@mcsherrylabs/evolver-mcp 0.13.0 → 0.15.0

package/dist/result.d.ts

@@ -1,110 +0,0 @@
-export declare const TOOL_RESULT_KINDS: readonly ["ok", "unreachable", "not_found", "partial", "wrong_kind", "misconfigured"];
-export type ToolResultKind = (typeof TOOL_RESULT_KINDS)[number];
-export type ToolResult<T> = {
-    readonly kind: "ok";
-    readonly value: T;
-}
-/** The chain could not be contacted. NEVER an answer about the world. */
- | {
-    readonly kind: "unreachable";
-    readonly chain: string;
-    readonly cause: string;
-}
-/** The chain answered and has no such thing — definitive, at the height it answered from. */
- | {
-    readonly kind: "not_found";
-    readonly what: string;
-    readonly atHeight?: number;
-}
-/** A scan was interrupted before it finished. Not a bound — a bound would be a lie. */
- | {
-    readonly kind: "partial";
-    readonly what: string;
-    readonly cause: string;
-}
-/**
- * The name EXISTS, as the other kind of principal.
- *
- * ⚠️ WHY THIS IS NOT `not_found`. A name on an evolver chain is either an identity or a group —
- * one registry, one name, one kind, uniqueness enforced across both. So an identity lookup of a
- * GROUP name used to answer `not_found`, which a model correctly reads as "there is no such
- * thing" — and reported that about something the chain holds. Observed live: a tool said
- * `not_found` for a name that was a group all along.
- *
- * The failure is in the KIND, not in the payload: a model branches on `kind`, so enriching
- * `not_found` with an extra field would have left the wrong conclusion one field-read away.
- * `use` names the tool that WILL answer, because a model's next move should not need a guess.
- */
- | {
-    readonly kind: "wrong_kind";
-    readonly what: string;
-    readonly found: "identity" | "group";
-    readonly use: string;
-    readonly atHeight?: number;
-}
-/**
- * This agent is not set up to answer that, and no amount of retrying will change it.
- *
- * ⚠️ WHY NOT `unreachable`. Both mean "no answer", and that is exactly the collapse this
- * taxonomy exists to prevent. `unreachable` says the chain was TRIED and did not respond — a
- * model should wait and retry, and an operator should look at the network. `misconfigured`
- * says nothing was tried because this agent does not know where to try. Retrying is futile and
- * waiting is worse than futile; a HUMAN has to set something.
- *
- * `fix` is the sentence that says what. A refusal that does not say how to stop being refused
- * makes the model guess.
- */
- | {
-    readonly kind: "misconfigured";
-    readonly what: string;
-    readonly fix: string;
-};
-export declare const ok: <T>(value: T) => ToolResult<T>;
-export declare const misconfigured: (what: string, fix: string) => ToolResult<never>;
-export declare const notFound: (what: string, atHeight?: number) => ToolResult<never>;
-export declare const wrongKind: (what: string, found: "identity" | "group", use: string, atHeight?: number) => ToolResult<never>;
-export declare const partial: (what: string, cause: string) => ToolResult<never>;
-/** Turn anything thrown into `unreachable`, naming the chain that was tried.
- *
- *  This exists because the harness signals an error by the tool throwing, and the client throws
- *  on any non-OK response while the transport rejects on failure. An escaped throw hands the
- *  model a bare error string and collapses this taxonomy at exactly the point it protects. */
-export declare const unreachableFrom: (e: unknown, chain: string) => ToolResult<never>;
-import type { SubmitResult } from "@mcsherrylabs/evolver-client";
-export type SubmissionOutcome = 
-/** ORDERED. ⚠️ Not the same as PAID: an instruction can be abandoned at apply with the charge
- *  burned and no fine. "Did my payment land" is answered by the balance, not by ordering. */
-{
-    readonly kind: "committed";
-    readonly txId: string;
-}
-/** Ordered, charged a fee AND a fine, and the payment did not happen. */
- | {
-    readonly kind: "fined";
-    readonly reason: string;
-    readonly message: string;
-    readonly txId: string;
-}
-/** The node decided. Final: nothing was ordered and nothing was charged. */
- | {
-    readonly kind: "refused";
-    readonly reason: string;
-    readonly message: string;
-    readonly txId?: string;
-}
-/** No readable answer. It MAY have committed. Resolve by looking it up — never by re-signing. */
- | {
-    readonly kind: "unknown";
-    readonly why: string;
-    readonly txId?: string;
-};
-/**
- * Map what the client reports onto what we tell the model.
- *
- * ⚠️ The trap this exists to avoid: reporting an unread reply as `refused`, which tells the model
- * nothing happened, whose repair is to SIGN AGAIN. The expiry round is folded into the id, so a
- * re-signed payment is a different transaction replay protection cannot recognise — both may
- * commit. An unknown/`timeout`/unrecognised reason is therefore OPEN, never `refused`.
- */
-export declare function classifySubmit(r: SubmitResult): SubmissionOutcome;
-//# sourceMappingURL=result.d.ts.map

package/dist/result.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../src/result.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,iBAAiB,uFAOpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,MAAM,MAAM,UAAU,CAAC,CAAC,IACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE;AAC5C,yEAAyE;GACvE;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAClF,6FAA6F;GAC3F;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE;AACnF,uFAAuF;GACrF;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAC7E;;;;;;;;;;;;GAYG;GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AACH;;;;;;;;;;;GAWG;GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpF,eAAO,MAAM,EAAE,GAAI,CAAC,EAAE,OAAO,CAAC,KAAG,UAAU,CAAC,CAAC,CAA4B,CAAC;AAE1E,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,KAAG,UAAU,CAAC,KAAK,CAClC,CAAC;AAEzC,eAAO,MAAM,QAAQ,GAAI,MAAM,MAAM,EAAE,WAAW,MAAM,KAAG,UAAU,CAAC,KAAK,CAClC,CAAC;AAE1C,eAAO,MAAM,SAAS,GACpB,MAAM,MAAM,EACZ,OAAO,UAAU,GAAG,OAAO,EAC3B,KAAK,MAAM,EACX,WAAW,MAAM,KAChB,UAAU,CAAC,KAAK,CAAyD,CAAC;AAE7E,eAAO,MAAM,OAAO,GAAI,MAAM,MAAM,EAAE,OAAO,MAAM,KAAG,UAAU,CAAC,KAAK,CAClC,CAAC;AAErC;;;;8FAI8F;AAC9F,eAAO,MAAM,eAAe,GAAI,GAAG,OAAO,EAAE,OAAO,MAAM,KAAG,UAAU,CAAC,KAAK,CAI1E,CAAC;AAUH,OAAO,KAAK,EAAE,YAAY,EAAiB,MAAM,8BAA8B,CAAC;AAGhF,MAAM,MAAM,iBAAiB;AAC3B;6FAC6F;AAC3F;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACvD,yEAAyE;GACvE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACtG,4EAA4E;GAC1E;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AACzG,iGAAiG;GAC/F;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAuC/E;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY,GAAG,iBAAiB,CAgBjE"}

package/dist/result.js

@@ -1,97 +0,0 @@
-// The failure taxonomy every Phase-1 read tool answers in.
-//
-// Two shapes live here in the reference implementation — `ToolResult<T>` (what a READ answers)
-// and `SubmissionOutcome` (what a WRITE answers). Phase 1 is read-only, so only the read half is
-// ported: the six kinds the Phase-1 tools actually emit. `not_found_within` is scan-only (it
-// serves the deferred `evolver_transaction`) and `classifySubmit` is the write path (Phase 2), so
-// neither is ported — and the union, the `ToolResultKind` discriminator set, and `toMcpResult`
-//'s branch all agree on exactly these six, leaving no dangling union/branch.
-//
-// The distinctions are the point. A reader is a model, and it cannot tell "the chain says no such
-// thing" from "I could not reach the chain" unless the answer says which — so the kinds are never
-// allowed to collapse into one another.
-export const TOOL_RESULT_KINDS = [
-    "ok",
-    "unreachable",
-    "not_found",
-    "partial",
-    "wrong_kind",
-    "misconfigured",
-];
-export const ok = (value) => ({ kind: "ok", value });
-export const misconfigured = (what, fix) => ({ kind: "misconfigured", what, fix });
-export const notFound = (what, atHeight) => ({ kind: "not_found", what, atHeight });
-export const wrongKind = (what, found, use, atHeight) => ({ kind: "wrong_kind", what, found, use, atHeight });
-export const partial = (what, cause) => ({ kind: "partial", what, cause });
-/** Turn anything thrown into `unreachable`, naming the chain that was tried.
- *
- *  This exists because the harness signals an error by the tool throwing, and the client throws
- *  on any non-OK response while the transport rejects on failure. An escaped throw hands the
- *  model a bare error string and collapses this taxonomy at exactly the point it protects. */
-export const unreachableFrom = (e, chain) => ({
-    kind: "unreachable",
-    chain,
-    cause: e instanceof Error ? e.message : String(e),
-});
-import { FAILURE_REASONS } from "@mcsherrylabs/evolver-client";
-/**
- * Which failure reasons are a genuine, final answer from the node, and which leave the outcome
- * open.
- *
- * ⚠️ Typed `Record<FailureReason, …>` ON PURPOSE. Adding a reason to the client makes this file
- * FAIL TO COMPILE until somebody classifies it — a new reason cannot quietly inherit a default
- * that happens to be wrong. The dangerous direction is `refused`: it asserts nothing happened.
- */
-const REASON_CLASS = {
-    // ── client-side or otherwise open: the transaction MAY have been ordered ──
-    internal: "unknown",
-    confirmation_timeout: "unknown",
-    duplicate: "unknown",
-    // ── genuine, final node answers: nothing was ordered and nothing was charged ──
-    malformed_signed_tx: "refused",
-    unknown_ledger_id: "refused",
-    node_not_ready: "refused",
-    queue_full: "refused",
-    invalid_signature: "refused",
-    insufficient_balance: "refused",
-    invalid_identity_body: "refused",
-    invalid_group_body: "refused",
-    invalid_owners_body: "refused",
-    invalid_list_body: "refused",
-    rejected: "refused",
-    ttl_expired: "refused",
-    ttl_too_far: "refused",
-    unknown_key: "refused",
-    unauthorized: "refused",
-    toll_ceiling_too_low: "refused",
-    insufficient_da: "refused",
-    too_many_auths: "refused",
-    da_unavailable: "refused",
-    channel_store_full: "refused",
-};
-/**
- * Map what the client reports onto what we tell the model.
- *
- * ⚠️ The trap this exists to avoid: reporting an unread reply as `refused`, which tells the model
- * nothing happened, whose repair is to SIGN AGAIN. The expiry round is folded into the id, so a
- * re-signed payment is a different transaction replay protection cannot recognise — both may
- * commit. An unknown/`timeout`/unrecognised reason is therefore OPEN, never `refused`.
- */
-export function classifySubmit(r) {
-    switch (r.kind) {
-        case "committed":
-            return { kind: "committed", txId: r.txIdHex };
-        case "fined":
-            return { kind: "fined", reason: r.reason, message: r.message, txId: r.txIdHex };
-        case "timeout":
-            return { kind: "unknown", why: "no reply before the deadline — it may have committed", txId: r.txIdHex };
-        case "failed": {
-            const known = FAILURE_REASONS.includes(r.reason);
-            const cls = known ? REASON_CLASS[r.reason] : "unknown";
-            return cls === "refused"
-                ? { kind: "refused", reason: r.reason, message: r.message, txId: r.txIdHex }
-                : { kind: "unknown", why: `${r.reason}: ${r.message}`, txId: r.txIdHex };
-        }
-    }
-}
-//# sourceMappingURL=result.js.map

package/dist/result.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"result.js","sourceRoot":"","sources":["../src/result.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,+FAA+F;AAC/F,iGAAiG;AACjG,6FAA6F;AAC7F,kGAAkG;AAClG,+FAA+F;AAC/F,6EAA6E;AAC7E,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,wCAAwC;AAExC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI;IACJ,aAAa;IACb,WAAW;IACX,SAAS;IACT,YAAY;IACZ,eAAe;CACP,CAAC;AA8CX,MAAM,CAAC,MAAM,EAAE,GAAG,CAAI,KAAQ,EAAiB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,GAAW,EAAqB,EAAE,CAC5E,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;AAEzC,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,QAAiB,EAAqB,EAAE,CAC7E,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,IAAY,EACZ,KAA2B,EAC3B,GAAW,EACX,QAAiB,EACE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;AAE7E,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,KAAa,EAAqB,EAAE,CACxE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAErC;;;;8FAI8F;AAC9F,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAU,EAAE,KAAa,EAAqB,EAAE,CAAC,CAAC;IAChF,IAAI,EAAE,aAAa;IACnB,KAAK;IACL,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;CAClD,CAAC,CAAC;AAWH,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAa/D;;;;;;;GAOG;AACH,MAAM,YAAY,GAAiD;IACjE,6EAA6E;IAC7E,QAAQ,EAAE,SAAS;IACnB,oBAAoB,EAAE,SAAS;IAC/B,SAAS,EAAE,SAAS;IAEpB,iFAAiF;IACjF,mBAAmB,EAAE,SAAS;IAC9B,iBAAiB,EAAE,SAAS;IAC5B,cAAc,EAAE,SAAS;IACzB,UAAU,EAAE,SAAS;IACrB,iBAAiB,EAAE,SAAS;IAC5B,oBAAoB,EAAE,SAAS;IAC/B,qBAAqB,EAAE,SAAS;IAChC,kBAAkB,EAAE,SAAS;IAC7B,mBAAmB,EAAE,SAAS;IAC9B,iBAAiB,EAAE,SAAS;IAC5B,QAAQ,EAAE,SAAS;IACnB,WAAW,EAAE,SAAS;IACtB,WAAW,EAAE,SAAS;IACtB,WAAW,EAAE,SAAS;IACtB,YAAY,EAAE,SAAS;IACvB,oBAAoB,EAAE,SAAS;IAC/B,eAAe,EAAE,SAAS;IAC1B,cAAc,EAAE,SAAS;IACzB,cAAc,EAAE,SAAS;IACzB,kBAAkB,EAAE,SAAS;CAC9B,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,CAAe;IAC5C,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAChD,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAClF,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,sDAAsD,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3G,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,KAAK,GAAI,eAAqC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACxE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvD,OAAO,GAAG,KAAK,SAAS;gBACtB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;gBAC5E,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/signer.d.ts

@@ -1,37 +0,0 @@
-import type { Signer } from "@mcsherrylabs/evolver-client";
-/** The env var naming a path to a base64-encoded key file. Signing is impossible without it. */
-export declare const EVOLVER_KEY_PATH = "EVOLVER_KEY_PATH";
-/** The env var naming the key type: `"bls"` (default) or `"ed25519"`. */
-export declare const EVOLVER_KEY_TYPE = "EVOLVER_KEY_TYPE";
-/** The key types this module understands, so a misspelt type is refused here rather than by the
- *  SDK with an error that echoes nothing useful. */
-export declare const SIGNER_TYPE: readonly ["bls", "ed25519"];
-export type KeySource = (typeof SIGNER_TYPE)[number];
-export type SignerResult = {
-    readonly ok: true;
-    readonly signer: Signer;
-} | {
-    readonly ok: false;
-    readonly error: string;
-};
-/**
- * Resolve the host-held signing key from the environment. Pure of the config file on purpose:
- * the config is a committable file and key material has no place in it (D-07).
- *
- * ⚠️ The error text names the PATH, never the key bytes. A key is the one thing in this process
- * whose value must not appear in a log line or a tool result, so a failure reports where the key
- * was looked for and what was missing about it — nothing more. The bytes themselves are only ever
- * read into memory, base64-decoded, and folded into the `Signer` that closes over them.
- */
-export declare function loadSigner(source: KeySource, raw: Uint8Array | null): SignerResult;
-/**
- * Read the key from the environment and construct the `Signer`. The only function that touches
- * a filesystem here — `loadSigner` itself stays pure so the resolution rule can be exercised
- * without a key file.
- *
- * Reads `process.env.EVOLVER_KEY_PATH` and `process.env.EVOLVER_KEY_TYPE`; neither is ever read
- * from config. Returns `{ ok: false, error }` (naming the PATH, never the key) when the env var
- * is unset, the file is missing, or the decoded bytes are empty.
- */
-export declare function loadSignerFromEnv(env: NodeJS.ProcessEnv): SignerResult;
-//# sourceMappingURL=signer.d.ts.map

package/dist/signer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAE3D,gGAAgG;AAChG,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,yEAAyE;AACzE,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;oDACoD;AACpD,eAAO,MAAM,WAAW,6BAA8B,CAAC;AACvD,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,GAAG,YAAY,CAgBlF;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,YAAY,CA0BtE"}

package/dist/signer.js

@@ -1,76 +0,0 @@
-// Key resolution at sign-time (D-07 / SAFE-03): the host-held signing key enters the process
-// from the ENVIRONMENT ONLY, never from the committable config file. The key is a bearer of the
-// authority that spends, so it must never reach a result, a transcript, or the config file —
-// which is why `src/config.ts` rejects `keyLocation`/`keyPath`/`contentUrl` and why this module
-// reads nothing off an `EvolverConfig`.
-//
-// The `Signer` returned closes over the private half, so no caller can read the key back out:
-// the only thing a caller can do with it is sign.
-import { readFileSync } from "node:fs";
-import { blsDefaultSigner, edDefaultSigner } from "@mcsherrylabs/evolver-client";
-/** The env var naming a path to a base64-encoded key file. Signing is impossible without it. */
-export const EVOLVER_KEY_PATH = "EVOLVER_KEY_PATH";
-/** The env var naming the key type: `"bls"` (default) or `"ed25519"`. */
-export const EVOLVER_KEY_TYPE = "EVOLVER_KEY_TYPE";
-/** The key types this module understands, so a misspelt type is refused here rather than by the
- *  SDK with an error that echoes nothing useful. */
-export const SIGNER_TYPE = ["bls", "ed25519"];
-/**
- * Resolve the host-held signing key from the environment. Pure of the config file on purpose:
- * the config is a committable file and key material has no place in it (D-07).
- *
- * ⚠️ The error text names the PATH, never the key bytes. A key is the one thing in this process
- * whose value must not appear in a log line or a tool result, so a failure reports where the key
- * was looked for and what was missing about it — nothing more. The bytes themselves are only ever
- * read into memory, base64-decoded, and folded into the `Signer` that closes over them.
- */
-export function loadSigner(source, raw) {
-    if (raw === null || raw.length === 0)
-        return { ok: false, error: "no key bytes were read (empty after decoding)" };
-    switch (source) {
-        case "bls":
-            return { ok: true, signer: blsDefaultSigner(raw, "") };
-        case "ed25519":
-            return { ok: true, signer: edDefaultSigner(raw, "") };
-        default: {
-            // Exhaustiveness: `source` is typed `KeySource`, so this branch is unreachable — but the
-            // default keeps an untyped caller from silently falling through to a wrong signer.
-            const _exhaustive = source;
-            return { ok: false, error: `unknown key type ${String(_exhaustive)}` };
-        }
-    }
-}
-/**
- * Read the key from the environment and construct the `Signer`. The only function that touches
- * a filesystem here — `loadSigner` itself stays pure so the resolution rule can be exercised
- * without a key file.
- *
- * Reads `process.env.EVOLVER_KEY_PATH` and `process.env.EVOLVER_KEY_TYPE`; neither is ever read
- * from config. Returns `{ ok: false, error }` (naming the PATH, never the key) when the env var
- * is unset, the file is missing, or the decoded bytes are empty.
- */
-export function loadSignerFromEnv(env) {
-    const path = env[EVOLVER_KEY_PATH];
-    if (path === undefined || path.length === 0)
-        return { ok: false, error: `no signing key configured: set ${EVOLVER_KEY_PATH} to a base64-encoded key file` };
-    const sourceRaw = env[EVOLVER_KEY_TYPE] ?? "bls";
-    if (!SIGNER_TYPE.includes(sourceRaw))
-        return {
-            ok: false,
-            error: `${EVOLVER_KEY_TYPE} is "${sourceRaw}" but must be one of: ${SIGNER_TYPE.join(", ")}`,
-        };
-    let decoded;
-    try {
-        const content = readFileSync(path, "utf8").trim();
-        decoded = Uint8Array.from(Buffer.from(content, "base64"));
-    }
-    catch {
-        return { ok: false, error: `could not read the signing key at ${path}` };
-    }
-    // Reject empty decode before the switch: a base64 decoder silently yields zero bytes for empty
-    // input, and a zero-byte key would construct a signer that signs nothing meaningful.
-    if (decoded.length === 0)
-        return { ok: false, error: `the signing key at ${path} decoded to zero bytes` };
-    return loadSigner(sourceRaw, decoded);
-}
-//# sourceMappingURL=signer.js.map

package/dist/signer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signer.js","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,gGAAgG;AAChG,6FAA6F;AAC7F,gGAAgG;AAChG,wCAAwC;AACxC,EAAE;AACF,8FAA8F;AAC9F,kDAAkD;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAGjF,gGAAgG;AAChG,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AACnD,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD;oDACoD;AACpD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,SAAS,CAAU,CAAC;AAOvD;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,MAAiB,EAAE,GAAsB;IAClE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;IAE/E,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK;YACR,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;QACzD,KAAK,SAAS;YACZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,CAAC,CAAC;YACR,yFAAyF;YACzF,mFAAmF;YACnF,MAAM,WAAW,GAAU,MAAM,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAsB;IACtD,MAAM,IAAI,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,gBAAgB,+BAA+B,EAAE,CAAC;IAEjH,MAAM,SAAS,GAAG,GAAG,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC;IACjD,IAAI,CAAE,WAAiC,CAAC,QAAQ,CAAC,SAAS,CAAC;QACzD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,gBAAgB,QAAQ,SAAS,yBAAyB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC7F,CAAC;IAEJ,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,IAAI,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,+FAA+F;IAC/F,qFAAqF;IACrF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,IAAI,wBAAwB,EAAE,CAAC;IAElF,OAAO,UAAU,CAAC,SAAsB,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC"}

package/dist/write.d.ts

@@ -1,214 +0,0 @@
-import { hexToBytes } from "@mcsherrylabs/evolver-client";
-import type { Signer, SubmitResult } from "@mcsherrylabs/evolver-client";
-export { hexToBytes };
-import type { ChainReads } from "./read.js";
-import type { SubmissionOutcome, ToolResult } from "./result.js";
-/** Rounds of life given to a signed transaction.
- *
- *  ⚠️ SHORT ON PURPOSE. A signed transaction is a bearer artefact: valid until it expires,
- *  submission unauthenticated, no cancel. Nothing here waits on a human between signing and
- *  submitting, so a long window buys nothing and leaves a live artefact in a transcript. */
-export declare const DEFAULT_TTL_OFFSET = 50;
-/** What `signTransfer`/`submitSigned` need from the world, injected so every rule is exercised
- *  against a fake rather than a live node. */
-export interface WriteDeps {
-    readonly identity: string;
-    readonly signer: Signer;
-    readonly ttlOffset?: number;
-    readonly reads: ChainReads;
-    submitTx(bytes: Uint8Array): Promise<SubmitResult>;
-    /** Gateway collection/assembly/submission; never falls back to ordinary submit. */
-    submitTxWithDa?(bytes: Uint8Array): Promise<SubmitResult>;
-}
-/** A signed credit transfer, as recorded for inspection. INTENT, not bytes — the base64 bytes
- *  live in a separate map so a live, submittable artefact never sits on what a model reads. */
-export interface SignedTransfer {
-    readonly txId: string;
-    readonly expiresAtRound: number;
-    readonly signedAtRound: number;
-    readonly summary: {
-        readonly sender: string;
-        readonly recipient: string;
-        readonly amount: string;
-    };
-}
-/** A signed opaque channel write (SUBM-07), as recorded. Carries the `verb: "opaque"` tag so a
- *  reader can tell it from a transfer, and `fields` (the caller-supplied channel + body size) in
- *  place of the transfer's named fields. Intent, never bytes. */
-export interface SignedOpaque {
-    readonly txId: string;
-    readonly expiresAtRound: number;
-    readonly signedAtRound: number;
-    readonly verb: "opaque";
-    readonly fields: {
-        readonly channel: string;
-        readonly bodyBytes: number;
-        readonly maxToll: string;
-    };
-    readonly summary: {
-        readonly sender: string;
-        readonly channel: string;
-        readonly bodyBytes: number;
-        readonly maxToll: string;
-    };
-}
-/** A signed identity administration operation (SIGN-03..07), as recorded for inspection. Intent,
- *  never bytes — the base64 bytes live in a separate map. The `verb` discriminator tells a reader
- *  what happened; `fields`/`summary` name ONLY public, non-key, non-PoP metadata (key `type`/`label`,
- *  a target, a starting credit) — never `publicKey`, `popSignature`, `bytes` or `base64`. */
-export interface SignedIdentity {
-    readonly txId: string;
-    readonly expiresAtRound: number;
-    readonly signedAtRound: number;
-    readonly verb: "create_identity" | "delete_identity" | "add_key" | "replace_key" | "delete_key";
-    readonly fields: Record<string, string>;
-    readonly summary: Record<string, string>;
-}
-/** A signed groups-ledger operation (SIGN-09..12) or the multi-recipient group credit transfer
- *  (SIGN-02), as recorded for inspection. Intent, never bytes — the base64 bytes live in a separate
- *  map. `fields`/`summary` name ONLY public metadata (group name, member node id, decimal
- *  recipient/amount strings) — never `publicKey`, `popSignature`, `bytes` or `base64`. */
-export interface SignedGroup {
-    readonly txId: string;
-    readonly expiresAtRound: number;
-    readonly signedAtRound: number;
-    readonly verb: "create_group" | "delete_group" | "add_member" | "remove_member" | "group_transfer" | "group_ownership_transfer";
-    readonly fields: Record<string, string>;
-    readonly summary: Record<string, string>;
-}
-/** A PREPARED group ownership transfer awaiting the incoming owner's consent. Nothing is signed and
- *  no bytes exist, so `submitSigned` cannot find it: an unconsented transfer is unsubmittable by
- *  construction, not by a flag. Kept apart from `signedThisSession` for that reason. */
-export interface PendingOwnershipTransfer {
-    readonly txId: string;
-    readonly expiresAtRound: number;
-    readonly preparedAtRound: number;
-    readonly verb: "group_ownership_transfer_pending";
-    readonly fields: {
-        readonly ledgerId: string;
-        readonly groupName: string;
-        readonly outgoingOwner: string;
-        readonly incomingOwner: string;
-        readonly maxToll: string;
-    };
-    readonly summary: Record<string, string>;
-    readonly status: string;
-}
-/** A signed channel-ledger operation (SIGN-13..18: claim, unclaim, write, set-toll, set-write-policy,
- *  set-DA-policy), as recorded for inspection. Intent, never bytes — the base64 bytes live in a
- *  separate map. `fields`/`summary` name ONLY public metadata (channel ledger id, write policy, toll
- *  as a decimal string, DA group/threshold) — never `publicKey`, `popSignature`, `popSig`, `bytes` or
- *  `base64`. */
-export interface SignedChannel {
-    readonly txId: string;
-    readonly expiresAtRound: number;
-    readonly signedAtRound: number;
-    readonly verb: "channel_claim" | "channel_unclaim" | "channel_write" | "channel_toll" | "channel_write_policy" | "channel_da";
-    readonly fields: Record<string, string>;
-    readonly summary: Record<string, string>;
-}
-/** Everything this session signed: a transfer, an opaque channel write, an identity operation, a
- *  groups-ledger operation, or a channel-ledger operation. */
-export type SignedRecord = SignedTransfer | SignedOpaque | SignedIdentity | SignedGroup | SignedChannel;
-/** A channel id a caller may write to — NOT a core ledger, NOT the reserved namespace.
- *
- *  ⚠️ CASE-INSENSITIVE ON PURPOSE, AND NOT BECAUSE THE NODE IS. The node compares ledger ids
- *  exactly, but refusing every casing costs nothing and removes a whole class of bypass that opens
- *  the moment anything in the path normalises case. This refusal is the only thing between a
- *  caller and the node's own interpreters. This single refusal is EXPORTED so `src/channel.ts`
- *  imports and REUSES it verbatim — never re-implements it (single dispatch-safety rule). */
-export declare function writableChannelId(raw: unknown): string | ToolResult<never>;
-/** One PROCESS attempt budget per intent, shared by legacy ordinary/DA and approved external
- * artifacts. Authorization-set variants have different fingerprints, NOT independent budgets.
- * Claim synchronously before network. An uncertain attempt remains consumed until restart;
- * export/other sessions mean this is never a global exactly-once guarantee. */
-export declare function submissionAttempted(txId: string): boolean;
-export declare function claimSubmissionAttempt(txId: string): boolean;
-/** A caller-supplied id, safe to name in a refusal. Echoing it verbatim gifts an attacker content
- *  AND size in the transcript; the id is named only when it LOOKS like one. */
-export declare const namedInRefusal: (txId: string) => string;
-/** Everything this session signed, by id. */
-export declare function recordedById(txId: string): SignedRecord | undefined;
-/** Record a signed operation into BOTH session stores — the intent record AND the base64 bearer
- *  bytes. This is the single record path shared by `signTransfer` and `composeIdentityTx` (via
- *  `src/identity.ts`); composing and recording in one call is what keeps inspect/submit from ever
- *  seeing a signed transaction whose record is missing. */
-export declare function recordSigned(signed: SignedRecord, bytes: Uint8Array): void;
-/** Record an operation whose envelope carries auths assembled from MORE than this session's signer
- *  (the group ownership transfer). Strict where `recordSigned` is lenient: it never replaces or
- *  merges an existing id, so a verified multi-auth envelope cannot be shadowed by, or shadow, an
- *  earlier record. Returns false (recording nothing) when the id is already known. */
-export declare function recordAssembledOnce(signed: SignedGroup, bytes: Uint8Array): boolean;
-export declare const MAX_PENDING_OWNERSHIP = 16;
-/** Remember a prepared transfer. False when the bound is reached or the id is already known. */
-export declare function recordPendingOwnership(p: PendingOwnershipTransfer): boolean;
-export declare function pendingOwnershipById(txId: string): PendingOwnershipTransfer | undefined;
-export declare function dropPendingOwnership(txId: string): void;
-/** Forget prepared transfers that can no longer be admitted (expiry <= round). They were never
- *  signed, so nothing submittable is lost; this keeps the bound from filling with dead entries. */
-export declare function pruneExpiredPendingOwnership(round: number): void;
-/** The signed bytes for one recorded transaction, base64. Undefined for anything this session
- *  did not sign. */
-export declare function peekBytes(txId: string): string | undefined;
-/**
- * Sign a credit transfer to a `txId` and record it — no network submit (SIGN-20).
- *
- * Reads the chain tip to bound the TTL (the read is mandatory: a transaction's life is relative
- * to the current round, and a guessed round is refused). If the chain is unreachable, signing
- * fails as `unreachable` — but it still does NOT submit.
- */
-export declare function signTransfer(deps: WriteDeps, params: {
-    recipient: string;
-    amount: string;
-}): Promise<ToolResult<SignedTransfer>>;
-/**
- * Sign a write to a channel — the generic escape hatch (SUBM-07). Signs only; a separate
- * `evolver_submit` or `evolver_submit_da` call is what reaches a chain.
- *
- * ⚠️ WHAT THE CALLER IS TRUSTED WITH, AND WHAT IT IS NOT. The caller chooses the bytes and the
- * channel. It does NOT choose the interpreter: `writableChannelId` below refuses every CORE ledger
- * id and the whole reserved `ce.evolver.` namespace, so the bytes reach a ledger the core never
- * parses. That is the whole safety argument — a caller who could name `ce.evolver.ledger.identity`
- * with a crafted body would be handing the node a transfer or key registration signed as this
- * identity. The sign DIGEST was never the weak point; DISPATCH was.
- *
- * ⚠️ NOT THE 157 LOGIN. The `signedRequest` SDK path is a challenge-response login proof that sends
- * its own HTTP and carries no commit interval; it is a DIFFERENT affordance and is not wired here.
- */
-export declare function signOpaque(deps: WriteDeps, params: {
-    channel: string;
-    bodyHex: string;
-}): Promise<ToolResult<SignedOpaque>>;
-/** What a signed submit returned. Ordinary `commitIntervalMs` is present ONLY on an observed
- *  matching commit. DA `daSubmitDurationMs` measures the entire gateway call (including collection
- *  and assembly), even on an unsuccessful/unknown return; it never claims commit-only latency.
- *  The published SDK provides no separate collection or commit timing. Local guards have neither. */
-export type SubmitReport = SubmissionOutcome & {
-    readonly commitIntervalMs?: number;
-    readonly daSubmitDurationMs?: number;
-    readonly submitted?: Record<string, string | number>;
-};
-/**
- * Submit a transaction this session signed, by its `txId` (SIGN-19). Never signs, never does
- * network work before the guards clear:
- *
- *   Rule 1 (SUBM-08) — only what this session signed: otherwise this agent is a submission relay.
- *   Rule 2 (SAFE-01) — never twice: a repeat is a no-op the chain refuses, and re-signing is the
- *                      loop that pays twice. Here the refusal names "look it up", never re-sign.
- *
- * The `txId` resolves the signed record and the exact stored bytes. Both routes share these guards
- * and mark the id before awaiting the network, including when the result is unknown. DA permits
- * only channel-write intent, never a core-ledger operation or owners-ledger administration.
- */
-export declare function submitSigned(deps: WriteDeps, txId: string, mode?: "ordinary" | "da"): Promise<SubmitReport>;
-/**
- * Read back what a signed transaction would do (READ-05). Answers from the session RECORD, not
- * by decoding — and not from any other transaction. Contacts no chain.
- */
-export declare function inspectSigned(txId: string): ToolResult<SignedRecord | PendingOwnershipTransfer>;
-/** Test seam only: forget this session's signing history (all three stores). */
-export declare function __resetSession(): void;
-/** The single compose→sign→record helper, re-exported from `src/identity.ts` so every identity verb
- *  and any future signing verb shares ONE compose implementation (never two). */
-export { composeIdentityTx as composeAndSign } from "./identity.js";
-//# sourceMappingURL=write.d.ts.map

package/dist/write.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../src/write.ts"],"names":[],"mappings":"AAaA,OAAO,EAML,UAAU,EAGX,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAIzE,OAAO,EAAE,UAAU,EAAE,CAAC;AAEtB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEjE;;;;4FAI4F;AAC5F,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;8CAC8C;AAC9C,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,mFAAmF;IACnF,cAAc,CAAC,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC3D;AAED;+FAC+F;AAC/F,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CACpG;AAED;;iEAEiE;AACjE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACpG,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/H;AAED;;;6FAG6F;AAC7F,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,SAAS,GAAG,aAAa,GAAG,YAAY,CAAC;IAChG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AAED;;;0FAG0F;AAC1F,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc,GAAG,YAAY,GAAG,eAAe,GAAG,gBAAgB,GAAG,0BAA0B,CAAC;IAChI,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AAED;;wFAEwF;AACxF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QACtF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1D,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;gBAIgB;AAChB,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,eAAe,GAAG,cAAc,GAAG,sBAAsB,GAAG,YAAY,CAAC;IAC9H,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AAED;8DAC8D;AAC9D,MAAM,MAAM,YAAY,GAAG,cAAc,GAAG,YAAY,GAAG,cAAc,GAAG,WAAW,GAAG,aAAa,CAAC;AAQxG;;;;;;6FAM6F;AAC7F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAoB1E;AAkBD;;;+EAG+E;AAC/E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAA8C;AACxG,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAK5D;AAED;+EAC+E;AAC/E,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,KAAG,MAI7C,CAAC;AAEF,6CAA6C;AAC7C,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAEnE;AAED;;;2DAG2D;AAC3D,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAI1E;AAED;;;sFAGsF;AACtF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAMnF;AAGD,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAGxC,gGAAgG;AAChG,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAM3E;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEvF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEvD;AAED;mGACmG;AACnG,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAEhE;AAED;oBACoB;AACpB,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE1D;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,SAAS,EACf,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAoCrC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,SAAS,EACf,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CA+DnC;AAED;;;qGAGqG;AACrG,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG;IAC7C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;CACtD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,UAAU,GAAG,IAAiB,GAClE,OAAO,CAAC,YAAY,CAAC,CA2GvB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC,YAAY,GAAG,wBAAwB,CAAC,CAS/F;AAED,gFAAgF;AAChF,wBAAgB,cAAc,IAAI,IAAI,CAKrC;AAED;iFACiF;AACjF,OAAO,EAAE,iBAAiB,IAAI,cAAc,EAAE,MAAM,eAAe,CAAC"}