@absol-labs/agent 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Absol Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,196 @@
+# @absol-labs/agent
+
+The **Metrik agent layer** — how AI agents hire and pay for verified services through
+Metrik, safely. This is the **go-to-market wedge** and the investor headline:
+_verified, per-second, conditional payments for autonomous agents, built on x402._
+The layer is operator/infra-agnostic by design: _"x402 proves the payment, Metrik
+proves the delivery."_
+
+Built on [`@absol-labs/sdk`](https://github.com/Absol-Labs/streamproof-sdk); it turns
+the protocol into something an agent can actually use.
+
+> **New here?** [`docs/quickstart.md`](./docs/quickstart.md) — hire a verified,
+> auto-refunding service in under 10 minutes (install → wallet → mandate → hire →
+> monitor → settle), with copy-pasteable examples for all four integration surfaces.
+
+> **Why agents are the wedge** + the full agent journey:
+> [`product-strategy.md`](https://github.com/Absol-Labs/streamproof-protocol/blob/main/docs/product-strategy.md)
+> and [`production-flow.md`](https://github.com/Absol-Labs/streamproof-protocol/blob/main/docs/production-flow.md)
+> (Journey 2 — Atlas). The agent's own zkTLS delivery proof is **L4** in
+> [`verification-model.md`](https://github.com/Absol-Labs/streamproof-protocol/blob/main/docs/verification-model.md).
+> The explicit agent-layer security review lives in
+> [docs/threat-model.md](./docs/threat-model.md).
+
+## What's here
+
+```
+src/
+  mandates/   spend mandates — per-stream/total/rate/duration caps + operator
+              allowlists. The "agents can't run away with the wallet" guarantee.
+  sdk/        mandate-gated wrapper over @absol-labs/sdk for open/status/claim/reclaim.
+  x402/       Metrik as an x402 verified-streaming payment scheme / facilitator.
+  mcp/        an MCP server exposing hire/monitor/reclaim as agent tools.
+docs/
+  quickstart.md    zero → hired verified service in <10 min (start here).
+  agent-layer.md   the product design + investor narrative.
+  crewai.md        CrewAI's official MCP integration path for Metrik tools.
+  eliza.md         ElizaOS plugin/actions for hire/status/reclaim.
+  threat-model.md  the explicit autonomous-spend / key-custody review.
+  langchain.md     the LangChain tool adapter and example loop.
+```
+
+## The four pieces
+
+1. **x402 integration** — an agent hits a `402`, gets back a _verified-streaming_
+   payment requirement, and opens a stream instead of a one-shot payment. Reuses
+   the `402` negotiation surface and opens the on-chain stream through the SDK.
+2. **MCP server** — exposes "hire verified compute / get status / reclaim" as MCP
+   tools so any MCP agent (Claude, etc.) transacts natively. When Reclaim creds are
+   configured, it also exposes `prove_https_response` for public-response zkTLS proofs
+   tied to a tracked stream.
+3. **Framework tools** — LangChain, ElizaOS, and CrewAI now sit on top of the same
+   mandate-gated client. CrewAI consumes the existing MCP lane via its official MCP
+   integration; ElizaOS gets a direct plugin/action surface.
+4. **Spend mandates** — owner-signed EIP-712 budget/intent guardrails (AP2-style):
+   caps and allowlists enforced before any fund-moving action, with expiry and
+   local revocation checks.
+5. **zkTLS delivery proofs (L4)** — the agent can now produce a Reclaim-backed proof
+   of the exact HTTPS response it consumed, bound to buyer/stream context and intended
+   to complement, not replace, oracle L1 evidence.
+
+Current real chain surface:
+
+- `VerifiedStreamAgentClient` wraps `@absol-labs/sdk` for `open`, `status`, `claim`,
+  `close`, and `reclaim`.
+- All autonomous fund-moving helpers (`openVerifiedStream()`, `claimStream()`,
+  `closeStream()`, `reclaimStream()`) enforce signed-mandate verification first and
+  hard-stop on denial.
+- `VerifiedStreamX402Facilitator` turns an HTTP `402` challenge into a real verified
+  stream open on Base Sepolia.
+- `createVerifiedStreamMcpServer()` exposes real MCP tools for `hire_verified_service`,
+  `check_stream_status`, `reclaim_unspent`, and `list_streams`.
+- `ReclaimConsumerProofService` generates a verifiable zkTLS proof of a consumed HTTPS
+  response, hashing the exact request/match/redaction policy before local verification.
+- `VerifiedStreamX402Facilitator.proveConsumedHttpsResponse()` binds that proof to the
+  same buyer/mandate context that opened the stream.
+- If Reclaim env vars are configured, `createVerifiedStreamMcpServer()` also exposes
+  `prove_https_response` for tracked streams. The MCP tool intentionally excludes secret
+  headers/cookies so credentials do not pass through model-visible tool arguments.
+- `createLangChainVerifiedStreamTools()` exposes the same hire/status/reclaim flow as
+  LangChain tools, including a `shouldStop` status signal for paused streams.
+- `createMetrikElizaPlugin()` (alias `metrikElizaPlugin`) exposes the hire/status/reclaim/close
+  flow as an ElizaOS plugin — canonical `HIRE_VERIFIED_SERVICE`, `CHECK_STREAM_STATUS`,
+  `RECLAIM_UNSPENT`, and `CLOSE_STREAM` actions with structured results and fail-closed
+  payload parsing. See [`examples/metrik-character.ts`](examples/metrik-character.ts).
+- `createCrewAiVerifiedStreamMcpConfig()` emits a CrewAI `MCPServerStdio` config for
+  the existing mandate-gated MCP server, with a tool filter limited to verified-stream
+  operations.
+- `resolveAgentWallet()` accepts either an injected viem signer or a provisioned
+  Coinbase CDP Server Wallet v2 account, then feeds that signer into the existing
+  agent/SDK path without ever exporting a private key.
+- Model A is infra-agnostic: a stream targets a seller payout wallet + `serviceRef`
+  only (no service-network field). Settlement is single-chain on Base Sepolia.
+
+## Wallet modes
+
+The agent layer now supports two wallet sources:
+
+- injected viem account via `METRIK_AGENT_PRIVATE_KEY`
+- Coinbase CDP Server Wallet v2 via `CDP_API_KEY_ID`, `CDP_API_KEY_SECRET`,
+  `CDP_WALLET_SECRET`, and `METRIK_AGENT_CDP_OWNER_NAME`
+
+CDP mode uses Coinbase-managed remote signing. Metrik never reads or exports the
+wallet private key. If `METRIK_AGENT_CDP_CREATE_SMART_ACCOUNT=true`, the agent also
+provisions a per-agent ERC-4337 smart account owned by that CDP wallet for the later
+gas-abstraction path.
+
+## MCP server
+
+The MCP server runs over stdio and reads its settlement config from env. It never
+asks for a raw key in a tool argument.
+
+```bash
+cp .env.example .env
+pnpm mcp:stdio
+```
+
+Env surface:
+
+- `METRIK_AGENT_RPC_URL`
+- `METRIK_AGENT_ESCROW`
+- `METRIK_AGENT_USDC`
+- `METRIK_AGENT_PRIVATE_KEY` (optional injected signer mode)
+- `CDP_API_KEY_ID`
+- `CDP_API_KEY_SECRET`
+- `CDP_WALLET_SECRET`
+- `METRIK_AGENT_CDP_OWNER_NAME`
+- `METRIK_AGENT_CDP_SMART_ACCOUNT_NAME`
+- `METRIK_AGENT_CDP_CREATE_SMART_ACCOUNT`
+- `METRIK_AGENT_CHAIN_ID` (`84532` in Phase 2)
+- `METRIK_AGENT_CHAIN_NAME`
+- `METRIK_AGENT_MCP_STATE_FILE` (optional JSON registry for `list_streams`)
+- `RECLAIM_APP_ID` (optional, enables zkTLS proof generation)
+- `RECLAIM_APP_SECRET` (optional, enables zkTLS proof generation)
+- `METRIK_AGENT_RECLAIM_LOGS` (optional, defaults to `false`)
+
+## zkTLS / Reclaim (L4)
+
+Use the programmatic proof service or the x402 facilitator when the consumed request
+needs private headers/cookies. Use the MCP tool only for public request inputs; it
+looks up stream context locally and avoids sending secrets through the model/tool layer.
+
+Every proof is verified locally against the exact URL/method/body/match/redaction
+policy the agent declared. This is an **L4 delivery signal** only: the verifier should
+cross-check it with L1/oracle observations before any settlement decision.
+
+## End-to-end journey (hire -> stream -> settle)
+
+The whole loop is proven end to end against a local node in
+[`test/e2e.int.test.ts`](test/e2e.int.test.ts) and scripted for integrators in
+[`examples/hire-stream-settle.ts`](examples/hire-stream-settle.ts):
+
+1. **Wallet** — a non-custodial injected-key viem account (credential-free; swap
+   in a Coinbase CDP wallet via `createWalletBackedAgentClient({ cdp: ... })`).
+2. **Mandate** — the owner signs an EIP-712 spend mandate (caps + operator
+   allowlist); every buyer-side fund move is mandate-gated and fail-closed.
+3. **Hire** — the x402 facilitator turns a `402` challenge into an escrowed
+   `openStream` on the hardened `StreamEscrow`.
+4. **Verify** — an M-of-N oracle quorum submits real EIP-712 `Delivered`
+   attestations; USDC accrues only for verified seconds (`checkedAt <=
+block.timestamp` is enforced on-chain).
+5. **Settle** — the operator claims its earned USDC net of the protocol fee, the
+   buyer closes and reclaims the unspent balance, a terminal `SlaReceiptIssued`
+   event is emitted, and every cent conserves exactly.
+
+The test also covers the **failure branch**: two failed checks auto-pause the
+stream, the buyer reclaims, and the operator can still claim only what it earned
+before the outage — buyer-favouring by construction.
+
+Run the example (needs Foundry `anvil`):
+
+```bash
+anvil --silent &
+pnpm tsx examples/hire-stream-settle.ts
+```
+
+> The SLA receipt carries the raw material for on-chain reputation
+> (`verifiedSeconds`, `accrued`, `finalStatus`, `consecutiveFailures`). Feeding it
+> into `@absol-labs/shared`'s `slaReceiptRecordFromEvent` + `aggregateReputation`
+> (protocol#38) is a one-liner once the installed `@absol-labs/shared` is bumped to
+> the version that exports them (the pinned `0.3.0` does not yet).
+
+## Develop
+
+```bash
+corepack enable && corepack prepare pnpm@9.15.0 --activate
+pnpm install
+pnpm typecheck
+pnpm test
+pnpm build
+```
+
+> The x402 facilitator, zkTLS proof path, signed-mandate engine, MCP server, and
+> framework adapters are all real and tested in-repo. The `*.int.test.ts`
+> integration suites deploy the hardened `StreamEscrow` on a throwaway `anvil`
+> node and self-skip cleanly when `anvil` is not on `PATH`, so default CI stays
+> green.

package/dist/discovery/registry.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Service discovery for the Metrik verified-service marketplace.
+ *
+ * Before this module every agent surface (SDK, MCP, framework tools) assumed the
+ * caller already knew a seller's `operator` + `serviceRef`. There was no way to
+ * DISCOVER a service. {@link discoverServices} closes that gap: it reads the same
+ * Supabase `listings` registry the oracle reads and returns typed, VERIFIED
+ * listings an agent can hire directly.
+ *
+ * ## Fail-closed trust model
+ * The security-critical envelope lives entirely inside each row's `signed_binding`
+ * (`{ binding, signature, serviceRef, targetMetadata }`). The flat `service_ref` /
+ * `operator` / `public_url` columns are UNSIGNED denormalised copies for querying
+ * only — never trusted. A row is DROPPED (and logged) unless BOTH hold:
+ *   1. its EIP-712 signature recovers to `binding.operator`; and
+ *   2. `deriveServiceRef(binding)` equals the envelope's own `serviceRef`.
+ * `discoverServices` therefore NEVER returns an unverifiable listing.
+ *
+ * The unsigned `category` column is carried through as informational metadata only
+ * (used for the optional client-side category filter); it is never part of the
+ * trust decision.
+ */
+/** A verified, hireable service listing. `serviceRef`/`operator`/`publicUrl` are
+ * derived from the SIGNED binding, not the unsigned flat columns. */
+export interface ServiceListing {
+    readonly serviceRef: `0x${string}`;
+    readonly operator: `0x${string}`;
+    readonly publicUrl: string;
+    /** Unsigned informational category from the listings row (may be absent). */
+    readonly category: string | null;
+    /** Optional signed operator-supplied target metadata (e.g. resolver hints). */
+    readonly targetMetadata?: Record<string, string>;
+}
+export interface DiscoverServicesOptions {
+    /** Registry endpoint. Defaults to {@link DEFAULT_METRIK_REGISTRY_URL} (env override:
+     * `METRIK_AGENT_REGISTRY_URL`). Pass the full PostgREST `?select=...&order=...` URL. */
+    readonly registryUrl?: string;
+    /** PostgREST apikey (Supabase anon key). Env override: `METRIK_AGENT_REGISTRY_APIKEY`.
+     * Sent as both the `apikey` header and `Authorization: Bearer`. */
+    readonly apiKey?: string;
+    /** Optional client-side filter on the unsigned `category` column. */
+    readonly category?: string;
+    /** Optional cap on the number of verified listings returned. */
+    readonly limit?: number;
+    /** Injected fetch (tests / custom transports). Defaults to `globalThis.fetch`. */
+    readonly fetch?: typeof fetch;
+    /** Request timeout in milliseconds. Defaults to 5000. */
+    readonly timeoutMs?: number;
+    /** Warning sink for dropped rows / registry failures. Defaults to `console`. */
+    readonly logger?: {
+        warn: (...args: unknown[]) => void;
+    };
+}
+/**
+ * Default Metrik listings registry (Supabase PostgREST). Selects the columns the
+ * oracle and the agent both need and orders newest-first.
+ */
+export declare const DEFAULT_METRIK_REGISTRY_URL = "https://pzvnacjolaipeobmptsb.supabase.co/rest/v1/listings?select=service_ref,operator,public_url,category,signed_binding&order=created_at.desc";
+/**
+ * Discover verified services from the Metrik listings registry.
+ *
+ * Fail-closed: any row whose signed binding is malformed, whose signature does not
+ * recover to its operator, or whose `serviceRef` does not match `deriveServiceRef`
+ * is dropped and logged. Degrades gracefully: any network/registry failure returns
+ * `[]` (with a logged warning) rather than throwing to the caller.
+ */
+export declare function discoverServices(opts?: DiscoverServicesOptions): Promise<ServiceListing[]>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/discovery/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/discovery/registry.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;qEACqE;AACrE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC;4FACwF;IACxF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;uEACmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAC1D;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,mJAC0G,CAAC;AAoCnJ;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,cAAc,EAAE,CAAC,CA4C3B"}

package/dist/discovery/registry.js

@@ -0,0 +1,148 @@
+import { deriveServiceRef, recoverServiceBindingSigner, serviceBindingSchema, } from "@absol-labs/shared";
+import { isHex } from "viem";
+import { z } from "zod";
+/**
+ * Default Metrik listings registry (Supabase PostgREST). Selects the columns the
+ * oracle and the agent both need and orders newest-first.
+ */
+export const DEFAULT_METRIK_REGISTRY_URL = "https://pzvnacjolaipeobmptsb.supabase.co/rest/v1/listings?select=service_ref,operator,public_url,category,signed_binding&order=created_at.desc";
+const DEFAULT_TIMEOUT_MS = 5_000;
+const signature65HexSchema = z
+    .string()
+    .refine((value) => isHex(value, { strict: true }) && value.length === 132, "must be a 65-byte hex signature");
+const bytes32HexSchema = z
+    .string()
+    .refine((value) => isHex(value, { strict: true }) && value.length === 66, "must be bytes32 hex");
+/** The signed envelope inside a listings row. Mirrors the oracle's ingest schema
+ * (includes the optional operator-supplied `targetMetadata`). */
+const signedBindingRecordSchema = z.object({
+    serviceRef: bytes32HexSchema,
+    binding: serviceBindingSchema,
+    signature: signature65HexSchema,
+    targetMetadata: z.record(z.string()).optional(),
+});
+/** A Supabase `listings` row. Only `signed_binding` is trusted; `category` is
+ * carried through as unsigned informational metadata. Unknown columns are ignored. */
+const listingRowSchema = z
+    .object({
+    category: z.string().nullish(),
+    signed_binding: signedBindingRecordSchema,
+})
+    .passthrough();
+/**
+ * Discover verified services from the Metrik listings registry.
+ *
+ * Fail-closed: any row whose signed binding is malformed, whose signature does not
+ * recover to its operator, or whose `serviceRef` does not match `deriveServiceRef`
+ * is dropped and logged. Degrades gracefully: any network/registry failure returns
+ * `[]` (with a logged warning) rather than throwing to the caller.
+ */
+export async function discoverServices(opts = {}) {
+    const logger = opts.logger ?? console;
+    const registryUrl = opts.registryUrl ??
+        process.env.METRIK_AGENT_REGISTRY_URL ??
+        DEFAULT_METRIK_REGISTRY_URL;
+    const apiKey = opts.apiKey ?? process.env.METRIK_AGENT_REGISTRY_APIKEY;
+    const fetchImpl = opts.fetch ?? globalThis.fetch;
+    const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    if (typeof fetchImpl !== "function") {
+        logger.warn("metrik discovery: no fetch implementation available; returning no listings");
+        return [];
+    }
+    let rows;
+    try {
+        rows = await fetchListingRows(fetchImpl, registryUrl, apiKey, timeoutMs);
+    }
+    catch (error) {
+        // Fail-safe / buyer-favouring: a down or unreachable registry must never throw
+        // into the agent's hire flow — it degrades to "no services discovered".
+        logger.warn(`metrik discovery: listings registry unreachable (${errorMessage(error)}); returning no listings`);
+        return [];
+    }
+    const listings = [];
+    for (const [index, row] of rows.entries()) {
+        const listing = await verifyRow(row, index, logger);
+        if (listing === null) {
+            continue;
+        }
+        if (opts.category !== undefined && listing.category !== opts.category) {
+            continue;
+        }
+        listings.push(listing);
+        if (opts.limit !== undefined && listings.length >= opts.limit) {
+            break;
+        }
+    }
+    return listings;
+}
+async function fetchListingRows(fetchImpl, url, apiKey, timeoutMs) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const headers = {};
+        if (apiKey !== undefined && apiKey.length > 0) {
+            headers.apikey = apiKey;
+            headers.Authorization = `Bearer ${apiKey}`;
+        }
+        const response = await fetchImpl(url, {
+            signal: controller.signal,
+            ...(Object.keys(headers).length === 0 ? {} : { headers }),
+        });
+        if (!response.ok) {
+            throw new Error(`listings registry responded with status ${response.status}`);
+        }
+        const body = await response.json();
+        if (!Array.isArray(body)) {
+            throw new Error("listings registry response was not a JSON array");
+        }
+        return body;
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+/**
+ * Verify one raw registry row into a {@link ServiceListing}, or `null` if it fails
+ * the fail-closed checks. Never throws.
+ */
+async function verifyRow(row, index, logger) {
+    const parsed = listingRowSchema.safeParse(row);
+    if (!parsed.success) {
+        logger.warn(`metrik discovery: row ${index} dropped — invalid listing envelope (${parsed.error.issues[0]?.message ?? "schema error"})`);
+        return null;
+    }
+    const { signed_binding: record, category } = parsed.data;
+    let signer;
+    try {
+        signer = (await recoverServiceBindingSigner(record.binding, record.signature));
+    }
+    catch (error) {
+        logger.warn(`metrik discovery: row ${index} dropped — signature recovery threw (${errorMessage(error)})`);
+        return null;
+    }
+    if (signer === null || !eqHex(signer, record.binding.operator)) {
+        logger.warn(`metrik discovery: row ${index} dropped — signature does not recover to operator (recovered ${signer ?? "null"})`);
+        return null;
+    }
+    const derivedRef = deriveServiceRef(record.binding);
+    if (!eqHex(derivedRef, record.serviceRef)) {
+        logger.warn(`metrik discovery: row ${index} dropped — serviceRef ${record.serviceRef} does not match derived ${derivedRef}`);
+        return null;
+    }
+    return {
+        serviceRef: derivedRef,
+        operator: record.binding.operator,
+        publicUrl: record.binding.publicUrl,
+        category: category ?? null,
+        ...(record.targetMetadata === undefined
+            ? {}
+            : { targetMetadata: record.targetMetadata }),
+    };
+}
+function eqHex(a, b) {
+    return a.toLowerCase() === b.toLowerCase();
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=registry.js.map

package/dist/discovery/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/discovery/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAwDxB;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACtC,gJAAgJ,CAAC;AAEnJ,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EACjE,iCAAiC,CAClC,CAAC;AAEJ,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,EAAE;KACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAChE,qBAAqB,CACtB,CAAC;AAEJ;iEACiE;AACjE,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,oBAAoB;IAC7B,SAAS,EAAE,oBAAoB;IAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAEH;sFACsF;AACtF,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC9B,cAAc,EAAE,yBAAyB;CAC1C,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC,EAAE;IAElC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC;IACtC,MAAM,WAAW,GACf,IAAI,CAAC,WAAW;QAChB,OAAO,CAAC,GAAG,CAAC,yBAAyB;QACrC,2BAA2B,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;IACvE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAEvD,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CACT,4EAA4E,CAC7E,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,IAAe,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+EAA+E;QAC/E,wEAAwE;QACxE,MAAM,CAAC,IAAI,CACT,oDAAoD,YAAY,CAAC,KAAK,CAAC,0BAA0B,CAClG,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtE,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9D,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,SAAuB,EACvB,GAAW,EACX,MAA0B,EAC1B,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;YACxB,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,EAAE,CAAC;QAC7C,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC1D,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,SAAS,CACtB,GAAY,EACZ,KAAa,EACb,MAA8C;IAE9C,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CACT,yBAAyB,KAAK,wCAAwC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,cAAc,GAAG,CAC3H,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAEzD,IAAI,MAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,2BAA2B,CACzC,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,SAA0B,CAClC,CAAyB,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CACT,yBAAyB,KAAK,wCAAwC,YAAY,CAAC,KAAK,CAAC,GAAG,CAC7F,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,IAAI,CACT,yBAAyB,KAAK,gEAAgE,MAAM,IAAI,MAAM,GAAG,CAClH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CACT,yBAAyB,KAAK,yBAAyB,MAAM,CAAC,UAAU,2BAA2B,UAAU,EAAE,CAChH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAyB;QAClD,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;QACnC,QAAQ,EAAE,QAAQ,IAAI,IAAI;QAC1B,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,CAAS,EAAE,CAAS;IACjC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/frameworks/agentkit.d.ts

@@ -0,0 +1,158 @@
+import "reflect-metadata";
+import type { HireComputeResult, StreamProofClientConfig } from "@absol-labs/sdk";
+import { ActionProvider, WalletProvider, type Network } from "@coinbase/agentkit";
+import { z } from "zod";
+import { type DiscoverServicesOptions, type ServiceListing } from "../discovery/registry.js";
+import { type SignedSpendMandate } from "../mandates/mandate.js";
+import { type AgentSdkClientFactory, type MandateAuthorizedStreamActionInput, type OpenVerifiedStreamInput, type ReclaimAuthorizedStreamInput, type ReclaimVerifiedStreamResult, type StreamProofTransactionResult, type StreamStatusView } from "../sdk/client.js";
+/**
+ * Base Sepolia is the only settlement network Metrik supports today (Model A,
+ * single-chain USDC on Base). Every action fails closed on any other network.
+ */
+export declare const METRIK_BASE_SEPOLIA_CHAIN_ID = 84532;
+export declare const discoverServicesSchema: z.ZodObject<{
+    category: z.ZodOptional<z.ZodString>;
+    limit: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    category?: string | undefined;
+    limit?: number | undefined;
+}, {
+    category?: string | undefined;
+    limit?: number | undefined;
+}>;
+export declare const hireVerifiedServiceSchema: z.ZodObject<{
+    operator: z.ZodEffects<z.ZodString, `0x${string}`, string>;
+    serviceRef: z.ZodEffects<z.ZodString, string, string>;
+    budgetUsdc: z.ZodEffects<z.ZodString, string, unknown>;
+    ratePerSecondUsdc: z.ZodEffects<z.ZodString, string, unknown>;
+    durationSeconds: z.ZodOptional<z.ZodNumber>;
+    publicUrl: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    operator: `0x${string}`;
+    serviceRef: string;
+    ratePerSecondUsdc: string;
+    budgetUsdc: string;
+    publicUrl?: string | undefined;
+    durationSeconds?: number | undefined;
+}, {
+    operator: string;
+    serviceRef: string;
+    ratePerSecondUsdc?: unknown;
+    publicUrl?: string | undefined;
+    budgetUsdc?: unknown;
+    durationSeconds?: number | undefined;
+}>;
+export declare const checkStreamStatusSchema: z.ZodObject<{
+    streamId: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    streamId: string;
+}, {
+    streamId: string;
+}>;
+export declare const reclaimUnspentSchema: z.ZodObject<{
+    streamId: z.ZodEffects<z.ZodString, string, string>;
+    closeFirst: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    streamId: string;
+    closeFirst?: boolean | undefined;
+}, {
+    streamId: string;
+    closeFirst?: boolean | undefined;
+}>;
+export declare const closeStreamSchema: z.ZodObject<{
+    streamId: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    streamId: string;
+}, {
+    streamId: string;
+}>;
+/**
+ * Resolves the mutable, per-owner mandate accounting the guard needs: how much
+ * of the total cap has already been spent, and which mandate ids are revoked.
+ */
+export interface MetrikMandateStateResolver {
+    getSpentSoFarUsdc(owner: `0x${string}`): Promise<bigint>;
+    getRevokedMandateIds(owner: `0x${string}`): Promise<readonly `0x${string}`[]>;
+}
+/**
+ * The subset of the Metrik SDK the action provider drives. `VerifiedStreamAgentClient`
+ * satisfies this structurally; tests inject a lightweight double so the provider
+ * is exercisable with no CDP creds and no RPC.
+ */
+export interface MetrikAgentKitClient {
+    openVerifiedStream(input: OpenVerifiedStreamInput): Promise<HireComputeResult>;
+    getStreamStatus(streamId: `0x${string}`): Promise<StreamStatusView>;
+    reclaimStream(input: ReclaimAuthorizedStreamInput): Promise<ReclaimVerifiedStreamResult>;
+    closeStream(input: MandateAuthorizedStreamActionInput): Promise<StreamProofTransactionResult>;
+}
+export interface MetrikActionProviderConfig {
+    /**
+     * The owner-signed spend mandate that bounds every hire (per-stream + total
+     * budget, rate, duration, allowed operators). Configured once at the
+     * agent's construction — the LLM never supplies or edits it.
+     */
+    readonly signedMandate: SignedSpendMandate;
+    /** Settlement chain id. Defaults to Base Sepolia (84532); any other value fails closed. */
+    readonly chainId?: number;
+    /** Injected Metrik client (test path). Mutually exclusive with `sdkConfig`. */
+    readonly agentClient?: MetrikAgentKitClient;
+    /**
+     * Metrik SDK config (escrow address, chain, rpc, signing account) used to
+     * BUILD a `VerifiedStreamAgentClient` when no `agentClient` is injected. The
+     * signing account comes from the CDP wallet in `createMetrikAgentKit`.
+     */
+    readonly sdkConfig?: StreamProofClientConfig;
+    /** Optional SDK client factory override, forwarded to the built client. */
+    readonly createSdkClient?: AgentSdkClientFactory;
+    /** Mandate accounting source. Defaults to fresh state (0 spent, none revoked). */
+    readonly mandateStateResolver?: Partial<MetrikMandateStateResolver>;
+    /** Clock injection for deterministic tests. Defaults to wall-clock seconds. */
+    readonly now?: () => number;
+    /**
+     * Discovery driver for the `discover_services` action. Defaults to the live
+     * registry-backed `discoverServices`; tests inject a double.
+     */
+    readonly discoverServices?: (opts?: DiscoverServicesOptions) => Promise<ServiceListing[]>;
+}
+export declare class MetrikActionProviderConfigError extends Error {
+    constructor(message: string);
+}
+/**
+ * Coinbase AgentKit action provider that lets any AgentKit-based agent hire and
+ * pay third-party services through Metrik's verified USDC escrow. Every action
+ * is fail-closed and buyer-favoring; a hire is refused before any transaction if
+ * it would breach the configured spend mandate.
+ */
+export declare class MetrikActionProvider extends ActionProvider<WalletProvider> {
+    #private;
+    constructor(config: MetrikActionProviderConfig);
+    discoverServices(_walletProvider: WalletProvider, args: z.infer<typeof discoverServicesSchema>): Promise<string>;
+    hireVerifiedService(walletProvider: WalletProvider, args: z.infer<typeof hireVerifiedServiceSchema>): Promise<string>;
+    checkStreamStatus(walletProvider: WalletProvider, args: z.infer<typeof checkStreamStatusSchema>): Promise<string>;
+    reclaimUnspent(walletProvider: WalletProvider, args: z.infer<typeof reclaimUnspentSchema>): Promise<string>;
+    closeStream(walletProvider: WalletProvider, args: z.infer<typeof closeStreamSchema>): Promise<string>;
+    supportsNetwork(network: Network): boolean;
+}
+/**
+ * Factory mirroring AgentKit's `xxxActionProvider()` convention.
+ */
+export declare function metrikActionProvider(config: MetrikActionProviderConfig): MetrikActionProvider;
+export interface CreateMetrikAgentKitOptions {
+    /**
+     * A concrete AgentKit wallet provider (e.g. `CdpEvmWalletProvider` or
+     * `CdpSmartWalletProvider`) built from the CDP creds. Constructing it reaches
+     * CDP and therefore needs live creds at runtime; the action provider itself is
+     * independently unit-testable without any creds.
+     */
+    readonly walletProvider: WalletProvider;
+    readonly metrik: MetrikActionProviderConfig;
+    /** Additional AgentKit action providers to compose alongside Metrik. */
+    readonly additionalActionProviders?: readonly ActionProvider[];
+}
+/**
+ * Convenience that composes Metrik into an AgentKit instance alongside the CDP
+ * wallet provider. From the returned `AgentKit` you can expose Metrik natively
+ * via `getLangChainTools`, `getVercelAITools`, or the AgentKit MCP server.
+ */
+export declare function createMetrikAgentKit(options: CreateMetrikAgentKitOptions): Promise<import("@coinbase/agentkit").AgentKit>;
+//# sourceMappingURL=agentkit.d.ts.map

package/dist/frameworks/agentkit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentkit.d.ts","sourceRoot":"","sources":["../../src/frameworks/agentkit.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,cAAc,EAEd,cAAc,EACd,KAAK,OAAO,EACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAgB,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,kCAAkC,EACvC,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAE1B;;;GAGG;AACH,eAAO,MAAM,4BAA4B,QAAQ,CAAC;AAwBlD,eAAO,MAAM,sBAAsB;;;;;;;;;EAYjC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;EA0BpC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;EAIlC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;EAU/B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;EAE5B,CAAC;AAEH;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,iBAAiB,CAAC,KAAK,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,oBAAoB,CAAC,KAAK,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,EAAE,CAAC,CAAC;CAC/E;AAOD;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,kBAAkB,CAChB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B,eAAe,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACpE,aAAa,CACX,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxC,WAAW,CACT,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC;IAC7C,2EAA2E;IAC3E,QAAQ,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACjD,kFAAkF;IAClF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACpE,+EAA+E;IAC/E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAC1B,IAAI,CAAC,EAAE,uBAAuB,KAC3B,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;CAChC;AAaD,qBAAa,+BAAgC,SAAQ,KAAK;gBAC5C,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,cAAc,CAAC,cAAc,CAAC;;gBAU1D,MAAM,EAAE,0BAA0B;IA0CxC,gBAAgB,CACpB,eAAe,EAAE,cAAc,EAC/B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,GAC3C,OAAO,CAAC,MAAM,CAAC;IAyBZ,mBAAmB,CACvB,cAAc,EAAE,cAAc,EAC9B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,GAC9C,OAAO,CAAC,MAAM,CAAC;IA4DZ,iBAAiB,CACrB,cAAc,EAAE,cAAc,EAC9B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,GAC5C,OAAO,CAAC,MAAM,CAAC;IAsBZ,cAAc,CAClB,cAAc,EAAE,cAAc,EAC9B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,GACzC,OAAO,CAAC,MAAM,CAAC;IAwBZ,WAAW,CACf,cAAc,EAAE,cAAc,EAC9B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,GACtC,OAAO,CAAC,MAAM,CAAC;IASlB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO;CAoC3C;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,0BAA0B,GACjC,oBAAoB,CAEtB;AAED,MAAM,WAAW,2BAA2B;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,wEAAwE;IACxE,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAChE;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,kDAUrC"}