lens-convex-auth 0.1.0

package/dist/chunk-2UCSL2CL.js

@@ -0,0 +1,526 @@
+"use client";
+
+// src/core/constants.ts
+var LENS_API_ORIGINS = {
+  mainnet: "https://api.lens.xyz",
+  testnet: "https://api.testnet.lens.xyz"
+};
+function lensApiOrigin(environment = "mainnet") {
+  return LENS_API_ORIGINS[environment];
+}
+var LENS_CHAIN_IDS = {
+  mainnet: 232,
+  testnet: 37111
+};
+var LENS_TOKEN_LIFETIME_MS = 10 * 60 * 1e3;
+var ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;
+var DEFAULT_CONVEX_TOKEN_ENDPOINT = "/api/convex-token";
+
+// src/core/jwt.ts
+function decodeJwtPayload(token) {
+  try {
+    const payload = token.split(".")[1];
+    if (!payload) return null;
+    const base64 = payload.replace(/-/g, "+").replace(/_/g, "/");
+    const binary = atob(base64.padEnd(base64.length + (4 - base64.length % 4) % 4, "="));
+    const json = new TextDecoder().decode(Uint8Array.from(binary, (c) => c.charCodeAt(0)));
+    const claims = JSON.parse(json);
+    return claims && typeof claims === "object" ? claims : null;
+  } catch {
+    return null;
+  }
+}
+function jwtExpiresAt(token) {
+  const exp = Number(decodeJwtPayload(token)?.exp);
+  return Number.isFinite(exp) && exp > 0 ? exp * 1e3 : null;
+}
+function lensSessionFromIdToken(idToken) {
+  const claims = decodeJwtPayload(idToken);
+  const act = claims?.act;
+  if (typeof act?.sub !== "string") return null;
+  return { account: act.sub.toLowerCase(), sessionId: String(claims?.sid ?? "") };
+}
+
+// src/core/storage.ts
+var LensTokenStorage = class {
+  constructor(tokens, prefix) {
+    this.tokens = tokens;
+    this.prefix = prefix;
+  }
+  tokens;
+  prefix;
+  isCredentials(key) {
+    return key.includes("credentials") || key.includes("session");
+  }
+  // The SDK only accepts a stored credentials item whose metadata is exactly
+  // { version, createdAt, updatedAt }, so keep the metadata it wrote and hand it back unchanged.
+  metadataKey(key) {
+    return `${this.prefix}${key}:metadata`;
+  }
+  credentialsMetadata(key) {
+    const stored = localStorage.getItem(this.metadataKey(key));
+    if (stored) return JSON.parse(stored);
+    const now = Date.now();
+    return { version: 3, createdAt: now, updatedAt: now };
+  }
+  getItem(key) {
+    if (typeof window === "undefined") return null;
+    try {
+      if (!this.isCredentials(key)) return localStorage.getItem(this.prefix + key);
+      const tokens = this.tokens.getStoredTokens();
+      if (!tokens) return null;
+      return JSON.stringify({
+        data: { accessToken: tokens.accessToken, idToken: tokens.idToken, refreshToken: tokens.refreshToken },
+        metadata: this.credentialsMetadata(key)
+      });
+    } catch {
+      return null;
+    }
+  }
+  setItem(key, value) {
+    if (typeof window === "undefined") return;
+    try {
+      if (!this.isCredentials(key)) return localStorage.setItem(this.prefix + key, value);
+      const parsed = JSON.parse(value);
+      const data = typeof parsed.data === "string" ? JSON.parse(parsed.data) : parsed.data;
+      if (data?.accessToken && data?.idToken && data?.refreshToken) {
+        this.tokens.storeCredentials(data);
+        localStorage.setItem(this.metadataKey(key), JSON.stringify(parsed.metadata));
+      }
+    } catch {
+    }
+  }
+  removeItem(key) {
+    if (typeof window === "undefined") return;
+    try {
+      if (!this.isCredentials(key)) return localStorage.removeItem(this.prefix + key);
+      this.tokens.clearTokens();
+      localStorage.removeItem(this.metadataKey(key));
+    } catch {
+    }
+  }
+};
+
+// src/core/tokens.ts
+var TOKENS_CHANGED_EVENT = "lens-convex-auth:tokens-changed";
+var REFRESH_BUFFER_MS = 60 * 1e3;
+var REFRESH_MUTATION = `
+  mutation Refresh($request: RefreshRequest!) {
+    refresh(request: $request) {
+      ... on AuthenticationTokens {
+        accessToken
+        idToken
+        refreshToken
+      }
+      ... on ForbiddenError {
+        reason
+      }
+    }
+  }
+`;
+function notifyTokensChanged() {
+  try {
+    window.dispatchEvent(new Event(TOKENS_CHANGED_EVENT));
+  } catch {
+  }
+}
+var TokenService = class {
+  constructor(options) {
+    this.options = options;
+    const p = options.storagePrefix;
+    this.storageKeys = {
+      accessToken: `${p}access_token`,
+      idToken: `${p}id_token`,
+      refreshToken: `${p}refresh_token`,
+      expiresAt: `${p}token_expires_at`
+    };
+  }
+  options;
+  storageKeys;
+  refreshPromise = null;
+  storeTokens(tokens) {
+    if (typeof window === "undefined") return;
+    try {
+      localStorage.setItem(this.storageKeys.accessToken, tokens.accessToken);
+      localStorage.setItem(this.storageKeys.idToken, tokens.idToken);
+      localStorage.setItem(this.storageKeys.refreshToken, tokens.refreshToken);
+      localStorage.setItem(this.storageKeys.expiresAt, tokens.expiresAt.toString());
+    } catch {
+    }
+    notifyTokensChanged();
+  }
+  storeCredentials(credentials) {
+    this.storeTokens({ ...credentials, expiresAt: Date.now() + LENS_TOKEN_LIFETIME_MS });
+  }
+  getStoredTokens() {
+    if (typeof window === "undefined") return null;
+    try {
+      const accessToken = localStorage.getItem(this.storageKeys.accessToken);
+      const idToken = localStorage.getItem(this.storageKeys.idToken);
+      const refreshToken = localStorage.getItem(this.storageKeys.refreshToken);
+      const storedExpiresAt = localStorage.getItem(this.storageKeys.expiresAt);
+      if (!accessToken || !idToken || !refreshToken) return null;
+      const expiresAt = jwtExpiresAt(accessToken) ?? (storedExpiresAt ? parseInt(storedExpiresAt, 10) : 0);
+      return { accessToken, idToken, refreshToken, expiresAt };
+    } catch {
+      return null;
+    }
+  }
+  clearTokens() {
+    if (typeof window === "undefined") return;
+    try {
+      for (const key of Object.values(this.storageKeys)) localStorage.removeItem(key);
+    } catch {
+    }
+    notifyTokensChanged();
+  }
+  // Current access token, refreshed first if it's about to expire
+  async getValidAccessToken() {
+    const tokens = this.getStoredTokens();
+    if (!tokens) return null;
+    if (tokens.expiresAt > Date.now() + REFRESH_BUFFER_MS) return tokens.accessToken;
+    return (await this.refreshTokens())?.accessToken ?? null;
+  }
+  // ID token for authenticating to your backend (Convex, API routes), refreshed when it's about to
+  // expire (by the token's own `exp` claim). `forceRefresh` is for when the backend rejected it.
+  async getFreshIdToken(forceRefresh = false) {
+    const tokens = this.getStoredTokens();
+    if (!tokens) return null;
+    const expiresAt = jwtExpiresAt(tokens.idToken) ?? 0;
+    const fresh = expiresAt > Date.now() + REFRESH_BUFFER_MS;
+    const justIssued = expiresAt > Date.now() + 2 * REFRESH_BUFFER_MS;
+    if (fresh && (!forceRefresh || justIssued)) return tokens.idToken;
+    return (await this.refreshTokens())?.idToken ?? null;
+  }
+  async isAuthenticated() {
+    return !!await this.getValidAccessToken();
+  }
+  // Concurrent calls share one request. Clears the tokens when the session can't be refreshed.
+  refreshTokens() {
+    this.refreshPromise ??= this.performRefresh().finally(() => {
+      this.refreshPromise = null;
+    });
+    return this.refreshPromise;
+  }
+  async performRefresh() {
+    const refreshToken = this.getStoredTokens()?.refreshToken;
+    if (!refreshToken) {
+      this.clearTokens();
+      return null;
+    }
+    try {
+      const response = await fetch(this.options.graphqlUrl, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ query: REFRESH_MUTATION, variables: { request: { refreshToken } } })
+      });
+      const data = await response.json();
+      const result = data?.data?.refresh;
+      if (data.errors || !result || result.reason) throw new Error(result?.reason ?? "Refresh failed");
+      const tokens = {
+        accessToken: result.accessToken,
+        idToken: result.idToken,
+        refreshToken: result.refreshToken,
+        expiresAt: Date.now() + LENS_TOKEN_LIFETIME_MS
+      };
+      this.storeTokens(tokens);
+      return tokens;
+    } catch {
+      this.clearTokens();
+      return null;
+    }
+  }
+};
+
+// src/core/wallet.ts
+import { createWalletClient, custom, defineChain as defineViemChain, getAddress, hexToBigInt, hexToNumber } from "viem";
+import { lens as viemLens, lensTestnet as viemLensTestnet } from "viem/chains";
+import { chainConfig } from "viem/zksync";
+import { defineChain } from "thirdweb/chains";
+import { EIP1193 } from "thirdweb/wallets";
+function lensThirdwebChain(environment, rpcUrl) {
+  const testnet2 = environment === "testnet";
+  return defineChain({
+    id: LENS_CHAIN_IDS[environment],
+    name: testnet2 ? "Lens Chain Testnet" : "Lens Chain",
+    nativeCurrency: testnet2 ? { name: "GRASS", symbol: "GRASS", decimals: 18 } : { name: "GHO", symbol: "GHO", decimals: 18 },
+    ...rpcUrl ? { rpc: rpcUrl } : {},
+    ...testnet2 ? { testnet: true } : {}
+  });
+}
+function lensViemChain(environment) {
+  return defineViemChain({ ...environment === "testnet" ? viemLensTestnet : viemLens, ...chainConfig });
+}
+function createLensWalletClient(opts) {
+  const account = opts.wallet.getAccount();
+  if (!account) throw new Error("Connect your wallet");
+  const provider = EIP1193.toProvider({ wallet: opts.wallet, chain: opts.chain, client: opts.client });
+  return createWalletClient({
+    account: getAddress(account.address),
+    chain: opts.viemChain,
+    transport: custom({
+      request: ({ method, params }) => {
+        if (method === "eth_sendTransaction") {
+          const [tx] = params;
+          return provider.request({
+            method,
+            params: [{
+              to: tx.to,
+              data: tx.data,
+              value: tx.value ? hexToBigInt(tx.value) : void 0,
+              nonce: tx.nonce ? hexToNumber(tx.nonce) : void 0
+            }]
+          });
+        }
+        return provider.request({ method, params });
+      }
+    })
+  });
+}
+
+// src/core/auth.ts
+import { PublicClient, evmAddress, mainnet, signatureFrom, testnet } from "@lens-protocol/client";
+import { createThirdwebClient } from "thirdweb";
+var CHALLENGE_REFRESH_MS = 2 * 60 * 1e3;
+var CHALLENGE_MAX_AGE_MS = 4 * 60 * 1e3;
+function opensWalletWithDeepLink() {
+  if (typeof navigator === "undefined") return false;
+  const ua = navigator.userAgent;
+  return /iPhone|iPad|iPod|Android/i.test(ua) || /Macintosh/.test(ua) && navigator.maxTouchPoints > 1;
+}
+function signLensChallenge(challenge, signer) {
+  return signer.signMessage({ message: challenge.text });
+}
+function sessionCredentials(session) {
+  const credentials = session.getCredentials();
+  if (credentials.isErr()) throw credentials.error;
+  if (!credentials.value) throw new Error("The Lens session has no credentials");
+  return credentials.value;
+}
+function createLensAuth(options) {
+  if (!options.thirdwebClientId) throw new Error("lens-convex-auth: thirdwebClientId is required");
+  if (!ADDRESS_RE.test(options.lensAppAddress ?? "")) {
+    throw new Error("lens-convex-auth: lensAppAddress must be your Lens app address (0x\u2026)");
+  }
+  const environment = options.environment ?? "mainnet";
+  const storagePrefix = options.storagePrefix ?? "lens_";
+  const appAddress = options.lensAppAddress;
+  const convexTokenEndpoint = options.convexTokenEndpoint ?? DEFAULT_CONVEX_TOKEN_ENDPOINT;
+  const tokens = new TokenService({ storagePrefix, graphqlUrl: `${lensApiOrigin(environment)}/graphql` });
+  const thirdwebClient = createThirdwebClient({ clientId: options.thirdwebClientId });
+  const chain = lensThirdwebChain(environment, options.lensChainRpcUrl);
+  const viemChain = lensViemChain(environment);
+  const lensEnvironment = environment === "testnet" ? testnet : mainnet;
+  const lensClient = PublicClient.create({
+    environment: lensEnvironment,
+    storage: typeof window !== "undefined" ? new LensTokenStorage(tokens, `${storagePrefix}custom_`) : void 0
+  });
+  function getSession() {
+    const idToken = tokens.getStoredTokens()?.idToken;
+    return idToken ? lensSessionFromIdToken(idToken) : null;
+  }
+  async function resumeSession() {
+    if (!await tokens.isAuthenticated()) return false;
+    if (!lensClient.currentSession?.isSessionClient()) await lensClient.resumeSession();
+    return true;
+  }
+  async function requestChallenge(opts) {
+    const app = evmAddress(appAddress);
+    const account = evmAddress(opts.account);
+    const signer = evmAddress(opts.signer);
+    const challenge = await lensClient.challenge(
+      opts.role === "ACCOUNT_MANAGER" ? { accountManager: { account, app, manager: signer } } : { accountOwner: { account, app, owner: signer } }
+    );
+    if (challenge.isErr()) throw challenge.error;
+    return challenge.value;
+  }
+  async function authenticate(challenge, signature) {
+    const authenticated = await lensClient.authenticate({ id: challenge.id, signature: signatureFrom(signature) });
+    if (authenticated.isErr()) throw authenticated.error;
+    tokens.storeCredentials(sessionCredentials(authenticated.value));
+    return authenticated.value;
+  }
+  async function logout() {
+    tokens.clearTokens();
+    const session = lensClient.currentSession;
+    if (session && session.isSessionClient()) await session.logout();
+  }
+  async function authFetch(input, init = {}) {
+    const send = async (forceRefresh) => {
+      const idToken = await tokens.getFreshIdToken(forceRefresh);
+      const headers = new Headers(init.headers);
+      if (idToken) headers.set("Authorization", `Bearer ${idToken}`);
+      return fetch(input, { ...init, headers });
+    };
+    const response = await send(false);
+    return response.status === 401 && getSession() ? send(true) : response;
+  }
+  async function fetchConvexToken(forceRefresh = false) {
+    const idToken = await tokens.getFreshIdToken(forceRefresh);
+    if (!idToken) return null;
+    try {
+      const res = await fetch(convexTokenEndpoint, { method: "POST", headers: { Authorization: `Bearer ${idToken}` } });
+      if (!res.ok) return null;
+      const { token } = await res.json();
+      return typeof token === "string" ? token : null;
+    } catch {
+      return null;
+    }
+  }
+  return {
+    environment,
+    appAddress,
+    storagePrefix,
+    thirdwebClient,
+    chain,
+    viemChain,
+    lensClient,
+    lensEnvironment,
+    tokens,
+    getSession,
+    resumeSession,
+    requestChallenge,
+    signChallenge: signLensChallenge,
+    authenticate,
+    logout,
+    fetch: authFetch,
+    fetchConvexToken
+  };
+}
+
+// src/core/onboarding.ts
+import { PublicClient as PublicClient2, evmAddress as evmAddress2, signatureFrom as signatureFrom2, uri } from "@lens-protocol/client";
+import { canCreateUsername, createAccountWithUsername, fetchAccount, fetchUsername } from "@lens-protocol/client/actions";
+import { handleOperationWith } from "@lens-protocol/client/viem";
+import { account as accountMetadata } from "@lens-protocol/metadata";
+import { StorageClient, immutable } from "@lens-chain/storage-client";
+import { getTransactionReceipt } from "viem/actions";
+var OnboardingError = class extends Error {
+  name = "OnboardingError";
+};
+function createOnboardingClient(auth) {
+  return PublicClient2.create({ environment: auth.lensEnvironment });
+}
+async function requestOnboardingChallenge(auth, client, walletAddress) {
+  const challenge = await client.challenge({
+    onboardingUser: { app: evmAddress2(auth.appAddress), wallet: evmAddress2(walletAddress) }
+  });
+  if (challenge.isErr()) throw challenge.error;
+  return challenge.value;
+}
+async function authenticateOnboarding(client, challenge, signature) {
+  const authenticated = await client.authenticate({ id: challenge.id, signature: signatureFrom2(signature) });
+  if (authenticated.isErr()) throw authenticated.error;
+  return authenticated.value;
+}
+var USERNAME_PATTERN = /^[a-z0-9][a-z0-9_-]*$/;
+function usernameFormatError(localName) {
+  if (!localName) return "Choose a username";
+  if (/^[-_]/.test(localName)) return "Start with a letter or a number";
+  if (!USERNAME_PATTERN.test(localName)) return "Use only lowercase letters, numbers, - and _";
+  return null;
+}
+async function isUsernameTaken(auth, localName) {
+  const result = await fetchUsername(auth.lensClient, { username: { localName } });
+  if (result.isErr()) throw result.error;
+  return result.value !== null;
+}
+function validationFailedMessage(failed) {
+  return failed.unsatisfiedRules?.required[0]?.message || failed.reason;
+}
+async function checkUsername(session, localName) {
+  const result = await canCreateUsername(session, { localName });
+  if (result.isErr()) throw result.error;
+  switch (result.value.__typename) {
+    case "NamespaceOperationValidationPassed":
+      return null;
+    case "UsernameTaken":
+      return "This username is taken";
+    case "NamespaceOperationValidationFailed":
+      return validationFailedMessage(result.value);
+    case "NamespaceOperationValidationUnknown":
+      return "This username can\u2019t be created here. Try another one.";
+  }
+}
+var storageClient = null;
+async function uploadAccountMetadata(auth, profile) {
+  storageClient ??= StorageClient.create();
+  const acl = immutable(LENS_CHAIN_IDS[auth.environment]);
+  const picture = profile.picture ? (await storageClient.uploadFile(profile.picture, { acl })).uri : void 0;
+  const metadata = accountMetadata({
+    name: profile.name || void 0,
+    bio: profile.bio || void 0,
+    picture
+  });
+  const { uri: metadataUri } = await storageClient.uploadAsJson(metadata, { acl });
+  return metadataUri;
+}
+var ACCOUNT_POLL_ATTEMPTS = 15;
+var ACCOUNT_POLL_INTERVAL_MS = 2e3;
+async function createLensAccount(auth, session, wallet, request) {
+  const created = await createAccountWithUsername(session, {
+    username: { localName: request.localName },
+    metadataUri: uri(request.metadataUri)
+  });
+  if (created.isErr()) throw created.error;
+  const result = created.value;
+  switch (result.__typename) {
+    case "UsernameTaken":
+      throw new OnboardingError("This username is taken");
+    case "NamespaceOperationValidationFailed":
+      throw new OnboardingError(validationFailedMessage(result));
+    case "TransactionWillFail":
+      throw new OnboardingError(result.reason);
+  }
+  const walletClient = createLensWalletClient({ wallet, client: auth.thirdwebClient, chain: auth.chain, viemChain: auth.viemChain });
+  const sent = await handleOperationWith(walletClient)(result);
+  if (sent.isErr()) throw sent.error;
+  const hash = sent.value;
+  const indexed = await session.waitForTransaction(hash);
+  if (indexed.isErr()) {
+    const receipt = await getTransactionReceipt(walletClient, { hash }).catch(() => null);
+    if (receipt?.status === "reverted") throw indexed.error;
+  }
+  for (let attempt = 0; attempt < ACCOUNT_POLL_ATTEMPTS; attempt++) {
+    const fetched = await fetchAccount(session, { txHash: hash });
+    if (fetched.isOk() && fetched.value) return fetched.value;
+    await new Promise((resolve) => setTimeout(resolve, ACCOUNT_POLL_INTERVAL_MS));
+  }
+  throw new OnboardingError("Your account was created but isn\u2019t ready yet. Sign in to it again in a minute.");
+}
+async function signInToCreatedAccount(auth, session, accountAddress) {
+  const switched = await session.switchAccount({ account: evmAddress2(accountAddress) });
+  if (switched.isErr()) throw switched.error;
+  auth.tokens.storeCredentials(sessionCredentials(switched.value));
+  const resumed = await auth.lensClient.resumeSession();
+  if (resumed.isErr()) throw resumed.error;
+}
+
+export {
+  lensApiOrigin,
+  LENS_CHAIN_IDS,
+  decodeJwtPayload,
+  lensSessionFromIdToken,
+  LensTokenStorage,
+  TOKENS_CHANGED_EVENT,
+  TokenService,
+  lensThirdwebChain,
+  lensViemChain,
+  createLensWalletClient,
+  CHALLENGE_REFRESH_MS,
+  CHALLENGE_MAX_AGE_MS,
+  opensWalletWithDeepLink,
+  signLensChallenge,
+  createLensAuth,
+  OnboardingError,
+  createOnboardingClient,
+  requestOnboardingChallenge,
+  authenticateOnboarding,
+  usernameFormatError,
+  isUsernameTaken,
+  checkUsername,
+  uploadAccountMetadata,
+  createLensAccount,
+  signInToCreatedAccount
+};
+//# sourceMappingURL=chunk-2UCSL2CL.js.map

package/dist/chunk-2UCSL2CL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/constants.ts","../src/core/jwt.ts","../src/core/storage.ts","../src/core/tokens.ts","../src/core/wallet.ts","../src/core/auth.ts","../src/core/onboarding.ts"],"sourcesContent":["// Dependency-free values shared by every entry point, including the server and Convex ones.\n\nexport type LensEnvironmentName = \"mainnet\" | \"testnet\"\n\nconst LENS_API_ORIGINS: Record<LensEnvironmentName, string> = {\n  mainnet: \"https://api.lens.xyz\",\n  testnet: \"https://api.testnet.lens.xyz\",\n}\n\n// Lens signs its tokens as the API origin, and publishes its keys under it.\nexport function lensApiOrigin(environment: LensEnvironmentName = \"mainnet\"): string {\n  return LENS_API_ORIGINS[environment]\n}\n\nexport const LENS_CHAIN_IDS: Record<LensEnvironmentName, number> = {\n  mainnet: 232,\n  testnet: 37111,\n}\n\n// Lens access and ID tokens are valid for 10 minutes.\nexport const LENS_TOKEN_LIFETIME_MS = 10 * 60 * 1000\n\nexport const ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/\n\n// The token the server issues for Convex (server/, convex/, cli/). Both sides must agree on these.\nexport const DEFAULT_CONVEX_TOKEN_ISSUER = \"https://lens-convex-auth.local\"\nexport const DEFAULT_CONVEX_TOKEN_AUDIENCE = \"convex\"\nexport const DEFAULT_CONVEX_TOKEN_KEY_ID = \"convex-auth-1\"\nexport const DEFAULT_CONVEX_TOKEN_ENDPOINT = \"/api/convex-token\"\n","// Claims of a JWT, without verifying it (the server verifies). Null if it isn't a JWT.\nexport function decodeJwtPayload(token: string): Record<string, unknown> | null {\n  try {\n    const payload = token.split(\".\")[1]\n    if (!payload) return null\n    const base64 = payload.replace(/-/g, \"+\").replace(/_/g, \"/\")\n    const binary = atob(base64.padEnd(base64.length + ((4 - (base64.length % 4)) % 4), \"=\"))\n    const json = new TextDecoder().decode(Uint8Array.from(binary, (c) => c.charCodeAt(0)))\n    const claims = JSON.parse(json)\n    return claims && typeof claims === \"object\" ? claims : null\n  } catch {\n    return null\n  }\n}\n\n// When a JWT expires (ms since epoch), from its `exp` claim\nexport function jwtExpiresAt(token: string): number | null {\n  const exp = Number(decodeJwtPayload(token)?.exp)\n  return Number.isFinite(exp) && exp > 0 ? exp * 1000 : null\n}\n\n// The Lens account a Lens ID token acts for (`act.sub`), lowercased, and the session it belongs to.\n// Null for tokens without an account (onboarding users) or that aren't JWTs.\nexport function lensSessionFromIdToken(idToken: string): { account: string; sessionId: string } | null {\n  const claims = decodeJwtPayload(idToken)\n  const act = claims?.act as { sub?: unknown } | null | undefined\n  if (typeof act?.sub !== \"string\") return null\n  return { account: act.sub.toLowerCase(), sessionId: String(claims?.sid ?? \"\") }\n}\n","import type { IStorageProvider } from \"@lens-protocol/client\"\nimport type { TokenService } from \"./tokens\"\n\n// Storage for the Lens SDK that keeps its credentials in the TokenService, so the SDK and the app\n// share one copy of the session. Everything else the SDK stores goes to localStorage under a prefix.\nexport class LensTokenStorage implements IStorageProvider {\n  constructor(private tokens: TokenService, private prefix: string) {}\n\n  private isCredentials(key: string) {\n    return key.includes(\"credentials\") || key.includes(\"session\")\n  }\n\n  // The SDK only accepts a stored credentials item whose metadata is exactly\n  // { version, createdAt, updatedAt }, so keep the metadata it wrote and hand it back unchanged.\n  private metadataKey(key: string) {\n    return `${this.prefix}${key}:metadata`\n  }\n\n  private credentialsMetadata(key: string) {\n    const stored = localStorage.getItem(this.metadataKey(key))\n    if (stored) return JSON.parse(stored)\n    // Tokens stored before the metadata was kept: 3 is the SDK's current credentials schema version.\n    const now = Date.now()\n    return { version: 3, createdAt: now, updatedAt: now }\n  }\n\n  getItem(key: string): string | null {\n    if (typeof window === \"undefined\") return null\n    try {\n      if (!this.isCredentials(key)) return localStorage.getItem(this.prefix + key)\n      const tokens = this.tokens.getStoredTokens()\n      if (!tokens) return null\n      return JSON.stringify({\n        data: { accessToken: tokens.accessToken, idToken: tokens.idToken, refreshToken: tokens.refreshToken },\n        metadata: this.credentialsMetadata(key),\n      })\n    } catch {\n      return null\n    }\n  }\n\n  setItem(key: string, value: string): void {\n    if (typeof window === \"undefined\") return\n    try {\n      if (!this.isCredentials(key)) return localStorage.setItem(this.prefix + key, value)\n      const parsed = JSON.parse(value)\n      const data = typeof parsed.data === \"string\" ? JSON.parse(parsed.data) : parsed.data\n      if (data?.accessToken && data?.idToken && data?.refreshToken) {\n        this.tokens.storeCredentials(data)\n        localStorage.setItem(this.metadataKey(key), JSON.stringify(parsed.metadata))\n      }\n    } catch {}\n  }\n\n  removeItem(key: string): void {\n    if (typeof window === \"undefined\") return\n    try {\n      if (!this.isCredentials(key)) return localStorage.removeItem(this.prefix + key)\n      this.tokens.clearTokens()\n      localStorage.removeItem(this.metadataKey(key))\n    } catch {}\n  }\n}\n","import { LENS_TOKEN_LIFETIME_MS } from \"./constants\"\nimport { jwtExpiresAt } from \"./jwt\"\n\nexport interface TokenData {\n  accessToken: string\n  idToken: string\n  refreshToken: string\n  expiresAt: number // when the access token expires (ms since epoch)\n}\n\nexport type LensCredentials = Pick<TokenData, \"accessToken\" | \"idToken\" | \"refreshToken\">\n\n// Dispatched on window whenever tokens are stored or cleared in this tab\nexport const TOKENS_CHANGED_EVENT = \"lens-convex-auth:tokens-changed\"\n\n// Refresh a minute before expiry for smoother UX\nconst REFRESH_BUFFER_MS = 60 * 1000\n\nconst REFRESH_MUTATION = `\n  mutation Refresh($request: RefreshRequest!) {\n    refresh(request: $request) {\n      ... on AuthenticationTokens {\n        accessToken\n        idToken\n        refreshToken\n      }\n      ... on ForbiddenError {\n        reason\n      }\n    }\n  }\n`\n\nfunction notifyTokensChanged() {\n  try {\n    window.dispatchEvent(new Event(TOKENS_CHANGED_EVENT))\n  } catch {}\n}\n\n// Keeps the Lens session's tokens in localStorage, the single place every part of the app (the Lens\n// SDK, Convex, API calls) reads them from, and refreshes them.\nexport class TokenService {\n  readonly storageKeys: { accessToken: string; idToken: string; refreshToken: string; expiresAt: string }\n  private refreshPromise: Promise<TokenData | null> | null = null\n\n  constructor(private options: { storagePrefix: string; graphqlUrl: string }) {\n    const p = options.storagePrefix\n    this.storageKeys = {\n      accessToken: `${p}access_token`,\n      idToken: `${p}id_token`,\n      refreshToken: `${p}refresh_token`,\n      expiresAt: `${p}token_expires_at`,\n    }\n  }\n\n  storeTokens(tokens: TokenData): void {\n    if (typeof window === \"undefined\") return\n    try {\n      localStorage.setItem(this.storageKeys.accessToken, tokens.accessToken)\n      localStorage.setItem(this.storageKeys.idToken, tokens.idToken)\n      localStorage.setItem(this.storageKeys.refreshToken, tokens.refreshToken)\n      localStorage.setItem(this.storageKeys.expiresAt, tokens.expiresAt.toString())\n    } catch {}\n    notifyTokensChanged()\n  }\n\n  storeCredentials(credentials: LensCredentials): void {\n    this.storeTokens({ ...credentials, expiresAt: Date.now() + LENS_TOKEN_LIFETIME_MS })\n  }\n\n  getStoredTokens(): TokenData | null {\n    if (typeof window === \"undefined\") return null\n    try {\n      const accessToken = localStorage.getItem(this.storageKeys.accessToken)\n      const idToken = localStorage.getItem(this.storageKeys.idToken)\n      const refreshToken = localStorage.getItem(this.storageKeys.refreshToken)\n      const storedExpiresAt = localStorage.getItem(this.storageKeys.expiresAt)\n      if (!accessToken || !idToken || !refreshToken) return null\n      // The access token's own expiry. The stored value is only an estimate (store time + 10 min),\n      // which marks tokens read back from an old session as fresh long after they expired.\n      const expiresAt = jwtExpiresAt(accessToken) ?? (storedExpiresAt ? parseInt(storedExpiresAt, 10) : 0)\n      return { accessToken, idToken, refreshToken, expiresAt }\n    } catch {\n      return null\n    }\n  }\n\n  clearTokens(): void {\n    if (typeof window === \"undefined\") return\n    try {\n      for (const key of Object.values(this.storageKeys)) localStorage.removeItem(key)\n    } catch {}\n    notifyTokensChanged()\n  }\n\n  // Current access token, refreshed first if it's about to expire\n  async getValidAccessToken(): Promise<string | null> {\n    const tokens = this.getStoredTokens()\n    if (!tokens) return null\n    if (tokens.expiresAt > Date.now() + REFRESH_BUFFER_MS) return tokens.accessToken\n    return (await this.refreshTokens())?.accessToken ?? null\n  }\n\n  // ID token for authenticating to your backend (Convex, API routes), refreshed when it's about to\n  // expire (by the token's own `exp` claim). `forceRefresh` is for when the backend rejected it.\n  async getFreshIdToken(forceRefresh = false): Promise<string | null> {\n    const tokens = this.getStoredTokens()\n    if (!tokens) return null\n    const expiresAt = jwtExpiresAt(tokens.idToken) ?? 0\n    const fresh = expiresAt > Date.now() + REFRESH_BUFFER_MS\n    // A forced refresh right after another tab or the background refresher got new tokens reuses them\n    const justIssued = expiresAt > Date.now() + 2 * REFRESH_BUFFER_MS\n    if (fresh && (!forceRefresh || justIssued)) return tokens.idToken\n    return (await this.refreshTokens())?.idToken ?? null\n  }\n\n  async isAuthenticated(): Promise<boolean> {\n    return !!(await this.getValidAccessToken())\n  }\n\n  // Concurrent calls share one request. Clears the tokens when the session can't be refreshed.\n  refreshTokens(): Promise<TokenData | null> {\n    this.refreshPromise ??= this.performRefresh().finally(() => {\n      this.refreshPromise = null\n    })\n    return this.refreshPromise\n  }\n\n  private async performRefresh(): Promise<TokenData | null> {\n    const refreshToken = this.getStoredTokens()?.refreshToken\n    if (!refreshToken) {\n      this.clearTokens()\n      return null\n    }\n    try {\n      // Resuming the Lens session only reads these same tokens back, so ask the API for new ones.\n      // (Each Lens SDK session keeps its own copy of the tokens and refreshes that copy itself.)\n      const response = await fetch(this.options.graphqlUrl, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({ query: REFRESH_MUTATION, variables: { request: { refreshToken } } }),\n      })\n      const data = await response.json()\n      const result = data?.data?.refresh\n      if (data.errors || !result || result.reason) throw new Error(result?.reason ?? \"Refresh failed\")\n      const tokens: TokenData = {\n        accessToken: result.accessToken,\n        idToken: result.idToken,\n        refreshToken: result.refreshToken,\n        expiresAt: Date.now() + LENS_TOKEN_LIFETIME_MS,\n      }\n      this.storeTokens(tokens)\n      return tokens\n    } catch {\n      this.clearTokens()\n      return null\n    }\n  }\n}\n","import { createWalletClient, custom, defineChain as defineViemChain, getAddress, hexToBigInt, hexToNumber, type Account as ViemAccount, type Chain as ViemChain, type Hex, type Transport, type WalletClient } from \"viem\"\nimport { lens as viemLens, lensTestnet as viemLensTestnet } from \"viem/chains\"\nimport { chainConfig } from \"viem/zksync\"\nimport { defineChain, type Chain } from \"thirdweb/chains\"\nimport { EIP1193, type Wallet } from \"thirdweb/wallets\"\nimport type { ThirdwebClient } from \"thirdweb\"\nimport { LENS_CHAIN_IDS, type LensEnvironmentName } from \"./constants\"\n\n// Lens Chain for thirdweb. Without an RPC URL thirdweb uses its own RPC for the chain.\nexport function lensThirdwebChain(environment: LensEnvironmentName, rpcUrl?: string): Chain {\n  const testnet = environment === \"testnet\"\n  return defineChain({\n    id: LENS_CHAIN_IDS[environment],\n    name: testnet ? \"Lens Chain Testnet\" : \"Lens Chain\",\n    nativeCurrency: testnet\n      ? { name: \"GRASS\", symbol: \"GRASS\", decimals: 18 }\n      : { name: \"GHO\", symbol: \"GHO\", decimals: 18 },\n    ...(rpcUrl ? { rpc: rpcUrl } : {}),\n    ...(testnet ? { testnet: true as const } : {}),\n  })\n}\n\n// Lens Chain with the zkSync config (same as `chains.mainnet` from @lens-chain/sdk/viem), so viem can\n// sign the sponsored EIP-712 transactions the Lens API returns. Typed as a plain `Chain` because\n// `handleOperationWith` takes a plain viem `WalletClient`.\nexport function lensViemChain(environment: LensEnvironmentName): ViemChain {\n  return defineViemChain({ ...(environment === \"testnet\" ? viemLensTestnet : viemLens), ...chainConfig })\n}\n\n// A viem wallet client for the connected thirdweb wallet, as `handleOperationWith` expects:\n// hoisted account and a Lens chain. Works for every thirdweb wallet, not only injected ones.\nexport function createLensWalletClient(opts: {\n  wallet: Wallet\n  client: ThirdwebClient\n  chain: Chain\n  viemChain: ViemChain\n}): WalletClient<Transport, ViemChain, ViemAccount> {\n  const account = opts.wallet.getAccount()\n  if (!account) throw new Error(\"Connect your wallet\")\n  const provider = EIP1193.toProvider({ wallet: opts.wallet, chain: opts.chain, client: opts.client })\n  return createWalletClient({\n    account: getAddress(account.address),\n    chain: opts.viemChain,\n    transport: custom({\n      request: ({ method, params }) => {\n        if (method === \"eth_sendTransaction\") {\n          // viem sends hex-encoded fields (e.g. `type: \"0x2\"`) that thirdweb's local signers reject.\n          // thirdweb re-estimates gas and fees for Lens Chain anyway, so pass only what it needs.\n          const [tx] = params as [{ to: Hex; data?: Hex; value?: Hex; nonce?: Hex }]\n          return provider.request({\n            method,\n            params: [{\n              to: tx.to,\n              data: tx.data,\n              value: tx.value ? hexToBigInt(tx.value) : undefined,\n              nonce: tx.nonce ? hexToNumber(tx.nonce) : undefined,\n            }],\n          })\n        }\n        return provider.request({ method, params })\n      },\n    }),\n  })\n}\n","import { PublicClient, evmAddress, mainnet, signatureFrom, testnet, type SessionClient, type UUID } from \"@lens-protocol/client\"\nimport { createThirdwebClient, type ThirdwebClient } from \"thirdweb\"\nimport type { Chain } from \"thirdweb/chains\"\nimport type { Chain as ViemChain } from \"viem\"\nimport { ADDRESS_RE, DEFAULT_CONVEX_TOKEN_ENDPOINT, lensApiOrigin, type LensEnvironmentName } from \"./constants\"\nimport { lensSessionFromIdToken } from \"./jwt\"\nimport { LensTokenStorage } from \"./storage\"\nimport { TokenService, type LensCredentials } from \"./tokens\"\nimport { lensThirdwebChain, lensViemChain } from \"./wallet\"\n\nexport type LensAuthOptions = {\n  /** thirdweb client ID (https://thirdweb.com/dashboard) */\n  thirdwebClientId: string\n  /** Your Lens app address (https://developer.lens.xyz/apps). Tokens are issued for this app. */\n  lensAppAddress: string\n  /** Defaults to \"mainnet\" */\n  environment?: LensEnvironmentName\n  /** Lens Chain RPC for thirdweb. Defaults to thirdweb's RPC. */\n  lensChainRpcUrl?: string\n  /** Prefix of the localStorage keys the session is stored under. Defaults to \"lens_\". */\n  storagePrefix?: string\n  /** Route that exchanges a Lens ID token for a Convex token. Defaults to \"/api/convex-token\". */\n  convexTokenEndpoint?: string\n}\n\nexport type LensLoginRole = \"ACCOUNT_OWNER\" | \"ACCOUNT_MANAGER\"\n\nexport type LensChallenge = { id: UUID; text: string }\n\nexport type MessageSigner = {\n  signMessage: (args: { message: string }) => Promise<string>\n}\n\n// The signed-in Lens account (lowercased address) and its session, read from the stored ID token\nexport type LensSessionInfo = { account: string; sessionId: string }\n\nexport type LensAuth = ReturnType<typeof createLensAuth>\n\n// Challenges are fetched ahead of time so a tap can sign right away: how often they're replaced, and how\n// old one can be to still be used.\nexport const CHALLENGE_REFRESH_MS = 2 * 60 * 1000\nexport const CHALLENGE_MAX_AGE_MS = 4 * 60 * 1000\n\n// On phones and tablets thirdweb opens the wallet app with a deep link to sign (same check as its\n// internal isMobile), and that deep link only works right after a tap.\nexport function opensWalletWithDeepLink() {\n  if (typeof navigator === \"undefined\") return false\n  const ua = navigator.userAgent\n  return /iPhone|iPad|iPod|Android/i.test(ua) || (/Macintosh/.test(ua) && navigator.maxTouchPoints > 1)\n}\n\n// Asks the wallet to sign synchronously (no awaits before it), so call it directly from a click handler.\nexport function signLensChallenge(challenge: LensChallenge, signer: MessageSigner): Promise<string> {\n  return signer.signMessage({ message: challenge.text })\n}\n\n// A Lens SDK session's tokens\nexport function sessionCredentials(session: SessionClient): LensCredentials {\n  const credentials = session.getCredentials()\n  if (credentials.isErr()) throw credentials.error\n  if (!credentials.value) throw new Error(\"The Lens session has no credentials\")\n  return credentials.value\n}\n\n// Create once per app (at module level) and pass to <LensAuthProvider>.\nexport function createLensAuth(options: LensAuthOptions) {\n  if (!options.thirdwebClientId) throw new Error(\"lens-convex-auth: thirdwebClientId is required\")\n  if (!ADDRESS_RE.test(options.lensAppAddress ?? \"\")) {\n    throw new Error(\"lens-convex-auth: lensAppAddress must be your Lens app address (0x…)\")\n  }\n\n  const environment: LensEnvironmentName = options.environment ?? \"mainnet\"\n  const storagePrefix = options.storagePrefix ?? \"lens_\"\n  const appAddress = options.lensAppAddress\n  const convexTokenEndpoint = options.convexTokenEndpoint ?? DEFAULT_CONVEX_TOKEN_ENDPOINT\n\n  const tokens = new TokenService({ storagePrefix, graphqlUrl: `${lensApiOrigin(environment)}/graphql` })\n  const thirdwebClient: ThirdwebClient = createThirdwebClient({ clientId: options.thirdwebClientId })\n  const chain: Chain = lensThirdwebChain(environment, options.lensChainRpcUrl)\n  const viemChain: ViemChain = lensViemChain(environment)\n  const lensEnvironment = environment === \"testnet\" ? testnet : mainnet\n  const lensClient = PublicClient.create({\n    environment: lensEnvironment,\n    storage: typeof window !== \"undefined\" ? new LensTokenStorage(tokens, `${storagePrefix}custom_`) : undefined,\n  })\n\n  // The signed-in account, or null when signed out\n  function getSession(): LensSessionInfo | null {\n    const idToken = tokens.getStoredTokens()?.idToken\n    return idToken ? lensSessionFromIdToken(idToken) : null\n  }\n\n  // True when there's a valid session, refreshing its tokens first if needed (a session that can't be\n  // refreshed is cleared). Also resumes it in the Lens client, so Lens SDK calls and hooks act as the\n  // signed-in account.\n  async function resumeSession(): Promise<boolean> {\n    if (!(await tokens.isAuthenticated())) return false\n    if (!lensClient.currentSession?.isSessionClient()) await lensClient.resumeSession()\n    return true\n  }\n\n  // Logging in is split in two (challenge, then sign + authenticate) instead of using `lensClient.login`,\n  // so the signature can be requested straight from a tap. On mobile, WalletConnect opens the wallet app\n  // with a deep link when asked to sign, and iOS only allows that right after a user gesture: after the\n  // challenge round trip the link is blocked and the wallet never shows the request.\n  async function requestChallenge(opts: { role: LensLoginRole; account: string; signer: string }): Promise<LensChallenge> {\n    const app = evmAddress(appAddress)\n    const account = evmAddress(opts.account)\n    const signer = evmAddress(opts.signer)\n    const challenge = await lensClient.challenge(\n      opts.role === \"ACCOUNT_MANAGER\"\n        ? { accountManager: { account, app, manager: signer } }\n        : { accountOwner: { account, app, owner: signer } },\n    )\n    if (challenge.isErr()) throw challenge.error\n    return challenge.value\n  }\n\n  async function authenticate(challenge: LensChallenge, signature: string): Promise<SessionClient> {\n    const authenticated = await lensClient.authenticate({ id: challenge.id, signature: signatureFrom(signature) })\n    if (authenticated.isErr()) throw authenticated.error\n    tokens.storeCredentials(sessionCredentials(authenticated.value))\n    return authenticated.value\n  }\n\n  async function logout(): Promise<void> {\n    tokens.clearTokens()\n    // PublicClient has no logout; logout exists on SessionClient\n    const session = lensClient.currentSession\n    if (session && session.isSessionClient()) await session.logout()\n  }\n\n  // fetch() with the Lens ID token as `Authorization: Bearer`, retried once with a refreshed token on 401.\n  // Verify it on the server with `getLensSession` from \"lens-convex-auth/server\".\n  async function authFetch(input: RequestInfo | URL, init: RequestInit = {}): Promise<Response> {\n    const send = async (forceRefresh: boolean) => {\n      const idToken = await tokens.getFreshIdToken(forceRefresh)\n      const headers = new Headers(init.headers)\n      if (idToken) headers.set(\"Authorization\", `Bearer ${idToken}`)\n      return fetch(input, { ...init, headers })\n    }\n    const response = await send(false)\n    return response.status === 401 && getSession() ? send(true) : response\n  }\n\n  // Convex can't verify Lens ID tokens itself (they have no `kid` header), so the server verifies the\n  // Lens ID token and issues a Convex token for the same account (see \"lens-convex-auth/server\").\n  async function fetchConvexToken(forceRefresh = false): Promise<string | null> {\n    const idToken = await tokens.getFreshIdToken(forceRefresh)\n    if (!idToken) return null\n    try {\n      const res = await fetch(convexTokenEndpoint, { method: \"POST\", headers: { Authorization: `Bearer ${idToken}` } })\n      if (!res.ok) return null\n      const { token } = await res.json()\n      return typeof token === \"string\" ? token : null\n    } catch {\n      return null\n    }\n  }\n\n  return {\n    environment,\n    appAddress,\n    storagePrefix,\n    thirdwebClient,\n    chain,\n    viemChain,\n    lensClient,\n    lensEnvironment,\n    tokens,\n    getSession,\n    resumeSession,\n    requestChallenge,\n    signChallenge: signLensChallenge,\n    authenticate,\n    logout,\n    fetch: authFetch,\n    fetchConvexToken,\n  }\n}\n","import { PublicClient, evmAddress, signatureFrom, uri, type Account, type SessionClient } from \"@lens-protocol/client\"\nimport { canCreateUsername, createAccountWithUsername, fetchAccount, fetchUsername } from \"@lens-protocol/client/actions\"\nimport { handleOperationWith } from \"@lens-protocol/client/viem\"\nimport { account as accountMetadata } from \"@lens-protocol/metadata\"\nimport { StorageClient, immutable } from \"@lens-chain/storage-client\"\nimport { getTransactionReceipt } from \"viem/actions\"\nimport type { Wallet } from \"thirdweb/wallets\"\nimport type { LensAuth, LensChallenge } from \"./auth\"\nimport { sessionCredentials } from \"./auth\"\nimport { LENS_CHAIN_IDS } from \"./constants\"\nimport { createLensWalletClient } from \"./wallet\"\n\n// An error whose message can be shown to the user as is.\nexport class OnboardingError extends Error {\n  name = \"OnboardingError\"\n}\n\n// Creating an account takes a session as an onboarding user (a wallet signed in without a Lens Account).\n// It runs on its own client, whose storage is in memory, so that session never reaches the app's token\n// storage: until the account exists and is signed in to, the app must not treat the wallet as signed in.\nexport function createOnboardingClient(auth: LensAuth) {\n  return PublicClient.create({ environment: auth.lensEnvironment })\n}\n\nexport async function requestOnboardingChallenge(auth: LensAuth, client: PublicClient, walletAddress: string): Promise<LensChallenge> {\n  const challenge = await client.challenge({\n    onboardingUser: { app: evmAddress(auth.appAddress), wallet: evmAddress(walletAddress) },\n  })\n  if (challenge.isErr()) throw challenge.error\n  return challenge.value\n}\n\nexport async function authenticateOnboarding(client: PublicClient, challenge: LensChallenge, signature: string): Promise<SessionClient> {\n  const authenticated = await client.authenticate({ id: challenge.id, signature: signatureFrom(signature) })\n  if (authenticated.isErr()) throw authenticated.error\n  return authenticated.value\n}\n\n// The global Lens namespace takes lowercase letters, numbers, \"-\" and \"_\", and can't start with \"-\" or \"_\".\n// Its other rules (length, reserved names, price) are checked by the Lens API in checkUsername.\nconst USERNAME_PATTERN = /^[a-z0-9][a-z0-9_-]*$/\n\nexport function usernameFormatError(localName: string): string | null {\n  if (!localName) return \"Choose a username\"\n  if (/^[-_]/.test(localName)) return \"Start with a letter or a number\"\n  if (!USERNAME_PATTERN.test(localName)) return \"Use only lowercase letters, numbers, - and _\"\n  return null\n}\n\n// Needs no session, so it can run while the user types.\nexport async function isUsernameTaken(auth: LensAuth, localName: string): Promise<boolean> {\n  const result = await fetchUsername(auth.lensClient, { username: { localName } })\n  if (result.isErr()) throw result.error\n  return result.value !== null\n}\n\ntype NamespaceValidationFailed = {\n  reason: string\n  unsatisfiedRules: { required: { message: string }[] } | null\n}\n\nfunction validationFailedMessage(failed: NamespaceValidationFailed) {\n  return failed.unsatisfiedRules?.required[0]?.message || failed.reason\n}\n\n// Returns why the username can't be created, or null if it can.\nexport async function checkUsername(session: SessionClient, localName: string): Promise<string | null> {\n  const result = await canCreateUsername(session, { localName })\n  if (result.isErr()) throw result.error\n  switch (result.value.__typename) {\n    case \"NamespaceOperationValidationPassed\":\n      return null\n    case \"UsernameTaken\":\n      return \"This username is taken\"\n    case \"NamespaceOperationValidationFailed\":\n      return validationFailedMessage(result.value)\n    case \"NamespaceOperationValidationUnknown\":\n      return \"This username can’t be created here. Try another one.\"\n  }\n}\n\nlet storageClient: StorageClient | null = null\n\nexport type AccountProfile = {\n  name?: string\n  bio?: string\n  picture?: File | null\n}\n\n// Uploads the account metadata (and its picture) to Grove, and returns the metadata URI.\nexport async function uploadAccountMetadata(auth: LensAuth, profile: AccountProfile): Promise<string> {\n  storageClient ??= StorageClient.create()\n  const acl = immutable(LENS_CHAIN_IDS[auth.environment])\n  const picture = profile.picture ? (await storageClient.uploadFile(profile.picture, { acl })).uri : undefined\n  const metadata = accountMetadata({\n    name: profile.name || undefined,\n    bio: profile.bio || undefined,\n    picture,\n  })\n  const { uri: metadataUri } = await storageClient.uploadAsJson(metadata, { acl })\n  return metadataUri\n}\n\n// How long to wait for a new account to be listed once its transaction is indexed\nconst ACCOUNT_POLL_ATTEMPTS = 15\nconst ACCOUNT_POLL_INTERVAL_MS = 2000\n\n// Creates an account owned by the onboarding user's wallet. Most apps sponsor it; otherwise the wallet\n// is asked to send the transaction.\nexport async function createLensAccount(\n  auth: LensAuth,\n  session: SessionClient,\n  wallet: Wallet,\n  request: { localName: string; metadataUri: string },\n): Promise<Account> {\n  const created = await createAccountWithUsername(session, {\n    username: { localName: request.localName },\n    metadataUri: uri(request.metadataUri),\n  })\n  if (created.isErr()) throw created.error\n  const result = created.value\n  switch (result.__typename) {\n    case \"UsernameTaken\":\n      throw new OnboardingError(\"This username is taken\")\n    case \"NamespaceOperationValidationFailed\":\n      throw new OnboardingError(validationFailedMessage(result))\n    case \"TransactionWillFail\":\n      throw new OnboardingError(result.reason)\n  }\n\n  const walletClient = createLensWalletClient({ wallet, client: auth.thirdwebClient, chain: auth.chain, viemChain: auth.viemChain })\n  const sent = await handleOperationWith(walletClient)(result)\n  if (sent.isErr()) throw sent.error\n  const hash = sent.value\n\n  const indexed = await session.waitForTransaction(hash)\n  if (indexed.isErr()) {\n    // The Lens API stops waiting for indexing after 10s on mainnet, so the receipt decides whether\n    // the transaction failed. If it can't be read either, the account lookup below still settles it.\n    const receipt = await getTransactionReceipt(walletClient, { hash }).catch(() => null)\n    if (receipt?.status === \"reverted\") throw indexed.error\n  }\n\n  for (let attempt = 0; attempt < ACCOUNT_POLL_ATTEMPTS; attempt++) {\n    const fetched = await fetchAccount(session, { txHash: hash })\n    if (fetched.isOk() && fetched.value) return fetched.value\n    await new Promise((resolve) => setTimeout(resolve, ACCOUNT_POLL_INTERVAL_MS))\n  }\n  throw new OnboardingError(\"Your account was created but isn’t ready yet. Sign in to it again in a minute.\")\n}\n\n// Signs the app in to the new account without another signature: the onboarding session switches to it,\n// and its tokens are handed to the app's Lens client, like a sign-in from the account list.\nexport async function signInToCreatedAccount(auth: LensAuth, session: SessionClient, accountAddress: string): Promise<void> {\n  const switched = await session.switchAccount({ account: evmAddress(accountAddress) })\n  if (switched.isErr()) throw switched.error\n  auth.tokens.storeCredentials(sessionCredentials(switched.value))\n  const resumed = await auth.lensClient.resumeSession()\n  if (resumed.isErr()) throw resumed.error\n}\n"],"mappings":";;;AAIA,IAAM,mBAAwD;AAAA,EAC5D,SAAS;AAAA,EACT,SAAS;AACX;AAGO,SAAS,cAAc,cAAmC,WAAmB;AAClF,SAAO,iBAAiB,WAAW;AACrC;AAEO,IAAM,iBAAsD;AAAA,EACjE,SAAS;AAAA,EACT,SAAS;AACX;AAGO,IAAM,yBAAyB,KAAK,KAAK;AAEzC,IAAM,aAAa;AAMnB,IAAM,gCAAgC;;;AC3BtC,SAAS,iBAAiB,OAA+C;AAC9E,MAAI;AACF,UAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,SAAS,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC3D,UAAM,SAAS,KAAK,OAAO,OAAO,OAAO,UAAW,IAAK,OAAO,SAAS,KAAM,GAAI,GAAG,CAAC;AACvF,UAAM,OAAO,IAAI,YAAY,EAAE,OAAO,WAAW,KAAK,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AACrF,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,WAAO,UAAU,OAAO,WAAW,WAAW,SAAS;AAAA,EACzD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,aAAa,OAA8B;AACzD,QAAM,MAAM,OAAO,iBAAiB,KAAK,GAAG,GAAG;AAC/C,SAAO,OAAO,SAAS,GAAG,KAAK,MAAM,IAAI,MAAM,MAAO;AACxD;AAIO,SAAS,uBAAuB,SAAgE;AACrG,QAAM,SAAS,iBAAiB,OAAO;AACvC,QAAM,MAAM,QAAQ;AACpB,MAAI,OAAO,KAAK,QAAQ,SAAU,QAAO;AACzC,SAAO,EAAE,SAAS,IAAI,IAAI,YAAY,GAAG,WAAW,OAAO,QAAQ,OAAO,EAAE,EAAE;AAChF;;;ACvBO,IAAM,mBAAN,MAAmD;AAAA,EACxD,YAAoB,QAA8B,QAAgB;AAA9C;AAA8B;AAAA,EAAiB;AAAA,EAA/C;AAAA,EAA8B;AAAA,EAE1C,cAAc,KAAa;AACjC,WAAO,IAAI,SAAS,aAAa,KAAK,IAAI,SAAS,SAAS;AAAA,EAC9D;AAAA;AAAA;AAAA,EAIQ,YAAY,KAAa;AAC/B,WAAO,GAAG,KAAK,MAAM,GAAG,GAAG;AAAA,EAC7B;AAAA,EAEQ,oBAAoB,KAAa;AACvC,UAAM,SAAS,aAAa,QAAQ,KAAK,YAAY,GAAG,CAAC;AACzD,QAAI,OAAQ,QAAO,KAAK,MAAM,MAAM;AAEpC,UAAM,MAAM,KAAK,IAAI;AACrB,WAAO,EAAE,SAAS,GAAG,WAAW,KAAK,WAAW,IAAI;AAAA,EACtD;AAAA,EAEA,QAAQ,KAA4B;AAClC,QAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAI;AACF,UAAI,CAAC,KAAK,cAAc,GAAG,EAAG,QAAO,aAAa,QAAQ,KAAK,SAAS,GAAG;AAC3E,YAAM,SAAS,KAAK,OAAO,gBAAgB;AAC3C,UAAI,CAAC,OAAQ,QAAO;AACpB,aAAO,KAAK,UAAU;AAAA,QACpB,MAAM,EAAE,aAAa,OAAO,aAAa,SAAS,OAAO,SAAS,cAAc,OAAO,aAAa;AAAA,QACpG,UAAU,KAAK,oBAAoB,GAAG;AAAA,MACxC,CAAC;AAAA,IACH,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,QAAQ,KAAa,OAAqB;AACxC,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI;AACF,UAAI,CAAC,KAAK,cAAc,GAAG,EAAG,QAAO,aAAa,QAAQ,KAAK,SAAS,KAAK,KAAK;AAClF,YAAM,SAAS,KAAK,MAAM,KAAK;AAC/B,YAAM,OAAO,OAAO,OAAO,SAAS,WAAW,KAAK,MAAM,OAAO,IAAI,IAAI,OAAO;AAChF,UAAI,MAAM,eAAe,MAAM,WAAW,MAAM,cAAc;AAC5D,aAAK,OAAO,iBAAiB,IAAI;AACjC,qBAAa,QAAQ,KAAK,YAAY,GAAG,GAAG,KAAK,UAAU,OAAO,QAAQ,CAAC;AAAA,MAC7E;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AAAA,EAEA,WAAW,KAAmB;AAC5B,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI;AACF,UAAI,CAAC,KAAK,cAAc,GAAG,EAAG,QAAO,aAAa,WAAW,KAAK,SAAS,GAAG;AAC9E,WAAK,OAAO,YAAY;AACxB,mBAAa,WAAW,KAAK,YAAY,GAAG,CAAC;AAAA,IAC/C,QAAQ;AAAA,IAAC;AAAA,EACX;AACF;;;ACjDO,IAAM,uBAAuB;AAGpC,IAAM,oBAAoB,KAAK;AAE/B,IAAM,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAezB,SAAS,sBAAsB;AAC7B,MAAI;AACF,WAAO,cAAc,IAAI,MAAM,oBAAoB,CAAC;AAAA,EACtD,QAAQ;AAAA,EAAC;AACX;AAIO,IAAM,eAAN,MAAmB;AAAA,EAIxB,YAAoB,SAAwD;AAAxD;AAClB,UAAM,IAAI,QAAQ;AAClB,SAAK,cAAc;AAAA,MACjB,aAAa,GAAG,CAAC;AAAA,MACjB,SAAS,GAAG,CAAC;AAAA,MACb,cAAc,GAAG,CAAC;AAAA,MAClB,WAAW,GAAG,CAAC;AAAA,IACjB;AAAA,EACF;AAAA,EARoB;AAAA,EAHX;AAAA,EACD,iBAAmD;AAAA,EAY3D,YAAY,QAAyB;AACnC,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI;AACF,mBAAa,QAAQ,KAAK,YAAY,aAAa,OAAO,WAAW;AACrE,mBAAa,QAAQ,KAAK,YAAY,SAAS,OAAO,OAAO;AAC7D,mBAAa,QAAQ,KAAK,YAAY,cAAc,OAAO,YAAY;AACvE,mBAAa,QAAQ,KAAK,YAAY,WAAW,OAAO,UAAU,SAAS,CAAC;AAAA,IAC9E,QAAQ;AAAA,IAAC;AACT,wBAAoB;AAAA,EACtB;AAAA,EAEA,iBAAiB,aAAoC;AACnD,SAAK,YAAY,EAAE,GAAG,aAAa,WAAW,KAAK,IAAI,IAAI,uBAAuB,CAAC;AAAA,EACrF;AAAA,EAEA,kBAAoC;AAClC,QAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAI;AACF,YAAM,cAAc,aAAa,QAAQ,KAAK,YAAY,WAAW;AACrE,YAAM,UAAU,aAAa,QAAQ,KAAK,YAAY,OAAO;AAC7D,YAAM,eAAe,aAAa,QAAQ,KAAK,YAAY,YAAY;AACvE,YAAM,kBAAkB,aAAa,QAAQ,KAAK,YAAY,SAAS;AACvE,UAAI,CAAC,eAAe,CAAC,WAAW,CAAC,aAAc,QAAO;AAGtD,YAAM,YAAY,aAAa,WAAW,MAAM,kBAAkB,SAAS,iBAAiB,EAAE,IAAI;AAClG,aAAO,EAAE,aAAa,SAAS,cAAc,UAAU;AAAA,IACzD,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,cAAoB;AAClB,QAAI,OAAO,WAAW,YAAa;AACnC,QAAI;AACF,iBAAW,OAAO,OAAO,OAAO,KAAK,WAAW,EAAG,cAAa,WAAW,GAAG;AAAA,IAChF,QAAQ;AAAA,IAAC;AACT,wBAAoB;AAAA,EACtB;AAAA;AAAA,EAGA,MAAM,sBAA8C;AAClD,UAAM,SAAS,KAAK,gBAAgB;AACpC,QAAI,CAAC,OAAQ,QAAO;AACpB,QAAI,OAAO,YAAY,KAAK,IAAI,IAAI,kBAAmB,QAAO,OAAO;AACrE,YAAQ,MAAM,KAAK,cAAc,IAAI,eAAe;AAAA,EACtD;AAAA;AAAA;AAAA,EAIA,MAAM,gBAAgB,eAAe,OAA+B;AAClE,UAAM,SAAS,KAAK,gBAAgB;AACpC,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,YAAY,aAAa,OAAO,OAAO,KAAK;AAClD,UAAM,QAAQ,YAAY,KAAK,IAAI,IAAI;AAEvC,UAAM,aAAa,YAAY,KAAK,IAAI,IAAI,IAAI;AAChD,QAAI,UAAU,CAAC,gBAAgB,YAAa,QAAO,OAAO;AAC1D,YAAQ,MAAM,KAAK,cAAc,IAAI,WAAW;AAAA,EAClD;AAAA,EAEA,MAAM,kBAAoC;AACxC,WAAO,CAAC,CAAE,MAAM,KAAK,oBAAoB;AAAA,EAC3C;AAAA;AAAA,EAGA,gBAA2C;AACzC,SAAK,mBAAmB,KAAK,eAAe,EAAE,QAAQ,MAAM;AAC1D,WAAK,iBAAiB;AAAA,IACxB,CAAC;AACD,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAc,iBAA4C;AACxD,UAAM,eAAe,KAAK,gBAAgB,GAAG;AAC7C,QAAI,CAAC,cAAc;AACjB,WAAK,YAAY;AACjB,aAAO;AAAA,IACT;AACA,QAAI;AAGF,YAAM,WAAW,MAAM,MAAM,KAAK,QAAQ,YAAY;AAAA,QACpD,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,OAAO,kBAAkB,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC;AAAA,MAC5F,CAAC;AACD,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,YAAM,SAAS,MAAM,MAAM;AAC3B,UAAI,KAAK,UAAU,CAAC,UAAU,OAAO,OAAQ,OAAM,IAAI,MAAM,QAAQ,UAAU,gBAAgB;AAC/F,YAAM,SAAoB;AAAA,QACxB,aAAa,OAAO;AAAA,QACpB,SAAS,OAAO;AAAA,QAChB,cAAc,OAAO;AAAA,QACrB,WAAW,KAAK,IAAI,IAAI;AAAA,MAC1B;AACA,WAAK,YAAY,MAAM;AACvB,aAAO;AAAA,IACT,QAAQ;AACN,WAAK,YAAY;AACjB,aAAO;AAAA,IACT;AAAA,EACF;AACF;;;AC9JA,SAAS,oBAAoB,QAAQ,eAAe,iBAAiB,YAAY,aAAa,mBAAsH;AACpN,SAAS,QAAQ,UAAU,eAAe,uBAAuB;AACjE,SAAS,mBAAmB;AAC5B,SAAS,mBAA+B;AACxC,SAAS,eAA4B;AAK9B,SAAS,kBAAkB,aAAkC,QAAwB;AAC1F,QAAMA,WAAU,gBAAgB;AAChC,SAAO,YAAY;AAAA,IACjB,IAAI,eAAe,WAAW;AAAA,IAC9B,MAAMA,WAAU,uBAAuB;AAAA,IACvC,gBAAgBA,WACZ,EAAE,MAAM,SAAS,QAAQ,SAAS,UAAU,GAAG,IAC/C,EAAE,MAAM,OAAO,QAAQ,OAAO,UAAU,GAAG;AAAA,IAC/C,GAAI,SAAS,EAAE,KAAK,OAAO,IAAI,CAAC;AAAA,IAChC,GAAIA,WAAU,EAAE,SAAS,KAAc,IAAI,CAAC;AAAA,EAC9C,CAAC;AACH;AAKO,SAAS,cAAc,aAA6C;AACzE,SAAO,gBAAgB,EAAE,GAAI,gBAAgB,YAAY,kBAAkB,UAAW,GAAG,YAAY,CAAC;AACxG;AAIO,SAAS,uBAAuB,MAKa;AAClD,QAAM,UAAU,KAAK,OAAO,WAAW;AACvC,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,qBAAqB;AACnD,QAAM,WAAW,QAAQ,WAAW,EAAE,QAAQ,KAAK,QAAQ,OAAO,KAAK,OAAO,QAAQ,KAAK,OAAO,CAAC;AACnG,SAAO,mBAAmB;AAAA,IACxB,SAAS,WAAW,QAAQ,OAAO;AAAA,IACnC,OAAO,KAAK;AAAA,IACZ,WAAW,OAAO;AAAA,MAChB,SAAS,CAAC,EAAE,QAAQ,OAAO,MAAM;AAC/B,YAAI,WAAW,uBAAuB;AAGpC,gBAAM,CAAC,EAAE,IAAI;AACb,iBAAO,SAAS,QAAQ;AAAA,YACtB;AAAA,YACA,QAAQ,CAAC;AAAA,cACP,IAAI,GAAG;AAAA,cACP,MAAM,GAAG;AAAA,cACT,OAAO,GAAG,QAAQ,YAAY,GAAG,KAAK,IAAI;AAAA,cAC1C,OAAO,GAAG,QAAQ,YAAY,GAAG,KAAK,IAAI;AAAA,YAC5C,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AACA,eAAO,SAAS,QAAQ,EAAE,QAAQ,OAAO,CAAC;AAAA,MAC5C;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;;;AC/DA,SAAS,cAAc,YAAY,SAAS,eAAe,eAA8C;AACzG,SAAS,4BAAiD;AAuCnD,IAAM,uBAAuB,IAAI,KAAK;AACtC,IAAM,uBAAuB,IAAI,KAAK;AAItC,SAAS,0BAA0B;AACxC,MAAI,OAAO,cAAc,YAAa,QAAO;AAC7C,QAAM,KAAK,UAAU;AACrB,SAAO,4BAA4B,KAAK,EAAE,KAAM,YAAY,KAAK,EAAE,KAAK,UAAU,iBAAiB;AACrG;AAGO,SAAS,kBAAkB,WAA0B,QAAwC;AAClG,SAAO,OAAO,YAAY,EAAE,SAAS,UAAU,KAAK,CAAC;AACvD;AAGO,SAAS,mBAAmB,SAAyC;AAC1E,QAAM,cAAc,QAAQ,eAAe;AAC3C,MAAI,YAAY,MAAM,EAAG,OAAM,YAAY;AAC3C,MAAI,CAAC,YAAY,MAAO,OAAM,IAAI,MAAM,qCAAqC;AAC7E,SAAO,YAAY;AACrB;AAGO,SAAS,eAAe,SAA0B;AACvD,MAAI,CAAC,QAAQ,iBAAkB,OAAM,IAAI,MAAM,gDAAgD;AAC/F,MAAI,CAAC,WAAW,KAAK,QAAQ,kBAAkB,EAAE,GAAG;AAClD,UAAM,IAAI,MAAM,2EAAsE;AAAA,EACxF;AAEA,QAAM,cAAmC,QAAQ,eAAe;AAChE,QAAM,gBAAgB,QAAQ,iBAAiB;AAC/C,QAAM,aAAa,QAAQ;AAC3B,QAAM,sBAAsB,QAAQ,uBAAuB;AAE3D,QAAM,SAAS,IAAI,aAAa,EAAE,eAAe,YAAY,GAAG,cAAc,WAAW,CAAC,WAAW,CAAC;AACtG,QAAM,iBAAiC,qBAAqB,EAAE,UAAU,QAAQ,iBAAiB,CAAC;AAClG,QAAM,QAAe,kBAAkB,aAAa,QAAQ,eAAe;AAC3E,QAAM,YAAuB,cAAc,WAAW;AACtD,QAAM,kBAAkB,gBAAgB,YAAY,UAAU;AAC9D,QAAM,aAAa,aAAa,OAAO;AAAA,IACrC,aAAa;AAAA,IACb,SAAS,OAAO,WAAW,cAAc,IAAI,iBAAiB,QAAQ,GAAG,aAAa,SAAS,IAAI;AAAA,EACrG,CAAC;AAGD,WAAS,aAAqC;AAC5C,UAAM,UAAU,OAAO,gBAAgB,GAAG;AAC1C,WAAO,UAAU,uBAAuB,OAAO,IAAI;AAAA,EACrD;AAKA,iBAAe,gBAAkC;AAC/C,QAAI,CAAE,MAAM,OAAO,gBAAgB,EAAI,QAAO;AAC9C,QAAI,CAAC,WAAW,gBAAgB,gBAAgB,EAAG,OAAM,WAAW,cAAc;AAClF,WAAO;AAAA,EACT;AAMA,iBAAe,iBAAiB,MAAwF;AACtH,UAAM,MAAM,WAAW,UAAU;AACjC,UAAM,UAAU,WAAW,KAAK,OAAO;AACvC,UAAM,SAAS,WAAW,KAAK,MAAM;AACrC,UAAM,YAAY,MAAM,WAAW;AAAA,MACjC,KAAK,SAAS,oBACV,EAAE,gBAAgB,EAAE,SAAS,KAAK,SAAS,OAAO,EAAE,IACpD,EAAE,cAAc,EAAE,SAAS,KAAK,OAAO,OAAO,EAAE;AAAA,IACtD;AACA,QAAI,UAAU,MAAM,EAAG,OAAM,UAAU;AACvC,WAAO,UAAU;AAAA,EACnB;AAEA,iBAAe,aAAa,WAA0B,WAA2C;AAC/F,UAAM,gBAAgB,MAAM,WAAW,aAAa,EAAE,IAAI,UAAU,IAAI,WAAW,cAAc,SAAS,EAAE,CAAC;AAC7G,QAAI,cAAc,MAAM,EAAG,OAAM,cAAc;AAC/C,WAAO,iBAAiB,mBAAmB,cAAc,KAAK,CAAC;AAC/D,WAAO,cAAc;AAAA,EACvB;AAEA,iBAAe,SAAwB;AACrC,WAAO,YAAY;AAEnB,UAAM,UAAU,WAAW;AAC3B,QAAI,WAAW,QAAQ,gBAAgB,EAAG,OAAM,QAAQ,OAAO;AAAA,EACjE;AAIA,iBAAe,UAAU,OAA0B,OAAoB,CAAC,GAAsB;AAC5F,UAAM,OAAO,OAAO,iBAA0B;AAC5C,YAAM,UAAU,MAAM,OAAO,gBAAgB,YAAY;AACzD,YAAM,UAAU,IAAI,QAAQ,KAAK,OAAO;AACxC,UAAI,QAAS,SAAQ,IAAI,iBAAiB,UAAU,OAAO,EAAE;AAC7D,aAAO,MAAM,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,IAC1C;AACA,UAAM,WAAW,MAAM,KAAK,KAAK;AACjC,WAAO,SAAS,WAAW,OAAO,WAAW,IAAI,KAAK,IAAI,IAAI;AAAA,EAChE;AAIA,iBAAe,iBAAiB,eAAe,OAA+B;AAC5E,UAAM,UAAU,MAAM,OAAO,gBAAgB,YAAY;AACzD,QAAI,CAAC,QAAS,QAAO;AACrB,QAAI;AACF,YAAM,MAAM,MAAM,MAAM,qBAAqB,EAAE,QAAQ,QAAQ,SAAS,EAAE,eAAe,UAAU,OAAO,GAAG,EAAE,CAAC;AAChH,UAAI,CAAC,IAAI,GAAI,QAAO;AACpB,YAAM,EAAE,MAAM,IAAI,MAAM,IAAI,KAAK;AACjC,aAAO,OAAO,UAAU,WAAW,QAAQ;AAAA,IAC7C,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP;AAAA,EACF;AACF;;;ACnLA,SAAS,gBAAAC,eAAc,cAAAC,aAAY,iBAAAC,gBAAe,WAA6C;AAC/F,SAAS,mBAAmB,2BAA2B,cAAc,qBAAqB;AAC1F,SAAS,2BAA2B;AACpC,SAAS,WAAW,uBAAuB;AAC3C,SAAS,eAAe,iBAAiB;AACzC,SAAS,6BAA6B;AAQ/B,IAAM,kBAAN,cAA8B,MAAM;AAAA,EACzC,OAAO;AACT;AAKO,SAAS,uBAAuB,MAAgB;AACrD,SAAOC,cAAa,OAAO,EAAE,aAAa,KAAK,gBAAgB,CAAC;AAClE;AAEA,eAAsB,2BAA2B,MAAgB,QAAsB,eAA+C;AACpI,QAAM,YAAY,MAAM,OAAO,UAAU;AAAA,IACvC,gBAAgB,EAAE,KAAKC,YAAW,KAAK,UAAU,GAAG,QAAQA,YAAW,aAAa,EAAE;AAAA,EACxF,CAAC;AACD,MAAI,UAAU,MAAM,EAAG,OAAM,UAAU;AACvC,SAAO,UAAU;AACnB;AAEA,eAAsB,uBAAuB,QAAsB,WAA0B,WAA2C;AACtI,QAAM,gBAAgB,MAAM,OAAO,aAAa,EAAE,IAAI,UAAU,IAAI,WAAWC,eAAc,SAAS,EAAE,CAAC;AACzG,MAAI,cAAc,MAAM,EAAG,OAAM,cAAc;AAC/C,SAAO,cAAc;AACvB;AAIA,IAAM,mBAAmB;AAElB,SAAS,oBAAoB,WAAkC;AACpE,MAAI,CAAC,UAAW,QAAO;AACvB,MAAI,QAAQ,KAAK,SAAS,EAAG,QAAO;AACpC,MAAI,CAAC,iBAAiB,KAAK,SAAS,EAAG,QAAO;AAC9C,SAAO;AACT;AAGA,eAAsB,gBAAgB,MAAgB,WAAqC;AACzF,QAAM,SAAS,MAAM,cAAc,KAAK,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAC/E,MAAI,OAAO,MAAM,EAAG,OAAM,OAAO;AACjC,SAAO,OAAO,UAAU;AAC1B;AAOA,SAAS,wBAAwB,QAAmC;AAClE,SAAO,OAAO,kBAAkB,SAAS,CAAC,GAAG,WAAW,OAAO;AACjE;AAGA,eAAsB,cAAc,SAAwB,WAA2C;AACrG,QAAM,SAAS,MAAM,kBAAkB,SAAS,EAAE,UAAU,CAAC;AAC7D,MAAI,OAAO,MAAM,EAAG,OAAM,OAAO;AACjC,UAAQ,OAAO,MAAM,YAAY;AAAA,IAC/B,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,wBAAwB,OAAO,KAAK;AAAA,IAC7C,KAAK;AACH,aAAO;AAAA,EACX;AACF;AAEA,IAAI,gBAAsC;AAS1C,eAAsB,sBAAsB,MAAgB,SAA0C;AACpG,oBAAkB,cAAc,OAAO;AACvC,QAAM,MAAM,UAAU,eAAe,KAAK,WAAW,CAAC;AACtD,QAAM,UAAU,QAAQ,WAAW,MAAM,cAAc,WAAW,QAAQ,SAAS,EAAE,IAAI,CAAC,GAAG,MAAM;AACnG,QAAM,WAAW,gBAAgB;AAAA,IAC/B,MAAM,QAAQ,QAAQ;AAAA,IACtB,KAAK,QAAQ,OAAO;AAAA,IACpB;AAAA,EACF,CAAC;AACD,QAAM,EAAE,KAAK,YAAY,IAAI,MAAM,cAAc,aAAa,UAAU,EAAE,IAAI,CAAC;AAC/E,SAAO;AACT;AAGA,IAAM,wBAAwB;AAC9B,IAAM,2BAA2B;AAIjC,eAAsB,kBACpB,MACA,SACA,QACA,SACkB;AAClB,QAAM,UAAU,MAAM,0BAA0B,SAAS;AAAA,IACvD,UAAU,EAAE,WAAW,QAAQ,UAAU;AAAA,IACzC,aAAa,IAAI,QAAQ,WAAW;AAAA,EACtC,CAAC;AACD,MAAI,QAAQ,MAAM,EAAG,OAAM,QAAQ;AACnC,QAAM,SAAS,QAAQ;AACvB,UAAQ,OAAO,YAAY;AAAA,IACzB,KAAK;AACH,YAAM,IAAI,gBAAgB,wBAAwB;AAAA,IACpD,KAAK;AACH,YAAM,IAAI,gBAAgB,wBAAwB,MAAM,CAAC;AAAA,IAC3D,KAAK;AACH,YAAM,IAAI,gBAAgB,OAAO,MAAM;AAAA,EAC3C;AAEA,QAAM,eAAe,uBAAuB,EAAE,QAAQ,QAAQ,KAAK,gBAAgB,OAAO,KAAK,OAAO,WAAW,KAAK,UAAU,CAAC;AACjI,QAAM,OAAO,MAAM,oBAAoB,YAAY,EAAE,MAAM;AAC3D,MAAI,KAAK,MAAM,EAAG,OAAM,KAAK;AAC7B,QAAM,OAAO,KAAK;AAElB,QAAM,UAAU,MAAM,QAAQ,mBAAmB,IAAI;AACrD,MAAI,QAAQ,MAAM,GAAG;AAGnB,UAAM,UAAU,MAAM,sBAAsB,cAAc,EAAE,KAAK,CAAC,EAAE,MAAM,MAAM,IAAI;AACpF,QAAI,SAAS,WAAW,WAAY,OAAM,QAAQ;AAAA,EACpD;AAEA,WAAS,UAAU,GAAG,UAAU,uBAAuB,WAAW;AAChE,UAAM,UAAU,MAAM,aAAa,SAAS,EAAE,QAAQ,KAAK,CAAC;AAC5D,QAAI,QAAQ,KAAK,KAAK,QAAQ,MAAO,QAAO,QAAQ;AACpD,UAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,wBAAwB,CAAC;AAAA,EAC9E;AACA,QAAM,IAAI,gBAAgB,qFAAgF;AAC5G;AAIA,eAAsB,uBAAuB,MAAgB,SAAwB,gBAAuC;AAC1H,QAAM,WAAW,MAAM,QAAQ,cAAc,EAAE,SAASD,YAAW,cAAc,EAAE,CAAC;AACpF,MAAI,SAAS,MAAM,EAAG,OAAM,SAAS;AACrC,OAAK,OAAO,iBAAiB,mBAAmB,SAAS,KAAK,CAAC;AAC/D,QAAM,UAAU,MAAM,KAAK,WAAW,cAAc;AACpD,MAAI,QAAQ,MAAM,EAAG,OAAM,QAAQ;AACrC;","names":["testnet","PublicClient","evmAddress","signatureFrom","PublicClient","evmAddress","signatureFrom"]}

package/dist/chunk-CDAKZCYM.js

@@ -0,0 +1,22 @@
+// src/core/constants.ts
+var LENS_API_ORIGINS = {
+  mainnet: "https://api.lens.xyz",
+  testnet: "https://api.testnet.lens.xyz"
+};
+function lensApiOrigin(environment = "mainnet") {
+  return LENS_API_ORIGINS[environment];
+}
+var LENS_TOKEN_LIFETIME_MS = 10 * 60 * 1e3;
+var ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;
+var DEFAULT_CONVEX_TOKEN_ISSUER = "https://lens-convex-auth.local";
+var DEFAULT_CONVEX_TOKEN_AUDIENCE = "convex";
+var DEFAULT_CONVEX_TOKEN_KEY_ID = "convex-auth-1";
+
+export {
+  lensApiOrigin,
+  ADDRESS_RE,
+  DEFAULT_CONVEX_TOKEN_ISSUER,
+  DEFAULT_CONVEX_TOKEN_AUDIENCE,
+  DEFAULT_CONVEX_TOKEN_KEY_ID
+};
+//# sourceMappingURL=chunk-CDAKZCYM.js.map

package/dist/chunk-CDAKZCYM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/constants.ts"],"sourcesContent":["// Dependency-free values shared by every entry point, including the server and Convex ones.\n\nexport type LensEnvironmentName = \"mainnet\" | \"testnet\"\n\nconst LENS_API_ORIGINS: Record<LensEnvironmentName, string> = {\n  mainnet: \"https://api.lens.xyz\",\n  testnet: \"https://api.testnet.lens.xyz\",\n}\n\n// Lens signs its tokens as the API origin, and publishes its keys under it.\nexport function lensApiOrigin(environment: LensEnvironmentName = \"mainnet\"): string {\n  return LENS_API_ORIGINS[environment]\n}\n\nexport const LENS_CHAIN_IDS: Record<LensEnvironmentName, number> = {\n  mainnet: 232,\n  testnet: 37111,\n}\n\n// Lens access and ID tokens are valid for 10 minutes.\nexport const LENS_TOKEN_LIFETIME_MS = 10 * 60 * 1000\n\nexport const ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/\n\n// The token the server issues for Convex (server/, convex/, cli/). Both sides must agree on these.\nexport const DEFAULT_CONVEX_TOKEN_ISSUER = \"https://lens-convex-auth.local\"\nexport const DEFAULT_CONVEX_TOKEN_AUDIENCE = \"convex\"\nexport const DEFAULT_CONVEX_TOKEN_KEY_ID = \"convex-auth-1\"\nexport const DEFAULT_CONVEX_TOKEN_ENDPOINT = \"/api/convex-token\"\n"],"mappings":";AAIA,IAAM,mBAAwD;AAAA,EAC5D,SAAS;AAAA,EACT,SAAS;AACX;AAGO,SAAS,cAAc,cAAmC,WAAmB;AAClF,SAAO,iBAAiB,WAAW;AACrC;AAQO,IAAM,yBAAyB,KAAK,KAAK;AAEzC,IAAM,aAAa;AAGnB,IAAM,8BAA8B;AACpC,IAAM,gCAAgC;AACtC,IAAM,8BAA8B;","names":[]}