@oxdeai/cli 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,45 @@
+# Changelog
+
+All notable changes to `@oxdeai/cli` will be documented in this file.
+
+The format is based on Keep a Changelog.
+This project follows Semantic Versioning.
+
+---
+
+## [0.2.0] - 2026-03-08
+
+### Added
+
+- Unified `verify` command support for:
+  - `snapshot`
+  - `audit`
+  - `envelope`
+  - `authorization`
+- Support for authorization/envelope verification options:
+  - expected issuer/audience/policy
+  - trusted keyset input
+  - signature verification requirement toggles
+- Machine-readable and human-readable output paths with consistent command summaries.
+- Dedicated CLI README with command surface, examples, and exit code contract.
+
+### Changed
+
+- Stabilized tooling command surface around:
+  - `oxdeai build`
+  - `oxdeai verify`
+  - `oxdeai replay` (protocol-aware explicit stub)
+- Normalized verification exit codes:
+  - `0` = `ok`
+  - `1` = `invalid` / malformed runtime failure
+  - `2` = usage error
+  - `3` = `inconclusive`
+- Expanded CLI tests for authorization verification and malformed-input fail-closed behavior.
+
+### Notes
+
+- `@oxdeai/cli` is a tooling release line and is versioned independently from the protocol stack.
+- Protocol compatibility claims are defined by:
+  - `@oxdeai/core`
+  - `@oxdeai/sdk`
+  - `@oxdeai/conformance`

package/README.md

@@ -0,0 +1,61 @@
+# @oxdeai/cli
+
+Protocol-oriented command-line tooling for OxDeAI.
+
+`@oxdeai/cli` is a thin Node.js wrapper around `@oxdeai/core` verification and local state workflows. It is framework-agnostic and intended for local policy operations, artifact inspection, and deterministic verification.
+
+## Command Surface
+
+- `oxdeai build`
+- `oxdeai verify`
+- `oxdeai replay`
+
+Legacy helper commands are still available (`init`, `launch`, `state`, `audit`, `verify-audit`, `make-envelope`, `verify-envelope`, `snapshot-hash`) for local development workflows.
+
+## Core Commands
+
+### build
+
+Builds a canonical snapshot verification payload from state.
+
+```bash
+oxdeai build --state .oxdeai/state.json --out .oxdeai/snapshot.bin --json
+```
+
+### verify
+
+Verifies one artifact kind at a time:
+
+- `snapshot`
+- `audit`
+- `envelope`
+- `authorization`
+
+Examples:
+
+```bash
+oxdeai verify --kind snapshot --file snapshot.bin --json
+oxdeai verify --kind audit --file audit.ndjson --mode strict --json
+oxdeai verify --kind envelope --file envelope.bin --trusted-keyset keyset.json --require-signature --json
+oxdeai verify --kind authorization --file authorization.json --expected-issuer oxdeai://issuer --expected-audience rp://tool-gateway --json
+```
+
+### replay
+
+Protocol-aware stub in `0.1.x`. It returns a clear unsupported response and points users to deterministic audit verification (`verify --kind audit`).
+
+## Output and Exit Codes
+
+- Human-readable output by default
+- Machine-readable output with `--json`
+
+Exit codes:
+
+- `0` = verification `ok` / command success
+- `1` = verification `invalid` or malformed input/runtime failure
+- `2` = usage/flag parsing error
+- `3` = verification `inconclusive`
+
+## PDP / PEP Boundary
+
+The CLI does not replace a runtime PEP. It is intended for deterministic protocol artifact handling, validation, and local operational tooling around the OxDeAI PDP/PEP model.

package/dist/cli.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cli.test.js

@@ -0,0 +1,274 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { mkdtemp, readFile, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { PolicyEngine, encodeCanonicalState, encodeEnvelope } from "@oxdeai/core";
+import { runCli } from "./main.js";
+function baseState() {
+    return {
+        policy_version: "v1",
+        period_id: "2026-03",
+        kill_switch: { global: false, agents: {} },
+        allowlists: {
+            action_types: ["PROVISION"],
+            assets: ["a100"],
+            targets: ["us-east-1"]
+        },
+        budget: {
+            budget_limit: { "agent-1": 1000000n },
+            spent_in_period: { "agent-1": 0n }
+        },
+        max_amount_per_action: { "agent-1": 1000000n },
+        velocity: { config: { window_seconds: 60, max_actions: 10 }, counters: {} },
+        replay: { window_seconds: 3600, max_nonces_per_agent: 256, nonces: {} },
+        concurrency: { max_concurrent: { "agent-1": 4 }, active: {}, active_auths: {} },
+        recursion: { max_depth: { "agent-1": 5 } },
+        tool_limits: { window_seconds: 60, max_calls: { "agent-1": 100 }, max_calls_by_tool: {}, calls: {} }
+    };
+}
+function jsonWithBigInt(v) {
+    return JSON.stringify(v, (_k, x) => (typeof x === "bigint" ? `${x.toString()}n` : x), 2);
+}
+async function setup() {
+    const dir = await mkdtemp(join(tmpdir(), "oxdeai-cli-test-"));
+    const policyFile = join(dir, "policy.json");
+    const stateFile = join(dir, "state.json");
+    const auditFile = join(dir, "audit.ndjson");
+    await writeFile(policyFile, jsonWithBigInt(baseState()), "utf8");
+    return { dir, policyFile, stateFile, auditFile };
+}
+function ioCapture(now = 1_770_000_000) {
+    const out = [];
+    const err = [];
+    return {
+        out,
+        err,
+        io: {
+            out: (line) => out.push(line),
+            err: (line) => err.push(line),
+            now: () => now
+        }
+    };
+}
+test("init writes state and clears audit", async () => {
+    const { policyFile, stateFile, auditFile } = await setup();
+    await writeFile(auditFile, "{\"junk\":1}\n", "utf8");
+    const cap = ioCapture();
+    const code = await runCli(["init", "--file", policyFile, "--state", stateFile, "--audit", auditFile, "--json"], cap.io);
+    assert.equal(code, 0);
+    const stateText = await readFile(stateFile, "utf8");
+    assert.ok(stateText.length > 0);
+    const auditText = await readFile(auditFile, "utf8");
+    assert.equal(auditText, "");
+    assert.equal(cap.err.length, 0);
+});
+test("launch allow path mutates state and appends audit", async () => {
+    const { policyFile, stateFile, auditFile } = await setup();
+    const cap = ioCapture();
+    await runCli(["init", "--file", policyFile, "--state", stateFile, "--audit", auditFile], cap.io);
+    const code = await runCli(["launch", "PROVISION", "320", "us-east-1", "--agent", "agent-1", "--nonce", "42", "--state", stateFile, "--audit", auditFile, "--json"], cap.io);
+    assert.equal(code, 0);
+    const latest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(latest.decision, "ALLOW");
+    assert.equal(typeof latest.authorization_id, "string");
+    const stateText = await readFile(stateFile, "utf8");
+    assert.ok(stateText.includes("\"spent_in_period\":{\"agent-1\":\"320n\"}"));
+    const auditText = await readFile(auditFile, "utf8");
+    assert.ok(auditText.trim().split("\n").length >= 3);
+});
+test("launch deny path keeps state unchanged", async () => {
+    const { policyFile, stateFile, auditFile } = await setup();
+    const denyState = baseState();
+    denyState.kill_switch.global = true;
+    await writeFile(policyFile, jsonWithBigInt(denyState), "utf8");
+    const cap = ioCapture();
+    await runCli(["init", "--file", policyFile, "--state", stateFile, "--audit", auditFile], cap.io);
+    const before = await readFile(stateFile, "utf8");
+    const code = await runCli(["launch", "PROVISION", "320", "us-east-1", "--agent", "agent-1", "--nonce", "77", "--state", stateFile, "--audit", auditFile, "--json"], cap.io);
+    assert.equal(code, 0);
+    const latest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(latest.decision, "DENY");
+    const after = await readFile(stateFile, "utf8");
+    assert.equal(after, before);
+});
+test("audit command reports verify=true on valid chain", async () => {
+    const { policyFile, stateFile, auditFile } = await setup();
+    const cap = ioCapture();
+    await runCli(["init", "--file", policyFile, "--state", stateFile, "--audit", auditFile], cap.io);
+    await runCli(["launch", "PROVISION", "100", "us-east-1", "--agent", "agent-1", "--nonce", "9", "--state", stateFile, "--audit", auditFile], cap.io);
+    const code = await runCli(["audit", "--audit", auditFile, "--json"], cap.io);
+    assert.equal(code, 0);
+    const latest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(latest.verify, true);
+    assert.equal(Array.isArray(latest.events), true);
+});
+test("state command prints valid json state", async () => {
+    const { policyFile, stateFile, auditFile } = await setup();
+    const cap = ioCapture();
+    await runCli(["init", "--file", policyFile, "--state", stateFile, "--audit", auditFile], cap.io);
+    const code = await runCli(["state", "--state", stateFile, "--json"], cap.io);
+    assert.equal(code, 0);
+    const latest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(latest.policy_version, "v1");
+    assert.ok(latest.velocity?.config);
+});
+test("verify-audit returns strict result for current audit file", async () => {
+    const { policyFile, stateFile, auditFile } = await setup();
+    const cap = ioCapture();
+    await runCli(["init", "--file", policyFile, "--state", stateFile, "--audit", auditFile], cap.io);
+    await runCli(["launch", "PROVISION", "100", "us-east-1", "--agent", "agent-1", "--nonce", "11", "--state", stateFile, "--audit", auditFile], cap.io);
+    const code = await runCli(["verify-audit", "--audit", auditFile, "--json"], cap.io);
+    assert.equal(code, 3);
+    const latest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(typeof latest.status, "string");
+    assert.equal(latest.status, "inconclusive");
+    assert.equal(Array.isArray(latest.violations), true);
+});
+test("snapshot-hash returns policyId and stateHash", async () => {
+    const { policyFile, stateFile, auditFile } = await setup();
+    const cap = ioCapture();
+    await runCli(["init", "--file", policyFile, "--state", stateFile, "--audit", auditFile], cap.io);
+    const code = await runCli(["snapshot-hash", "--state", stateFile, "--json"], cap.io);
+    assert.equal(code, 0);
+    const latest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(typeof latest.policyId, "string");
+    assert.equal(typeof latest.stateHash, "string");
+    assert.equal(latest.status, "ok");
+});
+test("verify-envelope reads file and verifies", async () => {
+    const { policyFile, stateFile, auditFile, dir } = await setup();
+    const cap = ioCapture(1_770_000_123);
+    await runCli(["init", "--file", policyFile, "--state", stateFile, "--audit", auditFile], cap.io);
+    await runCli(["launch", "PROVISION", "100", "us-east-1", "--agent", "agent-1", "--nonce", "12", "--state", stateFile, "--audit", auditFile], cap.io);
+    const state = JSON.parse(await readFile(stateFile, "utf8"), (_k, v) => {
+        if (typeof v === "string" && /^-?\d+n$/.test(v))
+            return BigInt(v.slice(0, -1));
+        return v;
+    });
+    const events = (await readFile(auditFile, "utf8"))
+        .split("\n")
+        .map((l) => l.trim())
+        .filter(Boolean)
+        .map((line) => JSON.parse(line));
+    const engine = new PolicyEngine({
+        policy_version: state.policy_version,
+        engine_secret: "dev-secret",
+        authorization_ttl_seconds: 120
+    });
+    const snapshotBytes = encodeCanonicalState(engine.exportState(state));
+    const envelope = encodeEnvelope({ formatVersion: 1, snapshot: snapshotBytes, events });
+    const envelopePath = join(dir, "envelope.bin");
+    await writeFile(envelopePath, Buffer.from(envelope));
+    const code = await runCli(["verify-envelope", envelopePath, "--json"], cap.io);
+    assert.equal(code, 3);
+    const latest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(typeof latest.status, "string");
+    assert.equal(latest.status, "inconclusive");
+    assert.equal(Array.isArray(latest.violations), true);
+});
+test("make-envelope writes envelope file that verify-envelope accepts", async () => {
+    const { policyFile, stateFile, auditFile, dir } = await setup();
+    const cap = ioCapture(1_770_000_222);
+    await runCli(["init", "--file", policyFile, "--state", stateFile, "--audit", auditFile], cap.io);
+    await runCli(["launch", "PROVISION", "100", "us-east-1", "--agent", "agent-1", "--nonce", "13", "--state", stateFile, "--audit", auditFile], cap.io);
+    const envelopePath = join(dir, "made-envelope.bin");
+    const makeCode = await runCli(["make-envelope", "--out", envelopePath, "--state", stateFile, "--audit", auditFile, "--json"], cap.io);
+    assert.equal(makeCode, 0);
+    const verifyCode = await runCli(["verify-envelope", envelopePath, "--json"], cap.io);
+    assert.equal(verifyCode, 3);
+    const latest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(typeof latest.status, "string");
+    assert.equal(latest.status, "inconclusive");
+    assert.equal(Array.isArray(latest.violations), true);
+});
+test("build emits snapshot verification payload and optional file", async () => {
+    const { policyFile, stateFile, auditFile, dir } = await setup();
+    const cap = ioCapture();
+    await runCli(["init", "--file", policyFile, "--state", stateFile, "--audit", auditFile], cap.io);
+    const snapshotOut = join(dir, "snapshot.bin");
+    const code = await runCli(["build", "--state", stateFile, "--out", snapshotOut, "--json"], cap.io);
+    assert.equal(code, 0);
+    const latest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(latest.status, "ok");
+    assert.equal(typeof latest.policyId, "string");
+    assert.equal(typeof latest.stateHash, "string");
+    const bytes = await readFile(snapshotOut);
+    assert.ok(bytes.length > 0);
+});
+test("verify supports --kind audit from file and replay command is clear stub", async () => {
+    const { policyFile, stateFile, auditFile } = await setup();
+    const cap = ioCapture();
+    await runCli(["init", "--file", policyFile, "--state", stateFile, "--audit", auditFile], cap.io);
+    await runCli(["launch", "PROVISION", "100", "us-east-1", "--agent", "agent-1", "--nonce", "20", "--state", stateFile, "--audit", auditFile], cap.io);
+    const verifyCode = await runCli(["verify", "--kind", "audit", "--file", auditFile, "--mode", "strict", "--json"], cap.io);
+    assert.equal(verifyCode, 3); // strict mode without checkpoint => inconclusive
+    const verifyLatest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(verifyLatest.status, "inconclusive");
+    const replayCode = await runCli(["replay", "--json"], cap.io);
+    assert.equal(replayCode, 0);
+    const replayLatest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(replayLatest.status, "unsupported");
+});
+test("verify supports --kind authorization from file", async () => {
+    const { policyFile, stateFile, auditFile, dir } = await setup();
+    const cap = ioCapture(1_770_000_500);
+    await runCli(["init", "--file", policyFile, "--state", stateFile, "--audit", auditFile], cap.io);
+    await runCli(["launch", "PROVISION", "100", "us-east-1", "--agent", "agent-1", "--nonce", "21", "--state", stateFile, "--audit", auditFile], cap.io);
+    const state = JSON.parse(await readFile(stateFile, "utf8"), (_k, v) => {
+        if (typeof v === "string" && /^-?\d+n$/.test(v))
+            return BigInt(v.slice(0, -1));
+        return v;
+    });
+    const engine = new PolicyEngine({
+        policy_version: state.policy_version,
+        engine_secret: "dev-secret",
+        authorization_ttl_seconds: 120
+    });
+    const intent = {
+        intent_id: "intent:agent-1:22",
+        type: "EXECUTE",
+        agent_id: "agent-1",
+        action_type: "PROVISION",
+        amount: 100n,
+        asset: "a100",
+        target: "us-east-1",
+        timestamp: cap.io.now(),
+        metadata_hash: "0x" + "0".repeat(64),
+        nonce: 22n,
+        signature: "cli-signature-placeholder"
+    };
+    const evaluated = engine.evaluatePure(intent, state, { mode: "fail-fast" });
+    assert.equal(evaluated.decision, "ALLOW");
+    const authPath = join(dir, "authorization.json");
+    await writeFile(authPath, jsonWithBigInt(evaluated.authorization), "utf8");
+    const code = await runCli([
+        "verify",
+        "--kind",
+        "authorization",
+        "--file",
+        authPath,
+        "--expected-issuer",
+        evaluated.authorization.issuer,
+        "--expected-audience",
+        evaluated.authorization.audience,
+        "--json"
+    ], cap.io);
+    assert.equal(code, 0);
+    const latest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(latest.status, "ok");
+    assert.equal(Array.isArray(latest.violations), true);
+    assert.equal(latest.violations.length, 0);
+});
+test("verify fails closed on malformed authorization payload", async () => {
+    const { dir } = await setup();
+    const cap = ioCapture();
+    const malformedPath = join(dir, "bad-auth.json");
+    await writeFile(malformedPath, "{\"not\":\"authorization\"}", "utf8");
+    const code = await runCli(["verify", "--kind", "authorization", "--file", malformedPath, "--json"], cap.io);
+    assert.equal(code, 1);
+    const latest = JSON.parse(cap.out[cap.out.length - 1] ?? "{}");
+    assert.equal(latest.status, "invalid");
+    assert.ok((latest.violations ?? []).length > 0);
+});
+//# sourceMappingURL=cli.test.js.map

package/dist/cli.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.test.js","sourceRoot":"","sources":["../src/cli.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGlF,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC,SAAS,SAAS;IAChB,OAAO;QACL,cAAc,EAAE,IAAI;QACpB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1C,UAAU,EAAE;YACV,YAAY,EAAE,CAAC,WAAW,CAAC;YAC3B,MAAM,EAAE,CAAC,MAAM,CAAC;YAChB,OAAO,EAAE,CAAC,WAAW,CAAC;SACvB;QACD,MAAM,EAAE;YACN,YAAY,EAAE,EAAE,SAAS,EAAE,QAAU,EAAE;YACvC,eAAe,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;SACnC;QACD,qBAAqB,EAAE,EAAE,SAAS,EAAE,QAAU,EAAE;QAChD,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC3E,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;QACvE,WAAW,EAAE,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC/E,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;QAC1C,WAAW,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;KACrG,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,CAAU;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,KAAK;IAClB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IACjE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,SAAS,CAAC,GAAG,GAAG,aAAa;IACpC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,OAAO;QACL,GAAG;QACH,GAAG;QACH,EAAE,EAAE;YACF,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YACrC,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YACrC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;SACf;KACF,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;IACpD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAC3D,MAAM,SAAS,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACxH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEtB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;IACnE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAEjG,MAAM,IAAI,GAAG,MAAM,MAAM,CACvB,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EACxI,GAAG,CAAC,EAAE,CACP,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;IACxD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAC3D,MAAM,SAAS,GAAG,SAAS,EAAE,CAAC;IAC9B,SAAS,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC;IACpC,MAAM,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEjD,MAAM,IAAI,GAAG,MAAM,MAAM,CACvB,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EACxI,GAAG,CAAC,EAAE,CACP,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IAClE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACjG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAEpJ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;IACvD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAEjG,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IAC3E,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACjG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAErJ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACpF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;IAC9D,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAEjG,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;IACzD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IACrC,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACjG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAErJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;QACpE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,OAAO,CAAC,CAAC;IACX,CAAC,CAAU,CAAC;IACZ,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;SAC/C,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,YAAY;QAC3B,yBAAyB,EAAE,GAAG;KAC/B,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;IACvF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,iBAAiB,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;IACjF,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IACrC,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACjG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAErJ,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,CAAC,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EAC9F,GAAG,CAAC,EAAE,CACP,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAE1B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,CAAC,iBAAiB,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAEjG,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACnG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACjG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAErJ,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1H,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,iDAAiD;IAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAElD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;IAChE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IACrC,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACjG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAErJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;QACpE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,OAAO,CAAC,CAAC;IACX,CAAC,CAAU,CAAC;IAEZ,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,YAAY;QAC3B,yBAAyB,EAAE,GAAG;KAC/B,CAAC,CAAC;IACH,MAAM,MAAM,GAAG;QACb,SAAS,EAAE,mBAAmB;QAC9B,IAAI,EAAE,SAAkB;QACxB,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,WAAoB;QACjC,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE;QACvB,aAAa,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,KAAK,EAAE,GAAG;QACV,SAAS,EAAE,2BAA2B;KACvC,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5E,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE1C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACjD,MAAM,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAE3E,MAAM,IAAI,GAAG,MAAM,MAAM,CACvB;QACE,QAAQ;QACR,QAAQ;QACR,eAAe;QACf,QAAQ;QACR,QAAQ;QACR,mBAAmB;QACnB,SAAS,CAAC,aAAa,CAAC,MAAM;QAC9B,qBAAqB;QACrB,SAAS,CAAC,aAAa,CAAC,QAAQ;QAChC,QAAQ;KACT,EACD,GAAG,CAAC,EAAE,CACP,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;IACxE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACjD,MAAM,SAAS,CAAC,aAAa,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;IAEtE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5G,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC"}

package/dist/main.d.ts

@@ -0,0 +1,7 @@
+type Io = {
+    out: (line: string) => void;
+    err: (line: string) => void;
+    now: () => number;
+};
+export declare function runCli(argv: string[], io?: Partial<Io>): Promise<number>;
+export {};

package/dist/main.js

@@ -0,0 +1,552 @@
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { pathToFileURL } from "node:url";
+import { PolicyEngine, encodeCanonicalState, encodeEnvelope, verifyAuditEvents, verifyAuthorization, verifyEnvelope, verifySnapshot } from "@oxdeai/core";
+import { appendAuditEvents, normalizeStateBigInts, readAuditEvents, readStateFile, resetAuditFile, writeStateFile } from "./store.js";
+const DEFAULT_STATE_PATH = ".oxdeai/state.json";
+const DEFAULT_AUDIT_PATH = ".oxdeai/audit.ndjson";
+const ACTION_TYPES = new Set(["PAYMENT", "PURCHASE", "PROVISION", "ONCHAIN_TX"]);
+const EXIT_CODE_OK = 0;
+const EXIT_CODE_INVALID = 1;
+const EXIT_CODE_USAGE = 2;
+const EXIT_CODE_INCONCLUSIVE = 3;
+function usage() {
+    return `oxdeai CLI
+
+Usage:
+  oxdeai build [--state <state.json>] [--out <snapshot.bin>] [--json]
+  oxdeai verify --kind <snapshot|audit|envelope|authorization> [--file <path>|-] [--mode <strict|best-effort>] [--expected-policy-id <hex>] [--expected-issuer <id>] [--expected-audience <id>] [--consumed-auth-id <id>] [--trusted-keyset <keyset.json>] [--require-signature] [--legacy-hmac-secret <secret>] [--json]
+  oxdeai replay [--json]
+  oxdeai init --file <policy.json> [--state <state.json>] [--audit <audit.ndjson>] [--json]
+  oxdeai launch <actionType> <amount> <target> --agent <id> --nonce <n> [--asset <asset>] [--state <state.json>] [--audit <audit.ndjson>] [--json]
+  oxdeai make-envelope --out <file> [--state <state.json>] [--audit <audit.ndjson>] [--json]
+  oxdeai verify-envelope <file> [--json]
+  oxdeai verify-audit [--audit <audit.ndjson>] [--json]
+  oxdeai snapshot-hash [--state <state.json>] [--json]
+  oxdeai audit [--audit <audit.ndjson>] [--json]
+  oxdeai state [--state <state.json>] [--json]`;
+}
+function parseFlags(argv) {
+    const args = [];
+    const flags = {};
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === "--")
+            continue;
+        if (!a.startsWith("--")) {
+            args.push(a);
+            continue;
+        }
+        if (a === "--json") {
+            flags.json = true;
+            continue;
+        }
+        const next = () => {
+            const v = argv[++i];
+            if (!v)
+                throw new Error(`Missing value for ${a}`);
+            return v;
+        };
+        if (a === "--state") {
+            flags.state = next();
+            continue;
+        }
+        if (a === "--audit") {
+            flags.audit = next();
+            continue;
+        }
+        if (a === "--file") {
+            flags.file = next();
+            continue;
+        }
+        if (a === "--out") {
+            flags.out = next();
+            continue;
+        }
+        if (a === "--agent") {
+            flags.agent = next();
+            continue;
+        }
+        if (a === "--nonce") {
+            flags.nonce = next();
+            continue;
+        }
+        if (a === "--asset") {
+            flags.asset = next();
+            continue;
+        }
+        if (a === "--kind") {
+            const v = next();
+            if (v !== "snapshot" && v !== "audit" && v !== "envelope" && v !== "authorization") {
+                throw new Error("Invalid --kind value (must be snapshot|audit|envelope|authorization)");
+            }
+            flags.kind = v;
+            continue;
+        }
+        if (a === "--mode") {
+            const v = next();
+            if (v !== "strict" && v !== "best-effort") {
+                throw new Error("Invalid --mode value (must be strict|best-effort)");
+            }
+            flags.mode = v;
+            continue;
+        }
+        if (a === "--expected-policy-id") {
+            flags.expectedPolicyId = next();
+            continue;
+        }
+        if (a === "--expected-issuer") {
+            flags.expectedIssuer = next();
+            continue;
+        }
+        if (a === "--expected-audience") {
+            flags.expectedAudience = next();
+            continue;
+        }
+        if (a === "--consumed-auth-id") {
+            flags.consumedAuthId = next();
+            continue;
+        }
+        if (a === "--trusted-keyset") {
+            flags.trustedKeyset = next();
+            continue;
+        }
+        if (a === "--require-signature") {
+            flags.requireSignatureVerification = true;
+            continue;
+        }
+        if (a === "--legacy-hmac-secret") {
+            flags.legacyHmacSecret = next();
+            continue;
+        }
+        if (a.startsWith("--state=")) {
+            flags.state = a.slice(8);
+            continue;
+        }
+        if (a.startsWith("--audit=")) {
+            flags.audit = a.slice(8);
+            continue;
+        }
+        if (a.startsWith("--file=")) {
+            flags.file = a.slice(7);
+            continue;
+        }
+        if (a.startsWith("--out=")) {
+            flags.out = a.slice(6);
+            continue;
+        }
+        if (a.startsWith("--agent=")) {
+            flags.agent = a.slice(8);
+            continue;
+        }
+        if (a.startsWith("--nonce=")) {
+            flags.nonce = a.slice(8);
+            continue;
+        }
+        if (a.startsWith("--asset=")) {
+            flags.asset = a.slice(8);
+            continue;
+        }
+        if (a.startsWith("--kind=")) {
+            const v = a.slice(7);
+            if (v !== "snapshot" && v !== "audit" && v !== "envelope" && v !== "authorization") {
+                throw new Error("Invalid --kind value (must be snapshot|audit|envelope|authorization)");
+            }
+            flags.kind = v;
+            continue;
+        }
+        if (a.startsWith("--mode=")) {
+            const v = a.slice(7);
+            if (v !== "strict" && v !== "best-effort") {
+                throw new Error("Invalid --mode value (must be strict|best-effort)");
+            }
+            flags.mode = v;
+            continue;
+        }
+        if (a.startsWith("--expected-policy-id=")) {
+            flags.expectedPolicyId = a.slice("--expected-policy-id=".length);
+            continue;
+        }
+        if (a.startsWith("--expected-issuer=")) {
+            flags.expectedIssuer = a.slice("--expected-issuer=".length);
+            continue;
+        }
+        if (a.startsWith("--expected-audience=")) {
+            flags.expectedAudience = a.slice("--expected-audience=".length);
+            continue;
+        }
+        if (a.startsWith("--consumed-auth-id=")) {
+            flags.consumedAuthId = a.slice("--consumed-auth-id=".length);
+            continue;
+        }
+        if (a.startsWith("--trusted-keyset=")) {
+            flags.trustedKeyset = a.slice("--trusted-keyset=".length);
+            continue;
+        }
+        if (a.startsWith("--legacy-hmac-secret=")) {
+            flags.legacyHmacSecret = a.slice("--legacy-hmac-secret=".length);
+            continue;
+        }
+        throw new Error(`Unknown flag: ${a}`);
+    }
+    return { args, flags };
+}
+function toJson(value) {
+    return JSON.stringify(value, (_k, v) => (typeof v === "bigint" ? `${v.toString()}n` : v), 2);
+}
+function parseBigIntArg(input) {
+    const s = input.endsWith("n") ? input.slice(0, -1) : input;
+    return BigInt(s);
+}
+async function readStdinBytes() {
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    return Uint8Array.from(Buffer.concat(chunks));
+}
+function parseAuditInputBytes(bytes) {
+    const text = new TextDecoder().decode(bytes).trim();
+    if (text.length === 0)
+        return [];
+    if (text.startsWith("[")) {
+        const parsed = JSON.parse(text);
+        if (!Array.isArray(parsed))
+            throw new Error("audit payload must be a JSON array or NDJSON");
+        return parsed;
+    }
+    return text
+        .split("\n")
+        .map((line) => line.trim())
+        .filter(Boolean)
+        .map((line) => JSON.parse(line));
+}
+function parseJsonObjectBytes(bytes, label) {
+    const text = new TextDecoder().decode(bytes).trim();
+    if (text.length === 0)
+        throw new Error(`${label} payload is empty`);
+    const parsed = JSON.parse(text);
+    if (parsed === null || Array.isArray(parsed) || typeof parsed !== "object") {
+        throw new Error(`${label} payload must be a JSON object`);
+    }
+    return parsed;
+}
+function verificationExitCode(result) {
+    if (result.status === "ok")
+        return EXIT_CODE_OK;
+    if (result.status === "inconclusive")
+        return EXIT_CODE_INCONCLUSIVE;
+    return EXIT_CODE_INVALID;
+}
+function writePayload(out, flags, payload, humanSummary) {
+    if (flags.json) {
+        out(toJson(payload));
+        return;
+    }
+    if (humanSummary) {
+        out(humanSummary);
+        return;
+    }
+    out(toJson(payload));
+}
+function verificationSummary(kind, result) {
+    const label = kind ?? "artifact";
+    const lines = [`${label}: ${result.status.toUpperCase()}`];
+    if (result.policyId)
+        lines.push(`policyId: ${result.policyId}`);
+    if (result.stateHash)
+        lines.push(`stateHash: ${result.stateHash}`);
+    if (result.auditHeadHash)
+        lines.push(`auditHeadHash: ${result.auditHeadHash}`);
+    if (result.violations.length === 0) {
+        lines.push("violations: none");
+    }
+    else {
+        lines.push(`violations: ${result.violations.map((v) => v.code).join(", ")}`);
+    }
+    return lines.join("\n");
+}
+async function readTrustedKeySet(path) {
+    if (!path)
+        return undefined;
+    const text = await readFile(path, "utf8");
+    const parsed = JSON.parse(text);
+    if (Array.isArray(parsed))
+        return parsed;
+    if (parsed && typeof parsed === "object")
+        return [parsed];
+    throw new Error("trusted keyset payload must be a JSON object or array");
+}
+function buildValidationIntent(state) {
+    const agent = Object.keys(state.budget.budget_limit)[0] ?? "agent";
+    const action_type = state.allowlists.action_types?.[0] ?? "PAYMENT";
+    const target = state.allowlists.targets?.[0] ?? "target:probe";
+    return {
+        intent_id: "validate-intent",
+        type: "EXECUTE",
+        agent_id: agent,
+        action_type,
+        amount: 0n,
+        asset: state.allowlists.assets?.[0],
+        target,
+        timestamp: 0,
+        metadata_hash: "0x" + "0".repeat(64),
+        nonce: 0n,
+        signature: "validate-signature"
+    };
+}
+function validateStateStructure(state) {
+    const engine = new PolicyEngine({
+        policy_version: state.policy_version,
+        engine_secret: "validate-secret",
+        authorization_ttl_seconds: 1
+    });
+    const probe = buildValidationIntent(state);
+    const out = engine.evaluatePure(probe, structuredClone(state), { mode: "fail-fast" });
+    if (out.decision === "DENY" && out.reasons.includes("STATE_INVALID")) {
+        throw new Error("STATE_INVALID");
+    }
+}
+function buildEngine(state) {
+    const secret = process.env["OXDEAI_ENGINE_SECRET"] ?? "dev-secret";
+    const ttl = Number(process.env["OXDEAI_AUTH_TTL_SECONDS"] ?? "120");
+    return new PolicyEngine({
+        policy_version: state.policy_version,
+        engine_secret: secret,
+        authorization_ttl_seconds: Number.isFinite(ttl) ? ttl : 120
+    });
+}
+export async function runCli(argv, io) {
+    const out = io?.out ?? ((line) => console.log(line));
+    const err = io?.err ?? ((line) => console.error(line));
+    const now = io?.now ?? (() => Math.floor(Date.now() / 1000));
+    let parsed;
+    try {
+        parsed = parseFlags(argv);
+    }
+    catch (e) {
+        err(e.message);
+        err(usage());
+        return EXIT_CODE_USAGE;
+    }
+    const { args, flags } = parsed;
+    const cmd = args[0];
+    if (!cmd) {
+        err(usage());
+        return EXIT_CODE_USAGE;
+    }
+    const statePath = flags.state ?? DEFAULT_STATE_PATH;
+    const auditPath = flags.audit ?? DEFAULT_AUDIT_PATH;
+    try {
+        if (cmd === "build") {
+            const state = await readStateFile(statePath);
+            const engine = buildEngine(state);
+            const snapshot = engine.exportState(state);
+            const snapshotBytes = encodeCanonicalState(snapshot);
+            const verified = verifySnapshot(snapshotBytes, flags.expectedPolicyId ? { expectedPolicyId: flags.expectedPolicyId } : undefined);
+            if (flags.out) {
+                await mkdir(dirname(flags.out), { recursive: true });
+                await writeFile(flags.out, Buffer.from(snapshotBytes));
+            }
+            const payload = {
+                ok: verified.ok,
+                status: verified.status,
+                policyId: snapshot.policyId,
+                stateHash: verified.stateHash,
+                violations: verified.violations,
+                snapshotBytes: snapshotBytes.length,
+                out: flags.out
+            };
+            writePayload(out, flags, payload, `build: ${verified.status.toUpperCase()}\npolicyId: ${snapshot.policyId}\nstateHash: ${verified.stateHash ?? "unknown"}${flags.out ? `\nout: ${flags.out}` : ""}`);
+            return verificationExitCode(verified);
+        }
+        if (cmd === "verify") {
+            if (!flags.kind)
+                throw new Error("Usage: verify --kind <snapshot|audit|envelope|authorization> [--file <path>|-]");
+            const mode = flags.mode ?? "strict";
+            const fromFile = flags.file && flags.file !== "-";
+            const bytes = fromFile
+                ? Uint8Array.from(await readFile(flags.file))
+                : await readStdinBytes();
+            if (flags.kind === "snapshot") {
+                const res = verifySnapshot(bytes, flags.expectedPolicyId ? { expectedPolicyId: flags.expectedPolicyId } : undefined);
+                writePayload(out, flags, res, verificationSummary(flags.kind, res));
+                return verificationExitCode(res);
+            }
+            if (flags.kind === "envelope") {
+                const trustedKeySets = await readTrustedKeySet(flags.trustedKeyset);
+                const res = verifyEnvelope(bytes, {
+                    mode,
+                    expectedPolicyId: flags.expectedPolicyId,
+                    expectedIssuer: flags.expectedIssuer,
+                    trustedKeySets,
+                    requireSignatureVerification: flags.requireSignatureVerification
+                });
+                writePayload(out, flags, res, verificationSummary(flags.kind, res));
+                return verificationExitCode(res);
+            }
+            if (flags.kind === "authorization") {
+                const trustedKeySets = await readTrustedKeySet(flags.trustedKeyset);
+                const auth = parseJsonObjectBytes(bytes, "authorization");
+                const res = verifyAuthorization(auth, {
+                    now: now(),
+                    expectedIssuer: flags.expectedIssuer,
+                    expectedAudience: flags.expectedAudience,
+                    expectedPolicyId: flags.expectedPolicyId,
+                    consumedAuthIds: flags.consumedAuthId ? [flags.consumedAuthId] : [],
+                    trustedKeySets,
+                    requireSignatureVerification: flags.requireSignatureVerification,
+                    legacyHmacSecret: flags.legacyHmacSecret
+                });
+                writePayload(out, flags, res, verificationSummary(flags.kind, res));
+                return verificationExitCode(res);
+            }
+            const events = parseAuditInputBytes(bytes);
+            const res = verifyAuditEvents(events, {
+                mode,
+                expectedPolicyId: flags.expectedPolicyId
+            });
+            writePayload(out, flags, res, verificationSummary(flags.kind, res));
+            return verificationExitCode(res);
+        }
+        if (cmd === "replay") {
+            const payload = {
+                ok: false,
+                status: "unsupported",
+                message: "Replay verifier is a protocol-aware stub in @oxdeai/cli v0.1.x. Use verify --kind audit for deterministic offline chain checks."
+            };
+            writePayload(out, flags, payload, `${payload.status.toUpperCase()}: ${payload.message}`);
+            return EXIT_CODE_OK;
+        }
+        if (cmd === "init") {
+            if (!flags.file)
+                throw new Error("Missing --file <policy.json>");
+            const text = await readFile(flags.file, "utf8");
+            const state = normalizeStateBigInts(JSON.parse(text));
+            validateStateStructure(state);
+            await writeStateFile(statePath, state);
+            await resetAuditFile(auditPath);
+            writePayload(out, flags, { ok: true }, "OK");
+            return EXIT_CODE_OK;
+        }
+        if (cmd === "state") {
+            const state = await readStateFile(statePath);
+            writePayload(out, flags, state);
+            return EXIT_CODE_OK;
+        }
+        if (cmd === "audit") {
+            const events = await readAuditEvents(auditPath);
+            const verified = verifyAuditEvents(events, { mode: "best-effort" });
+            const payload = {
+                headHash: verified.auditHeadHash && verified.auditHeadHash.length > 0 ? verified.auditHeadHash : "GENESIS",
+                verify: verified.ok,
+                events
+            };
+            writePayload(out, flags, payload);
+            return EXIT_CODE_OK;
+        }
+        if (cmd === "verify-audit") {
+            const events = await readAuditEvents(auditPath);
+            const verified = verifyAuditEvents(events, { mode: "strict" });
+            writePayload(out, flags, verified, verificationSummary("audit", verified));
+            return verificationExitCode(verified);
+        }
+        if (cmd === "verify-envelope") {
+            const file = args[1] ?? flags.file;
+            if (!file)
+                throw new Error("Usage: verify-envelope <file>");
+            const bytes = Uint8Array.from(await readFile(file));
+            const verified = verifyEnvelope(bytes, { mode: "strict" });
+            writePayload(out, flags, verified, verificationSummary("envelope", verified));
+            return verificationExitCode(verified);
+        }
+        if (cmd === "make-envelope") {
+            if (!flags.out)
+                throw new Error("Usage: make-envelope --out <file>");
+            const state = await readStateFile(statePath);
+            const events = await readAuditEvents(auditPath);
+            const engine = buildEngine(state);
+            const snapshotBytes = encodeCanonicalState(engine.exportState(state));
+            const envelope = encodeEnvelope({
+                formatVersion: 1,
+                snapshot: snapshotBytes,
+                events: events
+            });
+            await mkdir(dirname(flags.out), { recursive: true });
+            await writeFile(flags.out, Buffer.from(envelope));
+            const payload = { ok: true, file: flags.out };
+            writePayload(out, flags, payload, `OK: ${flags.out}`);
+            return EXIT_CODE_OK;
+        }
+        if (cmd === "snapshot-hash") {
+            const state = await readStateFile(statePath);
+            const engine = buildEngine(state);
+            const snapshot = engine.exportState(state);
+            const bytes = encodeCanonicalState(snapshot);
+            const verified = verifySnapshot(bytes);
+            const payload = {
+                policyId: snapshot.policyId,
+                stateHash: verified.stateHash,
+                status: verified.status,
+                violations: verified.violations
+            };
+            writePayload(out, flags, payload, `snapshot: ${verified.status.toUpperCase()}\npolicyId: ${snapshot.policyId}\nstateHash: ${verified.stateHash ?? "unknown"}`);
+            return verificationExitCode(verified);
+        }
+        if (cmd === "launch") {
+            const action = args[1];
+            const amountRaw = args[2];
+            const target = args[3];
+            if (!action || !amountRaw || !target)
+                throw new Error("Usage: launch <actionType> <amount> <target> --agent <id> --nonce <n>");
+            if (!ACTION_TYPES.has(action))
+                throw new Error(`Invalid actionType: ${action}`);
+            if (!flags.agent)
+                throw new Error("Missing --agent <id>");
+            if (!flags.nonce)
+                throw new Error("Missing --nonce <n>");
+            const state = await readStateFile(statePath);
+            const engine = buildEngine(state);
+            const ts = now();
+            const intent = {
+                intent_id: `intent:${flags.agent}:${flags.nonce}`,
+                type: "EXECUTE",
+                agent_id: flags.agent,
+                action_type: action,
+                amount: parseBigIntArg(amountRaw),
+                asset: flags.asset,
+                target,
+                timestamp: ts,
+                metadata_hash: "0x" + "0".repeat(64),
+                nonce: parseBigIntArg(flags.nonce),
+                signature: "cli-signature-placeholder"
+            };
+            const outEval = engine.evaluatePure(intent, state, { mode: "fail-fast" });
+            const emitted = engine.audit.snapshot();
+            await appendAuditEvents(auditPath, emitted);
+            if (outEval.decision === "ALLOW") {
+                await writeStateFile(statePath, outEval.nextState);
+                const payload = { decision: "ALLOW", authorization_id: outEval.authorization.authorization_id, reasons: [] };
+                writePayload(out, flags, payload, `ALLOW: ${payload.authorization_id}`);
+                return EXIT_CODE_OK;
+            }
+            const payload = { decision: "DENY", reasons: outEval.reasons };
+            writePayload(out, flags, payload, `DENY: ${toJson(payload.reasons)}`);
+            return EXIT_CODE_OK;
+        }
+        err(usage());
+        return EXIT_CODE_USAGE;
+    }
+    catch (e) {
+        err(e.message);
+        return EXIT_CODE_INVALID;
+    }
+}
+async function main() {
+    const code = await runCli(process.argv.slice(2));
+    process.exit(code);
+}
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+    void main();
+}
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACf,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA4BtI,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAClD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAa,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAC7F,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC,SAAS,KAAK;IACZ,OAAO;;;;;;;;;;;;;+CAasC,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAU,EAAE,CAAC;IAExB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACzB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QAED,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;YAClB,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;QAEF,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,KAAK,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,KAAK,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YAClB,KAAK,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,KAAK,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,KAAK,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,KAAK,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,eAAe,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YAC1F,CAAC;YACD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;YACD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,sBAAsB,EAAE,CAAC;YACjC,KAAK,CAAC,gBAAgB,GAAG,IAAI,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,mBAAmB,EAAE,CAAC;YAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,qBAAqB,EAAE,CAAC;YAChC,KAAK,CAAC,gBAAgB,GAAG,IAAI,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,oBAAoB,EAAE,CAAC;YAC/B,KAAK,CAAC,cAAc,GAAG,IAAI,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,kBAAkB,EAAE,CAAC;YAC7B,KAAK,CAAC,aAAa,GAAG,IAAI,EAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,qBAAqB,EAAE,CAAC;YAChC,KAAK,CAAC,4BAA4B,GAAG,IAAI,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,sBAAsB,EAAE,CAAC;YACjC,KAAK,CAAC,gBAAgB,GAAG,IAAI,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QAED,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,eAAe,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YAC1F,CAAC;YACD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;YACD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;YACjE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACzC,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACxC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;YACjE,SAAS;QACX,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3D,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAiB;IAC7C,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC5F,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,oBAAoB,CAAI,KAAiB,EAAE,KAAa;IAC/D,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAW,CAAC;AACrB,CAAC;AAED,SAAS,oBAAoB,CAAC,MAA0B;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc;QAAE,OAAO,sBAAsB,CAAC;IACpE,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,GAA2B,EAAE,KAAY,EAAE,OAAgB,EAAE,YAAqB;IACtG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,GAAG,CAAC,YAAY,CAAC,CAAC;QAClB,OAAO;IACT,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAmB,EAAE,MAA0B;IAC1E,MAAM,KAAK,GAAG,IAAI,IAAI,UAAU,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAwB;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAkB,CAAC;IACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,MAAgB,CAAC,CAAC;IACpE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAY;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IACnE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IACpE,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC;IAC/D,OAAO;QACL,SAAS,EAAE,iBAAiB;QAC5B,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,KAAK;QACf,WAAW;QACX,MAAM,EAAE,EAAE;QACV,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM;QACN,SAAS,EAAE,CAAC;QACZ,aAAa,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,oBAAoB;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAY;IAC1C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,iBAAiB;QAChC,yBAAyB,EAAE,CAAC;KAC7B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,YAAY,CAAC;IACnE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,KAAK,CAAC,CAAC;IACpE,OAAO,IAAI,YAAY,CAAC;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,MAAM;QACrB,yBAAyB,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,EAAgB;IAC3D,MAAM,GAAG,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAE7D,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;QAC1B,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACb,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACb,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,kBAAkB,CAAC;IACpD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,kBAAkB,CAAC;IAEpD,IAAI,CAAC;QACH,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,cAAc,CAAC,aAAa,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAElI,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;gBACd,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,MAAM,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,OAAO,GAAG;gBACd,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,aAAa,EAAE,aAAa,CAAC,MAAM;gBACnC,GAAG,EAAE,KAAK,CAAC,GAAG;aACf,CAAC;YACF,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,QAAQ,CAAC,QAAQ,gBAAgB,QAAQ,CAAC,SAAS,IAAI,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrM,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;YACnH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC;YACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAClD,MAAM,KAAK,GAAG,QAAQ;gBACpB,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAc,CAAC,CAAC;gBACvD,CAAC,CAAC,MAAM,cAAc,EAAE,CAAC;YAE3B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACrH,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBACpE,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC9B,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBACpE,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,EAAE;oBAChC,IAAI;oBACJ,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;oBACxC,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,cAAc;oBACd,4BAA4B,EAAE,KAAK,CAAC,4BAA4B;iBACjE,CAAC,CAAC;gBACH,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBACpE,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACnC,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBACpE,MAAM,IAAI,GAAG,oBAAoB,CAAkB,KAAK,EAAE,eAAe,CAAC,CAAC;gBAC3E,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,EAAE;oBACpC,GAAG,EAAE,GAAG,EAAE;oBACV,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;oBACxC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;oBACxC,eAAe,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE;oBACnE,cAAc;oBACd,4BAA4B,EAAE,KAAK,CAAC,4BAA4B;oBAChE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;iBACzC,CAAC,CAAC;gBACH,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBACpE,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAiD,EAAE;gBAC/E,IAAI;gBACJ,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACzC,CAAC,CAAC;YACH,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YACpE,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG;gBACd,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,iIAAiI;aAC3I,CAAC;YACF,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACzF,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACtD,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACvC,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;YAChC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;YAC7C,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YAC7C,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAChC,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAiD,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;YAC/G,MAAM,OAAO,GAAG;gBACd,QAAQ,EAAE,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;gBAC1G,MAAM,EAAE,QAAQ,CAAC,EAAE;gBACnB,MAAM;aACP,CAAC;YACF,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAClC,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAiD,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1G,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC3E,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC;YACnC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3D,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC9E,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACrE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,cAAc,CAAC;gBAC9B,aAAa,EAAE,CAAC;gBAChB,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,MAAwD;aACjE,CAAC,CAAC;YAEH,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,MAAM,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YAC9C,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACtD,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG;gBACd,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC;YACF,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,QAAQ,CAAC,QAAQ,gBAAgB,QAAQ,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;YAC/J,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAA2B,CAAC;YACjD,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;YAC/H,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC,KAAK,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAEzD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YAEjB,MAAM,MAAM,GAAW;gBACrB,SAAS,EAAE,UAAU,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE;gBACjD,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,KAAK,CAAC,KAAK;gBACrB,WAAW,EAAE,MAAM;gBACnB,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC;gBACjC,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM;gBACN,SAAS,EAAE,EAAE;gBACb,aAAa,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;gBAClC,SAAS,EAAE,2BAA2B;aACvC,CAAC;YAEF,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAE5C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACnD,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,OAAgB,EAAE,gBAAgB,EAAE,OAAO,CAAC,aAAa,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAc,EAAE,CAAC;gBAClI,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBACxE,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,MAAe,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YACxE,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACtE,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACb,OAAO,eAAe,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,iBAAiB,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,KAAK,IAAI,EAAE,CAAC;AACd,CAAC"}

package/dist/store.d.ts

@@ -0,0 +1,8 @@
+import type { State } from "@oxdeai/core";
+export declare function canonicalStringify(value: unknown): string;
+export declare function normalizeStateBigInts(raw: unknown): State;
+export declare function readStateFile(path: string): Promise<State>;
+export declare function writeStateFile(path: string, state: State): Promise<void>;
+export declare function resetAuditFile(path: string): Promise<void>;
+export declare function appendAuditEvents(path: string, events: readonly unknown[]): Promise<void>;
+export declare function readAuditEvents(path: string): Promise<unknown[]>;

package/dist/store.js

@@ -0,0 +1,86 @@
+import { mkdir, readFile, writeFile, appendFile } from "node:fs/promises";
+import { dirname } from "node:path";
+function canonicalize(value) {
+    if (value === null)
+        return null;
+    if (typeof value === "bigint")
+        return `${value.toString()}n`;
+    if (typeof value === "boolean" || typeof value === "number" || typeof value === "string")
+        return value;
+    if (Array.isArray(value))
+        return value.map((v) => canonicalize(v));
+    if (typeof value === "object") {
+        const obj = value;
+        const out = {};
+        for (const key of Object.keys(obj).sort()) {
+            out[key] = canonicalize(obj[key]);
+        }
+        return out;
+    }
+    return String(value);
+}
+export function canonicalStringify(value) {
+    return JSON.stringify(canonicalize(value));
+}
+function parseBigIntLike(value) {
+    if (typeof value === "bigint")
+        return value;
+    if (typeof value === "number")
+        return BigInt(value);
+    if (typeof value === "string") {
+        const s = value.endsWith("n") ? value.slice(0, -1) : value;
+        return BigInt(s);
+    }
+    throw new Error("invalid bigint-like value");
+}
+function mapRecordBigInt(input) {
+    const rec = (input ?? {});
+    const out = {};
+    for (const key of Object.keys(rec))
+        out[key] = parseBigIntLike(rec[key]);
+    return out;
+}
+export function normalizeStateBigInts(raw) {
+    const s = raw;
+    return {
+        ...s,
+        budget: {
+            ...s.budget,
+            budget_limit: mapRecordBigInt(s.budget?.budget_limit),
+            spent_in_period: mapRecordBigInt(s.budget?.spent_in_period)
+        },
+        max_amount_per_action: mapRecordBigInt(s.max_amount_per_action)
+    };
+}
+export async function readStateFile(path) {
+    const txt = await readFile(path, "utf8");
+    return normalizeStateBigInts(JSON.parse(txt));
+}
+export async function writeStateFile(path, state) {
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, `${canonicalStringify(state)}\n`, "utf8");
+}
+export async function resetAuditFile(path) {
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, "", "utf8");
+}
+export async function appendAuditEvents(path, events) {
+    if (events.length === 0)
+        return;
+    await mkdir(dirname(path), { recursive: true });
+    const body = events.map((e) => canonicalStringify(e)).join("\n") + "\n";
+    await appendFile(path, body, "utf8");
+}
+export async function readAuditEvents(path) {
+    try {
+        const txt = await readFile(path, "utf8");
+        const lines = txt.split("\n").map((l) => l.trim()).filter(Boolean);
+        return lines.map((line) => JSON.parse(line));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
+        throw error;
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC;IAC7D,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,GAAG,GAA+B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3D,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;IACrD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,MAAM,CAAC,GAAG,GAAY,CAAC;IACvB,OAAO;QACL,GAAG,CAAC;QACJ,MAAM,EAAE;YACN,GAAG,CAAC,CAAC,MAAM;YACX,YAAY,EAAE,eAAe,CAAE,CAAS,CAAC,MAAM,EAAE,YAAY,CAAC;YAC9D,eAAe,EAAE,eAAe,CAAE,CAAS,CAAC,MAAM,EAAE,eAAe,CAAC;SACrE;QACD,qBAAqB,EAAE,eAAe,CAAE,CAAS,CAAC,qBAAqB,CAAC;KACzE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,KAAY;IAC7D,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAA0B;IAC9E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACxE,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,23 @@
+{
+  "name": "@oxdeai/cli",
+  "version": "0.2.0",
+  "description": "Protocol-focused CLI tooling for OxDeAI artifact build/verify/replay workflows",
+  "type": "module",
+  "bin": {
+    "oxdeai": "dist/main.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "dependencies": {
+    "@oxdeai/core": "workspace:*"
+  },
+  "scripts": {
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "build": "rm -rf dist && tsc -p tsconfig.json",
+    "start": "node dist/main.js",
+    "test": "pnpm build && node --test \"dist/**/*.test.js\""
+  }
+}