@absol-labs/agent 0.5.0 → 0.7.0

package/README.md

@@ -13,7 +13,7 @@ to the on-chain metered escrow. This layer wraps that client in the guardrails a
 integration surfaces an agent actually needs: owner-signed spend mandates that gate every
 fund move, an x402 facilitator that turns a `402` into a verified stream, an MCP server
 that exposes hire/monitor/reclaim as agent tools, adapters for the major agent frameworks,
-Reclaim consumer zkTLS for buyer-side delivery proofs, and non-custodial Coinbase CDP
+Reclaim consumer zkTLS for buyer-side delivery proofs, and non-custodial Coinbase CDP/Privy
 wallets so Metrik never holds a key.
 
 Live on Base Sepolia (chainId `84532`), testnet only. App: [app.metrik.live](https://app.metrik.live).
@@ -27,7 +27,9 @@ pnpm add @absol-labs/agent
 
 The package is **ESM-only** (`"type": "module"`) and targets **Node `>=20 <21`**. It ships
 `@absol-labs/sdk`, `@absol-labs/shared`, `viem`, `zod`, the Reclaim zkTLS SDKs, the
-Coinbase CDP SDK, and the MCP SDK as dependencies. The agent-framework packages
+Coinbase CDP SDK, and the MCP SDK as dependencies. The autonomous wallet path also
+installs a prebuilt native OS-keyring binding; it is
+loaded only when that secure-store path is used. The agent-framework packages
 (`@coinbase/agentkit`, `@elizaos/core`, `@langchain/core`) are **optional peer
 dependencies** — install only the one you use.
 
@@ -58,9 +60,23 @@ response it received, bound to its stream context. This is the L2 delivery signa
 Metrik's verification stack — dispute evidence that complements, and never replaces, the
 oracle's L1 observations.
 
-**Non-custodial wallets**: `resolveAgentWallet()` accepts either an injected viem signer or
-a provisioned Coinbase CDP Server Wallet v2 account. CDP mode uses Coinbase-managed remote
-signing, so no private key is ever read or exported.
+**Non-custodial wallets**: `resolveAgentWallet()` accepts an injected viem signer, a
+provisioned Coinbase CDP Server Wallet v2 account, or an authenticated Privy embedded EOA.
+CDP mode uses Coinbase-managed remote signing, while Privy mode adapts the host application's
+authenticated EIP-1193 provider; neither path reads or exports a private key. See
+[`docs/privy-embedded-wallet.md`](./docs/privy-embedded-wallet.md). The Privy adapter does
+not itself authenticate users. The optional scoped-session broker performs unattended
+signing behind a user-approved Privy policy and signed Metrik mandate; its first write can
+request Privy gas sponsorship.
+
+For a fresh autonomous agent, the default headless path is
+`provisionMetrikAutonomousWallet()`: it generates a P-256 authorization key locally,
+stores it in the host OS credential manager, and asks the public Metrik broker to create a
+policy-bound Privy EOA owned by that key. No Privy secret, OTP, browser, clipboard, or
+plaintext key file is required, and every later write is signed locally over the exact
+prepared Privy request. See
+[`docs/autonomous-privy-wallet.md`](./docs/autonomous-privy-wallet.md). The authenticated
+user-owned Privy flow remains available as an optional recoverable mode.
 
 ## Usage
 
@@ -271,6 +287,7 @@ await server.listen(8787);
 
 Or run the ready-made standalone server from env (`METRIK_GATEWAY_ESCROW_ADDRESS`,
 `METRIK_GATEWAY_RPC_URL`, `METRIK_GATEWAY_SERVICE_REF`, `METRIK_GATEWAY_UPSTREAM_URL`,
+optional comma-separated `METRIK_GATEWAY_SERVICE_REFS` migration aliases,
 optional `METRIK_GATEWAY_CHAIN_ID` / `METRIK_GATEWAY_PORT` / `METRIK_GATEWAY_HOST`):
 
 ```bash
@@ -289,7 +306,11 @@ directly:
 
 ```ts
 import { privateKeyToAccount } from "viem/accounts";
-import { createSdkInvokeStreamReader, invoke } from "@absol-labs/agent";
+import {
+  createSdkInvokeStreamReader,
+  discoverServices,
+  invoke,
+} from "@absol-labs/agent";
 
 const buyer = privateKeyToAccount(
   process.env.METRIK_AGENT_PRIVATE_KEY as `0x${string}`,
@@ -298,6 +319,11 @@ const streamReader = createSdkInvokeStreamReader({
   escrowAddress: "0x...",
   rpcUrl: process.env.METRIK_AGENT_RPC_URL!,
 });
+const { serviceRef } = await streamReader.getStreamV2(streamId);
+const listing = (await discoverServices()).find(
+  (service) => service.serviceRef.toLowerCase() === serviceRef.toLowerCase(),
+);
+if (!listing) throw new Error("verified signed listing unavailable");
 
 const { response } = await invoke(
   streamId, // from hireVerifiedService()
@@ -310,7 +336,7 @@ const { response } = await invoke(
     streamReader,
     buyer,
     domain: { chainId: 84532, verifyingContract: "0x..." }, // same escrow as above
-    serviceBaseUrl: "https://gateway.example.com", // the seller's gateway, not the real upstream
+    listing, // verified signature + signed callerAuth.accessUrl; no manual credential/URL
   },
 );
 
@@ -323,30 +349,43 @@ capability scoped to exactly that one `method`+`path` (short expiry, single-use
 and attaches it as the `x-metrik-capability` header. Use `capabilityFor()` directly if
 you only need the signed capability without the SDK also performing the `fetch`.
 
-For a T2 (consumer-zkTLS) service, `invokeWithT2DeliveryProof()` attaches the SAME
+For a public T2 (consumer-zkTLS) service, `invokeWithT2DeliveryProof()` attaches the SAME
 capability to the exact request the buyer's Reclaim attestor proves, so the
 capability-authorized call IS the delivery evidence - usage and proof become one action:
 
 ```ts
-import { invokeWithT2DeliveryProof } from "@absol-labs/agent";
+import { discoverServices, invokeWithT2DeliveryProof } from "@absol-labs/agent";
+
+const { serviceRef: t2ServiceRef } = await streamReader.getStreamV2(streamId);
+const publicT2Listing = (await discoverServices()).find(
+  (service) => service.serviceRef.toLowerCase() === t2ServiceRef.toLowerCase(),
+);
+if (!publicT2Listing || publicT2Listing.access !== "public") {
+  throw new Error("verified public T2 listing unavailable");
+}
 
 const { t2 } = await invokeWithT2DeliveryProof(streamId, {
   streamReader,
   buyer,
   domain: { chainId: 84532, verifyingContract: "0x..." },
   request: {
-    url: "https://gateway.example.com/v1/infer",
+    url: "https://public-t2-service.example.com/v1/infer",
     method: "POST",
     responseMatches: [{ type: "regex", value: '"result":"(?<result>.*)"' }],
     nonceInjection: { in: "query", name: "nonce" },
   },
   intervalIndex: 0n,
   nonce: deliveryNonce, // from GET /delivery/nonce
+  listing: publicT2Listing,
 });
 
 // t2.body is the exact POST /delivery/proof request payload.
 ```
 
+Gated consumer-attested invocation fails closed for now: proof-target pinning does
+not yet distinguish the public oracle origin from a signed access gateway. Gated
+services use output-probe verification until that protocol support exists.
+
 ## Consumer zkTLS (delivery proofs)
 
 `ReclaimConsumerProofService` (and `createReclaimConsumerProofServiceFromEnv`) generate a

package/dist/discovery/registry.d.ts

@@ -1,3 +1,4 @@
+import { type SignedServiceBinding, type SignedServiceDescriptor } from "@absol-labs/shared";
 /**
  * Service discovery for the Metrik verified-service marketplace.
  *
@@ -26,9 +27,14 @@ export interface ServiceListing {
     readonly serviceRef: `0x${string}`;
     readonly operator: `0x${string}`;
     readonly publicUrl: string;
+    readonly access: "public" | "gated";
+    /** Signed invocation origin; gated listings fail closed if this is absent. */
+    readonly accessUrl: string;
+    /** The schema-validated and cryptographically verified signed record. */
+    readonly signed: SignedServiceBinding | SignedServiceDescriptor;
     /** Unsigned informational category from the listings row (may be absent). */
     readonly category: string | null;
-    /** Optional signed operator-supplied target metadata (e.g. resolver hints). */
+    /** Optional unsigned operator-supplied resolver hints; never used for invocation. */
     readonly targetMetadata?: Record<string, string>;
 }
 export interface DiscoverServicesOptions {
@@ -63,12 +69,14 @@ export interface DiscoverServicesOptions {
  */
 export declare const DEFAULT_METRIK_REGISTRY_URL = "https://pzvnacjolaipeobmptsb.supabase.co/rest/v1/listings?select=service_ref,operator,public_url,category,signed_binding&order=created_at.desc";
 /**
- * `serviceRef` of the built-in verified demo listing. Kept as a named constant so
+ * `serviceRef` of the built-in verified live-data listing. Kept as a named constant so
  * callers can recognise (and dedupe against) the seeded row.
  */
-export declare const DEMO_SEED_SERVICE_REF: "0x84ef78c5ac9fc084422dc2d3e1ef19623bb05d0d81c097d4da49f9c47ec3ed12";
+export declare const LIVE_DATA_SEED_SERVICE_REF: "0x79e57358e98a35273c1cd9d5f1bf9ae1e0af8705db432eb706459dc4f88b6fe0";
+/** @deprecated Use {@link LIVE_DATA_SEED_SERVICE_REF}. */
+export declare const DEMO_SEED_SERVICE_REF: "0x79e57358e98a35273c1cd9d5f1bf9ae1e0af8705db432eb706459dc4f88b6fe0";
 /**
- * A REAL, operator-signed demo listing row embedded so `discoverServices()` returns
+ * A real, operator-signed live-data listing row embedded so `discoverServices()` returns
  * something hireable with ZERO configuration (no Supabase anon key, no registry URL).
  *
  * This is PUBLIC data — a signed {@link https://github.com/Absol-Labs | Metrik}
@@ -79,20 +87,257 @@ export declare const DEMO_SEED_SERVICE_REF: "0x84ef78c5ac9fc084422dc2d3e1ef19623
  * with any field here and the seed silently drops itself, identically to a bad
  * registry row. The `category` column is unsigned informational metadata only.
  */
+export declare const LIVE_DATA_SEED_LISTING: {
+    readonly service_ref: "0x79e57358e98a35273c1cd9d5f1bf9ae1e0af8705db432eb706459dc4f88b6fe0";
+    readonly operator: "0xB3e162711920dFD8933609019Dc35C73cC1a09F0";
+    readonly public_url: "https://livedata.137.23.50.249.sslip.io";
+    readonly category: "live-data";
+    readonly signed_binding: {
+        readonly serviceRef: "0x79e57358e98a35273c1cd9d5f1bf9ae1e0af8705db432eb706459dc4f88b6fe0";
+        readonly descriptor: {
+            readonly version: 3;
+            readonly operator: "0xB3e162711920dFD8933609019Dc35C73cC1a09F0";
+            readonly publicUrl: "https://livedata.137.23.50.249.sslip.io";
+            readonly issuedAt: 1787772057;
+            readonly interface: {
+                readonly baseUrl: "https://livedata.137.23.50.249.sslip.io";
+                readonly healthPath: "/health";
+                readonly endpoints: readonly [{
+                    readonly name: "health";
+                    readonly path: "/health";
+                    readonly method: "GET";
+                    readonly description: "Liveness probe.";
+                }, {
+                    readonly name: "readiness";
+                    readonly path: "/readiness";
+                    readonly method: "GET";
+                    readonly description: "Non-value dependency readiness backed by the same real BTC cache policy.";
+                }, {
+                    readonly name: "price";
+                    readonly path: "/price";
+                    readonly method: "GET";
+                    readonly description: "Real live crypto spot price (?symbol=BTC|ETH|SOL) from CoinGecko's public API.";
+                }];
+                readonly authModel: "caller-auth";
+                readonly example: {
+                    readonly endpoint: "price";
+                    readonly request: {
+                        readonly symbol: "BTC";
+                    };
+                    readonly response: {
+                        readonly symbol: "BTC";
+                        readonly source: "coingecko-public-api";
+                    };
+                    readonly description: "Real, nondeterministic live price — no re-execution guarantee.";
+                };
+                readonly expectedStatuses: readonly [200];
+            };
+            readonly verification: {
+                readonly canaries: readonly [{
+                    readonly path: "/readiness";
+                    readonly method: "GET";
+                    readonly matcher: {
+                        readonly type: "json-field-equals";
+                        readonly field: "source";
+                        readonly expected: "coingecko-public-api";
+                    };
+                    readonly nonce: {
+                        readonly inject: {
+                            readonly in: "query";
+                            readonly name: "nonce";
+                        };
+                        readonly echo: {
+                            readonly from: "json-path";
+                            readonly path: "nonce";
+                        };
+                    };
+                }, {
+                    readonly path: "/canary";
+                    readonly method: "GET";
+                    readonly matcher: {
+                        readonly type: "includes";
+                        readonly expected: "metrik-canary:live-data:";
+                    };
+                    readonly nonce: {
+                        readonly inject: {
+                            readonly in: "query";
+                            readonly name: "nonce";
+                        };
+                        readonly echo: {
+                            readonly from: "json-path";
+                            readonly path: "nonce";
+                        };
+                    };
+                }];
+                readonly schema: {
+                    readonly path: "/readiness?nonce=metrik-schema";
+                    readonly required: readonly [{
+                        readonly pointer: "ready";
+                        readonly type: "boolean";
+                    }, {
+                        readonly pointer: "source";
+                        readonly type: "string";
+                        readonly nonEmpty: true;
+                    }, {
+                        readonly pointer: "fetchedAt";
+                        readonly type: "string";
+                        readonly nonEmpty: true;
+                    }, {
+                        readonly pointer: "priceAgeMs";
+                        readonly type: "number";
+                    }, {
+                        readonly pointer: "freshness";
+                        readonly type: "string";
+                        readonly nonEmpty: true;
+                    }];
+                };
+                readonly sla: {
+                    readonly maxLatencyMs: 5000;
+                    readonly freshnessSeconds: 60;
+                };
+            };
+            readonly commercial: {
+                readonly minRatePerSecond: "100";
+                readonly maxRatePerSecond: "10000";
+                readonly currency: "USDC";
+                readonly slaDescription: "Failed or unproven intervals do not advance verified cumulative entitlement; the stream remains active until buyer close or expiry.";
+                readonly refundPolicy: "The buyer reclaims unspent escrow using the latest checkpoint after close/expiry, or the unverified escape path after its grace window.";
+            };
+            readonly access: "gated";
+            readonly callerAuth: {
+                readonly mechanism: "on-chain";
+                readonly role: "buyer";
+                readonly accessUrl: "https://gateway.137.23.50.249.sslip.io";
+            };
+        };
+        readonly signature: "0x2f4d2784eb40b1542517bc19f12534fb2e97da4ade5a3ff56193fcfb97fbef921309f77af3445e336cb07a4379011b080bba700033a098f672b0b2f096197f161b";
+    };
+};
+/** @deprecated Use {@link LIVE_DATA_SEED_LISTING}. */
 export declare const DEMO_SEED_LISTING: {
-    readonly service_ref: "0x84ef78c5ac9fc084422dc2d3e1ef19623bb05d0d81c097d4da49f9c47ec3ed12";
-    readonly operator: "0x28ea4eF61ac4cca3ed6a64dBb5b2D4be1aDC9814";
-    readonly public_url: "https://metrik-demo-service.vercel.app";
-    readonly category: "demo";
+    readonly service_ref: "0x79e57358e98a35273c1cd9d5f1bf9ae1e0af8705db432eb706459dc4f88b6fe0";
+    readonly operator: "0xB3e162711920dFD8933609019Dc35C73cC1a09F0";
+    readonly public_url: "https://livedata.137.23.50.249.sslip.io";
+    readonly category: "live-data";
     readonly signed_binding: {
-        readonly serviceRef: "0x84ef78c5ac9fc084422dc2d3e1ef19623bb05d0d81c097d4da49f9c47ec3ed12";
-        readonly binding: {
-            readonly version: 2;
-            readonly operator: "0x28ea4eF61ac4cca3ed6a64dBb5b2D4be1aDC9814";
-            readonly publicUrl: "https://metrik-demo-service.vercel.app";
-            readonly issuedAt: 1787500000;
+        readonly serviceRef: "0x79e57358e98a35273c1cd9d5f1bf9ae1e0af8705db432eb706459dc4f88b6fe0";
+        readonly descriptor: {
+            readonly version: 3;
+            readonly operator: "0xB3e162711920dFD8933609019Dc35C73cC1a09F0";
+            readonly publicUrl: "https://livedata.137.23.50.249.sslip.io";
+            readonly issuedAt: 1787772057;
+            readonly interface: {
+                readonly baseUrl: "https://livedata.137.23.50.249.sslip.io";
+                readonly healthPath: "/health";
+                readonly endpoints: readonly [{
+                    readonly name: "health";
+                    readonly path: "/health";
+                    readonly method: "GET";
+                    readonly description: "Liveness probe.";
+                }, {
+                    readonly name: "readiness";
+                    readonly path: "/readiness";
+                    readonly method: "GET";
+                    readonly description: "Non-value dependency readiness backed by the same real BTC cache policy.";
+                }, {
+                    readonly name: "price";
+                    readonly path: "/price";
+                    readonly method: "GET";
+                    readonly description: "Real live crypto spot price (?symbol=BTC|ETH|SOL) from CoinGecko's public API.";
+                }];
+                readonly authModel: "caller-auth";
+                readonly example: {
+                    readonly endpoint: "price";
+                    readonly request: {
+                        readonly symbol: "BTC";
+                    };
+                    readonly response: {
+                        readonly symbol: "BTC";
+                        readonly source: "coingecko-public-api";
+                    };
+                    readonly description: "Real, nondeterministic live price — no re-execution guarantee.";
+                };
+                readonly expectedStatuses: readonly [200];
+            };
+            readonly verification: {
+                readonly canaries: readonly [{
+                    readonly path: "/readiness";
+                    readonly method: "GET";
+                    readonly matcher: {
+                        readonly type: "json-field-equals";
+                        readonly field: "source";
+                        readonly expected: "coingecko-public-api";
+                    };
+                    readonly nonce: {
+                        readonly inject: {
+                            readonly in: "query";
+                            readonly name: "nonce";
+                        };
+                        readonly echo: {
+                            readonly from: "json-path";
+                            readonly path: "nonce";
+                        };
+                    };
+                }, {
+                    readonly path: "/canary";
+                    readonly method: "GET";
+                    readonly matcher: {
+                        readonly type: "includes";
+                        readonly expected: "metrik-canary:live-data:";
+                    };
+                    readonly nonce: {
+                        readonly inject: {
+                            readonly in: "query";
+                            readonly name: "nonce";
+                        };
+                        readonly echo: {
+                            readonly from: "json-path";
+                            readonly path: "nonce";
+                        };
+                    };
+                }];
+                readonly schema: {
+                    readonly path: "/readiness?nonce=metrik-schema";
+                    readonly required: readonly [{
+                        readonly pointer: "ready";
+                        readonly type: "boolean";
+                    }, {
+                        readonly pointer: "source";
+                        readonly type: "string";
+                        readonly nonEmpty: true;
+                    }, {
+                        readonly pointer: "fetchedAt";
+                        readonly type: "string";
+                        readonly nonEmpty: true;
+                    }, {
+                        readonly pointer: "priceAgeMs";
+                        readonly type: "number";
+                    }, {
+                        readonly pointer: "freshness";
+                        readonly type: "string";
+                        readonly nonEmpty: true;
+                    }];
+                };
+                readonly sla: {
+                    readonly maxLatencyMs: 5000;
+                    readonly freshnessSeconds: 60;
+                };
+            };
+            readonly commercial: {
+                readonly minRatePerSecond: "100";
+                readonly maxRatePerSecond: "10000";
+                readonly currency: "USDC";
+                readonly slaDescription: "Failed or unproven intervals do not advance verified cumulative entitlement; the stream remains active until buyer close or expiry.";
+                readonly refundPolicy: "The buyer reclaims unspent escrow using the latest checkpoint after close/expiry, or the unverified escape path after its grace window.";
+            };
+            readonly access: "gated";
+            readonly callerAuth: {
+                readonly mechanism: "on-chain";
+                readonly role: "buyer";
+                readonly accessUrl: "https://gateway.137.23.50.249.sslip.io";
+            };
         };
-        readonly signature: "0x17917e96836a63238d0abe70c8c55081c4d694ad43311cdb3ea91dad349827fa6480657be2362e0b7f0524a0ee4ba0c48068255c3423a965392724874d244cd21b";
+        readonly signature: "0x2f4d2784eb40b1542517bc19f12534fb2e97da4ade5a3ff56193fcfb97fbef921309f77af3445e336cb07a4379011b080bba700033a098f672b0b2f096197f161b";
     };
 };
 /**

package/dist/discovery/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/discovery/registry.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;qEACqE;AACrE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC;4FACwF;IACxF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;wFAIoF;IACpF,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC;uEACmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAC1D;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,mJAC0G,CAAC;AAInJ;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAChC,oEAA6E,CAAC;AAEhF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;CAgBpB,CAAC;AAkCX;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,cAAc,EAAE,CAAC,CA6E3B"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/discovery/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC7B,MAAM,oBAAoB,CAAC;AAI5B;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;qEACqE;AACrE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,GAAG,uBAAuB,CAAC;IAChE,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qFAAqF;IACrF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC;4FACwF;IACxF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;wFAIoF;IACpF,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC;uEACmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;KAAE,CAAC;CAC1D;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,mJAC0G,CAAC;AAInJ;;;GAGG;AACH,eAAO,MAAM,0BAA0B,EACrC,oEAA6E,CAAC;AAChF,0DAA0D;AAC1D,eAAO,MAAM,qBAAqB,sEAA6B,CAAC;AAEhE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0GzB,CAAC;AACX,sDAAsD;AACtD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAyB,CAAC;AA+CxD;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,cAAc,EAAE,CAAC,CA6E3B"}