@artblocks/abx-cli 0.1.0-alpha.9 → 0.2.0

package/dist/conformance.js

@@ -0,0 +1,400 @@
+/**
+ * Remote-service conformance — the assertion set behind `abx remote <name|url> --conformance`
+ * (see `commands/service.ts`'s `cmdRemoteConformance`). A third party can self-certify a hosted
+ * resolver against the published CLI with no repository checkout.
+ *
+ * `scripts/e2e-remote-resolver.sh` runs the CLI command against the reference container and greps
+ * stdout for the literal `✓ conformant`. Keep {@link verdictLine} and
+ * {@link formatAssertion}'s prefixes stable.
+ *
+ * Dogfoods the SDK's `AbxServiceClient` — the same client the CLI drives against a remote resolver
+ * — so passing here means the real tooling interoperates with the target service, per
+ * `site/content/docs/using-abx/remote-services.mdx`.
+ *
+ * Tiers (each unlocks with the inputs given — a bare URL with no token still runs the always-tier,
+ * which is enough to self-certify the public surface with zero setup):
+ *   always              descriptor served + required fields; unauthenticated write refused; the
+ *                       read-plane's error taxonomy; every DECLARED interface's routes exist
+ *   token               authed GET /v1/projects; the artifact registry refuses bound/referenced
+ *                       output mismatches
+ *   token + address     the full write loop: register → (poll to live) → status → reindex →
+ *   + chainId           deregister. Needs a contract the service can actually replay, so point it
+ *                       at one you own — this is the one tier that persists (then removes) state
+ *                       on the target, which is why it stays opt-in behind BOTH flags together (a
+ *                       token alone is not enough to reach it).
+ *
+ * A 403 anywhere in the loop reports as legitimate provider scoping (the token isn't authorized for
+ * that contract), never a conformance failure.
+ */
+import { AbxServiceClient, AbxServiceError, CONTROL_PLANE_INTERFACE, TOKEN_API_INTERFACE, resolveServiceInterfaceEndpoint, } from '@artblocks/abx-sdk';
+const ZERO_ADDRESS = '0x' + '0'.repeat(40);
+// Every lifecycle-bearing status field (register/status responses) must be one of these five words.
+const LIFECYCLE = ['queued', 'backfilling', 'live', 'stale', 'failed'];
+/** One ✓/✗/· line. Nested sub-bullets carry their own leading spaces in `message` (unchanged from
+ *  the original script), so the indentation is intentional, not a formatting bug. */
+export function formatAssertion(a) {
+    const prefix = a.status === 'pass' ? '✓' : a.status === 'fail' ? '✗' : '·';
+    return `  ${prefix} ${a.message}`;
+}
+/** The final line — kept byte-stable: `scripts/e2e-remote-resolver.sh` greps for '✓ conformant'. */
+export function verdictLine(report) {
+    return report.failures ? `\n✗ ${report.failures} conformance failure(s)\n` : '\n✓ conformant\n';
+}
+export async function runConformance(opts) {
+    const base = opts.baseUrl.replace(/\/+$/, '');
+    const assertions = [];
+    const pass = (message) => assertions.push({ status: 'pass', message });
+    const failed = (message) => assertions.push({ status: 'fail', message });
+    const note = (message) => assertions.push({ status: 'note', message });
+    const scoped = (err) => err instanceof AbxServiceError && err.status === 403;
+    const probeAddr = opts.address ?? ZERO_ADDRESS;
+    let tokenBase = base;
+    let controlBase = base;
+    const readJson = async (path) => {
+        try {
+            const res = await fetch(tokenBase + path);
+            return { status: res.status, body: (await res.json().catch(() => ({}))) };
+        }
+        catch (err) {
+            return { networkError: err };
+        }
+    };
+    // ── tier 0: the descriptor ────────────────────────────────────────────────────
+    const anon = new AbxServiceClient({ baseUrl: base });
+    let descriptor = null;
+    try {
+        descriptor = await anon.descriptor();
+        pass('GET /.well-known/abx-service serves JSON');
+    }
+    catch (err) {
+        failed(`no service descriptor: ${err.message}`);
+    }
+    if (descriptor) {
+        Array.isArray(descriptor.interfaces) && descriptor.interfaces.length
+            ? pass(`interfaces declared: ${descriptor.interfaces.join(' · ')}`)
+            : failed('descriptor.interfaces missing/empty (required)');
+        Array.isArray(descriptor.chains) && descriptor.chains.length
+            ? pass(`chains declared: ${descriptor.chains.join(', ')}`)
+            : failed('descriptor.chains missing/empty (required)');
+        if (opts.chainId !== undefined) {
+            descriptor.chains?.includes(opts.chainId)
+                ? pass(`serves chain ${opts.chainId}`)
+                : failed(`descriptor.chains does not include ${opts.chainId} — registrations for it should be refused`);
+        }
+        const controlPlane = descriptor.interfaces?.includes(CONTROL_PLANE_INTERFACE);
+        if (controlPlane) {
+            descriptor.auth?.scheme === 'bearer'
+                ? pass('auth.scheme is "bearer"')
+                : failed(`control plane declared but auth.scheme is ${JSON.stringify(descriptor.auth?.scheme)} (must be "bearer")`);
+        }
+        else {
+            note(`control plane not declared (${CONTROL_PLANE_INTERFACE} absent) — register/list tiers will report accordingly`);
+        }
+        if (!descriptor.interfaces?.includes(TOKEN_API_INTERFACE))
+            note(`descriptor does not declare ${TOKEN_API_INTERFACE} — is this a resolver?`);
+        if (descriptor.render?.attached) {
+            note(`rendering is managed behind this service (effects: ${descriptor.render.effects ? descriptor.render.effects.map((e) => e.key).join(', ') : 'unverified'})`);
+        }
+        try {
+            tokenBase = resolveServiceInterfaceEndpoint(base, descriptor, TOKEN_API_INTERFACE)?.baseUrl ?? base;
+            controlBase = resolveServiceInterfaceEndpoint(base, descriptor, CONTROL_PLANE_INTERFACE)?.baseUrl ?? base;
+        }
+        catch (err) {
+            failed(`invalid interface endpoint: ${err.message}`);
+        }
+    }
+    // ── tier 0: unauthenticated writes must be refused ────────────────────────────
+    const chainForProbe = opts.chainId ?? descriptor?.chains?.[0] ?? 1;
+    const anonymousControl = new AbxServiceClient({ baseUrl: controlBase });
+    try {
+        await anonymousControl.registerProject({ chainId: chainForProbe, address: probeAddr });
+        failed('unauthenticated POST /v1/projects was ACCEPTED — the control plane must require a bearer token');
+    }
+    catch (err) {
+        if (err instanceof AbxServiceError && err.status === 401)
+            pass('unauthenticated register → 401');
+        else if (err instanceof AbxServiceError && err.code === 'disabled')
+            pass('control plane disabled on this node (404 code "disabled") — honest, conformant');
+        else if (err instanceof AbxServiceError)
+            failed(`unauthenticated register → ${err.status} ${err.code ?? ''} (expected 401, or 404 code "disabled")`);
+        else
+            failed(`unauthenticated register probe errored: ${err.message}`);
+    }
+    // ── tier 0: the read plane's error taxonomy ───────────────────────────────────
+    // "No metadata came back" has three distinct causes, and a service that answers a bare 404 to all
+    // of them is a trap: a client that hand-built a URL reads its own mistake as a provider outage and
+    // files a bug against a working service. Each cause MUST be distinguishable by a machine `code` —
+    // remote-services.md → "Three ways a read can miss".
+    {
+        // (a) a real route with the wrong shape — the observed mistake is dropping the tokenId off
+        //     /t/{chainId}/{address}/{tokenId} while reaching for collection metadata.
+        const shape = await readJson(`/t/${chainForProbe}/${probeAddr}`);
+        if (shape.networkError)
+            failed(`read-plane probe unreachable: ${shape.networkError.message}`);
+        else if (shape.status === 400 && shape.body?.code === 'invalid_request') {
+            pass('malformed token path → 400 invalid_request (not a bare 404)');
+            /\/c\//.test(shape.body?.error ?? '') || shape.body?.didYouMean
+                ? pass('  …and it points at /c/{chainId}/{address} for collection metadata')
+                : note('  the 400 does not mention /c/{chainId}/{address} — SHOULD name the route that serves what the caller wanted');
+        }
+        else if (shape.status === 404) {
+            failed(`malformed token path /t/${chainForProbe}/${probeAddr} → bare 404 ${JSON.stringify(shape.body?.code ?? null)} — ` +
+                'MUST be 400 invalid_request naming the correct template; a 404 here is indistinguishable from "not indexed" and reads as an outage');
+        }
+        else
+            failed(`malformed token path → ${shape.status} ${shape.body?.code ?? ''} (expected 400 invalid_request)`);
+        // (b) no such route on this node at all
+        const unknown = await readJson('/abx-conformance-no-such-route');
+        if (unknown.status === 404 && unknown.body?.code === 'unknown_route')
+            pass('unknown path → 404 unknown_route');
+        else if (unknown.status === 404)
+            failed(`unknown path → 404 with code ${JSON.stringify(unknown.body?.code ?? null)} (expected "unknown_route")`);
+        else if (!unknown.networkError)
+            note(`unknown path → ${unknown.status} (expected 404 unknown_route)`);
+        // (c) well-formed, right chain, contract not indexed here — the ONLY one of the three that is
+        //     about the project. Skipped when --address names a contract the service may actually serve.
+        if (!opts.address) {
+            const missing = await readJson(`/c/${chainForProbe}/${probeAddr}`);
+            if (missing.status === 404 && missing.body?.code === 'not_registered')
+                pass('well-formed path, unindexed contract → 404 not_registered');
+            else if (missing.status === 404)
+                failed(`unindexed contract → 404 with code ${JSON.stringify(missing.body?.code ?? null)} (expected "not_registered")`);
+            else if (!missing.networkError)
+                note(`unindexed contract probe → ${missing.status} (expected 404 not_registered)`);
+        }
+        // (d) a chain this node doesn't serve — a request error, and the body says what IS served.
+        const wrongChain = await readJson(`/t/999999999/${probeAddr}/0`);
+        if (wrongChain.body?.code === 'unsupported_chain') {
+            pass(`wrong chain → ${wrongChain.status} unsupported_chain`);
+            Array.isArray(wrongChain.body?.chains)
+                ? pass(`  …and carries the chains it does serve: ${wrongChain.body?.chains?.join(', ')}`)
+                : note('  the unsupported_chain body omits `chains` — SHOULD carry the chain ids this node serves');
+        }
+        else if (!wrongChain.networkError) {
+            failed(`wrong chain → ${wrongChain.status} ${JSON.stringify(wrongChain.body?.code ?? null)} (expected code "unsupported_chain")`);
+        }
+    }
+    // ── tier 0: a declared interface means EVERY route it names answers ────────────
+    // The interface ids are all-or-nothing. One provider declared `abx-token-api/v1` while `/verify`
+    // had never been implemented, and nothing on either side caught it: the route answered a bare 404,
+    // which reads to a client as "this service is broken". Omitting an interface is the honest way to
+    // express partial support — declaring one and serving a subset is not.
+    //
+    // The assertion is deliberately narrow: a declared route may legitimately answer 404 `not_registered`
+    // (nothing indexed there) or 400 `invalid_request`. What it must NOT answer is `unknown_route` or a
+    // code-less 404 — those say the route itself doesn't exist.
+    if (descriptor?.interfaces?.includes(TOKEN_API_INTERFACE)) {
+        const routes = [
+            [`/t/${chainForProbe}/${probeAddr}/0`, 'token metadata'],
+            [`/t/${chainForProbe}/${probeAddr}/0/image`, 'token image'],
+            [`/c/${chainForProbe}/${probeAddr}`, 'collection metadata'],
+            [`/api/project/${chainForProbe}/${probeAddr}`, 'project state'],
+            [`/api/project/${chainForProbe}/${probeAddr}/verify`, 'verify'],
+        ];
+        for (const [path, what] of routes) {
+            const r = await readJson(path);
+            if (r.networkError) {
+                failed(`${what} (${path}) unreachable: ${r.networkError.message}`);
+                continue;
+            }
+            // A `410 burned` is conformant, not a miss: the route exists and answered honestly about a
+            // destroyed token (`remote-services.md` → the read-miss table). Only a 404 that says the ROUTE
+            // is unknown fails here.
+            if (r.status === 404 && (r.body?.code === 'unknown_route' || r.body?.code === undefined)) {
+                failed(`${what} (${path}) → 404 ${r.body?.code ?? '(no code)'} — but this service declares ${TOKEN_API_INTERFACE}, ` +
+                    `which names that route. Implement it, or stop declaring the interface.`);
+            }
+            else
+                pass(`${what} route exists (${r.status}${r.body?.code ? ` ${r.body.code}` : ''})`);
+        }
+    }
+    // ── tier 1: an authed token ───────────────────────────────────────────────────
+    if (!opts.token) {
+        note('no token — skipping the authed tiers');
+        return { baseUrl: base, assertions, failures: assertions.filter((a) => a.status === 'fail').length };
+    }
+    const authed = new AbxServiceClient({ baseUrl: controlBase, token: opts.token });
+    // A rejected credential makes the authed tiers UNASSESSABLE — it does not make the service
+    // non-conformant. Before this was tracked, one stale key produced four confident "this service
+    // accepts bytes it must refuse / is becoming an object store" failures, because every probe below
+    // 401s and a 401 is not the 400 they assert on. That reads as an indictment of the operator, it is
+    // the exact opposite of the guarantee this command exists to give (conformance is checkable from
+    // OUTSIDE, before you sign up), and it left an agent choosing between believing five ✗ marks and
+    // rationalizing them away. So: record the one true failure, then stop asking questions this
+    // credential cannot answer.
+    let tokenRejected = false;
+    try {
+        const projects = await authed.listProjects();
+        pass(`GET /v1/projects with the token → ${projects.length} project(s) visible`);
+    }
+    catch (err) {
+        if (err instanceof AbxServiceError && err.status === 401) {
+            tokenRejected = true;
+            failed('the provided token was rejected (401)');
+        }
+        else
+            failed(`GET /v1/projects failed: ${err.message}`);
+    }
+    if (tokenRejected) {
+        note('skipping the authed tiers — they cannot be assessed with a rejected credential, and a 401 ' +
+            'from every probe would look like a conformance failure of the SERVICE rather than of this key. ' +
+            `Get a working key${descriptor?.auth?.signupUrl ? ` (provider recovery: ${descriptor.auth.signupUrl})` : ''} and re-run.`);
+        return { baseUrl: base, assertions, failures: assertions.filter((a) => a.status === 'fail').length };
+    }
+    // ── tier 1: the artifact registry is a POINTER registry ─────────────────────
+    // `site/content/docs/protocol/effects.mdx#metadata-binding`. Which form is legal is fixed by the output's
+    // binding, and BOTH mismatches must be refused: silently accepting media bytes makes every
+    // conforming resolver an object store, and silently accepting a locator for `traits` records
+    // something that can never stitch — a wrong answer served confidently. These probes are all
+    // refusals, so a conformant service stores nothing as a result of them.
+    if (descriptor?.interfaces?.includes(CONTROL_PLANE_INTERFACE)) {
+        const publish = async (body) => {
+            try {
+                const res = await fetch(controlBase + '/v1/effect-artifacts', {
+                    method: 'POST',
+                    headers: { authorization: `Bearer ${opts.token}`, 'content-type': 'application/json' },
+                    body: JSON.stringify({ chainId: chainForProbe, address: probeAddr, tokenId: '0', inputsHash: '0x' + 'ab'.repeat(32), ...body }),
+                });
+                return { status: res.status, body: (await res.json().catch(() => ({}))) };
+            }
+            catch (err) {
+                return { networkError: err };
+            }
+        };
+        const refuses = async (label, body) => {
+            const r = await publish(body);
+            if (r.networkError)
+                return failed(`${label}: unreachable (${r.networkError.message})`);
+            if (r.status === 401)
+                return note(`${label}: 401 — this token was rejected, so the probe says nothing about the service (fix the key, then re-run)`);
+            if (r.status === 403)
+                return note(`${label}: 403 — this token isn't authorized to write artifacts (provider scoping, not a failure)`);
+            if (r.status === 400)
+                return pass(`${label} → 400 ${r.body?.code ?? ''}`);
+            if (r.status === 404 && r.body?.code === 'unknown_route') {
+                return failed(`${label}: the artifact-registry route is missing, but this service declares ${CONTROL_PLANE_INTERFACE} (the routes ride it — there is no separate publish interface)`);
+            }
+            failed(`${label} → ${r.status} ${r.body?.code ?? ''} (expected 400; accepting this is how a resolver becomes an object store / serves traits that never stitch)`);
+        };
+        await refuses('bytes for a REFERENCED output (image)', { output: 'image', contentType: 'image/png', bytes_base64: Buffer.from([1, 2, 3]).toString('base64') });
+        await refuses('a locator for a BOUND output (traits)', { output: 'traits', locator: 'ipfs://cid-conformance' });
+        await refuses('bound content over the 64KB cap', { output: 'traits', bytes_base64: Buffer.alloc(64 * 1024 + 1, 0x41).toString('base64') });
+        await refuses('a locator only the producer could resolve', { output: 'image', locator: 'http://localhost:8080/x.png' });
+    }
+    // ── tier 2: the full register → status → reindex → deregister loop ──────────
+    if (!opts.address) {
+        note('no address — skipping the register loop (point it at a contract you own on the served chain)');
+    }
+    else if (opts.chainId === undefined) {
+        note('address given without a chainId — skipping the register loop');
+    }
+    else {
+        const chainId = opts.chainId;
+        const address = opts.address;
+        try {
+            const reg = await authed.registerProject({ chainId, address, ...(opts.fromBlock ? { fromBlock: opts.fromBlock } : {}) });
+            // Either register shape is conformant: 200 with the completed summary, or 202 + a lifecycle
+            // state with catch-up deferred. The SDK normalizes the HTTP status into `accepted`.
+            if (reg.accepted) {
+                LIFECYCLE.includes(reg.project?.status)
+                    ? pass(`register → 202 accepted (${reg.project.status}) — catch-up deferred`)
+                    : failed(`register → 202 but project.status is ${JSON.stringify(reg.project?.status)} (must be one of ${LIFECYCLE.join(' | ')})`);
+            }
+            else {
+                reg.ok && (reg.mode === 'full' || reg.mode === 'incremental')
+                    ? pass(`register → 200 ok (${reg.mode}, ${reg.project?.eventCount ?? '?'} events)`)
+                    : failed(`register response missing ok/mode: ${JSON.stringify(reg)}`);
+            }
+            // DURABLE FIRST: whichever shape answered, the registration must be visible IMMEDIATELY — it
+            // is persisted before catch-up, so a slow/failing chain RPC can never lose the add.
+            const listed = await authed.listProjects();
+            listed.some((p) => p.address?.toLowerCase() === address.toLowerCase())
+                ? pass('registration is visible on the list right after register (durable before catch-up)')
+                : failed('the project is NOT on GET /v1/projects right after register — the registration must be persisted before catch-up');
+            let status = await authed.projectStatus(chainId, address);
+            status.fromBlock !== undefined && 'toBlock' in status
+                ? pass(`status → fromBlock ${status.fromBlock}, toBlock ${status.toBlock}`)
+                : failed(`status response missing fromBlock/toBlock: ${JSON.stringify(status)}`);
+            LIFECYCLE.includes(status.status)
+                ? pass(`status → lifecycle '${status.status}'`)
+                : failed(`status.status is ${JSON.stringify(status.status)} (must be one of ${LIFECYCLE.join(' | ')})`);
+            if (!('headBlock' in status))
+                failed('status is missing headBlock — a client cannot compute lag / % complete without it');
+            else if (status.headBlock)
+                pass(`status → headBlock ${status.headBlock} (lag is computable)`);
+            else
+                note('status.headBlock is null — the field is there, but this service is not reporting head, so a client cannot show % complete');
+            // Poll to a terminal state, exactly as the CLI does. A service that defers catch-up must
+            // eventually reach `live` with nobody prompting it.
+            if (status.status !== 'live' && status.status !== 'failed') {
+                note(`'${status.status}' — polling to a terminal state…`);
+                try {
+                    status = await authed.awaitIndexed(chainId, address, {
+                        timeoutMs: opts.awaitTimeoutMs ?? 120_000,
+                        intervalMs: opts.awaitIntervalMs ?? 2_000,
+                    });
+                }
+                catch (err) {
+                    failed(`never reached a terminal status: ${err.message}`);
+                }
+            }
+            status.status === 'live'
+                ? pass(`caught up → live (${status.eventCount} events, ${status.tokenCount} token(s))`)
+                : status.status === 'failed'
+                    ? failed(`catch-up reported failed${status.error ? ` (${status.error.class})` : ''} — point address at a contract this service can replay`)
+                    : note(`still '${status.status}' — not a conformance failure, but slower than this fixture waits`);
+            if (status.error && !['rpc_unavailable', 'rpc_rate_limited', 'not_abx_contract', 'internal'].includes(status.error.class)) {
+                failed(`error.class is ${JSON.stringify(status.error.class)} — must be one of the closed set`);
+            }
+            if (status.error?.message && /https?:\/\//.test(status.error.message)) {
+                failed('error.message contains a URL — it must be credential-free (a keyed RPC URL is a secret)');
+            }
+            // The accept path, on a project the service now actually serves: a referenced output's locator
+            // is recorded and served by REDIRECT — never proxied, so the producer's egress stays its own.
+            try {
+                const key = (await authed.publishEffectArtifact({
+                    chainId,
+                    address,
+                    tokenId: '0',
+                    inputsHash: ('0x' + 'ab'.repeat(32)),
+                    output: 'image',
+                    contentType: 'image/png',
+                    locator: 'https://conformance.invalid/still.png',
+                })).key;
+                pass(`artifact registry accepted a referenced locator (key ${String(key).slice(0, 10)}…)`);
+                try {
+                    const served = await fetch(`${tokenBase}/t/${chainId}/${address}/0/data/render/image`, { redirect: 'manual' });
+                    if (served.status === 302 || served.status === 301)
+                        pass('  …and the read plane 302-redirects to it (no proxying)');
+                    else if (served.status === 404)
+                        note("  the artifact route 404s — the row addresses a different inputsHash than this token's current one (self-invalidation working as designed)");
+                    else
+                        failed(`  the artifact route answered ${served.status} — a registered locator MUST be served by redirect, never proxied`);
+                }
+                catch (err) {
+                    note(`could not probe the artifact read route: ${err.message}`);
+                }
+            }
+            catch (err) {
+                if (scoped(err))
+                    note("403 on artifact publish — the token isn't authorized to write artifacts (provider scoping)");
+                else
+                    failed(`publishing a referenced locator failed: ${err.message}`);
+            }
+            const re = await authed.reindexProject(chainId, address);
+            re.ok ? pass(`reindex → ok (${re.accepted ? `202 ${re.project.status}` : re.mode})`) : failed(`reindex response missing ok: ${JSON.stringify(re)}`);
+            const { removed } = await authed.removeProject(chainId, address);
+            removed ? pass('deregister → removed') : failed('deregister reported not_registered for a project just registered');
+            const second = await authed.removeProject(chainId, address);
+            !second.removed ? pass('second deregister → not_registered (idempotent to retry)') : failed('second deregister claimed to remove again');
+        }
+        catch (err) {
+            if (scoped(err))
+                note(`403 during the loop — the token isn't authorized for ${address} (provider scoping; not a conformance failure)`);
+            else
+                failed(`register loop failed: ${err.message}`);
+        }
+    }
+    return { baseUrl: base, assertions, failures: assertions.filter((a) => a.status === 'fail').length };
+}
+//# sourceMappingURL=conformance.js.map

package/dist/conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.js","sourceRoot":"","sources":["../src/conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,mBAAmB,EACnB,+BAA+B,GAGhC,MAAM,oBAAoB,CAAC;AAoC5B,MAAM,YAAY,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC3C,oGAAoG;AACpG,MAAM,SAAS,GAA2B,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAE/F;qFACqF;AACrF,MAAM,UAAU,eAAe,CAAC,CAAY;IAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3E,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,WAAW,CAAC,MAAyB;IACnD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,QAAQ,2BAA2B,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAClG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAwB;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;IACtF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC;IAC/C,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,IAAI,WAAW,GAAG,IAAI,CAAC;IAEvB,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAwB,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;YAC1C,OAAO,EAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAwB,EAAC,CAAC;QACjG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAC,YAAY,EAAE,GAAY,EAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC;IAEF,iFAAiF;IACjF,MAAM,IAAI,GAAG,IAAI,gBAAgB,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC,CAAC;IACnD,IAAI,UAAU,GAA6B,IAAI,CAAC;IAChD,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,0BAA2B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM;YAClE,CAAC,CAAC,IAAI,CAAC,wBAAwB,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnE,CAAC,CAAC,MAAM,CAAC,gDAAgD,CAAC,CAAC;QAC7D,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM;YAC1D,CAAC,CAAC,IAAI,CAAC,oBAAoB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;gBACvC,CAAC,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACtC,CAAC,CAAC,MAAM,CAAC,sCAAsC,IAAI,CAAC,OAAO,2CAA2C,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,YAAY,GAAG,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QAC9E,IAAI,YAAY,EAAE,CAAC;YACjB,UAAU,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ;gBAClC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACjC,CAAC,CAAC,MAAM,CAAC,6CAA6C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACxH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,+BAA+B,uBAAuB,wDAAwD,CAAC,CAAC;QACvH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,mBAAmB,CAAC;YAAE,IAAI,CAAC,+BAA+B,mBAAmB,wBAAwB,CAAC,CAAC;QAC5I,IAAI,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,sDAAsD,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;QACnK,CAAC;QACD,IAAI,CAAC;YACH,SAAS,GAAG,+BAA+B,CAAC,IAAI,EAAE,UAAU,EAAE,mBAAmB,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;YACpG,WAAW,GAAG,+BAA+B,CAAC,IAAI,EAAE,UAAU,EAAE,uBAAuB,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;QAC5G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,+BAAgC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,IAAI,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,EAAC,OAAO,EAAE,WAAW,EAAC,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,eAAe,CAAC,EAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAC,CAAC,CAAC;QACrF,MAAM,CAAC,gGAAgG,CAAC,CAAC;IAC3G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,IAAI,CAAC,gCAAgC,CAAC,CAAC;aAC5F,IAAI,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,IAAI,CAAC,gFAAgF,CAAC,CAAC;aACtJ,IAAI,GAAG,YAAY,eAAe;YAAE,MAAM,CAAC,8BAA8B,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,yCAAyC,CAAC,CAAC;;YAChJ,MAAM,CAAC,2CAA4C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,iFAAiF;IACjF,kGAAkG;IAClG,mGAAmG;IACnG,kGAAkG;IAClG,qDAAqD;IACrD,CAAC;QACC,2FAA2F;QAC3F,+EAA+E;QAC/E,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,aAAa,IAAI,SAAS,EAAE,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,YAAY;YAAE,MAAM,CAAC,iCAAiC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;aACzF,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACxE,IAAI,CAAC,6DAA6D,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,UAAU;gBAC7D,CAAC,CAAC,IAAI,CAAC,oEAAoE,CAAC;gBAC5E,CAAC,CAAC,IAAI,CAAC,8GAA8G,CAAC,CAAC;QAC3H,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAChC,MAAM,CACJ,2BAA2B,aAAa,IAAI,SAAS,eAAe,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,KAAK;gBAC/G,oIAAoI,CACvI,CAAC;QACJ,CAAC;;YAAM,MAAM,CAAC,0BAA0B,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,iCAAiC,CAAC,CAAC;QAEjH,wCAAwC;QACxC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,gCAAgC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,KAAK,eAAe;YAAE,IAAI,CAAC,kCAAkC,CAAC,CAAC;aAC1G,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,CAAC,gCAAgC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,6BAA6B,CAAC,CAAC;aAC5I,IAAI,CAAC,OAAO,CAAC,YAAY;YAAE,IAAI,CAAC,kBAAkB,OAAO,CAAC,MAAM,+BAA+B,CAAC,CAAC;QAEtG,8FAA8F;QAC9F,iGAAiG;QACjG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,aAAa,IAAI,SAAS,EAAE,CAAC,CAAC;YACnE,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,KAAK,gBAAgB;gBAAE,IAAI,CAAC,2DAA2D,CAAC,CAAC;iBACpI,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,8BAA8B,CAAC,CAAC;iBACnJ,IAAI,CAAC,OAAO,CAAC,YAAY;gBAAE,IAAI,CAAC,8BAA8B,OAAO,CAAC,MAAM,gCAAgC,CAAC,CAAC;QACrH,CAAC;QAED,2FAA2F;QAC3F,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,gBAAgB,SAAS,IAAI,CAAC,CAAC;QACjE,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAClD,IAAI,CAAC,iBAAiB,UAAU,CAAC,MAAM,oBAAoB,CAAC,CAAC;YAC7D,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;gBACpC,CAAC,CAAC,IAAI,CAAC,4CAA4C,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzF,CAAC,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;QACxG,CAAC;aAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;YACpC,MAAM,CAAC,iBAAiB,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACpI,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,iGAAiG;IACjG,mGAAmG;IACnG,kGAAkG;IAClG,uEAAuE;IACvE,EAAE;IACF,sGAAsG;IACtG,oGAAoG;IACpG,4DAA4D;IAC5D,IAAI,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC1D,MAAM,MAAM,GAA4B;YACtC,CAAC,MAAM,aAAa,IAAI,SAAS,IAAI,EAAE,gBAAgB,CAAC;YACxD,CAAC,MAAM,aAAa,IAAI,SAAS,UAAU,EAAE,aAAa,CAAC;YAC3D,CAAC,MAAM,aAAa,IAAI,SAAS,EAAE,EAAE,qBAAqB,CAAC;YAC3D,CAAC,gBAAgB,aAAa,IAAI,SAAS,EAAE,EAAE,eAAe,CAAC;YAC/D,CAAC,gBAAgB,aAAa,IAAI,SAAS,SAAS,EAAE,QAAQ,CAAC;SAChE,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;gBACnB,MAAM,CAAC,GAAG,IAAI,KAAK,IAAI,kBAAkB,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnE,SAAS;YACX,CAAC;YACD,2FAA2F;YAC3F,+FAA+F;YAC/F,yBAAyB;YACzB,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;gBACzF,MAAM,CACJ,GAAG,IAAI,KAAK,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,WAAW,gCAAgC,mBAAmB,IAAI;oBAC3G,wEAAwE,CAC3E,CAAC;YACJ,CAAC;;gBAAM,IAAI,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC7C,OAAO,EAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,EAAC,CAAC;IACrG,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAC,CAAC,CAAC;IAC/E,2FAA2F;IAC3F,+FAA+F;IAC/F,kGAAkG;IAClG,mGAAmG;IACnG,iGAAiG;IACjG,iGAAiG;IACjG,4FAA4F;IAC5F,4BAA4B;IAC5B,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAI,CAAC,qCAAqC,QAAQ,CAAC,MAAM,qBAAqB,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzD,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,uCAAuC,CAAC,CAAC;QAClD,CAAC;;YAAM,MAAM,CAAC,4BAA6B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CACF,4FAA4F;YAC1F,iGAAiG;YACjG,oBAAoB,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,wBAAwB,UAAU,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,CAC5H,CAAC;QACF,OAAO,EAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,EAAC,CAAC;IACrG,CAAC;IAED,+EAA+E;IAC/E,0GAA0G;IAC1G,2FAA2F;IAC3F,6FAA6F;IAC7F,4FAA4F;IAC5F,wEAAwE;IACxE,IAAI,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,KAAK,EAAE,IAA6B,EAAwB,EAAE;YAC5E,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,GAAG,sBAAsB,EAAE;oBAC5D,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAC,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAC;oBACpF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,EAAC,CAAC;iBAC9H,CAAC,CAAC;gBACH,OAAO,EAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAwB,EAAC,CAAC;YACjG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAC,YAAY,EAAE,GAAY,EAAC,CAAC;YACtC,CAAC;QACH,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,KAAK,EAAE,KAAa,EAAE,IAA6B,EAAE,EAAE;YACrE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,YAAY;gBAAE,OAAO,MAAM,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC,YAAY,CAAC,OAAO,GAAG,CAAC,CAAC;YACvF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC,GAAG,KAAK,yGAAyG,CAAC,CAAC;YACrJ,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC,GAAG,KAAK,0FAA0F,CAAC,CAAC;YACtI,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,eAAe,EAAE,CAAC;gBACzD,OAAO,MAAM,CAAC,GAAG,KAAK,uEAAuE,uBAAuB,gEAAgE,CAAC,CAAC;YACxL,CAAC;YACD,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,6GAA6G,CAAC,CAAC;QACpK,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,uCAAuC,EAAE,EAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;QAC7J,MAAM,OAAO,CAAC,uCAAuC,EAAE,EAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,wBAAwB,EAAC,CAAC,CAAC;QAC9G,MAAM,OAAO,CAAC,iCAAiC,EAAE,EAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;QACzI,MAAM,OAAO,CAAC,2CAA2C,EAAE,EAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,6BAA6B,EAAC,CAAC,CAAC;IACxH,CAAC;IAED,+EAA+E;IAC/E,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,CAAC,8FAA8F,CAAC,CAAC;IACvG,CAAC;SAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,EAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;YACrH,4FAA4F;YAC5F,oFAAoF;YACpF,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACjB,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;oBACrC,CAAC,CAAC,IAAI,CAAC,4BAA4B,GAAG,CAAC,OAAO,CAAC,MAAM,uBAAuB,CAAC;oBAC7E,CAAC,CAAC,MAAM,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,oBAAoB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtI,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,CAAC;oBAC3D,CAAC,CAAC,IAAI,CAAC,sBAAsB,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,GAAG,UAAU,CAAC;oBACnF,CAAC,CAAC,MAAM,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;YAED,6FAA6F;YAC7F,oFAAoF;YACpF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;gBACpE,CAAC,CAAC,IAAI,CAAC,oFAAoF,CAAC;gBAC5F,CAAC,CAAC,MAAM,CAAC,kHAAkH,CAAC,CAAC;YAE/H,IAAI,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC1D,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,IAAI,MAAM;gBACnD,CAAC,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,SAAS,aAAa,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC3E,CAAC,CAAC,MAAM,CAAC,8CAA8C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnF,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC/B,CAAC,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,MAAM,GAAG,CAAC;gBAC/C,CAAC,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1G,IAAI,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC;gBAAE,MAAM,CAAC,mFAAmF,CAAC,CAAC;iBACrH,IAAI,MAAM,CAAC,SAAS;gBAAE,IAAI,CAAC,sBAAsB,MAAM,CAAC,SAAS,sBAAsB,CAAC,CAAC;;gBACzF,IAAI,CAAC,2HAA2H,CAAC,CAAC;YAEvI,yFAAyF;YACzF,oDAAoD;YACpD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC3D,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,kCAAkC,CAAC,CAAC;gBAC1D,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE;wBACnD,SAAS,EAAE,IAAI,CAAC,cAAc,IAAI,OAAO;wBACzC,UAAU,EAAE,IAAI,CAAC,eAAe,IAAI,KAAK;qBAC1C,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,oCAAqC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YACD,MAAM,CAAC,MAAM,KAAK,MAAM;gBACtB,CAAC,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,UAAU,YAAY,MAAM,CAAC,UAAU,YAAY,CAAC;gBACvF,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;oBAC1B,CAAC,CAAC,MAAM,CAAC,2BAA2B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,wDAAwD,CAAC;oBAC3I,CAAC,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,mEAAmE,CAAC,CAAC;YACvG,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1H,MAAM,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACjG,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,MAAM,CAAC,yFAAyF,CAAC,CAAC;YACpG,CAAC;YAED,+FAA+F;YAC/F,8FAA8F;YAC9F,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,CACV,MAAM,MAAM,CAAC,qBAAqB,CAAC;oBACjC,OAAO;oBACP,OAAO;oBACP,OAAO,EAAE,GAAG;oBACZ,UAAU,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAkB;oBACrD,MAAM,EAAE,OAAO;oBACf,WAAW,EAAE,WAAW;oBACxB,OAAO,EAAE,uCAAuC;iBACjD,CAAC,CACH,CAAC,GAAG,CAAC;gBACN,IAAI,CAAC,wDAAwD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC3F,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,MAAM,OAAO,IAAI,OAAO,sBAAsB,EAAE,EAAC,QAAQ,EAAE,QAAQ,EAAC,CAAC,CAAC;oBAC7G,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;wBAAE,IAAI,CAAC,yDAAyD,CAAC,CAAC;yBAC/G,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;wBAAE,IAAI,CAAC,4IAA4I,CAAC,CAAC;;wBAC9K,MAAM,CAAC,iCAAiC,MAAM,CAAC,MAAM,mEAAmE,CAAC,CAAC;gBACjI,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,4CAA6C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,MAAM,CAAC,GAAG,CAAC;oBAAE,IAAI,CAAC,4FAA4F,CAAC,CAAC;;oBAC/G,MAAM,CAAC,2CAA4C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACnF,CAAC;YAED,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACzD,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gCAAgC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAEpJ,MAAM,EAAC,OAAO,EAAC,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,kEAAkE,CAAC,CAAC;YACpH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5D,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC3I,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,MAAM,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,wDAAwD,OAAO,gDAAgD,CAAC,CAAC;;gBAClI,MAAM,CAAC,yBAA0B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,EAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,EAAC,CAAC;AACrG,CAAC"}

package/dist/contract-read-error.d.ts

@@ -0,0 +1,5 @@
+/** A revert/no-data/decode failure is evidence that this contract lacks the probed getter. */
+export declare function isMissingContractCapability(error: unknown): boolean;
+/** Is the failed contract read evidence about the node rather than the target contract's shape? */
+export declare function isRpcReadFailure(error: unknown): boolean;
+//# sourceMappingURL=contract-read-error.d.ts.map

package/dist/contract-read-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-read-error.d.ts","sourceRoot":"","sources":["../src/contract-read-error.ts"],"names":[],"mappings":"AAkBA,8FAA8F;AAC9F,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CASnE;AAED,mGAAmG;AACnG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CASxD"}

package/dist/contract-read-error.js

@@ -0,0 +1,37 @@
+/**
+ * Viem wraps a failed `eth_call` in one or more error objects. Walk that chain so callers can
+ * distinguish a truthful capability miss (the target does not implement a getter) from an RPC
+ * failure (the node did not answer reliably). Collapsing both to `undefined` produces confident,
+ * false contract classifications whenever a public endpoint flakes.
+ */
+function errorNames(error) {
+    const names = [];
+    const seen = new Set();
+    let current = error;
+    while (current && typeof current === 'object' && !seen.has(current)) {
+        seen.add(current);
+        if ('name' in current && typeof current.name === 'string')
+            names.push(current.name);
+        current = 'cause' in current ? current.cause : undefined;
+    }
+    return names;
+}
+/** A revert/no-data/decode failure is evidence that this contract lacks the probed getter. */
+export function isMissingContractCapability(error) {
+    return errorNames(error).some((name) => [
+        'ContractFunctionRevertedError',
+        'ContractFunctionZeroDataError',
+        'AbiDecodingZeroDataError',
+        'AbiDecodingDataSizeTooSmallError',
+    ].includes(name));
+}
+/** Is the failed contract read evidence about the node rather than the target contract's shape? */
+export function isRpcReadFailure(error) {
+    // Viem may wrap a revert in an execution layer that also contains RPC-ish names. The truthful
+    // contract-level classification is stronger and must win.
+    if (isMissingContractCapability(error))
+        return false;
+    return errorNames(error).some((name) => name.endsWith('RpcError') ||
+        ['HttpRequestError', 'WebSocketRequestError', 'SocketClosedError', 'TimeoutError'].includes(name));
+}
+//# sourceMappingURL=contract-read-error.js.map

package/dist/contract-read-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-read-error.js","sourceRoot":"","sources":["../src/contract-read-error.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;IAChC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,MAAM,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpF,OAAO,GAAG,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC;QACE,+BAA+B;QAC/B,+BAA+B;QAC/B,0BAA0B;QAC1B,kCAAkC;KACnC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjB,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,8FAA8F;IAC9F,0DAA0D;IAC1D,IAAI,2BAA2B,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAC3B,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACzB,CAAC,kBAAkB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACpG,CAAC;AACJ,CAAC"}

package/dist/creator-agent.d.ts

@@ -0,0 +1,49 @@
+import type { CreatorAuthorizationStore } from './creator-keyring.js';
+export declare class CreatorAuthorizationError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+export interface CreatorDeviceAuthorization {
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete?: string;
+}
+export interface AuthorizedCreatorWallet {
+    id: string;
+    address: string;
+    chainType: string;
+}
+/** Privy device grant client. Refresh credentials may be retained in a native OS credential store;
+ * decrypted request-signing keys remain memory-only and die with this instance. */
+export declare class CreatorAgentAuthorization {
+    #private;
+    constructor(options: {
+        appId: string;
+        fetchImpl?: typeof fetch;
+        now?: () => number;
+        store?: CreatorAuthorizationStore;
+        onPersistenceError?: () => void;
+    });
+    start(): Promise<CreatorDeviceAuthorization>;
+    wait(): Promise<AuthorizedCreatorWallet[]>;
+    /** Resume a prior Privy grant. Returns null when no usable credential remains. */
+    restore(): Promise<AuthorizedCreatorWallet[] | null>;
+    /** Persist a newly approved grant after the caller verifies that Privy returned the expected wallet. */
+    remember(): Promise<void>;
+    sign(input: {
+        walletId: string;
+        body: Record<string, unknown>;
+        idempotencyKey: string;
+        requestExpiry: string;
+    }): Promise<{
+        url: string;
+        headers: {
+            'privy-authorization-signature': string;
+            'privy-app-id': string;
+            'privy-idempotency-key': string;
+            'privy-request-expiry': string;
+        };
+    }>;
+    dispose(): void;
+}
+//# sourceMappingURL=creator-agent.d.ts.map

package/dist/creator-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"creator-agent.d.ts","sourceRoot":"","sources":["../src/creator-agent.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAC,yBAAyB,EAA6B,MAAM,sBAAsB,CAAC;AAchG,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAIlC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAwCD;mFACmF;AACnF,qBAAa,yBAAyB;;gBAexB,OAAO,EAAE;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;QACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,yBAAyB,CAAC;QAClC,kBAAkB,CAAC,EAAE,MAAM,IAAI,CAAC;KACjC;IAgDK,KAAK,IAAI,OAAO,CAAC,0BAA0B,CAAC;IAiB5C,IAAI,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAwBhD,kFAAkF;IAC5E,OAAO,IAAI,OAAO,CAAC,uBAAuB,EAAE,GAAG,IAAI,CAAC;IAqB1D,wGAAwG;IAClG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IA2HzB,IAAI,CAAC,KAAK,EAAE;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAC;;;;;;;;;IA6BlH,OAAO,IAAI,IAAI;CAOhB"}