@ckb-firewall/cli 0.1.0

package/dist/index.js

@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+import { program } from "commander";
+import cfonts from "cfonts";
+import { inspectCommand, inspectDefaults } from "./commands/inspect.js";
+import { addCommand, addDefaults } from "./commands/add.js";
+import { removeCommand, removeDefaults } from "./commands/remove.js";
+import { proposeCommand } from "./commands/propose.js";
+import { proposalsCommand } from "./commands/proposals.js";
+import { voteCommand } from "./commands/vote.js";
+import { signCommand } from "./commands/sign.js";
+import { executeCommand, executeDefaults } from "./commands/execute.js";
+function printBanner() {
+    cfonts.say("CKB FIREWALL|CLI", {
+        font: "block",
+        align: "left",
+        colors: ["cyan", "white"],
+        background: "transparent",
+        letterSpacing: 1,
+        lineHeight: 1,
+        space: false,
+        maxLength: "0",
+    });
+}
+program
+    .name("ckb-firewall")
+    .description("Manage the CKB Transaction Firewall blacklist registry")
+    .version("0.1.0")
+    .addHelpCommand(false);
+// ── inspect ──────────────────────────────────────────────────────────────────
+const inspectDefs = inspectDefaults();
+program
+    .command("inspect")
+    .description("Display current blacklist registry entries")
+    .option("--rpc-url <url>", "CKB node RPC URL", inspectDefs.rpcUrl)
+    .option("--registry-tx <hash>", "Registry cell tx hash", inspectDefs.registryTx)
+    .option("--registry-index <n>", "Registry cell output index", inspectDefs.registryIndex)
+    .action(async (opts) => {
+    await inspectCommand(opts);
+});
+// ── add (quick path) ──────────────────────────────────────────────────────────
+const addDefs = addDefaults();
+program
+    .command("add")
+    .description("Quick: add a lock-args to the blacklist with placeholder governance (testnet/dev)")
+    .option("--lock-args <hex>", "Lock args to blacklist (0x-prefixed hex)")
+    .option("--expires-at <timestamp>", "Unix timestamp when entry expires (0 = never)", addDefs.expiresAt)
+    .option("--rpc-url <url>", "CKB node RPC URL", addDefs.rpcUrl)
+    .option("--registry-tx <hash>", "Registry cell tx hash", addDefs.registryTx)
+    .option("--registry-index <n>", "Registry cell output index", addDefs.registryIndex)
+    .option("--tx-out <file>", "Write unsigned tx JSON to this file", addDefs.txOut)
+    .option("--sign", "Sign and submit via ckb-cli after generating the tx file")
+    .option("--from-account <address>", "Governance account address for ckb-cli signing", addDefs.fromAccount)
+    .action(async (opts) => {
+    await addCommand(opts);
+});
+// ── remove (quick path) ───────────────────────────────────────────────────────
+const removeDefs = removeDefaults();
+program
+    .command("remove")
+    .description("Quick: remove a lock-args from the blacklist with placeholder governance (testnet/dev)")
+    .option("--lock-args <hex>", "Lock args to remove (0x-prefixed hex)")
+    .option("--rpc-url <url>", "CKB node RPC URL", removeDefs.rpcUrl)
+    .option("--registry-tx <hash>", "Registry cell tx hash", removeDefs.registryTx)
+    .option("--registry-index <n>", "Registry cell output index", removeDefs.registryIndex)
+    .option("--tx-out <file>", "Write unsigned tx JSON to this file", removeDefs.txOut)
+    .option("--sign", "Sign and submit via ckb-cli after generating the tx file")
+    .option("--from-account <address>", "Governance account address for ckb-cli signing", removeDefs.fromAccount)
+    .action(async (opts) => {
+    await removeCommand(opts);
+});
+// ── propose ───────────────────────────────────────────────────────────────────
+program
+    .command("propose")
+    .description("Create a governance proposal (full flow with 72h review + voting + signing)")
+    .option("--action <add|remove>", "Proposal action")
+    .option("--lock-args <hex>", "Lock args to add or remove")
+    .option("--expires-at <timestamp>", "Expiry timestamp (add only, 0 = never)")
+    .option("--evidence <text>", "Evidence URL, tx hash, or description")
+    .option("--classification <type>", "Threat classification: theft|scam|hack|sanctions|other")
+    .option("--severity <level>", "Severity: critical|high|medium|low")
+    .option("--rationale <text>", "Impact statement and rationale")
+    .option("--proposer <name>", "Your name or identifier")
+    .action(async (opts) => {
+    await proposeCommand(opts);
+});
+// ── proposals (list) ──────────────────────────────────────────────────────────
+program
+    .command("proposals")
+    .description("List governance proposals and their status")
+    .option("--status <status>", "Filter by status: pending-review|voting|approved|executed|rejected")
+    .action(async (opts) => {
+    await proposalsCommand(opts);
+});
+// ── vote ──────────────────────────────────────────────────────────────────────
+program
+    .command("vote")
+    .description("Record a validator vote on a governance proposal")
+    .option("--proposal <id>", "Proposal ID or hash")
+    .option("--vote <choice>", "Vote: yes|no|abstain")
+    .option("--validator <id>", "Your validator name or identifier")
+    .action(async (opts) => {
+    await voteCommand(opts);
+});
+// ── sign ──────────────────────────────────────────────────────────────────────
+program
+    .command("sign")
+    .description("Sign an approved proposal as a governance signer (secp256k1)")
+    .option("--proposal <id>", "Proposal ID or hash")
+    .option("--signer-index <0-4>", "Your signer index in the governance set")
+    .option("--key <hex>", "32-byte private key in hex (prompted if omitted)")
+    .action(async (opts) => {
+    await signCommand(opts);
+});
+// ── execute ───────────────────────────────────────────────────────────────────
+const execDefs = executeDefaults();
+program
+    .command("execute")
+    .description("Execute an approved, signed proposal — builds and submits the governance tx")
+    .option("--proposal <id>", "Proposal ID or hash")
+    .option("--rpc-url <url>", "CKB node RPC URL", execDefs.rpcUrl)
+    .option("--registry-tx <hash>", "Registry cell tx hash", execDefs.registryTx)
+    .option("--registry-index <n>", "Registry cell output index", execDefs.registryIndex)
+    .option("--tx-out <file>", "Write tx JSON to this file", execDefs.txOut)
+    .option("--sign", "Sign and submit via ckb-cli")
+    .option("--from-account <address>", "Governance account for ckb-cli signing", execDefs.fromAccount)
+    .action(async (opts) => {
+    await executeCommand(opts);
+});
+// Show banner on bare invocation before help prints.
+if (process.argv.length <= 2)
+    printBanner();
+program.parse(process.argv);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExE,SAAS,WAAW;IAClB,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE;QAC7B,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QACzB,UAAU,EAAE,aAAa;QACzB,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,CAAC;QACb,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,GAAG;KACf,CAAC,CAAC;AACL,CAAC;AAED,OAAO;KACJ,IAAI,CAAC,cAAc,CAAC;KACpB,WAAW,CAAC,wDAAwD,CAAC;KACrE,OAAO,CAAC,OAAO,CAAC;KAChB,cAAc,CAAC,KAAK,CAAC,CAAC;AAEzB,gFAAgF;AAEhF,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;AAEtC,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,4CAA4C,CAAC;KACzD,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC;KACjE,MAAM,CAAC,sBAAsB,EAAE,uBAAuB,EAAE,WAAW,CAAC,UAAU,CAAC;KAC/E,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,EAAE,WAAW,CAAC,aAAa,CAAC;KACvF,MAAM,CAAC,KAAK,EAAE,IAAmE,EAAE,EAAE;IACpF,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;AAE9B,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,mFAAmF,CAAC;KAChG,MAAM,CAAC,mBAAmB,EAAE,0CAA0C,CAAC;KACvE,MAAM,CAAC,0BAA0B,EAAE,+CAA+C,EAAE,OAAO,CAAC,SAAS,CAAC;KACtG,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC;KAC7D,MAAM,CAAC,sBAAsB,EAAE,uBAAuB,EAAE,OAAO,CAAC,UAAU,CAAC;KAC3E,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,EAAE,OAAO,CAAC,aAAa,CAAC;KACnF,MAAM,CAAC,iBAAiB,EAAE,qCAAqC,EAAE,OAAO,CAAC,KAAK,CAAC;KAC/E,MAAM,CAAC,QAAQ,EAAE,0DAA0D,CAAC;KAC5E,MAAM,CAAC,0BAA0B,EAAE,gDAAgD,EAAE,OAAO,CAAC,WAAW,CAAC;KACzG,MAAM,CAAC,KAAK,EAAE,IASd,EAAE,EAAE;IACH,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;AAEpC,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,wFAAwF,CAAC;KACrG,MAAM,CAAC,mBAAmB,EAAE,uCAAuC,CAAC;KACpE,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,CAAC,MAAM,CAAC;KAChE,MAAM,CAAC,sBAAsB,EAAE,uBAAuB,EAAE,UAAU,CAAC,UAAU,CAAC;KAC9E,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,EAAE,UAAU,CAAC,aAAa,CAAC;KACtF,MAAM,CAAC,iBAAiB,EAAE,qCAAqC,EAAE,UAAU,CAAC,KAAK,CAAC;KAClF,MAAM,CAAC,QAAQ,EAAE,0DAA0D,CAAC;KAC5E,MAAM,CAAC,0BAA0B,EAAE,gDAAgD,EAAE,UAAU,CAAC,WAAW,CAAC;KAC5G,MAAM,CAAC,KAAK,EAAE,IAQd,EAAE,EAAE;IACH,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,6EAA6E,CAAC;KAC1F,MAAM,CAAC,uBAAuB,EAAE,iBAAiB,CAAC;KAClD,MAAM,CAAC,mBAAmB,EAAE,4BAA4B,CAAC;KACzD,MAAM,CAAC,0BAA0B,EAAE,wCAAwC,CAAC;KAC5E,MAAM,CAAC,mBAAmB,EAAE,uCAAuC,CAAC;KACpE,MAAM,CAAC,yBAAyB,EAAE,wDAAwD,CAAC;KAC3F,MAAM,CAAC,oBAAoB,EAAE,oCAAoC,CAAC;KAClE,MAAM,CAAC,oBAAoB,EAAE,gCAAgC,CAAC;KAC9D,MAAM,CAAC,mBAAmB,EAAE,yBAAyB,CAAC;KACtD,MAAM,CAAC,KAAK,EAAE,IASd,EAAE,EAAE;IACH,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,OAAO;KACJ,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,4CAA4C,CAAC;KACzD,MAAM,CAAC,mBAAmB,EAAE,oEAAoE,CAAC;KACjG,MAAM,CAAC,KAAK,EAAE,IAAyB,EAAE,EAAE;IAC1C,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,kDAAkD,CAAC;KAC/D,MAAM,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;KAChD,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;KACjD,MAAM,CAAC,kBAAkB,EAAE,mCAAmC,CAAC;KAC/D,MAAM,CAAC,KAAK,EAAE,IAA8D,EAAE,EAAE;IAC/E,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,8DAA8D,CAAC;KAC3E,MAAM,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;KAChD,MAAM,CAAC,sBAAsB,EAAE,yCAAyC,CAAC;KACzE,MAAM,CAAC,aAAa,EAAE,kDAAkD,CAAC;KACzE,MAAM,CAAC,KAAK,EAAE,IAA+D,EAAE,EAAE;IAChF,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,iFAAiF;AAEjF,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;AAEnC,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,6EAA6E,CAAC;KAC1F,MAAM,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;KAChD,MAAM,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC;KAC9D,MAAM,CAAC,sBAAsB,EAAE,uBAAuB,EAAE,QAAQ,CAAC,UAAU,CAAC;KAC5E,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,EAAE,QAAQ,CAAC,aAAa,CAAC;KACpF,MAAM,CAAC,iBAAiB,EAAE,4BAA4B,EAAE,QAAQ,CAAC,KAAK,CAAC;KACvE,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;KAC/C,MAAM,CAAC,0BAA0B,EAAE,wCAAwC,EAAE,QAAQ,CAAC,WAAW,CAAC;KAClG,MAAM,CAAC,KAAK,EAAE,IAQd,EAAE,EAAE;IACH,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEL,qDAAqD;AACrD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC;IAAE,WAAW,EAAE,CAAC;AAE5C,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/lib/blkl.d.ts

@@ -0,0 +1,8 @@
+import type { RegistryEntry, RegistryPayload } from "@ckb-firewall/sdk";
+export declare function strip0x(hex: string): string;
+export declare function hexToBytes(hex: string): Uint8Array;
+export declare function bytesToHex(bytes: Uint8Array): string;
+export declare function encodeRegistryPayload(payload: RegistryPayload): Uint8Array;
+export declare function insertSorted(entries: RegistryEntry[], newEntry: RegistryEntry): RegistryEntry[];
+export declare function removeEntry(entries: RegistryEntry[], identifier: string): RegistryEntry[];
+//# sourceMappingURL=blkl.d.ts.map

package/dist/lib/blkl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blkl.d.ts","sourceRoot":"","sources":["../../src/lib/blkl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAExE,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAOlD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIpD;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG,UAAU,CAsC1E;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,aAAa,EAAE,EACxB,QAAQ,EAAE,aAAa,GACtB,aAAa,EAAE,CAMjB;AAED,wBAAgB,WAAW,CACzB,OAAO,EAAE,aAAa,EAAE,EACxB,UAAU,EAAE,MAAM,GACjB,aAAa,EAAE,CAKjB"}

package/dist/lib/blkl.js

@@ -0,0 +1,62 @@
+export function strip0x(hex) {
+    return hex.startsWith("0x") ? hex.slice(2) : hex;
+}
+export function hexToBytes(hex) {
+    const clean = strip0x(hex);
+    const out = new Uint8Array(clean.length / 2);
+    for (let i = 0; i < clean.length; i += 2) {
+        out[i / 2] = Number.parseInt(clean.slice(i, i + 2), 16);
+    }
+    return out;
+}
+export function bytesToHex(bytes) {
+    return `0x${Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("")}`;
+}
+export function encodeRegistryPayload(payload) {
+    const encodedEntries = payload.entries.map((e) => {
+        const id = hexToBytes(e.identifier);
+        const buf = new Uint8Array(1 + id.length + 8);
+        buf[0] = id.length;
+        buf.set(id, 1);
+        let exp = e.expiresAt;
+        for (let i = 0; i < 8; i++) {
+            buf[1 + id.length + i] = Number(exp & 0xffn);
+            exp >>= 8n;
+        }
+        return buf;
+    });
+    const totalSize = 9 + encodedEntries.reduce((acc, e) => acc + e.length, 0);
+    const out = new Uint8Array(totalSize);
+    let off = 0;
+    // Magic "BLKL"
+    out[off++] = 0x42;
+    out[off++] = 0x4c;
+    out[off++] = 0x4b;
+    out[off++] = 0x4c;
+    out[off++] = payload.version;
+    const count = payload.entries.length;
+    out[off++] = count & 0xff;
+    out[off++] = (count >> 8) & 0xff;
+    out[off++] = (count >> 16) & 0xff;
+    out[off++] = (count >> 24) & 0xff;
+    for (const e of encodedEntries) {
+        out.set(e, off);
+        off += e.length;
+    }
+    return out;
+}
+export function insertSorted(entries, newEntry) {
+    const result = [...entries];
+    let insertAt = result.findIndex((e) => e.identifier >= newEntry.identifier);
+    if (insertAt === -1)
+        insertAt = result.length;
+    result.splice(insertAt, 0, newEntry);
+    return result;
+}
+export function removeEntry(entries, identifier) {
+    const norm = strip0x(identifier).toLowerCase();
+    return entries.filter((e) => strip0x(e.identifier).toLowerCase() !== norm);
+}
+//# sourceMappingURL=blkl.js.map

package/dist/lib/blkl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blkl.js","sourceRoot":"","sources":["../../src/lib/blkl.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAwB;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/C,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACf,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC;YAC7C,GAAG,KAAK,EAAE,CAAC;QACb,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GACb,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,GAAG,GAAG,CAAC,CAAC;IAEZ,eAAe;IACf,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IAClB,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IAClB,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IAClB,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IAClB,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;IACrC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;IAC1B,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACjC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAClC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAElC,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,OAAwB,EACxB,QAAuB;IAEvB,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC5B,IAAI,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5E,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,OAAwB,EACxB,UAAkB;IAElB,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CACpD,CAAC;AACJ,CAAC"}

package/dist/lib/defaults.d.ts

@@ -0,0 +1,22 @@
+import type { ScriptLike } from "@ckb-firewall/sdk";
+export declare const TESTNET_RPC_URL = "https://testnet.ckb.dev";
+export declare const TESTNET_REGISTRY_SCRIPT: ScriptLike;
+export declare const TESTNET_REGISTRY_CELL: {
+    txHash: string;
+    index: number;
+};
+export declare const TESTNET_CONTRACT_OUTPOINTS: {
+    firewallLock: {
+        txHash: string;
+        index: number;
+    };
+    blacklistRegistry: {
+        txHash: string;
+        index: number;
+    };
+};
+export declare const SECP256K1_DEP_GROUP: {
+    txHash: string;
+    index: number;
+};
+//# sourceMappingURL=defaults.d.ts.map

package/dist/lib/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/lib/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,eAAO,MAAM,eAAe,4BAA4B,CAAC;AAEzD,eAAO,MAAM,uBAAuB,EAAE,UAKrC,CAAC;AAGF,eAAO,MAAM,qBAAqB;;;CAIjC,CAAC;AAGF,eAAO,MAAM,0BAA0B;;;;;;;;;CAWtC,CAAC;AAGF,eAAO,MAAM,mBAAmB;;;CAI/B,CAAC"}

package/dist/lib/defaults.js

@@ -0,0 +1,28 @@
+export const TESTNET_RPC_URL = "https://testnet.ckb.dev";
+export const TESTNET_REGISTRY_SCRIPT = {
+    codeHash: "0xbbfbcf51b88c57c9c1d6414de4a7e4f9dae133625dfab71588c8bc5d05b71096",
+    hashType: "type",
+    args: "0x019bd7e06f3ecf4be0f2fcd2188b23f1b9fcc88e5d4b65a8637b17723bbda3cce80114003f54dea35bcc7a0efef541d361799f77bd1b8581",
+};
+// Known live registry cell outpoint on testnet (may move after governance updates).
+export const TESTNET_REGISTRY_CELL = {
+    txHash: "0x57edc162ddd476d970b8a65558466ca11bb1762be9366fd12c76d620fe695fb7",
+    index: 0,
+};
+// Deployed contract binary cells.
+export const TESTNET_CONTRACT_OUTPOINTS = {
+    firewallLock: {
+        txHash: "0x11b0397cd58dce5c2bd704108ee6e1609128c0d828a3f3360237585e82bb7aed",
+        index: 0,
+    },
+    blacklistRegistry: {
+        txHash: "0x11b0397cd58dce5c2bd704108ee6e1609128c0d828a3f3360237585e82bb7aed",
+        index: 1,
+    },
+};
+// secp256k1 dep group used by ckb-cli for fee-payer signing.
+export const SECP256K1_DEP_GROUP = {
+    txHash: "0xf8de3bb47d055cdf460d93a2a6e1b05f7432f9777c8c474abf4eec1d4aee5d37",
+    index: 0,
+};
+//# sourceMappingURL=defaults.js.map

package/dist/lib/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/lib/defaults.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAEzD,MAAM,CAAC,MAAM,uBAAuB,GAAe;IACjD,QAAQ,EACN,oEAAoE;IACtE,QAAQ,EAAE,MAAM;IAChB,IAAI,EAAE,oHAAoH;CAC3H,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,MAAM,EACJ,oEAAoE;IACtE,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,kCAAkC;AAClC,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,YAAY,EAAE;QACZ,MAAM,EACJ,oEAAoE;QACtE,KAAK,EAAE,CAAC;KACT;IACD,iBAAiB,EAAE;QACjB,MAAM,EACJ,oEAAoE;QACtE,KAAK,EAAE,CAAC;KACT;CACF,CAAC;AAEF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,MAAM,EACJ,oEAAoE;IACtE,KAAK,EAAE,CAAC;CACT,CAAC"}

package/dist/lib/hints.d.ts

@@ -0,0 +1,7 @@
+type HintKey = "inspect" | "add" | "remove" | "propose" | "proposals" | "vote" | "sign" | "execute";
+/** Print 2 contextual hints after a command. */
+export declare function printHints(command: HintKey): void;
+/** Print a targeted "contribute by voting" callout (more prominent). */
+export declare function printVotingCallout(openCount: number): void;
+export {};
+//# sourceMappingURL=hints.d.ts.map

package/dist/lib/hints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hints.d.ts","sourceRoot":"","sources":["../../src/lib/hints.ts"],"names":[],"mappings":"AAEA,KAAK,OAAO,GACR,SAAS,GACT,KAAK,GACL,QAAQ,GACR,SAAS,GACT,WAAW,GACX,MAAM,GACN,MAAM,GACN,SAAS,CAAC;AA+Cd,gDAAgD;AAChD,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAUjD;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAU1D"}

package/dist/lib/hints.js

@@ -0,0 +1,67 @@
+import chalk from "chalk";
+const HINTS = {
+    inspect: [
+        `Cast a vote on open proposals: ${chalk.dim("ckb-firewall vote")}`,
+        `Review all pending proposals: ${chalk.dim("ckb-firewall proposals --status voting")}`,
+        `Create a new governance proposal: ${chalk.dim("ckb-firewall propose")}`,
+    ],
+    add: [
+        `Track your change with a governance proposal: ${chalk.dim("ckb-firewall propose")}`,
+        `Verify the registry was updated: ${chalk.dim("ckb-firewall inspect")}`,
+        `List current blacklist entries: ${chalk.dim("ckb-firewall inspect")}`,
+    ],
+    remove: [
+        `Track your change with a governance proposal: ${chalk.dim("ckb-firewall propose")}`,
+        `Verify the registry was updated: ${chalk.dim("ckb-firewall inspect")}`,
+        `See all governance proposals: ${chalk.dim("ckb-firewall proposals")}`,
+    ],
+    propose: [
+        `Validators: help approve this proposal by voting: ${chalk.dim("ckb-firewall vote")}`,
+        `Share the proposal ID with your community to gather votes faster`,
+        `Track proposal progress: ${chalk.dim("ckb-firewall proposals")}`,
+        `Need 3 yes votes before signing: ${chalk.dim("ckb-firewall proposals --status voting")}`,
+    ],
+    proposals: [
+        `Vote on an open proposal: ${chalk.dim("ckb-firewall vote")}`,
+        `Submit a signature on an approved proposal: ${chalk.dim("ckb-firewall sign")}`,
+        `Create a new governance proposal: ${chalk.dim("ckb-firewall propose")}`,
+        `Execute a fully signed proposal: ${chalk.dim("ckb-firewall execute")}`,
+    ],
+    vote: [
+        `Encourage others to vote — 3 yes votes required to approve`,
+        `Check current vote tallies: ${chalk.dim("ckb-firewall proposals")}`,
+        `Once approved, sign the proposal: ${chalk.dim("ckb-firewall sign")}`,
+    ],
+    sign: [
+        `After 3 signatures, execute the proposal on-chain: ${chalk.dim("ckb-firewall execute")}`,
+        `View all proposals awaiting signatures: ${chalk.dim("ckb-firewall proposals --status approved")}`,
+        `Verify the registry state: ${chalk.dim("ckb-firewall inspect")}`,
+    ],
+    execute: [
+        `Verify the updated registry: ${chalk.dim("ckb-firewall inspect")}`,
+        `Help govern the registry — vote on open proposals: ${chalk.dim("ckb-firewall vote")}`,
+        `Create a new governance proposal: ${chalk.dim("ckb-firewall propose")}`,
+    ],
+};
+/** Print 2 contextual hints after a command. */
+export function printHints(command) {
+    const pool = HINTS[command];
+    const chosen = pool.slice(0, 2);
+    if (chosen.length === 0)
+        return;
+    console.log(chalk.dim("─".repeat(52)));
+    console.log(chalk.dim("Tips:"));
+    for (const hint of chosen) {
+        console.log(chalk.dim("  •"), hint);
+    }
+    console.log();
+}
+/** Print a targeted "contribute by voting" callout (more prominent). */
+export function printVotingCallout(openCount) {
+    if (openCount === 0)
+        return;
+    console.log(chalk.cyan("⬡"), chalk.bold(`${openCount} proposal${openCount === 1 ? "" : "s"} open for voting — your vote shapes the registry.`));
+    console.log(`  Cast yours: ${chalk.dim("ckb-firewall vote")}`);
+    console.log();
+}
+//# sourceMappingURL=hints.js.map

package/dist/lib/hints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hints.js","sourceRoot":"","sources":["../../src/lib/hints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAY1B,MAAM,KAAK,GAA8B;IACvC,OAAO,EAAE;QACP,kCAAkC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE;QAClE,iCAAiC,KAAK,CAAC,GAAG,CAAC,wCAAwC,CAAC,EAAE;QACtF,qCAAqC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;KACzE;IACD,GAAG,EAAE;QACH,iDAAiD,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;QACpF,oCAAoC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;QACvE,mCAAmC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;KACvE;IACD,MAAM,EAAE;QACN,iDAAiD,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;QACpF,oCAAoC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;QACvE,iCAAiC,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE;KACvE;IACD,OAAO,EAAE;QACP,qDAAqD,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE;QACrF,kEAAkE;QAClE,4BAA4B,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE;QACjE,oCAAoC,KAAK,CAAC,GAAG,CAAC,wCAAwC,CAAC,EAAE;KAC1F;IACD,SAAS,EAAE;QACT,6BAA6B,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE;QAC7D,+CAA+C,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE;QAC/E,qCAAqC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;QACxE,oCAAoC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;KACxE;IACD,IAAI,EAAE;QACJ,4DAA4D;QAC5D,+BAA+B,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE;QACpE,qCAAqC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE;KACtE;IACD,IAAI,EAAE;QACJ,sDAAsD,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;QACzF,2CAA2C,KAAK,CAAC,GAAG,CAAC,0CAA0C,CAAC,EAAE;QAClG,8BAA8B,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;KAClE;IACD,OAAO,EAAE;QACP,gCAAgC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;QACnE,sDAAsD,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE;QACtF,qCAAqC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE;KACzE;CACF,CAAC;AAEF,gDAAgD;AAChD,MAAM,UAAU,UAAU,CAAC,OAAgB;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO;IAC5B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EACf,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,YAAY,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,mDAAmD,CAAC,CAClH,CAAC;IACF,OAAO,CAAC,GAAG,CACT,iBAAiB,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAClD,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC"}

package/dist/lib/proposals.d.ts

@@ -0,0 +1,61 @@
+export type ProposalAction = "add" | "remove";
+export type ProposalStatus = "pending-review" | "voting" | "approved" | "rejected" | "executed";
+export type VoteChoice = "yes" | "no" | "abstain";
+export type ThreatClass = "theft" | "scam" | "hack" | "sanctions" | "other";
+export type Severity = "critical" | "high" | "medium" | "low";
+export interface ProposalVote {
+    validatorId: string;
+    vote: VoteChoice;
+    timestamp: string;
+}
+export interface ProposalSignature {
+    signerIndex: number;
+    signature: string;
+    timestamp: string;
+}
+export interface Proposal {
+    id: string;
+    proposalIdHash: string;
+    action: ProposalAction;
+    lockArgs: string;
+    expiresAt: string;
+    evidence: string;
+    classification: ThreatClass;
+    severity: Severity;
+    rationale: string;
+    proposer: string;
+    submittedAt: string;
+    reviewWindowEndsAt: string;
+    status: ProposalStatus;
+    votes: ProposalVote[];
+    voteDigestHash: string;
+    signatures: ProposalSignature[];
+    txHash?: string;
+}
+export declare const VOTE_THRESHOLD = 3;
+export declare const SIG_THRESHOLD = 3;
+export declare const REVIEW_WINDOW_MS: number;
+export declare function getProposalsDir(): string;
+export declare function saveProposal(proposal: Proposal): void;
+export declare function loadProposal(id: string): Proposal;
+export declare function listProposals(): Proposal[];
+declare function proposalCanonical(fields: {
+    action: ProposalAction;
+    lockArgs: string;
+    expiresAt: string;
+    evidence: string;
+    classification: ThreatClass;
+    severity: Severity;
+    rationale: string;
+    proposer: string;
+    submittedAt: string;
+}): Uint8Array;
+export declare function computeProposalIdHash(fields: Parameters<typeof proposalCanonical>[0]): string;
+export declare function computeVoteDigestHash(votes: ProposalVote[]): string;
+export declare function countYes(votes: ProposalVote[]): number;
+export declare function isReviewWindowPassed(proposal: Proposal): boolean;
+export declare function isVoteApproved(proposal: Proposal): boolean;
+export declare function isReadyToExecute(proposal: Proposal): boolean;
+export declare function signingMessage(proposal: Proposal): Uint8Array;
+export {};
+//# sourceMappingURL=proposals.d.ts.map

package/dist/lib/proposals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposals.d.ts","sourceRoot":"","sources":["../../src/lib/proposals.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,QAAQ,CAAC;AAC9C,MAAM,MAAM,cAAc,GACtB,gBAAgB,GAChB,QAAQ,GACR,UAAU,GACV,UAAU,GACV,UAAU,CAAC;AACf,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,IAAI,GAAG,SAAS,CAAC;AAClD,MAAM,MAAM,WAAW,GACnB,OAAO,GACP,MAAM,GACN,MAAM,GACN,WAAW,GACX,OAAO,CAAC;AACZ,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE9D,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,WAAW,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAGD,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B,eAAO,MAAM,gBAAgB,QAAsB,CAAC;AAEpD,wBAAgB,eAAe,IAAI,MAAM,CAIxC;AAMD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAOrD;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,CASjD;AAED,wBAAgB,aAAa,IAAI,QAAQ,EAAE,CAM1C;AAGD,iBAAS,iBAAiB,CAAC,MAAM,EAAE;IACjC,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,WAAW,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,UAAU,CAab;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAG7F;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,CASnE;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,CAEtD;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAEhE;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAE1D;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAM5D;AAGD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,UAAU,CAO7D"}

package/dist/lib/proposals.js

@@ -0,0 +1,89 @@
+import { mkdirSync, writeFileSync, readFileSync, readdirSync, existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { ckbBlake2b } from "./witness.js";
+import { hexToBytes, bytesToHex } from "./blkl.js";
+// Threshold rules (simplified for testnet: 5 governance participants, need 3-of-5).
+export const VOTE_THRESHOLD = 3;
+export const SIG_THRESHOLD = 3;
+export const REVIEW_WINDOW_MS = 72 * 60 * 60 * 1000; // 72 hours
+export function getProposalsDir() {
+    const dir = join(homedir(), ".ckb-firewall", "proposals");
+    mkdirSync(dir, { recursive: true });
+    return dir;
+}
+function proposalPath(dir, proposalIdHash) {
+    return join(dir, `${proposalIdHash.slice(2, 14)}.json`);
+}
+export function saveProposal(proposal) {
+    const dir = getProposalsDir();
+    writeFileSync(proposalPath(dir, proposal.proposalIdHash), JSON.stringify(proposal, null, 2) + "\n", "utf8");
+}
+export function loadProposal(id) {
+    const dir = getProposalsDir();
+    // Accept full hash (0x...) or short display id.
+    const short = id.startsWith("0x") ? id.slice(2, 14) : id.slice(0, 12);
+    const file = join(dir, `${short}.json`);
+    if (!existsSync(file)) {
+        throw new Error(`Proposal "${id}" not found in ${dir}`);
+    }
+    return JSON.parse(readFileSync(file, "utf8"));
+}
+export function listProposals() {
+    const dir = getProposalsDir();
+    return readdirSync(dir)
+        .filter((f) => f.endsWith(".json"))
+        .map((f) => JSON.parse(readFileSync(join(dir, f), "utf8")))
+        .sort((a, b) => a.submittedAt.localeCompare(b.submittedAt));
+}
+// Canonical representation used as input to proposalIdHash.
+function proposalCanonical(fields) {
+    const str = JSON.stringify({
+        action: fields.action,
+        lockArgs: fields.lockArgs.toLowerCase(),
+        expiresAt: fields.expiresAt,
+        evidence: fields.evidence,
+        classification: fields.classification,
+        severity: fields.severity,
+        rationale: fields.rationale,
+        proposer: fields.proposer,
+        submittedAt: fields.submittedAt,
+    });
+    return new TextEncoder().encode(str);
+}
+export function computeProposalIdHash(fields) {
+    const hash = ckbBlake2b(proposalCanonical(fields));
+    return bytesToHex(hash);
+}
+export function computeVoteDigestHash(votes) {
+    const str = JSON.stringify(votes
+        .slice()
+        .sort((a, b) => a.validatorId.localeCompare(b.validatorId))
+        .map((v) => ({ validatorId: v.validatorId, vote: v.vote, timestamp: v.timestamp })));
+    const hash = ckbBlake2b(new TextEncoder().encode(str));
+    return bytesToHex(hash);
+}
+export function countYes(votes) {
+    return votes.filter((v) => v.vote === "yes").length;
+}
+export function isReviewWindowPassed(proposal) {
+    return Date.now() >= new Date(proposal.reviewWindowEndsAt).getTime();
+}
+export function isVoteApproved(proposal) {
+    return countYes(proposal.votes) >= VOTE_THRESHOLD;
+}
+export function isReadyToExecute(proposal) {
+    return (isReviewWindowPassed(proposal) &&
+        isVoteApproved(proposal) &&
+        proposal.signatures.length >= SIG_THRESHOLD);
+}
+// The message each governance signer signs (domain-separated, 64 bytes input).
+export function signingMessage(proposal) {
+    const proposalBytes = hexToBytes(proposal.proposalIdHash);
+    const voteBytes = hexToBytes(proposal.voteDigestHash);
+    const combined = new Uint8Array(proposalBytes.length + voteBytes.length);
+    combined.set(proposalBytes, 0);
+    combined.set(voteBytes, proposalBytes.length);
+    return ckbBlake2b(combined);
+}
+//# sourceMappingURL=proposals.js.map

package/dist/lib/proposals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposals.js","sourceRoot":"","sources":["../../src/lib/proposals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAkDnD,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAChC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW;AAEhE,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;IAC1D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,cAAsB;IACvD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAkB;IAC7C,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;IAC9B,aAAa,CACX,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,cAAc,CAAC,EAC1C,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACxC,MAAM,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;IAC9B,gDAAgD;IAChD,MAAM,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,kBAAkB,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAa,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;IAC9B,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAa,CAAC;SACtE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,4DAA4D;AAC5D,SAAS,iBAAiB,CAAC,MAU1B;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE;QACvC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC;IACH,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAA+C;IACnF,MAAM,IAAI,GAAG,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAqB;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CACxB,KAAK;SACF,KAAK,EAAE;SACP,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;SAC1D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CACtF,CAAC;IACF,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAqB;IAC5C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAkB;IACrD,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,OAAO,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAkB;IACjD,OAAO,CACL,oBAAoB,CAAC,QAAQ,CAAC;QAC9B,cAAc,CAAC,QAAQ,CAAC;QACxB,QAAQ,CAAC,UAAU,CAAC,MAAM,IAAI,aAAa,CAC5C,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACzE,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC"}

package/dist/lib/rpc.d.ts

@@ -0,0 +1,24 @@
+import type { ScriptLike } from "@ckb-firewall/sdk";
+export interface LiveCell {
+    txHash: string;
+    index: number;
+    capacity: string;
+    data: string;
+    lock: {
+        code_hash: string;
+        hash_type: string;
+        args: string;
+    };
+    type: {
+        code_hash: string;
+        hash_type: string;
+        args: string;
+    } | null;
+}
+export declare function getLiveCell(rpcUrl: string, txHash: string, index: number): Promise<LiveCell>;
+export declare function findLiveRegistryCell(rpcUrl: string, registryScript: ScriptLike): Promise<{
+    txHash: string;
+    index: number;
+    data: string;
+}>;
+//# sourceMappingURL=rpc.d.ts.map

package/dist/lib/rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../src/lib/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AA0BpD,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACrE;AAED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,QAAQ,CAAC,CA+BnB;AAGD,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,UAAU,GACzB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CA2B1D"}

package/dist/lib/rpc.js

@@ -0,0 +1,55 @@
+async function call(url, method, params) {
+    const res = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ jsonrpc: "2.0", method, params, id: 1 }),
+    });
+    const json = (await res.json());
+    if (json.error)
+        throw new Error(`RPC ${method}: ${json.error.message}`);
+    if (json.result === undefined)
+        throw new Error(`RPC ${method} returned no result`);
+    return json.result;
+}
+export async function getLiveCell(rpcUrl, txHash, index) {
+    const result = await call(rpcUrl, "get_live_cell", [
+        { tx_hash: txHash, index: `0x${index.toString(16)}` },
+        true,
+    ]);
+    if (result.status !== "live") {
+        throw new Error(`Cell ${txHash}:${index} is not live (status: ${result.status}). ` +
+            "The registry cell may have moved after a governance update — pass --registry-tx and --registry-index.");
+    }
+    return {
+        txHash,
+        index,
+        capacity: result.cell.output.capacity,
+        data: result.cell.data.content,
+        lock: result.cell.output.lock,
+        type: result.cell.output.type ?? null,
+    };
+}
+// Finds the live registry cell by querying the indexer (requires CKB node with indexer enabled).
+export async function findLiveRegistryCell(rpcUrl, registryScript) {
+    const result = await call(rpcUrl, "get_cells", [
+        {
+            script: {
+                code_hash: registryScript.codeHash,
+                hash_type: registryScript.hashType,
+                args: registryScript.args,
+            },
+            script_type: "type",
+        },
+        "asc",
+        "0x1",
+    ]);
+    const cell = result.objects[0];
+    if (!cell)
+        throw new Error("No live registry cell found for the registry script.");
+    return {
+        txHash: cell.out_point.tx_hash,
+        index: Number.parseInt(cell.out_point.index, 16),
+        data: cell.output_data,
+    };
+}
+//# sourceMappingURL=rpc.js.map

package/dist/lib/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../src/lib/rpc.ts"],"names":[],"mappings":"AASA,KAAK,UAAU,IAAI,CACjB,GAAW,EACX,MAAc,EACd,MAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;KAChE,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;IAClD,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAC3B,MAAM,IAAI,KAAK,CAAC,OAAO,MAAM,qBAAqB,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAc,EACd,MAAc,EACd,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAUtB,MAAM,EAAE,eAAe,EAAE;QAC1B,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE;QACrD,IAAI;KACL,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,QAAQ,MAAM,IAAI,KAAK,yBAAyB,MAAM,CAAC,MAAM,KAAK;YAChE,uGAAuG,CAC1G,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM;QACN,KAAK;QACL,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ;QACrC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;QAC9B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI;KACtC,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,cAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAKtB,MAAM,EAAE,WAAW,EAAE;QACtB;YACE,MAAM,EAAE;gBACN,SAAS,EAAE,cAAc,CAAC,QAAQ;gBAClC,SAAS,EAAE,cAAc,CAAC,QAAQ;gBAClC,IAAI,EAAE,cAAc,CAAC,IAAI;aAC1B;YACD,WAAW,EAAE,MAAM;SACpB;QACD,KAAK;QACL,KAAK;KACN,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAEnF,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO;QAC9B,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QAChD,IAAI,EAAE,IAAI,CAAC,WAAW;KACvB,CAAC;AACJ,CAAC"}