tenjin-cli 0.1.0-alpha.0 → 0.1.0-alpha.2

package/dist/chunk-5CLSD5YN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../node_modules/.pnpm/@noble+hashes@1.8.0/node_modules/@noble/hashes/src/cryptoNode.ts","../node_modules/.pnpm/@noble+hashes@1.8.0/node_modules/@noble/hashes/src/utils.ts","../node_modules/.pnpm/@noble+hashes@1.8.0/node_modules/@noble/hashes/src/_u64.ts"],"sourcesContent":["/**\n * Internal webcrypto alias.\n * We prefer WebCrypto aka globalThis.crypto, which exists in node.js 16+.\n * Falls back to Node.js built-in crypto for Node.js <=v14.\n * See utils.ts for details.\n * @module\n */\n// @ts-ignore\nimport * as nc from 'node:crypto';\nexport const crypto: any =\n  nc && typeof nc === 'object' && 'webcrypto' in nc\n    ? (nc.webcrypto as any)\n    : nc && typeof nc === 'object' && 'randomBytes' in nc\n      ? nc\n      : undefined;\n","/**\n * Utilities for hex, bytes, CSPRNG.\n * @module\n */\n/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */\n\n// We use WebCrypto aka globalThis.crypto, which exists in browsers and node.js 16+.\n// node.js versions earlier than v19 don't declare it in global scope.\n// For node.js, package.json#exports field mapping rewrites import\n// from `crypto` to `cryptoNode`, which imports native module.\n// Makes the utils un-importable in browsers without a bundler.\n// Once node.js 18 is deprecated (2025-04-30), we can just drop the import.\nimport { crypto } from '@noble/hashes/crypto';\n\n/** Checks if something is Uint8Array. Be careful: nodejs Buffer will return true. */\nexport function isBytes(a: unknown): a is Uint8Array {\n  return a instanceof Uint8Array || (ArrayBuffer.isView(a) && a.constructor.name === 'Uint8Array');\n}\n\n/** Asserts something is positive integer. */\nexport function anumber(n: number): void {\n  if (!Number.isSafeInteger(n) || n < 0) throw new Error('positive integer expected, got ' + n);\n}\n\n/** Asserts something is Uint8Array. */\nexport function abytes(b: Uint8Array | undefined, ...lengths: number[]): void {\n  if (!isBytes(b)) throw new Error('Uint8Array expected');\n  if (lengths.length > 0 && !lengths.includes(b.length))\n    throw new Error('Uint8Array expected of length ' + lengths + ', got length=' + b.length);\n}\n\n/** Asserts something is hash */\nexport function ahash(h: IHash): void {\n  if (typeof h !== 'function' || typeof h.create !== 'function')\n    throw new Error('Hash should be wrapped by utils.createHasher');\n  anumber(h.outputLen);\n  anumber(h.blockLen);\n}\n\n/** Asserts a hash instance has not been destroyed / finished */\nexport function aexists(instance: any, checkFinished = true): void {\n  if (instance.destroyed) throw new Error('Hash instance has been destroyed');\n  if (checkFinished && instance.finished) throw new Error('Hash#digest() has already been called');\n}\n\n/** Asserts output is properly-sized byte array */\nexport function aoutput(out: any, instance: any): void {\n  abytes(out);\n  const min = instance.outputLen;\n  if (out.length < min) {\n    throw new Error('digestInto() expects output buffer of length at least ' + min);\n  }\n}\n\n/** Generic type encompassing 8/16/32-byte arrays - but not 64-byte. */\n// prettier-ignore\nexport type TypedArray = Int8Array | Uint8ClampedArray | Uint8Array |\n  Uint16Array | Int16Array | Uint32Array | Int32Array;\n\n/** Cast u8 / u16 / u32 to u8. */\nexport function u8(arr: TypedArray): Uint8Array {\n  return new Uint8Array(arr.buffer, arr.byteOffset, arr.byteLength);\n}\n\n/** Cast u8 / u16 / u32 to u32. */\nexport function u32(arr: TypedArray): Uint32Array {\n  return new Uint32Array(arr.buffer, arr.byteOffset, Math.floor(arr.byteLength / 4));\n}\n\n/** Zeroize a byte array. Warning: JS provides no guarantees. */\nexport function clean(...arrays: TypedArray[]): void {\n  for (let i = 0; i < arrays.length; i++) {\n    arrays[i].fill(0);\n  }\n}\n\n/** Create DataView of an array for easy byte-level manipulation. */\nexport function createView(arr: TypedArray): DataView {\n  return new DataView(arr.buffer, arr.byteOffset, arr.byteLength);\n}\n\n/** The rotate right (circular right shift) operation for uint32 */\nexport function rotr(word: number, shift: number): number {\n  return (word << (32 - shift)) | (word >>> shift);\n}\n\n/** The rotate left (circular left shift) operation for uint32 */\nexport function rotl(word: number, shift: number): number {\n  return (word << shift) | ((word >>> (32 - shift)) >>> 0);\n}\n\n/** Is current platform little-endian? Most are. Big-Endian platform: IBM */\nexport const isLE: boolean = /* @__PURE__ */ (() =>\n  new Uint8Array(new Uint32Array([0x11223344]).buffer)[0] === 0x44)();\n\n/** The byte swap operation for uint32 */\nexport function byteSwap(word: number): number {\n  return (\n    ((word << 24) & 0xff000000) |\n    ((word << 8) & 0xff0000) |\n    ((word >>> 8) & 0xff00) |\n    ((word >>> 24) & 0xff)\n  );\n}\n/** Conditionally byte swap if on a big-endian platform */\nexport const swap8IfBE: (n: number) => number = isLE\n  ? (n: number) => n\n  : (n: number) => byteSwap(n);\n\n/** @deprecated */\nexport const byteSwapIfBE: typeof swap8IfBE = swap8IfBE;\n/** In place byte swap for Uint32Array */\nexport function byteSwap32(arr: Uint32Array): Uint32Array {\n  for (let i = 0; i < arr.length; i++) {\n    arr[i] = byteSwap(arr[i]);\n  }\n  return arr;\n}\n\nexport const swap32IfBE: (u: Uint32Array) => Uint32Array = isLE\n  ? (u: Uint32Array) => u\n  : byteSwap32;\n\n// Built-in hex conversion https://caniuse.com/mdn-javascript_builtins_uint8array_fromhex\nconst hasHexBuiltin: boolean = /* @__PURE__ */ (() =>\n  // @ts-ignore\n  typeof Uint8Array.from([]).toHex === 'function' && typeof Uint8Array.fromHex === 'function')();\n\n// Array where index 0xf0 (240) is mapped to string 'f0'\nconst hexes = /* @__PURE__ */ Array.from({ length: 256 }, (_, i) =>\n  i.toString(16).padStart(2, '0')\n);\n\n/**\n * Convert byte array to hex string. Uses built-in function, when available.\n * @example bytesToHex(Uint8Array.from([0xca, 0xfe, 0x01, 0x23])) // 'cafe0123'\n */\nexport function bytesToHex(bytes: Uint8Array): string {\n  abytes(bytes);\n  // @ts-ignore\n  if (hasHexBuiltin) return bytes.toHex();\n  // pre-caching improves the speed 6x\n  let hex = '';\n  for (let i = 0; i < bytes.length; i++) {\n    hex += hexes[bytes[i]];\n  }\n  return hex;\n}\n\n// We use optimized technique to convert hex string to byte array\nconst asciis = { _0: 48, _9: 57, A: 65, F: 70, a: 97, f: 102 } as const;\nfunction asciiToBase16(ch: number): number | undefined {\n  if (ch >= asciis._0 && ch <= asciis._9) return ch - asciis._0; // '2' => 50-48\n  if (ch >= asciis.A && ch <= asciis.F) return ch - (asciis.A - 10); // 'B' => 66-(65-10)\n  if (ch >= asciis.a && ch <= asciis.f) return ch - (asciis.a - 10); // 'b' => 98-(97-10)\n  return;\n}\n\n/**\n * Convert hex string to byte array. Uses built-in function, when available.\n * @example hexToBytes('cafe0123') // Uint8Array.from([0xca, 0xfe, 0x01, 0x23])\n */\nexport function hexToBytes(hex: string): Uint8Array {\n  if (typeof hex !== 'string') throw new Error('hex string expected, got ' + typeof hex);\n  // @ts-ignore\n  if (hasHexBuiltin) return Uint8Array.fromHex(hex);\n  const hl = hex.length;\n  const al = hl / 2;\n  if (hl % 2) throw new Error('hex string expected, got unpadded hex of length ' + hl);\n  const array = new Uint8Array(al);\n  for (let ai = 0, hi = 0; ai < al; ai++, hi += 2) {\n    const n1 = asciiToBase16(hex.charCodeAt(hi));\n    const n2 = asciiToBase16(hex.charCodeAt(hi + 1));\n    if (n1 === undefined || n2 === undefined) {\n      const char = hex[hi] + hex[hi + 1];\n      throw new Error('hex string expected, got non-hex character \"' + char + '\" at index ' + hi);\n    }\n    array[ai] = n1 * 16 + n2; // multiply first octet, e.g. 'a3' => 10*16+3 => 160 + 3 => 163\n  }\n  return array;\n}\n\n/**\n * There is no setImmediate in browser and setTimeout is slow.\n * Call of async fn will return Promise, which will be fullfiled only on\n * next scheduler queue processing step and this is exactly what we need.\n */\nexport const nextTick = async (): Promise<void> => {};\n\n/** Returns control to thread each 'tick' ms to avoid blocking. */\nexport async function asyncLoop(\n  iters: number,\n  tick: number,\n  cb: (i: number) => void\n): Promise<void> {\n  let ts = Date.now();\n  for (let i = 0; i < iters; i++) {\n    cb(i);\n    // Date.now() is not monotonic, so in case if clock goes backwards we return return control too\n    const diff = Date.now() - ts;\n    if (diff >= 0 && diff < tick) continue;\n    await nextTick();\n    ts += diff;\n  }\n}\n\n// Global symbols, but ts doesn't see them: https://github.com/microsoft/TypeScript/issues/31535\ndeclare const TextEncoder: any;\ndeclare const TextDecoder: any;\n\n/**\n * Converts string to bytes using UTF8 encoding.\n * @example utf8ToBytes('abc') // Uint8Array.from([97, 98, 99])\n */\nexport function utf8ToBytes(str: string): Uint8Array {\n  if (typeof str !== 'string') throw new Error('string expected');\n  return new Uint8Array(new TextEncoder().encode(str)); // https://bugzil.la/1681809\n}\n\n/**\n * Converts bytes to string using UTF8 encoding.\n * @example bytesToUtf8(Uint8Array.from([97, 98, 99])) // 'abc'\n */\nexport function bytesToUtf8(bytes: Uint8Array): string {\n  return new TextDecoder().decode(bytes);\n}\n\n/** Accepted input of hash functions. Strings are converted to byte arrays. */\nexport type Input = string | Uint8Array;\n/**\n * Normalizes (non-hex) string or Uint8Array to Uint8Array.\n * Warning: when Uint8Array is passed, it would NOT get copied.\n * Keep in mind for future mutable operations.\n */\nexport function toBytes(data: Input): Uint8Array {\n  if (typeof data === 'string') data = utf8ToBytes(data);\n  abytes(data);\n  return data;\n}\n\n/** KDFs can accept string or Uint8Array for user convenience. */\nexport type KDFInput = string | Uint8Array;\n/**\n * Helper for KDFs: consumes uint8array or string.\n * When string is passed, does utf8 decoding, using TextDecoder.\n */\nexport function kdfInputToBytes(data: KDFInput): Uint8Array {\n  if (typeof data === 'string') data = utf8ToBytes(data);\n  abytes(data);\n  return data;\n}\n\n/** Copies several Uint8Arrays into one. */\nexport function concatBytes(...arrays: Uint8Array[]): Uint8Array {\n  let sum = 0;\n  for (let i = 0; i < arrays.length; i++) {\n    const a = arrays[i];\n    abytes(a);\n    sum += a.length;\n  }\n  const res = new Uint8Array(sum);\n  for (let i = 0, pad = 0; i < arrays.length; i++) {\n    const a = arrays[i];\n    res.set(a, pad);\n    pad += a.length;\n  }\n  return res;\n}\n\ntype EmptyObj = {};\nexport function checkOpts<T1 extends EmptyObj, T2 extends EmptyObj>(\n  defaults: T1,\n  opts?: T2\n): T1 & T2 {\n  if (opts !== undefined && {}.toString.call(opts) !== '[object Object]')\n    throw new Error('options should be object or undefined');\n  const merged = Object.assign(defaults, opts);\n  return merged as T1 & T2;\n}\n\n/** Hash interface. */\nexport type IHash = {\n  (data: Uint8Array): Uint8Array;\n  blockLen: number;\n  outputLen: number;\n  create: any;\n};\n\n/** For runtime check if class implements interface */\nexport abstract class Hash<T extends Hash<T>> {\n  abstract blockLen: number; // Bytes per block\n  abstract outputLen: number; // Bytes in output\n  abstract update(buf: Input): this;\n  // Writes digest into buf\n  abstract digestInto(buf: Uint8Array): void;\n  abstract digest(): Uint8Array;\n  /**\n   * Resets internal state. Makes Hash instance unusable.\n   * Reset is impossible for keyed hashes if key is consumed into state. If digest is not consumed\n   * by user, they will need to manually call `destroy()` when zeroing is necessary.\n   */\n  abstract destroy(): void;\n  /**\n   * Clones hash instance. Unsafe: doesn't check whether `to` is valid. Can be used as `clone()`\n   * when no options are passed.\n   * Reasons to use `_cloneInto` instead of clone: 1) performance 2) reuse instance => all internal\n   * buffers are overwritten => causes buffer overwrite which is used for digest in some cases.\n   * There are no guarantees for clean-up because it's impossible in JS.\n   */\n  abstract _cloneInto(to?: T): T;\n  // Safe version that clones internal state\n  abstract clone(): T;\n}\n\n/**\n * XOF: streaming API to read digest in chunks.\n * Same as 'squeeze' in keccak/k12 and 'seek' in blake3, but more generic name.\n * When hash used in XOF mode it is up to user to call '.destroy' afterwards, since we cannot\n * destroy state, next call can require more bytes.\n */\nexport type HashXOF<T extends Hash<T>> = Hash<T> & {\n  xof(bytes: number): Uint8Array; // Read 'bytes' bytes from digest stream\n  xofInto(buf: Uint8Array): Uint8Array; // read buf.length bytes from digest stream into buf\n};\n\n/** Hash function */\nexport type CHash = ReturnType<typeof createHasher>;\n/** Hash function with output */\nexport type CHashO = ReturnType<typeof createOptHasher>;\n/** XOF with output */\nexport type CHashXO = ReturnType<typeof createXOFer>;\n\n/** Wraps hash function, creating an interface on top of it */\nexport function createHasher<T extends Hash<T>>(\n  hashCons: () => Hash<T>\n): {\n  (msg: Input): Uint8Array;\n  outputLen: number;\n  blockLen: number;\n  create(): Hash<T>;\n} {\n  const hashC = (msg: Input): Uint8Array => hashCons().update(toBytes(msg)).digest();\n  const tmp = hashCons();\n  hashC.outputLen = tmp.outputLen;\n  hashC.blockLen = tmp.blockLen;\n  hashC.create = () => hashCons();\n  return hashC;\n}\n\nexport function createOptHasher<H extends Hash<H>, T extends Object>(\n  hashCons: (opts?: T) => Hash<H>\n): {\n  (msg: Input, opts?: T): Uint8Array;\n  outputLen: number;\n  blockLen: number;\n  create(opts?: T): Hash<H>;\n} {\n  const hashC = (msg: Input, opts?: T): Uint8Array => hashCons(opts).update(toBytes(msg)).digest();\n  const tmp = hashCons({} as T);\n  hashC.outputLen = tmp.outputLen;\n  hashC.blockLen = tmp.blockLen;\n  hashC.create = (opts?: T) => hashCons(opts);\n  return hashC;\n}\n\nexport function createXOFer<H extends HashXOF<H>, T extends Object>(\n  hashCons: (opts?: T) => HashXOF<H>\n): {\n  (msg: Input, opts?: T): Uint8Array;\n  outputLen: number;\n  blockLen: number;\n  create(opts?: T): HashXOF<H>;\n} {\n  const hashC = (msg: Input, opts?: T): Uint8Array => hashCons(opts).update(toBytes(msg)).digest();\n  const tmp = hashCons({} as T);\n  hashC.outputLen = tmp.outputLen;\n  hashC.blockLen = tmp.blockLen;\n  hashC.create = (opts?: T) => hashCons(opts);\n  return hashC;\n}\nexport const wrapConstructor: typeof createHasher = createHasher;\nexport const wrapConstructorWithOpts: typeof createOptHasher = createOptHasher;\nexport const wrapXOFConstructorWithOpts: typeof createXOFer = createXOFer;\n\n/** Cryptographically secure PRNG. Uses internal OS-level `crypto.getRandomValues`. */\nexport function randomBytes(bytesLength = 32): Uint8Array {\n  if (crypto && typeof crypto.getRandomValues === 'function') {\n    return crypto.getRandomValues(new Uint8Array(bytesLength));\n  }\n  // Legacy Node.js compatibility\n  if (crypto && typeof crypto.randomBytes === 'function') {\n    return Uint8Array.from(crypto.randomBytes(bytesLength));\n  }\n  throw new Error('crypto.getRandomValues must be defined');\n}\n","/**\n * Internal helpers for u64. BigUint64Array is too slow as per 2025, so we implement it using Uint32Array.\n * @todo re-check https://issues.chromium.org/issues/42212588\n * @module\n */\nconst U32_MASK64 = /* @__PURE__ */ BigInt(2 ** 32 - 1);\nconst _32n = /* @__PURE__ */ BigInt(32);\n\nfunction fromBig(\n  n: bigint,\n  le = false\n): {\n  h: number;\n  l: number;\n} {\n  if (le) return { h: Number(n & U32_MASK64), l: Number((n >> _32n) & U32_MASK64) };\n  return { h: Number((n >> _32n) & U32_MASK64) | 0, l: Number(n & U32_MASK64) | 0 };\n}\n\nfunction split(lst: bigint[], le = false): Uint32Array[] {\n  const len = lst.length;\n  let Ah = new Uint32Array(len);\n  let Al = new Uint32Array(len);\n  for (let i = 0; i < len; i++) {\n    const { h, l } = fromBig(lst[i], le);\n    [Ah[i], Al[i]] = [h, l];\n  }\n  return [Ah, Al];\n}\n\nconst toBig = (h: number, l: number): bigint => (BigInt(h >>> 0) << _32n) | BigInt(l >>> 0);\n// for Shift in [0, 32)\nconst shrSH = (h: number, _l: number, s: number): number => h >>> s;\nconst shrSL = (h: number, l: number, s: number): number => (h << (32 - s)) | (l >>> s);\n// Right rotate for Shift in [1, 32)\nconst rotrSH = (h: number, l: number, s: number): number => (h >>> s) | (l << (32 - s));\nconst rotrSL = (h: number, l: number, s: number): number => (h << (32 - s)) | (l >>> s);\n// Right rotate for Shift in (32, 64), NOTE: 32 is special case.\nconst rotrBH = (h: number, l: number, s: number): number => (h << (64 - s)) | (l >>> (s - 32));\nconst rotrBL = (h: number, l: number, s: number): number => (h >>> (s - 32)) | (l << (64 - s));\n// Right rotate for shift===32 (just swaps l&h)\nconst rotr32H = (_h: number, l: number): number => l;\nconst rotr32L = (h: number, _l: number): number => h;\n// Left rotate for Shift in [1, 32)\nconst rotlSH = (h: number, l: number, s: number): number => (h << s) | (l >>> (32 - s));\nconst rotlSL = (h: number, l: number, s: number): number => (l << s) | (h >>> (32 - s));\n// Left rotate for Shift in (32, 64), NOTE: 32 is special case.\nconst rotlBH = (h: number, l: number, s: number): number => (l << (s - 32)) | (h >>> (64 - s));\nconst rotlBL = (h: number, l: number, s: number): number => (h << (s - 32)) | (l >>> (64 - s));\n\n// JS uses 32-bit signed integers for bitwise operations which means we cannot\n// simple take carry out of low bit sum by shift, we need to use division.\nfunction add(\n  Ah: number,\n  Al: number,\n  Bh: number,\n  Bl: number\n): {\n  h: number;\n  l: number;\n} {\n  const l = (Al >>> 0) + (Bl >>> 0);\n  return { h: (Ah + Bh + ((l / 2 ** 32) | 0)) | 0, l: l | 0 };\n}\n// Addition with more than 2 elements\nconst add3L = (Al: number, Bl: number, Cl: number): number => (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0);\nconst add3H = (low: number, Ah: number, Bh: number, Ch: number): number =>\n  (Ah + Bh + Ch + ((low / 2 ** 32) | 0)) | 0;\nconst add4L = (Al: number, Bl: number, Cl: number, Dl: number): number =>\n  (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0) + (Dl >>> 0);\nconst add4H = (low: number, Ah: number, Bh: number, Ch: number, Dh: number): number =>\n  (Ah + Bh + Ch + Dh + ((low / 2 ** 32) | 0)) | 0;\nconst add5L = (Al: number, Bl: number, Cl: number, Dl: number, El: number): number =>\n  (Al >>> 0) + (Bl >>> 0) + (Cl >>> 0) + (Dl >>> 0) + (El >>> 0);\nconst add5H = (low: number, Ah: number, Bh: number, Ch: number, Dh: number, Eh: number): number =>\n  (Ah + Bh + Ch + Dh + Eh + ((low / 2 ** 32) | 0)) | 0;\n\n// prettier-ignore\nexport {\n  add, add3H, add3L, add4H, add4L, add5H, add5L, fromBig, rotlBH, rotlBL, rotlSH, rotlSL, rotr32H, rotr32L, rotrBH, rotrBL, rotrSH, rotrSL, shrSH, shrSL, split, toBig\n};\n// prettier-ignore\nconst u64: { fromBig: typeof fromBig; split: typeof split; toBig: (h: number, l: number) => bigint; shrSH: (h: number, _l: number, s: number) => number; shrSL: (h: number, l: number, s: number) => number; rotrSH: (h: number, l: number, s: number) => number; rotrSL: (h: number, l: number, s: number) => number; rotrBH: (h: number, l: number, s: number) => number; rotrBL: (h: number, l: number, s: number) => number; rotr32H: (_h: number, l: number) => number; rotr32L: (h: number, _l: number) => number; rotlSH: (h: number, l: number, s: number) => number; rotlSL: (h: number, l: number, s: number) => number; rotlBH: (h: number, l: number, s: number) => number; rotlBL: (h: number, l: number, s: number) => number; add: typeof add; add3L: (Al: number, Bl: number, Cl: number) => number; add3H: (low: number, Ah: number, Bh: number, Ch: number) => number; add4L: (Al: number, Bl: number, Cl: number, Dl: number) => number; add4H: (low: number, Ah: number, Bh: number, Ch: number, Dh: number) => number; add5H: (low: number, Ah: number, Bh: number, Ch: number, Dh: number, Eh: number) => number; add5L: (Al: number, Bl: number, Cl: number, Dl: number, El: number) => number; } = {\n  fromBig, split, toBig,\n  shrSH, shrSL,\n  rotrSH, rotrSL, rotrBH, rotrBL,\n  rotr32H, rotr32L,\n  rotlSH, rotlSL, rotlBH, rotlBL,\n  add, add3L, add3H, add4L, add4H, add5H, add5L,\n};\nexport default u64;\n"],"mappings":";;;AAQA,YAAY,QAAQ;AACb,IAAM,SACX,MAAM,OAAO,OAAO,YAAY,eAAe,KACvC,eACJ,MAAM,OAAO,OAAO,YAAY,iBAAiB,KAC/C,KACA;;;ACCF,SAAU,QAAQ,GAAU;AAChC,SAAO,aAAa,cAAe,YAAY,OAAO,CAAC,KAAK,EAAE,YAAY,SAAS;AACrF;AAGM,SAAU,QAAQ,GAAS;AAC/B,MAAI,CAAC,OAAO,cAAc,CAAC,KAAK,IAAI;AAAG,UAAM,IAAI,MAAM,oCAAoC,CAAC;AAC9F;AAGM,SAAU,OAAO,MAA8B,SAAiB;AACpE,MAAI,CAAC,QAAQ,CAAC;AAAG,UAAM,IAAI,MAAM,qBAAqB;AACtD,MAAI,QAAQ,SAAS,KAAK,CAAC,QAAQ,SAAS,EAAE,MAAM;AAClD,UAAM,IAAI,MAAM,mCAAmC,UAAU,kBAAkB,EAAE,MAAM;AAC3F;AAGM,SAAU,MAAM,GAAQ;AAC5B,MAAI,OAAO,MAAM,cAAc,OAAO,EAAE,WAAW;AACjD,UAAM,IAAI,MAAM,8CAA8C;AAChE,UAAQ,EAAE,SAAS;AACnB,UAAQ,EAAE,QAAQ;AACpB;AAGM,SAAU,QAAQ,UAAe,gBAAgB,MAAI;AACzD,MAAI,SAAS;AAAW,UAAM,IAAI,MAAM,kCAAkC;AAC1E,MAAI,iBAAiB,SAAS;AAAU,UAAM,IAAI,MAAM,uCAAuC;AACjG;AAGM,SAAU,QAAQ,KAAU,UAAa;AAC7C,SAAO,GAAG;AACV,QAAM,MAAM,SAAS;AACrB,MAAI,IAAI,SAAS,KAAK;AACpB,UAAM,IAAI,MAAM,2DAA2D,GAAG;EAChF;AACF;AAaM,SAAU,IAAI,KAAe;AACjC,SAAO,IAAI,YAAY,IAAI,QAAQ,IAAI,YAAY,KAAK,MAAM,IAAI,aAAa,CAAC,CAAC;AACnF;AAGM,SAAU,SAAS,QAAoB;AAC3C,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,WAAO,CAAC,EAAE,KAAK,CAAC;EAClB;AACF;AAGM,SAAU,WAAW,KAAe;AACxC,SAAO,IAAI,SAAS,IAAI,QAAQ,IAAI,YAAY,IAAI,UAAU;AAChE;AAGM,SAAU,KAAK,MAAc,OAAa;AAC9C,SAAQ,QAAS,KAAK,QAAW,SAAS;AAC5C;AAGM,SAAU,KAAK,MAAc,OAAa;AAC9C,SAAQ,QAAQ,QAAW,SAAU,KAAK,UAAY;AACxD;AAGO,IAAM,OAAiC,uBAC5C,IAAI,WAAW,IAAI,YAAY,CAAC,SAAU,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,IAAK;AAG7D,SAAU,SAAS,MAAY;AACnC,SACI,QAAQ,KAAM,aACd,QAAQ,IAAK,WACb,SAAS,IAAK,QACd,SAAS,KAAM;AAErB;AASM,SAAU,WAAW,KAAgB;AACzC,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,QAAI,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC;EAC1B;AACA,SAAO;AACT;AAEO,IAAM,aAA8C,OACvD,CAAC,MAAmB,IACpB;AAGJ,IAAM,gBAA0C;;EAE9C,OAAO,WAAW,KAAK,CAAA,CAAE,EAAE,UAAU,cAAc,OAAO,WAAW,YAAY;GAAW;AAG9F,IAAM,QAAwB,sBAAM,KAAK,EAAE,QAAQ,IAAG,GAAI,CAAC,GAAG,MAC5D,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAO3B,SAAU,WAAW,OAAiB;AAC1C,SAAO,KAAK;AAEZ,MAAI;AAAe,WAAO,MAAM,MAAK;AAErC,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,WAAO,MAAM,MAAM,CAAC,CAAC;EACvB;AACA,SAAO;AACT;AAwCO,IAAM,WAAW,YAA0B;AAAE;AAGpD,eAAsB,UACpB,OACA,MACA,IAAuB;AAEvB,MAAI,KAAK,KAAK,IAAG;AACjB,WAAS,IAAI,GAAG,IAAI,OAAO,KAAK;AAC9B,OAAG,CAAC;AAEJ,UAAM,OAAO,KAAK,IAAG,IAAK;AAC1B,QAAI,QAAQ,KAAK,OAAO;AAAM;AAC9B,UAAM,SAAQ;AACd,UAAM;EACR;AACF;AAUM,SAAU,YAAY,KAAW;AACrC,MAAI,OAAO,QAAQ;AAAU,UAAM,IAAI,MAAM,iBAAiB;AAC9D,SAAO,IAAI,WAAW,IAAI,YAAW,EAAG,OAAO,GAAG,CAAC;AACrD;AAiBM,SAAU,QAAQ,MAAW;AACjC,MAAI,OAAO,SAAS;AAAU,WAAO,YAAY,IAAI;AACrD,SAAO,IAAI;AACX,SAAO;AACT;AAQM,SAAU,gBAAgB,MAAc;AAC5C,MAAI,OAAO,SAAS;AAAU,WAAO,YAAY,IAAI;AACrD,SAAO,IAAI;AACX,SAAO;AACT;AAGM,SAAU,eAAe,QAAoB;AACjD,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,UAAM,IAAI,OAAO,CAAC;AAClB,WAAO,CAAC;AACR,WAAO,EAAE;EACX;AACA,QAAM,MAAM,IAAI,WAAW,GAAG;AAC9B,WAAS,IAAI,GAAG,MAAM,GAAG,IAAI,OAAO,QAAQ,KAAK;AAC/C,UAAM,IAAI,OAAO,CAAC;AAClB,QAAI,IAAI,GAAG,GAAG;AACd,WAAO,EAAE;EACX;AACA,SAAO;AACT;AAGM,SAAU,UACd,UACA,MAAS;AAET,MAAI,SAAS,UAAa,CAAA,EAAG,SAAS,KAAK,IAAI,MAAM;AACnD,UAAM,IAAI,MAAM,uCAAuC;AACzD,QAAM,SAAS,OAAO,OAAO,UAAU,IAAI;AAC3C,SAAO;AACT;AAWM,IAAgB,OAAhB,MAAoB;;AA4CpB,SAAU,aACd,UAAuB;AAOvB,QAAM,QAAQ,CAAC,QAA2B,SAAQ,EAAG,OAAO,QAAQ,GAAG,CAAC,EAAE,OAAM;AAChF,QAAM,MAAM,SAAQ;AACpB,QAAM,YAAY,IAAI;AACtB,QAAM,WAAW,IAAI;AACrB,QAAM,SAAS,MAAM,SAAQ;AAC7B,SAAO;AACT;AAsCM,SAAU,YAAY,cAAc,IAAE;AAC1C,MAAI,UAAU,OAAO,OAAO,oBAAoB,YAAY;AAC1D,WAAO,OAAO,gBAAgB,IAAI,WAAW,WAAW,CAAC;EAC3D;AAEA,MAAI,UAAU,OAAO,OAAO,gBAAgB,YAAY;AACtD,WAAO,WAAW,KAAK,OAAO,YAAY,WAAW,CAAC;EACxD;AACA,QAAM,IAAI,MAAM,wCAAwC;AAC1D;;;ACrYA,IAAM,aAA6B,uBAAO,KAAK,KAAK,CAAC;AACrD,IAAM,OAAuB,uBAAO,EAAE;AAEtC,SAAS,QACP,GACA,KAAK,OAAK;AAKV,MAAI;AAAI,WAAO,EAAE,GAAG,OAAO,IAAI,UAAU,GAAG,GAAG,OAAQ,KAAK,OAAQ,UAAU,EAAC;AAC/E,SAAO,EAAE,GAAG,OAAQ,KAAK,OAAQ,UAAU,IAAI,GAAG,GAAG,OAAO,IAAI,UAAU,IAAI,EAAC;AACjF;AAEA,SAAS,MAAM,KAAe,KAAK,OAAK;AACtC,QAAM,MAAM,IAAI;AAChB,MAAI,KAAK,IAAI,YAAY,GAAG;AAC5B,MAAI,KAAK,IAAI,YAAY,GAAG;AAC5B,WAAS,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,UAAM,EAAE,GAAG,EAAC,IAAK,QAAQ,IAAI,CAAC,GAAG,EAAE;AACnC,KAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;EACxB;AACA,SAAO,CAAC,IAAI,EAAE;AAChB;AAgBA,IAAM,SAAS,CAAC,GAAW,GAAW,MAAuB,KAAK,IAAM,MAAO,KAAK;AACpF,IAAM,SAAS,CAAC,GAAW,GAAW,MAAuB,KAAK,IAAM,MAAO,KAAK;AAEpF,IAAM,SAAS,CAAC,GAAW,GAAW,MAAuB,KAAM,IAAI,KAAQ,MAAO,KAAK;AAC3F,IAAM,SAAS,CAAC,GAAW,GAAW,MAAuB,KAAM,IAAI,KAAQ,MAAO,KAAK;","names":[]}

package/dist/chunk-7KUW4MJD.js

@@ -0,0 +1,59 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+import {
+  findStoredCandidate
+} from "./chunk-JPHG2JW3.js";
+import {
+  UUID_RE
+} from "./chunk-3OV7E5G5.js";
+import {
+  CliError
+} from "./chunk-OYMYCW7J.js";
+
+// src/lib/resource-ref.ts
+function assertOnBaseOrigin(url, baseUrl, what) {
+  let target;
+  let base;
+  try {
+    target = new URL(url);
+    base = new URL(baseUrl);
+  } catch {
+    throw new CliError("USAGE", `Invalid ${what}: ${JSON.stringify(url)}`, {
+      fix: "Pass an absolute https URL on the configured base URL."
+    });
+  }
+  if (target.origin !== base.origin) {
+    throw new CliError(
+      "USAGE",
+      `${what} origin ${target.origin} does not match the configured base URL ${base.origin}.`,
+      {
+        fix: "The CLI signs SIWX and payments only for the configured base URL. Pass --base-url if you meant a different deployment."
+      }
+    );
+  }
+}
+async function resolveResourceRef(arg, dataDir, baseUrl) {
+  const trimmed = arg.trim();
+  if (/^https?:\/\//i.test(trimmed)) {
+    assertOnBaseOrigin(trimmed, baseUrl, "resource URL");
+    return { url: trimmed };
+  }
+  if (UUID_RE.test(trimmed)) {
+    const candidate = await findStoredCandidate(dataDir, trimmed);
+    if (candidate === null) {
+      throw new CliError("RESOURCE_NOT_FOUND", `No local lookup knows resource ${trimmed}.`, {
+        fix: "Run `tenjin lookup` to surface it first, or pass the full read URL."
+      });
+    }
+    assertOnBaseOrigin(candidate.url, baseUrl, "stored candidate URL");
+    return { url: candidate.url, resourceId: trimmed };
+  }
+  throw new CliError("USAGE", `Not a resource URL or id: ${JSON.stringify(arg)}`, {
+    fix: "Pass a full https read URL (a candidate `url`) or a resourceId uuid."
+  });
+}
+
+export {
+  assertOnBaseOrigin,
+  resolveResourceRef
+};
+//# sourceMappingURL=chunk-7KUW4MJD.js.map

package/dist/chunk-7KUW4MJD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/resource-ref.ts"],"sourcesContent":["import { CliError } from './errors';\nimport { findStoredCandidate } from './lookup-store';\nimport { UUID_RE } from './ids';\n\n/**\n * Resolve a `<resource-url-or-id>` CLI argument to the payable read URL. A full\n * http(s) URL must live on the configured base URL's origin; a bare uuid is a\n * resourceId, resolved to its URL through the local lookup store (the read route\n * is keyed by handle/slug, so an id alone cannot build the URL). Anything else is\n * a usage error with a clear fix.\n *\n * The origin pin is a MONEY-PATH trust boundary, not pedantry: `buy` sends a\n * wallet-signed SIWX header (a bearer credential scoped to the configured\n * domain) and an EIP-3009 payment authorization to whatever host the resolved\n * URL names. An off-origin URL, whether typed by hand or planted in a lookup\n * candidate, would hand both to that host. Nothing signed may leave for a host\n * the user did not configure.\n */\n\nexport interface ResourceRef {\n  url: string;\n  resourceId?: string;\n}\n\n/** Throws USAGE unless `url` parses and shares the base URL's origin. */\nexport function assertOnBaseOrigin(url: string, baseUrl: string, what: string): void {\n  let target: URL;\n  let base: URL;\n  try {\n    target = new URL(url);\n    base = new URL(baseUrl);\n  } catch {\n    throw new CliError('USAGE', `Invalid ${what}: ${JSON.stringify(url)}`, {\n      fix: 'Pass an absolute https URL on the configured base URL.',\n    });\n  }\n  if (target.origin !== base.origin) {\n    throw new CliError(\n      'USAGE',\n      `${what} origin ${target.origin} does not match the configured base URL ${base.origin}.`,\n      {\n        fix: 'The CLI signs SIWX and payments only for the configured base URL. Pass --base-url if you meant a different deployment.',\n      },\n    );\n  }\n}\n\nexport async function resolveResourceRef(\n  arg: string,\n  dataDir: string,\n  baseUrl: string,\n): Promise<ResourceRef> {\n  const trimmed = arg.trim();\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    assertOnBaseOrigin(trimmed, baseUrl, 'resource URL');\n    return { url: trimmed };\n  }\n  if (UUID_RE.test(trimmed)) {\n    const candidate = await findStoredCandidate(dataDir, trimmed);\n    if (candidate === null) {\n      throw new CliError('RESOURCE_NOT_FOUND', `No local lookup knows resource ${trimmed}.`, {\n        fix: 'Run `tenjin lookup` to surface it first, or pass the full read URL.',\n      });\n    }\n    // The stored url was origin-checked at lookup time, but the config can have\n    // changed since; re-assert against the CURRENT base URL before any send.\n    assertOnBaseOrigin(candidate.url, baseUrl, 'stored candidate URL');\n    return { url: candidate.url, resourceId: trimmed };\n  }\n  throw new CliError('USAGE', `Not a resource URL or id: ${JSON.stringify(arg)}`, {\n    fix: 'Pass a full https read URL (a candidate `url`) or a resourceId uuid.',\n  });\n}\n"],"mappings":";;;;;;;;;;;;AAyBO,SAAS,mBAAmB,KAAa,SAAiB,MAAoB;AACnF,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,aAAS,IAAI,IAAI,GAAG;AACpB,WAAO,IAAI,IAAI,OAAO;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,SAAS,SAAS,WAAW,IAAI,KAAK,KAAK,UAAU,GAAG,CAAC,IAAI;AAAA,MACrE,KAAK;AAAA,IACP,CAAC;AAAA,EACH;AACA,MAAI,OAAO,WAAW,KAAK,QAAQ;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,MACA,GAAG,IAAI,WAAW,OAAO,MAAM,2CAA2C,KAAK,MAAM;AAAA,MACrF;AAAA,QACE,KAAK;AAAA,MACP;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,mBACpB,KACA,SACA,SACsB;AACtB,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,gBAAgB,KAAK,OAAO,GAAG;AACjC,uBAAmB,SAAS,SAAS,cAAc;AACnD,WAAO,EAAE,KAAK,QAAQ;AAAA,EACxB;AACA,MAAI,QAAQ,KAAK,OAAO,GAAG;AACzB,UAAM,YAAY,MAAM,oBAAoB,SAAS,OAAO;AAC5D,QAAI,cAAc,MAAM;AACtB,YAAM,IAAI,SAAS,sBAAsB,kCAAkC,OAAO,KAAK;AAAA,QACrF,KAAK;AAAA,MACP,CAAC;AAAA,IACH;AAGA,uBAAmB,UAAU,KAAK,SAAS,sBAAsB;AACjE,WAAO,EAAE,KAAK,UAAU,KAAK,YAAY,QAAQ;AAAA,EACnD;AACA,QAAM,IAAI,SAAS,SAAS,6BAA6B,KAAK,UAAU,GAAG,CAAC,IAAI;AAAA,IAC9E,KAAK;AAAA,EACP,CAAC;AACH;","names":[]}

package/dist/{doctor-MVLZRVPU.js → chunk-7PHSZKQS.js}

@@ -1,94 +1,27 @@
 import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+import {
+  CLIENT_HEADER,
+  fetchJson,
+  trimSlash
+} from "./chunk-QNP7H47L.js";
 import {
   loadRawConfig,
   resolveSettings,
   toMoney
-} from "./chunk-LTTRND4A.js";
+} from "./chunk-IYLHQMT5.js";
 import {
   walletFileExists
-} from "./chunk-376LHMK2.js";
-import "./chunk-ZPZFPVDN.js";
+} from "./chunk-YN5SHIXQ.js";
 import {
   CliError,
   configPath
-} from "./chunk-FIYZLITH.js";
-import "./chunk-3IMLRUZE.js";
+} from "./chunk-OYMYCW7J.js";
 
 // src/commands/doctor.ts
 import { styleText } from "util";
 import { Stream } from "stream";
-
-// src/lib/http.ts
-async function fetchJson(url, opts) {
-  const doFetch = opts.fetchImpl ?? fetch;
-  const controller = new AbortController();
-  let timedOut = false;
-  const timer = setTimeout(() => {
-    timedOut = true;
-    controller.abort();
-  }, opts.timeoutMs);
-  try {
-    let res;
-    try {
-      res = await doFetch(url, { signal: controller.signal });
-    } catch (err) {
-      return timedOut ? timeoutFailure(url, opts.timeoutMs) : { ok: false, kind: "network", message: `Request to ${url} failed: ${errorMessage(err)}` };
-    }
-    const requestId = res.headers.get("x-request-id") ?? void 0;
-    if (!res.ok) {
-      return {
-        ok: false,
-        kind: "http",
-        status: res.status,
-        ...requestId !== void 0 ? { requestId } : {},
-        message: `Request to ${url} failed with status ${res.status}`
-      };
-    }
-    let json;
-    try {
-      json = await res.json();
-    } catch (err) {
-      if (timedOut) return timeoutFailure(url, opts.timeoutMs);
-      if (err instanceof SyntaxError) {
-        return {
-          ok: false,
-          kind: "invalid-json",
-          status: res.status,
-          ...requestId !== void 0 ? { requestId } : {},
-          message: `Response from ${url} was not valid JSON`
-        };
-      }
-      return {
-        ok: false,
-        kind: "network",
-        status: res.status,
-        ...requestId !== void 0 ? { requestId } : {},
-        message: `Request to ${url} failed while reading the response body: ${errorMessage(err)}`
-      };
-    }
-    return {
-      ok: true,
-      status: res.status,
-      json,
-      ...requestId !== void 0 ? { requestId } : {}
-    };
-  } finally {
-    clearTimeout(timer);
-  }
-}
-function timeoutFailure(url, timeoutMs) {
-  return {
-    ok: false,
-    kind: "timeout",
-    message: `Request to ${url} timed out after ${timeoutMs}ms`
-  };
-}
-function errorMessage(err) {
-  return err instanceof Error ? err.message : String(err);
-}
-
-// src/commands/doctor.ts
-async function runDoctor(ctx, deps = {}) {
+var POCKET_MONEY_CEILING_ATOMIC = 20000000n;
+async function collectDoctorChecks(ctx, deps = {}) {
   const env = deps.env ?? process.env;
   const { config, check: configCheck } = await loadConfigForDoctor(ctx.dataDir);
   const settings = resolveSettings({ config, flags: { baseUrl: ctx.flags.baseUrl }, env });
@@ -97,21 +30,27 @@ async function runDoctor(ctx, deps = {}) {
     checkNode(),
     configCheck,
     await checkApiContract(baseUrl, ctx.flags.timeout, deps.fetchImpl),
-    await checkReadPath(baseUrl, ctx.flags.timeout, deps.fetchImpl)
+    await checkReadPath(baseUrl, ctx.flags.timeout, deps.fetchImpl),
+    await checkLookupContract(baseUrl, ctx.flags.timeout, deps.fetchImpl)
   ];
   for (const result of await checkWallet(ctx, deps, env, settings.rpcUrl.value)) {
     built.push({ result });
   }
   const checks = built.map((b) => b.result);
   const firstFail = built.find((b) => b.result.required && b.result.status === "fail");
-  if (firstFail !== void 0) {
-    const r = firstFail.result;
-    throw new CliError(firstFail.failCode ?? "INTERNAL", r.detail, {
+  if (firstFail === void 0) return { checks };
+  return { checks, failure: { code: firstFail.failCode ?? "INTERNAL", result: firstFail.result } };
+}
+async function runDoctor(ctx, deps = {}) {
+  const { checks, failure } = await collectDoctorChecks(ctx, deps);
+  if (failure !== void 0) {
+    const r = failure.result;
+    throw new CliError(failure.code, r.detail, {
       ...r.fix !== void 0 ? { fix: r.fix } : {},
       details: { checks }
     });
   }
-  return { data: { status: "pass", checks }, humanLines: renderHuman(ctx.io, checks) };
+  return { data: { status: "pass", checks }, humanLines: renderDoctorHuman(ctx.io, checks) };
 }
 function checkNode() {
   const version = process.versions.node;
@@ -156,7 +95,11 @@ async function loadConfigForDoctor(dataDir) {
 }
 async function checkApiContract(baseUrl, timeoutMs, fetchImpl) {
   const url = `${trimSlash(baseUrl)}/openapi.json`;
-  const res = await fetchJson(url, { timeoutMs, fetchImpl });
+  const res = await fetchJson(url, {
+    timeoutMs,
+    fetchImpl,
+    headers: { "x-tenjin-client": CLIENT_HEADER }
+  });
   if (!res.ok) {
     const malformed = res.kind === "invalid-json";
     return {
@@ -192,9 +135,52 @@ async function checkApiContract(baseUrl, timeoutMs, fetchImpl) {
     }
   };
 }
+async function checkLookupContract(baseUrl, timeoutMs, fetchImpl) {
+  const url = `${trimSlash(baseUrl)}/openapi.json`;
+  const res = await fetchJson(url, {
+    timeoutMs,
+    fetchImpl,
+    headers: { "x-tenjin-client": CLIENT_HEADER }
+  });
+  if (!res.ok) {
+    return {
+      result: {
+        name: "lookup-contract",
+        status: "warn",
+        required: false,
+        detail: `Could not confirm the lookup endpoint at ${url}`,
+        fix: "Check --base-url; lookup/buy need the A2 endpoints deployed."
+      }
+    };
+  }
+  const present = hasLookupPath(res.json);
+  return {
+    result: present ? {
+      name: "lookup-contract",
+      status: "ok",
+      required: false,
+      detail: "Lookup endpoint advertised"
+    } : {
+      name: "lookup-contract",
+      status: "warn",
+      required: false,
+      detail: "This deployment does not advertise POST /api/agent/lookup (A2 not deployed)",
+      fix: "lookup/buy need A2 deployed; point --base-url at a deploy that has it."
+    }
+  };
+}
+function hasLookupPath(json) {
+  if (!isRecord(json)) return false;
+  const paths = json.paths;
+  return isRecord(paths) && "/api/agent/lookup" in paths;
+}
 async function checkReadPath(baseUrl, timeoutMs, fetchImpl) {
   const url = `${trimSlash(baseUrl)}/api/articles?limit=1`;
-  const res = await fetchJson(url, { timeoutMs, fetchImpl });
+  const res = await fetchJson(url, {
+    timeoutMs,
+    fetchImpl,
+    headers: { "x-tenjin-client": CLIENT_HEADER }
+  });
   if (!res.ok) {
     return {
       result: {
@@ -227,7 +213,7 @@ async function checkReadPath(baseUrl, timeoutMs, fetchImpl) {
 async function checkWallet(ctx, deps, env, rpcUrl) {
   const provider = deps.provider ?? await resolveLocalProviderOrNull(ctx, env);
   if (provider === null) return [noWalletCheck()];
-  const { describeWallet } = await import("./wallet-QUWK2PA4.js");
+  const { describeWallet } = await import("./wallet-PA54CRBL.js");
   let desc;
   try {
     desc = await describeWallet(provider);
@@ -253,7 +239,7 @@ async function resolveLocalProviderOrNull(ctx, env) {
   const envKey = env.TENJIN_WALLET_KEY;
   const envKeySet = typeof envKey === "string" && envKey.length > 0;
   if (!envKeySet && !await walletFileExists(ctx.dataDir)) return null;
-  const { resolveWalletProvider } = await import("./wallet-QUWK2PA4.js");
+  const { resolveWalletProvider } = await import("./wallet-PA54CRBL.js");
   return resolveWalletProvider(ctx);
 }
 function noWalletCheck() {
@@ -276,7 +262,7 @@ function walletWarn(err) {
 }
 async function checkBalance(address, rpcUrl) {
   try {
-    const { getUsdcBalance } = await import("./usdc-OQUOFF6R.js");
+    const { getUsdcBalance } = await import("./usdc-JIAJW4SV.js");
     const balance = await getUsdcBalance(address, rpcUrl);
     if (balance === 0n) {
       return {
@@ -288,6 +274,15 @@ async function checkBalance(address, rpcUrl) {
       };
     }
     const money = toMoney(balance.toString());
+    if (balance > POCKET_MONEY_CEILING_ATOMIC) {
+      return {
+        name: "balance",
+        status: "warn",
+        required: false,
+        detail: `Balance ${money.usd} USDC is above the ~$20 pocket-money ceiling`,
+        fix: "Keep only small change in the CLI wallet; sweep the excess to cold storage."
+      };
+    }
     return {
       name: "balance",
       status: "ok",
@@ -304,7 +299,7 @@ async function checkBalance(address, rpcUrl) {
     };
   }
 }
-function renderHuman(io, checks) {
+function renderDoctorHuman(io, checks) {
   const nameWidth = Math.max(...checks.map((c) => c.name.length));
   const lines = [];
   for (const c of checks) {
@@ -329,10 +324,10 @@ function infoVersion(json) {
 function isRecord(value) {
   return typeof value === "object" && value !== null;
 }
-function trimSlash(url) {
-  return url.replace(/\/+$/, "");
-}
+
 export {
-  runDoctor
+  collectDoctorChecks,
+  runDoctor,
+  renderDoctorHuman
 };
-//# sourceMappingURL=doctor-MVLZRVPU.js.map
+//# sourceMappingURL=chunk-7PHSZKQS.js.map

package/dist/chunk-7PHSZKQS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/doctor.ts"],"sourcesContent":["import { styleText } from 'node:util';\nimport { Stream } from 'node:stream';\nimport { CliError } from '../lib/errors';\nimport { fetchJson } from '../lib/http';\nimport { CLIENT_HEADER } from '../lib/client-meta';\nimport { loadRawConfig, resolveSettings } from '../lib/config';\nimport { trimSlash } from '../lib/url';\nimport { configPath } from '../lib/paths';\nimport { toMoney } from '../lib/money';\nimport { walletFileExists } from '../lib/wallet/store';\nimport type { PartialConfig } from '../lib/config';\nimport type { ErrorCode } from '../schemas';\nimport type { Io } from '../lib/output';\nimport type { WalletDescription, WalletProvider } from '../lib/wallet';\nimport type { CommandContext, CommandResult } from '../context';\n\n/**\n * One environment/reachability check. The doctor agent builds the check list\n * against this shape without changing it: `required` drives the exit code (exit\n * 0 iff every required check is ok), `status` drives the TTY rendering, and a\n * `fix` is mandatory on every failure (spec 10). Warn-level checks never fail\n * the command.\n */\nexport interface CheckResult {\n  name: string;\n  status: 'ok' | 'warn' | 'fail';\n  required: boolean;\n  detail: string;\n  fix?: string;\n}\n\n/** ~$20 in atomic USDC (6 decimals). Above this, the pocket-money wallet warns. */\nconst POCKET_MONEY_CEILING_ATOMIC = 20_000_000n;\n\n/**\n * A CheckResult plus the error code to raise if it is a *required* failure. Only\n * required checks carry a `failCode`; the outcome step raises the first one, so\n * the failure envelope's `error.code` names what actually broke (api-contract\n * unreachable vs malformed differ) while still carrying the whole check list.\n */\ninterface BuiltCheck {\n  result: CheckResult;\n  failCode?: ErrorCode;\n}\n\nexport interface DoctorDeps {\n  /** Environment for wallet-key detection and settings precedence. */\n  env?: NodeJS.ProcessEnv;\n  /** Injected fetch for the reachability checks; tests pass a canned stub. */\n  fetchImpl?: typeof fetch;\n  /** Inject the active wallet provider. When set, NO local fs/env is consulted —\n   * the provider owns its own describe() and diagnostics(), so a remote provider's\n   * checks can't be contaminated by a stale local wallet file. */\n  provider?: WalletProvider;\n}\n\n/**\n * The full check list plus the first required failure, if any. `install` reuses\n * this to run the doctor checks as its last step and EMBED the summary without\n * throwing (D39: doctor is diagnostics, it never blocks the caller); `runDoctor`\n * wraps it and turns a required failure into the thrown failure envelope.\n */\nexport interface DoctorChecks {\n  checks: CheckResult[];\n  failure?: { code: ErrorCode; result: CheckResult };\n}\n\nexport async function collectDoctorChecks(\n  ctx: CommandContext,\n  deps: DoctorDeps = {},\n): Promise<DoctorChecks> {\n  const env = deps.env ?? process.env;\n  const { config, check: configCheck } = await loadConfigForDoctor(ctx.dataDir);\n  const settings = resolveSettings({ config, flags: { baseUrl: ctx.flags.baseUrl }, env });\n  const baseUrl = settings.baseUrl.value;\n\n  const built: BuiltCheck[] = [\n    checkNode(),\n    configCheck,\n    await checkApiContract(baseUrl, ctx.flags.timeout, deps.fetchImpl),\n    await checkReadPath(baseUrl, ctx.flags.timeout, deps.fetchImpl),\n    await checkLookupContract(baseUrl, ctx.flags.timeout, deps.fetchImpl),\n  ];\n\n  // The wallet/custody/balance checks all come from the ACTIVE provider: it owns\n  // describe() and diagnostics(), so doctor never runs its own fs/env probe.\n  for (const result of await checkWallet(ctx, deps, env, settings.rpcUrl.value)) {\n    built.push({ result });\n  }\n\n  const checks = built.map((b) => b.result);\n  const firstFail = built.find((b) => b.result.required && b.result.status === 'fail');\n  if (firstFail === undefined) return { checks };\n  return { checks, failure: { code: firstFail.failCode ?? 'INTERNAL', result: firstFail.result } };\n}\n\nexport async function runDoctor(\n  ctx: CommandContext,\n  deps: DoctorDeps = {},\n): Promise<CommandResult> {\n  const { checks, failure } = await collectDoctorChecks(ctx, deps);\n  if (failure !== undefined) {\n    const r = failure.result;\n    throw new CliError(failure.code, r.detail, {\n      ...(r.fix !== undefined ? { fix: r.fix } : {}),\n      details: { checks },\n    });\n  }\n\n  return { data: { status: 'pass', checks }, humanLines: renderDoctorHuman(ctx.io, checks) };\n}\n\nfunction checkNode(): BuiltCheck {\n  const version = process.versions.node;\n  const major = Number.parseInt(version.split('.')[0] ?? '0', 10);\n  if (major >= 22) {\n    return { result: { name: 'node', status: 'ok', required: true, detail: `Node ${version}` } };\n  }\n  return {\n    result: {\n      name: 'node',\n      status: 'fail',\n      required: true,\n      detail: `Node ${version} is unsupported (need >= 22)`,\n      fix: 'Install Node 22 or newer',\n    },\n    failCode: 'NODE_UNSUPPORTED',\n  };\n}\n\n/**\n * loadRawConfig throws CONFIG_INVALID on a bad file (which we convert into a\n * failing check) but the config value is also needed for baseUrl/rpcUrl\n * resolution; an invalid file falls back to {} so the reachability checks still\n * run and appear in the list, and config is reported as the first required fail.\n */\nasync function loadConfigForDoctor(\n  dataDir: string,\n): Promise<{ config: PartialConfig; check: BuiltCheck }> {\n  try {\n    const config = await loadRawConfig(dataDir);\n    const detail =\n      Object.keys(config).length === 0\n        ? 'No config file; using defaults'\n        : `Config at ${configPath(dataDir)} is valid`;\n    return { config, check: { result: { name: 'config', status: 'ok', required: true, detail } } };\n  } catch (err) {\n    if (err instanceof CliError && err.code === 'CONFIG_INVALID') {\n      return {\n        config: {},\n        check: {\n          result: {\n            name: 'config',\n            status: 'fail',\n            required: true,\n            detail: err.message,\n            ...(err.fix !== undefined ? { fix: err.fix } : {}),\n          },\n          failCode: 'CONFIG_INVALID',\n        },\n      };\n    }\n    throw err;\n  }\n}\n\nasync function checkApiContract(\n  baseUrl: string,\n  timeoutMs: number,\n  fetchImpl?: typeof fetch,\n): Promise<BuiltCheck> {\n  const url = `${trimSlash(baseUrl)}/openapi.json`;\n  const res = await fetchJson(url, {\n    timeoutMs,\n    fetchImpl,\n    headers: { 'x-tenjin-client': CLIENT_HEADER },\n  });\n  if (!res.ok) {\n    const malformed = res.kind === 'invalid-json';\n    return {\n      result: {\n        name: 'api-contract',\n        status: 'fail',\n        required: true,\n        detail: malformed\n          ? `OpenAPI document at ${url} was not valid JSON`\n          : `Could not reach the Tenjin API at ${url}: ${res.message}`,\n        fix: malformed\n          ? 'Point --base-url at a Tenjin API (expected an OpenAPI document).'\n          : 'Check your network connection and --base-url.',\n      },\n      failCode: malformed ? 'CONTRACT_MISMATCH' : 'API_UNREACHABLE',\n    };\n  }\n  const version = infoVersion(res.json);\n  if (version === undefined) {\n    return {\n      result: {\n        name: 'api-contract',\n        status: 'fail',\n        required: true,\n        detail: `OpenAPI document at ${url} is missing a string info.version`,\n        fix: 'Point --base-url at a Tenjin API (expected an OpenAPI document).',\n      },\n      failCode: 'CONTRACT_MISMATCH',\n    };\n  }\n  return {\n    result: {\n      name: 'api-contract',\n      status: 'ok',\n      required: true,\n      detail: `Tenjin API ${version} at ${baseUrl}`,\n    },\n  };\n}\n\n/**\n * WARN-level (never fails doctor): is the A2 lookup endpoint advertised in the\n * OpenAPI doc? Absent means the deployment predates A2 (the buy/lookup path will\n * not work against it yet). Warn-only because doctor's job is a working READ path,\n * and lookup is additive.\n */\nasync function checkLookupContract(\n  baseUrl: string,\n  timeoutMs: number,\n  fetchImpl?: typeof fetch,\n): Promise<BuiltCheck> {\n  const url = `${trimSlash(baseUrl)}/openapi.json`;\n  const res = await fetchJson(url, {\n    timeoutMs,\n    fetchImpl,\n    headers: { 'x-tenjin-client': CLIENT_HEADER },\n  });\n  if (!res.ok) {\n    return {\n      result: {\n        name: 'lookup-contract',\n        status: 'warn',\n        required: false,\n        detail: `Could not confirm the lookup endpoint at ${url}`,\n        fix: 'Check --base-url; lookup/buy need the A2 endpoints deployed.',\n      },\n    };\n  }\n  const present = hasLookupPath(res.json);\n  return {\n    result: present\n      ? {\n          name: 'lookup-contract',\n          status: 'ok',\n          required: false,\n          detail: 'Lookup endpoint advertised',\n        }\n      : {\n          name: 'lookup-contract',\n          status: 'warn',\n          required: false,\n          detail: 'This deployment does not advertise POST /api/agent/lookup (A2 not deployed)',\n          fix: 'lookup/buy need A2 deployed; point --base-url at a deploy that has it.',\n        },\n  };\n}\n\nfunction hasLookupPath(json: unknown): boolean {\n  if (!isRecord(json)) return false;\n  const paths = json.paths;\n  return isRecord(paths) && '/api/agent/lookup' in paths;\n}\n\nasync function checkReadPath(\n  baseUrl: string,\n  timeoutMs: number,\n  fetchImpl?: typeof fetch,\n): Promise<BuiltCheck> {\n  // The shipped public read path. The A2 lookup-contract check is a B2 follow-up.\n  // Probe the UNFILTERED listing: the server logs every nonblank first-page `q`\n  // as agent search demand, so a `q` here would fabricate that demand into the\n  // experiment this CLI exists to measure. Never add a `q` to this probe.\n  const url = `${trimSlash(baseUrl)}/api/articles?limit=1`;\n  const res = await fetchJson(url, {\n    timeoutMs,\n    fetchImpl,\n    headers: { 'x-tenjin-client': CLIENT_HEADER },\n  });\n  if (!res.ok) {\n    return {\n      result: {\n        name: 'read-path',\n        status: 'fail',\n        required: true,\n        detail: `Read path ${url} failed: ${res.message}`,\n        fix: 'Check your network connection and --base-url.',\n      },\n      failCode: 'API_UNREACHABLE',\n    };\n  }\n  const items = isRecord(res.json) ? res.json.items : undefined;\n  if (!Array.isArray(items)) {\n    return {\n      result: {\n        name: 'read-path',\n        status: 'fail',\n        required: true,\n        detail: `Read path ${url} did not return an items array`,\n        fix: 'Point --base-url at a Tenjin API.',\n      },\n      failCode: 'API_UNREACHABLE',\n    };\n  }\n  return {\n    result: { name: 'read-path', status: 'ok', required: true, detail: `Read path OK at ${url}` },\n  };\n}\n\n/**\n * Diagnose the wallet the CLI would actually use, entirely through the ACTIVE\n * provider. An injected provider owns everything — no local file or env is touched.\n * With no injected provider we do ONE cheap fs/env probe purely to decide whether\n * any credential exists: none → emit the \"no wallet\" warn WITHOUT importing the\n * wallet lib (that import statically pulls viem, and a no-wallet run must not parse\n * it). Otherwise the provider describes itself (address + source), reports its own\n * custody warnings, and the balance probes describe()'s address. A custody problem\n * (bad key, provider refusal) is warn-level, never a hard fail.\n */\nasync function checkWallet(\n  ctx: CommandContext,\n  deps: DoctorDeps,\n  env: NodeJS.ProcessEnv,\n  rpcUrl: string,\n): Promise<CheckResult[]> {\n  const provider = deps.provider ?? (await resolveLocalProviderOrNull(ctx, env));\n  if (provider === null) return [noWalletCheck()];\n\n  const { describeWallet } = await import('../lib/wallet');\n  let desc: WalletDescription;\n  try {\n    desc = await describeWallet(provider);\n  } catch (err) {\n    if (err instanceof CliError && err.code === 'WALLET_MISSING') return [noWalletCheck()];\n    return [walletWarn(err)];\n  }\n\n  const checks: CheckResult[] = [\n    {\n      name: 'wallet',\n      status: 'ok',\n      required: false,\n      detail: `Wallet ${desc.address} (${desc.credentialSource})`,\n    },\n  ];\n  // Custody warnings are the provider's own (perms, env-shadow for the local\n  // provider; none for a remote one). Render each as a warn check; the fix text,\n  // when there is one, is carried inline in the warning string.\n  for (const warning of (await provider.diagnostics()).warnings) {\n    checks.push({ name: 'wallet-custody', status: 'warn', required: false, detail: warning });\n  }\n  checks.push(await checkBalance(desc.address, rpcUrl));\n  return checks;\n}\n\n/**\n * The active local provider, or null when no credential exists at all. The null\n * path never imports the wallet lib, keeping a no-wallet doctor run off viem.\n */\nasync function resolveLocalProviderOrNull(\n  ctx: CommandContext,\n  env: NodeJS.ProcessEnv,\n): Promise<WalletProvider | null> {\n  const envKey = env.TENJIN_WALLET_KEY;\n  const envKeySet = typeof envKey === 'string' && envKey.length > 0;\n  if (!envKeySet && !(await walletFileExists(ctx.dataDir))) return null;\n  const { resolveWalletProvider } = await import('../lib/wallet');\n  return resolveWalletProvider(ctx);\n}\n\nfunction noWalletCheck(): CheckResult {\n  return {\n    name: 'wallet',\n    status: 'warn',\n    required: false,\n    detail: 'No wallet; needed only for buy/publish',\n    fix: 'tenjin wallet create',\n  };\n}\n\nfunction walletWarn(err: unknown): CheckResult {\n  return {\n    name: 'wallet',\n    status: 'warn',\n    required: false,\n    detail: err instanceof Error ? err.message : String(err),\n    ...(err instanceof CliError && err.fix !== undefined ? { fix: err.fix } : {}),\n  };\n}\n\n/**\n * Balance is best-effort: a zero balance is a fundable warning and an RPC flake\n * must never fail doctor. viem loads only here, via a lazy import, so a doctor\n * run without a wallet never parses the viem chunk.\n */\nasync function checkBalance(address: string, rpcUrl: string): Promise<CheckResult> {\n  try {\n    const { getUsdcBalance } = await import('../lib/usdc');\n    const balance = await getUsdcBalance(address as `0x${string}`, rpcUrl);\n    if (balance === 0n) {\n      return {\n        name: 'balance',\n        status: 'warn',\n        required: false,\n        detail: 'Wallet USDC balance is 0',\n        fix: 'Send USDC on Base. $5 covers ~50 typical resources.',\n      };\n    }\n    const money = toMoney(balance.toString());\n    // Pocket-money posture (roadmap B2): a plaintext-adjacent local key should\n    // hold only small change, so a balance over ~$20 is a warn, not an error.\n    if (balance > POCKET_MONEY_CEILING_ATOMIC) {\n      return {\n        name: 'balance',\n        status: 'warn',\n        required: false,\n        detail: `Balance ${money.usd} USDC is above the ~$20 pocket-money ceiling`,\n        fix: 'Keep only small change in the CLI wallet; sweep the excess to cold storage.',\n      };\n    }\n    return {\n      name: 'balance',\n      status: 'ok',\n      required: false,\n      detail: `Balance ${money.usd} USDC (${money.atomic} atomic)`,\n    };\n  } catch (err) {\n    return {\n      name: 'balance',\n      status: 'warn',\n      required: false,\n      detail: `Could not read balance: ${err instanceof Error ? err.message : String(err)}`,\n      fix: 'Check rpcUrl or retry; a balance read failure never fails doctor.',\n    };\n  }\n}\n\nexport function renderDoctorHuman(io: Io, checks: CheckResult[]): string[] {\n  const nameWidth = Math.max(...checks.map((c) => c.name.length));\n  const lines: string[] = [];\n  for (const c of checks) {\n    const icon =\n      c.status === 'ok'\n        ? paint(io, 'green', '✓')\n        : c.status === 'warn'\n          ? paint(io, 'yellow', '!')\n          : paint(io, 'red', '✗');\n    lines.push(`${icon} ${c.name.padEnd(nameWidth)}  ${paint(io, 'dim', c.detail)}`);\n    if (c.status !== 'ok' && c.fix !== undefined) {\n      lines.push(`    ${paint(io, 'dim', `fix: ${c.fix}`)}`);\n    }\n  }\n  return lines;\n}\n\n/**\n * Color for stderr, honoring NO_COLOR and the target's color depth: styleText\n * takes the stderr stream when it is a genuine Stream (it throws on anything\n * else, so a test/redirected sink falls back to the default plain check).\n */\nfunction paint(io: Io, format: Parameters<typeof styleText>[0], text: string): string {\n  if (io.stderr instanceof Stream) return styleText(format, text, { stream: io.stderr });\n  return styleText(format, text);\n}\n\nfunction infoVersion(json: unknown): string | undefined {\n  if (!isRecord(json)) return undefined;\n  const info = json.info;\n  if (!isRecord(info)) return undefined;\n  return typeof info.version === 'string' ? info.version : undefined;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,SAAS,iBAAiB;AAC1B,SAAS,cAAc;AA+BvB,IAAM,8BAA8B;AAmCpC,eAAsB,oBACpB,KACA,OAAmB,CAAC,GACG;AACvB,QAAM,MAAM,KAAK,OAAO,QAAQ;AAChC,QAAM,EAAE,QAAQ,OAAO,YAAY,IAAI,MAAM,oBAAoB,IAAI,OAAO;AAC5E,QAAM,WAAW,gBAAgB,EAAE,QAAQ,OAAO,EAAE,SAAS,IAAI,MAAM,QAAQ,GAAG,IAAI,CAAC;AACvF,QAAM,UAAU,SAAS,QAAQ;AAEjC,QAAM,QAAsB;AAAA,IAC1B,UAAU;AAAA,IACV;AAAA,IACA,MAAM,iBAAiB,SAAS,IAAI,MAAM,SAAS,KAAK,SAAS;AAAA,IACjE,MAAM,cAAc,SAAS,IAAI,MAAM,SAAS,KAAK,SAAS;AAAA,IAC9D,MAAM,oBAAoB,SAAS,IAAI,MAAM,SAAS,KAAK,SAAS;AAAA,EACtE;AAIA,aAAW,UAAU,MAAM,YAAY,KAAK,MAAM,KAAK,SAAS,OAAO,KAAK,GAAG;AAC7E,UAAM,KAAK,EAAE,OAAO,CAAC;AAAA,EACvB;AAEA,QAAM,SAAS,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM;AACxC,QAAM,YAAY,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,YAAY,EAAE,OAAO,WAAW,MAAM;AACnF,MAAI,cAAc,OAAW,QAAO,EAAE,OAAO;AAC7C,SAAO,EAAE,QAAQ,SAAS,EAAE,MAAM,UAAU,YAAY,YAAY,QAAQ,UAAU,OAAO,EAAE;AACjG;AAEA,eAAsB,UACpB,KACA,OAAmB,CAAC,GACI;AACxB,QAAM,EAAE,QAAQ,QAAQ,IAAI,MAAM,oBAAoB,KAAK,IAAI;AAC/D,MAAI,YAAY,QAAW;AACzB,UAAM,IAAI,QAAQ;AAClB,UAAM,IAAI,SAAS,QAAQ,MAAM,EAAE,QAAQ;AAAA,MACzC,GAAI,EAAE,QAAQ,SAAY,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC;AAAA,MAC5C,SAAS,EAAE,OAAO;AAAA,IACpB,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,MAAM,EAAE,QAAQ,QAAQ,OAAO,GAAG,YAAY,kBAAkB,IAAI,IAAI,MAAM,EAAE;AAC3F;AAEA,SAAS,YAAwB;AAC/B,QAAM,UAAU,QAAQ,SAAS;AACjC,QAAM,QAAQ,OAAO,SAAS,QAAQ,MAAM,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE;AAC9D,MAAI,SAAS,IAAI;AACf,WAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,QAAQ,MAAM,UAAU,MAAM,QAAQ,QAAQ,OAAO,GAAG,EAAE;AAAA,EAC7F;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ,QAAQ,OAAO;AAAA,MACvB,KAAK;AAAA,IACP;AAAA,IACA,UAAU;AAAA,EACZ;AACF;AAQA,eAAe,oBACb,SACuD;AACvD,MAAI;AACF,UAAM,SAAS,MAAM,cAAc,OAAO;AAC1C,UAAM,SACJ,OAAO,KAAK,MAAM,EAAE,WAAW,IAC3B,mCACA,aAAa,WAAW,OAAO,CAAC;AACtC,WAAO,EAAE,QAAQ,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,QAAQ,MAAM,UAAU,MAAM,OAAO,EAAE,EAAE;AAAA,EAC/F,SAAS,KAAK;AACZ,QAAI,eAAe,YAAY,IAAI,SAAS,kBAAkB;AAC5D,aAAO;AAAA,QACL,QAAQ,CAAC;AAAA,QACT,OAAO;AAAA,UACL,QAAQ;AAAA,YACN,MAAM;AAAA,YACN,QAAQ;AAAA,YACR,UAAU;AAAA,YACV,QAAQ,IAAI;AAAA,YACZ,GAAI,IAAI,QAAQ,SAAY,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC;AAAA,UAClD;AAAA,UACA,UAAU;AAAA,QACZ;AAAA,MACF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAe,iBACb,SACA,WACA,WACqB;AACrB,QAAM,MAAM,GAAG,UAAU,OAAO,CAAC;AACjC,QAAM,MAAM,MAAM,UAAU,KAAK;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,SAAS,EAAE,mBAAmB,cAAc;AAAA,EAC9C,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,YAAY,IAAI,SAAS;AAC/B,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,QAAQ,YACJ,uBAAuB,GAAG,wBAC1B,qCAAqC,GAAG,KAAK,IAAI,OAAO;AAAA,QAC5D,KAAK,YACD,qEACA;AAAA,MACN;AAAA,MACA,UAAU,YAAY,sBAAsB;AAAA,IAC9C;AAAA,EACF;AACA,QAAM,UAAU,YAAY,IAAI,IAAI;AACpC,MAAI,YAAY,QAAW;AACzB,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,QAAQ,uBAAuB,GAAG;AAAA,QAClC,KAAK;AAAA,MACP;AAAA,MACA,UAAU;AAAA,IACZ;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ,cAAc,OAAO,OAAO,OAAO;AAAA,IAC7C;AAAA,EACF;AACF;AAQA,eAAe,oBACb,SACA,WACA,WACqB;AACrB,QAAM,MAAM,GAAG,UAAU,OAAO,CAAC;AACjC,QAAM,MAAM,MAAM,UAAU,KAAK;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,SAAS,EAAE,mBAAmB,cAAc;AAAA,EAC9C,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,QAAQ,4CAA4C,GAAG;AAAA,QACvD,KAAK;AAAA,MACP;AAAA,IACF;AAAA,EACF;AACA,QAAM,UAAU,cAAc,IAAI,IAAI;AACtC,SAAO;AAAA,IACL,QAAQ,UACJ;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,IACV,IACA;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,EACN;AACF;AAEA,SAAS,cAAc,MAAwB;AAC7C,MAAI,CAAC,SAAS,IAAI,EAAG,QAAO;AAC5B,QAAM,QAAQ,KAAK;AACnB,SAAO,SAAS,KAAK,KAAK,uBAAuB;AACnD;AAEA,eAAe,cACb,SACA,WACA,WACqB;AAKrB,QAAM,MAAM,GAAG,UAAU,OAAO,CAAC;AACjC,QAAM,MAAM,MAAM,UAAU,KAAK;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,SAAS,EAAE,mBAAmB,cAAc;AAAA,EAC9C,CAAC;AACD,MAAI,CAAC,IAAI,IAAI;AACX,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,QAAQ,aAAa,GAAG,YAAY,IAAI,OAAO;AAAA,QAC/C,KAAK;AAAA,MACP;AAAA,MACA,UAAU;AAAA,IACZ;AAAA,EACF;AACA,QAAM,QAAQ,SAAS,IAAI,IAAI,IAAI,IAAI,KAAK,QAAQ;AACpD,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,QAAQ,aAAa,GAAG;AAAA,QACxB,KAAK;AAAA,MACP;AAAA,MACA,UAAU;AAAA,IACZ;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ,EAAE,MAAM,aAAa,QAAQ,MAAM,UAAU,MAAM,QAAQ,mBAAmB,GAAG,GAAG;AAAA,EAC9F;AACF;AAYA,eAAe,YACb,KACA,MACA,KACA,QACwB;AACxB,QAAM,WAAW,KAAK,YAAa,MAAM,2BAA2B,KAAK,GAAG;AAC5E,MAAI,aAAa,KAAM,QAAO,CAAC,cAAc,CAAC;AAE9C,QAAM,EAAE,eAAe,IAAI,MAAM,OAAO,sBAAe;AACvD,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,eAAe,QAAQ;AAAA,EACtC,SAAS,KAAK;AACZ,QAAI,eAAe,YAAY,IAAI,SAAS,iBAAkB,QAAO,CAAC,cAAc,CAAC;AACrF,WAAO,CAAC,WAAW,GAAG,CAAC;AAAA,EACzB;AAEA,QAAM,SAAwB;AAAA,IAC5B;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ,UAAU,KAAK,OAAO,KAAK,KAAK,gBAAgB;AAAA,IAC1D;AAAA,EACF;AAIA,aAAW,YAAY,MAAM,SAAS,YAAY,GAAG,UAAU;AAC7D,WAAO,KAAK,EAAE,MAAM,kBAAkB,QAAQ,QAAQ,UAAU,OAAO,QAAQ,QAAQ,CAAC;AAAA,EAC1F;AACA,SAAO,KAAK,MAAM,aAAa,KAAK,SAAS,MAAM,CAAC;AACpD,SAAO;AACT;AAMA,eAAe,2BACb,KACA,KACgC;AAChC,QAAM,SAAS,IAAI;AACnB,QAAM,YAAY,OAAO,WAAW,YAAY,OAAO,SAAS;AAChE,MAAI,CAAC,aAAa,CAAE,MAAM,iBAAiB,IAAI,OAAO,EAAI,QAAO;AACjE,QAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,sBAAe;AAC9D,SAAO,sBAAsB,GAAG;AAClC;AAEA,SAAS,gBAA6B;AACpC,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,KAAK;AAAA,EACP;AACF;AAEA,SAAS,WAAW,KAA2B;AAC7C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACvD,GAAI,eAAe,YAAY,IAAI,QAAQ,SAAY,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC;AAAA,EAC7E;AACF;AAOA,eAAe,aAAa,SAAiB,QAAsC;AACjF,MAAI;AACF,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,oBAAa;AACrD,UAAM,UAAU,MAAM,eAAe,SAA0B,MAAM;AACrE,QAAI,YAAY,IAAI;AAClB,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,KAAK;AAAA,MACP;AAAA,IACF;AACA,UAAM,QAAQ,QAAQ,QAAQ,SAAS,CAAC;AAGxC,QAAI,UAAU,6BAA6B;AACzC,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,QAAQ,WAAW,MAAM,GAAG;AAAA,QAC5B,KAAK;AAAA,MACP;AAAA,IACF;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ,WAAW,MAAM,GAAG,UAAU,MAAM,MAAM;AAAA,IACpD;AAAA,EACF,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ,2BAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,MACnF,KAAK;AAAA,IACP;AAAA,EACF;AACF;AAEO,SAAS,kBAAkB,IAAQ,QAAiC;AACzE,QAAM,YAAY,KAAK,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC;AAC9D,QAAM,QAAkB,CAAC;AACzB,aAAW,KAAK,QAAQ;AACtB,UAAM,OACJ,EAAE,WAAW,OACT,MAAM,IAAI,SAAS,QAAG,IACtB,EAAE,WAAW,SACX,MAAM,IAAI,UAAU,GAAG,IACvB,MAAM,IAAI,OAAO,QAAG;AAC5B,UAAM,KAAK,GAAG,IAAI,IAAI,EAAE,KAAK,OAAO,SAAS,CAAC,KAAK,MAAM,IAAI,OAAO,EAAE,MAAM,CAAC,EAAE;AAC/E,QAAI,EAAE,WAAW,QAAQ,EAAE,QAAQ,QAAW;AAC5C,YAAM,KAAK,OAAO,MAAM,IAAI,OAAO,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE;AAAA,IACvD;AAAA,EACF;AACA,SAAO;AACT;AAOA,SAAS,MAAM,IAAQ,QAAyC,MAAsB;AACpF,MAAI,GAAG,kBAAkB,OAAQ,QAAO,UAAU,QAAQ,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC;AACrF,SAAO,UAAU,QAAQ,IAAI;AAC/B;AAEA,SAAS,YAAY,MAAmC;AACtD,MAAI,CAAC,SAAS,IAAI,EAAG,QAAO;AAC5B,QAAM,OAAO,KAAK;AAClB,MAAI,CAAC,SAAS,IAAI,EAAG,QAAO;AAC5B,SAAO,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAC3D;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;","names":[]}

package/dist/chunk-CYOF7ROH.js

@@ -0,0 +1,70 @@
+import { createRequire as __tenjinCreateRequire } from 'node:module'; const require = __tenjinCreateRequire(import.meta.url);
+import {
+  a2 as a,
+  i2 as i,
+  p,
+  r,
+  t
+} from "./chunk-HSDCI7OV.js";
+
+// node_modules/.pnpm/@signinwithethereum+siwe@4.2.0_viem@2.55.2_typescript@6.0.3_zod@4.4.3_/node_modules/@signinwithethereum/siwe/dist/viemAdapter-By13KInL.js
+var a2 = /* @__PURE__ */ t({ createViemConfig: () => s });
+var o = [{
+  inputs: [{
+    name: "_message",
+    type: "bytes32"
+  }, {
+    name: "_signature",
+    type: "bytes"
+  }],
+  name: "isValidSignature",
+  outputs: [{
+    name: "",
+    type: "bytes4"
+  }],
+  stateMutability: "view",
+  type: "function"
+}];
+async function s(e) {
+  let a3;
+  try {
+    a3 = await import("./_esm-FEASBWRP.js");
+  } catch {
+    throw new r(i.MISSING_PROVIDER_LIBRARY, "viem installed (npm install viem)", "viem not found");
+  }
+  let s2 = {
+    verifyMessage: async (e2, t2) => a3.recoverMessageAddress({
+      message: e2,
+      signature: t2
+    }),
+    hashMessage: (e2) => a3.hashMessage(e2),
+    getAddress: (e2) => a3.getAddress(e2)
+  };
+  if (e?.publicClient) {
+    let t2 = e.publicClient;
+    s2.checkContractWalletSignature = async (e2, i2, s3, c) => {
+      let l = t2.chain?.id;
+      if (l == null && t2.getChainId && (l = await t2.getChainId()), l == null) throw new p("EIP-1271/EIP-6492 verification requires a viem publicClient with chain.id or getChainId().");
+      if (l !== c) throw new p(`publicClient chainId ${l} does not match message chainId ${c}.`);
+      if (t2.verifyMessage) return t2.verifyMessage({
+        address: e2,
+        message: i2,
+        signature: s3
+      });
+      let u = a3.hashMessage(i2);
+      return await t2.readContract({
+        address: e2,
+        abi: o,
+        functionName: "isValidSignature",
+        args: [u, s3]
+      }) === a;
+    };
+  }
+  return s2;
+}
+
+export {
+  a2 as a,
+  s
+};
+//# sourceMappingURL=chunk-CYOF7ROH.js.map

package/dist/chunk-CYOF7ROH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../node_modules/.pnpm/@signinwithethereum+siwe@4.2.0_viem@2.55.2_typescript@6.0.3_zod@4.4.3_/node_modules/@signinwithethereum/siwe/dist/viemAdapter-By13KInL.js"],"sourcesContent":["import { t as e } from \"./rolldown-runtime-CAFD8bLK.js\";\nimport { d as t, o as n, t as r, u as i } from \"./utils-9-kzgPFC.js\";\n//#region lib/viemAdapter.ts\nvar a = /* @__PURE__ */ e({ createViemConfig: () => s }), o = [{\n\tinputs: [{\n\t\tname: \"_message\",\n\t\ttype: \"bytes32\"\n\t}, {\n\t\tname: \"_signature\",\n\t\ttype: \"bytes\"\n\t}],\n\tname: \"isValidSignature\",\n\toutputs: [{\n\t\tname: \"\",\n\t\ttype: \"bytes4\"\n\t}],\n\tstateMutability: \"view\",\n\ttype: \"function\"\n}];\nasync function s(e) {\n\tlet a;\n\ttry {\n\t\ta = await import(\"viem\");\n\t} catch {\n\t\tthrow new i(t.MISSING_PROVIDER_LIBRARY, \"viem installed (npm install viem)\", \"viem not found\");\n\t}\n\tlet s = {\n\t\tverifyMessage: async (e, t) => a.recoverMessageAddress({\n\t\t\tmessage: e,\n\t\t\tsignature: t\n\t\t}),\n\t\thashMessage: (e) => a.hashMessage(e),\n\t\tgetAddress: (e) => a.getAddress(e)\n\t};\n\tif (e?.publicClient) {\n\t\tlet t = e.publicClient;\n\t\ts.checkContractWalletSignature = async (e, i, s, c) => {\n\t\t\tlet l = t.chain?.id;\n\t\t\tif (l == null && t.getChainId && (l = await t.getChainId()), l == null) throw new r(\"EIP-1271/EIP-6492 verification requires a viem publicClient with chain.id or getChainId().\");\n\t\t\tif (l !== c) throw new r(`publicClient chainId ${l} does not match message chainId ${c}.`);\n\t\t\tif (t.verifyMessage) return t.verifyMessage({\n\t\t\t\taddress: e,\n\t\t\t\tmessage: i,\n\t\t\t\tsignature: s\n\t\t\t});\n\t\t\tlet u = a.hashMessage(i);\n\t\t\treturn await t.readContract({\n\t\t\t\taddress: e,\n\t\t\t\tabi: o,\n\t\t\t\tfunctionName: \"isValidSignature\",\n\t\t\t\targs: [u, s]\n\t\t\t}) === n;\n\t\t};\n\t}\n\treturn s;\n}\n//#endregion\nexport { a as n, s as t };\n"],"mappings":";;;;;;;;;;AAGA,IAAIA,KAAoB,kBAAE,EAAE,kBAAkB,MAAM,EAAE,CAAC;AAAvD,IAA0D,IAAI,CAAC;AAAA,EAC9D,QAAQ,CAAC;AAAA,IACR,MAAM;AAAA,IACN,MAAM;AAAA,EACP,GAAG;AAAA,IACF,MAAM;AAAA,IACN,MAAM;AAAA,EACP,CAAC;AAAA,EACD,MAAM;AAAA,EACN,SAAS,CAAC;AAAA,IACT,MAAM;AAAA,IACN,MAAM;AAAA,EACP,CAAC;AAAA,EACD,iBAAiB;AAAA,EACjB,MAAM;AACP,CAAC;AACD,eAAe,EAAE,GAAG;AACnB,MAAIA;AACJ,MAAI;AACH,IAAAA,KAAI,MAAM,OAAO,oBAAM;AAAA,EACxB,QAAQ;AACP,UAAM,IAAI,EAAE,EAAE,0BAA0B,qCAAqC,gBAAgB;AAAA,EAC9F;AACA,MAAIC,KAAI;AAAA,IACP,eAAe,OAAOC,IAAGC,OAAMH,GAAE,sBAAsB;AAAA,MACtD,SAASE;AAAA,MACT,WAAWC;AAAA,IACZ,CAAC;AAAA,IACD,aAAa,CAACD,OAAMF,GAAE,YAAYE,EAAC;AAAA,IACnC,YAAY,CAACA,OAAMF,GAAE,WAAWE,EAAC;AAAA,EAClC;AACA,MAAI,GAAG,cAAc;AACpB,QAAIC,KAAI,EAAE;AACV,IAAAF,GAAE,+BAA+B,OAAOC,IAAGE,IAAGH,IAAG,MAAM;AACtD,UAAI,IAAIE,GAAE,OAAO;AACjB,UAAI,KAAK,QAAQA,GAAE,eAAe,IAAI,MAAMA,GAAE,WAAW,IAAI,KAAK,KAAM,OAAM,IAAI,EAAE,4FAA4F;AAChL,UAAI,MAAM,EAAG,OAAM,IAAI,EAAE,wBAAwB,CAAC,mCAAmC,CAAC,GAAG;AACzF,UAAIA,GAAE,cAAe,QAAOA,GAAE,cAAc;AAAA,QAC3C,SAASD;AAAA,QACT,SAASE;AAAA,QACT,WAAWH;AAAA,MACZ,CAAC;AACD,UAAI,IAAID,GAAE,YAAYI,EAAC;AACvB,aAAO,MAAMD,GAAE,aAAa;AAAA,QAC3B,SAASD;AAAA,QACT,KAAK;AAAA,QACL,cAAc;AAAA,QACd,MAAM,CAAC,GAAGD,EAAC;AAAA,MACZ,CAAC,MAAM;AAAA,IACR;AAAA,EACD;AACA,SAAOA;AACR;","names":["a","s","e","t","i"]}