@reinconsole/core 0.1.0

package/dist/index.js

@@ -0,0 +1,444 @@
+import { z } from 'zod';
+
+// src/chain.ts
+var Chain = z.enum(["base", "solana", "polygon", "bnb"]);
+var Asset = z.enum(["USDC", "USDT", "EURC"]);
+var DecimalString = z.string().regex(/^\d+(\.\d+)?$/, 'must be a non-negative decimal string, e.g. "5.00"');
+var DECIMAL_RE = /^\d+(\.\d+)?$/;
+function isValidDecimal(value) {
+  return DECIMAL_RE.test(value);
+}
+function assertDecimal(value) {
+  if (!isValidDecimal(value)) {
+    throw new TypeError(`invalid decimal string: ${JSON.stringify(value)}`);
+  }
+}
+function fractionLength(value) {
+  const dot = value.indexOf(".");
+  return dot === -1 ? 0 : value.length - dot - 1;
+}
+function toScaled(value, scale) {
+  const dot = value.indexOf(".");
+  const intPart = dot === -1 ? value : value.slice(0, dot);
+  const fracPart = dot === -1 ? "" : value.slice(dot + 1);
+  const paddedFrac = (fracPart + "0".repeat(scale)).slice(0, scale);
+  return BigInt(intPart + paddedFrac);
+}
+function fromScaled(scaled, scale) {
+  if (scale === 0) return scaled.toString();
+  const digits = scaled.toString().padStart(scale + 1, "0");
+  const intPart = digits.slice(0, digits.length - scale);
+  const fracPart = digits.slice(digits.length - scale).replace(/0+$/, "");
+  return fracPart.length > 0 ? `${intPart}.${fracPart}` : intPart;
+}
+function compareDecimal(a, b) {
+  assertDecimal(a);
+  assertDecimal(b);
+  const scale = Math.max(fractionLength(a), fractionLength(b));
+  const av = toScaled(a, scale);
+  const bv = toScaled(b, scale);
+  return av < bv ? -1 : av > bv ? 1 : 0;
+}
+function sumDecimal(values) {
+  if (values.length === 0) return "0";
+  let scale = 0;
+  for (const v of values) {
+    assertDecimal(v);
+    scale = Math.max(scale, fractionLength(v));
+  }
+  let total = 0n;
+  for (const v of values) total += toScaled(v, scale);
+  return fromScaled(total, scale);
+}
+function mulDecimal(a, b) {
+  assertDecimal(a);
+  assertDecimal(b);
+  const scaleA = fractionLength(a);
+  const scaleB = fractionLength(b);
+  const product = toScaled(a, scaleA) * toScaled(b, scaleB);
+  return fromScaled(product, scaleA + scaleB);
+}
+function gt(a, b) {
+  return compareDecimal(a, b) === 1;
+}
+function lt(a, b) {
+  return compareDecimal(a, b) === -1;
+}
+
+// src/glob.ts
+function globMatch(pattern, value) {
+  const escaped = pattern.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const withWildcard = escaped.replace(/\\\*/g, ".*");
+  return new RegExp(`^${withWildcard}$`).test(value);
+}
+function globMatchAny(patterns, value) {
+  return patterns.some((p) => globMatch(p, value));
+}
+
+// src/ulid.ts
+var ENCODING = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+var TIME_LEN = 10;
+var RANDOM_LEN = 16;
+function randomBytes(length) {
+  const bytes = new Uint8Array(length);
+  globalThis.crypto.getRandomValues(bytes);
+  return bytes;
+}
+function encodeTime(now) {
+  let time = now;
+  let out = "";
+  for (let i = TIME_LEN - 1; i >= 0; i--) {
+    out = ENCODING.charAt(time % 32) + out;
+    time = Math.floor(time / 32);
+  }
+  return out;
+}
+function encodeRandom() {
+  let out = "";
+  for (const byte of randomBytes(RANDOM_LEN)) {
+    out += ENCODING.charAt(byte % 32);
+  }
+  return out;
+}
+function ulid(seedTime = Date.now()) {
+  return encodeTime(seedTime) + encodeRandom();
+}
+function newId(prefix) {
+  return `${prefix}_${ulid()}`;
+}
+var ULID_BODY = "[0-9A-HJKMNP-TV-Z]{26}";
+function prefixedId(prefix) {
+  return z.string().regex(new RegExp(`^${prefix}_${ULID_BODY}$`), `expected a "${prefix}_" prefixed id`);
+}
+var OrgId = prefixedId("org");
+var AgentId = prefixedId("agt");
+var PolicyId = prefixedId("pol");
+var IntentId = prefixedId("int");
+var DecisionId = prefixedId("dec");
+var ReceiptId = prefixedId("rcp");
+var SessionId = prefixedId("ses");
+var GateReceiptId = prefixedId("grc");
+var EnforcementMode = z.enum(["observed", "sdk", "session-key"]);
+var AgentWallet = z.object({
+  chain: Chain,
+  address: z.string().min(1),
+  mode: EnforcementMode
+});
+var AgentStatus = z.enum(["active", "frozen"]);
+var Agent = z.object({
+  id: AgentId,
+  orgId: OrgId,
+  name: z.string().min(1).max(200),
+  /** On-chain ERC-8004 identity, if the agent is registered. */
+  erc8004Id: z.string().optional(),
+  wallets: z.array(AgentWallet).default([]),
+  status: AgentStatus.default("active"),
+  createdAt: z.coerce.date()
+});
+var REGISTRY_PATTERN = /^0x[0-9a-fA-F]{40}$/;
+var ID_PATTERN = /^eip155:(\d+):(0x[0-9a-fA-F]{40})\/(\d+)$/;
+function formatErc8004Id(ref) {
+  if (!Number.isSafeInteger(ref.chainId) || ref.chainId < 1) {
+    throw new RangeError(`erc8004: bad chainId ${ref.chainId}`);
+  }
+  if (!REGISTRY_PATTERN.test(ref.registry)) {
+    throw new RangeError(`erc8004: bad registry address ${ref.registry}`);
+  }
+  if (typeof ref.tokenId !== "bigint" || ref.tokenId < 0n) {
+    throw new RangeError(`erc8004: bad tokenId ${ref.tokenId}`);
+  }
+  return `eip155:${ref.chainId}:${ref.registry.toLowerCase()}/${ref.tokenId}`;
+}
+function parseErc8004Id(value) {
+  const match = ID_PATTERN.exec(value);
+  if (!match) return void 0;
+  const chainId = Number(match[1]);
+  if (!Number.isSafeInteger(chainId) || chainId < 1) return void 0;
+  return {
+    chainId,
+    registry: match[2].toLowerCase(),
+    tokenId: BigInt(match[3])
+  };
+}
+var Erc8004Id = z.string().refine((value) => parseErc8004Id(value) !== void 0, {
+  message: 'expected "eip155:{chainId}:{registry}/{tokenId}"'
+});
+var Vendor = z.object({
+  host: z.string().min(1),
+  address: z.string().min(1),
+  erc8004Id: z.string().optional()
+});
+var TaskContext = z.object({
+  taskId: z.string().optional(),
+  parentRunId: z.string().optional(),
+  purpose: z.string().max(500).optional()
+});
+var PaymentIntent = z.object({
+  id: IntentId,
+  agentId: AgentId,
+  vendor: Vendor,
+  resource: z.string(),
+  amount: DecimalString,
+  asset: Asset,
+  chain: Chain,
+  taskContext: TaskContext.default({}),
+  nonce: z.string().min(1),
+  createdAt: z.coerce.date()
+});
+var DecisionOutcome = z.enum(["allow", "deny", "escalate"]);
+var Decision = z.object({
+  id: DecisionId,
+  intentId: IntentId,
+  /**
+   * sha256 of the intent's canonical content (see canonical.ts). Binds the
+   * decision to the exact transfer it judged — amount, recipient, asset,
+   * chain — so a signer can verify an {intent, decision} pair offline as a
+   * self-contained spend voucher, not just a reference by id.
+   */
+  intentHash: z.string(),
+  outcome: DecisionOutcome,
+  /** Ids of the rules that fired, for explainability. */
+  matchedRules: z.array(z.string()).default([]),
+  /** Human-readable explanation surfaced in the dashboard. */
+  reason: z.string().optional(),
+  policyId: z.string(),
+  policyVersion: z.string(),
+  /** Hash of the previous decision in the chain (tamper-evident log). */
+  prevHash: z.string(),
+  /** Hash of this decision's canonical content. */
+  hash: z.string(),
+  /** Service signing-key signature over `hash`. */
+  signature: z.string(),
+  latencyMs: z.number().nonnegative(),
+  decidedAt: z.coerce.date()
+});
+
+// src/canonical.ts
+function canonicalIntent(intent) {
+  return JSON.stringify({
+    id: intent.id,
+    agentId: intent.agentId,
+    vendor: {
+      host: intent.vendor.host,
+      address: intent.vendor.address,
+      erc8004Id: intent.vendor.erc8004Id ?? null
+    },
+    resource: intent.resource,
+    amount: intent.amount,
+    asset: intent.asset,
+    chain: intent.chain,
+    taskContext: {
+      taskId: intent.taskContext.taskId ?? null,
+      parentRunId: intent.taskContext.parentRunId ?? null,
+      purpose: intent.taskContext.purpose ?? null
+    },
+    nonce: intent.nonce,
+    createdAt: intent.createdAt.toISOString()
+  });
+}
+function canonicalDecision(d) {
+  return JSON.stringify({
+    intentId: d.intentId,
+    intentHash: d.intentHash,
+    outcome: d.outcome,
+    matchedRules: d.matchedRules,
+    policyId: d.policyId,
+    policyVersion: d.policyVersion,
+    prevHash: d.prevHash,
+    decidedAt: d.decidedAt.toISOString()
+  });
+}
+var Session = z.object({
+  id: SessionId,
+  agentId: AgentId,
+  /** sha256 hex of the bearer token. */
+  tokenHash: z.string(),
+  /** Cumulative ceiling across the session's lifetime. Absent = uncapped. */
+  capAmount: DecimalString.optional(),
+  /** Ceiling per individual signature. Absent = uncapped. */
+  maxPerPayment: DecimalString.optional(),
+  expiresAt: z.coerce.date(),
+  createdAt: z.coerce.date(),
+  revokedAt: z.coerce.date().optional()
+});
+var SettledPayment = z.object({
+  intentId: IntentId,
+  txHash: z.string(),
+  chain: Chain,
+  blockNumber: z.coerce.bigint(),
+  facilitator: z.string().optional(),
+  feePaid: DecimalString.optional(),
+  confirmedAt: z.coerce.date()
+});
+var ReceiptSettlement = z.object({
+  txHash: z.string().optional(),
+  networkId: z.string().optional(),
+  /** Raw header payload, kept for forensics until the indexer confirms. */
+  raw: z.string().optional()
+});
+var Receipt = z.object({
+  id: ReceiptId,
+  agentId: AgentId,
+  intentId: IntentId,
+  decisionId: DecisionId,
+  outcome: DecisionOutcome,
+  /** The URL the agent actually fetched (the paywalled resource). */
+  url: z.string(),
+  method: z.string().default("GET"),
+  vendorHost: z.string(),
+  amount: DecimalString,
+  asset: Asset,
+  chain: Chain,
+  taskContext: TaskContext.default({}),
+  /** Human-readable explanation copied from the decision. */
+  reason: z.string().optional(),
+  /** Present only once a payment was made and the vendor confirmed it. */
+  settlement: ReceiptSettlement.optional(),
+  createdAt: z.coerce.date()
+});
+var GateReceipt = z.object({
+  id: GateReceiptId,
+  at: z.coerce.date(),
+  /** The route pattern that priced this request, e.g. "/api/reports/*". */
+  route: z.string().min(1),
+  /** The concrete resource paid for (URL path actually requested). */
+  resource: z.string().min(1),
+  method: z.string().min(1),
+  /** The paying wallet address, as asserted by the settled payment. */
+  payer: z.string().min(1),
+  payTo: z.string().min(1),
+  /** Human-unit decimal amount, e.g. "0.05". */
+  amount: DecimalString,
+  /** The same amount in the asset's atomic units, e.g. "50000". */
+  amountAtomic: z.string().regex(/^\d+$/, "atomic amount must be an integer string"),
+  /** Token symbol or contract address, exactly as quoted in the requirement. */
+  asset: z.string().min(1),
+  network: z.string().min(1),
+  /** Settlement transaction hash (mock ledger or on-chain). */
+  transaction: z.string().min(1)
+});
+var Window = z.string().regex(/^\d+[smhd]$/, 'window must be like "30s", "15m", "1h", or "7d"');
+var Multiplier = z.string().regex(/^\d+(\.\d+)?x$/, 'multiplier must be like "3x"');
+var Condition = z.object({
+  /** Per-transaction amount exceeds this value. */
+  amountGt: DecimalString.optional(),
+  /** Sum of spend in a rolling window exceeds `gt`. */
+  rollingSum: z.object({ window: Window, gt: DecimalString }).optional(),
+  /** Transaction count in a rolling window exceeds `gt`. */
+  txCount: z.object({ window: Window, gt: z.number().int().nonnegative() }).optional(),
+  /** Vendor host matches one of these patterns (supports `*` globs). */
+  vendorHostIn: z.array(z.string()).optional(),
+  /** First time Rein has seen this vendor for the agent. */
+  vendorFirstSeen: z.boolean().optional(),
+  /** Vendor reputation score is below this threshold (Phase 3 hook). */
+  vendorReputationLt: z.number().min(0).max(100).optional(),
+  /** Amount is more than `gt`-times the observed median for this resource. */
+  amountVsResourceMedian: z.object({ gt: Multiplier }).optional()
+}).refine((c) => Object.values(c).some((v) => v !== void 0), {
+  message: "a condition must specify at least one predicate"
+});
+var Rule = z.object({
+  id: z.string().min(1),
+  allow: Condition.optional(),
+  deny: Condition.optional(),
+  escalate: Condition.optional()
+}).refine((r) => [r.allow, r.deny, r.escalate].filter((v) => v !== void 0).length === 1, {
+  message: "a rule must specify exactly one of allow / deny / escalate"
+});
+var PolicyDefault = z.enum(["allow", "deny"]);
+var AppliesTo = z.object({
+  /** Agent id patterns (supports `*` globs, e.g. "agt_research_*"). */
+  agents: z.array(z.string()).optional(),
+  chains: z.array(Chain).optional()
+});
+var Escalation = z.object({
+  approvers: z.array(z.string()).default([]),
+  timeoutAction: PolicyDefault.default("deny"),
+  timeoutMin: z.number().int().positive().default(15)
+});
+var Policy = z.object({
+  policyId: z.string().min(1),
+  version: z.string().default("1"),
+  appliesTo: AppliesTo.default({}),
+  rules: z.array(Rule).default([]),
+  default: PolicyDefault.default("deny"),
+  /** Below this amount, fail-open is permitted during a policy-service outage. */
+  denyFloor: DecimalString.default("0.05"),
+  escalation: Escalation.optional()
+});
+var ReputationSubject = z.object({
+  kind: z.enum(["agent", "vendor"]),
+  id: z.string()
+});
+var ReputationComponents = z.object({
+  volume: z.number(),
+  longevity: z.number(),
+  disputeRate: z.number(),
+  counterpartyQuality: z.number(),
+  settlementReliability: z.number()
+});
+var ReputationScore = z.object({
+  subject: ReputationSubject,
+  score: z.number().min(0).max(100),
+  components: ReputationComponents,
+  confidence: z.number().min(0).max(1),
+  asOf: z.coerce.date(),
+  /** Hash-anchored attestation, optionally published on-chain (ERC-8004). */
+  evidenceUri: z.string().optional()
+});
+var ReinEvent = z.discriminatedUnion("type", [
+  z.object({ type: z.literal("intent.created"), at: z.coerce.date(), intent: PaymentIntent }),
+  z.object({ type: z.literal("decision.made"), at: z.coerce.date(), decision: Decision }),
+  z.object({ type: z.literal("payment.settled"), at: z.coerce.date(), payment: SettledPayment }),
+  z.object({
+    type: z.literal("shadow.spend"),
+    at: z.coerce.date(),
+    agentId: AgentId,
+    txHash: z.string(),
+    chain: Chain,
+    amount: DecimalString
+  }),
+  z.object({
+    type: z.literal("signature.released"),
+    at: z.coerce.date(),
+    sessionId: SessionId,
+    agentId: AgentId,
+    intentId: IntentId,
+    decisionId: DecisionId,
+    amount: DecimalString
+  }),
+  z.object({
+    type: z.literal("signature.refused"),
+    at: z.coerce.date(),
+    /** Refusal code, e.g. "decision_replayed" (see @reinconsole/signer). */
+    code: z.string(),
+    reason: z.string(),
+    sessionId: SessionId.optional(),
+    agentId: AgentId.optional(),
+    intentId: IntentId.optional()
+  }),
+  z.object({
+    type: z.literal("gate.quoted"),
+    at: z.coerce.date(),
+    resource: z.string(),
+    method: z.string(),
+    amount: DecimalString,
+    asset: z.string(),
+    network: z.string()
+  }),
+  z.object({ type: z.literal("gate.settled"), at: z.coerce.date(), receipt: GateReceipt }),
+  z.object({
+    type: z.literal("gate.refused"),
+    at: z.coerce.date(),
+    /** Refusal code, e.g. "payment_replayed" (see @reinconsole/gate). */
+    code: z.string(),
+    reason: z.string(),
+    resource: z.string(),
+    /** Known only when the payment header decoded far enough to name a payer. */
+    payer: z.string().optional()
+  })
+]);
+
+export { Agent, AgentId, AgentStatus, AgentWallet, AppliesTo, Asset, Chain, Condition, DecimalString, Decision, DecisionId, DecisionOutcome, EnforcementMode, Erc8004Id, Escalation, GateReceipt, GateReceiptId, IntentId, Multiplier, OrgId, PaymentIntent, Policy, PolicyDefault, PolicyId, Receipt, ReceiptId, ReceiptSettlement, ReinEvent, ReputationComponents, ReputationScore, ReputationSubject, Rule, Session, SessionId, SettledPayment, TaskContext, Vendor, Window, canonicalDecision, canonicalIntent, compareDecimal, formatErc8004Id, globMatch, globMatchAny, gt, isValidDecimal, lt, mulDecimal, newId, parseErc8004Id, prefixedId, sumDecimal, ulid };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/chain.ts","../src/money.ts","../src/glob.ts","../src/ulid.ts","../src/ids.ts","../src/agent.ts","../src/erc8004.ts","../src/intent.ts","../src/decision.ts","../src/canonical.ts","../src/session.ts","../src/payment.ts","../src/receipt.ts","../src/gate-receipt.ts","../src/policy.ts","../src/reputation.ts","../src/events.ts"],"names":["z"],"mappings":";;;AAOO,IAAM,KAAA,GAAQ,EAAE,IAAA,CAAK,CAAC,QAAQ,QAAA,EAAU,SAAA,EAAW,KAAK,CAAC;AAIzD,IAAM,QAAQ,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM,CAAC;ACH7C,IAAM,gBAAgBA,CAAAA,CAC1B,MAAA,EAAO,CACP,KAAA,CAAM,iBAAiB,oDAAoD;AAG9E,IAAM,UAAA,GAAa,eAAA;AAEZ,SAAS,eAAe,KAAA,EAAwB;AACrD,EAAA,OAAO,UAAA,CAAW,KAAK,KAAK,CAAA;AAC9B;AAEA,SAAS,cAAc,KAAA,EAAqB;AAC1C,EAAA,IAAI,CAAC,cAAA,CAAe,KAAK,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,SAAA,CAAU,CAAA,wBAAA,EAA2B,KAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,EACxE;AACF;AAEA,SAAS,eAAe,KAAA,EAAuB;AAC7C,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,GAAG,CAAA;AAC7B,EAAA,OAAO,GAAA,KAAQ,EAAA,GAAK,CAAA,GAAI,KAAA,CAAM,SAAS,GAAA,GAAM,CAAA;AAC/C;AAGA,SAAS,QAAA,CAAS,OAAe,KAAA,EAAuB;AACtD,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,GAAG,CAAA;AAC7B,EAAA,MAAM,UAAU,GAAA,KAAQ,EAAA,GAAK,QAAQ,KAAA,CAAM,KAAA,CAAM,GAAG,GAAG,CAAA;AACvD,EAAA,MAAM,WAAW,GAAA,KAAQ,EAAA,GAAK,KAAK,KAAA,CAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AACtD,EAAA,MAAM,UAAA,GAAA,CAAc,WAAW,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA,EAAG,KAAA,CAAM,GAAG,KAAK,CAAA;AAChE,EAAA,OAAO,MAAA,CAAO,UAAU,UAAU,CAAA;AACpC;AAGA,SAAS,UAAA,CAAW,QAAgB,KAAA,EAAuB;AACzD,EAAA,IAAI,KAAA,KAAU,CAAA,EAAG,OAAO,MAAA,CAAO,QAAA,EAAS;AACxC,EAAA,MAAM,SAAS,MAAA,CAAO,QAAA,GAAW,QAAA,CAAS,KAAA,GAAQ,GAAG,GAAG,CAAA;AACxD,EAAA,MAAM,UAAU,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,MAAA,CAAO,SAAS,KAAK,CAAA;AACrD,EAAA,MAAM,QAAA,GAAW,OAAO,KAAA,CAAM,MAAA,CAAO,SAAS,KAAK,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACtE,EAAA,OAAO,SAAS,MAAA,GAAS,CAAA,GAAI,GAAG,OAAO,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA,GAAK,OAAA;AAC1D;AAGO,SAAS,cAAA,CAAe,GAAW,CAAA,EAAuB;AAC/D,EAAA,aAAA,CAAc,CAAC,CAAA;AACf,EAAA,aAAA,CAAc,CAAC,CAAA;AACf,EAAA,MAAM,KAAA,GAAQ,KAAK,GAAA,CAAI,cAAA,CAAe,CAAC,CAAA,EAAG,cAAA,CAAe,CAAC,CAAC,CAAA;AAC3D,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,CAAA,EAAG,KAAK,CAAA;AAC5B,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,CAAA,EAAG,KAAK,CAAA;AAC5B,EAAA,OAAO,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,KAAK,CAAA,GAAI,CAAA;AACtC;AAGO,SAAS,WAAW,MAAA,EAAmC;AAC5D,EAAA,IAAI,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG,OAAO,GAAA;AAChC,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,IAAA,aAAA,CAAc,CAAC,CAAA;AACf,IAAA,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,KAAA,EAAO,cAAA,CAAe,CAAC,CAAC,CAAA;AAAA,EAC3C;AACA,EAAA,IAAI,KAAA,GAAQ,EAAA;AACZ,EAAA,KAAA,MAAW,CAAA,IAAK,MAAA,EAAQ,KAAA,IAAS,QAAA,CAAS,GAAG,KAAK,CAAA;AAClD,EAAA,OAAO,UAAA,CAAW,OAAO,KAAK,CAAA;AAChC;AAGO,SAAS,UAAA,CAAW,GAAW,CAAA,EAAmB;AACvD,EAAA,aAAA,CAAc,CAAC,CAAA;AACf,EAAA,aAAA,CAAc,CAAC,CAAA;AACf,EAAA,MAAM,MAAA,GAAS,eAAe,CAAC,CAAA;AAC/B,EAAA,MAAM,MAAA,GAAS,eAAe,CAAC,CAAA;AAC/B,EAAA,MAAM,UAAU,QAAA,CAAS,CAAA,EAAG,MAAM,CAAA,GAAI,QAAA,CAAS,GAAG,MAAM,CAAA;AACxD,EAAA,OAAO,UAAA,CAAW,OAAA,EAAS,MAAA,GAAS,MAAM,CAAA;AAC5C;AAGO,SAAS,EAAA,CAAG,GAAW,CAAA,EAAoB;AAChD,EAAA,OAAO,cAAA,CAAe,CAAA,EAAG,CAAC,CAAA,KAAM,CAAA;AAClC;AAGO,SAAS,EAAA,CAAG,GAAW,CAAA,EAAoB;AAChD,EAAA,OAAO,cAAA,CAAe,CAAA,EAAG,CAAC,CAAA,KAAM,EAAA;AAClC;;;AChFO,SAAS,SAAA,CAAU,SAAiB,KAAA,EAAwB;AACjE,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,qBAAA,EAAuB,MAAM,CAAA;AAC7D,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,OAAA,CAAQ,OAAA,EAAS,IAAI,CAAA;AAClD,EAAA,OAAO,IAAI,MAAA,CAAO,CAAA,CAAA,EAAI,YAAY,CAAA,CAAA,CAAG,CAAA,CAAE,KAAK,KAAK,CAAA;AACnD;AAGO,SAAS,YAAA,CAAa,UAA6B,KAAA,EAAwB;AAChF,EAAA,OAAO,SAAS,IAAA,CAAK,CAAC,MAAM,SAAA,CAAU,CAAA,EAAG,KAAK,CAAC,CAAA;AACjD;;;ACVA,IAAM,QAAA,GAAW,kCAAA;AACjB,IAAM,QAAA,GAAW,EAAA;AACjB,IAAM,UAAA,GAAa,EAAA;AAEnB,SAAS,YAAY,MAAA,EAA4B;AAC/C,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,MAAM,CAAA;AACnC,EAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,KAAK,CAAA;AACvC,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,WAAW,GAAA,EAAqB;AACvC,EAAA,IAAI,IAAA,GAAO,GAAA;AACX,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,QAAA,GAAW,CAAA,EAAG,CAAA,IAAK,GAAG,CAAA,EAAA,EAAK;AACtC,IAAA,GAAA,GAAM,QAAA,CAAS,MAAA,CAAO,IAAA,GAAO,EAAE,CAAA,GAAI,GAAA;AACnC,IAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAA,GAAO,EAAE,CAAA;AAAA,EAC7B;AACA,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,YAAA,GAAuB;AAC9B,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,IAAA,IAAQ,WAAA,CAAY,UAAU,CAAA,EAAG;AAC1C,IAAA,GAAA,IAAO,QAAA,CAAS,MAAA,CAAO,IAAA,GAAO,EAAE,CAAA;AAAA,EAClC;AACA,EAAA,OAAO,GAAA;AACT;AAGO,SAAS,IAAA,CAAK,QAAA,GAAmB,IAAA,CAAK,GAAA,EAAI,EAAW;AAC1D,EAAA,OAAO,UAAA,CAAW,QAAQ,CAAA,GAAI,YAAA,EAAa;AAC7C;AAGO,SAAS,MAAwB,MAAA,EAA6B;AACnE,EAAA,OAAO,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,IAAA,EAAM,CAAA,CAAA;AAC5B;ACzCA,IAAM,SAAA,GAAY,wBAAA;AAOX,SAAS,WAAW,MAAA,EAAgB;AACzC,EAAA,OAAOA,CAAAA,CACJ,MAAA,EAAO,CACP,KAAA,CAAM,IAAI,MAAA,CAAO,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,CAAA,EAAG,CAAA,YAAA,EAAe,MAAM,CAAA,cAAA,CAAgB,CAAA;AACxF;AAEO,IAAM,KAAA,GAAQ,WAAW,KAAK;AAC9B,IAAM,OAAA,GAAU,WAAW,KAAK;AAChC,IAAM,QAAA,GAAW,WAAW,KAAK;AACjC,IAAM,QAAA,GAAW,WAAW,KAAK;AACjC,IAAM,UAAA,GAAa,WAAW,KAAK;AACnC,IAAM,SAAA,GAAY,WAAW,KAAK;AAClC,IAAM,SAAA,GAAY,WAAW,KAAK;AAClC,IAAM,aAAA,GAAgB,WAAW,KAAK;ACbtC,IAAM,kBAAkBA,CAAAA,CAAE,IAAA,CAAK,CAAC,UAAA,EAAY,KAAA,EAAO,aAAa,CAAC;AAGjE,IAAM,WAAA,GAAcA,EAAE,MAAA,CAAO;AAAA,EAClC,KAAA,EAAO,KAAA;AAAA,EACP,OAAA,EAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACzB,IAAA,EAAM;AACR,CAAC;AAGM,IAAM,cAAcA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,QAAQ,CAAC;AAG/C,IAAM,KAAA,GAAQA,EAAE,MAAA,CAAO;AAAA,EAC5B,EAAA,EAAI,OAAA;AAAA,EACJ,KAAA,EAAO,KAAA;AAAA,EACP,IAAA,EAAMA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA;AAAA,EAE/B,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC/B,SAASA,CAAAA,CAAE,KAAA,CAAM,WAAW,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EACxC,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,QAAQ,CAAA;AAAA,EACpC,SAAA,EAAWA,CAAAA,CAAE,MAAA,CAAO,IAAA;AACtB,CAAC;ACHD,IAAM,gBAAA,GAAmB,qBAAA;AACzB,IAAM,UAAA,GAAa,2CAAA;AAGZ,SAAS,gBAAgB,GAAA,EAAyB;AACvD,EAAA,IAAI,CAAC,OAAO,aAAA,CAAc,GAAA,CAAI,OAAO,CAAA,IAAK,GAAA,CAAI,UAAU,CAAA,EAAG;AACzD,IAAA,MAAM,IAAI,UAAA,CAAW,CAAA,qBAAA,EAAwB,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAAA,EAC5D;AACA,EAAA,IAAI,CAAC,gBAAA,CAAiB,IAAA,CAAK,GAAA,CAAI,QAAQ,CAAA,EAAG;AACxC,IAAA,MAAM,IAAI,UAAA,CAAW,CAAA,8BAAA,EAAiC,GAAA,CAAI,QAAQ,CAAA,CAAE,CAAA;AAAA,EACtE;AACA,EAAA,IAAI,OAAO,GAAA,CAAI,OAAA,KAAY,QAAA,IAAY,GAAA,CAAI,UAAU,EAAA,EAAI;AAGvD,IAAA,MAAM,IAAI,UAAA,CAAW,CAAA,qBAAA,EAAwB,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAAA,EAC5D;AACA,EAAA,OAAO,CAAA,OAAA,EAAU,GAAA,CAAI,OAAO,CAAA,CAAA,EAAI,GAAA,CAAI,SAAS,WAAA,EAAa,CAAA,CAAA,EAAI,GAAA,CAAI,OAAO,CAAA,CAAA;AAC3E;AAOO,SAAS,eAAe,KAAA,EAAuC;AACpE,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,IAAA,CAAK,KAAK,CAAA;AACnC,EAAA,IAAI,CAAC,OAAO,OAAO,MAAA;AACnB,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC/B,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA,IAAK,OAAA,GAAU,GAAG,OAAO,MAAA;AAC1D,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,QAAA,EAAU,KAAA,CAAM,CAAC,CAAA,CAAG,WAAA,EAAY;AAAA,IAChC,OAAA,EAAS,MAAA,CAAO,KAAA,CAAM,CAAC,CAAE;AAAA,GAC3B;AACF;AAGO,IAAM,SAAA,GAAYA,CAAAA,CACtB,MAAA,EAAO,CACP,MAAA,CAAO,CAAC,KAAA,KAAU,cAAA,CAAe,KAAK,CAAA,KAAM,MAAA,EAAW;AAAA,EACtD,OAAA,EAAS;AACX,CAAC;ACjEI,IAAM,MAAA,GAASA,EAAE,MAAA,CAAO;AAAA,EAC7B,IAAA,EAAMA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACtB,OAAA,EAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACzB,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACxB,CAAC;AAOM,IAAM,WAAA,GAAcA,EAAE,MAAA,CAAO;AAAA,EAClC,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC5B,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,SAASA,CAAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA;AAC/B,CAAC;AAOM,IAAM,aAAA,GAAgBA,EAAE,MAAA,CAAO;AAAA,EACpC,EAAA,EAAI,QAAA;AAAA,EACJ,OAAA,EAAS,OAAA;AAAA,EACT,MAAA,EAAQ,MAAA;AAAA,EACR,QAAA,EAAUA,EAAE,MAAA,EAAO;AAAA,EACnB,MAAA,EAAQ,aAAA;AAAA,EACR,KAAA,EAAO,KAAA;AAAA,EACP,KAAA,EAAO,KAAA;AAAA,EACP,WAAA,EAAa,WAAA,CAAY,OAAA,CAAQ,EAAE,CAAA;AAAA,EACnC,KAAA,EAAOA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACvB,SAAA,EAAWA,CAAAA,CAAE,MAAA,CAAO,IAAA;AACtB,CAAC;ACnCM,IAAM,kBAAkBA,CAAAA,CAAE,IAAA,CAAK,CAAC,OAAA,EAAS,MAAA,EAAQ,UAAU,CAAC;AAS5D,IAAM,QAAA,GAAWA,EAAE,MAAA,CAAO;AAAA,EAC/B,EAAA,EAAI,UAAA;AAAA,EACJ,QAAA,EAAU,QAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOV,UAAA,EAAYA,EAAE,MAAA,EAAO;AAAA,EACrB,OAAA,EAAS,eAAA;AAAA;AAAA,EAET,YAAA,EAAcA,EAAE,KAAA,CAAMA,CAAAA,CAAE,QAAQ,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA;AAAA,EAE5C,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC5B,QAAA,EAAUA,EAAE,MAAA,EAAO;AAAA,EACnB,aAAA,EAAeA,EAAE,MAAA,EAAO;AAAA;AAAA,EAExB,QAAA,EAAUA,EAAE,MAAA,EAAO;AAAA;AAAA,EAEnB,IAAA,EAAMA,EAAE,MAAA,EAAO;AAAA;AAAA,EAEf,SAAA,EAAWA,EAAE,MAAA,EAAO;AAAA,EACpB,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,WAAA,EAAY;AAAA,EAClC,SAAA,EAAWA,CAAAA,CAAE,MAAA,CAAO,IAAA;AACtB,CAAC;;;ACtBM,SAAS,gBAAgB,MAAA,EAA+B;AAC7D,EAAA,OAAO,KAAK,SAAA,CAAU;AAAA,IACpB,IAAI,MAAA,CAAO,EAAA;AAAA,IACX,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,OAAO,MAAA,CAAO,IAAA;AAAA,MACpB,OAAA,EAAS,OAAO,MAAA,CAAO,OAAA;AAAA,MACvB,SAAA,EAAW,MAAA,CAAO,MAAA,CAAO,SAAA,IAAa;AAAA,KACxC;AAAA,IACA,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,WAAA,EAAa;AAAA,MACX,MAAA,EAAQ,MAAA,CAAO,WAAA,CAAY,MAAA,IAAU,IAAA;AAAA,MACrC,WAAA,EAAa,MAAA,CAAO,WAAA,CAAY,WAAA,IAAe,IAAA;AAAA,MAC/C,OAAA,EAAS,MAAA,CAAO,WAAA,CAAY,OAAA,IAAW;AAAA,KACzC;AAAA,IACA,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,SAAA,EAAW,MAAA,CAAO,SAAA,CAAU,WAAA;AAAY,GACzC,CAAA;AACH;AAeO,SAAS,kBAAkB,CAAA,EAA4B;AAC5D,EAAA,OAAO,KAAK,SAAA,CAAU;AAAA,IACpB,UAAU,CAAA,CAAE,QAAA;AAAA,IACZ,YAAY,CAAA,CAAE,UAAA;AAAA,IACd,SAAS,CAAA,CAAE,OAAA;AAAA,IACX,cAAc,CAAA,CAAE,YAAA;AAAA,IAChB,UAAU,CAAA,CAAE,QAAA;AAAA,IACZ,eAAe,CAAA,CAAE,aAAA;AAAA,IACjB,UAAU,CAAA,CAAE,QAAA;AAAA,IACZ,SAAA,EAAW,CAAA,CAAE,SAAA,CAAU,WAAA;AAAY,GACpC,CAAA;AACH;AChDO,IAAM,OAAA,GAAUA,EAAE,MAAA,CAAO;AAAA,EAC9B,EAAA,EAAI,SAAA;AAAA,EACJ,OAAA,EAAS,OAAA;AAAA;AAAA,EAET,SAAA,EAAWA,EAAE,MAAA,EAAO;AAAA;AAAA,EAEpB,SAAA,EAAW,cAAc,QAAA,EAAS;AAAA;AAAA,EAElC,aAAA,EAAe,cAAc,QAAA,EAAS;AAAA,EACtC,SAAA,EAAWA,CAAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA,EACzB,SAAA,EAAWA,CAAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA,EACzB,SAAA,EAAWA,CAAAA,CAAE,MAAA,CAAO,IAAA,GAAO,QAAA;AAC7B,CAAC;ACjBM,IAAM,cAAA,GAAiBA,EAAE,MAAA,CAAO;AAAA,EACrC,QAAA,EAAU,QAAA;AAAA,EACV,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,EACjB,KAAA,EAAO,KAAA;AAAA,EACP,WAAA,EAAaA,CAAAA,CAAE,MAAA,CAAO,MAAA,EAAO;AAAA,EAC7B,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,OAAA,EAAS,cAAc,QAAA,EAAS;AAAA,EAChC,WAAA,EAAaA,CAAAA,CAAE,MAAA,CAAO,IAAA;AACxB,CAAC;ACLM,IAAM,iBAAA,GAAoBA,EAAE,MAAA,CAAO;AAAA,EACxC,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC5B,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA;AAAA,EAE/B,GAAA,EAAKA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAClB,CAAC;AASM,IAAM,OAAA,GAAUA,EAAE,MAAA,CAAO;AAAA,EAC9B,EAAA,EAAI,SAAA;AAAA,EACJ,OAAA,EAAS,OAAA;AAAA,EACT,QAAA,EAAU,QAAA;AAAA,EACV,UAAA,EAAY,UAAA;AAAA,EACZ,OAAA,EAAS,eAAA;AAAA;AAAA,EAET,GAAA,EAAKA,EAAE,MAAA,EAAO;AAAA,EACd,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAQ,KAAK,CAAA;AAAA,EAChC,UAAA,EAAYA,EAAE,MAAA,EAAO;AAAA,EACrB,MAAA,EAAQ,aAAA;AAAA,EACR,KAAA,EAAO,KAAA;AAAA,EACP,KAAA,EAAO,KAAA;AAAA,EACP,WAAA,EAAa,WAAA,CAAY,OAAA,CAAQ,EAAE,CAAA;AAAA;AAAA,EAEnC,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA;AAAA,EAE5B,UAAA,EAAY,kBAAkB,QAAA,EAAS;AAAA,EACvC,SAAA,EAAWA,CAAAA,CAAE,MAAA,CAAO,IAAA;AACtB,CAAC;ACnCM,IAAM,WAAA,GAAcA,EAAE,MAAA,CAAO;AAAA,EAClC,EAAA,EAAI,aAAA;AAAA,EACJ,EAAA,EAAIA,CAAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA;AAAA,EAElB,KAAA,EAAOA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAEvB,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC1B,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAExB,KAAA,EAAOA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACvB,KAAA,EAAOA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAEvB,MAAA,EAAQ,aAAA;AAAA;AAAA,EAER,cAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,KAAA,CAAM,SAAS,yCAAyC,CAAA;AAAA;AAAA,EAEjF,KAAA,EAAOA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACvB,OAAA,EAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAEzB,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAC/B,CAAC;ACzBM,IAAM,SAASA,CAAAA,CACnB,MAAA,EAAO,CACP,KAAA,CAAM,eAAe,iDAAiD;AAIlE,IAAM,aAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,KAAA,CAAM,kBAAkB,8BAA8B;AAOpF,IAAM,SAAA,GAAYA,EACtB,MAAA,CAAO;AAAA;AAAA,EAEN,QAAA,EAAU,cAAc,QAAA,EAAS;AAAA;AAAA,EAEjC,UAAA,EAAYA,CAAAA,CAAE,MAAA,CAAO,EAAE,MAAA,EAAQ,QAAQ,EAAA,EAAI,aAAA,EAAe,CAAA,CAAE,QAAA,EAAS;AAAA;AAAA,EAErE,SAASA,CAAAA,CAAE,MAAA,CAAO,EAAE,MAAA,EAAQ,QAAQ,EAAA,EAAIA,CAAAA,CAAE,MAAA,EAAO,CAAE,KAAI,CAAE,WAAA,EAAY,EAAG,EAAE,QAAA,EAAS;AAAA;AAAA,EAEnF,cAAcA,CAAAA,CAAE,KAAA,CAAMA,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA;AAAA,EAE3C,eAAA,EAAiBA,CAAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA;AAAA,EAEtC,kBAAA,EAAoBA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,QAAA,EAAS;AAAA;AAAA,EAExD,sBAAA,EAAwBA,EAAE,MAAA,CAAO,EAAE,IAAI,UAAA,EAAY,EAAE,QAAA;AACvD,CAAC,CAAA,CACA,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,KAAM,MAAS,CAAA,EAAG;AAAA,EAC5D,OAAA,EAAS;AACX,CAAC;AAOI,IAAM,IAAA,GAAOA,EACjB,MAAA,CAAO;AAAA,EACN,EAAA,EAAIA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACpB,KAAA,EAAO,UAAU,QAAA,EAAS;AAAA,EAC1B,IAAA,EAAM,UAAU,QAAA,EAAS;AAAA,EACzB,QAAA,EAAU,UAAU,QAAA;AACtB,CAAC,EACA,MAAA,CAAO,CAAC,MAAM,CAAC,CAAA,CAAE,OAAO,CAAA,CAAE,IAAA,EAAM,EAAE,QAAQ,CAAA,CAAE,OAAO,CAAC,CAAA,KAAM,MAAM,MAAS,CAAA,CAAE,WAAW,CAAA,EAAG;AAAA,EACxF,OAAA,EAAS;AACX,CAAC;AAGI,IAAM,gBAAgBA,CAAAA,CAAE,IAAA,CAAK,CAAC,OAAA,EAAS,MAAM,CAAC;AAG9C,IAAM,SAAA,GAAYA,EAAE,MAAA,CAAO;AAAA;AAAA,EAEhC,QAAQA,CAAAA,CAAE,KAAA,CAAMA,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,EACrC,MAAA,EAAQA,CAAAA,CAAE,KAAA,CAAM,KAAK,EAAE,QAAA;AACzB,CAAC;AAGM,IAAM,UAAA,GAAaA,EAAE,MAAA,CAAO;AAAA,EACjC,SAAA,EAAWA,EAAE,KAAA,CAAMA,CAAAA,CAAE,QAAQ,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EACzC,aAAA,EAAe,aAAA,CAAc,OAAA,CAAQ,MAAM,CAAA;AAAA,EAC3C,UAAA,EAAYA,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,OAAA,CAAQ,EAAE;AACpD,CAAC;AAOM,IAAM,MAAA,GAASA,EAAE,MAAA,CAAO;AAAA,EAC7B,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC1B,OAAA,EAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAQ,GAAG,CAAA;AAAA,EAC/B,SAAA,EAAW,SAAA,CAAU,OAAA,CAAQ,EAAE,CAAA;AAAA,EAC/B,OAAOA,CAAAA,CAAE,KAAA,CAAM,IAAI,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EAC/B,OAAA,EAAS,aAAA,CAAc,OAAA,CAAQ,MAAM,CAAA;AAAA;AAAA,EAErC,SAAA,EAAW,aAAA,CAAc,OAAA,CAAQ,MAAM,CAAA;AAAA,EACvC,UAAA,EAAY,WAAW,QAAA;AACzB,CAAC;ACpFM,IAAM,iBAAA,GAAoBA,EAAE,MAAA,CAAO;AAAA,EACxC,MAAMA,CAAAA,CAAE,IAAA,CAAK,CAAC,OAAA,EAAS,QAAQ,CAAC,CAAA;AAAA,EAChC,EAAA,EAAIA,EAAE,MAAA;AACR,CAAC;AAGM,IAAM,oBAAA,GAAuBA,EAAE,MAAA,CAAO;AAAA,EAC3C,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,EACjB,SAAA,EAAWA,EAAE,MAAA,EAAO;AAAA,EACpB,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,EACtB,mBAAA,EAAqBA,EAAE,MAAA,EAAO;AAAA,EAC9B,qBAAA,EAAuBA,EAAE,MAAA;AAC3B,CAAC;AASM,IAAM,eAAA,GAAkBA,EAAE,MAAA,CAAO;AAAA,EACtC,OAAA,EAAS,iBAAA;AAAA,EACT,KAAA,EAAOA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EAChC,UAAA,EAAY,oBAAA;AAAA,EACZ,UAAA,EAAYA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACnC,IAAA,EAAMA,CAAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA;AAAA,EAEpB,WAAA,EAAaA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAC1B,CAAC;ACZM,IAAM,SAAA,GAAYA,CAAAA,CAAE,kBAAA,CAAmB,MAAA,EAAQ;AAAA,EACpDA,CAAAA,CAAE,MAAA,CAAO,EAAE,IAAA,EAAMA,EAAE,OAAA,CAAQ,gBAAgB,CAAA,EAAG,EAAA,EAAIA,EAAE,MAAA,CAAO,IAAA,EAAK,EAAG,MAAA,EAAQ,eAAe,CAAA;AAAA,EAC1FA,CAAAA,CAAE,MAAA,CAAO,EAAE,IAAA,EAAMA,EAAE,OAAA,CAAQ,eAAe,CAAA,EAAG,EAAA,EAAIA,EAAE,MAAA,CAAO,IAAA,EAAK,EAAG,QAAA,EAAU,UAAU,CAAA;AAAA,EACtFA,CAAAA,CAAE,MAAA,CAAO,EAAE,IAAA,EAAMA,EAAE,OAAA,CAAQ,iBAAiB,CAAA,EAAG,EAAA,EAAIA,EAAE,MAAA,CAAO,IAAA,EAAK,EAAG,OAAA,EAAS,gBAAgB,CAAA;AAAA,EAC7FA,EAAE,MAAA,CAAO;AAAA,IACP,IAAA,EAAMA,CAAAA,CAAE,OAAA,CAAQ,cAAc,CAAA;AAAA,IAC9B,EAAA,EAAIA,CAAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA,IAClB,OAAA,EAAS,OAAA;AAAA,IACT,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,KAAA,EAAO,KAAA;AAAA,IACP,MAAA,EAAQ;AAAA,GACT,CAAA;AAAA,EACDA,EAAE,MAAA,CAAO;AAAA,IACP,IAAA,EAAMA,CAAAA,CAAE,OAAA,CAAQ,oBAAoB,CAAA;AAAA,IACpC,EAAA,EAAIA,CAAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA,IAClB,SAAA,EAAW,SAAA;AAAA,IACX,OAAA,EAAS,OAAA;AAAA,IACT,QAAA,EAAU,QAAA;AAAA,IACV,UAAA,EAAY,UAAA;AAAA,IACZ,MAAA,EAAQ;AAAA,GACT,CAAA;AAAA,EACDA,EAAE,MAAA,CAAO;AAAA,IACP,IAAA,EAAMA,CAAAA,CAAE,OAAA,CAAQ,mBAAmB,CAAA;AAAA,IACnC,EAAA,EAAIA,CAAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA;AAAA,IAElB,IAAA,EAAMA,EAAE,MAAA,EAAO;AAAA,IACf,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,SAAA,EAAW,UAAU,QAAA,EAAS;AAAA,IAC9B,OAAA,EAAS,QAAQ,QAAA,EAAS;AAAA,IAC1B,QAAA,EAAU,SAAS,QAAA;AAAS,GAC7B,CAAA;AAAA,EACDA,EAAE,MAAA,CAAO;AAAA,IACP,IAAA,EAAMA,CAAAA,CAAE,OAAA,CAAQ,aAAa,CAAA;AAAA,IAC7B,EAAA,EAAIA,CAAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA,IAClB,QAAA,EAAUA,EAAE,MAAA,EAAO;AAAA,IACnB,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,MAAA,EAAQ,aAAA;AAAA,IACR,KAAA,EAAOA,EAAE,MAAA,EAAO;AAAA,IAChB,OAAA,EAASA,EAAE,MAAA;AAAO,GACnB,CAAA;AAAA,EACDA,CAAAA,CAAE,MAAA,CAAO,EAAE,IAAA,EAAMA,EAAE,OAAA,CAAQ,cAAc,CAAA,EAAG,EAAA,EAAIA,EAAE,MAAA,CAAO,IAAA,EAAK,EAAG,OAAA,EAAS,aAAa,CAAA;AAAA,EACvFA,EAAE,MAAA,CAAO;AAAA,IACP,IAAA,EAAMA,CAAAA,CAAE,OAAA,CAAQ,cAAc,CAAA;AAAA,IAC9B,EAAA,EAAIA,CAAAA,CAAE,MAAA,CAAO,IAAA,EAAK;AAAA;AAAA,IAElB,IAAA,EAAMA,EAAE,MAAA,EAAO;AAAA,IACf,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,QAAA,EAAUA,EAAE,MAAA,EAAO;AAAA;AAAA,IAEnB,KAAA,EAAOA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,GAC5B;AACH,CAAC","file":"index.js","sourcesContent":["import { z } from 'zod';\n\n/**\n * Chains Rein observes/governs. x402 is multi-chain; Base and Solana ship\n * first, Polygon and BNB follow. The policy/ledger domain is rail-agnostic —\n * this enum is the only place chains are enumerated.\n */\nexport const Chain = z.enum(['base', 'solana', 'polygon', 'bnb']);\nexport type Chain = z.infer<typeof Chain>;\n\n/** Stablecoins settled over x402. */\nexport const Asset = z.enum(['USDC', 'USDT', 'EURC']);\nexport type Asset = z.infer<typeof Asset>;\n","import { z } from 'zod';\n\n/**\n * Monetary amounts in Rein are always non-negative **decimal strings**, never\n * floats. Float arithmetic silently loses precision on values like 0.1 + 0.2,\n * which is unacceptable for money. All comparison/aggregation goes through the\n * BigInt-backed helpers below.\n */\nexport const DecimalString = z\n  .string()\n  .regex(/^\\d+(\\.\\d+)?$/, 'must be a non-negative decimal string, e.g. \"5.00\"');\nexport type DecimalString = z.infer<typeof DecimalString>;\n\nconst DECIMAL_RE = /^\\d+(\\.\\d+)?$/;\n\nexport function isValidDecimal(value: string): boolean {\n  return DECIMAL_RE.test(value);\n}\n\nfunction assertDecimal(value: string): void {\n  if (!isValidDecimal(value)) {\n    throw new TypeError(`invalid decimal string: ${JSON.stringify(value)}`);\n  }\n}\n\nfunction fractionLength(value: string): number {\n  const dot = value.indexOf('.');\n  return dot === -1 ? 0 : value.length - dot - 1;\n}\n\n/** Scale a decimal string into an integer BigInt at a fixed number of fraction digits. */\nfunction toScaled(value: string, scale: number): bigint {\n  const dot = value.indexOf('.');\n  const intPart = dot === -1 ? value : value.slice(0, dot);\n  const fracPart = dot === -1 ? '' : value.slice(dot + 1);\n  const paddedFrac = (fracPart + '0'.repeat(scale)).slice(0, scale);\n  return BigInt(intPart + paddedFrac);\n}\n\n/** Render a scaled BigInt back to a normalized decimal string (no trailing zeros). */\nfunction fromScaled(scaled: bigint, scale: number): string {\n  if (scale === 0) return scaled.toString();\n  const digits = scaled.toString().padStart(scale + 1, '0');\n  const intPart = digits.slice(0, digits.length - scale);\n  const fracPart = digits.slice(digits.length - scale).replace(/0+$/, '');\n  return fracPart.length > 0 ? `${intPart}.${fracPart}` : intPart;\n}\n\n/** Compare two decimal strings. Returns -1 (a<b), 0 (a==b), or 1 (a>b). */\nexport function compareDecimal(a: string, b: string): -1 | 0 | 1 {\n  assertDecimal(a);\n  assertDecimal(b);\n  const scale = Math.max(fractionLength(a), fractionLength(b));\n  const av = toScaled(a, scale);\n  const bv = toScaled(b, scale);\n  return av < bv ? -1 : av > bv ? 1 : 0;\n}\n\n/** Sum a list of decimal strings without floating-point error. */\nexport function sumDecimal(values: readonly string[]): string {\n  if (values.length === 0) return '0';\n  let scale = 0;\n  for (const v of values) {\n    assertDecimal(v);\n    scale = Math.max(scale, fractionLength(v));\n  }\n  let total = 0n;\n  for (const v of values) total += toScaled(v, scale);\n  return fromScaled(total, scale);\n}\n\n/** Multiply two decimal strings exactly (e.g. median * \"3\" for price-sanity). */\nexport function mulDecimal(a: string, b: string): string {\n  assertDecimal(a);\n  assertDecimal(b);\n  const scaleA = fractionLength(a);\n  const scaleB = fractionLength(b);\n  const product = toScaled(a, scaleA) * toScaled(b, scaleB);\n  return fromScaled(product, scaleA + scaleB);\n}\n\n/** Convenience: a > b. */\nexport function gt(a: string, b: string): boolean {\n  return compareDecimal(a, b) === 1;\n}\n\n/** Convenience: a < b. */\nexport function lt(a: string, b: string): boolean {\n  return compareDecimal(a, b) === -1;\n}\n","/**\n * Minimal, safe glob matcher supporting only the `*` wildcard (matches any run\n * of characters, including none). Used for vendor host allowlists\n * (e.g. \"*.trusted.io\"), agent-id targeting (e.g. \"agt_research_*\"), and\n * Gate route pricing (e.g. \"/api/reports/*\").\n *\n * Deliberately NOT a regex from user input — the pattern is escaped so a\n * malicious policy value cannot inject regex behavior (ReDoS, etc.).\n */\nexport function globMatch(pattern: string, value: string): boolean {\n  const escaped = pattern.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&'); // escape regex metachars\n  const withWildcard = escaped.replace(/\\\\\\*/g, '.*'); // re-enable only `*`\n  return new RegExp(`^${withWildcard}$`).test(value);\n}\n\n/** True if `value` matches any pattern in the list. */\nexport function globMatchAny(patterns: readonly string[], value: string): boolean {\n  return patterns.some((p) => globMatch(p, value));\n}\n","/**\n * Minimal ULID generation, dependency-free. ULIDs are lexicographically\n * sortable (time-prefixed) and url-safe, which is why Rein uses them for all\n * primary keys instead of UUIDs. Works in Node 22 and modern browsers/edge via\n * the WebCrypto `globalThis.crypto`.\n */\n\n// Crockford's base32 alphabet (excludes I, L, O, U to avoid ambiguity).\nconst ENCODING = '0123456789ABCDEFGHJKMNPQRSTVWXYZ';\nconst TIME_LEN = 10;\nconst RANDOM_LEN = 16;\n\nfunction randomBytes(length: number): Uint8Array {\n  const bytes = new Uint8Array(length);\n  globalThis.crypto.getRandomValues(bytes);\n  return bytes;\n}\n\nfunction encodeTime(now: number): string {\n  let time = now;\n  let out = '';\n  for (let i = TIME_LEN - 1; i >= 0; i--) {\n    out = ENCODING.charAt(time % 32) + out;\n    time = Math.floor(time / 32);\n  }\n  return out;\n}\n\nfunction encodeRandom(): string {\n  let out = '';\n  for (const byte of randomBytes(RANDOM_LEN)) {\n    out += ENCODING.charAt(byte % 32);\n  }\n  return out;\n}\n\n/** Generate a 26-character ULID. */\nexport function ulid(seedTime: number = Date.now()): string {\n  return encodeTime(seedTime) + encodeRandom();\n}\n\n/** Generate a Stripe-style prefixed id, e.g. `newId('agt')` -> `agt_01J...`. */\nexport function newId<P extends string>(prefix: P): `${P}_${string}` {\n  return `${prefix}_${ulid()}`;\n}\n","import { z } from 'zod';\n\n/** Crockford base32 ULID body (26 chars), as produced by `ulid()`. */\nconst ULID_BODY = '[0-9A-HJKMNP-TV-Z]{26}';\n\n/**\n * A zod schema for a Stripe-style prefixed ULID, e.g. `agt_01J7...`.\n * Centralizing this keeps id formats consistent across DB rows, API payloads,\n * and SDK types.\n */\nexport function prefixedId(prefix: string) {\n  return z\n    .string()\n    .regex(new RegExp(`^${prefix}_${ULID_BODY}$`), `expected a \"${prefix}_\" prefixed id`);\n}\n\nexport const OrgId = prefixedId('org');\nexport const AgentId = prefixedId('agt');\nexport const PolicyId = prefixedId('pol');\nexport const IntentId = prefixedId('int');\nexport const DecisionId = prefixedId('dec');\nexport const ReceiptId = prefixedId('rcp');\nexport const SessionId = prefixedId('ses');\nexport const GateReceiptId = prefixedId('grc');\n\nexport type OrgId = z.infer<typeof OrgId>;\nexport type AgentId = z.infer<typeof AgentId>;\nexport type PolicyId = z.infer<typeof PolicyId>;\nexport type IntentId = z.infer<typeof IntentId>;\nexport type DecisionId = z.infer<typeof DecisionId>;\nexport type ReceiptId = z.infer<typeof ReceiptId>;\nexport type SessionId = z.infer<typeof SessionId>;\nexport type GateReceiptId = z.infer<typeof GateReceiptId>;\n","import { z } from 'zod';\nimport { AgentId, OrgId } from './ids.js';\nimport { Chain } from './chain.js';\n\n/**\n * Enforcement tier of a given agent wallet:\n * - `observed`    — Rein sees spend on-chain but has no control (no SDK either).\n * - `sdk`         — agent uses @reinconsole/sdk; advisory + observability (bypassable).\n * - `session-key` — signer-level scope; out-of-policy txs cannot be signed.\n */\nexport const EnforcementMode = z.enum(['observed', 'sdk', 'session-key']);\nexport type EnforcementMode = z.infer<typeof EnforcementMode>;\n\nexport const AgentWallet = z.object({\n  chain: Chain,\n  address: z.string().min(1),\n  mode: EnforcementMode,\n});\nexport type AgentWallet = z.infer<typeof AgentWallet>;\n\nexport const AgentStatus = z.enum(['active', 'frozen']);\nexport type AgentStatus = z.infer<typeof AgentStatus>;\n\nexport const Agent = z.object({\n  id: AgentId,\n  orgId: OrgId,\n  name: z.string().min(1).max(200),\n  /** On-chain ERC-8004 identity, if the agent is registered. */\n  erc8004Id: z.string().optional(),\n  wallets: z.array(AgentWallet).default([]),\n  status: AgentStatus.default('active'),\n  createdAt: z.coerce.date(),\n});\nexport type Agent = z.infer<typeof Agent>;\n","import { z } from 'zod';\n\n/**\n * The canonical string form of an ERC-8004 agent identity:\n *\n *     eip155:{chainId}:{identityRegistry}/{tokenId}\n *\n * The part before the `/` is the spec's registry reference verbatim (the\n * `agentRegistry` field of a registration file, CAIP-10 account form); the\n * tokenId is the ERC-721 id the Identity Registry minted (`agentId` in the\n * spec). This exact string is what `Agent.erc8004Id` / `Vendor.erc8004Id`\n * carry, AND the reputation-subject id a registered agent's evidence keys by.\n *\n * Casing is load-bearing: reputation subject keys for agent-kind ids are\n * case-sensitive unless they start with `0x` (see @reinconsole/graph\n * `normalizeSubject`), and an eip155 string does not. `formatErc8004Id`\n * therefore always emits the registry address in lowercase, and consumers must\n * never hand-build the string — parse then re-format to normalize.\n */\n\nexport interface Erc8004Ref {\n  /** EIP-155 chain id (e.g. 8453 Base, 84532 Base Sepolia). */\n  chainId: number;\n  /** Identity Registry contract address, lowercase 0x-hex. */\n  registry: string;\n  /** ERC-721 tokenId — the spec's `agentId`. bigint: token ids exceed 2^53. */\n  tokenId: bigint;\n}\n\nconst REGISTRY_PATTERN = /^0x[0-9a-fA-F]{40}$/;\nconst ID_PATTERN = /^eip155:(\\d+):(0x[0-9a-fA-F]{40})\\/(\\d+)$/;\n\n/** Build the canonical id string. Throws on a malformed ref (programmer error). */\nexport function formatErc8004Id(ref: Erc8004Ref): string {\n  if (!Number.isSafeInteger(ref.chainId) || ref.chainId < 1) {\n    throw new RangeError(`erc8004: bad chainId ${ref.chainId}`);\n  }\n  if (!REGISTRY_PATTERN.test(ref.registry)) {\n    throw new RangeError(`erc8004: bad registry address ${ref.registry}`);\n  }\n  if (typeof ref.tokenId !== 'bigint' || ref.tokenId < 0n) {\n    // The typeof guard matters for plain-JS callers: 1.5 < 0n is legal JS and\n    // false, and would mint the unparseable \"…/1.5\".\n    throw new RangeError(`erc8004: bad tokenId ${ref.tokenId}`);\n  }\n  return `eip155:${ref.chainId}:${ref.registry.toLowerCase()}/${ref.tokenId}`;\n}\n\n/**\n * Parse a canonical (or hand-written) id string. Accepts any address casing\n * and returns a lowercase ref, or undefined when malformed — so\n * `formatErc8004Id(parseErc8004Id(x)!)` is the normalization step.\n */\nexport function parseErc8004Id(value: string): Erc8004Ref | undefined {\n  const match = ID_PATTERN.exec(value);\n  if (!match) return undefined;\n  const chainId = Number(match[1]);\n  if (!Number.isSafeInteger(chainId) || chainId < 1) return undefined;\n  return {\n    chainId,\n    registry: match[2]!.toLowerCase(),\n    tokenId: BigInt(match[3]!),\n  };\n}\n\n/** Strict boundary schema for the id string (the fields themselves stay free-form). */\nexport const Erc8004Id = z\n  .string()\n  .refine((value) => parseErc8004Id(value) !== undefined, {\n    message: 'expected \"eip155:{chainId}:{registry}/{tokenId}\"',\n  });\nexport type Erc8004Id = z.infer<typeof Erc8004Id>;\n","import { z } from 'zod';\nimport { AgentId, IntentId } from './ids.js';\nimport { Chain, Asset } from './chain.js';\nimport { DecimalString } from './money.js';\n\nexport const Vendor = z.object({\n  host: z.string().min(1),\n  address: z.string().min(1),\n  erc8004Id: z.string().optional(),\n});\nexport type Vendor = z.infer<typeof Vendor>;\n\n/**\n * The observability gold: links every micro-payment back to the task and run\n * that caused it, so finance teams can answer \"what was this spend for?\".\n */\nexport const TaskContext = z.object({\n  taskId: z.string().optional(),\n  parentRunId: z.string().optional(),\n  purpose: z.string().max(500).optional(),\n});\nexport type TaskContext = z.infer<typeof TaskContext>;\n\n/**\n * A request to spend, submitted to the policy engine BEFORE any signature is\n * released. The `nonce` provides replay protection on the signer path.\n */\nexport const PaymentIntent = z.object({\n  id: IntentId,\n  agentId: AgentId,\n  vendor: Vendor,\n  resource: z.string(),\n  amount: DecimalString,\n  asset: Asset,\n  chain: Chain,\n  taskContext: TaskContext.default({}),\n  nonce: z.string().min(1),\n  createdAt: z.coerce.date(),\n});\nexport type PaymentIntent = z.infer<typeof PaymentIntent>;\n","import { z } from 'zod';\nimport { DecisionId, IntentId } from './ids.js';\n\nexport const DecisionOutcome = z.enum(['allow', 'deny', 'escalate']);\nexport type DecisionOutcome = z.infer<typeof DecisionOutcome>;\n\n/**\n * The signed, hash-chained record of a single policy evaluation. Written BEFORE\n * any signature is released. `prevHash` + `hash` form a tamper-evident chain;\n * `signature` is the policy service's signing key over `hash`. The eventual\n * on-chain `txHash` is attached later by the indexer (see SettledPayment).\n */\nexport const Decision = z.object({\n  id: DecisionId,\n  intentId: IntentId,\n  /**\n   * sha256 of the intent's canonical content (see canonical.ts). Binds the\n   * decision to the exact transfer it judged — amount, recipient, asset,\n   * chain — so a signer can verify an {intent, decision} pair offline as a\n   * self-contained spend voucher, not just a reference by id.\n   */\n  intentHash: z.string(),\n  outcome: DecisionOutcome,\n  /** Ids of the rules that fired, for explainability. */\n  matchedRules: z.array(z.string()).default([]),\n  /** Human-readable explanation surfaced in the dashboard. */\n  reason: z.string().optional(),\n  policyId: z.string(),\n  policyVersion: z.string(),\n  /** Hash of the previous decision in the chain (tamper-evident log). */\n  prevHash: z.string(),\n  /** Hash of this decision's canonical content. */\n  hash: z.string(),\n  /** Service signing-key signature over `hash`. */\n  signature: z.string(),\n  latencyMs: z.number().nonnegative(),\n  decidedAt: z.coerce.date(),\n});\nexport type Decision = z.infer<typeof Decision>;\n","import type { PaymentIntent } from './intent.js';\nimport type { DecisionOutcome } from './decision.js';\n\n/**\n * Canonical byte forms shared by the policy engine (which hashes and signs\n * them) and the signer (which verifies them offline). Field order is fixed,\n * dates are ISO strings, and absent optionals are explicit nulls, so the same\n * parsed object always canonicalizes to the same bytes — including after a\n * JSON round-trip over HTTP.\n *\n * These builders are pure (no node:crypto) so @reinconsole/core stays loadable in a\n * browser; services hash the strings with whatever sha256 they have.\n */\n\n/** Canonical form of an intent — what `Decision.intentHash` commits to. */\nexport function canonicalIntent(intent: PaymentIntent): string {\n  return JSON.stringify({\n    id: intent.id,\n    agentId: intent.agentId,\n    vendor: {\n      host: intent.vendor.host,\n      address: intent.vendor.address,\n      erc8004Id: intent.vendor.erc8004Id ?? null,\n    },\n    resource: intent.resource,\n    amount: intent.amount,\n    asset: intent.asset,\n    chain: intent.chain,\n    taskContext: {\n      taskId: intent.taskContext.taskId ?? null,\n      parentRunId: intent.taskContext.parentRunId ?? null,\n      purpose: intent.taskContext.purpose ?? null,\n    },\n    nonce: intent.nonce,\n    createdAt: intent.createdAt.toISOString(),\n  });\n}\n\n/** The decision fields covered by `Decision.hash` (and thus its signature). */\nexport interface DecisionContent {\n  intentId: string;\n  intentHash: string;\n  outcome: DecisionOutcome;\n  matchedRules: string[];\n  policyId: string;\n  policyVersion: string;\n  prevHash: string;\n  decidedAt: Date;\n}\n\n/** Canonical form of a decision — what `Decision.hash` is computed over. */\nexport function canonicalDecision(d: DecisionContent): string {\n  return JSON.stringify({\n    intentId: d.intentId,\n    intentHash: d.intentHash,\n    outcome: d.outcome,\n    matchedRules: d.matchedRules,\n    policyId: d.policyId,\n    policyVersion: d.policyVersion,\n    prevHash: d.prevHash,\n    decidedAt: d.decidedAt.toISOString(),\n  });\n}\n","import { z } from 'zod';\nimport { AgentId, SessionId } from './ids.js';\nimport { DecimalString } from './money.js';\n\n/**\n * A session-key grant: the signer tier's unit of delegated authority. The\n * agent process holds only the bearer token — the wallet key never leaves the\n * signer — and the stored record keeps a hash of the token, never the token\n * itself (it is returned exactly once, at creation).\n *\n * Caps here are the signer-side backstop UNDER whatever policy says: a\n * signature is released only when the engine allowed the intent AND the\n * session has room. Amounts are decimal strings in the asset's human units.\n */\nexport const Session = z.object({\n  id: SessionId,\n  agentId: AgentId,\n  /** sha256 hex of the bearer token. */\n  tokenHash: z.string(),\n  /** Cumulative ceiling across the session's lifetime. Absent = uncapped. */\n  capAmount: DecimalString.optional(),\n  /** Ceiling per individual signature. Absent = uncapped. */\n  maxPerPayment: DecimalString.optional(),\n  expiresAt: z.coerce.date(),\n  createdAt: z.coerce.date(),\n  revokedAt: z.coerce.date().optional(),\n});\nexport type Session = z.infer<typeof Session>;\n","import { z } from 'zod';\nimport { IntentId } from './ids.js';\nimport { Chain } from './chain.js';\nimport { DecimalString } from './money.js';\n\n/**\n * On-chain confirmation of a settled payment, reconciled by the indexer against\n * the originating intent (amount + recipient + nonce, or facilitator webhook).\n */\nexport const SettledPayment = z.object({\n  intentId: IntentId,\n  txHash: z.string(),\n  chain: Chain,\n  blockNumber: z.coerce.bigint(),\n  facilitator: z.string().optional(),\n  feePaid: DecimalString.optional(),\n  confirmedAt: z.coerce.date(),\n});\nexport type SettledPayment = z.infer<typeof SettledPayment>;\n","import { z } from 'zod';\nimport { ReceiptId, IntentId, DecisionId, AgentId } from './ids.js';\nimport { Chain, Asset } from './chain.js';\nimport { DecimalString } from './money.js';\nimport { TaskContext } from './intent.js';\nimport { DecisionOutcome } from './decision.js';\n\n/**\n * What the SDK reports back after settlement: the `X-PAYMENT-RESPONSE` header\n * a vendor returns once payment clears. Mock facilitators fill this in v0.1;\n * the indexer reconciles it against on-chain truth later (see SettledPayment).\n */\nexport const ReceiptSettlement = z.object({\n  txHash: z.string().optional(),\n  networkId: z.string().optional(),\n  /** Raw header payload, kept for forensics until the indexer confirms. */\n  raw: z.string().optional(),\n});\nexport type ReceiptSettlement = z.infer<typeof ReceiptSettlement>;\n\n/**\n * The SDK-side record of one guarded payment attempt: which request triggered\n * it, what the engine decided, and (if allowed and paid) how it settled.\n * Receipts are the observability primitive — every 402 the guard touches\n * produces exactly one, whether the payment was allowed or blocked.\n */\nexport const Receipt = z.object({\n  id: ReceiptId,\n  agentId: AgentId,\n  intentId: IntentId,\n  decisionId: DecisionId,\n  outcome: DecisionOutcome,\n  /** The URL the agent actually fetched (the paywalled resource). */\n  url: z.string(),\n  method: z.string().default('GET'),\n  vendorHost: z.string(),\n  amount: DecimalString,\n  asset: Asset,\n  chain: Chain,\n  taskContext: TaskContext.default({}),\n  /** Human-readable explanation copied from the decision. */\n  reason: z.string().optional(),\n  /** Present only once a payment was made and the vendor confirmed it. */\n  settlement: ReceiptSettlement.optional(),\n  createdAt: z.coerce.date(),\n});\nexport type Receipt = z.infer<typeof Receipt>;\n","import { z } from 'zod';\nimport { GateReceiptId } from './ids.js';\nimport { DecimalString } from './money.js';\n\n/**\n * The vendor-side twin of `Receipt`: one settled x402 payment as the GATE saw\n * it — who paid, for which priced route, and the settlement transaction. The\n * agent-side Receipt records what an agent tried to spend; a GateReceipt\n * records what a vendor actually earned.\n */\nexport const GateReceipt = z.object({\n  id: GateReceiptId,\n  at: z.coerce.date(),\n  /** The route pattern that priced this request, e.g. \"/api/reports/*\". */\n  route: z.string().min(1),\n  /** The concrete resource paid for (URL path actually requested). */\n  resource: z.string().min(1),\n  method: z.string().min(1),\n  /** The paying wallet address, as asserted by the settled payment. */\n  payer: z.string().min(1),\n  payTo: z.string().min(1),\n  /** Human-unit decimal amount, e.g. \"0.05\". */\n  amount: DecimalString,\n  /** The same amount in the asset's atomic units, e.g. \"50000\". */\n  amountAtomic: z.string().regex(/^\\d+$/, 'atomic amount must be an integer string'),\n  /** Token symbol or contract address, exactly as quoted in the requirement. */\n  asset: z.string().min(1),\n  network: z.string().min(1),\n  /** Settlement transaction hash (mock ledger or on-chain). */\n  transaction: z.string().min(1),\n});\nexport type GateReceipt = z.infer<typeof GateReceipt>;\n","import { z } from 'zod';\nimport { Chain } from './chain.js';\nimport { DecimalString } from './money.js';\n\n/** A rolling-window spec, e.g. \"24h\", \"1h\", \"30m\", \"7d\". */\nexport const Window = z\n  .string()\n  .regex(/^\\d+[smhd]$/, 'window must be like \"30s\", \"15m\", \"1h\", or \"7d\"');\nexport type Window = z.infer<typeof Window>;\n\n/** A relative multiplier, e.g. \"3x\" (used for price-sanity checks). */\nexport const Multiplier = z.string().regex(/^\\d+(\\.\\d+)?x$/, 'multiplier must be like \"3x\"');\nexport type Multiplier = z.infer<typeof Multiplier>;\n\n/**\n * The set of predicates a rule can test. Multiple predicates in one condition\n * are ANDed together. Each maps to an evaluator in the policy engine.\n */\nexport const Condition = z\n  .object({\n    /** Per-transaction amount exceeds this value. */\n    amountGt: DecimalString.optional(),\n    /** Sum of spend in a rolling window exceeds `gt`. */\n    rollingSum: z.object({ window: Window, gt: DecimalString }).optional(),\n    /** Transaction count in a rolling window exceeds `gt`. */\n    txCount: z.object({ window: Window, gt: z.number().int().nonnegative() }).optional(),\n    /** Vendor host matches one of these patterns (supports `*` globs). */\n    vendorHostIn: z.array(z.string()).optional(),\n    /** First time Rein has seen this vendor for the agent. */\n    vendorFirstSeen: z.boolean().optional(),\n    /** Vendor reputation score is below this threshold (Phase 3 hook). */\n    vendorReputationLt: z.number().min(0).max(100).optional(),\n    /** Amount is more than `gt`-times the observed median for this resource. */\n    amountVsResourceMedian: z.object({ gt: Multiplier }).optional(),\n  })\n  .refine((c) => Object.values(c).some((v) => v !== undefined), {\n    message: 'a condition must specify at least one predicate',\n  });\nexport type Condition = z.infer<typeof Condition>;\n\n/**\n * A single rule: an id plus exactly one action (allow / deny / escalate) whose\n * value is the condition that triggers it.\n */\nexport const Rule = z\n  .object({\n    id: z.string().min(1),\n    allow: Condition.optional(),\n    deny: Condition.optional(),\n    escalate: Condition.optional(),\n  })\n  .refine((r) => [r.allow, r.deny, r.escalate].filter((v) => v !== undefined).length === 1, {\n    message: 'a rule must specify exactly one of allow / deny / escalate',\n  });\nexport type Rule = z.infer<typeof Rule>;\n\nexport const PolicyDefault = z.enum(['allow', 'deny']);\nexport type PolicyDefault = z.infer<typeof PolicyDefault>;\n\nexport const AppliesTo = z.object({\n  /** Agent id patterns (supports `*` globs, e.g. \"agt_research_*\"). */\n  agents: z.array(z.string()).optional(),\n  chains: z.array(Chain).optional(),\n});\nexport type AppliesTo = z.infer<typeof AppliesTo>;\n\nexport const Escalation = z.object({\n  approvers: z.array(z.string()).default([]),\n  timeoutAction: PolicyDefault.default('deny'),\n  timeoutMin: z.number().int().positive().default(15),\n});\nexport type Escalation = z.infer<typeof Escalation>;\n\n/**\n * A declarative, versioned, immutable-once-active policy. Evaluation order in\n * the engine is: explicit DENY > ESCALATE > ALLOW > `default`.\n */\nexport const Policy = z.object({\n  policyId: z.string().min(1),\n  version: z.string().default('1'),\n  appliesTo: AppliesTo.default({}),\n  rules: z.array(Rule).default([]),\n  default: PolicyDefault.default('deny'),\n  /** Below this amount, fail-open is permitted during a policy-service outage. */\n  denyFloor: DecimalString.default('0.05'),\n  escalation: Escalation.optional(),\n});\nexport type Policy = z.infer<typeof Policy>;\n","import { z } from 'zod';\n\nexport const ReputationSubject = z.object({\n  kind: z.enum(['agent', 'vendor']),\n  id: z.string(),\n});\nexport type ReputationSubject = z.infer<typeof ReputationSubject>;\n\nexport const ReputationComponents = z.object({\n  volume: z.number(),\n  longevity: z.number(),\n  disputeRate: z.number(),\n  counterpartyQuality: z.number(),\n  settlementReliability: z.number(),\n});\nexport type ReputationComponents = z.infer<typeof ReputationComponents>;\n\n/**\n * A reputation score for an agent or vendor (Phase 3 — Graph). `confidence` is\n * first-class: a thin-history subject returns LOW confidence rather than a\n * misleadingly high score, so policy can avoid both false trust and unfair\n * freezing.\n */\nexport const ReputationScore = z.object({\n  subject: ReputationSubject,\n  score: z.number().min(0).max(100),\n  components: ReputationComponents,\n  confidence: z.number().min(0).max(1),\n  asOf: z.coerce.date(),\n  /** Hash-anchored attestation, optionally published on-chain (ERC-8004). */\n  evidenceUri: z.string().optional(),\n});\nexport type ReputationScore = z.infer<typeof ReputationScore>;\n","import { z } from 'zod';\nimport { AgentId, DecisionId, IntentId, SessionId } from './ids.js';\nimport { Chain } from './chain.js';\nimport { DecimalString } from './money.js';\nimport { PaymentIntent } from './intent.js';\nimport { Decision } from './decision.js';\nimport { SettledPayment } from './payment.js';\nimport { GateReceipt } from './gate-receipt.js';\n\n/**\n * The canonical event envelope published on the bus (NATS in production).\n * `shadow.spend` is emitted when the indexer sees on-chain spend from a managed\n * wallet with NO corresponding ALLOW decision — the bypass signal that catches\n * SDK-mode evasion and drives the upgrade to the signer tier.\n * `signature.released` / `signature.refused` are that tier's heartbeat: every\n * time the signer does or does not put a key to work, the bus knows why.\n * `gate.*` is the vendor side of the wire: every quote a Gate issues, every\n * payment it accepts, every payment it turns away.\n */\nexport const ReinEvent = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('intent.created'), at: z.coerce.date(), intent: PaymentIntent }),\n  z.object({ type: z.literal('decision.made'), at: z.coerce.date(), decision: Decision }),\n  z.object({ type: z.literal('payment.settled'), at: z.coerce.date(), payment: SettledPayment }),\n  z.object({\n    type: z.literal('shadow.spend'),\n    at: z.coerce.date(),\n    agentId: AgentId,\n    txHash: z.string(),\n    chain: Chain,\n    amount: DecimalString,\n  }),\n  z.object({\n    type: z.literal('signature.released'),\n    at: z.coerce.date(),\n    sessionId: SessionId,\n    agentId: AgentId,\n    intentId: IntentId,\n    decisionId: DecisionId,\n    amount: DecimalString,\n  }),\n  z.object({\n    type: z.literal('signature.refused'),\n    at: z.coerce.date(),\n    /** Refusal code, e.g. \"decision_replayed\" (see @reinconsole/signer). */\n    code: z.string(),\n    reason: z.string(),\n    sessionId: SessionId.optional(),\n    agentId: AgentId.optional(),\n    intentId: IntentId.optional(),\n  }),\n  z.object({\n    type: z.literal('gate.quoted'),\n    at: z.coerce.date(),\n    resource: z.string(),\n    method: z.string(),\n    amount: DecimalString,\n    asset: z.string(),\n    network: z.string(),\n  }),\n  z.object({ type: z.literal('gate.settled'), at: z.coerce.date(), receipt: GateReceipt }),\n  z.object({\n    type: z.literal('gate.refused'),\n    at: z.coerce.date(),\n    /** Refusal code, e.g. \"payment_replayed\" (see @reinconsole/gate). */\n    code: z.string(),\n    reason: z.string(),\n    resource: z.string(),\n    /** Known only when the payment header decoded far enough to name a payer. */\n    payer: z.string().optional(),\n  }),\n]);\nexport type ReinEvent = z.infer<typeof ReinEvent>;\n"]}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@reinconsole/core",
+  "version": "0.1.0",
+  "description": "Canonical zod schemas and shared types for Rein — the single source of truth for DB rows, API payloads, and SDK types.",
+  "license": "MIT",
+  "homepage": "https://github.com/bugiiiii11/rein#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/bugiiiii11/rein.git",
+    "directory": "packages/core"
+  },
+  "bugs": "https://github.com/bugiiiii11/rein/issues",
+  "keywords": [
+    "rein",
+    "x402",
+    "ai-agents",
+    "agent-payments",
+    "payments",
+    "zod",
+    "schemas"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "zod": "^3.24.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "tsup": "^8.3.5",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "clean": "rimraf dist .turbo"
+  }
+}