@pepu-chain/sdk 0.0.0-stage → 0.2.1

package/dist/doctor.d.ts

@@ -0,0 +1,177 @@
+/** Shared types for `@pepu-chain/sdk/doctor`. */
+/** A capability a template demonstrates. Used to scope readiness checks. */
+type Pillar = "login" | "wallet" | "session" | "sponsorship" | "gate" | "mint";
+/**
+ * Key into the Privy dashboard requirements table owned by WP-B1
+ * (`@pepu-chain/sdk/privy`). Doctor only carries the keys; it never
+ * duplicates what each key means. Unknown keys must be reported by the
+ * injected checker, not silently dropped.
+ */
+type PrivyDashboardRequirementKey = string;
+interface TemplateRequirement {
+    /** Env vars the template cannot run without. */
+    requiredEnv: string[];
+    /** Env vars with a working default or a degraded fallback. */
+    optionalEnv: string[];
+    /** Groups where at least one var must be valid (for example the gate addresses). */
+    requiredAnyOf?: string[][];
+    pillars: Pillar[];
+    /** Privy dashboard settings the template needs, by WP-B1 requirement key. */
+    privyDashboard: PrivyDashboardRequirementKey[];
+}
+type EnvItemStatus = "ok" | "missing" | "placeholder" | "malformed";
+/** One env var verdict. Reports presence and length only, never the value. */
+interface EnvItem {
+    key: string;
+    status: EnvItemStatus;
+    /** True when the variable holds a credential. */
+    secret: boolean;
+    /** Character count of the trimmed value (0 when missing). Never the value. */
+    length: number;
+    required: boolean;
+    fix: string;
+}
+interface EnvCheckResult {
+    ok: boolean;
+    items: EnvItem[];
+}
+type CheckStatus = "pass" | "fail" | "warn" | "skip";
+interface DoctorCheck {
+    id: string;
+    status: CheckStatus;
+    /** Never contains env values or URLs (paymaster URLs embed credentials). */
+    message: string;
+    fix?: string;
+}
+interface DoctorReport {
+    ok: boolean;
+    checks: DoctorCheck[];
+    env: EnvCheckResult | null;
+}
+/**
+ * Injection point for WP-B1's `checkPrivyDashboardConfig`. It receives the
+ * requirement keys this template needs and returns checks to merge in.
+ */
+type PrivyDashboardChecker = (input: {
+    appId: string;
+    requirementKeys: PrivyDashboardRequirementKey[];
+    /** Present only when PRIVY_APP_SECRET is set. Never log it. */
+    appSecret?: string;
+    /** The page origin to verify against Privy's Allowed origins, for example `http://localhost:3000`. */
+    origin?: string;
+    fetch: typeof fetch;
+}) => Promise<DoctorCheck[]>;
+
+/** Privy app ids are cuid-style: a leading `c` then 20-29 lowercase alphanumerics. */
+declare const PRIVY_APP_ID_PATTERN: RegExp;
+/**
+ * Check an env map against a template's requirements. Reports presence and
+ * length only: values are never returned, logged or placed in messages.
+ *
+ * @example
+ * ```ts
+ * const r = checkPepuEnv({ env: process.env, template: "game-app" });
+ * r.items.filter((i) => i.status !== "ok").map((i) => i.fix);
+ * ```
+ */
+declare function checkPepuEnv(o: {
+    env: Record<string, string | undefined>;
+    template?: string;
+    pillars?: Pillar[];
+}): EnvCheckResult;
+
+/** Privy app id format check. Never echoes the value. */
+declare function checkPrivyAppIdFormat(appId: string | undefined): DoctorCheck;
+/**
+ * Check the chain RPC answers and reports chainId 97741.
+ *
+ * @example
+ * ```ts
+ * const c = await checkChainRpc({ rpcUrl: "https://rpc-pepu-v2-mainnet-0.t.conduit.xyz" });
+ * ```
+ */
+declare function checkChainRpc(o?: {
+    rpcUrl?: string;
+    fetch?: typeof fetch;
+}): Promise<DoctorCheck>;
+/**
+ * Check the bundler and paymaster URLs resolved by the endpoints registry.
+ * Unset (nothing to reach) is a skip; set but unreachable is a failure.
+ * URLs are never included in messages: paymaster URLs embed credentials.
+ *
+ * @example
+ * ```ts
+ * const checks = await checkSponsorshipEndpoints({ env: process.env });
+ * ```
+ */
+declare function checkSponsorshipEndpoints(o?: {
+    env?: Record<string, string | undefined>;
+    fetch?: typeof fetch;
+}): Promise<DoctorCheck[]>;
+
+/**
+ * Per-template env and Privy dashboard requirements, read from each
+ * template's `.env.example` and `lib/env*.ts`. Keep in step with them.
+ * `privyDashboard` holds requirement keys resolved by WP-B1's table.
+ *
+ * @example
+ * ```ts
+ * TEMPLATE_REQUIREMENTS["game-app"].requiredEnv; // includes PRIVY_AUTHORIZATION_KEY
+ * ```
+ */
+declare const TEMPLATE_REQUIREMENTS: Record<string, TemplateRequirement>;
+
+/**
+ * P-256 authorization key generator for Privy session signers. Ported from
+ * templates/game-app/scripts/generate-authorization-key.mjs, which used
+ * `@privy-io/node`'s `generateP256KeyPair()`. Same output format, implemented
+ * with WebCrypto so this entry needs no peer dependency.
+ */
+interface PrivyAuthorizationKeyPair {
+    /** Base64 SPKI, no PEM headers. Paste into the Privy dashboard "New key" form. */
+    publicKey: string;
+    /** Base64 PKCS8, no PEM headers. A real secret: put it in PRIVY_AUTHORIZATION_KEY. */
+    privateKey: string;
+}
+/**
+ * Generate a P-256 key pair in the exact format Privy expects. Writes and
+ * logs nothing; the caller decides where each half goes. Register the public
+ * half in the Privy dashboard, keep the private half in server env only.
+ *
+ * @example
+ * ```ts
+ * const { publicKey, privateKey } = await generatePrivyAuthorizationKey();
+ * // show publicKey; write privateKey straight to .env.local, never print it
+ * ```
+ */
+declare function generatePrivyAuthorizationKey(): Promise<PrivyAuthorizationKeyPair>;
+
+interface RunDoctorOptions {
+    env: Record<string, string | undefined>;
+    template?: string;
+    pillars?: Pillar[];
+    /** Override fetch (tests, proxies). */
+    fetch?: typeof fetch;
+    /** Skip network checks (RPC, bundler, paymaster, Privy dashboard). */
+    offline?: boolean;
+    /** WP-B1's `checkPrivyDashboardConfig`, wrapped to this signature. Skipped when absent. */
+    checkPrivyDashboard?: PrivyDashboardChecker;
+    /**
+     * The page origin (scheme, host and port) to check against Privy's Allowed
+     * origins, for example `http://localhost:3000`. Without it the
+     * allowed-origins check can only warn.
+     */
+    origin?: string;
+}
+/**
+ * Run every readiness check and return a report. Env values never appear in it.
+ *
+ * @example
+ * ```ts
+ * const report = await runDoctor({ env: process.env, template: "sponsored-session-app" });
+ * if (!report.ok) console.log(report.checks.filter((c) => c.status === "fail"));
+ * ```
+ */
+declare function runDoctor(o: RunDoctorOptions): Promise<DoctorReport>;
+
+export { type CheckStatus, type DoctorCheck, type DoctorReport, type EnvCheckResult, type EnvItem, type EnvItemStatus, PRIVY_APP_ID_PATTERN, type Pillar, type PrivyAuthorizationKeyPair, type PrivyDashboardChecker, type PrivyDashboardRequirementKey, type RunDoctorOptions, TEMPLATE_REQUIREMENTS, type TemplateRequirement, checkChainRpc, checkPepuEnv, checkPrivyAppIdFormat, checkSponsorshipEndpoints, generatePrivyAuthorizationKey, runDoctor };

package/dist/doctor.js

@@ -0,0 +1,345 @@
+import { PEPU_ENV, resolvePepuEndpoints, PEPU_PUBLIC_ENV } from './chunk-XC4IBCI2.js';
+import { pepuMainnet } from './chunk-VTQIHMF3.js';
+import { PepuConfigError } from './chunk-6DSZ4Z2N.js';
+
+// src/doctor/requirements.ts
+var PRIVY_ID = "NEXT_PUBLIC_PRIVY_APP_ID";
+var PRIVY_SECRET = "PRIVY_APP_SECRET";
+var RPC = "PEPU_RPC_URL";
+var TEMPLATE_REQUIREMENTS = {
+  "consumer-app": {
+    requiredEnv: [PRIVY_ID, PRIVY_SECRET],
+    optionalEnv: [],
+    pillars: ["login", "wallet"],
+    privyDashboard: ["login-methods", "allowed-origins", "embedded-wallets"]
+  },
+  "game-app": {
+    requiredEnv: [
+      PRIVY_ID,
+      PRIVY_SECRET,
+      "NEXT_PUBLIC_PRIVY_KEY_QUORUM_ID",
+      "PRIVY_AUTHORIZATION_KEY",
+      "NEXT_PUBLIC_GAME_CONTRACT_ADDRESS"
+    ],
+    optionalEnv: ["SESSION_DURATION_MINUTES", RPC],
+    pillars: ["login", "wallet", "session"],
+    privyDashboard: ["login-methods", "allowed-origins", "embedded-wallets", "authorization-key-quorum"]
+  },
+  "token-gated-app": {
+    requiredEnv: [PRIVY_ID, PRIVY_SECRET],
+    optionalEnv: ["NEXT_PUBLIC_GATE_ERC20_ADDRESS", "NEXT_PUBLIC_GATE_ERC721_ADDRESS"],
+    requiredAnyOf: [["NEXT_PUBLIC_GATE_ERC20_ADDRESS", "NEXT_PUBLIC_GATE_ERC721_ADDRESS"]],
+    pillars: ["login", "wallet", "gate"],
+    privyDashboard: ["login-methods", "allowed-origins", "embedded-wallets"]
+  },
+  "nft-mint": {
+    requiredEnv: [PRIVY_ID, PRIVY_SECRET, "NEXT_PUBLIC_NFT_CONTRACT_ADDRESS"],
+    optionalEnv: [],
+    pillars: ["login", "wallet", "mint"],
+    privyDashboard: ["login-methods", "allowed-origins", "embedded-wallets"]
+  },
+  "sponsored-demo": {
+    requiredEnv: [PRIVY_ID, PRIVY_SECRET],
+    optionalEnv: ["NEXT_PUBLIC_PAYMASTER_CONTRACT_ADDRESS"],
+    pillars: ["login", "wallet", "sponsorship"],
+    // Smart Wallets: chain 97741, provider Kernel, bundler and paymaster URLs.
+    privyDashboard: ["login-methods", "allowed-origins", "embedded-wallets", "smart-wallets"]
+  },
+  "sponsored-session-app": {
+    requiredEnv: [PRIVY_ID, PRIVY_SECRET, "PEPU_BUNDLER_URL", "PEPU_PAYMASTER_URL"],
+    optionalEnv: ["SESSION_DURATION_MINUTES", RPC],
+    pillars: ["login", "wallet", "session", "sponsorship"],
+    // Google login on; Smart Wallets deliberately NOT needed (own Kernel account).
+    privyDashboard: ["login-methods", "login-methods.google", "allowed-origins", "embedded-wallets"]
+  }
+};
+
+// src/doctor/env.ts
+var PRIVY_APP_ID_PATTERN = /^c[a-z0-9]{20,29}$/;
+var ADDRESS = /^0x[0-9a-fA-F]{40}$/;
+var SECRET_KEYS = /* @__PURE__ */ new Set([
+  "PRIVY_APP_SECRET",
+  "PRIVY_AUTHORIZATION_KEY",
+  "CONDUIT_API_KEY",
+  "PEPU_BUNDLER_URL",
+  "PEPU_PAYMASTER_URL"
+]);
+function isHttpUrl(v) {
+  try {
+    const p = new URL(v);
+    return p.protocol === "http:" || p.protocol === "https:";
+  } catch {
+    return false;
+  }
+}
+function isPlaceholder(v) {
+  return /^(<.*>|your[-_ ].*|changeme|change-me|todo|xxx+|\.\.\.|replace[-_ ]?me.*)$/i.test(v);
+}
+function shapeOk(key, v) {
+  if (key === "NEXT_PUBLIC_PRIVY_APP_ID") return PRIVY_APP_ID_PATTERN.test(v);
+  if (key.endsWith("_ADDRESS")) return ADDRESS.test(v);
+  if (key === "PEPU_BUNDLER_URL" || key === "PEPU_PAYMASTER_URL") return isHttpUrl(v);
+  if (key === "SESSION_DURATION_MINUTES") return Number.isFinite(Number(v)) && Number(v) > 0;
+  if (key === "NEXT_PUBLIC_PEPU_NETWORK") return v === "mainnet";
+  return true;
+}
+function fixFor(key, status) {
+  if (status === "ok") return "";
+  const verb = status === "missing" ? "Set" : "Replace the value of";
+  const hints = {
+    NEXT_PUBLIC_PRIVY_APP_ID: "the App ID from the Privy dashboard (Settings)",
+    PRIVY_APP_SECRET: "the app secret from the Privy dashboard (server only)",
+    PRIVY_AUTHORIZATION_KEY: "the private key from generatePrivyAuthorizationKey (server only)",
+    NEXT_PUBLIC_PRIVY_KEY_QUORUM_ID: "the key quorum id Privy returns after registering the public key",
+    NEXT_PUBLIC_PEPU_NETWORK: 'the value "mainnet" (the only supported network)'
+  };
+  const detail = hints[key] ?? (key.endsWith("_ADDRESS") ? "a 0x-prefixed 20-byte contract address" : key.endsWith("_URL") ? "an http(s) URL" : "a valid value");
+  return `${verb} ${key} in .env.local to ${detail}.`;
+}
+function checkPepuEnv(o) {
+  const req = o.template ? TEMPLATE_REQUIREMENTS[o.template] : void 0;
+  const keys = [];
+  const seen = /* @__PURE__ */ new Set();
+  const add = (key, required) => {
+    if (!seen.has(key)) {
+      seen.add(key);
+      keys.push({ key, required });
+    }
+  };
+  if (req) {
+    req.requiredEnv.forEach((k) => add(k, true));
+    req.optionalEnv.forEach((k) => add(k, false));
+  } else {
+    add("NEXT_PUBLIC_PRIVY_APP_ID", true);
+    add("PRIVY_APP_SECRET", true);
+  }
+  const pillars = o.pillars ?? req?.pillars;
+  if (pillars?.includes("sponsorship")) {
+    add("PEPU_BUNDLER_URL", true);
+    add("PEPU_PAYMASTER_URL", true);
+  }
+  const items = keys.map(({ key, required }) => {
+    const v = (o.env[key] ?? "").trim();
+    let status;
+    if (v === "") status = "missing";
+    else if (isPlaceholder(v)) status = "placeholder";
+    else if (!shapeOk(key, v)) status = "malformed";
+    else status = "ok";
+    return { key, status, secret: SECRET_KEYS.has(key), length: v.length, required, fix: fixFor(key, status) };
+  });
+  let anyOfOk = true;
+  for (const group of req?.requiredAnyOf ?? []) {
+    const satisfied = group.some((k) => items.find((i) => i.key === k)?.status === "ok");
+    if (!satisfied) {
+      anyOfOk = false;
+      for (const k of group) {
+        const it = items.find((i) => i.key === k);
+        if (it) it.fix = `Set at least one of ${group.join(" / ")} to a valid 0x address.`;
+      }
+    }
+  }
+  const ok = anyOfOk && items.every((i) => i.required ? i.status === "ok" : i.status === "ok" || i.status === "missing");
+  return { ok, items };
+}
+
+// src/doctor/checks.ts
+var TIMEOUT_MS = 8e3;
+async function rpc(f, url, method) {
+  const res = await f(url, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({ jsonrpc: "2.0", id: 1, method, params: [] }),
+    signal: AbortSignal.timeout(TIMEOUT_MS)
+  });
+  if (!res.ok) throw new Error(`HTTP ${res.status}`);
+  const json = await res.json();
+  if (json.error !== void 0) throw new Error("JSON-RPC error");
+  return json.result;
+}
+function checkPrivyAppIdFormat(appId) {
+  const v = (appId ?? "").trim();
+  if (v === "") {
+    return {
+      id: "privy.app-id",
+      status: "fail",
+      message: "NEXT_PUBLIC_PRIVY_APP_ID is not set.",
+      fix: "Copy the App ID from the Privy dashboard (Settings)."
+    };
+  }
+  if (!PRIVY_APP_ID_PATTERN.test(v)) {
+    return {
+      id: "privy.app-id",
+      status: "fail",
+      message: `NEXT_PUBLIC_PRIVY_APP_ID does not look like a Privy app id (length ${v.length}).`,
+      fix: "Use the App ID, not the app secret or client id."
+    };
+  }
+  return { id: "privy.app-id", status: "pass", message: "Privy app id format looks right." };
+}
+async function checkChainRpc(o = {}) {
+  const url = o.rpcUrl ?? pepuMainnet.rpcUrls.default.http[0];
+  try {
+    const result = await rpc(o.fetch ?? fetch, url, "eth_chainId");
+    const id = typeof result === "string" ? Number.parseInt(result, 16) : Number.NaN;
+    if (id !== pepuMainnet.id) {
+      return {
+        id: "chain.rpc",
+        status: "fail",
+        message: `RPC reports chainId ${String(id)}, expected ${pepuMainnet.id}.`,
+        fix: `Point ${PEPU_ENV.rpcUrl} at a Pepe Unchained V2 mainnet RPC.`
+      };
+    }
+    return { id: "chain.rpc", status: "pass", message: `RPC reachable, chainId ${pepuMainnet.id}.` };
+  } catch {
+    return {
+      id: "chain.rpc",
+      status: "fail",
+      message: "Chain RPC is unreachable.",
+      fix: `Check ${PEPU_ENV.rpcUrl} and your network.`
+    };
+  }
+}
+async function checkSponsorshipEndpoints(o = {}) {
+  const f = o.fetch ?? fetch;
+  let eps;
+  try {
+    eps = resolvePepuEndpoints(o.env ? { env: o.env } : {});
+  } catch (e) {
+    const msg = e instanceof PepuConfigError ? e.message : "Endpoint configuration is invalid.";
+    return [
+      {
+        id: "sponsorship.endpoints",
+        status: "fail",
+        message: msg,
+        fix: `Fix ${PEPU_ENV.bundlerUrl} / ${PEPU_ENV.paymasterUrl}.`
+      }
+    ];
+  }
+  const out = [];
+  if (eps.bundlerUrl === null) {
+    out.push({
+      id: "sponsorship.bundler",
+      status: "skip",
+      message: "No bundler URL configured.",
+      fix: `Set ${PEPU_ENV.bundlerUrl} to https://bundler.pepeunchained.com or your own bundler (${PEPU_PUBLIC_ENV.bundlerUrl} for browser use).`
+    });
+  } else {
+    try {
+      const r = await rpc(f, eps.bundlerUrl, "eth_supportedEntryPoints");
+      out.push(
+        Array.isArray(r) && r.length > 0 ? { id: "sponsorship.bundler", status: "pass", message: "Bundler reachable and reports supported entry points." } : { id: "sponsorship.bundler", status: "warn", message: "Bundler answered but reported no entry points." }
+      );
+    } catch {
+      out.push({
+        id: "sponsorship.bundler",
+        status: "fail",
+        message: "Bundler is unreachable.",
+        fix: `Check ${PEPU_ENV.bundlerUrl} and that the bundler is running.`
+      });
+    }
+  }
+  const paymasterTarget = eps.paymasterUrl ?? (eps.paymasterBaseUrl === null ? null : `${eps.paymasterBaseUrl}/health`);
+  if (paymasterTarget === null) {
+    out.push({
+      id: "sponsorship.paymaster",
+      status: "skip",
+      message: "No paymaster URL configured.",
+      fix: `Set ${PEPU_ENV.paymasterUrl} to https://paymaster.pepeunchained.com/v2/paymaster/<client token> or your own paymaster.`
+    });
+  } else {
+    try {
+      await f(paymasterTarget, { method: "GET", signal: AbortSignal.timeout(TIMEOUT_MS) });
+      out.push({ id: "sponsorship.paymaster", status: "pass", message: "Paymaster endpoint reachable." });
+    } catch {
+      out.push({
+        id: "sponsorship.paymaster",
+        status: "fail",
+        message: "Paymaster is unreachable.",
+        fix: `Check ${PEPU_ENV.paymasterUrl} and that the paymaster service is running.`
+      });
+    }
+  }
+  return out;
+}
+
+// src/doctor/auth-key.ts
+function toBase64(bytes) {
+  let bin = "";
+  for (const b of new Uint8Array(bytes)) bin += String.fromCharCode(b);
+  return btoa(bin);
+}
+async function generatePrivyAuthorizationKey() {
+  const pair = await globalThis.crypto.subtle.generateKey({ name: "ECDSA", namedCurve: "P-256" }, true, [
+    "sign",
+    "verify"
+  ]);
+  const [spki, pkcs8] = await Promise.all([
+    globalThis.crypto.subtle.exportKey("spki", pair.publicKey),
+    globalThis.crypto.subtle.exportKey("pkcs8", pair.privateKey)
+  ]);
+  return { publicKey: toBase64(spki), privateKey: toBase64(pkcs8) };
+}
+
+// src/doctor.ts
+async function runDoctor(o) {
+  const f = o.fetch ?? fetch;
+  const req = o.template ? TEMPLATE_REQUIREMENTS[o.template] : void 0;
+  const checks = [];
+  if (o.template && !req) {
+    checks.push({
+      id: "template",
+      status: "fail",
+      message: `Unknown template "${o.template}".`,
+      fix: `Use one of: ${Object.keys(TEMPLATE_REQUIREMENTS).join(", ")}.`
+    });
+  }
+  const env = checkPepuEnv({
+    env: o.env,
+    ...req && o.template ? { template: o.template } : {},
+    ...o.pillars ? { pillars: o.pillars } : {}
+  });
+  for (const i of env.items) {
+    if (i.status === "ok" || i.status === "missing" && !i.required) continue;
+    checks.push({
+      id: `env.${i.key}`,
+      status: i.required ? "fail" : "warn",
+      message: `${i.key} is ${i.status} (length ${i.length}).`,
+      fix: i.fix
+    });
+  }
+  checks.push(checkPrivyAppIdFormat(o.env.NEXT_PUBLIC_PRIVY_APP_ID));
+  const pillars = o.pillars ?? req?.pillars ?? [];
+  if (o.offline) {
+    checks.push({ id: "network", status: "skip", message: "Network checks skipped (offline)." });
+  } else {
+    const rpcUrl = o.env.PEPU_RPC_URL?.trim() || o.env.NEXT_PUBLIC_PEPU_RPC_URL?.trim() || void 0;
+    checks.push(await checkChainRpc({ ...rpcUrl ? { rpcUrl } : {}, fetch: f }));
+    if (pillars.includes("sponsorship")) {
+      checks.push(...await checkSponsorshipEndpoints({ env: o.env, fetch: f }));
+    }
+    const appId = o.env.NEXT_PUBLIC_PRIVY_APP_ID?.trim();
+    if (o.checkPrivyDashboard && req && appId) {
+      const secret = o.env.PRIVY_APP_SECRET?.trim();
+      checks.push(
+        ...await o.checkPrivyDashboard({
+          appId,
+          requirementKeys: req.privyDashboard,
+          ...secret ? { appSecret: secret } : {},
+          ...o.origin ? { origin: o.origin } : {},
+          fetch: f
+        })
+      );
+    } else {
+      checks.push({
+        id: "privy.dashboard",
+        status: "skip",
+        message: "Privy dashboard check not run (no checker injected, unknown template, or no app id)."
+      });
+    }
+  }
+  return { ok: checks.every((c) => c.status !== "fail"), checks, env };
+}
+
+export { PRIVY_APP_ID_PATTERN, TEMPLATE_REQUIREMENTS, checkChainRpc, checkPepuEnv, checkPrivyAppIdFormat, checkSponsorshipEndpoints, generatePrivyAuthorizationKey, runDoctor };
+//# sourceMappingURL=doctor.js.map
+//# sourceMappingURL=doctor.js.map

package/dist/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/doctor/requirements.ts","../src/doctor/env.ts","../src/doctor/checks.ts","../src/doctor/auth-key.ts","../src/doctor.ts"],"names":[],"mappings":";;;;;AAEA,IAAM,QAAA,GAAW,0BAAA;AACjB,IAAM,YAAA,GAAe,kBAAA;AACrB,IAAM,GAAA,GAAM,cAAA;AAYL,IAAM,qBAAA,GAA6D;AAAA,EACxE,cAAA,EAAgB;AAAA,IACd,WAAA,EAAa,CAAC,QAAA,EAAU,YAAY,CAAA;AAAA,IACpC,aAAa,EAAC;AAAA,IACd,OAAA,EAAS,CAAC,OAAA,EAAS,QAAQ,CAAA;AAAA,IAC3B,cAAA,EAAgB,CAAC,eAAA,EAAiB,iBAAA,EAAmB,kBAAkB;AAAA,GACzE;AAAA,EACA,UAAA,EAAY;AAAA,IACV,WAAA,EAAa;AAAA,MACX,QAAA;AAAA,MACA,YAAA;AAAA,MACA,iCAAA;AAAA,MACA,yBAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,WAAA,EAAa,CAAC,0BAAA,EAA4B,GAAG,CAAA;AAAA,IAC7C,OAAA,EAAS,CAAC,OAAA,EAAS,QAAA,EAAU,SAAS,CAAA;AAAA,IACtC,cAAA,EAAgB,CAAC,eAAA,EAAiB,iBAAA,EAAmB,oBAAoB,0BAA0B;AAAA,GACrG;AAAA,EACA,iBAAA,EAAmB;AAAA,IACjB,WAAA,EAAa,CAAC,QAAA,EAAU,YAAY,CAAA;AAAA,IACpC,WAAA,EAAa,CAAC,gCAAA,EAAkC,iCAAiC,CAAA;AAAA,IACjF,aAAA,EAAe,CAAC,CAAC,gCAAA,EAAkC,iCAAiC,CAAC,CAAA;AAAA,IACrF,OAAA,EAAS,CAAC,OAAA,EAAS,QAAA,EAAU,MAAM,CAAA;AAAA,IACnC,cAAA,EAAgB,CAAC,eAAA,EAAiB,iBAAA,EAAmB,kBAAkB;AAAA,GACzE;AAAA,EACA,UAAA,EAAY;AAAA,IACV,WAAA,EAAa,CAAC,QAAA,EAAU,YAAA,EAAc,kCAAkC,CAAA;AAAA,IACxE,aAAa,EAAC;AAAA,IACd,OAAA,EAAS,CAAC,OAAA,EAAS,QAAA,EAAU,MAAM,CAAA;AAAA,IACnC,cAAA,EAAgB,CAAC,eAAA,EAAiB,iBAAA,EAAmB,kBAAkB;AAAA,GACzE;AAAA,EACA,gBAAA,EAAkB;AAAA,IAChB,WAAA,EAAa,CAAC,QAAA,EAAU,YAAY,CAAA;AAAA,IACpC,WAAA,EAAa,CAAC,wCAAwC,CAAA;AAAA,IACtD,OAAA,EAAS,CAAC,OAAA,EAAS,QAAA,EAAU,aAAa,CAAA;AAAA;AAAA,IAE1C,cAAA,EAAgB,CAAC,eAAA,EAAiB,iBAAA,EAAmB,oBAAoB,eAAe;AAAA,GAC1F;AAAA,EACA,uBAAA,EAAyB;AAAA,IACvB,WAAA,EAAa,CAAC,QAAA,EAAU,YAAA,EAAc,oBAAoB,oBAAoB,CAAA;AAAA,IAC9E,WAAA,EAAa,CAAC,0BAAA,EAA4B,GAAG,CAAA;AAAA,IAC7C,OAAA,EAAS,CAAC,OAAA,EAAS,QAAA,EAAU,WAAW,aAAa,CAAA;AAAA;AAAA,IAErD,cAAA,EAAgB,CAAC,eAAA,EAAiB,sBAAA,EAAwB,mBAAmB,kBAAkB;AAAA;AAEnG;;;AC1DO,IAAM,oBAAA,GAAuB;AAEpC,IAAM,OAAA,GAAU,qBAAA;AAChB,IAAM,WAAA,uBAAkB,GAAA,CAAI;AAAA,EAC1B,kBAAA;AAAA,EACA,yBAAA;AAAA,EACA,iBAAA;AAAA,EACA,kBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,UAAU,CAAA,EAAoB;AACrC,EAAA,IAAI;AACF,IAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,CAAC,CAAA;AACnB,IAAA,OAAO,CAAA,CAAE,QAAA,KAAa,OAAA,IAAW,CAAA,CAAE,QAAA,KAAa,QAAA;AAAA,EAClD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,SAAS,cAAc,CAAA,EAAoB;AACzC,EAAA,OAAO,6EAAA,CAA8E,KAAK,CAAC,CAAA;AAC7F;AAEA,SAAS,OAAA,CAAQ,KAAa,CAAA,EAAoB;AAChD,EAAA,IAAI,GAAA,KAAQ,0BAAA,EAA4B,OAAO,oBAAA,CAAqB,KAAK,CAAC,CAAA;AAC1E,EAAA,IAAI,IAAI,QAAA,CAAS,UAAU,GAAG,OAAO,OAAA,CAAQ,KAAK,CAAC,CAAA;AACnD,EAAA,IAAI,QAAQ,kBAAA,IAAsB,GAAA,KAAQ,oBAAA,EAAsB,OAAO,UAAU,CAAC,CAAA;AAClF,EAAA,IAAI,GAAA,KAAQ,0BAAA,EAA4B,OAAO,MAAA,CAAO,QAAA,CAAS,MAAA,CAAO,CAAC,CAAC,CAAA,IAAK,MAAA,CAAO,CAAC,CAAA,GAAI,CAAA;AACzF,EAAA,IAAI,GAAA,KAAQ,0BAAA,EAA4B,OAAO,CAAA,KAAM,SAAA;AACrD,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,MAAA,CAAO,KAAa,MAAA,EAA+B;AAC1D,EAAA,IAAI,MAAA,KAAW,MAAM,OAAO,EAAA;AAC5B,EAAA,MAAM,IAAA,GAAO,MAAA,KAAW,SAAA,GAAY,KAAA,GAAQ,sBAAA;AAC5C,EAAA,MAAM,KAAA,GAAgC;AAAA,IACpC,wBAAA,EAA0B,gDAAA;AAAA,IAC1B,gBAAA,EAAkB,uDAAA;AAAA,IAClB,uBAAA,EAAyB,kEAAA;AAAA,IACzB,+BAAA,EAAiC,kEAAA;AAAA,IACjC,wBAAA,EAA0B;AAAA,GAC5B;AACA,EAAA,MAAM,MAAA,GACJ,KAAA,CAAM,GAAG,CAAA,KACR,GAAA,CAAI,QAAA,CAAS,UAAU,CAAA,GACpB,wCAAA,GACA,GAAA,CAAI,QAAA,CAAS,MAAM,IACjB,gBAAA,GACA,eAAA,CAAA;AACR,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,qBAAqB,MAAM,CAAA,CAAA,CAAA;AAClD;AAYO,SAAS,aAAa,CAAA,EAIV;AACjB,EAAA,MAAM,MAAM,CAAA,CAAE,QAAA,GAAW,qBAAA,CAAsB,CAAA,CAAE,QAAQ,CAAA,GAAI,MAAA;AAC7D,EAAA,MAAM,OAA6C,EAAC;AACpD,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,MAAM,GAAA,GAAM,CAAC,GAAA,EAAa,QAAA,KAA4B;AACpD,IAAA,IAAI,CAAC,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,EAAG;AAClB,MAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AACZ,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,GAAA,EAAK,QAAA,EAAU,CAAA;AAAA,IAC7B;AAAA,EACF,CAAA;AACA,EAAA,IAAI,GAAA,EAAK;AACP,IAAA,GAAA,CAAI,YAAY,OAAA,CAAQ,CAAC,MAAM,GAAA,CAAI,CAAA,EAAG,IAAI,CAAC,CAAA;AAC3C,IAAA,GAAA,CAAI,YAAY,OAAA,CAAQ,CAAC,MAAM,GAAA,CAAI,CAAA,EAAG,KAAK,CAAC,CAAA;AAAA,EAC9C,CAAA,MAAO;AACL,IAAA,GAAA,CAAI,4BAA4B,IAAI,CAAA;AACpC,IAAA,GAAA,CAAI,oBAAoB,IAAI,CAAA;AAAA,EAC9B;AACA,EAAA,MAAM,OAAA,GAAU,CAAA,CAAE,OAAA,IAAW,GAAA,EAAK,OAAA;AAClC,EAAA,IAAI,OAAA,EAAS,QAAA,CAAS,aAAa,CAAA,EAAG;AACpC,IAAA,GAAA,CAAI,oBAAoB,IAAI,CAAA;AAC5B,IAAA,GAAA,CAAI,sBAAsB,IAAI,CAAA;AAAA,EAChC;AAEA,EAAA,MAAM,QAAmB,IAAA,CAAK,GAAA,CAAI,CAAC,EAAE,GAAA,EAAK,UAAS,KAAM;AACvD,IAAA,MAAM,KAAK,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,IAAK,IAAI,IAAA,EAAK;AAClC,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI,CAAA,KAAM,IAAI,MAAA,GAAS,SAAA;AAAA,SAAA,IACd,aAAA,CAAc,CAAC,CAAA,EAAG,MAAA,GAAS,aAAA;AAAA,SAAA,IAC3B,CAAC,OAAA,CAAQ,GAAA,EAAK,CAAC,GAAG,MAAA,GAAS,WAAA;AAAA,SAC/B,MAAA,GAAS,IAAA;AACd,IAAA,OAAO,EAAE,GAAA,EAAK,MAAA,EAAQ,MAAA,EAAQ,WAAA,CAAY,IAAI,GAAG,CAAA,EAAG,MAAA,EAAQ,CAAA,CAAE,QAAQ,QAAA,EAAU,GAAA,EAAK,MAAA,CAAO,GAAA,EAAK,MAAM,CAAA,EAAE;AAAA,EAC3G,CAAC,CAAA;AAED,EAAA,IAAI,OAAA,GAAU,IAAA;AACd,EAAA,KAAA,MAAW,KAAA,IAAS,GAAA,EAAK,aAAA,IAAiB,EAAC,EAAG;AAC5C,IAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,CAAK,CAAC,MAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,KAAQ,CAAC,CAAA,EAAG,WAAW,IAAI,CAAA;AACnF,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,OAAA,GAAU,KAAA;AACV,MAAA,KAAA,MAAW,KAAK,KAAA,EAAO;AACrB,QAAA,MAAM,KAAK,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,QAAQ,CAAC,CAAA;AACxC,QAAA,IAAI,IAAI,EAAA,CAAG,GAAA,GAAM,uBAAuB,KAAA,CAAM,IAAA,CAAK,KAAK,CAAC,CAAA,uBAAA,CAAA;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AAGA,EAAA,MAAM,KACJ,OAAA,IAAW,KAAA,CAAM,KAAA,CAAM,CAAC,MAAO,CAAA,CAAE,QAAA,GAAW,CAAA,CAAE,MAAA,KAAW,OAAO,CAAA,CAAE,MAAA,KAAW,IAAA,IAAQ,CAAA,CAAE,WAAW,SAAU,CAAA;AAC9G,EAAA,OAAO,EAAE,IAAI,KAAA,EAAM;AACrB;;;AClHA,IAAM,UAAA,GAAa,GAAA;AAEnB,eAAe,GAAA,CAAI,CAAA,EAAiB,GAAA,EAAa,MAAA,EAAkC;AACjF,EAAA,MAAM,GAAA,GAAM,MAAM,CAAA,CAAE,GAAA,EAAK;AAAA,IACvB,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,IAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,CAAA,EAAG,MAAA,EAAQ,MAAA,EAAQ,EAAC,EAAG,CAAA;AAAA,IAClE,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,UAAU;AAAA,GACvC,CAAA;AACD,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AACjD,EAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,EAAA,IAAI,KAAK,KAAA,KAAU,MAAA,EAAW,MAAM,IAAI,MAAM,gBAAgB,CAAA;AAC9D,EAAA,OAAO,IAAA,CAAK,MAAA;AACd;AAGO,SAAS,sBAAsB,KAAA,EAAwC;AAC5E,EAAA,MAAM,CAAA,GAAA,CAAK,KAAA,IAAS,EAAA,EAAI,IAAA,EAAK;AAC7B,EAAA,IAAI,MAAM,EAAA,EAAI;AACZ,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,cAAA;AAAA,MACJ,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,sCAAA;AAAA,MACT,GAAA,EAAK;AAAA,KACP;AAAA,EACF;AACA,EAAA,IAAI,CAAC,oBAAA,CAAqB,IAAA,CAAK,CAAC,CAAA,EAAG;AACjC,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,cAAA;AAAA,MACJ,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,CAAA,mEAAA,EAAsE,CAAA,CAAE,MAAM,CAAA,EAAA,CAAA;AAAA,MACvF,GAAA,EAAK;AAAA,KACP;AAAA,EACF;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,cAAA,EAAgB,MAAA,EAAQ,MAAA,EAAQ,SAAS,kCAAA,EAAmC;AAC3F;AAUA,eAAsB,aAAA,CAAc,CAAA,GAA+C,EAAC,EAAyB;AAC3G,EAAA,MAAM,MAAM,CAAA,CAAE,MAAA,IAAU,YAAY,OAAA,CAAQ,OAAA,CAAQ,KAAK,CAAC,CAAA;AAC1D,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAM,GAAA,CAAI,EAAE,KAAA,IAAS,KAAA,EAAO,KAAK,aAAa,CAAA;AAC7D,IAAA,MAAM,EAAA,GAAK,OAAO,MAAA,KAAW,QAAA,GAAW,OAAO,QAAA,CAAS,MAAA,EAAQ,EAAE,CAAA,GAAI,MAAA,CAAO,GAAA;AAC7E,IAAA,IAAI,EAAA,KAAO,YAAY,EAAA,EAAI;AACzB,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,WAAA;AAAA,QACJ,MAAA,EAAQ,MAAA;AAAA,QACR,SAAS,CAAA,oBAAA,EAAuB,MAAA,CAAO,EAAE,CAAC,CAAA,WAAA,EAAc,YAAY,EAAE,CAAA,CAAA,CAAA;AAAA,QACtE,GAAA,EAAK,CAAA,MAAA,EAAS,QAAA,CAAS,MAAM,CAAA,oCAAA;AAAA,OAC/B;AAAA,IACF;AACA,IAAA,OAAO,EAAE,IAAI,WAAA,EAAa,MAAA,EAAQ,QAAQ,OAAA,EAAS,CAAA,uBAAA,EAA0B,WAAA,CAAY,EAAE,CAAA,CAAA,CAAA,EAAI;AAAA,EACjG,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,WAAA;AAAA,MACJ,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,2BAAA;AAAA,MACT,GAAA,EAAK,CAAA,MAAA,EAAS,QAAA,CAAS,MAAM,CAAA,kBAAA;AAAA,KAC/B;AAAA,EACF;AACF;AAYA,eAAsB,yBAAA,CACpB,CAAA,GAAwE,EAAC,EACjD;AACxB,EAAA,MAAM,CAAA,GAAI,EAAE,KAAA,IAAS,KAAA;AACrB,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,oBAAA,CAAqB,EAAE,GAAA,GAAM,EAAE,KAAK,CAAA,CAAE,GAAA,EAAI,GAAI,EAAE,CAAA;AAAA,EACxD,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,GAAA,GAAM,CAAA,YAAa,eAAA,GAAkB,CAAA,CAAE,OAAA,GAAU,oCAAA;AACvD,IAAA,OAAO;AAAA,MACL;AAAA,QACE,EAAA,EAAI,uBAAA;AAAA,QACJ,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,GAAA;AAAA,QACT,KAAK,CAAA,IAAA,EAAO,QAAA,CAAS,UAAU,CAAA,GAAA,EAAM,SAAS,YAAY,CAAA,CAAA;AAAA;AAC5D,KACF;AAAA,EACF;AACA,EAAA,MAAM,MAAqB,EAAC;AAC5B,EAAA,IAAI,GAAA,CAAI,eAAe,IAAA,EAAM;AAC3B,IAAA,GAAA,CAAI,IAAA,CAAK;AAAA,MACP,EAAA,EAAI,qBAAA;AAAA,MACJ,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,4BAAA;AAAA,MACT,KAAK,CAAA,IAAA,EAAO,QAAA,CAAS,UAAU,CAAA,2DAAA,EAA8D,gBAAgB,UAAU,CAAA,kBAAA;AAAA,KACxH,CAAA;AAAA,EACH,CAAA,MAAO;AACL,IAAA,IAAI;AACF,MAAA,MAAM,IAAI,MAAM,GAAA,CAAI,CAAA,EAAG,GAAA,CAAI,YAAY,0BAA0B,CAAA;AACjE,MAAA,GAAA,CAAI,IAAA;AAAA,QACF,KAAA,CAAM,QAAQ,CAAC,CAAA,IAAK,EAAE,MAAA,GAAS,CAAA,GAC3B,EAAE,EAAA,EAAI,qBAAA,EAAuB,QAAQ,MAAA,EAAQ,OAAA,EAAS,yDAAwD,GAC9G,EAAE,IAAI,qBAAA,EAAuB,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,gDAAA;AAAiD,OAC7G;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,GAAA,CAAI,IAAA,CAAK;AAAA,QACP,EAAA,EAAI,qBAAA;AAAA,QACJ,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,yBAAA;AAAA,QACT,GAAA,EAAK,CAAA,MAAA,EAAS,QAAA,CAAS,UAAU,CAAA,iCAAA;AAAA,OAClC,CAAA;AAAA,IACH;AAAA,EACF;AAEA,EAAA,MAAM,eAAA,GAAkB,IAAI,YAAA,KAAiB,GAAA,CAAI,qBAAqB,IAAA,GAAO,IAAA,GAAO,CAAA,EAAG,GAAA,CAAI,gBAAgB,CAAA,OAAA,CAAA,CAAA;AAC3G,EAAA,IAAI,oBAAoB,IAAA,EAAM;AAC5B,IAAA,GAAA,CAAI,IAAA,CAAK;AAAA,MACP,EAAA,EAAI,uBAAA;AAAA,MACJ,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,8BAAA;AAAA,MACT,GAAA,EAAK,CAAA,IAAA,EAAO,QAAA,CAAS,YAAY,CAAA,0FAAA;AAAA,KAClC,CAAA;AAAA,EACH,CAAA,MAAO;AACL,IAAA,IAAI;AAEF,MAAA,MAAM,CAAA,CAAE,eAAA,EAAiB,EAAE,MAAA,EAAQ,KAAA,EAAO,QAAQ,WAAA,CAAY,OAAA,CAAQ,UAAU,CAAA,EAAG,CAAA;AACnF,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,EAAA,EAAI,uBAAA,EAAyB,QAAQ,MAAA,EAAQ,OAAA,EAAS,iCAAiC,CAAA;AAAA,IACpG,CAAA,CAAA,MAAQ;AACN,MAAA,GAAA,CAAI,IAAA,CAAK;AAAA,QACP,EAAA,EAAI,uBAAA;AAAA,QACJ,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,2BAAA;AAAA,QACT,GAAA,EAAK,CAAA,MAAA,EAAS,QAAA,CAAS,YAAY,CAAA,2CAAA;AAAA,OACpC,CAAA;AAAA,IACH;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;;;ACjJA,SAAS,SAAS,KAAA,EAA4B;AAC5C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,CAAA,IAAK,IAAI,UAAA,CAAW,KAAK,GAAG,GAAA,IAAO,MAAA,CAAO,aAAa,CAAC,CAAA;AACnE,EAAA,OAAO,KAAK,GAAG,CAAA;AACjB;AAoBA,eAAsB,6BAAA,GAAoE;AACxF,EAAA,MAAM,IAAA,GAAO,MAAM,UAAA,CAAW,MAAA,CAAO,MAAA,CAAO,WAAA,CAAY,EAAE,IAAA,EAAM,OAAA,EAAS,UAAA,EAAY,OAAA,EAAQ,EAAG,IAAA,EAAM;AAAA,IACpG,MAAA;AAAA,IACA;AAAA,GACD,CAAA;AACD,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,IACtC,WAAW,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,MAAA,EAAQ,KAAK,SAAS,CAAA;AAAA,IACzD,WAAW,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,OAAA,EAAS,KAAK,UAAU;AAAA,GAC5D,CAAA;AACD,EAAA,OAAO,EAAE,WAAW,QAAA,CAAS,IAAI,GAAG,UAAA,EAAY,QAAA,CAAS,KAAK,CAAA,EAAE;AAClE;;;ACaA,eAAsB,UAAU,CAAA,EAA4C;AAC1E,EAAA,MAAM,CAAA,GAAI,EAAE,KAAA,IAAS,KAAA;AACrB,EAAA,MAAM,MAAM,CAAA,CAAE,QAAA,GAAW,qBAAA,CAAsB,CAAA,CAAE,QAAQ,CAAA,GAAI,MAAA;AAC7D,EAAA,MAAM,SAAwB,EAAC;AAC/B,EAAA,IAAI,CAAA,CAAE,QAAA,IAAY,CAAC,GAAA,EAAK;AACtB,IAAA,MAAA,CAAO,IAAA,CAAK;AAAA,MACV,EAAA,EAAI,UAAA;AAAA,MACJ,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,CAAA,kBAAA,EAAqB,CAAA,CAAE,QAAQ,CAAA,EAAA,CAAA;AAAA,MACxC,GAAA,EAAK,eAAe,MAAA,CAAO,IAAA,CAAK,qBAAqB,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAClE,CAAA;AAAA,EACH;AACA,EAAA,MAAM,MAAM,YAAA,CAAa;AAAA,IACvB,KAAK,CAAA,CAAE,GAAA;AAAA,IACP,GAAI,OAAO,CAAA,CAAE,QAAA,GAAW,EAAE,QAAA,EAAU,CAAA,CAAE,QAAA,EAAS,GAAI,EAAC;AAAA,IACpD,GAAI,EAAE,OAAA,GAAU,EAAE,SAAS,CAAA,CAAE,OAAA,KAAY;AAAC,GAC3C,CAAA;AACD,EAAA,KAAA,MAAW,CAAA,IAAK,IAAI,KAAA,EAAO;AACzB,IAAA,IAAI,CAAA,CAAE,WAAW,IAAA,IAAS,CAAA,CAAE,WAAW,SAAA,IAAa,CAAC,EAAE,QAAA,EAAW;AAClE,IAAA,MAAA,CAAO,IAAA,CAAK;AAAA,MACV,EAAA,EAAI,CAAA,IAAA,EAAO,CAAA,CAAE,GAAG,CAAA,CAAA;AAAA,MAChB,MAAA,EAAQ,CAAA,CAAE,QAAA,GAAW,MAAA,GAAS,MAAA;AAAA,MAC9B,OAAA,EAAS,GAAG,CAAA,CAAE,GAAG,OAAO,CAAA,CAAE,MAAM,CAAA,SAAA,EAAY,CAAA,CAAE,MAAM,CAAA,EAAA,CAAA;AAAA,MACpD,KAAK,CAAA,CAAE;AAAA,KACR,CAAA;AAAA,EACH;AACA,EAAA,MAAA,CAAO,IAAA,CAAK,qBAAA,CAAsB,CAAA,CAAE,GAAA,CAAI,wBAAwB,CAAC,CAAA;AAEjE,EAAA,MAAM,OAAA,GAAU,CAAA,CAAE,OAAA,IAAW,GAAA,EAAK,WAAW,EAAC;AAC9C,EAAA,IAAI,EAAE,OAAA,EAAS;AACb,IAAA,MAAA,CAAO,IAAA,CAAK,EAAE,EAAA,EAAI,SAAA,EAAW,QAAQ,MAAA,EAAQ,OAAA,EAAS,qCAAqC,CAAA;AAAA,EAC7F,CAAA,MAAO;AACL,IAAA,MAAM,MAAA,GAAS,CAAA,CAAE,GAAA,CAAI,YAAA,EAAc,IAAA,MAAU,CAAA,CAAE,GAAA,CAAI,wBAAA,EAA0B,IAAA,EAAK,IAAK,MAAA;AACvF,IAAA,MAAA,CAAO,IAAA,CAAK,MAAM,aAAA,CAAc,EAAE,GAAI,MAAA,GAAS,EAAE,MAAA,EAAO,GAAI,EAAC,EAAI,KAAA,EAAO,CAAA,EAAG,CAAC,CAAA;AAC5E,IAAA,IAAI,OAAA,CAAQ,QAAA,CAAS,aAAa,CAAA,EAAG;AACnC,MAAA,MAAA,CAAO,IAAA,CAAK,GAAI,MAAM,yBAAA,CAA0B,EAAE,GAAA,EAAK,CAAA,CAAE,GAAA,EAAK,KAAA,EAAO,CAAA,EAAG,CAAE,CAAA;AAAA,IAC5E;AACA,IAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,wBAAA,EAA0B,IAAA,EAAK;AACnD,IAAA,IAAI,CAAA,CAAE,mBAAA,IAAuB,GAAA,IAAO,KAAA,EAAO;AACzC,MAAA,MAAM,MAAA,GAAS,CAAA,CAAE,GAAA,CAAI,gBAAA,EAAkB,IAAA,EAAK;AAC5C,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,GAAI,MAAM,CAAA,CAAE,mBAAA,CAAoB;AAAA,UAC9B,KAAA;AAAA,UACA,iBAAiB,GAAA,CAAI,cAAA;AAAA,UACrB,GAAI,MAAA,GAAS,EAAE,SAAA,EAAW,MAAA,KAAW,EAAC;AAAA,UACtC,GAAI,EAAE,MAAA,GAAS,EAAE,QAAQ,CAAA,CAAE,MAAA,KAAW,EAAC;AAAA,UACvC,KAAA,EAAO;AAAA,SACR;AAAA,OACH;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAA,CAAO,IAAA,CAAK;AAAA,QACV,EAAA,EAAI,iBAAA;AAAA,QACJ,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,OACV,CAAA;AAAA,IACH;AAAA,EACF;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW,MAAM,CAAA,EAAG,MAAA,EAAQ,GAAA,EAAI;AACrE","file":"doctor.js","sourcesContent":["import type { TemplateRequirement } from \"./types.js\";\n\nconst PRIVY_ID = \"NEXT_PUBLIC_PRIVY_APP_ID\";\nconst PRIVY_SECRET = \"PRIVY_APP_SECRET\";\nconst RPC = \"PEPU_RPC_URL\";\n\n/**\n * Per-template env and Privy dashboard requirements, read from each\n * template's `.env.example` and `lib/env*.ts`. Keep in step with them.\n * `privyDashboard` holds requirement keys resolved by WP-B1's table.\n *\n * @example\n * ```ts\n * TEMPLATE_REQUIREMENTS[\"game-app\"].requiredEnv; // includes PRIVY_AUTHORIZATION_KEY\n * ```\n */\nexport const TEMPLATE_REQUIREMENTS: Record<string, TemplateRequirement> = {\n  \"consumer-app\": {\n    requiredEnv: [PRIVY_ID, PRIVY_SECRET],\n    optionalEnv: [],\n    pillars: [\"login\", \"wallet\"],\n    privyDashboard: [\"login-methods\", \"allowed-origins\", \"embedded-wallets\"],\n  },\n  \"game-app\": {\n    requiredEnv: [\n      PRIVY_ID,\n      PRIVY_SECRET,\n      \"NEXT_PUBLIC_PRIVY_KEY_QUORUM_ID\",\n      \"PRIVY_AUTHORIZATION_KEY\",\n      \"NEXT_PUBLIC_GAME_CONTRACT_ADDRESS\",\n    ],\n    optionalEnv: [\"SESSION_DURATION_MINUTES\", RPC],\n    pillars: [\"login\", \"wallet\", \"session\"],\n    privyDashboard: [\"login-methods\", \"allowed-origins\", \"embedded-wallets\", \"authorization-key-quorum\"],\n  },\n  \"token-gated-app\": {\n    requiredEnv: [PRIVY_ID, PRIVY_SECRET],\n    optionalEnv: [\"NEXT_PUBLIC_GATE_ERC20_ADDRESS\", \"NEXT_PUBLIC_GATE_ERC721_ADDRESS\"],\n    requiredAnyOf: [[\"NEXT_PUBLIC_GATE_ERC20_ADDRESS\", \"NEXT_PUBLIC_GATE_ERC721_ADDRESS\"]],\n    pillars: [\"login\", \"wallet\", \"gate\"],\n    privyDashboard: [\"login-methods\", \"allowed-origins\", \"embedded-wallets\"],\n  },\n  \"nft-mint\": {\n    requiredEnv: [PRIVY_ID, PRIVY_SECRET, \"NEXT_PUBLIC_NFT_CONTRACT_ADDRESS\"],\n    optionalEnv: [],\n    pillars: [\"login\", \"wallet\", \"mint\"],\n    privyDashboard: [\"login-methods\", \"allowed-origins\", \"embedded-wallets\"],\n  },\n  \"sponsored-demo\": {\n    requiredEnv: [PRIVY_ID, PRIVY_SECRET],\n    optionalEnv: [\"NEXT_PUBLIC_PAYMASTER_CONTRACT_ADDRESS\"],\n    pillars: [\"login\", \"wallet\", \"sponsorship\"],\n    // Smart Wallets: chain 97741, provider Kernel, bundler and paymaster URLs.\n    privyDashboard: [\"login-methods\", \"allowed-origins\", \"embedded-wallets\", \"smart-wallets\"],\n  },\n  \"sponsored-session-app\": {\n    requiredEnv: [PRIVY_ID, PRIVY_SECRET, \"PEPU_BUNDLER_URL\", \"PEPU_PAYMASTER_URL\"],\n    optionalEnv: [\"SESSION_DURATION_MINUTES\", RPC],\n    pillars: [\"login\", \"wallet\", \"session\", \"sponsorship\"],\n    // Google login on; Smart Wallets deliberately NOT needed (own Kernel account).\n    privyDashboard: [\"login-methods\", \"login-methods.google\", \"allowed-origins\", \"embedded-wallets\"],\n  },\n};\n","import { TEMPLATE_REQUIREMENTS } from \"./requirements.js\";\nimport type { EnvCheckResult, EnvItem, EnvItemStatus, Pillar } from \"./types.js\";\n\n/** Privy app ids are cuid-style: a leading `c` then 20-29 lowercase alphanumerics. */\nexport const PRIVY_APP_ID_PATTERN = /^c[a-z0-9]{20,29}$/;\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\nconst SECRET_KEYS = new Set([\n  \"PRIVY_APP_SECRET\",\n  \"PRIVY_AUTHORIZATION_KEY\",\n  \"CONDUIT_API_KEY\",\n  \"PEPU_BUNDLER_URL\",\n  \"PEPU_PAYMASTER_URL\",\n]);\n\nfunction isHttpUrl(v: string): boolean {\n  try {\n    const p = new URL(v);\n    return p.protocol === \"http:\" || p.protocol === \"https:\";\n  } catch {\n    return false;\n  }\n}\n\nfunction isPlaceholder(v: string): boolean {\n  return /^(<.*>|your[-_ ].*|changeme|change-me|todo|xxx+|\\.\\.\\.|replace[-_ ]?me.*)$/i.test(v);\n}\n\nfunction shapeOk(key: string, v: string): boolean {\n  if (key === \"NEXT_PUBLIC_PRIVY_APP_ID\") return PRIVY_APP_ID_PATTERN.test(v);\n  if (key.endsWith(\"_ADDRESS\")) return ADDRESS.test(v);\n  if (key === \"PEPU_BUNDLER_URL\" || key === \"PEPU_PAYMASTER_URL\") return isHttpUrl(v);\n  if (key === \"SESSION_DURATION_MINUTES\") return Number.isFinite(Number(v)) && Number(v) > 0;\n  if (key === \"NEXT_PUBLIC_PEPU_NETWORK\") return v === \"mainnet\";\n  return true;\n}\n\nfunction fixFor(key: string, status: EnvItemStatus): string {\n  if (status === \"ok\") return \"\";\n  const verb = status === \"missing\" ? \"Set\" : \"Replace the value of\";\n  const hints: Record<string, string> = {\n    NEXT_PUBLIC_PRIVY_APP_ID: \"the App ID from the Privy dashboard (Settings)\",\n    PRIVY_APP_SECRET: \"the app secret from the Privy dashboard (server only)\",\n    PRIVY_AUTHORIZATION_KEY: \"the private key from generatePrivyAuthorizationKey (server only)\",\n    NEXT_PUBLIC_PRIVY_KEY_QUORUM_ID: \"the key quorum id Privy returns after registering the public key\",\n    NEXT_PUBLIC_PEPU_NETWORK: 'the value \"mainnet\" (the only supported network)',\n  };\n  const detail =\n    hints[key] ??\n    (key.endsWith(\"_ADDRESS\")\n      ? \"a 0x-prefixed 20-byte contract address\"\n      : key.endsWith(\"_URL\")\n        ? \"an http(s) URL\"\n        : \"a valid value\");\n  return `${verb} ${key} in .env.local to ${detail}.`;\n}\n\n/**\n * Check an env map against a template's requirements. Reports presence and\n * length only: values are never returned, logged or placed in messages.\n *\n * @example\n * ```ts\n * const r = checkPepuEnv({ env: process.env, template: \"game-app\" });\n * r.items.filter((i) => i.status !== \"ok\").map((i) => i.fix);\n * ```\n */\nexport function checkPepuEnv(o: {\n  env: Record<string, string | undefined>;\n  template?: string;\n  pillars?: Pillar[];\n}): EnvCheckResult {\n  const req = o.template ? TEMPLATE_REQUIREMENTS[o.template] : undefined;\n  const keys: { key: string; required: boolean }[] = [];\n  const seen = new Set<string>();\n  const add = (key: string, required: boolean): void => {\n    if (!seen.has(key)) {\n      seen.add(key);\n      keys.push({ key, required });\n    }\n  };\n  if (req) {\n    req.requiredEnv.forEach((k) => add(k, true));\n    req.optionalEnv.forEach((k) => add(k, false));\n  } else {\n    add(\"NEXT_PUBLIC_PRIVY_APP_ID\", true);\n    add(\"PRIVY_APP_SECRET\", true);\n  }\n  const pillars = o.pillars ?? req?.pillars;\n  if (pillars?.includes(\"sponsorship\")) {\n    add(\"PEPU_BUNDLER_URL\", true);\n    add(\"PEPU_PAYMASTER_URL\", true);\n  }\n\n  const items: EnvItem[] = keys.map(({ key, required }) => {\n    const v = (o.env[key] ?? \"\").trim();\n    let status: EnvItemStatus;\n    if (v === \"\") status = \"missing\";\n    else if (isPlaceholder(v)) status = \"placeholder\";\n    else if (!shapeOk(key, v)) status = \"malformed\";\n    else status = \"ok\";\n    return { key, status, secret: SECRET_KEYS.has(key), length: v.length, required, fix: fixFor(key, status) };\n  });\n\n  let anyOfOk = true;\n  for (const group of req?.requiredAnyOf ?? []) {\n    const satisfied = group.some((k) => items.find((i) => i.key === k)?.status === \"ok\");\n    if (!satisfied) {\n      anyOfOk = false;\n      for (const k of group) {\n        const it = items.find((i) => i.key === k);\n        if (it) it.fix = `Set at least one of ${group.join(\" / \")} to a valid 0x address.`;\n      }\n    }\n  }\n\n  // Required vars must be ok; an optional var that is present must also be valid.\n  const ok =\n    anyOfOk && items.every((i) => (i.required ? i.status === \"ok\" : i.status === \"ok\" || i.status === \"missing\"));\n  return { ok, items };\n}\n","import { pepuMainnet } from \"../chains.js\";\nimport { PEPU_ENV, PEPU_PUBLIC_ENV, resolvePepuEndpoints } from \"../endpoints.js\";\nimport { PepuConfigError } from \"../errors.js\";\nimport { PRIVY_APP_ID_PATTERN } from \"./env.js\";\nimport type { DoctorCheck } from \"./types.js\";\n\nconst TIMEOUT_MS = 8000;\n\nasync function rpc(f: typeof fetch, url: string, method: string): Promise<unknown> {\n  const res = await f(url, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\" },\n    body: JSON.stringify({ jsonrpc: \"2.0\", id: 1, method, params: [] }),\n    signal: AbortSignal.timeout(TIMEOUT_MS),\n  });\n  if (!res.ok) throw new Error(`HTTP ${res.status}`);\n  const json = (await res.json()) as { result?: unknown; error?: unknown };\n  if (json.error !== undefined) throw new Error(\"JSON-RPC error\");\n  return json.result;\n}\n\n/** Privy app id format check. Never echoes the value. */\nexport function checkPrivyAppIdFormat(appId: string | undefined): DoctorCheck {\n  const v = (appId ?? \"\").trim();\n  if (v === \"\") {\n    return {\n      id: \"privy.app-id\",\n      status: \"fail\",\n      message: \"NEXT_PUBLIC_PRIVY_APP_ID is not set.\",\n      fix: \"Copy the App ID from the Privy dashboard (Settings).\",\n    };\n  }\n  if (!PRIVY_APP_ID_PATTERN.test(v)) {\n    return {\n      id: \"privy.app-id\",\n      status: \"fail\",\n      message: `NEXT_PUBLIC_PRIVY_APP_ID does not look like a Privy app id (length ${v.length}).`,\n      fix: \"Use the App ID, not the app secret or client id.\",\n    };\n  }\n  return { id: \"privy.app-id\", status: \"pass\", message: \"Privy app id format looks right.\" };\n}\n\n/**\n * Check the chain RPC answers and reports chainId 97741.\n *\n * @example\n * ```ts\n * const c = await checkChainRpc({ rpcUrl: \"https://rpc-pepu-v2-mainnet-0.t.conduit.xyz\" });\n * ```\n */\nexport async function checkChainRpc(o: { rpcUrl?: string; fetch?: typeof fetch } = {}): Promise<DoctorCheck> {\n  const url = o.rpcUrl ?? pepuMainnet.rpcUrls.default.http[0];\n  try {\n    const result = await rpc(o.fetch ?? fetch, url, \"eth_chainId\");\n    const id = typeof result === \"string\" ? Number.parseInt(result, 16) : Number.NaN;\n    if (id !== pepuMainnet.id) {\n      return {\n        id: \"chain.rpc\",\n        status: \"fail\",\n        message: `RPC reports chainId ${String(id)}, expected ${pepuMainnet.id}.`,\n        fix: `Point ${PEPU_ENV.rpcUrl} at a Pepe Unchained V2 mainnet RPC.`,\n      };\n    }\n    return { id: \"chain.rpc\", status: \"pass\", message: `RPC reachable, chainId ${pepuMainnet.id}.` };\n  } catch {\n    return {\n      id: \"chain.rpc\",\n      status: \"fail\",\n      message: \"Chain RPC is unreachable.\",\n      fix: `Check ${PEPU_ENV.rpcUrl} and your network.`,\n    };\n  }\n}\n\n/**\n * Check the bundler and paymaster URLs resolved by the endpoints registry.\n * Unset (nothing to reach) is a skip; set but unreachable is a failure.\n * URLs are never included in messages: paymaster URLs embed credentials.\n *\n * @example\n * ```ts\n * const checks = await checkSponsorshipEndpoints({ env: process.env });\n * ```\n */\nexport async function checkSponsorshipEndpoints(\n  o: { env?: Record<string, string | undefined>; fetch?: typeof fetch } = {},\n): Promise<DoctorCheck[]> {\n  const f = o.fetch ?? fetch;\n  let eps;\n  try {\n    eps = resolvePepuEndpoints(o.env ? { env: o.env } : {});\n  } catch (e) {\n    const msg = e instanceof PepuConfigError ? e.message : \"Endpoint configuration is invalid.\";\n    return [\n      {\n        id: \"sponsorship.endpoints\",\n        status: \"fail\",\n        message: msg,\n        fix: `Fix ${PEPU_ENV.bundlerUrl} / ${PEPU_ENV.paymasterUrl}.`,\n      },\n    ];\n  }\n  const out: DoctorCheck[] = [];\n  if (eps.bundlerUrl === null) {\n    out.push({\n      id: \"sponsorship.bundler\",\n      status: \"skip\",\n      message: \"No bundler URL configured.\",\n      fix: `Set ${PEPU_ENV.bundlerUrl} to https://bundler.pepeunchained.com or your own bundler (${PEPU_PUBLIC_ENV.bundlerUrl} for browser use).`,\n    });\n  } else {\n    try {\n      const r = await rpc(f, eps.bundlerUrl, \"eth_supportedEntryPoints\");\n      out.push(\n        Array.isArray(r) && r.length > 0\n          ? { id: \"sponsorship.bundler\", status: \"pass\", message: \"Bundler reachable and reports supported entry points.\" }\n          : { id: \"sponsorship.bundler\", status: \"warn\", message: \"Bundler answered but reported no entry points.\" },\n      );\n    } catch {\n      out.push({\n        id: \"sponsorship.bundler\",\n        status: \"fail\",\n        message: \"Bundler is unreachable.\",\n        fix: `Check ${PEPU_ENV.bundlerUrl} and that the bundler is running.`,\n      });\n    }\n  }\n  // No token URL: reach the service base through its /health route.\n  const paymasterTarget = eps.paymasterUrl ?? (eps.paymasterBaseUrl === null ? null : `${eps.paymasterBaseUrl}/health`);\n  if (paymasterTarget === null) {\n    out.push({\n      id: \"sponsorship.paymaster\",\n      status: \"skip\",\n      message: \"No paymaster URL configured.\",\n      fix: `Set ${PEPU_ENV.paymasterUrl} to https://paymaster.pepeunchained.com/v2/paymaster/<client token> or your own paymaster.`,\n    });\n  } else {\n    try {\n      // Any HTTP response proves reachability; auth or method errors are expected.\n      await f(paymasterTarget, { method: \"GET\", signal: AbortSignal.timeout(TIMEOUT_MS) });\n      out.push({ id: \"sponsorship.paymaster\", status: \"pass\", message: \"Paymaster endpoint reachable.\" });\n    } catch {\n      out.push({\n        id: \"sponsorship.paymaster\",\n        status: \"fail\",\n        message: \"Paymaster is unreachable.\",\n        fix: `Check ${PEPU_ENV.paymasterUrl} and that the paymaster service is running.`,\n      });\n    }\n  }\n  return out;\n}\n","/**\n * P-256 authorization key generator for Privy session signers. Ported from\n * templates/game-app/scripts/generate-authorization-key.mjs, which used\n * `@privy-io/node`'s `generateP256KeyPair()`. Same output format, implemented\n * with WebCrypto so this entry needs no peer dependency.\n */\n\nfunction toBase64(bytes: ArrayBuffer): string {\n  let bin = \"\";\n  for (const b of new Uint8Array(bytes)) bin += String.fromCharCode(b);\n  return btoa(bin);\n}\n\nexport interface PrivyAuthorizationKeyPair {\n  /** Base64 SPKI, no PEM headers. Paste into the Privy dashboard \"New key\" form. */\n  publicKey: string;\n  /** Base64 PKCS8, no PEM headers. A real secret: put it in PRIVY_AUTHORIZATION_KEY. */\n  privateKey: string;\n}\n\n/**\n * Generate a P-256 key pair in the exact format Privy expects. Writes and\n * logs nothing; the caller decides where each half goes. Register the public\n * half in the Privy dashboard, keep the private half in server env only.\n *\n * @example\n * ```ts\n * const { publicKey, privateKey } = await generatePrivyAuthorizationKey();\n * // show publicKey; write privateKey straight to .env.local, never print it\n * ```\n */\nexport async function generatePrivyAuthorizationKey(): Promise<PrivyAuthorizationKeyPair> {\n  const pair = await globalThis.crypto.subtle.generateKey({ name: \"ECDSA\", namedCurve: \"P-256\" }, true, [\n    \"sign\",\n    \"verify\",\n  ]);\n  const [spki, pkcs8] = await Promise.all([\n    globalThis.crypto.subtle.exportKey(\"spki\", pair.publicKey),\n    globalThis.crypto.subtle.exportKey(\"pkcs8\", pair.privateKey),\n  ]);\n  return { publicKey: toBase64(spki), privateKey: toBase64(pkcs8) };\n}\n","/**\n * @pepu-chain/sdk/doctor (node/any). Project readiness checks. Never returns\n * or logs env values: presence and length only.\n */\nimport { checkChainRpc, checkPrivyAppIdFormat, checkSponsorshipEndpoints } from \"./doctor/checks.js\";\nimport { checkPepuEnv } from \"./doctor/env.js\";\nimport { TEMPLATE_REQUIREMENTS } from \"./doctor/requirements.js\";\nimport type { DoctorCheck, DoctorReport, Pillar, PrivyDashboardChecker } from \"./doctor/types.js\";\n\nexport { checkPepuEnv, PRIVY_APP_ID_PATTERN } from \"./doctor/env.js\";\nexport { checkChainRpc, checkPrivyAppIdFormat, checkSponsorshipEndpoints } from \"./doctor/checks.js\";\nexport { TEMPLATE_REQUIREMENTS } from \"./doctor/requirements.js\";\nexport { generatePrivyAuthorizationKey } from \"./doctor/auth-key.js\";\nexport type { PrivyAuthorizationKeyPair } from \"./doctor/auth-key.js\";\nexport type {\n  CheckStatus,\n  DoctorCheck,\n  DoctorReport,\n  EnvCheckResult,\n  EnvItem,\n  EnvItemStatus,\n  Pillar,\n  PrivyDashboardChecker,\n  PrivyDashboardRequirementKey,\n  TemplateRequirement,\n} from \"./doctor/types.js\";\n\nexport interface RunDoctorOptions {\n  env: Record<string, string | undefined>;\n  template?: string;\n  pillars?: Pillar[];\n  /** Override fetch (tests, proxies). */\n  fetch?: typeof fetch;\n  /** Skip network checks (RPC, bundler, paymaster, Privy dashboard). */\n  offline?: boolean;\n  /** WP-B1's `checkPrivyDashboardConfig`, wrapped to this signature. Skipped when absent. */\n  checkPrivyDashboard?: PrivyDashboardChecker;\n  /**\n   * The page origin (scheme, host and port) to check against Privy's Allowed\n   * origins, for example `http://localhost:3000`. Without it the\n   * allowed-origins check can only warn.\n   */\n  origin?: string;\n}\n\n/**\n * Run every readiness check and return a report. Env values never appear in it.\n *\n * @example\n * ```ts\n * const report = await runDoctor({ env: process.env, template: \"sponsored-session-app\" });\n * if (!report.ok) console.log(report.checks.filter((c) => c.status === \"fail\"));\n * ```\n */\nexport async function runDoctor(o: RunDoctorOptions): Promise<DoctorReport> {\n  const f = o.fetch ?? fetch;\n  const req = o.template ? TEMPLATE_REQUIREMENTS[o.template] : undefined;\n  const checks: DoctorCheck[] = [];\n  if (o.template && !req) {\n    checks.push({\n      id: \"template\",\n      status: \"fail\",\n      message: `Unknown template \"${o.template}\".`,\n      fix: `Use one of: ${Object.keys(TEMPLATE_REQUIREMENTS).join(\", \")}.`,\n    });\n  }\n  const env = checkPepuEnv({\n    env: o.env,\n    ...(req && o.template ? { template: o.template } : {}),\n    ...(o.pillars ? { pillars: o.pillars } : {}),\n  });\n  for (const i of env.items) {\n    if (i.status === \"ok\" || (i.status === \"missing\" && !i.required)) continue;\n    checks.push({\n      id: `env.${i.key}`,\n      status: i.required ? \"fail\" : \"warn\",\n      message: `${i.key} is ${i.status} (length ${i.length}).`,\n      fix: i.fix,\n    });\n  }\n  checks.push(checkPrivyAppIdFormat(o.env.NEXT_PUBLIC_PRIVY_APP_ID));\n\n  const pillars = o.pillars ?? req?.pillars ?? [];\n  if (o.offline) {\n    checks.push({ id: \"network\", status: \"skip\", message: \"Network checks skipped (offline).\" });\n  } else {\n    const rpcUrl = o.env.PEPU_RPC_URL?.trim() || o.env.NEXT_PUBLIC_PEPU_RPC_URL?.trim() || undefined;\n    checks.push(await checkChainRpc({ ...(rpcUrl ? { rpcUrl } : {}), fetch: f }));\n    if (pillars.includes(\"sponsorship\")) {\n      checks.push(...(await checkSponsorshipEndpoints({ env: o.env, fetch: f })));\n    }\n    const appId = o.env.NEXT_PUBLIC_PRIVY_APP_ID?.trim();\n    if (o.checkPrivyDashboard && req && appId) {\n      const secret = o.env.PRIVY_APP_SECRET?.trim();\n      checks.push(\n        ...(await o.checkPrivyDashboard({\n          appId,\n          requirementKeys: req.privyDashboard,\n          ...(secret ? { appSecret: secret } : {}),\n          ...(o.origin ? { origin: o.origin } : {}),\n          fetch: f,\n        })),\n      );\n    } else {\n      checks.push({\n        id: \"privy.dashboard\",\n        status: \"skip\",\n        message: \"Privy dashboard check not run (no checker injected, unknown template, or no app id).\",\n      });\n    }\n  }\n  return { ok: checks.every((c) => c.status !== \"fail\"), checks, env };\n}\n"]}