npm - @seedprotocol/publish - Versions diffs - 0.7.11-next.1384.g8b47246 → 0.7.11 - Mend

@seedprotocol/publish 0.7.11-next.1384.g8b47246 → 0.7.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (30) hide show

package/dist/thirdweb.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"thirdweb.js","names":["seedClient","ConnectButtonThirdweb","pollSmartWalletDeployed","useLocalWalletAccount","ensureManagedAccountReady","getConnectedAccount","isContractDeployed","getSharedPublishInAppWalletStorage","Eip7702ModularAccountPublishError","getConnectedModularAccount","ExternalWalletsForDeploy","isSmartWalletDeployed","getSmartWalletAddressForAdmin","ManagedAccountPublishError","appMetadata","readIsActiveSigner","tryDeployManagedAccount","ensureExecutorModuleInstalled","assertExecutorModuleReadyForAccount","useActiveSmartWalletContract","deployManagedAccountViaFactory","getManagedAccountWallet","waitForPublishReceipt","getConnectedManagedAccountAddress","pollSmartWalletDeployed$1","getModularAccountWallet","resolveSmartWalletForPublish","pollSmartWalletDeployed","syncPublishInAppAuthToken","initPublish","wallets","getPublishThirdwebChain","fromThirdwebAccount","getPublishConfig","runModularExecutorPublishPrep","asThirdwebPublishWallet","seedPaymaster","PublishManager","asSeedSignerFromThirdweb","getWalletsForConnectButton","getConfigRef","getClient","getPublishChainName","CALL_GAS_HEADROOM_BPS","deploySmartWalletContract","setPublishWallet","clearPublishWallet","attestPublishAuthorization","buildAutomationSessionKeyPermissions","hashAutomationSessionKeyPermissions","usePublishConfig","PublishConfigContext","revokePublishAuthorization","approvedTargetsForAutomationPublish","toThirdwebSessionKeyPermissions","PUBLISH_AUTOMATION_SCOPES","ensureSmartWalletThenPublish","ensureModularPublishBootstrap","removeAutomationSessionKey","isAutomationSessionActive","ensureAutomationSessionKey","ConnectButton$1","USER_DISCONNECTED_SESSION_KEY","reportWalletSetupWarning","err","waitUntilSeedInitialized","client","resolve","ensureExecutorModulesForConnect","config","managedAddress","mw","ma","modularAccount","ConnectButton","thirdwebChain","wallet","useActiveWallet","activeAccount","useActiveAccount","connectionStatus","useActiveWalletConnectionStatus","isAutoConnecting","useIsAutoConnecting","lastSyncedOwnedKey","useRef","prevIsAutoConnecting","reloadAutoConnectRetried","prev","navType","userChoseDisconnect","syncActiveWalletToSeed","useCallback","account","activeWallet","owned","adminAddress","tryManaged","r","ownedKey","isSmart","publishWallet","adminAccount","dataItemSigner","useEffect","cancelled","darkTheme","PublishProviderThirdweb","initializedConfig","ThirdwebProvider","SeedProvider","MSG_NO_ACCOUNT","MSG_NOT_UPGRADED","MSG_DEPLOY_FAILED","MSG_NOT_CONFIRMED","DEPLOY_POLL_ATTEMPTS","ensureEip7702ModularAccountReady","modularAccountWallet","accountContract","getContract","autoDeployEip7702ModularAccount","deploySmartAccount","cause","defaultApprovedTargetsForModularPublish","MSG_UNAVAILABLE","MSG_ACTIVATION_FAILED","ensureManagedSignerSessionKey","params","managedWallet","managedAccount","permissions","shouldUpdate","shouldUpdateSessionKey","signerAddress","tx","addSessionKey","result","sendTransaction","active","connectManagedAccount","resolveUserWallet","userWallet","assertExecutorModuleInstalled","twAccount","install","enrollPublishAutomation","sessionKeyAddress","appAddress","revokePublishAutomation","authorizationUid","assertStorageBoundToIdentity","warnings","owner","dataItemOwner","identity","allowActiveSessionKey","allowSidecar","rows","getPublishAuthorizationFromEas","nowMs","atTime","row","decoded","decodePublishAuthorizationData","expirationTime","assess","assessPublishAuthorization"],"sources":["../src/react/ConnectButton.tsx","../src/react/PublishProvider.thirdweb.tsx","../src/helpers/ensureEip7702ModularAccountReady.ts","../src/helpers/defaultApprovedTargetsForModularPublish.ts","../src/helpers/ensureManagedSignerSessionKey.ts","../src/helpers/enrollPublishAutomation.ts","../src/helpers/assertStorageBoundToIdentity.ts"],"sourcesContent":["import React, { FC, useCallback, useEffect, useRef } from \"react\"\nimport {\n ConnectButton as ConnectButtonThirdweb,\n darkTheme,\n useActiveAccount,\n useActiveWallet,\n useActiveWalletConnectionStatus,\n useIsAutoConnecting,\n} from \"thirdweb/react\"\nimport { client as seedClient } from \"@seedprotocol/sdk\"\nimport {\n deploySmartWalletContract,\n getClient,\n getConnectedManagedAccountAddress,\n getManagedAccountWallet,\n getModularAccountWallet,\n getSmartWalletAddressForAdmin,\n getWalletsForConnectButton,\n syncPublishInAppAuthToken,\n} from \"../helpers/thirdweb\"\nimport { fromThirdwebAccount } from \"../helpers/adapters/thirdwebAccount\"\nimport { setPublishWallet, clearPublishWallet } from \"../helpers/publishWalletRegistry\"\nimport { usePublishConfig } from \"./PublishConfigContext\"\nimport { getPublishConfig } from \"../config\"\nimport type { Account, Wallet } from \"thirdweb/wallets\"\nimport type { PublishConfig } from \"../config\"\nimport { ensureExecutorModuleInstalled } from \"../helpers/ensureExecutorModule\"\nimport { PublishManager } from \"../services/publishManager\"\nimport { getPublishThirdwebChain } from '../helpers/thirdwebChain'\n\n/** Session flag so we do not force autoConnect after an explicit UI disconnect (survives reload). /\nconst USER_DISCONNECTED_SESSION_KEY = \"seedProtocol:publish:userChoseWalletDisconnect\"\n\nfunction reportWalletSetupWarning(err: unknown) {\n // Expected when managed-wallet autoConnect is still catching up; publish prep retries.\n console.warn(\"[ConnectButton] Wallet setup / module install skipped:\", err)\n getPublishConfig().onWalletSetupWarning?.(err)\n}\n\n/* Resolves after `ClientManager.init()` has finished; `setAddresses` requires this. /\nfunction waitUntilSeedInitialized(): Promise<void> {\n if (seedClient.isInitialized()) return Promise.resolve()\n return new Promise((resolve) => {\n seedClient.onReady(() => resolve())\n })\n}\n\n/\n Installs the Seed executor on the ManagedAccount (EIP-4337 Router) contract via its\n * `SeedExecutorRouterExtension`. Other accounts, such as the EIP-7702 modular wallet, have no\n * extension, so `ensureExecutorModuleInstalled` skips them.\n /\nasync function ensureExecutorModulesForConnect(\n modularAccount: Account,\n managedAddress: string \| undefined,\n config: PublishConfig,\n): Promise<void> {\n if (!config.modularAccountModuleContract) {\n return\n }\n\n if (config.useModularExecutor) {\n if (!managedAddress) {\n return\n }\n try {\n syncPublishInAppAuthToken()\n const mw = getManagedAccountWallet()\n await mw.autoConnect({ client: getClient(), chain: getPublishThirdwebChain(config) })\n const ma = mw.getAccount()\n if (!ma) {\n return\n }\n await ensureExecutorModuleInstalled(managedAddress, ma, config)\n } catch {\n / managed wallet session may lag modular connect; publish prep retries module install /\n }\n return\n }\n\n try {\n await ensureExecutorModuleInstalled(modularAccount.address, modularAccount, config)\n } catch (err) {\n reportWalletSetupWarning(err)\n }\n}\n\nconst ConnectButton: FC = () => {\n const config = usePublishConfig()\n const thirdwebChain = getPublishThirdwebChain(config)\n const wallet = useActiveWallet()\n const activeAccount = useActiveAccount()\n const connectionStatus = useActiveWalletConnectionStatus()\n const isAutoConnecting = useIsAutoConnecting()\n /* Avoid duplicate setAddresses when onConnect and the reconcile effect both run. /\n const lastSyncedOwnedKey = useRef<string \| null>(null)\n const prevIsAutoConnecting = useRef(false)\n const reloadAutoConnectRetried = useRef(false)\n\n /\n Thirdweb sometimes finishes autoConnect on full reload with `disconnected` and no wallet\n * (see debug: isAutoConnecting true→false then disconnected). One explicit in-app autoConnect\n * retry recovers without affecting users who chose Disconnect (sessionStorage gate).\n /\n useEffect(() => {\n if (typeof window === \"undefined\") return\n const prev = prevIsAutoConnecting.current\n prevIsAutoConnecting.current = isAutoConnecting\n\n let navType: string \| undefined\n try {\n navType = (\n performance.getEntriesByType(\"navigation\")[0] as\n \| PerformanceNavigationTiming\n \| undefined\n )?.type\n } catch {\n navType = undefined\n }\n if (navType !== \"reload\") return\n\n let userChoseDisconnect = false\n try {\n userChoseDisconnect =\n sessionStorage.getItem(USER_DISCONNECTED_SESSION_KEY) === \"1\"\n } catch {\n userChoseDisconnect = false\n }\n if (userChoseDisconnect) return\n\n if (!prev \|\| isAutoConnecting \|\| connectionStatus !== \"disconnected\") return\n if (reloadAutoConnectRetried.current) return\n reloadAutoConnectRetried.current = true\n\n void (config.useModularExecutor ? getModularAccountWallet() : getManagedAccountWallet())\n .autoConnect({ client: getClient(), chain: thirdwebChain })\n .catch(() => {\n / no session or iframe not ready; Connect UI can still sign in /\n })\n }, [connectionStatus, isAutoConnecting, config.useModularExecutor, thirdwebChain])\n\n const syncActiveWalletToSeed = useCallback(\n async (activeWallet: Wallet) => {\n const account = activeWallet.getAccount()\n if (!account) {\n return\n }\n await waitUntilSeedInitialized()\n const owned = new Set<string>([account.address.toLowerCase()])\n let managedAddress: string \| undefined\n if (config.useModularExecutor) {\n syncPublishInAppAuthToken()\n const adminAddress =\n activeWallet.getAdminAccount?.()?.address ?? account.address\n const tryManaged = async () => {\n try {\n return await getConnectedManagedAccountAddress(thirdwebChain)\n } catch {\n try {\n return await getSmartWalletAddressForAdmin(adminAddress)\n } catch {\n return undefined\n }\n }\n }\n managedAddress = await tryManaged()\n if (!managedAddress) {\n await new Promise<void>((r) => queueMicrotask(() => r()))\n managedAddress = await tryManaged()\n }\n if (managedAddress) {\n owned.add(managedAddress.toLowerCase())\n }\n }\n const ownedKey = [...owned].sort().join(\",\")\n if (lastSyncedOwnedKey.current === ownedKey) {\n return\n }\n // Another wallet took over: publishes started for the previous one stop (their rows stay\n // for it to resume). Not on the first sync, where publishes restored from the DB need this\n // wallet, nor on a re-sync of the same wallet.\n if (lastSyncedOwnedKey.current !== null) {\n PublishManager.stopAll()\n }\n lastSyncedOwnedKey.current = ownedKey\n try {\n const adminAddress = activeWallet.getAdminAccount?.()?.address\n // A wallet with a separate admin account, or the modular executor's ManagedAccount, is a\n // smart account; otherwise the connected account is a plain key (in-app or injected).\n const isSmart =\n !!managedAddress \|\|\n (!!adminAddress && adminAddress.toLowerCase() !== account.address.toLowerCase())\n const publishWallet = fromThirdwebAccount(account, { kind: isSmart ? \"smart\" : \"eoa\" })\n // Data items need an ECDSA signer. With the modular executor the connected account is an\n // EOA (or EIP-7702 on one) acting for the ManagedAccount; otherwise a smart wallet's admin\n // EOA signs them.\n const adminAccount = activeWallet.getAdminAccount?.()\n const dataItemSigner = managedAddress\n ? publishWallet.signer\n : isSmart && adminAccount && adminAccount.address.toLowerCase() !== account.address.toLowerCase()\n ? fromThirdwebAccount(adminAccount, { kind: \"eoa\" }).signer\n : undefined\n await setPublishWallet({\n ...publishWallet,\n ownedAddresses: [...owned],\n publisherAddress: managedAddress ?? account.address,\n ...(dataItemSigner ? { dataItemSigner } : {}),\n // A new user's smart wallet has no code until its first transaction: publish deploys it.\n ...(isSmart && !managedAddress\n ? { deploy: async () => { await deploySmartWalletContract(account) } }\n : {}),\n ...(adminAddress && adminAddress.toLowerCase() !== account.address.toLowerCase()\n ? { adminAddress }\n : {}),\n })\n } catch (err) {\n lastSyncedOwnedKey.current = null\n console.warn(\"[ConnectButton] Failed to set seed client addresses:\", err)\n throw err\n }\n await ensureExecutorModulesForConnect(account, managedAddress, config)\n },\n [config],\n )\n\n /\n Thirdweb autoConnect restores the wallet without calling onConnect. Seed addresses live in\n * SQLite (OPFS); after a wipe there is no app_state row until setAddresses runs again.\n /\n useEffect(() => {\n if (isAutoConnecting) {\n return\n }\n if (connectionStatus !== \"connected\") {\n lastSyncedOwnedKey.current = null\n return\n }\n if (!wallet) {\n return\n }\n let cancelled = false\n void (async () => {\n try {\n if (cancelled) return\n await syncActiveWalletToSeed(wallet)\n } catch {\n / logged in syncActiveWalletToSeed /\n }\n })()\n return () => {\n cancelled = true\n }\n }, [\n wallet,\n activeAccount?.address,\n connectionStatus,\n isAutoConnecting,\n syncActiveWalletToSeed,\n ])\n\n const handleDisconnect = () => {\n try {\n sessionStorage.setItem(USER_DISCONNECTED_SESSION_KEY, \"1\")\n } catch {\n / private mode / SSR /\n }\n void clearPublishWallet()\n PublishManager.stopAll()\n }\n\n const handleConnect = async (activeWallet: Wallet, _allConnectedWallets: Wallet[]) => {\n const account = activeWallet.getAccount()\n if (!account) return\n try {\n sessionStorage.removeItem(USER_DISCONNECTED_SESSION_KEY)\n } catch {\n / ignore /\n }\n console.log('[ConnectButton] Connected', account.address)\n try {\n await syncActiveWalletToSeed(activeWallet)\n } catch {\n / syncActiveWalletToSeed logs /\n }\n }\n\n return (\n <ConnectButtonThirdweb\n client={getClient()}\n wallets={getWalletsForConnectButton(config)}\n autoConnect={true}\n chain={thirdwebChain}\n chains={[ thirdwebChain, ]}\n onConnect={handleConnect}\n onDisconnect={handleDisconnect}\n theme={darkTheme({\n colors: {\n primaryButtonBg: '#1D2939',\n primaryButtonText: '#FFFFFF',\n secondaryButtonHoverBg: '#1D2939',\n connectedButtonBg: '#101828',\n connectedButtonBgHover: '#1D2939',\n borderColor: '#344054',\n },\n })}\n />\n )\n}\n\nexport default ConnectButton\n","import React, { FC, useRef } from \"react\"\nimport { ThirdwebProvider } from \"thirdweb/react\"\nimport { SeedProvider } from '@seedprotocol/react'\nimport { initPublish, getConfigRef, type PublishConfig } from \"../config\"\nimport { PublishConfigContext, usePublishConfig } from \"./PublishConfigContext\"\nimport type { PublishProviderProps } from \"./PublishProvider\"\n\nexport { usePublishConfig }\n\n/\n Thirdweb-backed PublishProvider (includes ThirdwebProvider).\n /\nconst PublishProviderThirdweb: FC<PublishProviderProps> = ({\n children,\n config,\n queryClient,\n queryClientRef,\n}) => {\n // During render, not in an effect: children such as ConnectButton read the config on their\n // first render, which runs before this provider's effects. Once per config object.\n const initializedConfig = useRef<PublishConfig \| undefined>(undefined)\n if (config && initializedConfig.current !== config) {\n initPublish(config)\n initializedConfig.current = config\n }\n\n return (\n <PublishConfigContext.Provider value={config ?? getConfigRef()}>\n <ThirdwebProvider>\n <SeedProvider queryClient={queryClient} queryClientRef={queryClientRef}>\n {children}\n </SeedProvider>\n </ThirdwebProvider>\n </PublishConfigContext.Provider>\n )\n}\n\nexport default PublishProviderThirdweb\n","import { deploySmartAccount, getContract } from 'thirdweb'\nimport { getPublishConfig } from '../config'\nimport { Eip7702ModularAccountPublishError } from '../errors'\nimport { isContractDeployed, pollSmartWalletDeployed } from './chainClient'\nimport { getClient, getModularAccountWallet } from './thirdweb'\nimport { getPublishThirdwebChain } from './thirdwebChain'\nimport { getPublishChainName } from './chainConfig'\n\nconst MSG_NO_ACCOUNT =\n 'Modular (EIP-7702) wallet is not connected. Sign in with the same method and try again.'\nconst MSG_NOT_UPGRADED = () =>\n `Your modular account is not upgraded to an EIP-7702 smart account on ${getPublishChainName()} yet. Enable autoDeployEip7702ModularAccount in publish config or complete wallet setup, then retry.`\nconst MSG_DEPLOY_FAILED = () =>\n `Automatic EIP-7702 smart account setup failed on ${getPublishChainName()}. Retry or reconnect your wallet.`\nconst MSG_NOT_CONFIRMED =\n 'EIP-7702 upgrade was sent but on-chain bytecode was not detected yet. Wait a moment and retry.'\n\nconst DEPLOY_POLL_ATTEMPTS = 5\n\n/\n Ensures the Thirdweb in-app modular wallet (EIP-7702) has non-empty bytecode at its address\n * on the publish chain. deploySmartAccount remains Thirdweb; bytecode checks use viem.\n /\nexport async function ensureEip7702ModularAccountReady(): Promise<void> {\n const { autoDeployEip7702ModularAccount } = getPublishConfig()\n const modularAccountWallet = getModularAccountWallet()\n await modularAccountWallet.autoConnect({ client: getClient(), chain: getPublishThirdwebChain() })\n const modularAccount = modularAccountWallet.getAccount()\n if (!modularAccount) {\n throw new Eip7702ModularAccountPublishError(MSG_NO_ACCOUNT, 'EIP7702_MODULAR_ACCOUNT_UNAVAILABLE')\n }\n\n const client = getClient()\n const accountContract = getContract({\n client,\n chain: getPublishThirdwebChain(),\n address: modularAccount.address,\n })\n\n if (await isContractDeployed(modularAccount.address)) {\n return\n }\n\n if (!autoDeployEip7702ModularAccount) {\n throw new Eip7702ModularAccountPublishError(\n MSG_NOT_UPGRADED(),\n 'EIP7702_MODULAR_NOT_UPGRADED',\n modularAccount.address,\n )\n }\n\n try {\n await deploySmartAccount({\n smartAccount: modularAccount,\n chain: getPublishThirdwebChain(),\n client,\n accountContract,\n })\n } catch (cause) {\n if (await pollSmartWalletDeployed(modularAccount.address, DEPLOY_POLL_ATTEMPTS)) {\n return\n }\n throw new Eip7702ModularAccountPublishError(\n MSG_DEPLOY_FAILED(),\n 'EIP7702_MODULAR_DEPLOY_FAILED',\n modularAccount.address,\n cause,\n )\n }\n\n if (!(await pollSmartWalletDeployed(modularAccount.address, DEPLOY_POLL_ATTEMPTS))) {\n throw new Eip7702ModularAccountPublishError(\n MSG_NOT_CONFIRMED,\n 'EIP7702_MODULAR_NOT_CONFIRMED',\n modularAccount.address,\n )\n }\n}\n","import { approvedTargetsForAutomationPublish } from './approvedTargetsForAutomationPublish'\n\n/\n Allowlisted call targets for a modular session signer: only the Seed executor module.\n \n Never the ManagedAccount (a key could then make any self-call, which the account trusts) and\n * never EAS (a direct EAS target bypasses the Seed extension's forced revocability).\n \n @deprecated Interactive publishing is a UserOp from the ManagedAccount itself and needs no\n * session key; automation keys use {@link approvedTargetsForAutomationPublish}, which this now\n * returns. `managedAddress` is ignored.\n * @throws if `modularAccountModuleContract` is unset or invalid\n /\nexport function defaultApprovedTargetsForModularPublish(_managedAddress?: string): `0x${string}`[] {\n return approvedTargetsForAutomationPublish()\n}\n","import { getContract, sendTransaction } from 'thirdweb'\nimport { addSessionKey, shouldUpdateSessionKey } from 'thirdweb/extensions/erc4337'\nimport type { Address } from 'viem'\nimport { ManagedAccountPublishError } from '../errors'\nimport { waitForPublishReceipt } from './chainClient'\nimport { readIsActiveSigner } from './contracts'\nimport { defaultApprovedTargetsForModularPublish } from './defaultApprovedTargetsForModularPublish'\nimport { getClient, getManagedAccountWallet } from './thirdweb'\nimport { getPublishThirdwebChain } from './thirdwebChain'\nimport { getPublishChainName } from './chainConfig'\n\nconst MSG_UNAVAILABLE = () =>\n `Could not connect the managed publishing account to authorize the modular signer on ${getPublishChainName()}. Reconnect and try again.`\nconst MSG_ACTIVATION_FAILED = () =>\n `Could not authorize the modular wallet as a session signer on your publishing account on ${getPublishChainName()}.`\n\n/\n Ensures the modular (EIP-7702) wallet is an active session signer on the ManagedAccount.\n * If permissions are missing or stale, sends `addSessionKey` signed by the managed EIP-4337 wallet.\n * Session-key AA extensions remain on Thirdweb; verification uses viem.\n \n The key may call only the Seed executor module ({@link defaultApprovedTargetsForModularPublish}).\n \n @deprecated Interactive publishing is a UserOp from the ManagedAccount itself and needs no\n * session key. For server-held keys use `enrollPublishAutomation`.\n /\nexport async function ensureManagedSignerSessionKey(params: {\n managedAddress: string\n signerAddress: string\n}): Promise<void> {\n const { managedAddress, signerAddress } = params\n const managedWallet = getManagedAccountWallet()\n await managedWallet.autoConnect({ client: getClient(), chain: getPublishThirdwebChain() })\n const managedAccount = managedWallet.getAccount()\n if (!managedAccount) {\n throw new ManagedAccountPublishError(\n MSG_UNAVAILABLE(),\n 'MODULAR_SIGNER_ACTIVATION_FAILED',\n managedAddress,\n )\n }\n\n const accountContract = getContract({\n client: getClient(),\n chain: getPublishThirdwebChain(),\n address: managedAddress,\n })\n const permissions = {\n approvedTargets: defaultApprovedTargetsForModularPublish(managedAddress),\n nativeTokenLimitPerTransaction: 0,\n }\n\n let shouldUpdate = false\n try {\n shouldUpdate = await shouldUpdateSessionKey({\n accountContract,\n sessionKeyAddress: signerAddress,\n newPermissions: permissions,\n })\n } catch (cause) {\n throw new ManagedAccountPublishError(\n MSG_ACTIVATION_FAILED(),\n 'MODULAR_SIGNER_ACTIVATION_FAILED',\n managedAddress,\n cause,\n )\n }\n\n if (shouldUpdate) {\n try {\n const tx = addSessionKey({\n contract: accountContract,\n account: managedAccount,\n sessionKeyAddress: signerAddress,\n permissions,\n })\n const result = await sendTransaction({ account: managedAccount, transaction: tx })\n await waitForPublishReceipt(result.transactionHash as `0x${string}`)\n } catch (cause) {\n throw new ManagedAccountPublishError(\n MSG_ACTIVATION_FAILED(),\n 'MODULAR_SIGNER_ACTIVATION_FAILED',\n managedAddress,\n cause,\n )\n }\n }\n\n let active = false\n try {\n active = await readIsActiveSigner(managedAddress as Address, signerAddress as Address)\n } catch (cause) {\n throw new ManagedAccountPublishError(\n MSG_ACTIVATION_FAILED(),\n 'MODULAR_SIGNER_ACTIVATION_FAILED',\n managedAddress,\n cause,\n )\n }\n\n if (!active) {\n throw new ManagedAccountPublishError(\n MSG_ACTIVATION_FAILED(),\n 'MODULAR_SIGNER_ACTIVATION_FAILED',\n managedAddress,\n )\n }\n}\n","import type { Account } from 'thirdweb/wallets'\nimport type { PublishWallet } from './seedSigner'\nimport { fromThirdwebAccount } from './adapters/thirdwebAccount'\nimport { getPublishConfig } from '../config'\nimport { ManagedAccountPublishError } from '../errors'\nimport { ensureExecutorModuleInstalled, type EnsureExecutorModuleResult } from './ensureExecutorModule'\nimport { assertExecutorModuleReadyForAccount } from './executorModuleReadiness'\nimport {\n ensureAutomationSessionKey,\n removeAutomationSessionKey,\n} from './ensureAutomationSessionKey'\nimport {\n attestPublishAuthorization,\n revokePublishAuthorization,\n type AttestPublishAuthorizationResult,\n} from '../services/publishAuthorization'\nimport { getClient, getManagedAccountWallet } from './thirdweb'\nimport { getPublishThirdwebChain } from './thirdwebChain'\n\nexport type EnrollPublishAutomationParams = {\n managedAddress: string\n sessionKeyAddress: string\n /* Optional app label stored in the sidecar (defaults to zero address). /\n appAddress?: string\n /* Unix seconds session / grant end (optional). /\n expiresAt?: number\n /\n User-controlled ManagedAccount wallet used to add the session key and attest the sidecar.\n * When omitted, uses the connected managed in-app wallet.\n /\n userWallet?: PublishWallet\n}\n\nexport type EnrollPublishAutomationResult = {\n managedAddress: string\n sessionKeyAddress: string\n authorization: AttestPublishAuthorizationResult\n}\n\nexport type RevokePublishAutomationParams = {\n managedAddress: string\n sessionKeyAddress: string\n authorizationUid: string\n userWallet?: PublishWallet\n}\n\nasync function connectManagedAccount(managedAddress: string): Promise<Account> {\n const managedWallet = getManagedAccountWallet()\n await managedWallet.autoConnect({ client: getClient(), chain: getPublishThirdwebChain() })\n const account = managedWallet.getAccount()\n if (!account) {\n throw new ManagedAccountPublishError(\n 'Could not connect the managed publishing account to enroll or revoke publish automation.',\n 'MANAGED_ACCOUNT_UNAVAILABLE',\n managedAddress,\n )\n }\n return account\n}\n\nasync function resolveUserWallet(\n managedAddress: string,\n userWallet?: PublishWallet,\n): Promise<PublishWallet> {\n if (userWallet) return userWallet\n return fromThirdwebAccount(await connectManagedAccount(managedAddress), { kind: 'smart' })\n}\n\nasync function assertExecutorModuleInstalled(managedAddress: string): Promise<void> {\n const config = getPublishConfig()\n const moduleAddr = config.modularAccountModuleContract?.trim()\n if (!moduleAddr) {\n throw new Error(\n '@seedprotocol/publish: enrollPublishAutomation requires PublishConfig.modularAccountModuleContract',\n )\n }\n\n const twAccount = await connectManagedAccount(managedAddress)\n let install: EnsureExecutorModuleResult\n try {\n install = await ensureExecutorModuleInstalled(managedAddress, twAccount, config)\n } catch (cause) {\n if (cause instanceof ManagedAccountPublishError) throw cause\n throw new ManagedAccountPublishError(\n 'Executor module setup failed for publish automation.',\n 'EXECUTOR_MODULE_NOT_INSTALLED',\n managedAddress,\n cause,\n )\n }\n\n // The session key may only call the module, so refuse to enroll unless the module can act\n // for this account. Otherwise every automation publish would revert. A fresh install is\n // confirmed from its receipt; otherwise the read may still trail an install that just landed.\n await assertExecutorModuleReadyForAccount(\n managedAddress,\n install.status === 'installed'\n ? { installedEas: install.eas }\n : { readAttempts: install.status === 'already-installed' ? 5 : 1 },\n )\n}\n\n/\n Enroll an app automation key: install the Seed executor (`installSeedExecutor` on Router\n * accounts with the executor router extension), add an executor-only session key, then attest\n * the PublishAuthorization sidecar (ManagedAccount attester).\n \n @throws ManagedAccountPublishError `AUTOMATION_UNSUPPORTED_ACCOUNT` before adding the session\n * key when the executor cannot act for the account (e.g. Router accounts without the extension)\n /\nexport async function enrollPublishAutomation(\n params: EnrollPublishAutomationParams,\n): Promise<EnrollPublishAutomationResult> {\n const { managedAddress, sessionKeyAddress, appAddress, expiresAt } = params\n\n await assertExecutorModuleInstalled(managedAddress)\n await ensureAutomationSessionKey({\n managedAddress,\n sessionKeyAddress,\n expiresAt,\n })\n\n const userWallet = await resolveUserWallet(managedAddress, params.userWallet)\n const authorization = await attestPublishAuthorization({\n wallet: userWallet,\n identity: managedAddress,\n sessionKey: sessionKeyAddress,\n app: appAddress,\n expiresAt,\n })\n\n return {\n managedAddress,\n sessionKeyAddress,\n authorization,\n }\n}\n\n/\n Disconnect automation: remove session key, then revoke PublishAuthorization sidecar.\n /\nexport async function revokePublishAutomation(\n params: RevokePublishAutomationParams,\n): Promise<void> {\n const { managedAddress, sessionKeyAddress, authorizationUid } = params\n const userWallet = await resolveUserWallet(managedAddress, params.userWallet)\n\n await removeAutomationSessionKey({\n managedAddress,\n sessionKeyAddress,\n })\n\n await revokePublishAuthorization({\n wallet: userWallet,\n uid: authorizationUid,\n })\n}\n","import {\n assessPublishAuthorization,\n decodePublishAuthorizationData,\n getPublishAuthorizationFromEas,\n} from '@seedprotocol/eas'\nimport { isAutomationSessionActive } from './ensureAutomationSessionKey'\n\nexport type AssertStorageBoundToIdentityParams = {\n managedAddress: string\n /* Recovered ANS-104 DataItem owner (Ethereum address). /\n dataItemOwner: string\n /\n Unix seconds for historical binding checks against PublishAuthorization expiry.\n * Defaults to now. Session-key live check always uses current `isActiveSigner`.\n /\n atTime?: number\n /\n When true (default), accept a live active session key on the ManagedAccount.\n /\n allowActiveSessionKey?: boolean\n /\n When true (default), accept a non-revoked PublishAuthorization sidecar valid at `atTime`.\n /\n allowSidecar?: boolean\n}\n\nexport type AssertStorageBoundToIdentityResult = {\n bound: boolean\n via: 'active_session_key' \| 'publish_authorization' \| null\n warnings: string[]\n}\n\n/\n Whether an Arweave DataItem owner is bound to a ManagedAccount identity for authorship.\n * Prefer live `isActiveSigner` for current publishes; use the PublishAuthorization sidecar\n * for discoverability / historical grants (revoking the session key stops new binds via\n * active check; sidecar validity is assessed at `atTime`).\n /\nexport async function assertStorageBoundToIdentity(\n params: AssertStorageBoundToIdentityParams,\n): Promise<AssertStorageBoundToIdentityResult> {\n const {\n managedAddress,\n dataItemOwner,\n atTime,\n allowActiveSessionKey = true,\n allowSidecar = true,\n } = params\n const warnings: string[] = []\n const owner = dataItemOwner.trim().toLowerCase()\n const identity = managedAddress.trim().toLowerCase()\n\n if (!/^0x[0-9a-fA-F]{40}$/.test(owner) \|\| !/^0x[0-9a-fA-F]{40}$/.test(identity)) {\n return { bound: false, via: null, warnings: ['Invalid managedAddress or dataItemOwner'] }\n }\n\n if (allowActiveSessionKey) {\n try {\n const active = await isAutomationSessionActive(managedAddress, dataItemOwner)\n if (active) {\n return { bound: true, via: 'active_session_key', warnings }\n }\n } catch (e) {\n warnings.push(\n e instanceof Error ? e.message : 'isActiveSigner check failed',\n )\n }\n }\n\n if (allowSidecar) {\n try {\n const rows = await getPublishAuthorizationFromEas({\n identities: [managedAddress],\n sessionKeys: [dataItemOwner],\n excludeRevoked: true,\n })\n const nowMs = atTime != null ? atTime 1000 : Date.now()\n for (const row of rows) {\n try {\n const decoded = decodePublishAuthorizationData(row.decodedDataJson ?? '[]')\n if (decoded.identity.toLowerCase() !== identity) continue\n if (decoded.sessionKey.toLowerCase() !== owner) continue\n const expirationTime =\n typeof row.expirationTime === 'number' ? row.expirationTime : null\n const assess = assessPublishAuthorization({\n decoded,\n expirationTime,\n now: nowMs,\n })\n if (assess.status === 'valid') {\n return {\n bound: true,\n via: 'publish_authorization',\n warnings: [...warnings, ...assess.warnings],\n }\n }\n warnings.push(...assess.warnings)\n } catch {\n // skip undecodable row\n }\n }\n } catch (e) {\n warnings.push(\n e instanceof Error ? e.message : 'PublishAuthorization query failed',\n )\n }\n }\n\n return { bound: false, via: null, warnings }\n}\n"],"mappings":";;;;;;;;;;;;;;;AA+BA,IAAM8D,IAAgC;AAEtC,SAASC,GAAyB,GAAc;CAG9C,AADA,QAAQ,KAAK,0DAA0DC,CAAG,GAC1E/B,EAAiB,CAAC,CAAC,uBAAuB+B,CAAG;AAC/C;AAGA,SAASC,KAA0C;CAEjD,OADIjE,EAAW,cAAc,IAAU,QAAQ,QAAQ,IAChD,IAAI,SAAS,MAAY;EAC9B,EAAW,cAAcmE,EAAQ,CAAC;CACpC,CAAC;AACH;AAOA,eAAeC,GACb,GACA,GACA,GACe;CACf,IAAKC,EAAO,8BAIZ;MAAIA,EAAO,oBAAoB;GAC7B,IAAI,CAACC,GACH;GAEF,IAAI;IACF,EAA0B;IAC1B,IAAMC,IAAKlD,EAAwB;IACnC,MAAMkD,EAAG,YAAY;KAAE,QAAQ9B,EAAU;KAAG,OAAOV,EAAwBsC,CAAM;IAAE,CAAC;IACpF,IAAMG,IAAKD,EAAG,WAAW;IACzB,IAAI,CAACC,GACH;IAEF,MAAMvD,EAA8BqD,GAAgBE,GAAIH,CAAM;GAChE,QAAQ,CAER;EAEF,OAEA,IAAI;GACF,MAAMpD,EAA8BwD,EAAe,SAASA,GAAgBJ,CAAM;EACpF,SAASL,GAAK;GACZ,GAAyBA,CAAG;EAC9B;CANA;AAOF;AAEA,IAAMU,WAA0B;CAC9B,IAAML,IAASnB,EAAiB,GAC1ByB,IAAgB5C,EAAwBsC,CAAM,GAC9CO,IAASC,GAAgB,GACzBC,IAAgBC,GAAiB,GACjCC,IAAmBC,GAAgC,GACnDC,IAAmBC,GAAoB,GAEvCC,IAAqBC,EAAsB,IAAI,GAC/CC,IAAuBD,EAAO,EAAK,GACnCE,IAA2BF,EAAO,EAAK;CAO7C,QAAgB;EACd,IAAI,OAAO,SAAW,KAAa;EACnC,IAAMG,IAAOF,EAAqB;EAClC,EAAqB,UAAUJ;EAE/B,IAAIO;EACJ,IAAI;GACF,IACE,YAAY,iBAAiB,YAAY,CAAC,CAAC,EAAE,EAG5C;EACL,QAAQ;GACN,IAAU,KAAA;EACZ;EACA,IAAIA,MAAY,UAAU;EAE1B,IAAIC,IAAsB;EAC1B,IAAI;GACF,IACE,eAAe,QAAQ5B,CAA6B,MAAM;EAC9D,QAAQ;GACN,IAAsB;EACxB;EACA,AAAI4B,KAECF,KAAQ,MAAoBR,MAAqB,mBAClDO,EAAyB,YAC7B,EAAyB,UAAU,KAE7BlB,EAAO,qBAAqB5C,EAAwB,IAAIJ,EAAwB,EAAA,CACnF,YAAY;GAAE,QAAQoB,EAAU;GAAG,OAAOkC;EAAc,CAAC,CAAC,CAC1D,YAAY,CAEb,CAAC;CACL,GAAG;EAACK;EAAkBE;EAAkBb,EAAO;EAAoBM;CAAa,CAAC;CAEjF,IAAMgB,IAAyBC,GAC7B,OAAO,MAAyB;EAC9B,IAAMC,IAAUC,EAAa,WAAW;EACxC,IAAI,CAACD,GACH;EAEF,MAAM5B,GAAyB;EAC/B,IAAM8B,oBAAQ,IAAI,IAAY,CAACF,EAAQ,QAAQ,YAAY,CAAC,CAAC,GACzDvB;EACJ,IAAID,EAAO,oBAAoB;GAC7B,EAA0B;GAC1B,IAAM2B,IACJF,EAAa,kBAAkB,CAAC,EAAE,WAAWD,EAAQ,SACjDI,IAAa,YAAY;IAC7B,IAAI;KACF,OAAO,MAAM1E,EAAkCoD,CAAa;IAC9D,QAAQ;KACN,IAAI;MACF,OAAO,MAAM/D,EAA8BoF,CAAY;KACzD,QAAQ;MACN;KACF;IACF;GACF;GAMA,AALA,IAAiB,MAAMC,EAAW,GAClC,AAEE3B,OADA,MAAM,IAAI,SAAe,MAAM,qBAAqB4B,EAAE,CAAC,CAAC,GACvC,MAAMD,EAAW,IAEhC3B,KACFyB,EAAM,IAAIzB,EAAe,YAAY,CAAC;EAE1C;EACA,IAAM6B,IAAW,CAAC,GAAGJ,CAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG;EAC3C,IAAIX,EAAmB,YAAYe,GAMnC;GAGA,AAHIf,EAAmB,YAAY,QACjC/C,EAAe,QAAQ,GAEzB,EAAmB,UAAU8D;GAC7B,IAAI;IACF,IAAMH,IAAeF,EAAa,kBAAkB,CAAC,EAAE,SAGjDM,IACJ,CAAC,CAAC9B,KACD,CAAC,CAAC0B,KAAgBA,EAAa,YAAY,MAAMH,EAAQ,QAAQ,YAAY,GAC1EQ,IAAgBrE,EAAoB6D,GAAS,EAAE,MAAMO,IAAU,UAAU,MAAM,CAAC,GAIhFE,IAAeR,EAAa,kBAAkB,GAC9CS,IAAiBjC,IACnB+B,EAAc,SACdD,KAAWE,KAAgBA,EAAa,QAAQ,YAAY,MAAMT,EAAQ,QAAQ,YAAY,IAC5F7D,EAAoBsE,GAAc,EAAE,MAAM,MAAM,CAAC,CAAC,CAAC,SACnD,KAAA;IACN,MAAMzD,GAAiB;KACrB,GAAGwD;KACH,gBAAgB,CAAC,GAAGN,CAAK;KACzB,kBAAkBzB,KAAkBuB,EAAQ;KAC5C,GAAIU,IAAiB,EAAE,kBAAe,IAAI,CAAC;KAE3C,GAAIH,KAAW,CAAC9B,IACZ,EAAE,QAAQ,YAAY;MAAE,MAAM1B,EAA0BiD,CAAO;KAAE,EAAE,IACnE,CAAC;KACL,GAAIG,KAAgBA,EAAa,YAAY,MAAMH,EAAQ,QAAQ,YAAY,IAC3E,EAAE,gBAAa,IACf,CAAC;IACP,CAAC;GACH,SAAS7B,GAAK;IAGZ,MAFA,EAAmB,UAAU,MAC7B,QAAQ,KAAK,wDAAwDA,CAAG,GAClEA;GACR;GACA,MAAMI,GAAgCyB,GAASvB,GAAgBD,CAAM;EAtC5C;CAuC3B,GACA,CAACA,CAAM,CACT;CA+DA,OAzDAmC,QAAgB;EACd,IAAItB,GACF;EAEF,IAAIF,MAAqB,aAAa;GACpC,EAAmB,UAAU;GAC7B;EACF;EACA,IAAI,CAACJ,GACH;EAEF,IAAI6B,IAAY;EAShB,QARM,YAAY;GAChB,IAAI;IACF,IAAIA,GAAW;IACf,MAAMd,EAAuBf,CAAM;GACrC,QAAQ,CAER;EACF,EAAA,CAAG,SACU;GACX,IAAY;EACd;CACF,GAAG;EACDA;EACAE,GAAe;EACfE;EACAE;EACAS;CACF,CAAC,GA6BC,kBAAC1F,IAAD;EACE,QAAQwC,EAAU;EAClB,SAASF,EAA2B8B,CAAM;EAC1C,aAAa;EACb,OAAOM;EACP,QAAQ,CAAEA,CAAe;EACzB,WAAW,OAvBc,GAAsB,MAAmC;GACpF,IAAMkB,IAAUC,EAAa,WAAW;GACxC,IAAKD,GACL;QAAI;KACF,eAAe,WAAW/B,CAA6B;IACzD,QAAQ,CAER;IACA,QAAQ,IAAI,6BAA6B+B,EAAQ,OAAO;IACxD,IAAI;KACF,MAAMF,EAAuBG,CAAY;IAC3C,QAAQ,CAER;GANA;EAOF;EAUI,oBAlC2B;GAC7B,IAAI;IACF,eAAe,QAAQhC,GAA+B,GAAG;GAC3D,QAAQ,CAER;GAEA,AADAhB,EAAwB,GACxBT,EAAe,QAAQ;EACzB;EA2BI,OAAOqE,GAAU,EACf,QAAQ;GACN,iBAAiB;GACjB,mBAAmB;GACnB,wBAAwB;GACxB,mBAAmB;GACnB,wBAAwB;GACxB,aAAa;EACf,EACF,CAAC;CACF,CAAA;AAEL,GCvSMC,MAAqD,EACzD,aACA,WACA,gBACA,wBACI;CAGJ,IAAMC,IAAoBvB,EAAkC,KAAA,CAAS;CAMrE,OALIhB,KAAUuC,EAAkB,YAAYvC,MAC1CxC,EAAYwC,CAAM,GAClB,EAAkB,UAAUA,IAI5B,kBAAClB,EAAqB,UAAtB;EAA+B,OAAOkB,KAAU7B,GAAa;EAC3D,UAAA,kBAACqE,IAAD,EAAA,UACE,kBAACC,IAAD;GAA2B;GAA6B;GACrD;EACW,CAAA,EACE,CAAA;CACW,CAAA;AAEnC,GC3BMC,KACJ,2FACIC,WACJ,wEAAwEtE,EAAoB,EAAE,uGAC1FuE,WACJ,oDAAoDvE,EAAoB,EAAE,oCACtEwE,IACJ,kGAEIC,IAAuB;AAM7B,eAAsBC,KAAkD;CACtE,IAAM,EAAE,uCAAoCnF,EAAiB,GACvDoF,IAAuB5F,EAAwB;CACrD,MAAM4F,EAAqB,YAAY;EAAE,QAAQ5E,EAAU;EAAG,OAAOV,EAAwB;CAAE,CAAC;CAChG,IAAM0C,IAAiB4C,EAAqB,WAAW;CACvD,IAAI,CAAC5C,GACH,MAAM,IAAIjE,EAAkCuG,IAAgB,qCAAqC;CAGnG,IAAM7C,IAASzB,EAAU,GACnB6E,IAAkBC,EAAY;EAClC;EACA,OAAOxF,EAAwB;EAC/B,SAAS0C,EAAe;CAC1B,CAAC;CAED,IAAI,OAAMnE,EAAmBmE,EAAe,OAAO,GAInD;MAAI,CAAC+C,GACH,MAAM,IAAIhH,EACRwG,GAAiB,GACjB,gCACAvC,EAAe,OACjB;EAGF,IAAI;GACF,MAAMgD,GAAmB;IACvB,cAAchD;IACd,OAAO1C,EAAwB;IAC/B;IACA;GACF,CAAC;EACH,SAAS2F,GAAO;GACd,IAAI,MAAMxH,EAAwBuE,EAAe,SAAS0C,CAAoB,GAC5E;GAEF,MAAM,IAAI3G,EACRyG,GAAkB,GAClB,iCACAxC,EAAe,SACfiD,CACF;EACF;EAEA,IAAI,CAAE,MAAMxH,EAAwBuE,EAAe,SAAS0C,CAAoB,GAC9E,MAAM,IAAI3G,EACR0G,GACA,iCACAzC,EAAe,OACjB;CA3BA;AA6BJ;;;AChEA,SAAgBkD,EAAwC,GAA2C;CACjG,OAAOtE,EAAoC;AAC7C;;;ACJA,IAAMuE,WACJ,uFAAuFlF,EAAoB,EAAE,6BACzGmF,UACJ,4FAA4FnF,EAAoB,EAAE;AAYpH,eAAsBoF,GAA8B,GAGlC;CAChB,IAAM,EAAE,mBAAgB,qBAAkBC,GACpCC,IAAgB3G,EAAwB;CAC9C,MAAM2G,EAAc,YAAY;EAAE,QAAQvF,EAAU;EAAG,OAAOV,EAAwB;CAAE,CAAC;CACzF,IAAMkG,IAAiBD,EAAc,WAAW;CAChD,IAAI,CAACC,GACH,MAAM,IAAIpH,EACR+G,GAAgB,GAChB,oCACAtD,CACF;CAGF,IAAMgD,IAAkBC,EAAY;EAClC,QAAQ9E,EAAU;EAClB,OAAOV,EAAwB;EAC/B,SAASuC;CACX,CAAC,GACK4D,IAAc;EAClB,iBAAiBP,EAAwCrD,CAAc;EACvE,gCAAgC;CAClC,GAEI6D,IAAe;CACnB,IAAI;EACF,IAAe,MAAMC,GAAuB;GAC1C;GACA,mBAAmBC;GACnB,gBAAgBH;EAClB,CAAC;CACH,SAASR,GAAO;EACd,MAAM,IAAI7G,EACRgH,EAAsB,GACtB,oCACAvD,GACAoD,CACF;CACF;CAEA,IAAIS,GACF,IAAI;EACF,IAAMG,IAAKC,GAAc;GACvB,UAAUjB;GACV,SAASW;GACT,mBAAmBI;GACnB;EACF,CAAC,GACKG,IAAS,MAAMC,GAAgB;GAAE,SAASR;GAAgB,aAAaK;EAAG,CAAC;EACjF,MAAMhH,GAAsBkH,EAAO,eAAgC;CACrE,SAASd,GAAO;EACd,MAAM,IAAI7G,EACRgH,EAAsB,GACtB,oCACAvD,GACAoD,CACF;CACF;CAGF,IAAIgB,IAAS;CACb,IAAI;EACF,IAAS,MAAM3H,GAAmBuD,GAA2B+D,CAAwB;CACvF,SAASX,GAAO;EACd,MAAM,IAAI7G,EACRgH,EAAsB,GACtB,oCACAvD,GACAoD,CACF;CACF;CAEA,IAAI,CAACgB,GACH,MAAM,IAAI7H,EACRgH,EAAsB,GACtB,oCACAvD,CACF;AAEJ;;;AC7DA,eAAeqE,EAAsB,GAA0C;CAC7E,IAAMX,IAAgB3G,EAAwB;CAC9C,MAAM2G,EAAc,YAAY;EAAE,QAAQvF,EAAU;EAAG,OAAOV,EAAwB;CAAE,CAAC;CACzF,IAAM8D,IAAUmC,EAAc,WAAW;CACzC,IAAI,CAACnC,GACH,MAAM,IAAIhF,EACR,4FACA,+BACAyD,CACF;CAEF,OAAOuB;AACT;AAEA,eAAe+C,EACb,GACA,GACwB;CAExB,OADIC,KACG7G,EAAoB,MAAM2G,EAAsBrE,CAAc,GAAG,EAAE,MAAM,QAAQ,CAAC;AAC3F;AAEA,eAAewE,GAA8B,GAAuC;CAClF,IAAMzE,IAASpC,EAAiB;CAEhC,IAAI,CADeoC,EAAO,8BAA8B,KAAK,GAE3D,MAAU,MACR,oGACF;CAGF,IAAM0E,IAAY,MAAMJ,EAAsBrE,CAAc,GACxD0E;CACJ,IAAI;EACF,IAAU,MAAM/H,EAA8BqD,GAAgByE,GAAW1E,CAAM;CACjF,SAASqD,GAAO;EAEd,MADIA,aAAiB7G,IAAkC6G,IACjD,IAAI7G,EACR,wDACA,iCACAyD,GACAoD,CACF;CACF;CAKA,MAAMxG,GACJoD,GACA0E,EAAQ,WAAW,cACf,EAAE,cAAcA,EAAQ,IAAI,IAC5B,EAAE,cAAcA,EAAQ,WAAW,sBAAsB,IAAI,EAAE,CACrE;AACF;AAUA,eAAsBC,GACpB,GACwC;CACxC,IAAM,EAAE,mBAAgB,sBAAmB,eAAY,iBAAclB;CAGrE,AADA,MAAMe,GAA8BxE,CAAc,GAClD,MAAMV,EAA2B;EAC/B;EACA;EACA;CACF,CAAC;CAED,IAAMiF,IAAa,MAAMD,EAAkBtE,GAAgByD,EAAO,UAAU;CAS5E,OAAO;EACL;EACA;EACA,eAAA,MAX0BhF,EAA2B;GACrD,QAAQ8F;GACR,UAAUvE;GACV,YAAY4E;GACZ,KAAKC;GACL;EACF,CAAC;CAMD;AACF;AAKA,eAAsBC,GACpB,GACe;CACf,IAAM,EAAE,mBAAgB,sBAAmB,wBAAqBrB,GAC1Dc,IAAa,MAAMD,EAAkBtE,GAAgByD,EAAO,UAAU;CAO5E,AALA,MAAMrE,EAA2B;EAC/B;EACA;CACF,CAAC,GAED,MAAMN,EAA2B;EAC/B,QAAQyF;EACR,KAAKQ;CACP,CAAC;AACH;;;ACtHA,eAAsBC,GACpB,GAC6C;CAC7C,IAAM,EACJ,mBACA,kBACA,WACA,2BAAwB,IACxB,kBAAe,OACbvB,GACEwB,IAAqB,CAAC,GACtBC,IAAQC,EAAc,KAAK,CAAC,CAAC,YAAY,GACzCC,IAAWpF,EAAe,KAAK,CAAC,CAAC,YAAY;CAEnD,IAAI,CAAC,sBAAsB,KAAKkF,CAAK,KAAK,CAAC,sBAAsB,KAAKE,CAAQ,GAC5E,OAAO;EAAE,OAAO;EAAO,KAAK;EAAM,UAAU,CAAC,yCAAyC;CAAE;CAG1F,IAAIC,GACF,IAAI;EAEF,IAAI,MADiBhG,EAA0BW,GAAgBmF,CAAa,GAE1E,OAAO;GAAE,OAAO;GAAM,KAAK;GAAsB;EAAS;CAE9D,SAAS,GAAG;EACV,EAAS,KACP,aAAa,QAAQ,EAAE,UAAU,6BACnC;CACF;CAGF,IAAIG,GACF,IAAI;EACF,IAAMC,IAAO,MAAMC,GAA+B;GAChD,YAAY,CAACxF,CAAc;GAC3B,aAAa,CAACmF,CAAa;GAC3B,gBAAgB;EAClB,CAAC,GACKM,IAAQC,KAAU,OAAuB,KAAK,IAAI,IAAzBA,IAAS;EACxC,KAAK,IAAMC,KAAOJ,GAChB,IAAI;GACF,IAAMK,IAAUC,GAA+BF,EAAI,mBAAmB,IAAI;GAE1E,IADIC,EAAQ,SAAS,YAAY,MAAMR,KACnCQ,EAAQ,WAAW,YAAY,MAAMV,GAAO;GAChD,IAAMY,IACJ,OAAOH,EAAI,kBAAmB,WAAWA,EAAI,iBAAiB,MAC1DI,IAASC,GAA2B;IACxC;IACA;IACA,KAAKP;GACP,CAAC;GACD,IAAIM,EAAO,WAAW,SACpB,OAAO;IACL,OAAO;IACP,KAAK;IACL,UAAU,CAAC,GAAGd,GAAU,GAAGc,EAAO,QAAQ;GAC5C;GAEF,EAAS,KAAK,GAAGA,EAAO,QAAQ;EAClC,QAAQ,CAER;CAEJ,SAAS,GAAG;EACV,EAAS,KACP,aAAa,QAAQ,EAAE,UAAU,mCACnC;CACF;CAGF,OAAO;EAAE,OAAO;EAAO,KAAK;EAAM;CAAS;AAC7C"}
1	+ {"version":3,"file":"thirdweb.js","names":["seedClient","ConnectButtonThirdweb","pollSmartWalletDeployed","useLocalWalletAccount","ensureManagedAccountReady","getConnectedAccount","isContractDeployed","getSharedPublishInAppWalletStorage","Eip7702ModularAccountPublishError","getConnectedModularAccount","ExternalWalletsForDeploy","isSmartWalletDeployed","getSmartWalletAddressForAdmin","ManagedAccountPublishError","appMetadata","readIsActiveSigner","tryDeployManagedAccount","ensureExecutorModuleInstalled","assertExecutorModuleReadyForAccount","useActiveSmartWalletContract","deployManagedAccountViaFactory","getManagedAccountWallet","waitForPublishReceipt","getConnectedManagedAccountAddress","pollSmartWalletDeployed$1","getModularAccountWallet","resolveSmartWalletForPublish","pollSmartWalletDeployed","syncPublishInAppAuthToken","initPublish","wallets","getPublishThirdwebChain","fromThirdwebAccount","getPublishConfig","runModularExecutorPublishPrep","asThirdwebPublishWallet","seedPaymaster","PublishManager","asSeedSignerFromThirdweb","getWalletsForConnectButton","getConfigRef","getClient","getPublishChainName","CALL_GAS_HEADROOM_BPS","deploySmartWalletContract","setPublishWallet","clearPublishWallet","attestPublishAuthorization","buildAutomationSessionKeyPermissions","hashAutomationSessionKeyPermissions","usePublishConfig","PublishConfigContext","revokePublishAuthorization","approvedTargetsForAutomationPublish","toThirdwebSessionKeyPermissions","PUBLISH_AUTOMATION_SCOPES","ensureSmartWalletThenPublish","ensureModularPublishBootstrap","removeAutomationSessionKey","isAutomationSessionActive","ensureAutomationSessionKey","ConnectButton$1","USER_DISCONNECTED_SESSION_KEY","reportWalletSetupWarning","err","waitUntilSeedInitialized","client","resolve","ensureExecutorModulesForConnect","config","managedAddress","mw","ma","modularAccount","ConnectButton","thirdwebChain","wallet","useActiveWallet","activeAccount","useActiveAccount","connectionStatus","useActiveWalletConnectionStatus","isAutoConnecting","useIsAutoConnecting","lastSyncedOwnedKey","useRef","prevIsAutoConnecting","reloadAutoConnectRetried","prev","navType","userChoseDisconnect","syncActiveWalletToSeed","useCallback","account","activeWallet","owned","adminAddress","tryManaged","r","ownedKey","isSmart","publishWallet","adminAccount","dataItemSigner","useEffect","cancelled","darkTheme","PublishProviderThirdweb","initializedConfig","ThirdwebProvider","SeedProvider","MSG_NO_ACCOUNT","MSG_NOT_UPGRADED","MSG_DEPLOY_FAILED","MSG_NOT_CONFIRMED","DEPLOY_POLL_ATTEMPTS","ensureEip7702ModularAccountReady","modularAccountWallet","accountContract","getContract","autoDeployEip7702ModularAccount","deploySmartAccount","cause","defaultApprovedTargetsForModularPublish","MSG_UNAVAILABLE","MSG_ACTIVATION_FAILED","ensureManagedSignerSessionKey","params","managedWallet","managedAccount","permissions","shouldUpdate","shouldUpdateSessionKey","signerAddress","tx","addSessionKey","result","sendTransaction","active","connectManagedAccount","resolveUserWallet","userWallet","assertExecutorModuleInstalled","twAccount","install","enrollPublishAutomation","expiresAt","PUBLISH_AUTHORIZATION_DEFAULT_EXPIRATION_SECS","sessionKeyAddress","appAddress","revokePublishAutomation","authorizationUid","assertStorageBoundToIdentity","warnings","owner","dataItemOwner","identity","allowActiveSessionKey","allowSidecar","rows","getPublishAuthorizationFromEas","nowMs","atTime","row","decoded","decodePublishAuthorizationData","expirationTime","assess","assessPublishAuthorization"],"sources":["../src/react/ConnectButton.tsx","../src/react/PublishProvider.thirdweb.tsx","../src/helpers/ensureEip7702ModularAccountReady.ts","../src/helpers/defaultApprovedTargetsForModularPublish.ts","../src/helpers/ensureManagedSignerSessionKey.ts","../src/helpers/enrollPublishAutomation.ts","../src/helpers/assertStorageBoundToIdentity.ts"],"sourcesContent":["import React, { FC, useCallback, useEffect, useRef } from \"react\"\nimport {\n ConnectButton as ConnectButtonThirdweb,\n darkTheme,\n useActiveAccount,\n useActiveWallet,\n useActiveWalletConnectionStatus,\n useIsAutoConnecting,\n} from \"thirdweb/react\"\nimport { client as seedClient } from \"@seedprotocol/sdk\"\nimport {\n deploySmartWalletContract,\n getClient,\n getConnectedManagedAccountAddress,\n getManagedAccountWallet,\n getModularAccountWallet,\n getSmartWalletAddressForAdmin,\n getWalletsForConnectButton,\n syncPublishInAppAuthToken,\n} from \"../helpers/thirdweb\"\nimport { fromThirdwebAccount } from \"../helpers/adapters/thirdwebAccount\"\nimport { setPublishWallet, clearPublishWallet } from \"../helpers/publishWalletRegistry\"\nimport { usePublishConfig } from \"./PublishConfigContext\"\nimport { getPublishConfig } from \"../config\"\nimport type { Account, Wallet } from \"thirdweb/wallets\"\nimport type { PublishConfig } from \"../config\"\nimport { ensureExecutorModuleInstalled } from \"../helpers/ensureExecutorModule\"\nimport { PublishManager } from \"../services/publishManager\"\nimport { getPublishThirdwebChain } from '../helpers/thirdwebChain'\n\n/** Session flag so we do not force autoConnect after an explicit UI disconnect (survives reload). /\nconst USER_DISCONNECTED_SESSION_KEY = \"seedProtocol:publish:userChoseWalletDisconnect\"\n\nfunction reportWalletSetupWarning(err: unknown) {\n // Expected when managed-wallet autoConnect is still catching up; publish prep retries.\n console.warn(\"[ConnectButton] Wallet setup / module install skipped:\", err)\n getPublishConfig().onWalletSetupWarning?.(err)\n}\n\n/* Resolves after `ClientManager.init()` has finished; `setAddresses` requires this. /\nfunction waitUntilSeedInitialized(): Promise<void> {\n if (seedClient.isInitialized()) return Promise.resolve()\n return new Promise((resolve) => {\n seedClient.onReady(() => resolve())\n })\n}\n\n/\n Installs the Seed executor on the ManagedAccount (EIP-4337 Router) contract via its\n * `SeedExecutorRouterExtension`. Other accounts, such as the EIP-7702 modular wallet, have no\n * extension, so `ensureExecutorModuleInstalled` skips them.\n /\nasync function ensureExecutorModulesForConnect(\n modularAccount: Account,\n managedAddress: string \| undefined,\n config: PublishConfig,\n): Promise<void> {\n if (!config.modularAccountModuleContract) {\n return\n }\n\n if (config.useModularExecutor) {\n if (!managedAddress) {\n return\n }\n try {\n syncPublishInAppAuthToken()\n const mw = getManagedAccountWallet()\n await mw.autoConnect({ client: getClient(), chain: getPublishThirdwebChain(config) })\n const ma = mw.getAccount()\n if (!ma) {\n return\n }\n await ensureExecutorModuleInstalled(managedAddress, ma, config)\n } catch {\n / managed wallet session may lag modular connect; publish prep retries module install /\n }\n return\n }\n\n try {\n await ensureExecutorModuleInstalled(modularAccount.address, modularAccount, config)\n } catch (err) {\n reportWalletSetupWarning(err)\n }\n}\n\nconst ConnectButton: FC = () => {\n const config = usePublishConfig()\n const thirdwebChain = getPublishThirdwebChain(config)\n const wallet = useActiveWallet()\n const activeAccount = useActiveAccount()\n const connectionStatus = useActiveWalletConnectionStatus()\n const isAutoConnecting = useIsAutoConnecting()\n /* Avoid duplicate setAddresses when onConnect and the reconcile effect both run. /\n const lastSyncedOwnedKey = useRef<string \| null>(null)\n const prevIsAutoConnecting = useRef(false)\n const reloadAutoConnectRetried = useRef(false)\n\n /\n Thirdweb sometimes finishes autoConnect on full reload with `disconnected` and no wallet\n * (see debug: isAutoConnecting true→false then disconnected). One explicit in-app autoConnect\n * retry recovers without affecting users who chose Disconnect (sessionStorage gate).\n /\n useEffect(() => {\n if (typeof window === \"undefined\") return\n const prev = prevIsAutoConnecting.current\n prevIsAutoConnecting.current = isAutoConnecting\n\n let navType: string \| undefined\n try {\n navType = (\n performance.getEntriesByType(\"navigation\")[0] as\n \| PerformanceNavigationTiming\n \| undefined\n )?.type\n } catch {\n navType = undefined\n }\n if (navType !== \"reload\") return\n\n let userChoseDisconnect = false\n try {\n userChoseDisconnect =\n sessionStorage.getItem(USER_DISCONNECTED_SESSION_KEY) === \"1\"\n } catch {\n userChoseDisconnect = false\n }\n if (userChoseDisconnect) return\n\n if (!prev \|\| isAutoConnecting \|\| connectionStatus !== \"disconnected\") return\n if (reloadAutoConnectRetried.current) return\n reloadAutoConnectRetried.current = true\n\n void (config.useModularExecutor ? getModularAccountWallet() : getManagedAccountWallet())\n .autoConnect({ client: getClient(), chain: thirdwebChain })\n .catch(() => {\n / no session or iframe not ready; Connect UI can still sign in /\n })\n }, [connectionStatus, isAutoConnecting, config.useModularExecutor, thirdwebChain])\n\n const syncActiveWalletToSeed = useCallback(\n async (activeWallet: Wallet) => {\n const account = activeWallet.getAccount()\n if (!account) {\n return\n }\n await waitUntilSeedInitialized()\n const owned = new Set<string>([account.address.toLowerCase()])\n let managedAddress: string \| undefined\n if (config.useModularExecutor) {\n syncPublishInAppAuthToken()\n const adminAddress =\n activeWallet.getAdminAccount?.()?.address ?? account.address\n const tryManaged = async () => {\n try {\n return await getConnectedManagedAccountAddress(thirdwebChain)\n } catch {\n try {\n return await getSmartWalletAddressForAdmin(adminAddress)\n } catch {\n return undefined\n }\n }\n }\n managedAddress = await tryManaged()\n if (!managedAddress) {\n await new Promise<void>((r) => queueMicrotask(() => r()))\n managedAddress = await tryManaged()\n }\n if (managedAddress) {\n owned.add(managedAddress.toLowerCase())\n }\n }\n const ownedKey = [...owned].sort().join(\",\")\n if (lastSyncedOwnedKey.current === ownedKey) {\n return\n }\n // Another wallet took over: publishes started for the previous one stop (their rows stay\n // for it to resume). Not on the first sync, where publishes restored from the DB need this\n // wallet, nor on a re-sync of the same wallet.\n if (lastSyncedOwnedKey.current !== null) {\n PublishManager.stopAll()\n }\n lastSyncedOwnedKey.current = ownedKey\n try {\n const adminAddress = activeWallet.getAdminAccount?.()?.address\n // A wallet with a separate admin account, or the modular executor's ManagedAccount, is a\n // smart account; otherwise the connected account is a plain key (in-app or injected).\n const isSmart =\n !!managedAddress \|\|\n (!!adminAddress && adminAddress.toLowerCase() !== account.address.toLowerCase())\n const publishWallet = fromThirdwebAccount(account, { kind: isSmart ? \"smart\" : \"eoa\" })\n // Data items need an ECDSA signer. With the modular executor the connected account is an\n // EOA (or EIP-7702 on one) acting for the ManagedAccount; otherwise a smart wallet's admin\n // EOA signs them.\n const adminAccount = activeWallet.getAdminAccount?.()\n const dataItemSigner = managedAddress\n ? publishWallet.signer\n : isSmart && adminAccount && adminAccount.address.toLowerCase() !== account.address.toLowerCase()\n ? fromThirdwebAccount(adminAccount, { kind: \"eoa\" }).signer\n : undefined\n await setPublishWallet({\n ...publishWallet,\n ownedAddresses: [...owned],\n publisherAddress: managedAddress ?? account.address,\n ...(dataItemSigner ? { dataItemSigner } : {}),\n // A new user's smart wallet has no code until its first transaction: publish deploys it.\n ...(isSmart && !managedAddress\n ? { deploy: async () => { await deploySmartWalletContract(account) } }\n : {}),\n ...(adminAddress && adminAddress.toLowerCase() !== account.address.toLowerCase()\n ? { adminAddress }\n : {}),\n })\n } catch (err) {\n lastSyncedOwnedKey.current = null\n console.warn(\"[ConnectButton] Failed to set seed client addresses:\", err)\n throw err\n }\n await ensureExecutorModulesForConnect(account, managedAddress, config)\n },\n [config],\n )\n\n /\n Thirdweb autoConnect restores the wallet without calling onConnect. Seed addresses live in\n * SQLite (OPFS); after a wipe there is no app_state row until setAddresses runs again.\n /\n useEffect(() => {\n if (isAutoConnecting) {\n return\n }\n if (connectionStatus !== \"connected\") {\n lastSyncedOwnedKey.current = null\n return\n }\n if (!wallet) {\n return\n }\n let cancelled = false\n void (async () => {\n try {\n if (cancelled) return\n await syncActiveWalletToSeed(wallet)\n } catch {\n / logged in syncActiveWalletToSeed /\n }\n })()\n return () => {\n cancelled = true\n }\n }, [\n wallet,\n activeAccount?.address,\n connectionStatus,\n isAutoConnecting,\n syncActiveWalletToSeed,\n ])\n\n const handleDisconnect = () => {\n try {\n sessionStorage.setItem(USER_DISCONNECTED_SESSION_KEY, \"1\")\n } catch {\n / private mode / SSR /\n }\n void clearPublishWallet()\n PublishManager.stopAll()\n }\n\n const handleConnect = async (activeWallet: Wallet, _allConnectedWallets: Wallet[]) => {\n const account = activeWallet.getAccount()\n if (!account) return\n try {\n sessionStorage.removeItem(USER_DISCONNECTED_SESSION_KEY)\n } catch {\n / ignore /\n }\n console.log('[ConnectButton] Connected', account.address)\n try {\n await syncActiveWalletToSeed(activeWallet)\n } catch {\n / syncActiveWalletToSeed logs /\n }\n }\n\n return (\n <ConnectButtonThirdweb\n client={getClient()}\n wallets={getWalletsForConnectButton(config)}\n autoConnect={true}\n chain={thirdwebChain}\n chains={[ thirdwebChain, ]}\n onConnect={handleConnect}\n onDisconnect={handleDisconnect}\n theme={darkTheme({\n colors: {\n primaryButtonBg: '#1D2939',\n primaryButtonText: '#FFFFFF',\n secondaryButtonHoverBg: '#1D2939',\n connectedButtonBg: '#101828',\n connectedButtonBgHover: '#1D2939',\n borderColor: '#344054',\n },\n })}\n />\n )\n}\n\nexport default ConnectButton\n","import React, { FC, useRef } from \"react\"\nimport { ThirdwebProvider } from \"thirdweb/react\"\nimport { SeedProvider } from '@seedprotocol/react'\nimport { initPublish, getConfigRef, type PublishConfig } from \"../config\"\nimport { PublishConfigContext, usePublishConfig } from \"./PublishConfigContext\"\nimport type { PublishProviderProps } from \"./PublishProvider\"\n\nexport { usePublishConfig }\n\n/\n Thirdweb-backed PublishProvider (includes ThirdwebProvider).\n /\nconst PublishProviderThirdweb: FC<PublishProviderProps> = ({\n children,\n config,\n queryClient,\n queryClientRef,\n}) => {\n // During render, not in an effect: children such as ConnectButton read the config on their\n // first render, which runs before this provider's effects. Once per config object.\n const initializedConfig = useRef<PublishConfig \| undefined>(undefined)\n if (config && initializedConfig.current !== config) {\n initPublish(config)\n initializedConfig.current = config\n }\n\n return (\n <PublishConfigContext.Provider value={config ?? getConfigRef()}>\n <ThirdwebProvider>\n <SeedProvider queryClient={queryClient} queryClientRef={queryClientRef}>\n {children}\n </SeedProvider>\n </ThirdwebProvider>\n </PublishConfigContext.Provider>\n )\n}\n\nexport default PublishProviderThirdweb\n","import { deploySmartAccount, getContract } from 'thirdweb'\nimport { getPublishConfig } from '../config'\nimport { Eip7702ModularAccountPublishError } from '../errors'\nimport { isContractDeployed, pollSmartWalletDeployed } from './chainClient'\nimport { getClient, getModularAccountWallet } from './thirdweb'\nimport { getPublishThirdwebChain } from './thirdwebChain'\nimport { getPublishChainName } from './chainConfig'\n\nconst MSG_NO_ACCOUNT =\n 'Modular (EIP-7702) wallet is not connected. Sign in with the same method and try again.'\nconst MSG_NOT_UPGRADED = () =>\n `Your modular account is not upgraded to an EIP-7702 smart account on ${getPublishChainName()} yet. Enable autoDeployEip7702ModularAccount in publish config or complete wallet setup, then retry.`\nconst MSG_DEPLOY_FAILED = () =>\n `Automatic EIP-7702 smart account setup failed on ${getPublishChainName()}. Retry or reconnect your wallet.`\nconst MSG_NOT_CONFIRMED =\n 'EIP-7702 upgrade was sent but on-chain bytecode was not detected yet. Wait a moment and retry.'\n\nconst DEPLOY_POLL_ATTEMPTS = 5\n\n/\n Ensures the Thirdweb in-app modular wallet (EIP-7702) has non-empty bytecode at its address\n * on the publish chain. deploySmartAccount remains Thirdweb; bytecode checks use viem.\n /\nexport async function ensureEip7702ModularAccountReady(): Promise<void> {\n const { autoDeployEip7702ModularAccount } = getPublishConfig()\n const modularAccountWallet = getModularAccountWallet()\n await modularAccountWallet.autoConnect({ client: getClient(), chain: getPublishThirdwebChain() })\n const modularAccount = modularAccountWallet.getAccount()\n if (!modularAccount) {\n throw new Eip7702ModularAccountPublishError(MSG_NO_ACCOUNT, 'EIP7702_MODULAR_ACCOUNT_UNAVAILABLE')\n }\n\n const client = getClient()\n const accountContract = getContract({\n client,\n chain: getPublishThirdwebChain(),\n address: modularAccount.address,\n })\n\n if (await isContractDeployed(modularAccount.address)) {\n return\n }\n\n if (!autoDeployEip7702ModularAccount) {\n throw new Eip7702ModularAccountPublishError(\n MSG_NOT_UPGRADED(),\n 'EIP7702_MODULAR_NOT_UPGRADED',\n modularAccount.address,\n )\n }\n\n try {\n await deploySmartAccount({\n smartAccount: modularAccount,\n chain: getPublishThirdwebChain(),\n client,\n accountContract,\n })\n } catch (cause) {\n if (await pollSmartWalletDeployed(modularAccount.address, DEPLOY_POLL_ATTEMPTS)) {\n return\n }\n throw new Eip7702ModularAccountPublishError(\n MSG_DEPLOY_FAILED(),\n 'EIP7702_MODULAR_DEPLOY_FAILED',\n modularAccount.address,\n cause,\n )\n }\n\n if (!(await pollSmartWalletDeployed(modularAccount.address, DEPLOY_POLL_ATTEMPTS))) {\n throw new Eip7702ModularAccountPublishError(\n MSG_NOT_CONFIRMED,\n 'EIP7702_MODULAR_NOT_CONFIRMED',\n modularAccount.address,\n )\n }\n}\n","import { approvedTargetsForAutomationPublish } from './approvedTargetsForAutomationPublish'\n\n/\n Allowlisted call targets for a modular session signer: only the Seed executor module.\n \n Never the ManagedAccount (a key could then make any self-call, which the account trusts) and\n * never EAS (a direct EAS target bypasses the Seed extension's forced revocability).\n \n @deprecated Interactive publishing is a UserOp from the ManagedAccount itself and needs no\n * session key; automation keys use {@link approvedTargetsForAutomationPublish}, which this now\n * returns. `managedAddress` is ignored.\n * @throws if `modularAccountModuleContract` is unset or invalid\n /\nexport function defaultApprovedTargetsForModularPublish(_managedAddress?: string): `0x${string}`[] {\n return approvedTargetsForAutomationPublish()\n}\n","import { getContract, sendTransaction } from 'thirdweb'\nimport { addSessionKey, shouldUpdateSessionKey } from 'thirdweb/extensions/erc4337'\nimport type { Address } from 'viem'\nimport { ManagedAccountPublishError } from '../errors'\nimport { waitForPublishReceipt } from './chainClient'\nimport { readIsActiveSigner } from './contracts'\nimport { defaultApprovedTargetsForModularPublish } from './defaultApprovedTargetsForModularPublish'\nimport { getClient, getManagedAccountWallet } from './thirdweb'\nimport { getPublishThirdwebChain } from './thirdwebChain'\nimport { getPublishChainName } from './chainConfig'\n\nconst MSG_UNAVAILABLE = () =>\n `Could not connect the managed publishing account to authorize the modular signer on ${getPublishChainName()}. Reconnect and try again.`\nconst MSG_ACTIVATION_FAILED = () =>\n `Could not authorize the modular wallet as a session signer on your publishing account on ${getPublishChainName()}.`\n\n/\n Ensures the modular (EIP-7702) wallet is an active session signer on the ManagedAccount.\n * If permissions are missing or stale, sends `addSessionKey` signed by the managed EIP-4337 wallet.\n * Session-key AA extensions remain on Thirdweb; verification uses viem.\n \n The key may call only the Seed executor module ({@link defaultApprovedTargetsForModularPublish}).\n \n @deprecated Interactive publishing is a UserOp from the ManagedAccount itself and needs no\n * session key. For server-held keys use `enrollPublishAutomation`.\n /\nexport async function ensureManagedSignerSessionKey(params: {\n managedAddress: string\n signerAddress: string\n}): Promise<void> {\n const { managedAddress, signerAddress } = params\n const managedWallet = getManagedAccountWallet()\n await managedWallet.autoConnect({ client: getClient(), chain: getPublishThirdwebChain() })\n const managedAccount = managedWallet.getAccount()\n if (!managedAccount) {\n throw new ManagedAccountPublishError(\n MSG_UNAVAILABLE(),\n 'MODULAR_SIGNER_ACTIVATION_FAILED',\n managedAddress,\n )\n }\n\n const accountContract = getContract({\n client: getClient(),\n chain: getPublishThirdwebChain(),\n address: managedAddress,\n })\n const permissions = {\n approvedTargets: defaultApprovedTargetsForModularPublish(managedAddress),\n nativeTokenLimitPerTransaction: 0,\n }\n\n let shouldUpdate = false\n try {\n shouldUpdate = await shouldUpdateSessionKey({\n accountContract,\n sessionKeyAddress: signerAddress,\n newPermissions: permissions,\n })\n } catch (cause) {\n throw new ManagedAccountPublishError(\n MSG_ACTIVATION_FAILED(),\n 'MODULAR_SIGNER_ACTIVATION_FAILED',\n managedAddress,\n cause,\n )\n }\n\n if (shouldUpdate) {\n try {\n const tx = addSessionKey({\n contract: accountContract,\n account: managedAccount,\n sessionKeyAddress: signerAddress,\n permissions,\n })\n const result = await sendTransaction({ account: managedAccount, transaction: tx })\n await waitForPublishReceipt(result.transactionHash as `0x${string}`)\n } catch (cause) {\n throw new ManagedAccountPublishError(\n MSG_ACTIVATION_FAILED(),\n 'MODULAR_SIGNER_ACTIVATION_FAILED',\n managedAddress,\n cause,\n )\n }\n }\n\n let active = false\n try {\n active = await readIsActiveSigner(managedAddress as Address, signerAddress as Address)\n } catch (cause) {\n throw new ManagedAccountPublishError(\n MSG_ACTIVATION_FAILED(),\n 'MODULAR_SIGNER_ACTIVATION_FAILED',\n managedAddress,\n cause,\n )\n }\n\n if (!active) {\n throw new ManagedAccountPublishError(\n MSG_ACTIVATION_FAILED(),\n 'MODULAR_SIGNER_ACTIVATION_FAILED',\n managedAddress,\n )\n }\n}\n","import type { Account } from 'thirdweb/wallets'\nimport { PUBLISH_AUTHORIZATION_DEFAULT_EXPIRATION_SECS } from '@seedprotocol/eas'\nimport type { PublishWallet } from './seedSigner'\nimport { fromThirdwebAccount } from './adapters/thirdwebAccount'\nimport { getPublishConfig } from '../config'\nimport { ManagedAccountPublishError } from '../errors'\nimport { ensureExecutorModuleInstalled, type EnsureExecutorModuleResult } from './ensureExecutorModule'\nimport { assertExecutorModuleReadyForAccount } from './executorModuleReadiness'\nimport {\n ensureAutomationSessionKey,\n removeAutomationSessionKey,\n} from './ensureAutomationSessionKey'\nimport {\n attestPublishAuthorization,\n revokePublishAuthorization,\n type AttestPublishAuthorizationResult,\n} from '../services/publishAuthorization'\nimport { getClient, getManagedAccountWallet } from './thirdweb'\nimport { getPublishThirdwebChain } from './thirdwebChain'\n\nexport type EnrollPublishAutomationParams = {\n managedAddress: string\n sessionKeyAddress: string\n /* Optional app label stored in the sidecar (defaults to zero address). /\n appAddress?: string\n /\n Unix seconds when the session key and the grant end. Defaults to 365 days from now\n * ({@link PUBLISH_AUTHORIZATION_DEFAULT_EXPIRATION_SECS}); the same value goes to both, so the\n * on-chain key never outlives its PublishAuthorization.\n /\n expiresAt?: number\n /\n User-controlled ManagedAccount wallet used to add the session key and attest the sidecar.\n * When omitted, uses the connected managed in-app wallet.\n /\n userWallet?: PublishWallet\n}\n\nexport type EnrollPublishAutomationResult = {\n managedAddress: string\n sessionKeyAddress: string\n authorization: AttestPublishAuthorizationResult\n}\n\nexport type RevokePublishAutomationParams = {\n managedAddress: string\n sessionKeyAddress: string\n authorizationUid: string\n userWallet?: PublishWallet\n}\n\nasync function connectManagedAccount(managedAddress: string): Promise<Account> {\n const managedWallet = getManagedAccountWallet()\n await managedWallet.autoConnect({ client: getClient(), chain: getPublishThirdwebChain() })\n const account = managedWallet.getAccount()\n if (!account) {\n throw new ManagedAccountPublishError(\n 'Could not connect the managed publishing account to enroll or revoke publish automation.',\n 'MANAGED_ACCOUNT_UNAVAILABLE',\n managedAddress,\n )\n }\n return account\n}\n\nasync function resolveUserWallet(\n managedAddress: string,\n userWallet?: PublishWallet,\n): Promise<PublishWallet> {\n if (userWallet) return userWallet\n return fromThirdwebAccount(await connectManagedAccount(managedAddress), { kind: 'smart' })\n}\n\nasync function assertExecutorModuleInstalled(managedAddress: string): Promise<void> {\n const config = getPublishConfig()\n const moduleAddr = config.modularAccountModuleContract?.trim()\n if (!moduleAddr) {\n throw new Error(\n '@seedprotocol/publish: enrollPublishAutomation requires PublishConfig.modularAccountModuleContract',\n )\n }\n\n const twAccount = await connectManagedAccount(managedAddress)\n let install: EnsureExecutorModuleResult\n try {\n install = await ensureExecutorModuleInstalled(managedAddress, twAccount, config)\n } catch (cause) {\n if (cause instanceof ManagedAccountPublishError) throw cause\n throw new ManagedAccountPublishError(\n 'Executor module setup failed for publish automation.',\n 'EXECUTOR_MODULE_NOT_INSTALLED',\n managedAddress,\n cause,\n )\n }\n\n // The session key may only call the module, so refuse to enroll unless the module can act\n // for this account. Otherwise every automation publish would revert. A fresh install is\n // confirmed from its receipt; otherwise the read may still trail an install that just landed.\n await assertExecutorModuleReadyForAccount(\n managedAddress,\n install.status === 'installed'\n ? { installedEas: install.eas }\n : { readAttempts: install.status === 'already-installed' ? 5 : 1 },\n )\n}\n\n/\n Enroll an app automation key: install the Seed executor (`installSeedExecutor` on Router\n * accounts with the executor router extension), add an executor-only session key, then attest\n * the PublishAuthorization sidecar (ManagedAccount attester).\n \n @throws ManagedAccountPublishError `AUTOMATION_UNSUPPORTED_ACCOUNT` before adding the session\n * key when the executor cannot act for the account (e.g. Router accounts without the extension)\n /\nexport async function enrollPublishAutomation(\n params: EnrollPublishAutomationParams,\n): Promise<EnrollPublishAutomationResult> {\n const { managedAddress, sessionKeyAddress, appAddress } = params\n const expiresAt =\n typeof params.expiresAt === 'number' && params.expiresAt > 0\n ? Math.trunc(params.expiresAt)\n : Math.floor(Date.now() / 1000) + PUBLISH_AUTHORIZATION_DEFAULT_EXPIRATION_SECS\n\n await assertExecutorModuleInstalled(managedAddress)\n await ensureAutomationSessionKey({\n managedAddress,\n sessionKeyAddress,\n expiresAt,\n })\n\n const userWallet = await resolveUserWallet(managedAddress, params.userWallet)\n const authorization = await attestPublishAuthorization({\n wallet: userWallet,\n identity: managedAddress,\n sessionKey: sessionKeyAddress,\n app: appAddress,\n expiresAt,\n })\n\n return {\n managedAddress,\n sessionKeyAddress,\n authorization,\n }\n}\n\n/\n Disconnect automation: remove session key, then revoke PublishAuthorization sidecar.\n /\nexport async function revokePublishAutomation(\n params: RevokePublishAutomationParams,\n): Promise<void> {\n const { managedAddress, sessionKeyAddress, authorizationUid } = params\n const userWallet = await resolveUserWallet(managedAddress, params.userWallet)\n\n await removeAutomationSessionKey({\n managedAddress,\n sessionKeyAddress,\n })\n\n await revokePublishAuthorization({\n wallet: userWallet,\n uid: authorizationUid,\n })\n}\n","import {\n assessPublishAuthorization,\n decodePublishAuthorizationData,\n getPublishAuthorizationFromEas,\n} from '@seedprotocol/eas'\nimport { isAutomationSessionActive } from './ensureAutomationSessionKey'\n\nexport type AssertStorageBoundToIdentityParams = {\n managedAddress: string\n /* Recovered ANS-104 DataItem owner (Ethereum address). /\n dataItemOwner: string\n /\n Unix seconds for historical binding checks against PublishAuthorization expiry.\n * Defaults to now. Session-key live check always uses current `isActiveSigner`.\n /\n atTime?: number\n /\n When true (default), accept a live active session key on the ManagedAccount.\n /\n allowActiveSessionKey?: boolean\n /\n When true (default), accept a non-revoked PublishAuthorization sidecar valid at `atTime`.\n /\n allowSidecar?: boolean\n}\n\nexport type AssertStorageBoundToIdentityResult = {\n bound: boolean\n via: 'active_session_key' \| 'publish_authorization' \| null\n warnings: string[]\n}\n\n/\n Whether an Arweave DataItem owner is bound to a ManagedAccount identity for authorship.\n * Prefer live `isActiveSigner` for current publishes; use the PublishAuthorization sidecar\n * for discoverability / historical grants (revoking the session key stops new binds via\n * active check; sidecar validity is assessed at `atTime`).\n /\nexport async function assertStorageBoundToIdentity(\n params: AssertStorageBoundToIdentityParams,\n): Promise<AssertStorageBoundToIdentityResult> {\n const {\n managedAddress,\n dataItemOwner,\n atTime,\n allowActiveSessionKey = true,\n allowSidecar = true,\n } = params\n const warnings: string[] = []\n const owner = dataItemOwner.trim().toLowerCase()\n const identity = managedAddress.trim().toLowerCase()\n\n if (!/^0x[0-9a-fA-F]{40}$/.test(owner) \|\| !/^0x[0-9a-fA-F]{40}$/.test(identity)) {\n return { bound: false, via: null, warnings: ['Invalid managedAddress or dataItemOwner'] }\n }\n\n if (allowActiveSessionKey) {\n try {\n const active = await isAutomationSessionActive(managedAddress, dataItemOwner)\n if (active) {\n return { bound: true, via: 'active_session_key', warnings }\n }\n } catch (e) {\n warnings.push(\n e instanceof Error ? e.message : 'isActiveSigner check failed',\n )\n }\n }\n\n if (allowSidecar) {\n try {\n const rows = await getPublishAuthorizationFromEas({\n identities: [managedAddress],\n sessionKeys: [dataItemOwner],\n excludeRevoked: true,\n })\n const nowMs = atTime != null ? atTime 1000 : Date.now()\n for (const row of rows) {\n try {\n const decoded = decodePublishAuthorizationData(row.decodedDataJson ?? '[]')\n if (decoded.identity.toLowerCase() !== identity) continue\n if (decoded.sessionKey.toLowerCase() !== owner) continue\n const expirationTime =\n typeof row.expirationTime === 'number' ? row.expirationTime : null\n const assess = assessPublishAuthorization({\n decoded,\n expirationTime,\n revoked: row.revoked,\n now: nowMs,\n })\n if (assess.status === 'valid') {\n return {\n bound: true,\n via: 'publish_authorization',\n warnings: [...warnings, ...assess.warnings],\n }\n }\n warnings.push(...assess.warnings)\n } catch {\n // skip undecodable row\n }\n }\n } catch (e) {\n warnings.push(\n e instanceof Error ? e.message : 'PublishAuthorization query failed',\n )\n }\n }\n\n return { bound: false, via: null, warnings }\n}\n"],"mappings":";;;;;;;;;;;;;;;AA+BA,IAAM8D,IAAgC;AAEtC,SAASC,GAAyB,GAAc;CAG9C,AADA,QAAQ,KAAK,0DAA0DC,CAAG,GAC1E/B,EAAiB,CAAC,CAAC,uBAAuB+B,CAAG;AAC/C;AAGA,SAASC,KAA0C;CAEjD,OADIjE,EAAW,cAAc,IAAU,QAAQ,QAAQ,IAChD,IAAI,SAAS,MAAY;EAC9B,EAAW,cAAcmE,EAAQ,CAAC;CACpC,CAAC;AACH;AAOA,eAAeC,GACb,GACA,GACA,GACe;CACf,IAAKC,EAAO,8BAIZ;MAAIA,EAAO,oBAAoB;GAC7B,IAAI,CAACC,GACH;GAEF,IAAI;IACF,EAA0B;IAC1B,IAAMC,IAAKlD,EAAwB;IACnC,MAAMkD,EAAG,YAAY;KAAE,QAAQ9B,EAAU;KAAG,OAAOV,EAAwBsC,CAAM;IAAE,CAAC;IACpF,IAAMG,IAAKD,EAAG,WAAW;IACzB,IAAI,CAACC,GACH;IAEF,MAAMvD,EAA8BqD,GAAgBE,GAAIH,CAAM;GAChE,QAAQ,CAER;EAEF,OAEA,IAAI;GACF,MAAMpD,EAA8BwD,EAAe,SAASA,GAAgBJ,CAAM;EACpF,SAASL,GAAK;GACZ,GAAyBA,CAAG;EAC9B;CANA;AAOF;AAEA,IAAMU,WAA0B;CAC9B,IAAML,IAASnB,EAAiB,GAC1ByB,IAAgB5C,EAAwBsC,CAAM,GAC9CO,IAASC,GAAgB,GACzBC,IAAgBC,GAAiB,GACjCC,IAAmBC,GAAgC,GACnDC,IAAmBC,GAAoB,GAEvCC,IAAqBC,EAAsB,IAAI,GAC/CC,IAAuBD,EAAO,EAAK,GACnCE,IAA2BF,EAAO,EAAK;CAO7C,QAAgB;EACd,IAAI,OAAO,SAAW,KAAa;EACnC,IAAMG,IAAOF,EAAqB;EAClC,EAAqB,UAAUJ;EAE/B,IAAIO;EACJ,IAAI;GACF,IACE,YAAY,iBAAiB,YAAY,CAAC,CAAC,EAAE,EAG5C;EACL,QAAQ;GACN,IAAU,KAAA;EACZ;EACA,IAAIA,MAAY,UAAU;EAE1B,IAAIC,IAAsB;EAC1B,IAAI;GACF,IACE,eAAe,QAAQ5B,CAA6B,MAAM;EAC9D,QAAQ;GACN,IAAsB;EACxB;EACA,AAAI4B,KAECF,KAAQ,MAAoBR,MAAqB,mBAClDO,EAAyB,YAC7B,EAAyB,UAAU,KAE7BlB,EAAO,qBAAqB5C,EAAwB,IAAIJ,EAAwB,EAAA,CACnF,YAAY;GAAE,QAAQoB,EAAU;GAAG,OAAOkC;EAAc,CAAC,CAAC,CAC1D,YAAY,CAEb,CAAC;CACL,GAAG;EAACK;EAAkBE;EAAkBb,EAAO;EAAoBM;CAAa,CAAC;CAEjF,IAAMgB,IAAyBC,GAC7B,OAAO,MAAyB;EAC9B,IAAMC,IAAUC,EAAa,WAAW;EACxC,IAAI,CAACD,GACH;EAEF,MAAM5B,GAAyB;EAC/B,IAAM8B,oBAAQ,IAAI,IAAY,CAACF,EAAQ,QAAQ,YAAY,CAAC,CAAC,GACzDvB;EACJ,IAAID,EAAO,oBAAoB;GAC7B,EAA0B;GAC1B,IAAM2B,IACJF,EAAa,kBAAkB,CAAC,EAAE,WAAWD,EAAQ,SACjDI,IAAa,YAAY;IAC7B,IAAI;KACF,OAAO,MAAM1E,EAAkCoD,CAAa;IAC9D,QAAQ;KACN,IAAI;MACF,OAAO,MAAM/D,EAA8BoF,CAAY;KACzD,QAAQ;MACN;KACF;IACF;GACF;GAMA,AALA,IAAiB,MAAMC,EAAW,GAClC,AAEE3B,OADA,MAAM,IAAI,SAAe,MAAM,qBAAqB4B,EAAE,CAAC,CAAC,GACvC,MAAMD,EAAW,IAEhC3B,KACFyB,EAAM,IAAIzB,EAAe,YAAY,CAAC;EAE1C;EACA,IAAM6B,IAAW,CAAC,GAAGJ,CAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG;EAC3C,IAAIX,EAAmB,YAAYe,GAMnC;GAGA,AAHIf,EAAmB,YAAY,QACjC/C,EAAe,QAAQ,GAEzB,EAAmB,UAAU8D;GAC7B,IAAI;IACF,IAAMH,IAAeF,EAAa,kBAAkB,CAAC,EAAE,SAGjDM,IACJ,CAAC,CAAC9B,KACD,CAAC,CAAC0B,KAAgBA,EAAa,YAAY,MAAMH,EAAQ,QAAQ,YAAY,GAC1EQ,IAAgBrE,EAAoB6D,GAAS,EAAE,MAAMO,IAAU,UAAU,MAAM,CAAC,GAIhFE,IAAeR,EAAa,kBAAkB,GAC9CS,IAAiBjC,IACnB+B,EAAc,SACdD,KAAWE,KAAgBA,EAAa,QAAQ,YAAY,MAAMT,EAAQ,QAAQ,YAAY,IAC5F7D,EAAoBsE,GAAc,EAAE,MAAM,MAAM,CAAC,CAAC,CAAC,SACnD,KAAA;IACN,MAAMzD,GAAiB;KACrB,GAAGwD;KACH,gBAAgB,CAAC,GAAGN,CAAK;KACzB,kBAAkBzB,KAAkBuB,EAAQ;KAC5C,GAAIU,IAAiB,EAAE,kBAAe,IAAI,CAAC;KAE3C,GAAIH,KAAW,CAAC9B,IACZ,EAAE,QAAQ,YAAY;MAAE,MAAM1B,EAA0BiD,CAAO;KAAE,EAAE,IACnE,CAAC;KACL,GAAIG,KAAgBA,EAAa,YAAY,MAAMH,EAAQ,QAAQ,YAAY,IAC3E,EAAE,gBAAa,IACf,CAAC;IACP,CAAC;GACH,SAAS7B,GAAK;IAGZ,MAFA,EAAmB,UAAU,MAC7B,QAAQ,KAAK,wDAAwDA,CAAG,GAClEA;GACR;GACA,MAAMI,GAAgCyB,GAASvB,GAAgBD,CAAM;EAtC5C;CAuC3B,GACA,CAACA,CAAM,CACT;CA+DA,OAzDAmC,QAAgB;EACd,IAAItB,GACF;EAEF,IAAIF,MAAqB,aAAa;GACpC,EAAmB,UAAU;GAC7B;EACF;EACA,IAAI,CAACJ,GACH;EAEF,IAAI6B,IAAY;EAShB,QARM,YAAY;GAChB,IAAI;IACF,IAAIA,GAAW;IACf,MAAMd,EAAuBf,CAAM;GACrC,QAAQ,CAER;EACF,EAAA,CAAG,SACU;GACX,IAAY;EACd;CACF,GAAG;EACDA;EACAE,GAAe;EACfE;EACAE;EACAS;CACF,CAAC,GA6BC,kBAAC1F,IAAD;EACE,QAAQwC,EAAU;EAClB,SAASF,EAA2B8B,CAAM;EAC1C,aAAa;EACb,OAAOM;EACP,QAAQ,CAAEA,CAAe;EACzB,WAAW,OAvBc,GAAsB,MAAmC;GACpF,IAAMkB,IAAUC,EAAa,WAAW;GACxC,IAAKD,GACL;QAAI;KACF,eAAe,WAAW/B,CAA6B;IACzD,QAAQ,CAER;IACA,QAAQ,IAAI,6BAA6B+B,EAAQ,OAAO;IACxD,IAAI;KACF,MAAMF,EAAuBG,CAAY;IAC3C,QAAQ,CAER;GANA;EAOF;EAUI,oBAlC2B;GAC7B,IAAI;IACF,eAAe,QAAQhC,GAA+B,GAAG;GAC3D,QAAQ,CAER;GAEA,AADAhB,EAAwB,GACxBT,EAAe,QAAQ;EACzB;EA2BI,OAAOqE,GAAU,EACf,QAAQ;GACN,iBAAiB;GACjB,mBAAmB;GACnB,wBAAwB;GACxB,mBAAmB;GACnB,wBAAwB;GACxB,aAAa;EACf,EACF,CAAC;CACF,CAAA;AAEL,GCvSMC,MAAqD,EACzD,aACA,WACA,gBACA,wBACI;CAGJ,IAAMC,IAAoBvB,EAAkC,KAAA,CAAS;CAMrE,OALIhB,KAAUuC,EAAkB,YAAYvC,MAC1CxC,EAAYwC,CAAM,GAClB,EAAkB,UAAUA,IAI5B,kBAAClB,EAAqB,UAAtB;EAA+B,OAAOkB,KAAU7B,GAAa;EAC3D,UAAA,kBAACqE,IAAD,EAAA,UACE,kBAACC,IAAD;GAA2B;GAA6B;GACrD;EACW,CAAA,EACE,CAAA;CACW,CAAA;AAEnC,GC3BMC,KACJ,2FACIC,WACJ,wEAAwEtE,EAAoB,EAAE,uGAC1FuE,UACJ,oDAAoDvE,EAAoB,EAAE,oCACtEwE,KACJ,kGAEIC,IAAuB;AAM7B,eAAsBC,KAAkD;CACtE,IAAM,EAAE,uCAAoCnF,EAAiB,GACvDoF,IAAuB5F,EAAwB;CACrD,MAAM4F,EAAqB,YAAY;EAAE,QAAQ5E,EAAU;EAAG,OAAOV,EAAwB;CAAE,CAAC;CAChG,IAAM0C,IAAiB4C,EAAqB,WAAW;CACvD,IAAI,CAAC5C,GACH,MAAM,IAAIjE,EAAkCuG,IAAgB,qCAAqC;CAGnG,IAAM7C,IAASzB,EAAU,GACnB6E,IAAkBC,EAAY;EAClC;EACA,OAAOxF,EAAwB;EAC/B,SAAS0C,EAAe;CAC1B,CAAC;CAED,IAAI,OAAMnE,EAAmBmE,EAAe,OAAO,GAInD;MAAI,CAAC+C,GACH,MAAM,IAAIhH,EACRwG,GAAiB,GACjB,gCACAvC,EAAe,OACjB;EAGF,IAAI;GACF,MAAMgD,GAAmB;IACvB,cAAchD;IACd,OAAO1C,EAAwB;IAC/B;IACA;GACF,CAAC;EACH,SAAS2F,GAAO;GACd,IAAI,MAAMxH,EAAwBuE,EAAe,SAAS0C,CAAoB,GAC5E;GAEF,MAAM,IAAI3G,EACRyG,EAAkB,GAClB,iCACAxC,EAAe,SACfiD,CACF;EACF;EAEA,IAAI,CAAE,MAAMxH,EAAwBuE,EAAe,SAAS0C,CAAoB,GAC9E,MAAM,IAAI3G,EACR0G,IACA,iCACAzC,EAAe,OACjB;CA3BA;AA6BJ;;;AChEA,SAAgBkD,EAAwC,GAA2C;CACjG,OAAOtE,EAAoC;AAC7C;;;ACJA,IAAMuE,WACJ,uFAAuFlF,EAAoB,EAAE,6BACzGmF,UACJ,4FAA4FnF,EAAoB,EAAE;AAYpH,eAAsBoF,GAA8B,GAGlC;CAChB,IAAM,EAAE,mBAAgB,qBAAkBC,GACpCC,IAAgB3G,EAAwB;CAC9C,MAAM2G,EAAc,YAAY;EAAE,QAAQvF,EAAU;EAAG,OAAOV,EAAwB;CAAE,CAAC;CACzF,IAAMkG,IAAiBD,EAAc,WAAW;CAChD,IAAI,CAACC,GACH,MAAM,IAAIpH,EACR+G,GAAgB,GAChB,oCACAtD,CACF;CAGF,IAAMgD,IAAkBC,EAAY;EAClC,QAAQ9E,EAAU;EAClB,OAAOV,EAAwB;EAC/B,SAASuC;CACX,CAAC,GACK4D,IAAc;EAClB,iBAAiBP,EAAwCrD,CAAc;EACvE,gCAAgC;CAClC,GAEI6D,IAAe;CACnB,IAAI;EACF,IAAe,MAAMC,GAAuB;GAC1C;GACA,mBAAmBC;GACnB,gBAAgBH;EAClB,CAAC;CACH,SAASR,GAAO;EACd,MAAM,IAAI7G,EACRgH,EAAsB,GACtB,oCACAvD,GACAoD,CACF;CACF;CAEA,IAAIS,GACF,IAAI;EACF,IAAMG,IAAKC,GAAc;GACvB,UAAUjB;GACV,SAASW;GACT,mBAAmBI;GACnB;EACF,CAAC,GACKG,IAAS,MAAMC,GAAgB;GAAE,SAASR;GAAgB,aAAaK;EAAG,CAAC;EACjF,MAAMhH,GAAsBkH,EAAO,eAAgC;CACrE,SAASd,GAAO;EACd,MAAM,IAAI7G,EACRgH,EAAsB,GACtB,oCACAvD,GACAoD,CACF;CACF;CAGF,IAAIgB,IAAS;CACb,IAAI;EACF,IAAS,MAAM3H,GAAmBuD,GAA2B+D,CAAwB;CACvF,SAASX,GAAO;EACd,MAAM,IAAI7G,EACRgH,EAAsB,GACtB,oCACAvD,GACAoD,CACF;CACF;CAEA,IAAI,CAACgB,GACH,MAAM,IAAI7H,EACRgH,EAAsB,GACtB,oCACAvD,CACF;AAEJ;;;ACxDA,eAAeqE,EAAsB,GAA0C;CAC7E,IAAMX,IAAgB3G,EAAwB;CAC9C,MAAM2G,EAAc,YAAY;EAAE,QAAQvF,EAAU;EAAG,OAAOV,EAAwB;CAAE,CAAC;CACzF,IAAM8D,IAAUmC,EAAc,WAAW;CACzC,IAAI,CAACnC,GACH,MAAM,IAAIhF,EACR,4FACA,+BACAyD,CACF;CAEF,OAAOuB;AACT;AAEA,eAAe+C,EACb,GACA,GACwB;CAExB,OADIC,KACG7G,EAAoB,MAAM2G,EAAsBrE,CAAc,GAAG,EAAE,MAAM,QAAQ,CAAC;AAC3F;AAEA,eAAewE,GAA8B,GAAuC;CAClF,IAAMzE,IAASpC,EAAiB;CAEhC,IAAI,CADeoC,EAAO,8BAA8B,KAAK,GAE3D,MAAU,MACR,oGACF;CAGF,IAAM0E,IAAY,MAAMJ,EAAsBrE,CAAc,GACxD0E;CACJ,IAAI;EACF,IAAU,MAAM/H,EAA8BqD,GAAgByE,GAAW1E,CAAM;CACjF,SAASqD,GAAO;EAEd,MADIA,aAAiB7G,IAAkC6G,IACjD,IAAI7G,EACR,wDACA,iCACAyD,GACAoD,CACF;CACF;CAKA,MAAMxG,GACJoD,GACA0E,EAAQ,WAAW,cACf,EAAE,cAAcA,EAAQ,IAAI,IAC5B,EAAE,cAAcA,EAAQ,WAAW,sBAAsB,IAAI,EAAE,CACrE;AACF;AAUA,eAAsBC,GACpB,GACwC;CACxC,IAAM,EAAE,mBAAgB,sBAAmB,kBAAelB,GACpDmB,IACJ,OAAOnB,EAAO,aAAc,YAAYA,EAAO,YAAY,IACvD,KAAK,MAAMA,EAAO,SAAS,IAC3B,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAIoB;CAGtC,AADA,MAAML,GAA8BxE,CAAc,GAClD,MAAMV,EAA2B;EAC/B;EACA;EACA;CACF,CAAC;CAED,IAAMiF,IAAa,MAAMD,EAAkBtE,GAAgByD,EAAO,UAAU;CAS5E,OAAO;EACL;EACA;EACA,eAAA,MAX0BhF,EAA2B;GACrD,QAAQ8F;GACR,UAAUvE;GACV,YAAY8E;GACZ,KAAKC;GACL;EACF,CAAC;CAMD;AACF;AAKA,eAAsBC,GACpB,GACe;CACf,IAAM,EAAE,mBAAgB,sBAAmB,wBAAqBvB,GAC1Dc,IAAa,MAAMD,EAAkBtE,GAAgByD,EAAO,UAAU;CAO5E,AALA,MAAMrE,EAA2B;EAC/B;EACA;CACF,CAAC,GAED,MAAMN,EAA2B;EAC/B,QAAQyF;EACR,KAAKU;CACP,CAAC;AACH;;;AC/HA,eAAsBC,GACpB,GAC6C;CAC7C,IAAM,EACJ,mBACA,kBACA,WACA,2BAAwB,IACxB,kBAAe,OACbzB,GACE0B,IAAqB,CAAC,GACtBC,IAAQC,EAAc,KAAK,CAAC,CAAC,YAAY,GACzCC,IAAWtF,EAAe,KAAK,CAAC,CAAC,YAAY;CAEnD,IAAI,CAAC,sBAAsB,KAAKoF,CAAK,KAAK,CAAC,sBAAsB,KAAKE,CAAQ,GAC5E,OAAO;EAAE,OAAO;EAAO,KAAK;EAAM,UAAU,CAAC,yCAAyC;CAAE;CAG1F,IAAIC,GACF,IAAI;EAEF,IAAI,MADiBlG,EAA0BW,GAAgBqF,CAAa,GAE1E,OAAO;GAAE,OAAO;GAAM,KAAK;GAAsB;EAAS;CAE9D,SAAS,GAAG;EACV,EAAS,KACP,aAAa,QAAQ,EAAE,UAAU,6BACnC;CACF;CAGF,IAAIG,GACF,IAAI;EACF,IAAMC,IAAO,MAAMC,GAA+B;GAChD,YAAY,CAAC1F,CAAc;GAC3B,aAAa,CAACqF,CAAa;GAC3B,gBAAgB;EAClB,CAAC,GACKM,IAAQC,KAAU,OAAuB,KAAK,IAAI,IAAzBA,IAAS;EACxC,KAAK,IAAMC,KAAOJ,GAChB,IAAI;GACF,IAAMK,IAAUC,GAA+BF,EAAI,mBAAmB,IAAI;GAE1E,IADIC,EAAQ,SAAS,YAAY,MAAMR,KACnCQ,EAAQ,WAAW,YAAY,MAAMV,GAAO;GAChD,IAAMY,IACJ,OAAOH,EAAI,kBAAmB,WAAWA,EAAI,iBAAiB,MAC1DI,IAASC,GAA2B;IACxC;IACA;IACA,SAASL,EAAI;IACb,KAAKF;GACP,CAAC;GACD,IAAIM,EAAO,WAAW,SACpB,OAAO;IACL,OAAO;IACP,KAAK;IACL,UAAU,CAAC,GAAGd,GAAU,GAAGc,EAAO,QAAQ;GAC5C;GAEF,EAAS,KAAK,GAAGA,EAAO,QAAQ;EAClC,QAAQ,CAER;CAEJ,SAAS,GAAG;EACV,EAAS,KACP,aAAa,QAAQ,EAAE,UAAU,mCACnC;CACF;CAGF,OAAO;EAAE,OAAO;EAAO,KAAK;EAAM;CAAS;AAC7C"}

package/dist/{worker-C7XeFMWh.js → worker-D1czx7Yg.js} RENAMED Viewed

@@ -1,4 +1,4 @@
-import { i as e, tn as t } from "./chainConfig-DK_5pgXF.js";
+import { i as e, tn as t } from "./chainConfig-nYXoVL1s.js";
 import { BaseDb as n, arweaveL1FinalizeJobs as r, getArweaveUploadStatus as i, isArweaveL1AnchoringComplete as a, queryArweaveGatewayTransactionWithFallback as o } from "@seedprotocol/sdk";
 import s from "debug";
 import { eq as c } from "drizzle-orm";
@@ -75,4 +75,4 @@ async function m() {
 //#endregion
 export { f as startArweaveL1FinalizeWorker, p as stopArweaveL1FinalizeWorker };
-//# sourceMappingURL=worker-C7XeFMWh.js.map
+//# sourceMappingURL=worker-D1czx7Yg.js.map

package/dist/{worker-C7XeFMWh.js.map → worker-D1czx7Yg.js.map} RENAMED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"worker-~~C7XeFMWh~~.js","names":["getPublishConfig","resolvePublishPayment","debug","logger","TICK_MS","intervalId","startArweaveL1FinalizeWorker","runArweaveL1FinalizeTick","stopArweaveL1FinalizeWorker","config","BaseDb","db","pending","arweaveL1FinalizeJobs","eq","uploadBase","graphqlUrl","uploadedToTurbo","job","dataItemId","l1TxId","gql","queryArweaveGatewayTransactionWithFallback","bundled","status","getArweaveUploadStatus","statusStr","isArweaveL1AnchoringComplete","resolvedL1","err"],"sources":["../src/services/arweaveL1Finalize/worker.ts"],"sourcesContent":["import {\n arweaveL1FinalizeJobs,\n BaseDb,\n getArweaveUploadStatus,\n isArweaveL1AnchoringComplete,\n queryArweaveGatewayTransactionWithFallback,\n} from '@seedprotocol/sdk'\nimport { eq } from 'drizzle-orm'\nimport { getPublishConfig } from '~/config'\nimport { resolvePublishPayment } from '~/payment'\nimport debug from 'debug'\n\nconst logger = debug('seedProtocol:arweaveL1Finalize:worker')\n\n/*\n Tracks bundler uploads until their bundle is anchored on Arweave L1, recording the L1 / bundle id\n * in `arweave_l1_finalize_jobs`. Local metadata keeps the data item id, which is what was attested\n * and what gateways serve the item under.\n */\nconst TICK_MS = 45_000\n\nlet intervalId: ReturnType<typeof setInterval> \| null = null\n\nexport function startArweaveL1FinalizeWorker(): void {\n if (intervalId != null) return\n intervalId = setInterval(() => {\n void runArweaveL1FinalizeTick()\n }, TICK_MS)\n void runArweaveL1FinalizeTick()\n}\n\nexport function stopArweaveL1FinalizeWorker(): void {\n if (intervalId != null) {\n clearInterval(intervalId)\n intervalId = null\n }\n}\n\nasync function runArweaveL1FinalizeTick(): Promise<void> {\n let config: ReturnType<typeof getPublishConfig>\n try {\n config = getPublishConfig()\n } catch {\n return\n }\n\n // initPublish may start this worker before Seed platformClassesInit configures BaseDb.\n if (!BaseDb.isAppDbReady()) return\n const db = BaseDb.getAppDb()\n if (!db) return\n\n const pending = await db\n .select()\n .from(arweaveL1FinalizeJobs)\n .where(eq(arweaveL1FinalizeJobs.phase, 'pending_l1'))\n .limit(25)\n\n if (pending.length === 0) return\n\n const uploadBase = config.arweaveUploadVerificationBaseUrl\n const graphqlUrl = config.arweaveGraphqlUrl\n // User-paid uploads went to Turbo; the upload API doesn't know them, so finish from GraphQL.\n const uploadedToTurbo = resolvePublishPayment(config).storage.uploadTo === 'turbo'\n\n for (const job of pending) {\n const dataItemId = job.dataItemId\n try {\n let l1TxId = job.l1TransactionId\n\n if (uploadedToTurbo) {\n const gql = await queryArweaveGatewayTransactionWithFallback(graphqlUrl, dataItemId)\n const bundled = gql?.bundledInId ?? l1TxId ?? null\n if (bundled && gql?.blockHeight != null) {\n await db\n .update(arweaveL1FinalizeJobs)\n .set({\n phase: 'confirmed',\n statusJson: JSON.stringify(gql),\n l1TransactionId: bundled,\n bundleId: bundled,\n updatedAt: Date.now(),\n })\n .where(eq(arweaveL1FinalizeJobs.id, job.id!))\n }\n continue\n }\n\n if (!l1TxId) {\n const gql = await queryArweaveGatewayTransactionWithFallback(graphqlUrl, dataItemId)\n const bundled = gql?.bundledInId ?? null\n if (bundled) {\n l1TxId = bundled\n await db\n .update(arweaveL1FinalizeJobs)\n .set({\n l1TransactionId: bundled,\n bundleId: bundled,\n updatedAt: Date.now(),\n })\n .where(eq(arweaveL1FinalizeJobs.id, job.id!))\n }\n }\n\n const status = await getArweaveUploadStatus(uploadBase, dataItemId)\n const statusStr = status ? JSON.stringify(status) : null\n\n if (status && isArweaveL1AnchoringComplete(status)) {\n const resolvedL1 =\n l1TxId ??\n status.bundleId ??\n status.turbo?.bundleId ??\n job.l1TransactionId ??\n null\n\n await db\n .update(arweaveL1FinalizeJobs)\n .set({\n phase: 'confirmed',\n statusJson: statusStr,\n l1TransactionId: resolvedL1 ?? job.l1TransactionId,\n bundleId: status.bundleId ?? job.bundleId,\n updatedAt: Date.now(),\n })\n .where(eq(arweaveL1FinalizeJobs.id, job.id!))\n continue\n }\n\n await db\n .update(arweaveL1FinalizeJobs)\n .set({\n statusJson: statusStr,\n updatedAt: Date.now(),\n })\n .where(eq(arweaveL1FinalizeJobs.id, job.id!))\n } catch (err) {\n logger('tick error for job', job.id, err)\n await db\n .update(arweaveL1FinalizeJobs)\n .set({\n errorMessage: err instanceof Error ? err.message : String(err),\n updatedAt: Date.now(),\n })\n .where(eq(arweaveL1FinalizeJobs.id, job.id!))\n }\n }\n}\n"],"mappings":";;;;;AAYA,IAAMG,IAASD,EAAM,uCAAuC,GAOtDE,IAAU,MAEZC,IAAoD;AAExD,SAAgBC,IAAqC;CACnD,AAAID,MACJ,IAAa,kBAAkB;EAC7B,EAA8B;CAChC,GAAGD,CAAO,GACVG,EAA8B;AAChC;AAEA,SAAgBC,IAAoC;CAClD,AAAIH,KAAc,SAChB,cAAcA,CAAU,GACxB,IAAa;AAEjB;AAEA,eAAeE,IAA0C;CACvD,IAAIE;CACJ,IAAI;EACF,IAAST,EAAiB;CAC5B,QAAQ;EACN;CACF;CAGA,IAAI,CAACU,EAAO,aAAa,GAAG;CAC5B,IAAMC,IAAKD,EAAO,SAAS;CAC3B,IAAI,CAACC,GAAI;CAET,IAAMC,IAAU,MAAMD,EACnB,OAAO,CAAC,CACR,KAAKE,CAAqB,CAAC,CAC3B,MAAMC,EAAGD,EAAsB,OAAO,YAAY,CAAC,CAAC,CACpD,MAAM,EAAE;CAEX,IAAID,EAAQ,WAAW,GAAG;CAE1B,IAAMG,IAAaN,EAAO,kCACpBO,IAAaP,EAAO,mBAEpBQ,IAAkBhB,EAAsBQ,CAAM,CAAC,CAAC,QAAQ,aAAa;CAE3E,KAAK,IAAMS,KAAON,GAAS;EACzB,IAAMO,IAAaD,EAAI;EACvB,IAAI;GACF,IAAIE,IAASF,EAAI;GAEjB,IAAID,GAAiB;IACnB,IAAMI,IAAM,MAAMC,EAA2CN,GAAYG,CAAU,GAC7EI,IAAUF,GAAK,eAAeD,KAAU;IAC9C,AAAIG,KAAWF,GAAK,eAAe,QACjC,MAAMV,EACH,OAAOE,CAAqB,CAAC,CAC7B,IAAI;KACH,OAAO;KACP,YAAY,KAAK,UAAUQ,CAAG;KAC9B,iBAAiBE;KACjB,UAAUA;KACV,WAAW,KAAK,IAAI;IACtB,CAAC,CAAC,CACD,MAAMT,EAAGD,EAAsB,IAAIK,EAAI,EAAG,CAAC;IAEhD;GACF;GAEA,IAAI,CAACE,GAAQ;IAEX,IAAMG,KAAU,MADED,EAA2CN,GAAYG,CAAU,EAAA,EAC9D,eAAe;IACpC,AAAII,MACF,IAASA,GACT,MAAMZ,EACH,OAAOE,CAAqB,CAAC,CAC7B,IAAI;KACH,iBAAiBU;KACjB,UAAUA;KACV,WAAW,KAAK,IAAI;IACtB,CAAC,CAAC,CACD,MAAMT,EAAGD,EAAsB,IAAIK,EAAI,EAAG,CAAC;GAElD;GAEA,IAAMM,IAAS,MAAMC,EAAuBV,GAAYI,CAAU,GAC5DO,IAAYF,IAAS,KAAK,UAAUA,CAAM,IAAI;GAEpD,IAAIA,KAAUG,EAA6BH,CAAM,GAAG;IAClD,IAAMI,IACJR,KACAI,EAAO,YACPA,EAAO,OAAO,YACdN,EAAI,mBACJ;IAEF,MAAMP,EACH,OAAOE,CAAqB,CAAC,CAC7B,IAAI;KACH,OAAO;KACP,YAAYa;KACZ,iBAAiBE,KAAcV,EAAI;KACnC,UAAUM,EAAO,YAAYN,EAAI;KACjC,WAAW,KAAK,IAAI;IACtB,CAAC,CAAC,CACD,MAAMJ,EAAGD,EAAsB,IAAIK,EAAI,EAAG,CAAC;IAC9C;GACF;GAEA,MAAMP,EACH,OAAOE,CAAqB,CAAC,CAC7B,IAAI;IACH,YAAYa;IACZ,WAAW,KAAK,IAAI;GACtB,CAAC,CAAC,CACD,MAAMZ,EAAGD,EAAsB,IAAIK,EAAI,EAAG,CAAC;EAChD,SAASW,GAAK;GAEZ,AADA1B,EAAO,sBAAsBe,EAAI,IAAIW,CAAG,GACxC,MAAMlB,EACH,OAAOE,CAAqB,CAAC,CAC7B,IAAI;IACH,cAAcgB,aAAe,QAAQA,EAAI,UAAU,OAAOA,CAAG;IAC7D,WAAW,KAAK,IAAI;GACtB,CAAC,CAAC,CACD,MAAMf,EAAGD,EAAsB,IAAIK,EAAI,EAAG,CAAC;EAChD;CACF;AACF"}
1	+ {"version":3,"file":"worker-D1czx7Yg.js","names":["getPublishConfig","resolvePublishPayment","debug","logger","TICK_MS","intervalId","startArweaveL1FinalizeWorker","runArweaveL1FinalizeTick","stopArweaveL1FinalizeWorker","config","BaseDb","db","pending","arweaveL1FinalizeJobs","eq","uploadBase","graphqlUrl","uploadedToTurbo","job","dataItemId","l1TxId","gql","queryArweaveGatewayTransactionWithFallback","bundled","status","getArweaveUploadStatus","statusStr","isArweaveL1AnchoringComplete","resolvedL1","err"],"sources":["../src/services/arweaveL1Finalize/worker.ts"],"sourcesContent":["import {\n arweaveL1FinalizeJobs,\n BaseDb,\n getArweaveUploadStatus,\n isArweaveL1AnchoringComplete,\n queryArweaveGatewayTransactionWithFallback,\n} from '@seedprotocol/sdk'\nimport { eq } from 'drizzle-orm'\nimport { getPublishConfig } from '~/config'\nimport { resolvePublishPayment } from '~/payment'\nimport debug from 'debug'\n\nconst logger = debug('seedProtocol:arweaveL1Finalize:worker')\n\n/*\n Tracks bundler uploads until their bundle is anchored on Arweave L1, recording the L1 / bundle id\n * in `arweave_l1_finalize_jobs`. Local metadata keeps the data item id, which is what was attested\n * and what gateways serve the item under.\n */\nconst TICK_MS = 45_000\n\nlet intervalId: ReturnType<typeof setInterval> \| null = null\n\nexport function startArweaveL1FinalizeWorker(): void {\n if (intervalId != null) return\n intervalId = setInterval(() => {\n void runArweaveL1FinalizeTick()\n }, TICK_MS)\n void runArweaveL1FinalizeTick()\n}\n\nexport function stopArweaveL1FinalizeWorker(): void {\n if (intervalId != null) {\n clearInterval(intervalId)\n intervalId = null\n }\n}\n\nasync function runArweaveL1FinalizeTick(): Promise<void> {\n let config: ReturnType<typeof getPublishConfig>\n try {\n config = getPublishConfig()\n } catch {\n return\n }\n\n // initPublish may start this worker before Seed platformClassesInit configures BaseDb.\n if (!BaseDb.isAppDbReady()) return\n const db = BaseDb.getAppDb()\n if (!db) return\n\n const pending = await db\n .select()\n .from(arweaveL1FinalizeJobs)\n .where(eq(arweaveL1FinalizeJobs.phase, 'pending_l1'))\n .limit(25)\n\n if (pending.length === 0) return\n\n const uploadBase = config.arweaveUploadVerificationBaseUrl\n const graphqlUrl = config.arweaveGraphqlUrl\n // User-paid uploads went to Turbo; the upload API doesn't know them, so finish from GraphQL.\n const uploadedToTurbo = resolvePublishPayment(config).storage.uploadTo === 'turbo'\n\n for (const job of pending) {\n const dataItemId = job.dataItemId\n try {\n let l1TxId = job.l1TransactionId\n\n if (uploadedToTurbo) {\n const gql = await queryArweaveGatewayTransactionWithFallback(graphqlUrl, dataItemId)\n const bundled = gql?.bundledInId ?? l1TxId ?? null\n if (bundled && gql?.blockHeight != null) {\n await db\n .update(arweaveL1FinalizeJobs)\n .set({\n phase: 'confirmed',\n statusJson: JSON.stringify(gql),\n l1TransactionId: bundled,\n bundleId: bundled,\n updatedAt: Date.now(),\n })\n .where(eq(arweaveL1FinalizeJobs.id, job.id!))\n }\n continue\n }\n\n if (!l1TxId) {\n const gql = await queryArweaveGatewayTransactionWithFallback(graphqlUrl, dataItemId)\n const bundled = gql?.bundledInId ?? null\n if (bundled) {\n l1TxId = bundled\n await db\n .update(arweaveL1FinalizeJobs)\n .set({\n l1TransactionId: bundled,\n bundleId: bundled,\n updatedAt: Date.now(),\n })\n .where(eq(arweaveL1FinalizeJobs.id, job.id!))\n }\n }\n\n const status = await getArweaveUploadStatus(uploadBase, dataItemId)\n const statusStr = status ? JSON.stringify(status) : null\n\n if (status && isArweaveL1AnchoringComplete(status)) {\n const resolvedL1 =\n l1TxId ??\n status.bundleId ??\n status.turbo?.bundleId ??\n job.l1TransactionId ??\n null\n\n await db\n .update(arweaveL1FinalizeJobs)\n .set({\n phase: 'confirmed',\n statusJson: statusStr,\n l1TransactionId: resolvedL1 ?? job.l1TransactionId,\n bundleId: status.bundleId ?? job.bundleId,\n updatedAt: Date.now(),\n })\n .where(eq(arweaveL1FinalizeJobs.id, job.id!))\n continue\n }\n\n await db\n .update(arweaveL1FinalizeJobs)\n .set({\n statusJson: statusStr,\n updatedAt: Date.now(),\n })\n .where(eq(arweaveL1FinalizeJobs.id, job.id!))\n } catch (err) {\n logger('tick error for job', job.id, err)\n await db\n .update(arweaveL1FinalizeJobs)\n .set({\n errorMessage: err instanceof Error ? err.message : String(err),\n updatedAt: Date.now(),\n })\n .where(eq(arweaveL1FinalizeJobs.id, job.id!))\n }\n }\n}\n"],"mappings":";;;;;AAYA,IAAMG,IAASD,EAAM,uCAAuC,GAOtDE,IAAU,MAEZC,IAAoD;AAExD,SAAgBC,IAAqC;CACnD,AAAID,MACJ,IAAa,kBAAkB;EAC7B,EAA8B;CAChC,GAAGD,CAAO,GACVG,EAA8B;AAChC;AAEA,SAAgBC,IAAoC;CAClD,AAAIH,KAAc,SAChB,cAAcA,CAAU,GACxB,IAAa;AAEjB;AAEA,eAAeE,IAA0C;CACvD,IAAIE;CACJ,IAAI;EACF,IAAST,EAAiB;CAC5B,QAAQ;EACN;CACF;CAGA,IAAI,CAACU,EAAO,aAAa,GAAG;CAC5B,IAAMC,IAAKD,EAAO,SAAS;CAC3B,IAAI,CAACC,GAAI;CAET,IAAMC,IAAU,MAAMD,EACnB,OAAO,CAAC,CACR,KAAKE,CAAqB,CAAC,CAC3B,MAAMC,EAAGD,EAAsB,OAAO,YAAY,CAAC,CAAC,CACpD,MAAM,EAAE;CAEX,IAAID,EAAQ,WAAW,GAAG;CAE1B,IAAMG,IAAaN,EAAO,kCACpBO,IAAaP,EAAO,mBAEpBQ,IAAkBhB,EAAsBQ,CAAM,CAAC,CAAC,QAAQ,aAAa;CAE3E,KAAK,IAAMS,KAAON,GAAS;EACzB,IAAMO,IAAaD,EAAI;EACvB,IAAI;GACF,IAAIE,IAASF,EAAI;GAEjB,IAAID,GAAiB;IACnB,IAAMI,IAAM,MAAMC,EAA2CN,GAAYG,CAAU,GAC7EI,IAAUF,GAAK,eAAeD,KAAU;IAC9C,AAAIG,KAAWF,GAAK,eAAe,QACjC,MAAMV,EACH,OAAOE,CAAqB,CAAC,CAC7B,IAAI;KACH,OAAO;KACP,YAAY,KAAK,UAAUQ,CAAG;KAC9B,iBAAiBE;KACjB,UAAUA;KACV,WAAW,KAAK,IAAI;IACtB,CAAC,CAAC,CACD,MAAMT,EAAGD,EAAsB,IAAIK,EAAI,EAAG,CAAC;IAEhD;GACF;GAEA,IAAI,CAACE,GAAQ;IAEX,IAAMG,KAAU,MADED,EAA2CN,GAAYG,CAAU,EAAA,EAC9D,eAAe;IACpC,AAAII,MACF,IAASA,GACT,MAAMZ,EACH,OAAOE,CAAqB,CAAC,CAC7B,IAAI;KACH,iBAAiBU;KACjB,UAAUA;KACV,WAAW,KAAK,IAAI;IACtB,CAAC,CAAC,CACD,MAAMT,EAAGD,EAAsB,IAAIK,EAAI,EAAG,CAAC;GAElD;GAEA,IAAMM,IAAS,MAAMC,EAAuBV,GAAYI,CAAU,GAC5DO,IAAYF,IAAS,KAAK,UAAUA,CAAM,IAAI;GAEpD,IAAIA,KAAUG,EAA6BH,CAAM,GAAG;IAClD,IAAMI,IACJR,KACAI,EAAO,YACPA,EAAO,OAAO,YACdN,EAAI,mBACJ;IAEF,MAAMP,EACH,OAAOE,CAAqB,CAAC,CAC7B,IAAI;KACH,OAAO;KACP,YAAYa;KACZ,iBAAiBE,KAAcV,EAAI;KACnC,UAAUM,EAAO,YAAYN,EAAI;KACjC,WAAW,KAAK,IAAI;IACtB,CAAC,CAAC,CACD,MAAMJ,EAAGD,EAAsB,IAAIK,EAAI,EAAG,CAAC;IAC9C;GACF;GAEA,MAAMP,EACH,OAAOE,CAAqB,CAAC,CAC7B,IAAI;IACH,YAAYa;IACZ,WAAW,KAAK,IAAI;GACtB,CAAC,CAAC,CACD,MAAMZ,EAAGD,EAAsB,IAAIK,EAAI,EAAG,CAAC;EAChD,SAASW,GAAK;GAEZ,AADA1B,EAAO,sBAAsBe,EAAI,IAAIW,CAAG,GACxC,MAAMlB,EACH,OAAOE,CAAqB,CAAC,CAC7B,IAAI;IACH,cAAcgB,aAAe,QAAQA,EAAI,UAAU,OAAOA,CAAG;IAC7D,WAAW,KAAK,IAAI;GACtB,CAAC,CAAC,CACD,MAAMf,EAAGD,EAAsB,IAAIK,EAAI,EAAG,CAAC;EAChD;CACF;AACF"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@seedprotocol/publish",
-  "version": "0.7.11-next.1384.g8b47246",
+  "version": "0.7.11",
   "description": "Publish Seed Protocol items to Arweave and EAS: publish state machine, React provider and hooks, wallet integration and optional thirdweb adapters",
   "keywords": [
     "seed-protocol",
@@ -46,11 +46,11 @@
   "scripts": {
     "build": "tsc -p tsconfig.build.json && vite build",
     "prepublishOnly": "npm run build && node ../../scripts/sync-versions.js",
-    "test": "bun test src/helpers/defaultApprovedTargetsForModularPublish.test.ts && bun test src/helpers/arweave.test.ts src/helpers/ensureManagedAccountReady.test.ts src/helpers/ensureEip7702ModularAccountReady.test.ts src/helpers/ensureManagedSignerSessionKey.test.ts src/helpers/publishDisplayHelpers.test.ts src/services/publish/actors/createAttestationsRouting.test.ts src/services/publish/actors/seedUidHelpers.test.ts src/config.autoDeployEip7702.test.ts src/config.chain.test.ts && bun test src/helpers/ensureSmartWalletThenPublish.test.ts && bun test src/helpers/ensureManagedAccountEasConfigured.test.ts && bun test src/services/domainOwnership/domainOwnership.test.ts src/services/domainOwnership/domainOwnership.scope.test.ts && bun test src/services/publishAuthorization/publishAuthorization.test.ts && bun test src/helpers/approvedTargetsForAutomationPublish.test.ts && bun test src/helpers/easDirect.multiRevoke.test.ts && bun test src/helpers/ensureAutomationSessionKey.test.ts && bun test src/helpers/enrollPublishAutomation.test.ts && bun test src/helpers/executorModuleReadiness.test.ts src/helpers/describeRevert.test.ts && bun test src/helpers/contracts/encodeMultiPublish.test.ts && bun test src/helpers/assertStorageBoundToIdentity.test.ts && bun test src/payment.test.ts && bun test src/authorization.test.ts && bun test src/services/publish/authorizing.test.ts && bun test src/helpers/turbo.test.ts && bun test src/services/publish/helpers/uploadToTurbo.test.ts && bun test src/services/publishCost/estimatePublishCost.test.ts && bun test src/services/publishCost/watchPublishCost.test.ts src/hooks/usePublishCostEstimate.test.tsx && bun test src/services/publishedBy/publishedBy.test.ts && bun test src/helpers/publishThirdwebClient.test.ts src/helpers/chainClient.secretKey.test.ts src/helpers/chainClient.receipt.test.ts && bun test src/helpers/adapters/thirdwebAccount.test.ts && bun test src/services/publishManager/publishManager.node.test.ts && bun test src/services/publishManager/publishLocks.node.test.ts && bun test src/services/publishManager/actors/savePublish.test.ts src/services/publishManager/actions/requestSavePublish.test.ts && bun test src/services/publish/helpers/ensureEasSchemas.test.ts && bun test src/services/publish/helpers/verifyAttestations.test.ts && bun test src/services/publish/actors/checking.unpublishedRelated.test.ts && bun test src/services/publish/actors/checking.directEas.test.ts && bun test src/services/publish/actors/recordMultiPublishReceipt.test.ts && bun test src/services/publish/actors/createAttestations.batch.test.ts && bun test src/services/publish/actors/createAttestationsDirectToEas.batch.test.ts && bun test src/services/publish/actors/createAttestationsDirectToEas.lists.test.ts && bun test src/helpers/verifyPublishChain.test.ts && bun test src/helpers/thirdwebWallets.test.ts && bun test src/helpers/seedPaymaster.test.ts && bun test src/helpers/ensureExecutorModule.test.ts && bun test src/services/revoke/revokeAttestations.test.ts && bun test src/services/publish/actors/revokeRetractedProperties.test.ts && bun test src/helpers/ensureModularPublishBootstrap.test.ts && bun test src/helpers/blockchain.test.ts src/helpers/retryNonceTooLow.test.ts src/helpers/seedTwin.test.ts && bun test src/helpers/runModularExecutorPublishPrep.test.ts && bun test src/helpers/adapters/permissionlessTxSender.test.ts && bun test src/helpers/publishItem.test.ts && bun test src/helpers/publishWalletRegistry.test.ts && bun test src/config.uploadApiBaseUrl.test.ts src/react/PublishProvider.initOrder.test.tsx && bun test src/services/publish/actors/uploadViaBundler.resume.test.ts && bun test src/services/publishManager/actors/restorableSnapshot.test.ts && bun test src/helpers/defaultDataItemSigner.test.ts && bun test src/services/publish/htmlPhase2.flow.test.ts src/helpers/accountCodeKind.test.ts"
+    "test": "bun test src/helpers/defaultApprovedTargetsForModularPublish.test.ts && bun test src/helpers/arweave.test.ts src/helpers/ensureManagedAccountReady.test.ts src/helpers/ensureEip7702ModularAccountReady.test.ts src/helpers/ensureManagedSignerSessionKey.test.ts src/helpers/publishDisplayHelpers.test.ts src/services/publish/actors/createAttestationsRouting.test.ts src/services/publish/actors/seedUidHelpers.test.ts src/config.autoDeployEip7702.test.ts src/config.chain.test.ts && bun test src/helpers/ensureSmartWalletThenPublish.test.ts && bun test src/helpers/ensureManagedAccountEasConfigured.test.ts && bun test src/services/domainOwnership/domainOwnership.test.ts src/services/domainOwnership/domainOwnership.scope.test.ts && bun test src/services/publishAuthorization/publishAuthorization.test.ts && bun test src/services/publishAuthorization/assessLive.test.ts && bun test src/services/attestInputOrder.test.ts && bun test src/helpers/approvedTargetsForAutomationPublish.test.ts && bun test src/helpers/easDirect.multiRevoke.test.ts && bun test src/helpers/ensureAutomationSessionKey.test.ts && bun test src/helpers/enrollPublishAutomation.test.ts && bun test src/helpers/executorModuleReadiness.test.ts src/helpers/describeRevert.test.ts && bun test src/helpers/contracts/encodeMultiPublish.test.ts && bun test src/helpers/assertStorageBoundToIdentity.test.ts && bun test src/payment.test.ts && bun test src/authorization.test.ts && bun test src/services/publish/authorizing.test.ts && bun test src/helpers/turbo.test.ts && bun test src/services/publish/helpers/uploadToTurbo.test.ts && bun test src/services/publishCost/estimatePublishCost.test.ts && bun test src/services/publishCost/watchPublishCost.test.ts src/hooks/usePublishCostEstimate.test.tsx && bun test src/services/publishedBy/publishedBy.test.ts && bun test src/helpers/publishThirdwebClient.test.ts src/helpers/chainClient.secretKey.test.ts src/helpers/chainClient.receipt.test.ts && bun test src/helpers/adapters/thirdwebAccount.test.ts && bun test src/services/publishManager/publishManager.node.test.ts && bun test src/services/publishManager/publishLocks.node.test.ts && bun test src/services/publishManager/actors/savePublish.test.ts src/services/publishManager/actions/requestSavePublish.test.ts && bun test src/services/publish/helpers/ensureEasSchemas.test.ts && bun test src/services/publish/helpers/verifyAttestations.test.ts && bun test src/services/publish/actors/checking.unpublishedRelated.test.ts && bun test src/services/publish/actors/checking.directEas.test.ts && bun test src/services/publish/actors/recordMultiPublishReceipt.test.ts && bun test src/services/publish/actors/createAttestations.batch.test.ts && bun test src/services/publish/actors/createAttestationsDirectToEas.batch.test.ts && bun test src/services/publish/actors/createAttestationsDirectToEas.lists.test.ts && bun test src/helpers/verifyPublishChain.test.ts && bun test src/helpers/thirdwebWallets.test.ts && bun test src/helpers/seedPaymaster.test.ts && bun test src/helpers/ensureExecutorModule.test.ts && bun test src/services/revoke/revokeAttestations.test.ts && bun test src/services/publish/actors/revokeRetractedProperties.test.ts && bun test src/helpers/ensureModularPublishBootstrap.test.ts && bun test src/helpers/blockchain.test.ts src/helpers/retryNonceTooLow.test.ts src/helpers/seedTwin.test.ts && bun test src/helpers/runModularExecutorPublishPrep.test.ts && bun test src/helpers/adapters/permissionlessTxSender.test.ts && bun test src/helpers/publishItem.test.ts && bun test src/helpers/publishWalletRegistry.test.ts && bun test src/config.uploadApiBaseUrl.test.ts src/react/PublishProvider.initOrder.test.tsx && bun test src/services/publish/actors/uploadViaBundler.resume.test.ts && bun test src/services/publishManager/actors/restorableSnapshot.test.ts && bun test src/helpers/defaultDataItemSigner.test.ts && bun test src/services/publish/htmlPhase2.flow.test.ts src/helpers/accountCodeKind.test.ts"
   },
   "dependencies": {
     "@ethereum-attestation-service/eas-sdk": "^2.9.0",
-    "@seedprotocol/eas": "0.7.11-next.1384.g8b47246",
+    "@seedprotocol/eas": "0.7.11",
     "@xstate/react": "^6.1.0",
     "arweave": "^1.15.7",
     "debug": "^4.4.1",
@@ -62,8 +62,8 @@
     "xstate": "^5.28.0"
   },
   "devDependencies": {
-    "@seedprotocol/react": "0.7.11-next.1384.g8b47246",
-    "@seedprotocol/sdk": "0.7.11-next.1384.g8b47246",
+    "@seedprotocol/react": "0.7.11",
+    "@seedprotocol/sdk": "0.7.11",
     "@types/bun": "1.4.3",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
@@ -75,8 +75,8 @@
     "vite": "^8.0.0"
   },
   "peerDependencies": {
-    "@seedprotocol/sdk": "0.7.11-next.1384.g8b47246",
-    "@seedprotocol/react": "0.7.11-next.1384.g8b47246",
+    "@seedprotocol/sdk": "0.7.11",
+    "@seedprotocol/react": "0.7.11",
     "react": "^18 || ^19",
     "react-dom": "^18 || ^19",
     "thirdweb": "^5",

package/dist/publishAuthorization-C_VidnTq.js.map DELETED Viewed

@@ -1 +0,0 @@

- {"version":3,"file":"publishAuthorization-C_VidnTq.js","names":["ZERO_ADDRESS","isPublishWallet","prepareNameSchemaAttestation","getAttestationUidFromReceipt","getSchemaRecord","prepareEasAttest","isSeedTxSender","waitForPublishReceipt","getPublishConfig","registerSchema","prepareEasMultiRevoke","PUBLISH_AUTHORIZATION_SCHEMA_DEF$1","PUBLISH_AUTHORIZATION_SCHEMA_NAME$1","PUBLISH_AUTHORIZATION_SCOPES$1","PublishConfigContext","createContext","usePublishConfig","config","useContext","approvedTargetsForAutomationPublish","module","PUBLISH_AUTOMATION_SCOPES","buildAutomationSessionKeyPermissions","out","params","hashAutomationSessionKeyPermissions","material","permissions","a","scopes","keccak256","toUtf8Bytes","toThirdwebSessionKeyPermissions","base","RESOLVER_ADDRESS","REVOCABLE","ZERO_ADDRESS$1","resolveTxSender","account","sendAndWait","result","txSender","tx","assertAddress","t","addr","label","getPublishAuthorizationSchemaUid","SchemaRegistry","PUBLISH_AUTHORIZATION_SCHEMA_DEF","ensurePublishAuthorizationSchema","sender","schemaUid","PUBLISH_AUTHORIZATION_SCHEMA_NAME","encodePublishAuthorizationAttestationData","SchemaEncoder","normalizeBytes32Hex","attestPublishAuthorization","identity","sessionKey","app","grantedAt","expiresAt","PUBLISH_AUTHORIZATION_SCOPES","permissionsHash","ZERO_BYTES32","expirationTime","PUBLISH_AUTHORIZATION_DEFAULT_EXPIRATION_SECS","data","receipt","uid","easContractAddress","isValidEasAttestationUid","revokePublishAuthorization","assessPublishAuthorizationLive","row","getPublishAuthorizationFromEas","r","decoded","decodePublishAuthorizationData","assessPublishAuthorization"],"sources":["../src/react/PublishConfigContext.tsx","../src/helpers/approvedTargetsForAutomationPublish.ts","../src/helpers/automationSessionKeyPermissions.ts","../src/services/publishAuthorization/index.ts"],"sourcesContent":["import { createContext, useContext } from 'react'\nimport type { PublishConfig } from '../config'\n\nexport const PublishConfigContext = createContext<PublishConfig | null>(null)\n\nexport function usePublishConfig(): PublishConfig {\n const config = useContext(PublishConfigContext)\n if (!config) {\n throw new Error(\n 'usePublishConfig: PublishConfig is missing. Pass config to PublishProvider or call initPublish() before render.',\n )\n }\n return config\n}\n","import { getPublishConfig } from '../config'\n\n/**\n * Allowlisted call targets for session keys on a ManagedAccount.\n * Returns only the configured Seed executor module — never the ManagedAccount or raw EAS\n * (those would allow `setEas` / arbitrary attestations).\n *\n * @throws if `modularAccountModuleContract` is unset or invalid\n */\nexport function approvedTargetsForAutomationPublish(): `0x${string}`[] {\n const module = getPublishConfig().modularAccountModuleContract?.trim()\n if (!module || !/^0x[0-9a-fA-F]{40}$/.test(module)) {\n throw new Error(\n '@seedprotocol/publish: session keys require PublishConfig.modularAccountModuleContract ' +\n '(their only approved target is the Seed executor module).',\n )\n }\n return [module.toLowerCase() as `0x${string}`]\n}\n","import { keccak256, toUtf8Bytes } from 'ethers'\nimport { approvedTargetsForAutomationPublish } from './approvedTargetsForAutomationPublish'\n\n/** Fixed v1 scopes for publish automation grants. */\nexport const PUBLISH_AUTOMATION_SCOPES = 'publish,revoke' as const\n\nexport type AutomationSessionKeyPermissions = {\n approvedTargets: `0x${string}`[]\n nativeTokenLimitPerTransaction: number\n /** Unix seconds; omit for Thirdweb default long window. */\n expiresAt?: number\n}\n\n/**\n * Canonical permissions for an automation session key (module-only targets).\n */\nexport function buildAutomationSessionKeyPermissions(params?: {\n expiresAt?: number\n}): AutomationSessionKeyPermissions {\n const approvedTargets = approvedTargetsForAutomationPublish()\n const out: AutomationSessionKeyPermissions = {\n approvedTargets,\n nativeTokenLimitPerTransaction: 0,\n }\n if (typeof params?.expiresAt === 'number' && params.expiresAt > 0) {\n out.expiresAt = Math.trunc(params.expiresAt)\n }\n return out\n}\n\n/**\n * Deterministic permissions hash for the PublishAuthorization sidecar.\n * Material: sorted targets | nativeLimit | expiresAt (0 if unset) | scopes\n */\nexport function hashAutomationSessionKeyPermissions(\n permissions: AutomationSessionKeyPermissions,\n scopes: string = PUBLISH_AUTOMATION_SCOPES,\n): `0x${string}` {\n const targets = [...permissions.approvedTargets].map((a) => a.toLowerCase()).sort().join(',')\n const limit = permissions.nativeTokenLimitPerTransaction\n const expiresAt = permissions.expiresAt ?? 0\n const material = `${targets}|${limit}|${expiresAt}|${scopes.trim()}`\n return keccak256(toUtf8Bytes(material)) as `0x${string}`\n}\n\n/** Shape passed to Thirdweb `addSessionKey` / `shouldUpdateSessionKey`. */\nexport function toThirdwebSessionKeyPermissions(permissions: AutomationSessionKeyPermissions): {\n approvedTargets: `0x${string}`[]\n nativeTokenLimitPerTransaction: number\n permissionEndTimestamp?: Date\n} {\n const base = {\n approvedTargets: permissions.approvedTargets,\n nativeTokenLimitPerTransaction: permissions.nativeTokenLimitPerTransaction,\n }\n if (permissions.expiresAt != null && permissions.expiresAt > 0) {\n return {\n ...base,\n permissionEndTimestamp: new Date(permissions.expiresAt * 1000),\n }\n }\n return base\n}\n","import {\n PUBLISH_AUTHORIZATION_DEFAULT_EXPIRATION_SECS,\n PUBLISH_AUTHORIZATION_SCHEMA_DEF,\n PUBLISH_AUTHORIZATION_SCHEMA_NAME,\n PUBLISH_AUTHORIZATION_SCOPES,\n assessPublishAuthorization,\n decodePublishAuthorizationData,\n getPublishAuthorizationFromEas,\n type PublishAuthorizationAssessResult,\n type PublishAuthorizationDecoded,\n} from '@seedprotocol/eas'\nimport { SchemaEncoder, ZERO_BYTES32 } from '@ethereum-attestation-service/eas-sdk'\nimport { SchemaRegistry } from '@ethereum-attestation-service/eas-sdk'\nimport { prepareEasAttest, prepareEasMultiRevoke } from '~/helpers/easDirect'\nimport { getSchemaRecord, registerSchema } from '~/helpers/schemaRegistry'\nimport { prepareNameSchemaAttestation } from '~/helpers/nameSchemaAttestation'\nimport { waitForPublishReceipt } from '~/helpers/chainClient'\nimport { getPublishConfig } from '~/config'\nimport {\n isPublishWallet,\n isSeedTxSender,\n type PublishWallet,\n type SeedTxSender,\n} from '~/helpers/seedSigner'\nimport { getAttestationUidFromReceipt } from '~/helpers/easDirect'\nimport { normalizeBytes32Hex, isValidEasAttestationUid } from '@seedprotocol/eas'\nimport {\n buildAutomationSessionKeyPermissions,\n hashAutomationSessionKeyPermissions,\n PUBLISH_AUTOMATION_SCOPES,\n} from '~/helpers/automationSessionKeyPermissions'\n\nexport {\n PUBLISH_AUTHORIZATION_SCHEMA_DEF,\n PUBLISH_AUTHORIZATION_SCHEMA_NAME,\n PUBLISH_AUTHORIZATION_SCOPES,\n} from '@seedprotocol/eas'\n\nconst RESOLVER_ADDRESS = '0x0000000000000000000000000000000000000000'\nconst REVOCABLE = true\nconst ZERO_ADDRESS = '0x0000000000000000000000000000000000000000'\n\nfunction resolveTxSender(account: PublishWallet | SeedTxSender): SeedTxSender {\n if (isPublishWallet(account)) return account.txSender\n if (isSeedTxSender(account)) return account\n throw new Error(\n '@seedprotocol/publish: publish authorization write APIs require a PublishWallet or SeedTxSender',\n )\n}\n\nasync function sendAndWait(\n txSender: SeedTxSender,\n tx: Parameters<SeedTxSender['sendTransaction']>[0],\n) {\n const result = await txSender.sendTransaction(tx)\n return waitForPublishReceipt(result.transactionHash)\n}\n\nfunction assertAddress(label: string, addr: string): `0x${string}` {\n const t = addr.trim()\n if (!/^0x[0-9a-fA-F]{40}$/.test(t)) {\n throw new Error(`@seedprotocol/publish: ${label} must be a valid address`)\n }\n return t as `0x${string}`\n}\n\n/** Deterministic on-chain schema UID for {@link PUBLISH_AUTHORIZATION_SCHEMA_DEF}. */\nexport function getPublishAuthorizationSchemaUid(): `0x${string}` {\n return SchemaRegistry.getSchemaUID(\n PUBLISH_AUTHORIZATION_SCHEMA_DEF,\n RESOLVER_ADDRESS as `0x${string}`,\n REVOCABLE,\n ) as `0x${string}`\n}\n\n/**\n * Registers the PublishAuthorization EAS schema (if missing) and creates a Schema #1 name attestation.\n */\nexport async function ensurePublishAuthorizationSchema(\n account: PublishWallet | SeedTxSender,\n): Promise<`0x${string}`> {\n const sender = resolveTxSender(account)\n const schemaUid = getPublishAuthorizationSchemaUid()\n const onChain = await getSchemaRecord(schemaUid)\n if (!onChain) {\n await sendAndWait(\n sender,\n registerSchema({\n schema: PUBLISH_AUTHORIZATION_SCHEMA_DEF,\n resolverAddress: RESOLVER_ADDRESS,\n revocable: REVOCABLE,\n }),\n )\n await sendAndWait(\n sender,\n prepareNameSchemaAttestation({\n schemaUid,\n schemaName: PUBLISH_AUTHORIZATION_SCHEMA_NAME,\n }),\n )\n }\n return schemaUid\n}\n\nexport function encodePublishAuthorizationAttestationData(params: {\n identity: string\n sessionKey: string\n app: string\n scopes: string\n grantedAt: number\n expiresAt: number\n permissionsHash: string\n}): `0x${string}` {\n const schemaEncoder = new SchemaEncoder(PUBLISH_AUTHORIZATION_SCHEMA_DEF)\n const encodedData = schemaEncoder.encodeData([\n { name: 'identity', value: params.identity as `0x${string}`, type: 'address' },\n { name: 'sessionKey', value: params.sessionKey as `0x${string}`, type: 'address' },\n { name: 'app', value: params.app as `0x${string}`, type: 'address' },\n { name: 'scopes', value: params.scopes, type: 'string' },\n { name: 'grantedAt', value: params.grantedAt, type: 'uint64' },\n { name: 'expiresAt', value: params.expiresAt, type: 'uint64' },\n {\n name: 'permissionsHash',\n value: normalizeBytes32Hex(params.permissionsHash) as `0x${string}`,\n type: 'bytes32',\n },\n ])\n return encodedData as `0x${string}`\n}\n\nexport type AttestPublishAuthorizationParams = {\n /** Must be the ManagedAccount (identity) wallet — becomes EAS attester. */\n wallet: PublishWallet | SeedTxSender\n identity: string\n sessionKey: string\n /** Optional app label address; defaults to zero address. */\n app?: string\n scopes?: string\n grantedAt?: number\n expiresAt?: number\n permissionsHash?: string\n ensureSchema?: boolean\n /** Override EAS expirationTime (unix seconds). */\n expirationTime?: number\n}\n\nexport type AttestPublishAuthorizationResult = {\n uid: `0x${string}`\n schemaUid: `0x${string}`\n permissionsHash: `0x${string}`\n grantedAt: number\n expiresAt: number\n expirationTime: number\n}\n\n/**\n * ManagedAccount attests a PublishAuthorization grant (recipient = session key).\n */\nexport async function attestPublishAuthorization(\n params: AttestPublishAuthorizationParams,\n): Promise<AttestPublishAuthorizationResult> {\n const sender = resolveTxSender(params.wallet)\n const schemaUid =\n params.ensureSchema === false\n ? getPublishAuthorizationSchemaUid()\n : await ensurePublishAuthorizationSchema(params.wallet)\n\n const identity = assertAddress('identity', params.identity)\n const sessionKey = assertAddress('sessionKey', params.sessionKey)\n const app = params.app?.trim()\n ? assertAddress('app', params.app)\n : (ZERO_ADDRESS as `0x${string}`)\n\n const grantedAt = params.grantedAt ?? Math.floor(Date.now() / 1000)\n const expiresAt =\n typeof params.expiresAt === 'number' && params.expiresAt > 0\n ? Math.trunc(params.expiresAt)\n : 0\n const scopes = params.scopes ?? PUBLISH_AUTHORIZATION_SCOPES\n\n const permissionsHash = normalizeBytes32Hex(\n params.permissionsHash ??\n hashAutomationSessionKeyPermissions(\n buildAutomationSessionKeyPermissions({\n expiresAt: expiresAt > 0 ? expiresAt : undefined,\n }),\n scopes === PUBLISH_AUTHORIZATION_SCOPES ? PUBLISH_AUTOMATION_SCOPES : scopes,\n ),\n ) as `0x${string}`\n\n if (permissionsHash === ZERO_BYTES32) {\n throw new Error(\n '@seedprotocol/publish: attestPublishAuthorization requires a non-zero permissionsHash',\n )\n }\n\n const expirationTime =\n typeof params.expirationTime === 'number' && params.expirationTime > 0\n ? params.expirationTime\n : expiresAt > 0\n ? expiresAt\n : grantedAt + PUBLISH_AUTHORIZATION_DEFAULT_EXPIRATION_SECS\n\n const data = encodePublishAuthorizationAttestationData({\n identity,\n sessionKey,\n app,\n scopes,\n grantedAt,\n expiresAt,\n permissionsHash,\n })\n\n const tx = prepareEasAttest({\n schema: schemaUid,\n data: {\n recipient: sessionKey,\n expirationTime: BigInt(expirationTime),\n revocable: true,\n refUID: ZERO_BYTES32 as `0x${string}`,\n data,\n value: 0n,\n },\n })\n\n const receipt = await sendAndWait(sender, tx)\n if (!receipt) {\n throw new Error('@seedprotocol/publish: attestPublishAuthorization failed — no receipt')\n }\n const { easContractAddress } = getPublishConfig()\n const uid = getAttestationUidFromReceipt(receipt, easContractAddress)\n if (!uid || !isValidEasAttestationUid(uid)) {\n throw new Error(\n '@seedprotocol/publish: attestPublishAuthorization failed — could not parse attestation UID',\n )\n }\n\n return {\n uid: uid as `0x${string}`,\n schemaUid,\n permissionsHash,\n grantedAt,\n expiresAt,\n expirationTime,\n }\n}\n\n/**\n * Revoke a PublishAuthorization sidecar (must be signed by the original ManagedAccount attester).\n */\nexport async function revokePublishAuthorization(params: {\n wallet: PublishWallet | SeedTxSender\n uid: string\n schemaUid?: string\n}): Promise<void> {\n const sender = resolveTxSender(params.wallet)\n const schemaUid = (params.schemaUid ?? getPublishAuthorizationSchemaUid()) as `0x${string}`\n const uid = normalizeBytes32Hex(params.uid) as `0x${string}`\n if (!isValidEasAttestationUid(uid)) {\n throw new Error(\n '@seedprotocol/publish: revokePublishAuthorization requires a valid attestation uid',\n )\n }\n\n const tx = prepareEasMultiRevoke([\n {\n schema: schemaUid,\n data: [{ uid }],\n },\n ])\n const receipt = await sendAndWait(sender, tx)\n if (!receipt) {\n throw new Error('@seedprotocol/publish: revokePublishAuthorization failed — no receipt')\n }\n}\n\nexport type AssessPublishAuthorizationLiveResult = {\n uid: string\n decoded: PublishAuthorizationDecoded\n assess: PublishAuthorizationAssessResult\n expirationTime?: number | null\n}\n\n/**\n * Load a PublishAuthorization attestation by uid (via identity filter + client match) and assess.\n * Prefer filtering with {@link getPublishAuthorizationFromEas} when you know identity/sessionKey.\n */\nexport async function assessPublishAuthorizationLive(params: {\n uid: string\n identities: string[]\n}): Promise<AssessPublishAuthorizationLiveResult | null> {\n const rows = await getPublishAuthorizationFromEas({\n identities: params.identities,\n excludeRevoked: false,\n })\n const row = rows.find((r) => r.id?.toLowerCase() === params.uid.toLowerCase())\n if (!row) return null\n const decoded = decodePublishAuthorizationData(row.decodedDataJson ?? '[]')\n const expirationTime =\n typeof row.expirationTime === 'number'\n ? row.expirationTime\n : typeof row.expirationTime === 'string'\n ? Number(row.expirationTime)\n : null\n return {\n uid: row.id,\n decoded,\n assess: assessPublishAuthorization({ decoded, expirationTime }),\n expirationTime,\n }\n}\n"],"mappings":";;;;;;AAGA,IAAac,IAAuBC,EAAoC,IAAI;AAE5E,SAAgBC,IAAkC;CAChD,IAAMC,IAASC,EAAWJ,CAAoB;CAC9C,IAAI,CAACG,GACH,MAAU,MACR,iHACF;CAEF,OAAOA;AACT;;;ACJA,SAAgBE,IAAuD;CACrE,IAAMC,IAASZ,EAAiB,CAAC,CAAC,8BAA8B,KAAK;CACrE,IAAI,CAACY,KAAU,CAAC,sBAAsB,KAAKA,CAAM,GAC/C,MAAU,MACR,kJAEF;CAEF,OAAO,CAACA,EAAO,YAAY,CAAkB;AAC/C;;;ACdA,IAAaC,IAA4B;AAYzC,SAAgBC,EAAqC,GAEjB;CAElC,IAAMC,IAAuC;EAC3C,iBAFsBJ,EAEtB;EACA,gCAAgC;CAClC;CAIA,OAHI,OAAOK,GAAQ,aAAc,YAAYA,EAAO,YAAY,MAC9D,EAAI,YAAY,KAAK,MAAMA,EAAO,SAAS,IAEtCD;AACT;AAMA,SAAgBE,EACd,GACA,IAAiBJ,GACF;CAIf,IAAMK,IAAW,GAHD,CAAC,GAAGC,EAAY,eAAe,CAAC,CAAC,KAAK,MAAMC,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAGrE,EAAQ,GAFdD,EAAY,+BAEW,GADnBA,EAAY,aAAa,EACO,GAAGE,EAAO,KAAK;CACjE,OAAOC,EAAUC,EAAYL,CAAQ,CAAC;AACxC;AAGA,SAAgBM,EAAgC,GAI9C;CACA,IAAMC,IAAO;EACX,iBAAiBN,EAAY;EAC7B,gCAAgCA,EAAY;CAC9C;CAOA,OANIA,EAAY,aAAa,QAAQA,EAAY,YAAY,IACpD;EACL,GAAGM;EACH,wCAAwB,IAAI,KAAKN,EAAY,YAAY,GAAI;CAC/D,IAEKM;AACT;;;ACxBA,IAAMC,IAAmB,8CACnBC,IAAY,IACZnC,IAAe;AAErB,SAASqC,EAAgB,GAAqD;CAC5E,IAAIpC,EAAgBqC,CAAO,GAAG,OAAOA,EAAQ;CAC7C,IAAIhC,EAAegC,CAAO,GAAG,OAAOA;CACpC,MAAU,MACR,iGACF;AACF;AAEA,eAAeC,EACb,GACA,GACA;CACA,IAAMC,IAAS,MAAMC,EAAS,gBAAgBC,CAAE;CAChD,OAAOnC,EAAsBiC,EAAO,eAAe;AACrD;AAEA,SAASG,EAAc,GAAe,GAA6B;CACjE,IAAMC,IAAIC,EAAK,KAAK;CACpB,IAAI,CAAC,sBAAsB,KAAKD,CAAC,GAC/B,MAAU,MAAM,0BAA0BE,EAAM,yBAAyB;CAE3E,OAAOF;AACT;AAGA,SAAgBG,IAAkD;CAChE,OAAOC,EAAe,aACpBC,GACAf,GACAC,CACF;AACF;AAKA,eAAsBe,EACpB,GACwB;CACxB,IAAMC,IAASd,EAAgBC,CAAO,GAChCc,IAAYL,EAAiC;CAmBnD,OAjBK,MADiB3C,EAAgBgD,CAAS,MAE7C,MAAMb,EACJY,GACA1C,EAAe;EACb,QAAQwC;EACR,iBAAiBf;EACjB,WAAWC;CACb,CAAC,CACH,GACA,MAAMI,EACJY,GACAjD,EAA6B;EAC3B;EACA,YAAYmD;CACd,CAAC,CACH,IAEKD;AACT;AAEA,SAAgBE,EAA0C,GAQxC;CAehB,OAboB,IADMC,EAAcN,CACpB,CAAA,CAAc,WAAW;EAC3C;GAAE,MAAM;GAAY,OAAOzB,EAAO;GAA2B,MAAM;EAAU;EAC7E;GAAE,MAAM;GAAc,OAAOA,EAAO;GAA6B,MAAM;EAAU;EACjF;GAAE,MAAM;GAAO,OAAOA,EAAO;GAAsB,MAAM;EAAU;EACnE;GAAE,MAAM;GAAU,OAAOA,EAAO;GAAQ,MAAM;EAAS;EACvD;GAAE,MAAM;GAAa,OAAOA,EAAO;GAAW,MAAM;EAAS;EAC7D;GAAE,MAAM;GAAa,OAAOA,EAAO;GAAW,MAAM;EAAS;EAC7D;GACE,MAAM;GACN,OAAOgC,EAAoBhC,EAAO,eAAe;GACjD,MAAM;EACR;CACF,CACO;AACT;AA8BA,eAAsBiC,EACpB,GAC2C;CAC3C,IAAMN,IAASd,EAAgBb,EAAO,MAAM,GACtC4B,IACJ5B,EAAO,iBAAiB,KACpBuB,EAAiC,IACjC,MAAMG,EAAiC1B,EAAO,MAAM,GAEpDkC,IAAWf,EAAc,YAAYnB,EAAO,QAAQ,GACpDmC,IAAahB,EAAc,cAAcnB,EAAO,UAAU,GAC1DoC,IAAMpC,EAAO,KAAK,KAAK,IACzBmB,EAAc,OAAOnB,EAAO,GAAG,IAC9BxB,GAEC6D,IAAYrC,EAAO,aAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,GAC5DsC,IACJ,OAAOtC,EAAO,aAAc,YAAYA,EAAO,YAAY,IACvD,KAAK,MAAMA,EAAO,SAAS,IAC3B,GACAK,IAASL,EAAO,UAAUuC,GAE1BC,IAAkBR,EACtBhC,EAAO,mBACLC,EACEH,EAAqC,EACnC,WAAWwC,IAAY,IAAIA,IAAY,KAAA,EACzC,CAAC,GACDjC,MAAWkC,IAAA,mBAA2DlC,CACxE,CACJ;CAEA,IAAImC,MAAoBC,GACtB,MAAU,MACR,uFACF;CAGF,IAAMC,IACJ,OAAO1C,EAAO,kBAAmB,YAAYA,EAAO,iBAAiB,IACjEA,EAAO,iBACPsC,IAAY,IACVA,IACAD,IAAYM,GAEdC,IAAOd,EAA0C;EACrD;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC,GAcKe,IAAU,MAAM9B,EAAYY,GAZvB9C,EAAiB;EAC1B,QAAQ+C;EACR,MAAM;GACJ,WAAWO;GACX,gBAAgB,OAAOO,CAAc;GACrC,WAAW;GACX,QAAQD;GACR;GACA,OAAO;EACT;CACF,CAE0C,CAAE;CAC5C,IAAI,CAACI,GACH,MAAU,MAAM,uEAAuE;CAEzF,IAAM,EAAE,0BAAuB7D,EAAiB,GAC1C8D,IAAMnE,EAA6BkE,GAASE,CAAkB;CACpE,IAAI,CAACD,KAAO,CAACE,EAAyBF,CAAG,GACvC,MAAU,MACR,4FACF;CAGF,OAAO;EACA;EACL;EACA;EACA;EACA;EACA;CACF;AACF;AAKA,eAAsBG,EAA2B,GAI/B;CAChB,IAAMtB,IAASd,EAAgBb,EAAO,MAAM,GACtC4B,IAAa5B,EAAO,aAAauB,EAAiC,GAClEuB,IAAMd,EAAoBhC,EAAO,GAAG;CAC1C,IAAI,CAACgD,EAAyBF,CAAG,GAC/B,MAAU,MACR,oFACF;CAUF,IAAI,CAAC,MADiB/B,EAAYY,GANvBzC,EAAsB,CAC/B;EACE,QAAQ0C;EACR,MAAM,CAAC,EAAE,OAAI,CAAC;CAChB,CACF,CAC0C,CAAE,GAE1C,MAAU,MAAM,uEAAuE;AAE3F;AAaA,eAAsBsB,EAA+B,GAGI;CAKvD,IAAMC,KAAM,MAJOC,EAA+B;EAChD,YAAYpD,EAAO;EACnB,gBAAgB;CAClB,CAAC,EAAA,CACgB,MAAM,MAAMqD,EAAE,IAAI,YAAY,MAAMrD,EAAO,IAAI,YAAY,CAAC;CAC7E,IAAI,CAACmD,GAAK,OAAO;CACjB,IAAMG,IAAUC,EAA+BJ,EAAI,mBAAmB,IAAI,GACpET,IACJ,OAAOS,EAAI,kBAAmB,WAC1BA,EAAI,iBACJ,OAAOA,EAAI,kBAAmB,WAC5B,OAAOA,EAAI,cAAc,IACzB;CACR,OAAO;EACL,KAAKA,EAAI;EACT;EACA,QAAQK,EAA2B;GAAE;GAAS;EAAe,CAAC;EAC9D;CACF;AACF"}