@artblocks/abx-cli 0.1.0-alpha.7 → 0.1.0-alpha.70

package/dist/creator-agent.js

@@ -0,0 +1,206 @@
+import { Chacha20Poly1305 } from '@hpke/chacha20poly1305';
+import { CipherSuite, DhkemP256HkdfSha256, HkdfSha256 } from '@hpke/core';
+import { generateAuthorizationSignature } from '@privy-io/node';
+const OAUTH = 'https://auth.privy.io/api/oauth/v2';
+const WALLET_API = 'https://api.privy.io/v1/wallets';
+const DEVICE_GRANT = 'urn:ietf:params:oauth:grant-type:device_code';
+export class CreatorAuthorizationError extends Error {
+    code;
+    constructor(code) {
+        super(`Creator wallet authorization: ${code}`);
+        this.code = code;
+        this.name = 'CreatorAuthorizationError';
+    }
+}
+function object(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new CreatorAuthorizationError('invalid_response');
+    return value;
+}
+function string(value) {
+    if (typeof value !== 'string' || !value || value.length > 16_384)
+        throw new CreatorAuthorizationError('invalid_response');
+    return value;
+}
+function verificationUrl(value) {
+    const raw = string(value);
+    let parsed;
+    try {
+        parsed = new URL(raw);
+    }
+    catch {
+        throw new CreatorAuthorizationError('invalid_verification_url');
+    }
+    const local = parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1' || parsed.hostname === '[::1]';
+    if (parsed.username || parsed.password || (parsed.protocol !== 'https:' && !(local && parsed.protocol === 'http:'))) {
+        throw new CreatorAuthorizationError('invalid_verification_url');
+    }
+    return parsed.toString();
+}
+function seconds(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0 || value > 86_400) {
+        throw new CreatorAuthorizationError('invalid_response');
+    }
+    return value * 1_000;
+}
+function base64(value) {
+    const encoded = string(value);
+    if (!/^[A-Za-z0-9+/]+={0,2}$/.test(encoded))
+        throw new CreatorAuthorizationError('invalid_response');
+    return new Uint8Array(Buffer.from(encoded, 'base64'));
+}
+/** Ephemeral Privy device session. Tokens and the decrypted signing key never leave this instance. */
+export class CreatorAgentAuthorization {
+    #appId;
+    #fetch;
+    #device;
+    #accessToken;
+    #authorizationKey;
+    #keyExpiresAt = 0;
+    #wallets = [];
+    constructor(options) {
+        if (!/^[A-Za-z0-9_-]{1,200}$/.test(options.appId))
+            throw new CreatorAuthorizationError('invalid_app_id');
+        this.#appId = options.appId;
+        this.#fetch = options.fetchImpl ?? fetch;
+    }
+    async #request(path, body, token) {
+        try {
+            const response = await this.#fetch(`${OAUTH}/${path}`, {
+                method: 'POST',
+                redirect: 'error',
+                signal: AbortSignal.timeout(15_000),
+                headers: {
+                    'content-type': 'application/json',
+                    'privy-app-id': this.#appId,
+                    ...(token ? { authorization: `Bearer ${token}`, 'privy-grant-type': 'device_code' } : {}),
+                },
+                body: JSON.stringify(body),
+            });
+            const text = await response.text();
+            if (text.length > 65_536)
+                throw new CreatorAuthorizationError('invalid_response');
+            return { response, data: object(JSON.parse(text)) };
+        }
+        catch (error) {
+            if (error instanceof CreatorAuthorizationError)
+                throw error;
+            throw new CreatorAuthorizationError('request_failed');
+        }
+    }
+    async start() {
+        if (this.#device)
+            throw new CreatorAuthorizationError('already_started');
+        const { response, data } = await this.#request('device_authorization', {});
+        if (!response.ok)
+            throw new CreatorAuthorizationError('device_authorization_failed');
+        const expiresAt = Date.now() + seconds(data.expires_in);
+        this.#device = {
+            code: string(data.device_code),
+            expiresAt,
+            interval: data.interval === undefined ? 5_000 : seconds(data.interval),
+        };
+        return {
+            userCode: string(data.user_code),
+            verificationUri: verificationUrl(data.verification_uri),
+            ...(data.verification_uri_complete ? { verificationUriComplete: verificationUrl(data.verification_uri_complete) } : {}),
+        };
+    }
+    async wait() {
+        const device = this.#device;
+        if (!device)
+            throw new CreatorAuthorizationError('not_started');
+        for (;;) {
+            const remaining = device.expiresAt - Date.now();
+            if (remaining <= 0)
+                throw new CreatorAuthorizationError('expired');
+            await new Promise((resolve) => setTimeout(resolve, Math.min(device.interval, remaining)));
+            const { response, data } = await this.#request('token', { grant_type: DEVICE_GRANT, device_code: device.code });
+            if (response.ok) {
+                this.#accessToken = string(data.access_token);
+                await this.#authenticate();
+                this.#device = undefined;
+                return this.#wallets.map((wallet) => ({ ...wallet }));
+            }
+            const code = typeof data.error === 'string' ? data.error : '';
+            if (response.status === 400 && (code === 'authorization_pending' || code === 'slow_down')) {
+                if (code === 'slow_down')
+                    device.interval += 5_000;
+                continue;
+            }
+            throw new CreatorAuthorizationError(code === 'access_denied' ? 'access_denied' : 'provider_error');
+        }
+    }
+    async #authenticate() {
+        if (!this.#accessToken)
+            throw new CreatorAuthorizationError('login_required');
+        try {
+            const suite = new CipherSuite({ kem: new DhkemP256HkdfSha256(), kdf: new HkdfSha256(), aead: new Chacha20Poly1305() });
+            const pair = await suite.kem.generateKeyPair();
+            const publicKey = await globalThis.crypto.subtle.exportKey('spki', pair.publicKey);
+            const { response, data } = await this.#request('wallets/authenticate', { encryption_type: 'HPKE', recipient_public_key: Buffer.from(publicKey).toString('base64') }, this.#accessToken);
+            if (!response.ok)
+                throw new CreatorAuthorizationError('wallet_authentication_failed');
+            const encrypted = object(data.encrypted_authorization_key);
+            const expiresAt = typeof data.expires_at === 'number' ? data.expires_at : Date.parse(string(data.expires_at));
+            if (!Number.isFinite(expiresAt) || expiresAt <= Date.now() + 5_000)
+                throw new CreatorAuthorizationError('expired_signing_key');
+            if (!Array.isArray(data.wallets))
+                throw new CreatorAuthorizationError('invalid_response');
+            const wallets = data.wallets.map((value) => {
+                const wallet = object(value);
+                return { id: string(wallet.id), address: string(wallet.address), chainType: string(wallet.chain_type) };
+            });
+            const recipient = await suite.createRecipientContext({ recipientKey: pair.privateKey, enc: base64(encrypted.encapsulated_key) });
+            const bytes = new Uint8Array(await recipient.open(base64(encrypted.ciphertext)));
+            try {
+                this.#authorizationKey = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+                this.#keyExpiresAt = expiresAt;
+                this.#wallets = wallets;
+            }
+            finally {
+                bytes.fill(0);
+            }
+            this.#accessToken = undefined;
+        }
+        catch (error) {
+            if (error instanceof CreatorAuthorizationError)
+                throw error;
+            throw new CreatorAuthorizationError('key_exchange_failed');
+        }
+    }
+    sign(input) {
+        if (!this.#authorizationKey || this.#keyExpiresAt <= Date.now())
+            throw new CreatorAuthorizationError('authorization_expired');
+        if (!/^[A-Za-z0-9_-]{1,200}$/.test(input.walletId) || !/^[A-Za-z0-9_-]{1,200}$/.test(input.idempotencyKey)) {
+            throw new CreatorAuthorizationError('invalid_request');
+        }
+        if (input.body.method !== 'eth_sendTransaction')
+            throw new CreatorAuthorizationError('unsupported_method');
+        if (!this.#wallets.some((wallet) => wallet.id === input.walletId && wallet.chainType === 'ethereum')) {
+            throw new CreatorAuthorizationError('wallet_not_authorized');
+        }
+        const expiry = Number(input.requestExpiry);
+        if (!Number.isSafeInteger(expiry) || expiry <= Date.now() || expiry > Date.now() + 60_000 || expiry > this.#keyExpiresAt) {
+            throw new CreatorAuthorizationError('invalid_request_expiry');
+        }
+        const url = `${WALLET_API}/${encodeURIComponent(input.walletId)}/rpc`;
+        const headers = {
+            'privy-app-id': this.#appId,
+            'privy-idempotency-key': input.idempotencyKey,
+            'privy-request-expiry': input.requestExpiry,
+        };
+        const signature = generateAuthorizationSignature({
+            authorizationPrivateKey: this.#authorizationKey,
+            input: { version: 1, method: 'POST', url, body: input.body, headers },
+        });
+        return { url, headers: { ...headers, 'privy-authorization-signature': signature } };
+    }
+    dispose() {
+        this.#device = undefined;
+        this.#accessToken = undefined;
+        this.#authorizationKey = undefined;
+        this.#wallets = [];
+    }
+}
+//# sourceMappingURL=creator-agent.js.map

package/dist/creator-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"creator-agent.js","sourceRoot":"","sources":["../src/creator-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,gBAAgB,EAAC,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAC,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAC,MAAM,YAAY,CAAC;AACxE,OAAO,EAAC,8BAA8B,EAAC,MAAM,gBAAgB,CAAC;AAE9D,MAAM,KAAK,GAAG,oCAAoC,CAAC;AACnD,MAAM,UAAU,GAAG,iCAAiC,CAAC;AACrD,MAAM,YAAY,GAAG,8CAA8C,CAAC;AAEpE,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAC7B;IAArB,YAAqB,IAAY;QAC/B,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;QAD5B,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAcD,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;IACzH,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM;QAAE,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;IAC1H,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,yBAAyB,CAAC,0BAA0B,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;IAChH,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC;QACpH,MAAM,IAAI,yBAAyB,CAAC,0BAA0B,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QACzF,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,GAAG,KAAK,CAAC;AACvB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;IACrG,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,sGAAsG;AACtG,MAAM,OAAO,yBAAyB;IAC3B,MAAM,CAAS;IACf,MAAM,CAAe;IAC9B,OAAO,CAAuD;IAC9D,YAAY,CAAU;IACtB,iBAAiB,CAAU;IAC3B,aAAa,GAAG,CAAC,CAAC;IAClB,QAAQ,GAA8B,EAAE,CAAC;IAEzC,YAAY,OAAkD;QAC5D,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;QACzG,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,KAAc;QACvD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;gBACnC,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,cAAc,EAAE,IAAI,CAAC,MAAM;oBAC3B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAC,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,kBAAkB,EAAE,aAAa,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxF;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM;gBAAE,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;YAClF,OAAO,EAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,yBAAyB;gBAAE,MAAM,KAAK,CAAC;YAC5D,MAAM,IAAI,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QACzE,MAAM,EAAC,QAAQ,EAAE,IAAI,EAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,yBAAyB,CAAC,6BAA6B,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG;YACb,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;YAC9B,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;SACvE,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAChC,eAAe,EAAE,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAC,uBAAuB,EAAE,eAAe,CAAC,IAAI,CAAC,yBAAyB,CAAC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACtH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,yBAAyB,CAAC,aAAa,CAAC,CAAC;QAChE,SAAS,CAAC;YACR,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAChD,IAAI,SAAS,IAAI,CAAC;gBAAE,MAAM,IAAI,yBAAyB,CAAC,SAAS,CAAC,CAAC;YACnE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;YAC1F,MAAM,EAAC,QAAQ,EAAE,IAAI,EAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAC,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAC,CAAC,CAAC;YAC5G,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC9C,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC3B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;gBACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,MAAM,EAAC,CAAC,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,uBAAuB,IAAI,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;gBAC1F,IAAI,IAAI,KAAK,WAAW;oBAAE,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC;gBACnD,SAAS;YACX,CAAC;YACD,MAAM,IAAI,yBAAyB,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAC,GAAG,EAAE,IAAI,mBAAmB,EAAE,EAAE,GAAG,EAAE,IAAI,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,gBAAgB,EAAE,EAAC,CAAC,CAAC;YACrH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnF,MAAM,EAAC,QAAQ,EAAE,IAAI,EAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC1C,sBAAsB,EACtB,EAAC,eAAe,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAC,EAC1F,IAAI,CAAC,YAAY,CAClB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,CAAC;YACtF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAC9G,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAAE,MAAM,IAAI,yBAAyB,CAAC,qBAAqB,CAAC,CAAC;YAC/H,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;YAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC7B,OAAO,EAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAC,CAAC;YACxG,CAAC,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,sBAAsB,CAAC,EAAC,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAC,CAAC,CAAC;YAC/H,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC;gBACH,IAAI,CAAC,iBAAiB,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAC,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC/E,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;gBAC/B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;YAC1B,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,CAAC;YACD,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,yBAAyB;gBAAE,MAAM,KAAK,CAAC;YAC5D,MAAM,IAAI,yBAAyB,CAAC,qBAAqB,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAuG;QAC1G,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;QAC9H,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3G,MAAM,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,qBAAqB;YAAE,MAAM,IAAI,yBAAyB,CAAC,oBAAoB,CAAC,CAAC;QAC3G,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACzH,MAAM,IAAI,yBAAyB,CAAC,wBAAwB,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtE,MAAM,OAAO,GAAG;YACd,cAAc,EAAE,IAAI,CAAC,MAAM;YAC3B,uBAAuB,EAAE,KAAK,CAAC,cAAc;YAC7C,sBAAsB,EAAE,KAAK,CAAC,aAAa;SAC5C,CAAC;QACF,MAAM,SAAS,GAAG,8BAA8B,CAAC;YAC/C,uBAAuB,EAAE,IAAI,CAAC,iBAAiB;YAC/C,KAAK,EAAE,EAAC,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAC;SACpE,CAAC,CAAC;QACH,OAAO,EAAC,GAAG,EAAE,OAAO,EAAE,EAAC,GAAG,OAAO,EAAE,+BAA+B,EAAE,SAAS,EAAC,EAAC,CAAC;IAClF,CAAC;IAED,OAAO;QACL,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/creator-signer.d.ts

@@ -0,0 +1,52 @@
+import { type Address, type Hex, type PreparedTx } from '@artblocks/abx-sdk';
+import type { TransactionReceipt } from 'viem';
+/** Preserve the exact RPC estimate across the JSON service boundary. This is a serialization
+ * guard, not a sponsorship-policy ceiling; real EVM transaction limits are many orders of
+ * magnitude below Number.MAX_SAFE_INTEGER. */
+export declare function sponsoredGasLimit(gas: bigint): number;
+/** Synchronous preflight for commands that may upload content before opening the signing lane. */
+export declare function assertSponsorConfigured(chainKey: string): void;
+/**
+ * Resolve the existing account-bound creator wallet for a sponsored preview without provisioning
+ * a wallet or opening an authorization grant. A dry run must use the signer that the real send
+ * will use; silently falling back to a local env key changes the CREATE2 salt, owner, royalty
+ * receiver, and mint recipient shown in the preview.
+ */
+export declare function sponsoredPreviewAddress(chainKey: string, options?: {
+    env?: NodeJS.ProcessEnv;
+    fetchImpl?: typeof fetch;
+}): Promise<Address>;
+/** Resolve the account-bound creator wallet for a transaction plan. Real sponsored sends may
+ * provision the stable wallet just as `openSponsoredSession` does; dry runs call the wrapper above
+ * and remain strictly read-only. */
+export declare function sponsoredWalletAddress(chainKey: string, options?: {
+    env?: NodeJS.ProcessEnv;
+    fetchImpl?: typeof fetch;
+    provision?: boolean;
+}): Promise<Address>;
+export interface SponsoredReceipt {
+    txHash: Hex;
+    receipt: TransactionReceipt;
+}
+export interface SponsoredSession {
+    address: Address;
+    send(tx: PreparedTx): Promise<SponsoredReceipt>;
+    close(): void;
+}
+/** Pure boundary check shared by every sponsored operation. Privy's sponsored relay requires a
+ * call target, so custom-contract deployments must already be expressed as a call to the keyless
+ * CREATE2 proxy before they reach this boundary. */
+export declare function assertSponsoredPreparedTx(tx: PreparedTx, chainId: number): asserts tx is PreparedTx & {
+    to: Address;
+};
+/** Resolve the first-party wallet API from its public remote catalog. The env override is an
+ * explicit local/staging escape hatch; production callers discover the interface from the
+ * services catalog and do not need to know a deployment hostname. */
+export declare function creatorApiUrl(chainId: number, env?: NodeJS.ProcessEnv): Promise<string>;
+/**
+ * Open one short-lived creator authorization session. The human authorizes the agent once; every
+ * exact transaction in this CLI invocation is then signed by that same ephemeral grant. Neither the
+ * OAuth token nor the decrypted authorization key is written to disk or returned to callers.
+ */
+export declare function openSponsoredSession(chainKey: string): Promise<SponsoredSession>;
+//# sourceMappingURL=creator-signer.d.ts.map

package/dist/creator-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"creator-signer.d.ts","sourceRoot":"","sources":["../src/creator-signer.ts"],"names":[],"mappings":"AAEA,OAAO,EAWL,KAAK,OAAO,EACZ,KAAK,GAAG,EACR,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,MAAM,CAAC;AAM7C;;8CAE8C;AAC9C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMrD;AAED,kGAAkG;AAClG,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAE9D;AAaD;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAAM,GAChE,OAAO,CAAC,OAAO,CAAC,CAElB;AAED;;oCAEoC;AACpC,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAM,GACrF,OAAO,CAAC,OAAO,CAAC,CA2BlB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,GAAG,CAAC;IACZ,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChD,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;oDAEoD;AACpD,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,EAAE,IAAI,UAAU,GAAG;IAAC,EAAE,EAAE,OAAO,CAAA;CAAC,CAY1C;AAmBD;;qEAEqE;AACrE,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAW1G;AAmBD;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgGtF"}

package/dist/creator-signer.js

@@ -0,0 +1,225 @@
+import { randomUUID } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { AbxServiceClient, CREATOR_WALLET_INTERFACE, CreatorApiClient, makePublicClient, pinGas, resolveChain, resolveServiceInterfaceEndpoint, sleep, TxRevertedError, waitForCodeAt, } from '@artblocks/abx-sdk';
+import { CreatorAgentAuthorization } from './creator-agent.js';
+import { ABX_SERVICES_URL } from './remote.js';
+const SPONSORABLE_BASE_CHAINS = new Set([8_453, 84_532]);
+/** Preserve the exact RPC estimate across the JSON service boundary. This is a serialization
+ * guard, not a sponsorship-policy ceiling; real EVM transaction limits are many orders of
+ * magnitude below Number.MAX_SAFE_INTEGER. */
+export function sponsoredGasLimit(gas) {
+    const limit = Number(gas);
+    if (!Number.isSafeInteger(limit) || limit <= 0) {
+        throw new Error(`Sponsored transaction gas estimate ${gas} cannot be represented safely.`);
+    }
+    return limit;
+}
+/** Synchronous preflight for commands that may upload content before opening the signing lane. */
+export function assertSponsorConfigured(chainKey) {
+    assertSponsorConfiguredWithEnv(chainKey, process.env);
+}
+function assertSponsorConfiguredWithEnv(chainKey, env) {
+    if (!SPONSORABLE_BASE_CHAINS.has(resolveChain(chainKey).id)) {
+        throw new Error('--sponsor is supported on eligible Base networks (Base and Base Sepolia only) and still requires live provider and account eligibility. Use --send, --sign, or --unsigned on this network.');
+    }
+    if (!env.ABX_SERVICES_API_KEY) {
+        throw new Error('--sponsor needs ABX_SERVICES_API_KEY in your ignored .env. Run `abx auth login` first.');
+    }
+}
+/**
+ * Resolve the existing account-bound creator wallet for a sponsored preview without provisioning
+ * a wallet or opening an authorization grant. A dry run must use the signer that the real send
+ * will use; silently falling back to a local env key changes the CREATE2 salt, owner, royalty
+ * receiver, and mint recipient shown in the preview.
+ */
+export async function sponsoredPreviewAddress(chainKey, options = {}) {
+    return sponsoredWalletAddress(chainKey, { ...options, provision: false });
+}
+/** Resolve the account-bound creator wallet for a transaction plan. Real sponsored sends may
+ * provision the stable wallet just as `openSponsoredSession` does; dry runs call the wrapper above
+ * and remain strictly read-only. */
+export async function sponsoredWalletAddress(chainKey, options = {}) {
+    const env = options.env ?? process.env;
+    const chain = resolveChain(chainKey);
+    assertSponsorConfiguredWithEnv(chainKey, env);
+    const apiKey = env.ABX_SERVICES_API_KEY;
+    const api = new CreatorApiClient({
+        baseUrl: await creatorApiUrl(chain.id, env),
+        token: apiKey,
+        fetchImpl: options.fetchImpl,
+    });
+    let account = await api.account();
+    if (!account.wallet && options.provision) {
+        await api.provisionWallet();
+        account = await api.account();
+    }
+    if (!account.wallet || !account.capabilities.wallet) {
+        throw new Error(options.provision
+            ? 'ABX Services did not return the creator wallet after provisioning.'
+            : 'Sponsored dry run needs an existing ABX creator wallet, but this account has not provisioned one yet. ' +
+                'Provision the wallet through ABX Services first, then rerun; the preview will not create external state.');
+    }
+    if (!account.capabilities.sponsorship || !account.capabilities.sponsoredChains.includes(chain.id)) {
+        throw new Error(`ABX gas sponsorship is not enabled for ${chain.name} on this account.`);
+    }
+    return account.wallet.address;
+}
+/** Pure boundary check shared by every sponsored operation. Privy's sponsored relay requires a
+ * call target, so custom-contract deployments must already be expressed as a call to the keyless
+ * CREATE2 proxy before they reach this boundary. */
+export function assertSponsoredPreparedTx(tx, chainId) {
+    if (tx.chainId !== chainId) {
+        throw new Error(`Refusing sponsored transaction for chain ${tx.chainId}; expected ${chainId}.`);
+    }
+    if (BigInt(tx.value) !== 0n) {
+        throw new Error('ABX sponsorship never covers a transaction that transfers ETH.');
+    }
+    if (tx.to === null) {
+        throw new Error('ABX sponsorship requires a call target; use `abx deploy-contract --sponsor` to route exact initcode through CREATE2.');
+    }
+}
+function checkedCreatorApiUrl(raw) {
+    const parsed = new URL(raw);
+    const local = parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1' || parsed.hostname === '[::1]';
+    if (parsed.username ||
+        parsed.password ||
+        parsed.search ||
+        parsed.hash ||
+        (parsed.protocol !== 'https:' && !(local && parsed.protocol === 'http:'))) {
+        throw new Error('ABX_CREATORS_API_URL must be HTTPS (or localhost HTTP for development) without credentials, a query, or a fragment.');
+    }
+    return parsed.toString().replace(/\/+$/, '');
+}
+/** Resolve the first-party wallet API from its public remote catalog. The env override is an
+ * explicit local/staging escape hatch; production callers discover the interface from the
+ * services catalog and do not need to know a deployment hostname. */
+export async function creatorApiUrl(chainId, env = process.env) {
+    if (env.ABX_CREATORS_API_URL)
+        return checkedCreatorApiUrl(env.ABX_CREATORS_API_URL);
+    const descriptor = await new AbxServiceClient({ baseUrl: ABX_SERVICES_URL, timeoutMs: 10_000 }).descriptor();
+    const endpoint = resolveServiceInterfaceEndpoint(ABX_SERVICES_URL, descriptor, CREATOR_WALLET_INTERFACE);
+    if (!endpoint) {
+        throw new Error('The ABX remote does not advertise an account-bound creator-wallet service. Use --send, --sign, or --unsigned.');
+    }
+    if (!endpoint.chains.includes(chainId)) {
+        throw new Error(`The ABX creator-wallet service does not support chain ${chainId}. Use --send, --sign, or --unsigned.`);
+    }
+    return endpoint.baseUrl;
+}
+function openBrowser(url) {
+    if (process.env.CI)
+        return;
+    try {
+        const command = process.platform === 'darwin'
+            ? { file: 'open', args: [url] }
+            : process.platform === 'win32'
+                ? { file: 'rundll32', args: ['url.dll,FileProtocolHandler', url] }
+                : { file: 'xdg-open', args: [url] };
+        const child = spawn(command.file, command.args, { detached: true, stdio: 'ignore' });
+        child.on('error', () => { });
+        child.unref();
+    }
+    catch {
+        // The complete URL and code are always printed below.
+    }
+}
+/**
+ * Open one short-lived creator authorization session. The human authorizes the agent once; every
+ * exact transaction in this CLI invocation is then signed by that same ephemeral grant. Neither the
+ * OAuth token nor the decrypted authorization key is written to disk or returned to callers.
+ */
+export async function openSponsoredSession(chainKey) {
+    const chain = resolveChain(chainKey);
+    assertSponsorConfigured(chainKey);
+    const apiKey = process.env.ABX_SERVICES_API_KEY;
+    if (!apiKey)
+        throw new Error('ABX Services API key disappeared after sponsorship preflight.');
+    const api = new CreatorApiClient({ baseUrl: await creatorApiUrl(chain.id), token: apiKey });
+    const wallet = await api.provisionWallet();
+    const account = await api.account();
+    if (!account.wallet || account.wallet.address.toLowerCase() !== wallet.address.toLowerCase()) {
+        throw new Error('ABX Creators returned inconsistent wallet binding. Nothing was signed.');
+    }
+    if (!account.capabilities.sponsorship || !account.capabilities.sponsoredChains.includes(chain.id)) {
+        throw new Error(`ABX gas sponsorship is not enabled for ${chain.name} on this account.`);
+    }
+    const authorization = new CreatorAgentAuthorization({ appId: wallet.providerAppId });
+    try {
+        const device = await authorization.start();
+        const verificationUrl = device.verificationUriComplete ?? device.verificationUri;
+        console.log(`\n  Authorize this agent once for the transaction group:`);
+        console.log(`  ${verificationUrl}`);
+        console.log(`  Code: ${device.userCode}\n`);
+        openBrowser(verificationUrl);
+        const wallets = await authorization.wait();
+        const authorized = wallets.find((candidate) => candidate.chainType === 'ethereum' && candidate.address.toLowerCase() === wallet.address.toLowerCase());
+        if (!authorized)
+            throw new Error(`Privy authorized a different wallet; expected ${wallet.address}.`);
+        const publicClient = makePublicClient({ chainKey });
+        let closed = false;
+        return {
+            address: wallet.address,
+            async send(tx) {
+                if (closed)
+                    throw new Error('The creator authorization session is closed.');
+                assertSponsoredPreparedTx(tx, chain.id);
+                if (tx.gasFloor && tx.to)
+                    await waitForCodeAt(publicClient, tx.to);
+                const gas = await pinGas(publicClient, {
+                    from: wallet.address,
+                    to: tx.to,
+                    data: tx.data,
+                    value: tx.value,
+                    gasFloor: tx.gasFloor,
+                });
+                const operationId = `op_${randomUUID().replaceAll('-', '')}`;
+                const prepared = await api.prepare({
+                    operationId,
+                    chainId: chain.id,
+                    to: tx.to,
+                    value: tx.value,
+                    data: tx.data,
+                    gasLimit: sponsoredGasLimit(gas),
+                });
+                const signed = authorization.sign({
+                    walletId: prepared.signingRequest.walletId,
+                    body: prepared.signingRequest.body,
+                    idempotencyKey: prepared.signingRequest.idempotencyKey,
+                    requestExpiry: prepared.signingRequest.requestExpiry,
+                });
+                let operation = await api.submit(operationId, {
+                    requestExpiry: prepared.signingRequest.requestExpiry,
+                    data: tx.data,
+                    signed,
+                });
+                const deadline = Date.now() + 180_000;
+                while (operation.state === 'prepared' ||
+                    operation.state === 'submitting' ||
+                    operation.state === 'pending' ||
+                    operation.state === 'unknown') {
+                    if (Date.now() >= deadline) {
+                        throw new Error(`Sponsored operation ${operationId} could not be reconciled. It may have been submitted; check its status before doing anything else and do not retry it.`);
+                    }
+                    await sleep(1_500);
+                    operation = await api.getOperation(operationId);
+                }
+                if (operation.state !== 'confirmed' || !operation.transactionHash) {
+                    throw new Error(`Sponsored operation ${operationId} failed${operation.errorCode ? ` (${operation.errorCode})` : ''}.`);
+                }
+                const receipt = await publicClient.waitForTransactionReceipt({ hash: operation.transactionHash });
+                if (receipt.status !== 'success')
+                    throw new TxRevertedError(tx.op, operation.transactionHash);
+                return { txHash: operation.transactionHash, receipt };
+            },
+            close() {
+                closed = true;
+                authorization.dispose();
+            },
+        };
+    }
+    catch (error) {
+        authorization.dispose();
+        throw error;
+    }
+}
+//# sourceMappingURL=creator-signer.js.map

package/dist/creator-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"creator-signer.js","sourceRoot":"","sources":["../src/creator-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,KAAK,EAAC,MAAM,oBAAoB,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,MAAM,EACN,YAAY,EACZ,+BAA+B,EAC/B,KAAK,EACL,eAAe,EACf,aAAa,GAId,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAC,yBAAyB,EAAC,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAC,gBAAgB,EAAC,MAAM,aAAa,CAAC;AAE7C,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAEzD;;8CAE8C;AAC9C,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,gCAAgC,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,8BAA8B,CAAC,QAAgB,EAAE,GAAsB;IAC9E,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,4LAA4L,CAC7L,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAgB,EAChB,UAA+D,EAAE;IAEjE,OAAO,sBAAsB,CAAC,QAAQ,EAAE,EAAC,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;oCAEoC;AACpC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,UAAoF,EAAE;IAEtF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACrC,8BAA8B,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,oBAAqB,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,gBAAgB,CAAC;QAC/B,OAAO,EAAE,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC;QAC3C,KAAK,EAAE,MAAM;QACb,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,IAAI,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,GAAG,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,SAAS;YACf,CAAC,CAAC,oEAAoE;YACtE,CAAC,CAAC,wGAAwG;gBACxG,0GAA0G,CAC/G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,CAAC,IAAI,mBAAmB,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;AAChC,CAAC;AAaD;;oDAEoD;AACpD,MAAM,UAAU,yBAAyB,CACvC,EAAc,EACd,OAAe;IAEf,IAAI,EAAE,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,4CAA4C,EAAE,CAAC,OAAO,cAAc,OAAO,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;IAChH,IACE,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,IAAI;QACX,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,EACzE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qHAAqH,CACtH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED;;qEAEqE;AACrE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,MAAyB,OAAO,CAAC,GAAG;IACvF,IAAI,GAAG,CAAC,oBAAoB;QAAE,OAAO,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,MAAM,IAAI,gBAAgB,CAAC,EAAC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IAC3G,MAAM,QAAQ,GAAG,+BAA+B,CAAC,gBAAgB,EAAE,UAAU,EAAE,wBAAwB,CAAC,CAAC;IACzG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,+GAA+G,CAAC,CAAC;IACnI,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,yDAAyD,OAAO,sCAAsC,CAAC,CAAC;IAC1H,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAC3B,CAAC,CAAC,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAC;YAC7B,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAC5B,CAAC,CAAC,EAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,EAAC;gBAChE,CAAC,CAAC,EAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAC,CAAC;QACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,CAAC,CAAC;QACnF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACrC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAE9F,MAAM,GAAG,GAAG,IAAI,gBAAgB,CAAC,EAAC,OAAO,EAAE,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,CAAC,IAAI,mBAAmB,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,yBAAyB,CAAC,EAAC,KAAK,EAAE,MAAM,CAAC,aAAa,EAAC,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3C,MAAM,eAAe,GAAG,MAAM,CAAC,uBAAuB,IAAI,MAAM,CAAC,eAAe,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,KAAK,eAAe,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC5C,WAAW,CAAC,eAAe,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAC7B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,UAAU,IAAI,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CACtH,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;QAErG,MAAM,YAAY,GAAG,gBAAgB,CAAC,EAAC,QAAQ,EAAC,CAAC,CAAC;QAClD,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,CAAC,IAAI,CAAC,EAAc;gBACvB,IAAI,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAC5E,yBAAyB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;gBACxC,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;oBAAE,MAAM,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE;oBACrC,IAAI,EAAE,MAAM,CAAC,OAAO;oBACpB,EAAE,EAAE,EAAE,CAAC,EAAE;oBACT,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,KAAK,EAAE,EAAE,CAAC,KAAK;oBACf,QAAQ,EAAE,EAAE,CAAC,QAAQ;iBACtB,CAAC,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC7D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC;oBACjC,WAAW;oBACX,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,EAAE,EAAE,EAAE,CAAC,EAAE;oBACT,KAAK,EAAE,EAAE,CAAC,KAAK;oBACf,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC;iBACjC,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC;oBAChC,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC,QAAQ;oBAC1C,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,IAAI;oBAClC,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,cAAc;oBACtD,aAAa,EAAE,QAAQ,CAAC,cAAc,CAAC,aAAa;iBACrD,CAAC,CAAC;gBACH,IAAI,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE;oBAC5C,aAAa,EAAE,QAAQ,CAAC,cAAc,CAAC,aAAa;oBACpD,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,MAAM;iBACP,CAAC,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;gBACtC,OACE,SAAS,CAAC,KAAK,KAAK,UAAU;oBAC9B,SAAS,CAAC,KAAK,KAAK,YAAY;oBAChC,SAAS,CAAC,KAAK,KAAK,SAAS;oBAC7B,SAAS,CAAC,KAAK,KAAK,SAAS,EAC7B,CAAC;oBACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;wBAC3B,MAAM,IAAI,KAAK,CACb,uBAAuB,WAAW,wHAAwH,CAC3J,CAAC;oBACJ,CAAC;oBACD,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;oBACnB,SAAS,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;gBAClD,CAAC;gBACD,IAAI,SAAS,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;oBAClE,MAAM,IAAI,KAAK,CAAC,uBAAuB,WAAW,UAAU,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACzH,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,yBAAyB,CAAC,EAAC,IAAI,EAAE,SAAS,CAAC,eAAe,EAAC,CAAC,CAAC;gBAChG,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;gBAC9F,OAAO,EAAC,MAAM,EAAE,SAAS,CAAC,eAAe,EAAE,OAAO,EAAC,CAAC;YACtD,CAAC;YACD,KAAK;gBACH,MAAM,GAAG,IAAI,CAAC;gBACd,aAAa,CAAC,OAAO,EAAE,CAAC;YAC1B,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,aAAa,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}