@seedprotocol/publish 0.6.7 → 0.6.8

package/dist/thirdweb.js

@@ -1,58 +1,58 @@
-import { a as e, b as t, i as n, n as r, o as i, r as a, s as o, v as s } from "./config-BA9la8B6.js";
-import { o as c, r as l } from "./errors-Du3LNbJN.js";
-import { A as u, C as d, D as f, E as ee, F as p, H as m, I as h, L as g, M as _, N as te, O as v, P as y, Q as b, R as x, S, T as C, U as w, V as ne, Z as re, a as ie, b as ae, d as oe, f as se, h as T, j as E, k as D, l as O, m as k, p as A, u as j, w as M, x as N, y as P, z as F } from "./publishAuthorization-DgdmgLTa.js";
-import { t as I } from "./ensureSmartWalletThenPublish-Bmm5Fpat.js";
-import { a as L, i as R, r as z, t as B } from "./ensureModularPublishBootstrap-C8wdnH1P.js";
-import { i as V, r as H, t as U } from "./ensureAutomationSessionKey-DKriW4Hr.js";
-import { client as W } from "@seedprotocol/sdk";
-import { getContract as G } from "thirdweb";
-import { optimismSepolia as K } from "thirdweb/chains";
-import { useCallback as ce, useEffect as q, useRef as J } from "react";
-import { jsx as Y } from "react/jsx-runtime";
-import { SeedProvider as le } from "@seedprotocol/react";
-import { ConnectButton as ue, ThirdwebProvider as de, darkTheme as fe, useActiveAccount as pe, useActiveWallet as me, useActiveWalletConnectionStatus as he, useIsAutoConnecting as ge } from "thirdweb/react";
-import { getInstalledModules as _e } from "thirdweb/modules";
-import { assessPublishAuthorization as ve, decodePublishAuthorizationData as ye, getPublishAuthorizationFromEas as be } from "@seedprotocol/eas";
+import { $ as e, A as t, O as n, _ as r, a as i, ct as a, h as o, m as s, o as c, ot as l, p as u, s as d, st as f, t as p } from "./chainConfig-BYm5OXpk.js";
+import { n as m, r as h } from "./errors-Du3LNbJN.js";
+import { $ as ee, A as g, B as _, C as v, D as y, E as b, F as x, H as te, I as S, L as C, M as w, N as T, O as E, P as ne, R as re, S as ie, T as ae, U as oe, W as se, a as ce, d as le, et as D, f as ue, h as O, j as de, k as fe, l as pe, m as k, p as A, u as j, w as M, x as N, y as P, z as F } from "./publishAuthorization-CxBkijU6.js";
+import { t as I } from "./publishThirdwebClient-BnDhP3N-.js";
+import { t as L } from "./ensureSmartWalletThenPublish-DAomriGc.js";
+import { t as R } from "./ensureModularPublishBootstrap-BW8jKN_A.js";
+import { i as z, r as B, t as V } from "./ensureAutomationSessionKey-CClLVX2w.js";
+import { client as H } from "@seedprotocol/sdk";
+import { deploySmartAccount as me, getContract as U, sendTransaction as he } from "thirdweb";
+import { assessPublishAuthorization as ge, decodePublishAuthorizationData as _e, getPublishAuthorizationFromEas as ve } from "@seedprotocol/eas";
+import { useCallback as ye, useEffect as W, useRef as G } from "react";
+import { jsx as K } from "react/jsx-runtime";
+import { SeedProvider as be } from "@seedprotocol/react";
+import { ConnectButton as xe, ThirdwebProvider as Se, darkTheme as Ce, useActiveAccount as we, useActiveWallet as Te, useActiveWalletConnectionStatus as Ee, useIsAutoConnecting as De } from "thirdweb/react";
+import { addSessionKey as Oe, shouldUpdateSessionKey as ke } from "thirdweb/extensions/erc4337";
 //#region src/react/ConnectButton.tsx
-var X = "seedProtocol:publish:userChoseWalletDisconnect";
-function xe(e) {
-	console.warn("[ConnectButton] Wallet setup / module install skipped:", e), a().onWalletSetupWarning?.(e);
+var q = "seedProtocol:publish:userChoseWalletDisconnect";
+function Ae(e) {
+	console.warn("[ConnectButton] Wallet setup / module install skipped:", e), c().onWalletSetupWarning?.(e);
 }
-function Se() {
-	return W.isInitialized() ? Promise.resolve() : new Promise((e) => {
-		W.onReady(() => e());
+function je() {
+	return H.isInitialized() ? Promise.resolve() : new Promise((e) => {
+		H.onReady(() => e());
 	});
 }
-async function Z(e, t, n) {
+async function Me(e, t, n) {
 	if (n.modularAccountModuleContract) {
 		if (n.useModularExecutor) {
 			if (!t) return;
 			try {
-				F();
-				let e = E();
+				_();
+				let e = w();
 				await e.autoConnect({
-					client: f(),
-					chain: K
+					client: I(),
+					chain: r(n)
 				});
-				let r = e.getAccount();
-				if (!r) return;
-				await S(t, r, n);
+				let i = e.getAccount();
+				if (!i) return;
+				await M(t, i, n);
 			} catch {}
 			return;
 		}
 		try {
-			await S(e.address, e, n);
+			await M(e.address, e, n);
 		} catch (e) {
-			xe(e);
+			Ae(e);
 		}
 	}
 }
-var Ce = () => {
-	let e = b(), n = me(), r = pe(), i = he(), a = ge(), c = J(null), l = J(!1), u = J(!1);
-	q(() => {
+var Ne = () => {
+	let e = D(), i = r(e), a = Te(), s = we(), c = Ee(), l = De(), u = G(null), d = G(!1), f = G(!1);
+	W(() => {
 		if (typeof window > "u") return;
-		let t = l.current;
-		l.current = a;
+		let t = d.current;
+		d.current = l;
 		let n;
 		try {
 			n = performance.getEntriesByType("navigation")[0]?.type;
@@ -62,102 +62,103 @@ var Ce = () => {
 		if (n !== "reload") return;
 		let r = !1;
 		try {
-			r = sessionStorage.getItem(X) === "1";
+			r = sessionStorage.getItem(q) === "1";
 		} catch {
 			r = !1;
 		}
-		r || t && !a && i === "disconnected" && (u.current || (u.current = !0, (e.useModularExecutor ? _() : E()).autoConnect({
-			client: f(),
-			chain: K
+		r || t && !l && c === "disconnected" && (f.current || (f.current = !0, (e.useModularExecutor ? T() : w()).autoConnect({
+			client: I(),
+			chain: i
 		}).catch(() => {})));
 	}, [
-		i,
-		a,
-		e.useModularExecutor
+		c,
+		l,
+		e.useModularExecutor,
+		i
 	]);
-	let d = ce(async (n) => {
+	let p = ye(async (n) => {
 		let r = n.getAccount();
 		if (!r) return;
-		await Se(), T.stopAll();
-		let i = /* @__PURE__ */ new Set([r.address.toLowerCase()]), a;
+		await je(), O.stopAll();
+		let a = /* @__PURE__ */ new Set([r.address.toLowerCase()]), s;
 		if (e.useModularExecutor) {
-			F();
+			_();
 			let e = n.getAdminAccount?.()?.address ?? r.address, t = async () => {
 				try {
-					return await D(K);
+					return await g(i);
 				} catch {
 					try {
-						return await y(e);
+						return await x(e);
 					} catch {
 						return;
 					}
 				}
 			};
-			a = await t(), a ||= (await new Promise((e) => queueMicrotask(() => e())), await t()), a && i.add(a.toLowerCase());
+			s = await t(), s ||= (await new Promise((e) => queueMicrotask(() => e())), await t()), s && a.add(s.toLowerCase());
 		}
-		let s = [...i].sort().join(",");
-		if (c.current !== s) {
-			c.current = s;
+		let c = [...a].sort().join(",");
+		if (u.current !== c) {
+			u.current = c;
 			try {
 				let e = o(r);
 				await t({
 					...e,
-					ownedAddresses: [...i],
-					publisherAddress: a ?? r.address
+					ownedAddresses: [...a],
+					publisherAddress: s ?? r.address
 				});
 			} catch (e) {
-				throw c.current = null, console.warn("[ConnectButton] Failed to set seed client addresses:", e), e;
+				throw u.current = null, console.warn("[ConnectButton] Failed to set seed client addresses:", e), e;
 			}
-			await Z(r, a, e);
+			await Me(r, s, e);
 		}
 	}, [e]);
-	return q(() => {
-		if (a) return;
-		if (i !== "connected") {
-			c.current = null;
+	return W(() => {
+		if (l) return;
+		if (c !== "connected") {
+			u.current = null;
 			return;
 		}
-		if (!n) return;
+		if (!a) return;
 		let e = !1;
 		return (async () => {
 			try {
 				if (e) return;
-				await d(n);
+				await p(a);
 			} catch {}
 		})(), () => {
 			e = !0;
 		};
 	}, [
-		n,
-		r?.address,
-		i,
 		a,
-		d
-	]), /* @__PURE__ */ Y(ue, {
-		client: f(),
-		wallets: p(),
+		s?.address,
+		c,
+		l,
+		p
+	]), /* @__PURE__ */ K(xe, {
+		client: I(),
+		wallets: S(e),
 		autoConnect: !0,
-		chain: K,
-		chains: [K],
+		chain: i,
+		chains: [i],
 		onConnect: async (e, t) => {
 			let n = e.getAccount();
 			if (n) {
 				try {
-					sessionStorage.removeItem(X);
+					sessionStorage.removeItem(q);
 				} catch {}
 				console.log("[ConnectButton] Connected", n.address);
 				try {
-					await d(e);
+					await p(e);
 				} catch {}
 			}
 		},
 		onDisconnect: () => {
 			try {
-				sessionStorage.setItem(X, "1");
+				sessionStorage.setItem(q, "1");
 			} catch {}
-			s(), T.stopAll();
+			n(), O.stopAll();
 		},
-		theme: fe({ colors: {
+		theme: Ce({ colors: {
 			primaryButtonBg: "#1D2939",
 			primaryButtonText: "#FFFFFF",
 			secondaryButtonHoverBg: "#1D2939",
@@ -166,54 +167,129 @@ var Ce = () => {
 			borderColor: "#344054"
 		} })
 	});
-}, we = ({ children: e, config: t, queryClient: i, queryClientRef: a }) => (q(() => {
-	t && n(t);
-}, [t]), /* @__PURE__ */ Y(re.Provider, {
-	value: t ?? r(),
-	children: /* @__PURE__ */ Y(de, { children: /* @__PURE__ */ Y(le, {
-		queryClient: i,
-		queryClientRef: a,
+}, Pe = ({ children: e, config: t, queryClient: n, queryClientRef: r }) => (W(() => {
+	t && d(t);
+}, [t]), /* @__PURE__ */ K(ee.Provider, {
+	value: t ?? i(),
+	children: /* @__PURE__ */ K(Se, { children: /* @__PURE__ */ K(be, {
+		queryClient: n,
+		queryClientRef: r,
 		children: e
 	}) })
-}));
+})), Fe = "Modular (EIP-7702) wallet is not connected. Sign in with the same method and try again.", Ie = () => `Your modular account is not upgraded to an EIP-7702 smart account on ${p()} yet. Enable autoDeployEip7702ModularAccount in publish config or complete wallet setup, then retry.`, Le = () => `Automatic EIP-7702 smart account setup failed on ${p()}. Retry or reconnect your wallet.`, Re = "EIP-7702 upgrade was sent but on-chain bytecode was not detected yet. Wait a moment and retry.", J = 5;
+async function Y() {
+	let { autoDeployEip7702ModularAccount: e } = c(), t = T();
+	await t.autoConnect({
+		client: I(),
+		chain: r()
+	});
+	let n = t.getAccount();
+	if (!n) throw new m(Fe, "EIP7702_MODULAR_ACCOUNT_UNAVAILABLE");
+	let i = I(), a = U({
+		client: i,
+		chain: r(),
+		address: n.address
+	});
+	if (!await l(n.address)) {
+		if (!e) throw new m(Ie(), "EIP7702_MODULAR_NOT_UPGRADED", n.address);
+		try {
+			await me({
+				smartAccount: n,
+				chain: r(),
+				client: i,
+				accountContract: a
+			});
+		} catch (e) {
+			if (await f(n.address, J)) return;
+			throw new m(Le(), "EIP7702_MODULAR_DEPLOY_FAILED", n.address, e);
+		}
+		if (!await f(n.address, J)) throw new m(Re, "EIP7702_MODULAR_NOT_CONFIRMED", n.address);
+	}
+}
+//#endregion
+//#region src/helpers/defaultApprovedTargetsForModularPublish.ts
+function X(e) {
+	return k();
+}
+//#endregion
+//#region src/helpers/ensureManagedSignerSessionKey.ts
+var ze = () => `Could not connect the managed publishing account to authorize the modular signer on ${p()}. Reconnect and try again.`, Z = () => `Could not authorize the modular wallet as a session signer on your publishing account on ${p()}.`;
+async function Be(t) {
+	let { managedAddress: n, signerAddress: i } = t, o = w();
+	await o.autoConnect({
+		client: I(),
+		chain: r()
+	});
+	let s = o.getAccount();
+	if (!s) throw new h(ze(), "MODULAR_SIGNER_ACTIVATION_FAILED", n);
+	let c = U({
+		client: I(),
+		chain: r(),
+		address: n
+	}), l = {
+		approvedTargets: X(n),
+		nativeTokenLimitPerTransaction: 0
+	}, u = !1;
+	try {
+		u = await ke({
+			accountContract: c,
+			sessionKeyAddress: i,
+			newPermissions: l
+		});
+	} catch (e) {
+		throw new h(Z(), "MODULAR_SIGNER_ACTIVATION_FAILED", n, e);
+	}
+	if (u) try {
+		let e = Oe({
+			contract: c,
+			account: s,
+			sessionKeyAddress: i,
+			permissions: l
+		}), t = await he({
+			account: s,
+			transaction: e
+		});
+		await a(t.transactionHash);
+	} catch (e) {
+		throw new h(Z(), "MODULAR_SIGNER_ACTIVATION_FAILED", n, e);
+	}
+	let d = !1;
+	try {
+		d = await e(n, i);
+	} catch (e) {
+		throw new h(Z(), "MODULAR_SIGNER_ACTIVATION_FAILED", n, e);
+	}
+	if (!d) throw new h(Z(), "MODULAR_SIGNER_ACTIVATION_FAILED", n);
+}
 //#endregion
 //#region src/helpers/enrollPublishAutomation.ts
 async function Q(e) {
-	let t = E();
+	let t = w();
 	await t.autoConnect({
-		client: f(),
-		chain: K
+		client: I(),
+		chain: r()
 	});
 	let n = t.getAccount();
-	if (!n) throw new l("Could not connect the managed publishing account to enroll or revoke publish automation.", "MANAGED_ACCOUNT_UNAVAILABLE", e);
+	if (!n) throw new h("Could not connect the managed publishing account to enroll or revoke publish automation.", "MANAGED_ACCOUNT_UNAVAILABLE", e);
 	return n;
 }
 async function $(e, t) {
 	return t || o(await Q(e));
 }
-async function Te(e) {
-	let t = a(), n = t.modularAccountModuleContract?.trim();
-	if (!n) throw Error("@seedprotocol/publish: enrollPublishAutomation requires PublishConfig.modularAccountModuleContract");
-	let r = await Q(e);
-	try {
-		await S(e, r, t);
-	} catch (t) {
-		throw t instanceof l ? t : new l("Executor module setup failed for publish automation.", "EXECUTOR_MODULE_NOT_INSTALLED", e, t);
-	}
+async function Ve(e) {
+	let t = c();
+	if (!t.modularAccountModuleContract?.trim()) throw Error("@seedprotocol/publish: enrollPublishAutomation requires PublishConfig.modularAccountModuleContract");
+	let n = await Q(e);
 	try {
-		let t = G({
-			client: f(),
-			chain: K,
-			address: e
-		}), r = await _e({ contract: t }), i = n.toLowerCase();
-		if (!r.some((e) => e.implementation?.toLowerCase() === i)) throw new l("Executor module is not installed on the ManagedAccount (ModularCore required for automation grants).", "EXECUTOR_MODULE_NOT_INSTALLED", e);
+		await M(e, n, t);
 	} catch (t) {
-		throw t instanceof l ? t : c(t) ? new l("ManagedAccount is not ModularCore; cannot install the executor module required for automation grants.", "EXECUTOR_MODULE_NOT_INSTALLED", e, t) : new l("Could not verify executor module installation for publish automation.", "EXECUTOR_MODULE_NOT_INSTALLED", e, t);
+		throw t instanceof h ? t : new h("Executor module setup failed for publish automation.", "EXECUTOR_MODULE_NOT_INSTALLED", e, t);
 	}
+	await P(e);
 }
-async function Ee(e) {
+async function He(e) {
 	let { managedAddress: t, sessionKeyAddress: n, appAddress: r, expiresAt: i } = e;
-	await Te(t), await U({
+	await Ve(t), await V({
 		managedAddress: t,
 		sessionKeyAddress: n,
 		expiresAt: i
@@ -222,7 +298,7 @@ async function Ee(e) {
 	return {
 		managedAddress: t,
 		sessionKeyAddress: n,
-		authorization: await ie({
+		authorization: await ce({
 			wallet: a,
 			identity: t,
 			sessionKey: n,
@@ -231,19 +307,19 @@ async function Ee(e) {
 		})
 	};
 }
-async function De(e) {
+async function Ue(e) {
 	let { managedAddress: t, sessionKeyAddress: n, authorizationUid: r } = e, i = await $(t, e.userWallet);
-	await V({
+	await z({
 		managedAddress: t,
 		sessionKeyAddress: n
-	}), await O({
+	}), await pe({
 		wallet: i,
 		uid: r
 	});
 }
 //#endregion
 //#region src/helpers/assertStorageBoundToIdentity.ts
-async function Oe(e) {
+async function We(e) {
 	let { managedAddress: t, dataItemOwner: n, atTime: r, allowActiveSessionKey: i = !0, allowSidecar: a = !0 } = e, o = [], s = n.trim().toLowerCase(), c = t.trim().toLowerCase();
 	if (!/^0x[0-9a-fA-F]{40}$/.test(s) || !/^0x[0-9a-fA-F]{40}$/.test(c)) return {
 		bound: !1,
@@ -251,7 +327,7 @@ async function Oe(e) {
 		warnings: ["Invalid managedAddress or dataItemOwner"]
 	};
 	if (i) try {
-		if (await H(t, n)) return {
+		if (await B(t, n)) return {
 			bound: !0,
 			via: "active_session_key",
 			warnings: o
@@ -260,15 +336,15 @@ async function Oe(e) {
 		o.push(e instanceof Error ? e.message : "isActiveSigner check failed");
 	}
 	if (a) try {
-		let e = await be({
+		let e = await ve({
 			identities: [t],
 			sessionKeys: [n],
 			excludeRevoked: !0
 		}), i = r == null ? Date.now() : r * 1e3;
 		for (let t of e) try {
-			let e = ye(t.decodedDataJson ?? "[]");
+			let e = _e(t.decodedDataJson ?? "[]");
 			if (e.identity.toLowerCase() !== c || e.sessionKey.toLowerCase() !== s) continue;
-			let n = typeof t.expirationTime == "number" ? t.expirationTime : null, r = ve({
+			let n = typeof t.expirationTime == "number" ? t.expirationTime : null, r = ge({
 				decoded: e,
 				expirationTime: n,
 				now: i
@@ -290,6 +366,6 @@ async function Oe(e) {
 	};
 }
 //#endregion
-export { Ce as ConnectButton, d as ExternalWalletsForDeploy, j as PUBLISH_AUTOMATION_SCOPES, we as PublishProvider, M as appMetadata, k as approvedTargetsForAutomationPublish, e as asSeedSignerFromThirdweb, i as asThirdwebPublishWallet, Oe as assertStorageBoundToIdentity, oe as buildAutomationSessionKeyPermissions, R as defaultApprovedTargetsForModularPublish, C as deployManagedAccountViaFactory, ee as deploySmartWalletContract, Ee as enrollPublishAutomation, U as ensureAutomationSessionKey, L as ensureEip7702ModularAccountReady, S as ensureExecutorModuleInstalled, P as ensureManagedAccountReady, z as ensureManagedSignerSessionKey, B as ensureModularPublishBootstrap, I as ensureSmartWalletThenPublish, o as fromThirdwebAccount, f as getClient, v as getConnectedAccount, D as getConnectedManagedAccountAddress, u as getConnectedModularAccount, E as getManagedAccountWallet, _ as getModularAccountWallet, te as getSharedPublishInAppWalletStorage, y as getSmartWalletAddressForAdmin, p as getWalletsForConnectButton, se as hashAutomationSessionKeyPermissions, H as isAutomationSessionActive, h as isSmartWalletDeployed, g as pollSmartWalletDeployed, V as removeAutomationSessionKey, x as resolveSmartWalletForPublish, De as revokePublishAutomation, ae as runModularExecutorPublishPrep, A as toThirdwebSessionKeyPermissions, N as tryDeployManagedAccount, ne as useActiveSmartWalletContract, m as useLocalWalletAccount, b as usePublishConfig, w as wallets };
+export { Ne as ConnectButton, ae as ExternalWalletsForDeploy, j as PUBLISH_AUTOMATION_SCOPES, Pe as PublishProvider, b as appMetadata, k as approvedTargetsForAutomationPublish, u as asSeedSignerFromThirdweb, s as asThirdwebPublishWallet, We as assertStorageBoundToIdentity, le as buildAutomationSessionKeyPermissions, X as defaultApprovedTargetsForModularPublish, y as deployManagedAccountViaFactory, E as deploySmartWalletContract, He as enrollPublishAutomation, V as ensureAutomationSessionKey, Y as ensureEip7702ModularAccountReady, M as ensureExecutorModuleInstalled, N as ensureManagedAccountReady, Be as ensureManagedSignerSessionKey, R as ensureModularPublishBootstrap, L as ensureSmartWalletThenPublish, o as fromThirdwebAccount, I as getClient, fe as getConnectedAccount, g as getConnectedManagedAccountAddress, de as getConnectedModularAccount, w as getManagedAccountWallet, T as getModularAccountWallet, r as getPublishThirdwebChain, ne as getSharedPublishInAppWalletStorage, x as getSmartWalletAddressForAdmin, S as getWalletsForConnectButton, ue as hashAutomationSessionKeyPermissions, B as isAutomationSessionActive, C as isSmartWalletDeployed, re as pollSmartWalletDeployed, z as removeAutomationSessionKey, F as resolveSmartWalletForPublish, Ue as revokePublishAutomation, ie as runModularExecutorPublishPrep, A as toThirdwebSessionKeyPermissions, v as tryDeployManagedAccount, te as useActiveSmartWalletContract, oe as useLocalWalletAccount, D as usePublishConfig, se as wallets };
 
 //# sourceMappingURL=thirdweb.js.map

package/dist/thirdweb.js.map

@@ -1 +1 @@
-{"version":3,"file":"thirdweb.js","names":[],"sources":["../src/react/ConnectButton.tsx","../src/react/PublishProvider.thirdweb.tsx","../src/helpers/enrollPublishAutomation.ts","../src/helpers/assertStorageBoundToIdentity.ts"],"sourcesContent":["import React, { FC, useCallback, useEffect, useRef } from \"react\"\nimport {\n  ConnectButton as ConnectButtonThirdweb,\n  darkTheme,\n  useActiveAccount,\n  useActiveWallet,\n  useActiveWalletConnectionStatus,\n  useIsAutoConnecting,\n} from \"thirdweb/react\"\nimport { client as seedClient } from \"@seedprotocol/sdk\"\nimport {\n  getClient,\n  getConnectedManagedAccountAddress,\n  getManagedAccountWallet,\n  getModularAccountWallet,\n  getSmartWalletAddressForAdmin,\n  getWalletsForConnectButton,\n  syncPublishInAppAuthToken,\n} from \"../helpers/thirdweb\"\nimport { fromThirdwebAccount } from \"../helpers/adapters/thirdwebAccount\"\nimport { setPublishWallet, clearPublishWallet } from \"../helpers/publishWalletRegistry\"\nimport { usePublishConfig } from \"./PublishConfigContext\"\nimport { getPublishConfig } from \"../config\"\nimport { optimismSepolia } from \"thirdweb/chains\"\nimport type { Account, Wallet } from \"thirdweb/wallets\"\nimport type { PublishConfig } from \"../config\"\nimport { ensureExecutorModuleInstalled } from \"../helpers/ensureExecutorModule\"\nimport { PublishManager } from \"../services/publishManager\"\n\n/** Session flag so we do not force autoConnect after an explicit UI disconnect (survives reload). */\nconst USER_DISCONNECTED_SESSION_KEY = \"seedProtocol:publish:userChoseWalletDisconnect\"\n\nfunction reportWalletSetupWarning(err: unknown) {\n  // Expected when managed-wallet autoConnect is still catching up; publish prep retries.\n  console.warn(\"[ConnectButton] Wallet setup / module install skipped:\", err)\n  getPublishConfig().onWalletSetupWarning?.(err)\n}\n\n/** Resolves after `ClientManager.init()` has finished; `setAddresses` requires this. */\nfunction waitUntilSeedInitialized(): Promise<void> {\n  if (seedClient.isInitialized()) return Promise.resolve()\n  return new Promise((resolve) => {\n    seedClient.onReady(() => resolve())\n  })\n}\n\n/**\n * Executor module (ModularCore) must be installed on the **ManagedAccount** (EIP-4337) contract.\n * The EIP-7702 modular wallet contract does not expose Thirdweb's installModule / Router API;\n * calling it there reverts with \"Router: function does not exist.\"\n */\nasync function ensureExecutorModulesForConnect(\n  modularAccount: Account,\n  managedAddress: string | undefined,\n  config: PublishConfig,\n): Promise<void> {\n  if (!config.modularAccountModuleContract) {\n    return\n  }\n\n  if (config.useModularExecutor) {\n    if (!managedAddress) {\n      return\n    }\n    try {\n      syncPublishInAppAuthToken()\n      const mw = getManagedAccountWallet()\n      await mw.autoConnect({ client: getClient(), chain: optimismSepolia })\n      const ma = mw.getAccount()\n      if (!ma) {\n        return\n      }\n      await ensureExecutorModuleInstalled(managedAddress, ma, config)\n    } catch {\n      /* managed wallet session may lag modular connect; publish prep retries module install */\n    }\n    return\n  }\n\n  try {\n    await ensureExecutorModuleInstalled(modularAccount.address, modularAccount, config)\n  } catch (err) {\n    reportWalletSetupWarning(err)\n  }\n}\n\nconst ConnectButton: FC = () => {\n  const config = usePublishConfig()\n  const wallet = useActiveWallet()\n  const activeAccount = useActiveAccount()\n  const connectionStatus = useActiveWalletConnectionStatus()\n  const isAutoConnecting = useIsAutoConnecting()\n  /** Avoid duplicate setAddresses when onConnect and the reconcile effect both run. */\n  const lastSyncedOwnedKey = useRef<string | null>(null)\n  const prevIsAutoConnecting = useRef(false)\n  const reloadAutoConnectRetried = useRef(false)\n\n  /**\n   * Thirdweb sometimes finishes autoConnect on full reload with `disconnected` and no wallet\n   * (see debug: isAutoConnecting true→false then disconnected). One explicit in-app autoConnect\n   * retry recovers without affecting users who chose Disconnect (sessionStorage gate).\n   */\n  useEffect(() => {\n    if (typeof window === \"undefined\") return\n    const prev = prevIsAutoConnecting.current\n    prevIsAutoConnecting.current = isAutoConnecting\n\n    let navType: string | undefined\n    try {\n      navType = (\n        performance.getEntriesByType(\"navigation\")[0] as\n          | PerformanceNavigationTiming\n          | undefined\n      )?.type\n    } catch {\n      navType = undefined\n    }\n    if (navType !== \"reload\") return\n\n    let userChoseDisconnect = false\n    try {\n      userChoseDisconnect =\n        sessionStorage.getItem(USER_DISCONNECTED_SESSION_KEY) === \"1\"\n    } catch {\n      userChoseDisconnect = false\n    }\n    if (userChoseDisconnect) return\n\n    if (!prev || isAutoConnecting || connectionStatus !== \"disconnected\") return\n    if (reloadAutoConnectRetried.current) return\n    reloadAutoConnectRetried.current = true\n\n    void (config.useModularExecutor ? getModularAccountWallet() : getManagedAccountWallet())\n      .autoConnect({ client: getClient(), chain: optimismSepolia })\n      .catch(() => {\n        /* no session or iframe not ready; Connect UI can still sign in */\n      })\n  }, [connectionStatus, isAutoConnecting, config.useModularExecutor])\n\n  const syncActiveWalletToSeed = useCallback(\n    async (activeWallet: Wallet) => {\n      const account = activeWallet.getAccount()\n      if (!account) {\n        return\n      }\n      await waitUntilSeedInitialized()\n      PublishManager.stopAll()\n      const owned = new Set<string>([account.address.toLowerCase()])\n      let managedAddress: string | undefined\n      if (config.useModularExecutor) {\n        syncPublishInAppAuthToken()\n        const adminAddress =\n          activeWallet.getAdminAccount?.()?.address ?? account.address\n        const tryManaged = async () => {\n          try {\n            return await getConnectedManagedAccountAddress(optimismSepolia)\n          } catch {\n            try {\n              return await getSmartWalletAddressForAdmin(adminAddress)\n            } catch {\n              return undefined\n            }\n          }\n        }\n        managedAddress = await tryManaged()\n        if (!managedAddress) {\n          await new Promise<void>((r) => queueMicrotask(() => r()))\n          managedAddress = await tryManaged()\n        }\n        if (managedAddress) {\n          owned.add(managedAddress.toLowerCase())\n        }\n      }\n      const ownedKey = [...owned].sort().join(\",\")\n      if (lastSyncedOwnedKey.current === ownedKey) {\n        return\n      }\n      lastSyncedOwnedKey.current = ownedKey\n      try {\n        const publishWallet = fromThirdwebAccount(account)\n        await setPublishWallet({\n          ...publishWallet,\n          ownedAddresses: [...owned],\n          publisherAddress: managedAddress ?? account.address,\n        })\n      } catch (err) {\n        lastSyncedOwnedKey.current = null\n        console.warn(\"[ConnectButton] Failed to set seed client addresses:\", err)\n        throw err\n      }\n      await ensureExecutorModulesForConnect(account, managedAddress, config)\n    },\n    [config],\n  )\n\n  /**\n   * Thirdweb autoConnect restores the wallet without calling onConnect. Seed addresses live in\n   * SQLite (OPFS); after a wipe there is no app_state row until setAddresses runs again.\n   */\n  useEffect(() => {\n    if (isAutoConnecting) {\n      return\n    }\n    if (connectionStatus !== \"connected\") {\n      lastSyncedOwnedKey.current = null\n      return\n    }\n    if (!wallet) {\n      return\n    }\n    let cancelled = false\n    void (async () => {\n      try {\n        if (cancelled) return\n        await syncActiveWalletToSeed(wallet)\n      } catch {\n        /* logged in syncActiveWalletToSeed */\n      }\n    })()\n    return () => {\n      cancelled = true\n    }\n  }, [\n    wallet,\n    activeAccount?.address,\n    connectionStatus,\n    isAutoConnecting,\n    syncActiveWalletToSeed,\n  ])\n\n  const handleDisconnect = () => {\n    try {\n      sessionStorage.setItem(USER_DISCONNECTED_SESSION_KEY, \"1\")\n    } catch {\n      /* private mode / SSR */\n    }\n    clearPublishWallet()\n    PublishManager.stopAll()\n  }\n\n  const handleConnect = async (activeWallet: Wallet, _allConnectedWallets: Wallet[]) => {\n    const account = activeWallet.getAccount()\n    if (!account) return\n    try {\n      sessionStorage.removeItem(USER_DISCONNECTED_SESSION_KEY)\n    } catch {\n      /* ignore */\n    }\n    console.log('[ConnectButton] Connected', account.address)\n    try {\n      await syncActiveWalletToSeed(activeWallet)\n    } catch {\n      /* syncActiveWalletToSeed logs */\n    }\n  }\n\n  return (\n    <ConnectButtonThirdweb\n      client={getClient()}\n      wallets={getWalletsForConnectButton()}\n      autoConnect={true}\n      chain={optimismSepolia}\n      chains={[ optimismSepolia, ]}\n      onConnect={handleConnect}\n      onDisconnect={handleDisconnect}\n      theme={darkTheme({\n        colors: {\n          primaryButtonBg: '#1D2939',\n          primaryButtonText: '#FFFFFF',\n          secondaryButtonHoverBg: '#1D2939',\n          connectedButtonBg: '#101828',\n          connectedButtonBgHover: '#1D2939',\n          borderColor: '#344054',\n        },\n      })}\n    />\n  )\n}\n\nexport default ConnectButton\n","import React, { FC, useEffect } from \"react\"\nimport type { MutableRefObject } from \"react\"\nimport type { QueryClient } from \"@tanstack/react-query\"\nimport { ThirdwebProvider } from \"thirdweb/react\"\nimport { SeedProvider } from '@seedprotocol/react'\nimport { initPublish, getConfigRef, type PublishConfig } from \"../config\"\nimport { PublishConfigContext, usePublishConfig } from \"./PublishConfigContext\"\nimport type { PublishProviderProps } from \"./PublishProvider\"\n\nexport { usePublishConfig }\nexport type { PublishProviderProps }\n\n/**\n * Thirdweb-backed PublishProvider (includes ThirdwebProvider).\n */\nconst PublishProviderThirdweb: FC<PublishProviderProps> = ({\n  children,\n  config,\n  queryClient,\n  queryClientRef,\n}) => {\n  useEffect(() => {\n    if (config) {\n      initPublish(config)\n    }\n  }, [config])\n\n  return (\n    <PublishConfigContext.Provider value={config ?? getConfigRef()}>\n      <ThirdwebProvider>\n        <SeedProvider queryClient={queryClient} queryClientRef={queryClientRef}>\n          {children}\n        </SeedProvider>\n      </ThirdwebProvider>\n    </PublishConfigContext.Provider>\n  )\n}\n\nexport default PublishProviderThirdweb\n","import type { Account } from 'thirdweb/wallets'\nimport { getContract } from 'thirdweb'\nimport { getInstalledModules } from 'thirdweb/modules'\nimport { optimismSepolia } from 'thirdweb/chains'\nimport type { PublishWallet } from './seedSigner'\nimport { fromThirdwebAccount } from './adapters/thirdwebAccount'\nimport { getPublishConfig } from '../config'\nimport { isRouterNonModularCoreAccountError, ManagedAccountPublishError } from '../errors'\nimport { ensureExecutorModuleInstalled } from './ensureExecutorModule'\nimport {\n  ensureAutomationSessionKey,\n  removeAutomationSessionKey,\n} from './ensureAutomationSessionKey'\nimport {\n  attestPublishAuthorization,\n  revokePublishAuthorization,\n  type AttestPublishAuthorizationResult,\n} from '../services/publishAuthorization'\nimport { getClient, getManagedAccountWallet } from './thirdweb'\n\nexport type EnrollPublishAutomationParams = {\n  managedAddress: string\n  sessionKeyAddress: string\n  /** Optional app label stored in the sidecar (defaults to zero address). */\n  appAddress?: string\n  /** Unix seconds session / grant end (optional). */\n  expiresAt?: number\n  /**\n   * User-controlled ManagedAccount wallet used to add the session key and attest the sidecar.\n   * When omitted, uses the connected managed in-app wallet.\n   */\n  userWallet?: PublishWallet\n}\n\nexport type EnrollPublishAutomationResult = {\n  managedAddress: string\n  sessionKeyAddress: string\n  authorization: AttestPublishAuthorizationResult\n}\n\nexport type RevokePublishAutomationParams = {\n  managedAddress: string\n  sessionKeyAddress: string\n  authorizationUid: string\n  userWallet?: PublishWallet\n}\n\nasync function connectManagedAccount(managedAddress: string): Promise<Account> {\n  const managedWallet = getManagedAccountWallet()\n  await managedWallet.autoConnect({ client: getClient(), chain: optimismSepolia })\n  const account = managedWallet.getAccount()\n  if (!account) {\n    throw new ManagedAccountPublishError(\n      'Could not connect the managed publishing account to enroll or revoke publish automation.',\n      'MANAGED_ACCOUNT_UNAVAILABLE',\n      managedAddress,\n    )\n  }\n  return account\n}\n\nasync function resolveUserWallet(\n  managedAddress: string,\n  userWallet?: PublishWallet,\n): Promise<PublishWallet> {\n  if (userWallet) return userWallet\n  return fromThirdwebAccount(await connectManagedAccount(managedAddress))\n}\n\nasync function assertExecutorModuleInstalled(managedAddress: string): Promise<void> {\n  const config = getPublishConfig()\n  const moduleAddr = config.modularAccountModuleContract?.trim()\n  if (!moduleAddr) {\n    throw new Error(\n      '@seedprotocol/publish: enrollPublishAutomation requires PublishConfig.modularAccountModuleContract',\n    )\n  }\n\n  const twAccount = await connectManagedAccount(managedAddress)\n  try {\n    await ensureExecutorModuleInstalled(managedAddress, twAccount, config)\n  } catch (cause) {\n    if (cause instanceof ManagedAccountPublishError) throw cause\n    throw new ManagedAccountPublishError(\n      'Executor module setup failed for publish automation.',\n      'EXECUTOR_MODULE_NOT_INSTALLED',\n      managedAddress,\n      cause,\n    )\n  }\n\n  try {\n    const accountContract = getContract({\n      client: getClient(),\n      chain: optimismSepolia,\n      address: managedAddress,\n    })\n    const installed = await getInstalledModules({ contract: accountContract })\n    const want = moduleAddr.toLowerCase()\n    const ok = installed.some(\n      (m: { implementation: string }) => m.implementation?.toLowerCase() === want,\n    )\n    if (!ok) {\n      throw new ManagedAccountPublishError(\n        'Executor module is not installed on the ManagedAccount (ModularCore required for automation grants).',\n        'EXECUTOR_MODULE_NOT_INSTALLED',\n        managedAddress,\n      )\n    }\n  } catch (cause) {\n    if (cause instanceof ManagedAccountPublishError) throw cause\n    if (isRouterNonModularCoreAccountError(cause)) {\n      throw new ManagedAccountPublishError(\n        'ManagedAccount is not ModularCore; cannot install the executor module required for automation grants.',\n        'EXECUTOR_MODULE_NOT_INSTALLED',\n        managedAddress,\n        cause,\n      )\n    }\n    throw new ManagedAccountPublishError(\n      'Could not verify executor module installation for publish automation.',\n      'EXECUTOR_MODULE_NOT_INSTALLED',\n      managedAddress,\n      cause,\n    )\n  }\n}\n\n/**\n * Enroll an app automation key: install executor module → add module-only session key →\n * attest PublishAuthorization sidecar (ManagedAccount attester).\n */\nexport async function enrollPublishAutomation(\n  params: EnrollPublishAutomationParams,\n): Promise<EnrollPublishAutomationResult> {\n  const { managedAddress, sessionKeyAddress, appAddress, expiresAt } = params\n\n  await assertExecutorModuleInstalled(managedAddress)\n  await ensureAutomationSessionKey({\n    managedAddress,\n    sessionKeyAddress,\n    expiresAt,\n  })\n\n  const userWallet = await resolveUserWallet(managedAddress, params.userWallet)\n  const authorization = await attestPublishAuthorization({\n    wallet: userWallet,\n    identity: managedAddress,\n    sessionKey: sessionKeyAddress,\n    app: appAddress,\n    expiresAt,\n  })\n\n  return {\n    managedAddress,\n    sessionKeyAddress,\n    authorization,\n  }\n}\n\n/**\n * Disconnect automation: remove session key, then revoke PublishAuthorization sidecar.\n */\nexport async function revokePublishAutomation(\n  params: RevokePublishAutomationParams,\n): Promise<void> {\n  const { managedAddress, sessionKeyAddress, authorizationUid } = params\n  const userWallet = await resolveUserWallet(managedAddress, params.userWallet)\n\n  await removeAutomationSessionKey({\n    managedAddress,\n    sessionKeyAddress,\n  })\n\n  await revokePublishAuthorization({\n    wallet: userWallet,\n    uid: authorizationUid,\n  })\n}\n","import {\n  assessPublishAuthorization,\n  decodePublishAuthorizationData,\n  getPublishAuthorizationFromEas,\n} from '@seedprotocol/eas'\nimport { isAutomationSessionActive } from './ensureAutomationSessionKey'\n\nexport type AssertStorageBoundToIdentityParams = {\n  managedAddress: string\n  /** Recovered ANS-104 DataItem owner (Ethereum address). */\n  dataItemOwner: string\n  /**\n   * Unix seconds for historical binding checks against PublishAuthorization expiry.\n   * Defaults to now. Session-key live check always uses current `isActiveSigner`.\n   */\n  atTime?: number\n  /**\n   * When true (default), accept a live active session key on the ManagedAccount.\n   */\n  allowActiveSessionKey?: boolean\n  /**\n   * When true (default), accept a non-revoked PublishAuthorization sidecar valid at `atTime`.\n   */\n  allowSidecar?: boolean\n}\n\nexport type AssertStorageBoundToIdentityResult = {\n  bound: boolean\n  via: 'active_session_key' | 'publish_authorization' | null\n  warnings: string[]\n}\n\n/**\n * Whether an Arweave DataItem owner is bound to a ManagedAccount identity for authorship.\n * Prefer live `isActiveSigner` for current publishes; use the PublishAuthorization sidecar\n * for discoverability / historical grants (revoking the session key stops new binds via\n * active check; sidecar validity is assessed at `atTime`).\n */\nexport async function assertStorageBoundToIdentity(\n  params: AssertStorageBoundToIdentityParams,\n): Promise<AssertStorageBoundToIdentityResult> {\n  const {\n    managedAddress,\n    dataItemOwner,\n    atTime,\n    allowActiveSessionKey = true,\n    allowSidecar = true,\n  } = params\n  const warnings: string[] = []\n  const owner = dataItemOwner.trim().toLowerCase()\n  const identity = managedAddress.trim().toLowerCase()\n\n  if (!/^0x[0-9a-fA-F]{40}$/.test(owner) || !/^0x[0-9a-fA-F]{40}$/.test(identity)) {\n    return { bound: false, via: null, warnings: ['Invalid managedAddress or dataItemOwner'] }\n  }\n\n  if (allowActiveSessionKey) {\n    try {\n      const active = await isAutomationSessionActive(managedAddress, dataItemOwner)\n      if (active) {\n        return { bound: true, via: 'active_session_key', warnings }\n      }\n    } catch (e) {\n      warnings.push(\n        e instanceof Error ? e.message : 'isActiveSigner check failed',\n      )\n    }\n  }\n\n  if (allowSidecar) {\n    try {\n      const rows = await getPublishAuthorizationFromEas({\n        identities: [managedAddress],\n        sessionKeys: [dataItemOwner],\n        excludeRevoked: true,\n      })\n      const nowMs = atTime != null ? atTime * 1000 : Date.now()\n      for (const row of rows) {\n        try {\n          const decoded = decodePublishAuthorizationData(row.decodedDataJson ?? '[]')\n          if (decoded.identity.toLowerCase() !== identity) continue\n          if (decoded.sessionKey.toLowerCase() !== owner) continue\n          const expirationTime =\n            typeof row.expirationTime === 'number' ? row.expirationTime : null\n          const assess = assessPublishAuthorization({\n            decoded,\n            expirationTime,\n            now: nowMs,\n          })\n          if (assess.status === 'valid') {\n            return {\n              bound: true,\n              via: 'publish_authorization',\n              warnings: [...warnings, ...assess.warnings],\n            }\n          }\n          warnings.push(...assess.warnings)\n        } catch {\n          // skip undecodable row\n        }\n      }\n    } catch (e) {\n      warnings.push(\n        e instanceof Error ? e.message : 'PublishAuthorization query failed',\n      )\n    }\n  }\n\n  return { bound: false, via: null, warnings }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA8BA,IAAM,IAAgC;AAEtC,SAAS,GAAyB,GAAc;CAG9C,AADA,QAAQ,KAAK,0DAA0D,CAAG,GAC1E,EAAiB,CAAC,CAAC,uBAAuB,CAAG;AAC/C;AAGA,SAAS,KAA0C;CAEjD,OADI,EAAW,cAAc,IAAU,QAAQ,QAAQ,IAChD,IAAI,SAAS,MAAY;EAC9B,EAAW,cAAc,EAAQ,CAAC;CACpC,CAAC;AACH;AAOA,eAAe,EACb,GACA,GACA,GACe;CACV,MAAO,8BAIZ;MAAI,EAAO,oBAAoB;GAC7B,IAAI,CAAC,GACH;GAEF,IAAI;IACF,EAA0B;IAC1B,IAAM,IAAK,EAAwB;IACnC,MAAM,EAAG,YAAY;KAAE,QAAQ,EAAU;KAAG,OAAO;IAAgB,CAAC;IACpE,IAAM,IAAK,EAAG,WAAW;IACzB,IAAI,CAAC,GACH;IAEF,MAAM,EAA8B,GAAgB,GAAI,CAAM;GAChE,QAAQ,CAER;GACA;EACF;EAEA,IAAI;GACF,MAAM,EAA8B,EAAe,SAAS,GAAgB,CAAM;EACpF,SAAS,GAAK;GACZ,GAAyB,CAAG;EAC9B;CANA;AAOF;AAEA,IAAM,WAA0B;CAC9B,IAAM,IAAS,EAAiB,GAC1B,IAAS,GAAgB,GACzB,IAAgB,GAAiB,GACjC,IAAmB,GAAgC,GACnD,IAAmB,GAAoB,GAEvC,IAAqB,EAAsB,IAAI,GAC/C,IAAuB,EAAO,EAAK,GACnC,IAA2B,EAAO,EAAK;CAO7C,QAAgB;EACd,IAAI,OAAO,SAAW,KAAa;EACnC,IAAM,IAAO,EAAqB;EAClC,EAAqB,UAAU;EAE/B,IAAI;EACJ,IAAI;GACF,IACE,YAAY,iBAAiB,YAAY,CAAC,CAAC,EAAE,EAG5C;EACL,QAAQ;GACN,IAAU,KAAA;EACZ;EACA,IAAI,MAAY,UAAU;EAE1B,IAAI,IAAsB;EAC1B,IAAI;GACF,IACE,eAAe,QAAQ,CAA6B,MAAM;EAC9D,QAAQ;GACN,IAAsB;EACxB;EACI,KAEC,KAAQ,MAAoB,MAAqB,mBAClD,EAAyB,YAC7B,EAAyB,UAAU,KAE7B,EAAO,qBAAqB,EAAwB,IAAI,EAAwB,EAAA,CACnF,YAAY;GAAE,QAAQ,EAAU;GAAG,OAAO;EAAgB,CAAC,CAAC,CAC5D,YAAY,CAEb,CAAC;CACL,GAAG;EAAC;EAAkB;EAAkB,EAAO;CAAkB,CAAC;CAElE,IAAM,IAAyB,GAC7B,OAAO,MAAyB;EAC9B,IAAM,IAAU,EAAa,WAAW;EACxC,IAAI,CAAC,GACH;EAGF,AADA,MAAM,GAAyB,GAC/B,EAAe,QAAQ;EACvB,IAAM,oBAAQ,IAAI,IAAY,CAAC,EAAQ,QAAQ,YAAY,CAAC,CAAC,GACzD;EACJ,IAAI,EAAO,oBAAoB;GAC7B,EAA0B;GAC1B,IAAM,IACJ,EAAa,kBAAkB,CAAC,EAAE,WAAW,EAAQ,SACjD,IAAa,YAAY;IAC7B,IAAI;KACF,OAAO,MAAM,EAAkC,CAAe;IAChE,QAAQ;KACN,IAAI;MACF,OAAO,MAAM,EAA8B,CAAY;KACzD,QAAQ;MACN;KACF;IACF;GACF;GAMA,AALA,IAAiB,MAAM,EAAW,GAClC,AAEE,OADA,MAAM,IAAI,SAAe,MAAM,qBAAqB,EAAE,CAAC,CAAC,GACvC,MAAM,EAAW,IAEhC,KACF,EAAM,IAAI,EAAe,YAAY,CAAC;EAE1C;EACA,IAAM,IAAW,CAAC,GAAG,CAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG;EACvC,MAAmB,YAAY,GAGnC;KAAmB,UAAU;GAC7B,IAAI;IACF,IAAM,IAAgB,EAAoB,CAAO;IACjD,MAAM,EAAiB;KACrB,GAAG;KACH,gBAAgB,CAAC,GAAG,CAAK;KACzB,kBAAkB,KAAkB,EAAQ;IAC9C,CAAC;GACH,SAAS,GAAK;IAGZ,MAFA,EAAmB,UAAU,MAC7B,QAAQ,KAAK,wDAAwD,CAAG,GAClE;GACR;GACA,MAAM,EAAgC,GAAS,GAAgB,CAAM;EAbxC;CAc/B,GACA,CAAC,CAAM,CACT;CA+DA,OAzDA,QAAgB;EACd,IAAI,GACF;EAEF,IAAI,MAAqB,aAAa;GACpC,EAAmB,UAAU;GAC7B;EACF;EACA,IAAI,CAAC,GACH;EAEF,IAAI,IAAY;EAShB,QARM,YAAY;GAChB,IAAI;IACF,IAAI,GAAW;IACf,MAAM,EAAuB,CAAM;GACrC,QAAQ,CAER;EACF,EAAA,CAAG,SACU;GACX,IAAY;EACd;CACF,GAAG;EACD;EACA,GAAe;EACf;EACA;EACA;CACF,CAAC,GA6BC,kBAAC,IAAD;EACE,QAAQ,EAAU;EAClB,SAAS,EAA2B;EACpC,aAAa;EACb,OAAO;EACP,QAAQ,CAAE,CAAiB;EAC3B,WAAW,OAvBc,GAAsB,MAAmC;GACpF,IAAM,IAAU,EAAa,WAAW;GACnC,OACL;QAAI;KACF,eAAe,WAAW,CAA6B;IACzD,QAAQ,CAER;IACA,QAAQ,IAAI,6BAA6B,EAAQ,OAAO;IACxD,IAAI;KACF,MAAM,EAAuB,CAAY;IAC3C,QAAQ,CAER;GANA;EAOF;EAUI,oBAlC2B;GAC7B,IAAI;IACF,eAAe,QAAQ,GAA+B,GAAG;GAC3D,QAAQ,CAER;GAEA,AADA,EAAmB,GACnB,EAAe,QAAQ;EACzB;EA2BI,OAAO,GAAU,EACf,QAAQ;GACN,iBAAiB;GACjB,mBAAmB;GACnB,wBAAwB;GACxB,mBAAmB;GACnB,wBAAwB;GACxB,aAAa;EACf,EACF,CAAC;CACF,CAAA;AAEL,GCtQM,MAAqD,EACzD,aACA,WACA,gBACA,yBAEA,QAAgB;CACd,AAAI,KACF,EAAY,CAAM;AAEtB,GAAG,CAAC,CAAM,CAAC,GAGT,kBAAC,GAAqB,UAAtB;CAA+B,OAAO,KAAU,EAAa;CAC3D,UAAA,kBAAC,IAAD,EAAA,UACE,kBAAC,IAAD;EAA2B;EAA6B;EACrD;CACW,CAAA,EACE,CAAA;AACW,CAAA;;;ACanC,eAAe,EAAsB,GAA0C;CAC7E,IAAM,IAAgB,EAAwB;CAC9C,MAAM,EAAc,YAAY;EAAE,QAAQ,EAAU;EAAG,OAAO;CAAgB,CAAC;CAC/E,IAAM,IAAU,EAAc,WAAW;CACzC,IAAI,CAAC,GACH,MAAM,IAAI,EACR,4FACA,+BACA,CACF;CAEF,OAAO;AACT;AAEA,eAAe,EACb,GACA,GACwB;CAExB,OADI,KACG,EAAoB,MAAM,EAAsB,CAAc,CAAC;AACxE;AAEA,eAAe,GAA8B,GAAuC;CAClF,IAAM,IAAS,EAAiB,GAC1B,IAAa,EAAO,8BAA8B,KAAK;CAC7D,IAAI,CAAC,GACH,MAAU,MACR,oGACF;CAGF,IAAM,IAAY,MAAM,EAAsB,CAAc;CAC5D,IAAI;EACF,MAAM,EAA8B,GAAgB,GAAW,CAAM;CACvE,SAAS,GAAO;EAEd,MADI,aAAiB,IAAkC,IACjD,IAAI,EACR,wDACA,iCACA,GACA,CACF;CACF;CAEA,IAAI;EACF,IAAM,IAAkB,EAAY;GAClC,QAAQ,EAAU;GAClB,OAAO;GACP,SAAS;EACX,CAAC,GACK,IAAY,MAAM,GAAoB,EAAE,UAAU,EAAgB,CAAC,GACnE,IAAO,EAAW,YAAY;EAIpC,IAAI,CAHO,EAAU,MAClB,MAAkC,EAAE,gBAAgB,YAAY,MAAM,CAEpE,GACH,MAAM,IAAI,EACR,wGACA,iCACA,CACF;CAEJ,SAAS,GAAO;EAUd,MATI,aAAiB,IAAkC,IACnD,EAAmC,CAAK,IACpC,IAAI,EACR,yGACA,iCACA,GACA,CACF,IAEI,IAAI,EACR,yEACA,iCACA,GACA,CACF;CACF;AACF;AAMA,eAAsB,GACpB,GACwC;CACxC,IAAM,EAAE,mBAAgB,sBAAmB,eAAY,iBAAc;CAGrE,AADA,MAAM,GAA8B,CAAc,GAClD,MAAM,EAA2B;EAC/B;EACA;EACA;CACF,CAAC;CAED,IAAM,IAAa,MAAM,EAAkB,GAAgB,EAAO,UAAU;CAS5E,OAAO;EACL;EACA;EACA,eAAA,MAX0B,GAA2B;GACrD,QAAQ;GACR,UAAU;GACV,YAAY;GACZ,KAAK;GACL;EACF,CAAC;CAMD;AACF;AAKA,eAAsB,GACpB,GACe;CACf,IAAM,EAAE,mBAAgB,sBAAmB,wBAAqB,GAC1D,IAAa,MAAM,EAAkB,GAAgB,EAAO,UAAU;CAO5E,AALA,MAAM,EAA2B;EAC/B;EACA;CACF,CAAC,GAED,MAAM,EAA2B;EAC/B,QAAQ;EACR,KAAK;CACP,CAAC;AACH;;;AC5IA,eAAsB,GACpB,GAC6C;CAC7C,IAAM,EACJ,mBACA,kBACA,WACA,2BAAwB,IACxB,kBAAe,OACb,GACE,IAAqB,CAAC,GACtB,IAAQ,EAAc,KAAK,CAAC,CAAC,YAAY,GACzC,IAAW,EAAe,KAAK,CAAC,CAAC,YAAY;CAEnD,IAAI,CAAC,sBAAsB,KAAK,CAAK,KAAK,CAAC,sBAAsB,KAAK,CAAQ,GAC5E,OAAO;EAAE,OAAO;EAAO,KAAK;EAAM,UAAU,CAAC,yCAAyC;CAAE;CAG1F,IAAI,GACF,IAAI;EAEF,IAAI,MADiB,EAA0B,GAAgB,CAAa,GAE1E,OAAO;GAAE,OAAO;GAAM,KAAK;GAAsB;EAAS;CAE9D,SAAS,GAAG;EACV,EAAS,KACP,aAAa,QAAQ,EAAE,UAAU,6BACnC;CACF;CAGF,IAAI,GACF,IAAI;EACF,IAAM,IAAO,MAAM,GAA+B;GAChD,YAAY,CAAC,CAAc;GAC3B,aAAa,CAAC,CAAa;GAC3B,gBAAgB;EAClB,CAAC,GACK,IAAQ,KAAU,OAAuB,KAAK,IAAI,IAAzB,IAAS;EACxC,KAAK,IAAM,KAAO,GAChB,IAAI;GACF,IAAM,IAAU,GAA+B,EAAI,mBAAmB,IAAI;GAE1E,IADI,EAAQ,SAAS,YAAY,MAAM,KACnC,EAAQ,WAAW,YAAY,MAAM,GAAO;GAChD,IAAM,IACJ,OAAO,EAAI,kBAAmB,WAAW,EAAI,iBAAiB,MAC1D,IAAS,GAA2B;IACxC;IACA;IACA,KAAK;GACP,CAAC;GACD,IAAI,EAAO,WAAW,SACpB,OAAO;IACL,OAAO;IACP,KAAK;IACL,UAAU,CAAC,GAAG,GAAU,GAAG,EAAO,QAAQ;GAC5C;GAEF,EAAS,KAAK,GAAG,EAAO,QAAQ;EAClC,QAAQ,CAER;CAEJ,SAAS,GAAG;EACV,EAAS,KACP,aAAa,QAAQ,EAAE,UAAU,mCACnC;CACF;CAGF,OAAO;EAAE,OAAO;EAAO,KAAK;EAAM;CAAS;AAC7C"}
+{"version":3,"file":"thirdweb.js","names":[],"sources":["../src/react/ConnectButton.tsx","../src/react/PublishProvider.thirdweb.tsx","../src/helpers/ensureEip7702ModularAccountReady.ts","../src/helpers/defaultApprovedTargetsForModularPublish.ts","../src/helpers/ensureManagedSignerSessionKey.ts","../src/helpers/enrollPublishAutomation.ts","../src/helpers/assertStorageBoundToIdentity.ts"],"sourcesContent":["import React, { FC, useCallback, useEffect, useRef } from \"react\"\nimport {\n  ConnectButton as ConnectButtonThirdweb,\n  darkTheme,\n  useActiveAccount,\n  useActiveWallet,\n  useActiveWalletConnectionStatus,\n  useIsAutoConnecting,\n} from \"thirdweb/react\"\nimport { client as seedClient } from \"@seedprotocol/sdk\"\nimport {\n  getClient,\n  getConnectedManagedAccountAddress,\n  getManagedAccountWallet,\n  getModularAccountWallet,\n  getSmartWalletAddressForAdmin,\n  getWalletsForConnectButton,\n  syncPublishInAppAuthToken,\n} from \"../helpers/thirdweb\"\nimport { fromThirdwebAccount } from \"../helpers/adapters/thirdwebAccount\"\nimport { setPublishWallet, clearPublishWallet } from \"../helpers/publishWalletRegistry\"\nimport { usePublishConfig } from \"./PublishConfigContext\"\nimport { getPublishConfig } from \"../config\"\nimport type { Account, Wallet } from \"thirdweb/wallets\"\nimport type { PublishConfig } from \"../config\"\nimport { ensureExecutorModuleInstalled } from \"../helpers/ensureExecutorModule\"\nimport { PublishManager } from \"../services/publishManager\"\nimport { getPublishThirdwebChain } from '../helpers/thirdwebChain'\n\n/** Session flag so we do not force autoConnect after an explicit UI disconnect (survives reload). */\nconst USER_DISCONNECTED_SESSION_KEY = \"seedProtocol:publish:userChoseWalletDisconnect\"\n\nfunction reportWalletSetupWarning(err: unknown) {\n  // Expected when managed-wallet autoConnect is still catching up; publish prep retries.\n  console.warn(\"[ConnectButton] Wallet setup / module install skipped:\", err)\n  getPublishConfig().onWalletSetupWarning?.(err)\n}\n\n/** Resolves after `ClientManager.init()` has finished; `setAddresses` requires this. */\nfunction waitUntilSeedInitialized(): Promise<void> {\n  if (seedClient.isInitialized()) return Promise.resolve()\n  return new Promise((resolve) => {\n    seedClient.onReady(() => resolve())\n  })\n}\n\n/**\n * Executor module (ModularCore) must be installed on the **ManagedAccount** (EIP-4337) contract.\n * The EIP-7702 modular wallet contract does not expose Thirdweb's installModule / Router API;\n * calling it there reverts with \"Router: function does not exist.\"\n */\nasync function ensureExecutorModulesForConnect(\n  modularAccount: Account,\n  managedAddress: string | undefined,\n  config: PublishConfig,\n): Promise<void> {\n  if (!config.modularAccountModuleContract) {\n    return\n  }\n\n  if (config.useModularExecutor) {\n    if (!managedAddress) {\n      return\n    }\n    try {\n      syncPublishInAppAuthToken()\n      const mw = getManagedAccountWallet()\n      await mw.autoConnect({ client: getClient(), chain: getPublishThirdwebChain(config) })\n      const ma = mw.getAccount()\n      if (!ma) {\n        return\n      }\n      await ensureExecutorModuleInstalled(managedAddress, ma, config)\n    } catch {\n      /* managed wallet session may lag modular connect; publish prep retries module install */\n    }\n    return\n  }\n\n  try {\n    await ensureExecutorModuleInstalled(modularAccount.address, modularAccount, config)\n  } catch (err) {\n    reportWalletSetupWarning(err)\n  }\n}\n\nconst ConnectButton: FC = () => {\n  const config = usePublishConfig()\n  const thirdwebChain = getPublishThirdwebChain(config)\n  const wallet = useActiveWallet()\n  const activeAccount = useActiveAccount()\n  const connectionStatus = useActiveWalletConnectionStatus()\n  const isAutoConnecting = useIsAutoConnecting()\n  /** Avoid duplicate setAddresses when onConnect and the reconcile effect both run. */\n  const lastSyncedOwnedKey = useRef<string | null>(null)\n  const prevIsAutoConnecting = useRef(false)\n  const reloadAutoConnectRetried = useRef(false)\n\n  /**\n   * Thirdweb sometimes finishes autoConnect on full reload with `disconnected` and no wallet\n   * (see debug: isAutoConnecting true→false then disconnected). One explicit in-app autoConnect\n   * retry recovers without affecting users who chose Disconnect (sessionStorage gate).\n   */\n  useEffect(() => {\n    if (typeof window === \"undefined\") return\n    const prev = prevIsAutoConnecting.current\n    prevIsAutoConnecting.current = isAutoConnecting\n\n    let navType: string | undefined\n    try {\n      navType = (\n        performance.getEntriesByType(\"navigation\")[0] as\n          | PerformanceNavigationTiming\n          | undefined\n      )?.type\n    } catch {\n      navType = undefined\n    }\n    if (navType !== \"reload\") return\n\n    let userChoseDisconnect = false\n    try {\n      userChoseDisconnect =\n        sessionStorage.getItem(USER_DISCONNECTED_SESSION_KEY) === \"1\"\n    } catch {\n      userChoseDisconnect = false\n    }\n    if (userChoseDisconnect) return\n\n    if (!prev || isAutoConnecting || connectionStatus !== \"disconnected\") return\n    if (reloadAutoConnectRetried.current) return\n    reloadAutoConnectRetried.current = true\n\n    void (config.useModularExecutor ? getModularAccountWallet() : getManagedAccountWallet())\n      .autoConnect({ client: getClient(), chain: thirdwebChain })\n      .catch(() => {\n        /* no session or iframe not ready; Connect UI can still sign in */\n      })\n  }, [connectionStatus, isAutoConnecting, config.useModularExecutor, thirdwebChain])\n\n  const syncActiveWalletToSeed = useCallback(\n    async (activeWallet: Wallet) => {\n      const account = activeWallet.getAccount()\n      if (!account) {\n        return\n      }\n      await waitUntilSeedInitialized()\n      PublishManager.stopAll()\n      const owned = new Set<string>([account.address.toLowerCase()])\n      let managedAddress: string | undefined\n      if (config.useModularExecutor) {\n        syncPublishInAppAuthToken()\n        const adminAddress =\n          activeWallet.getAdminAccount?.()?.address ?? account.address\n        const tryManaged = async () => {\n          try {\n            return await getConnectedManagedAccountAddress(thirdwebChain)\n          } catch {\n            try {\n              return await getSmartWalletAddressForAdmin(adminAddress)\n            } catch {\n              return undefined\n            }\n          }\n        }\n        managedAddress = await tryManaged()\n        if (!managedAddress) {\n          await new Promise<void>((r) => queueMicrotask(() => r()))\n          managedAddress = await tryManaged()\n        }\n        if (managedAddress) {\n          owned.add(managedAddress.toLowerCase())\n        }\n      }\n      const ownedKey = [...owned].sort().join(\",\")\n      if (lastSyncedOwnedKey.current === ownedKey) {\n        return\n      }\n      lastSyncedOwnedKey.current = ownedKey\n      try {\n        const publishWallet = fromThirdwebAccount(account)\n        await setPublishWallet({\n          ...publishWallet,\n          ownedAddresses: [...owned],\n          publisherAddress: managedAddress ?? account.address,\n        })\n      } catch (err) {\n        lastSyncedOwnedKey.current = null\n        console.warn(\"[ConnectButton] Failed to set seed client addresses:\", err)\n        throw err\n      }\n      await ensureExecutorModulesForConnect(account, managedAddress, config)\n    },\n    [config],\n  )\n\n  /**\n   * Thirdweb autoConnect restores the wallet without calling onConnect. Seed addresses live in\n   * SQLite (OPFS); after a wipe there is no app_state row until setAddresses runs again.\n   */\n  useEffect(() => {\n    if (isAutoConnecting) {\n      return\n    }\n    if (connectionStatus !== \"connected\") {\n      lastSyncedOwnedKey.current = null\n      return\n    }\n    if (!wallet) {\n      return\n    }\n    let cancelled = false\n    void (async () => {\n      try {\n        if (cancelled) return\n        await syncActiveWalletToSeed(wallet)\n      } catch {\n        /* logged in syncActiveWalletToSeed */\n      }\n    })()\n    return () => {\n      cancelled = true\n    }\n  }, [\n    wallet,\n    activeAccount?.address,\n    connectionStatus,\n    isAutoConnecting,\n    syncActiveWalletToSeed,\n  ])\n\n  const handleDisconnect = () => {\n    try {\n      sessionStorage.setItem(USER_DISCONNECTED_SESSION_KEY, \"1\")\n    } catch {\n      /* private mode / SSR */\n    }\n    clearPublishWallet()\n    PublishManager.stopAll()\n  }\n\n  const handleConnect = async (activeWallet: Wallet, _allConnectedWallets: Wallet[]) => {\n    const account = activeWallet.getAccount()\n    if (!account) return\n    try {\n      sessionStorage.removeItem(USER_DISCONNECTED_SESSION_KEY)\n    } catch {\n      /* ignore */\n    }\n    console.log('[ConnectButton] Connected', account.address)\n    try {\n      await syncActiveWalletToSeed(activeWallet)\n    } catch {\n      /* syncActiveWalletToSeed logs */\n    }\n  }\n\n  return (\n    <ConnectButtonThirdweb\n      client={getClient()}\n      wallets={getWalletsForConnectButton(config)}\n      autoConnect={true}\n      chain={thirdwebChain}\n      chains={[ thirdwebChain, ]}\n      onConnect={handleConnect}\n      onDisconnect={handleDisconnect}\n      theme={darkTheme({\n        colors: {\n          primaryButtonBg: '#1D2939',\n          primaryButtonText: '#FFFFFF',\n          secondaryButtonHoverBg: '#1D2939',\n          connectedButtonBg: '#101828',\n          connectedButtonBgHover: '#1D2939',\n          borderColor: '#344054',\n        },\n      })}\n    />\n  )\n}\n\nexport default ConnectButton\n","import React, { FC, useEffect } from \"react\"\nimport type { MutableRefObject } from \"react\"\nimport type { QueryClient } from \"@tanstack/react-query\"\nimport { ThirdwebProvider } from \"thirdweb/react\"\nimport { SeedProvider } from '@seedprotocol/react'\nimport { initPublish, getConfigRef, type PublishConfig } from \"../config\"\nimport { PublishConfigContext, usePublishConfig } from \"./PublishConfigContext\"\nimport type { PublishProviderProps } from \"./PublishProvider\"\n\nexport { usePublishConfig }\nexport type { PublishProviderProps }\n\n/**\n * Thirdweb-backed PublishProvider (includes ThirdwebProvider).\n */\nconst PublishProviderThirdweb: FC<PublishProviderProps> = ({\n  children,\n  config,\n  queryClient,\n  queryClientRef,\n}) => {\n  useEffect(() => {\n    if (config) {\n      initPublish(config)\n    }\n  }, [config])\n\n  return (\n    <PublishConfigContext.Provider value={config ?? getConfigRef()}>\n      <ThirdwebProvider>\n        <SeedProvider queryClient={queryClient} queryClientRef={queryClientRef}>\n          {children}\n        </SeedProvider>\n      </ThirdwebProvider>\n    </PublishConfigContext.Provider>\n  )\n}\n\nexport default PublishProviderThirdweb\n","import { deploySmartAccount, getContract } from 'thirdweb'\nimport { getPublishConfig } from '../config'\nimport { Eip7702ModularAccountPublishError } from '../errors'\nimport { isContractDeployed, pollSmartWalletDeployed } from './chainClient'\nimport { getClient, getModularAccountWallet } from './thirdweb'\nimport { getPublishThirdwebChain } from './thirdwebChain'\nimport { getPublishChainName } from './chainConfig'\n\nconst MSG_NO_ACCOUNT =\n  'Modular (EIP-7702) wallet is not connected. Sign in with the same method and try again.'\nconst MSG_NOT_UPGRADED = () =>\n  `Your modular account is not upgraded to an EIP-7702 smart account on ${getPublishChainName()} yet. Enable autoDeployEip7702ModularAccount in publish config or complete wallet setup, then retry.`\nconst MSG_DEPLOY_FAILED = () =>\n  `Automatic EIP-7702 smart account setup failed on ${getPublishChainName()}. Retry or reconnect your wallet.`\nconst MSG_NOT_CONFIRMED =\n  'EIP-7702 upgrade was sent but on-chain bytecode was not detected yet. Wait a moment and retry.'\n\nconst DEPLOY_POLL_ATTEMPTS = 5\n\n/**\n * Ensures the Thirdweb in-app modular wallet (EIP-7702) has non-empty bytecode at its address\n * on the publish chain. deploySmartAccount remains Thirdweb; bytecode checks use viem.\n */\nexport async function ensureEip7702ModularAccountReady(): Promise<void> {\n  const { autoDeployEip7702ModularAccount } = getPublishConfig()\n  const modularAccountWallet = getModularAccountWallet()\n  await modularAccountWallet.autoConnect({ client: getClient(), chain: getPublishThirdwebChain() })\n  const modularAccount = modularAccountWallet.getAccount()\n  if (!modularAccount) {\n    throw new Eip7702ModularAccountPublishError(MSG_NO_ACCOUNT, 'EIP7702_MODULAR_ACCOUNT_UNAVAILABLE')\n  }\n\n  const client = getClient()\n  const accountContract = getContract({\n    client,\n    chain: getPublishThirdwebChain(),\n    address: modularAccount.address,\n  })\n\n  if (await isContractDeployed(modularAccount.address)) {\n    return\n  }\n\n  if (!autoDeployEip7702ModularAccount) {\n    throw new Eip7702ModularAccountPublishError(\n      MSG_NOT_UPGRADED(),\n      'EIP7702_MODULAR_NOT_UPGRADED',\n      modularAccount.address,\n    )\n  }\n\n  try {\n    await deploySmartAccount({\n      smartAccount: modularAccount,\n      chain: getPublishThirdwebChain(),\n      client,\n      accountContract,\n    })\n  } catch (cause) {\n    if (await pollSmartWalletDeployed(modularAccount.address, DEPLOY_POLL_ATTEMPTS)) {\n      return\n    }\n    throw new Eip7702ModularAccountPublishError(\n      MSG_DEPLOY_FAILED(),\n      'EIP7702_MODULAR_DEPLOY_FAILED',\n      modularAccount.address,\n      cause,\n    )\n  }\n\n  if (!(await pollSmartWalletDeployed(modularAccount.address, DEPLOY_POLL_ATTEMPTS))) {\n    throw new Eip7702ModularAccountPublishError(\n      MSG_NOT_CONFIRMED,\n      'EIP7702_MODULAR_NOT_CONFIRMED',\n      modularAccount.address,\n    )\n  }\n}\n","import { approvedTargetsForAutomationPublish } from './approvedTargetsForAutomationPublish'\n\n/**\n * Allowlisted call targets for a modular session signer: only the Seed executor module.\n *\n * Never the ManagedAccount (a key could then make any self-call, which the account trusts) and\n * never EAS (a direct EAS target bypasses the Seed extension's forced revocability).\n *\n * @deprecated Interactive publishing is a UserOp from the ManagedAccount itself and needs no\n * session key; automation keys use {@link approvedTargetsForAutomationPublish}, which this now\n * returns. `managedAddress` is ignored.\n * @throws if `modularAccountModuleContract` is unset or invalid\n */\nexport function defaultApprovedTargetsForModularPublish(_managedAddress?: string): `0x${string}`[] {\n  return approvedTargetsForAutomationPublish()\n}\n","import { getContract, sendTransaction } from 'thirdweb'\nimport { addSessionKey, shouldUpdateSessionKey } from 'thirdweb/extensions/erc4337'\nimport type { Address } from 'viem'\nimport { ManagedAccountPublishError } from '../errors'\nimport { waitForPublishReceipt } from './chainClient'\nimport { readIsActiveSigner } from './contracts'\nimport { defaultApprovedTargetsForModularPublish } from './defaultApprovedTargetsForModularPublish'\nimport { getClient, getManagedAccountWallet } from './thirdweb'\nimport { getPublishThirdwebChain } from './thirdwebChain'\nimport { getPublishChainName } from './chainConfig'\n\nconst MSG_UNAVAILABLE = () =>\n  `Could not connect the managed publishing account to authorize the modular signer on ${getPublishChainName()}. Reconnect and try again.`\nconst MSG_ACTIVATION_FAILED = () =>\n  `Could not authorize the modular wallet as a session signer on your publishing account on ${getPublishChainName()}.`\n\n/**\n * Ensures the modular (EIP-7702) wallet is an active session signer on the ManagedAccount.\n * If permissions are missing or stale, sends `addSessionKey` signed by the managed EIP-4337 wallet.\n * Session-key AA extensions remain on Thirdweb; verification uses viem.\n *\n * The key may call only the Seed executor module ({@link defaultApprovedTargetsForModularPublish}).\n *\n * @deprecated Interactive publishing is a UserOp from the ManagedAccount itself and needs no\n * session key. For server-held keys use `enrollPublishAutomation`.\n */\nexport async function ensureManagedSignerSessionKey(params: {\n  managedAddress: string\n  signerAddress: string\n}): Promise<void> {\n  const { managedAddress, signerAddress } = params\n  const managedWallet = getManagedAccountWallet()\n  await managedWallet.autoConnect({ client: getClient(), chain: getPublishThirdwebChain() })\n  const managedAccount = managedWallet.getAccount()\n  if (!managedAccount) {\n    throw new ManagedAccountPublishError(\n      MSG_UNAVAILABLE(),\n      'MODULAR_SIGNER_ACTIVATION_FAILED',\n      managedAddress,\n    )\n  }\n\n  const accountContract = getContract({\n    client: getClient(),\n    chain: getPublishThirdwebChain(),\n    address: managedAddress,\n  })\n  const permissions = {\n    approvedTargets: defaultApprovedTargetsForModularPublish(managedAddress),\n    nativeTokenLimitPerTransaction: 0,\n  }\n\n  let shouldUpdate = false\n  try {\n    shouldUpdate = await shouldUpdateSessionKey({\n      accountContract,\n      sessionKeyAddress: signerAddress,\n      newPermissions: permissions,\n    })\n  } catch (cause) {\n    throw new ManagedAccountPublishError(\n      MSG_ACTIVATION_FAILED(),\n      'MODULAR_SIGNER_ACTIVATION_FAILED',\n      managedAddress,\n      cause,\n    )\n  }\n\n  if (shouldUpdate) {\n    try {\n      const tx = addSessionKey({\n        contract: accountContract,\n        account: managedAccount,\n        sessionKeyAddress: signerAddress,\n        permissions,\n      })\n      const result = await sendTransaction({ account: managedAccount, transaction: tx })\n      await waitForPublishReceipt(result.transactionHash as `0x${string}`)\n    } catch (cause) {\n      throw new ManagedAccountPublishError(\n        MSG_ACTIVATION_FAILED(),\n        'MODULAR_SIGNER_ACTIVATION_FAILED',\n        managedAddress,\n        cause,\n      )\n    }\n  }\n\n  let active = false\n  try {\n    active = await readIsActiveSigner(managedAddress as Address, signerAddress as Address)\n  } catch (cause) {\n    throw new ManagedAccountPublishError(\n      MSG_ACTIVATION_FAILED(),\n      'MODULAR_SIGNER_ACTIVATION_FAILED',\n      managedAddress,\n      cause,\n    )\n  }\n\n  if (!active) {\n    throw new ManagedAccountPublishError(\n      MSG_ACTIVATION_FAILED(),\n      'MODULAR_SIGNER_ACTIVATION_FAILED',\n      managedAddress,\n    )\n  }\n}\n","import type { Account } from 'thirdweb/wallets'\nimport type { PublishWallet } from './seedSigner'\nimport { fromThirdwebAccount } from './adapters/thirdwebAccount'\nimport { getPublishConfig } from '../config'\nimport { ManagedAccountPublishError } from '../errors'\nimport { ensureExecutorModuleInstalled } from './ensureExecutorModule'\nimport { assertExecutorModuleReadyForAccount } from './executorModuleReadiness'\nimport {\n  ensureAutomationSessionKey,\n  removeAutomationSessionKey,\n} from './ensureAutomationSessionKey'\nimport {\n  attestPublishAuthorization,\n  revokePublishAuthorization,\n  type AttestPublishAuthorizationResult,\n} from '../services/publishAuthorization'\nimport { getClient, getManagedAccountWallet } from './thirdweb'\nimport { getPublishThirdwebChain } from './thirdwebChain'\n\nexport type EnrollPublishAutomationParams = {\n  managedAddress: string\n  sessionKeyAddress: string\n  /** Optional app label stored in the sidecar (defaults to zero address). */\n  appAddress?: string\n  /** Unix seconds session / grant end (optional). */\n  expiresAt?: number\n  /**\n   * User-controlled ManagedAccount wallet used to add the session key and attest the sidecar.\n   * When omitted, uses the connected managed in-app wallet.\n   */\n  userWallet?: PublishWallet\n}\n\nexport type EnrollPublishAutomationResult = {\n  managedAddress: string\n  sessionKeyAddress: string\n  authorization: AttestPublishAuthorizationResult\n}\n\nexport type RevokePublishAutomationParams = {\n  managedAddress: string\n  sessionKeyAddress: string\n  authorizationUid: string\n  userWallet?: PublishWallet\n}\n\nasync function connectManagedAccount(managedAddress: string): Promise<Account> {\n  const managedWallet = getManagedAccountWallet()\n  await managedWallet.autoConnect({ client: getClient(), chain: getPublishThirdwebChain() })\n  const account = managedWallet.getAccount()\n  if (!account) {\n    throw new ManagedAccountPublishError(\n      'Could not connect the managed publishing account to enroll or revoke publish automation.',\n      'MANAGED_ACCOUNT_UNAVAILABLE',\n      managedAddress,\n    )\n  }\n  return account\n}\n\nasync function resolveUserWallet(\n  managedAddress: string,\n  userWallet?: PublishWallet,\n): Promise<PublishWallet> {\n  if (userWallet) return userWallet\n  return fromThirdwebAccount(await connectManagedAccount(managedAddress))\n}\n\nasync function assertExecutorModuleInstalled(managedAddress: string): Promise<void> {\n  const config = getPublishConfig()\n  const moduleAddr = config.modularAccountModuleContract?.trim()\n  if (!moduleAddr) {\n    throw new Error(\n      '@seedprotocol/publish: enrollPublishAutomation requires PublishConfig.modularAccountModuleContract',\n    )\n  }\n\n  const twAccount = await connectManagedAccount(managedAddress)\n  try {\n    await ensureExecutorModuleInstalled(managedAddress, twAccount, config)\n  } catch (cause) {\n    if (cause instanceof ManagedAccountPublishError) throw cause\n    throw new ManagedAccountPublishError(\n      'Executor module setup failed for publish automation.',\n      'EXECUTOR_MODULE_NOT_INSTALLED',\n      managedAddress,\n      cause,\n    )\n  }\n\n  // The session key may only call the module, so refuse to enroll unless the module can act\n  // for this account. Otherwise every automation publish would revert.\n  await assertExecutorModuleReadyForAccount(managedAddress)\n}\n\n/**\n * Enroll an app automation key: install the Seed executor (`installSeedExecutor` on Router\n * accounts with the executor router extension, `installModule` on ModularCore), add an\n * executor-only session key, then attest the PublishAuthorization sidecar (ManagedAccount attester).\n *\n * @throws ManagedAccountPublishError `AUTOMATION_UNSUPPORTED_ACCOUNT` before adding the session\n * key when the executor cannot act for the account (e.g. Router accounts without the extension)\n */\nexport async function enrollPublishAutomation(\n  params: EnrollPublishAutomationParams,\n): Promise<EnrollPublishAutomationResult> {\n  const { managedAddress, sessionKeyAddress, appAddress, expiresAt } = params\n\n  await assertExecutorModuleInstalled(managedAddress)\n  await ensureAutomationSessionKey({\n    managedAddress,\n    sessionKeyAddress,\n    expiresAt,\n  })\n\n  const userWallet = await resolveUserWallet(managedAddress, params.userWallet)\n  const authorization = await attestPublishAuthorization({\n    wallet: userWallet,\n    identity: managedAddress,\n    sessionKey: sessionKeyAddress,\n    app: appAddress,\n    expiresAt,\n  })\n\n  return {\n    managedAddress,\n    sessionKeyAddress,\n    authorization,\n  }\n}\n\n/**\n * Disconnect automation: remove session key, then revoke PublishAuthorization sidecar.\n */\nexport async function revokePublishAutomation(\n  params: RevokePublishAutomationParams,\n): Promise<void> {\n  const { managedAddress, sessionKeyAddress, authorizationUid } = params\n  const userWallet = await resolveUserWallet(managedAddress, params.userWallet)\n\n  await removeAutomationSessionKey({\n    managedAddress,\n    sessionKeyAddress,\n  })\n\n  await revokePublishAuthorization({\n    wallet: userWallet,\n    uid: authorizationUid,\n  })\n}\n","import {\n  assessPublishAuthorization,\n  decodePublishAuthorizationData,\n  getPublishAuthorizationFromEas,\n} from '@seedprotocol/eas'\nimport { isAutomationSessionActive } from './ensureAutomationSessionKey'\n\nexport type AssertStorageBoundToIdentityParams = {\n  managedAddress: string\n  /** Recovered ANS-104 DataItem owner (Ethereum address). */\n  dataItemOwner: string\n  /**\n   * Unix seconds for historical binding checks against PublishAuthorization expiry.\n   * Defaults to now. Session-key live check always uses current `isActiveSigner`.\n   */\n  atTime?: number\n  /**\n   * When true (default), accept a live active session key on the ManagedAccount.\n   */\n  allowActiveSessionKey?: boolean\n  /**\n   * When true (default), accept a non-revoked PublishAuthorization sidecar valid at `atTime`.\n   */\n  allowSidecar?: boolean\n}\n\nexport type AssertStorageBoundToIdentityResult = {\n  bound: boolean\n  via: 'active_session_key' | 'publish_authorization' | null\n  warnings: string[]\n}\n\n/**\n * Whether an Arweave DataItem owner is bound to a ManagedAccount identity for authorship.\n * Prefer live `isActiveSigner` for current publishes; use the PublishAuthorization sidecar\n * for discoverability / historical grants (revoking the session key stops new binds via\n * active check; sidecar validity is assessed at `atTime`).\n */\nexport async function assertStorageBoundToIdentity(\n  params: AssertStorageBoundToIdentityParams,\n): Promise<AssertStorageBoundToIdentityResult> {\n  const {\n    managedAddress,\n    dataItemOwner,\n    atTime,\n    allowActiveSessionKey = true,\n    allowSidecar = true,\n  } = params\n  const warnings: string[] = []\n  const owner = dataItemOwner.trim().toLowerCase()\n  const identity = managedAddress.trim().toLowerCase()\n\n  if (!/^0x[0-9a-fA-F]{40}$/.test(owner) || !/^0x[0-9a-fA-F]{40}$/.test(identity)) {\n    return { bound: false, via: null, warnings: ['Invalid managedAddress or dataItemOwner'] }\n  }\n\n  if (allowActiveSessionKey) {\n    try {\n      const active = await isAutomationSessionActive(managedAddress, dataItemOwner)\n      if (active) {\n        return { bound: true, via: 'active_session_key', warnings }\n      }\n    } catch (e) {\n      warnings.push(\n        e instanceof Error ? e.message : 'isActiveSigner check failed',\n      )\n    }\n  }\n\n  if (allowSidecar) {\n    try {\n      const rows = await getPublishAuthorizationFromEas({\n        identities: [managedAddress],\n        sessionKeys: [dataItemOwner],\n        excludeRevoked: true,\n      })\n      const nowMs = atTime != null ? atTime * 1000 : Date.now()\n      for (const row of rows) {\n        try {\n          const decoded = decodePublishAuthorizationData(row.decodedDataJson ?? '[]')\n          if (decoded.identity.toLowerCase() !== identity) continue\n          if (decoded.sessionKey.toLowerCase() !== owner) continue\n          const expirationTime =\n            typeof row.expirationTime === 'number' ? row.expirationTime : null\n          const assess = assessPublishAuthorization({\n            decoded,\n            expirationTime,\n            now: nowMs,\n          })\n          if (assess.status === 'valid') {\n            return {\n              bound: true,\n              via: 'publish_authorization',\n              warnings: [...warnings, ...assess.warnings],\n            }\n          }\n          warnings.push(...assess.warnings)\n        } catch {\n          // skip undecodable row\n        }\n      }\n    } catch (e) {\n      warnings.push(\n        e instanceof Error ? e.message : 'PublishAuthorization query failed',\n      )\n    }\n  }\n\n  return { bound: false, via: null, warnings }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA8BA,IAAM,IAAgC;AAEtC,SAAS,GAAyB,GAAc;CAG9C,AADA,QAAQ,KAAK,0DAA0D,CAAG,GAC1E,EAAiB,CAAC,CAAC,uBAAuB,CAAG;AAC/C;AAGA,SAAS,KAA0C;CAEjD,OADI,EAAW,cAAc,IAAU,QAAQ,QAAQ,IAChD,IAAI,SAAS,MAAY;EAC9B,EAAW,cAAc,EAAQ,CAAC;CACpC,CAAC;AACH;AAOA,eAAe,GACb,GACA,GACA,GACe;CACV,MAAO,8BAIZ;MAAI,EAAO,oBAAoB;GAC7B,IAAI,CAAC,GACH;GAEF,IAAI;IACF,EAA0B;IAC1B,IAAM,IAAK,EAAwB;IACnC,MAAM,EAAG,YAAY;KAAE,QAAQ,EAAU;KAAG,OAAO,EAAwB,CAAM;IAAE,CAAC;IACpF,IAAM,IAAK,EAAG,WAAW;IACzB,IAAI,CAAC,GACH;IAEF,MAAM,EAA8B,GAAgB,GAAI,CAAM;GAChE,QAAQ,CAER;GACA;EACF;EAEA,IAAI;GACF,MAAM,EAA8B,EAAe,SAAS,GAAgB,CAAM;EACpF,SAAS,GAAK;GACZ,GAAyB,CAAG;EAC9B;CANA;AAOF;AAEA,IAAM,WAA0B;CAC9B,IAAM,IAAS,EAAiB,GAC1B,IAAgB,EAAwB,CAAM,GAC9C,IAAS,GAAgB,GACzB,IAAgB,GAAiB,GACjC,IAAmB,GAAgC,GACnD,IAAmB,GAAoB,GAEvC,IAAqB,EAAsB,IAAI,GAC/C,IAAuB,EAAO,EAAK,GACnC,IAA2B,EAAO,EAAK;CAO7C,QAAgB;EACd,IAAI,OAAO,SAAW,KAAa;EACnC,IAAM,IAAO,EAAqB;EAClC,EAAqB,UAAU;EAE/B,IAAI;EACJ,IAAI;GACF,IACE,YAAY,iBAAiB,YAAY,CAAC,CAAC,EAAE,EAG5C;EACL,QAAQ;GACN,IAAU,KAAA;EACZ;EACA,IAAI,MAAY,UAAU;EAE1B,IAAI,IAAsB;EAC1B,IAAI;GACF,IACE,eAAe,QAAQ,CAA6B,MAAM;EAC9D,QAAQ;GACN,IAAsB;EACxB;EACI,KAEC,KAAQ,MAAoB,MAAqB,mBAClD,EAAyB,YAC7B,EAAyB,UAAU,KAE7B,EAAO,qBAAqB,EAAwB,IAAI,EAAwB,EAAA,CACnF,YAAY;GAAE,QAAQ,EAAU;GAAG,OAAO;EAAc,CAAC,CAAC,CAC1D,YAAY,CAEb,CAAC;CACL,GAAG;EAAC;EAAkB;EAAkB,EAAO;EAAoB;CAAa,CAAC;CAEjF,IAAM,IAAyB,GAC7B,OAAO,MAAyB;EAC9B,IAAM,IAAU,EAAa,WAAW;EACxC,IAAI,CAAC,GACH;EAGF,AADA,MAAM,GAAyB,GAC/B,EAAe,QAAQ;EACvB,IAAM,oBAAQ,IAAI,IAAY,CAAC,EAAQ,QAAQ,YAAY,CAAC,CAAC,GACzD;EACJ,IAAI,EAAO,oBAAoB;GAC7B,EAA0B;GAC1B,IAAM,IACJ,EAAa,kBAAkB,CAAC,EAAE,WAAW,EAAQ,SACjD,IAAa,YAAY;IAC7B,IAAI;KACF,OAAO,MAAM,EAAkC,CAAa;IAC9D,QAAQ;KACN,IAAI;MACF,OAAO,MAAM,EAA8B,CAAY;KACzD,QAAQ;MACN;KACF;IACF;GACF;GAMA,AALA,IAAiB,MAAM,EAAW,GAClC,AAEE,OADA,MAAM,IAAI,SAAe,MAAM,qBAAqB,EAAE,CAAC,CAAC,GACvC,MAAM,EAAW,IAEhC,KACF,EAAM,IAAI,EAAe,YAAY,CAAC;EAE1C;EACA,IAAM,IAAW,CAAC,GAAG,CAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG;EACvC,MAAmB,YAAY,GAGnC;KAAmB,UAAU;GAC7B,IAAI;IACF,IAAM,IAAgB,EAAoB,CAAO;IACjD,MAAM,EAAiB;KACrB,GAAG;KACH,gBAAgB,CAAC,GAAG,CAAK;KACzB,kBAAkB,KAAkB,EAAQ;IAC9C,CAAC;GACH,SAAS,GAAK;IAGZ,MAFA,EAAmB,UAAU,MAC7B,QAAQ,KAAK,wDAAwD,CAAG,GAClE;GACR;GACA,MAAM,GAAgC,GAAS,GAAgB,CAAM;EAbxC;CAc/B,GACA,CAAC,CAAM,CACT;CA+DA,OAzDA,QAAgB;EACd,IAAI,GACF;EAEF,IAAI,MAAqB,aAAa;GACpC,EAAmB,UAAU;GAC7B;EACF;EACA,IAAI,CAAC,GACH;EAEF,IAAI,IAAY;EAShB,QARM,YAAY;GAChB,IAAI;IACF,IAAI,GAAW;IACf,MAAM,EAAuB,CAAM;GACrC,QAAQ,CAER;EACF,EAAA,CAAG,SACU;GACX,IAAY;EACd;CACF,GAAG;EACD;EACA,GAAe;EACf;EACA;EACA;CACF,CAAC,GA6BC,kBAAC,IAAD;EACE,QAAQ,EAAU;EAClB,SAAS,EAA2B,CAAM;EAC1C,aAAa;EACb,OAAO;EACP,QAAQ,CAAE,CAAe;EACzB,WAAW,OAvBc,GAAsB,MAAmC;GACpF,IAAM,IAAU,EAAa,WAAW;GACnC,OACL;QAAI;KACF,eAAe,WAAW,CAA6B;IACzD,QAAQ,CAER;IACA,QAAQ,IAAI,6BAA6B,EAAQ,OAAO;IACxD,IAAI;KACF,MAAM,EAAuB,CAAY;IAC3C,QAAQ,CAER;GANA;EAOF;EAUI,oBAlC2B;GAC7B,IAAI;IACF,eAAe,QAAQ,GAA+B,GAAG;GAC3D,QAAQ,CAER;GAEA,AADA,EAAmB,GACnB,EAAe,QAAQ;EACzB;EA2BI,OAAO,GAAU,EACf,QAAQ;GACN,iBAAiB;GACjB,mBAAmB;GACnB,wBAAwB;GACxB,mBAAmB;GACnB,wBAAwB;GACxB,aAAa;EACf,EACF,CAAC;CACF,CAAA;AAEL,GCvQM,MAAqD,EACzD,aACA,WACA,gBACA,yBAEA,QAAgB;CACd,AAAI,KACF,EAAY,CAAM;AAEtB,GAAG,CAAC,CAAM,CAAC,GAGT,kBAAC,GAAqB,UAAtB;CAA+B,OAAO,KAAU,EAAa;CAC3D,UAAA,kBAAC,IAAD,EAAA,UACE,kBAAC,IAAD;EAA2B;EAA6B;EACrD;CACW,CAAA,EACE,CAAA;AACW,CAAA,IC1B7B,KACJ,2FACI,WACJ,wEAAwE,EAAoB,EAAE,uGAC1F,WACJ,oDAAoD,EAAoB,EAAE,oCACtE,KACJ,kGAEI,IAAuB;AAM7B,eAAsB,IAAkD;CACtE,IAAM,EAAE,uCAAoC,EAAiB,GACvD,IAAuB,EAAwB;CACrD,MAAM,EAAqB,YAAY;EAAE,QAAQ,EAAU;EAAG,OAAO,EAAwB;CAAE,CAAC;CAChG,IAAM,IAAiB,EAAqB,WAAW;CACvD,IAAI,CAAC,GACH,MAAM,IAAI,EAAkC,IAAgB,qCAAqC;CAGnG,IAAM,IAAS,EAAU,GACnB,IAAkB,EAAY;EAClC;EACA,OAAO,EAAwB;EAC/B,SAAS,EAAe;CAC1B,CAAC;CAEG,WAAM,EAAmB,EAAe,OAAO,GAInD;MAAI,CAAC,GACH,MAAM,IAAI,EACR,GAAiB,GACjB,gCACA,EAAe,OACjB;EAGF,IAAI;GACF,MAAM,GAAmB;IACvB,cAAc;IACd,OAAO,EAAwB;IAC/B;IACA;GACF,CAAC;EACH,SAAS,GAAO;GACd,IAAI,MAAM,EAAwB,EAAe,SAAS,CAAoB,GAC5E;GAEF,MAAM,IAAI,EACR,GAAkB,GAClB,iCACA,EAAe,SACf,CACF;EACF;EAEA,IAAI,CAAE,MAAM,EAAwB,EAAe,SAAS,CAAoB,GAC9E,MAAM,IAAI,EACR,IACA,iCACA,EAAe,OACjB;CA3BA;AA6BJ;;;AChEA,SAAgB,EAAwC,GAA2C;CACjG,OAAO,EAAoC;AAC7C;;;ACJA,IAAM,WACJ,uFAAuF,EAAoB,EAAE,6BACzG,UACJ,4FAA4F,EAAoB,EAAE;AAYpH,eAAsB,GAA8B,GAGlC;CAChB,IAAM,EAAE,mBAAgB,qBAAkB,GACpC,IAAgB,EAAwB;CAC9C,MAAM,EAAc,YAAY;EAAE,QAAQ,EAAU;EAAG,OAAO,EAAwB;CAAE,CAAC;CACzF,IAAM,IAAiB,EAAc,WAAW;CAChD,IAAI,CAAC,GACH,MAAM,IAAI,EACR,GAAgB,GAChB,oCACA,CACF;CAGF,IAAM,IAAkB,EAAY;EAClC,QAAQ,EAAU;EAClB,OAAO,EAAwB;EAC/B,SAAS;CACX,CAAC,GACK,IAAc;EAClB,iBAAiB,EAAwC,CAAc;EACvE,gCAAgC;CAClC,GAEI,IAAe;CACnB,IAAI;EACF,IAAe,MAAM,GAAuB;GAC1C;GACA,mBAAmB;GACnB,gBAAgB;EAClB,CAAC;CACH,SAAS,GAAO;EACd,MAAM,IAAI,EACR,EAAsB,GACtB,oCACA,GACA,CACF;CACF;CAEA,IAAI,GACF,IAAI;EACF,IAAM,IAAK,GAAc;GACvB,UAAU;GACV,SAAS;GACT,mBAAmB;GACnB;EACF,CAAC,GACK,IAAS,MAAM,GAAgB;GAAE,SAAS;GAAgB,aAAa;EAAG,CAAC;EACjF,MAAM,EAAsB,EAAO,eAAgC;CACrE,SAAS,GAAO;EACd,MAAM,IAAI,EACR,EAAsB,GACtB,oCACA,GACA,CACF;CACF;CAGF,IAAI,IAAS;CACb,IAAI;EACF,IAAS,MAAM,EAAmB,GAA2B,CAAwB;CACvF,SAAS,GAAO;EACd,MAAM,IAAI,EACR,EAAsB,GACtB,oCACA,GACA,CACF;CACF;CAEA,IAAI,CAAC,GACH,MAAM,IAAI,EACR,EAAsB,GACtB,oCACA,CACF;AAEJ;;;AC7DA,eAAe,EAAsB,GAA0C;CAC7E,IAAM,IAAgB,EAAwB;CAC9C,MAAM,EAAc,YAAY;EAAE,QAAQ,EAAU;EAAG,OAAO,EAAwB;CAAE,CAAC;CACzF,IAAM,IAAU,EAAc,WAAW;CACzC,IAAI,CAAC,GACH,MAAM,IAAI,EACR,4FACA,+BACA,CACF;CAEF,OAAO;AACT;AAEA,eAAe,EACb,GACA,GACwB;CAExB,OADI,KACG,EAAoB,MAAM,EAAsB,CAAc,CAAC;AACxE;AAEA,eAAe,GAA8B,GAAuC;CAClF,IAAM,IAAS,EAAiB;CAEhC,IAAI,CADe,EAAO,8BAA8B,KAAK,GAE3D,MAAU,MACR,oGACF;CAGF,IAAM,IAAY,MAAM,EAAsB,CAAc;CAC5D,IAAI;EACF,MAAM,EAA8B,GAAgB,GAAW,CAAM;CACvE,SAAS,GAAO;EAEd,MADI,aAAiB,IAAkC,IACjD,IAAI,EACR,wDACA,iCACA,GACA,CACF;CACF;CAIA,MAAM,EAAoC,CAAc;AAC1D;AAUA,eAAsB,GACpB,GACwC;CACxC,IAAM,EAAE,mBAAgB,sBAAmB,eAAY,iBAAc;CAGrE,AADA,MAAM,GAA8B,CAAc,GAClD,MAAM,EAA2B;EAC/B;EACA;EACA;CACF,CAAC;CAED,IAAM,IAAa,MAAM,EAAkB,GAAgB,EAAO,UAAU;CAS5E,OAAO;EACL;EACA;EACA,eAAA,MAX0B,GAA2B;GACrD,QAAQ;GACR,UAAU;GACV,YAAY;GACZ,KAAK;GACL;EACF,CAAC;CAMD;AACF;AAKA,eAAsB,GACpB,GACe;CACf,IAAM,EAAE,mBAAgB,sBAAmB,wBAAqB,GAC1D,IAAa,MAAM,EAAkB,GAAgB,EAAO,UAAU;CAO5E,AALA,MAAM,EAA2B;EAC/B;EACA;CACF,CAAC,GAED,MAAM,GAA2B;EAC/B,QAAQ;EACR,KAAK;CACP,CAAC;AACH;;;AC/GA,eAAsB,GACpB,GAC6C;CAC7C,IAAM,EACJ,mBACA,kBACA,WACA,2BAAwB,IACxB,kBAAe,OACb,GACE,IAAqB,CAAC,GACtB,IAAQ,EAAc,KAAK,CAAC,CAAC,YAAY,GACzC,IAAW,EAAe,KAAK,CAAC,CAAC,YAAY;CAEnD,IAAI,CAAC,sBAAsB,KAAK,CAAK,KAAK,CAAC,sBAAsB,KAAK,CAAQ,GAC5E,OAAO;EAAE,OAAO;EAAO,KAAK;EAAM,UAAU,CAAC,yCAAyC;CAAE;CAG1F,IAAI,GACF,IAAI;EAEF,IAAI,MADiB,EAA0B,GAAgB,CAAa,GAE1E,OAAO;GAAE,OAAO;GAAM,KAAK;GAAsB;EAAS;CAE9D,SAAS,GAAG;EACV,EAAS,KACP,aAAa,QAAQ,EAAE,UAAU,6BACnC;CACF;CAGF,IAAI,GACF,IAAI;EACF,IAAM,IAAO,MAAM,GAA+B;GAChD,YAAY,CAAC,CAAc;GAC3B,aAAa,CAAC,CAAa;GAC3B,gBAAgB;EAClB,CAAC,GACK,IAAQ,KAAU,OAAuB,KAAK,IAAI,IAAzB,IAAS;EACxC,KAAK,IAAM,KAAO,GAChB,IAAI;GACF,IAAM,IAAU,GAA+B,EAAI,mBAAmB,IAAI;GAE1E,IADI,EAAQ,SAAS,YAAY,MAAM,KACnC,EAAQ,WAAW,YAAY,MAAM,GAAO;GAChD,IAAM,IACJ,OAAO,EAAI,kBAAmB,WAAW,EAAI,iBAAiB,MAC1D,IAAS,GAA2B;IACxC;IACA;IACA,KAAK;GACP,CAAC;GACD,IAAI,EAAO,WAAW,SACpB,OAAO;IACL,OAAO;IACP,KAAK;IACL,UAAU,CAAC,GAAG,GAAU,GAAG,EAAO,QAAQ;GAC5C;GAEF,EAAS,KAAK,GAAG,EAAO,QAAQ;EAClC,QAAQ,CAER;CAEJ,SAAS,GAAG;EACV,EAAS,KACP,aAAa,QAAQ,EAAE,UAAU,mCACnC;CACF;CAGF,OAAO;EAAE,OAAO;EAAO,KAAK;EAAM;CAAS;AAC7C"}