@pepu-chain/sdk 0.0.0-stage → 0.2.1

package/dist/paymaster.cjs

@@ -0,0 +1,356 @@
+'use strict';
+
+var chunkA5LP2UCS_cjs = require('./chunk-A5LP2UCS.cjs');
+var chunkK7JSQPZO_cjs = require('./chunk-K7JSQPZO.cjs');
+require('./chunk-VF3D6KLQ.cjs');
+var chunkDPCZJLB3_cjs = require('./chunk-DPCZJLB3.cjs');
+var chunkYQL7NISX_cjs = require('./chunk-YQL7NISX.cjs');
+var viem = require('viem');
+
+var U112_MAX = (1n << 112n) - 1n;
+var U128_MAX = (1n << 128n) - 1n;
+var MAX_TARGETS_PER_CALL = 50;
+function resolvePaymasterV2Address(explicit) {
+  if (explicit !== void 0) {
+    if (!viem.isAddress(explicit, { strict: false })) {
+      throw new chunkYQL7NISX_cjs.PepuConfigError("CONFIG_MISSING_ENV", "The v2 paymaster address passed in is not a valid address.");
+    }
+    return viem.getAddress(explicit);
+  }
+  const entry = chunkK7JSQPZO_cjs.getContract(chunkDPCZJLB3_cjs.pepuMainnet.id, "paymasterV2");
+  if (entry?.status === "deployed") return entry.address;
+  throw new chunkYQL7NISX_cjs.PepuConfigError(
+    "CONFIG_MISSING_ENV",
+    "No v2 paymaster address is configured: the registry's paymasterV2 entry is not deployed. Pass the deployed address explicitly as `paymaster` (GET /v2/contract on the policy service returns it). Never guess one."
+  );
+}
+function computeProjectId(appId) {
+  if (typeof appId !== "string" || appId.length === 0 || appId.length > 128) {
+    throw new chunkYQL7NISX_cjs.PepuPaymasterError("PAYMASTER_DENIED", "appId must be a non-empty string of at most 128 characters.");
+  }
+  return viem.keccak256(viem.stringToBytes(appId));
+}
+var getProjectId = computeProjectId;
+function assertProjectId(projectId) {
+  if (!viem.isHex(projectId, { strict: true }) || projectId.length !== 66) {
+    throw new chunkYQL7NISX_cjs.PepuPaymasterError("PAYMASTER_DENIED", "projectId must be a 0x-prefixed 32-byte hex string.");
+  }
+  return projectId;
+}
+function amount(label, v, max) {
+  if (typeof v !== "bigint" || v <= 0n || v > max) {
+    throw new chunkYQL7NISX_cjs.PepuPaymasterError("PAYMASTER_DENIED", `${label} must be a bigint greater than 0 and within range.`);
+  }
+  return v;
+}
+function call(to, data, fn, value = 0n) {
+  return { to, data, value, function: fn };
+}
+var ZERO = "0x0000000000000000000000000000000000000000";
+async function readProject(client, projectId, options = {}) {
+  const paymaster = resolvePaymasterV2Address(options.paymaster);
+  const id = assertProjectId(projectId);
+  const abi = chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi;
+  const [project, reclaim, pendingOwner] = await Promise.all([
+    client.readContract({ address: paymaster, abi, functionName: "getProject", args: [id] }),
+    client.readContract({ address: paymaster, abi, functionName: "pendingReclaim", args: [id] }),
+    client.readContract({ address: paymaster, abi, functionName: "pendingProjectOwner", args: [id] })
+  ]);
+  const [owner, paused, senderDailyLimit, balance, dailyLimit, spentToday, spentDay] = project;
+  const [reclaimOwner, executableAt, reclaimSigner] = reclaim;
+  const claimed = owner !== ZERO;
+  const today = Math.floor((options.now ?? Date.now)() / 1e3 / 86400);
+  let targetsAllowed;
+  if (options.checkTargets && options.checkTargets.length > 0) {
+    const entries = await Promise.all(
+      options.checkTargets.map(async (t) => {
+        const allowed = await client.readContract({
+          address: paymaster,
+          abi,
+          functionName: "isTargetAllowed",
+          args: [id, t]
+        });
+        return [viem.getAddress(t), allowed];
+      })
+    );
+    targetsAllowed = Object.fromEntries(entries);
+  }
+  return {
+    projectId: id,
+    paymaster,
+    owner: claimed ? viem.getAddress(owner) : null,
+    claimed,
+    paused,
+    balance,
+    dailyLimit,
+    senderDailyLimit,
+    spentToday: spentDay === today ? spentToday : 0n,
+    spentDay,
+    limitsConfigured: claimed && dailyLimit > 0n && senderDailyLimit > 0n,
+    pendingReclaim: reclaimOwner !== ZERO ? { newOwner: viem.getAddress(reclaimOwner), executableAt, signer: viem.getAddress(reclaimSigner) } : null,
+    pendingOwner: pendingOwner !== ZERO ? viem.getAddress(pendingOwner) : null,
+    ...targetsAllowed ? { targetsAllowed } : {}
+  };
+}
+function encodeDeposit(projectId, amountWei, options = {}) {
+  const to = resolvePaymasterV2Address(options.paymaster);
+  const data = viem.encodeFunctionData({
+    abi: chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi,
+    functionName: "depositFor",
+    args: [assertProjectId(projectId)]
+  });
+  return call(to, data, "depositFor(bytes32)", amount("amountWei", amountWei, U128_MAX));
+}
+function claimArgs(a) {
+  if (!a.appId || a.appId.length > 128) {
+    throw new chunkYQL7NISX_cjs.PepuPaymasterError("PAYMASTER_DENIED", "attestation.appId must be 1 to 128 characters.");
+  }
+  if (!viem.isAddress(a.newOwner, { strict: false })) {
+    throw new chunkYQL7NISX_cjs.PepuPaymasterError("PAYMASTER_DENIED", "attestation.newOwner is not a valid address.");
+  }
+  if (!viem.isHex(a.signature)) {
+    throw new chunkYQL7NISX_cjs.PepuPaymasterError("PAYMASTER_DENIED", "attestation.signature must be 0x-prefixed hex.");
+  }
+  return {
+    appId: a.appId,
+    newOwner: viem.getAddress(a.newOwner),
+    nonce: BigInt(a.nonce),
+    deadline: BigInt(a.deadline),
+    signature: a.signature
+  };
+}
+function encodeClaimProject(attestation, options = {}) {
+  const to = resolvePaymasterV2Address(options.paymaster);
+  const data = viem.encodeFunctionData({
+    abi: chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi,
+    functionName: "claimProject",
+    args: [claimArgs(attestation)]
+  });
+  return call(to, data, "claimProject((string,address,uint256,uint256,bytes))");
+}
+function encodeReclaimProject(attestation, options = {}) {
+  const to = resolvePaymasterV2Address(options.paymaster);
+  const data = viem.encodeFunctionData({
+    abi: chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi,
+    functionName: "reclaimProject",
+    args: [claimArgs(attestation)]
+  });
+  return call(to, data, "reclaimProject((string,address,uint256,uint256,bytes))");
+}
+function encodeClaimFromVerification(verified, options = {}) {
+  return verified.action === "reclaimProject" ? encodeReclaimProject(verified.attestation, options) : encodeClaimProject(verified.attestation, options);
+}
+function encodeExecuteReclaim(projectId, options = {}) {
+  const to = resolvePaymasterV2Address(options.paymaster);
+  const data = viem.encodeFunctionData({
+    abi: chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi,
+    functionName: "executeReclaim",
+    args: [assertProjectId(projectId)]
+  });
+  return call(to, data, "executeReclaim(bytes32)");
+}
+function encodeCancelReclaim(projectId, options = {}) {
+  const to = resolvePaymasterV2Address(options.paymaster);
+  const data = viem.encodeFunctionData({
+    abi: chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi,
+    functionName: "cancelReclaim",
+    args: [assertProjectId(projectId)]
+  });
+  return call(to, data, "cancelReclaim(bytes32)");
+}
+function encodeSetTargets(projectId, targets, allowed, options = {}) {
+  const to = resolvePaymasterV2Address(options.paymaster);
+  if (targets.length === 0 || targets.length > MAX_TARGETS_PER_CALL) {
+    throw new chunkYQL7NISX_cjs.PepuPaymasterError("PAYMASTER_DENIED", `targets must contain 1 to ${MAX_TARGETS_PER_CALL} addresses per call.`);
+  }
+  for (const t of targets) {
+    if (!viem.isAddress(t, { strict: false })) {
+      throw new chunkYQL7NISX_cjs.PepuPaymasterError("PAYMASTER_DENIED", "targets contains an invalid address.");
+    }
+  }
+  const data = viem.encodeFunctionData({
+    abi: chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi,
+    functionName: "setTargets",
+    args: [assertProjectId(projectId), targets.map((t) => viem.getAddress(t)), allowed]
+  });
+  return call(to, data, "setTargets(bytes32,address[],bool)");
+}
+function encodeSetDailyLimit(projectId, limitWei, options = {}) {
+  const to = resolvePaymasterV2Address(options.paymaster);
+  const data = viem.encodeFunctionData({
+    abi: chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi,
+    functionName: "setDailyLimit",
+    args: [assertProjectId(projectId), amount("limitWei", limitWei, U112_MAX)]
+  });
+  return call(to, data, "setDailyLimit(bytes32,uint112)");
+}
+function encodeSetSenderDailyLimit(projectId, limitWei, options = {}) {
+  const to = resolvePaymasterV2Address(options.paymaster);
+  const data = viem.encodeFunctionData({
+    abi: chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi,
+    functionName: "setSenderDailyLimit",
+    args: [assertProjectId(projectId), amount("limitWei", limitWei, U112_MAX)]
+  });
+  return call(to, data, "setSenderDailyLimit(bytes32,uint112)");
+}
+function encodeSetPaused(projectId, paused, options = {}) {
+  const to = resolvePaymasterV2Address(options.paymaster);
+  const data = viem.encodeFunctionData({
+    abi: chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi,
+    functionName: "setPaused",
+    args: [assertProjectId(projectId), paused]
+  });
+  return call(to, data, "setPaused(bytes32,bool)");
+}
+function encodeProposeProjectOwner(projectId, newOwner, options = {}) {
+  const to = resolvePaymasterV2Address(options.paymaster);
+  if (!viem.isAddress(newOwner, { strict: false }) || newOwner === ZERO) {
+    throw new chunkYQL7NISX_cjs.PepuPaymasterError("PAYMASTER_DENIED", "newOwner must be a non-zero valid address.");
+  }
+  const data = viem.encodeFunctionData({
+    abi: chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi,
+    functionName: "proposeProjectOwner",
+    args: [assertProjectId(projectId), viem.getAddress(newOwner)]
+  });
+  return call(to, data, "proposeProjectOwner(bytes32,address)");
+}
+function encodeAcceptProjectOwnership(projectId, options = {}) {
+  const to = resolvePaymasterV2Address(options.paymaster);
+  const data = viem.encodeFunctionData({
+    abi: chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi,
+    functionName: "acceptProjectOwnership",
+    args: [assertProjectId(projectId)]
+  });
+  return call(to, data, "acceptProjectOwnership(bytes32)");
+}
+function configureProject(params) {
+  if (params.appId === void 0 === (params.projectId === void 0)) {
+    throw new chunkYQL7NISX_cjs.PepuPaymasterError("PAYMASTER_DENIED", "configureProject needs exactly one of appId or projectId.");
+  }
+  const projectId = params.projectId !== void 0 ? assertProjectId(params.projectId) : computeProjectId(params.appId);
+  const o = { paymaster: params.paymaster };
+  return {
+    projectId,
+    calls: [
+      encodeSetTargets(projectId, params.targets, true, o),
+      encodeSetDailyLimit(projectId, params.dailyLimitWei, o),
+      encodeSetSenderDailyLimit(projectId, params.senderDailyLimitWei, o)
+    ]
+  };
+}
+async function sendPaymasterCalls(walletClient, calls, options = {}) {
+  const account = walletClient.account;
+  if (!account) {
+    throw new chunkYQL7NISX_cjs.PepuConfigError("CONFIG_MISSING_ENV", "The wallet client has no account; create it with an account.");
+  }
+  const chain = walletClient.chain ?? chunkDPCZJLB3_cjs.pepuMainnet;
+  const hashes = [];
+  for (const c of calls) {
+    const hash = await walletClient.sendTransaction({ account, chain, to: c.to, data: c.data, value: c.value });
+    hashes.push(hash);
+    if (options.publicClient) {
+      const receipt = await options.publicClient.waitForTransactionReceipt({ hash });
+      if (receipt.status !== "success") {
+        throw new chunkYQL7NISX_cjs.PepuPaymasterError("TX_REVERTED", `Paymaster call ${c.function} reverted (transaction ${hash}).`, {
+          details: { hash, function: c.function }
+        });
+      }
+    }
+  }
+  return hashes;
+}
+async function depositFor(params) {
+  if (params.appId === void 0 === (params.projectId === void 0)) {
+    throw new chunkYQL7NISX_cjs.PepuPaymasterError("PAYMASTER_DENIED", "depositFor needs exactly one of appId or projectId.");
+  }
+  const projectId = params.projectId !== void 0 ? assertProjectId(params.projectId) : computeProjectId(params.appId);
+  const tx = encodeDeposit(projectId, params.amountWei, { paymaster: params.paymaster });
+  if (params.requireClaimed ?? true) {
+    if (!params.publicClient) {
+      throw new chunkYQL7NISX_cjs.PepuConfigError(
+        "CONFIG_MISSING_ENV",
+        "depositFor checks the project is claimed by default and needs a publicClient. Pass publicClient, or requireClaimed: false to fund an unclaimed project."
+      );
+    }
+    const state = await readProject(params.publicClient, projectId, { paymaster: params.paymaster });
+    if (!state.claimed) {
+      throw new chunkYQL7NISX_cjs.PepuPaymasterError(
+        "PAYMASTER_PROJECT_NOT_CLAIMED",
+        "Refusing to deposit: the project is not claimed. Check the app id spelling (it is case-sensitive), or pass requireClaimed: false. Deposits cannot be withdrawn.",
+        { details: { projectId } }
+      );
+    }
+  }
+  const [hash] = await sendPaymasterCalls(params.walletClient, [tx]);
+  return hash;
+}
+
+Object.defineProperty(exports, "PAYMASTER_DENIAL_REASONS", {
+  enumerable: true,
+  get: function () { return chunkA5LP2UCS_cjs.PAYMASTER_DENIAL_REASONS; }
+});
+Object.defineProperty(exports, "PAYMASTER_REASON_CODES", {
+  enumerable: true,
+  get: function () { return chunkA5LP2UCS_cjs.PAYMASTER_REASON_CODES; }
+});
+Object.defineProperty(exports, "assertApproved", {
+  enumerable: true,
+  get: function () { return chunkA5LP2UCS_cjs.assertApproved; }
+});
+Object.defineProperty(exports, "buildErc7677Url", {
+  enumerable: true,
+  get: function () { return chunkA5LP2UCS_cjs.buildErc7677Url; }
+});
+Object.defineProperty(exports, "createPaymasterApi", {
+  enumerable: true,
+  get: function () { return chunkA5LP2UCS_cjs.createPaymasterApi; }
+});
+Object.defineProperty(exports, "credentialKind", {
+  enumerable: true,
+  get: function () { return chunkA5LP2UCS_cjs.credentialKind; }
+});
+Object.defineProperty(exports, "decodePaymasterRevert", {
+  enumerable: true,
+  get: function () { return chunkA5LP2UCS_cjs.decodePaymasterRevert; }
+});
+Object.defineProperty(exports, "hostedErc7677Url", {
+  enumerable: true,
+  get: function () { return chunkA5LP2UCS_cjs.hostedErc7677Url; }
+});
+Object.defineProperty(exports, "mapPaymasterReason", {
+  enumerable: true,
+  get: function () { return chunkA5LP2UCS_cjs.mapPaymasterReason; }
+});
+Object.defineProperty(exports, "paymasterReasonToError", {
+  enumerable: true,
+  get: function () { return chunkA5LP2UCS_cjs.paymasterReasonToError; }
+});
+Object.defineProperty(exports, "pepuSponsoredPaymasterV2Abi", {
+  enumerable: true,
+  get: function () { return chunkA5LP2UCS_cjs.pepuSponsoredPaymasterV2Abi; }
+});
+Object.defineProperty(exports, "serializeAttestation", {
+  enumerable: true,
+  get: function () { return chunkA5LP2UCS_cjs.serializeAttestation; }
+});
+exports.computeProjectId = computeProjectId;
+exports.configureProject = configureProject;
+exports.depositFor = depositFor;
+exports.encodeAcceptProjectOwnership = encodeAcceptProjectOwnership;
+exports.encodeCancelReclaim = encodeCancelReclaim;
+exports.encodeClaimFromVerification = encodeClaimFromVerification;
+exports.encodeClaimProject = encodeClaimProject;
+exports.encodeDeposit = encodeDeposit;
+exports.encodeExecuteReclaim = encodeExecuteReclaim;
+exports.encodeProposeProjectOwner = encodeProposeProjectOwner;
+exports.encodeReclaimProject = encodeReclaimProject;
+exports.encodeSetDailyLimit = encodeSetDailyLimit;
+exports.encodeSetPaused = encodeSetPaused;
+exports.encodeSetSenderDailyLimit = encodeSetSenderDailyLimit;
+exports.encodeSetTargets = encodeSetTargets;
+exports.getProjectId = getProjectId;
+exports.readProject = readProject;
+exports.resolvePaymasterV2Address = resolvePaymasterV2Address;
+exports.sendPaymasterCalls = sendPaymasterCalls;
+//# sourceMappingURL=paymaster.cjs.map
+//# sourceMappingURL=paymaster.cjs.map

package/dist/paymaster.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/paymaster/onchain.ts"],"names":["isAddress","PepuConfigError","getAddress","getContract","pepuMainnet","PepuPaymasterError","keccak256","stringToBytes","isHex","pepuSponsoredPaymasterV2Abi","encodeFunctionData"],"mappings":";;;;;;;;;AA2BA,IAAM,QAAA,GAAA,CAAY,MAAM,IAAA,IAAQ,EAAA;AAChC,IAAM,QAAA,GAAA,CAAY,MAAM,IAAA,IAAQ,EAAA;AAChC,IAAM,oBAAA,GAAuB,EAAA;AAkCtB,SAAS,0BAA0B,QAAA,EAA6B;AACrE,EAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,IAAA,IAAI,CAACA,cAAA,CAAU,QAAA,EAAU,EAAE,MAAA,EAAQ,KAAA,EAAO,CAAA,EAAG;AAC3C,MAAA,MAAM,IAAIC,iCAAA,CAAgB,oBAAA,EAAsB,4DAA4D,CAAA;AAAA,IAC9G;AACA,IAAA,OAAOC,gBAAW,QAAQ,CAAA;AAAA,EAC5B;AACA,EAAA,MAAM,KAAA,GAAQC,6BAAA,CAAYC,6BAAA,CAAY,EAAA,EAAI,aAAa,CAAA;AACvD,EAAA,IAAI,KAAA,EAAO,MAAA,KAAW,UAAA,EAAY,OAAO,KAAA,CAAM,OAAA;AAC/C,EAAA,MAAM,IAAIH,iCAAA;AAAA,IACR,oBAAA;AAAA,IACA;AAAA,GACF;AACF;AAWO,SAAS,iBAAiB,KAAA,EAAoB;AACnD,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,KAAA,CAAM,WAAW,CAAA,IAAK,KAAA,CAAM,SAAS,GAAA,EAAK;AACzE,IAAA,MAAM,IAAII,oCAAA,CAAmB,kBAAA,EAAoB,6DAA6D,CAAA;AAAA,EAChH;AACA,EAAA,OAAOC,cAAA,CAAUC,kBAAA,CAAc,KAAK,CAAC,CAAA;AACvC;AAGO,IAAM,YAAA,GAAe;AAE5B,SAAS,gBAAgB,SAAA,EAAqB;AAC5C,EAAA,IAAI,CAACC,UAAA,CAAM,SAAA,EAAW,EAAE,MAAA,EAAQ,MAAM,CAAA,IAAK,SAAA,CAAU,MAAA,KAAW,EAAA,EAAI;AAClE,IAAA,MAAM,IAAIH,oCAAA,CAAmB,kBAAA,EAAoB,qDAAqD,CAAA;AAAA,EACxG;AACA,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,MAAA,CAAO,KAAA,EAAe,CAAA,EAAW,GAAA,EAAqB;AAC7D,EAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,IAAK,EAAA,IAAM,IAAI,GAAA,EAAK;AAC/C,IAAA,MAAM,IAAIA,oCAAA,CAAmB,kBAAA,EAAoB,CAAA,EAAG,KAAK,CAAA,kDAAA,CAAoD,CAAA;AAAA,EAC/G;AACA,EAAA,OAAO,CAAA;AACT;AAEA,SAAS,IAAA,CAAK,EAAA,EAAa,IAAA,EAAW,EAAA,EAAY,QAAQ,EAAA,EAAmB;AAC3E,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,UAAU,EAAA,EAAG;AACzC;AA+BA,IAAM,IAAA,GAAO,4CAAA;AAkBb,eAAsB,WAAA,CACpB,MAAA,EACA,SAAA,EACA,OAAA,GAA8B,EAAC,EACR;AACvB,EAAA,MAAM,SAAA,GAAY,yBAAA,CAA0B,OAAA,CAAQ,SAAS,CAAA;AAC7D,EAAA,MAAM,EAAA,GAAK,gBAAgB,SAAS,CAAA;AACpC,EAAA,MAAM,GAAA,GAAMI,6CAAA;AACZ,EAAA,MAAM,CAAC,OAAA,EAAS,OAAA,EAAS,YAAY,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,IACzD,MAAA,CAAO,YAAA,CAAa,EAAE,OAAA,EAAS,SAAA,EAAW,GAAA,EAAK,YAAA,EAAc,YAAA,EAAc,IAAA,EAAM,CAAC,EAAE,CAAA,EAAG,CAAA;AAAA,IACvF,MAAA,CAAO,YAAA,CAAa,EAAE,OAAA,EAAS,SAAA,EAAW,GAAA,EAAK,YAAA,EAAc,gBAAA,EAAkB,IAAA,EAAM,CAAC,EAAE,CAAA,EAAG,CAAA;AAAA,IAC3F,MAAA,CAAO,YAAA,CAAa,EAAE,OAAA,EAAS,SAAA,EAAW,GAAA,EAAK,YAAA,EAAc,qBAAA,EAAuB,IAAA,EAAM,CAAC,EAAE,CAAA,EAAG;AAAA,GACjG,CAAA;AACD,EAAA,MAAM,CAAC,OAAO,MAAA,EAAQ,gBAAA,EAAkB,SAAS,UAAA,EAAY,UAAA,EAAY,QAAQ,CAAA,GAAI,OAAA;AACrF,EAAA,MAAM,CAAC,YAAA,EAAc,YAAA,EAAc,aAAa,CAAA,GAAI,OAAA;AACpD,EAAA,MAAM,UAAU,KAAA,KAAU,IAAA;AAC1B,EAAA,MAAM,KAAA,GAAQ,KAAK,KAAA,CAAA,CAAO,OAAA,CAAQ,OAAO,IAAA,CAAK,GAAA,GAAK,GAAI,GAAA,GAAO,KAAM,CAAA;AAEpE,EAAA,IAAI,cAAA;AACJ,EAAA,IAAI,OAAA,CAAQ,YAAA,IAAgB,OAAA,CAAQ,YAAA,CAAa,SAAS,CAAA,EAAG;AAC3D,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,GAAA;AAAA,MAC5B,OAAA,CAAQ,YAAA,CAAa,GAAA,CAAI,OAAO,CAAA,KAAM;AACpC,QAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,YAAA,CAAa;AAAA,UACxC,OAAA,EAAS,SAAA;AAAA,UACT,GAAA;AAAA,UACA,YAAA,EAAc,iBAAA;AAAA,UACd,IAAA,EAAM,CAAC,EAAA,EAAI,CAAC;AAAA,SACb,CAAA;AACD,QAAA,OAAO,CAACP,eAAA,CAAW,CAAC,CAAA,EAAG,OAAO,CAAA;AAAA,MAChC,CAAC;AAAA,KACH;AACA,IAAA,cAAA,GAAiB,MAAA,CAAO,YAAY,OAAO,CAAA;AAAA,EAC7C;AAEA,EAAA,OAAO;AAAA,IACL,SAAA,EAAW,EAAA;AAAA,IACX,SAAA;AAAA,IACA,KAAA,EAAO,OAAA,GAAUA,eAAA,CAAW,KAAK,CAAA,GAAI,IAAA;AAAA,IACrC,OAAA;AAAA,IACA,MAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAA;AAAA,IACA,gBAAA;AAAA,IACA,UAAA,EAAY,QAAA,KAAa,KAAA,GAAQ,UAAA,GAAa,EAAA;AAAA,IAC9C,QAAA;AAAA,IACA,gBAAA,EAAkB,OAAA,IAAW,UAAA,GAAa,EAAA,IAAM,gBAAA,GAAmB,EAAA;AAAA,IACnE,cAAA,EACE,YAAA,KAAiB,IAAA,GAAO,EAAE,QAAA,EAAUA,eAAA,CAAW,YAAY,CAAA,EAAG,YAAA,EAAc,MAAA,EAAQA,eAAA,CAAW,aAAa,GAAE,GAAI,IAAA;AAAA,IACpH,YAAA,EAAc,YAAA,KAAiB,IAAA,GAAOA,eAAA,CAAW,YAAY,CAAA,GAAI,IAAA;AAAA,IACjE,GAAI,cAAA,GAAiB,EAAE,cAAA,KAAmB;AAAC,GAC7C;AACF;AAYO,SAAS,aAAA,CAAc,SAAA,EAAgB,SAAA,EAAmB,OAAA,GAAkC,EAAC,EAAkB;AACpH,EAAA,MAAM,EAAA,GAAK,yBAAA,CAA0B,OAAA,CAAQ,SAAS,CAAA;AACtD,EAAA,MAAM,OAAOQ,uBAAA,CAAmB;AAAA,IAC9B,GAAA,EAAKD,6CAAA;AAAA,IACL,YAAA,EAAc,YAAA;AAAA,IACd,IAAA,EAAM,CAAC,eAAA,CAAgB,SAAS,CAAC;AAAA,GAClC,CAAA;AACD,EAAA,OAAO,IAAA,CAAK,IAAI,IAAA,EAAM,qBAAA,EAAuB,OAAO,WAAA,EAAa,SAAA,EAAW,QAAQ,CAAC,CAAA;AACvF;AAEA,SAAS,UAAU,CAAA,EAA4B;AAC7C,EAAA,IAAI,CAAC,CAAA,CAAE,KAAA,IAAS,CAAA,CAAE,KAAA,CAAM,SAAS,GAAA,EAAK;AACpC,IAAA,MAAM,IAAIJ,oCAAA,CAAmB,kBAAA,EAAoB,gDAAgD,CAAA;AAAA,EACnG;AACA,EAAA,IAAI,CAACL,eAAU,CAAA,CAAE,QAAA,EAAU,EAAE,MAAA,EAAQ,KAAA,EAAO,CAAA,EAAG;AAC7C,IAAA,MAAM,IAAIK,oCAAA,CAAmB,kBAAA,EAAoB,8CAA8C,CAAA;AAAA,EACjG;AACA,EAAA,IAAI,CAACG,UAAA,CAAM,CAAA,CAAE,SAAS,CAAA,EAAG;AACvB,IAAA,MAAM,IAAIH,oCAAA,CAAmB,kBAAA,EAAoB,gDAAgD,CAAA;AAAA,EACnG;AACA,EAAA,OAAO;AAAA,IACL,OAAO,CAAA,CAAE,KAAA;AAAA,IACT,QAAA,EAAUH,eAAA,CAAW,CAAA,CAAE,QAAQ,CAAA;AAAA,IAC/B,KAAA,EAAO,MAAA,CAAO,CAAA,CAAE,KAAK,CAAA;AAAA,IACrB,QAAA,EAAU,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAA;AAAA,IAC3B,WAAW,CAAA,CAAE;AAAA,GACf;AACF;AAeO,SAAS,kBAAA,CAAmB,WAAA,EAAsC,OAAA,GAAkC,EAAC,EAAkB;AAC5H,EAAA,MAAM,EAAA,GAAK,yBAAA,CAA0B,OAAA,CAAQ,SAAS,CAAA;AACtD,EAAA,MAAM,OAAOQ,uBAAA,CAAmB;AAAA,IAC9B,GAAA,EAAKD,6CAAA;AAAA,IACL,YAAA,EAAc,cAAA;AAAA,IACd,IAAA,EAAM,CAAC,SAAA,CAAU,WAAW,CAAC;AAAA,GAC9B,CAAA;AACD,EAAA,OAAO,IAAA,CAAK,EAAA,EAAI,IAAA,EAAM,sDAAsD,CAAA;AAC9E;AAWO,SAAS,oBAAA,CAAqB,WAAA,EAAsC,OAAA,GAAkC,EAAC,EAAkB;AAC9H,EAAA,MAAM,EAAA,GAAK,yBAAA,CAA0B,OAAA,CAAQ,SAAS,CAAA;AACtD,EAAA,MAAM,OAAOC,uBAAA,CAAmB;AAAA,IAC9B,GAAA,EAAKD,6CAAA;AAAA,IACL,YAAA,EAAc,gBAAA;AAAA,IACd,IAAA,EAAM,CAAC,SAAA,CAAU,WAAW,CAAC;AAAA,GAC9B,CAAA;AACD,EAAA,OAAO,IAAA,CAAK,EAAA,EAAI,IAAA,EAAM,wDAAwD,CAAA;AAChF;AAUO,SAAS,2BAAA,CACd,QAAA,EACA,OAAA,GAAkC,EAAC,EACpB;AACf,EAAA,OAAO,QAAA,CAAS,MAAA,KAAW,gBAAA,GACvB,oBAAA,CAAqB,QAAA,CAAS,WAAA,EAAa,OAAO,CAAA,GAClD,kBAAA,CAAmB,QAAA,CAAS,WAAA,EAAa,OAAO,CAAA;AACtD;AAWO,SAAS,oBAAA,CAAqB,SAAA,EAAgB,OAAA,GAAkC,EAAC,EAAkB;AACxG,EAAA,MAAM,EAAA,GAAK,yBAAA,CAA0B,OAAA,CAAQ,SAAS,CAAA;AACtD,EAAA,MAAM,OAAOC,uBAAA,CAAmB;AAAA,IAC9B,GAAA,EAAKD,6CAAA;AAAA,IACL,YAAA,EAAc,gBAAA;AAAA,IACd,IAAA,EAAM,CAAC,eAAA,CAAgB,SAAS,CAAC;AAAA,GAClC,CAAA;AACD,EAAA,OAAO,IAAA,CAAK,EAAA,EAAI,IAAA,EAAM,yBAAyB,CAAA;AACjD;AAYO,SAAS,mBAAA,CAAoB,SAAA,EAAgB,OAAA,GAAkC,EAAC,EAAkB;AACvG,EAAA,MAAM,EAAA,GAAK,yBAAA,CAA0B,OAAA,CAAQ,SAAS,CAAA;AACtD,EAAA,MAAM,OAAOC,uBAAA,CAAmB;AAAA,IAC9B,GAAA,EAAKD,6CAAA;AAAA,IACL,YAAA,EAAc,eAAA;AAAA,IACd,IAAA,EAAM,CAAC,eAAA,CAAgB,SAAS,CAAC;AAAA,GAClC,CAAA;AACD,EAAA,OAAO,IAAA,CAAK,EAAA,EAAI,IAAA,EAAM,wBAAwB,CAAA;AAChD;AAWO,SAAS,iBACd,SAAA,EACA,OAAA,EACA,OAAA,EACA,OAAA,GAAkC,EAAC,EACpB;AACf,EAAA,MAAM,EAAA,GAAK,yBAAA,CAA0B,OAAA,CAAQ,SAAS,CAAA;AACtD,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,IAAK,OAAA,CAAQ,SAAS,oBAAA,EAAsB;AACjE,IAAA,MAAM,IAAIJ,oCAAA,CAAmB,kBAAA,EAAoB,CAAA,0BAAA,EAA6B,oBAAoB,CAAA,oBAAA,CAAsB,CAAA;AAAA,EAC1H;AACA,EAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,IAAA,IAAI,CAACL,cAAA,CAAU,CAAA,EAAG,EAAE,MAAA,EAAQ,KAAA,EAAO,CAAA,EAAG;AACpC,MAAA,MAAM,IAAIK,oCAAA,CAAmB,kBAAA,EAAoB,sCAAsC,CAAA;AAAA,IACzF;AAAA,EACF;AACA,EAAA,MAAM,OAAOK,uBAAA,CAAmB;AAAA,IAC9B,GAAA,EAAKD,6CAAA;AAAA,IACL,YAAA,EAAc,YAAA;AAAA,IACd,IAAA,EAAM,CAAC,eAAA,CAAgB,SAAS,CAAA,EAAG,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAMP,eAAA,CAAW,CAAC,CAAC,GAAG,OAAO;AAAA,GAC9E,CAAA;AACD,EAAA,OAAO,IAAA,CAAK,EAAA,EAAI,IAAA,EAAM,oCAAoC,CAAA;AAC5D;AAWO,SAAS,mBAAA,CAAoB,SAAA,EAAgB,QAAA,EAAkB,OAAA,GAAkC,EAAC,EAAkB;AACzH,EAAA,MAAM,EAAA,GAAK,yBAAA,CAA0B,OAAA,CAAQ,SAAS,CAAA;AACtD,EAAA,MAAM,OAAOQ,uBAAA,CAAmB;AAAA,IAC9B,GAAA,EAAKD,6CAAA;AAAA,IACL,YAAA,EAAc,eAAA;AAAA,IACd,IAAA,EAAM,CAAC,eAAA,CAAgB,SAAS,GAAG,MAAA,CAAO,UAAA,EAAY,QAAA,EAAU,QAAQ,CAAC;AAAA,GAC1E,CAAA;AACD,EAAA,OAAO,IAAA,CAAK,EAAA,EAAI,IAAA,EAAM,gCAAgC,CAAA;AACxD;AAUO,SAAS,yBAAA,CAA0B,SAAA,EAAgB,QAAA,EAAkB,OAAA,GAAkC,EAAC,EAAkB;AAC/H,EAAA,MAAM,EAAA,GAAK,yBAAA,CAA0B,OAAA,CAAQ,SAAS,CAAA;AACtD,EAAA,MAAM,OAAOC,uBAAA,CAAmB;AAAA,IAC9B,GAAA,EAAKD,6CAAA;AAAA,IACL,YAAA,EAAc,qBAAA;AAAA,IACd,IAAA,EAAM,CAAC,eAAA,CAAgB,SAAS,GAAG,MAAA,CAAO,UAAA,EAAY,QAAA,EAAU,QAAQ,CAAC;AAAA,GAC1E,CAAA;AACD,EAAA,OAAO,IAAA,CAAK,EAAA,EAAI,IAAA,EAAM,sCAAsC,CAAA;AAC9D;AAUO,SAAS,eAAA,CAAgB,SAAA,EAAgB,MAAA,EAAiB,OAAA,GAAkC,EAAC,EAAkB;AACpH,EAAA,MAAM,EAAA,GAAK,yBAAA,CAA0B,OAAA,CAAQ,SAAS,CAAA;AACtD,EAAA,MAAM,OAAOC,uBAAA,CAAmB;AAAA,IAC9B,GAAA,EAAKD,6CAAA;AAAA,IACL,YAAA,EAAc,WAAA;AAAA,IACd,IAAA,EAAM,CAAC,eAAA,CAAgB,SAAS,GAAG,MAAM;AAAA,GAC1C,CAAA;AACD,EAAA,OAAO,IAAA,CAAK,EAAA,EAAI,IAAA,EAAM,yBAAyB,CAAA;AACjD;AAWO,SAAS,yBAAA,CAA0B,SAAA,EAAgB,QAAA,EAAmB,OAAA,GAAkC,EAAC,EAAkB;AAChI,EAAA,MAAM,EAAA,GAAK,yBAAA,CAA0B,OAAA,CAAQ,SAAS,CAAA;AACtD,EAAA,IAAI,CAACT,eAAU,QAAA,EAAU,EAAE,QAAQ,KAAA,EAAO,CAAA,IAAK,QAAA,KAAa,IAAA,EAAM;AAChE,IAAA,MAAM,IAAIK,oCAAA,CAAmB,kBAAA,EAAoB,4CAA4C,CAAA;AAAA,EAC/F;AACA,EAAA,MAAM,OAAOK,uBAAA,CAAmB;AAAA,IAC9B,GAAA,EAAKD,6CAAA;AAAA,IACL,YAAA,EAAc,qBAAA;AAAA,IACd,MAAM,CAAC,eAAA,CAAgB,SAAS,CAAA,EAAGP,eAAA,CAAW,QAAQ,CAAC;AAAA,GACxD,CAAA;AACD,EAAA,OAAO,IAAA,CAAK,EAAA,EAAI,IAAA,EAAM,sCAAsC,CAAA;AAC9D;AAUO,SAAS,4BAAA,CAA6B,SAAA,EAAgB,OAAA,GAAkC,EAAC,EAAkB;AAChH,EAAA,MAAM,EAAA,GAAK,yBAAA,CAA0B,OAAA,CAAQ,SAAS,CAAA;AACtD,EAAA,MAAM,OAAOQ,uBAAA,CAAmB;AAAA,IAC9B,GAAA,EAAKD,6CAAA;AAAA,IACL,YAAA,EAAc,wBAAA;AAAA,IACd,IAAA,EAAM,CAAC,eAAA,CAAgB,SAAS,CAAC;AAAA,GAClC,CAAA;AACD,EAAA,OAAO,IAAA,CAAK,EAAA,EAAI,IAAA,EAAM,iCAAiC,CAAA;AACzD;AA+BO,SAAS,iBAAiB,MAAA,EAA4E;AAC3G,EAAA,IAAK,MAAA,CAAO,KAAA,KAAU,MAAA,MAAgB,MAAA,CAAO,cAAc,MAAA,CAAA,EAAY;AACrE,IAAA,MAAM,IAAIJ,oCAAA,CAAmB,kBAAA,EAAoB,2DAA2D,CAAA;AAAA,EAC9G;AACA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,SAAA,KAAc,MAAA,GAAY,eAAA,CAAgB,OAAO,SAAS,CAAA,GAAI,gBAAA,CAAiB,MAAA,CAAO,KAAe,CAAA;AAC9H,EAAA,MAAM,CAAA,GAAI,EAAE,SAAA,EAAW,MAAA,CAAO,SAAA,EAAU;AACxC,EAAA,OAAO;AAAA,IACL,SAAA;AAAA,IACA,KAAA,EAAO;AAAA,MACL,gBAAA,CAAiB,SAAA,EAAW,MAAA,CAAO,OAAA,EAAS,MAAM,CAAC,CAAA;AAAA,MACnD,mBAAA,CAAoB,SAAA,EAAW,MAAA,CAAO,aAAA,EAAe,CAAC,CAAA;AAAA,MACtD,yBAAA,CAA0B,SAAA,EAAW,MAAA,CAAO,mBAAA,EAAqB,CAAC;AAAA;AACpE,GACF;AACF;AAcA,eAAsB,kBAAA,CACpB,YAAA,EACA,KAAA,EACA,OAAA,GAA8E,EAAC,EAC9D;AACjB,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAIJ,iCAAA,CAAgB,oBAAA,EAAsB,8DAA8D,CAAA;AAAA,EAChH;AACA,EAAA,MAAM,KAAA,GAAQ,aAAa,KAAA,IAASG,6BAAA;AACpC,EAAA,MAAM,SAAiB,EAAC;AACxB,EAAA,KAAA,MAAW,KAAK,KAAA,EAAO;AACrB,IAAA,MAAM,OAAO,MAAM,YAAA,CAAa,eAAA,CAAgB,EAAE,SAAS,KAAA,EAAO,EAAA,EAAI,CAAA,CAAE,EAAA,EAAI,MAAM,CAAA,CAAE,IAAA,EAAM,KAAA,EAAO,CAAA,CAAE,OAAO,CAAA;AAC1G,IAAA,MAAA,CAAO,KAAK,IAAI,CAAA;AAChB,IAAA,IAAI,QAAQ,YAAA,EAAc;AACxB,MAAA,MAAM,UAAU,MAAM,OAAA,CAAQ,aAAa,yBAAA,CAA0B,EAAE,MAAM,CAAA;AAC7E,MAAA,IAAI,OAAA,CAAQ,WAAW,SAAA,EAAW;AAChC,QAAA,MAAM,IAAIC,qCAAmB,aAAA,EAAe,CAAA,eAAA,EAAkB,EAAE,QAAQ,CAAA,uBAAA,EAA0B,IAAI,CAAA,EAAA,CAAA,EAAM;AAAA,UAC1G,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,EAAE,QAAA;AAAS,SACvC,CAAA;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AA0BA,eAAsB,WAAW,MAAA,EAAyC;AACxE,EAAA,IAAK,MAAA,CAAO,KAAA,KAAU,MAAA,MAAgB,MAAA,CAAO,cAAc,MAAA,CAAA,EAAY;AACrE,IAAA,MAAM,IAAIA,oCAAA,CAAmB,kBAAA,EAAoB,qDAAqD,CAAA;AAAA,EACxG;AACA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,SAAA,KAAc,MAAA,GAAY,eAAA,CAAgB,OAAO,SAAS,CAAA,GAAI,gBAAA,CAAiB,MAAA,CAAO,KAAe,CAAA;AAC9H,EAAA,MAAM,EAAA,GAAK,cAAc,SAAA,EAAW,MAAA,CAAO,WAAW,EAAE,SAAA,EAAW,MAAA,CAAO,SAAA,EAAW,CAAA;AACrF,EAAA,IAAI,MAAA,CAAO,kBAAkB,IAAA,EAAM;AACjC,IAAA,IAAI,CAAC,OAAO,YAAA,EAAc;AACxB,MAAA,MAAM,IAAIJ,iCAAA;AAAA,QACR,oBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAM,KAAA,GAAQ,MAAM,WAAA,CAAY,MAAA,CAAO,YAAA,EAAc,WAAW,EAAE,SAAA,EAAW,MAAA,CAAO,SAAA,EAAW,CAAA;AAC/F,IAAA,IAAI,CAAC,MAAM,OAAA,EAAS;AAClB,MAAA,MAAM,IAAII,oCAAA;AAAA,QACR,+BAAA;AAAA,QACA,iKAAA;AAAA,QACA,EAAE,OAAA,EAAS,EAAE,SAAA,EAAU;AAAE,OAC3B;AAAA,IACF;AAAA,EACF;AACA,EAAA,MAAM,CAAC,IAAI,CAAA,GAAI,MAAM,mBAAmB,MAAA,CAAO,YAAA,EAAc,CAAC,EAAE,CAAC,CAAA;AACjE,EAAA,OAAO,IAAA;AACT","file":"paymaster.cjs","sourcesContent":["import { encodeFunctionData, getAddress, isAddress, isHex, keccak256, stringToBytes } from \"viem\";\nimport type { Account, Address, Chain, Hash, Hex, PublicClient, WalletClient } from \"viem\";\n\nimport { pepuMainnet } from \"../chains.js\";\nimport { getContract } from \"../contracts.js\";\nimport { PepuConfigError, PepuPaymasterError } from \"../errors.js\";\nimport { pepuSponsoredPaymasterV2Abi } from \"./abi.js\";\n\n/**\n * v2 (tiered, deposit-only) paymaster on-chain helpers.\n *\n * Facts these helpers encode (services/paymaster/SPONSORSHIP-SPEC.md):\n * - `projectId = keccak256(bytes(appId))`, case-sensitive.\n * - Deposits are one-way. Nobody can withdraw, owner or not. Anyone can `depositFor` any project.\n * - `claimProject` sets ONLY the owner. Nothing is sponsorable until the owner calls `setTargets`,\n *   `setDailyLimit` and `setSenderDailyLimit` (see {@link configureProject}). A project with no per-wallet\n *   limit (`setSenderDailyLimit`) is rejected on-chain.\n * - The first claim of a project that ALREADY HOLDS deposited funds is pending for the admin change delay (>= 48h):\n *   finish it with {@link encodeExecuteReclaim}. An empty project is claimed immediately.\n * - A re-claim of an owned project is timelocked (>= 48h) and the owner can cancel it once per new owner.\n * - Ownership transfer is two-step (propose, then accept).\n *\n * The contract address comes from the registry (`paymasterV2`, the deployed canary: internally reviewed 3x,\n * external audit pending). Every helper takes an explicit `paymaster` address and throws CONFIG_MISSING_ENV when there is none.\n * No transaction is ever sent without the caller's wallet client.\n */\n\nconst U112_MAX = (1n << 112n) - 1n;\nconst U128_MAX = (1n << 128n) - 1n;\nconst MAX_TARGETS_PER_CALL = 50;\n\n/** A transaction a wallet (or smart account batch) can send. */\nexport interface PaymasterCall {\n  to: Address;\n  data: Hex;\n  value: bigint;\n  /** Solidity signature, for logs and UIs. */\n  function: string;\n}\n\n/** The EIP-712 `ProjectClaim` attestation returned by `POST /v2/projects/verify`. */\nexport interface ProjectClaimAttestation {\n  appId: string;\n  newOwner: Address;\n  nonce: string | bigint;\n  deadline: string | bigint;\n  signature: Hex;\n}\n\nexport interface PaymasterAddressOption {\n  /** v2 paymaster address. Defaults to the registry's `paymasterV2` entry once it is deployed. */\n  paymaster?: Address | undefined;\n}\n\n/**\n * Resolve the v2 paymaster address: explicit option first, then the registry. Throws\n * `CONFIG_MISSING_ENV` (never guesses an address) when neither is available.\n *\n * @example\n * ```ts\n * const paymaster = resolvePaymasterV2Address(\"0x1111111111111111111111111111111111111111\");\n * ```\n */\nexport function resolvePaymasterV2Address(explicit?: Address): Address {\n  if (explicit !== undefined) {\n    if (!isAddress(explicit, { strict: false })) {\n      throw new PepuConfigError(\"CONFIG_MISSING_ENV\", \"The v2 paymaster address passed in is not a valid address.\");\n    }\n    return getAddress(explicit);\n  }\n  const entry = getContract(pepuMainnet.id, \"paymasterV2\");\n  if (entry?.status === \"deployed\") return entry.address;\n  throw new PepuConfigError(\n    \"CONFIG_MISSING_ENV\",\n    \"No v2 paymaster address is configured: the registry's paymasterV2 entry is not deployed. Pass the deployed address explicitly as `paymaster` (GET /v2/contract on the policy service returns it). Never guess one.\",\n  );\n}\n\n/**\n * `projectId = keccak256(bytes(appId))`. The app id is used exactly as given, so it is case-sensitive:\n * Privy app ids are lower-case cuids, and a different case is a different project.\n *\n * @example\n * ```ts\n * const projectId = computeProjectId(\"clx0example0app0id\");\n * ```\n */\nexport function computeProjectId(appId: string): Hex {\n  if (typeof appId !== \"string\" || appId.length === 0 || appId.length > 128) {\n    throw new PepuPaymasterError(\"PAYMASTER_DENIED\", \"appId must be a non-empty string of at most 128 characters.\");\n  }\n  return keccak256(stringToBytes(appId));\n}\n\n/** Plan name for {@link computeProjectId}. */\nexport const getProjectId = computeProjectId;\n\nfunction assertProjectId(projectId: Hex): Hex {\n  if (!isHex(projectId, { strict: true }) || projectId.length !== 66) {\n    throw new PepuPaymasterError(\"PAYMASTER_DENIED\", \"projectId must be a 0x-prefixed 32-byte hex string.\");\n  }\n  return projectId;\n}\n\nfunction amount(label: string, v: bigint, max: bigint): bigint {\n  if (typeof v !== \"bigint\" || v <= 0n || v > max) {\n    throw new PepuPaymasterError(\"PAYMASTER_DENIED\", `${label} must be a bigint greater than 0 and within range.`);\n  }\n  return v;\n}\n\nfunction call(to: Address, data: Hex, fn: string, value = 0n): PaymasterCall {\n  return { to, data, value, function: fn };\n}\n\n/** State of a project, read from the paymaster contract. */\nexport interface ProjectState {\n  projectId: Hex;\n  paymaster: Address;\n  /** `null` when unclaimed. */\n  owner: Address | null;\n  claimed: boolean;\n  paused: boolean;\n  /** Deposited, unspent wei. Deposit-only: this can only be spent as gas, never withdrawn. */\n  balance: bigint;\n  dailyLimit: bigint;\n  senderDailyLimit: bigint;\n  /** Spent in the current UTC day (0 when the stored day is stale). */\n  spentToday: bigint;\n  /** Day index (unix seconds / 86400) the stored `spentToday` belongs to. */\n  spentDay: number;\n  /** True when claimed and both limits are set. Targets are checked via `targetsAllowed`. */\n  limitsConfigured: boolean;\n  /**\n   * Pending timelocked claim, or `null`: a re-claim of an owned project, or (when `claimed` is false) the first\n   * claim of a project that already holds funds. Finish it with {@link encodeExecuteReclaim} after `executableAt`.\n   */\n  pendingReclaim: { newOwner: Address; executableAt: number; signer: Address } | null;\n  /** Address proposed in a two-step ownership transfer, or `null`. */\n  pendingOwner: Address | null;\n  /** Present when `checkTargets` was passed: allowed flag per address (checksummed keys). */\n  targetsAllowed?: Record<Address, boolean>;\n}\n\nconst ZERO = \"0x0000000000000000000000000000000000000000\";\n\nexport interface ReadProjectOptions extends PaymasterAddressOption {\n  /** Also check these destinations against the on-chain allowlist (one `isTargetAllowed` read each). */\n  checkTargets?: readonly Address[];\n  /** Clock override for the day rollover (tests). Milliseconds. */\n  now?: () => number;\n}\n\n/**\n * Read a project's on-chain state: owner, pause flag, balance, limits, pending re-claim and pending owner.\n *\n * @example\n * ```ts\n * const p = await readProject(publicClient, computeProjectId(appId), { paymaster });\n * if (!p.claimed) console.log(\"claim it first\");\n * ```\n */\nexport async function readProject(\n  client: Pick<PublicClient, \"readContract\">,\n  projectId: Hex,\n  options: ReadProjectOptions = {},\n): Promise<ProjectState> {\n  const paymaster = resolvePaymasterV2Address(options.paymaster);\n  const id = assertProjectId(projectId);\n  const abi = pepuSponsoredPaymasterV2Abi;\n  const [project, reclaim, pendingOwner] = await Promise.all([\n    client.readContract({ address: paymaster, abi, functionName: \"getProject\", args: [id] }),\n    client.readContract({ address: paymaster, abi, functionName: \"pendingReclaim\", args: [id] }),\n    client.readContract({ address: paymaster, abi, functionName: \"pendingProjectOwner\", args: [id] }),\n  ]);\n  const [owner, paused, senderDailyLimit, balance, dailyLimit, spentToday, spentDay] = project;\n  const [reclaimOwner, executableAt, reclaimSigner] = reclaim;\n  const claimed = owner !== ZERO;\n  const today = Math.floor((options.now ?? Date.now)() / 1000 / 86_400);\n\n  let targetsAllowed: Record<Address, boolean> | undefined;\n  if (options.checkTargets && options.checkTargets.length > 0) {\n    const entries = await Promise.all(\n      options.checkTargets.map(async (t) => {\n        const allowed = await client.readContract({\n          address: paymaster,\n          abi,\n          functionName: \"isTargetAllowed\",\n          args: [id, t],\n        });\n        return [getAddress(t), allowed] as const;\n      }),\n    );\n    targetsAllowed = Object.fromEntries(entries) as Record<Address, boolean>;\n  }\n\n  return {\n    projectId: id,\n    paymaster,\n    owner: claimed ? getAddress(owner) : null,\n    claimed,\n    paused,\n    balance,\n    dailyLimit,\n    senderDailyLimit,\n    spentToday: spentDay === today ? spentToday : 0n,\n    spentDay,\n    limitsConfigured: claimed && dailyLimit > 0n && senderDailyLimit > 0n,\n    pendingReclaim:\n      reclaimOwner !== ZERO ? { newOwner: getAddress(reclaimOwner), executableAt, signer: getAddress(reclaimSigner) } : null,\n    pendingOwner: pendingOwner !== ZERO ? getAddress(pendingOwner) : null,\n    ...(targetsAllowed ? { targetsAllowed } : {}),\n  };\n}\n\n/**\n * Encode `depositFor(projectId)` with native PEPU as `value`. ONE-WAY: nothing can ever withdraw the deposit,\n * and the id is `keccak256` of a case-sensitive app id, so a typo deposits into a project nobody can claim.\n * Prefer {@link depositFor}, which checks the project is claimed first.\n *\n * @example\n * ```ts\n * const tx = encodeDeposit(computeProjectId(appId), 10n ** 18n, { paymaster });\n * ```\n */\nexport function encodeDeposit(projectId: Hex, amountWei: bigint, options: PaymasterAddressOption = {}): PaymasterCall {\n  const to = resolvePaymasterV2Address(options.paymaster);\n  const data = encodeFunctionData({\n    abi: pepuSponsoredPaymasterV2Abi,\n    functionName: \"depositFor\",\n    args: [assertProjectId(projectId)],\n  });\n  return call(to, data, \"depositFor(bytes32)\", amount(\"amountWei\", amountWei, U128_MAX));\n}\n\nfunction claimArgs(a: ProjectClaimAttestation) {\n  if (!a.appId || a.appId.length > 128) {\n    throw new PepuPaymasterError(\"PAYMASTER_DENIED\", \"attestation.appId must be 1 to 128 characters.\");\n  }\n  if (!isAddress(a.newOwner, { strict: false })) {\n    throw new PepuPaymasterError(\"PAYMASTER_DENIED\", \"attestation.newOwner is not a valid address.\");\n  }\n  if (!isHex(a.signature)) {\n    throw new PepuPaymasterError(\"PAYMASTER_DENIED\", \"attestation.signature must be 0x-prefixed hex.\");\n  }\n  return {\n    appId: a.appId,\n    newOwner: getAddress(a.newOwner),\n    nonce: BigInt(a.nonce),\n    deadline: BigInt(a.deadline),\n    signature: a.signature,\n  };\n}\n\n/**\n * Encode `claimProject(Claim)`. The attestation fixes the owner; anyone may submit the transaction. The claim\n * sets ONLY the owner: follow with {@link configureProject}'s three calls, because nothing is sponsorable\n * until `setTargets`, `setDailyLimit` and `setSenderDailyLimit` have run. If the project already holds deposited\n * funds the claim is PENDING for the on-chain admin change delay (>= 48h): the contract owner or manager can cancel\n * it, and anyone finishes it with {@link encodeExecuteReclaim}.\n *\n * @example\n * ```ts\n * const tx = encodeClaimProject(attestation, { paymaster });\n * await walletClient.sendTransaction({ to: tx.to, data: tx.data });\n * ```\n */\nexport function encodeClaimProject(attestation: ProjectClaimAttestation, options: PaymasterAddressOption = {}): PaymasterCall {\n  const to = resolvePaymasterV2Address(options.paymaster);\n  const data = encodeFunctionData({\n    abi: pepuSponsoredPaymasterV2Abi,\n    functionName: \"claimProject\",\n    args: [claimArgs(attestation)],\n  });\n  return call(to, data, \"claimProject((string,address,uint256,uint256,bytes))\");\n}\n\n/**\n * Encode `reclaimProject(Claim)`: a timelocked (>= 48h) re-claim of an already-owned project. The current owner\n * can cancel it ({@link encodeCancelReclaim}); anyone can finish it after the delay ({@link encodeExecuteReclaim}).\n *\n * @example\n * ```ts\n * const tx = encodeReclaimProject(attestation, { paymaster });\n * ```\n */\nexport function encodeReclaimProject(attestation: ProjectClaimAttestation, options: PaymasterAddressOption = {}): PaymasterCall {\n  const to = resolvePaymasterV2Address(options.paymaster);\n  const data = encodeFunctionData({\n    abi: pepuSponsoredPaymasterV2Abi,\n    functionName: \"reclaimProject\",\n    args: [claimArgs(attestation)],\n  });\n  return call(to, data, \"reclaimProject((string,address,uint256,uint256,bytes))\");\n}\n\n/**\n * Pick `claimProject` or `reclaimProject` from a `/v2/projects/verify` result (its `action` field) and encode it.\n *\n * @example\n * ```ts\n * const tx = encodeClaimFromVerification(verified, { paymaster });\n * ```\n */\nexport function encodeClaimFromVerification(\n  verified: { action: \"claimProject\" | \"reclaimProject\"; attestation: ProjectClaimAttestation },\n  options: PaymasterAddressOption = {},\n): PaymasterCall {\n  return verified.action === \"reclaimProject\"\n    ? encodeReclaimProject(verified.attestation, options)\n    : encodeClaimProject(verified.attestation, options);\n}\n\n/**\n * Encode `executeReclaim(projectId)`: completes a pending claim or re-claim once its delay has passed (and before it\n * expires, 30 days later).\n *\n * @example\n * ```ts\n * const tx = encodeExecuteReclaim(projectId, { paymaster });\n * ```\n */\nexport function encodeExecuteReclaim(projectId: Hex, options: PaymasterAddressOption = {}): PaymasterCall {\n  const to = resolvePaymasterV2Address(options.paymaster);\n  const data = encodeFunctionData({\n    abi: pepuSponsoredPaymasterV2Abi,\n    functionName: \"executeReclaim\",\n    args: [assertProjectId(projectId)],\n  });\n  return call(to, data, \"executeReclaim(bytes32)\");\n}\n\n/**\n * Encode `cancelReclaim(projectId)`: the current owner cancels a pending re-claim, ONCE per new owner (a second\n * attested re-claim by the same new owner cannot be cancelled). For a pending FIRST claim of an unowned project the\n * contract owner or manager cancels instead.\n *\n * @example\n * ```ts\n * const tx = encodeCancelReclaim(projectId, { paymaster });\n * ```\n */\nexport function encodeCancelReclaim(projectId: Hex, options: PaymasterAddressOption = {}): PaymasterCall {\n  const to = resolvePaymasterV2Address(options.paymaster);\n  const data = encodeFunctionData({\n    abi: pepuSponsoredPaymasterV2Abi,\n    functionName: \"cancelReclaim\",\n    args: [assertProjectId(projectId)],\n  });\n  return call(to, data, \"cancelReclaim(bytes32)\");\n}\n\n/**\n * Encode `setTargets(projectId, targets, allowed)`: add or remove destination contracts the project sponsors\n * (at most 50 per call). Owner only.\n *\n * @example\n * ```ts\n * const tx = encodeSetTargets(projectId, [counter], true, { paymaster });\n * ```\n */\nexport function encodeSetTargets(\n  projectId: Hex,\n  targets: readonly Address[],\n  allowed: boolean,\n  options: PaymasterAddressOption = {},\n): PaymasterCall {\n  const to = resolvePaymasterV2Address(options.paymaster);\n  if (targets.length === 0 || targets.length > MAX_TARGETS_PER_CALL) {\n    throw new PepuPaymasterError(\"PAYMASTER_DENIED\", `targets must contain 1 to ${MAX_TARGETS_PER_CALL} addresses per call.`);\n  }\n  for (const t of targets) {\n    if (!isAddress(t, { strict: false })) {\n      throw new PepuPaymasterError(\"PAYMASTER_DENIED\", \"targets contains an invalid address.\");\n    }\n  }\n  const data = encodeFunctionData({\n    abi: pepuSponsoredPaymasterV2Abi,\n    functionName: \"setTargets\",\n    args: [assertProjectId(projectId), targets.map((t) => getAddress(t)), allowed],\n  });\n  return call(to, data, \"setTargets(bytes32,address[],bool)\");\n}\n\n/**\n * Encode `setDailyLimit(projectId, limitWei)`: the project's total daily gas budget. Owner only. Must be above\n * zero; a contract-side zero limit means nothing can be spent, and tightening is instant.\n *\n * @example\n * ```ts\n * const tx = encodeSetDailyLimit(projectId, 5n * 10n ** 18n, { paymaster });\n * ```\n */\nexport function encodeSetDailyLimit(projectId: Hex, limitWei: bigint, options: PaymasterAddressOption = {}): PaymasterCall {\n  const to = resolvePaymasterV2Address(options.paymaster);\n  const data = encodeFunctionData({\n    abi: pepuSponsoredPaymasterV2Abi,\n    functionName: \"setDailyLimit\",\n    args: [assertProjectId(projectId), amount(\"limitWei\", limitWei, U112_MAX)],\n  });\n  return call(to, data, \"setDailyLimit(bytes32,uint112)\");\n}\n\n/**\n * Encode `setSenderDailyLimit(projectId, limitWei)`: the per-wallet daily gas limit. Owner only.\n *\n * @example\n * ```ts\n * const tx = encodeSetSenderDailyLimit(projectId, 10n ** 17n, { paymaster });\n * ```\n */\nexport function encodeSetSenderDailyLimit(projectId: Hex, limitWei: bigint, options: PaymasterAddressOption = {}): PaymasterCall {\n  const to = resolvePaymasterV2Address(options.paymaster);\n  const data = encodeFunctionData({\n    abi: pepuSponsoredPaymasterV2Abi,\n    functionName: \"setSenderDailyLimit\",\n    args: [assertProjectId(projectId), amount(\"limitWei\", limitWei, U112_MAX)],\n  });\n  return call(to, data, \"setSenderDailyLimit(bytes32,uint112)\");\n}\n\n/**\n * Encode `setPaused(projectId, paused)`. Pausing takes effect immediately; it is the project's emergency stop.\n *\n * @example\n * ```ts\n * const stop = encodeSetPaused(projectId, true, { paymaster });\n * ```\n */\nexport function encodeSetPaused(projectId: Hex, paused: boolean, options: PaymasterAddressOption = {}): PaymasterCall {\n  const to = resolvePaymasterV2Address(options.paymaster);\n  const data = encodeFunctionData({\n    abi: pepuSponsoredPaymasterV2Abi,\n    functionName: \"setPaused\",\n    args: [assertProjectId(projectId), paused],\n  });\n  return call(to, data, \"setPaused(bytes32,bool)\");\n}\n\n/**\n * Encode `proposeProjectOwner(projectId, newOwner)`: step one of the two-step ownership transfer. The new\n * owner must then call {@link encodeAcceptProjectOwnership}.\n *\n * @example\n * ```ts\n * const tx = encodeProposeProjectOwner(projectId, newOwner, { paymaster });\n * ```\n */\nexport function encodeProposeProjectOwner(projectId: Hex, newOwner: Address, options: PaymasterAddressOption = {}): PaymasterCall {\n  const to = resolvePaymasterV2Address(options.paymaster);\n  if (!isAddress(newOwner, { strict: false }) || newOwner === ZERO) {\n    throw new PepuPaymasterError(\"PAYMASTER_DENIED\", \"newOwner must be a non-zero valid address.\");\n  }\n  const data = encodeFunctionData({\n    abi: pepuSponsoredPaymasterV2Abi,\n    functionName: \"proposeProjectOwner\",\n    args: [assertProjectId(projectId), getAddress(newOwner)],\n  });\n  return call(to, data, \"proposeProjectOwner(bytes32,address)\");\n}\n\n/**\n * Encode `acceptProjectOwnership(projectId)`: step two of the ownership transfer, sent by the proposed owner.\n *\n * @example\n * ```ts\n * const tx = encodeAcceptProjectOwnership(projectId, { paymaster });\n * ```\n */\nexport function encodeAcceptProjectOwnership(projectId: Hex, options: PaymasterAddressOption = {}): PaymasterCall {\n  const to = resolvePaymasterV2Address(options.paymaster);\n  const data = encodeFunctionData({\n    abi: pepuSponsoredPaymasterV2Abi,\n    functionName: \"acceptProjectOwnership\",\n    args: [assertProjectId(projectId)],\n  });\n  return call(to, data, \"acceptProjectOwnership(bytes32)\");\n}\n\nexport interface ConfigureProjectParams extends PaymasterAddressOption {\n  /** Give `appId` or `projectId`. */\n  appId?: string;\n  projectId?: Hex;\n  /** Destination contracts to sponsor (the on-chain allowlist). 1 to 50. */\n  targets: readonly Address[];\n  /** Total daily budget, wei. */\n  dailyLimitWei: bigint;\n  /** Per-wallet daily budget, wei. */\n  senderDailyLimitWei: bigint;\n}\n\n/**\n * The three post-claim configuration calls, in order: `setTargets(allowed = true)`, `setDailyLimit`,\n * `setSenderDailyLimit`. A project spends nothing until all three have run. All three are owner-only calls to\n * the same contract, so a smart account or batched wallet can send them in one transaction; an EOA sends them\n * one after another with {@link sendPaymasterCalls}.\n *\n * @example\n * ```ts\n * const { calls } = configureProject({\n *   appId, paymaster,\n *   targets: [counter],\n *   dailyLimitWei: 5n * 10n ** 18n,\n *   senderDailyLimitWei: 10n ** 17n,\n * });\n * await smartAccountClient.sendUserOperation({ calls: calls.map(({ to, data, value }) => ({ to, data, value })) });\n * ```\n */\nexport function configureProject(params: ConfigureProjectParams): { projectId: Hex; calls: PaymasterCall[] } {\n  if ((params.appId === undefined) === (params.projectId === undefined)) {\n    throw new PepuPaymasterError(\"PAYMASTER_DENIED\", \"configureProject needs exactly one of appId or projectId.\");\n  }\n  const projectId = params.projectId !== undefined ? assertProjectId(params.projectId) : computeProjectId(params.appId as string);\n  const o = { paymaster: params.paymaster };\n  return {\n    projectId,\n    calls: [\n      encodeSetTargets(projectId, params.targets, true, o),\n      encodeSetDailyLimit(projectId, params.dailyLimitWei, o),\n      encodeSetSenderDailyLimit(projectId, params.senderDailyLimitWei, o),\n    ],\n  };\n}\n\ntype SendingWallet = Pick<WalletClient, \"sendTransaction\"> & { account?: Account | undefined; chain?: Chain | undefined };\n\n/**\n * Send prepared calls one after another from a wallet client, returning the hashes. When `publicClient` is\n * given it waits for each receipt first (so a later call is not sent after an earlier one failed). The\n * transaction `value` is exactly the call's value; nothing else is added.\n *\n * @example\n * ```ts\n * const hashes = await sendPaymasterCalls(walletClient, calls, { publicClient });\n * ```\n */\nexport async function sendPaymasterCalls(\n  walletClient: SendingWallet,\n  calls: readonly PaymasterCall[],\n  options: { publicClient?: Pick<PublicClient, \"waitForTransactionReceipt\"> } = {},\n): Promise<Hash[]> {\n  const account = walletClient.account;\n  if (!account) {\n    throw new PepuConfigError(\"CONFIG_MISSING_ENV\", \"The wallet client has no account; create it with an account.\");\n  }\n  const chain = walletClient.chain ?? pepuMainnet;\n  const hashes: Hash[] = [];\n  for (const c of calls) {\n    const hash = await walletClient.sendTransaction({ account, chain, to: c.to, data: c.data, value: c.value });\n    hashes.push(hash);\n    if (options.publicClient) {\n      const receipt = await options.publicClient.waitForTransactionReceipt({ hash });\n      if (receipt.status !== \"success\") {\n        throw new PepuPaymasterError(\"TX_REVERTED\", `Paymaster call ${c.function} reverted (transaction ${hash}).`, {\n          details: { hash, function: c.function },\n        });\n      }\n    }\n  }\n  return hashes;\n}\n\nexport interface DepositForParams extends PaymasterAddressOption {\n  walletClient: SendingWallet;\n  /** Give `appId` or `projectId`. */\n  appId?: string;\n  projectId?: Hex;\n  amountWei: bigint;\n  /**\n   * Default true: read the project first and refuse when it has no owner, which catches a mistyped (case-sensitive)\n   * app id before funds go to a project nobody controls. Needs `publicClient`. Pass false to fund a project its\n   * owner has not claimed yet (deposits are credited and become spendable after the claim and configuration).\n   */\n  requireClaimed?: boolean;\n  publicClient?: Pick<PublicClient, \"readContract\">;\n}\n\n/**\n * Deposit native PEPU into a project with the caller's wallet. ONE-WAY: nobody can withdraw it afterwards, and\n * anyone may deposit into any project. By default it first confirms the project is claimed.\n *\n * @example\n * ```ts\n * const hash = await depositFor({ walletClient, publicClient, appId, amountWei: 10n ** 18n, paymaster });\n * ```\n */\nexport async function depositFor(params: DepositForParams): Promise<Hash> {\n  if ((params.appId === undefined) === (params.projectId === undefined)) {\n    throw new PepuPaymasterError(\"PAYMASTER_DENIED\", \"depositFor needs exactly one of appId or projectId.\");\n  }\n  const projectId = params.projectId !== undefined ? assertProjectId(params.projectId) : computeProjectId(params.appId as string);\n  const tx = encodeDeposit(projectId, params.amountWei, { paymaster: params.paymaster });\n  if (params.requireClaimed ?? true) {\n    if (!params.publicClient) {\n      throw new PepuConfigError(\n        \"CONFIG_MISSING_ENV\",\n        \"depositFor checks the project is claimed by default and needs a publicClient. Pass publicClient, or requireClaimed: false to fund an unclaimed project.\",\n      );\n    }\n    const state = await readProject(params.publicClient, projectId, { paymaster: params.paymaster });\n    if (!state.claimed) {\n      throw new PepuPaymasterError(\n        \"PAYMASTER_PROJECT_NOT_CLAIMED\",\n        \"Refusing to deposit: the project is not claimed. Check the app id spelling (it is case-sensitive), or pass requireClaimed: false. Deposits cannot be withdrawn.\",\n        { details: { projectId } },\n      );\n    }\n  }\n  const [hash] = await sendPaymasterCalls(params.walletClient, [tx]);\n  return hash as Hash;\n}\n"]}