@ixo/openhands-sdk 0.0.0-stage → 0.2.0

package/dist/cjs/chain/pendingTransact.d.ts

@@ -0,0 +1,31 @@
+/**
+ * A transaction that is out with somebody's phone.
+ *
+ * The login learned this the hard way and the transact path never did, and
+ * paid the same way: tap "Bring PAY in", the app opens, the phone signs and
+ * broadcasts — and the page that was waiting is a page iOS discarded, so
+ * nothing anywhere ever asks the relay how it went. The transaction
+ * SUCCEEDED on chain and the screen said nothing.
+ *
+ * So the request outlives the page: the hash pair goes to localStorage the
+ * moment the relay issues it, the in-page wait clears it on any terminal
+ * answer, and the shell (app/lib/pendingLogin.ts, `finishPendingTransacts`)
+ * chases whatever is left on every page load and return-to-front.
+ *
+ * **What is stored grants nothing.** The pair identifies a request whose
+ * answer lives with the relay; the phone has already seen, on its own
+ * screen, exactly what it signed. Losing the pair strands an answer — which
+ * is the bug this exists to end.
+ */
+export interface PendingTransact {
+    sessionHash: string;
+    transactionHash: string;
+    /** What was being signed, in the caller's own words — so a later surface
+     *  can say "your draw went through" rather than a hash. */
+    memo: string;
+    startedAt: string;
+}
+export declare function rememberTransact(one: PendingTransact): void;
+export declare function forgetTransact(transactionHash: string): void;
+export declare function pendingTransacts(): PendingTransact[];
+//# sourceMappingURL=pendingTransact.d.ts.map

package/dist/cjs/chain/pendingTransact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pendingTransact.d.ts","sourceRoot":"","sources":["../../../src/chain/pendingTransact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB;+DAC2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAOD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAO3D;AAED,wBAAgB,cAAc,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAQ5D;AAED,wBAAgB,gBAAgB,IAAI,eAAe,EAAE,CAUpD"}

package/dist/cjs/chain/pendingTransact.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * A transaction that is out with somebody's phone.
+ *
+ * The login learned this the hard way and the transact path never did, and
+ * paid the same way: tap "Bring PAY in", the app opens, the phone signs and
+ * broadcasts — and the page that was waiting is a page iOS discarded, so
+ * nothing anywhere ever asks the relay how it went. The transaction
+ * SUCCEEDED on chain and the screen said nothing.
+ *
+ * So the request outlives the page: the hash pair goes to localStorage the
+ * moment the relay issues it, the in-page wait clears it on any terminal
+ * answer, and the shell (app/lib/pendingLogin.ts, `finishPendingTransacts`)
+ * chases whatever is left on every page load and return-to-front.
+ *
+ * **What is stored grants nothing.** The pair identifies a request whose
+ * answer lives with the relay; the phone has already seen, on its own
+ * screen, exactly what it signed. Losing the pair strands an answer — which
+ * is the bug this exists to end.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rememberTransact = rememberTransact;
+exports.forgetTransact = forgetTransact;
+exports.pendingTransacts = pendingTransacts;
+const KEY = "qi.signx.pending.transact";
+const KEEP = 3;
+/** Long enough for a slow phone trip; short enough that nothing lingers. */
+const GRACE_MS = 15 * 60 * 1000;
+function rememberTransact(one) {
+    try {
+        const kept = [one, ...pendingTransacts().filter((held) => held.transactionHash !== one.transactionHash)].slice(0, KEEP);
+        localStorage.setItem(KEY, JSON.stringify(kept));
+    }
+    catch {
+        /* Private mode: the in-page wait still works; only a discarded tab loses. */
+    }
+}
+function forgetTransact(transactionHash) {
+    try {
+        const left = pendingTransacts().filter((one) => one.transactionHash !== transactionHash);
+        if (left.length === 0)
+            localStorage.removeItem(KEY);
+        else
+            localStorage.setItem(KEY, JSON.stringify(left));
+    }
+    catch {
+        /* nothing stored */
+    }
+}
+function pendingTransacts() {
+    try {
+        if (typeof localStorage === "undefined")
+            return [];
+        const raw = localStorage.getItem(KEY);
+        const held = raw ? JSON.parse(raw) : [];
+        if (!Array.isArray(held))
+            return [];
+        return held.filter((one) => one?.sessionHash && one?.transactionHash && Date.parse(one.startedAt) + GRACE_MS > Date.now());
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=pendingTransact.js.map

package/dist/cjs/chain/pendingTransact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pendingTransact.js","sourceRoot":"","sources":["../../../src/chain/pendingTransact.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;AAgBH,4CAOC;AAED,wCAQC;AAED,4CAUC;AAlCD,MAAM,GAAG,GAAG,2BAA2B,CAAC;AACxC,MAAM,IAAI,GAAG,CAAC,CAAC;AACf,4EAA4E;AAC5E,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhC,SAAgB,gBAAgB,CAAC,GAAoB;IACnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,KAAK,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACxH,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;IAC/E,CAAC;AACH,CAAC;AAED,SAAgB,cAAc,CAAC,eAAuB;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,KAAK,eAAe,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;;YAC/C,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;AACH,CAAC;AAED,SAAgB,gBAAgB;IAC9B,IAAI,CAAC;QACH,IAAI,OAAO,YAAY,KAAK,WAAW;YAAE,OAAO,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,WAAW,IAAI,GAAG,EAAE,eAAe,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/cjs/chain/query.d.ts

@@ -0,0 +1,75 @@
+import { createQueryClient } from "@ixo/impactxclient-sdk";
+type QueryClient = Awaited<ReturnType<typeof createQueryClient>>;
+export declare function getQueryClient(): Promise<QueryClient>;
+export declare function getUixoBalance(address: string): Promise<number>;
+/**
+ * Whether an allowance has run out of time.
+ *
+ * Every grant this estate makes is an `AllowedMsgAllowance` wrapping a
+ * `BasicAllowance`, and this only ever looked at the bare kind — so a wrapped
+ * grant that expired hours ago read as live, `sponsorPoster` answered
+ * `already: true` to it, and the person was told they were sponsored by a
+ * grant the chain would refuse. Unwrap one level; anything stranger is left
+ * to the chain to judge, as before.
+ */
+export declare function expired(allowance: {
+    typeUrl?: string;
+    value: Uint8Array;
+} | undefined, now?: number): boolean;
+/**
+ * Whether an allowance can pay for these messages.
+ *
+ * An `AllowedMsgAllowance` names the message types it will pay for, and the
+ * chain refuses any other with "message does not exist in allowed messages".
+ * A bare allowance pays for anything. With no messages named, any live
+ * allowance counts — the old question, "does anyone sponsor this key?".
+ */
+export declare function canPay(allowance: {
+    typeUrl?: string;
+    value: Uint8Array;
+} | undefined, forMessages?: string[]): boolean;
+/**
+ * The first live granter that can pay for these messages, out of what a
+ * key holds. Pure, so the choice is testable without a chain.
+ *
+ * A key can hold one allowance per granter, and this estate has several
+ * granters: the submission gate, the poster door, the union door. Choosing
+ * the first live one was right while every allowance paid for the same
+ * thing; the union door's pays for three identity messages and nothing
+ * else, and a phone that picked it to submit a claim was refused — while
+ * the faucet path it would otherwise have taken sat unused, because "some
+ * granter exists" read as "sponsored".
+ */
+export declare function pickGranter(allowances: {
+    granter?: string;
+    allowance?: {
+        typeUrl?: string;
+        value: Uint8Array;
+    };
+}[], forMessages?: string[], now?: number): string | undefined;
+/** First live feegrant granter for this address that can pay for `forMessages` (any, when omitted). */
+export declare function getFeegrantGranter(address: string, forMessages?: string[]): Promise<string | undefined>;
+/** Testnet/devnet only: ask the faucet to fund an address, then wait for it to land. */
+export declare function ensureGas(address: string): Promise<void>;
+/**
+ * The events a transaction emitted, fetched by its hash.
+ *
+ * A passkey broadcast returns events inline, because we did the broadcasting.
+ * A phone broadcast does not — the phone sent it and hands back a result, so
+ * anything read out of events (an entity's DID lives in `wasm.token_id`) has
+ * to be fetched afterwards. Same facts, one round trip later.
+ */
+export declare function txEvents(transactionHash: string): Promise<{
+    type: string;
+    attributes: {
+        key: string;
+        value: string;
+    }[];
+}[]>;
+/**
+ * One attribute out of those events — the same read
+ * `utils.common.getValueFromEvents` does for an inline result.
+ */
+export declare function valueFromTx(transactionHash: string, type: string, key: string): Promise<string>;
+export {};
+//# sourceMappingURL=query.d.ts.map

package/dist/cjs/chain/query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../../src/chain/query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAInE,KAAK,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC;AAIjE,wBAAgB,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC,CAGrD;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIrE;AAED;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG,SAAS,EAAE,GAAG,SAAa,GAAG,OAAO,CAiBjH;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,SAAS,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAStH;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CACzB,UAAU,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAA;CAAE,EAAE,EACvF,WAAW,CAAC,EAAE,MAAM,EAAE,EACtB,GAAG,SAAa,GACf,MAAM,GAAG,SAAS,CAOpB;AAED,uGAAuG;AACvG,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAS7G;AAED,wFAAwF;AACxF,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS9D;AAED;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,EAAE,CAAC,CAYjI;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAerG"}

package/dist/cjs/chain/query.js

@@ -0,0 +1,171 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getQueryClient = getQueryClient;
+exports.getUixoBalance = getUixoBalance;
+exports.expired = expired;
+exports.canPay = canPay;
+exports.pickGranter = pickGranter;
+exports.getFeegrantGranter = getFeegrantGranter;
+exports.ensureGas = ensureGas;
+exports.txEvents = txEvents;
+exports.valueFromTx = valueFromTx;
+const impactxclient_sdk_1 = require("@ixo/impactxclient-sdk");
+const env_ts_1 = require("./env.js");
+let clientPromise = null;
+function getQueryClient() {
+    if (!clientPromise)
+        clientPromise = (0, impactxclient_sdk_1.createQueryClient)((0, env_ts_1.rpcUrl)());
+    return clientPromise;
+}
+async function getUixoBalance(address) {
+    const client = await getQueryClient();
+    const { balance } = await client.cosmos.bank.v1beta1.balance({ address, denom: "uixo" });
+    return Number(balance?.amount ?? 0);
+}
+/**
+ * Whether an allowance has run out of time.
+ *
+ * Every grant this estate makes is an `AllowedMsgAllowance` wrapping a
+ * `BasicAllowance`, and this only ever looked at the bare kind — so a wrapped
+ * grant that expired hours ago read as live, `sponsorPoster` answered
+ * `already: true` to it, and the person was told they were sponsored by a
+ * grant the chain would refuse. Unwrap one level; anything stranger is left
+ * to the chain to judge, as before.
+ */
+function expired(allowance, now = Date.now()) {
+    if (!allowance?.typeUrl)
+        return false;
+    try {
+        let typeUrl = allowance.typeUrl;
+        let value = allowance.value;
+        if (typeUrl.endsWith("AllowedMsgAllowance")) {
+            const wrapped = impactxclient_sdk_1.cosmos.feegrant.v1beta1.AllowedMsgAllowance.decode(value).allowance;
+            if (!wrapped?.typeUrl)
+                return false;
+            typeUrl = wrapped.typeUrl;
+            value = wrapped.value;
+        }
+        if (!typeUrl.endsWith("BasicAllowance"))
+            return false;
+        const expiry = impactxclient_sdk_1.cosmos.feegrant.v1beta1.BasicAllowance.decode(value).expiration?.seconds;
+        return Boolean(expiry) && Number(expiry) * 1000 <= now;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Whether an allowance can pay for these messages.
+ *
+ * An `AllowedMsgAllowance` names the message types it will pay for, and the
+ * chain refuses any other with "message does not exist in allowed messages".
+ * A bare allowance pays for anything. With no messages named, any live
+ * allowance counts — the old question, "does anyone sponsor this key?".
+ */
+function canPay(allowance, forMessages) {
+    if (!allowance?.typeUrl || !forMessages?.length)
+        return true;
+    if (!allowance.typeUrl.endsWith("AllowedMsgAllowance"))
+        return true;
+    try {
+        const allowed = new Set(impactxclient_sdk_1.cosmos.feegrant.v1beta1.AllowedMsgAllowance.decode(allowance.value).allowedMessages);
+        return forMessages.every((typeUrl) => allowed.has(typeUrl));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The first live granter that can pay for these messages, out of what a
+ * key holds. Pure, so the choice is testable without a chain.
+ *
+ * A key can hold one allowance per granter, and this estate has several
+ * granters: the submission gate, the poster door, the union door. Choosing
+ * the first live one was right while every allowance paid for the same
+ * thing; the union door's pays for three identity messages and nothing
+ * else, and a phone that picked it to submit a claim was refused — while
+ * the faucet path it would otherwise have taken sat unused, because "some
+ * granter exists" read as "sponsored".
+ */
+function pickGranter(allowances, forMessages, now = Date.now()) {
+    for (const grant of allowances) {
+        if (expired(grant.allowance, now))
+            continue;
+        if (!canPay(grant.allowance, forMessages))
+            continue;
+        if (grant.granter)
+            return grant.granter;
+    }
+    return undefined;
+}
+/** First live feegrant granter for this address that can pay for `forMessages` (any, when omitted). */
+async function getFeegrantGranter(address, forMessages) {
+    try {
+        const client = await getQueryClient();
+        const { allowances } = await client.cosmos.feegrant.v1beta1.allowances({ grantee: address });
+        return pickGranter(allowances ?? [], forMessages);
+    }
+    catch {
+        // No granter is a normal state, not an error.
+    }
+    return undefined;
+}
+/** Testnet/devnet only: ask the faucet to fund an address, then wait for it to land. */
+async function ensureGas(address) {
+    if (!(0, env_ts_1.faucetUrl)())
+        return;
+    if ((await getUixoBalance(address)) > 100000)
+        return;
+    await fetch(`${(0, env_ts_1.faucetUrl)()}/send/${address}`, { signal: AbortSignal.timeout(15_000) }).catch(() => undefined);
+    for (let attempt = 0; attempt < 10; attempt += 1) {
+        await new Promise((resolve) => setTimeout(resolve, 1500));
+        if ((await getUixoBalance(address)) > 0)
+            return;
+    }
+    throw new Error("The faucet did not fund the account in time. Try again in a minute");
+}
+/**
+ * The events a transaction emitted, fetched by its hash.
+ *
+ * A passkey broadcast returns events inline, because we did the broadcasting.
+ * A phone broadcast does not — the phone sent it and hands back a result, so
+ * anything read out of events (an entity's DID lives in `wasm.token_id`) has
+ * to be fetched afterwards. Same facts, one round trip later.
+ */
+async function txEvents(transactionHash) {
+    const response = await fetch(`${(0, env_ts_1.rpcUrl)().replace(/\/$/, "")}/tx?hash=0x${transactionHash.replace(/^0x/, "").toUpperCase()}`, {
+        signal: AbortSignal.timeout(15_000)
+    });
+    /* A refusal is not "this transaction emitted nothing". Answering `[]` made a
+       node outage read as a transaction with no DID in it, which the caller
+       then reported as a chain fault rather than an unreachable node. */
+    if (!response.ok)
+        throw new Error(`The chain node answered ${response.status} for transaction ${transactionHash.slice(0, 12)}…`);
+    const json = (await response.json());
+    if (json.error)
+        throw new Error(`The chain node could not find transaction ${transactionHash.slice(0, 12)}…: ${json.error.data ?? json.error.message ?? "unknown error"}`);
+    return json.result?.tx_result?.events ?? [];
+}
+/**
+ * One attribute out of those events — the same read
+ * `utils.common.getValueFromEvents` does for an inline result.
+ */
+async function valueFromTx(transactionHash, type, key) {
+    for (const event of await txEvents(transactionHash)) {
+        if (event.type !== type)
+            continue;
+        for (const attribute of event.attributes) {
+            /* Tendermint has historically base64'd attribute keys; current nodes do
+               not. Accept both rather than depending on which one answered. */
+            const name = /^[A-Za-z0-9+/=]+$/.test(attribute.key) && attribute.key !== key ? Buffer.from(attribute.key, "base64").toString("utf8") : attribute.key;
+            if (name !== key)
+                continue;
+            const raw = attribute.value ?? "";
+            const decoded = /^[A-Za-z0-9+/=]+$/.test(raw) ? Buffer.from(raw, "base64").toString("utf8") : raw;
+            /* Entity DIDs arrive quoted in some node versions. */
+            return (decoded || raw).replace(/^"|"$/g, "");
+        }
+    }
+    return "";
+}
+//# sourceMappingURL=query.js.map

package/dist/cjs/chain/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../../../src/chain/query.ts"],"names":[],"mappings":";;AAQA,wCAGC;AAED,wCAIC;AAYD,0BAiBC;AAUD,wBASC;AAcD,kCAWC;AAGD,gDASC;AAGD,8BASC;AAUD,4BAYC;AAMD,kCAeC;AA7JD,8DAAmE;AAEnE,qCAA6C;AAI7C,IAAI,aAAa,GAAgC,IAAI,CAAC;AAEtD,SAAgB,cAAc;IAC5B,IAAI,CAAC,aAAa;QAAE,aAAa,GAAG,IAAA,qCAAiB,EAAC,IAAA,eAAM,GAAE,CAAC,CAAC;IAChE,OAAO,aAAa,CAAC;AACvB,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,OAAe;IAClD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IACtC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,OAAO,CAAC,SAA8D,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACtG,IAAI,CAAC,SAAS,EAAE,OAAO;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,IAAI,OAAO,GAAW,SAAS,CAAC,OAAO,CAAC;QACxC,IAAI,KAAK,GAAe,SAAS,CAAC,KAAK,CAAC;QACxC,IAAI,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,0BAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC;YACpF,IAAI,CAAC,OAAO,EAAE,OAAO;gBAAE,OAAO,KAAK,CAAC;YACpC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAC1B,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,MAAM,GAAG,0BAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC;QACxF,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,MAAM,CAAC,SAA8D,EAAE,WAAsB;IAC3G,IAAI,CAAC,SAAS,EAAE,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,0BAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC;QAC7G,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,WAAW,CACzB,UAAuF,EACvF,WAAsB,EACtB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;YAAE,SAAS;QAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;YAAE,SAAS;QACpD,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,uGAAuG;AAChG,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,WAAsB;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;QACtC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7F,OAAO,WAAW,CAAC,UAAU,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,wFAAwF;AACjF,KAAK,UAAU,SAAS,CAAC,OAAe;IAC7C,IAAI,CAAC,IAAA,kBAAS,GAAE;QAAE,OAAO;IACzB,IAAI,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,MAAM;QAAE,OAAO;IACrD,MAAM,KAAK,CAAC,GAAG,IAAA,kBAAS,GAAE,SAAS,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9G,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO;IAClD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,QAAQ,CAAC,eAAuB;IACpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAA,eAAM,GAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;QAC3H,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH;;yEAEqE;IACrE,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,MAAM,oBAAoB,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IAEjI,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4J,CAAC;IAChM,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;IAC3K,OAAO,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,WAAW,CAAC,eAAuB,EAAE,IAAY,EAAE,GAAW;IAClF,KAAK,MAAM,KAAK,IAAI,MAAM,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QAClC,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACzC;+EACmE;YACnE,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC;YACtJ,IAAI,IAAI,KAAK,GAAG;gBAAE,SAAS;YAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAClG,sDAAsD;YACtD,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/cjs/chain/send.d.ts

@@ -0,0 +1,42 @@
+import type { EncodeObject } from "@cosmjs/proto-signing";
+import type { PhonePrompt } from "./signWith.ts";
+import type { QiSession } from "./session.ts";
+/**
+ * Moving your own money somewhere else.
+ *
+ * The app could show you a balance and had no way to move it. Every other path
+ * that touches money here is a **ceremony** with a fixed destination — a guest
+ * key sweeping to its owner, a deed bridging to the key that spends it, an ask
+ * escrowing to its own account — and each is right for what it does. None of
+ * them is "send this to that address", which is the thing a person with money
+ * eventually needs.
+ *
+ * **The destination is only ever typed by a person.** No caller passes it in
+ * from a URL, a page, or a tool argument. That is the same rule the MCP's
+ * `sweep_earnings` follows from the other side: a destination that anything but
+ * a human can name is a destination an attacker can name.
+ *
+ * A gas reserve is kept back when sending the gas coin itself, because a key
+ * that sends its last `uixo` cannot sign again — including the transaction
+ * that would rescue it.
+ */
+/** Enough gas left behind to sign a few more times. */
+export declare const GAS_RESERVE_UIXO = 30000;
+export interface Sending {
+    to: string;
+    denom: string;
+    /** Base units. */
+    amount: string;
+}
+export declare const sendMsg: (from: string, sending: Sending) => EncodeObject;
+/**
+ * The most anyone can send of one denom without stranding the key.
+ *
+ * Only the gas coin is held back. A PAY balance can go to the last unit,
+ * because paying the fee for that transaction is the gas coin's job.
+ */
+export declare const sendableBase: (denom: string, heldBase: number) => number;
+export declare function sendMoney(session: QiSession, sending: Sending, prompt?: PhonePrompt): Promise<{
+    transactionHash: string;
+}>;
+//# sourceMappingURL=send.d.ts.map

package/dist/cjs/chain/send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../../../src/chain/send.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAG9C;;;;;;;;;;;;;;;;;;GAkBG;AAEH,uDAAuD;AACvD,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,OAAO,GAAI,MAAM,MAAM,EAAE,SAAS,OAAO,KAAG,YAOvD,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,EAAE,UAAU,MAAM,KAAG,MACsB,CAAC;AAEtF,wBAAsB,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;IAAE,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CAMhI"}

package/dist/cjs/chain/send.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sendableBase = exports.sendMsg = exports.GAS_RESERVE_UIXO = void 0;
+exports.sendMoney = sendMoney;
+const impactxclient_sdk_1 = require("@ixo/impactxclient-sdk");
+const signWith_ts_1 = require("./signWith.js");
+/**
+ * Moving your own money somewhere else.
+ *
+ * The app could show you a balance and had no way to move it. Every other path
+ * that touches money here is a **ceremony** with a fixed destination — a guest
+ * key sweeping to its owner, a deed bridging to the key that spends it, an ask
+ * escrowing to its own account — and each is right for what it does. None of
+ * them is "send this to that address", which is the thing a person with money
+ * eventually needs.
+ *
+ * **The destination is only ever typed by a person.** No caller passes it in
+ * from a URL, a page, or a tool argument. That is the same rule the MCP's
+ * `sweep_earnings` follows from the other side: a destination that anything but
+ * a human can name is a destination an attacker can name.
+ *
+ * A gas reserve is kept back when sending the gas coin itself, because a key
+ * that sends its last `uixo` cannot sign again — including the transaction
+ * that would rescue it.
+ */
+/** Enough gas left behind to sign a few more times. */
+exports.GAS_RESERVE_UIXO = 30_000;
+const sendMsg = (from, sending) => ({
+    typeUrl: "/cosmos.bank.v1beta1.MsgSend",
+    value: impactxclient_sdk_1.cosmos.bank.v1beta1.MsgSend.fromPartial({
+        fromAddress: from,
+        toAddress: sending.to,
+        amount: [{ denom: sending.denom, amount: sending.amount }]
+    })
+});
+exports.sendMsg = sendMsg;
+/**
+ * The most anyone can send of one denom without stranding the key.
+ *
+ * Only the gas coin is held back. A PAY balance can go to the last unit,
+ * because paying the fee for that transaction is the gas coin's job.
+ */
+const sendableBase = (denom, heldBase) => denom === "uixo" ? Math.max(0, heldBase - exports.GAS_RESERVE_UIXO) : Math.max(0, heldBase);
+exports.sendableBase = sendableBase;
+async function sendMoney(session, sending, prompt) {
+    if (!/^ixo1[0-9a-z]{38}$/.test(sending.to))
+        throw new Error("That is not an ixo address");
+    if (sending.to === session.address)
+        throw new Error("That is this account. Pick somewhere else");
+    if (!/^\d+$/.test(sending.amount) || Number(sending.amount) <= 0)
+        throw new Error("Give an amount to send");
+    return (0, signWith_ts_1.signWithSession)(session, [(0, exports.sendMsg)(session.address, sending)], "Send", prompt);
+}
+//# sourceMappingURL=send.js.map

package/dist/cjs/chain/send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.js","sourceRoot":"","sources":["../../../src/chain/send.ts"],"names":[],"mappings":";;;AAuDA,8BAMC;AA5DD,8DAAgD;AAIhD,+CAAgD;AAEhD;;;;;;;;;;;;;;;;;;GAkBG;AAEH,uDAAuD;AAC1C,QAAA,gBAAgB,GAAG,MAAM,CAAC;AAShC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,OAAgB,EAAgB,EAAE,CAAC,CAAC;IACxE,OAAO,EAAE,8BAA8B;IACvC,KAAK,EAAE,0BAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QAC7C,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KAC3D,CAAC;CACH,CAAC,CAAC;AAPU,QAAA,OAAO,WAOjB;AAEH;;;;;GAKG;AACI,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,wBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AADzE,QAAA,YAAY,gBAC6D;AAE/E,KAAK,UAAU,SAAS,CAAC,OAAkB,EAAE,OAAgB,EAAE,MAAoB;IACxF,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC1F,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAE5G,OAAO,IAAA,6BAAe,EAAC,OAAO,EAAE,CAAC,IAAA,eAAO,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACvF,CAAC"}

package/dist/cjs/chain/session.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Who is signed in, and what they can sign with.
+ *
+ * Three rungs of one ladder, not three kinds of user. A passkey session is a
+ * pointer to a credential and nothing more — possession IS the credential. A
+ * connected session (SignX or the auth hub) additionally carries an ixo
+ * identity: a DID, the name they call themselves, and usually a Matrix
+ * identity of their own.
+ *
+ * **The Matrix half is always optional.** INFRA §1.1: phones older than some
+ * unknown release send no matrix payload at all, so nothing may require it —
+ * the chain half of a session has to work without a vault, and chat falls back
+ * to the relay that already serves everyone.
+ */
+export type SessionKind = "passkey" | "signx" | "authhub";
+export interface QiSession {
+    address: string;
+    /** Absent means passkey — the only kind that existed before the ladder. */
+    kind?: SessionKind;
+    /** Required for `kind: "passkey"`, absent otherwise. */
+    credentialId?: string;
+    authenticatorId?: string;
+    /** A connected identity: what ixo knows them as. */
+    did?: string;
+    name?: string;
+    /**
+     * Their own Matrix identity, when the door handed one over.
+     *
+     * **The token is optional, because SignX does not give us one.** It returns
+     * the user id and an *encrypted* vault only — the phone keeps the key. The
+     * auth hub is the door that yields something we can post with. This used to
+     * be typed as always present, so a SignX session looked like it could speak
+     * as itself and silently could not; now the type says what is true and
+     * `speaksForItself` is the one place that decides.
+     */
+    matrix?: {
+        userId: string;
+        accessToken?: string;
+        baseUrl?: string;
+        hasVault?: boolean;
+        /**
+         * The account's BIP39 mnemonic, AES-256-CBC encrypted under a six-digit
+         * PIN only its owner knows (`iv:ciphertext`). SignX returns this instead
+         * of an access token — the phone keeps the key.
+         *
+         * Held because it is the only way a SignX account can prove to ixo which
+         * account is buying. It is ciphertext: worth nothing without the PIN, and
+         * the PIN is never stored, never sent anywhere but the one request that
+         * uses it, and never kept after that request returns.
+         */
+        encryptedMnemonic?: string;
+    };
+    /**
+     * A signing key issued by the auth hub, registered on chain as a
+     * smart-account authenticator.
+     *
+     * Not the root recovery mnemonic — that one the hub keeps encrypted and
+     * never sends here. This is a *session* key: it can sign, and it can be
+     * revoked without costing anyone their account. It lives in localStorage
+     * beside the rest of the session, which is the portal's own convention and
+     * the accepted exposure that comes with it.
+     */
+    sessionKey?: {
+        mnemonic: string;
+        authenticatorId: string;
+    };
+    /**
+     * The ed25519 key the hub registered on this account's DID document — what
+     * signs the single-use tokens that write to the person's own filesystem.
+     * Absent on a SignX or passkey session, which store through IPFS instead.
+     */
+    signingKey?: {
+        mnemonic: string;
+    };
+    /**
+     * This deployment's own note that the SignX login happened, and for whom.
+     *
+     * Only SignX sessions carry one, because only SignX arrives with nothing to
+     * sign with — the phone keeps the key and sends no Matrix token. Every other
+     * rung can prove itself: a guest key and a passkey sign, and an auth-hub
+     * account posts as itself. Without this a person who signed in with the ixo
+     * app was told to sign in before they could speak.
+     *
+     * It buys exactly one thing — saying something on a thread as that address —
+     * and is refused everywhere else.
+     */
+    postToken?: string;
+}
+/** Passkey is the default so a session stored before the ladder still reads. */
+export declare const kindOf: (session: QiSession) => SessionKind;
+/** Whether this session can post to a room as itself rather than through the bot. */
+export declare const speaksForItself: (session: QiSession | null) => boolean;
+export declare function loadSession(): QiSession | null;
+/** A session with every key, token and ciphertext taken out: what may outlive it. */
+export declare function withoutSecrets(session: QiSession): QiSession;
+export declare function previousSessions(): QiSession[];
+/** Drop one — "that wasn't me", or the ceremony finished with it. */
+export declare function forgetPrevious(address: string): void;
+export declare function saveSession(session: QiSession): void;
+/**
+ * Sign out: the session, and the accounts it remembered replacing.
+ *
+ * A browser somebody signed out of is often one somebody else uses next, and
+ * "was that you too?" asked of a stranger names the accounts the last person
+ * held. Signing out forgets them all (D22).
+ */
+export declare function clearSession(): void;
+export declare function subscribeSession(callback: () => void): () => void;
+//# sourceMappingURL=session.d.ts.map

package/dist/cjs/chain/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/chain/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAE1D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB;;;;;;;;;WASG;QACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D;;;;OAIG;IACH,UAAU,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,gFAAgF;AAChF,eAAO,MAAM,MAAM,GAAI,SAAS,SAAS,KAAG,WAAwC,CAAC;AAErF,qFAAqF;AACrF,eAAO,MAAM,eAAe,GAAI,SAAS,SAAS,GAAG,IAAI,KAAG,OAAgD,CAAC;AAK7G,wBAAgB,WAAW,IAAI,SAAS,GAAG,IAAI,CAc9C;AA2BD,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,CAK5D;AAKD,wBAAgB,gBAAgB,IAAI,SAAS,EAAE,CAiB9C;AAED,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAIpD;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,GAAG,IAAI,CAapD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,IAAI,IAAI,CAInC;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAOjE"}