@pepu-chain/sdk 0.0.0-stage → 0.2.1

package/dist/chunk-R5PXQNO3.cjs

@@ -0,0 +1,209 @@
+'use strict';
+
+var chunkDH6BFNVJ_cjs = require('./chunk-DH6BFNVJ.cjs');
+var chunkYQL7NISX_cjs = require('./chunk-YQL7NISX.cjs');
+var reactAuth = require('@privy-io/react-auth');
+var react = require('react');
+
+var KNOWN_CODES = new Set(chunkYQL7NISX_cjs.PEPU_ERROR_CATALOG.map((e) => e.code));
+async function errorFromResponse(res) {
+  const body = await res.json().catch(() => null);
+  const e = body?.error;
+  const message = typeof e === "string" ? e : e?.message;
+  const rawCode = typeof e === "object" ? e?.code : void 0;
+  const code = res.status === 409 && !rawCode ? "SESSION_NONE" : rawCode && KNOWN_CODES.has(rawCode) ? rawCode : res.status === 401 ? "AUTH_INVALID_TOKEN" : "UNKNOWN";
+  const Cls = code === "SESSION_NONE" ? chunkYQL7NISX_cjs.PepuSessionError : code === "AUTH_INVALID_TOKEN" ? chunkYQL7NISX_cjs.PepuAuthError : chunkYQL7NISX_cjs.PepuError;
+  return new Cls(code, message ?? `Request failed (${res.status}).`, {
+    status: res.status,
+    ...typeof e === "object" && e?.hint ? { hint: e.hint } : {}
+  });
+}
+function deriveSessionState(p) {
+  if (!p.delegated) return { state: "none" };
+  if (p.expiresAt === void 0) return { state: "active" };
+  const secondsLeft = p.expiresAt - p.nowSeconds;
+  return secondsLeft <= 0 ? { state: "expired", secondsLeft: 0 } : { state: "active", secondsLeft };
+}
+var CHANGE_EVENT = "pepu-session-change";
+var storageKey = (address) => `pepu:session:${address.toLowerCase()}`;
+function readStored(address) {
+  if (!address) return void 0;
+  try {
+    const raw = globalThis.localStorage?.getItem(storageKey(address));
+    return raw ? JSON.parse(raw) : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function writeStored(address, value) {
+  try {
+    if (value) globalThis.localStorage?.setItem(storageKey(address), JSON.stringify(value));
+    else globalThis.localStorage?.removeItem(storageKey(address));
+  } catch {
+  }
+  globalThis.dispatchEvent?.(new Event(CHANGE_EVENT));
+}
+function useAuthFetch(o) {
+  const { user } = reactAuth.usePrivy();
+  const pepuAuthFetch = chunkDH6BFNVJ_cjs.usePepuAuthFetch();
+  const custom = o.authFetch;
+  const authFetch = react.useCallback(
+    (url, init) => custom ? custom(url, init) : pepuAuthFetch(url, init),
+    [custom, pepuAuthFetch]
+  );
+  return { authFetch, address: o.address ?? user?.wallet?.address };
+}
+function useSessionGrant(o = {}) {
+  const { authFetch, address } = useAuthFetch(o);
+  const { addSigners } = reactAuth.useSigners();
+  const [status, setStatus] = react.useState("idle");
+  const [error, setError] = react.useState();
+  const endpoint = o.grantEndpoint ?? "/api/session/grant";
+  const grant = react.useCallback(async () => {
+    setError(void 0);
+    try {
+      if (!address) throw new chunkYQL7NISX_cjs.PepuAuthError("WALLET_NOT_PROVISIONED", "No embedded wallet address yet.");
+      setStatus("creating-policy");
+      const res = await authFetch(endpoint, { method: "POST" });
+      if (!res.ok) throw await errorFromResponse(res);
+      const body = await res.json();
+      if (!body.alreadyGranted) {
+        setStatus("awaiting-consent");
+        try {
+          await addSigners({ address, signers: [{ signerId: body.signerId, policyIds: [body.policyId] }] });
+        } catch (caught) {
+          const msg = caught instanceof Error ? caught.message : "";
+          if (!/duplicate signer/i.test(msg)) throw caught;
+        }
+        writeStored(address, { expiresAt: body.expiresAt, policyId: body.policyId });
+      } else {
+        globalThis.dispatchEvent?.(new Event(CHANGE_EVENT));
+      }
+      setStatus("granted");
+    } catch (e) {
+      setError(chunkYQL7NISX_cjs.toPepuError(e, { op: "session grant" }));
+      setStatus("error");
+    }
+  }, [address, authFetch, endpoint, addSigners]);
+  return { grant, status, ...error ? { error } : {} };
+}
+function useSessionStatus(o = {}) {
+  const { authFetch, address } = useAuthFetch(o);
+  const endpoint = o.statusEndpoint ?? "/api/session/status";
+  const [delegated, setDelegated] = react.useState(false);
+  const [loading, setLoading] = react.useState(true);
+  const [serverExpiresAt, setServerExpiresAt] = react.useState();
+  const [now, setNow] = react.useState(() => Math.floor(Date.now() / 1e3));
+  const [tick, setTick] = react.useState(0);
+  const refetch = react.useCallback(() => setTick((t) => t + 1), []);
+  react.useEffect(() => {
+    let cancelled = false;
+    void (async () => {
+      try {
+        const res = await authFetch(endpoint);
+        if (!res.ok) return;
+        const body = await res.json();
+        if (cancelled) return;
+        setDelegated(Boolean(body.delegated));
+        setServerExpiresAt(body.expiresAt);
+      } catch {
+      } finally {
+        if (!cancelled) setLoading(false);
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [authFetch, endpoint, tick]);
+  react.useEffect(() => {
+    const onChange = () => setTick((t) => t + 1);
+    globalThis.addEventListener?.(CHANGE_EVENT, onChange);
+    return () => globalThis.removeEventListener?.(CHANGE_EVENT, onChange);
+  }, []);
+  react.useEffect(() => {
+    const id = setInterval(() => setNow(Math.floor(Date.now() / 1e3)), 1e3);
+    return () => clearInterval(id);
+  }, []);
+  react.useEffect(() => {
+    if (!o.pollMs) return;
+    const id = setInterval(() => setTick((t) => t + 1), o.pollMs);
+    return () => clearInterval(id);
+  }, [o.pollMs]);
+  const expiresAt = serverExpiresAt ?? readStored(address)?.expiresAt;
+  const derived = deriveSessionState({ delegated, expiresAt, nowSeconds: now });
+  return {
+    state: derived.state,
+    loading,
+    ...expiresAt !== void 0 ? { expiresAt } : {},
+    ...derived.secondsLeft !== void 0 ? { secondsLeft: derived.secondsLeft } : {},
+    refetch
+  };
+}
+function useSessionRevoke(o = {}) {
+  const { authFetch, address } = useAuthFetch(o);
+  const { removeSigners } = reactAuth.useSigners();
+  const [status, setStatus] = react.useState("idle");
+  const [error, setError] = react.useState();
+  const endpoint = o.revokeEndpoint ?? "/api/session/revoke";
+  const revoke = react.useCallback(async () => {
+    setError(void 0);
+    try {
+      if (!address) throw new chunkYQL7NISX_cjs.PepuAuthError("WALLET_NOT_PROVISIONED", "No embedded wallet address yet.");
+      setStatus("revoking");
+      const stored = readStored(address);
+      await removeSigners({ address });
+      try {
+        await authFetch(endpoint, {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify({ policyId: stored?.policyId })
+        });
+      } catch {
+      }
+      writeStored(address, null);
+      setStatus("revoked");
+    } catch (e) {
+      setError(chunkYQL7NISX_cjs.toPepuError(e, { op: "session revoke" }));
+      setStatus("error");
+    }
+  }, [address, authFetch, endpoint, removeSigners]);
+  return { revoke, status, ...error ? { error } : {} };
+}
+function useSessionAct(o) {
+  const { authFetch } = useAuthFetch(o);
+  const [status, setStatus] = react.useState("idle");
+  const [error, setError] = react.useState();
+  const act = react.useCallback(
+    async (input) => {
+      setStatus("pending");
+      setError(void 0);
+      try {
+        const res = await authFetch(o.endpoint, {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify(input ?? {})
+        });
+        if (!res.ok) throw await errorFromResponse(res);
+        const out = await res.json();
+        setStatus("success");
+        return out;
+      } catch (e) {
+        const err = chunkYQL7NISX_cjs.toPepuError(e, { op: "session action" });
+        setError(err);
+        setStatus("error");
+        throw err;
+      }
+    },
+    [authFetch, o.endpoint]
+  );
+  return { act, status, ...error ? { error } : {} };
+}
+
+exports.deriveSessionState = deriveSessionState;
+exports.errorFromResponse = errorFromResponse;
+exports.useSessionAct = useSessionAct;
+exports.useSessionGrant = useSessionGrant;
+exports.useSessionRevoke = useSessionRevoke;
+exports.useSessionStatus = useSessionStatus;
+//# sourceMappingURL=chunk-R5PXQNO3.cjs.map
+//# sourceMappingURL=chunk-R5PXQNO3.cjs.map

package/dist/chunk-R5PXQNO3.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/session/react.ts"],"names":["PEPU_ERROR_CATALOG","PepuSessionError","PepuAuthError","PepuError","usePrivy","usePepuAuthFetch","useCallback","useSigners","useState","toPepuError","useEffect"],"mappings":";;;;;;;AAwBA,IAAM,WAAA,GAAc,IAAI,GAAA,CAAYA,oCAAA,CAAmB,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAUzE,eAAsB,kBAAkB,GAAA,EAAmC;AACzE,EAAA,MAAM,OAAQ,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAG/C,EAAA,MAAM,IAAI,IAAA,EAAM,KAAA;AAChB,EAAA,MAAM,OAAA,GAAU,OAAO,CAAA,KAAM,QAAA,GAAW,IAAI,CAAA,EAAG,OAAA;AAC/C,EAAA,MAAM,OAAA,GAAU,OAAO,CAAA,KAAM,QAAA,GAAW,GAAG,IAAA,GAAO,MAAA;AAClD,EAAA,MAAM,OACJ,GAAA,CAAI,MAAA,KAAW,GAAA,IAAO,CAAC,UACnB,cAAA,GACA,OAAA,IAAW,WAAA,CAAY,GAAA,CAAI,OAAO,CAAA,GAC/B,OAAA,GACD,GAAA,CAAI,MAAA,KAAW,MACb,oBAAA,GACA,SAAA;AACV,EAAA,MAAM,MAAM,IAAA,KAAS,cAAA,GAAiBC,kCAAA,GAAmB,IAAA,KAAS,uBAAuBC,+BAAA,GAAgBC,2BAAA;AACzG,EAAA,OAAO,IAAI,GAAA,CAAI,IAAA,EAAM,WAAW,CAAA,gBAAA,EAAmB,GAAA,CAAI,MAAM,CAAA,EAAA,CAAA,EAAM;AAAA,IACjE,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,GAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,EAAG,IAAA,GAAO,EAAE,IAAA,EAAM,CAAA,CAAE,IAAA,EAAK,GAAI;AAAC,GAC5D,CAAA;AACH;AAaO,SAAS,mBAAmB,CAAA,EAIe;AAChD,EAAA,IAAI,CAAC,CAAA,CAAE,SAAA,EAAW,OAAO,EAAE,OAAO,MAAA,EAAO;AACzC,EAAA,IAAI,EAAE,SAAA,KAAc,MAAA,EAAW,OAAO,EAAE,OAAO,QAAA,EAAS;AACxD,EAAA,MAAM,WAAA,GAAc,CAAA,CAAE,SAAA,GAAY,CAAA,CAAE,UAAA;AACpC,EAAA,OAAO,WAAA,IAAe,CAAA,GAAI,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,CAAA,EAAE,GAAI,EAAE,KAAA,EAAO,QAAA,EAAU,WAAA,EAAY;AAClG;AAGA,IAAM,YAAA,GAAe,qBAAA;AACrB,IAAM,aAAa,CAAC,OAAA,KAA4B,CAAA,aAAA,EAAgB,OAAA,CAAQ,aAAa,CAAA,CAAA;AAOrF,SAAS,WAAW,OAAA,EAAwD;AAC1E,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAO,UAAA,CAAiB,YAAA,EAAc,OAAA,CAAQ,UAAA,CAAW,OAAO,CAAC,CAAA;AACvE,IAAA,OAAO,GAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,GAAsB,KAAA,CAAA;AAAA,EACpD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAEA,SAAS,WAAA,CAAY,SAAiB,KAAA,EAAmC;AACvE,EAAA,IAAI;AACF,IAAA,IAAI,KAAA,EAAQ,UAAA,CAAiB,YAAA,EAAc,OAAA,CAAQ,UAAA,CAAW,OAAO,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAAA,SACvF,UAAA,CAAiB,YAAA,EAAc,UAAA,CAAW,UAAA,CAAW,OAAO,CAAC,CAAA;AAAA,EACrE,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAC,UAAA,CAAiB,aAAA,GAAgB,IAAI,KAAA,CAAM,YAAY,CAAC,CAAA;AAC3D;AAEA,SAAS,aAAa,CAAA,EAAuE;AAC3F,EAAA,MAAM,EAAE,IAAA,EAAK,GAAIC,kBAAA,EAAS;AAC1B,EAAA,MAAM,gBAAgBC,kCAAA,EAAiB;AACvC,EAAA,MAAM,SAAS,CAAA,CAAE,SAAA;AACjB,EAAA,MAAM,SAAA,GAAYC,iBAAA;AAAA,IAChB,CAAC,GAAA,EAAK,IAAA,KAAU,MAAA,GAAS,MAAA,CAAO,KAAK,IAAI,CAAA,GAAI,aAAA,CAAc,GAAA,EAAK,IAAI,CAAA;AAAA,IACpE,CAAC,QAAQ,aAAa;AAAA,GACxB;AACA,EAAA,OAAO,EAAE,SAAA,EAAW,OAAA,EAAS,EAAE,OAAA,IAAW,IAAA,EAAM,QAAQ,OAAA,EAAQ;AAClE;AAaO,SAAS,eAAA,CAAgB,CAAA,GAA8C,EAAC,EAI7E;AACA,EAAA,MAAM,EAAE,SAAA,EAAW,OAAA,EAAQ,GAAI,aAAa,CAAC,CAAA;AAC7C,EAAA,MAAM,EAAE,UAAA,EAAW,GAAIC,oBAAA,EAAW;AAClC,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAIC,eAA6B,MAAM,CAAA;AAC/D,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,cAAA,EAAgC;AAC1D,EAAA,MAAM,QAAA,GAAW,EAAE,aAAA,IAAiB,oBAAA;AAEpC,EAAA,MAAM,KAAA,GAAQF,kBAAY,YAAY;AACpC,IAAA,QAAA,CAAS,MAAS,CAAA;AAClB,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAIJ,+BAAA,CAAc,0BAA0B,iCAAiC,CAAA;AACjG,MAAA,SAAA,CAAU,iBAAiB,CAAA;AAC3B,MAAA,MAAM,MAAM,MAAM,SAAA,CAAU,UAAU,EAAE,MAAA,EAAQ,QAAQ,CAAA;AACxD,MAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,MAAM,kBAAkB,GAAG,CAAA;AAC9C,MAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAG7B,MAAA,IAAI,CAAC,KAAK,cAAA,EAAgB;AACxB,QAAA,SAAA,CAAU,kBAAkB,CAAA;AAC5B,QAAA,IAAI;AACF,UAAA,MAAM,WAAW,EAAE,OAAA,EAAS,OAAA,EAAS,CAAC,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,SAAA,EAAW,CAAC,IAAA,CAAK,QAAQ,CAAA,EAAG,GAAG,CAAA;AAAA,QAClG,SAAS,MAAA,EAAQ;AACf,UAAA,MAAM,GAAA,GAAM,MAAA,YAAkB,KAAA,GAAQ,MAAA,CAAO,OAAA,GAAU,EAAA;AACvD,UAAA,IAAI,CAAC,mBAAA,CAAoB,IAAA,CAAK,GAAG,GAAG,MAAM,MAAA;AAAA,QAC5C;AACA,QAAA,WAAA,CAAY,OAAA,EAAS,EAAE,SAAA,EAAW,IAAA,CAAK,WAAW,QAAA,EAAU,IAAA,CAAK,UAAU,CAAA;AAAA,MAC7E,CAAA,MAAO;AACL,QAAC,UAAA,CAAiB,aAAA,GAAgB,IAAI,KAAA,CAAM,YAAY,CAAC,CAAA;AAAA,MAC3D;AACA,MAAA,SAAA,CAAU,SAAS,CAAA;AAAA,IACrB,SAAS,CAAA,EAAG;AACV,MAAA,QAAA,CAASO,8BAAY,CAAA,EAAG,EAAE,EAAA,EAAI,eAAA,EAAiB,CAAC,CAAA;AAChD,MAAA,SAAA,CAAU,OAAO,CAAA;AAAA,IACnB;AAAA,EACF,GAAG,CAAC,OAAA,EAAS,SAAA,EAAW,QAAA,EAAU,UAAU,CAAC,CAAA;AAE7C,EAAA,OAAO,EAAE,OAAO,MAAA,EAAQ,GAAI,QAAQ,EAAE,KAAA,EAAM,GAAI,EAAC,EAAG;AACtD;AAUO,SAAS,gBAAA,CAAiB,CAAA,GAAgE,EAAC,EAUhG;AACA,EAAA,MAAM,EAAE,SAAA,EAAW,OAAA,EAAQ,GAAI,aAAa,CAAC,CAAA;AAC7C,EAAA,MAAM,QAAA,GAAW,EAAE,cAAA,IAAkB,qBAAA;AACrC,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAID,eAAS,KAAK,CAAA;AAChD,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,CAAA,GAAIA,eAAS,IAAI,CAAA;AAC3C,EAAA,MAAM,CAAC,eAAA,EAAiB,kBAAkB,CAAA,GAAIA,cAAA,EAA6B;AAC3E,EAAA,MAAM,CAAC,GAAA,EAAK,MAAM,CAAA,GAAIA,cAAA,CAAS,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,EAAI,GAAI,GAAI,CAAC,CAAA;AAClE,EAAA,MAAM,CAAC,IAAA,EAAM,OAAO,CAAA,GAAIA,eAAS,CAAC,CAAA;AAClC,EAAA,MAAM,OAAA,GAAUF,iBAAA,CAAY,MAAM,OAAA,CAAQ,CAAC,MAAM,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAA;AAE3D,EAAAI,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,SAAA,GAAY,KAAA;AAChB,IAAA,KAAA,CAAM,YAAY;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,QAAQ,CAAA;AACpC,QAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACb,QAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,QAAA,IAAI,SAAA,EAAW;AACf,QAAA,YAAA,CAAa,OAAA,CAAQ,IAAA,CAAK,SAAS,CAAC,CAAA;AACpC,QAAA,kBAAA,CAAmB,KAAK,SAAS,CAAA;AAAA,MACnC,CAAA,CAAA,MAAQ;AAAA,MAER,CAAA,SAAE;AACA,QAAA,IAAI,CAAC,SAAA,EAAW,UAAA,CAAW,KAAK,CAAA;AAAA,MAClC;AAAA,IACF,CAAA,GAAG;AACH,IAAA,OAAO,MAAM;AACX,MAAA,SAAA,GAAY,IAAA;AAAA,IACd,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,SAAA,EAAW,QAAA,EAAU,IAAI,CAAC,CAAA;AAE9B,EAAAA,eAAA,CAAU,MAAM;AACd,IAAA,MAAM,WAAW,MAAY,OAAA,CAAQ,CAAC,CAAA,KAAM,IAAI,CAAC,CAAA;AACjD,IAAC,UAAA,CAAiB,gBAAA,GAAmB,YAAA,EAAc,QAAQ,CAAA;AAC3D,IAAA,OAAO,MAAO,UAAA,CAAiB,mBAAA,GAAsB,YAAA,EAAc,QAAQ,CAAA;AAAA,EAC7E,CAAA,EAAG,EAAE,CAAA;AAEL,EAAAA,eAAA,CAAU,MAAM;AACd,IAAA,MAAM,EAAA,GAAK,WAAA,CAAY,MAAM,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,EAAI,GAAI,GAAI,CAAC,CAAA,EAAG,GAAI,CAAA;AACxE,IAAA,OAAO,MAAM,cAAc,EAAE,CAAA;AAAA,EAC/B,CAAA,EAAG,EAAE,CAAA;AAEL,EAAAA,eAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,EAAE,MAAA,EAAQ;AACf,IAAA,MAAM,EAAA,GAAK,WAAA,CAAY,MAAM,OAAA,CAAQ,CAAC,MAAM,CAAA,GAAI,CAAC,CAAA,EAAG,CAAA,CAAE,MAAM,CAAA;AAC5D,IAAA,OAAO,MAAM,cAAc,EAAE,CAAA;AAAA,EAC/B,CAAA,EAAG,CAAC,CAAA,CAAE,MAAM,CAAC,CAAA;AAEb,EAAA,MAAM,SAAA,GAAY,eAAA,IAAmB,UAAA,CAAW,OAAO,CAAA,EAAG,SAAA;AAC1D,EAAA,MAAM,UAAU,kBAAA,CAAmB,EAAE,WAAW,SAAA,EAAW,UAAA,EAAY,KAAK,CAAA;AAC5E,EAAA,OAAO;AAAA,IACL,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,OAAA;AAAA,IACA,GAAI,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,KAAc,EAAC;AAAA,IAC/C,GAAI,QAAQ,WAAA,KAAgB,MAAA,GAAY,EAAE,WAAA,EAAa,OAAA,CAAQ,WAAA,EAAY,GAAI,EAAC;AAAA,IAChF;AAAA,GACF;AACF;AAWO,SAAS,gBAAA,CAAiB,CAAA,GAA+C,EAAC,EAI/E;AACA,EAAA,MAAM,EAAE,SAAA,EAAW,OAAA,EAAQ,GAAI,aAAa,CAAC,CAAA;AAC7C,EAAA,MAAM,EAAE,aAAA,EAAc,GAAIH,oBAAA,EAAW;AACrC,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAIC,eAA8B,MAAM,CAAA;AAChE,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,cAAA,EAAgC;AAC1D,EAAA,MAAM,QAAA,GAAW,EAAE,cAAA,IAAkB,qBAAA;AAErC,EAAA,MAAM,MAAA,GAASF,kBAAY,YAAY;AACrC,IAAA,QAAA,CAAS,MAAS,CAAA;AAClB,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAIJ,+BAAA,CAAc,0BAA0B,iCAAiC,CAAA;AACjG,MAAA,SAAA,CAAU,UAAU,CAAA;AACpB,MAAA,MAAM,MAAA,GAAS,WAAW,OAAO,CAAA;AACjC,MAAA,MAAM,aAAA,CAAc,EAAE,OAAA,EAAS,CAAA;AAC/B,MAAA,IAAI;AACF,QAAA,MAAM,UAAU,QAAA,EAAU;AAAA,UACxB,MAAA,EAAQ,MAAA;AAAA,UACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,UAC9C,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,MAAA,EAAQ,UAAU;AAAA,SACpD,CAAA;AAAA,MACH,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,WAAA,CAAY,SAAS,IAAI,CAAA;AACzB,MAAA,SAAA,CAAU,SAAS,CAAA;AAAA,IACrB,SAAS,CAAA,EAAG;AACV,MAAA,QAAA,CAASO,8BAAY,CAAA,EAAG,EAAE,EAAA,EAAI,gBAAA,EAAkB,CAAC,CAAA;AACjD,MAAA,SAAA,CAAU,OAAO,CAAA;AAAA,IACnB;AAAA,EACF,GAAG,CAAC,OAAA,EAAS,SAAA,EAAW,QAAA,EAAU,aAAa,CAAC,CAAA;AAEhD,EAAA,OAAO,EAAE,QAAQ,MAAA,EAAQ,GAAI,QAAQ,EAAE,KAAA,EAAM,GAAI,EAAC,EAAG;AACvD;AAcO,SAAS,cAAoB,CAAA,EAIlC;AACA,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,YAAA,CAAa,CAAC,CAAA;AACpC,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAID,eAA2B,MAAM,CAAA;AAC7D,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIA,cAAA,EAAgC;AAE1D,EAAA,MAAM,GAAA,GAAMF,iBAAA;AAAA,IACV,OAAO,KAAA,KAAyB;AAC9B,MAAA,SAAA,CAAU,SAAS,CAAA;AACnB,MAAA,QAAA,CAAS,MAAS,CAAA;AAClB,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,CAAA,CAAE,QAAA,EAAU;AAAA,UACtC,MAAA,EAAQ,MAAA;AAAA,UACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,UAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,KAAA,IAAS,EAAE;AAAA,SACjC,CAAA;AACD,QAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,MAAM,kBAAkB,GAAG,CAAA;AAC9C,QAAA,MAAM,GAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,QAAA,SAAA,CAAU,SAAS,CAAA;AACnB,QAAA,OAAO,GAAA;AAAA,MACT,SAAS,CAAA,EAAG;AACV,QAAA,MAAM,MAAMG,6BAAA,CAAY,CAAA,EAAG,EAAE,EAAA,EAAI,kBAAkB,CAAA;AACnD,QAAA,QAAA,CAAS,GAAG,CAAA;AACZ,QAAA,SAAA,CAAU,OAAO,CAAA;AACjB,QAAA,MAAM,GAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IACA,CAAC,SAAA,EAAW,CAAA,CAAE,QAAQ;AAAA,GACxB;AAEA,EAAA,OAAO,EAAE,KAAK,MAAA,EAAQ,GAAI,QAAQ,EAAE,KAAA,EAAM,GAAI,EAAC,EAAG;AACpD","file":"chunk-R5PXQNO3.cjs","sourcesContent":["import { usePrivy, useSigners } from \"@privy-io/react-auth\";\nimport { useCallback, useEffect, useState } from \"react\";\nimport { PEPU_ERROR_CATALOG, PepuAuthError, PepuError, PepuSessionError, toPepuError } from \"../errors.js\";\nimport type { PepuErrorCode } from \"../errors.js\";\nimport { usePepuAuthFetch } from \"../privy/react.js\";\n\n/**\n * Client hooks for the Privy-mode session. Ported from\n * templates/game-app/components/session-consent-screen.tsx and\n * session-status-card.tsx. Auth defaults to `usePepuAuthFetch` from\n * `@pepu-chain/sdk/privy/react` (Privy bearer token); pass `authFetch` to use\n * your own.\n */\n\n/** A fetch that adds the user's Privy bearer token. */\nexport type AuthFetch = (url: string, init?: RequestInit) => Promise<Response>;\n\ninterface BaseOptions {\n  /** Custom authenticated fetch. Default: `usePepuAuthFetch()` (Privy bearer token). */\n  authFetch?: AuthFetch;\n  /** The embedded wallet address. Default: the Privy user's wallet. */\n  address?: string;\n}\n\nconst KNOWN_CODES = new Set<string>(PEPU_ERROR_CATALOG.map((e) => e.code));\n\n/**\n * Turn a non-OK route response into a typed error. Reads the\n * `{ error: { code, message, hint } }` body the SDK route factories return.\n * Only a 409 means \"no session\" (`SESSION_NONE`).\n *\n * @example\n * if (!res.ok) throw await errorFromResponse(res);\n */\nexport async function errorFromResponse(res: Response): Promise<PepuError> {\n  const body = (await res.json().catch(() => null)) as {\n    error?: { code?: string; message?: string; hint?: string } | string;\n  } | null;\n  const e = body?.error;\n  const message = typeof e === \"string\" ? e : e?.message;\n  const rawCode = typeof e === \"object\" ? e?.code : undefined;\n  const code: PepuErrorCode =\n    res.status === 409 && !rawCode\n      ? \"SESSION_NONE\"\n      : rawCode && KNOWN_CODES.has(rawCode)\n        ? (rawCode as PepuErrorCode)\n        : res.status === 401\n          ? \"AUTH_INVALID_TOKEN\"\n          : \"UNKNOWN\";\n  const Cls = code === \"SESSION_NONE\" ? PepuSessionError : code === \"AUTH_INVALID_TOKEN\" ? PepuAuthError : PepuError;\n  return new Cls(code, message ?? `Request failed (${res.status}).`, {\n    status: res.status,\n    ...(typeof e === \"object\" && e?.hint ? { hint: e.hint } : {}),\n  });\n}\n\n/** Session state from the server's `delegated` flag and the locally tracked expiry. */\nexport type SessionState = \"none\" | \"active\" | \"expired\";\n\n/**\n * Derive the session state. A delegated signer with a known expiry in the\n * past is `expired` (Privy denies it, but the signer still exists until\n * revoked). Pure.\n *\n * @example\n * deriveSessionState({ delegated: true, expiresAt: 100, nowSeconds: 200 }); // { state: \"expired\", secondsLeft: 0 }\n */\nexport function deriveSessionState(p: {\n  delegated: boolean;\n  expiresAt?: number | undefined;\n  nowSeconds: number;\n}): { state: SessionState; secondsLeft?: number } {\n  if (!p.delegated) return { state: \"none\" };\n  if (p.expiresAt === undefined) return { state: \"active\" };\n  const secondsLeft = p.expiresAt - p.nowSeconds;\n  return secondsLeft <= 0 ? { state: \"expired\", secondsLeft: 0 } : { state: \"active\", secondsLeft };\n}\n\ntype G = { localStorage?: Storage; dispatchEvent?: (e: Event) => boolean; addEventListener?: (t: string, l: () => void) => void; removeEventListener?: (t: string, l: () => void) => void };\nconst CHANGE_EVENT = \"pepu-session-change\";\nconst storageKey = (address: string): string => `pepu:session:${address.toLowerCase()}`;\n\ninterface StoredSession {\n  expiresAt: number;\n  policyId?: string;\n}\n\nfunction readStored(address: string | undefined): StoredSession | undefined {\n  if (!address) return undefined;\n  try {\n    const raw = (globalThis as G).localStorage?.getItem(storageKey(address));\n    return raw ? (JSON.parse(raw) as StoredSession) : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction writeStored(address: string, value: StoredSession | null): void {\n  try {\n    if (value) (globalThis as G).localStorage?.setItem(storageKey(address), JSON.stringify(value));\n    else (globalThis as G).localStorage?.removeItem(storageKey(address));\n  } catch {\n    // Storage can be blocked; the session still works without a countdown.\n  }\n  (globalThis as G).dispatchEvent?.(new Event(CHANGE_EVENT));\n}\n\nfunction useAuthFetch(o: BaseOptions): { authFetch: AuthFetch; address: string | undefined } {\n  const { user } = usePrivy();\n  const pepuAuthFetch = usePepuAuthFetch();\n  const custom = o.authFetch;\n  const authFetch = useCallback<AuthFetch>(\n    (url, init) => (custom ? custom(url, init) : pepuAuthFetch(url, init)),\n    [custom, pepuAuthFetch],\n  );\n  return { authFetch, address: o.address ?? user?.wallet?.address };\n}\n\nexport type SessionGrantStatus = \"idle\" | \"creating-policy\" | \"awaiting-consent\" | \"granted\" | \"error\";\n\n/**\n * Grant a session: POST the grant route, then ask the user to approve with\n * Privy's `addSigners`. Skips `addSigners` when the server says\n * `alreadyGranted`, and swallows Privy's \"duplicate signer\" error.\n *\n * @example\n * const { grant, status, error } = useSessionGrant();\n * <button onClick={grant} disabled={status === \"creating-policy\"}>Grant</button>\n */\nexport function useSessionGrant(o: BaseOptions & { grantEndpoint?: string } = {}): {\n  grant(): Promise<void>;\n  status: SessionGrantStatus;\n  error?: PepuError;\n} {\n  const { authFetch, address } = useAuthFetch(o);\n  const { addSigners } = useSigners();\n  const [status, setStatus] = useState<SessionGrantStatus>(\"idle\");\n  const [error, setError] = useState<PepuError | undefined>();\n  const endpoint = o.grantEndpoint ?? \"/api/session/grant\";\n\n  const grant = useCallback(async () => {\n    setError(undefined);\n    try {\n      if (!address) throw new PepuAuthError(\"WALLET_NOT_PROVISIONED\", \"No embedded wallet address yet.\");\n      setStatus(\"creating-policy\");\n      const res = await authFetch(endpoint, { method: \"POST\" });\n      if (!res.ok) throw await errorFromResponse(res);\n      const body = (await res.json()) as\n        | { alreadyGranted: true }\n        | { alreadyGranted: false; policyId: string; expiresAt: number; signerId: string };\n      if (!body.alreadyGranted) {\n        setStatus(\"awaiting-consent\");\n        try {\n          await addSigners({ address, signers: [{ signerId: body.signerId, policyIds: [body.policyId] }] });\n        } catch (caught) {\n          const msg = caught instanceof Error ? caught.message : \"\";\n          if (!/duplicate signer/i.test(msg)) throw caught;\n        }\n        writeStored(address, { expiresAt: body.expiresAt, policyId: body.policyId });\n      } else {\n        (globalThis as G).dispatchEvent?.(new Event(CHANGE_EVENT));\n      }\n      setStatus(\"granted\");\n    } catch (e) {\n      setError(toPepuError(e, { op: \"session grant\" }));\n      setStatus(\"error\");\n    }\n  }, [address, authFetch, endpoint, addSigners]);\n\n  return { grant, status, ...(error ? { error } : {}) };\n}\n\n/**\n * Current session state. Asks the status route whether a signer is attached\n * and combines it with the expiry tracked from the grant. Ticks every second\n * for `secondsLeft`; re-polls every `pollMs` if given.\n *\n * @example\n * const { state, secondsLeft } = useSessionStatus({ pollMs: 30_000 });\n */\nexport function useSessionStatus(o: BaseOptions & { statusEndpoint?: string; pollMs?: number } = {}): {\n  state: SessionState;\n  /**\n   * True until the first status response (or failure) has been applied. Show a\n   * spinner while it is true so the \"start a session\" UI does not flash on reload.\n   */\n  loading: boolean;\n  expiresAt?: number;\n  secondsLeft?: number;\n  refetch(): void;\n} {\n  const { authFetch, address } = useAuthFetch(o);\n  const endpoint = o.statusEndpoint ?? \"/api/session/status\";\n  const [delegated, setDelegated] = useState(false);\n  const [loading, setLoading] = useState(true);\n  const [serverExpiresAt, setServerExpiresAt] = useState<number | undefined>();\n  const [now, setNow] = useState(() => Math.floor(Date.now() / 1000));\n  const [tick, setTick] = useState(0);\n  const refetch = useCallback(() => setTick((t) => t + 1), []);\n\n  useEffect(() => {\n    let cancelled = false;\n    void (async () => {\n      try {\n        const res = await authFetch(endpoint);\n        if (!res.ok) return;\n        const body = (await res.json()) as { delegated?: boolean; expiresAt?: number };\n        if (cancelled) return;\n        setDelegated(Boolean(body.delegated));\n        setServerExpiresAt(body.expiresAt);\n      } catch {\n        // Keep the last known state on a transient failure.\n      } finally {\n        if (!cancelled) setLoading(false);\n      }\n    })();\n    return () => {\n      cancelled = true;\n    };\n  }, [authFetch, endpoint, tick]);\n\n  useEffect(() => {\n    const onChange = (): void => setTick((t) => t + 1);\n    (globalThis as G).addEventListener?.(CHANGE_EVENT, onChange);\n    return () => (globalThis as G).removeEventListener?.(CHANGE_EVENT, onChange);\n  }, []);\n\n  useEffect(() => {\n    const id = setInterval(() => setNow(Math.floor(Date.now() / 1000)), 1000);\n    return () => clearInterval(id);\n  }, []);\n\n  useEffect(() => {\n    if (!o.pollMs) return;\n    const id = setInterval(() => setTick((t) => t + 1), o.pollMs);\n    return () => clearInterval(id);\n  }, [o.pollMs]);\n\n  const expiresAt = serverExpiresAt ?? readStored(address)?.expiresAt;\n  const derived = deriveSessionState({ delegated, expiresAt, nowSeconds: now });\n  return {\n    state: derived.state,\n    loading,\n    ...(expiresAt !== undefined ? { expiresAt } : {}),\n    ...(derived.secondsLeft !== undefined ? { secondsLeft: derived.secondsLeft } : {}),\n    refetch,\n  };\n}\n\nexport type SessionRevokeStatus = \"idle\" | \"revoking\" | \"revoked\" | \"error\";\n\n/**\n * Revoke the session. The Privy `removeSigners` call is the real revoke; the\n * server revoke route afterwards is best-effort cleanup of the policy.\n *\n * @example\n * const { revoke, status } = useSessionRevoke();\n */\nexport function useSessionRevoke(o: BaseOptions & { revokeEndpoint?: string } = {}): {\n  revoke(): Promise<void>;\n  status: SessionRevokeStatus;\n  error?: PepuError;\n} {\n  const { authFetch, address } = useAuthFetch(o);\n  const { removeSigners } = useSigners();\n  const [status, setStatus] = useState<SessionRevokeStatus>(\"idle\");\n  const [error, setError] = useState<PepuError | undefined>();\n  const endpoint = o.revokeEndpoint ?? \"/api/session/revoke\";\n\n  const revoke = useCallback(async () => {\n    setError(undefined);\n    try {\n      if (!address) throw new PepuAuthError(\"WALLET_NOT_PROVISIONED\", \"No embedded wallet address yet.\");\n      setStatus(\"revoking\");\n      const stored = readStored(address);\n      await removeSigners({ address });\n      try {\n        await authFetch(endpoint, {\n          method: \"POST\",\n          headers: { \"content-type\": \"application/json\" },\n          body: JSON.stringify({ policyId: stored?.policyId }),\n        });\n      } catch {\n        // Cleanup only; the signer is already gone.\n      }\n      writeStored(address, null);\n      setStatus(\"revoked\");\n    } catch (e) {\n      setError(toPepuError(e, { op: \"session revoke\" }));\n      setStatus(\"error\");\n    }\n  }, [address, authFetch, endpoint, removeSigners]);\n\n  return { revoke, status, ...(error ? { error } : {}) };\n}\n\nexport type SessionActStatus = \"idle\" | \"pending\" | \"success\" | \"error\";\n\n/**\n * Call a session action route (built with `createSessionActionRoute`). A 409\n * is the only \"no session\" signal and surfaces as `error.code ===\n * \"SESSION_NONE\"`; any other failure is a failed transaction, so do not send\n * the user back to the consent screen for it.\n *\n * @example\n * const { act } = useSessionAct<{}, { hash: string }>({ endpoint: \"/api/game/tap\" });\n * const { hash } = await act({});\n */\nexport function useSessionAct<I, O>(o: BaseOptions & { endpoint: string }): {\n  act(input: I): Promise<O>;\n  status: SessionActStatus;\n  error?: PepuError;\n} {\n  const { authFetch } = useAuthFetch(o);\n  const [status, setStatus] = useState<SessionActStatus>(\"idle\");\n  const [error, setError] = useState<PepuError | undefined>();\n\n  const act = useCallback(\n    async (input: I): Promise<O> => {\n      setStatus(\"pending\");\n      setError(undefined);\n      try {\n        const res = await authFetch(o.endpoint, {\n          method: \"POST\",\n          headers: { \"content-type\": \"application/json\" },\n          body: JSON.stringify(input ?? {}),\n        });\n        if (!res.ok) throw await errorFromResponse(res);\n        const out = (await res.json()) as O;\n        setStatus(\"success\");\n        return out;\n      } catch (e) {\n        const err = toPepuError(e, { op: \"session action\" });\n        setError(err);\n        setStatus(\"error\");\n        throw err;\n      }\n    },\n    [authFetch, o.endpoint],\n  );\n\n  return { act, status, ...(error ? { error } : {}) };\n}\n"]}

package/dist/chunk-RCMKPJZO.cjs

@@ -0,0 +1,49 @@
+'use strict';
+
+var chunkK7JSQPZO_cjs = require('./chunk-K7JSQPZO.cjs');
+var chunkDPCZJLB3_cjs = require('./chunk-DPCZJLB3.cjs');
+var viem = require('viem');
+
+function buildPaymasterContext(entries = {}) {
+  const context = {};
+  for (const [key, value] of Object.entries(entries)) {
+    if (value === void 0) continue;
+    const kind = typeof value;
+    if (kind === "bigint" || kind === "function" || kind === "symbol") {
+      throw new Error(
+        `buildPaymasterContext: "${key}" is a ${kind}, which is not JSON-serializable. Convert it to a string or number first.`
+      );
+    }
+    context[key] = value;
+  }
+  return context;
+}
+function buildParams(options) {
+  const entryPointEntry = chunkK7JSQPZO_cjs.getContract(chunkDPCZJLB3_cjs.pepuMainnet.id, "entryPoint07");
+  const entryPoint = options.entryPoint ?? (entryPointEntry?.status === "deployed" ? entryPointEntry.address : void 0);
+  if (!entryPoint) throw new Error("buildPaymasterRequest: no EntryPoint v0.7 address available.");
+  const chainId = viem.toHex(options.chainId ?? chunkDPCZJLB3_cjs.pepuMainnet.id);
+  return options.context ? [options.userOperation, entryPoint, chainId, options.context] : [options.userOperation, entryPoint, chainId];
+}
+function buildPaymasterStubDataRequest(options) {
+  return {
+    jsonrpc: "2.0",
+    id: options.id ?? 1,
+    method: "pm_getPaymasterStubData",
+    params: buildParams(options)
+  };
+}
+function buildPaymasterDataRequest(options) {
+  return {
+    jsonrpc: "2.0",
+    id: options.id ?? 1,
+    method: "pm_getPaymasterData",
+    params: buildParams(options)
+  };
+}
+
+exports.buildPaymasterContext = buildPaymasterContext;
+exports.buildPaymasterDataRequest = buildPaymasterDataRequest;
+exports.buildPaymasterStubDataRequest = buildPaymasterStubDataRequest;
+//# sourceMappingURL=chunk-RCMKPJZO.cjs.map
+//# sourceMappingURL=chunk-RCMKPJZO.cjs.map

package/dist/chunk-RCMKPJZO.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/erc7677.ts"],"names":["getContract","pepuMainnet","toHex"],"mappings":";;;;;;AAkGO,SAAS,qBAAA,CACd,OAAA,GAA6C,EAAC,EAC5B;AAClB,EAAA,MAAM,UAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,IAAI,UAAU,MAAA,EAAW;AACzB,IAAA,MAAM,OAAO,OAAO,KAAA;AACpB,IAAA,IAAI,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,UAAA,IAAc,SAAS,QAAA,EAAU;AACjE,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,wBAAA,EAA2B,GAAG,CAAA,OAAA,EAAU,IAAI,CAAA,yEAAA;AAAA,OAC9C;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,GAAG,CAAA,GAAI,KAAA;AAAA,EACjB;AACA,EAAA,OAAO,OAAA;AACT;AAYA,SAAS,YAAY,OAAA,EAA2D;AAC9E,EAAA,MAAM,eAAA,GAAkBA,6BAAA,CAAYC,6BAAA,CAAY,EAAA,EAAI,cAAc,CAAA;AAClE,EAAA,MAAM,aACJ,OAAA,CAAQ,UAAA,KACP,iBAAiB,MAAA,KAAW,UAAA,GAAa,gBAAgB,OAAA,GAAU,MAAA,CAAA;AACtE,EAAA,IAAI,CAAC,UAAA,EAAY,MAAM,IAAI,MAAM,8DAA8D,CAAA;AAC/F,EAAA,MAAM,OAAA,GAAUC,UAAA,CAAM,OAAA,CAAQ,OAAA,IAAWD,8BAAY,EAAE,CAAA;AACvD,EAAA,OAAO,OAAA,CAAQ,OAAA,GACX,CAAC,OAAA,CAAQ,eAAe,UAAA,EAAY,OAAA,EAAS,OAAA,CAAQ,OAAO,CAAA,GAC5D,CAAC,OAAA,CAAQ,aAAA,EAAe,YAAY,OAAO,CAAA;AACjD;AAGO,SAAS,8BACd,OAAA,EAC0B;AAC1B,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,EAAA,EAAI,QAAQ,EAAA,IAAM,CAAA;AAAA,IAClB,MAAA,EAAQ,yBAAA;AAAA,IACR,MAAA,EAAQ,YAAY,OAAO;AAAA,GAC7B;AACF;AAGO,SAAS,0BACd,OAAA,EACsB;AACtB,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,EAAA,EAAI,QAAQ,EAAA,IAAM,CAAA;AAAA,IAClB,MAAA,EAAQ,qBAAA;AAAA,IACR,MAAA,EAAQ,YAAY,OAAO;AAAA,GAC7B;AACF","file":"chunk-RCMKPJZO.cjs","sourcesContent":["import { toHex } from \"viem\";\nimport type { Address, Hex } from \"viem\";\n\nimport { pepuMainnet } from \"./chains.js\";\nimport { getContract } from \"./contracts.js\";\n\n/**\n * ERC-7677 paymaster web-service types, for the two JSON-RPC methods PEPU's\n * paymaster policy service implements: `pm_getPaymasterStubData` and\n * `pm_getPaymasterData`. See https://eips.ethereum.org/EIPS/eip-7677.\n *\n * Pure types plus a few tiny builders: no network, no secrets, safe in a\n * browser bundle. Quantities are `0x`-prefixed hex strings, as on the wire.\n *\n * Note this package never implies sponsorship is available to an app: see\n * `getSponsorshipStatus()`. These types describe the protocol only.\n */\n\n/** An ERC-4337 v0.7 UserOperation in its unpacked JSON-RPC shape. */\nexport interface Erc7677UserOperation {\n  sender: Address;\n  nonce: Hex;\n  factory?: Address;\n  factoryData?: Hex;\n  callData: Hex;\n  callGasLimit: Hex;\n  verificationGasLimit: Hex;\n  preVerificationGas: Hex;\n  maxFeePerGas: Hex;\n  maxPriorityFeePerGas: Hex;\n  paymaster?: Address;\n  paymasterVerificationGasLimit?: Hex;\n  paymasterPostOpGasLimit?: Hex;\n  paymasterData?: Hex;\n  signature: Hex;\n}\n\n/** Paymaster-defined, JSON-serializable context (params[3]). */\nexport type PaymasterContext = Record<string, unknown>;\n\nexport type PaymasterRpcParams = readonly [\n  userOperation: Partial<Erc7677UserOperation> & Pick<Erc7677UserOperation, \"sender\" | \"callData\">,\n  entryPoint: Address,\n  chainId: Hex,\n  context?: PaymasterContext,\n];\n\nexport interface PaymasterStubDataRequest {\n  jsonrpc: \"2.0\";\n  id: number | string;\n  method: \"pm_getPaymasterStubData\";\n  params: PaymasterRpcParams;\n}\n\nexport interface PaymasterDataRequest {\n  jsonrpc: \"2.0\";\n  id: number | string;\n  method: \"pm_getPaymasterData\";\n  params: PaymasterRpcParams;\n}\n\n/** Result of `pm_getPaymasterStubData`. Stub values are for gas estimation only. */\nexport interface PaymasterStubDataResult {\n  paymaster: Address;\n  paymasterData: Hex;\n  paymasterVerificationGasLimit?: Hex;\n  paymasterPostOpGasLimit?: Hex;\n  /** `true` when the stub values are also the final values. */\n  isFinal?: boolean;\n  sponsor?: { name: string; icon?: string };\n}\n\n/** Result of `pm_getPaymasterData`: the signed values to submit. */\nexport interface PaymasterDataResult {\n  paymaster: Address;\n  paymasterData: Hex;\n  paymasterVerificationGasLimit?: Hex;\n  paymasterPostOpGasLimit?: Hex;\n}\n\nexport interface PaymasterRpcError {\n  code: number;\n  message: string;\n  /** PEPU's policy service puts the machine-readable denial reason in `data.reason`. */\n  data?: { reason?: string } & Record<string, unknown>;\n}\n\nexport type PaymasterRpcResponse<TResult> =\n  | { jsonrpc: \"2.0\"; id: number | string | null; result: TResult }\n  | { jsonrpc: \"2.0\"; id: number | string | null; error: PaymasterRpcError };\n\n/**\n * Build a paymaster `context` object: drops `undefined` entries and throws on\n * anything that would not survive `JSON.stringify` (bigint, function, symbol),\n * so a bad value fails here instead of as an opaque RPC error. Returns `{}`\n * for no input. The context is paymaster-defined; PEPU's policy service\n * currently accepts and ignores it.\n */\nexport function buildPaymasterContext(\n  entries: Readonly<Record<string, unknown>> = {},\n): PaymasterContext {\n  const context: PaymasterContext = {};\n  for (const [key, value] of Object.entries(entries)) {\n    if (value === undefined) continue;\n    const kind = typeof value;\n    if (kind === \"bigint\" || kind === \"function\" || kind === \"symbol\") {\n      throw new Error(\n        `buildPaymasterContext: \"${key}\" is a ${kind}, which is not JSON-serializable. Convert it to a string or number first.`,\n      );\n    }\n    context[key] = value;\n  }\n  return context;\n}\n\nexport interface BuildPaymasterRequestOptions {\n  userOperation: PaymasterRpcParams[0];\n  /** Defaults to PEPU mainnet's EntryPoint v0.7. */\n  entryPoint?: Address;\n  /** Defaults to 97741 (PEPU mainnet). */\n  chainId?: number;\n  context?: PaymasterContext;\n  id?: number | string;\n}\n\nfunction buildParams(options: BuildPaymasterRequestOptions): PaymasterRpcParams {\n  const entryPointEntry = getContract(pepuMainnet.id, \"entryPoint07\");\n  const entryPoint =\n    options.entryPoint ??\n    (entryPointEntry?.status === \"deployed\" ? entryPointEntry.address : undefined);\n  if (!entryPoint) throw new Error(\"buildPaymasterRequest: no EntryPoint v0.7 address available.\");\n  const chainId = toHex(options.chainId ?? pepuMainnet.id);\n  return options.context\n    ? [options.userOperation, entryPoint, chainId, options.context]\n    : [options.userOperation, entryPoint, chainId];\n}\n\n/** Build a `pm_getPaymasterStubData` JSON-RPC request body. */\nexport function buildPaymasterStubDataRequest(\n  options: BuildPaymasterRequestOptions,\n): PaymasterStubDataRequest {\n  return {\n    jsonrpc: \"2.0\",\n    id: options.id ?? 1,\n    method: \"pm_getPaymasterStubData\",\n    params: buildParams(options),\n  };\n}\n\n/** Build a `pm_getPaymasterData` JSON-RPC request body. */\nexport function buildPaymasterDataRequest(\n  options: BuildPaymasterRequestOptions,\n): PaymasterDataRequest {\n  return {\n    jsonrpc: \"2.0\",\n    id: options.id ?? 1,\n    method: \"pm_getPaymasterData\",\n    params: buildParams(options),\n  };\n}\n"]}

package/dist/chunk-SVWRRALU.cjs

@@ -0,0 +1,17 @@
+'use strict';
+
+var chunkYQL7NISX_cjs = require('./chunk-YQL7NISX.cjs');
+
+// src/internal/assert-server.ts
+function assertServerOnly(entry) {
+  if (globalThis.window !== void 0) {
+    throw new chunkYQL7NISX_cjs.PepuConfigError(
+      "CONFIG_SERVER_ONLY",
+      `${entry} is server-only and was imported in a browser bundle. Import it from a route handler, server action or script, never from client code.`
+    );
+  }
+}
+
+exports.assertServerOnly = assertServerOnly;
+//# sourceMappingURL=chunk-SVWRRALU.cjs.map
+//# sourceMappingURL=chunk-SVWRRALU.cjs.map

package/dist/chunk-SVWRRALU.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/assert-server.ts"],"names":["PepuConfigError"],"mappings":";;;;;AAUO,SAAS,iBAAiB,KAAA,EAAqB;AACpD,EAAA,IAAK,UAAA,CAAoC,WAAW,MAAA,EAAW;AAC7D,IAAA,MAAM,IAAIA,iCAAA;AAAA,MACR,oBAAA;AAAA,MACA,GAAG,KAAK,CAAA,sIAAA;AAAA,KACV;AAAA,EACF;AACF","file":"chunk-SVWRRALU.cjs","sourcesContent":["import { PepuConfigError } from \"../errors.js\";\n\n/**\n * Called at import time by every server-only entry point\n * (`@pepu-chain/sdk/server`, `/privy/server`, `/session/server`,\n * `/paymaster/server`, `/combo`). Those entries sit next to secrets (Privy app\n * secret, authorization key, paymaster server keys) and must never be bundled\n * for the browser. A browser bundle that reaches one fails loudly here instead\n * of silently shipping the module.\n */\nexport function assertServerOnly(entry: string): void {\n  if ((globalThis as { window?: unknown }).window !== undefined) {\n    throw new PepuConfigError(\n      \"CONFIG_SERVER_ONLY\",\n      `${entry} is server-only and was imported in a browser bundle. Import it from a route handler, server action or script, never from client code.`,\n    );\n  }\n}\n"]}

package/dist/chunk-T43PQXJD.js

@@ -0,0 +1,202 @@
+import { usePepuAuthFetch } from './chunk-EHBPIYY4.js';
+import { PEPU_ERROR_CATALOG, PepuSessionError, PepuAuthError, PepuError, toPepuError } from './chunk-6DSZ4Z2N.js';
+import { useSigners, usePrivy } from '@privy-io/react-auth';
+import { useState, useCallback, useEffect } from 'react';
+
+var KNOWN_CODES = new Set(PEPU_ERROR_CATALOG.map((e) => e.code));
+async function errorFromResponse(res) {
+  const body = await res.json().catch(() => null);
+  const e = body?.error;
+  const message = typeof e === "string" ? e : e?.message;
+  const rawCode = typeof e === "object" ? e?.code : void 0;
+  const code = res.status === 409 && !rawCode ? "SESSION_NONE" : rawCode && KNOWN_CODES.has(rawCode) ? rawCode : res.status === 401 ? "AUTH_INVALID_TOKEN" : "UNKNOWN";
+  const Cls = code === "SESSION_NONE" ? PepuSessionError : code === "AUTH_INVALID_TOKEN" ? PepuAuthError : PepuError;
+  return new Cls(code, message ?? `Request failed (${res.status}).`, {
+    status: res.status,
+    ...typeof e === "object" && e?.hint ? { hint: e.hint } : {}
+  });
+}
+function deriveSessionState(p) {
+  if (!p.delegated) return { state: "none" };
+  if (p.expiresAt === void 0) return { state: "active" };
+  const secondsLeft = p.expiresAt - p.nowSeconds;
+  return secondsLeft <= 0 ? { state: "expired", secondsLeft: 0 } : { state: "active", secondsLeft };
+}
+var CHANGE_EVENT = "pepu-session-change";
+var storageKey = (address) => `pepu:session:${address.toLowerCase()}`;
+function readStored(address) {
+  if (!address) return void 0;
+  try {
+    const raw = globalThis.localStorage?.getItem(storageKey(address));
+    return raw ? JSON.parse(raw) : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function writeStored(address, value) {
+  try {
+    if (value) globalThis.localStorage?.setItem(storageKey(address), JSON.stringify(value));
+    else globalThis.localStorage?.removeItem(storageKey(address));
+  } catch {
+  }
+  globalThis.dispatchEvent?.(new Event(CHANGE_EVENT));
+}
+function useAuthFetch(o) {
+  const { user } = usePrivy();
+  const pepuAuthFetch = usePepuAuthFetch();
+  const custom = o.authFetch;
+  const authFetch = useCallback(
+    (url, init) => custom ? custom(url, init) : pepuAuthFetch(url, init),
+    [custom, pepuAuthFetch]
+  );
+  return { authFetch, address: o.address ?? user?.wallet?.address };
+}
+function useSessionGrant(o = {}) {
+  const { authFetch, address } = useAuthFetch(o);
+  const { addSigners } = useSigners();
+  const [status, setStatus] = useState("idle");
+  const [error, setError] = useState();
+  const endpoint = o.grantEndpoint ?? "/api/session/grant";
+  const grant = useCallback(async () => {
+    setError(void 0);
+    try {
+      if (!address) throw new PepuAuthError("WALLET_NOT_PROVISIONED", "No embedded wallet address yet.");
+      setStatus("creating-policy");
+      const res = await authFetch(endpoint, { method: "POST" });
+      if (!res.ok) throw await errorFromResponse(res);
+      const body = await res.json();
+      if (!body.alreadyGranted) {
+        setStatus("awaiting-consent");
+        try {
+          await addSigners({ address, signers: [{ signerId: body.signerId, policyIds: [body.policyId] }] });
+        } catch (caught) {
+          const msg = caught instanceof Error ? caught.message : "";
+          if (!/duplicate signer/i.test(msg)) throw caught;
+        }
+        writeStored(address, { expiresAt: body.expiresAt, policyId: body.policyId });
+      } else {
+        globalThis.dispatchEvent?.(new Event(CHANGE_EVENT));
+      }
+      setStatus("granted");
+    } catch (e) {
+      setError(toPepuError(e, { op: "session grant" }));
+      setStatus("error");
+    }
+  }, [address, authFetch, endpoint, addSigners]);
+  return { grant, status, ...error ? { error } : {} };
+}
+function useSessionStatus(o = {}) {
+  const { authFetch, address } = useAuthFetch(o);
+  const endpoint = o.statusEndpoint ?? "/api/session/status";
+  const [delegated, setDelegated] = useState(false);
+  const [loading, setLoading] = useState(true);
+  const [serverExpiresAt, setServerExpiresAt] = useState();
+  const [now, setNow] = useState(() => Math.floor(Date.now() / 1e3));
+  const [tick, setTick] = useState(0);
+  const refetch = useCallback(() => setTick((t) => t + 1), []);
+  useEffect(() => {
+    let cancelled = false;
+    void (async () => {
+      try {
+        const res = await authFetch(endpoint);
+        if (!res.ok) return;
+        const body = await res.json();
+        if (cancelled) return;
+        setDelegated(Boolean(body.delegated));
+        setServerExpiresAt(body.expiresAt);
+      } catch {
+      } finally {
+        if (!cancelled) setLoading(false);
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [authFetch, endpoint, tick]);
+  useEffect(() => {
+    const onChange = () => setTick((t) => t + 1);
+    globalThis.addEventListener?.(CHANGE_EVENT, onChange);
+    return () => globalThis.removeEventListener?.(CHANGE_EVENT, onChange);
+  }, []);
+  useEffect(() => {
+    const id = setInterval(() => setNow(Math.floor(Date.now() / 1e3)), 1e3);
+    return () => clearInterval(id);
+  }, []);
+  useEffect(() => {
+    if (!o.pollMs) return;
+    const id = setInterval(() => setTick((t) => t + 1), o.pollMs);
+    return () => clearInterval(id);
+  }, [o.pollMs]);
+  const expiresAt = serverExpiresAt ?? readStored(address)?.expiresAt;
+  const derived = deriveSessionState({ delegated, expiresAt, nowSeconds: now });
+  return {
+    state: derived.state,
+    loading,
+    ...expiresAt !== void 0 ? { expiresAt } : {},
+    ...derived.secondsLeft !== void 0 ? { secondsLeft: derived.secondsLeft } : {},
+    refetch
+  };
+}
+function useSessionRevoke(o = {}) {
+  const { authFetch, address } = useAuthFetch(o);
+  const { removeSigners } = useSigners();
+  const [status, setStatus] = useState("idle");
+  const [error, setError] = useState();
+  const endpoint = o.revokeEndpoint ?? "/api/session/revoke";
+  const revoke = useCallback(async () => {
+    setError(void 0);
+    try {
+      if (!address) throw new PepuAuthError("WALLET_NOT_PROVISIONED", "No embedded wallet address yet.");
+      setStatus("revoking");
+      const stored = readStored(address);
+      await removeSigners({ address });
+      try {
+        await authFetch(endpoint, {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify({ policyId: stored?.policyId })
+        });
+      } catch {
+      }
+      writeStored(address, null);
+      setStatus("revoked");
+    } catch (e) {
+      setError(toPepuError(e, { op: "session revoke" }));
+      setStatus("error");
+    }
+  }, [address, authFetch, endpoint, removeSigners]);
+  return { revoke, status, ...error ? { error } : {} };
+}
+function useSessionAct(o) {
+  const { authFetch } = useAuthFetch(o);
+  const [status, setStatus] = useState("idle");
+  const [error, setError] = useState();
+  const act = useCallback(
+    async (input) => {
+      setStatus("pending");
+      setError(void 0);
+      try {
+        const res = await authFetch(o.endpoint, {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify(input ?? {})
+        });
+        if (!res.ok) throw await errorFromResponse(res);
+        const out = await res.json();
+        setStatus("success");
+        return out;
+      } catch (e) {
+        const err = toPepuError(e, { op: "session action" });
+        setError(err);
+        setStatus("error");
+        throw err;
+      }
+    },
+    [authFetch, o.endpoint]
+  );
+  return { act, status, ...error ? { error } : {} };
+}
+
+export { deriveSessionState, errorFromResponse, useSessionAct, useSessionGrant, useSessionRevoke, useSessionStatus };
+//# sourceMappingURL=chunk-T43PQXJD.js.map
+//# sourceMappingURL=chunk-T43PQXJD.js.map

package/dist/chunk-T43PQXJD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/session/react.ts"],"names":[],"mappings":";;;;;AAwBA,IAAM,WAAA,GAAc,IAAI,GAAA,CAAY,kBAAA,CAAmB,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAUzE,eAAsB,kBAAkB,GAAA,EAAmC;AACzE,EAAA,MAAM,OAAQ,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAG/C,EAAA,MAAM,IAAI,IAAA,EAAM,KAAA;AAChB,EAAA,MAAM,OAAA,GAAU,OAAO,CAAA,KAAM,QAAA,GAAW,IAAI,CAAA,EAAG,OAAA;AAC/C,EAAA,MAAM,OAAA,GAAU,OAAO,CAAA,KAAM,QAAA,GAAW,GAAG,IAAA,GAAO,MAAA;AAClD,EAAA,MAAM,OACJ,GAAA,CAAI,MAAA,KAAW,GAAA,IAAO,CAAC,UACnB,cAAA,GACA,OAAA,IAAW,WAAA,CAAY,GAAA,CAAI,OAAO,CAAA,GAC/B,OAAA,GACD,GAAA,CAAI,MAAA,KAAW,MACb,oBAAA,GACA,SAAA;AACV,EAAA,MAAM,MAAM,IAAA,KAAS,cAAA,GAAiB,gBAAA,GAAmB,IAAA,KAAS,uBAAuB,aAAA,GAAgB,SAAA;AACzG,EAAA,OAAO,IAAI,GAAA,CAAI,IAAA,EAAM,WAAW,CAAA,gBAAA,EAAmB,GAAA,CAAI,MAAM,CAAA,EAAA,CAAA,EAAM;AAAA,IACjE,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,GAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,EAAG,IAAA,GAAO,EAAE,IAAA,EAAM,CAAA,CAAE,IAAA,EAAK,GAAI;AAAC,GAC5D,CAAA;AACH;AAaO,SAAS,mBAAmB,CAAA,EAIe;AAChD,EAAA,IAAI,CAAC,CAAA,CAAE,SAAA,EAAW,OAAO,EAAE,OAAO,MAAA,EAAO;AACzC,EAAA,IAAI,EAAE,SAAA,KAAc,MAAA,EAAW,OAAO,EAAE,OAAO,QAAA,EAAS;AACxD,EAAA,MAAM,WAAA,GAAc,CAAA,CAAE,SAAA,GAAY,CAAA,CAAE,UAAA;AACpC,EAAA,OAAO,WAAA,IAAe,CAAA,GAAI,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,CAAA,EAAE,GAAI,EAAE,KAAA,EAAO,QAAA,EAAU,WAAA,EAAY;AAClG;AAGA,IAAM,YAAA,GAAe,qBAAA;AACrB,IAAM,aAAa,CAAC,OAAA,KAA4B,CAAA,aAAA,EAAgB,OAAA,CAAQ,aAAa,CAAA,CAAA;AAOrF,SAAS,WAAW,OAAA,EAAwD;AAC1E,EAAA,IAAI,CAAC,SAAS,OAAO,MAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,MAAO,UAAA,CAAiB,YAAA,EAAc,OAAA,CAAQ,UAAA,CAAW,OAAO,CAAC,CAAA;AACvE,IAAA,OAAO,GAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,GAAsB,KAAA,CAAA;AAAA,EACpD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAEA,SAAS,WAAA,CAAY,SAAiB,KAAA,EAAmC;AACvE,EAAA,IAAI;AACF,IAAA,IAAI,KAAA,EAAQ,UAAA,CAAiB,YAAA,EAAc,OAAA,CAAQ,UAAA,CAAW,OAAO,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAAA,SACvF,UAAA,CAAiB,YAAA,EAAc,UAAA,CAAW,UAAA,CAAW,OAAO,CAAC,CAAA;AAAA,EACrE,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAC,UAAA,CAAiB,aAAA,GAAgB,IAAI,KAAA,CAAM,YAAY,CAAC,CAAA;AAC3D;AAEA,SAAS,aAAa,CAAA,EAAuE;AAC3F,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,QAAA,EAAS;AAC1B,EAAA,MAAM,gBAAgB,gBAAA,EAAiB;AACvC,EAAA,MAAM,SAAS,CAAA,CAAE,SAAA;AACjB,EAAA,MAAM,SAAA,GAAY,WAAA;AAAA,IAChB,CAAC,GAAA,EAAK,IAAA,KAAU,MAAA,GAAS,MAAA,CAAO,KAAK,IAAI,CAAA,GAAI,aAAA,CAAc,GAAA,EAAK,IAAI,CAAA;AAAA,IACpE,CAAC,QAAQ,aAAa;AAAA,GACxB;AACA,EAAA,OAAO,EAAE,SAAA,EAAW,OAAA,EAAS,EAAE,OAAA,IAAW,IAAA,EAAM,QAAQ,OAAA,EAAQ;AAClE;AAaO,SAAS,eAAA,CAAgB,CAAA,GAA8C,EAAC,EAI7E;AACA,EAAA,MAAM,EAAE,SAAA,EAAW,OAAA,EAAQ,GAAI,aAAa,CAAC,CAAA;AAC7C,EAAA,MAAM,EAAE,UAAA,EAAW,GAAI,UAAA,EAAW;AAClC,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAI,SAA6B,MAAM,CAAA;AAC/D,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAI,QAAA,EAAgC;AAC1D,EAAA,MAAM,QAAA,GAAW,EAAE,aAAA,IAAiB,oBAAA;AAEpC,EAAA,MAAM,KAAA,GAAQ,YAAY,YAAY;AACpC,IAAA,QAAA,CAAS,MAAS,CAAA;AAClB,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,aAAA,CAAc,0BAA0B,iCAAiC,CAAA;AACjG,MAAA,SAAA,CAAU,iBAAiB,CAAA;AAC3B,MAAA,MAAM,MAAM,MAAM,SAAA,CAAU,UAAU,EAAE,MAAA,EAAQ,QAAQ,CAAA;AACxD,MAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,MAAM,kBAAkB,GAAG,CAAA;AAC9C,MAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAG7B,MAAA,IAAI,CAAC,KAAK,cAAA,EAAgB;AACxB,QAAA,SAAA,CAAU,kBAAkB,CAAA;AAC5B,QAAA,IAAI;AACF,UAAA,MAAM,WAAW,EAAE,OAAA,EAAS,OAAA,EAAS,CAAC,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,SAAA,EAAW,CAAC,IAAA,CAAK,QAAQ,CAAA,EAAG,GAAG,CAAA;AAAA,QAClG,SAAS,MAAA,EAAQ;AACf,UAAA,MAAM,GAAA,GAAM,MAAA,YAAkB,KAAA,GAAQ,MAAA,CAAO,OAAA,GAAU,EAAA;AACvD,UAAA,IAAI,CAAC,mBAAA,CAAoB,IAAA,CAAK,GAAG,GAAG,MAAM,MAAA;AAAA,QAC5C;AACA,QAAA,WAAA,CAAY,OAAA,EAAS,EAAE,SAAA,EAAW,IAAA,CAAK,WAAW,QAAA,EAAU,IAAA,CAAK,UAAU,CAAA;AAAA,MAC7E,CAAA,MAAO;AACL,QAAC,UAAA,CAAiB,aAAA,GAAgB,IAAI,KAAA,CAAM,YAAY,CAAC,CAAA;AAAA,MAC3D;AACA,MAAA,SAAA,CAAU,SAAS,CAAA;AAAA,IACrB,SAAS,CAAA,EAAG;AACV,MAAA,QAAA,CAAS,YAAY,CAAA,EAAG,EAAE,EAAA,EAAI,eAAA,EAAiB,CAAC,CAAA;AAChD,MAAA,SAAA,CAAU,OAAO,CAAA;AAAA,IACnB;AAAA,EACF,GAAG,CAAC,OAAA,EAAS,SAAA,EAAW,QAAA,EAAU,UAAU,CAAC,CAAA;AAE7C,EAAA,OAAO,EAAE,OAAO,MAAA,EAAQ,GAAI,QAAQ,EAAE,KAAA,EAAM,GAAI,EAAC,EAAG;AACtD;AAUO,SAAS,gBAAA,CAAiB,CAAA,GAAgE,EAAC,EAUhG;AACA,EAAA,MAAM,EAAE,SAAA,EAAW,OAAA,EAAQ,GAAI,aAAa,CAAC,CAAA;AAC7C,EAAA,MAAM,QAAA,GAAW,EAAE,cAAA,IAAkB,qBAAA;AACrC,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAI,SAAS,KAAK,CAAA;AAChD,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,CAAA,GAAI,SAAS,IAAI,CAAA;AAC3C,EAAA,MAAM,CAAC,eAAA,EAAiB,kBAAkB,CAAA,GAAI,QAAA,EAA6B;AAC3E,EAAA,MAAM,CAAC,GAAA,EAAK,MAAM,CAAA,GAAI,QAAA,CAAS,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,EAAI,GAAI,GAAI,CAAC,CAAA;AAClE,EAAA,MAAM,CAAC,IAAA,EAAM,OAAO,CAAA,GAAI,SAAS,CAAC,CAAA;AAClC,EAAA,MAAM,OAAA,GAAU,WAAA,CAAY,MAAM,OAAA,CAAQ,CAAC,MAAM,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAA;AAE3D,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,SAAA,GAAY,KAAA;AAChB,IAAA,KAAA,CAAM,YAAY;AAChB,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,QAAQ,CAAA;AACpC,QAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACb,QAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,QAAA,IAAI,SAAA,EAAW;AACf,QAAA,YAAA,CAAa,OAAA,CAAQ,IAAA,CAAK,SAAS,CAAC,CAAA;AACpC,QAAA,kBAAA,CAAmB,KAAK,SAAS,CAAA;AAAA,MACnC,CAAA,CAAA,MAAQ;AAAA,MAER,CAAA,SAAE;AACA,QAAA,IAAI,CAAC,SAAA,EAAW,UAAA,CAAW,KAAK,CAAA;AAAA,MAClC;AAAA,IACF,CAAA,GAAG;AACH,IAAA,OAAO,MAAM;AACX,MAAA,SAAA,GAAY,IAAA;AAAA,IACd,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,SAAA,EAAW,QAAA,EAAU,IAAI,CAAC,CAAA;AAE9B,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,MAAM,WAAW,MAAY,OAAA,CAAQ,CAAC,CAAA,KAAM,IAAI,CAAC,CAAA;AACjD,IAAC,UAAA,CAAiB,gBAAA,GAAmB,YAAA,EAAc,QAAQ,CAAA;AAC3D,IAAA,OAAO,MAAO,UAAA,CAAiB,mBAAA,GAAsB,YAAA,EAAc,QAAQ,CAAA;AAAA,EAC7E,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,MAAM,EAAA,GAAK,WAAA,CAAY,MAAM,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,EAAI,GAAI,GAAI,CAAC,CAAA,EAAG,GAAI,CAAA;AACxE,IAAA,OAAO,MAAM,cAAc,EAAE,CAAA;AAAA,EAC/B,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,EAAE,MAAA,EAAQ;AACf,IAAA,MAAM,EAAA,GAAK,WAAA,CAAY,MAAM,OAAA,CAAQ,CAAC,MAAM,CAAA,GAAI,CAAC,CAAA,EAAG,CAAA,CAAE,MAAM,CAAA;AAC5D,IAAA,OAAO,MAAM,cAAc,EAAE,CAAA;AAAA,EAC/B,CAAA,EAAG,CAAC,CAAA,CAAE,MAAM,CAAC,CAAA;AAEb,EAAA,MAAM,SAAA,GAAY,eAAA,IAAmB,UAAA,CAAW,OAAO,CAAA,EAAG,SAAA;AAC1D,EAAA,MAAM,UAAU,kBAAA,CAAmB,EAAE,WAAW,SAAA,EAAW,UAAA,EAAY,KAAK,CAAA;AAC5E,EAAA,OAAO;AAAA,IACL,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,OAAA;AAAA,IACA,GAAI,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,KAAc,EAAC;AAAA,IAC/C,GAAI,QAAQ,WAAA,KAAgB,MAAA,GAAY,EAAE,WAAA,EAAa,OAAA,CAAQ,WAAA,EAAY,GAAI,EAAC;AAAA,IAChF;AAAA,GACF;AACF;AAWO,SAAS,gBAAA,CAAiB,CAAA,GAA+C,EAAC,EAI/E;AACA,EAAA,MAAM,EAAE,SAAA,EAAW,OAAA,EAAQ,GAAI,aAAa,CAAC,CAAA;AAC7C,EAAA,MAAM,EAAE,aAAA,EAAc,GAAI,UAAA,EAAW;AACrC,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAI,SAA8B,MAAM,CAAA;AAChE,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAI,QAAA,EAAgC;AAC1D,EAAA,MAAM,QAAA,GAAW,EAAE,cAAA,IAAkB,qBAAA;AAErC,EAAA,MAAM,MAAA,GAAS,YAAY,YAAY;AACrC,IAAA,QAAA,CAAS,MAAS,CAAA;AAClB,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,aAAA,CAAc,0BAA0B,iCAAiC,CAAA;AACjG,MAAA,SAAA,CAAU,UAAU,CAAA;AACpB,MAAA,MAAM,MAAA,GAAS,WAAW,OAAO,CAAA;AACjC,MAAA,MAAM,aAAA,CAAc,EAAE,OAAA,EAAS,CAAA;AAC/B,MAAA,IAAI;AACF,QAAA,MAAM,UAAU,QAAA,EAAU;AAAA,UACxB,MAAA,EAAQ,MAAA;AAAA,UACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,UAC9C,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,MAAA,EAAQ,UAAU;AAAA,SACpD,CAAA;AAAA,MACH,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,WAAA,CAAY,SAAS,IAAI,CAAA;AACzB,MAAA,SAAA,CAAU,SAAS,CAAA;AAAA,IACrB,SAAS,CAAA,EAAG;AACV,MAAA,QAAA,CAAS,YAAY,CAAA,EAAG,EAAE,EAAA,EAAI,gBAAA,EAAkB,CAAC,CAAA;AACjD,MAAA,SAAA,CAAU,OAAO,CAAA;AAAA,IACnB;AAAA,EACF,GAAG,CAAC,OAAA,EAAS,SAAA,EAAW,QAAA,EAAU,aAAa,CAAC,CAAA;AAEhD,EAAA,OAAO,EAAE,QAAQ,MAAA,EAAQ,GAAI,QAAQ,EAAE,KAAA,EAAM,GAAI,EAAC,EAAG;AACvD;AAcO,SAAS,cAAoB,CAAA,EAIlC;AACA,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,YAAA,CAAa,CAAC,CAAA;AACpC,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAI,SAA2B,MAAM,CAAA;AAC7D,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAI,QAAA,EAAgC;AAE1D,EAAA,MAAM,GAAA,GAAM,WAAA;AAAA,IACV,OAAO,KAAA,KAAyB;AAC9B,MAAA,SAAA,CAAU,SAAS,CAAA;AACnB,MAAA,QAAA,CAAS,MAAS,CAAA;AAClB,MAAA,IAAI;AACF,QAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,CAAA,CAAE,QAAA,EAAU;AAAA,UACtC,MAAA,EAAQ,MAAA;AAAA,UACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,UAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,KAAA,IAAS,EAAE;AAAA,SACjC,CAAA;AACD,QAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,MAAM,kBAAkB,GAAG,CAAA;AAC9C,QAAA,MAAM,GAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,QAAA,SAAA,CAAU,SAAS,CAAA;AACnB,QAAA,OAAO,GAAA;AAAA,MACT,SAAS,CAAA,EAAG;AACV,QAAA,MAAM,MAAM,WAAA,CAAY,CAAA,EAAG,EAAE,EAAA,EAAI,kBAAkB,CAAA;AACnD,QAAA,QAAA,CAAS,GAAG,CAAA;AACZ,QAAA,SAAA,CAAU,OAAO,CAAA;AACjB,QAAA,MAAM,GAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IACA,CAAC,SAAA,EAAW,CAAA,CAAE,QAAQ;AAAA,GACxB;AAEA,EAAA,OAAO,EAAE,KAAK,MAAA,EAAQ,GAAI,QAAQ,EAAE,KAAA,EAAM,GAAI,EAAC,EAAG;AACpD","file":"chunk-T43PQXJD.js","sourcesContent":["import { usePrivy, useSigners } from \"@privy-io/react-auth\";\nimport { useCallback, useEffect, useState } from \"react\";\nimport { PEPU_ERROR_CATALOG, PepuAuthError, PepuError, PepuSessionError, toPepuError } from \"../errors.js\";\nimport type { PepuErrorCode } from \"../errors.js\";\nimport { usePepuAuthFetch } from \"../privy/react.js\";\n\n/**\n * Client hooks for the Privy-mode session. Ported from\n * templates/game-app/components/session-consent-screen.tsx and\n * session-status-card.tsx. Auth defaults to `usePepuAuthFetch` from\n * `@pepu-chain/sdk/privy/react` (Privy bearer token); pass `authFetch` to use\n * your own.\n */\n\n/** A fetch that adds the user's Privy bearer token. */\nexport type AuthFetch = (url: string, init?: RequestInit) => Promise<Response>;\n\ninterface BaseOptions {\n  /** Custom authenticated fetch. Default: `usePepuAuthFetch()` (Privy bearer token). */\n  authFetch?: AuthFetch;\n  /** The embedded wallet address. Default: the Privy user's wallet. */\n  address?: string;\n}\n\nconst KNOWN_CODES = new Set<string>(PEPU_ERROR_CATALOG.map((e) => e.code));\n\n/**\n * Turn a non-OK route response into a typed error. Reads the\n * `{ error: { code, message, hint } }` body the SDK route factories return.\n * Only a 409 means \"no session\" (`SESSION_NONE`).\n *\n * @example\n * if (!res.ok) throw await errorFromResponse(res);\n */\nexport async function errorFromResponse(res: Response): Promise<PepuError> {\n  const body = (await res.json().catch(() => null)) as {\n    error?: { code?: string; message?: string; hint?: string } | string;\n  } | null;\n  const e = body?.error;\n  const message = typeof e === \"string\" ? e : e?.message;\n  const rawCode = typeof e === \"object\" ? e?.code : undefined;\n  const code: PepuErrorCode =\n    res.status === 409 && !rawCode\n      ? \"SESSION_NONE\"\n      : rawCode && KNOWN_CODES.has(rawCode)\n        ? (rawCode as PepuErrorCode)\n        : res.status === 401\n          ? \"AUTH_INVALID_TOKEN\"\n          : \"UNKNOWN\";\n  const Cls = code === \"SESSION_NONE\" ? PepuSessionError : code === \"AUTH_INVALID_TOKEN\" ? PepuAuthError : PepuError;\n  return new Cls(code, message ?? `Request failed (${res.status}).`, {\n    status: res.status,\n    ...(typeof e === \"object\" && e?.hint ? { hint: e.hint } : {}),\n  });\n}\n\n/** Session state from the server's `delegated` flag and the locally tracked expiry. */\nexport type SessionState = \"none\" | \"active\" | \"expired\";\n\n/**\n * Derive the session state. A delegated signer with a known expiry in the\n * past is `expired` (Privy denies it, but the signer still exists until\n * revoked). Pure.\n *\n * @example\n * deriveSessionState({ delegated: true, expiresAt: 100, nowSeconds: 200 }); // { state: \"expired\", secondsLeft: 0 }\n */\nexport function deriveSessionState(p: {\n  delegated: boolean;\n  expiresAt?: number | undefined;\n  nowSeconds: number;\n}): { state: SessionState; secondsLeft?: number } {\n  if (!p.delegated) return { state: \"none\" };\n  if (p.expiresAt === undefined) return { state: \"active\" };\n  const secondsLeft = p.expiresAt - p.nowSeconds;\n  return secondsLeft <= 0 ? { state: \"expired\", secondsLeft: 0 } : { state: \"active\", secondsLeft };\n}\n\ntype G = { localStorage?: Storage; dispatchEvent?: (e: Event) => boolean; addEventListener?: (t: string, l: () => void) => void; removeEventListener?: (t: string, l: () => void) => void };\nconst CHANGE_EVENT = \"pepu-session-change\";\nconst storageKey = (address: string): string => `pepu:session:${address.toLowerCase()}`;\n\ninterface StoredSession {\n  expiresAt: number;\n  policyId?: string;\n}\n\nfunction readStored(address: string | undefined): StoredSession | undefined {\n  if (!address) return undefined;\n  try {\n    const raw = (globalThis as G).localStorage?.getItem(storageKey(address));\n    return raw ? (JSON.parse(raw) as StoredSession) : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction writeStored(address: string, value: StoredSession | null): void {\n  try {\n    if (value) (globalThis as G).localStorage?.setItem(storageKey(address), JSON.stringify(value));\n    else (globalThis as G).localStorage?.removeItem(storageKey(address));\n  } catch {\n    // Storage can be blocked; the session still works without a countdown.\n  }\n  (globalThis as G).dispatchEvent?.(new Event(CHANGE_EVENT));\n}\n\nfunction useAuthFetch(o: BaseOptions): { authFetch: AuthFetch; address: string | undefined } {\n  const { user } = usePrivy();\n  const pepuAuthFetch = usePepuAuthFetch();\n  const custom = o.authFetch;\n  const authFetch = useCallback<AuthFetch>(\n    (url, init) => (custom ? custom(url, init) : pepuAuthFetch(url, init)),\n    [custom, pepuAuthFetch],\n  );\n  return { authFetch, address: o.address ?? user?.wallet?.address };\n}\n\nexport type SessionGrantStatus = \"idle\" | \"creating-policy\" | \"awaiting-consent\" | \"granted\" | \"error\";\n\n/**\n * Grant a session: POST the grant route, then ask the user to approve with\n * Privy's `addSigners`. Skips `addSigners` when the server says\n * `alreadyGranted`, and swallows Privy's \"duplicate signer\" error.\n *\n * @example\n * const { grant, status, error } = useSessionGrant();\n * <button onClick={grant} disabled={status === \"creating-policy\"}>Grant</button>\n */\nexport function useSessionGrant(o: BaseOptions & { grantEndpoint?: string } = {}): {\n  grant(): Promise<void>;\n  status: SessionGrantStatus;\n  error?: PepuError;\n} {\n  const { authFetch, address } = useAuthFetch(o);\n  const { addSigners } = useSigners();\n  const [status, setStatus] = useState<SessionGrantStatus>(\"idle\");\n  const [error, setError] = useState<PepuError | undefined>();\n  const endpoint = o.grantEndpoint ?? \"/api/session/grant\";\n\n  const grant = useCallback(async () => {\n    setError(undefined);\n    try {\n      if (!address) throw new PepuAuthError(\"WALLET_NOT_PROVISIONED\", \"No embedded wallet address yet.\");\n      setStatus(\"creating-policy\");\n      const res = await authFetch(endpoint, { method: \"POST\" });\n      if (!res.ok) throw await errorFromResponse(res);\n      const body = (await res.json()) as\n        | { alreadyGranted: true }\n        | { alreadyGranted: false; policyId: string; expiresAt: number; signerId: string };\n      if (!body.alreadyGranted) {\n        setStatus(\"awaiting-consent\");\n        try {\n          await addSigners({ address, signers: [{ signerId: body.signerId, policyIds: [body.policyId] }] });\n        } catch (caught) {\n          const msg = caught instanceof Error ? caught.message : \"\";\n          if (!/duplicate signer/i.test(msg)) throw caught;\n        }\n        writeStored(address, { expiresAt: body.expiresAt, policyId: body.policyId });\n      } else {\n        (globalThis as G).dispatchEvent?.(new Event(CHANGE_EVENT));\n      }\n      setStatus(\"granted\");\n    } catch (e) {\n      setError(toPepuError(e, { op: \"session grant\" }));\n      setStatus(\"error\");\n    }\n  }, [address, authFetch, endpoint, addSigners]);\n\n  return { grant, status, ...(error ? { error } : {}) };\n}\n\n/**\n * Current session state. Asks the status route whether a signer is attached\n * and combines it with the expiry tracked from the grant. Ticks every second\n * for `secondsLeft`; re-polls every `pollMs` if given.\n *\n * @example\n * const { state, secondsLeft } = useSessionStatus({ pollMs: 30_000 });\n */\nexport function useSessionStatus(o: BaseOptions & { statusEndpoint?: string; pollMs?: number } = {}): {\n  state: SessionState;\n  /**\n   * True until the first status response (or failure) has been applied. Show a\n   * spinner while it is true so the \"start a session\" UI does not flash on reload.\n   */\n  loading: boolean;\n  expiresAt?: number;\n  secondsLeft?: number;\n  refetch(): void;\n} {\n  const { authFetch, address } = useAuthFetch(o);\n  const endpoint = o.statusEndpoint ?? \"/api/session/status\";\n  const [delegated, setDelegated] = useState(false);\n  const [loading, setLoading] = useState(true);\n  const [serverExpiresAt, setServerExpiresAt] = useState<number | undefined>();\n  const [now, setNow] = useState(() => Math.floor(Date.now() / 1000));\n  const [tick, setTick] = useState(0);\n  const refetch = useCallback(() => setTick((t) => t + 1), []);\n\n  useEffect(() => {\n    let cancelled = false;\n    void (async () => {\n      try {\n        const res = await authFetch(endpoint);\n        if (!res.ok) return;\n        const body = (await res.json()) as { delegated?: boolean; expiresAt?: number };\n        if (cancelled) return;\n        setDelegated(Boolean(body.delegated));\n        setServerExpiresAt(body.expiresAt);\n      } catch {\n        // Keep the last known state on a transient failure.\n      } finally {\n        if (!cancelled) setLoading(false);\n      }\n    })();\n    return () => {\n      cancelled = true;\n    };\n  }, [authFetch, endpoint, tick]);\n\n  useEffect(() => {\n    const onChange = (): void => setTick((t) => t + 1);\n    (globalThis as G).addEventListener?.(CHANGE_EVENT, onChange);\n    return () => (globalThis as G).removeEventListener?.(CHANGE_EVENT, onChange);\n  }, []);\n\n  useEffect(() => {\n    const id = setInterval(() => setNow(Math.floor(Date.now() / 1000)), 1000);\n    return () => clearInterval(id);\n  }, []);\n\n  useEffect(() => {\n    if (!o.pollMs) return;\n    const id = setInterval(() => setTick((t) => t + 1), o.pollMs);\n    return () => clearInterval(id);\n  }, [o.pollMs]);\n\n  const expiresAt = serverExpiresAt ?? readStored(address)?.expiresAt;\n  const derived = deriveSessionState({ delegated, expiresAt, nowSeconds: now });\n  return {\n    state: derived.state,\n    loading,\n    ...(expiresAt !== undefined ? { expiresAt } : {}),\n    ...(derived.secondsLeft !== undefined ? { secondsLeft: derived.secondsLeft } : {}),\n    refetch,\n  };\n}\n\nexport type SessionRevokeStatus = \"idle\" | \"revoking\" | \"revoked\" | \"error\";\n\n/**\n * Revoke the session. The Privy `removeSigners` call is the real revoke; the\n * server revoke route afterwards is best-effort cleanup of the policy.\n *\n * @example\n * const { revoke, status } = useSessionRevoke();\n */\nexport function useSessionRevoke(o: BaseOptions & { revokeEndpoint?: string } = {}): {\n  revoke(): Promise<void>;\n  status: SessionRevokeStatus;\n  error?: PepuError;\n} {\n  const { authFetch, address } = useAuthFetch(o);\n  const { removeSigners } = useSigners();\n  const [status, setStatus] = useState<SessionRevokeStatus>(\"idle\");\n  const [error, setError] = useState<PepuError | undefined>();\n  const endpoint = o.revokeEndpoint ?? \"/api/session/revoke\";\n\n  const revoke = useCallback(async () => {\n    setError(undefined);\n    try {\n      if (!address) throw new PepuAuthError(\"WALLET_NOT_PROVISIONED\", \"No embedded wallet address yet.\");\n      setStatus(\"revoking\");\n      const stored = readStored(address);\n      await removeSigners({ address });\n      try {\n        await authFetch(endpoint, {\n          method: \"POST\",\n          headers: { \"content-type\": \"application/json\" },\n          body: JSON.stringify({ policyId: stored?.policyId }),\n        });\n      } catch {\n        // Cleanup only; the signer is already gone.\n      }\n      writeStored(address, null);\n      setStatus(\"revoked\");\n    } catch (e) {\n      setError(toPepuError(e, { op: \"session revoke\" }));\n      setStatus(\"error\");\n    }\n  }, [address, authFetch, endpoint, removeSigners]);\n\n  return { revoke, status, ...(error ? { error } : {}) };\n}\n\nexport type SessionActStatus = \"idle\" | \"pending\" | \"success\" | \"error\";\n\n/**\n * Call a session action route (built with `createSessionActionRoute`). A 409\n * is the only \"no session\" signal and surfaces as `error.code ===\n * \"SESSION_NONE\"`; any other failure is a failed transaction, so do not send\n * the user back to the consent screen for it.\n *\n * @example\n * const { act } = useSessionAct<{}, { hash: string }>({ endpoint: \"/api/game/tap\" });\n * const { hash } = await act({});\n */\nexport function useSessionAct<I, O>(o: BaseOptions & { endpoint: string }): {\n  act(input: I): Promise<O>;\n  status: SessionActStatus;\n  error?: PepuError;\n} {\n  const { authFetch } = useAuthFetch(o);\n  const [status, setStatus] = useState<SessionActStatus>(\"idle\");\n  const [error, setError] = useState<PepuError | undefined>();\n\n  const act = useCallback(\n    async (input: I): Promise<O> => {\n      setStatus(\"pending\");\n      setError(undefined);\n      try {\n        const res = await authFetch(o.endpoint, {\n          method: \"POST\",\n          headers: { \"content-type\": \"application/json\" },\n          body: JSON.stringify(input ?? {}),\n        });\n        if (!res.ok) throw await errorFromResponse(res);\n        const out = (await res.json()) as O;\n        setStatus(\"success\");\n        return out;\n      } catch (e) {\n        const err = toPepuError(e, { op: \"session action\" });\n        setError(err);\n        setStatus(\"error\");\n        throw err;\n      }\n    },\n    [authFetch, o.endpoint],\n  );\n\n  return { act, status, ...(error ? { error } : {}) };\n}\n"]}