCall {
+    target: Address;
+    abi: Abi;
+    functionName: string;
+    /** Max native value per call, in wei. Default `0n`. */
+    valueLimit?: bigint;
+}
+/** What a Kernel session allows, as plain data for a consent screen. */
+interface KernelSessionScope {
+    calls: {
+        target: Address;
+        functionName: string;
+        /** e.g. `tap()`. */
+        signature: string;
+        selector: Hex;
+        /** Max value per call in wei, as a decimal string. */
+        maxValueWei: string;
+    }[];
+    validAfter: number;
+    validUntil: number;
+}
+/**
+ * Consent-screen data: each allowed call with its selector, the value limit
+ * and the expiry. Pure.
+ *
+ * @example
+ * const scope = describeKernelSessionScope({ calls, validUntil });
+ * scope.calls[0]?.signature; // "tap()"
+ */
+declare function describeKernelSessionScope(p: {
+    calls: readonly KernelSessionCall[];
+    validUntil: number;
+    validAfter?: number;
+}): KernelSessionScope;
+/**
+ * True when `call` (target plus 4-byte selector, value) is inside `scope`.
+ * Used server-side to fail fast before sponsoring; the chain still enforces
+ * the real limit. Pure.
+ *
+ * @example
+ * isCallInScope(scope, { to, data, value: 0n });
+ */
+declare function isCallInScope(scope: Pick<KernelSessionScope, "calls">, call: {
+    to: Address;
+    data: Hex;
+    value?: bigint;
+}): boolean;
+/** Parsed fields of an `approval` string. */
+interface ParsedApproval {
+    permissionId: string | null;
+    accountAddress: string | null;
+    isPreInstalled: boolean | null;
+    hasPrivateKey: boolean;
+}
+/**
+ * Parse a serialized approval (base64 JSON from `serializePermissionAccount`)
+ * without trusting it. Returns `null` when it is not an approval at all.
+ *
+ * @example
+ * parseApproval(approval)?.permissionId;
+ */
+declare function parseApproval(approval: string): ParsedApproval | null;
+/** Result of {@link checkApproval}. */
+type ApprovalCheck = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Check a browser-supplied approval before the server stores it. It rejects a
+ * payload that carries a private key, is not an enable-mode grant, is for
+ * another account, or whose permission id differs from the one this server
+ * issued (so scope, session key or expiry changed). The approval is untrusted
+ * input; the chain enforces the real limits regardless.
+ *
+ * @example
+ * const check = checkApproval(approval, { kernelAddress, permissionId });
+ * if (!check.ok) console.log(check.reason);
+ */
+declare function checkApproval(approval: string, expected: {
+    kernelAddress: Address;
+    permissionId: string;
+}): ApprovalCheck;
+
+export { type ApprovalCheck as A, type KernelSessionCall as K, type ParsedApproval as P, type KernelSessionScope as a, checkApproval as c, describeKernelSessionScope as d, isCallInScope as i, parseApproval as p };

package/dist/scope-DBRkN7bR.d.ts

@@ -0,0 +1,94 @@
+import { Address, Hex, Abi } from 'viem';
+
+/**
+ * Pure Kernel session helpers (scope types, consent-screen data, call-in-scope
+ * check, approval parsing). They need only `viem`, so they load without any
+ * `@zerodev/*` peer. Also re-exported from `@pepu-chain/sdk/session/kernel`.
+ */
+/** One function a session may call on one contract. */
+interface KernelSessionCall {
+    target: Address;
+    abi: Abi;
+    functionName: string;
+    /** Max native value per call, in wei. Default `0n`. */
+    valueLimit?: bigint;
+}
+/** What a Kernel session allows, as plain data for a consent screen. */
+interface KernelSessionScope {
+    calls: {
+        target: Address;
+        functionName: string;
+        /** e.g. `tap()`. */
+        signature: string;
+        selector: Hex;
+        /** Max value per call in wei, as a decimal string. */
+        maxValueWei: string;
+    }[];
+    validAfter: number;
+    validUntil: number;
+}
+/**
+ * Consent-screen data: each allowed call with its selector, the value limit
+ * and the expiry. Pure.
+ *
+ * @example
+ * const scope = describeKernelSessionScope({ calls, validUntil });
+ * scope.calls[0]?.signature; // "tap()"
+ */
+declare function describeKernelSessionScope(p: {
+    calls: readonly KernelSessionCall[];
+    validUntil: number;
+    validAfter?: number;
+}): KernelSessionScope;
+/**
+ * True when `call` (target plus 4-byte selector, value) is inside `scope`.
+ * Used server-side to fail fast before sponsoring; the chain still enforces
+ * the real limit. Pure.
+ *
+ * @example
+ * isCallInScope(scope, { to, data, value: 0n });
+ */
+declare function isCallInScope(scope: Pick<KernelSessionScope, "calls">, call: {
+    to: Address;
+    data: Hex;
+    value?: bigint;
+}): boolean;
+/** Parsed fields of an `approval` string. */
+interface ParsedApproval {
+    permissionId: string | null;
+    accountAddress: string | null;
+    isPreInstalled: boolean | null;
+    hasPrivateKey: boolean;
+}
+/**
+ * Parse a serialized approval (base64 JSON from `serializePermissionAccount`)
+ * without trusting it. Returns `null` when it is not an approval at all.
+ *
+ * @example
+ * parseApproval(approval)?.permissionId;
+ */
+declare function parseApproval(approval: string): ParsedApproval | null;
+/** Result of {@link checkApproval}. */
+type ApprovalCheck = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Check a browser-supplied approval before the server stores it. It rejects a
+ * payload that carries a private key, is not an enable-mode grant, is for
+ * another account, or whose permission id differs from the one this server
+ * issued (so scope, session key or expiry changed). The approval is untrusted
+ * input; the chain enforces the real limits regardless.
+ *
+ * @example
+ * const check = checkApproval(approval, { kernelAddress, permissionId });
+ * if (!check.ok) console.log(check.reason);
+ */
+declare function checkApproval(approval: string, expected: {
+    kernelAddress: Address;
+    permissionId: string;
+}): ApprovalCheck;
+
+export { type ApprovalCheck as A, type KernelSessionCall as K, type ParsedApproval as P, type KernelSessionScope as a, checkApproval as c, describeKernelSessionScope as d, isCallInScope as i, parseApproval as p };

package/dist/server.cjs

@@ -0,0 +1,59 @@
+'use strict';
+
+var chunkSVWRRALU_cjs = require('./chunk-SVWRRALU.cjs');
+var chunkIG7RSL2Y_cjs = require('./chunk-IG7RSL2Y.cjs');
+require('./chunk-YQL7NISX.cjs');
+
+// src/server.ts
+chunkSVWRRALU_cjs.assertServerOnly("@pepu-chain/sdk/server");
+
+Object.defineProperty(exports, "DEFAULT_SESSION_MINUTES", {
+  enumerable: true,
+  get: function () { return chunkIG7RSL2Y_cjs.DEFAULT_SESSION_MINUTES; }
+});
+Object.defineProperty(exports, "MAX_SESSION_MINUTES", {
+  enumerable: true,
+  get: function () { return chunkIG7RSL2Y_cjs.MAX_SESSION_MINUTES; }
+});
+Object.defineProperty(exports, "PRIVY_POLICY_NAME_MAX_LENGTH", {
+  enumerable: true,
+  get: function () { return chunkIG7RSL2Y_cjs.PRIVY_POLICY_NAME_MAX_LENGTH; }
+});
+Object.defineProperty(exports, "SESSION_TRUST_NOTICE", {
+  enumerable: true,
+  get: function () { return chunkIG7RSL2Y_cjs.SESSION_TRUST_NOTICE; }
+});
+Object.defineProperty(exports, "assertWithinPolicyNameLimit", {
+  enumerable: true,
+  get: function () { return chunkIG7RSL2Y_cjs.assertWithinPolicyNameLimit; }
+});
+Object.defineProperty(exports, "broadcastSignedTransaction", {
+  enumerable: true,
+  get: function () { return chunkIG7RSL2Y_cjs.broadcastSignedTransaction; }
+});
+Object.defineProperty(exports, "buildSessionPolicy", {
+  enumerable: true,
+  get: function () { return chunkIG7RSL2Y_cjs.buildSessionPolicy; }
+});
+Object.defineProperty(exports, "describeSessionScope", {
+  enumerable: true,
+  get: function () { return chunkIG7RSL2Y_cjs.describeSessionScope; }
+});
+Object.defineProperty(exports, "resolveSessionMinutes", {
+  enumerable: true,
+  get: function () { return chunkIG7RSL2Y_cjs.resolveSessionMinutes; }
+});
+Object.defineProperty(exports, "sessionExpiry", {
+  enumerable: true,
+  get: function () { return chunkIG7RSL2Y_cjs.sessionExpiry; }
+});
+Object.defineProperty(exports, "signAndBroadcast", {
+  enumerable: true,
+  get: function () { return chunkIG7RSL2Y_cjs.signAndBroadcast; }
+});
+Object.defineProperty(exports, "withGasLimitBuffer", {
+  enumerable: true,
+  get: function () { return chunkIG7RSL2Y_cjs.withGasLimitBuffer; }
+});
+//# sourceMappingURL=server.cjs.map
+//# sourceMappingURL=server.cjs.map

package/dist/server.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server.ts"],"names":["assertServerOnly"],"mappings":";;;;;;;AAEAA,kCAAA,CAAiB,wBAAwB,CAAA","file":"server.cjs","sourcesContent":["import { assertServerOnly } from \"./internal/assert-server.js\";\n\nassertServerOnly(\"@pepu-chain/sdk/server\");\n\n/**\n * `@pepu-chain/sdk/server` is kept as a stable import path. It re-exports the\n * pure server-side helpers, which now live in `./session/policy.ts`. New\n * server code lives in `/privy/server`, `/session/server` and\n * `/paymaster/server`.\n */\nexport * from \"./session/policy.js\";\n"]}