@arc402/daemon 1.2.0

package/dist/api.js

@@ -0,0 +1,430 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.routeToCapability = routeToCapability;
+exports.createSessionMiddleware = createSessionMiddleware;
+exports.broadcast = broadcast;
+exports.createApiServer = createApiServer;
+/**
+ * arc402-api — public HTTP process (Spec 46 §16 Pattern 1).
+ *
+ * Handles all external HTTPS requests. Has NO access to the machine key.
+ * Routes execution intents to arc402-signer via Unix socket.
+ *
+ * Responsibilities:
+ *   - Session validation middleware
+ *   - Auth endpoints (challenge/session/revoke)
+ *   - SSE event stream
+ *   - Commerce endpoints (proxied to signer for signing)
+ *   - Read-only endpoints (agreements, workroom status)
+ *
+ * The machine key env var is explicitly excluded when this process is
+ * forked by index.ts — see index.ts.
+ */
+const express_1 = __importDefault(require("express"));
+const net = __importStar(require("net"));
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const http = __importStar(require("http"));
+const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
+const config_1 = require("./config");
+const auth_server_1 = require("./auth-server");
+const capabilities_1 = require("./capabilities");
+const signer_1 = require("./signer");
+const endpoint_policy_1 = require("./endpoint-policy");
+const prompt_guard_1 = require("./prompt-guard");
+// ─── Capability routing ───────────────────────────────────────────────────────
+function routeToCapability(method, urlPath) {
+    if (method === "POST" && urlPath === "/hire")
+        return "agreement.propose";
+    if (method === "POST" && urlPath === "/deliver")
+        return "agreement.deliver";
+    if (method === "POST" && urlPath === "/verify")
+        return "agreement.verify";
+    if (method === "POST" && urlPath === "/subscribe")
+        return "subscribe";
+    if (method === "GET" && urlPath === "/agreements")
+        return "agreement.read";
+    if (method === "GET" && urlPath === "/wallet/status")
+        return "wallet.read";
+    if (method === "GET" && urlPath === "/workroom/status")
+        return "workroom.status";
+    if (method === "POST" && urlPath === "/auth/revoke")
+        return "session.revoke:self";
+    if (method === "POST" && urlPath === "/wallet/setGuardian")
+        return "wallet.setGuardian";
+    if (method === "POST" && urlPath === "/wallet/setMachineKey")
+        return "wallet.setMachineKey";
+    if (method === "POST" && urlPath === "/wallet/authorizeMachineKey")
+        return "wallet.authorizeMachineKey";
+    if (method === "POST" && urlPath === "/policy/setSpendLimit")
+        return "policy.setSpendLimit";
+    if (method === "POST" && urlPath === "/daemon/exportKey")
+        return "daemon.exportKey";
+    if (method === "GET" && urlPath === "/daemon/readSecrets")
+        return "daemon.readSecrets";
+    if (method === "POST" && urlPath === "/daemon/shell")
+        return "daemon.shell";
+    if (method === "POST" && urlPath === "/daemon/restart")
+        return "daemon.restart";
+    if (method === "POST" && urlPath === "/daemon/config/write")
+        return "daemon.config.write";
+    if (urlPath.startsWith("/arena/"))
+        return `arena.${urlPath.slice(7)}`;
+    return `${method.toLowerCase()}${urlPath.replace(/\//g, ".")}`;
+}
+// ─── Signer IPC ───────────────────────────────────────────────────────────────
+async function callSigner(request) {
+    return new Promise((resolve, reject) => {
+        const socket = net.createConnection(signer_1.SIGNER_SOCKET_PATH);
+        let buf = "";
+        let settled = false;
+        const timeout = setTimeout(() => {
+            if (!settled) {
+                settled = true;
+                socket.destroy();
+                reject(new Error("signer timeout (10s)"));
+            }
+        }, 10000);
+        socket.once("connect", () => {
+            socket.write(JSON.stringify(request) + "\n");
+        });
+        socket.on("data", (chunk) => {
+            buf += chunk.toString();
+            const newlineIdx = buf.indexOf("\n");
+            if (newlineIdx >= 0 && !settled) {
+                settled = true;
+                clearTimeout(timeout);
+                socket.destroy();
+                const line = buf.slice(0, newlineIdx).trim();
+                try {
+                    resolve(JSON.parse(line));
+                }
+                catch {
+                    reject(new Error("invalid signer response JSON"));
+                }
+            }
+        });
+        socket.on("error", (err) => {
+            if (!settled) {
+                settled = true;
+                clearTimeout(timeout);
+                reject(err);
+            }
+        });
+    });
+}
+// ─── Session middleware ───────────────────────────────────────────────────────
+function createSessionMiddleware(db) {
+    return (req, res, next) => {
+        const authHeader = req.headers["authorization"];
+        const token = authHeader?.replace("Bearer ", "");
+        if (!token) {
+            res.status(401).json({ error: "no_session" });
+            return;
+        }
+        const hash = crypto.createHash("sha256").update(token).digest("hex");
+        const session = db.prepare("SELECT * FROM sessions WHERE token_hash = ? AND expires_at > ? AND revoked = 0").get(hash, Date.now());
+        if (!session && token === readLocalDaemonToken()) {
+            req.session = {
+                id: "local-operator",
+                token_hash: hash,
+                wallet: (0, config_1.loadDaemonConfig)().wallet.contract_address,
+                scope: "operator",
+                expires_at: Number.MAX_SAFE_INTEGER,
+                issued_at: Date.now(),
+                revoked: 0,
+            };
+            next();
+            return;
+        }
+        if (!session) {
+            res.status(401).json({ error: "invalid_session" });
+            return;
+        }
+        const capability = routeToCapability(req.method, req.path);
+        if (capabilities_1.SESSION_FORBIDDEN.has(capability)) {
+            res.status(403).json({ error: "AUTHZ_DENIED", capability });
+            return;
+        }
+        if (!(0, capabilities_1.isCapabilityAllowed)(capability)) {
+            res.status(403).json({ error: "AUTHZ_DENIED", capability });
+            return;
+        }
+        req.session = session;
+        next();
+    };
+}
+const DAEMON_TOKEN_PATH = path.join(os.homedir(), ".arc402", "daemon.token");
+function readLocalDaemonToken() {
+    try {
+        const token = fs.readFileSync(DAEMON_TOKEN_PATH, "utf-8").trim();
+        return token.length > 0 ? token : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function ensureLocalDaemonToken(db, wallet) {
+    const existing = readLocalDaemonToken();
+    const now = Date.now();
+    if (existing) {
+        const hash = crypto.createHash("sha256").update(existing).digest("hex");
+        const row = db
+            .prepare("SELECT id FROM sessions WHERE token_hash = ? AND revoked = 0")
+            .get(hash);
+        if (row?.id)
+            return existing;
+    }
+    const token = crypto.randomBytes(32).toString("hex");
+    const tokenHash = crypto.createHash("sha256").update(token).digest("hex");
+    const sessionId = crypto.randomBytes(16).toString("hex");
+    const expiresAt = now + 365 * 24 * 60 * 60 * 1000; // 1 year local daemon token
+    db.prepare(`INSERT OR REPLACE INTO sessions (id, token_hash, wallet, scope, expires_at, issued_at, revoked)
+     VALUES (?, ?, ?, ?, ?, ?, 0)`).run(sessionId, tokenHash, wallet, "local", expiresAt, now);
+    fs.mkdirSync(path.dirname(DAEMON_TOKEN_PATH), { recursive: true });
+    fs.writeFileSync(DAEMON_TOKEN_PATH, `${token}\n`, { mode: 0o600 });
+    return token;
+}
+// ─── SSE event stream ─────────────────────────────────────────────────────────
+const sseClients = new Set();
+function sseHandler(req, res) {
+    res.setHeader("Content-Type", "text/event-stream");
+    res.setHeader("Cache-Control", "no-cache");
+    res.setHeader("Connection", "keep-alive");
+    res.flushHeaders();
+    sseClients.add(res);
+    const keepalive = setInterval(() => {
+        res.write(": keepalive\n\n");
+    }, 30000);
+    req.on("close", () => {
+        clearInterval(keepalive);
+        sseClients.delete(res);
+    });
+}
+function broadcast(event, data) {
+    const payload = `event: ${event}\ndata: ${JSON.stringify(data)}\n\n`;
+    for (const client of sseClients) {
+        client.write(payload);
+    }
+}
+// ─── Commerce handler helper ──────────────────────────────────────────────────
+function makeCommerceHandler(category, policyEngineAddress, rpcUrl) {
+    return async (req, res) => {
+        const session = req.session;
+        const { target, value, data } = req.body;
+        if (!target || !data) {
+            res.status(400).json({ error: "target and data required" });
+            return;
+        }
+        const signReq = {
+            requestId: crypto.randomBytes(16).toString("hex"),
+            sessionId: session.id,
+            wallet: session.wallet,
+            target,
+            value: value ?? "0",
+            data,
+            category,
+            policyEngineAddress,
+            rpcUrl,
+        };
+        try {
+            const result = await callSigner(signReq);
+            if (!result.ok) {
+                res.status(403).json({ error: result.error });
+                return;
+            }
+            broadcast(`${category}.submitted`, { requestId: signReq.requestId, wallet: session.wallet });
+            res.json({ ok: true, requestId: signReq.requestId, signedUserOp: result.signedUserOp });
+        }
+        catch (err) {
+            res.status(503).json({
+                error: "signer_unavailable",
+                detail: err instanceof Error ? err.message : String(err),
+            });
+        }
+    };
+}
+function collectInboundTaskTexts(body) {
+    if (!body || typeof body !== "object")
+        return [];
+    const record = body;
+    const values = [
+        record.task,
+        record.taskDescription,
+        record.task_description,
+        record.content,
+        record.prompt,
+        record.workloadDescription,
+        record.workload_description,
+    ];
+    return values.filter((value) => typeof value === "string" && value.trim().length > 0);
+}
+function createApiServer(apiConfig) {
+    const app = (0, express_1.default)();
+    const { db, rpcUrl, policyEngineAddress } = apiConfig;
+    const sessionMiddleware = createSessionMiddleware(db);
+    const endpointPolicy = new endpoint_policy_1.EndpointPolicy();
+    app.use(express_1.default.json({ limit: "1mb" }));
+    app.use((req, res, next) => {
+        const jobId = (0, endpoint_policy_1.resolveJobId)(req.headers);
+        if (jobId) {
+            endpointPolicy.lockForJob(jobId);
+            if ((0, endpoint_policy_1.hasExplicitCommerceDelegation)(req.body, req.path)) {
+                endpointPolicy.grantCommerceDelegate(jobId);
+            }
+            if (!endpointPolicy.isAllowed(jobId, req.path)) {
+                res.status(403).json({
+                    error: "commerce_delegation_required",
+                    reason: "This job was not granted commerce delegation. The worker agent cannot initiate hires or subscriptions.",
+                });
+                return;
+            }
+        }
+        for (const text of collectInboundTaskTexts(req.body)) {
+            const guardResult = (0, prompt_guard_1.guardTaskContent)(text);
+            if (!guardResult.safe) {
+                res.status(400).json({
+                    error: "task_rejected",
+                    reason: "Task content failed security screening",
+                    code: "PROMPT_INJECTION_DETECTED",
+                    category: guardResult.category,
+                });
+                return;
+            }
+        }
+        next();
+    });
+    // ── Health ──────────────────────────────────────────────────────────────────
+    app.get("/health", (_req, res) => {
+        res.json({ ok: true, wallet: apiConfig.walletAddress });
+    });
+    // ── SSE ─────────────────────────────────────────────────────────────────────
+    app.get("/events", sseHandler);
+    // ── Auth ─────────────────────────────────────────────────────────────────────
+    const authCfg = {
+        daemonId: apiConfig.daemonId,
+        rpcUrl,
+        chainId: apiConfig.chainId,
+        walletAddress: apiConfig.walletAddress,
+    };
+    (0, auth_server_1.registerAuthRoutes)(app, db, authCfg);
+    // ── Commerce (execution — proxied to signer) ─────────────────────────────────
+    app.post("/hire", sessionMiddleware, makeCommerceHandler("hire", policyEngineAddress, rpcUrl));
+    app.post("/deliver", sessionMiddleware, makeCommerceHandler("deliver", policyEngineAddress, rpcUrl));
+    app.post("/verify", sessionMiddleware, makeCommerceHandler("verify", policyEngineAddress, rpcUrl));
+    app.post("/subscribe", sessionMiddleware, makeCommerceHandler("subscribe", policyEngineAddress, rpcUrl));
+    // ── Read endpoints (no signer needed) ───────────────────────────────────────
+    app.get("/agreements", sessionMiddleware, (req, res) => {
+        const session = req.session;
+        // hire_requests table uses hirer_address; include both sides
+        const rows = db.prepare(`SELECT * FROM hire_requests
+       WHERE hirer_address = ? OR (agreement_id IS NOT NULL)
+       ORDER BY created_at DESC LIMIT 50`).all(session.wallet);
+        res.json({ ok: true, agreements: rows });
+    });
+    app.get("/wallet/status", sessionMiddleware, (_req, res) => {
+        res.json({
+            ok: true,
+            wallet: apiConfig.walletAddress,
+            daemonId: apiConfig.daemonId,
+            chainId: apiConfig.chainId,
+            rpcUrl: apiConfig.rpcUrl,
+            policyEngineAddress: apiConfig.policyEngineAddress,
+        });
+    });
+    app.get("/workroom/status", sessionMiddleware, (_req, res) => {
+        res.json({ ok: true, status: "running" });
+    });
+    return app;
+}
+// ─── Standalone process entrypoint ───────────────────────────────────────────
+async function main() {
+    const config = (0, config_1.loadDaemonConfig)();
+    const dbPath = path.join(os.homedir(), ".arc402", "daemon.db");
+    const db = new better_sqlite3_1.default(dbPath);
+    db.pragma("journal_mode = WAL");
+    // Ensure session + challenge tables exist (idempotent)
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS sessions (
+      id          TEXT PRIMARY KEY,
+      token_hash  TEXT NOT NULL UNIQUE,
+      wallet      TEXT NOT NULL,
+      scope       TEXT NOT NULL,
+      expires_at  INTEGER NOT NULL,
+      issued_at   INTEGER NOT NULL,
+      revoked     INTEGER DEFAULT 0
+    );
+
+    CREATE TABLE IF NOT EXISTS auth_challenges (
+      challenge_id  TEXT PRIMARY KEY,
+      daemon_id     TEXT NOT NULL,
+      wallet        TEXT NOT NULL,
+      chain_id      INTEGER NOT NULL,
+      scope         TEXT NOT NULL,
+      expires_at    INTEGER NOT NULL,
+      used          INTEGER DEFAULT 0
+    );
+  `);
+    const apiConfig = {
+        port: (config.relay.listen_port ?? 4402) + 1, // 4403 — separate from legacy HTTP port
+        daemonId: config.wallet.contract_address,
+        rpcUrl: config.network.rpc_url,
+        chainId: config.network.chain_id,
+        walletAddress: config.wallet.contract_address,
+        policyEngineAddress: config.policyEngineAddress ?? process.env.ARC402_POLICY_ENGINE ?? "",
+        db,
+    };
+    ensureLocalDaemonToken(db, apiConfig.walletAddress);
+    const app = createApiServer(apiConfig);
+    const server = http.createServer(app);
+    server.listen(apiConfig.port, "0.0.0.0", () => {
+        process.stdout.write(`[api] HTTP server ready on port ${apiConfig.port}\n`);
+    });
+    process.on("SIGTERM", () => { server.close(); db.close(); process.exit(0); });
+    process.on("SIGINT", () => { server.close(); db.close(); process.exit(0); });
+}
+if (require.main === module) {
+    main().catch((err) => {
+        process.stderr.write(`[api] Fatal: ${err instanceof Error ? err.message : String(err)}\n`);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,8CAoBC;AAkDD,0DA8CC;AA4DD,8BAKC;AA6ED,0CAyFC;AA5YD;;;;;;;;;;;;;;;GAeG;AACH,sDAAmE;AACnE,yCAA2B;AAC3B,+CAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,2CAA6B;AAC7B,oEAAsC;AACtC,qCAA4C;AAC5C,+CAA0E;AAC1E,iDAAwE;AACxE,qCAAmF;AACnF,uDAAgG;AAChG,iDAAkD;AAkBlD,iFAAiF;AAEjF,SAAgB,iBAAiB,CAAC,MAAc,EAAE,OAAe;IAC/D,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,OAAO;QAAgB,OAAO,mBAAmB,CAAC;IACvF,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,UAAU;QAAa,OAAO,mBAAmB,CAAC;IACvF,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,SAAS;QAAc,OAAO,kBAAkB,CAAC;IACtF,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,YAAY;QAAW,OAAO,WAAW,CAAC;IAC/E,IAAI,MAAM,KAAK,KAAK,IAAK,OAAO,KAAK,aAAa;QAAU,OAAO,gBAAgB,CAAC;IACpF,IAAI,MAAM,KAAK,KAAK,IAAK,OAAO,KAAK,gBAAgB;QAAO,OAAO,aAAa,CAAC;IACjF,IAAI,MAAM,KAAK,KAAK,IAAK,OAAO,KAAK,kBAAkB;QAAK,OAAO,iBAAiB,CAAC;IACrF,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,cAAc;QAAS,OAAO,qBAAqB,CAAC;IACzF,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,qBAAqB;QAAE,OAAO,oBAAoB,CAAC;IACxF,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,uBAAuB;QAAE,OAAO,sBAAsB,CAAC;IAC5F,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,6BAA6B;QAAE,OAAO,4BAA4B,CAAC;IACxG,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,uBAAuB;QAAE,OAAO,sBAAsB,CAAC;IAC5F,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,mBAAmB;QAAI,OAAO,kBAAkB,CAAC;IACtF,IAAI,MAAM,KAAK,KAAK,IAAK,OAAO,KAAK,qBAAqB;QAAE,OAAO,oBAAoB,CAAC;IACxF,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,eAAe;QAAQ,OAAO,cAAc,CAAC;IAClF,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,iBAAiB;QAAM,OAAO,gBAAgB,CAAC;IACpF,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,sBAAsB;QAAE,OAAO,qBAAqB,CAAC;IAC1F,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAA2B,OAAO,SAAS,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,UAAU,CAAC,OAAoB;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,2BAAkB,CAAC,CAAC;QACxD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,EAAE,KAAM,CAAC,CAAC;QAEX,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChC,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7C,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC,CAAC;gBAC5C,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF,SAAgB,uBAAuB,CAAC,EAAqB;IAC3D,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC/D,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CACxB,gFAAgF,CACjF,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAA2B,CAAC;QAElD,IAAI,CAAC,OAAO,IAAI,KAAK,KAAK,oBAAoB,EAAE,EAAE,CAAC;YAChD,GAA4B,CAAC,OAAO,GAAG;gBACtC,EAAE,EAAE,gBAAgB;gBACpB,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,IAAA,yBAAgB,GAAE,CAAC,MAAM,CAAC,gBAAgB;gBAClD,KAAK,EAAE,UAAU;gBACjB,UAAU,EAAE,MAAM,CAAC,gBAAgB;gBACnC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,OAAO,EAAE,CAAC;aACX,CAAC;YACF,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,gCAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAA,kCAAmB,EAAC,UAAU,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAEA,GAA4B,CAAC,OAAO,GAAG,OAAO,CAAC;QAChD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;AAE7E,SAAS,oBAAoB;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,EAAqB,EAAE,MAAc;IACnE,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,8DAA8D,CAAC;aACvE,GAAG,CAAC,IAAI,CAAgC,CAAC;QAC5C,IAAI,GAAG,EAAE,EAAE;YAAE,OAAO,QAAQ,CAAC;IAC/B,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,4BAA4B;IAE/E,EAAE,CAAC,OAAO,CACR;kCAC8B,CAC/B,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAE7D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAY,CAAC;AAEvC,SAAS,UAAU,CAAC,GAAY,EAAE,GAAa;IAC7C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IACnD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAC3C,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC1C,GAAG,CAAC,YAAY,EAAE,CAAC;IACnB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEpB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC/B,CAAC,EAAE,KAAM,CAAC,CAAC;IAEX,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,SAAS,CAAC,KAAa,EAAE,IAAa;IACpD,MAAM,OAAO,GAAG,UAAU,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;IACrE,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAS,mBAAmB,CAC1B,QAAgB,EAChB,mBAA2B,EAC3B,MAAc;IAEd,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;QAC1D,MAAM,OAAO,GAAI,GAA4B,CAAC,OAAO,CAAC;QACtD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAInC,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAgB;YAC3B,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACjD,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM;YACN,KAAK,EAAE,KAAK,IAAI,GAAG;YACnB,IAAI;YACJ,QAAQ;YACR,mBAAmB;YACnB,MAAM;SACP,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,SAAS,CAAC,GAAG,QAAQ,YAAY,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7F,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,oBAAoB;gBAC3B,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAcD,SAAS,uBAAuB,CAAC,IAAa;IAC5C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,MAAM,MAAM,GAAG;QACb,MAAM,CAAC,IAAI;QACX,MAAM,CAAC,eAAe;QACtB,MAAM,CAAC,gBAAgB;QACvB,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,mBAAmB;QAC1B,MAAM,CAAC,oBAAoB;KAC5B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,SAAgB,eAAe,CAAC,SAAoB;IAClD,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;IACtB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,GAAG,SAAS,CAAC;IACtD,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;IAE5C,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACxC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAChE,MAAM,KAAK,GAAG,IAAA,8BAAY,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,IAAA,+CAA6B,EAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtD,cAAc,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,8BAA8B;oBACrC,MAAM,EAAE,wGAAwG;iBACjH,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,WAAW,GAAG,IAAA,+BAAgB,EAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;gBACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,eAAe;oBACtB,MAAM,EAAE,wCAAwC;oBAChD,IAAI,EAAE,2BAA2B;oBACjC,QAAQ,EAAE,WAAW,CAAC,QAAQ;iBAC/B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAE/B,gFAAgF;IAChF,MAAM,OAAO,GAAqB;QAChC,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,MAAM;QACN,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,aAAa,EAAE,SAAS,CAAC,aAAa;KACvC,CAAC;IACF,IAAA,gCAAkB,EAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAErC,gFAAgF;IAChF,GAAG,CAAC,IAAI,CAAC,OAAO,EAAO,iBAAiB,EAAE,mBAAmB,CAAC,MAAM,EAAO,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC;IACzG,GAAG,CAAC,IAAI,CAAC,UAAU,EAAI,iBAAiB,EAAE,mBAAmB,CAAC,SAAS,EAAI,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC;IACzG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAK,iBAAiB,EAAE,mBAAmB,CAAC,QAAQ,EAAK,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC;IACzG,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,WAAW,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAC;IAEzG,+EAA+E;IAC/E,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,iBAAiB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;QAC9E,MAAM,OAAO,GAAI,GAA4B,CAAC,OAAO,CAAC;QACtD,6DAA6D;QAC7D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB;;yCAEmC,CACpC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,IAAa,EAAE,GAAa,EAAQ,EAAE;QAClF,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,SAAS,CAAC,aAAa;YAC/B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,mBAAmB,EAAE,SAAS,CAAC,mBAAmB;SACnD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,CAAC,IAAa,EAAE,GAAa,EAAQ,EAAE;QACpF,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,IAAA,yBAAgB,GAAE,CAAC;IAElC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/D,MAAM,EAAE,GAAG,IAAI,wBAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAEhC,uDAAuD;IACvD,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;GAoBP,CAAC,CAAC;IAEH,MAAM,SAAS,GAAc;QAC3B,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,wCAAwC;QACtF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;QACxC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO;QAC9B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ;QAChC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;QAC7C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE;QACzF,EAAE;KACH,CAAC;IAEF,sBAAsB,CAAC,EAAE,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;IAEpD,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAEtC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAG,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACrE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/auth-server.d.ts

@@ -0,0 +1,50 @@
+import { ethers } from "ethers";
+import type { Express } from "express";
+import Database from "better-sqlite3";
+import { SessionManager } from "./session-manager";
+export interface AuthServerConfig {
+    daemonId: string;
+    rpcUrl: string;
+    chainId: number;
+    walletAddress: string;
+}
+export interface AuthServerDependencies {
+    createProvider?: (rpcUrl: string) => ethers.Provider;
+    recoverSigner?: (message: string, signature: string) => string;
+    getWalletOwner?: (wallet: string, provider: ethers.Provider) => Promise<string>;
+    getWalletsForOwner?: (ownerAddress: string, provider: ethers.Provider, chainId: number) => Promise<string[]>;
+}
+/**
+ * Build the EIP-191 message that the owner must sign.
+ *
+ * "ARC-402 Remote Auth\nChallenge: " + keccak256(abi.encodePacked(
+ *   challengeId, daemonId, wallet, chainId, requestedScope, expiresAt
+ * ))
+ */
+export declare function buildChallengeMessage(challengeId: string, daemonId: string, wallet: string, chainId: number, scope: string, expiresAt: number): string;
+export interface IssuedAuthChallenge {
+    challengeId: string;
+    challenge: string;
+    daemonId: string;
+    wallet: string;
+    chainId: number;
+    scope: string;
+    expiresAt: number;
+    issuedAt: number;
+}
+export declare function issueAuthChallenge(sessions: SessionManager, cfg: AuthServerConfig, wallet: string, requestedScope?: string): IssuedAuthChallenge;
+export type AuthSessionResult = {
+    ok: true;
+    token: string;
+    wallets: string[];
+    wallet: string;
+    scope: string;
+    expiresAt: number;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export declare function consumeAuthChallenge(sessions: SessionManager, cfg: AuthServerConfig, deps: AuthServerDependencies, provider: ethers.Provider, challengeId: string, signature: string): Promise<AuthSessionResult>;
+export declare function registerAuthRoutes(app: Express, db: Database.Database, cfg: AuthServerConfig, deps?: AuthServerDependencies): void;
+//# sourceMappingURL=auth-server.d.ts.map

package/dist/auth-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-server.d.ts","sourceRoot":"","sources":["../src/auth-server.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAC1D,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AASnD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC;IACrD,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/D,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChF,kBAAkB,CAAC,EAAE,CACnB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,MAAM,CAcR;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,MAAM,EACd,cAAc,CAAC,EAAE,MAAM,GACtB,mBAAmB,CAgCrB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEN,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,gBAAgB,EACrB,IAAI,EAAE,sBAAsB,EAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,CAAC,CAoE5B;AAkED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,GAAG,EAAE,gBAAgB,EACrB,IAAI,GAAE,sBAA2B,GAChC,IAAI,CAwEN"}