@naulon/wayfarer 0.1.1

package/dist/decide.js

@@ -0,0 +1,206 @@
+/**
+ * The decision core — where the Wayfarer earns its "agency" stripes.
+ *
+ * Given appraised candidates and a budget, decide which essays to PAY for, which
+ * to take from CACHE (free, already fetched), and which to SKIP — and say WHY
+ * for each. This is a pure function so it's fully testable and the reasoning is
+ * inspectable; nothing here is hardcoded to a fixed answer.
+ *
+ * The default policy: rank by value density (relevance per dollar), buy greedily
+ * down the ranking while budget and a relevance floor allow. Greedy-by-density
+ * is the natural call when items are cheap relative to budget (the nanopayment
+ * case) — it maximizes total relevance bought per dollar without the overhead of
+ * solving a knapsack for sub-cent items.
+ */
+import { authorizeOrigin } from "./origin-policy.js";
+/** Normalize a host for policy matching: lower-cased, trimmed; `undefined` stays `undefined`. */
+function normHost(host) {
+    return host?.trim().toLowerCase() || undefined;
+}
+/**
+ * The hostname money will actually go to, mirroring the pay step's own resolution
+ * (`c.url ?? articleUrl(gateBase, c.slug)`). This — not the discovery source's `Candidate.host`
+ * field — is what domain policy is evaluated against, so an allow/deny decision can never be made
+ * about a different host than the one that gets paid. Returns undefined when no url is derivable
+ * (an allowlist then denies by default).
+ */
+export function payUrlOf(url, gateBase, slug) {
+    const candidates = [url, gateBase && slug ? `${gateBase.replace(/\/+$/, "")}/${slug}` : undefined];
+    for (const u of candidates) {
+        if (!u)
+            continue;
+        try {
+            new URL(u);
+            return u;
+        }
+        catch {
+            /* not a parseable absolute URL — fall through to the next candidate */
+        }
+    }
+    return undefined;
+}
+export function payHostOf(url, gateBase, slug) {
+    const resolved = payUrlOf(url, gateBase, slug);
+    return resolved === undefined ? undefined : new URL(resolved).hostname.toLowerCase();
+}
+/**
+ * THE operator-policy gate — the single source of truth for "may I pay this host, at this price,
+ * right now". Every spending path calls this: `decide()` for the composite research run, and the
+ * MCP's granular `naulon_pay_and_read`.
+ *
+ * It exists because the checks previously lived ONLY inside `decide()`, so the granular pay tool
+ * — the path the tool descriptions tell agents to prefer — silently ignored the kill-switch,
+ * deny/allow lists, per-domain cap, and approval threshold an operator had configured. Two
+ * implementations of one rule is how that bug happens; there is now one implementation.
+ *
+ * Order is load-bearing and matches the original `decide()` sequence, so the reason a caller
+ * surfaces when several gates apply is unchanged: kill → deny → allow → maxPaid → perDomainCap →
+ * budget → approval. `paidCount` / `remainingUsdc` are optional; omit them when the caller
+ * enforces those with its own accounting and messaging (the MCP session envelope does).
+ */
+export function spendGate(input) {
+    const { policy, priceUsdc } = input;
+    const host = normHost(input.host);
+    if (policy.killSwitch)
+        return { ok: false, action: "skip", reason: "kill-switch engaged — spend halted" };
+    const deny = new Set((policy.denyDomains ?? []).map((h) => normHost(h)).filter((h) => !!h));
+    if (host && deny.has(host))
+        return { ok: false, action: "skip", reason: `host ${host} denied by policy` };
+    // NOTE: a DEFINED but empty allowlist denies everything (deny-by-default). That is deliberate —
+    // "I configured an allowlist and it is empty" must not read as "allow all".
+    const allow = policy.allowDomains?.map((h) => normHost(h)).filter((h) => !!h);
+    if (allow && (host === undefined || !allow.includes(host))) {
+        return {
+            ok: false,
+            action: "skip",
+            reason: host === undefined ? "host unknown, not in allowlist" : `host ${host} not in allowlist`,
+        };
+    }
+    if (input.paidCount !== undefined && input.paidCount >= policy.maxPaid) {
+        return { ok: false, action: "skip", reason: `hit max-paid cap (${policy.maxPaid})` };
+    }
+    if (policy.perDomainCap !== undefined && host !== undefined && (input.paidForHost ?? 0) >= policy.perDomainCap) {
+        return { ok: false, action: "skip", reason: `per-domain cap (${policy.perDomainCap}) reached for ${host}` };
+    }
+    if (input.remainingUsdc !== undefined && priceUsdc > input.remainingUsdc) {
+        return {
+            ok: false,
+            action: "skip",
+            reason: `price $${priceUsdc.toFixed(6)} exceeds remaining budget $${input.remainingUsdc.toFixed(6)}`,
+        };
+    }
+    if (policy.approvalThresholdUsdc !== undefined && priceUsdc >= policy.approvalThresholdUsdc) {
+        return {
+            ok: false,
+            action: "approve",
+            reason: `toll $${priceUsdc.toFixed(6)} ≥ approval threshold $${policy.approvalThresholdUsdc.toFixed(6)} — needs human approval`,
+        };
+    }
+    return { ok: true };
+}
+/**
+ * TODO(you): this policy is the lever that defines the agent's "taste". The
+ * defaults are sensible, but the interesting choices are yours to make:
+ *
+ *   - relevanceFloor: how picky? Too low → wastes budget on tangential essays.
+ *     Too high → misses useful context. 0.35 is a starting guess.
+ *   - Ranking key: density (relevance/price) favors cheap-and-relevant. Would
+ *     you instead rank by raw relevance (quality at any price), or blend them?
+ *     See `rank()` below — that sort is the whole strategy in one line.
+ *   - maxPaid: a stop so a big budget doesn't over-cite a thin topic.
+ *
+ * Tune these against real runs and watch the decision log; that visible
+ * reasoning is what the judges reward.
+ */
+export const DEFAULT_POLICY = {
+    relevanceFloor: 0.35,
+    maxPaid: 5,
+};
+function rank(candidates) {
+    // Strategy in one line: best relevance-per-dollar first.
+    return [...candidates].sort((a, b) => b.relevance / b.price - a.relevance / a.price);
+}
+export function decide(candidates, budgetUsdc, cached = new Set(), policy = DEFAULT_POLICY, context = {}) {
+    const decisions = [];
+    let remaining = budgetUsdc;
+    let paidCount = 0;
+    // Per-host pay tally, seeded with prior pays in this rate-cap window.
+    const paidByHost = new Map(Object.entries(context.priorDomainCounts ?? {}).map(([h, n]) => [normHost(h) ?? h, n]));
+    for (const c of rank(candidates)) {
+        const price = c.price;
+        const density = c.relevance / price;
+        // SECURITY: the policy host MUST come from the url the pay step will actually fetch — never
+        // from `Candidate.host`, a free-form string the (untrusted) discovery source supplies ALONGSIDE
+        // the url. A malicious feed returning { host: "trusted-publisher.com", url:
+        // "https://attacker.example/toll" } would otherwise pass an allow/deny check on one string while
+        // real USDC went to another. Underivable ⇒ undefined ⇒ "host unknown", which an allowlist
+        // denies by default (see spendGate). `c.host` is now display/telemetry only.
+        const host = payHostOf(c.url, context.gateBase, c.slug);
+        const base = { slug: c.slug, title: c.title, url: c.url, relevance: c.relevance, price, density };
+        const skip = (reason) => decisions.push({ ...base, action: "skip", reason });
+        // Free gates first — a held license re-reads for $0, so it is not "spend" and
+        // is allowed even under a kill-switch; a below-floor essay was never going to pay.
+        if (cached.has(c.slug)) {
+            decisions.push({ ...base, action: "cache", reason: `hold a live license — re-read free (saves $${price.toFixed(6)})` });
+            continue;
+        }
+        if (c.relevance < policy.relevanceFloor) {
+            skip(`relevance ${c.relevance.toFixed(2)} below floor ${policy.relevanceFloor}`);
+            continue;
+        }
+        // ORIGIN — delegated to `authorizeOrigin`, the ONE answer to "whose origin may money touch"
+        // (see origin-policy.ts). Sits with the SPEND gates, after the free ones: a held-license
+        // re-read costs nothing and stays allowed.
+        //
+        // A discovery source is untrusted — `catalogSource` casts a remote endpoint's JSON straight to
+        // Candidate[], so a compromised catalog can hand back any `url` it likes and money would follow
+        // it. The refusal PROSE below is this path's own (a research skip reason reads differently from
+        // a tool refusal); the DECISION is shared, which is the part that must never diverge.
+        const payUrl = payUrlOf(c.url, context.gateBase, c.slug);
+        const gateHost = payHostOf(undefined, context.gateBase, "_");
+        if (payUrl === undefined) {
+            if (gateHost !== undefined && !policy.allowDomains) {
+                skip(`no resolvable pay URL — refusing (the configured gate is ${gateHost})`);
+                continue;
+            }
+        }
+        else {
+            const origin = authorizeOrigin({
+                target: payUrl,
+                gate: context.gateBase,
+                allowDomains: policy.allowDomains,
+            });
+            if (!origin.ok) {
+                skip(origin.code === "off-gate"
+                    ? `host ${host} is not the configured gate (${gateHost}); set allowDomains to buy across publishers`
+                    : origin.refusal);
+                continue;
+            }
+        }
+        // Spend gates — delegated to the ONE shared evaluator (see `spendGate`), so the granular
+        // MCP pay path enforces byte-identical rules instead of a drifting second copy.
+        const verdict = spendGate({
+            host,
+            priceUsdc: price,
+            policy,
+            paidForHost: host === undefined ? 0 : (paidByHost.get(host) ?? 0),
+            paidCount,
+            remainingUsdc: remaining,
+        });
+        if (!verdict.ok) {
+            decisions.push({ ...base, action: verdict.action, reason: verdict.reason });
+            continue;
+        }
+        remaining -= price;
+        paidCount += 1;
+        if (host !== undefined)
+            paidByHost.set(host, (paidByHost.get(host) ?? 0) + 1);
+        decisions.push({
+            ...base,
+            action: "pay",
+            reason: `relevance ${c.relevance.toFixed(2)} @ $${price.toFixed(6)} (density ${density.toFixed(0)}); $${remaining.toFixed(6)} left`,
+        });
+    }
+    return decisions;
+}
+//# sourceMappingURL=decide.js.map

package/dist/decide.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decide.js","sourceRoot":"","sources":["../src/decide.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AA2DrD,iGAAiG;AACjG,SAAS,QAAQ,CAAC,IAAwB;IACxC,OAAO,IAAI,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAuB,EAAE,QAA4B,EAAE,IAAY;IAC1F,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnG,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YACX,OAAO,CAAC,CAAC;QACX,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAuB,EAAE,QAA4B,EAAE,IAAY;IAC3F,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;AACvF,CAAC;AAMD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,SAAS,CAAC,KAYzB;IACC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IAE1G,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,IAAI,mBAAmB,EAAE,CAAC;IAE1G,gGAAgG;IAChG,4EAA4E;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,QAAQ,IAAI,mBAAmB;SAChG,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC/G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,MAAM,CAAC,YAAY,iBAAiB,IAAI,EAAE,EAAE,CAAC;IAC9G,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,SAAS,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;QACzE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;SACrG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,qBAAqB,KAAK,SAAS,IAAI,SAAS,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAC5F,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;SAChI,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,cAAc,EAAE,IAAI;IACpB,OAAO,EAAE,CAAC;CACX,CAAC;AAEF,SAAS,IAAI,CAAC,UAAgC;IAC5C,yDAAyD;IACzD,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CACzB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,CACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CACpB,UAAgC,EAChC,UAAkB,EAClB,SAA8B,IAAI,GAAG,EAAE,EACvC,SAAyB,cAAc,EACvC,UAAyB,EAAE;IAE3B,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,IAAI,SAAS,GAAG,UAAU,CAAC;IAC3B,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,sEAAsE;IACtE,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CACvF,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAe,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC;QACpC,4FAA4F;QAC5F,gGAAgG;QAChG,4EAA4E;QAC5E,iGAAiG;QACjG,0FAA0F;QAC1F,6EAA6E;QAC7E,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAClG,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAErF,8EAA8E;QAC9E,mFAAmF;QACnF,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,8CAA8C,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACxH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;YACjF,SAAS;QACX,CAAC;QAED,4FAA4F;QAC5F,yFAAyF;QACzF,2CAA2C;QAC3C,EAAE;QACF,+FAA+F;QAC/F,gGAAgG;QAChG,gGAAgG;QAChG,sFAAsF;QACtF,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC7D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACnD,IAAI,CAAC,4DAA4D,QAAQ,GAAG,CAAC,CAAC;gBAC9E,SAAS;YACX,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,eAAe,CAAC;gBAC7B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,IAAI,CACF,MAAM,CAAC,IAAI,KAAK,UAAU;oBACxB,CAAC,CAAC,QAAQ,IAAI,gCAAgC,QAAQ,8CAA8C;oBACpG,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,CAAC;gBACF,SAAS;YACX,CAAC;QACH,CAAC;QAED,yFAAyF;QACzF,gFAAgF;QAChF,MAAM,OAAO,GAAG,SAAS,CAAC;YACxB,IAAI;YACJ,SAAS,EAAE,KAAK;YAChB,MAAM;YACN,WAAW,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjE,SAAS;YACT,aAAa,EAAE,SAAS;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QAED,SAAS,IAAI,KAAK,CAAC;QACnB,SAAS,IAAI,CAAC,CAAC;QACf,IAAI,IAAI,KAAK,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,SAAS,CAAC,IAAI,CAAC;YACb,GAAG,IAAI;YACP,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,aAAa,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;SACpI,CAAC,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/discover.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Discovery entry point — find candidate essays for a topic. The agent reads
+ * only the free, public teaser (title + summary) here; it hasn't paid yet.
+ *
+ * The source is chosen from config (RSS feed, catalog endpoint, or the bundled
+ * demo); see discovery.ts for the seam and the selection precedence.
+ */
+import type { Candidate } from "./types.ts";
+export declare function discover(topic: string): Promise<Candidate[]>;
+//# sourceMappingURL=discover.d.ts.map

package/dist/discover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../src/discover.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAG5C,wBAAsB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAElE"}

package/dist/discover.js

@@ -0,0 +1,5 @@
+import { selectSource } from "./discovery.js";
+export async function discover(topic) {
+    return selectSource().discover(topic);
+}
+//# sourceMappingURL=discover.js.map

package/dist/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../src/discover.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAa;IAC1C,OAAO,YAAY,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC"}

package/dist/discovery.d.ts

@@ -0,0 +1,26 @@
+import type { Candidate } from "./types.ts";
+export interface DiscoverySource {
+    /** Free teasers for a topic. `topic` may filter (catalog) or be ignored (rss). */
+    discover(topic: string): Promise<Candidate[]>;
+}
+/**
+ * A catalog endpoint: bare `Candidate[]` (legacy, single page) or the paginated
+ * `{ entries, nextCursor }` envelope. Filters server-side by `?q=topic`; follows
+ * `nextCursor` (as `?cursor=`) up to 50 pages so a large fleet catalog enumerates.
+ * A non-OK response throws (including mid-pagination — a partial catalog is never
+ * silently returned as if complete). A clean but empty response yields `[]`.
+ */
+export declare function catalogSource(url: string): DiscoverySource;
+/**
+ * The publisher's live RSS feed. Returns the whole catalog (topic is ignored);
+ * the appraise → decide pipeline downstream does relevance, so the agent reasons
+ * over the *real* catalog rather than a discovery-time substring filter. A
+ * non-OK response throws; a valid feed that parses to zero candidates returns
+ * `[]` (honest empty — `parseRss` is lenient, so `[]` means "no items").
+ */
+export declare function rssSource(rssUrl: string): DiscoverySource;
+/** Pick the discovery source from config (see precedence above). Throws when
+ *  none is configured — the agent has nowhere to discover, and inventing a
+ *  bundled catalog would be a fail-open. */
+export declare function selectSource(): DiscoverySource;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;CAC/C;AAID;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAqB1D;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAUzD;AAUD;;4CAE4C;AAC5C,wBAAgB,YAAY,IAAI,eAAe,CAM9C"}

package/dist/discovery.js

@@ -0,0 +1,93 @@
+/**
+ * Discovery sources — where the agent finds candidate essays for a topic. The
+ * agent reads only free, public teasers here; it hasn't paid for anything yet.
+ *
+ * One seam, two implementations (parallel to the `Buyer` seam in buyer.ts):
+ *   - rssSource     — fetch + parse the publisher's live `/rss.xml`.
+ *   - catalogSource — a bespoke CATALOG_URL JSON endpoint ({slug,title,summary}[]).
+ *
+ * Precedence (selectSource): RSS_URL > PUBLISHER_URL > CATALOG_URL, then refuse.
+ *
+ * No fail-open: a *failed* fetch throws — it never resolves to fabricated
+ * fixtures wearing the shape of a real catalog (the defect that shipped demo
+ * essays to real buyers). A *successful* fetch that is genuinely empty returns
+ * `[]` — the honest "found nothing", not an error and not substituted data.
+ */
+import { getConfig } from "@naulon/shared";
+import { rssToCandidates } from "./rss.js";
+import { agentFetch } from "./sign.js";
+const AGENT_UA = "naulon-wayfarer/0.1";
+/**
+ * A catalog endpoint: bare `Candidate[]` (legacy, single page) or the paginated
+ * `{ entries, nextCursor }` envelope. Filters server-side by `?q=topic`; follows
+ * `nextCursor` (as `?cursor=`) up to 50 pages so a large fleet catalog enumerates.
+ * A non-OK response throws (including mid-pagination — a partial catalog is never
+ * silently returned as if complete). A clean but empty response yields `[]`.
+ */
+export function catalogSource(url) {
+    const base = url.replace(/\/$/, "");
+    return {
+        async discover(topic) {
+            const out = [];
+            let cursor;
+            for (let page = 0; page < 50; page++) {
+                const u = new URL(base);
+                u.searchParams.set("q", topic);
+                if (cursor)
+                    u.searchParams.set("cursor", cursor);
+                const res = await agentFetch(u.toString(), { headers: { "user-agent": AGENT_UA } });
+                if (!res.ok)
+                    throw new Error(`catalog fetch failed (${res.status}) for ${u.toString()}`);
+                const json = (await res.json());
+                if (Array.isArray(json))
+                    return [...out, ...json]; // legacy shape: single page
+                out.push(...json.entries);
+                cursor = json.nextCursor;
+                if (!cursor)
+                    break;
+            }
+            return out;
+        },
+    };
+}
+/**
+ * The publisher's live RSS feed. Returns the whole catalog (topic is ignored);
+ * the appraise → decide pipeline downstream does relevance, so the agent reasons
+ * over the *real* catalog rather than a discovery-time substring filter. A
+ * non-OK response throws; a valid feed that parses to zero candidates returns
+ * `[]` (honest empty — `parseRss` is lenient, so `[]` means "no items").
+ */
+export function rssSource(rssUrl) {
+    return {
+        async discover() {
+            const res = await agentFetch(rssUrl, {
+                headers: { "user-agent": AGENT_UA, accept: "application/rss+xml, application/xml" },
+            });
+            if (!res.ok)
+                throw new Error(`rss fetch failed (${res.status}) for ${rssUrl}`);
+            return rssToCandidates(await res.text());
+        },
+    };
+}
+/** Resolve the configured RSS feed URL: explicit RSS_URL, else ${PUBLISHER_URL}/rss.xml. */
+function rssUrlFromConfig() {
+    const cfg = getConfig();
+    if (cfg.RSS_URL)
+        return cfg.RSS_URL;
+    if (cfg.PUBLISHER_URL)
+        return `${cfg.PUBLISHER_URL.replace(/\/$/, "")}/rss.xml`;
+    return undefined;
+}
+/** Pick the discovery source from config (see precedence above). Throws when
+ *  none is configured — the agent has nowhere to discover, and inventing a
+ *  bundled catalog would be a fail-open. */
+export function selectSource() {
+    const cfg = getConfig();
+    const rss = rssUrlFromConfig();
+    if (rss)
+        return rssSource(rss);
+    if (cfg.CATALOG_URL)
+        return catalogSource(cfg.CATALOG_URL);
+    throw new Error("no discovery source configured — set RSS_URL, PUBLISHER_URL, or CATALOG_URL");
+}
+//# sourceMappingURL=discovery.js.map

package/dist/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAQvC,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpC,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,KAAa;YAC1B,MAAM,GAAG,GAAgB,EAAE,CAAC;YAC5B,IAAI,MAA0B,CAAC;YAC/B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;gBACrC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC/B,IAAI,MAAM;oBAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACjD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACpF,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACzF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgE,CAAC;gBAC/F,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,4BAA4B;gBAC/E,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;gBACzB,IAAI,CAAC,MAAM;oBAAE,MAAM;YACrB,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,OAAO;QACL,KAAK,CAAC,QAAQ;YACZ,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE;gBACnC,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,sCAAsC,EAAE;aACpF,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,MAAM,SAAS,MAAM,EAAE,CAAC,CAAC;YAC/E,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,SAAS,gBAAgB;IACvB,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IACpC,IAAI,GAAG,CAAC,aAAa;QAAE,OAAO,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC;IAChF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;4CAE4C;AAC5C,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,IAAI,GAAG;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;AACjG,CAAC"}

package/dist/gateway.d.ts

@@ -0,0 +1,117 @@
+/**
+ * Gateway buyer — the memo-LESS Circle rail (Base + every other Gateway chain). Where the
+ * memo rail (memo.ts) relays a raw USDC EIP-3009 authorization, the gateway rail signs an
+ * EIP-3009 authorization against the Circle **GatewayWallet** contract (the `extra.
+ * verifyingContract` the gate advertises) and posts the full x402 envelope `{x402Version,
+ * payload:{authorization,signature}, resource, accepted}` as `payment-signature` — the shape
+ * Circle's facilitator `verify` requires (a bare/mock shape is rejected 400
+ * `x402Version/resource/accepted/payload: Required` — the Base-settle bug this path fixes).
+ *
+ * Custody-free seam (mirrors `memoBuyer(MemoSigner)`): a cloud host injects a sign-only
+ * `GatewaySigner` (its address + a `signTypedData` that signs the GatewayWallet-domain typed
+ * data elsewhere — a grant-checked BFF holding the encrypted session key), so the private key
+ * never lives in this process. A viem `PrivateKeyAccount` satisfies the same shape, keeping
+ * the CLI/self-host path (env `BUYER_PRIVATE_KEY`) symmetric. The signing wraps the SDK's
+ * `BatchEvmScheme` so the signed shape / validity clamp can never drift from the rail (the
+ * same reason the gate's own `gatewayLegPayload` does — see tollgate/src/x402.ts).
+ *
+ * The Gateway balance is funded out-of-band (a one-time deposit into Circle's non-custodial
+ * Gateway Wallet); the pay path here is pure sign-only. On the env/CLI path `init()` still
+ * deposits via the SDK `GatewayClient` for backwards compatibility.
+ */
+import { type Address, type Hex, type TypedDataDomain } from "viem";
+import type { Balances, DepositResult, SearchTransfersParams, SearchTransfersResponse, SupportedChainName, TransferResponse, TransferStatus } from "@circle-fin/x402-batching/client";
+import { type Buyer, type Quoted } from "./buyer.ts";
+/**
+ * The gateway signer seam — the structural twin of `MemoSigner` and of the SDK's own
+ * `BatchEvmSigner` (which the package doesn't re-export). A viem `PrivateKeyAccount` and a
+ * cloud in-process session signer both satisfy it. The signed typed data is a
+ * `TransferWithAuthorization` against the **GatewayWallet** EIP-712 domain (name
+ * "GatewayWalletBatched", version "1", `verifyingContract` from the 402's `extra`) — NOT the
+ * USDC token domain the memo rail uses.
+ */
+export interface GatewaySigner {
+    address: `0x${string}`;
+    signTypedData(args: {
+        domain: TypedDataDomain;
+        types: Record<string, Array<{
+            name: string;
+            type: string;
+        }>>;
+        primaryType: string;
+        message: Record<string, unknown>;
+    }): Promise<`0x${string}`>;
+}
+/** The 402's author accept, with the Gateway batching `extra` the envelope needs. `probe`
+ *  keeps the runtime object verbatim on `quoted.requirements`; the type there is narrowed to
+ *  the common fields, so the gateway rail casts to reach `extra.verifyingContract`. */
+export type BatchingRequirements = Quoted["requirements"] & {
+    scheme?: string;
+    extra?: {
+        name?: string;
+        version?: string;
+        verifyingContract?: `0x${string}`;
+    };
+};
+/** Sign one Gateway leg's EIP-3009 authorization against the GatewayWallet domain and return
+ *  the full envelope `{x402Version, payload, resource, accepted}` — exactly the gate's
+ *  `gatewayLegPayload` shape. Wraps the SDK's `BatchEvmScheme` so the domain / validity clamp
+ *  never drifts from the rail. SDK loaded lazily so the mock path never pulls it in. */
+export declare function gatewayLegPayload(signer: GatewaySigner, quoted: Quoted, x402Version: number): Promise<Record<string, unknown>>;
+export declare function gatewayBuyer(signer?: GatewaySigner): Buyer;
+/** Options for a standalone out-of-band Gateway deposit. */
+export interface GatewayDepositOpts {
+    chain: SupportedChainName;
+    privateKey: Hex;
+    /** USDC amount as a DECIMAL string, e.g. "10.5" — the SDK approves then deposits. */
+    amountUsdc: string;
+}
+/**
+ * Out-of-band, custody-free deposit into the Circle Gateway Wallet — the non-custodial contract that
+ * holds the buyer's unified balance (Circle infra, buyer-controlled; naulon custodies nothing). The
+ * cloud (injected-signer) path funds the Gateway balance HERE, out of band, because `gatewayBuyer.init()`
+ * is a deposit NO-OP when a signer is injected (the key lives in the grant-checked BFF, not this process).
+ * The self-host/CLI path still deposits inside `init()`; this is the standalone entry a deposit
+ * script/operator calls. SDK loaded lazily so the mock/memo paths never pull it in.
+ */
+export declare function gatewayDeposit(opts: GatewayDepositOpts): Promise<DepositResult>;
+/** Read the wallet + Gateway balances for a key — the preflight a deposit script shows before it moves
+ *  funds, and the check the buyer uses to see if its unified balance covers a toll. Pass `address` to
+ *  read ANOTHER account's balances (e.g. confirm the AUTHOR received a settle) — the client key only
+ *  authenticates the read, it needn't own the address. SDK loaded lazily. */
+export declare function gatewayBalances(opts: {
+    chain: SupportedChainName;
+    privateKey: Hex;
+    address?: Address;
+}): Promise<Balances>;
+/**
+ * Look up a single Gateway transfer (a settlement) by its Circle id — the `settlementRef` a gateway
+ * settle stamps. On the Gateway rail that ref is a **Circle UUID, not an on-chain tx hash**; the
+ * response carries the authoritative `status` plus the eventual on-chain `txHash`. This is the
+ * correct "did the settle land?" check — pair `status` with `classifyGatewaySettlement`. SDK lazy.
+ */
+export declare function gatewayTransferStatus(opts: {
+    chain: SupportedChainName;
+    privateKey: Hex;
+    id: string;
+}): Promise<TransferResponse>;
+/**
+ * Search Gateway transfers with optional filters (`to`/`from`/`status`/`network`/date range). Use to
+ * confirm a payee (author) received without holding the transfer id — e.g. `{ to: authorAddress }`.
+ * SDK loaded lazily.
+ */
+export declare function gatewayTransfers(opts: {
+    chain: SupportedChainName;
+    privateKey: Hex;
+} & SearchTransfersParams): Promise<SearchTransfersResponse>;
+/** The one bit a caller settling buyer→author needs from a transfer's lifecycle: did the money land? */
+export type GatewaySettlementState = "pending" | "settled" | "failed";
+/**
+ * Classify a Circle Gateway transfer `status` into settled / pending / failed. This is the CODE form
+ * of the hard-won rule that a Gateway settle credits the payee's OFF-CHAIN Gateway balance — so
+ * `balanceOf(payee)` is the wrong check and the transfer's own `status` is the authoritative signal.
+ * `completed` ⇒ settled; the in-pipeline states ⇒ pending; `failed` ⇒ failed. An unknown/future status
+ * is treated as `pending` — never falsely report the money landed.
+ */
+export declare function classifyGatewaySettlement(status: TransferStatus): GatewaySettlementState;
+//# sourceMappingURL=gateway.d.ts.map

package/dist/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,eAAe,EAAE,MAAM,MAAM,CAAC;AAGpE,OAAO,KAAK,EACV,QAAQ,EACR,aAAa,EACb,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACf,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAIL,KAAK,KAAK,EAGV,KAAK,MAAM,EACZ,MAAM,YAAY,CAAC;AAGpB;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IACvB,aAAa,CAAC,IAAI,EAAE;QAClB,MAAM,EAAE,eAAe,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;QAC7D,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;CAC5B;AAED;;uFAEuF;AACvF,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,KAAK,MAAM,EAAE,CAAA;KAAE,CAAC;CAChF,CAAC;AAaF;;;wFAGwF;AACxF,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA0BlC;AAED,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,KAAK,CA+D1D;AAED,4DAA4D;AAC5D,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,UAAU,EAAE,GAAG,CAAC;IAChB,qFAAqF;IACrF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAIrF;AAED;;;6EAG6E;AAC7E,wBAAsB,eAAe,CACnC,IAAI,EAAE;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,UAAU,EAAE,GAAG,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GACtE,OAAO,CAAC,QAAQ,CAAC,CAGnB;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,UAAU,EAAE,GAAG,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC/D,OAAO,CAAC,gBAAgB,CAAC,CAG3B;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,UAAU,EAAE,GAAG,CAAA;CAAE,GAAG,qBAAqB,GAC3E,OAAO,CAAC,uBAAuB,CAAC,CAIlC;AAED,wGAAwG;AACxG,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEtE;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,cAAc,GAAG,sBAAsB,CAmBxF"}