@capxul/sdk 0.2.0-alpha.5 → 1.0.0-alpha.7

package/dist/node/index.d.mts

@@ -1,7 +1,7 @@
-import { _ as AuthCachePortTag, g as AuthCachePort, h as AuthCacheError, t as CapxulSigner, v as CachedJwt } from "../signer-oaYGfjDe.mjs";
-import { Effect, Layer } from "effect";
-import { AuthSession } from "@capxul/types";
+import { s as AuthSession } from "../index-CTXgQ_xR.mjs";
+import { _ as CachedJwt, g as AuthCachePortTag, h as AuthCachePort, m as AuthCacheError, t as CapxulSigner } from "../signer-DqDtJU1l.mjs";
 import { Hex } from "viem";
+import { Effect, Layer } from "effect";
 import * as PlatformFileSystem from "@effect/platform/FileSystem";
 import * as PlatformPath from "@effect/platform/Path";
 

package/dist/node/index.mjs

@@ -1,6 +1,5 @@
-import { a as AuthCacheError, i as parseCachedJwt, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, r as parseAuthSession, t as InMemoryAuthCacheAdapter } from "../InMemoryAuthCacheAdapter-BK-B_ERB.mjs";
+import { a as AuthCacheError, f as toAddress, i as parseCachedJwt, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, r as parseAuthSession, t as InMemoryAuthCacheAdapter } from "../InMemoryAuthCacheAdapter-v5W-XB5M.mjs";
 import { Effect, Layer } from "effect";
-import { toAddress } from "@capxul/types";
 import { privateKeyToAccount } from "viem/accounts";
 import * as os from "node:os";
 import { join } from "node:path";

package/dist/node/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../src/adapters/auth-cache/FileSystemAuthCacheAdapter.ts","../../src/node/index.ts"],"sourcesContent":["import type * as PlatformError from \"@effect/platform/Error\";\nimport * as PlatformFileSystem from \"@effect/platform/FileSystem\";\nimport * as PlatformPath from \"@effect/platform/Path\";\nimport * as NodeFileSystem from \"@effect/platform-node/NodeFileSystem\";\nimport * as NodePath from \"@effect/platform-node/NodePath\";\nimport { Effect, Layer } from \"effect\";\nimport type { AuthSession } from \"@capxul/types\";\n\nimport {\n  AuthCacheError,\n  AuthCachePortTag,\n  type AuthCachePort,\n  type CachedJwt,\n} from \"../../ports/auth-cache\";\nimport { parseAuthSession, parseCachedJwt } from \"./serialization\";\n\ninterface FilePayload {\n  readonly session: AuthSession | null;\n  readonly jwt: CachedJwt | null;\n}\n\ntype FileSystemRuntime = PlatformFileSystem.FileSystem | PlatformPath.Path;\n\nfunction emptyPayload(): FilePayload {\n  return { session: null, jwt: null };\n}\n\nconst nodeFileSystemRuntime = Layer.merge(NodeFileSystem.layer, NodePath.layer);\n\nexport class FileSystemAuthCacheAdapter implements AuthCachePort {\n  private readonly path: string;\n  private readonly runtime: Layer.Layer<FileSystemRuntime>;\n  readonly getSession: Effect.Effect<AuthSession | null, AuthCacheError>;\n  readonly setSession: (session: AuthSession) => Effect.Effect<void, AuthCacheError>;\n  readonly clearSession: Effect.Effect<void, AuthCacheError>;\n  readonly getJwt: Effect.Effect<CachedJwt | null, AuthCacheError>;\n  readonly setJwt: (jwt: CachedJwt) => Effect.Effect<void, AuthCacheError>;\n  readonly clearJwt: Effect.Effect<void, AuthCacheError>;\n\n  constructor(path: string, runtime: Layer.Layer<FileSystemRuntime> = nodeFileSystemRuntime) {\n    this.path = path;\n    this.runtime = runtime;\n\n    this.getSession = this.run(\n      \"getSession\",\n      this.read().pipe(Effect.map((payload) => payload.session)),\n    );\n    this.setSession = (session: AuthSession) =>\n      this.run(\n        \"setSession\",\n        Effect.gen(this, function* () {\n          const cur = yield* this.read();\n          yield* this.write({ session, jwt: cur.jwt });\n        }),\n      );\n    this.clearSession = this.run(\n      \"clearSession\",\n      Effect.gen(this, function* () {\n        const cur = yield* this.read();\n        yield* this.write({ session: null, jwt: cur.jwt });\n      }),\n    );\n    this.getJwt = this.run(\"getJwt\", this.read().pipe(Effect.map((payload) => payload.jwt)));\n    this.setJwt = (jwt: CachedJwt) =>\n      this.run(\n        \"setJwt\",\n        Effect.gen(this, function* () {\n          const cur = yield* this.read();\n          yield* this.write({ session: cur.session, jwt });\n        }),\n      );\n    this.clearJwt = this.run(\n      \"clearJwt\",\n      Effect.gen(this, function* () {\n        const cur = yield* this.read();\n        yield* this.write({ session: cur.session, jwt: null });\n      }),\n    );\n  }\n\n  private read(): Effect.Effect<FilePayload, PlatformError.PlatformError, FileSystemRuntime> {\n    return Effect.gen(this, function* () {\n      const fs = yield* PlatformFileSystem.FileSystem;\n      const exists = yield* fs.exists(this.path);\n      if (!exists) return emptyPayload();\n      const raw = yield* fs.readFileString(this.path, \"utf-8\");\n\n      let parsed: unknown;\n      try {\n        parsed = JSON.parse(raw);\n      } catch {\n        return emptyPayload();\n      }\n      if (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n        return emptyPayload();\n      }\n      const payload = parsed as { readonly session?: unknown; readonly jwt?: unknown };\n\n      return {\n        session: parseAuthSession(payload.session),\n        jwt: parseCachedJwt(payload.jwt),\n      };\n    });\n  }\n\n  private write(\n    payload: FilePayload,\n  ): Effect.Effect<void, PlatformError.PlatformError, FileSystemRuntime> {\n    return Effect.gen(this, function* () {\n      const fs = yield* PlatformFileSystem.FileSystem;\n      const path = yield* PlatformPath.Path;\n      const dir = path.dirname(this.path);\n      const dirExists = yield* fs.exists(dir);\n      if (!dirExists) {\n        yield* fs.makeDirectory(dir, { recursive: true, mode: 0o700 });\n      }\n      yield* fs.writeFileString(this.path, JSON.stringify(payload), { mode: 0o600 });\n      yield* fs.chmod(this.path, 0o600);\n    });\n  }\n\n  private run<T>(\n    operation: string,\n    effect: Effect.Effect<T, PlatformError.PlatformError, FileSystemRuntime>,\n  ): Effect.Effect<T, AuthCacheError> {\n    return effect.pipe(\n      Effect.mapError((cause) => toAuthCacheError(operation, cause)),\n      Effect.provide(this.runtime),\n    );\n  }\n}\n\nexport function FileSystemAuthCacheLayer(input: {\n  readonly path: string;\n  readonly runtime?: Layer.Layer<FileSystemRuntime>;\n}): Layer.Layer<AuthCachePortTag, AuthCacheError> {\n  return Layer.effect(\n    AuthCachePortTag,\n    Effect.sync(() => new FileSystemAuthCacheAdapter(input.path, input.runtime)).pipe(\n      Effect.mapError((cause) => toAuthCacheError(\"initialize\", cause)),\n    ),\n  );\n}\n\nfunction toAuthCacheError(operation: string, cause: unknown): AuthCacheError {\n  return new AuthCacheError({ operation, cause });\n}\n","// `@capxul/sdk/node` — node-only entry (published-package-boundaries.md).\n//\n// The default `@capxul/sdk` entry is browser-clean: it never statically reaches\n// `@effect/platform-node`. Node consumers import the on-disk auth cache and the\n// node key `CapxulSigner` from here.\n\nimport * as os from \"node:os\";\nimport { join } from \"node:path\";\n\nimport { toAddress } from \"@capxul/types\";\nimport { privateKeyToAccount } from \"viem/accounts\";\nimport type { Hex } from \"viem\";\n\nimport { BrowserAuthCacheAdapter } from \"../adapters/auth-cache/BrowserAuthCacheAdapter\";\nimport { FileSystemAuthCacheAdapter } from \"../adapters/auth-cache/FileSystemAuthCacheAdapter\";\nimport { InMemoryAuthCacheAdapter } from \"../adapters/auth-cache/InMemoryAuthCacheAdapter\";\nimport type { WindowLike } from \"../client/window-like\";\nimport type { AuthCachePort } from \"../ports/auth-cache\";\nimport type { CapxulSigner } from \"../signer\";\n\nexport {\n  FileSystemAuthCacheAdapter,\n  FileSystemAuthCacheLayer,\n} from \"../adapters/auth-cache/FileSystemAuthCacheAdapter\";\n\nexport interface DetectNodeAuthCacheAdapterOptions {\n  readonly authCachePath?: string;\n  readonly resolveHomeDirectory?: () => string;\n}\n\n/**\n * Node `CapxulSigner` backed by a raw private key. Signs the EIP-712 `SafeOp`\n * digest the backend returns for a prepared deployment UserOperation. The\n * reference CLI builds this from `DEPLOYER_PRIVATE_KEY` for the live capstone.\n */\nexport function localPrivateKeySigner(input: { readonly privateKey: Hex }): CapxulSigner {\n  const account = privateKeyToAccount(input.privateKey);\n  return {\n    source: \"local-private-key\",\n    async getAddress() {\n      return toAddress(account.address);\n    },\n    async signUserOpHash(hash: Hex): Promise<Hex> {\n      // `sign({ hash })` signs the already-computed SafeOp digest directly.\n      // `signMessage({ message: { raw: hash } })` would add an EIP-191 prefix.\n      return account.sign({ hash });\n    },\n  };\n}\n\n/**\n * Node-aware auth-cache detection. Mirrors the historic default order:\n * 1. Browser localStorage → BrowserAuthCacheAdapter\n * 2. Node.js process → FileSystemAuthCacheAdapter\n *    (`~/.config/capxul/auth-cache.json`)\n * 3. Neither detected → InMemoryAuthCacheAdapter\n *\n * Use this from a Node entrypoint and pass the result to\n * `createCapxulClient({ authCache })` for on-disk session persistence.\n */\nexport function detectNodeAuthCacheAdapter(\n  options: DetectNodeAuthCacheAdapterOptions = {},\n): AuthCachePort {\n  const globalAny = globalThis as unknown as {\n    readonly window?: WindowLike;\n    readonly process?: { readonly versions?: { readonly node?: string } };\n  };\n  if (globalAny.window?.localStorage !== undefined) {\n    return new BrowserAuthCacheAdapter(globalAny.window.localStorage);\n  }\n  if (globalAny.process?.versions?.node !== undefined) {\n    const authCachePath =\n      normalizeConfiguredAuthCachePath(options.authCachePath) ??\n      resolveDefaultAuthCachePath(options.resolveHomeDirectory ?? os.homedir);\n    if (authCachePath !== null) return new FileSystemAuthCacheAdapter(authCachePath);\n  }\n  return new InMemoryAuthCacheAdapter();\n}\n\nfunction normalizeConfiguredAuthCachePath(path: string | undefined): string | null {\n  if (path === undefined) return null;\n  const trimmed = path.trim();\n  return trimmed.length > 0 ? trimmed : null;\n}\n\nfunction resolveDefaultAuthCachePath(resolveHomeDirectory: () => string): string | null {\n  try {\n    return join(resolveHomeDirectory(), \".config\", \"capxul\", \"auth-cache.json\");\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;AAuBA,SAAS,eAA4B;CACnC,OAAO;EAAE,SAAS;EAAM,KAAK;CAAK;AACpC;AAEA,MAAM,wBAAwB,MAAM,MAAM,eAAe,OAAO,SAAS,KAAK;AAE9E,IAAa,6BAAb,MAAiE;CAC/D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,MAAc,UAA0C,uBAAuB;EACzF,KAAK,OAAO;EACZ,KAAK,UAAU;EAEf,KAAK,aAAa,KAAK,IACrB,cACA,KAAK,KAAK,EAAE,KAAK,OAAO,KAAK,YAAY,QAAQ,OAAO,CAAC,CAC3D;EACA,KAAK,cAAc,YACjB,KAAK,IACH,cACA,OAAO,IAAI,MAAM,aAAa;GAC5B,MAAM,MAAM,OAAO,KAAK,KAAK;GAC7B,OAAO,KAAK,MAAM;IAAE;IAAS,KAAK,IAAI;GAAI,CAAC;EAC7C,CAAC,CACH;EACF,KAAK,eAAe,KAAK,IACvB,gBACA,OAAO,IAAI,MAAM,aAAa;GAC5B,MAAM,MAAM,OAAO,KAAK,KAAK;GAC7B,OAAO,KAAK,MAAM;IAAE,SAAS;IAAM,KAAK,IAAI;GAAI,CAAC;EACnD,CAAC,CACH;EACA,KAAK,SAAS,KAAK,IAAI,UAAU,KAAK,KAAK,EAAE,KAAK,OAAO,KAAK,YAAY,QAAQ,GAAG,CAAC,CAAC;EACvF,KAAK,UAAU,QACb,KAAK,IACH,UACA,OAAO,IAAI,MAAM,aAAa;GAC5B,MAAM,MAAM,OAAO,KAAK,KAAK;GAC7B,OAAO,KAAK,MAAM;IAAE,SAAS,IAAI;IAAS;GAAI,CAAC;EACjD,CAAC,CACH;EACF,KAAK,WAAW,KAAK,IACnB,YACA,OAAO,IAAI,MAAM,aAAa;GAC5B,MAAM,MAAM,OAAO,KAAK,KAAK;GAC7B,OAAO,KAAK,MAAM;IAAE,SAAS,IAAI;IAAS,KAAK;GAAK,CAAC;EACvD,CAAC,CACH;CACF;CAEA,OAA2F;EACzF,OAAO,OAAO,IAAI,MAAM,aAAa;GACnC,MAAM,KAAK,OAAO,mBAAmB;GAErC,IAAI,EAAC,OADiB,GAAG,OAAO,KAAK,IAAI,IAC5B,OAAO,aAAa;GACjC,MAAM,MAAM,OAAO,GAAG,eAAe,KAAK,MAAM,OAAO;GAEvD,IAAI;GACJ,IAAI;IACF,SAAS,KAAK,MAAM,GAAG;GACzB,QAAQ;IACN,OAAO,aAAa;GACtB;GACA,IAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GACvE,OAAO,aAAa;GAEtB,MAAM,UAAU;GAEhB,OAAO;IACL,SAAS,iBAAiB,QAAQ,OAAO;IACzC,KAAK,eAAe,QAAQ,GAAG;GACjC;EACF,CAAC;CACH;CAEA,MACE,SACqE;EACrE,OAAO,OAAO,IAAI,MAAM,aAAa;GACnC,MAAM,KAAK,OAAO,mBAAmB;GAErC,MAAM,OAAM,OADQ,aAAa,MAChB,QAAQ,KAAK,IAAI;GAElC,IAAI,EAAC,OADoB,GAAG,OAAO,GAAG,IAEpC,OAAO,GAAG,cAAc,KAAK;IAAE,WAAW;IAAM,MAAM;GAAM,CAAC;GAE/D,OAAO,GAAG,gBAAgB,KAAK,MAAM,KAAK,UAAU,OAAO,GAAG,EAAE,MAAM,IAAM,CAAC;GAC7E,OAAO,GAAG,MAAM,KAAK,MAAM,GAAK;EAClC,CAAC;CACH;CAEA,IACE,WACA,QACkC;EAClC,OAAO,OAAO,KACZ,OAAO,UAAU,UAAU,iBAAiB,WAAW,KAAK,CAAC,GAC7D,OAAO,QAAQ,KAAK,OAAO,CAC7B;CACF;AACF;AAEA,SAAgB,yBAAyB,OAGS;CAChD,OAAO,MAAM,OACX,kBACA,OAAO,WAAW,IAAI,2BAA2B,MAAM,MAAM,MAAM,OAAO,CAAC,EAAE,KAC3E,OAAO,UAAU,UAAU,iBAAiB,cAAc,KAAK,CAAC,CAClE,CACF;AACF;AAEA,SAAS,iBAAiB,WAAmB,OAAgC;CAC3E,OAAO,IAAI,eAAe;EAAE;EAAW;CAAM,CAAC;AAChD;;;;;;;;AC/GA,SAAgB,sBAAsB,OAAmD;CACvF,MAAM,UAAU,oBAAoB,MAAM,UAAU;CACpD,OAAO;EACL,QAAQ;EACR,MAAM,aAAa;GACjB,OAAO,UAAU,QAAQ,OAAO;EAClC;EACA,MAAM,eAAe,MAAyB;GAG5C,OAAO,QAAQ,KAAK,EAAE,KAAK,CAAC;EAC9B;CACF;AACF;;;;;;;;;;;AAYA,SAAgB,2BACd,UAA6C,CAAC,GAC/B;CACf,MAAM,YAAY;CAIlB,IAAI,UAAU,QAAQ,iBAAiB,KAAA,GACrC,OAAO,IAAI,wBAAwB,UAAU,OAAO,YAAY;CAElE,IAAI,UAAU,SAAS,UAAU,SAAS,KAAA,GAAW;EACnD,MAAM,gBACJ,iCAAiC,QAAQ,aAAa,KACtD,4BAA4B,QAAQ,wBAAwB,GAAG,OAAO;EACxE,IAAI,kBAAkB,MAAM,OAAO,IAAI,2BAA2B,aAAa;CACjF;CACA,OAAO,IAAI,yBAAyB;AACtC;AAEA,SAAS,iCAAiC,MAAyC;CACjF,IAAI,SAAS,KAAA,GAAW,OAAO;CAC/B,MAAM,UAAU,KAAK,KAAK;CAC1B,OAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,4BAA4B,sBAAmD;CACtF,IAAI;EACF,OAAO,KAAK,qBAAqB,GAAG,WAAW,UAAU,iBAAiB;CAC5E,QAAQ;EACN,OAAO;CACT;AACF"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/adapters/auth-cache/FileSystemAuthCacheAdapter.ts","../../src/node/index.ts"],"sourcesContent":["import type * as PlatformError from \"@effect/platform/Error\";\nimport * as PlatformFileSystem from \"@effect/platform/FileSystem\";\nimport * as PlatformPath from \"@effect/platform/Path\";\nimport * as NodeFileSystem from \"@effect/platform-node/NodeFileSystem\";\nimport * as NodePath from \"@effect/platform-node/NodePath\";\nimport { Effect, Layer } from \"effect\";\nimport type { AuthSession } from \"@capxul/types\";\n\nimport {\n  AuthCacheError,\n  AuthCachePortTag,\n  type AuthCachePort,\n  type CachedJwt,\n} from \"../../ports/auth-cache\";\nimport { parseAuthSession, parseCachedJwt } from \"./serialization\";\n\ninterface FilePayload {\n  readonly session: AuthSession | null;\n  readonly jwt: CachedJwt | null;\n}\n\ntype FileSystemRuntime = PlatformFileSystem.FileSystem | PlatformPath.Path;\n\nfunction emptyPayload(): FilePayload {\n  return { session: null, jwt: null };\n}\n\nconst nodeFileSystemRuntime = Layer.merge(NodeFileSystem.layer, NodePath.layer);\n\nexport class FileSystemAuthCacheAdapter implements AuthCachePort {\n  private readonly path: string;\n  private readonly runtime: Layer.Layer<FileSystemRuntime>;\n  readonly getSession: Effect.Effect<AuthSession | null, AuthCacheError>;\n  readonly setSession: (session: AuthSession) => Effect.Effect<void, AuthCacheError>;\n  readonly clearSession: Effect.Effect<void, AuthCacheError>;\n  readonly getJwt: Effect.Effect<CachedJwt | null, AuthCacheError>;\n  readonly setJwt: (jwt: CachedJwt) => Effect.Effect<void, AuthCacheError>;\n  readonly clearJwt: Effect.Effect<void, AuthCacheError>;\n\n  constructor(path: string, runtime: Layer.Layer<FileSystemRuntime> = nodeFileSystemRuntime) {\n    this.path = path;\n    this.runtime = runtime;\n\n    this.getSession = this.run(\n      \"getSession\",\n      this.read().pipe(Effect.map((payload) => payload.session)),\n    );\n    this.setSession = (session: AuthSession) =>\n      this.run(\n        \"setSession\",\n        Effect.gen(this, function* () {\n          const cur = yield* this.read();\n          yield* this.write({ session, jwt: cur.jwt });\n        }),\n      );\n    this.clearSession = this.run(\n      \"clearSession\",\n      Effect.gen(this, function* () {\n        const cur = yield* this.read();\n        yield* this.write({ session: null, jwt: cur.jwt });\n      }),\n    );\n    this.getJwt = this.run(\"getJwt\", this.read().pipe(Effect.map((payload) => payload.jwt)));\n    this.setJwt = (jwt: CachedJwt) =>\n      this.run(\n        \"setJwt\",\n        Effect.gen(this, function* () {\n          const cur = yield* this.read();\n          yield* this.write({ session: cur.session, jwt });\n        }),\n      );\n    this.clearJwt = this.run(\n      \"clearJwt\",\n      Effect.gen(this, function* () {\n        const cur = yield* this.read();\n        yield* this.write({ session: cur.session, jwt: null });\n      }),\n    );\n  }\n\n  private read(): Effect.Effect<FilePayload, PlatformError.PlatformError, FileSystemRuntime> {\n    return Effect.gen(this, function* () {\n      const fs = yield* PlatformFileSystem.FileSystem;\n      const exists = yield* fs.exists(this.path);\n      if (!exists) return emptyPayload();\n      const raw = yield* fs.readFileString(this.path, \"utf-8\");\n\n      let parsed: unknown;\n      try {\n        parsed = JSON.parse(raw);\n      } catch {\n        return emptyPayload();\n      }\n      if (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n        return emptyPayload();\n      }\n      const payload = parsed as { readonly session?: unknown; readonly jwt?: unknown };\n\n      return {\n        session: parseAuthSession(payload.session),\n        jwt: parseCachedJwt(payload.jwt),\n      };\n    });\n  }\n\n  private write(\n    payload: FilePayload,\n  ): Effect.Effect<void, PlatformError.PlatformError, FileSystemRuntime> {\n    return Effect.gen(this, function* () {\n      const fs = yield* PlatformFileSystem.FileSystem;\n      const path = yield* PlatformPath.Path;\n      const dir = path.dirname(this.path);\n      const dirExists = yield* fs.exists(dir);\n      if (!dirExists) {\n        yield* fs.makeDirectory(dir, { recursive: true, mode: 0o700 });\n      }\n      yield* fs.writeFileString(this.path, JSON.stringify(payload), { mode: 0o600 });\n      yield* fs.chmod(this.path, 0o600);\n    });\n  }\n\n  private run<T>(\n    operation: string,\n    effect: Effect.Effect<T, PlatformError.PlatformError, FileSystemRuntime>,\n  ): Effect.Effect<T, AuthCacheError> {\n    return effect.pipe(\n      Effect.mapError((cause) => toAuthCacheError(operation, cause)),\n      Effect.provide(this.runtime),\n    );\n  }\n}\n\nexport function FileSystemAuthCacheLayer(input: {\n  readonly path: string;\n  readonly runtime?: Layer.Layer<FileSystemRuntime>;\n}): Layer.Layer<AuthCachePortTag, AuthCacheError> {\n  return Layer.effect(\n    AuthCachePortTag,\n    Effect.sync(() => new FileSystemAuthCacheAdapter(input.path, input.runtime)).pipe(\n      Effect.mapError((cause) => toAuthCacheError(\"initialize\", cause)),\n    ),\n  );\n}\n\nfunction toAuthCacheError(operation: string, cause: unknown): AuthCacheError {\n  return new AuthCacheError({ operation, cause });\n}\n","// `@capxul/sdk/node` — node-only entry (published-package-boundaries.md).\n//\n// The default `@capxul/sdk` entry is browser-clean: it never statically reaches\n// `@effect/platform-node`. Node consumers import the on-disk auth cache and the\n// node key `CapxulSigner` from here.\n\nimport * as os from \"node:os\";\nimport { join } from \"node:path\";\n\nimport { toAddress } from \"@capxul/types\";\nimport { privateKeyToAccount } from \"viem/accounts\";\nimport type { Hex } from \"viem\";\n\nimport { BrowserAuthCacheAdapter } from \"../adapters/auth-cache/BrowserAuthCacheAdapter\";\nimport { FileSystemAuthCacheAdapter } from \"../adapters/auth-cache/FileSystemAuthCacheAdapter\";\nimport { InMemoryAuthCacheAdapter } from \"../adapters/auth-cache/InMemoryAuthCacheAdapter\";\nimport type { WindowLike } from \"../client/window-like\";\nimport type { AuthCachePort } from \"../ports/auth-cache\";\nimport type { CapxulSigner } from \"../signer\";\n\nexport {\n  FileSystemAuthCacheAdapter,\n  FileSystemAuthCacheLayer,\n} from \"../adapters/auth-cache/FileSystemAuthCacheAdapter\";\n\nexport interface DetectNodeAuthCacheAdapterOptions {\n  readonly authCachePath?: string;\n  readonly resolveHomeDirectory?: () => string;\n}\n\n/**\n * Node `CapxulSigner` backed by a raw private key. Signs the EIP-712 `SafeOp`\n * digest the backend returns for a prepared deployment UserOperation. The\n * reference CLI builds this from `DEPLOYER_PRIVATE_KEY` for the live capstone.\n */\nexport function localPrivateKeySigner(input: { readonly privateKey: Hex }): CapxulSigner {\n  const account = privateKeyToAccount(input.privateKey);\n  return {\n    source: \"local-private-key\",\n    async getAddress() {\n      return toAddress(account.address);\n    },\n    async signUserOpHash(hash: Hex): Promise<Hex> {\n      // `sign({ hash })` signs the already-computed SafeOp digest directly.\n      // `signMessage({ message: { raw: hash } })` would add an EIP-191 prefix.\n      return account.sign({ hash });\n    },\n  };\n}\n\n/**\n * Node-aware auth-cache detection. Mirrors the historic default order:\n * 1. Browser localStorage → BrowserAuthCacheAdapter\n * 2. Node.js process → FileSystemAuthCacheAdapter\n *    (`~/.config/capxul/auth-cache.json`)\n * 3. Neither detected → InMemoryAuthCacheAdapter\n *\n * Use this from a Node entrypoint and pass the result to\n * `createCapxulClient({ authCache })` for on-disk session persistence.\n */\nexport function detectNodeAuthCacheAdapter(\n  options: DetectNodeAuthCacheAdapterOptions = {},\n): AuthCachePort {\n  const globalAny = globalThis as unknown as {\n    readonly window?: WindowLike;\n    readonly process?: { readonly versions?: { readonly node?: string } };\n  };\n  if (globalAny.window?.localStorage !== undefined) {\n    return new BrowserAuthCacheAdapter(globalAny.window.localStorage);\n  }\n  if (globalAny.process?.versions?.node !== undefined) {\n    const authCachePath =\n      normalizeConfiguredAuthCachePath(options.authCachePath) ??\n      resolveDefaultAuthCachePath(options.resolveHomeDirectory ?? os.homedir);\n    if (authCachePath !== null) return new FileSystemAuthCacheAdapter(authCachePath);\n  }\n  return new InMemoryAuthCacheAdapter();\n}\n\nfunction normalizeConfiguredAuthCachePath(path: string | undefined): string | null {\n  if (path === undefined) return null;\n  const trimmed = path.trim();\n  return trimmed.length > 0 ? trimmed : null;\n}\n\nfunction resolveDefaultAuthCachePath(resolveHomeDirectory: () => string): string | null {\n  try {\n    return join(resolveHomeDirectory(), \".config\", \"capxul\", \"auth-cache.json\");\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;AAuBA,SAAS,eAA4B;CACnC,OAAO;EAAE,SAAS;EAAM,KAAK;CAAK;AACpC;AAEA,MAAM,wBAAwB,MAAM,MAAM,eAAe,OAAO,SAAS,KAAK;AAE9E,IAAa,6BAAb,MAAiE;CAC/D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,MAAc,UAA0C,uBAAuB;EACzF,KAAK,OAAO;EACZ,KAAK,UAAU;EAEf,KAAK,aAAa,KAAK,IACrB,cACA,KAAK,KAAK,EAAE,KAAK,OAAO,KAAK,YAAY,QAAQ,OAAO,CAAC,CAC3D;EACA,KAAK,cAAc,YACjB,KAAK,IACH,cACA,OAAO,IAAI,MAAM,aAAa;GAC5B,MAAM,MAAM,OAAO,KAAK,KAAK;GAC7B,OAAO,KAAK,MAAM;IAAE;IAAS,KAAK,IAAI;GAAI,CAAC;EAC7C,CAAC,CACH;EACF,KAAK,eAAe,KAAK,IACvB,gBACA,OAAO,IAAI,MAAM,aAAa;GAC5B,MAAM,MAAM,OAAO,KAAK,KAAK;GAC7B,OAAO,KAAK,MAAM;IAAE,SAAS;IAAM,KAAK,IAAI;GAAI,CAAC;EACnD,CAAC,CACH;EACA,KAAK,SAAS,KAAK,IAAI,UAAU,KAAK,KAAK,EAAE,KAAK,OAAO,KAAK,YAAY,QAAQ,GAAG,CAAC,CAAC;EACvF,KAAK,UAAU,QACb,KAAK,IACH,UACA,OAAO,IAAI,MAAM,aAAa;GAC5B,MAAM,MAAM,OAAO,KAAK,KAAK;GAC7B,OAAO,KAAK,MAAM;IAAE,SAAS,IAAI;IAAS;GAAI,CAAC;EACjD,CAAC,CACH;EACF,KAAK,WAAW,KAAK,IACnB,YACA,OAAO,IAAI,MAAM,aAAa;GAC5B,MAAM,MAAM,OAAO,KAAK,KAAK;GAC7B,OAAO,KAAK,MAAM;IAAE,SAAS,IAAI;IAAS,KAAK;GAAK,CAAC;EACvD,CAAC,CACH;CACF;CAEA,OAA2F;EACzF,OAAO,OAAO,IAAI,MAAM,aAAa;GACnC,MAAM,KAAK,OAAO,mBAAmB;GAErC,IAAI,EAAC,OADiB,GAAG,OAAO,KAAK,IAAI,IAC5B,OAAO,aAAa;GACjC,MAAM,MAAM,OAAO,GAAG,eAAe,KAAK,MAAM,OAAO;GAEvD,IAAI;GACJ,IAAI;IACF,SAAS,KAAK,MAAM,GAAG;GACzB,QAAQ;IACN,OAAO,aAAa;GACtB;GACA,IAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GACvE,OAAO,aAAa;GAEtB,MAAM,UAAU;GAEhB,OAAO;IACL,SAAS,iBAAiB,QAAQ,OAAO;IACzC,KAAK,eAAe,QAAQ,GAAG;GACjC;EACF,CAAC;CACH;CAEA,MACE,SACqE;EACrE,OAAO,OAAO,IAAI,MAAM,aAAa;GACnC,MAAM,KAAK,OAAO,mBAAmB;GAErC,MAAM,OAAM,OADQ,aAAa,MAChB,QAAQ,KAAK,IAAI;GAElC,IAAI,EAAC,OADoB,GAAG,OAAO,GAAG,IAEpC,OAAO,GAAG,cAAc,KAAK;IAAE,WAAW;IAAM,MAAM;GAAM,CAAC;GAE/D,OAAO,GAAG,gBAAgB,KAAK,MAAM,KAAK,UAAU,OAAO,GAAG,EAAE,MAAM,IAAM,CAAC;GAC7E,OAAO,GAAG,MAAM,KAAK,MAAM,GAAK;EAClC,CAAC;CACH;CAEA,IACE,WACA,QACkC;EAClC,OAAO,OAAO,KACZ,OAAO,UAAU,UAAU,iBAAiB,WAAW,KAAK,CAAC,GAC7D,OAAO,QAAQ,KAAK,OAAO,CAC7B;CACF;AACF;AAEA,SAAgB,yBAAyB,OAGS;CAChD,OAAO,MAAM,OACX,kBACA,OAAO,WAAW,IAAI,2BAA2B,MAAM,MAAM,MAAM,OAAO,CAAC,EAAE,KAC3E,OAAO,UAAU,UAAU,iBAAiB,cAAc,KAAK,CAAC,CAClE,CACF;AACF;AAEA,SAAS,iBAAiB,WAAmB,OAAgC;CAC3E,OAAO,IAAI,eAAe;EAAE;EAAW;CAAM,CAAC;AAChD;;;;;;;;AC/GA,SAAgB,sBAAsB,OAAmD;CACvF,MAAM,UAAU,oBAAoB,MAAM,UAAU;CACpD,OAAO;EACL,QAAQ;EACR,MAAM,aAAa;GACjB,OAAO,UAAU,QAAQ,OAAO;EAClC;EACA,MAAM,eAAe,MAAyB;GAG5C,OAAO,QAAQ,KAAK,EAAE,KAAK,CAAC;EAC9B;CACF;AACF;;;;;;;;;;;AAYA,SAAgB,2BACd,UAA6C,CAAC,GAC/B;CACf,MAAM,YAAY;CAIlB,IAAI,UAAU,QAAQ,iBAAiB,KAAA,GACrC,OAAO,IAAI,wBAAwB,UAAU,OAAO,YAAY;CAElE,IAAI,UAAU,SAAS,UAAU,SAAS,KAAA,GAAW;EACnD,MAAM,gBACJ,iCAAiC,QAAQ,aAAa,KACtD,4BAA4B,QAAQ,wBAAwB,GAAG,OAAO;EACxE,IAAI,kBAAkB,MAAM,OAAO,IAAI,2BAA2B,aAAa;CACjF;CACA,OAAO,IAAI,yBAAyB;AACtC;AAEA,SAAS,iCAAiC,MAAyC;CACjF,IAAI,SAAS,KAAA,GAAW,OAAO;CAC/B,MAAM,UAAU,KAAK,KAAK;CAC1B,OAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,4BAA4B,sBAAmD;CACtF,IAAI;EACF,OAAO,KAAK,qBAAqB,GAAG,WAAW,UAAU,iBAAiB;CAC5E,QAAQ;EACN,OAAO;CACT;AACF"}

package/dist/ports/safe-deployment.d.mts

@@ -1,2 +1,2 @@
-import { a as SafeDeploymentEvidence, c as SafeDeploymentPortTag, i as SafeDeploymentError, l as safeDeploymentErrorFromCapxul, n as SafeDeploymentConfig, o as SafeDeploymentInput, r as SafeDeploymentDeployedQuery, s as SafeDeploymentPort, t as PreparedSafeAccount } from "../safe-deployment-Vni46k3t.mjs";
+import { a as SafeDeploymentEvidence, c as SafeDeploymentPortTag, i as SafeDeploymentError, l as safeDeploymentErrorFromCapxul, n as SafeDeploymentConfig, o as SafeDeploymentInput, r as SafeDeploymentDeployedQuery, s as SafeDeploymentPort, t as PreparedSafeAccount } from "../safe-deployment-D3k9yndM.mjs";
 export { PreparedSafeAccount, SafeDeploymentConfig, SafeDeploymentDeployedQuery, SafeDeploymentError, SafeDeploymentEvidence, SafeDeploymentInput, SafeDeploymentPort, SafeDeploymentPortTag, safeDeploymentErrorFromCapxul };

package/dist/{safe-deployment-Vni46k3t.d.mts → safe-deployment-D3k9yndM.d.mts}

@@ -1,7 +1,6 @@
+import { F as CapxulErrorDetails, M as TxHash, N as CapxulError, P as CapxulErrorCode, g as Email, h as DurationMs, l as BlockNumber, r as Address, u as ChainId } from "./index-CTXgQ_xR.mjs";
+import { Account } from "viem";
 import { Context, Effect } from "effect";
-import { CapxulError, CapxulErrorCode, CapxulErrorDetails } from "@capxul/config";
-import { Address, BlockNumber, ChainId, DurationMs, Email, TxHash } from "@capxul/types";
-import { Account as Account$1 } from "viem";
 
 //#region src/ports/safe-deployment.d.ts
 /**
@@ -56,7 +55,7 @@ type SafeDeploymentEvidence = {
   readonly blockNumber?: BlockNumber;
 };
 type SafeDeploymentInput = {
-  readonly signer: Account$1;
+  readonly signer: Account;
   readonly email: Email;
   readonly config: SafeDeploymentConfig;
 };
@@ -134,4 +133,4 @@ declare const SafeDeploymentPortTag_base: Context.TagClass<SafeDeploymentPortTag
 declare class SafeDeploymentPortTag extends SafeDeploymentPortTag_base {}
 //#endregion
 export { SafeDeploymentEvidence as a, SafeDeploymentPortTag as c, SafeDeploymentError as i, safeDeploymentErrorFromCapxul as l, SafeDeploymentConfig as n, SafeDeploymentInput as o, SafeDeploymentDeployedQuery as r, SafeDeploymentPort as s, PreparedSafeAccount as t };
-//# sourceMappingURL=safe-deployment-Vni46k3t.d.mts.map
+//# sourceMappingURL=safe-deployment-D3k9yndM.d.mts.map

package/dist/safe-deployment-D3k9yndM.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-deployment-D3k9yndM.d.mts","names":[],"sources":["../src/ports/safe-deployment.ts"],"mappings":";;;;;;AAaA;;;;;;KAAY,oBAAA;EAAA,SACD,OAAA,EAAS,OAAA;EAAA,SACT,MAAA;EAAA,SACA,WAAA;EAAA,SACA,gBAAA,GAAmB,UAAU;AAAA;AAOxC;;;;AAAA,KAAY,mBAAA;EAAA,SACD,OAAA,EAAS,OAAA;EAAA,SACT,aAAA,EAAe,OAAA;EAAA,SACf,WAAA,EAAa,OAAA;AAAA;;;;;;;AAAO;AAwB/B;;;;;;;;;;;;;;KAAY,sBAAA;EAAA,SACD,OAAA,EAAS,OAAA;EAAA,SACT,aAAA,EAAe,OAAA;EAAA,SACf,WAAA,EAAa,OAAA;EAAA,SACb,MAAA,GAAS,MAAA;EAAA,SACT,UAAA,GAAa,MAAA;EAAA,SACb,WAAA,GAAc,WAAA;AAAA;AAAA,KAGb,mBAAA;EAAA,SACD,MAAA,EAAQ,OAAA;EAAA,SACR,KAAA,EAAO,KAAA;EAAA,SACP,MAAA,EAAQ,oBAAA;AAAA;AAAA,KAGP,2BAAA;EAAA,SACD,WAAA,EAAa,OAAA;EAAA,SACb,MAAA,EAAQ,oBAAoB;AAAA;AAAA,cACrC,wBAAA;;;;;;;;cAOW,mBAAA,SAA4B,wBAAA;EAAA,SAC9B,SAAA;EAAA,SACA,UAAA,EAAY,eAAA;EAAA,SACZ,WAAA,EAAa,WAAA;EAAA,SACb,KAAA;EAAA,SACA,OAAA,GAAU,kBAAA;AAAA;;;;AAbkB;AACrC;;;;;;;;;;;;iBA+Bc,6BAAA,CACd,SAAA,UACA,KAAA,EAAO,WAAA,EACP,KAAA,aACC,mBAAmB;;;;;;;;;;;;;;UAuBL,kBAAA;;;AAnDjB;;EAwDE,OAAA,CACE,KAAA,EAAO,mBAAA,GACN,MAAA,CAAO,MAAA,CAAO,mBAAA,EAAqB,mBAAA;EAxDjB;;;;;EA+DrB,MAAA,CACE,KAAA,EAAO,mBAAA,GACN,MAAA,CAAO,MAAA,CAAO,sBAAA,EAAwB,mBAAA;EAnEF;;;;;;;EA4EvC,UAAA,CACE,KAAA,EAAO,2BAAA,GACN,MAAA,CAAO,MAAA,UAAgB,mBAAA;AAAA;AAAA,cAC3B,0BAAA;cAEY,qBAAA,SAA8B,0BAGxC"}

package/dist/{signer-oaYGfjDe.d.mts → signer-DqDtJU1l.d.mts}

@@ -1,6 +1,6 @@
+import { N as CapxulError, S as Profile$1, k as SmartAccount$1, r as Address, s as AuthSession, v as EpochSeconds, y as JwtToken } from "./index-CTXgQ_xR.mjs";
+import { Account, Hex } from "viem";
 import { Context, Effect } from "effect";
-import { Address, AuthSession, EpochSeconds, JwtToken, Profile, SmartAccount } from "@capxul/types";
-import { Account as Account$1, Hex } from "viem";
 
 //#region src/ports/auth-cache.d.ts
 /**
@@ -51,8 +51,8 @@ declare class AuthCachePortTag extends AuthCachePortTag_base {}
 //#endregion
 //#region src/client/types.d.ts
 type Session = AuthSession;
-type Profile$1 = Profile;
-type SmartAccount$1 = SmartAccount;
+type Profile = Profile$1;
+type SmartAccount = SmartAccount$1;
 /**
  * Result-shape returned by every method on `CapxulClient`. Mirrors the
  * existing per-port `Result` aliases; centralized here so consumers have
@@ -63,7 +63,7 @@ type CapxulResult<T> = {
   readonly value: T;
 } | {
   readonly ok: false;
-  readonly error: import("@capxul/config").CapxulError;
+  readonly error: CapxulError;
 };
 //#endregion
 //#region src/client/account-providers.d.ts
@@ -82,16 +82,19 @@ interface AccountProvider {
    * `deploySafe` invocations would compute different mutex keys and
    * bypass dedup, defeating the mutex.
    *
-   * The three sanctioned providers all satisfy this invariant:
+   * The two sanctioned providers both satisfy this invariant:
    *   - `localPrivateKeyAccountProvider` — derives once from the key
    *   - `eip1193AccountProvider` — reads `eth_accounts` (idempotent once
    *     the wallet is connected; consumer is responsible for connection)
-   *   - `openfortEmbeddedAccountProvider` — fetches once, caches
+   *
+   * The Openfort embedded path no longer needs a provider: the
+   * `openfortEmbeddedSigner` `CapxulSigner` caches its own address and the
+   * deploy is backend-orchestrated (backend-orchestrated-deploy.md).
    *
    * Custom providers MUST honor this contract.
    */
   getAddress(): Promise<CapxulResult<Address>>;
-  getDeployAccount(): Promise<CapxulResult<Account$1>>;
+  getDeployAccount(): Promise<CapxulResult<Account>>;
 }
 interface Eip1193Provider {
   request(args: {
@@ -105,7 +108,6 @@ declare function localPrivateKeyAccountProvider(input: {
 declare function eip1193AccountProvider(input: {
   readonly provider: Eip1193Provider;
 }): AccountProvider;
-declare function openfortEmbeddedAccountProvider(): AccountProvider;
 //#endregion
 //#region src/signer.d.ts
 interface CapxulSigner {
@@ -132,11 +134,12 @@ interface Eip1193RequestProvider {
 }
 /**
  * Browser `CapxulSigner` backed by an injected EIP-1193 wallet (MetaMask, etc.).
- * Signs the SafeOp digest via `eth_sign` (raw-hash signing). The node key signer
- * lives in `@capxul/sdk/node` (`localPrivateKeySigner`). Wallets that disable
- * `eth_sign` must enable raw-hash signing before deployed-account flows run.
+ * Signs the SafeOp digest via `eth_sign`, then verifies the returned signature
+ * recovers the selected account against that raw digest. Wallets that prefix
+ * `eth_sign` payloads are rejected before the backend submits an invalid SafeOp.
+ * The node key signer lives in `@capxul/sdk/node` (`localPrivateKeySigner`).
  */
 declare function injectedWalletSigner(provider: Eip1193RequestProvider): CapxulSigner;
 //#endregion
-export { AuthCachePortTag as _, AccountProviderSource as a, eip1193AccountProvider as c, CapxulResult as d, Profile$1 as f, AuthCachePort as g, AuthCacheError as h, AccountProvider as i, localPrivateKeyAccountProvider as l, SmartAccount$1 as m, Eip1193RequestProvider as n, AccountRequirement as o, Session as p, injectedWalletSigner as r, Eip1193Provider as s, CapxulSigner as t, openfortEmbeddedAccountProvider as u, CachedJwt as v };
-//# sourceMappingURL=signer-oaYGfjDe.d.mts.map
+export { CachedJwt as _, AccountProviderSource as a, eip1193AccountProvider as c, Profile as d, Session as f, AuthCachePortTag as g, AuthCachePort as h, AccountProvider as i, localPrivateKeyAccountProvider as l, AuthCacheError as m, Eip1193RequestProvider as n, AccountRequirement as o, SmartAccount as p, injectedWalletSigner as r, Eip1193Provider as s, CapxulSigner as t, CapxulResult as u };
+//# sourceMappingURL=signer-DqDtJU1l.d.mts.map

package/dist/signer-DqDtJU1l.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer-DqDtJU1l.d.mts","names":[],"sources":["../src/ports/auth-cache.ts","../src/client/types.ts","../src/client/account-providers.ts","../src/signer.ts"],"mappings":";;;;;;;;AAiBA;;;;;;;;;;;UAAiB,aAAA;EAAA,SACN,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,WAAA,SAAoB,cAAA;EAAA,SAC9C,UAAA,GAAa,OAAA,EAAS,WAAA,KAAgB,MAAA,CAAO,MAAA,OAAa,cAAA;EAAA,SAC1D,YAAA,EAAc,MAAA,CAAO,MAAA,OAAa,cAAA;EAQc;;;;;EAAA,SADhD,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,SAAA,SAAkB,cAAA;EAAA,SACxC,MAAA,GAAS,GAAA,EAAK,SAAA,KAAc,MAAA,CAAO,MAAA,OAAa,cAAA;EAAA,SAChD,QAAA,EAAU,MAAA,CAAO,MAAA,OAAa,cAAA;AAAA;;;;;;UAQxB,SAAA;EAAA,SACN,KAAA,EAAO,QAAA;EAAA,SACP,eAAA,EAAiB,YAAY;AAAA;AAAA,cACvC,mBAAA;;;cAEY,cAAA,SAAuB,mBAAA;EAAA,SACzB,SAAA;EAAA,SACA,KAAA;AAAA;AAAA,cACN,qBAAA;cAEQ,gBAAA,SAAyB,qBAGnC;;;KClCS,OAAA,GAAU,WAAW;AAAA,KACrB,OAAA,GAAU,SAAY;AAAA,KACtB,YAAA,GAAe,cAAiB;;ADD5C;;;;KCQY,YAAA;EAAA,SACG,EAAA;EAAA,SAAmB,KAAA,EAAO,CAAA;AAAA;EAAA,SAC1B,EAAA;EAAA,SAAoB,KAAA,EADO,WACoC;AAAA;;;KCpBlE,qBAAA;AAAA,KAEA,kBAAA;AAAA,UAEK,eAAA;EAAA,SACN,MAAA,EAAQ,qBAAA;;;;;;;;;;;;;;;;;;;;;;;EAuBjB,UAAA,IAAc,OAAA,CAAQ,YAAA,CAAa,OAAA;EACnC,gBAAA,IAAoB,OAAA,CAAQ,YAAA,CAAa,OAAA;AAAA;AAAA,UAG1B,eAAA;EACf,OAAA,CAAQ,IAAA;IAAA,SACG,MAAA;IAAA,SACA,MAAA;EAAA,IACP,OAAO;AAAA;AAAA,iBAGG,8BAAA,CAA+B,KAAA;EAAA,SACpC,UAAA,EAAY,GAAA;AAAA,IACnB,eAAe;AAAA,iBAcH,sBAAA,CAAuB,KAAA;EAAA,SAC5B,QAAA,EAAU,eAAA;AAAA,IACjB,eAAe;;;UCrCF,YAAA;;AHVjB;;;WGeW,MAAA,EAAQ,qBAAA;EHdsC;EGgBvD,UAAA,IAAc,OAAA,CAAQ,OAAA;EHfS;;;;;EGqB/B,cAAA,CAAe,IAAA,EAAM,GAAA,GAAM,OAAA,CAAQ,GAAA;AAAA;;UAIpB,sBAAA;EACf,OAAA,CAAQ,IAAA;IAAA,SACG,MAAA;IAAA,SACA,MAAA;EAAA,IACP,OAAO;AAAA;;;;;;;;iBAUG,oBAAA,CAAqB,QAAA,EAAU,sBAAA,GAAyB,YAAY"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk",
-  "version": "0.2.0-alpha.5",
+  "version": "1.0.0-alpha.7",
   "files": [
     "dist",
     "package.json",
@@ -29,13 +29,10 @@
     "@effect/platform": "^0.96.1",
     "@effect/platform-node": "^0.106.0",
     "@effect/schema": "^0.75.5",
+    "@openfort/openfort-js": "^1.3.6",
     "convex": "^1.39.1",
     "effect": "^3.21.2",
-    "viem": "^2.21.0",
-    "@capxul/config": "0.0.0",
-    "@capxul/observability": "0.0.0",
-    "@capxul/types": "0.0.0",
-    "@capxul/wire": "0.0.0"
+    "viem": "^2.21.0"
   },
   "devDependencies": {
     "@effect/vitest": "^0.29.0",
@@ -43,16 +40,22 @@
     "fast-check": "^3.23.2",
     "permissionless": "0.3.4",
     "typescript": "5.9.2",
-    "vitest": "npm:@voidzero-dev/vite-plus-test@0.1.23"
+    "vitest": "npm:@voidzero-dev/vite-plus-test@0.1.23",
+    "@capxul/config": "0.1.0-alpha.0",
+    "@capxul/errors": "0.0.0",
+    "@capxul/observability": "0.1.0-alpha.0",
+    "@capxul/wire": "0.1.0-alpha.0",
+    "@capxul/types": "0.1.0-alpha.0"
   },
   "_permissionlessPinReason": "permissionless.toSafeSmartAccount is pinned to 0.3.4 for live Safe deployment E2E. Counterfactual address fixtures captured 2026-05-17 in packages/backend/convex/_shared/__tests__/counterfactual.test.ts and packages/config/tests/safe.test.ts must be re-verified before upgrading.",
   "scripts": {
-    "check-types": "tsc -p tsconfig.json --noEmit",
-    "lint": "oxlint -c ../../.oxlintrc.json . --deny-warnings",
-    "build": "vp pack",
+    "check-types": "vp exec tsc -p tsconfig.json --noEmit",
+    "lint": "vp exec oxlint -c ../../.oxlintrc.json . --deny-warnings",
+    "build": "NODE_OPTIONS=--max-old-space-size=24576 vp pack",
     "_vp-tasks-allowed": "vp-allowed: `test` + `test:coverage` are vp tasks in vite.config.ts so vitest self-writes don't bust cache (#205). `test:coverage:full` keeps the script form because it composes 5 reporters at invocation time.",
     "test:coverage:full": "CAPXUL_FAST_CHECK_NUM_RUNS=50 vp test run --coverage --coverage.reporter=text --coverage.reporter=json-summary --coverage.reporter=json --coverage.reporter=html --coverage.reporter=clover",
     "test:e2e": "vp test run --config vitest.e2e.config.ts",
+    "proof:openfort-embedded-deploy": "vp test run --config vitest.e2e.config.ts e2e/openfort-embedded-deploy.live.ts",
     "org:domain-live": "vp dlx tsx e2e/org-domain-sdk-live.ts"
   }
 }

package/dist/InMemoryAuthCacheAdapter-BK-B_ERB.mjs

@@ -1,113 +0,0 @@
-import { Context, Data, Effect, Layer } from "effect";
-import { toAuthUserId, toEmail, toEpochMs, toEpochSeconds, toJwtToken, toSessionToken } from "@capxul/types";
-//#region src/ports/auth-cache.ts
-var AuthCacheError = class extends Data.TaggedError("AuthCacheError") {};
-var AuthCachePortTag = class extends Context.Tag("@capxul/sdk/ports/AuthCachePort")() {};
-//#endregion
-//#region src/adapters/auth-cache/serialization.ts
-function parseAuthSession(raw) {
-	if (typeof raw !== "object" || raw === null) return null;
-	const candidate = raw;
-	try {
-		return {
-			authUserId: toAuthUserId(candidate.authUserId),
-			email: toEmail(candidate.email),
-			token: toSessionToken(candidate.token),
-			expiresAt: toEpochMs(candidate.expiresAt)
-		};
-	} catch {
-		return null;
-	}
-}
-function parseCachedJwt(raw) {
-	if (typeof raw !== "object" || raw === null) return null;
-	const candidate = raw;
-	try {
-		return {
-			token: toJwtToken(candidate.token),
-			expEpochSeconds: toEpochSeconds(candidate.expEpochSeconds)
-		};
-	} catch {
-		return null;
-	}
-}
-//#endregion
-//#region src/adapters/auth-cache/BrowserAuthCacheAdapter.ts
-const SESSION_KEY = "capxul.session";
-const JWT_KEY = "capxul.jwt";
-var BrowserAuthCacheAdapter = class {
-	storage;
-	constructor(storage) {
-		this.storage = storage;
-	}
-	getSession = authCacheTry("getSession", () => {
-		const raw = this.storage.getItem(SESSION_KEY);
-		if (raw === null) return null;
-		try {
-			return parseAuthSession(JSON.parse(raw));
-		} catch {
-			return null;
-		}
-	});
-	setSession = (session) => authCacheTry("setSession", () => {
-		this.storage.setItem(SESSION_KEY, JSON.stringify(session));
-	});
-	clearSession = authCacheTry("clearSession", () => {
-		this.storage.removeItem(SESSION_KEY);
-	});
-	getJwt = authCacheTry("getJwt", () => {
-		const raw = this.storage.getItem(JWT_KEY);
-		if (raw === null) return null;
-		try {
-			return parseCachedJwt(JSON.parse(raw));
-		} catch {
-			return null;
-		}
-	});
-	setJwt = (jwt) => authCacheTry("setJwt", () => {
-		this.storage.setItem(JWT_KEY, JSON.stringify(jwt));
-	});
-	clearJwt = authCacheTry("clearJwt", () => {
-		this.storage.removeItem(JWT_KEY);
-	});
-};
-function toAuthCacheError(operation, cause) {
-	return new AuthCacheError({
-		operation,
-		cause
-	});
-}
-function authCacheTry(operation, run) {
-	return Effect.try({
-		try: run,
-		catch: (cause) => toAuthCacheError(operation, cause)
-	});
-}
-//#endregion
-//#region src/adapters/auth-cache/InMemoryAuthCacheAdapter.ts
-var InMemoryAuthCacheAdapter = class {
-	session = null;
-	jwt = null;
-	getSession = Effect.sync(() => this.session);
-	setSession = (session) => Effect.sync(() => {
-		this.session = session;
-	});
-	clearSession = Effect.sync(() => {
-		this.session = null;
-	});
-	getJwt = Effect.sync(() => this.jwt);
-	setJwt = (jwt) => Effect.sync(() => {
-		this.jwt = jwt;
-	});
-	clearJwt = Effect.sync(() => {
-		this.jwt = null;
-	});
-};
-Layer.effect(AuthCachePortTag, Effect.sync(() => new InMemoryAuthCacheAdapter()).pipe(Effect.mapError((cause) => new AuthCacheError({
-	operation: "initialize",
-	cause
-}))));
-//#endregion
-export { AuthCacheError as a, parseCachedJwt as i, BrowserAuthCacheAdapter as n, AuthCachePortTag as o, parseAuthSession as r, InMemoryAuthCacheAdapter as t };
-
-//# sourceMappingURL=InMemoryAuthCacheAdapter-BK-B_ERB.mjs.map

package/dist/InMemoryAuthCacheAdapter-BK-B_ERB.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"InMemoryAuthCacheAdapter-BK-B_ERB.mjs","names":[],"sources":["../src/ports/auth-cache.ts","../src/adapters/auth-cache/serialization.ts","../src/adapters/auth-cache/BrowserAuthCacheAdapter.ts","../src/adapters/auth-cache/InMemoryAuthCacheAdapter.ts"],"sourcesContent":["import { Context, Data, Effect } from \"effect\";\nimport type { AuthSession, EpochSeconds, JwtToken } from \"@capxul/types\";\n\n/**\n * AuthCachePort (TA4) — replaces `SessionStoragePort` in the rebuild slice's\n * consumer-facing wiring. Stores the user-snapshot Session AND the cached\n * Convex JWT (W7 bridge endpoint). The two slots are independent so a session\n * refresh doesn't invalidate the JWT and vice versa.\n *\n * Three adapters (TA7):\n *   - `BrowserAuthCacheAdapter`        — backed by `localStorage`\n *   - `FileSystemAuthCacheAdapter`     — mode-0600 JSON file in `~/.config/capxul/`\n *   - `InMemoryAuthCacheAdapter`       — for tests\n *\n * `SessionStoragePort` was retired by the Stage 4 rebuild; session and JWT\n * persistence now share this cache boundary.\n */\nexport interface AuthCachePort {\n  readonly getSession: Effect.Effect<AuthSession | null, AuthCacheError>;\n  readonly setSession: (session: AuthSession) => Effect.Effect<void, AuthCacheError>;\n  readonly clearSession: Effect.Effect<void, AuthCacheError>;\n\n  /**\n   * JWT cache for the `/api/auth/convex/token` bridge endpoint (W7).\n   * Stored separately from the session so a session refresh doesn't\n   * invalidate cached JWT.\n   */\n  readonly getJwt: Effect.Effect<CachedJwt | null, AuthCacheError>;\n  readonly setJwt: (jwt: CachedJwt) => Effect.Effect<void, AuthCacheError>;\n  readonly clearJwt: Effect.Effect<void, AuthCacheError>;\n}\n\n/**\n * Cached Convex JWT shape (TA4). `expEpochSeconds` is decoded from the JWT's\n * `exp` claim at fetch time so the `tokenProvider` cache eviction logic can\n * proactively refresh at `exp - 30s` per TA3.\n */\nexport interface CachedJwt {\n  readonly token: JwtToken;\n  readonly expEpochSeconds: EpochSeconds;\n}\n\nexport class AuthCacheError extends Data.TaggedError(\"AuthCacheError\")<{\n  readonly operation: string;\n  readonly cause: unknown;\n}> {}\n\nexport class AuthCachePortTag extends Context.Tag(\"@capxul/sdk/ports/AuthCachePort\")<\n  AuthCachePortTag,\n  AuthCachePort\n>() {}\n","import {\n  toAuthUserId,\n  toEmail,\n  toEpochMs,\n  toEpochSeconds,\n  toJwtToken,\n  toSessionToken,\n  type AuthSession,\n} from \"@capxul/types\";\n\nimport type { CachedJwt } from \"../../ports/auth-cache\";\n\nexport function parseAuthSession(raw: unknown): AuthSession | null {\n  if (typeof raw !== \"object\" || raw === null) return null;\n  const candidate = raw as {\n    readonly authUserId?: unknown;\n    readonly email?: unknown;\n    readonly token?: unknown;\n    readonly expiresAt?: unknown;\n  };\n\n  try {\n    return {\n      authUserId: toAuthUserId(candidate.authUserId),\n      email: toEmail(candidate.email),\n      token: toSessionToken(candidate.token),\n      expiresAt: toEpochMs(candidate.expiresAt),\n    };\n  } catch {\n    return null;\n  }\n}\n\nexport function parseCachedJwt(raw: unknown): CachedJwt | null {\n  if (typeof raw !== \"object\" || raw === null) return null;\n  const candidate = raw as {\n    readonly token?: unknown;\n    readonly expEpochSeconds?: unknown;\n  };\n\n  try {\n    return {\n      token: toJwtToken(candidate.token),\n      expEpochSeconds: toEpochSeconds(candidate.expEpochSeconds),\n    };\n  } catch {\n    return null;\n  }\n}\n","import { Effect, Layer } from \"effect\";\nimport type { AuthSession } from \"@capxul/types\";\n\nimport {\n  AuthCacheError,\n  AuthCachePortTag,\n  type AuthCachePort,\n  type CachedJwt,\n} from \"../../ports/auth-cache\";\nimport { parseAuthSession, parseCachedJwt } from \"./serialization\";\n\nexport interface BrowserStorageShape {\n  getItem(key: string): string | null;\n  setItem(key: string, value: string): void;\n  removeItem(key: string): void;\n}\n\nconst SESSION_KEY = \"capxul.session\";\nconst JWT_KEY = \"capxul.jwt\";\n\nexport class BrowserAuthCacheAdapter implements AuthCachePort {\n  private readonly storage: BrowserStorageShape;\n\n  constructor(storage: BrowserStorageShape) {\n    this.storage = storage;\n  }\n\n  readonly getSession = authCacheTry(\"getSession\", () => {\n    const raw = this.storage.getItem(SESSION_KEY);\n    if (raw === null) return null;\n    try {\n      return parseAuthSession(JSON.parse(raw));\n    } catch {\n      return null;\n    }\n  });\n\n  readonly setSession = (session: AuthSession) =>\n    authCacheTry(\"setSession\", () => {\n      this.storage.setItem(SESSION_KEY, JSON.stringify(session));\n    });\n\n  readonly clearSession = authCacheTry(\"clearSession\", () => {\n    this.storage.removeItem(SESSION_KEY);\n  });\n\n  readonly getJwt = authCacheTry(\"getJwt\", () => {\n    const raw = this.storage.getItem(JWT_KEY);\n    if (raw === null) return null;\n    try {\n      return parseCachedJwt(JSON.parse(raw));\n    } catch {\n      return null;\n    }\n  });\n\n  readonly setJwt = (jwt: CachedJwt) =>\n    authCacheTry(\"setJwt\", () => {\n      this.storage.setItem(JWT_KEY, JSON.stringify(jwt));\n    });\n\n  readonly clearJwt = authCacheTry(\"clearJwt\", () => {\n    this.storage.removeItem(JWT_KEY);\n  });\n}\n\nexport function BrowserAuthCacheLayer(input: {\n  readonly storage: BrowserStorageShape;\n}): Layer.Layer<AuthCachePortTag, AuthCacheError> {\n  return Layer.effect(\n    AuthCachePortTag,\n    Effect.sync(() => new BrowserAuthCacheAdapter(input.storage)).pipe(\n      Effect.mapError((cause) => toAuthCacheError(\"initialize\", cause)),\n    ),\n  );\n}\n\nfunction toAuthCacheError(operation: string, cause: unknown): AuthCacheError {\n  return new AuthCacheError({ operation, cause });\n}\n\nfunction authCacheTry<T>(operation: string, run: () => T): Effect.Effect<T, AuthCacheError> {\n  return Effect.try({\n    try: run,\n    catch: (cause) => toAuthCacheError(operation, cause),\n  });\n}\n","import { Effect, Layer } from \"effect\";\nimport type { AuthSession } from \"@capxul/types\";\n\nimport {\n  AuthCacheError,\n  AuthCachePortTag,\n  type AuthCachePort,\n  type CachedJwt,\n} from \"../../ports/auth-cache\";\n\nexport class InMemoryAuthCacheAdapter implements AuthCachePort {\n  private session: AuthSession | null = null;\n  private jwt: CachedJwt | null = null;\n\n  readonly getSession = Effect.sync(() => this.session);\n\n  readonly setSession = (session: AuthSession) =>\n    Effect.sync(() => {\n      this.session = session;\n    });\n\n  readonly clearSession = Effect.sync(() => {\n    this.session = null;\n  });\n\n  readonly getJwt = Effect.sync(() => this.jwt);\n\n  readonly setJwt = (jwt: CachedJwt) =>\n    Effect.sync(() => {\n      this.jwt = jwt;\n    });\n\n  readonly clearJwt = Effect.sync(() => {\n    this.jwt = null;\n  });\n}\n\nexport const InMemoryAuthCacheLayer = Layer.effect(\n  AuthCachePortTag,\n  Effect.sync(() => new InMemoryAuthCacheAdapter()).pipe(\n    Effect.mapError((cause) => new AuthCacheError({ operation: \"initialize\", cause })),\n  ),\n);\n"],"mappings":";;;AA0CA,IAAa,iBAAb,cAAoC,KAAK,YAAY,gBAAgB,EAGlE,CAAC;AAEJ,IAAa,mBAAb,cAAsC,QAAQ,IAAI,iCAAiC,EAGjF,EAAE,CAAC;;;ACtCL,SAAgB,iBAAiB,KAAkC;CACjE,IAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM,OAAO;CACpD,MAAM,YAAY;CAOlB,IAAI;EACF,OAAO;GACL,YAAY,aAAa,UAAU,UAAU;GAC7C,OAAO,QAAQ,UAAU,KAAK;GAC9B,OAAO,eAAe,UAAU,KAAK;GACrC,WAAW,UAAU,UAAU,SAAS;EAC1C;CACF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,eAAe,KAAgC;CAC7D,IAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM,OAAO;CACpD,MAAM,YAAY;CAKlB,IAAI;EACF,OAAO;GACL,OAAO,WAAW,UAAU,KAAK;GACjC,iBAAiB,eAAe,UAAU,eAAe;EAC3D;CACF,QAAQ;EACN,OAAO;CACT;AACF;;;AC/BA,MAAM,cAAc;AACpB,MAAM,UAAU;AAEhB,IAAa,0BAAb,MAA8D;CAC5D;CAEA,YAAY,SAA8B;EACxC,KAAK,UAAU;CACjB;CAEA,aAAsB,aAAa,oBAAoB;EACrD,MAAM,MAAM,KAAK,QAAQ,QAAQ,WAAW;EAC5C,IAAI,QAAQ,MAAM,OAAO;EACzB,IAAI;GACF,OAAO,iBAAiB,KAAK,MAAM,GAAG,CAAC;EACzC,QAAQ;GACN,OAAO;EACT;CACF,CAAC;CAED,cAAuB,YACrB,aAAa,oBAAoB;EAC/B,KAAK,QAAQ,QAAQ,aAAa,KAAK,UAAU,OAAO,CAAC;CAC3D,CAAC;CAEH,eAAwB,aAAa,sBAAsB;EACzD,KAAK,QAAQ,WAAW,WAAW;CACrC,CAAC;CAED,SAAkB,aAAa,gBAAgB;EAC7C,MAAM,MAAM,KAAK,QAAQ,QAAQ,OAAO;EACxC,IAAI,QAAQ,MAAM,OAAO;EACzB,IAAI;GACF,OAAO,eAAe,KAAK,MAAM,GAAG,CAAC;EACvC,QAAQ;GACN,OAAO;EACT;CACF,CAAC;CAED,UAAmB,QACjB,aAAa,gBAAgB;EAC3B,KAAK,QAAQ,QAAQ,SAAS,KAAK,UAAU,GAAG,CAAC;CACnD,CAAC;CAEH,WAAoB,aAAa,kBAAkB;EACjD,KAAK,QAAQ,WAAW,OAAO;CACjC,CAAC;AACH;AAaA,SAAS,iBAAiB,WAAmB,OAAgC;CAC3E,OAAO,IAAI,eAAe;EAAE;EAAW;CAAM,CAAC;AAChD;AAEA,SAAS,aAAgB,WAAmB,KAAgD;CAC1F,OAAO,OAAO,IAAI;EAChB,KAAK;EACL,QAAQ,UAAU,iBAAiB,WAAW,KAAK;CACrD,CAAC;AACH;;;AC5EA,IAAa,2BAAb,MAA+D;CAC7D,UAAsC;CACtC,MAAgC;CAEhC,aAAsB,OAAO,WAAW,KAAK,OAAO;CAEpD,cAAuB,YACrB,OAAO,WAAW;EAChB,KAAK,UAAU;CACjB,CAAC;CAEH,eAAwB,OAAO,WAAW;EACxC,KAAK,UAAU;CACjB,CAAC;CAED,SAAkB,OAAO,WAAW,KAAK,GAAG;CAE5C,UAAmB,QACjB,OAAO,WAAW;EAChB,KAAK,MAAM;CACb,CAAC;CAEH,WAAoB,OAAO,WAAW;EACpC,KAAK,MAAM;CACb,CAAC;AACH;AAEsC,MAAM,OAC1C,kBACA,OAAO,WAAW,IAAI,yBAAyB,CAAC,EAAE,KAChD,OAAO,UAAU,UAAU,IAAI,eAAe;CAAE,WAAW;CAAc;AAAM,CAAC,CAAC,CACnF,CACF"}

package/dist/safe-deployment-Vni46k3t.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"safe-deployment-Vni46k3t.d.mts","names":[],"sources":["../src/ports/safe-deployment.ts"],"mappings":";;;;;;;;AAaA;;;;;KAAY,oBAAA;EAAA,SACD,OAAA,EAAS,OAAA;EAAA,SACT,MAAA;EAAA,SACA,WAAA;EAAA,SACA,gBAAA,GAAmB,UAAU;AAAA;AAAA;AAOxC;;;AAPwC,KAO5B,mBAAA;EAAA,SACD,OAAA,EAAS,OAAA;EAAA,SACT,aAAA,EAAe,OAAA;EAAA,SACf,WAAA,EAAa,OAAA;AAAA;;;;;;;;AAAO;AAwB/B;;;;;;;;;;;;;KAAY,sBAAA;EAAA,SACD,OAAA,EAAS,OAAA;EAAA,SACT,aAAA,EAAe,OAAA;EAAA,SACf,WAAA,EAAa,OAAA;EAAA,SACb,MAAA,GAAS,MAAA;EAAA,SACT,UAAA,GAAa,MAAA;EAAA,SACb,WAAA,GAAc,WAAA;AAAA;AAAA,KAGb,mBAAA;EAAA,SACD,MAAA,EAAQ,SAAA;EAAA,SACR,KAAA,EAAO,KAAA;EAAA,SACP,MAAA,EAAQ,oBAAA;AAAA;AAAA,KAGP,2BAAA;EAAA,SACD,WAAA,EAAa,OAAA;EAAA,SACb,MAAA,EAAQ,oBAAoB;AAAA;AAAA,cACrC,wBAAA;;;;;;;;cAOW,mBAAA,SAA4B,wBAAA;EAAA,SAC9B,SAAA;EAAA,SACA,UAAA,EAAY,eAAA;EAAA,SACZ,WAAA,EAAa,WAAA;EAAA,SACb,KAAA;EAAA,SACA,OAAA,GAAU,kBAAA;AAAA;;;;;AAbkB;AACrC;;;;;;;;;;;iBA+Bc,6BAAA,CACd,SAAA,UACA,KAAA,EAAO,WAAA,EACP,KAAA,aACC,mBAAmB;;;;;;;;;;;;;;UAuBL,kBAAA;;;;AAnDjB;EAwDE,OAAA,CACE,KAAA,EAAO,mBAAA,GACN,MAAA,CAAO,MAAA,CAAO,mBAAA,EAAqB,mBAAA;;;;;;EAOtC,MAAA,CACE,KAAA,EAAO,mBAAA,GACN,MAAA,CAAO,MAAA,CAAO,sBAAA,EAAwB,mBAAA;EAnEF;;;;;;;EA4EvC,UAAA,CACE,KAAA,EAAO,2BAAA,GACN,MAAA,CAAO,MAAA,UAAgB,mBAAA;AAAA;AAAA,cAC3B,0BAAA;cAEY,qBAAA,SAA8B,0BAGxC"}

package/dist/signer-oaYGfjDe.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signer-oaYGfjDe.d.mts","names":[],"sources":["../src/ports/auth-cache.ts","../src/client/types.ts","../src/client/account-providers.ts","../src/signer.ts"],"mappings":";;;;;;;;AAiBA;;;;;;;;;;;UAAiB,aAAA;EAAA,SACN,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,WAAA,SAAoB,cAAA;EAAA,SAC9C,UAAA,GAAa,OAAA,EAAS,WAAA,KAAgB,MAAA,CAAO,MAAA,OAAa,cAAA;EAAA,SAC1D,YAAA,EAAc,MAAA,CAAO,MAAA,OAAa,cAAA;EAQc;;;;;EAAA,SADhD,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,SAAA,SAAkB,cAAA;EAAA,SACxC,MAAA,GAAS,GAAA,EAAK,SAAA,KAAc,MAAA,CAAO,MAAA,OAAa,cAAA;EAAA,SAChD,QAAA,EAAU,MAAA,CAAO,MAAA,OAAa,cAAA;AAAA;;;;;;UAQxB,SAAA;EAAA,SACN,KAAA,EAAO,QAAA;EAAA,SACP,eAAA,EAAiB,YAAY;AAAA;AAAA,cACvC,mBAAA;;;cAEY,cAAA,SAAuB,mBAAA;EAAA,SACzB,SAAA;EAAA,SACA,KAAA;AAAA;AAAA,cACN,qBAAA;cAEQ,gBAAA,SAAyB,qBAGnC;;;KClCS,OAAA,GAAU,WAAW;AAAA,KACrB,SAAA,GAAU,OAAY;AAAA,KACtB,cAAA,GAAe,YAAiB;;ADD5C;;;;KCQY,YAAA;EAAA,SACG,EAAA;EAAA,SAAmB,KAAA,EAAO,CAAC;AAAA;EAAA,SAC3B,EAAA;EAAA,SAAoB,KAAA,2BAAgC,WAAA;AAAA;;;KCpBvD,qBAAA;AAAA,KAEA,kBAAA;AAAA,UAEK,eAAA;EAAA,SACN,MAAA,EAAQ,qBAAA;;;;;;;;;;;;;;;;;;;;EAoBjB,UAAA,IAAc,OAAA,CAAQ,YAAA,CAAa,OAAA;EACnC,gBAAA,IAAoB,OAAA,CAAQ,YAAA,CAAa,SAAA;AAAA;AAAA,UAG1B,eAAA;EACf,OAAA,CAAQ,IAAA;IAAA,SACG,MAAA;IAAA,SACA,MAAA;EAAA,IACP,OAAO;AAAA;AAAA,iBAGG,8BAAA,CAA+B,KAAA;EAAA,SACpC,UAAA,EAAY,GAAA;AAAA,IACnB,eAAe;AAAA,iBAcH,sBAAA,CAAuB,KAAA;EAAA,SAC5B,QAAA,EAAU,eAAA;AAAA,IACjB,eAAe;AAAA,iBA0DH,+BAAA,CAAA,GAAmC,eAAe;;;UCrGjD,YAAA;;AHDjB;;;WGMW,MAAA,EAAQ,qBAAA;EHLsC;EGOvD,UAAA,IAAc,OAAA,CAAQ,OAAA;EHNS;;;;;EGY/B,cAAA,CAAe,IAAA,EAAM,GAAA,GAAM,OAAA,CAAQ,GAAA;AAAA;;UAIpB,sBAAA;EACf,OAAA,CAAQ,IAAA;IAAA,SACG,MAAA;IAAA,SACA,MAAA;EAAA,IACP,OAAO;AAAA;;;;;;;iBASG,oBAAA,CAAqB,QAAA,EAAU,sBAAA,GAAyB,YAAY"}