@absol-labs/agent 0.1.0

package/dist/mandates/mandate.d.ts

@@ -0,0 +1,214 @@
+import { z } from "zod";
+export declare const spendMandateSchema: z.ZodObject<{
+    /** Max deposit for any single stream. */
+    maxPerStreamUsdc: z.ZodBigInt;
+    /** Cumulative cap across all streams opened under this mandate. */
+    maxTotalUsdc: z.ZodBigInt;
+    /** Max ratePerSecond an agent may agree to. */
+    maxRatePerSecondUsdc: z.ZodBigInt;
+    /** Max stream duration in seconds. */
+    maxDurationSeconds: z.ZodNumber;
+    /** Allowed operator addresses; empty/undefined = any operator. */
+    allowedOperators: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, `0x${string}`, string>, "many">>;
+    /** Mandate expiry, unix seconds. */
+    expiresAt: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    maxPerStreamUsdc: bigint;
+    maxTotalUsdc: bigint;
+    maxRatePerSecondUsdc: bigint;
+    maxDurationSeconds: number;
+    expiresAt: number;
+    allowedOperators?: `0x${string}`[] | undefined;
+}, {
+    maxPerStreamUsdc: bigint;
+    maxTotalUsdc: bigint;
+    maxRatePerSecondUsdc: bigint;
+    maxDurationSeconds: number;
+    expiresAt: number;
+    allowedOperators?: string[] | undefined;
+}>;
+export type SpendMandate = z.infer<typeof spendMandateSchema>;
+export declare const signedSpendMandateSchema: z.ZodObject<{
+    mandateId: z.ZodEffects<z.ZodString, string, string>;
+    owner: z.ZodEffects<z.ZodString, `0x${string}`, string>;
+    chainId: z.ZodNumber;
+    issuedAt: z.ZodNumber;
+    mandate: z.ZodObject<{
+        /** Max deposit for any single stream. */
+        maxPerStreamUsdc: z.ZodBigInt;
+        /** Cumulative cap across all streams opened under this mandate. */
+        maxTotalUsdc: z.ZodBigInt;
+        /** Max ratePerSecond an agent may agree to. */
+        maxRatePerSecondUsdc: z.ZodBigInt;
+        /** Max stream duration in seconds. */
+        maxDurationSeconds: z.ZodNumber;
+        /** Allowed operator addresses; empty/undefined = any operator. */
+        allowedOperators: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, `0x${string}`, string>, "many">>;
+        /** Mandate expiry, unix seconds. */
+        expiresAt: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        maxPerStreamUsdc: bigint;
+        maxTotalUsdc: bigint;
+        maxRatePerSecondUsdc: bigint;
+        maxDurationSeconds: number;
+        expiresAt: number;
+        allowedOperators?: `0x${string}`[] | undefined;
+    }, {
+        maxPerStreamUsdc: bigint;
+        maxTotalUsdc: bigint;
+        maxRatePerSecondUsdc: bigint;
+        maxDurationSeconds: number;
+        expiresAt: number;
+        allowedOperators?: string[] | undefined;
+    }>;
+    signature: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    mandateId: string;
+    owner: `0x${string}`;
+    chainId: number;
+    issuedAt: number;
+    mandate: {
+        maxPerStreamUsdc: bigint;
+        maxTotalUsdc: bigint;
+        maxRatePerSecondUsdc: bigint;
+        maxDurationSeconds: number;
+        expiresAt: number;
+        allowedOperators?: `0x${string}`[] | undefined;
+    };
+    signature: string;
+}, {
+    mandateId: string;
+    owner: string;
+    chainId: number;
+    issuedAt: number;
+    mandate: {
+        maxPerStreamUsdc: bigint;
+        maxTotalUsdc: bigint;
+        maxRatePerSecondUsdc: bigint;
+        maxDurationSeconds: number;
+        expiresAt: number;
+        allowedOperators?: string[] | undefined;
+    };
+    signature: string;
+}>;
+export type SignedSpendMandate = z.infer<typeof signedSpendMandateSchema>;
+export interface HireRequest {
+    operator: `0x${string}`;
+    budgetUsdc: bigint;
+    ratePerSecondUsdc: bigint;
+    maxDurationSeconds: number;
+}
+export interface MandateDecision {
+    allowed: boolean;
+    /** Machine-readable denial reason; undefined when allowed. */
+    reason?: "invalid-signature" | "mandate-revoked" | "mandate-expired" | "exceeds-per-stream-cap" | "exceeds-total-cap" | "exceeds-rate-cap" | "exceeds-duration-cap" | "operator-not-allowed";
+}
+export interface MandateVerificationContext {
+    readonly nowSeconds: number;
+    readonly revokedMandateIds?: Iterable<`0x${string}`>;
+}
+export declare const spendMandateDomain: {
+    readonly name: "MetrikAgentMandate";
+    readonly version: "1";
+};
+export declare const spendMandateTypedData: {
+    readonly SpendMandate: readonly [{
+        readonly name: "mandateId";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "owner";
+        readonly type: "address";
+    }, {
+        readonly name: "issuedAt";
+        readonly type: "uint64";
+    }, {
+        readonly name: "expiresAt";
+        readonly type: "uint64";
+    }, {
+        readonly name: "maxPerStreamUsdc";
+        readonly type: "uint256";
+    }, {
+        readonly name: "maxTotalUsdc";
+        readonly type: "uint256";
+    }, {
+        readonly name: "maxRatePerSecondUsdc";
+        readonly type: "uint256";
+    }, {
+        readonly name: "maxDurationSeconds";
+        readonly type: "uint64";
+    }, {
+        readonly name: "allowedOperatorsHash";
+        readonly type: "bytes32";
+    }];
+};
+export declare function createSpendMandateTypedData(input: Omit<SignedSpendMandate, "signature">): {
+    domain: {
+        chainId: number;
+        name: "MetrikAgentMandate";
+        version: "1";
+    };
+    primaryType: "SpendMandate";
+    types: {
+        readonly SpendMandate: readonly [{
+            readonly name: "mandateId";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "owner";
+            readonly type: "address";
+        }, {
+            readonly name: "issuedAt";
+            readonly type: "uint64";
+        }, {
+            readonly name: "expiresAt";
+            readonly type: "uint64";
+        }, {
+            readonly name: "maxPerStreamUsdc";
+            readonly type: "uint256";
+        }, {
+            readonly name: "maxTotalUsdc";
+            readonly type: "uint256";
+        }, {
+            readonly name: "maxRatePerSecondUsdc";
+            readonly type: "uint256";
+        }, {
+            readonly name: "maxDurationSeconds";
+            readonly type: "uint64";
+        }, {
+            readonly name: "allowedOperatorsHash";
+            readonly type: "bytes32";
+        }];
+    };
+    message: {
+        mandateId: `0x${string}`;
+        owner: `0x${string}`;
+        issuedAt: bigint;
+        expiresAt: bigint;
+        maxPerStreamUsdc: bigint;
+        maxTotalUsdc: bigint;
+        maxRatePerSecondUsdc: bigint;
+        maxDurationSeconds: bigint;
+        allowedOperatorsHash: `0x${string}`;
+    };
+};
+export declare function verifySignedMandate(signedMandate: SignedSpendMandate, context: MandateVerificationContext): Promise<MandateDecision>;
+/**
+ * Signature-only authorization for BUYER-RECOVERY actions (close / reclaim).
+ *
+ * Close and reclaim only ever return unspent funds to the buyer or stop further
+ * payment — they never move funds to a seller. Gating them on mandate expiry or
+ * revocation would let a lapsed/revoked mandate strand the buyer's OWN funds in
+ * escrow, defeating the auto-refund guarantee. So these actions verify only that
+ * the mandate is authentically owner-signed (proving buyer intent); they do NOT
+ * check expiry, revocation, or spend caps. Fail-closed on a bad signature.
+ */
+export declare function verifyMandateOwnerSignature(signedMandate: SignedSpendMandate): Promise<MandateDecision>;
+/**
+ * Full mandate authorization check. A mandate must be owner-signed, unrevoked,
+ * and unexpired before the policy engine runs. Fail-closed: any breach denies.
+ */
+export declare function checkMandate(signedMandate: SignedSpendMandate, request: HireRequest, spentSoFarUsdc: bigint, context: MandateVerificationContext): Promise<MandateDecision>;
+/**
+ * Pure policy check over an already-verified mandate.
+ */
+export declare function checkMandatePolicy(mandate: SpendMandate, request: HireRequest, spentSoFarUsdc: bigint, nowSeconds: number): MandateDecision;
+//# sourceMappingURL=mandate.d.ts.map

package/dist/mandates/mandate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate.d.ts","sourceRoot":"","sources":["../../src/mandates/mandate.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAwBxB,eAAO,MAAM,kBAAkB;IAC7B,yCAAyC;;IAEzC,mEAAmE;;IAEnE,+CAA+C;;IAE/C,sCAAsC;;IAEtC,kEAAkE;;IAElE,oCAAoC;;;;;;;;;;;;;;;;EAEpC,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;;;;;QAhBnC,yCAAyC;;QAEzC,mEAAmE;;QAEnE,+CAA+C;;QAE/C,sCAAsC;;QAEtC,kEAAkE;;QAElE,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAapC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,8DAA8D;IAC9D,MAAM,CAAC,EACH,mBAAmB,GACnB,iBAAiB,GACjB,iBAAiB,GACjB,wBAAwB,GACxB,mBAAmB,GACnB,kBAAkB,GAClB,sBAAsB,GACtB,sBAAsB,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;CACtD;AAED,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYxB,CAAC;AAIX,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAcT,KAAK,MAAM,EAAE;;;;;;;;;;EAajD;AAED,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,kBAAkB,EACjC,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,eAAe,CAAC,CA4B1B;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAC/C,aAAa,EAAE,kBAAkB,GAChC,OAAO,CAAC,eAAe,CAAC,CAe1B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,aAAa,EAAE,kBAAkB,EACjC,OAAO,EAAE,WAAW,EACpB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,eAAe,CAAC,CAY1B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,WAAW,EACpB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,GACjB,eAAe,CAyBjB"}

package/dist/mandates/mandate.js

@@ -0,0 +1,172 @@
+import { encodeAbiParameters, getAddress, isAddress, isHex, keccak256, recoverTypedDataAddress, } from "viem";
+import { z } from "zod";
+/**
+ * Spend mandate — the guardrail that lets an AI agent transact autonomously while
+ * its owner stays in control. A signed mandate caps how much, how fast, for how
+ * long, and with whom an agent may open verified payment streams.
+ */
+const addressSchema = z
+    .string()
+    .refine((value) => isAddress(value), "must be an EVM address");
+const bytes32Schema = z
+    .string()
+    .refine((value) => isHex(value, { strict: true }) && value.length === 66, "must be bytes32 hex");
+const signatureSchema = z
+    .string()
+    .refine((value) => isHex(value, { strict: true }) && value.length === 132, "must be a 65-byte signature");
+export const spendMandateSchema = z.object({
+    /** Max deposit for any single stream. */
+    maxPerStreamUsdc: z.bigint().positive(),
+    /** Cumulative cap across all streams opened under this mandate. */
+    maxTotalUsdc: z.bigint().positive(),
+    /** Max ratePerSecond an agent may agree to. */
+    maxRatePerSecondUsdc: z.bigint().positive(),
+    /** Max stream duration in seconds. */
+    maxDurationSeconds: z.number().int().positive(),
+    /** Allowed operator addresses; empty/undefined = any operator. */
+    allowedOperators: z.array(addressSchema).optional(),
+    /** Mandate expiry, unix seconds. */
+    expiresAt: z.number().int().positive(),
+});
+export const signedSpendMandateSchema = z.object({
+    mandateId: bytes32Schema,
+    owner: addressSchema,
+    chainId: z.number().int().positive(),
+    issuedAt: z.number().int().nonnegative(),
+    mandate: spendMandateSchema,
+    signature: signatureSchema,
+});
+export const spendMandateDomain = {
+    name: "MetrikAgentMandate",
+    version: "1",
+};
+export const spendMandateTypedData = {
+    SpendMandate: [
+        { name: "mandateId", type: "bytes32" },
+        { name: "owner", type: "address" },
+        { name: "issuedAt", type: "uint64" },
+        { name: "expiresAt", type: "uint64" },
+        { name: "maxPerStreamUsdc", type: "uint256" },
+        { name: "maxTotalUsdc", type: "uint256" },
+        { name: "maxRatePerSecondUsdc", type: "uint256" },
+        { name: "maxDurationSeconds", type: "uint64" },
+        { name: "allowedOperatorsHash", type: "bytes32" },
+    ],
+};
+const ALLOW = { allowed: true };
+export function createSpendMandateTypedData(input) {
+    const parsed = signedSpendMandateSchema
+        .omit({ signature: true })
+        .parse(input);
+    return {
+        domain: {
+            ...spendMandateDomain,
+            chainId: parsed.chainId,
+        },
+        primaryType: "SpendMandate",
+        types: spendMandateTypedData,
+        message: {
+            mandateId: parsed.mandateId,
+            owner: getAddress(parsed.owner),
+            issuedAt: BigInt(parsed.issuedAt),
+            expiresAt: BigInt(parsed.mandate.expiresAt),
+            maxPerStreamUsdc: parsed.mandate.maxPerStreamUsdc,
+            maxTotalUsdc: parsed.mandate.maxTotalUsdc,
+            maxRatePerSecondUsdc: parsed.mandate.maxRatePerSecondUsdc,
+            maxDurationSeconds: BigInt(parsed.mandate.maxDurationSeconds),
+            allowedOperatorsHash: hashAllowedOperators(parsed.mandate.allowedOperators),
+        },
+    };
+}
+export async function verifySignedMandate(signedMandate, context) {
+    const parsedMandate = signedSpendMandateSchema.parse(signedMandate);
+    const recovered = await recoverTypedDataAddress({
+        ...createSpendMandateTypedData(parsedMandate),
+        signature: parsedMandate.signature,
+    }).catch(() => null);
+    if (recovered === null ||
+        recovered.toLowerCase() !== parsedMandate.owner.toLowerCase()) {
+        return { allowed: false, reason: "invalid-signature" };
+    }
+    if (isRevoked(parsedMandate.mandateId, context.revokedMandateIds)) {
+        return { allowed: false, reason: "mandate-revoked" };
+    }
+    if (context.nowSeconds >= parsedMandate.mandate.expiresAt) {
+        return { allowed: false, reason: "mandate-expired" };
+    }
+    return ALLOW;
+}
+/**
+ * Signature-only authorization for BUYER-RECOVERY actions (close / reclaim).
+ *
+ * Close and reclaim only ever return unspent funds to the buyer or stop further
+ * payment — they never move funds to a seller. Gating them on mandate expiry or
+ * revocation would let a lapsed/revoked mandate strand the buyer's OWN funds in
+ * escrow, defeating the auto-refund guarantee. So these actions verify only that
+ * the mandate is authentically owner-signed (proving buyer intent); they do NOT
+ * check expiry, revocation, or spend caps. Fail-closed on a bad signature.
+ */
+export async function verifyMandateOwnerSignature(signedMandate) {
+    const parsed = signedSpendMandateSchema.parse(signedMandate);
+    const recovered = await recoverTypedDataAddress({
+        ...createSpendMandateTypedData(parsed),
+        signature: parsed.signature,
+    }).catch(() => null);
+    if (recovered === null ||
+        recovered.toLowerCase() !== parsed.owner.toLowerCase()) {
+        return { allowed: false, reason: "invalid-signature" };
+    }
+    return ALLOW;
+}
+/**
+ * Full mandate authorization check. A mandate must be owner-signed, unrevoked,
+ * and unexpired before the policy engine runs. Fail-closed: any breach denies.
+ */
+export async function checkMandate(signedMandate, request, spentSoFarUsdc, context) {
+    const signatureDecision = await verifySignedMandate(signedMandate, context);
+    if (!signatureDecision.allowed) {
+        return signatureDecision;
+    }
+    return checkMandatePolicy(signedMandate.mandate, request, spentSoFarUsdc, context.nowSeconds);
+}
+/**
+ * Pure policy check over an already-verified mandate.
+ */
+export function checkMandatePolicy(mandate, request, spentSoFarUsdc, nowSeconds) {
+    if (nowSeconds >= mandate.expiresAt)
+        return { allowed: false, reason: "mandate-expired" };
+    if (request.budgetUsdc > mandate.maxPerStreamUsdc) {
+        return { allowed: false, reason: "exceeds-per-stream-cap" };
+    }
+    if (spentSoFarUsdc + request.budgetUsdc > mandate.maxTotalUsdc) {
+        return { allowed: false, reason: "exceeds-total-cap" };
+    }
+    if (request.ratePerSecondUsdc > mandate.maxRatePerSecondUsdc) {
+        return { allowed: false, reason: "exceeds-rate-cap" };
+    }
+    if (request.maxDurationSeconds > mandate.maxDurationSeconds) {
+        return { allowed: false, reason: "exceeds-duration-cap" };
+    }
+    if (mandate.allowedOperators &&
+        mandate.allowedOperators.length > 0 &&
+        !mandate.allowedOperators.some((operator) => operator.toLowerCase() === request.operator.toLowerCase())) {
+        return { allowed: false, reason: "operator-not-allowed" };
+    }
+    return ALLOW;
+}
+function hashAllowedOperators(operators) {
+    const normalized = (operators ?? []).map((operator) => getAddress(operator));
+    return keccak256(encodeAbiParameters([{ type: "address[]" }], [normalized]));
+}
+function isRevoked(mandateId, revokedMandateIds) {
+    if (revokedMandateIds === undefined) {
+        return false;
+    }
+    for (const revokedMandateId of revokedMandateIds) {
+        if (revokedMandateId.toLowerCase() === mandateId.toLowerCase()) {
+            return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=mandate.js.map

package/dist/mandates/mandate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate.js","sourceRoot":"","sources":["../../src/mandates/mandate.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,SAAS,EACT,KAAK,EACL,SAAS,EACT,uBAAuB,GACxB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AAEH,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACjE,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAChE,qBAAqB,CACtB,CAAC;AACJ,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,EAAE;KACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EACjE,6BAA6B,CAC9B,CAAC;AAEJ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,yCAAyC;IACzC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,mEAAmE;IACnE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,+CAA+C;IAC/C,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,sCAAsC;IACtC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/C,kEAAkE;IAClE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IACnD,oCAAoC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,SAAS,EAAE,aAAa;IACxB,KAAK,EAAE,aAAa;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,OAAO,EAAE,kBAAkB;IAC3B,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AA8BH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,oBAAoB;IAC1B,OAAO,EAAE,GAAG;CACJ,CAAC;AAEX,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,YAAY,EAAE;QACZ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE;QACpC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;QACrC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC7C,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE;QACzC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE;QACjD,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9C,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE;KAClD;CACO,CAAC;AAEX,MAAM,KAAK,GAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAEjD,MAAM,UAAU,2BAA2B,CACzC,KAA4C;IAE5C,MAAM,MAAM,GAAG,wBAAwB;SACpC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SACzB,KAAK,CAAC,KAAK,CAAC,CAAC;IAEhB,OAAO;QACL,MAAM,EAAE;YACN,GAAG,kBAAkB;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB;QACD,WAAW,EAAE,cAAuB;QACpC,KAAK,EAAE,qBAAqB;QAC5B,OAAO,EAAE;YACP,SAAS,EAAE,MAAM,CAAC,SAA0B;YAC5C,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YACjC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;YAC3C,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB;YACjD,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY;YACzC,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC,oBAAoB;YACzD,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAC7D,oBAAoB,EAAE,oBAAoB,CACxC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAChC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,aAAiC,EACjC,OAAmC;IAEnC,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC;QAC9C,GAAG,2BAA2B,CAAC,aAAa,CAAC;QAC7C,SAAS,EAAE,aAAa,CAAC,SAA0B;KACpD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAErB,IACE,SAAS,KAAK,IAAI;QAClB,SAAS,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,EAC7D,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IAED,IACE,SAAS,CACP,aAAa,CAAC,SAA0B,EACxC,OAAO,CAAC,iBAAiB,CAC1B,EACD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,aAAiC;IAEjC,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC;QAC9C,GAAG,2BAA2B,CAAC,MAAM,CAAC;QACtC,SAAS,EAAE,MAAM,CAAC,SAA0B;KAC7C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAErB,IACE,SAAS,KAAK,IAAI;QAClB,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EACtD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,aAAiC,EACjC,OAAoB,EACpB,cAAsB,EACtB,OAAmC;IAEnC,MAAM,iBAAiB,GAAG,MAAM,mBAAmB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC5E,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,OAAO,kBAAkB,CACvB,aAAa,CAAC,OAAO,EACrB,OAAO,EACP,cAAc,EACd,OAAO,CAAC,UAAU,CACnB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAqB,EACrB,OAAoB,EACpB,cAAsB,EACtB,UAAkB;IAElB,IAAI,UAAU,IAAI,OAAO,CAAC,SAAS;QACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvD,IAAI,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,cAAc,GAAG,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC5D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC5D,CAAC;IACD,IACE,OAAO,CAAC,gBAAgB;QACxB,OAAO,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QACnC,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAC5B,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CACxE,EACD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAAwC;IAExC,MAAM,UAAU,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7E,OAAO,SAAS,CAAC,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,SAAS,CAChB,SAAwB,EACxB,iBAAsD;IAEtD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;QACjD,IAAI,gBAAgB,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/mcp/http-server.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=http-server.d.ts.map

package/dist/mcp/http-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../../src/mcp/http-server.ts"],"names":[],"mappings":""}

package/dist/mcp/http-server.js

@@ -0,0 +1,32 @@
+import { startHostedMcpHttpServerFromEnv } from "./http.js";
+/**
+ * Runnable entrypoint for the hosted, multi-tenant MCP server over Streamable
+ * HTTP. Reads all configuration from the environment (see
+ * {@link parseHostedMcpServerConfig}) and refuses to start when no tenant
+ * tokens are configured (fail-closed).
+ *
+ * Start with: `pnpm mcp:http` (or `node dist/mcp/http-server.js`).
+ */
+async function main() {
+    const server = await startHostedMcpHttpServerFromEnv();
+    const path = process.env.METRIK_MCP_PATH ?? "/mcp";
+    const host = process.env.METRIK_MCP_HOST ?? "0.0.0.0";
+    // Config only — never log tokens or wallet secrets.
+    console.error(`[metrik-agent-mcp-http] listening on http://${host}:${server.boundPort}${path}`);
+    const shutdown = (signal) => {
+        console.error(`[metrik-agent-mcp-http] ${signal} received — shutting down`);
+        server
+            .close()
+            .then(() => process.exit(0))
+            .catch(() => process.exit(1));
+    };
+    process.on("SIGINT", () => shutdown("SIGINT"));
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+}
+main().catch((error) => {
+    console.error(error instanceof Error
+        ? error.message
+        : "failed to start hosted MCP server");
+    process.exit(1);
+});
+//# sourceMappingURL=http-server.js.map

package/dist/mcp/http-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.js","sourceRoot":"","sources":["../../src/mcp/http-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,WAAW,CAAC;AAE5D;;;;;;;GAOG;AACH,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,MAAM,+BAA+B,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;IACtD,oDAAoD;IACpD,OAAO,CAAC,KAAK,CACX,+CAA+C,IAAI,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,EAAE,CACjF,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,OAAO,CAAC,KAAK,CAAC,2BAA2B,MAAM,2BAA2B,CAAC,CAAC;QAC5E,MAAM;aACH,KAAK,EAAE;aACP,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAC3B,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CACX,KAAK,YAAY,KAAK;QACpB,CAAC,CAAC,KAAK,CAAC,OAAO;QACf,CAAC,CAAC,mCAAmC,CACxC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/mcp/http.d.ts

@@ -0,0 +1,114 @@
+import { type Server } from "node:http";
+import { type VerifiedStreamMcpServerOptions } from "./server.js";
+/**
+ * A single authenticated tenant: a bearer token plus the wallet/mandate-scoped
+ * MCP server options used to build that tenant's server instances.
+ */
+export interface HostedMcpTenant {
+    /** Stable, human-readable tenant identifier (used only for routing/logging). */
+    readonly id: string;
+    /** The tenant's secret bearer token. Never logged. */
+    readonly token: string;
+    /**
+     * The tenant's isolated MCP server options (its own agent client + registry).
+     * A fresh `McpServer` is built from these for each of the tenant's sessions.
+     */
+    readonly options: VerifiedStreamMcpServerOptions;
+}
+/** Resolves a presented bearer token to a tenant, or `null` when invalid. */
+export interface TenantResolver {
+    authenticate(token: string): HostedMcpTenant | null;
+}
+/**
+ * Constant-time, env-backed tenant resolver.
+ *
+ * Tokens are pre-hashed with SHA-256 (fixed 32-byte width) so every comparison
+ * uses `timingSafeEqual` on equal-length buffers, and the loop always visits
+ * every tenant with no early exit — neither the presented token's length nor
+ * which tenant matched is observable via timing.
+ */
+export declare class StaticTenantResolver implements TenantResolver {
+    private readonly entries;
+    constructor(tenants: readonly HostedMcpTenant[]);
+    authenticate(token: string): HostedMcpTenant | null;
+}
+export interface HostedMcpHttpServerOptions {
+    readonly resolver: TenantResolver;
+    /** HTTP path the MCP endpoint is served on. Default `/mcp`. */
+    readonly path?: string;
+    /**
+     * Allowed CORS origins. `["*"]` allows any origin. When omitted, no
+     * cross-origin `Access-Control-Allow-Origin` header is emitted (same-origin
+     * / non-browser clients only).
+     */
+    readonly allowedOrigins?: readonly string[];
+    /** Session id generator. Default: cryptographically-random UUID v4. */
+    readonly generateSessionId?: () => string;
+}
+export interface HostedMcpHttpServer {
+    readonly httpServer: Server;
+    /** Bind and start listening. Resolves with the actual bound address. */
+    listen(port: number, host?: string): Promise<{
+        port: number;
+        host: string;
+    }>;
+    /** Stop accepting requests and tear down all live sessions. */
+    close(): Promise<void>;
+}
+/**
+ * Creates (but does not start) a hosted multi-tenant MCP HTTP server.
+ *
+ * Use {@link HostedMcpHttpServer.listen} to bind it. The returned server is
+ * suitable for tests (bind to port 0 for an ephemeral port) and for
+ * deployment (bind to `0.0.0.0`/`PORT`).
+ */
+export declare function createHostedMcpHttpServer(options: HostedMcpHttpServerOptions): HostedMcpHttpServer;
+/**
+ * Per-tenant configuration parsed from the hosted server environment.
+ *
+ * Each tenant carries the environment slice (`METRIK_AGENT_*`, wallet vars,
+ * optional Reclaim vars) that builds its OWN wallet-backed agent client, so
+ * tenants are fully fund-isolated from one another.
+ */
+export interface HostedMcpTenantConfig {
+    readonly id: string;
+    readonly token: string;
+    readonly env: Readonly<Record<string, string>>;
+}
+export interface HostedMcpServerConfig {
+    readonly host: string;
+    readonly port: number;
+    readonly path: string;
+    readonly allowedOrigins: readonly string[];
+    readonly tenants: readonly HostedMcpTenantConfig[];
+}
+/**
+ * Parses the hosted MCP server configuration from environment variables.
+ *
+ * Env contract:
+ * - `PORT` / `METRIK_MCP_PORT` — listen port (default 8080).
+ * - `METRIK_MCP_HOST` — bind host (default `0.0.0.0`).
+ * - `METRIK_MCP_PATH` — MCP endpoint path (default `/mcp`).
+ * - `METRIK_MCP_ALLOWED_ORIGINS` — comma-separated CORS origins, or `*`.
+ * - `METRIK_MCP_TENANTS` — JSON array of
+ *   `{ "id": string, "token": string, "env"?: Record<string,string> }`.
+ *   Each tenant's `env` is layered over the process environment and used to
+ *   build that tenant's isolated, wallet-backed agent client.
+ *
+ * Throws (fail-closed) when no tenants/tokens are configured.
+ */
+export declare function parseHostedMcpServerConfig(env?: NodeJS.ProcessEnv): HostedMcpServerConfig;
+/**
+ * Builds fully-isolated {@link HostedMcpTenant}s from parsed config, resolving
+ * each tenant's wallet-backed agent client from its own environment slice.
+ */
+export declare function createHostedMcpTenants(config: HostedMcpServerConfig, baseEnv?: NodeJS.ProcessEnv): Promise<HostedMcpTenant[]>;
+/**
+ * Builds and starts a hosted MCP HTTP server entirely from the environment.
+ *
+ * Fail-closed: throws before binding if no tenants/tokens are configured.
+ */
+export declare function startHostedMcpHttpServerFromEnv(env?: NodeJS.ProcessEnv): Promise<HostedMcpHttpServer & {
+    readonly boundPort: number;
+}>;
+//# sourceMappingURL=http.d.ts.map

package/dist/mcp/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/mcp/http.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,MAAM,EAEZ,MAAM,WAAW,CAAC;AAOnB,OAAO,EAGL,KAAK,8BAA8B,EAEpC,MAAM,aAAa,CAAC;AA4BrB;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC;CAClD;AAED,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAAC;CACrD;AAMD;;;;;;;GAOG;AACH,qBAAa,oBAAqB,YAAW,cAAc;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAGpB;gBAEQ,OAAO,EAAE,SAAS,eAAe,EAAE;IA+B/C,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;CAYpD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,uEAAuE;IACvE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,MAAM,CAAC;CAC3C;AAQD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,+DAA+D;IAC/D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,0BAA0B,GAClC,mBAAmB,CAkDrB;AA6PD;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACpD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,qBAAqB,CAoEvB;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,qBAAqB,EAC7B,OAAO,GAAE,MAAM,CAAC,UAAwB,GACvC,OAAO,CAAC,eAAe,EAAE,CAAC,CAc5B;AAED;;;;GAIG;AACH,wBAAsB,+BAA+B,CACnD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,mBAAmB,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAW/D"}