@seedprotocol/publish 0.4.30 → 0.4.31

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 All notable changes to this project will be documented in this file.
 
+## 0.4.31
+
+### Fixed
+
+- **First-time modular publish:** Restored automatic session-signer provisioning (`ensureManagedSignerSessionKey`) and unified modular bootstrap (`ensureModularPublishBootstrap`: signer → `setEas` → optional EIP-7702 fallback).
+- **First-time non-modular publish:** `createAttestations` now runs `ensureManagedAccountEasConfigured` before `multiPublish` when `useModularExecutor` is false (required since v0.4.23 per-account routing).
+- **EIP-7702 bootstrap:** `ensureEip7702ModularAccountReady` polls for on-chain bytecode after `deploySmartAccount` timeout before failing.
+
+### Added
+
+- **`ensureManagedSignerSessionKey`**, **`ensureModularPublishBootstrap`:** Exported helpers for custom publish entrypoints.
+- **`MODULAR_SIGNER_ACTIVATION_FAILED`:** New `ManagedAccountPublishError` code when session-key setup fails.
+
 ## 0.4.24
 
 ### Added

package/README.md

@@ -160,9 +160,13 @@ When **`useModularExecutor`** is enabled, `multiPublish` is sent **from** the us
 
 **Managed account:** `runModularExecutorPublishPrep()` still ensures the **EIP-4337 managed** publishing contract exists on Optimism Sepolia (and optionally installs the executor module). That is separate from the modular wallet’s EIP-7702 upgrade.
 
-Before the first `multiPublish` on that path, `createAttestations` runs **`ensureManagedAccountEasConfigured`**: it reads **`getEas`** on the ManagedAccount and, if the stored address is zero or does not match **`getPublishConfig().easContractAddress`**, sends **`setEas`** (signed by the same modular EIP-7702 account as `multiPublish`) and waits for the receipt. You can call **`ensureManagedAccountEasConfigured(managedAddress, modularAccount)`** yourself if you build a custom publish entrypoint.
+Before the first `multiPublish` on that path, `createAttestations` runs **`ensureModularPublishBootstrap`**, which:
 
-**Diagnostic helper:** **`defaultApprovedTargetsForModularPublish(managedAddress)`** remains exported for apps that build custom permission flows; the publish package no longer provisions session signers on the managed account automatically.
+1. Provisions the modular wallet as a **session signer** on the ManagedAccount (`ensureManagedSignerSessionKey` — `addSessionKey` signed by the managed EIP-4337 wallet when needed).
+2. Ensures the ManagedAccount EAS pointer matches config (`ensureManagedAccountEasConfigured`).
+3. Falls back to **`ensureEip7702ModularAccountReady`** only when session-key setup fails and `autoDeployEip7702ModularAccount` is enabled.
+
+**Diagnostic helper:** **`defaultApprovedTargetsForModularPublish(managedAddress)`** remains exported for apps that build custom permission flows.
 
 **Resolved config:** Use **`getPublishConfig()`** after `initPublish` / `PublishProvider` for **`autoDeployEip7702ModularAccount`** and other resolved defaults—not only `usePublishConfig()`, which returns the raw `PublishConfig` object.
 

package/dist/config-B4_sw4Ey.js

@@ -0,0 +1,442 @@
+import { DEFAULT_ARWEAVE_GRAPHQL_URL as e, VERSION_SCHEMA_UID_OPTIMISM_SEPOLIA as t, getAttesterForSeed as n, getGetAdditionalSyncAddresses as r, getMetadataAttestationUidsForSeedUid as i, getVersionsForSeedUid as a, isValidEasAttestationUid as o, setAdditionalSyncAddresses as s, setGetPublisherForNewSeeds as c, setRevokeExecutor as l, updateSeedRevokedAt as ee } from "@seedprotocol/sdk";
+import { createThirdwebClient as u, deploySmartAccount as d, getContract as f, parseEventLogs as p, prepareContractCall as m, prepareEvent as h, readContract as g, sendTransaction as te, waitForReceipt as ne } from "thirdweb";
+import { createWallet as _, inAppWallet as v } from "thirdweb/wallets";
+import { useActiveAccount as y } from "thirdweb/react";
+import { isContractDeployed as re } from "thirdweb/utils";
+import { useEffect as b, useRef as ie, useState as x } from "react";
+import { optimismSepolia as S } from "thirdweb/chains";
+import ae from "debug";
+import { encodeAbiParameters as oe } from "viem";
+//#region src/helpers/constants.ts
+var C = "0x4200000000000000000000000000000000000020", w = "0x44d562ac1d7cd77e232978687fea027ace48f719cf1d58c7888e509663bb87fc", T = "0x76f47d88bfaf670f5208911181fcdc0e160cb16d", E = "0x4200000000000000000000000000000000000021", D = "0xcd8c945872df8e664e55cf8885c85ea3ea8f2148", se = D, ce = {
+	SUCCESS: "success",
+	FAILURE: "failure"
+}, le = [
+	"pollingForConfirmation",
+	"uploadingData",
+	"uploadingViaBundler",
+	"uploadingViaBundlerPhase2"
+], ue = 3e4;
+//#endregion
+//#region src/helpers/thirdweb/11155420/0x76f47d88bfaf670f5208911181fcdc0e160cb16d.ts
+async function de(e) {
+	return g({
+		contract: e.contract,
+		method: [
+			"0x8878ed33",
+			[{
+				type: "address",
+				name: "_adminSigner"
+			}, {
+				type: "bytes",
+				name: "_data"
+			}],
+			[{ type: "address" }]
+		],
+		params: [e.adminSigner, e.data]
+	});
+}
+//#endregion
+//#region src/helpers/thirdweb.ts
+var fe = ae("permaPress:helpers:thirdweb"), O = "seedProtocol:inAppPublish:", k = null;
+function A() {
+	return k ||= {
+		getItem: async (e) => typeof window > "u" ? null : localStorage.getItem(O + e),
+		setItem: async (e, t) => {
+			typeof window > "u" || localStorage.setItem(O + e, t);
+		},
+		removeItem: async (e) => {
+			typeof window > "u" || localStorage.removeItem(O + e);
+		}
+	}, k;
+}
+var j = null;
+function M() {
+	if (!j) {
+		let { thirdwebClientId: e } = $();
+		j = u({ clientId: e });
+	}
+	return j;
+}
+var pe = [_("io.metamask")], N = () => {
+	let [e, t] = x(null);
+	return _("io.metamask"), ie(!1), b(() => {}, []), e;
+}, P = () => {
+	let e = y(), [t, n] = x(null);
+	return b(() => {
+		!e || !e.address || n(f({
+			client: M(),
+			chain: S,
+			address: e.address
+		}));
+	}, [e]), t;
+}, F = () => {
+	let { thirdwebAccountFactoryAddress: e } = $();
+	return f({
+		client: M(),
+		chain: S,
+		address: e
+	});
+};
+async function I(e, t = "0x") {
+	return de({
+		contract: F(),
+		adminSigner: e,
+		data: t
+	});
+}
+async function L(e) {
+	return re(f({
+		client: M(),
+		chain: S,
+		address: e
+	}));
+}
+var R = 5, z = 6e3;
+async function B(e, t = R, n = z) {
+	for (let r = 0; r < t; r++) {
+		if (await L(e)) return !0;
+		r < t - 1 && await new Promise((e) => {
+			setTimeout(e, n);
+		});
+	}
+	return !1;
+}
+async function me(e) {
+	if (!e) return { needsDeploy: !0 };
+	if (await L(e.address)) return {
+		address: e.address,
+		account: e
+	};
+	let t = await I(e.address);
+	return await L(t) ? {
+		address: t,
+		account: e
+	} : { needsDeploy: !0 };
+}
+var he = [_("io.metamask"), _("me.rainbow")], ge = async (e) => {
+	let t = f({
+		client: M(),
+		chain: S,
+		address: e.address
+	}), n = await d({
+		smartAccount: e,
+		chain: S,
+		client: M(),
+		accountContract: t
+	});
+	return fe("deploySmartAccount result:", n), n;
+}, _e = {
+	name: "Seed Protocol",
+	description: "Seed Protocol",
+	url: "https://seedprotocol.io"
+};
+async function V(e = S) {
+	let t = W();
+	await t.autoConnect({
+		client: M(),
+		chain: e
+	});
+	let n = t.getAccount();
+	if (!n) throw Error("Failed to get managed account");
+	return n.address;
+}
+async function H() {
+	try {
+		let e = K();
+		return await e.autoConnect({
+			client: M(),
+			chain: S
+		}), e.getAccount() ?? null;
+	} catch {
+		return null;
+	}
+}
+async function ve() {
+	return H();
+}
+var U = null, W = () => (U ||= v({
+	storage: A(),
+	auth: { options: [
+		"farcaster",
+		"email",
+		"passkey",
+		"phone"
+	] },
+	executionMode: {
+		mode: "EIP4337",
+		smartAccount: {
+			chain: S,
+			factoryAddress: T,
+			gasless: !0
+		}
+	}
+}), U), G = null, K = () => (G ||= v({
+	storage: A(),
+	auth: { options: [
+		"farcaster",
+		"email",
+		"passkey",
+		"phone"
+	] },
+	executionMode: {
+		mode: "EIP7702",
+		sponsorGas: !0
+	}
+}), G), q = null, ye = () => (q ||= $().useModularExecutor ? [K()] : [W()], q), be = [
+	{
+		type: "error",
+		name: "AccessDenied",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "AlreadyRevoked",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "InvalidRevocation",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "InvalidRevocations",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "InvalidSchema",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "Irrevocable",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "NotFound",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "NotPayable",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "InsufficientValue",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "InvalidLength",
+		inputs: []
+	}
+], xe = () => h({ signature: "event Attested(address indexed recipient, address indexed attester, bytes32 uid, bytes32 indexed schemaUID)" }), J = "0x" + "0".repeat(64);
+function Se(e, t, n) {
+	let { easContractAddress: r } = $();
+	return m({
+		contract: f({
+			client: e,
+			chain: t,
+			address: r
+		}),
+		method: "function attest((bytes32 schema,(address recipient,uint64 expirationTime,bool revocable,bytes32 refUID,bytes data,uint256 value) data) request) payable returns (bytes32)",
+		params: [{
+			schema: n.schema,
+			data: {
+				recipient: n.data.recipient ?? "0x0000000000000000000000000000000000000000",
+				expirationTime: n.data.expirationTime ?? 0n,
+				revocable: n.data.revocable ?? !0,
+				refUID: n.data.refUID,
+				data: n.data.data,
+				value: n.data.value ?? 0n
+			}
+		}]
+	});
+}
+function Ce(e, t, n) {
+	let { easContractAddress: r } = $();
+	return m({
+		contract: f({
+			client: e,
+			chain: t,
+			address: r
+		}),
+		method: "function multiAttest((bytes32 schema,(address recipient,uint64 expirationTime,bool revocable,bytes32 refUID,bytes data,uint256 value)[] data)[] requests) payable returns (bytes32[])",
+		params: [n]
+	});
+}
+function we(e) {
+	return oe([{ type: "bytes32" }], [e]);
+}
+function Te(e, t) {
+	return Y(e, t)[0]?.uid;
+}
+function Y(e, t) {
+	if (!e.logs?.length) return [];
+	let n = t.toLowerCase(), r = e.logs.filter((e) => e.address && e.address.toLowerCase() === n);
+	if (!r.length) return [];
+	try {
+		let e = p({
+			logs: r,
+			events: [xe()],
+			strict: !1
+		}), t = [];
+		for (let n of e) {
+			let e = n?.args?.uid, r = n?.args?.schemaUID;
+			!e || e === J || r && t.push({
+				schemaUid: r,
+				uid: e
+			});
+		}
+		return t;
+	} catch {
+		return [];
+	}
+}
+function Ee(e, t, n) {
+	let { easContractAddress: r } = $();
+	return m({
+		contract: f({
+			client: e,
+			chain: t,
+			address: r,
+			abi: [...be]
+		}),
+		method: "function multiRevoke((bytes32 schema,(bytes32 uid,uint256 value)[] data)[] multiRequests) payable",
+		params: [n.map((e) => ({
+			schema: e.schema,
+			data: e.data.map((e) => ({
+				uid: e.uid,
+				value: e.value ?? 0n
+			}))
+		}))]
+	});
+}
+//#endregion
+//#region src/helpers/resolveRevokeAccount.ts
+async function X(e) {
+	let { account: t, attester: n } = e;
+	if (!n || t.address.toLowerCase() === n.toLowerCase()) return t;
+	let i = r();
+	if (i) {
+		let e = await i(), t = n.toLowerCase();
+		if (e?.some((e) => e?.toLowerCase() === t)) throw Error("Revocation not supported for items published via the modular executor.");
+	}
+	try {
+		let e = await I(t.address);
+		if (n.toLowerCase() === e.toLowerCase() && await L(e)) {
+			let e = W();
+			await e.autoConnect({
+				client: M(),
+				chain: S
+			});
+			let t = e.getAccount();
+			if (t) return t;
+		}
+	} catch {}
+	return t;
+}
+//#endregion
+//#region src/services/revoke/revokeAttestations.ts
+async function De(e) {
+	let { seedLocalId: r, seedUid: s, seedSchemaUid: c } = e, l = await H();
+	if (!l) throw Error("No wallet connected. Connect a wallet to revoke attestations.");
+	let u = await X({
+		account: l,
+		attester: await n({
+			seedLocalId: r,
+			seedUid: s
+		})
+	}), d = M(), [f, p] = await Promise.all([a(s), i(s)]), m = f.map((e) => e.uid).filter((e) => o(e)), h = /* @__PURE__ */ new Map();
+	for (let { uid: e, schemaUid: t } of p) {
+		if (!o(e)) continue;
+		let n = h.get(t) ?? [];
+		n.push(e), h.set(t, n);
+	}
+	let g = [];
+	for (let [e, t] of h) t.length > 0 && g.push({
+		schema: e,
+		data: t.map((e) => ({ uid: e }))
+	});
+	m.length > 0 && g.push({
+		schema: t,
+		data: m.map((e) => ({ uid: e }))
+	}), g.push({
+		schema: c,
+		data: [{ uid: s }]
+	});
+	for (let e of g) {
+		if (e.data.length === 0) continue;
+		let t = Ee(d, S, [e]);
+		try {
+			await ne({
+				client: d,
+				chain: S,
+				transactionHash: (await te({
+					account: u,
+					transaction: t
+				})).transactionHash
+			});
+		} catch (e) {
+			let t = e instanceof Error ? e.message : String(e);
+			if (t.includes("AccessDenied") || t.includes("0x4ca88867")) throw Error("Only the original attester can revoke attestations. Connect the wallet that published this item.");
+			if (t.includes("AlreadyRevoked")) continue;
+			throw e;
+		}
+	}
+	await ee({
+		seedLocalId: r,
+		revokedAt: Math.floor(Date.now() / 1e3)
+	});
+}
+//#endregion
+//#region src/config.ts
+var Z = null;
+function Oe(e) {
+	Z = e;
+}
+function ke() {
+	return Z;
+}
+function Q(e) {
+	Oe(e), c(async () => {
+		try {
+			return await V(S);
+		} catch {
+			return;
+		}
+	}), l(De), import("./worker-CaUA-aJd.js").then((e) => {
+		e.startArweaveL1FinalizeWorker();
+	}), s(async () => e.useModularExecutor && e.modularAccountModuleContract ? [e.modularAccountModuleContract] : []);
+}
+var Ae = Q;
+function $() {
+	let t = Z;
+	if (!t) throw Error("@seedprotocol/publish: Call initPublish() or ensure PublishProvider is mounted with config before using the publish package");
+	let n = t.useArweaveBundler ?? !1, r = t.arweaveUploadVerificationBaseUrl ?? t.uploadApiBaseUrl, i = t.arweaveGraphqlUrl ?? e, a = t.useModularExecutor ?? !1;
+	return {
+		...t,
+		thirdwebAccountFactoryAddress: T,
+		easContractAddress: E,
+		useIntegerLocalIds: t.useIntegerLocalIds ?? !1,
+		useDirectEas: t.useDirectEas ?? !1,
+		modularAccountModuleData: t.modularAccountModuleData ?? "0x",
+		useModularExecutor: a,
+		useArweaveBundler: n,
+		arweaveUploadVerificationBaseUrl: r,
+		arweaveGraphqlUrl: i,
+		autoDeployManagedAccount: t.autoDeployManagedAccount ?? !1,
+		autoDeployEip7702ModularAccount: je(t, a)
+	};
+}
+function je(e, t) {
+	return e.autoDeployEip7702ModularAccount === !0 ? !0 : e.autoDeployEip7702ModularAccount === !1 ? !1 : t;
+}
+//#endregion
+export { E as A, ye as C, P as D, me as E, ce as F, C as I, se as L, le as M, D as N, N as O, ue as P, I as S, B as T, ve as _, J as a, K as b, Y as c, he as d, _e as f, V as g, H as h, Q as i, w as j, pe as k, Se as l, M as m, ke as n, we as o, ge as p, $ as r, Te as s, Ae as t, Ce as u, F as v, L as w, A as x, W as y };
+
+//# sourceMappingURL=config-B4_sw4Ey.js.map