@ftptech/canton-agent-wallet 0.1.15 → 0.1.17

package/README.md

@@ -26,8 +26,11 @@ canton-agent-wallet create --relay-url <url>        # generate + onboard a self-
 canton-agent-wallet address                         # print the party id (fund this)
 canton-agent-wallet balance                         # print CC balance
 canton-agent-wallet claim                           # accept incoming transfers (e.g. the initial funding)
+canton-agent-wallet merchant-onboard --facilitator <party> --synchronizer <id>   # EXTERNAL-PARTY merchant: sign this wallet's once-total MerchantConsent (allocation-direct)
+canton-agent-wallet merchant-onboard-hosted --party <merchantParty> --facilitator <party> --participant-url <url> --synchronizer <id> --user-id <id>   # HOSTED-PARTY merchant: create its once-total MerchantConsent via its own node's Ledger API
 canton-agent-wallet pay --relay-url <url> <url>      # fetch a URL, auto-paying any x402 402 challenge
 canton-agent-wallet withdraw --to <party> [--amount <cc>]   # send CC back out (default: full balance)
+canton-agent-wallet reclaim --allocation-cid <cid> [--receiver <merchantParty>]   # recover funds from an unsettled DIRECT allocation after settleBefore (Allocation_Withdraw)
 canton-agent-wallet export                           # print the private key (backup; guard it)
 ```
 
@@ -36,11 +39,36 @@ canton-agent-wallet export                           # print the private key (ba
 default would silently send payments to a dead host, so the CLI fails fast when
 none is given. `address`, `balance`, `claim`, `withdraw` and `export` reuse the
 relay stored in the wallet at `create` time. The current FTP facilitator is
-`http://46.225.91.251:4022` (plain HTTP by IP; a TLS domain is not yet live).
+`https://facilitator.ftptech.xyz`.
+
+### Merchant onboarding: external-party vs hosted-party
+
+To be paid via the allocation-direct (Design B) path, a merchant signs a
+once-total `MerchantConsent` naming the facilitator. There are two onboarding
+commands depending on where the merchant party lives:
+
+- **`merchant-onboard`** — the merchant is an **external party** held in *this*
+  agent-wallet (an Ed25519 self-custody key). It onboards through the relay's
+  interactive prepare → sign-the-hash-locally → execute flow, gated by
+  verify-before-sign. Needs a wallet (and a relay).
+- **`merchant-onboard-hosted`** — the merchant is a **hosted party** that lives
+  on its **own Canton node** (a validator it operates), with no Ed25519 key. It
+  authorizes the consent directly on its own participant's JSON Ledger API
+  (`actAs: [merchant]`); there is **no wallet, no relay, and no Ed25519 key**, so
+  this command loads none. The create shape is fixed
+  (`MerchantConsent {merchant, facilitator}`) and moves no funds — there is no
+  untrusted relay in the loop, so no verify-before-sign is required. Node
+  connection comes from `--participant-url` / `--synchronizer` / `--user-id`
+  (falling back to `CANTON_PARTICIPANT_URL` / `CANTON_SYNCHRONIZER_ID` /
+  `CANTON_USER_ID`); flags override env. **OIDC credentials are read from env
+  ONLY** (never accepted as flags): `OIDC_TOKEN_ENDPOINT`, `OIDC_CLIENT_ID`,
+  `OIDC_CLIENT_SECRET`, `LEDGER_API_AUDIENCE`, and optional `OIDC_SCOPE`. The
+  command is idempotent — if the consent already exists it prints "already
+  onboarded" and submits nothing.
 
 On Canton, incoming CC arrives as a **pending transfer** the agent must accept,
 so the first-run flow is:
-`create --relay-url http://46.225.91.251:4022` → tell your human to send CC to
+`create --relay-url https://facilitator.ftptech.xyz` → tell your human to send CC to
 the printed party id → `claim` → `balance`. Funding once is the only human step,
 exactly like funding an EVM agent.
 

package/dist/cli-args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-args.d.ts","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,eAAe,mBAAmB,CAAC;AAEhD,8EAA8E;AAC9E,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAK1C,CAAC;AAEH,gEAAgE;AAChE,wBAAgB,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG9E;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAW7D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CAEpB;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAC5B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAER;AAED,iEAAiE;AACjE,eAAO,MAAM,kBAAkB,QAEkD,CAAC"}
+{"version":3,"file":"cli-args.d.ts","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,eAAe,mBAAmB,CAAC;AAEhD,8EAA8E;AAC9E,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAgB1C,CAAC;AAEH,gEAAgE;AAChE,wBAAgB,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG9E;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAW7D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CAEpB;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAC5B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAER;AAED,iEAAiE;AACjE,eAAO,MAAM,kBAAkB,QAEkD,CAAC"}

package/dist/cli-args.js

@@ -12,6 +12,17 @@ export const VALUE_FLAGS = new Set([
     "--network",
     "--to",
     "--amount",
+    "--allocation-cid",
+    "--receiver",
+    "--key-file",
+    "--facilitator",
+    "--synchronizer",
+    // merchant-onboard-hosted (hosted-party merchant onboards via its OWN node's
+    // Ledger API — no wallet, no relay): node connection flags. Secrets are NEVER
+    // accepted as flags (OIDC config comes from env only), so none appear here.
+    "--party",
+    "--participant-url",
+    "--user-id",
 ]);
 /** First value following `--<name>` in `args`, or undefined. */
 export function flag(args, name) {

package/dist/cli-args.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-args.js","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEhD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC;IACtD,aAAa;IACb,WAAW;IACX,MAAM;IACN,UAAU;CACX,CAAC,CAAC;AAEH,gEAAgE;AAChE,MAAM,UAAU,IAAI,CAAC,IAAuB,EAAE,IAAY;IACxD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,IAAuB;IACjD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC5B,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB;YACjC,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAuB,EACvB,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,IAAI,SAAS,CAAC;AAC9E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAC5B,IAAuB,EACvB,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,GAAG,CAAC,oBAAoB,IAAI,eAAe,CAAC;AAChF,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAC7B,wEAAwE;IACxE,+EAA+E,CAAC"}
+{"version":3,"file":"cli-args.js","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEhD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC;IACtD,aAAa;IACb,WAAW;IACX,MAAM;IACN,UAAU;IACV,kBAAkB;IAClB,YAAY;IACZ,YAAY;IACZ,eAAe;IACf,gBAAgB;IAChB,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,SAAS;IACT,mBAAmB;IACnB,WAAW;CACZ,CAAC,CAAC;AAEH,gEAAgE;AAChE,MAAM,UAAU,IAAI,CAAC,IAAuB,EAAE,IAAY;IACxD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,IAAuB;IACjD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC5B,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB;YACjC,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAuB,EACvB,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,IAAI,SAAS,CAAC;AAC9E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAC5B,IAAuB,EACvB,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,GAAG,CAAC,oBAAoB,IAAI,eAAe,CAAC;AAChF,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAC7B,wEAAwE;IACxE,+EAA+E,CAAC"}

package/dist/cli.js

@@ -6,6 +6,24 @@
  *   address                      print the party id (fund this)
  *   balance                      print CC balance
  *   claim                        accept incoming transfers (e.g. the initial funding)
+ *   reclaim --allocation-cid <c> [--receiver <merchantParty>]
+ *                                reclaim a locked allocation back to this wallet
+ *                                (Allocation_Withdraw; funds return to the sender).
+ *                                Pass --receiver for a Design B DIRECT allocation
+ *                                (receiver == merchant); omit it for v1/escrow.
+ *   merchant-onboard --facilitator <p> --synchronizer <id>
+ *                                EXTERNAL-PARTY merchant (this Ed25519 wallet):
+ *                                sign this wallet's once-total MerchantConsent so
+ *                                agents can pay it via the allocation-direct path
+ *   merchant-onboard-hosted --party <p> --facilitator <p> --participant-url <url>
+ *                           --synchronizer <id> --user-id <id>
+ *                                HOSTED-PARTY merchant (party on its OWN Canton
+ *                                node): create its once-total MerchantConsent via
+ *                                that node's Ledger API (OIDC + actAs:[merchant]).
+ *                                No wallet, no relay, no Ed25519 key. OIDC config
+ *                                comes from env ONLY (OIDC_TOKEN_ENDPOINT,
+ *                                OIDC_CLIENT_ID, OIDC_CLIENT_SECRET,
+ *                                LEDGER_API_AUDIENCE, [OIDC_SCOPE]).
  *   pay [--relay-url <url>] <url> fetch a URL, auto-paying any x402 402 challenge
  *   withdraw --to <p>            send CC back out (--amount <cc> for a partial amount)
  *   export                       print the private key (backup; guard it)
@@ -33,7 +51,8 @@ import { loadWallet } from "./store.js";
 import { agentKeyFromPrivatePem } from "./keys.js";
 import { makePayingFetch } from "./pay.js";
 import { RelayClient } from "./relay-client.js";
-import { claimAll } from "./tx.js";
+import { claimAll, reclaimAllocation, createMerchantConsent } from "./tx.js";
+import { createMerchantConsentHosted } from "./hosted-onboard.js";
 import { withdraw } from "./withdraw.js";
 import { installProxyFromEnv } from "./proxy.js";
 import { flag, positionals, resolveNetwork, resolveRelayUrl, MISSING_RELAY_HELP, } from "./cli-args.js";
@@ -101,6 +120,104 @@ async function main() {
             console.log(r.claimed ? `claimed ${r.claimed} incoming transfer(s)` : "nothing to claim");
             break;
         }
+        case "reclaim": {
+            // Track B: reclaim a locked allocation back to this wallet via
+            // Allocation_Withdraw. Funds return to the sender (this agent) by
+            // construction; verify-before-sign refuses any relay-swapped choice /
+            // different contract / outbound drain.
+            const w = loadWallet();
+            if (!w)
+                return fail("no wallet yet — run: canton-agent-wallet create");
+            const allocationCid = flag(args, "--allocation-cid");
+            if (!allocationCid)
+                return fail("usage: canton-agent-wallet reclaim --allocation-cid <cid> [--receiver <merchantParty>]");
+            // --receiver is OPTIONAL: supply it for a Design B DIRECT allocation, whose
+            // receiver is the MERCHANT (not the facilitator). The legitimate
+            // Allocation_Withdraw expire-lock context then references that merchant party,
+            // so the verify-before-sign backstop must be told the caller-known receiver to
+            // permit exactly that one party. Omit it for v1 / Design A escrow reclaim
+            // (receiver == facilitator, already permitted) — behavior is unchanged.
+            const receiver = flag(args, "--receiver");
+            const updateId = await reclaimAllocation(new RelayClient({ relayUrl: w.relayUrl, apiKey: API_KEY }), w, { allocationCid, ...(receiver ? { receiver } : {}) });
+            console.log(`reclaimed allocation ${allocationCid}\n  updateId: ${updateId}`);
+            break;
+        }
+        case "merchant-onboard": {
+            // Design B "2-tx DIRECT" onboarding (MERCHANT side, ONCE-TOTAL): this wallet
+            // signs its standing MerchantConsent so agents can later pay it via the
+            // allocation-direct path. Creating the consent MOVES NO FUNDS — it only
+            // captures the merchant's one-time authorization; verify-before-sign refuses
+            // any relay-swapped value-moving choice / substituted facilitator.
+            const w = loadWallet();
+            if (!w)
+                return fail("no wallet yet — run: canton-agent-wallet create");
+            const facilitator = flag(args, "--facilitator") || process.env.CANTON_X402_FACILITATOR;
+            const synchronizerId = flag(args, "--synchronizer") || process.env.CANTON_SYNCHRONIZER_ID;
+            if (!facilitator || !synchronizerId)
+                return fail("usage: canton-agent-wallet merchant-onboard --facilitator <party> --synchronizer <id>\n" +
+                    "  (or set CANTON_X402_FACILITATOR / CANTON_SYNCHRONIZER_ID)");
+            const updateId = await createMerchantConsent(new RelayClient({ relayUrl: w.relayUrl, apiKey: API_KEY }), w, { facilitator, synchronizerId });
+            console.log(`merchant onboarded for direct settlement (facilitator ${facilitator})\n` +
+                `  MerchantConsent updateId: ${updateId}`);
+            break;
+        }
+        case "merchant-onboard-hosted": {
+            // HOSTED-PARTY merchant onboarding (sibling of `merchant-onboard`, but for a
+            // party that lives on its OWN Canton node — NOT an external Ed25519 wallet).
+            // It authorizes its once-total MerchantConsent directly on its node's JSON
+            // Ledger API (actAs:[merchant]); there is NO wallet, NO relay, and NO
+            // Ed25519 key, so this case loads no wallet. The create shape is fixed
+            // (MerchantConsent{merchant, facilitator}) and moves no funds, so there is
+            // no untrusted relay to guard against — no verify-before-sign is needed.
+            // See hosted-onboard.ts for the hosted-vs-external rationale.
+            const merchant = flag(args, "--party");
+            const facilitator = flag(args, "--facilitator");
+            const participantUrl = flag(args, "--participant-url") || process.env.CANTON_PARTICIPANT_URL;
+            const synchronizerId = flag(args, "--synchronizer") || process.env.CANTON_SYNCHRONIZER_ID;
+            const userId = flag(args, "--user-id") || process.env.CANTON_USER_ID;
+            const HOSTED_USAGE = "usage: canton-agent-wallet merchant-onboard-hosted --party <merchantParty> " +
+                "--facilitator <facilitatorParty> --participant-url <url> --synchronizer <id> --user-id <id>\n" +
+                "  --participant-url / --synchronizer / --user-id fall back to CANTON_PARTICIPANT_URL / " +
+                "CANTON_SYNCHRONIZER_ID / CANTON_USER_ID.\n" +
+                "  OIDC config is read from ENV ONLY (never flags): OIDC_TOKEN_ENDPOINT, OIDC_CLIENT_ID, " +
+                "OIDC_CLIENT_SECRET, LEDGER_API_AUDIENCE, [OIDC_SCOPE].";
+            if (!merchant || !facilitator || !participantUrl || !synchronizerId || !userId) {
+                return fail(HOSTED_USAGE);
+            }
+            // Secrets come from ENV ONLY — never accept them on the command line (argv is
+            // visible in `ps`/shell history). Fail fast with the same usage line if any
+            // required OIDC value is missing.
+            const tokenEndpoint = process.env.OIDC_TOKEN_ENDPOINT;
+            const clientId = process.env.OIDC_CLIENT_ID;
+            const clientSecret = process.env.OIDC_CLIENT_SECRET;
+            const audience = process.env.LEDGER_API_AUDIENCE;
+            if (!tokenEndpoint || !clientId || !clientSecret || !audience) {
+                return fail(HOSTED_USAGE);
+            }
+            const res = await createMerchantConsentHosted({
+                participantUrl,
+                synchronizerId,
+                userId,
+                merchant,
+                facilitator,
+                oidc: {
+                    tokenEndpoint,
+                    clientId,
+                    clientSecret,
+                    audience,
+                    ...(process.env.OIDC_SCOPE ? { scope: process.env.OIDC_SCOPE } : {}),
+                },
+            });
+            if (res.created) {
+                console.log(`merchant onboarded for direct settlement (hosted party, facilitator ${facilitator})\n` +
+                    `  MerchantConsent created${res.contractId ? ` (cid ${res.contractId})` : ""}`);
+            }
+            else {
+                console.log(`merchant already onboarded for direct settlement (hosted party, facilitator ${facilitator})\n` +
+                    `  existing MerchantConsent${res.contractId ? ` (cid ${res.contractId})` : ""} — nothing to do`);
+            }
+            break;
+        }
         case "pay": {
             const url = positionals(args)[0];
             if (!url)
@@ -167,8 +284,10 @@ async function main() {
             break;
         }
         default:
-            console.error("canton-agent-wallet: create | address | balance | claim | pay <url> | withdraw --to <party> | export | import\n" +
-                "  relay required for create/pay/import: --relay-url <url> or CANTON_AGENT_RELAY_URL");
+            console.error("canton-agent-wallet: create | address | balance | claim | reclaim --allocation-cid <cid> [--receiver <merchantParty>] | merchant-onboard --facilitator <party> --synchronizer <id> | merchant-onboard-hosted --party <merchantParty> --facilitator <party> --participant-url <url> --synchronizer <id> --user-id <id> | pay <url> | withdraw --to <party> | export | import\n" +
+                "  relay required for create/pay/import: --relay-url <url> or CANTON_AGENT_RELAY_URL\n" +
+                "  merchant-onboard = EXTERNAL-PARTY merchant (this Ed25519 wallet, via the relay).\n" +
+                "  merchant-onboard-hosted = HOSTED-PARTY merchant (party on its OWN Canton node, via that node's Ledger API; OIDC config from env: OIDC_TOKEN_ENDPOINT/OIDC_CLIENT_ID/OIDC_CLIENT_SECRET/LEDGER_API_AUDIENCE/[OIDC_SCOPE]).");
             process.exit(cmd ? 1 : 0);
     }
 }

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EACL,IAAI,EACJ,WAAW,EACX,cAAc,EACd,eAAe,EACf,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAEvB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;AAEjD,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,oEAAoE;AACpE,SAAS,YAAY,CAAC,IAAc;IAClC,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAC3D,CAAC;AAED,2EAA2E;AAC3E,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,8EAA8E;IAC9E,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,KAAK;QAAE,OAAO,CAAC,KAAK,CAAC,gBAAgB,KAAK,GAAG,CAAC,CAAC;IAEnD,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC;gBAC3B,QAAQ;gBACR,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC;gBAC7B,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CACT,iBAAiB,CAAC,CAAC,OAAO,KAAK;gBAC7B,cAAc,CAAC,CAAC,KAAK,IAAI;gBACzB,4EAA4E;gBAC5E,4EAA4E,CAC/E,CAAC;YACF,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,MAAM,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC5F,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YAC7E,MAAM;QACR,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACxF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC1F,MAAM;QACR,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG;gBACN,OAAO,IAAI,CAAC,0DAA0D,CAAC,CAAC;YAC1E,oEAAoE;YACpE,yEAAyE;YACzE,2DAA2D;YAC3D,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;YAC9B,MAAM,QAAQ,GACZ,eAAe,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC1E,MAAM,CAAC,GAAG,MAAM,eAAe,CAAC;gBAC9B,QAAQ;gBACR,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC;gBAClD,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9B,MAAM;QACR,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9B,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,kEAAkE,CAAC,CAAC;YACzF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACtC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,UAAU,EAAE,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3E,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CACX,oFAAoF,CACrF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAClC,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,2EAA2E;YAC3E,yEAAyE;YACzE,IAAI,UAAU,EAAE;gBACd,OAAO,IAAI,CACT,mFAAmF;oBACjF,6DAA6D,CAChE,CAAC;YACJ,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACzC,IAAI,GAAW,CAAC;YAChB,IAAI,OAAO;gBAAE,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;iBAC5C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;gBAAE,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;;gBAErD,OAAO,IAAI,CACT,8EAA8E;oBAC5E,qFAAqF;oBACrF,2EAA2E,CAC9E,CAAC;YACJ,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC;gBAC3B,QAAQ;gBACR,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC;gBAC7B,MAAM,EAAE,OAAO;gBACf,GAAG,EAAE,sBAAsB,CAAC,GAAG,CAAC;gBAChC,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CACT,oBAAoB,CAAC,CAAC,OAAO,KAAK;gBAChC,cAAc,CAAC,CAAC,KAAK,IAAI;gBACzB,oCAAoC,CACvC,CAAC;YACF,MAAM;QACR,CAAC;QACD;YACE,OAAO,CAAC,KAAK,CACX,iHAAiH;gBAC/G,qFAAqF,CACxF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;IAC1B,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvD,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,QAAQ,GACZ,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC;QACxC,CAAC,CAAE,CAAyB,CAAC,KAAK;QAClC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,QAAQ,GACZ,QAAQ,YAAY,KAAK;QACvB,CAAC,CAAC,QAAQ,CAAC,OAAO;QAClB,CAAC,CAAC,QAAQ,IAAI,IAAI;YAChB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClB,CAAC,CAAC,EAAE,CAAC;IACX,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,YAAY,QAAQ,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxE,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,kEAAkE,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,QAAQ,EAAE,CAAC,EAAE,CAAC;QAClG,OAAO,CAAC,KAAK,CACX,6EAA6E;YAC3E,6EAA6E;YAC7E,+FAA+F,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EACL,IAAI,EACJ,WAAW,EACX,cAAc,EACd,eAAe,EACf,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAEvB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;AAEjD,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,oEAAoE;AACpE,SAAS,YAAY,CAAC,IAAc;IAClC,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAC3D,CAAC;AAED,2EAA2E;AAC3E,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,8EAA8E;IAC9E,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,KAAK;QAAE,OAAO,CAAC,KAAK,CAAC,gBAAgB,KAAK,GAAG,CAAC,CAAC;IAEnD,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC;gBAC3B,QAAQ;gBACR,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC;gBAC7B,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CACT,iBAAiB,CAAC,CAAC,OAAO,KAAK;gBAC7B,cAAc,CAAC,CAAC,KAAK,IAAI;gBACzB,4EAA4E;gBAC5E,4EAA4E,CAC/E,CAAC;YACF,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,MAAM,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC5F,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YAC7E,MAAM;QACR,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACxF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC1F,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,+DAA+D;YAC/D,kEAAkE;YAClE,sEAAsE;YACtE,uCAAuC;YACvC,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACvE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YACrD,IAAI,CAAC,aAAa;gBAChB,OAAO,IAAI,CACT,wFAAwF,CACzF,CAAC;YACJ,4EAA4E;YAC5E,iEAAiE;YACjE,+EAA+E;YAC/E,+EAA+E;YAC/E,0EAA0E;YAC1E,wEAAwE;YACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CACtC,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAC1D,CAAC,EACD,EAAE,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CACrD,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,wBAAwB,aAAa,iBAAiB,QAAQ,EAAE,CAAC,CAAC;YAC9E,MAAM;QACR,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,6EAA6E;YAC7E,wEAAwE;YACxE,wEAAwE;YACxE,6EAA6E;YAC7E,mEAAmE;YACnE,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACvE,MAAM,WAAW,GACf,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;YACrE,MAAM,cAAc,GAClB,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;YACrE,IAAI,CAAC,WAAW,IAAI,CAAC,cAAc;gBACjC,OAAO,IAAI,CACT,yFAAyF;oBACvF,6DAA6D,CAChE,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAC1D,CAAC,EACD,EAAE,WAAW,EAAE,cAAc,EAAE,CAChC,CAAC;YACF,OAAO,CAAC,GAAG,CACT,yDAAyD,WAAW,KAAK;gBACvE,+BAA+B,QAAQ,EAAE,CAC5C,CAAC;YACF,MAAM;QACR,CAAC;QACD,KAAK,yBAAyB,CAAC,CAAC,CAAC;YAC/B,6EAA6E;YAC7E,6EAA6E;YAC7E,2EAA2E;YAC3E,sEAAsE;YACtE,uEAAuE;YACvE,2EAA2E;YAC3E,yEAAyE;YACzE,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACvC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAChD,MAAM,cAAc,GAClB,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;YACxE,MAAM,cAAc,GAClB,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;YACrE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YACrE,MAAM,YAAY,GAChB,6EAA6E;gBAC7E,+FAA+F;gBAC/F,yFAAyF;gBACzF,4CAA4C;gBAC5C,0FAA0F;gBAC1F,wDAAwD,CAAC;YAC3D,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC/E,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC;YAC5B,CAAC;YACD,8EAA8E;YAC9E,4EAA4E;YAC5E,kCAAkC;YAClC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YACjD,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9D,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,2BAA2B,CAAC;gBAC5C,cAAc;gBACd,cAAc;gBACd,MAAM;gBACN,QAAQ;gBACR,WAAW;gBACX,IAAI,EAAE;oBACJ,aAAa;oBACb,QAAQ;oBACR,YAAY;oBACZ,QAAQ;oBACR,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrE;aACF,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CACT,uEAAuE,WAAW,KAAK;oBACrF,4BAA4B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACjF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CACT,+EAA+E,WAAW,KAAK;oBAC7F,6BAA6B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAClG,CAAC;YACJ,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG;gBACN,OAAO,IAAI,CAAC,0DAA0D,CAAC,CAAC;YAC1E,oEAAoE;YACpE,yEAAyE;YACzE,2DAA2D;YAC3D,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;YAC9B,MAAM,QAAQ,GACZ,eAAe,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC1E,MAAM,CAAC,GAAG,MAAM,eAAe,CAAC;gBAC9B,QAAQ;gBACR,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC;gBAClD,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9B,MAAM;QACR,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9B,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,kEAAkE,CAAC,CAAC;YACzF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACtC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,UAAU,EAAE,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3E,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CACX,oFAAoF,CACrF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAClC,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,2EAA2E;YAC3E,yEAAyE;YACzE,IAAI,UAAU,EAAE;gBACd,OAAO,IAAI,CACT,mFAAmF;oBACjF,6DAA6D,CAChE,CAAC;YACJ,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACzC,IAAI,GAAW,CAAC;YAChB,IAAI,OAAO;gBAAE,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;iBAC5C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;gBAAE,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;;gBAErD,OAAO,IAAI,CACT,8EAA8E;oBAC5E,qFAAqF;oBACrF,2EAA2E,CAC9E,CAAC;YACJ,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC;gBAC3B,QAAQ;gBACR,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC;gBAC7B,MAAM,EAAE,OAAO;gBACf,GAAG,EAAE,sBAAsB,CAAC,GAAG,CAAC;gBAChC,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CACT,oBAAoB,CAAC,CAAC,OAAO,KAAK;gBAChC,cAAc,CAAC,CAAC,KAAK,IAAI;gBACzB,oCAAoC,CACvC,CAAC;YACF,MAAM;QACR,CAAC;QACD;YACE,OAAO,CAAC,KAAK,CACX,+WAA+W;gBAC7W,uFAAuF;gBACvF,sFAAsF;gBACtF,6NAA6N,CAChO,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;IAC1B,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvD,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,QAAQ,GACZ,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC;QACxC,CAAC,CAAE,CAAyB,CAAC,KAAK;QAClC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,QAAQ,GACZ,QAAQ,YAAY,KAAK;QACvB,CAAC,CAAC,QAAQ,CAAC,OAAO;QAClB,CAAC,CAAC,QAAQ,IAAI,IAAI;YAChB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;YAClB,CAAC,CAAC,EAAE,CAAC;IACX,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,YAAY,QAAQ,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxE,6EAA6E;IAC7E,2EAA2E;IAC3E,IAAI,kEAAkE,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,QAAQ,EAAE,CAAC,EAAE,CAAC;QAClG,OAAO,CAAC,KAAK,CACX,6EAA6E;YAC3E,6EAA6E;YAC7E,+FAA+F,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/hosted-onboard.d.ts

@@ -0,0 +1,88 @@
+/**
+ * HOSTED-party merchant onboarding for x402-direct ("Design B").
+ *
+ * HOSTED vs EXTERNAL — why this is a separate path
+ * ================================================
+ * The agent-wallet `merchant-onboard` command (`createMerchantConsent` in tx.ts)
+ * is EXTERNAL-PARTY only: the merchant party is an Ed25519 self-custody wallet,
+ * so it onboards via the relay's interactive prepare -> sign-the-hash-locally ->
+ * execute flow, gated by verify-before-sign (the relay is untrusted, so the agent
+ * structurally re-checks the relay-prepared bytes before signing with its key).
+ *
+ * A HOSTED-party merchant is different: its party lives on its OWN Canton node
+ * (a validator it operates), NOT in an external Ed25519 wallet. It therefore has
+ * NO Ed25519 key, NO relay, NO wallet.json — and needs none of them. It authorizes
+ * the `MerchantConsent` create directly on its own participant's JSON Ledger API
+ * with a plain `CreateCommand` (`actAs: [merchant]`); the merchant's node supplies
+ * the signatory authority. The facilitator is only an `observer` of the consent,
+ * so it sees it over the synchronizer and the existing facilitator-minted path
+ * (MerchantConsent_Accept) settles unchanged. No protocol change, no Ed25519.
+ *
+ * NO verify-before-sign is needed here (and there is nothing to verify against):
+ * the merchant's OWN node builds and submits exactly what this function asks it to.
+ * The create shape is fixed and value-moving-free by construction — a single
+ * `MerchantConsent {merchant, facilitator}` create that captures the merchant's
+ * one-time authorization and MOVES NO FUNDS. There is no untrusted relay in the
+ * loop to substitute a facilitator or swap in a drain, so the structural
+ * verify-before-sign backstop the external path applies has no role.
+ *
+ * PREREQ: the `x402-direct` DAR (x402-direct-0.1.0, package-id
+ * f819db3288986a7f6c3157359ed02040e0a6080ceb6890309ecbb71eeeb93780) must be
+ * uploaded + vetted on the merchant's participant so `#x402-direct:...` resolves.
+ *
+ * Idempotent (the consent is once-total): if a `MerchantConsent` for this
+ * (merchant, facilitator) already exists, this returns `{ created: false }` and
+ * submits nothing.
+ *
+ * Uses the global `fetch` (Node 18+); imports no Canton SDK — it is the same
+ * dependency-free OIDC + JSON Ledger API v2 pattern the facilitator's funder
+ * (e2e/fund.mjs) uses.
+ */
+/** OIDC client-credentials config for minting the JSON Ledger API bearer token. */
+export interface HostedOidcConfig {
+    /** OIDC token endpoint (e.g. `https://<issuer>/oauth/token`). */
+    tokenEndpoint: string;
+    /** OIDC client id (m2m client authorized for the merchant's participant). */
+    clientId: string;
+    /** OIDC client secret. */
+    clientSecret: string;
+    /** Ledger API audience the token is minted for. */
+    audience: string;
+    /** Optional OIDC scope. */
+    scope?: string;
+}
+/** Inputs for {@link createMerchantConsentHosted}. */
+export interface CreateMerchantConsentHostedOptions {
+    /** The merchant's participant JSON Ledger API base URL (no trailing path). */
+    participantUrl: string;
+    /** The synchronizer the consent is created on. */
+    synchronizerId: string;
+    /** The Ledger API user id to submit as (the merchant's participant m2m user). */
+    userId: string;
+    /** The merchant party id (signatory of the consent; also the `actAs` party). */
+    merchant: string;
+    /** The facilitator party id (observer of the consent). */
+    facilitator: string;
+    /** OIDC client-credentials config (token mint). */
+    oidc: HostedOidcConfig;
+}
+/** Result of {@link createMerchantConsentHosted}. */
+export interface CreateMerchantConsentHostedResult {
+    /** `true` if a new MerchantConsent was created; `false` if one already existed. */
+    created: boolean;
+    /** The MerchantConsent contract id, when resolvable (the existing one on a
+     *  no-op, or the freshly created one when the transaction's created event is
+     *  available). May be undefined on a fresh create if the event was not returned. */
+    contractId?: string;
+}
+/**
+ * Onboard a HOSTED-party merchant for x402-direct by creating its once-total
+ * `MerchantConsent {merchant, facilitator}` on its own participant's JSON Ledger
+ * API. Idempotent: returns `{ created: false, contractId }` if the consent
+ * already exists, else creates it and returns `{ created: true, contractId? }`.
+ *
+ * See the file-level doc for the HOSTED-vs-EXTERNAL distinction and why no
+ * verify-before-sign is required.
+ */
+export declare function createMerchantConsentHosted(opts: CreateMerchantConsentHostedOptions): Promise<CreateMerchantConsentHostedResult>;
+//# sourceMappingURL=hosted-onboard.d.ts.map

package/dist/hosted-onboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-onboard.d.ts","sourceRoot":"","sources":["../src/hosted-onboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAQH,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,sDAAsD;AACtD,MAAM,WAAW,kCAAkC;IACjD,8EAA8E;IAC9E,cAAc,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,qDAAqD;AACrD,MAAM,WAAW,iCAAiC;IAChD,mFAAmF;IACnF,OAAO,EAAE,OAAO,CAAC;IACjB;;wFAEoF;IACpF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA0BD;;;;;;;;GAQG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,kCAAkC,GACvC,OAAO,CAAC,iCAAiC,CAAC,CA8E5C"}

package/dist/hosted-onboard.js

@@ -0,0 +1,207 @@
+/**
+ * HOSTED-party merchant onboarding for x402-direct ("Design B").
+ *
+ * HOSTED vs EXTERNAL — why this is a separate path
+ * ================================================
+ * The agent-wallet `merchant-onboard` command (`createMerchantConsent` in tx.ts)
+ * is EXTERNAL-PARTY only: the merchant party is an Ed25519 self-custody wallet,
+ * so it onboards via the relay's interactive prepare -> sign-the-hash-locally ->
+ * execute flow, gated by verify-before-sign (the relay is untrusted, so the agent
+ * structurally re-checks the relay-prepared bytes before signing with its key).
+ *
+ * A HOSTED-party merchant is different: its party lives on its OWN Canton node
+ * (a validator it operates), NOT in an external Ed25519 wallet. It therefore has
+ * NO Ed25519 key, NO relay, NO wallet.json — and needs none of them. It authorizes
+ * the `MerchantConsent` create directly on its own participant's JSON Ledger API
+ * with a plain `CreateCommand` (`actAs: [merchant]`); the merchant's node supplies
+ * the signatory authority. The facilitator is only an `observer` of the consent,
+ * so it sees it over the synchronizer and the existing facilitator-minted path
+ * (MerchantConsent_Accept) settles unchanged. No protocol change, no Ed25519.
+ *
+ * NO verify-before-sign is needed here (and there is nothing to verify against):
+ * the merchant's OWN node builds and submits exactly what this function asks it to.
+ * The create shape is fixed and value-moving-free by construction — a single
+ * `MerchantConsent {merchant, facilitator}` create that captures the merchant's
+ * one-time authorization and MOVES NO FUNDS. There is no untrusted relay in the
+ * loop to substitute a facilitator or swap in a drain, so the structural
+ * verify-before-sign backstop the external path applies has no role.
+ *
+ * PREREQ: the `x402-direct` DAR (x402-direct-0.1.0, package-id
+ * f819db3288986a7f6c3157359ed02040e0a6080ceb6890309ecbb71eeeb93780) must be
+ * uploaded + vetted on the merchant's participant so `#x402-direct:...` resolves.
+ *
+ * Idempotent (the consent is once-total): if a `MerchantConsent` for this
+ * (merchant, facilitator) already exists, this returns `{ created: false }` and
+ * submits nothing.
+ *
+ * Uses the global `fetch` (Node 18+); imports no Canton SDK — it is the same
+ * dependency-free OIDC + JSON Ledger API v2 pattern the facilitator's funder
+ * (e2e/fund.mjs) uses.
+ */
+/** The x402-direct "Design B" standing-consent template the hosted merchant
+ *  creates. The `#`-prefixed package NAME (not the hex package-id) lets the
+ *  participant resolve its vetted version at create time — the same convention
+ *  tx.ts's external-party path uses. */
+const MERCHANT_CONSENT_TEMPLATE_ID = "#x402-direct:X402Direct:MerchantConsent";
+/** Mint a JSON Ledger API bearer token via the OIDC client-credentials grant. */
+async function mintToken(oidc) {
+    const body = new URLSearchParams({
+        grant_type: "client_credentials",
+        client_id: oidc.clientId,
+        client_secret: oidc.clientSecret,
+        audience: oidc.audience,
+    });
+    if (oidc.scope)
+        body.set("scope", oidc.scope);
+    const r = await fetch(oidc.tokenEndpoint, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded" },
+        body: body.toString(),
+    });
+    if (r.status !== 200) {
+        throw new Error(`OIDC token mint failed: HTTP ${r.status}`);
+    }
+    const j = (await r.json());
+    if (!j.access_token) {
+        throw new Error("OIDC token mint: no access_token in response");
+    }
+    return j.access_token;
+}
+/**
+ * Onboard a HOSTED-party merchant for x402-direct by creating its once-total
+ * `MerchantConsent {merchant, facilitator}` on its own participant's JSON Ledger
+ * API. Idempotent: returns `{ created: false, contractId }` if the consent
+ * already exists, else creates it and returns `{ created: true, contractId? }`.
+ *
+ * See the file-level doc for the HOSTED-vs-EXTERNAL distinction and why no
+ * verify-before-sign is required.
+ */
+export async function createMerchantConsentHosted(opts) {
+    const { participantUrl, synchronizerId, userId, merchant, facilitator, oidc } = opts;
+    const token = await mintToken(oidc);
+    // Authenticated POST to the merchant's JSON Ledger API v2.
+    const ledgerPost = async (path, payload) => {
+        const r = await fetch(participantUrl + path, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${token}`,
+                "content-type": "application/json",
+            },
+            body: JSON.stringify(payload),
+        });
+        const text = await r.text();
+        let json;
+        try {
+            json = JSON.parse(text);
+        }
+        catch {
+            json = undefined;
+        }
+        return { status: r.status, json, text };
+    };
+    const ledgerGet = async (path) => {
+        const r = await fetch(participantUrl + path, {
+            headers: { Authorization: `Bearer ${token}` },
+        });
+        return r.json();
+    };
+    // Once-total guard: is there already a MerchantConsent for this merchant naming
+    // this facilitator? A TemplateFilter (not a wildcard) keeps the ACS query small
+    // — a busy validator-operator party can hold many contracts.
+    const existing = await existingConsentCid(ledgerPost, ledgerGet, merchant, facilitator);
+    if (existing) {
+        return { created: false, contractId: existing };
+    }
+    // No existing consent — create it. The merchant's node supplies the signatory
+    // authority via actAs:[merchant]; the create shape is fixed and moves no funds.
+    const commandId = `merchant-onboard-hosted-${Date.now()}`;
+    const send = await ledgerPost("/v2/commands/submit-and-wait-for-transaction", {
+        commands: {
+            commandId,
+            userId,
+            actAs: [merchant],
+            synchronizerId,
+            disclosedContracts: [],
+            commands: [
+                {
+                    CreateCommand: {
+                        templateId: MERCHANT_CONSENT_TEMPLATE_ID,
+                        // Daml declaration order: [0] merchant, [1] facilitator.
+                        createArguments: { merchant, facilitator },
+                    },
+                },
+            ],
+        },
+    });
+    if (send.status !== 200) {
+        throw new Error(`merchant consent create failed: HTTP ${send.status} ${send.text.slice(0, 400)}`);
+    }
+    // contractId is best-effort: spread it only when resolvable so the result
+    // conforms to exactOptionalPropertyTypes (no explicit `contractId: undefined`).
+    const contractId = createdConsentCid(send.json);
+    return { created: true, ...(contractId ? { contractId } : {}) };
+}
+/**
+ * Scan the submit-and-wait-for-transaction response for the created
+ * MerchantConsent's contract id. Best-effort — the contract id is informational
+ * (the consent is once-total and the facilitator re-resolves it), so an
+ * unrecognized event shape yields `undefined` rather than an error.
+ */
+function createdConsentCid(transactionResponse) {
+    if (typeof transactionResponse !== "object" || transactionResponse === null) {
+        return undefined;
+    }
+    const tx = transactionResponse
+        .transaction;
+    const events = tx?.events;
+    if (!Array.isArray(events))
+        return undefined;
+    for (const ev of events) {
+        const created = ev
+            ?.CreatedEvent;
+        if (created?.contractId)
+            return created.contractId;
+    }
+    return undefined;
+}
+/**
+ * Query the merchant's ACS (scoped by a TemplateFilter to the MerchantConsent
+ * template, active at ledger-end) for an existing consent naming this
+ * facilitator. Returns its contract id, or `null` if none exists.
+ */
+async function existingConsentCid(ledgerPost, ledgerGet, merchant, facilitator) {
+    const end = (await ledgerGet("/v2/state/ledger-end"));
+    const acs = await ledgerPost("/v2/state/active-contracts", {
+        filter: {
+            filtersByParty: {
+                [merchant]: {
+                    cumulative: [
+                        {
+                            identifierFilter: {
+                                TemplateFilter: {
+                                    value: {
+                                        templateId: MERCHANT_CONSENT_TEMPLATE_ID,
+                                        includeCreatedEventBlob: false,
+                                    },
+                                },
+                            },
+                        },
+                    ],
+                },
+            },
+        },
+        verbose: false,
+        activeAtOffset: end.offset,
+    });
+    const list = Array.isArray(acs.json)
+        ? acs.json
+        : (acs.json?.contractEntries ?? []);
+    for (const entry of list) {
+        const created = entry?.contractEntry?.JsActiveContract?.createdEvent;
+        if (created && created.createArgument?.facilitator === facilitator) {
+            return created.contractId ?? null;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=hosted-onboard.js.map

package/dist/hosted-onboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-onboard.js","sourceRoot":"","sources":["../src/hosted-onboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH;;;wCAGwC;AACxC,MAAM,4BAA4B,GAAG,yCAAyC,CAAC;AA0C/E,iFAAiF;AACjF,KAAK,UAAU,SAAS,CAAC,IAAsB;IAC7C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,aAAa,EAAE,IAAI,CAAC,YAAY;QAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE;QACxC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAA8B,CAAC;IACxD,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,CAAC,YAAY,CAAC;AACxB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAwC;IAExC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,GAC3E,IAAI,CAAC;IACP,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IAEpC,2DAA2D;IAC3D,MAAM,UAAU,GAAG,KAAK,EACtB,IAAY,EACZ,OAAgB,EAC0C,EAAE;QAC5D,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,cAAc,GAAG,IAAI,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,KAAK,EAAE,IAAY,EAAoB,EAAE;QACzD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,cAAc,GAAG,IAAI,EAAE;YAC3C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;SAC9C,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAClB,CAAC,CAAC;IAEF,gFAAgF;IAChF,gFAAgF;IAChF,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACvC,UAAU,EACV,SAAS,EACT,QAAQ,EACR,WAAW,CACZ,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IAClD,CAAC;IAED,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,SAAS,GAAG,2BAA2B,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,8CAA8C,EAAE;QAC5E,QAAQ,EAAE;YACR,SAAS;YACT,MAAM;YACN,KAAK,EAAE,CAAC,QAAQ,CAAC;YACjB,cAAc;YACd,kBAAkB,EAAE,EAAE;YACtB,QAAQ,EAAE;gBACR;oBACE,aAAa,EAAE;wBACb,UAAU,EAAE,4BAA4B;wBACxC,yDAAyD;wBACzD,eAAe,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE;qBAC3C;iBACF;aACF;SACF;KACF,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,wCAAwC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,gFAAgF;IAChF,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,mBAA4B;IACrD,IAAI,OAAO,mBAAmB,KAAK,QAAQ,IAAI,mBAAmB,KAAK,IAAI,EAAE,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,GAAI,mBAAgE;SACzE,WAAW,CAAC;IACf,MAAM,MAAM,GAAG,EAAE,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAI,EAAiD;YAChE,EAAE,YAAY,CAAC;QACjB,IAAI,OAAO,EAAE,UAAU;YAAE,OAAO,OAAO,CAAC,UAAU,CAAC;IACrD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAC/B,UAG6D,EAC7D,SAA6C,EAC7C,QAAgB,EAChB,WAAmB;IAEnB,MAAM,GAAG,GAAG,CAAC,MAAM,SAAS,CAAC,sBAAsB,CAAC,CAAwB,CAAC;IAC7E,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,4BAA4B,EAAE;QACzD,MAAM,EAAE;YACN,cAAc,EAAE;gBACd,CAAC,QAAQ,CAAC,EAAE;oBACV,UAAU,EAAE;wBACV;4BACE,gBAAgB,EAAE;gCAChB,cAAc,EAAE;oCACd,KAAK,EAAE;wCACL,UAAU,EAAE,4BAA4B;wCACxC,uBAAuB,EAAE,KAAK;qCAC/B;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;SACF;QACD,OAAO,EAAE,KAAK;QACd,cAAc,EAAE,GAAG,CAAC,MAAM;KAC3B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAClC,CAAC,CAAE,GAAG,CAAC,IAAkB;QACzB,CAAC,CAAC,CAAE,GAAG,CAAC,IAAwC,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;IAC3E,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,OAAO,GACX,KAUD,EAAE,aAAa,EAAE,gBAAgB,EAAE,YAAY,CAAC;QACjD,IAAI,OAAO,IAAI,OAAO,CAAC,cAAc,EAAE,WAAW,KAAK,WAAW,EAAE,CAAC;YACnE,OAAO,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/index.d.ts

@@ -4,10 +4,11 @@ export * from "./relay-client.js";
 export * from "./onboard.js";
 export * from "./relay-signer.js";
 export * from "./tx.js";
+export * from "./hosted-onboard.js";
 export * from "./withdraw.js";
 export * from "./pay.js";
 export * from "./hash-binding.js";
 export * from "./canton-hash.js";
 export * from "./trusted-dso.js";
-export { assertPreparedTransferMatches, assertPreparedCreateTransferCommandMatches, assertHashBinding, assertOnboardingTopologyBindsKey, decodePrepared, extractTransfer, extractCreateTransferCommand, PreparedDecodeError, PreparedTransferMismatchError, PreparedHashUnavailableError, OnboardingTopologyMismatchError, type HashBindingOptions, type PreparedTransferExpectation, type PreparedCreateTransferCommandExpectation, type OnboardingTopologyExpectation, } from "./verify-prepared.js";
+export { assertPreparedTransferMatches, assertPreparedCreateTransferCommandMatches, assertPreparedConsentCreateMatches, assertHashBinding, assertOnboardingTopologyBindsKey, decodePrepared, extractTransfer, extractCreateTransferCommand, PreparedDecodeError, PreparedTransferMismatchError, PreparedHashUnavailableError, OnboardingTopologyMismatchError, type HashBindingOptions, type PreparedTransferExpectation, type PreparedCreateTransferCommandExpectation, type PreparedConsentCreateExpectation, type OnboardingTopologyExpectation, } from "./verify-prepared.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,6BAA6B,EAC7B,0CAA0C,EAC1C,iBAAiB,EACjB,gCAAgC,EAChC,cAAc,EACd,eAAe,EACf,4BAA4B,EAC5B,mBAAmB,EACnB,6BAA6B,EAC7B,4BAA4B,EAC5B,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,wCAAwC,EAC7C,KAAK,6BAA6B,GACnC,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,6BAA6B,EAC7B,0CAA0C,EAC1C,kCAAkC,EAClC,iBAAiB,EACjB,gCAAgC,EAChC,cAAc,EACd,eAAe,EACf,4BAA4B,EAC5B,mBAAmB,EACnB,6BAA6B,EAC7B,4BAA4B,EAC5B,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,wCAAwC,EAC7C,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,GACnC,MAAM,sBAAsB,CAAC"}

package/dist/index.js

@@ -4,10 +4,11 @@ export * from "./relay-client.js";
 export * from "./onboard.js";
 export * from "./relay-signer.js";
 export * from "./tx.js";
+export * from "./hosted-onboard.js";
 export * from "./withdraw.js";
 export * from "./pay.js";
 export * from "./hash-binding.js";
 export * from "./canton-hash.js";
 export * from "./trusted-dso.js";
-export { assertPreparedTransferMatches, assertPreparedCreateTransferCommandMatches, assertHashBinding, assertOnboardingTopologyBindsKey, decodePrepared, extractTransfer, extractCreateTransferCommand, PreparedDecodeError, PreparedTransferMismatchError, PreparedHashUnavailableError, OnboardingTopologyMismatchError, } from "./verify-prepared.js";
+export { assertPreparedTransferMatches, assertPreparedCreateTransferCommandMatches, assertPreparedConsentCreateMatches, assertHashBinding, assertOnboardingTopologyBindsKey, decodePrepared, extractTransfer, extractCreateTransferCommand, PreparedDecodeError, PreparedTransferMismatchError, PreparedHashUnavailableError, OnboardingTopologyMismatchError, } from "./verify-prepared.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,6BAA6B,EAC7B,0CAA0C,EAC1C,iBAAiB,EACjB,gCAAgC,EAChC,cAAc,EACd,eAAe,EACf,4BAA4B,EAC5B,mBAAmB,EACnB,6BAA6B,EAC7B,4BAA4B,EAC5B,+BAA+B,GAKhC,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,OAAO,EACL,6BAA6B,EAC7B,0CAA0C,EAC1C,kCAAkC,EAClC,iBAAiB,EACjB,gCAAgC,EAChC,cAAc,EACd,eAAe,EACf,4BAA4B,EAC5B,mBAAmB,EACnB,6BAA6B,EAC7B,4BAA4B,EAC5B,+BAA+B,GAMhC,MAAM,sBAAsB,CAAC"}