@perkos/agent-sdk 0.1.0 → 0.3.0

package/CHANGELOG.md

@@ -2,6 +2,79 @@
 
 All notable changes to `@perkos/agent-sdk` are documented here.
 
+## Unreleased
+
+No changes yet.
+
+## 0.3.0 - 2026-08-27
+
+### Added
+
+- Deterministic, request-bound x402 `PaymentIntent` construction for direct STX, sBTC, and USDCx
+  payments, including explicit payer, fee, nonce, quote fingerprint, and expiry.
+- A concurrency-safe, fail-closed payment policy with network, asset, recipient, origin, merchant,
+  per-transaction, per-session, fee, and remaining-quote-validity controls.
+- `LeatherSigner` using Stacks Connect `stx_signTransaction` with `broadcast: false`, plus a
+  `PolicySigner` callback for KMS/HSM/isolated wallet services that never supplies a private key to
+  the SDK.
+- `NayoriX402PaymentClient`, which builds a canonical unsigned transaction, reserves policy budget,
+  delegates signing, independently verifies the result, and emits the hosted facilitator body
+  without broadcasting.
+- An offline payer quickstart and integration guide for interactive wallets and automated agents.
+
+### Security
+
+- Re-verify signer output against the trusted quote and exact request, including origin signature,
+  payer, fee, nonce, amount, recipient, asset, memo, deny mode, and post-conditions.
+- Reserve concurrent amount and fee usage before signing, release on failure, and permanently count
+  valid signatures against the in-process session budget.
+- Freeze cloned quote, request, requirement, payment payload, and settlement structures to avoid
+  caller mutation across asynchronous wallet or remote-signer boundaries.
+
+## 0.2.0 - 2026-08-26
+
+### Changed
+
+- Renamed the existing GitHub repository from `PerkOS-Agent-SDK` to
+  `PerkOS-Nayori-Agent-SDK` without changing the public npm package name or its API. GitHub
+  history, releases, issues, pull requests, and legacy URL redirects remain intact.
+
+### Added
+
+- A compatibility-first `stacks-signed-tx-v1` x402 profile for direct STX, sBTC, and USDCx
+  payments, with canonical internal CAIP-19 identities and explicit `upfront` semantics.
+- Short-lived canonical request quotes and deterministic 31-byte memo fingerprints binding method,
+  URL, body digest, network, asset, exact amount, recipient, merchant, and expiry.
+- A side-effect-free signed-transaction verifier for canonical Stacks encoding, origin signature,
+  payer, network, exact STX/SIP-010 transfer templates, memo, deny mode, and exact post-conditions.
+- Deterministic quote vectors and adversarial coverage for request, requirement, network, signature,
+  asset, recipient, amount, memo, contract, function, and post-condition tampering.
+
+- Official x402 v2 payment-requirement, signature, and response header codecs through
+  `@x402/core`.
+- Strict Stacks CAIP-2, escrow-contract, asset, job, and amount validation for STX and sBTC x402
+  requirements.
+- A client scheme adapter that validates the on-chain job, reuses SDK signing and spending policy,
+  confirms escrow funding, and returns a transaction proof.
+- A safe x402 header quickstart, protocol design record, and regression coverage.
+- A Stacks x402 facilitator that independently verifies current Hiro v3 transaction/event
+  evidence, exact escrow funding and confirmation freshness before settlement.
+- An injected atomic replay-store contract, process-local implementation for demos/tests, and a
+  public fail-closed facilitator quickstart using historical mainnet evidence.
+
+### Security
+
+- Kept direct-payment verification separate from merchant authentication, signed-quote trust,
+  durable replay/idempotency, balance/nonce preflight, simulation, sponsorship, broadcast,
+  confirmation, and resource delivery; those remain mandatory hosted-facilitator boundaries.
+- Omit a final `transactionId` for origin-signed sponsored payments until the sponsor adds its
+  signature, preventing an incomplete transaction hash from being represented as a network txid.
+
+- Documented that the client proof requires independent Stacks transaction verification and replay
+  protection before a production resource server can authorize access.
+- Documented the remaining bearer-proof front-running boundary and the requirement for durable
+  shared replay storage and request binding before high-value production use.
+
 ## 0.1.0 - 2026-08-24
 
 ### Added

package/README.md

@@ -5,10 +5,18 @@ TypeScript SDK for agent identity, escrow settlement, and reputation on Stacks.
 PerkOS gives AI agents a programmable path to register, hire, fund work with STX or sBTC,
 submit deliverables, settle escrow, and build job-linked reputation.
 
-> Status: 0.1.0 developer release. Read clients, transaction builders, browser and headless signer
+This repository is the continuation of `PerkOS-xyz/PerkOS-Agent-SDK`, renamed to connect the
+public SDK with the Nayori product identity. The npm package remains `@perkos/agent-sdk` and the
+complete Git history, releases, issues, and pull requests are preserved.
+
+> Status: 0.3.0 developer release. Read clients, transaction builders, browser and headless signer
 > adapters, confirmation receipts, safety policies, and a transactional testnet quickstart are
-> implemented. x402/MCP adapters, external review, and adoption evidence remain before Milestone 2
-> completion.
+> implemented. The x402 v2 client and Stacks facilitator foundations are implemented; hosted quote
+> infrastructure now exists separately, while production settlement enablement, MCP adapters,
+> external review, and adoption evidence remain before Milestone 2 completion. The direct x402
+> profile includes request-bound pure verification
+> and payer-side intent, policy, Leather, and remote-signer foundations for STX, sBTC, and USDCx.
+> It does not broadcast transactions, and hosted production settlement remains disabled.
 
 ## Requirements
 
@@ -24,8 +32,8 @@ npm install @perkos/agent-sdk
 To develop from source:
 
 ```bash
-git clone https://github.com/PerkOS-xyz/PerkOS-Agent-SDK.git
-cd PerkOS-Agent-SDK
+git clone https://github.com/PerkOS-xyz/PerkOS-Nayori-Agent-SDK.git
+cd PerkOS-Nayori-Agent-SDK
 npm install
 npm run verify
 npm run quickstart
@@ -34,6 +42,29 @@ npm run quickstart
 The quickstart performs public read-only calls and does not require a wallet or private key.
 Set `PERKOS_NETWORK=testnet` to read the testnet deployment.
 
+The x402 foundation example is also read-only and requires no wallet. It creates and round-trips
+the official v2 `PAYMENT-REQUIRED` header for an existing PerkOS escrow job:
+
+```bash
+npm run quickstart:x402
+```
+
+The facilitator example uses public Hiro v3 transaction and event data to inspect the historical
+M1 mainnet funding transaction. It proves the verifier fails closed when that otherwise matching
+proof is outside its payment window; it does not write replay state or submit a transaction:
+
+```bash
+npm run quickstart:x402:facilitator
+```
+
+The payer quickstart creates a request-bound USDCx intent, reserves explicit spending and fee
+limits, and builds a canonical unsigned Stacks transaction. It contains no private key, performs no
+network call, and does not request a wallet signature or broadcast:
+
+```bash
+npm run quickstart:x402:payer
+```
+
 The transactional quickstart is also safe by default: it only prints a seven-step sBTC testnet
 lifecycle and its funding-policy decision.
 
@@ -184,6 +215,159 @@ await perkos.fundJob({
 The policy also limits networks and contract principals. Funding attempts without explicit
 per-transaction and per-session limits are rejected before the signer is called.
 
+## x402 v2 client foundation
+
+The SDK uses the official `@x402/core` v2 envelope and header codecs while preserving the PerkOS
+escrow lifecycle. A protected resource describes an existing, open job and its exact atomic
+budget. The scheme client validates that quote against on-chain state, funds it through the
+configured SDK signer and spending policy, waits for successful confirmation, and produces the
+`PAYMENT-SIGNATURE` payload.
+
+```ts
+import { x402Client } from "@x402/core/client";
+import {
+  PerkOSClient,
+  PerkOSX402SchemeClient,
+  createPerkOSX402PaymentRequired,
+  encodePaymentRequiredHeader,
+  toStacksX402Network,
+} from "@perkos/agent-sdk";
+
+const perkos = new PerkOSClient({
+  network: "mainnet",
+  signer,
+  spendingPolicy: {
+    allowedAssets: ["sbtc"],
+    maxPerTransaction: { sbtc: 25_000n },
+    maxPerSession: { sbtc: 50_000n },
+  },
+});
+
+const required = createPerkOSX402PaymentRequired(perkos.config, {
+  resource: {
+    url: "https://agent.example/jobs/7/fund",
+    description: "Fund job 7 escrow",
+    mimeType: "application/json",
+  },
+  asset: "sbtc",
+  jobId: 7n,
+  amount: 25_000n,
+});
+
+const network = toStacksX402Network(perkos.config.network);
+const paymentClient = new x402Client()
+  .setSpendControls({
+    allowedAssets: [
+      { network, asset: required.accepts[0].asset, maxAmountPerPayment: "25000" },
+    ],
+  })
+  .register(network, new PerkOSX402SchemeClient({ client: perkos }));
+
+const paymentPayload = await paymentClient.createPaymentPayload(required);
+console.log(encodePaymentRequiredHeader(required), paymentPayload);
+```
+
+The proof produced here is client-side confirmation evidence, not authorization by itself. Use the
+facilitator below to independently inspect the Stacks transaction, match its payment fields, apply
+a confirmation policy, and consume it through a replay store.
+
+## Direct x402 payments on Stacks
+
+The separate `stacks-signed-tx-v1` profile covers immediate pay-per-call resources. It uses the
+official x402 v2 `exact` scheme and explicit `upfront` flow because the facilitator must commit the
+signed Stacks transaction before the resource handler runs. It supports:
+
+| Asset | Wire `asset` | Canonical internal identity | Atomic unit |
+|---|---|---|---|
+| STX | `STX` | CAIP-19 `slip44:5757` | micro-STX |
+| sBTC | canonical `address.contract` | CAIP-19 SIP-010 | satoshi |
+| USDCx | canonical `address.contract` | CAIP-19 SIP-010 | 10^-6 USDCx |
+
+Create a short-lived request quote and compatibility-first requirement without a wallet or network
+call:
+
+```ts
+import {
+  createNayoriX402PaymentRequirements,
+  createNayoriX402Quote,
+} from "@perkos/agent-sdk";
+
+const quote = await createNayoriX402Quote({
+  quoteId: "quote-weather-001",
+  merchantId: "merchant-weather",
+  network: "testnet",
+  asset: "usdcx",
+  amount: 100_000n,
+  payTo: "ST...",
+  method: "POST",
+  url: "https://api.example.com/v1/weather",
+  body: JSON.stringify({ city: "Miami" }),
+  issuedAt: Math.floor(Date.now() / 1000),
+  expiresAt: Math.floor(Date.now() / 1000) + 300,
+});
+
+const requirement = await createNayoriX402PaymentRequirements(quote);
+```
+
+The quote fingerprint is placed in the 34-byte Stacks/SIP-010 memo, so the origin signature binds
+the transaction to the HTTP method, canonical URL, body digest, network, asset, exact amount,
+recipient, merchant, and expiry. `verifyNayoriX402DirectPayment` then validates the x402 envelope,
+trusted quote, actual request, canonical transaction encoding, origin signature, payer, network,
+memo, transfer template, amount, recipient, token contract, function arguments, deny mode, and
+exact post-condition.
+
+The verifier is intentionally pure: it does not authenticate the merchant, validate a quote
+signature, read balances/nonces, simulate, persist replay state, sponsor, broadcast, confirm, or
+deliver a resource. A hosted facilitator must perform those controls before using the verified
+plan. For origin-signed sponsored transactions the result omits `transactionId` until a sponsor
+adds its signature; `transactionHash` identifies only the supplied serialization.
+
+`NayoriX402PaymentClient` completes the payer side without weakening those boundaries. It creates
+an immutable `PaymentIntent`, applies recipient/origin/asset and amount/fee limits, constructs the
+canonical unsigned transfer, delegates signing to `LeatherSigner` (`broadcast: false`) or a
+`PolicySigner` backed by external custody, and verifies the signed result before returning the exact
+facilitator request body. See [`docs/X402_PAYMENTS.md`](docs/X402_PAYMENTS.md) for both integrations.
+
+Direct payments and `perkos-escrow-v1` are complementary. Use direct payments for immediate
+resources and escrow for jobs that require delivery, evaluation, payout, or reputation.
+
+## x402 v2 Stacks facilitator
+
+`PerkOSX402Facilitator` implements the official `SchemeNetworkFacilitator` interface. It reloads
+the transaction and events from Hiro, then matches the successful contract call, payer, commerce
+contract, decoded `job-funded` event, exact STX/sBTC transfer, job, amount, token, block metadata,
+confirmation depth, and payment-window freshness. Its `settle` method does not broadcast another
+transaction: for the upfront flow it atomically consumes the already-confirmed funding proof.
+
+```ts
+import { x402Facilitator } from "@x402/core/facilitator";
+import {
+  InMemoryX402ReplayStore,
+  PerkOSX402Facilitator,
+  STACKS_X402_NETWORKS,
+} from "@perkos/agent-sdk";
+
+const stacks = new PerkOSX402Facilitator({
+  config: perkos.config,
+  replayStore: new InMemoryX402ReplayStore(),
+  minConfirmations: 2,
+});
+const facilitator = new x402Facilitator().register(
+  STACKS_X402_NETWORKS.mainnet,
+  stacks
+);
+```
+
+The in-memory replay store is only for tests, examples, local development, and a single-process
+demo. Production must inject a durable shared implementation whose `consume` operation is atomic,
+such as a database unique constraint or Redis `SET NX`.
+
+The current Stacks proof is an already-public funding transaction rather than a request-bound
+off-chain authorization. Freshness and one-time consumption prevent stale reuse, but a party that
+obtains the proof before settlement could try to consume it first. Do not use this release for a
+high-value production paywall until request binding is added through a payer signature/challenge
+or facilitator-submitted signed transaction.
+
 ## Supported lifecycle
 
 - Register, update, and deactivate agents.
@@ -205,6 +389,8 @@ per-transaction and per-session limits are rejected before the signer is called.
 - `execute` refuses plans created for a different network or signer.
 - Broadcast receipts require a valid 32-byte Stacks transaction ID.
 - Automated workflows can wait for an explicit terminal confirmation before their next action.
+- x402 quotes are bound to the configured network, escrow contract, asset, job, and exact budget.
+- x402 settlement verifies current chain evidence and atomically consumes each funding txid once.
 
 This package has not yet completed the external security review required for PerkOS Milestone 2.
 Do not treat the developer release as audited software.

package/SECURITY.md

@@ -2,7 +2,7 @@
 
 ## Release status
 
-`@perkos/agent-sdk` 0.1.0 is an M2 foundation release and has not completed the external security
+`@perkos/agent-sdk` 0.2.0 is an M2 developer release and has not completed the external security
 review required for the PerkOS Stacks Endowment milestone.
 
 Do not use this developer release to control material funds without your own review. Inspect every
@@ -36,6 +36,10 @@ disclosure.
 - Strict validation and normalization of signer-returned Stacks transaction IDs.
 - Bounded, cancellable confirmation polling with explicit abort, dropped, and timeout states.
 - Network mismatch rejection in both browser and headless signer adapters.
+- Request-bound direct STX, sBTC, and USDCx payment intents with immutable economic fields.
+- Explicit direct-payment recipient, HTTPS origin, merchant, amount, fee, and session limits.
+- Concurrent payment reservations that prevent asynchronous agents from oversubscribing a budget.
+- Independent verification of every signed direct-payment transaction before facilitator submission.
 
 ## Key handling
 
@@ -51,6 +55,13 @@ secret provider when the runtime permits it.
 The SDK does not make an unsafe runtime safe. Restrict process access, rotate credentials, separate
 client/provider/evaluator identities, and use an HSM, KMS, or isolated signer for material funds.
 
+`LeatherSigner` uses `stx_signTransaction` with `broadcast: false` and requires Leather/Stacks
+Connect to return the signed transaction bytes. `PolicySigner` receives only an immutable intent and
+unsigned transaction; its application callback should call an isolated custody service. The SDK's
+in-process policy is defense in depth and can be bypassed by a malicious host application, so the
+custody service must independently authenticate callers, revalidate intent, enforce durable limits,
+and keep keys outside the agent/LLM process.
+
 ## Confirmation handling
 
 A broadcast receipt means a node accepted the transaction, not that the contract call succeeded.

package/dist/errors.d.ts

@@ -1,4 +1,4 @@
-export type PerkOSErrorCode = "CONFIG_INVALID" | "INPUT_INVALID" | "CONTRACT_ERROR" | "READ_FAILED" | "SIGNER_REQUIRED" | "SIGNER_MISMATCH" | "POLICY_DENIED" | "POLICY_LIMIT_REQUIRED" | "SIGNING_FAILED" | "BROADCAST_REJECTED" | "CONFIRMATION_FAILED";
+export type PerkOSErrorCode = "CONFIG_INVALID" | "INPUT_INVALID" | "CONTRACT_ERROR" | "READ_FAILED" | "SIGNER_REQUIRED" | "SIGNER_MISMATCH" | "POLICY_DENIED" | "POLICY_LIMIT_REQUIRED" | "SIGNING_FAILED" | "BROADCAST_REJECTED" | "CONFIRMATION_FAILED" | "X402_INVALID" | "X402_PAYMENT_FAILED";
 export interface PerkOSErrorDetails {
     readonly clarityCode?: bigint;
     readonly contract?: string;

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,eAAe,GACf,gBAAgB,GAChB,aAAa,GACb,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,uBAAuB,GACvB,gBAAgB,GAChB,oBAAoB,GACpB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,SAAS,CAAC;gBAErC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB;CAMjF"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,eAAe,GACf,gBAAgB,GAChB,aAAa,GACb,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,uBAAuB,GACvB,gBAAgB,GAChB,oBAAoB,GACpB,qBAAqB,GACrB,cAAc,GACd,qBAAqB,CAAC;AAE1B,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,SAAS,CAAC;gBAErC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB;CAMjF"}

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAqBA,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAkB;IACtB,OAAO,CAAiC;IAEjD,YAAY,IAAqB,EAAE,OAAe,EAAE,OAA4B;QAC9E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAuBA,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAkB;IACtB,OAAO,CAAiC;IAEjD,YAAY,IAAqB,EAAE,OAAe,EAAE,OAA4B;QAC9E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF"}

package/dist/index.d.ts

@@ -7,8 +7,16 @@ export { PerkOSError } from "./errors.js";
 export { DEFAULT_DEPLOYMENTS, JOB_STATUS, CLARITY_ERROR_MESSAGES } from "./constants.js";
 export { resolveConfig, toUint } from "./validation.js";
 export { normalizeTxid } from "./txid.js";
+export { PERKOS_X402_ASSET_TRANSFER_METHOD, PERKOS_X402_PAYMENT_FLOW, PERKOS_X402_SCHEME, PerkOSX402SchemeClient, STACKS_X402_NETWORKS, X402_VERSION, createPerkOSX402PaymentRequired, decodePaymentRequiredHeader, decodePaymentResponseHeader, decodePaymentSignatureHeader, encodePaymentRequiredHeader, encodePaymentResponseHeader, encodePaymentSignatureHeader, fromStacksX402Network, parsePerkOSX402PaymentPayload, parsePerkOSX402Requirement, toStacksX402Network, } from "./x402.js";
+export { HiroX402TransactionSource, InMemoryX402ReplayStore, PerkOSX402Facilitator, PerkOSX402VerificationError, perkosX402ReplayKey, } from "./x402-facilitator.js";
+export { NAYORI_X402_DIRECT_ASSETS, NAYORI_X402_DIRECT_ASSET_TRANSFER_METHOD, NAYORI_X402_DIRECT_PAYMENT_FLOW, NAYORI_X402_QUOTE_FINGERPRINT_PREFIX, NAYORI_X402_QUOTE_VERSION, NayoriX402DirectVerificationError, canonicalizeNayoriX402Quote, canonicalizeNayoriX402ResourceUrl, createNayoriX402DirectPaymentPayload, createNayoriX402PaymentRequirements, createNayoriX402Quote, createNayoriX402QuoteFingerprint, getNayoriX402Asset, hashNayoriX402RequestBody, verifyNayoriX402DirectPayment, validateNayoriX402PaymentContext, } from "./x402-direct.js";
+export { LeatherSigner, NAYORI_X402_PAYMENT_INTENT_PREFIX, NAYORI_X402_PAYMENT_INTENT_VERSION, NayoriX402PaymentClient, NayoriX402PaymentPolicy, PolicySigner, buildNayoriX402UnsignedPaymentTransaction, createNayoriX402PaymentIntent, } from "./x402-paying.js";
 export type { HeadlessSignerOptions, HeadlessTransactionExecutor, HeadlessTransactionRequest, PrivateKeyMaterial, PrivateKeyProvider, StacksConnectContractCallParams, StacksConnectRequest, StacksConnectSignerOptions, } from "./signers.js";
 export type { TrackerFetch, TransactionTrackerOptions, } from "./tracker.js";
 export type { AgentEndpoint, AgentRecord, Amount, AmountLike, AssignProviderInput, ConfirmationOptions, ConfirmedTransactionReceipt, ContractCallPlan, ContractId, CreateJobInput, FundJobInput, JobAmountInput, JobRecord, JobStatus, PaymentAsset, PerkOSConfig, PerkOSContracts, PerkOSNetwork, PerkOSOperation, PerkOSSigner, RateProviderInput, ReadOnlyCall, ReadOnlyTransport, RegisterAgentInput, ReputationRecord, ResolvedPerkOSConfig, SettleJobInput, SignerResult, SpendingApproval, SpendingPolicyInput, SubmitWorkInput, TransactionIntent, TransactionConfirmation, TransactionConfirmationStatus, TransactionReceipt, TransactionResultValue, TransactionTrackerLike, UpdateAgentInput, } from "./types.js";
 export type { PerkOSErrorCode, PerkOSErrorDetails } from "./errors.js";
+export type { ParsedPerkOSX402Requirement, PaymentPayload, PaymentRequired, PaymentRequirements, PerkOSX402ClientLike, PerkOSX402PaymentProof, PerkOSX402PaymentRequiredInput, PerkOSX402SchemeClientOptions, ResourceInfo, SettleResponse, } from "./x402.js";
+export type { HiroX402TransactionSourceOptions, PerkOSX402FacilitatorOptions, PerkOSX402ReplayRecord, PerkOSX402ReplayStore, PerkOSX402TransactionSource, PerkOSX402VerifiedPayment, X402VerifierFetch, } from "./x402-facilitator.js";
+export type { NayoriStacksX402Network, NayoriX402AssetDefinition, NayoriX402DirectPaymentPayloadInput, NayoriX402PaymentAsset, NayoriX402ProtectedRequest, NayoriX402Quote, NayoriX402QuoteInput, NayoriX402VerifiedDirectPayment, NayoriX402ValidatedPaymentContext, ValidateNayoriX402PaymentContextInput, VerifyNayoriX402DirectPaymentInput, } from "./x402-direct.js";
+export type { LeatherRequest, LeatherSignTransactionParams, LeatherSignerOptions, NayoriX402PaymentAuthorization, NayoriX402PaymentClientOptions, NayoriX402PaymentIntent, NayoriX402PaymentIntentInput, NayoriX402PaymentPolicyInput, NayoriX402PaymentSessionUsage, NayoriX402PaymentSignRequest, NayoriX402PaymentSigner, NayoriX402PreparePaymentInput, NayoriX402PreparedPayment, NayoriX402SettlementRequest, NayoriX402SignedTransaction, PolicySignerCallback, PolicySignerOptions, PolicySignerRequest, } from "./x402-paying.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,YAAY,EACV,qBAAqB,EACrB,2BAA2B,EAC3B,0BAA0B,EAC1B,kBAAkB,EAClB,kBAAkB,EAClB,+BAA+B,EAC/B,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,YAAY,EACZ,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,aAAa,EACb,WAAW,EACX,MAAM,EACN,UAAU,EACV,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,EAC3B,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,YAAY,EACZ,cAAc,EACd,SAAS,EACT,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,aAAa,EACb,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,uBAAuB,EACvB,6BAA6B,EAC7B,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,iCAAiC,EACjC,wBAAwB,EACxB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EACZ,+BAA+B,EAC/B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,qBAAqB,EACrB,6BAA6B,EAC7B,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,yBAAyB,EACzB,wCAAwC,EACxC,+BAA+B,EAC/B,oCAAoC,EACpC,yBAAyB,EACzB,iCAAiC,EACjC,2BAA2B,EAC3B,iCAAiC,EACjC,oCAAoC,EACpC,mCAAmC,EACnC,qBAAqB,EACrB,gCAAgC,EAChC,kBAAkB,EAClB,yBAAyB,EACzB,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,aAAa,EACb,iCAAiC,EACjC,kCAAkC,EAClC,uBAAuB,EACvB,uBAAuB,EACvB,YAAY,EACZ,yCAAyC,EACzC,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,qBAAqB,EACrB,2BAA2B,EAC3B,0BAA0B,EAC1B,kBAAkB,EAClB,kBAAkB,EAClB,+BAA+B,EAC/B,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,YAAY,EACZ,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,aAAa,EACb,WAAW,EACX,MAAM,EACN,UAAU,EACV,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,EAC3B,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,YAAY,EACZ,cAAc,EACd,SAAS,EACT,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,aAAa,EACb,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,uBAAuB,EACvB,6BAA6B,EAC7B,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACvE,YAAY,EACV,2BAA2B,EAC3B,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,6BAA6B,EAC7B,YAAY,EACZ,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,gCAAgC,EAChC,4BAA4B,EAC5B,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,uBAAuB,EACvB,yBAAyB,EACzB,mCAAmC,EACnC,sBAAsB,EACtB,0BAA0B,EAC1B,eAAe,EACf,oBAAoB,EACpB,+BAA+B,EAC/B,iCAAiC,EACjC,qCAAqC,EACrC,kCAAkC,GACnC,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,cAAc,EACd,4BAA4B,EAC5B,oBAAoB,EACpB,8BAA8B,EAC9B,8BAA8B,EAC9B,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,6BAA6B,EAC7B,4BAA4B,EAC5B,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -7,4 +7,8 @@ export { PerkOSError } from "./errors.js";
 export { DEFAULT_DEPLOYMENTS, JOB_STATUS, CLARITY_ERROR_MESSAGES } from "./constants.js";
 export { resolveConfig, toUint } from "./validation.js";
 export { normalizeTxid } from "./txid.js";
+export { PERKOS_X402_ASSET_TRANSFER_METHOD, PERKOS_X402_PAYMENT_FLOW, PERKOS_X402_SCHEME, PerkOSX402SchemeClient, STACKS_X402_NETWORKS, X402_VERSION, createPerkOSX402PaymentRequired, decodePaymentRequiredHeader, decodePaymentResponseHeader, decodePaymentSignatureHeader, encodePaymentRequiredHeader, encodePaymentResponseHeader, encodePaymentSignatureHeader, fromStacksX402Network, parsePerkOSX402PaymentPayload, parsePerkOSX402Requirement, toStacksX402Network, } from "./x402.js";
+export { HiroX402TransactionSource, InMemoryX402ReplayStore, PerkOSX402Facilitator, PerkOSX402VerificationError, perkosX402ReplayKey, } from "./x402-facilitator.js";
+export { NAYORI_X402_DIRECT_ASSETS, NAYORI_X402_DIRECT_ASSET_TRANSFER_METHOD, NAYORI_X402_DIRECT_PAYMENT_FLOW, NAYORI_X402_QUOTE_FINGERPRINT_PREFIX, NAYORI_X402_QUOTE_VERSION, NayoriX402DirectVerificationError, canonicalizeNayoriX402Quote, canonicalizeNayoriX402ResourceUrl, createNayoriX402DirectPaymentPayload, createNayoriX402PaymentRequirements, createNayoriX402Quote, createNayoriX402QuoteFingerprint, getNayoriX402Asset, hashNayoriX402RequestBody, verifyNayoriX402DirectPayment, validateNayoriX402PaymentContext, } from "./x402-direct.js";
+export { LeatherSigner, NAYORI_X402_PAYMENT_INTENT_PREFIX, NAYORI_X402_PAYMENT_INTENT_VERSION, NayoriX402PaymentClient, NayoriX402PaymentPolicy, PolicySigner, buildNayoriX402UnsignedPaymentTransaction, createNayoriX402PaymentIntent, } from "./x402-paying.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,iCAAiC,EACjC,wBAAwB,EACxB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EACZ,+BAA+B,EAC/B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,qBAAqB,EACrB,6BAA6B,EAC7B,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,yBAAyB,EACzB,wCAAwC,EACxC,+BAA+B,EAC/B,oCAAoC,EACpC,yBAAyB,EACzB,iCAAiC,EACjC,2BAA2B,EAC3B,iCAAiC,EACjC,oCAAoC,EACpC,mCAAmC,EACnC,qBAAqB,EACrB,gCAAgC,EAChC,kBAAkB,EAClB,yBAAyB,EACzB,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,aAAa,EACb,iCAAiC,EACjC,kCAAkC,EAClC,uBAAuB,EACvB,uBAAuB,EACvB,YAAY,EACZ,yCAAyC,EACzC,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC"}

package/dist/x402-direct.d.ts

@@ -0,0 +1,116 @@
+import type { PaymentPayload, PaymentRequirements, ResourceInfo } from "@x402/core/types";
+import type { AmountLike, PerkOSNetwork } from "./types.js";
+import { STACKS_X402_NETWORKS } from "./x402.js";
+export declare const NAYORI_X402_DIRECT_ASSET_TRANSFER_METHOD = "stacks-signed-tx-v1";
+export declare const NAYORI_X402_DIRECT_PAYMENT_FLOW = "upfront";
+export declare const NAYORI_X402_QUOTE_VERSION = 1;
+export declare const NAYORI_X402_QUOTE_FINGERPRINT_PREFIX = "ny1_";
+export type NayoriX402PaymentAsset = "stx" | "sbtc" | "usdcx";
+export type NayoriStacksX402Network = (typeof STACKS_X402_NETWORKS)[keyof typeof STACKS_X402_NETWORKS];
+export interface NayoriX402AssetDefinition {
+    readonly network: PerkOSNetwork;
+    readonly x402Network: NayoriStacksX402Network;
+    readonly paymentAsset: NayoriX402PaymentAsset;
+    readonly symbol: "STX" | "sBTC" | "USDCx";
+    readonly decimals: 6 | 8;
+    readonly wireAsset: string;
+    readonly canonicalAssetId: string;
+    readonly kind: "stx" | "sip010";
+    readonly contract?: string;
+    readonly tokenName?: string;
+    readonly postConditionAsset?: string;
+}
+export declare const NAYORI_X402_DIRECT_ASSETS: Readonly<Record<PerkOSNetwork, Readonly<Record<NayoriX402PaymentAsset, NayoriX402AssetDefinition>>>>;
+export interface NayoriX402ProtectedRequest {
+    readonly method: string;
+    readonly url: string;
+    readonly body?: string | Uint8Array;
+}
+export interface NayoriX402QuoteInput extends NayoriX402ProtectedRequest {
+    readonly quoteId: string;
+    readonly merchantId: string;
+    readonly network: PerkOSNetwork;
+    readonly asset: NayoriX402PaymentAsset;
+    readonly amount: AmountLike;
+    readonly payTo: string;
+    readonly issuedAt: number;
+    readonly expiresAt: number;
+}
+export interface NayoriX402Quote {
+    readonly version: typeof NAYORI_X402_QUOTE_VERSION;
+    readonly quoteId: string;
+    readonly merchantId: string;
+    readonly method: string;
+    readonly url: string;
+    readonly bodySha256: string;
+    readonly network: NayoriStacksX402Network;
+    readonly paymentAsset: NayoriX402PaymentAsset;
+    readonly asset: string;
+    readonly amount: string;
+    readonly payTo: string;
+    readonly issuedAt: number;
+    readonly expiresAt: number;
+}
+export interface NayoriX402DirectPaymentPayloadInput {
+    readonly paymentRequirements: PaymentRequirements;
+    readonly transaction: string;
+    readonly resource?: ResourceInfo;
+}
+export interface VerifyNayoriX402DirectPaymentInput {
+    readonly paymentPayload: PaymentPayload;
+    readonly paymentRequirements: PaymentRequirements;
+    /** The hosted layer must authenticate the merchant and validate the quote signature first. */
+    readonly trustedQuote: NayoriX402Quote;
+    readonly request: NayoriX402ProtectedRequest;
+    readonly nowSeconds?: number;
+    readonly clockSkewSeconds?: number;
+}
+export interface ValidateNayoriX402PaymentContextInput {
+    readonly paymentRequirements: PaymentRequirements;
+    /** The hosted layer must authenticate the merchant and validate the quote signature first. */
+    readonly trustedQuote: NayoriX402Quote;
+    readonly request: NayoriX402ProtectedRequest;
+    readonly nowSeconds?: number;
+    readonly clockSkewSeconds?: number;
+}
+export interface NayoriX402ValidatedPaymentContext {
+    readonly quote: NayoriX402Quote;
+    readonly network: PerkOSNetwork;
+    readonly assetDefinition: NayoriX402AssetDefinition;
+    readonly quoteFingerprint: string;
+}
+export interface NayoriX402VerifiedDirectPayment {
+    readonly network: PerkOSNetwork;
+    readonly x402Network: NayoriStacksX402Network;
+    readonly asset: NayoriX402PaymentAsset;
+    readonly assetDefinition: NayoriX402AssetDefinition;
+    readonly amount: bigint;
+    readonly payer: string;
+    readonly payTo: string;
+    readonly transaction: string;
+    /** Hash of the supplied serialization; sponsor signing changes it for sponsored payments. */
+    readonly transactionHash: string;
+    /** Final network transaction ID for standard payments; omitted until a sponsor signs. */
+    readonly transactionId?: string;
+    readonly originNonce: bigint;
+    readonly originFee: bigint;
+    readonly sponsored: boolean;
+    readonly quoteId: string;
+    readonly quoteFingerprint: string;
+}
+export declare class NayoriX402DirectVerificationError extends Error {
+    readonly reason: string;
+    readonly details: Readonly<Record<string, unknown>> | undefined;
+    constructor(reason: string, message: string, details?: Readonly<Record<string, unknown>>);
+}
+export declare function canonicalizeNayoriX402ResourceUrl(value: string): string;
+export declare function hashNayoriX402RequestBody(body?: string | Uint8Array): Promise<string>;
+export declare function getNayoriX402Asset(network: PerkOSNetwork, asset: NayoriX402PaymentAsset): NayoriX402AssetDefinition;
+export declare function createNayoriX402Quote(input: NayoriX402QuoteInput): Promise<NayoriX402Quote>;
+export declare function canonicalizeNayoriX402Quote(quote: NayoriX402Quote): string;
+export declare function createNayoriX402QuoteFingerprint(quote: NayoriX402Quote): Promise<string>;
+export declare function createNayoriX402PaymentRequirements(quoteInput: NayoriX402Quote): Promise<PaymentRequirements>;
+export declare function createNayoriX402DirectPaymentPayload(input: NayoriX402DirectPaymentPayloadInput): PaymentPayload;
+export declare function validateNayoriX402PaymentContext(input: ValidateNayoriX402PaymentContextInput): Promise<NayoriX402ValidatedPaymentContext>;
+export declare function verifyNayoriX402DirectPayment(input: VerifyNayoriX402DirectPaymentInput): Promise<NayoriX402VerifiedDirectPayment>;
+//# sourceMappingURL=x402-direct.d.ts.map

package/dist/x402-direct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-direct.d.ts","sourceRoot":"","sources":["../src/x402-direct.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,YAAY,EACb,MAAM,kBAAkB,CAAC;AAK1B,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE5D,OAAO,EAEL,oBAAoB,EAIrB,MAAM,WAAW,CAAC;AAEnB,eAAO,MAAM,wCAAwC,wBAAwB,CAAC;AAC9E,eAAO,MAAM,+BAA+B,YAAY,CAAC;AACzD,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAC3C,eAAO,MAAM,oCAAoC,SAAS,CAAC;AAa3D,MAAM,MAAM,sBAAsB,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAC9D,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AAEnE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,uBAAuB,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AA6CD,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAC9C,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAY1F,CAAC;AAEH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;CACrC;AAED,MAAM,WAAW,oBAAqB,SAAQ,0BAA0B;IACtE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,yBAAyB,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;CAClC;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,8FAA8F;IAC9F,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,8FAA8F;IAC9F,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,uBAAuB,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,6FAA6F;IAC7F,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,yFAAyF;IACzF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,qBAAa,iCAAkC,SAAQ,KAAK;IAC1D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;gBAG9D,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAO9C;AAmCD,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAmBvE;AA6CD,wBAAsB,yBAAyB,CAC7C,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GACzB,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,sBAAsB,GAC5B,yBAAyB,CAS3B;AAqED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,eAAe,CAAC,CAsB1B;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAiB1E;AAED,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,wBAAsB,mCAAmC,CACvD,UAAU,EAAE,eAAe,GAC1B,OAAO,CAAC,mBAAmB,CAAC,CA4B9B;AAED,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,mCAAmC,GACzC,cAAc,CAgBhB;AA6DD,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,iCAAiC,CAAC,CAyC5C;AAsLD,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,+BAA+B,CAAC,CA2F1C"}