@pepu-chain/sdk 0.2.1 → 0.2.2

package/dist/combo.cjs

@@ -1,14 +1,15 @@
 'use strict';
 /* @pepu-chain/peer-guard */(function(){var p=["@privy-io/node","@zerodev/sdk","@zerodev/permissions","@zerodev/ecdsa-validator"];for(var i=0;i<p.length;i++){try{require.resolve(p[i])}catch(e){if(e&&e.code==="MODULE_NOT_FOUND"){var m="@pepu-chain/sdk/combo needs peer packages that are not installed: @privy-io/node @zerodev/sdk @zerodev/permissions @zerodev/ecdsa-validator. Install with: npm i @privy-io/node @zerodev/sdk @zerodev/permissions @zerodev/ecdsa-validator  (or let create-pepu-app scaffold everything).";var x=new Error(m);x.code="PEPU_MISSING_PEER";throw x}}}})();
 
-var chunkPHM3ZORG_cjs = require('./chunk-PHM3ZORG.cjs');
-var chunkNVOPDXTA_cjs = require('./chunk-NVOPDXTA.cjs');
-require('./chunk-7MNJF2OB.cjs');
+var chunk4L4CHIXE_cjs = require('./chunk-4L4CHIXE.cjs');
+var chunkUQH4ZAXD_cjs = require('./chunk-UQH4ZAXD.cjs');
+require('./chunk-DNWWZWUW.cjs');
 var chunkAJS4UFQX_cjs = require('./chunk-AJS4UFQX.cjs');
-require('./chunk-A5LP2UCS.cjs');
+require('./chunk-4GEC7GUU.cjs');
 var chunkRCMKPJZO_cjs = require('./chunk-RCMKPJZO.cjs');
-require('./chunk-WANILJZQ.cjs');
+require('./chunk-HTCX46RJ.cjs');
 require('./chunk-K7JSQPZO.cjs');
+require('./chunk-65Y5UCQ7.cjs');
 var chunkJ3O2ZGG3_cjs = require('./chunk-J3O2ZGG3.cjs');
 require('./chunk-4GINFJO6.cjs');
 var chunkVF3D6KLQ_cjs = require('./chunk-VF3D6KLQ.cjs');
@@ -41,6 +42,7 @@ async function guard(op, fn) {
 function bearerToken(request) {
   return (request.headers.get("authorization") ?? "").replace(/^Bearer\s+/i, "").trim();
 }
+var PROVISIONING = /* @__PURE__ */ Symbol("wallet-provisioning");
 var nowSeconds = () => Math.floor(Date.now() / 1e3);
 function defaultPublicClient() {
   return viem.createPublicClient({ chain: chunkDPCZJLB3_cjs.pepuMainnet, transport: viem.http(chunkVF3D6KLQ_cjs.resolvePepuEndpoints().rpcUrl) });
@@ -63,26 +65,38 @@ function createSponsoredSessionRoutes(o) {
       revoke: { POST: unset }
     };
   }
-  chunkPHM3ZORG_cjs.buildKernelSessionPolicies({ calls: o.scope.calls, validUntil: 1 });
+  chunk4L4CHIXE_cjs.buildKernelSessionPolicies({ calls: o.scope.calls, validUntil: 1 });
   let publicClient = o.publicClient;
   const client = () => publicClient ??= defaultPublicClient();
-  const authenticate = async (request) => {
+  const wait = { attempts: o.provisioningWait?.attempts ?? 3, delayMs: o.provisioningWait?.delayMs ?? 400 };
+  const authenticateOrProvisioning = async (request) => {
     if (o.authenticate) {
       const user = await o.authenticate(request);
       if (!user) throw new chunkYQL7NISX_cjs.PepuAuthError("AUTH_INVALID_TOKEN", "Missing or invalid Privy access token.");
       return user;
     }
-    const auth = await chunk45KSZH26_cjs.requireUser(request, { privy: o.privy ?? chunk45KSZH26_cjs.createPrivyServer() });
-    if (!auth.ok) return auth.response;
-    if (!auth.user.address) {
-      throw new chunkYQL7NISX_cjs.PepuAuthError("WALLET_NOT_PROVISIONED", "No embedded wallet yet. Create it first (ensure-wallet route).", {
-        status: 409
-      });
+    const privy = o.privy ?? chunk45KSZH26_cjs.createPrivyServer();
+    for (let attempt = 0; ; attempt++) {
+      const auth = await chunk45KSZH26_cjs.requireUser(request, { privy });
+      if (!auth.ok) return auth.response;
+      if (auth.user.address) return { userId: auth.user.userId, ownerAddress: auth.user.address };
+      if (attempt >= wait.attempts) return PROVISIONING;
+      await new Promise((resolve) => setTimeout(resolve, wait.delayMs * (attempt + 1)));
+    }
+  };
+  const authenticate = async (request) => {
+    const user = await authenticateOrProvisioning(request);
+    if (user === PROVISIONING) {
+      throw new chunkYQL7NISX_cjs.PepuAuthError(
+        "WALLET_NOT_PROVISIONED",
+        "Your wallet is still being set up. This usually takes a few seconds; retrying.",
+        { status: 409, retryable: true }
+      );
     }
-    return { userId: auth.user.userId, ownerAddress: auth.user.address };
+    return user;
   };
   const minutes = () => o.minutes ?? chunkIG7RSL2Y_cjs.resolveSessionMinutes(process.env.SESSION_DURATION_MINUTES);
-  const policiesFor = (validUntil) => chunkPHM3ZORG_cjs.buildKernelSessionPolicies({ calls: o.scope.calls, validUntil });
+  const policiesFor = (validUntil) => chunk4L4CHIXE_cjs.buildKernelSessionPolicies({ calls: o.scope.calls, validUntil });
   return {
     prepare: {
       POST: (request) => guard("combo prepare", async () => {
@@ -91,11 +105,11 @@ function createSponsoredSessionRoutes(o) {
         const { userId, ownerAddress } = user;
         const mins = minutes();
         const validUntil = chunkIG7RSL2Y_cjs.sessionExpiry(nowSeconds(), mins);
-        const key = chunkPHM3ZORG_cjs.generateSessionKey();
+        const key = chunk4L4CHIXE_cjs.generateSessionKey();
         const policies = policiesFor(validUntil);
         const [kernelAddress, permissionId] = await Promise.all([
-          chunkNVOPDXTA_cjs.getKernelAddress(client(), ownerAddress),
-          chunkPHM3ZORG_cjs.expectedPermissionId({ publicClient: client(), sessionKeyAddress: key.address, policies })
+          chunkUQH4ZAXD_cjs.getKernelAddress(client(), ownerAddress),
+          chunk4L4CHIXE_cjs.expectedPermissionId({ publicClient: client(), sessionKeyAddress: key.address, policies })
         ]);
         const record = {
           userId,
@@ -146,10 +160,11 @@ function createSponsoredSessionRoutes(o) {
     },
     status: {
       GET: (request) => guard("combo status", async () => {
-        const user = await authenticate(request);
+        const user = await authenticateOrProvisioning(request);
         if (user instanceof Response) return user;
+        if (user === PROVISIONING) return json({ active: false, provisioning: true });
         const record = await o.store.get(user.userId);
-        if (!record || !chunkPHM3ZORG_cjs.isLive(record, nowSeconds())) return json({ active: false });
+        if (!record || !chunk4L4CHIXE_cjs.isLive(record, nowSeconds())) return json({ active: false });
         return json({
           active: true,
           validUntil: record.validUntil,
@@ -165,7 +180,7 @@ function createSponsoredSessionRoutes(o) {
         const user = await authenticate(request);
         if (user instanceof Response) return user;
         const record = await o.store.get(user.userId);
-        if (!record || !record.approval || !chunkPHM3ZORG_cjs.isLive(record, nowSeconds())) {
+        if (!record || !record.approval || !chunk4L4CHIXE_cjs.isLive(record, nowSeconds())) {
           throw new chunkYQL7NISX_cjs.PepuSessionError("SESSION_NONE", "No active session. Start one first.");
         }
         let input;
@@ -192,12 +207,12 @@ function createSponsoredSessionRoutes(o) {
         }
         const privyToken = o.forwardPrivyToken === false ? "" : bearerToken(request);
         try {
-          const account = await chunkPHM3ZORG_cjs.loadKernelSessionAccount({
+          const account = await chunk4L4CHIXE_cjs.loadKernelSessionAccount({
             publicClient: client(),
             approval: record.approval,
             sessionPrivateKey: record.sessionPrivateKey
           });
-          const kernel = chunkNVOPDXTA_cjs.createPepuSponsoredClient({
+          const kernel = chunkUQH4ZAXD_cjs.createPepuSponsoredClient({
             account,
             publicClient: client(),
             ...o.endpoints?.bundlerUrl !== void 0 ? { bundlerUrl: o.endpoints.bundlerUrl } : {},
@@ -205,7 +220,7 @@ function createSponsoredSessionRoutes(o) {
             ...o.endpoints?.paymasterToken !== void 0 ? { paymasterToken: o.endpoints.paymasterToken } : {},
             ...privyToken ? { paymasterContext: chunkRCMKPJZO_cjs.buildPaymasterContext({ privyAccessToken: privyToken }) } : {}
           });
-          const result = await chunkNVOPDXTA_cjs.sendSponsored({ client: kernel, calls });
+          const result = await chunkUQH4ZAXD_cjs.sendSponsored({ client: kernel, calls });
           const actions = record.actions + (result.success ? 1 : 0);
           if (result.success) await o.store.set({ ...record, actions });
           const out = {
@@ -247,11 +262,11 @@ function assertCallsInScope(scope, calls) {
 
 Object.defineProperty(exports, "createMemoryStore", {
   enumerable: true,
-  get: function () { return chunkPHM3ZORG_cjs.createMemoryStore; }
+  get: function () { return chunk4L4CHIXE_cjs.createMemoryStore; }
 });
 Object.defineProperty(exports, "isLive", {
   enumerable: true,
-  get: function () { return chunkPHM3ZORG_cjs.isLive; }
+  get: function () { return chunk4L4CHIXE_cjs.isLive; }
 });
 Object.defineProperty(exports, "resolveSessionMinutes", {
   enumerable: true,

package/dist/combo.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/combo/server.ts"],"names":["assertServerOnly","toPepuError","PepuError","PepuChainError","toErrorResponse","createPublicClient","pepuMainnet","http","resolvePepuEndpoints","PepuConfigError","buildKernelSessionPolicies","PepuAuthError","requireUser","createPrivyServer","resolveSessionMinutes","sessionExpiry","generateSessionKey","getKernelAddress","expectedPermissionId","describeKernelSessionScope","PepuPolicyError","PepuSessionError","checkApproval","isLive","loadKernelSessionAccount","createPepuSponsoredClient","buildPaymasterContext","sendSponsored","normalizeCalls","isCallInScope"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqCAA,kCAAA,CAAiB,uBAAuB,CAAA;AA0FxC,SAAS,IAAA,CAAK,IAAA,EAAe,MAAA,GAAS,GAAA,EAAe;AACnD,EAAA,OAAO,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG,EAAE,MAAA,EAAQ,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,IAAsB,CAAA;AACvG;AAGA,SAAS,QAAA,CAAS,GAAY,EAAA,EAAuB;AACnD,EAAA,MAAM,GAAA,GAAMC,6BAAA,CAAY,CAAA,EAAG,EAAE,IAAI,CAAA;AACjC,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,SAAA,IAAa,EAAE,aAAaC,2BAAA,CAAA,EAAY;AACvD,IAAA,OAAO,IAAIC,gCAAA,CAAe,SAAA,EAAW,GAAA,CAAI,OAAA,EAAS,EAAE,MAAA,EAAQ,GAAA,EAAK,KAAA,EAAO,CAAA,EAAG,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,GAAA;AACT;AAEA,eAAe,KAAA,CAAM,IAAY,EAAA,EAAgD;AAC/E,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,EAAA,EAAG;AAAA,EAClB,SAAS,CAAA,EAAG;AACV,IAAA,OAAOC,iCAAA,CAAgB,QAAA,CAAS,CAAA,EAAG,EAAE,CAAC,CAAA;AAAA,EACxC;AACF;AAGA,SAAS,YAAY,OAAA,EAA0B;AAC7C,EAAA,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA,IAAK,IAAI,OAAA,CAAQ,aAAA,EAAe,EAAE,CAAA,CAAE,IAAA,EAAK;AACtF;AAEA,IAAM,aAAa,MAAc,IAAA,CAAK,MAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAE7D,SAAS,mBAAA,GAAoC;AAC3C,EAAA,OAAOC,uBAAA,CAAmB,EAAE,KAAA,EAAOC,6BAAA,EAAa,SAAA,EAAWC,UAAKC,sCAAA,EAAqB,CAAE,MAAM,CAAA,EAAG,CAAA;AAClG;AA0CO,SAAS,6BAAgC,CAAA,EAA6D;AAI3G,EAAA,MAAM,eAAe,CAAA,CAAE,KAAA,CAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,MAAA,IAAU,OAAO,CAAA,CAAE,MAAM,CAAA,CAAE,IAAA,OAAW,EAAE,CAAA;AAC1F,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,MAAM,QAAQ,YACZJ,iCAAA;AAAA,MACE,IAAIK,iCAAA;AAAA,QACF,oBAAA;AAAA,QACA,CAAA,EAAG,CAAA,CAAE,KAAA,CAAM,SAAA,IAAa,mCAAmC,CAAA,iDAAA,CAAA;AAAA,QAC3D,EAAE,MAAM,gCAAA;AAAiC;AAC3C,KACF;AACF,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,MACvB,QAAA,EAAU,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,MACxB,MAAA,EAAQ,EAAE,GAAA,EAAK,KAAA,EAAM;AAAA,MACrB,GAAA,EAAK,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,MACnB,MAAA,EAAQ,EAAE,IAAA,EAAM,KAAA;AAAM,KACxB;AAAA,EACF;AACA,EAAAC,4CAAA,CAA2B,EAAE,KAAA,EAAO,CAAA,CAAE,MAAM,KAAA,EAAO,UAAA,EAAY,GAAG,CAAA;AAClE,EAAA,IAAI,eAAe,CAAA,CAAE,YAAA;AACrB,EAAA,MAAM,MAAA,GAAS,MAAqB,YAAA,KAAiB,mBAAA,EAAoB;AAEzE,EAAA,MAAM,YAAA,GAAe,OAAO,OAAA,KAAoD;AAC9E,IAAA,IAAI,EAAE,YAAA,EAAc;AAClB,MAAA,MAAM,IAAA,GAAO,MAAM,CAAA,CAAE,YAAA,CAAa,OAAO,CAAA;AACzC,MAAA,IAAI,CAAC,IAAA,EAAM,MAAM,IAAIC,+BAAA,CAAc,sBAAsB,wCAAwC,CAAA;AACjG,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,IAAA,GAAO,MAAMC,6BAAA,CAAY,OAAA,EAAS,EAAE,OAAO,CAAA,CAAE,KAAA,IAASC,mCAAA,EAAkB,EAAG,CAAA;AACjF,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,OAAO,IAAA,CAAK,QAAA;AAC1B,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,OAAA,EAAS;AACtB,MAAA,MAAM,IAAIF,+BAAA,CAAc,wBAAA,EAA0B,gEAAA,EAAkE;AAAA,QAClH,MAAA,EAAQ;AAAA,OACT,CAAA;AAAA,IACH;AACA,IAAA,OAAO,EAAE,QAAQ,IAAA,CAAK,IAAA,CAAK,QAAQ,YAAA,EAAc,IAAA,CAAK,KAAK,OAAA,EAAQ;AAAA,EACrE,CAAA;AAEA,EAAA,MAAM,UAAU,MAAc,CAAA,CAAE,WAAWG,uCAAA,CAAsB,OAAA,CAAQ,IAAI,wBAAwB,CAAA;AACrG,EAAA,MAAM,WAAA,GAAc,CAAC,UAAA,KAAuBJ,4CAAA,CAA2B,EAAE,OAAO,CAAA,CAAE,KAAA,CAAM,KAAA,EAAO,UAAA,EAAY,CAAA;AAE3G,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,iBAAiB,YAAY;AACjC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,EAAE,MAAA,EAAQ,YAAA,EAAa,GAAI,IAAA;AACjC,QAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,QAAA,MAAM,UAAA,GAAaK,+BAAA,CAAc,UAAA,EAAW,EAAG,IAAI,CAAA;AACnD,QAAA,MAAM,MAAMC,oCAAA,EAAmB;AAC/B,QAAA,MAAM,QAAA,GAAW,YAAY,UAAU,CAAA;AACvC,QAAA,MAAM,CAAC,aAAA,EAAe,YAAY,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,UACtDC,kCAAA,CAAiB,MAAA,EAAO,EAAG,YAAY,CAAA;AAAA,UACvCC,sCAAA,CAAqB,EAAE,YAAA,EAAc,MAAA,IAAU,iBAAA,EAAmB,GAAA,CAAI,OAAA,EAAS,QAAA,EAAU;AAAA,SAC1F,CAAA;AACD,QAAA,MAAM,MAAA,GAAwB;AAAA,UAC5B,MAAA;AAAA,UACA,YAAA;AAAA,UACA,aAAA;AAAA,UACA,mBAAmB,GAAA,CAAI,UAAA;AAAA,UACvB,mBAAmB,GAAA,CAAI,OAAA;AAAA,UACvB,YAAA;AAAA,UACA,UAAA;AAAA,UACA,QAAA,EAAU,IAAA;AAAA,UACV,OAAA,EAAS;AAAA,SACX;AACA,QAAA,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA;AACxB,QAAA,OAAO,IAAA,CAAK;AAAA,UACV,YAAA;AAAA,UACA,aAAA;AAAA,UACA,mBAAmB,GAAA,CAAI,OAAA;AAAA,UACvB,UAAA;AAAA,UACA,OAAA,EAAS,IAAA;AAAA,UACT,KAAA,EAAOC,6CAA2B,EAAE,KAAA,EAAO,EAAE,KAAA,CAAM,KAAA,EAAO,YAAY;AAAA,SACvE,CAAA;AAAA,MACH,CAAC;AAAA,KACL;AAAA,IAEA,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,kBAAkB,YAAY;AAClC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,OAAQ,MAAM,OAAA,CAAQ,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACnD,QAAA,IAAI,OAAO,IAAA,EAAM,QAAA,KAAa,QAAA,EAAU;AACtC,UAAA,MAAM,IAAIC,kCAAgB,SAAA,EAAW,mBAAA,EAAqB,EAAE,MAAA,EAAQ,GAAA,EAAK,IAAA,EAAM,oBAAA,EAAsB,CAAA;AAAA,QACvG;AACA,QAAA,MAAM,SAAS,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AAC5C,QAAA,IAAI,CAAC,MAAA,IAAU,MAAA,CAAO,QAAA,KAAa,IAAA,EAAM;AACvC,UAAA,MAAM,IAAIC,kCAAA,CAAiB,cAAA,EAAgB,kCAAkC,CAAA;AAAA,QAC/E;AACA,QAAA,IAAI,UAAA,EAAW,IAAK,MAAA,CAAO,UAAA,EAAY;AACrC,UAAA,MAAM,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AAClC,UAAA,MAAM,IAAIA,kCAAA,CAAiB,iBAAA,EAAmB,yCAAyC,CAAA;AAAA,QACzF;AACA,QAAA,MAAM,KAAA,GAAQC,+BAAA,CAAc,IAAA,CAAK,QAAA,EAAU;AAAA,UACzC,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,cAAc,MAAA,CAAO;AAAA,SACtB,CAAA;AACD,QAAA,IAAI,CAAC,KAAA,CAAM,EAAA,EAAI,MAAM,IAAID,kCAAA,CAAiB,2BAAA,EAA6B,KAAA,CAAM,MAAA,EAAQ,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AACpG,QAAA,MAAM,CAAA,CAAE,MAAM,GAAA,CAAI,EAAE,GAAG,MAAA,EAAQ,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,CAAA;AACxD,QAAA,OAAO,KAAK,EAAE,MAAA,EAAQ,MAAM,UAAA,EAAY,MAAA,CAAO,YAAY,CAAA;AAAA,MAC7D,CAAC;AAAA,KACL;AAAA,IAEA,MAAA,EAAQ;AAAA,MACN,GAAA,EAAK,CAAC,OAAA,KACJ,KAAA,CAAM,gBAAgB,YAAY;AAChC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,SAAS,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AAC5C,QAAA,IAAI,CAAC,MAAA,IAAU,CAACE,wBAAA,CAAO,MAAA,EAAQ,UAAA,EAAY,CAAA,EAAG,OAAO,IAAA,CAAK,EAAE,MAAA,EAAQ,OAAO,CAAA;AAC3E,QAAA,OAAO,IAAA,CAAK;AAAA,UACV,MAAA,EAAQ,IAAA;AAAA,UACR,YAAY,MAAA,CAAO,UAAA;AAAA,UACnB,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,cAAc,MAAA,CAAO,YAAA;AAAA,UACrB,mBAAmB,MAAA,CAAO,iBAAA;AAAA,UAC1B,SAAS,MAAA,CAAO;AAAA,SACjB,CAAA;AAAA,MACH,CAAC;AAAA,KACL;AAAA,IAEA,GAAA,EAAK;AAAA,MACH,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,aAAa,YAAY;AAC7B,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,SAAS,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AAC5C,QAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,CAAO,QAAA,IAAY,CAACA,wBAAA,CAAO,MAAA,EAAQ,UAAA,EAAY,CAAA,EAAG;AAChE,UAAA,MAAM,IAAIF,kCAAA,CAAiB,cAAA,EAAgB,qCAAqC,CAAA;AAAA,QAClF;AAEA,QAAA,IAAI,KAAA;AACJ,QAAA,IAAI;AACF,UAAA,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,KAAA,CAAM,MAAM,OAAA,CAAQ,IAAA,EAAK,CAAE,KAAA,CAAM,OAAO,EAAC,CAAE,CAAC,CAAA;AAAA,QAC5D,SAAS,CAAA,EAAG;AACV,UAAA,MAAM,IAAID,iCAAA,CAAgB,SAAA,EAAW,aAAa,KAAA,GAAQ,CAAA,CAAE,UAAU,uBAAA,EAAyB;AAAA,YAC7F,MAAA,EAAQ,GAAA;AAAA,YACR,IAAA,EAAM,uBAAA;AAAA,YACN,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AACA,QAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,UAAA,CAAW,KAAA,EAAO;AAAA,UACpC,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,cAAc,MAAA,CAAO;AAAA,SACtB,CAAA;AAED,QAAA,kBAAA,CAAmBD,4CAAA,CAA2B,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,CAAM,KAAA,EAAO,UAAA,EAAY,MAAA,CAAO,UAAA,EAAY,CAAA,EAAG,KAAK,CAAA;AAE7G,QAAA,IAAI,CAAE,MAAM,CAAA,CAAE,MAAM,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA,EAAI;AACzC,UAAA,MAAM,IAAIhB,gCAAA,CAAe,SAAA,EAAW,iCAAA,EAAmC;AAAA,YACrE,MAAA,EAAQ,GAAA;AAAA,YACR,SAAA,EAAW,IAAA;AAAA,YACX,IAAA,EAAM;AAAA,WACP,CAAA;AAAA,QACH;AACA,QAAA,MAAM,aAAa,CAAA,CAAE,iBAAA,KAAsB,KAAA,GAAQ,EAAA,GAAK,YAAY,OAAO,CAAA;AAC3E,QAAA,IAAI;AACF,UAAA,MAAM,OAAA,GAAU,MAAMqB,0CAAA,CAAyB;AAAA,YAC7C,cAAc,MAAA,EAAO;AAAA,YACrB,UAAU,MAAA,CAAO,QAAA;AAAA,YACjB,mBAAmB,MAAA,CAAO;AAAA,WAC3B,CAAA;AACD,UAAA,MAAM,SAASC,2CAAA,CAA0B;AAAA,YACvC,OAAA;AAAA,YACA,cAAc,MAAA,EAAO;AAAA,YACrB,GAAI,CAAA,CAAE,SAAA,EAAW,UAAA,KAAe,KAAA,CAAA,GAAY,EAAE,UAAA,EAAY,CAAA,CAAE,SAAA,CAAU,UAAA,EAAW,GAAI,EAAC;AAAA,YACtF,GAAI,CAAA,CAAE,SAAA,EAAW,YAAA,KAAiB,KAAA,CAAA,GAAY,EAAE,YAAA,EAAc,CAAA,CAAE,SAAA,CAAU,YAAA,EAAa,GAAI,EAAC;AAAA,YAC5F,GAAI,CAAA,CAAE,SAAA,EAAW,cAAA,KAAmB,KAAA,CAAA,GAAY,EAAE,cAAA,EAAgB,CAAA,CAAE,SAAA,CAAU,cAAA,EAAe,GAAI,EAAC;AAAA,YAClG,GAAI,UAAA,GAAa,EAAE,gBAAA,EAAkBC,uCAAA,CAAsB,EAAE,gBAAA,EAAkB,UAAA,EAAY,CAAA,EAAE,GAAI;AAAC,WACnG,CAAA;AACD,UAAA,MAAM,SAAS,MAAMC,+BAAA,CAAc,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAO,CAAA;AAC5D,UAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,MAAA,CAAO,UAAU,CAAA,GAAI,CAAA,CAAA;AACvD,UAAA,IAAI,MAAA,CAAO,OAAA,EAAS,MAAM,CAAA,CAAE,KAAA,CAAM,IAAI,EAAE,GAAG,MAAA,EAAQ,OAAA,EAAS,CAAA;AAC5D,UAAA,MAAM,GAAA,GAA0B;AAAA,YAC9B,YAAY,MAAA,CAAO,UAAA;AAAA,YACnB,iBAAiB,MAAA,CAAO,eAAA;AAAA,YACxB,eAAe,MAAA,CAAO,aAAA;AAAA,YACtB,SAAS,MAAA,CAAO,OAAA;AAAA,YAChB,WAAW,MAAA,CAAO,SAAA;AAAA,YAClB,gBAAA,EAAkB,MAAA,CAAO,gBAAA,CAAiB,QAAA,EAAS;AAAA,YACnD,aAAa,MAAA,CAAO,WAAA;AAAA,YACpB;AAAA,WACF;AACA,UAAA,OAAO,KAAK,GAAG,CAAA;AAAA,QACjB,CAAA,SAAE;AACA,UAAA,MAAM,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,QAClC;AAAA,MACF,CAAC;AAAA,KACL;AAAA,IAEA,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,gBAAgB,YAAY;AAChC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAChC,QAAA,OAAO,IAAA,CAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,CAAA;AAAA,MAC/B,CAAC;AAAA;AACL,GACF;AACF;AAUO,SAAS,kBAAA,CAAmB,OAA0C,KAAA,EAA8B;AACzG,EAAA,KAAA,MAAW,CAAA,IAAKC,gCAAA,CAAe,KAAK,CAAA,EAAG;AACrC,IAAA,IAAI,CAACC,+BAAA,CAAc,KAAA,EAAO,CAAC,CAAA,EAAG;AAC5B,MAAA,MAAM,IAAIT,iCAAA,CAAgB,iBAAA,EAAmB,sCAAA,EAAwC;AAAA,QACnF,MAAA,EAAQ,GAAA;AAAA,QACR,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH;AAAA,EACF;AACF","file":"combo.cjs","sourcesContent":["import type { PrivyClient } from \"@privy-io/node\";\nimport { createPublicClient, http } from \"viem\";\nimport type { Address, PublicClient } from \"viem\";\nimport type { SponsoredActResult } from \"./types.js\";\nimport { createPepuSponsoredClient, sendSponsored } from \"../aa/kernel.js\";\nimport { normalizeCalls } from \"../aa/calls.js\";\nimport type { Call } from \"../aa/types.js\";\nimport { pepuMainnet } from \"../chains.js\";\nimport { resolvePepuEndpoints } from \"../endpoints.js\";\nimport { buildPaymasterContext } from \"../erc7677.js\";\nimport {\n  PepuAuthError,\n  PepuChainError,\n  PepuConfigError,\n  PepuError,\n  PepuPolicyError,\n  PepuSessionError,\n  toErrorResponse,\n  toPepuError,\n} from \"../errors.js\";\nimport { assertServerOnly } from \"../internal/assert-server.js\";\nimport { createPrivyServer, requireUser } from \"../privy/server.js\";\nimport { resolveSessionMinutes, sessionExpiry } from \"../session/policy.js\";\nimport {\n  buildKernelSessionPolicies,\n  checkApproval,\n  describeKernelSessionScope,\n  expectedPermissionId,\n  generateSessionKey,\n  getKernelAddress,\n  isCallInScope,\n  loadKernelSessionAccount,\n} from \"../session/kernel.js\";\nimport type { KernelSessionCall, KernelSessionScope } from \"../session/kernel.js\";\nimport { isLive } from \"../session/store.js\";\nimport type { SessionRecord, SessionStore } from \"../session/store.js\";\n\nassertServerOnly(\"@pepu-chain/sdk/combo\");\n\n/**\n * `@pepu-chain/sdk/combo` (server): the combined flow. Google sign-in (Privy),\n * a ONE-TIME on-chain session, and sponsored gas. Route factories for the\n * Kernel session lifecycle: prepare, activate, status, act, revoke.\n *\n * Extracted from templates/sponsored-session-app/app/api/session/* and\n * lib/{kernel,session-auth}.ts.\n *\n * Trust model: the chain, not these routes, enforces scope. The owner's single\n * EIP-712 signature enables a permission whose call policy (targets,\n * selectors, zero value) and timestamp policy the Kernel account verifies on\n * every UserOperation. The checks here only fail fast.\n *\n * Optional peers: `@privy-io/node`, `@zerodev/*`.\n */\n\nexport { createMemoryStore, isLive } from \"../session/store.js\";\nexport type { SessionRecord, SessionStore } from \"../session/store.js\";\nexport type { KernelSessionCall, KernelSessionScope } from \"../session/kernel.js\";\nexport type { SponsoredActResult } from \"./types.js\";\n/** Session length from `SESSION_DURATION_MINUTES` (default 15, clamped to 1..1440), the same rule the routes use. */\nexport { resolveSessionMinutes } from \"../session/policy.js\";\n\n/** The authenticated caller of a combo route. */\nexport interface ComboUser {\n  userId: string;\n  /** The user's Privy embedded wallet: the owner of their Kernel account. From Privy, never the request. */\n  ownerAddress: Address;\n}\n\n/** Authenticate a request. Throw a `PepuError` (or return `null`) when it is not valid. */\nexport type ComboAuthenticate = (request: Request) => Promise<ComboUser | null>;\n\n/** Options for {@link createSponsoredSessionRoutes}. */\nexport interface SponsoredSessionRoutesOptions<I> {\n  /** What the session may call. Enforced on-chain by the call policy. */\n  scope: {\n    calls: readonly KernelSessionCall[];\n    /** Env variable named in the `CONFIG_MISSING_ENV` message when a call target is empty (unset). */\n    targetEnv?: string;\n  };\n  /**\n   * Where session records (including the session private key) live. Use\n   * `createMemoryStore()` for development only: production needs a persistent\n   * store with the key encrypted at rest.\n   */\n  store: SessionStore;\n  /**\n   * Bundler and paymaster. The bundler defaults to env `PEPU_BUNDLER_URL`, then the hosted bundler. The paymaster\n   * needs a complete ERC-7677 URL (env `PEPU_PAYMASTER_URL`, or `paymasterUrl`) or a project `paymasterToken`\n   * (built against the hosted paymaster base).\n   */\n  endpoints?: { bundlerUrl?: string; paymasterUrl?: string; paymasterToken?: string };\n  /**\n   * Forward the caller's Privy access token (the request's `Authorization: Bearer`) to the paymaster as ERC-7677\n   * `context.privyAccessToken`. The v2 FREE TIER requires it; a project paying from its own deposit does not.\n   * Default `true`. Set `false` if your paymaster URL is not a PEPU policy service you trust with the token.\n   */\n  forwardPrivyToken?: boolean;\n  /** Session length. Default env `SESSION_DURATION_MINUTES`, then 15; clamped to 1..1440. */\n  minutes?: number;\n  /** The one action users take with their session. */\n  act: {\n    /** Validate the client body. Throw to reject with 400. */\n    parse(body: unknown): I;\n    /** The calls to send. Each is re-checked against `scope` before sponsoring. */\n    buildCalls(input: I, ctx: { kernelAddress: Address; ownerAddress: Address }): Call[];\n  };\n  /** Privy client for the default authentication. Default `createPrivyServer()`. */\n  privy?: PrivyClient;\n  /**\n   * Custom authentication. Default: B1's `requireUser` (verifies the Privy\n   * bearer token and reads the user's embedded wallet from Privy).\n   */\n  authenticate?: ComboAuthenticate;\n  /** Chain reads. Default: viem on the PEPU RPC (`PEPU_RPC_URL` aware). */\n  publicClient?: PublicClient;\n}\n\n/** The five route handlers returned by {@link createSponsoredSessionRoutes}. */\nexport interface SponsoredSessionRoutes {\n  prepare: { POST(request: Request): Promise<Response> };\n  activate: { POST(request: Request): Promise<Response> };\n  status: { GET(request: Request): Promise<Response> };\n  act: { POST(request: Request): Promise<Response> };\n  revoke: { POST(request: Request): Promise<Response> };\n}\n\nfunction json(body: unknown, status = 200): Response {\n  return new Response(JSON.stringify(body), { status, headers: { \"content-type\": \"application/json\" } });\n}\n\n/** Anything unclassified that reaches a route is an upstream failure, not our 500. */\nfunction upstream(e: unknown, op: string): PepuError {\n  const err = toPepuError(e, { op });\n  if (err.code === \"UNKNOWN\" && !(e instanceof PepuError)) {\n    return new PepuChainError(\"UNKNOWN\", err.message, { status: 502, cause: e });\n  }\n  return err;\n}\n\nasync function guard(op: string, fn: () => Promise<Response>): Promise<Response> {\n  try {\n    return await fn();\n  } catch (e) {\n    return toErrorResponse(upstream(e, op));\n  }\n}\n\n/** The bearer token on a request, or `\"\"`. */\nfunction bearerToken(request: Request): string {\n  return (request.headers.get(\"authorization\") ?? \"\").replace(/^Bearer\\s+/i, \"\").trim();\n}\n\nconst nowSeconds = (): number => Math.floor(Date.now() / 1000);\n\nfunction defaultPublicClient(): PublicClient {\n  return createPublicClient({ chain: pepuMainnet, transport: http(resolvePepuEndpoints().rpcUrl) }) as PublicClient;\n}\n\n/**\n * Route handlers for the Kernel session lifecycle.\n *\n * - `prepare.POST`: the server creates a fresh session key and decides the\n *   expiry. The private key stays on the server; the response carries only the\n *   key's address, the expiry and the scope, so the browser can ask the owner\n *   for the ONE signature that grants exactly that. Calling it again replaces\n *   any pending or active session (the old key is dropped).\n * - `activate.POST` `{ approval }`: checks the approval is for this user's\n *   smart account and for exactly the key, scope and expiry issued in\n *   `prepare`, then stores it. 409 `SESSION_NONE` when nothing is pending,\n *   410 `SESSION_EXPIRED` for an expired offer, 400 `SESSION_APPROVAL_MISMATCH`.\n * - `status.GET`: `{ active: false }` or `{ active: true, validUntil, ... }`.\n *   Never returns the session key or approval.\n * - `act.POST`: signs ONE sponsored UserOperation with the session key. 409\n *   `SESSION_NONE` without a live session, 429 while another action runs.\n * - `revoke.POST`: deletes the session key and approval from the server, so\n *   the app can no longer act, immediately. It does NOT uninstall the\n *   permission on-chain: that grant stays valid until its expiry, but only the\n *   deleted key can use it and only within the scope. An on-chain uninstall is\n *   an owner-signed call to the user's own account, which a paymaster\n *   destination allowlist rightly does not sponsor.\n *\n * Gas: the paymaster policy service reserves worst-case cost per operation:\n * about 20.5 PEPU for a session's first operation and about 6.9 PEPU for later\n * ones (`SESSION_GAS_RESERVATION_PEPU`). Size spend caps above that. Fees come\n * from the chain with 20% headroom.\n *\n * @example\n * // lib/session-routes.ts\n * export const routes = createSponsoredSessionRoutes({\n *   scope: { calls: [{ target: tapScore, abi: tapScoreAbi, functionName: \"tap\" }] },\n *   store: createMemoryStore(), // DEV ONLY\n *   act: {\n *     parse: () => ({}),\n *     buildCalls: () => [{ to: tapScore, abi: tapScoreAbi, functionName: \"tap\" }],\n *   },\n * });\n * // app/api/session/prepare/route.ts: export const { POST } = routes.prepare;\n */\nexport function createSponsoredSessionRoutes<I>(o: SponsoredSessionRoutesOptions<I>): SponsoredSessionRoutes {\n  // A call whose target is empty or undefined (an unset env variable) is \"not configured yet\":\n  // every route then answers CONFIG_MISSING_ENV at request time. A malformed non-empty scope\n  // still fails at startup, not on the first request.\n  const unconfigured = o.scope.calls.some((c) => !c.target || String(c.target).trim() === \"\");\n  if (unconfigured) {\n    const unset = async (): Promise<Response> =>\n      toErrorResponse(\n        new PepuConfigError(\n          \"CONFIG_MISSING_ENV\",\n          `${o.scope.targetEnv ?? \"A session target contract address\"} is not set to a valid address. See .env.example.`,\n          { hint: \"Set it and restart the server.\" },\n        ),\n      );\n    return {\n      prepare: { POST: unset },\n      activate: { POST: unset },\n      status: { GET: unset },\n      act: { POST: unset },\n      revoke: { POST: unset },\n    };\n  }\n  buildKernelSessionPolicies({ calls: o.scope.calls, validUntil: 1 });\n  let publicClient = o.publicClient;\n  const client = (): PublicClient => (publicClient ??= defaultPublicClient());\n\n  const authenticate = async (request: Request): Promise<ComboUser | Response> => {\n    if (o.authenticate) {\n      const user = await o.authenticate(request);\n      if (!user) throw new PepuAuthError(\"AUTH_INVALID_TOKEN\", \"Missing or invalid Privy access token.\");\n      return user;\n    }\n    const auth = await requireUser(request, { privy: o.privy ?? createPrivyServer() });\n    if (!auth.ok) return auth.response;\n    if (!auth.user.address) {\n      throw new PepuAuthError(\"WALLET_NOT_PROVISIONED\", \"No embedded wallet yet. Create it first (ensure-wallet route).\", {\n        status: 409,\n      });\n    }\n    return { userId: auth.user.userId, ownerAddress: auth.user.address };\n  };\n\n  const minutes = (): number => o.minutes ?? resolveSessionMinutes(process.env.SESSION_DURATION_MINUTES);\n  const policiesFor = (validUntil: number) => buildKernelSessionPolicies({ calls: o.scope.calls, validUntil });\n\n  return {\n    prepare: {\n      POST: (request) =>\n        guard(\"combo prepare\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const { userId, ownerAddress } = user;\n          const mins = minutes();\n          const validUntil = sessionExpiry(nowSeconds(), mins);\n          const key = generateSessionKey();\n          const policies = policiesFor(validUntil);\n          const [kernelAddress, permissionId] = await Promise.all([\n            getKernelAddress(client(), ownerAddress),\n            expectedPermissionId({ publicClient: client(), sessionKeyAddress: key.address, policies }),\n          ]);\n          const record: SessionRecord = {\n            userId,\n            ownerAddress,\n            kernelAddress,\n            sessionPrivateKey: key.privateKey,\n            sessionKeyAddress: key.address,\n            permissionId,\n            validUntil,\n            approval: null,\n            actions: 0,\n          };\n          await o.store.set(record);\n          return json({\n            ownerAddress,\n            kernelAddress,\n            sessionKeyAddress: key.address,\n            validUntil,\n            minutes: mins,\n            scope: describeKernelSessionScope({ calls: o.scope.calls, validUntil }),\n          });\n        }),\n    },\n\n    activate: {\n      POST: (request) =>\n        guard(\"combo activate\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const body = (await request.json().catch(() => null)) as { approval?: unknown } | null;\n          if (typeof body?.approval !== \"string\") {\n            throw new PepuPolicyError(\"UNKNOWN\", \"Missing approval.\", { status: 400, hint: \"Send { approval }.\" });\n          }\n          const record = await o.store.get(user.userId);\n          if (!record || record.approval !== null) {\n            throw new PepuSessionError(\"SESSION_NONE\", \"No pending session. Start again.\");\n          }\n          if (nowSeconds() >= record.validUntil) {\n            await o.store.delete(record.userId);\n            throw new PepuSessionError(\"SESSION_EXPIRED\", \"The session offer expired. Start again.\");\n          }\n          const check = checkApproval(body.approval, {\n            kernelAddress: record.kernelAddress,\n            permissionId: record.permissionId,\n          });\n          if (!check.ok) throw new PepuSessionError(\"SESSION_APPROVAL_MISMATCH\", check.reason, { status: 400 });\n          await o.store.set({ ...record, approval: body.approval });\n          return json({ active: true, validUntil: record.validUntil });\n        }),\n    },\n\n    status: {\n      GET: (request) =>\n        guard(\"combo status\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const record = await o.store.get(user.userId);\n          if (!record || !isLive(record, nowSeconds())) return json({ active: false });\n          return json({\n            active: true,\n            validUntil: record.validUntil,\n            kernelAddress: record.kernelAddress,\n            ownerAddress: record.ownerAddress,\n            sessionKeyAddress: record.sessionKeyAddress,\n            actions: record.actions,\n          });\n        }),\n    },\n\n    act: {\n      POST: (request) =>\n        guard(\"combo act\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const record = await o.store.get(user.userId);\n          if (!record || !record.approval || !isLive(record, nowSeconds())) {\n            throw new PepuSessionError(\"SESSION_NONE\", \"No active session. Start one first.\");\n          }\n\n          let input: I;\n          try {\n            input = o.act.parse(await request.json().catch(() => ({})));\n          } catch (e) {\n            throw new PepuPolicyError(\"UNKNOWN\", e instanceof Error ? e.message : \"Invalid request body.\", {\n              status: 400,\n              hint: \"Fix the request body.\",\n              cause: e,\n            });\n          }\n          const calls = o.act.buildCalls(input, {\n            kernelAddress: record.kernelAddress,\n            ownerAddress: record.ownerAddress,\n          });\n          // Fail fast; the chain is the real enforcement (see the file comment).\n          assertCallsInScope(describeKernelSessionScope({ calls: o.scope.calls, validUntil: record.validUntil }), calls);\n\n          if (!(await o.store.tryLock(user.userId))) {\n            throw new PepuChainError(\"UNKNOWN\", \"An action is already in flight.\", {\n              status: 429,\n              retryable: true,\n              hint: \"Wait for the current action to finish.\",\n            });\n          }\n          const privyToken = o.forwardPrivyToken === false ? \"\" : bearerToken(request);\n          try {\n            const account = await loadKernelSessionAccount({\n              publicClient: client(),\n              approval: record.approval,\n              sessionPrivateKey: record.sessionPrivateKey,\n            });\n            const kernel = createPepuSponsoredClient({\n              account,\n              publicClient: client(),\n              ...(o.endpoints?.bundlerUrl !== undefined ? { bundlerUrl: o.endpoints.bundlerUrl } : {}),\n              ...(o.endpoints?.paymasterUrl !== undefined ? { paymasterUrl: o.endpoints.paymasterUrl } : {}),\n              ...(o.endpoints?.paymasterToken !== undefined ? { paymasterToken: o.endpoints.paymasterToken } : {}),\n              ...(privyToken ? { paymasterContext: buildPaymasterContext({ privyAccessToken: privyToken }) } : {}),\n            });\n            const result = await sendSponsored({ client: kernel, calls });\n            const actions = record.actions + (result.success ? 1 : 0);\n            if (result.success) await o.store.set({ ...record, actions });\n            const out: SponsoredActResult = {\n              userOpHash: result.userOpHash,\n              transactionHash: result.transactionHash,\n              kernelAddress: record.kernelAddress,\n              success: result.success,\n              paymaster: result.paymaster,\n              actualGasCostWei: result.actualGasCostWei.toString(),\n              explorerUrl: result.explorerUrl,\n              actions,\n            };\n            return json(out);\n          } finally {\n            await o.store.unlock(user.userId);\n          }\n        }),\n    },\n\n    revoke: {\n      POST: (request) =>\n        guard(\"combo revoke\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          await o.store.delete(user.userId);\n          return json({ active: false });\n        }),\n    },\n  };\n}\n\n/**\n * Throws `POLICY_UNSCOPED` (403) unless every call targets an allowed contract\n * and function selector with a value within the limit. Pure; used by the act\n * route and exported for custom routes.\n *\n * @example\n * assertCallsInScope(describeKernelSessionScope({ calls, validUntil }), [{ to, abi, functionName: \"tap\" }]);\n */\nexport function assertCallsInScope(scope: Pick<KernelSessionScope, \"calls\">, calls: readonly Call[]): void {\n  for (const c of normalizeCalls(calls)) {\n    if (!isCallInScope(scope, c)) {\n      throw new PepuPolicyError(\"POLICY_UNSCOPED\", \"A call is outside the session scope.\", {\n        status: 403,\n        hint: \"Only the contracts and functions the user approved can be called.\",\n      });\n    }\n  }\n}\n"]}
+{"version":3,"sources":["../src/combo/server.ts"],"names":["assertServerOnly","toPepuError","PepuError","PepuChainError","toErrorResponse","createPublicClient","pepuMainnet","http","resolvePepuEndpoints","PepuConfigError","buildKernelSessionPolicies","PepuAuthError","createPrivyServer","requireUser","resolveSessionMinutes","sessionExpiry","generateSessionKey","getKernelAddress","expectedPermissionId","describeKernelSessionScope","PepuPolicyError","PepuSessionError","checkApproval","isLive","loadKernelSessionAccount","createPepuSponsoredClient","buildPaymasterContext","sendSponsored","normalizeCalls","isCallInScope"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAqCAA,kCAAA,CAAiB,uBAAuB,CAAA;AAkGxC,SAAS,IAAA,CAAK,IAAA,EAAe,MAAA,GAAS,GAAA,EAAe;AACnD,EAAA,OAAO,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG,EAAE,MAAA,EAAQ,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,IAAsB,CAAA;AACvG;AAGA,SAAS,QAAA,CAAS,GAAY,EAAA,EAAuB;AACnD,EAAA,MAAM,GAAA,GAAMC,6BAAA,CAAY,CAAA,EAAG,EAAE,IAAI,CAAA;AACjC,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,SAAA,IAAa,EAAE,aAAaC,2BAAA,CAAA,EAAY;AACvD,IAAA,OAAO,IAAIC,gCAAA,CAAe,SAAA,EAAW,GAAA,CAAI,OAAA,EAAS,EAAE,MAAA,EAAQ,GAAA,EAAK,KAAA,EAAO,CAAA,EAAG,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,GAAA;AACT;AAEA,eAAe,KAAA,CAAM,IAAY,EAAA,EAAgD;AAC/E,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,EAAA,EAAG;AAAA,EAClB,SAAS,CAAA,EAAG;AACV,IAAA,OAAOC,iCAAA,CAAgB,QAAA,CAAS,CAAA,EAAG,EAAE,CAAC,CAAA;AAAA,EACxC;AACF;AAGA,SAAS,YAAY,OAAA,EAA0B;AAC7C,EAAA,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA,IAAK,IAAI,OAAA,CAAQ,aAAA,EAAe,EAAE,CAAA,CAAE,IAAA,EAAK;AACtF;AAGA,IAAM,YAAA,0BAAsB,qBAAqB,CAAA;AAEjD,IAAM,aAAa,MAAc,IAAA,CAAK,MAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAE7D,SAAS,mBAAA,GAAoC;AAC3C,EAAA,OAAOC,uBAAA,CAAmB,EAAE,KAAA,EAAOC,6BAAA,EAAa,SAAA,EAAWC,UAAKC,sCAAA,EAAqB,CAAE,MAAM,CAAA,EAAG,CAAA;AAClG;AA0CO,SAAS,6BAAgC,CAAA,EAA6D;AAI3G,EAAA,MAAM,eAAe,CAAA,CAAE,KAAA,CAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,MAAA,IAAU,OAAO,CAAA,CAAE,MAAM,CAAA,CAAE,IAAA,OAAW,EAAE,CAAA;AAC1F,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,MAAM,QAAQ,YACZJ,iCAAA;AAAA,MACE,IAAIK,iCAAA;AAAA,QACF,oBAAA;AAAA,QACA,CAAA,EAAG,CAAA,CAAE,KAAA,CAAM,SAAA,IAAa,mCAAmC,CAAA,iDAAA,CAAA;AAAA,QAC3D,EAAE,MAAM,gCAAA;AAAiC;AAC3C,KACF;AACF,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,MACvB,QAAA,EAAU,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,MACxB,MAAA,EAAQ,EAAE,GAAA,EAAK,KAAA,EAAM;AAAA,MACrB,GAAA,EAAK,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,MACnB,MAAA,EAAQ,EAAE,IAAA,EAAM,KAAA;AAAM,KACxB;AAAA,EACF;AACA,EAAAC,4CAAA,CAA2B,EAAE,KAAA,EAAO,CAAA,CAAE,MAAM,KAAA,EAAO,UAAA,EAAY,GAAG,CAAA;AAClE,EAAA,IAAI,eAAe,CAAA,CAAE,YAAA;AACrB,EAAA,MAAM,MAAA,GAAS,MAAqB,YAAA,KAAiB,mBAAA,EAAoB;AAEzE,EAAA,MAAM,IAAA,GAAO,EAAE,QAAA,EAAU,CAAA,CAAE,gBAAA,EAAkB,QAAA,IAAY,CAAA,EAAG,OAAA,EAAS,CAAA,CAAE,gBAAA,EAAkB,OAAA,IAAW,GAAA,EAAI;AAMxG,EAAA,MAAM,0BAAA,GAA6B,OAAO,OAAA,KAA0E;AAClH,IAAA,IAAI,EAAE,YAAA,EAAc;AAClB,MAAA,MAAM,IAAA,GAAO,MAAM,CAAA,CAAE,YAAA,CAAa,OAAO,CAAA;AACzC,MAAA,IAAI,CAAC,IAAA,EAAM,MAAM,IAAIC,+BAAA,CAAc,sBAAsB,wCAAwC,CAAA;AACjG,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,KAAA,IAASC,mCAAA,EAAkB;AAC3C,IAAA,KAAA,IAAS,OAAA,GAAU,KAAK,OAAA,EAAA,EAAW;AACjC,MAAA,MAAM,OAAO,MAAMC,6BAAA,CAAY,OAAA,EAAS,EAAE,OAAO,CAAA;AACjD,MAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,OAAO,IAAA,CAAK,QAAA;AAC1B,MAAA,IAAI,IAAA,CAAK,IAAA,CAAK,OAAA,EAAS,OAAO,EAAE,MAAA,EAAQ,IAAA,CAAK,IAAA,CAAK,MAAA,EAAQ,YAAA,EAAc,IAAA,CAAK,IAAA,CAAK,OAAA,EAAQ;AAC1F,MAAA,IAAI,OAAA,IAAW,IAAA,CAAK,QAAA,EAAU,OAAO,YAAA;AACrC,MAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,UAAA,CAAW,SAAS,IAAA,CAAK,OAAA,IAAW,OAAA,GAAU,CAAA,CAAE,CAAC,CAAA;AAAA,IAClF;AAAA,EACF,CAAA;AAEA,EAAA,MAAM,YAAA,GAAe,OAAO,OAAA,KAAoD;AAC9E,IAAA,MAAM,IAAA,GAAO,MAAM,0BAAA,CAA2B,OAAO,CAAA;AACrD,IAAA,IAAI,SAAS,YAAA,EAAc;AACzB,MAAA,MAAM,IAAIF,+BAAA;AAAA,QACR,wBAAA;AAAA,QACA,gFAAA;AAAA,QACA,EAAE,MAAA,EAAQ,GAAA,EAAK,SAAA,EAAW,IAAA;AAAK,OACjC;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,UAAU,MAAc,CAAA,CAAE,WAAWG,uCAAA,CAAsB,OAAA,CAAQ,IAAI,wBAAwB,CAAA;AACrG,EAAA,MAAM,WAAA,GAAc,CAAC,UAAA,KAAuBJ,4CAAA,CAA2B,EAAE,OAAO,CAAA,CAAE,KAAA,CAAM,KAAA,EAAO,UAAA,EAAY,CAAA;AAE3G,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,iBAAiB,YAAY;AACjC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,EAAE,MAAA,EAAQ,YAAA,EAAa,GAAI,IAAA;AACjC,QAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,QAAA,MAAM,UAAA,GAAaK,+BAAA,CAAc,UAAA,EAAW,EAAG,IAAI,CAAA;AACnD,QAAA,MAAM,MAAMC,oCAAA,EAAmB;AAC/B,QAAA,MAAM,QAAA,GAAW,YAAY,UAAU,CAAA;AACvC,QAAA,MAAM,CAAC,aAAA,EAAe,YAAY,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,UACtDC,kCAAA,CAAiB,MAAA,EAAO,EAAG,YAAY,CAAA;AAAA,UACvCC,sCAAA,CAAqB,EAAE,YAAA,EAAc,MAAA,IAAU,iBAAA,EAAmB,GAAA,CAAI,OAAA,EAAS,QAAA,EAAU;AAAA,SAC1F,CAAA;AACD,QAAA,MAAM,MAAA,GAAwB;AAAA,UAC5B,MAAA;AAAA,UACA,YAAA;AAAA,UACA,aAAA;AAAA,UACA,mBAAmB,GAAA,CAAI,UAAA;AAAA,UACvB,mBAAmB,GAAA,CAAI,OAAA;AAAA,UACvB,YAAA;AAAA,UACA,UAAA;AAAA,UACA,QAAA,EAAU,IAAA;AAAA,UACV,OAAA,EAAS;AAAA,SACX;AACA,QAAA,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA;AACxB,QAAA,OAAO,IAAA,CAAK;AAAA,UACV,YAAA;AAAA,UACA,aAAA;AAAA,UACA,mBAAmB,GAAA,CAAI,OAAA;AAAA,UACvB,UAAA;AAAA,UACA,OAAA,EAAS,IAAA;AAAA,UACT,KAAA,EAAOC,6CAA2B,EAAE,KAAA,EAAO,EAAE,KAAA,CAAM,KAAA,EAAO,YAAY;AAAA,SACvE,CAAA;AAAA,MACH,CAAC;AAAA,KACL;AAAA,IAEA,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,kBAAkB,YAAY;AAClC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,OAAQ,MAAM,OAAA,CAAQ,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACnD,QAAA,IAAI,OAAO,IAAA,EAAM,QAAA,KAAa,QAAA,EAAU;AACtC,UAAA,MAAM,IAAIC,kCAAgB,SAAA,EAAW,mBAAA,EAAqB,EAAE,MAAA,EAAQ,GAAA,EAAK,IAAA,EAAM,oBAAA,EAAsB,CAAA;AAAA,QACvG;AACA,QAAA,MAAM,SAAS,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AAC5C,QAAA,IAAI,CAAC,MAAA,IAAU,MAAA,CAAO,QAAA,KAAa,IAAA,EAAM;AACvC,UAAA,MAAM,IAAIC,kCAAA,CAAiB,cAAA,EAAgB,kCAAkC,CAAA;AAAA,QAC/E;AACA,QAAA,IAAI,UAAA,EAAW,IAAK,MAAA,CAAO,UAAA,EAAY;AACrC,UAAA,MAAM,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AAClC,UAAA,MAAM,IAAIA,kCAAA,CAAiB,iBAAA,EAAmB,yCAAyC,CAAA;AAAA,QACzF;AACA,QAAA,MAAM,KAAA,GAAQC,+BAAA,CAAc,IAAA,CAAK,QAAA,EAAU;AAAA,UACzC,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,cAAc,MAAA,CAAO;AAAA,SACtB,CAAA;AACD,QAAA,IAAI,CAAC,KAAA,CAAM,EAAA,EAAI,MAAM,IAAID,kCAAA,CAAiB,2BAAA,EAA6B,KAAA,CAAM,MAAA,EAAQ,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AACpG,QAAA,MAAM,CAAA,CAAE,MAAM,GAAA,CAAI,EAAE,GAAG,MAAA,EAAQ,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,CAAA;AACxD,QAAA,OAAO,KAAK,EAAE,MAAA,EAAQ,MAAM,UAAA,EAAY,MAAA,CAAO,YAAY,CAAA;AAAA,MAC7D,CAAC;AAAA,KACL;AAAA,IAEA,MAAA,EAAQ;AAAA,MACN,GAAA,EAAK,CAAC,OAAA,KACJ,KAAA,CAAM,gBAAgB,YAAY;AAChC,QAAA,MAAM,IAAA,GAAO,MAAM,0BAAA,CAA2B,OAAO,CAAA;AACrD,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,IAAI,IAAA,KAAS,cAAc,OAAO,IAAA,CAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,YAAA,EAAc,IAAA,EAAM,CAAA;AAC5E,QAAA,MAAM,SAAS,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AAC5C,QAAA,IAAI,CAAC,MAAA,IAAU,CAACE,wBAAA,CAAO,MAAA,EAAQ,UAAA,EAAY,CAAA,EAAG,OAAO,IAAA,CAAK,EAAE,MAAA,EAAQ,OAAO,CAAA;AAC3E,QAAA,OAAO,IAAA,CAAK;AAAA,UACV,MAAA,EAAQ,IAAA;AAAA,UACR,YAAY,MAAA,CAAO,UAAA;AAAA,UACnB,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,cAAc,MAAA,CAAO,YAAA;AAAA,UACrB,mBAAmB,MAAA,CAAO,iBAAA;AAAA,UAC1B,SAAS,MAAA,CAAO;AAAA,SACjB,CAAA;AAAA,MACH,CAAC;AAAA,KACL;AAAA,IAEA,GAAA,EAAK;AAAA,MACH,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,aAAa,YAAY;AAC7B,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,SAAS,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AAC5C,QAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,CAAO,QAAA,IAAY,CAACA,wBAAA,CAAO,MAAA,EAAQ,UAAA,EAAY,CAAA,EAAG;AAChE,UAAA,MAAM,IAAIF,kCAAA,CAAiB,cAAA,EAAgB,qCAAqC,CAAA;AAAA,QAClF;AAEA,QAAA,IAAI,KAAA;AACJ,QAAA,IAAI;AACF,UAAA,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,KAAA,CAAM,MAAM,OAAA,CAAQ,IAAA,EAAK,CAAE,KAAA,CAAM,OAAO,EAAC,CAAE,CAAC,CAAA;AAAA,QAC5D,SAAS,CAAA,EAAG;AACV,UAAA,MAAM,IAAID,iCAAA,CAAgB,SAAA,EAAW,aAAa,KAAA,GAAQ,CAAA,CAAE,UAAU,uBAAA,EAAyB;AAAA,YAC7F,MAAA,EAAQ,GAAA;AAAA,YACR,IAAA,EAAM,uBAAA;AAAA,YACN,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AACA,QAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,UAAA,CAAW,KAAA,EAAO;AAAA,UACpC,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,cAAc,MAAA,CAAO;AAAA,SACtB,CAAA;AAED,QAAA,kBAAA,CAAmBD,4CAAA,CAA2B,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,CAAM,KAAA,EAAO,UAAA,EAAY,MAAA,CAAO,UAAA,EAAY,CAAA,EAAG,KAAK,CAAA;AAE7G,QAAA,IAAI,CAAE,MAAM,CAAA,CAAE,MAAM,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA,EAAI;AACzC,UAAA,MAAM,IAAIhB,gCAAA,CAAe,SAAA,EAAW,iCAAA,EAAmC;AAAA,YACrE,MAAA,EAAQ,GAAA;AAAA,YACR,SAAA,EAAW,IAAA;AAAA,YACX,IAAA,EAAM;AAAA,WACP,CAAA;AAAA,QACH;AACA,QAAA,MAAM,aAAa,CAAA,CAAE,iBAAA,KAAsB,KAAA,GAAQ,EAAA,GAAK,YAAY,OAAO,CAAA;AAC3E,QAAA,IAAI;AACF,UAAA,MAAM,OAAA,GAAU,MAAMqB,0CAAA,CAAyB;AAAA,YAC7C,cAAc,MAAA,EAAO;AAAA,YACrB,UAAU,MAAA,CAAO,QAAA;AAAA,YACjB,mBAAmB,MAAA,CAAO;AAAA,WAC3B,CAAA;AACD,UAAA,MAAM,SAASC,2CAAA,CAA0B;AAAA,YACvC,OAAA;AAAA,YACA,cAAc,MAAA,EAAO;AAAA,YACrB,GAAI,CAAA,CAAE,SAAA,EAAW,UAAA,KAAe,KAAA,CAAA,GAAY,EAAE,UAAA,EAAY,CAAA,CAAE,SAAA,CAAU,UAAA,EAAW,GAAI,EAAC;AAAA,YACtF,GAAI,CAAA,CAAE,SAAA,EAAW,YAAA,KAAiB,KAAA,CAAA,GAAY,EAAE,YAAA,EAAc,CAAA,CAAE,SAAA,CAAU,YAAA,EAAa,GAAI,EAAC;AAAA,YAC5F,GAAI,CAAA,CAAE,SAAA,EAAW,cAAA,KAAmB,KAAA,CAAA,GAAY,EAAE,cAAA,EAAgB,CAAA,CAAE,SAAA,CAAU,cAAA,EAAe,GAAI,EAAC;AAAA,YAClG,GAAI,UAAA,GAAa,EAAE,gBAAA,EAAkBC,uCAAA,CAAsB,EAAE,gBAAA,EAAkB,UAAA,EAAY,CAAA,EAAE,GAAI;AAAC,WACnG,CAAA;AACD,UAAA,MAAM,SAAS,MAAMC,+BAAA,CAAc,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAO,CAAA;AAC5D,UAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,MAAA,CAAO,UAAU,CAAA,GAAI,CAAA,CAAA;AACvD,UAAA,IAAI,MAAA,CAAO,OAAA,EAAS,MAAM,CAAA,CAAE,KAAA,CAAM,IAAI,EAAE,GAAG,MAAA,EAAQ,OAAA,EAAS,CAAA;AAC5D,UAAA,MAAM,GAAA,GAA0B;AAAA,YAC9B,YAAY,MAAA,CAAO,UAAA;AAAA,YACnB,iBAAiB,MAAA,CAAO,eAAA;AAAA,YACxB,eAAe,MAAA,CAAO,aAAA;AAAA,YACtB,SAAS,MAAA,CAAO,OAAA;AAAA,YAChB,WAAW,MAAA,CAAO,SAAA;AAAA,YAClB,gBAAA,EAAkB,MAAA,CAAO,gBAAA,CAAiB,QAAA,EAAS;AAAA,YACnD,aAAa,MAAA,CAAO,WAAA;AAAA,YACpB;AAAA,WACF;AACA,UAAA,OAAO,KAAK,GAAG,CAAA;AAAA,QACjB,CAAA,SAAE;AACA,UAAA,MAAM,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,QAClC;AAAA,MACF,CAAC;AAAA,KACL;AAAA,IAEA,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,gBAAgB,YAAY;AAChC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAChC,QAAA,OAAO,IAAA,CAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,CAAA;AAAA,MAC/B,CAAC;AAAA;AACL,GACF;AACF;AAUO,SAAS,kBAAA,CAAmB,OAA0C,KAAA,EAA8B;AACzG,EAAA,KAAA,MAAW,CAAA,IAAKC,gCAAA,CAAe,KAAK,CAAA,EAAG;AACrC,IAAA,IAAI,CAACC,+BAAA,CAAc,KAAA,EAAO,CAAC,CAAA,EAAG;AAC5B,MAAA,MAAM,IAAIT,iCAAA,CAAgB,iBAAA,EAAmB,sCAAA,EAAwC;AAAA,QACnF,MAAA,EAAQ,GAAA;AAAA,QACR,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH;AAAA,EACF;AACF","file":"combo.cjs","sourcesContent":["import type { PrivyClient } from \"@privy-io/node\";\nimport { createPublicClient, http } from \"viem\";\nimport type { Address, PublicClient } from \"viem\";\nimport type { SponsoredActResult } from \"./types.js\";\nimport { createPepuSponsoredClient, sendSponsored } from \"../aa/kernel.js\";\nimport { normalizeCalls } from \"../aa/calls.js\";\nimport type { Call } from \"../aa/types.js\";\nimport { pepuMainnet } from \"../chains.js\";\nimport { resolvePepuEndpoints } from \"../endpoints.js\";\nimport { buildPaymasterContext } from \"../erc7677.js\";\nimport {\n  PepuAuthError,\n  PepuChainError,\n  PepuConfigError,\n  PepuError,\n  PepuPolicyError,\n  PepuSessionError,\n  toErrorResponse,\n  toPepuError,\n} from \"../errors.js\";\nimport { assertServerOnly } from \"../internal/assert-server.js\";\nimport { createPrivyServer, requireUser } from \"../privy/server.js\";\nimport { resolveSessionMinutes, sessionExpiry } from \"../session/policy.js\";\nimport {\n  buildKernelSessionPolicies,\n  checkApproval,\n  describeKernelSessionScope,\n  expectedPermissionId,\n  generateSessionKey,\n  getKernelAddress,\n  isCallInScope,\n  loadKernelSessionAccount,\n} from \"../session/kernel.js\";\nimport type { KernelSessionCall, KernelSessionScope } from \"../session/kernel.js\";\nimport { isLive } from \"../session/store.js\";\nimport type { SessionRecord, SessionStore } from \"../session/store.js\";\n\nassertServerOnly(\"@pepu-chain/sdk/combo\");\n\n/**\n * `@pepu-chain/sdk/combo` (server): the combined flow. Google sign-in (Privy),\n * a ONE-TIME on-chain session, and sponsored gas. Route factories for the\n * Kernel session lifecycle: prepare, activate, status, act, revoke.\n *\n * Extracted from templates/sponsored-session-app/app/api/session/* and\n * lib/{kernel,session-auth}.ts.\n *\n * Trust model: the chain, not these routes, enforces scope. The owner's single\n * EIP-712 signature enables a permission whose call policy (targets,\n * selectors, zero value) and timestamp policy the Kernel account verifies on\n * every UserOperation. The checks here only fail fast.\n *\n * Optional peers: `@privy-io/node`, `@zerodev/*`.\n */\n\nexport { createMemoryStore, isLive } from \"../session/store.js\";\nexport type { SessionRecord, SessionStore } from \"../session/store.js\";\nexport type { KernelSessionCall, KernelSessionScope } from \"../session/kernel.js\";\nexport type { SponsoredActResult } from \"./types.js\";\n/** Session length from `SESSION_DURATION_MINUTES` (default 15, clamped to 1..1440), the same rule the routes use. */\nexport { resolveSessionMinutes } from \"../session/policy.js\";\n\n/** The authenticated caller of a combo route. */\nexport interface ComboUser {\n  userId: string;\n  /** The user's Privy embedded wallet: the owner of their Kernel account. From Privy, never the request. */\n  ownerAddress: Address;\n}\n\n/** Authenticate a request. Throw a `PepuError` (or return `null`) when it is not valid. */\nexport type ComboAuthenticate = (request: Request) => Promise<ComboUser | null>;\n\n/** Options for {@link createSponsoredSessionRoutes}. */\nexport interface SponsoredSessionRoutesOptions<I> {\n  /** What the session may call. Enforced on-chain by the call policy. */\n  scope: {\n    calls: readonly KernelSessionCall[];\n    /** Env variable named in the `CONFIG_MISSING_ENV` message when a call target is empty (unset). */\n    targetEnv?: string;\n  };\n  /**\n   * Where session records (including the session private key) live. Use\n   * `createMemoryStore()` for development only: production needs a persistent\n   * store with the key encrypted at rest.\n   */\n  store: SessionStore;\n  /**\n   * Bundler and paymaster. The bundler defaults to env `PEPU_BUNDLER_URL`, then the hosted bundler. The paymaster\n   * needs a complete ERC-7677 URL (env `PEPU_PAYMASTER_URL`, or `paymasterUrl`) or a project `paymasterToken`\n   * (built against the hosted paymaster base).\n   */\n  endpoints?: { bundlerUrl?: string; paymasterUrl?: string; paymasterToken?: string };\n  /**\n   * Forward the caller's Privy access token (the request's `Authorization: Bearer`) to the paymaster as ERC-7677\n   * `context.privyAccessToken`. The v2 FREE TIER requires it; a project paying from its own deposit does not.\n   * Default `true`. Set `false` if your paymaster URL is not a PEPU policy service you trust with the token.\n   */\n  forwardPrivyToken?: boolean;\n  /** Session length. Default env `SESSION_DURATION_MINUTES`, then 15; clamped to 1..1440. */\n  minutes?: number;\n  /** The one action users take with their session. */\n  act: {\n    /** Validate the client body. Throw to reject with 400. */\n    parse(body: unknown): I;\n    /** The calls to send. Each is re-checked against `scope` before sponsoring. */\n    buildCalls(input: I, ctx: { kernelAddress: Address; ownerAddress: Address }): Call[];\n  };\n  /** Privy client for the default authentication. Default `createPrivyServer()`. */\n  privy?: PrivyClient;\n  /**\n   * Custom authentication. Default: B1's `requireUser` (verifies the Privy\n   * bearer token and reads the user's embedded wallet from Privy).\n   */\n  authenticate?: ComboAuthenticate;\n  /** Chain reads. Default: viem on the PEPU RPC (`PEPU_RPC_URL` aware). */\n  publicClient?: PublicClient;\n  /**\n   * A brand-new user's embedded wallet exists in the browser a moment before Privy's server reports it. With the\n   * default authentication, a signed-in user whose wallet is not visible yet is looked up again this many times\n   * (`attempts`, default 3), waiting `delayMs` * attempt number between lookups (default 400 ms). If it is still\n   * not visible, `status` answers `{ active: false, provisioning: true }` (a normal state, not an error) and the other\n   * routes answer a retryable 409 `WALLET_NOT_PROVISIONED`.\n   */\n  provisioningWait?: { attempts?: number; delayMs?: number };\n}\n\n/** The five route handlers returned by {@link createSponsoredSessionRoutes}. */\nexport interface SponsoredSessionRoutes {\n  prepare: { POST(request: Request): Promise<Response> };\n  activate: { POST(request: Request): Promise<Response> };\n  status: { GET(request: Request): Promise<Response> };\n  act: { POST(request: Request): Promise<Response> };\n  revoke: { POST(request: Request): Promise<Response> };\n}\n\nfunction json(body: unknown, status = 200): Response {\n  return new Response(JSON.stringify(body), { status, headers: { \"content-type\": \"application/json\" } });\n}\n\n/** Anything unclassified that reaches a route is an upstream failure, not our 500. */\nfunction upstream(e: unknown, op: string): PepuError {\n  const err = toPepuError(e, { op });\n  if (err.code === \"UNKNOWN\" && !(e instanceof PepuError)) {\n    return new PepuChainError(\"UNKNOWN\", err.message, { status: 502, cause: e });\n  }\n  return err;\n}\n\nasync function guard(op: string, fn: () => Promise<Response>): Promise<Response> {\n  try {\n    return await fn();\n  } catch (e) {\n    return toErrorResponse(upstream(e, op));\n  }\n}\n\n/** The bearer token on a request, or `\"\"`. */\nfunction bearerToken(request: Request): string {\n  return (request.headers.get(\"authorization\") ?? \"\").replace(/^Bearer\\s+/i, \"\").trim();\n}\n\n/** Marker: signed in, but Privy's server does not list an embedded wallet yet. */\nconst PROVISIONING = Symbol(\"wallet-provisioning\");\n\nconst nowSeconds = (): number => Math.floor(Date.now() / 1000);\n\nfunction defaultPublicClient(): PublicClient {\n  return createPublicClient({ chain: pepuMainnet, transport: http(resolvePepuEndpoints().rpcUrl) }) as PublicClient;\n}\n\n/**\n * Route handlers for the Kernel session lifecycle.\n *\n * - `prepare.POST`: the server creates a fresh session key and decides the\n *   expiry. The private key stays on the server; the response carries only the\n *   key's address, the expiry and the scope, so the browser can ask the owner\n *   for the ONE signature that grants exactly that. Calling it again replaces\n *   any pending or active session (the old key is dropped).\n * - `activate.POST` `{ approval }`: checks the approval is for this user's\n *   smart account and for exactly the key, scope and expiry issued in\n *   `prepare`, then stores it. 409 `SESSION_NONE` when nothing is pending,\n *   410 `SESSION_EXPIRED` for an expired offer, 400 `SESSION_APPROVAL_MISMATCH`.\n * - `status.GET`: `{ active: false }` or `{ active: true, validUntil, ... }`.\n *   Never returns the session key or approval.\n * - `act.POST`: signs ONE sponsored UserOperation with the session key. 409\n *   `SESSION_NONE` without a live session, 429 while another action runs.\n * - `revoke.POST`: deletes the session key and approval from the server, so\n *   the app can no longer act, immediately. It does NOT uninstall the\n *   permission on-chain: that grant stays valid until its expiry, but only the\n *   deleted key can use it and only within the scope. An on-chain uninstall is\n *   an owner-signed call to the user's own account, which a paymaster\n *   destination allowlist rightly does not sponsor.\n *\n * Gas: the paymaster policy service reserves worst-case cost per operation:\n * about 20.5 PEPU for a session's first operation and about 6.9 PEPU for later\n * ones (`SESSION_GAS_RESERVATION_PEPU`). Size spend caps above that. Fees come\n * from the chain with 20% headroom.\n *\n * @example\n * // lib/session-routes.ts\n * export const routes = createSponsoredSessionRoutes({\n *   scope: { calls: [{ target: tapScore, abi: tapScoreAbi, functionName: \"tap\" }] },\n *   store: createMemoryStore(), // DEV ONLY\n *   act: {\n *     parse: () => ({}),\n *     buildCalls: () => [{ to: tapScore, abi: tapScoreAbi, functionName: \"tap\" }],\n *   },\n * });\n * // app/api/session/prepare/route.ts: export const { POST } = routes.prepare;\n */\nexport function createSponsoredSessionRoutes<I>(o: SponsoredSessionRoutesOptions<I>): SponsoredSessionRoutes {\n  // A call whose target is empty or undefined (an unset env variable) is \"not configured yet\":\n  // every route then answers CONFIG_MISSING_ENV at request time. A malformed non-empty scope\n  // still fails at startup, not on the first request.\n  const unconfigured = o.scope.calls.some((c) => !c.target || String(c.target).trim() === \"\");\n  if (unconfigured) {\n    const unset = async (): Promise<Response> =>\n      toErrorResponse(\n        new PepuConfigError(\n          \"CONFIG_MISSING_ENV\",\n          `${o.scope.targetEnv ?? \"A session target contract address\"} is not set to a valid address. See .env.example.`,\n          { hint: \"Set it and restart the server.\" },\n        ),\n      );\n    return {\n      prepare: { POST: unset },\n      activate: { POST: unset },\n      status: { GET: unset },\n      act: { POST: unset },\n      revoke: { POST: unset },\n    };\n  }\n  buildKernelSessionPolicies({ calls: o.scope.calls, validUntil: 1 });\n  let publicClient = o.publicClient;\n  const client = (): PublicClient => (publicClient ??= defaultPublicClient());\n\n  const wait = { attempts: o.provisioningWait?.attempts ?? 3, delayMs: o.provisioningWait?.delayMs ?? 400 };\n\n  /**\n   * Authenticate. A signed-in user whose wallet Privy's server does not list yet is looked up again (bounded), then\n   * reported as `PROVISIONING` so the caller decides: `status` makes it a normal state, the rest throw a retryable 409.\n   */\n  const authenticateOrProvisioning = async (request: Request): Promise<ComboUser | Response | typeof PROVISIONING> => {\n    if (o.authenticate) {\n      const user = await o.authenticate(request);\n      if (!user) throw new PepuAuthError(\"AUTH_INVALID_TOKEN\", \"Missing or invalid Privy access token.\");\n      return user;\n    }\n    const privy = o.privy ?? createPrivyServer();\n    for (let attempt = 0; ; attempt++) {\n      const auth = await requireUser(request, { privy });\n      if (!auth.ok) return auth.response;\n      if (auth.user.address) return { userId: auth.user.userId, ownerAddress: auth.user.address };\n      if (attempt >= wait.attempts) return PROVISIONING;\n      await new Promise((resolve) => setTimeout(resolve, wait.delayMs * (attempt + 1)));\n    }\n  };\n\n  const authenticate = async (request: Request): Promise<ComboUser | Response> => {\n    const user = await authenticateOrProvisioning(request);\n    if (user === PROVISIONING) {\n      throw new PepuAuthError(\n        \"WALLET_NOT_PROVISIONED\",\n        \"Your wallet is still being set up. This usually takes a few seconds; retrying.\",\n        { status: 409, retryable: true },\n      );\n    }\n    return user;\n  };\n\n  const minutes = (): number => o.minutes ?? resolveSessionMinutes(process.env.SESSION_DURATION_MINUTES);\n  const policiesFor = (validUntil: number) => buildKernelSessionPolicies({ calls: o.scope.calls, validUntil });\n\n  return {\n    prepare: {\n      POST: (request) =>\n        guard(\"combo prepare\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const { userId, ownerAddress } = user;\n          const mins = minutes();\n          const validUntil = sessionExpiry(nowSeconds(), mins);\n          const key = generateSessionKey();\n          const policies = policiesFor(validUntil);\n          const [kernelAddress, permissionId] = await Promise.all([\n            getKernelAddress(client(), ownerAddress),\n            expectedPermissionId({ publicClient: client(), sessionKeyAddress: key.address, policies }),\n          ]);\n          const record: SessionRecord = {\n            userId,\n            ownerAddress,\n            kernelAddress,\n            sessionPrivateKey: key.privateKey,\n            sessionKeyAddress: key.address,\n            permissionId,\n            validUntil,\n            approval: null,\n            actions: 0,\n          };\n          await o.store.set(record);\n          return json({\n            ownerAddress,\n            kernelAddress,\n            sessionKeyAddress: key.address,\n            validUntil,\n            minutes: mins,\n            scope: describeKernelSessionScope({ calls: o.scope.calls, validUntil }),\n          });\n        }),\n    },\n\n    activate: {\n      POST: (request) =>\n        guard(\"combo activate\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const body = (await request.json().catch(() => null)) as { approval?: unknown } | null;\n          if (typeof body?.approval !== \"string\") {\n            throw new PepuPolicyError(\"UNKNOWN\", \"Missing approval.\", { status: 400, hint: \"Send { approval }.\" });\n          }\n          const record = await o.store.get(user.userId);\n          if (!record || record.approval !== null) {\n            throw new PepuSessionError(\"SESSION_NONE\", \"No pending session. Start again.\");\n          }\n          if (nowSeconds() >= record.validUntil) {\n            await o.store.delete(record.userId);\n            throw new PepuSessionError(\"SESSION_EXPIRED\", \"The session offer expired. Start again.\");\n          }\n          const check = checkApproval(body.approval, {\n            kernelAddress: record.kernelAddress,\n            permissionId: record.permissionId,\n          });\n          if (!check.ok) throw new PepuSessionError(\"SESSION_APPROVAL_MISMATCH\", check.reason, { status: 400 });\n          await o.store.set({ ...record, approval: body.approval });\n          return json({ active: true, validUntil: record.validUntil });\n        }),\n    },\n\n    status: {\n      GET: (request) =>\n        guard(\"combo status\", async () => {\n          const user = await authenticateOrProvisioning(request);\n          if (user instanceof Response) return user;\n          if (user === PROVISIONING) return json({ active: false, provisioning: true });\n          const record = await o.store.get(user.userId);\n          if (!record || !isLive(record, nowSeconds())) return json({ active: false });\n          return json({\n            active: true,\n            validUntil: record.validUntil,\n            kernelAddress: record.kernelAddress,\n            ownerAddress: record.ownerAddress,\n            sessionKeyAddress: record.sessionKeyAddress,\n            actions: record.actions,\n          });\n        }),\n    },\n\n    act: {\n      POST: (request) =>\n        guard(\"combo act\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const record = await o.store.get(user.userId);\n          if (!record || !record.approval || !isLive(record, nowSeconds())) {\n            throw new PepuSessionError(\"SESSION_NONE\", \"No active session. Start one first.\");\n          }\n\n          let input: I;\n          try {\n            input = o.act.parse(await request.json().catch(() => ({})));\n          } catch (e) {\n            throw new PepuPolicyError(\"UNKNOWN\", e instanceof Error ? e.message : \"Invalid request body.\", {\n              status: 400,\n              hint: \"Fix the request body.\",\n              cause: e,\n            });\n          }\n          const calls = o.act.buildCalls(input, {\n            kernelAddress: record.kernelAddress,\n            ownerAddress: record.ownerAddress,\n          });\n          // Fail fast; the chain is the real enforcement (see the file comment).\n          assertCallsInScope(describeKernelSessionScope({ calls: o.scope.calls, validUntil: record.validUntil }), calls);\n\n          if (!(await o.store.tryLock(user.userId))) {\n            throw new PepuChainError(\"UNKNOWN\", \"An action is already in flight.\", {\n              status: 429,\n              retryable: true,\n              hint: \"Wait for the current action to finish.\",\n            });\n          }\n          const privyToken = o.forwardPrivyToken === false ? \"\" : bearerToken(request);\n          try {\n            const account = await loadKernelSessionAccount({\n              publicClient: client(),\n              approval: record.approval,\n              sessionPrivateKey: record.sessionPrivateKey,\n            });\n            const kernel = createPepuSponsoredClient({\n              account,\n              publicClient: client(),\n              ...(o.endpoints?.bundlerUrl !== undefined ? { bundlerUrl: o.endpoints.bundlerUrl } : {}),\n              ...(o.endpoints?.paymasterUrl !== undefined ? { paymasterUrl: o.endpoints.paymasterUrl } : {}),\n              ...(o.endpoints?.paymasterToken !== undefined ? { paymasterToken: o.endpoints.paymasterToken } : {}),\n              ...(privyToken ? { paymasterContext: buildPaymasterContext({ privyAccessToken: privyToken }) } : {}),\n            });\n            const result = await sendSponsored({ client: kernel, calls });\n            const actions = record.actions + (result.success ? 1 : 0);\n            if (result.success) await o.store.set({ ...record, actions });\n            const out: SponsoredActResult = {\n              userOpHash: result.userOpHash,\n              transactionHash: result.transactionHash,\n              kernelAddress: record.kernelAddress,\n              success: result.success,\n              paymaster: result.paymaster,\n              actualGasCostWei: result.actualGasCostWei.toString(),\n              explorerUrl: result.explorerUrl,\n              actions,\n            };\n            return json(out);\n          } finally {\n            await o.store.unlock(user.userId);\n          }\n        }),\n    },\n\n    revoke: {\n      POST: (request) =>\n        guard(\"combo revoke\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          await o.store.delete(user.userId);\n          return json({ active: false });\n        }),\n    },\n  };\n}\n\n/**\n * Throws `POLICY_UNSCOPED` (403) unless every call targets an allowed contract\n * and function selector with a value within the limit. Pure; used by the act\n * route and exported for custom routes.\n *\n * @example\n * assertCallsInScope(describeKernelSessionScope({ calls, validUntil }), [{ to, abi, functionName: \"tap\" }]);\n */\nexport function assertCallsInScope(scope: Pick<KernelSessionScope, \"calls\">, calls: readonly Call[]): void {\n  for (const c of normalizeCalls(calls)) {\n    if (!isCallInScope(scope, c)) {\n      throw new PepuPolicyError(\"POLICY_UNSCOPED\", \"A call is outside the session scope.\", {\n        status: 403,\n        hint: \"Only the contracts and functions the user approved can be called.\",\n      });\n    }\n  }\n}\n"]}

package/dist/combo.d.cts

@@ -66,6 +66,17 @@ interface SponsoredSessionRoutesOptions<I> {
     authenticate?: ComboAuthenticate;
     /** Chain reads. Default: viem on the PEPU RPC (`PEPU_RPC_URL` aware). */
     publicClient?: PublicClient;
+    /**
+     * A brand-new user's embedded wallet exists in the browser a moment before Privy's server reports it. With the
+     * default authentication, a signed-in user whose wallet is not visible yet is looked up again this many times
+     * (`attempts`, default 3), waiting `delayMs` * attempt number between lookups (default 400 ms). If it is still
+     * not visible, `status` answers `{ active: false, provisioning: true }` (a normal state, not an error) and the other
+     * routes answer a retryable 409 `WALLET_NOT_PROVISIONED`.
+     */
+    provisioningWait?: {
+        attempts?: number;
+        delayMs?: number;
+    };
 }
 /** The five route handlers returned by {@link createSponsoredSessionRoutes}. */
 interface SponsoredSessionRoutes {

package/dist/combo.d.ts

@@ -66,6 +66,17 @@ interface SponsoredSessionRoutesOptions<I> {
     authenticate?: ComboAuthenticate;
     /** Chain reads. Default: viem on the PEPU RPC (`PEPU_RPC_URL` aware). */
     publicClient?: PublicClient;
+    /**
+     * A brand-new user's embedded wallet exists in the browser a moment before Privy's server reports it. With the
+     * default authentication, a signed-in user whose wallet is not visible yet is looked up again this many times
+     * (`attempts`, default 3), waiting `delayMs` * attempt number between lookups (default 400 ms). If it is still
+     * not visible, `status` answers `{ active: false, provisioning: true }` (a normal state, not an error) and the other
+     * routes answer a retryable 409 `WALLET_NOT_PROVISIONED`.
+     */
+    provisioningWait?: {
+        attempts?: number;
+        delayMs?: number;
+    };
 }
 /** The five route handlers returned by {@link createSponsoredSessionRoutes}. */
 interface SponsoredSessionRoutes {

package/dist/combo.js

@@ -1,17 +1,18 @@
-import { buildKernelSessionPolicies, isLive, loadKernelSessionAccount, generateSessionKey, expectedPermissionId } from './chunk-KVG3AYYR.js';
-export { createMemoryStore, isLive } from './chunk-KVG3AYYR.js';
-import { createPepuSponsoredClient, sendSponsored, getKernelAddress } from './chunk-ZB6SVBK4.js';
-import './chunk-IB2FSPMJ.js';
+import { buildKernelSessionPolicies, isLive, loadKernelSessionAccount, generateSessionKey, expectedPermissionId } from './chunk-NHPWXIA2.js';
+export { createMemoryStore, isLive } from './chunk-NHPWXIA2.js';
+import { createPepuSponsoredClient, sendSponsored, getKernelAddress } from './chunk-QIDMFFAQ.js';
+import './chunk-QZKUPCUD.js';
 import { normalizeCalls } from './chunk-VBH3JLQ5.js';
-import './chunk-IY3ALPUJ.js';
+import './chunk-RSPAN44L.js';
 import { buildPaymasterContext } from './chunk-7PVR7QSE.js';
-import './chunk-D52PADVY.js';
+import './chunk-GFKIM7HT.js';
 import './chunk-KJYNF5KH.js';
+import './chunk-GIZNH65Q.js';
 import { isCallInScope, describeKernelSessionScope, checkApproval } from './chunk-ESMNAXUI.js';
 import './chunk-J6UXXHBE.js';
 import { resolvePepuEndpoints } from './chunk-XC4IBCI2.js';
 import { pepuMainnet } from './chunk-VTQIHMF3.js';
-import { requireUser, createPrivyServer } from './chunk-62M2LKQW.js';
+import { createPrivyServer, requireUser } from './chunk-62M2LKQW.js';
 import { assertServerOnly } from './chunk-W3JN3YIW.js';
 import './chunk-3XUGQODR.js';
 import { sessionExpiry, resolveSessionMinutes } from './chunk-YKEWWQEJ.js';
@@ -40,6 +41,7 @@ async function guard(op, fn) {
 function bearerToken(request) {
   return (request.headers.get("authorization") ?? "").replace(/^Bearer\s+/i, "").trim();
 }
+var PROVISIONING = /* @__PURE__ */ Symbol("wallet-provisioning");
 var nowSeconds = () => Math.floor(Date.now() / 1e3);
 function defaultPublicClient() {
   return createPublicClient({ chain: pepuMainnet, transport: http(resolvePepuEndpoints().rpcUrl) });
@@ -65,20 +67,32 @@ function createSponsoredSessionRoutes(o) {
   buildKernelSessionPolicies({ calls: o.scope.calls, validUntil: 1 });
   let publicClient = o.publicClient;
   const client = () => publicClient ??= defaultPublicClient();
-  const authenticate = async (request) => {
+  const wait = { attempts: o.provisioningWait?.attempts ?? 3, delayMs: o.provisioningWait?.delayMs ?? 400 };
+  const authenticateOrProvisioning = async (request) => {
     if (o.authenticate) {
       const user = await o.authenticate(request);
       if (!user) throw new PepuAuthError("AUTH_INVALID_TOKEN", "Missing or invalid Privy access token.");
       return user;
     }
-    const auth = await requireUser(request, { privy: o.privy ?? createPrivyServer() });
-    if (!auth.ok) return auth.response;
-    if (!auth.user.address) {
-      throw new PepuAuthError("WALLET_NOT_PROVISIONED", "No embedded wallet yet. Create it first (ensure-wallet route).", {
-        status: 409
-      });
+    const privy = o.privy ?? createPrivyServer();
+    for (let attempt = 0; ; attempt++) {
+      const auth = await requireUser(request, { privy });
+      if (!auth.ok) return auth.response;
+      if (auth.user.address) return { userId: auth.user.userId, ownerAddress: auth.user.address };
+      if (attempt >= wait.attempts) return PROVISIONING;
+      await new Promise((resolve) => setTimeout(resolve, wait.delayMs * (attempt + 1)));
+    }
+  };
+  const authenticate = async (request) => {
+    const user = await authenticateOrProvisioning(request);
+    if (user === PROVISIONING) {
+      throw new PepuAuthError(
+        "WALLET_NOT_PROVISIONED",
+        "Your wallet is still being set up. This usually takes a few seconds; retrying.",
+        { status: 409, retryable: true }
+      );
     }
-    return { userId: auth.user.userId, ownerAddress: auth.user.address };
+    return user;
   };
   const minutes = () => o.minutes ?? resolveSessionMinutes(process.env.SESSION_DURATION_MINUTES);
   const policiesFor = (validUntil) => buildKernelSessionPolicies({ calls: o.scope.calls, validUntil });
@@ -145,8 +159,9 @@ function createSponsoredSessionRoutes(o) {
     },
     status: {
       GET: (request) => guard("combo status", async () => {
-        const user = await authenticate(request);
+        const user = await authenticateOrProvisioning(request);
         if (user instanceof Response) return user;
+        if (user === PROVISIONING) return json({ active: false, provisioning: true });
         const record = await o.store.get(user.userId);
         if (!record || !isLive(record, nowSeconds())) return json({ active: false });
         return json({

package/dist/combo.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/combo/server.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqCA,gBAAA,CAAiB,uBAAuB,CAAA;AA0FxC,SAAS,IAAA,CAAK,IAAA,EAAe,MAAA,GAAS,GAAA,EAAe;AACnD,EAAA,OAAO,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG,EAAE,MAAA,EAAQ,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,IAAsB,CAAA;AACvG;AAGA,SAAS,QAAA,CAAS,GAAY,EAAA,EAAuB;AACnD,EAAA,MAAM,GAAA,GAAM,WAAA,CAAY,CAAA,EAAG,EAAE,IAAI,CAAA;AACjC,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,SAAA,IAAa,EAAE,aAAa,SAAA,CAAA,EAAY;AACvD,IAAA,OAAO,IAAI,cAAA,CAAe,SAAA,EAAW,GAAA,CAAI,OAAA,EAAS,EAAE,MAAA,EAAQ,GAAA,EAAK,KAAA,EAAO,CAAA,EAAG,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,GAAA;AACT;AAEA,eAAe,KAAA,CAAM,IAAY,EAAA,EAAgD;AAC/E,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,EAAA,EAAG;AAAA,EAClB,SAAS,CAAA,EAAG;AACV,IAAA,OAAO,eAAA,CAAgB,QAAA,CAAS,CAAA,EAAG,EAAE,CAAC,CAAA;AAAA,EACxC;AACF;AAGA,SAAS,YAAY,OAAA,EAA0B;AAC7C,EAAA,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA,IAAK,IAAI,OAAA,CAAQ,aAAA,EAAe,EAAE,CAAA,CAAE,IAAA,EAAK;AACtF;AAEA,IAAM,aAAa,MAAc,IAAA,CAAK,MAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAE7D,SAAS,mBAAA,GAAoC;AAC3C,EAAA,OAAO,kBAAA,CAAmB,EAAE,KAAA,EAAO,WAAA,EAAa,SAAA,EAAW,KAAK,oBAAA,EAAqB,CAAE,MAAM,CAAA,EAAG,CAAA;AAClG;AA0CO,SAAS,6BAAgC,CAAA,EAA6D;AAI3G,EAAA,MAAM,eAAe,CAAA,CAAE,KAAA,CAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,MAAA,IAAU,OAAO,CAAA,CAAE,MAAM,CAAA,CAAE,IAAA,OAAW,EAAE,CAAA;AAC1F,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,MAAM,QAAQ,YACZ,eAAA;AAAA,MACE,IAAI,eAAA;AAAA,QACF,oBAAA;AAAA,QACA,CAAA,EAAG,CAAA,CAAE,KAAA,CAAM,SAAA,IAAa,mCAAmC,CAAA,iDAAA,CAAA;AAAA,QAC3D,EAAE,MAAM,gCAAA;AAAiC;AAC3C,KACF;AACF,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,MACvB,QAAA,EAAU,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,MACxB,MAAA,EAAQ,EAAE,GAAA,EAAK,KAAA,EAAM;AAAA,MACrB,GAAA,EAAK,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,MACnB,MAAA,EAAQ,EAAE,IAAA,EAAM,KAAA;AAAM,KACxB;AAAA,EACF;AACA,EAAA,0BAAA,CAA2B,EAAE,KAAA,EAAO,CAAA,CAAE,MAAM,KAAA,EAAO,UAAA,EAAY,GAAG,CAAA;AAClE,EAAA,IAAI,eAAe,CAAA,CAAE,YAAA;AACrB,EAAA,MAAM,MAAA,GAAS,MAAqB,YAAA,KAAiB,mBAAA,EAAoB;AAEzE,EAAA,MAAM,YAAA,GAAe,OAAO,OAAA,KAAoD;AAC9E,IAAA,IAAI,EAAE,YAAA,EAAc;AAClB,MAAA,MAAM,IAAA,GAAO,MAAM,CAAA,CAAE,YAAA,CAAa,OAAO,CAAA;AACzC,MAAA,IAAI,CAAC,IAAA,EAAM,MAAM,IAAI,aAAA,CAAc,sBAAsB,wCAAwC,CAAA;AACjG,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY,OAAA,EAAS,EAAE,OAAO,CAAA,CAAE,KAAA,IAAS,iBAAA,EAAkB,EAAG,CAAA;AACjF,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,OAAO,IAAA,CAAK,QAAA;AAC1B,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,CAAK,OAAA,EAAS;AACtB,MAAA,MAAM,IAAI,aAAA,CAAc,wBAAA,EAA0B,gEAAA,EAAkE;AAAA,QAClH,MAAA,EAAQ;AAAA,OACT,CAAA;AAAA,IACH;AACA,IAAA,OAAO,EAAE,QAAQ,IAAA,CAAK,IAAA,CAAK,QAAQ,YAAA,EAAc,IAAA,CAAK,KAAK,OAAA,EAAQ;AAAA,EACrE,CAAA;AAEA,EAAA,MAAM,UAAU,MAAc,CAAA,CAAE,WAAW,qBAAA,CAAsB,OAAA,CAAQ,IAAI,wBAAwB,CAAA;AACrG,EAAA,MAAM,WAAA,GAAc,CAAC,UAAA,KAAuB,0BAAA,CAA2B,EAAE,OAAO,CAAA,CAAE,KAAA,CAAM,KAAA,EAAO,UAAA,EAAY,CAAA;AAE3G,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,iBAAiB,YAAY;AACjC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,EAAE,MAAA,EAAQ,YAAA,EAAa,GAAI,IAAA;AACjC,QAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,QAAA,MAAM,UAAA,GAAa,aAAA,CAAc,UAAA,EAAW,EAAG,IAAI,CAAA;AACnD,QAAA,MAAM,MAAM,kBAAA,EAAmB;AAC/B,QAAA,MAAM,QAAA,GAAW,YAAY,UAAU,CAAA;AACvC,QAAA,MAAM,CAAC,aAAA,EAAe,YAAY,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,UACtD,gBAAA,CAAiB,MAAA,EAAO,EAAG,YAAY,CAAA;AAAA,UACvC,oBAAA,CAAqB,EAAE,YAAA,EAAc,MAAA,IAAU,iBAAA,EAAmB,GAAA,CAAI,OAAA,EAAS,QAAA,EAAU;AAAA,SAC1F,CAAA;AACD,QAAA,MAAM,MAAA,GAAwB;AAAA,UAC5B,MAAA;AAAA,UACA,YAAA;AAAA,UACA,aAAA;AAAA,UACA,mBAAmB,GAAA,CAAI,UAAA;AAAA,UACvB,mBAAmB,GAAA,CAAI,OAAA;AAAA,UACvB,YAAA;AAAA,UACA,UAAA;AAAA,UACA,QAAA,EAAU,IAAA;AAAA,UACV,OAAA,EAAS;AAAA,SACX;AACA,QAAA,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA;AACxB,QAAA,OAAO,IAAA,CAAK;AAAA,UACV,YAAA;AAAA,UACA,aAAA;AAAA,UACA,mBAAmB,GAAA,CAAI,OAAA;AAAA,UACvB,UAAA;AAAA,UACA,OAAA,EAAS,IAAA;AAAA,UACT,KAAA,EAAO,2BAA2B,EAAE,KAAA,EAAO,EAAE,KAAA,CAAM,KAAA,EAAO,YAAY;AAAA,SACvE,CAAA;AAAA,MACH,CAAC;AAAA,KACL;AAAA,IAEA,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,kBAAkB,YAAY;AAClC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,OAAQ,MAAM,OAAA,CAAQ,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACnD,QAAA,IAAI,OAAO,IAAA,EAAM,QAAA,KAAa,QAAA,EAAU;AACtC,UAAA,MAAM,IAAI,gBAAgB,SAAA,EAAW,mBAAA,EAAqB,EAAE,MAAA,EAAQ,GAAA,EAAK,IAAA,EAAM,oBAAA,EAAsB,CAAA;AAAA,QACvG;AACA,QAAA,MAAM,SAAS,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AAC5C,QAAA,IAAI,CAAC,MAAA,IAAU,MAAA,CAAO,QAAA,KAAa,IAAA,EAAM;AACvC,UAAA,MAAM,IAAI,gBAAA,CAAiB,cAAA,EAAgB,kCAAkC,CAAA;AAAA,QAC/E;AACA,QAAA,IAAI,UAAA,EAAW,IAAK,MAAA,CAAO,UAAA,EAAY;AACrC,UAAA,MAAM,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AAClC,UAAA,MAAM,IAAI,gBAAA,CAAiB,iBAAA,EAAmB,yCAAyC,CAAA;AAAA,QACzF;AACA,QAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,IAAA,CAAK,QAAA,EAAU;AAAA,UACzC,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,cAAc,MAAA,CAAO;AAAA,SACtB,CAAA;AACD,QAAA,IAAI,CAAC,KAAA,CAAM,EAAA,EAAI,MAAM,IAAI,gBAAA,CAAiB,2BAAA,EAA6B,KAAA,CAAM,MAAA,EAAQ,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AACpG,QAAA,MAAM,CAAA,CAAE,MAAM,GAAA,CAAI,EAAE,GAAG,MAAA,EAAQ,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,CAAA;AACxD,QAAA,OAAO,KAAK,EAAE,MAAA,EAAQ,MAAM,UAAA,EAAY,MAAA,CAAO,YAAY,CAAA;AAAA,MAC7D,CAAC;AAAA,KACL;AAAA,IAEA,MAAA,EAAQ;AAAA,MACN,GAAA,EAAK,CAAC,OAAA,KACJ,KAAA,CAAM,gBAAgB,YAAY;AAChC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,SAAS,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AAC5C,QAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,CAAO,MAAA,EAAQ,UAAA,EAAY,CAAA,EAAG,OAAO,IAAA,CAAK,EAAE,MAAA,EAAQ,OAAO,CAAA;AAC3E,QAAA,OAAO,IAAA,CAAK;AAAA,UACV,MAAA,EAAQ,IAAA;AAAA,UACR,YAAY,MAAA,CAAO,UAAA;AAAA,UACnB,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,cAAc,MAAA,CAAO,YAAA;AAAA,UACrB,mBAAmB,MAAA,CAAO,iBAAA;AAAA,UAC1B,SAAS,MAAA,CAAO;AAAA,SACjB,CAAA;AAAA,MACH,CAAC;AAAA,KACL;AAAA,IAEA,GAAA,EAAK;AAAA,MACH,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,aAAa,YAAY;AAC7B,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,SAAS,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AAC5C,QAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,CAAO,QAAA,IAAY,CAAC,MAAA,CAAO,MAAA,EAAQ,UAAA,EAAY,CAAA,EAAG;AAChE,UAAA,MAAM,IAAI,gBAAA,CAAiB,cAAA,EAAgB,qCAAqC,CAAA;AAAA,QAClF;AAEA,QAAA,IAAI,KAAA;AACJ,QAAA,IAAI;AACF,UAAA,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,KAAA,CAAM,MAAM,OAAA,CAAQ,IAAA,EAAK,CAAE,KAAA,CAAM,OAAO,EAAC,CAAE,CAAC,CAAA;AAAA,QAC5D,SAAS,CAAA,EAAG;AACV,UAAA,MAAM,IAAI,eAAA,CAAgB,SAAA,EAAW,aAAa,KAAA,GAAQ,CAAA,CAAE,UAAU,uBAAA,EAAyB;AAAA,YAC7F,MAAA,EAAQ,GAAA;AAAA,YACR,IAAA,EAAM,uBAAA;AAAA,YACN,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AACA,QAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,UAAA,CAAW,KAAA,EAAO;AAAA,UACpC,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,cAAc,MAAA,CAAO;AAAA,SACtB,CAAA;AAED,QAAA,kBAAA,CAAmB,0BAAA,CAA2B,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,CAAM,KAAA,EAAO,UAAA,EAAY,MAAA,CAAO,UAAA,EAAY,CAAA,EAAG,KAAK,CAAA;AAE7G,QAAA,IAAI,CAAE,MAAM,CAAA,CAAE,MAAM,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA,EAAI;AACzC,UAAA,MAAM,IAAI,cAAA,CAAe,SAAA,EAAW,iCAAA,EAAmC;AAAA,YACrE,MAAA,EAAQ,GAAA;AAAA,YACR,SAAA,EAAW,IAAA;AAAA,YACX,IAAA,EAAM;AAAA,WACP,CAAA;AAAA,QACH;AACA,QAAA,MAAM,aAAa,CAAA,CAAE,iBAAA,KAAsB,KAAA,GAAQ,EAAA,GAAK,YAAY,OAAO,CAAA;AAC3E,QAAA,IAAI;AACF,UAAA,MAAM,OAAA,GAAU,MAAM,wBAAA,CAAyB;AAAA,YAC7C,cAAc,MAAA,EAAO;AAAA,YACrB,UAAU,MAAA,CAAO,QAAA;AAAA,YACjB,mBAAmB,MAAA,CAAO;AAAA,WAC3B,CAAA;AACD,UAAA,MAAM,SAAS,yBAAA,CAA0B;AAAA,YACvC,OAAA;AAAA,YACA,cAAc,MAAA,EAAO;AAAA,YACrB,GAAI,CAAA,CAAE,SAAA,EAAW,UAAA,KAAe,KAAA,CAAA,GAAY,EAAE,UAAA,EAAY,CAAA,CAAE,SAAA,CAAU,UAAA,EAAW,GAAI,EAAC;AAAA,YACtF,GAAI,CAAA,CAAE,SAAA,EAAW,YAAA,KAAiB,KAAA,CAAA,GAAY,EAAE,YAAA,EAAc,CAAA,CAAE,SAAA,CAAU,YAAA,EAAa,GAAI,EAAC;AAAA,YAC5F,GAAI,CAAA,CAAE,SAAA,EAAW,cAAA,KAAmB,KAAA,CAAA,GAAY,EAAE,cAAA,EAAgB,CAAA,CAAE,SAAA,CAAU,cAAA,EAAe,GAAI,EAAC;AAAA,YAClG,GAAI,UAAA,GAAa,EAAE,gBAAA,EAAkB,qBAAA,CAAsB,EAAE,gBAAA,EAAkB,UAAA,EAAY,CAAA,EAAE,GAAI;AAAC,WACnG,CAAA;AACD,UAAA,MAAM,SAAS,MAAM,aAAA,CAAc,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAO,CAAA;AAC5D,UAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,MAAA,CAAO,UAAU,CAAA,GAAI,CAAA,CAAA;AACvD,UAAA,IAAI,MAAA,CAAO,OAAA,EAAS,MAAM,CAAA,CAAE,KAAA,CAAM,IAAI,EAAE,GAAG,MAAA,EAAQ,OAAA,EAAS,CAAA;AAC5D,UAAA,MAAM,GAAA,GAA0B;AAAA,YAC9B,YAAY,MAAA,CAAO,UAAA;AAAA,YACnB,iBAAiB,MAAA,CAAO,eAAA;AAAA,YACxB,eAAe,MAAA,CAAO,aAAA;AAAA,YACtB,SAAS,MAAA,CAAO,OAAA;AAAA,YAChB,WAAW,MAAA,CAAO,SAAA;AAAA,YAClB,gBAAA,EAAkB,MAAA,CAAO,gBAAA,CAAiB,QAAA,EAAS;AAAA,YACnD,aAAa,MAAA,CAAO,WAAA;AAAA,YACpB;AAAA,WACF;AACA,UAAA,OAAO,KAAK,GAAG,CAAA;AAAA,QACjB,CAAA,SAAE;AACA,UAAA,MAAM,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,QAClC;AAAA,MACF,CAAC;AAAA,KACL;AAAA,IAEA,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,gBAAgB,YAAY;AAChC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAChC,QAAA,OAAO,IAAA,CAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,CAAA;AAAA,MAC/B,CAAC;AAAA;AACL,GACF;AACF;AAUO,SAAS,kBAAA,CAAmB,OAA0C,KAAA,EAA8B;AACzG,EAAA,KAAA,MAAW,CAAA,IAAK,cAAA,CAAe,KAAK,CAAA,EAAG;AACrC,IAAA,IAAI,CAAC,aAAA,CAAc,KAAA,EAAO,CAAC,CAAA,EAAG;AAC5B,MAAA,MAAM,IAAI,eAAA,CAAgB,iBAAA,EAAmB,sCAAA,EAAwC;AAAA,QACnF,MAAA,EAAQ,GAAA;AAAA,QACR,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH;AAAA,EACF;AACF","file":"combo.js","sourcesContent":["import type { PrivyClient } from \"@privy-io/node\";\nimport { createPublicClient, http } from \"viem\";\nimport type { Address, PublicClient } from \"viem\";\nimport type { SponsoredActResult } from \"./types.js\";\nimport { createPepuSponsoredClient, sendSponsored } from \"../aa/kernel.js\";\nimport { normalizeCalls } from \"../aa/calls.js\";\nimport type { Call } from \"../aa/types.js\";\nimport { pepuMainnet } from \"../chains.js\";\nimport { resolvePepuEndpoints } from \"../endpoints.js\";\nimport { buildPaymasterContext } from \"../erc7677.js\";\nimport {\n  PepuAuthError,\n  PepuChainError,\n  PepuConfigError,\n  PepuError,\n  PepuPolicyError,\n  PepuSessionError,\n  toErrorResponse,\n  toPepuError,\n} from \"../errors.js\";\nimport { assertServerOnly } from \"../internal/assert-server.js\";\nimport { createPrivyServer, requireUser } from \"../privy/server.js\";\nimport { resolveSessionMinutes, sessionExpiry } from \"../session/policy.js\";\nimport {\n  buildKernelSessionPolicies,\n  checkApproval,\n  describeKernelSessionScope,\n  expectedPermissionId,\n  generateSessionKey,\n  getKernelAddress,\n  isCallInScope,\n  loadKernelSessionAccount,\n} from \"../session/kernel.js\";\nimport type { KernelSessionCall, KernelSessionScope } from \"../session/kernel.js\";\nimport { isLive } from \"../session/store.js\";\nimport type { SessionRecord, SessionStore } from \"../session/store.js\";\n\nassertServerOnly(\"@pepu-chain/sdk/combo\");\n\n/**\n * `@pepu-chain/sdk/combo` (server): the combined flow. Google sign-in (Privy),\n * a ONE-TIME on-chain session, and sponsored gas. Route factories for the\n * Kernel session lifecycle: prepare, activate, status, act, revoke.\n *\n * Extracted from templates/sponsored-session-app/app/api/session/* and\n * lib/{kernel,session-auth}.ts.\n *\n * Trust model: the chain, not these routes, enforces scope. The owner's single\n * EIP-712 signature enables a permission whose call policy (targets,\n * selectors, zero value) and timestamp policy the Kernel account verifies on\n * every UserOperation. The checks here only fail fast.\n *\n * Optional peers: `@privy-io/node`, `@zerodev/*`.\n */\n\nexport { createMemoryStore, isLive } from \"../session/store.js\";\nexport type { SessionRecord, SessionStore } from \"../session/store.js\";\nexport type { KernelSessionCall, KernelSessionScope } from \"../session/kernel.js\";\nexport type { SponsoredActResult } from \"./types.js\";\n/** Session length from `SESSION_DURATION_MINUTES` (default 15, clamped to 1..1440), the same rule the routes use. */\nexport { resolveSessionMinutes } from \"../session/policy.js\";\n\n/** The authenticated caller of a combo route. */\nexport interface ComboUser {\n  userId: string;\n  /** The user's Privy embedded wallet: the owner of their Kernel account. From Privy, never the request. */\n  ownerAddress: Address;\n}\n\n/** Authenticate a request. Throw a `PepuError` (or return `null`) when it is not valid. */\nexport type ComboAuthenticate = (request: Request) => Promise<ComboUser | null>;\n\n/** Options for {@link createSponsoredSessionRoutes}. */\nexport interface SponsoredSessionRoutesOptions<I> {\n  /** What the session may call. Enforced on-chain by the call policy. */\n  scope: {\n    calls: readonly KernelSessionCall[];\n    /** Env variable named in the `CONFIG_MISSING_ENV` message when a call target is empty (unset). */\n    targetEnv?: string;\n  };\n  /**\n   * Where session records (including the session private key) live. Use\n   * `createMemoryStore()` for development only: production needs a persistent\n   * store with the key encrypted at rest.\n   */\n  store: SessionStore;\n  /**\n   * Bundler and paymaster. The bundler defaults to env `PEPU_BUNDLER_URL`, then the hosted bundler. The paymaster\n   * needs a complete ERC-7677 URL (env `PEPU_PAYMASTER_URL`, or `paymasterUrl`) or a project `paymasterToken`\n   * (built against the hosted paymaster base).\n   */\n  endpoints?: { bundlerUrl?: string; paymasterUrl?: string; paymasterToken?: string };\n  /**\n   * Forward the caller's Privy access token (the request's `Authorization: Bearer`) to the paymaster as ERC-7677\n   * `context.privyAccessToken`. The v2 FREE TIER requires it; a project paying from its own deposit does not.\n   * Default `true`. Set `false` if your paymaster URL is not a PEPU policy service you trust with the token.\n   */\n  forwardPrivyToken?: boolean;\n  /** Session length. Default env `SESSION_DURATION_MINUTES`, then 15; clamped to 1..1440. */\n  minutes?: number;\n  /** The one action users take with their session. */\n  act: {\n    /** Validate the client body. Throw to reject with 400. */\n    parse(body: unknown): I;\n    /** The calls to send. Each is re-checked against `scope` before sponsoring. */\n    buildCalls(input: I, ctx: { kernelAddress: Address; ownerAddress: Address }): Call[];\n  };\n  /** Privy client for the default authentication. Default `createPrivyServer()`. */\n  privy?: PrivyClient;\n  /**\n   * Custom authentication. Default: B1's `requireUser` (verifies the Privy\n   * bearer token and reads the user's embedded wallet from Privy).\n   */\n  authenticate?: ComboAuthenticate;\n  /** Chain reads. Default: viem on the PEPU RPC (`PEPU_RPC_URL` aware). */\n  publicClient?: PublicClient;\n}\n\n/** The five route handlers returned by {@link createSponsoredSessionRoutes}. */\nexport interface SponsoredSessionRoutes {\n  prepare: { POST(request: Request): Promise<Response> };\n  activate: { POST(request: Request): Promise<Response> };\n  status: { GET(request: Request): Promise<Response> };\n  act: { POST(request: Request): Promise<Response> };\n  revoke: { POST(request: Request): Promise<Response> };\n}\n\nfunction json(body: unknown, status = 200): Response {\n  return new Response(JSON.stringify(body), { status, headers: { \"content-type\": \"application/json\" } });\n}\n\n/** Anything unclassified that reaches a route is an upstream failure, not our 500. */\nfunction upstream(e: unknown, op: string): PepuError {\n  const err = toPepuError(e, { op });\n  if (err.code === \"UNKNOWN\" && !(e instanceof PepuError)) {\n    return new PepuChainError(\"UNKNOWN\", err.message, { status: 502, cause: e });\n  }\n  return err;\n}\n\nasync function guard(op: string, fn: () => Promise<Response>): Promise<Response> {\n  try {\n    return await fn();\n  } catch (e) {\n    return toErrorResponse(upstream(e, op));\n  }\n}\n\n/** The bearer token on a request, or `\"\"`. */\nfunction bearerToken(request: Request): string {\n  return (request.headers.get(\"authorization\") ?? \"\").replace(/^Bearer\\s+/i, \"\").trim();\n}\n\nconst nowSeconds = (): number => Math.floor(Date.now() / 1000);\n\nfunction defaultPublicClient(): PublicClient {\n  return createPublicClient({ chain: pepuMainnet, transport: http(resolvePepuEndpoints().rpcUrl) }) as PublicClient;\n}\n\n/**\n * Route handlers for the Kernel session lifecycle.\n *\n * - `prepare.POST`: the server creates a fresh session key and decides the\n *   expiry. The private key stays on the server; the response carries only the\n *   key's address, the expiry and the scope, so the browser can ask the owner\n *   for the ONE signature that grants exactly that. Calling it again replaces\n *   any pending or active session (the old key is dropped).\n * - `activate.POST` `{ approval }`: checks the approval is for this user's\n *   smart account and for exactly the key, scope and expiry issued in\n *   `prepare`, then stores it. 409 `SESSION_NONE` when nothing is pending,\n *   410 `SESSION_EXPIRED` for an expired offer, 400 `SESSION_APPROVAL_MISMATCH`.\n * - `status.GET`: `{ active: false }` or `{ active: true, validUntil, ... }`.\n *   Never returns the session key or approval.\n * - `act.POST`: signs ONE sponsored UserOperation with the session key. 409\n *   `SESSION_NONE` without a live session, 429 while another action runs.\n * - `revoke.POST`: deletes the session key and approval from the server, so\n *   the app can no longer act, immediately. It does NOT uninstall the\n *   permission on-chain: that grant stays valid until its expiry, but only the\n *   deleted key can use it and only within the scope. An on-chain uninstall is\n *   an owner-signed call to the user's own account, which a paymaster\n *   destination allowlist rightly does not sponsor.\n *\n * Gas: the paymaster policy service reserves worst-case cost per operation:\n * about 20.5 PEPU for a session's first operation and about 6.9 PEPU for later\n * ones (`SESSION_GAS_RESERVATION_PEPU`). Size spend caps above that. Fees come\n * from the chain with 20% headroom.\n *\n * @example\n * // lib/session-routes.ts\n * export const routes = createSponsoredSessionRoutes({\n *   scope: { calls: [{ target: tapScore, abi: tapScoreAbi, functionName: \"tap\" }] },\n *   store: createMemoryStore(), // DEV ONLY\n *   act: {\n *     parse: () => ({}),\n *     buildCalls: () => [{ to: tapScore, abi: tapScoreAbi, functionName: \"tap\" }],\n *   },\n * });\n * // app/api/session/prepare/route.ts: export const { POST } = routes.prepare;\n */\nexport function createSponsoredSessionRoutes<I>(o: SponsoredSessionRoutesOptions<I>): SponsoredSessionRoutes {\n  // A call whose target is empty or undefined (an unset env variable) is \"not configured yet\":\n  // every route then answers CONFIG_MISSING_ENV at request time. A malformed non-empty scope\n  // still fails at startup, not on the first request.\n  const unconfigured = o.scope.calls.some((c) => !c.target || String(c.target).trim() === \"\");\n  if (unconfigured) {\n    const unset = async (): Promise<Response> =>\n      toErrorResponse(\n        new PepuConfigError(\n          \"CONFIG_MISSING_ENV\",\n          `${o.scope.targetEnv ?? \"A session target contract address\"} is not set to a valid address. See .env.example.`,\n          { hint: \"Set it and restart the server.\" },\n        ),\n      );\n    return {\n      prepare: { POST: unset },\n      activate: { POST: unset },\n      status: { GET: unset },\n      act: { POST: unset },\n      revoke: { POST: unset },\n    };\n  }\n  buildKernelSessionPolicies({ calls: o.scope.calls, validUntil: 1 });\n  let publicClient = o.publicClient;\n  const client = (): PublicClient => (publicClient ??= defaultPublicClient());\n\n  const authenticate = async (request: Request): Promise<ComboUser | Response> => {\n    if (o.authenticate) {\n      const user = await o.authenticate(request);\n      if (!user) throw new PepuAuthError(\"AUTH_INVALID_TOKEN\", \"Missing or invalid Privy access token.\");\n      return user;\n    }\n    const auth = await requireUser(request, { privy: o.privy ?? createPrivyServer() });\n    if (!auth.ok) return auth.response;\n    if (!auth.user.address) {\n      throw new PepuAuthError(\"WALLET_NOT_PROVISIONED\", \"No embedded wallet yet. Create it first (ensure-wallet route).\", {\n        status: 409,\n      });\n    }\n    return { userId: auth.user.userId, ownerAddress: auth.user.address };\n  };\n\n  const minutes = (): number => o.minutes ?? resolveSessionMinutes(process.env.SESSION_DURATION_MINUTES);\n  const policiesFor = (validUntil: number) => buildKernelSessionPolicies({ calls: o.scope.calls, validUntil });\n\n  return {\n    prepare: {\n      POST: (request) =>\n        guard(\"combo prepare\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const { userId, ownerAddress } = user;\n          const mins = minutes();\n          const validUntil = sessionExpiry(nowSeconds(), mins);\n          const key = generateSessionKey();\n          const policies = policiesFor(validUntil);\n          const [kernelAddress, permissionId] = await Promise.all([\n            getKernelAddress(client(), ownerAddress),\n            expectedPermissionId({ publicClient: client(), sessionKeyAddress: key.address, policies }),\n          ]);\n          const record: SessionRecord = {\n            userId,\n            ownerAddress,\n            kernelAddress,\n            sessionPrivateKey: key.privateKey,\n            sessionKeyAddress: key.address,\n            permissionId,\n            validUntil,\n            approval: null,\n            actions: 0,\n          };\n          await o.store.set(record);\n          return json({\n            ownerAddress,\n            kernelAddress,\n            sessionKeyAddress: key.address,\n            validUntil,\n            minutes: mins,\n            scope: describeKernelSessionScope({ calls: o.scope.calls, validUntil }),\n          });\n        }),\n    },\n\n    activate: {\n      POST: (request) =>\n        guard(\"combo activate\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const body = (await request.json().catch(() => null)) as { approval?: unknown } | null;\n          if (typeof body?.approval !== \"string\") {\n            throw new PepuPolicyError(\"UNKNOWN\", \"Missing approval.\", { status: 400, hint: \"Send { approval }.\" });\n          }\n          const record = await o.store.get(user.userId);\n          if (!record || record.approval !== null) {\n            throw new PepuSessionError(\"SESSION_NONE\", \"No pending session. Start again.\");\n          }\n          if (nowSeconds() >= record.validUntil) {\n            await o.store.delete(record.userId);\n            throw new PepuSessionError(\"SESSION_EXPIRED\", \"The session offer expired. Start again.\");\n          }\n          const check = checkApproval(body.approval, {\n            kernelAddress: record.kernelAddress,\n            permissionId: record.permissionId,\n          });\n          if (!check.ok) throw new PepuSessionError(\"SESSION_APPROVAL_MISMATCH\", check.reason, { status: 400 });\n          await o.store.set({ ...record, approval: body.approval });\n          return json({ active: true, validUntil: record.validUntil });\n        }),\n    },\n\n    status: {\n      GET: (request) =>\n        guard(\"combo status\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const record = await o.store.get(user.userId);\n          if (!record || !isLive(record, nowSeconds())) return json({ active: false });\n          return json({\n            active: true,\n            validUntil: record.validUntil,\n            kernelAddress: record.kernelAddress,\n            ownerAddress: record.ownerAddress,\n            sessionKeyAddress: record.sessionKeyAddress,\n            actions: record.actions,\n          });\n        }),\n    },\n\n    act: {\n      POST: (request) =>\n        guard(\"combo act\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const record = await o.store.get(user.userId);\n          if (!record || !record.approval || !isLive(record, nowSeconds())) {\n            throw new PepuSessionError(\"SESSION_NONE\", \"No active session. Start one first.\");\n          }\n\n          let input: I;\n          try {\n            input = o.act.parse(await request.json().catch(() => ({})));\n          } catch (e) {\n            throw new PepuPolicyError(\"UNKNOWN\", e instanceof Error ? e.message : \"Invalid request body.\", {\n              status: 400,\n              hint: \"Fix the request body.\",\n              cause: e,\n            });\n          }\n          const calls = o.act.buildCalls(input, {\n            kernelAddress: record.kernelAddress,\n            ownerAddress: record.ownerAddress,\n          });\n          // Fail fast; the chain is the real enforcement (see the file comment).\n          assertCallsInScope(describeKernelSessionScope({ calls: o.scope.calls, validUntil: record.validUntil }), calls);\n\n          if (!(await o.store.tryLock(user.userId))) {\n            throw new PepuChainError(\"UNKNOWN\", \"An action is already in flight.\", {\n              status: 429,\n              retryable: true,\n              hint: \"Wait for the current action to finish.\",\n            });\n          }\n          const privyToken = o.forwardPrivyToken === false ? \"\" : bearerToken(request);\n          try {\n            const account = await loadKernelSessionAccount({\n              publicClient: client(),\n              approval: record.approval,\n              sessionPrivateKey: record.sessionPrivateKey,\n            });\n            const kernel = createPepuSponsoredClient({\n              account,\n              publicClient: client(),\n              ...(o.endpoints?.bundlerUrl !== undefined ? { bundlerUrl: o.endpoints.bundlerUrl } : {}),\n              ...(o.endpoints?.paymasterUrl !== undefined ? { paymasterUrl: o.endpoints.paymasterUrl } : {}),\n              ...(o.endpoints?.paymasterToken !== undefined ? { paymasterToken: o.endpoints.paymasterToken } : {}),\n              ...(privyToken ? { paymasterContext: buildPaymasterContext({ privyAccessToken: privyToken }) } : {}),\n            });\n            const result = await sendSponsored({ client: kernel, calls });\n            const actions = record.actions + (result.success ? 1 : 0);\n            if (result.success) await o.store.set({ ...record, actions });\n            const out: SponsoredActResult = {\n              userOpHash: result.userOpHash,\n              transactionHash: result.transactionHash,\n              kernelAddress: record.kernelAddress,\n              success: result.success,\n              paymaster: result.paymaster,\n              actualGasCostWei: result.actualGasCostWei.toString(),\n              explorerUrl: result.explorerUrl,\n              actions,\n            };\n            return json(out);\n          } finally {\n            await o.store.unlock(user.userId);\n          }\n        }),\n    },\n\n    revoke: {\n      POST: (request) =>\n        guard(\"combo revoke\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          await o.store.delete(user.userId);\n          return json({ active: false });\n        }),\n    },\n  };\n}\n\n/**\n * Throws `POLICY_UNSCOPED` (403) unless every call targets an allowed contract\n * and function selector with a value within the limit. Pure; used by the act\n * route and exported for custom routes.\n *\n * @example\n * assertCallsInScope(describeKernelSessionScope({ calls, validUntil }), [{ to, abi, functionName: \"tap\" }]);\n */\nexport function assertCallsInScope(scope: Pick<KernelSessionScope, \"calls\">, calls: readonly Call[]): void {\n  for (const c of normalizeCalls(calls)) {\n    if (!isCallInScope(scope, c)) {\n      throw new PepuPolicyError(\"POLICY_UNSCOPED\", \"A call is outside the session scope.\", {\n        status: 403,\n        hint: \"Only the contracts and functions the user approved can be called.\",\n      });\n    }\n  }\n}\n"]}
+{"version":3,"sources":["../src/combo/server.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAqCA,gBAAA,CAAiB,uBAAuB,CAAA;AAkGxC,SAAS,IAAA,CAAK,IAAA,EAAe,MAAA,GAAS,GAAA,EAAe;AACnD,EAAA,OAAO,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG,EAAE,MAAA,EAAQ,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,IAAsB,CAAA;AACvG;AAGA,SAAS,QAAA,CAAS,GAAY,EAAA,EAAuB;AACnD,EAAA,MAAM,GAAA,GAAM,WAAA,CAAY,CAAA,EAAG,EAAE,IAAI,CAAA;AACjC,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,SAAA,IAAa,EAAE,aAAa,SAAA,CAAA,EAAY;AACvD,IAAA,OAAO,IAAI,cAAA,CAAe,SAAA,EAAW,GAAA,CAAI,OAAA,EAAS,EAAE,MAAA,EAAQ,GAAA,EAAK,KAAA,EAAO,CAAA,EAAG,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,GAAA;AACT;AAEA,eAAe,KAAA,CAAM,IAAY,EAAA,EAAgD;AAC/E,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,EAAA,EAAG;AAAA,EAClB,SAAS,CAAA,EAAG;AACV,IAAA,OAAO,eAAA,CAAgB,QAAA,CAAS,CAAA,EAAG,EAAE,CAAC,CAAA;AAAA,EACxC;AACF;AAGA,SAAS,YAAY,OAAA,EAA0B;AAC7C,EAAA,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA,IAAK,IAAI,OAAA,CAAQ,aAAA,EAAe,EAAE,CAAA,CAAE,IAAA,EAAK;AACtF;AAGA,IAAM,YAAA,0BAAsB,qBAAqB,CAAA;AAEjD,IAAM,aAAa,MAAc,IAAA,CAAK,MAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAE7D,SAAS,mBAAA,GAAoC;AAC3C,EAAA,OAAO,kBAAA,CAAmB,EAAE,KAAA,EAAO,WAAA,EAAa,SAAA,EAAW,KAAK,oBAAA,EAAqB,CAAE,MAAM,CAAA,EAAG,CAAA;AAClG;AA0CO,SAAS,6BAAgC,CAAA,EAA6D;AAI3G,EAAA,MAAM,eAAe,CAAA,CAAE,KAAA,CAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,MAAA,IAAU,OAAO,CAAA,CAAE,MAAM,CAAA,CAAE,IAAA,OAAW,EAAE,CAAA;AAC1F,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,MAAM,QAAQ,YACZ,eAAA;AAAA,MACE,IAAI,eAAA;AAAA,QACF,oBAAA;AAAA,QACA,CAAA,EAAG,CAAA,CAAE,KAAA,CAAM,SAAA,IAAa,mCAAmC,CAAA,iDAAA,CAAA;AAAA,QAC3D,EAAE,MAAM,gCAAA;AAAiC;AAC3C,KACF;AACF,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,MACvB,QAAA,EAAU,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,MACxB,MAAA,EAAQ,EAAE,GAAA,EAAK,KAAA,EAAM;AAAA,MACrB,GAAA,EAAK,EAAE,IAAA,EAAM,KAAA,EAAM;AAAA,MACnB,MAAA,EAAQ,EAAE,IAAA,EAAM,KAAA;AAAM,KACxB;AAAA,EACF;AACA,EAAA,0BAAA,CAA2B,EAAE,KAAA,EAAO,CAAA,CAAE,MAAM,KAAA,EAAO,UAAA,EAAY,GAAG,CAAA;AAClE,EAAA,IAAI,eAAe,CAAA,CAAE,YAAA;AACrB,EAAA,MAAM,MAAA,GAAS,MAAqB,YAAA,KAAiB,mBAAA,EAAoB;AAEzE,EAAA,MAAM,IAAA,GAAO,EAAE,QAAA,EAAU,CAAA,CAAE,gBAAA,EAAkB,QAAA,IAAY,CAAA,EAAG,OAAA,EAAS,CAAA,CAAE,gBAAA,EAAkB,OAAA,IAAW,GAAA,EAAI;AAMxG,EAAA,MAAM,0BAAA,GAA6B,OAAO,OAAA,KAA0E;AAClH,IAAA,IAAI,EAAE,YAAA,EAAc;AAClB,MAAA,MAAM,IAAA,GAAO,MAAM,CAAA,CAAE,YAAA,CAAa,OAAO,CAAA;AACzC,MAAA,IAAI,CAAC,IAAA,EAAM,MAAM,IAAI,aAAA,CAAc,sBAAsB,wCAAwC,CAAA;AACjG,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,KAAA,IAAS,iBAAA,EAAkB;AAC3C,IAAA,KAAA,IAAS,OAAA,GAAU,KAAK,OAAA,EAAA,EAAW;AACjC,MAAA,MAAM,OAAO,MAAM,WAAA,CAAY,OAAA,EAAS,EAAE,OAAO,CAAA;AACjD,MAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,OAAO,IAAA,CAAK,QAAA;AAC1B,MAAA,IAAI,IAAA,CAAK,IAAA,CAAK,OAAA,EAAS,OAAO,EAAE,MAAA,EAAQ,IAAA,CAAK,IAAA,CAAK,MAAA,EAAQ,YAAA,EAAc,IAAA,CAAK,IAAA,CAAK,OAAA,EAAQ;AAC1F,MAAA,IAAI,OAAA,IAAW,IAAA,CAAK,QAAA,EAAU,OAAO,YAAA;AACrC,MAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,UAAA,CAAW,SAAS,IAAA,CAAK,OAAA,IAAW,OAAA,GAAU,CAAA,CAAE,CAAC,CAAA;AAAA,IAClF;AAAA,EACF,CAAA;AAEA,EAAA,MAAM,YAAA,GAAe,OAAO,OAAA,KAAoD;AAC9E,IAAA,MAAM,IAAA,GAAO,MAAM,0BAAA,CAA2B,OAAO,CAAA;AACrD,IAAA,IAAI,SAAS,YAAA,EAAc;AACzB,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,wBAAA;AAAA,QACA,gFAAA;AAAA,QACA,EAAE,MAAA,EAAQ,GAAA,EAAK,SAAA,EAAW,IAAA;AAAK,OACjC;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,UAAU,MAAc,CAAA,CAAE,WAAW,qBAAA,CAAsB,OAAA,CAAQ,IAAI,wBAAwB,CAAA;AACrG,EAAA,MAAM,WAAA,GAAc,CAAC,UAAA,KAAuB,0BAAA,CAA2B,EAAE,OAAO,CAAA,CAAE,KAAA,CAAM,KAAA,EAAO,UAAA,EAAY,CAAA;AAE3G,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,iBAAiB,YAAY;AACjC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,EAAE,MAAA,EAAQ,YAAA,EAAa,GAAI,IAAA;AACjC,QAAA,MAAM,OAAO,OAAA,EAAQ;AACrB,QAAA,MAAM,UAAA,GAAa,aAAA,CAAc,UAAA,EAAW,EAAG,IAAI,CAAA;AACnD,QAAA,MAAM,MAAM,kBAAA,EAAmB;AAC/B,QAAA,MAAM,QAAA,GAAW,YAAY,UAAU,CAAA;AACvC,QAAA,MAAM,CAAC,aAAA,EAAe,YAAY,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,UACtD,gBAAA,CAAiB,MAAA,EAAO,EAAG,YAAY,CAAA;AAAA,UACvC,oBAAA,CAAqB,EAAE,YAAA,EAAc,MAAA,IAAU,iBAAA,EAAmB,GAAA,CAAI,OAAA,EAAS,QAAA,EAAU;AAAA,SAC1F,CAAA;AACD,QAAA,MAAM,MAAA,GAAwB;AAAA,UAC5B,MAAA;AAAA,UACA,YAAA;AAAA,UACA,aAAA;AAAA,UACA,mBAAmB,GAAA,CAAI,UAAA;AAAA,UACvB,mBAAmB,GAAA,CAAI,OAAA;AAAA,UACvB,YAAA;AAAA,UACA,UAAA;AAAA,UACA,QAAA,EAAU,IAAA;AAAA,UACV,OAAA,EAAS;AAAA,SACX;AACA,QAAA,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,MAAM,CAAA;AACxB,QAAA,OAAO,IAAA,CAAK;AAAA,UACV,YAAA;AAAA,UACA,aAAA;AAAA,UACA,mBAAmB,GAAA,CAAI,OAAA;AAAA,UACvB,UAAA;AAAA,UACA,OAAA,EAAS,IAAA;AAAA,UACT,KAAA,EAAO,2BAA2B,EAAE,KAAA,EAAO,EAAE,KAAA,CAAM,KAAA,EAAO,YAAY;AAAA,SACvE,CAAA;AAAA,MACH,CAAC;AAAA,KACL;AAAA,IAEA,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,kBAAkB,YAAY;AAClC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,OAAQ,MAAM,OAAA,CAAQ,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACnD,QAAA,IAAI,OAAO,IAAA,EAAM,QAAA,KAAa,QAAA,EAAU;AACtC,UAAA,MAAM,IAAI,gBAAgB,SAAA,EAAW,mBAAA,EAAqB,EAAE,MAAA,EAAQ,GAAA,EAAK,IAAA,EAAM,oBAAA,EAAsB,CAAA;AAAA,QACvG;AACA,QAAA,MAAM,SAAS,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AAC5C,QAAA,IAAI,CAAC,MAAA,IAAU,MAAA,CAAO,QAAA,KAAa,IAAA,EAAM;AACvC,UAAA,MAAM,IAAI,gBAAA,CAAiB,cAAA,EAAgB,kCAAkC,CAAA;AAAA,QAC/E;AACA,QAAA,IAAI,UAAA,EAAW,IAAK,MAAA,CAAO,UAAA,EAAY;AACrC,UAAA,MAAM,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AAClC,UAAA,MAAM,IAAI,gBAAA,CAAiB,iBAAA,EAAmB,yCAAyC,CAAA;AAAA,QACzF;AACA,QAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,IAAA,CAAK,QAAA,EAAU;AAAA,UACzC,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,cAAc,MAAA,CAAO;AAAA,SACtB,CAAA;AACD,QAAA,IAAI,CAAC,KAAA,CAAM,EAAA,EAAI,MAAM,IAAI,gBAAA,CAAiB,2BAAA,EAA6B,KAAA,CAAM,MAAA,EAAQ,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AACpG,QAAA,MAAM,CAAA,CAAE,MAAM,GAAA,CAAI,EAAE,GAAG,MAAA,EAAQ,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,CAAA;AACxD,QAAA,OAAO,KAAK,EAAE,MAAA,EAAQ,MAAM,UAAA,EAAY,MAAA,CAAO,YAAY,CAAA;AAAA,MAC7D,CAAC;AAAA,KACL;AAAA,IAEA,MAAA,EAAQ;AAAA,MACN,GAAA,EAAK,CAAC,OAAA,KACJ,KAAA,CAAM,gBAAgB,YAAY;AAChC,QAAA,MAAM,IAAA,GAAO,MAAM,0BAAA,CAA2B,OAAO,CAAA;AACrD,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,IAAI,IAAA,KAAS,cAAc,OAAO,IAAA,CAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,YAAA,EAAc,IAAA,EAAM,CAAA;AAC5E,QAAA,MAAM,SAAS,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AAC5C,QAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,CAAO,MAAA,EAAQ,UAAA,EAAY,CAAA,EAAG,OAAO,IAAA,CAAK,EAAE,MAAA,EAAQ,OAAO,CAAA;AAC3E,QAAA,OAAO,IAAA,CAAK;AAAA,UACV,MAAA,EAAQ,IAAA;AAAA,UACR,YAAY,MAAA,CAAO,UAAA;AAAA,UACnB,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,cAAc,MAAA,CAAO,YAAA;AAAA,UACrB,mBAAmB,MAAA,CAAO,iBAAA;AAAA,UAC1B,SAAS,MAAA,CAAO;AAAA,SACjB,CAAA;AAAA,MACH,CAAC;AAAA,KACL;AAAA,IAEA,GAAA,EAAK;AAAA,MACH,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,aAAa,YAAY;AAC7B,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,SAAS,MAAM,CAAA,CAAE,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AAC5C,QAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,CAAO,QAAA,IAAY,CAAC,MAAA,CAAO,MAAA,EAAQ,UAAA,EAAY,CAAA,EAAG;AAChE,UAAA,MAAM,IAAI,gBAAA,CAAiB,cAAA,EAAgB,qCAAqC,CAAA;AAAA,QAClF;AAEA,QAAA,IAAI,KAAA;AACJ,QAAA,IAAI;AACF,UAAA,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,KAAA,CAAM,MAAM,OAAA,CAAQ,IAAA,EAAK,CAAE,KAAA,CAAM,OAAO,EAAC,CAAE,CAAC,CAAA;AAAA,QAC5D,SAAS,CAAA,EAAG;AACV,UAAA,MAAM,IAAI,eAAA,CAAgB,SAAA,EAAW,aAAa,KAAA,GAAQ,CAAA,CAAE,UAAU,uBAAA,EAAyB;AAAA,YAC7F,MAAA,EAAQ,GAAA;AAAA,YACR,IAAA,EAAM,uBAAA;AAAA,YACN,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH;AACA,QAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,UAAA,CAAW,KAAA,EAAO;AAAA,UACpC,eAAe,MAAA,CAAO,aAAA;AAAA,UACtB,cAAc,MAAA,CAAO;AAAA,SACtB,CAAA;AAED,QAAA,kBAAA,CAAmB,0BAAA,CAA2B,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,CAAM,KAAA,EAAO,UAAA,EAAY,MAAA,CAAO,UAAA,EAAY,CAAA,EAAG,KAAK,CAAA;AAE7G,QAAA,IAAI,CAAE,MAAM,CAAA,CAAE,MAAM,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA,EAAI;AACzC,UAAA,MAAM,IAAI,cAAA,CAAe,SAAA,EAAW,iCAAA,EAAmC;AAAA,YACrE,MAAA,EAAQ,GAAA;AAAA,YACR,SAAA,EAAW,IAAA;AAAA,YACX,IAAA,EAAM;AAAA,WACP,CAAA;AAAA,QACH;AACA,QAAA,MAAM,aAAa,CAAA,CAAE,iBAAA,KAAsB,KAAA,GAAQ,EAAA,GAAK,YAAY,OAAO,CAAA;AAC3E,QAAA,IAAI;AACF,UAAA,MAAM,OAAA,GAAU,MAAM,wBAAA,CAAyB;AAAA,YAC7C,cAAc,MAAA,EAAO;AAAA,YACrB,UAAU,MAAA,CAAO,QAAA;AAAA,YACjB,mBAAmB,MAAA,CAAO;AAAA,WAC3B,CAAA;AACD,UAAA,MAAM,SAAS,yBAAA,CAA0B;AAAA,YACvC,OAAA;AAAA,YACA,cAAc,MAAA,EAAO;AAAA,YACrB,GAAI,CAAA,CAAE,SAAA,EAAW,UAAA,KAAe,KAAA,CAAA,GAAY,EAAE,UAAA,EAAY,CAAA,CAAE,SAAA,CAAU,UAAA,EAAW,GAAI,EAAC;AAAA,YACtF,GAAI,CAAA,CAAE,SAAA,EAAW,YAAA,KAAiB,KAAA,CAAA,GAAY,EAAE,YAAA,EAAc,CAAA,CAAE,SAAA,CAAU,YAAA,EAAa,GAAI,EAAC;AAAA,YAC5F,GAAI,CAAA,CAAE,SAAA,EAAW,cAAA,KAAmB,KAAA,CAAA,GAAY,EAAE,cAAA,EAAgB,CAAA,CAAE,SAAA,CAAU,cAAA,EAAe,GAAI,EAAC;AAAA,YAClG,GAAI,UAAA,GAAa,EAAE,gBAAA,EAAkB,qBAAA,CAAsB,EAAE,gBAAA,EAAkB,UAAA,EAAY,CAAA,EAAE,GAAI;AAAC,WACnG,CAAA;AACD,UAAA,MAAM,SAAS,MAAM,aAAA,CAAc,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAO,CAAA;AAC5D,UAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,MAAA,CAAO,UAAU,CAAA,GAAI,CAAA,CAAA;AACvD,UAAA,IAAI,MAAA,CAAO,OAAA,EAAS,MAAM,CAAA,CAAE,KAAA,CAAM,IAAI,EAAE,GAAG,MAAA,EAAQ,OAAA,EAAS,CAAA;AAC5D,UAAA,MAAM,GAAA,GAA0B;AAAA,YAC9B,YAAY,MAAA,CAAO,UAAA;AAAA,YACnB,iBAAiB,MAAA,CAAO,eAAA;AAAA,YACxB,eAAe,MAAA,CAAO,aAAA;AAAA,YACtB,SAAS,MAAA,CAAO,OAAA;AAAA,YAChB,WAAW,MAAA,CAAO,SAAA;AAAA,YAClB,gBAAA,EAAkB,MAAA,CAAO,gBAAA,CAAiB,QAAA,EAAS;AAAA,YACnD,aAAa,MAAA,CAAO,WAAA;AAAA,YACpB;AAAA,WACF;AACA,UAAA,OAAO,KAAK,GAAG,CAAA;AAAA,QACjB,CAAA,SAAE;AACA,UAAA,MAAM,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,QAClC;AAAA,MACF,CAAC;AAAA,KACL;AAAA,IAEA,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,CAAC,OAAA,KACL,KAAA,CAAM,gBAAgB,YAAY;AAChC,QAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAO,CAAA;AACvC,QAAA,IAAI,IAAA,YAAgB,UAAU,OAAO,IAAA;AACrC,QAAA,MAAM,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAChC,QAAA,OAAO,IAAA,CAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,CAAA;AAAA,MAC/B,CAAC;AAAA;AACL,GACF;AACF;AAUO,SAAS,kBAAA,CAAmB,OAA0C,KAAA,EAA8B;AACzG,EAAA,KAAA,MAAW,CAAA,IAAK,cAAA,CAAe,KAAK,CAAA,EAAG;AACrC,IAAA,IAAI,CAAC,aAAA,CAAc,KAAA,EAAO,CAAC,CAAA,EAAG;AAC5B,MAAA,MAAM,IAAI,eAAA,CAAgB,iBAAA,EAAmB,sCAAA,EAAwC;AAAA,QACnF,MAAA,EAAQ,GAAA;AAAA,QACR,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH;AAAA,EACF;AACF","file":"combo.js","sourcesContent":["import type { PrivyClient } from \"@privy-io/node\";\nimport { createPublicClient, http } from \"viem\";\nimport type { Address, PublicClient } from \"viem\";\nimport type { SponsoredActResult } from \"./types.js\";\nimport { createPepuSponsoredClient, sendSponsored } from \"../aa/kernel.js\";\nimport { normalizeCalls } from \"../aa/calls.js\";\nimport type { Call } from \"../aa/types.js\";\nimport { pepuMainnet } from \"../chains.js\";\nimport { resolvePepuEndpoints } from \"../endpoints.js\";\nimport { buildPaymasterContext } from \"../erc7677.js\";\nimport {\n  PepuAuthError,\n  PepuChainError,\n  PepuConfigError,\n  PepuError,\n  PepuPolicyError,\n  PepuSessionError,\n  toErrorResponse,\n  toPepuError,\n} from \"../errors.js\";\nimport { assertServerOnly } from \"../internal/assert-server.js\";\nimport { createPrivyServer, requireUser } from \"../privy/server.js\";\nimport { resolveSessionMinutes, sessionExpiry } from \"../session/policy.js\";\nimport {\n  buildKernelSessionPolicies,\n  checkApproval,\n  describeKernelSessionScope,\n  expectedPermissionId,\n  generateSessionKey,\n  getKernelAddress,\n  isCallInScope,\n  loadKernelSessionAccount,\n} from \"../session/kernel.js\";\nimport type { KernelSessionCall, KernelSessionScope } from \"../session/kernel.js\";\nimport { isLive } from \"../session/store.js\";\nimport type { SessionRecord, SessionStore } from \"../session/store.js\";\n\nassertServerOnly(\"@pepu-chain/sdk/combo\");\n\n/**\n * `@pepu-chain/sdk/combo` (server): the combined flow. Google sign-in (Privy),\n * a ONE-TIME on-chain session, and sponsored gas. Route factories for the\n * Kernel session lifecycle: prepare, activate, status, act, revoke.\n *\n * Extracted from templates/sponsored-session-app/app/api/session/* and\n * lib/{kernel,session-auth}.ts.\n *\n * Trust model: the chain, not these routes, enforces scope. The owner's single\n * EIP-712 signature enables a permission whose call policy (targets,\n * selectors, zero value) and timestamp policy the Kernel account verifies on\n * every UserOperation. The checks here only fail fast.\n *\n * Optional peers: `@privy-io/node`, `@zerodev/*`.\n */\n\nexport { createMemoryStore, isLive } from \"../session/store.js\";\nexport type { SessionRecord, SessionStore } from \"../session/store.js\";\nexport type { KernelSessionCall, KernelSessionScope } from \"../session/kernel.js\";\nexport type { SponsoredActResult } from \"./types.js\";\n/** Session length from `SESSION_DURATION_MINUTES` (default 15, clamped to 1..1440), the same rule the routes use. */\nexport { resolveSessionMinutes } from \"../session/policy.js\";\n\n/** The authenticated caller of a combo route. */\nexport interface ComboUser {\n  userId: string;\n  /** The user's Privy embedded wallet: the owner of their Kernel account. From Privy, never the request. */\n  ownerAddress: Address;\n}\n\n/** Authenticate a request. Throw a `PepuError` (or return `null`) when it is not valid. */\nexport type ComboAuthenticate = (request: Request) => Promise<ComboUser | null>;\n\n/** Options for {@link createSponsoredSessionRoutes}. */\nexport interface SponsoredSessionRoutesOptions<I> {\n  /** What the session may call. Enforced on-chain by the call policy. */\n  scope: {\n    calls: readonly KernelSessionCall[];\n    /** Env variable named in the `CONFIG_MISSING_ENV` message when a call target is empty (unset). */\n    targetEnv?: string;\n  };\n  /**\n   * Where session records (including the session private key) live. Use\n   * `createMemoryStore()` for development only: production needs a persistent\n   * store with the key encrypted at rest.\n   */\n  store: SessionStore;\n  /**\n   * Bundler and paymaster. The bundler defaults to env `PEPU_BUNDLER_URL`, then the hosted bundler. The paymaster\n   * needs a complete ERC-7677 URL (env `PEPU_PAYMASTER_URL`, or `paymasterUrl`) or a project `paymasterToken`\n   * (built against the hosted paymaster base).\n   */\n  endpoints?: { bundlerUrl?: string; paymasterUrl?: string; paymasterToken?: string };\n  /**\n   * Forward the caller's Privy access token (the request's `Authorization: Bearer`) to the paymaster as ERC-7677\n   * `context.privyAccessToken`. The v2 FREE TIER requires it; a project paying from its own deposit does not.\n   * Default `true`. Set `false` if your paymaster URL is not a PEPU policy service you trust with the token.\n   */\n  forwardPrivyToken?: boolean;\n  /** Session length. Default env `SESSION_DURATION_MINUTES`, then 15; clamped to 1..1440. */\n  minutes?: number;\n  /** The one action users take with their session. */\n  act: {\n    /** Validate the client body. Throw to reject with 400. */\n    parse(body: unknown): I;\n    /** The calls to send. Each is re-checked against `scope` before sponsoring. */\n    buildCalls(input: I, ctx: { kernelAddress: Address; ownerAddress: Address }): Call[];\n  };\n  /** Privy client for the default authentication. Default `createPrivyServer()`. */\n  privy?: PrivyClient;\n  /**\n   * Custom authentication. Default: B1's `requireUser` (verifies the Privy\n   * bearer token and reads the user's embedded wallet from Privy).\n   */\n  authenticate?: ComboAuthenticate;\n  /** Chain reads. Default: viem on the PEPU RPC (`PEPU_RPC_URL` aware). */\n  publicClient?: PublicClient;\n  /**\n   * A brand-new user's embedded wallet exists in the browser a moment before Privy's server reports it. With the\n   * default authentication, a signed-in user whose wallet is not visible yet is looked up again this many times\n   * (`attempts`, default 3), waiting `delayMs` * attempt number between lookups (default 400 ms). If it is still\n   * not visible, `status` answers `{ active: false, provisioning: true }` (a normal state, not an error) and the other\n   * routes answer a retryable 409 `WALLET_NOT_PROVISIONED`.\n   */\n  provisioningWait?: { attempts?: number; delayMs?: number };\n}\n\n/** The five route handlers returned by {@link createSponsoredSessionRoutes}. */\nexport interface SponsoredSessionRoutes {\n  prepare: { POST(request: Request): Promise<Response> };\n  activate: { POST(request: Request): Promise<Response> };\n  status: { GET(request: Request): Promise<Response> };\n  act: { POST(request: Request): Promise<Response> };\n  revoke: { POST(request: Request): Promise<Response> };\n}\n\nfunction json(body: unknown, status = 200): Response {\n  return new Response(JSON.stringify(body), { status, headers: { \"content-type\": \"application/json\" } });\n}\n\n/** Anything unclassified that reaches a route is an upstream failure, not our 500. */\nfunction upstream(e: unknown, op: string): PepuError {\n  const err = toPepuError(e, { op });\n  if (err.code === \"UNKNOWN\" && !(e instanceof PepuError)) {\n    return new PepuChainError(\"UNKNOWN\", err.message, { status: 502, cause: e });\n  }\n  return err;\n}\n\nasync function guard(op: string, fn: () => Promise<Response>): Promise<Response> {\n  try {\n    return await fn();\n  } catch (e) {\n    return toErrorResponse(upstream(e, op));\n  }\n}\n\n/** The bearer token on a request, or `\"\"`. */\nfunction bearerToken(request: Request): string {\n  return (request.headers.get(\"authorization\") ?? \"\").replace(/^Bearer\\s+/i, \"\").trim();\n}\n\n/** Marker: signed in, but Privy's server does not list an embedded wallet yet. */\nconst PROVISIONING = Symbol(\"wallet-provisioning\");\n\nconst nowSeconds = (): number => Math.floor(Date.now() / 1000);\n\nfunction defaultPublicClient(): PublicClient {\n  return createPublicClient({ chain: pepuMainnet, transport: http(resolvePepuEndpoints().rpcUrl) }) as PublicClient;\n}\n\n/**\n * Route handlers for the Kernel session lifecycle.\n *\n * - `prepare.POST`: the server creates a fresh session key and decides the\n *   expiry. The private key stays on the server; the response carries only the\n *   key's address, the expiry and the scope, so the browser can ask the owner\n *   for the ONE signature that grants exactly that. Calling it again replaces\n *   any pending or active session (the old key is dropped).\n * - `activate.POST` `{ approval }`: checks the approval is for this user's\n *   smart account and for exactly the key, scope and expiry issued in\n *   `prepare`, then stores it. 409 `SESSION_NONE` when nothing is pending,\n *   410 `SESSION_EXPIRED` for an expired offer, 400 `SESSION_APPROVAL_MISMATCH`.\n * - `status.GET`: `{ active: false }` or `{ active: true, validUntil, ... }`.\n *   Never returns the session key or approval.\n * - `act.POST`: signs ONE sponsored UserOperation with the session key. 409\n *   `SESSION_NONE` without a live session, 429 while another action runs.\n * - `revoke.POST`: deletes the session key and approval from the server, so\n *   the app can no longer act, immediately. It does NOT uninstall the\n *   permission on-chain: that grant stays valid until its expiry, but only the\n *   deleted key can use it and only within the scope. An on-chain uninstall is\n *   an owner-signed call to the user's own account, which a paymaster\n *   destination allowlist rightly does not sponsor.\n *\n * Gas: the paymaster policy service reserves worst-case cost per operation:\n * about 20.5 PEPU for a session's first operation and about 6.9 PEPU for later\n * ones (`SESSION_GAS_RESERVATION_PEPU`). Size spend caps above that. Fees come\n * from the chain with 20% headroom.\n *\n * @example\n * // lib/session-routes.ts\n * export const routes = createSponsoredSessionRoutes({\n *   scope: { calls: [{ target: tapScore, abi: tapScoreAbi, functionName: \"tap\" }] },\n *   store: createMemoryStore(), // DEV ONLY\n *   act: {\n *     parse: () => ({}),\n *     buildCalls: () => [{ to: tapScore, abi: tapScoreAbi, functionName: \"tap\" }],\n *   },\n * });\n * // app/api/session/prepare/route.ts: export const { POST } = routes.prepare;\n */\nexport function createSponsoredSessionRoutes<I>(o: SponsoredSessionRoutesOptions<I>): SponsoredSessionRoutes {\n  // A call whose target is empty or undefined (an unset env variable) is \"not configured yet\":\n  // every route then answers CONFIG_MISSING_ENV at request time. A malformed non-empty scope\n  // still fails at startup, not on the first request.\n  const unconfigured = o.scope.calls.some((c) => !c.target || String(c.target).trim() === \"\");\n  if (unconfigured) {\n    const unset = async (): Promise<Response> =>\n      toErrorResponse(\n        new PepuConfigError(\n          \"CONFIG_MISSING_ENV\",\n          `${o.scope.targetEnv ?? \"A session target contract address\"} is not set to a valid address. See .env.example.`,\n          { hint: \"Set it and restart the server.\" },\n        ),\n      );\n    return {\n      prepare: { POST: unset },\n      activate: { POST: unset },\n      status: { GET: unset },\n      act: { POST: unset },\n      revoke: { POST: unset },\n    };\n  }\n  buildKernelSessionPolicies({ calls: o.scope.calls, validUntil: 1 });\n  let publicClient = o.publicClient;\n  const client = (): PublicClient => (publicClient ??= defaultPublicClient());\n\n  const wait = { attempts: o.provisioningWait?.attempts ?? 3, delayMs: o.provisioningWait?.delayMs ?? 400 };\n\n  /**\n   * Authenticate. A signed-in user whose wallet Privy's server does not list yet is looked up again (bounded), then\n   * reported as `PROVISIONING` so the caller decides: `status` makes it a normal state, the rest throw a retryable 409.\n   */\n  const authenticateOrProvisioning = async (request: Request): Promise<ComboUser | Response | typeof PROVISIONING> => {\n    if (o.authenticate) {\n      const user = await o.authenticate(request);\n      if (!user) throw new PepuAuthError(\"AUTH_INVALID_TOKEN\", \"Missing or invalid Privy access token.\");\n      return user;\n    }\n    const privy = o.privy ?? createPrivyServer();\n    for (let attempt = 0; ; attempt++) {\n      const auth = await requireUser(request, { privy });\n      if (!auth.ok) return auth.response;\n      if (auth.user.address) return { userId: auth.user.userId, ownerAddress: auth.user.address };\n      if (attempt >= wait.attempts) return PROVISIONING;\n      await new Promise((resolve) => setTimeout(resolve, wait.delayMs * (attempt + 1)));\n    }\n  };\n\n  const authenticate = async (request: Request): Promise<ComboUser | Response> => {\n    const user = await authenticateOrProvisioning(request);\n    if (user === PROVISIONING) {\n      throw new PepuAuthError(\n        \"WALLET_NOT_PROVISIONED\",\n        \"Your wallet is still being set up. This usually takes a few seconds; retrying.\",\n        { status: 409, retryable: true },\n      );\n    }\n    return user;\n  };\n\n  const minutes = (): number => o.minutes ?? resolveSessionMinutes(process.env.SESSION_DURATION_MINUTES);\n  const policiesFor = (validUntil: number) => buildKernelSessionPolicies({ calls: o.scope.calls, validUntil });\n\n  return {\n    prepare: {\n      POST: (request) =>\n        guard(\"combo prepare\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const { userId, ownerAddress } = user;\n          const mins = minutes();\n          const validUntil = sessionExpiry(nowSeconds(), mins);\n          const key = generateSessionKey();\n          const policies = policiesFor(validUntil);\n          const [kernelAddress, permissionId] = await Promise.all([\n            getKernelAddress(client(), ownerAddress),\n            expectedPermissionId({ publicClient: client(), sessionKeyAddress: key.address, policies }),\n          ]);\n          const record: SessionRecord = {\n            userId,\n            ownerAddress,\n            kernelAddress,\n            sessionPrivateKey: key.privateKey,\n            sessionKeyAddress: key.address,\n            permissionId,\n            validUntil,\n            approval: null,\n            actions: 0,\n          };\n          await o.store.set(record);\n          return json({\n            ownerAddress,\n            kernelAddress,\n            sessionKeyAddress: key.address,\n            validUntil,\n            minutes: mins,\n            scope: describeKernelSessionScope({ calls: o.scope.calls, validUntil }),\n          });\n        }),\n    },\n\n    activate: {\n      POST: (request) =>\n        guard(\"combo activate\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const body = (await request.json().catch(() => null)) as { approval?: unknown } | null;\n          if (typeof body?.approval !== \"string\") {\n            throw new PepuPolicyError(\"UNKNOWN\", \"Missing approval.\", { status: 400, hint: \"Send { approval }.\" });\n          }\n          const record = await o.store.get(user.userId);\n          if (!record || record.approval !== null) {\n            throw new PepuSessionError(\"SESSION_NONE\", \"No pending session. Start again.\");\n          }\n          if (nowSeconds() >= record.validUntil) {\n            await o.store.delete(record.userId);\n            throw new PepuSessionError(\"SESSION_EXPIRED\", \"The session offer expired. Start again.\");\n          }\n          const check = checkApproval(body.approval, {\n            kernelAddress: record.kernelAddress,\n            permissionId: record.permissionId,\n          });\n          if (!check.ok) throw new PepuSessionError(\"SESSION_APPROVAL_MISMATCH\", check.reason, { status: 400 });\n          await o.store.set({ ...record, approval: body.approval });\n          return json({ active: true, validUntil: record.validUntil });\n        }),\n    },\n\n    status: {\n      GET: (request) =>\n        guard(\"combo status\", async () => {\n          const user = await authenticateOrProvisioning(request);\n          if (user instanceof Response) return user;\n          if (user === PROVISIONING) return json({ active: false, provisioning: true });\n          const record = await o.store.get(user.userId);\n          if (!record || !isLive(record, nowSeconds())) return json({ active: false });\n          return json({\n            active: true,\n            validUntil: record.validUntil,\n            kernelAddress: record.kernelAddress,\n            ownerAddress: record.ownerAddress,\n            sessionKeyAddress: record.sessionKeyAddress,\n            actions: record.actions,\n          });\n        }),\n    },\n\n    act: {\n      POST: (request) =>\n        guard(\"combo act\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          const record = await o.store.get(user.userId);\n          if (!record || !record.approval || !isLive(record, nowSeconds())) {\n            throw new PepuSessionError(\"SESSION_NONE\", \"No active session. Start one first.\");\n          }\n\n          let input: I;\n          try {\n            input = o.act.parse(await request.json().catch(() => ({})));\n          } catch (e) {\n            throw new PepuPolicyError(\"UNKNOWN\", e instanceof Error ? e.message : \"Invalid request body.\", {\n              status: 400,\n              hint: \"Fix the request body.\",\n              cause: e,\n            });\n          }\n          const calls = o.act.buildCalls(input, {\n            kernelAddress: record.kernelAddress,\n            ownerAddress: record.ownerAddress,\n          });\n          // Fail fast; the chain is the real enforcement (see the file comment).\n          assertCallsInScope(describeKernelSessionScope({ calls: o.scope.calls, validUntil: record.validUntil }), calls);\n\n          if (!(await o.store.tryLock(user.userId))) {\n            throw new PepuChainError(\"UNKNOWN\", \"An action is already in flight.\", {\n              status: 429,\n              retryable: true,\n              hint: \"Wait for the current action to finish.\",\n            });\n          }\n          const privyToken = o.forwardPrivyToken === false ? \"\" : bearerToken(request);\n          try {\n            const account = await loadKernelSessionAccount({\n              publicClient: client(),\n              approval: record.approval,\n              sessionPrivateKey: record.sessionPrivateKey,\n            });\n            const kernel = createPepuSponsoredClient({\n              account,\n              publicClient: client(),\n              ...(o.endpoints?.bundlerUrl !== undefined ? { bundlerUrl: o.endpoints.bundlerUrl } : {}),\n              ...(o.endpoints?.paymasterUrl !== undefined ? { paymasterUrl: o.endpoints.paymasterUrl } : {}),\n              ...(o.endpoints?.paymasterToken !== undefined ? { paymasterToken: o.endpoints.paymasterToken } : {}),\n              ...(privyToken ? { paymasterContext: buildPaymasterContext({ privyAccessToken: privyToken }) } : {}),\n            });\n            const result = await sendSponsored({ client: kernel, calls });\n            const actions = record.actions + (result.success ? 1 : 0);\n            if (result.success) await o.store.set({ ...record, actions });\n            const out: SponsoredActResult = {\n              userOpHash: result.userOpHash,\n              transactionHash: result.transactionHash,\n              kernelAddress: record.kernelAddress,\n              success: result.success,\n              paymaster: result.paymaster,\n              actualGasCostWei: result.actualGasCostWei.toString(),\n              explorerUrl: result.explorerUrl,\n              actions,\n            };\n            return json(out);\n          } finally {\n            await o.store.unlock(user.userId);\n          }\n        }),\n    },\n\n    revoke: {\n      POST: (request) =>\n        guard(\"combo revoke\", async () => {\n          const user = await authenticate(request);\n          if (user instanceof Response) return user;\n          await o.store.delete(user.userId);\n          return json({ active: false });\n        }),\n    },\n  };\n}\n\n/**\n * Throws `POLICY_UNSCOPED` (403) unless every call targets an allowed contract\n * and function selector with a value within the limit. Pure; used by the act\n * route and exported for custom routes.\n *\n * @example\n * assertCallsInScope(describeKernelSessionScope({ calls, validUntil }), [{ to, abi, functionName: \"tap\" }]);\n */\nexport function assertCallsInScope(scope: Pick<KernelSessionScope, \"calls\">, calls: readonly Call[]): void {\n  for (const c of normalizeCalls(calls)) {\n    if (!isCallInScope(scope, c)) {\n      throw new PepuPolicyError(\"POLICY_UNSCOPED\", \"A call is outside the session scope.\", {\n        status: 403,\n        hint: \"Only the contracts and functions the user approved can be called.\",\n      });\n    }\n  }\n}\n"]}