@reppo/cli 0.1.0

package/dist/config/load.d.ts

@@ -0,0 +1,19 @@
+import type { Network } from '../chain/addresses.js';
+export interface Config {
+    network: Network;
+    rpcUrl: string | undefined;
+    /**
+     * Reppo platform API base URL. Mainnet defaults to https://api.reppo.xyz.
+     * Testnet has no stable hosted endpoint yet — operators MUST set
+     * REPPO_API_URL when network=testnet (commands that don't talk to the
+     * platform API ignore this).
+     */
+    apiUrl: string | undefined;
+    apiKey: string | undefined;
+    privateKey: `0x${string}` | undefined;
+    voterPrivateKey: `0x${string}` | undefined;
+}
+export declare function loadConfig(overrides?: {
+    network?: Network;
+}): Config;
+//# sourceMappingURL=load.d.ts.map

package/dist/config/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../src/config/load.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAGrD,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;;;;OAKG;IACH,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,UAAU,EAAE,KAAK,MAAM,EAAE,GAAG,SAAS,CAAC;IACtC,eAAe,EAAE,KAAK,MAAM,EAAE,GAAG,SAAS,CAAC;CAC5C;AAmCD,wBAAgB,UAAU,CAAC,SAAS,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CAoCxE"}

package/dist/config/load.js

@@ -0,0 +1,66 @@
+/**
+ * Layered config:
+ *   1. CLI flags (handled by clipanion at the command level)
+ *   2. .reppo.json in cwd
+ *   3. ~/.reppo/config.json
+ *   4. Environment variables
+ *   5. Built-in defaults
+ *
+ * Each value records its source so --debug can print "REPPO_NETWORK=mainnet
+ * (from env)".
+ */
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { cliError } from '../output/format.js';
+const DEFAULT_API_MAINNET = 'https://api.reppo.xyz';
+function readJsonIfExists(path) {
+    if (!existsSync(path))
+        return {};
+    try {
+        return JSON.parse(readFileSync(path, 'utf-8'));
+    }
+    catch {
+        return {};
+    }
+}
+function normalizePk(raw) {
+    if (!raw)
+        return undefined;
+    const trimmed = raw.trim();
+    if (trimmed.startsWith('0x') && /^0x[0-9a-fA-F]{64}$/.test(trimmed)) {
+        return trimmed;
+    }
+    if (/^[0-9a-fA-F]{64}$/.test(trimmed)) {
+        return `0x${trimmed}`;
+    }
+    throw cliError('INVALID_PRIVATE_KEY', 'Private key must be a 32-byte hex string (0x-prefixed or bare 64 hex chars).', 'Check that REPPO_PRIVATE_KEY (or REPPO_VOTER_PRIVATE_KEY) is exactly 64 hex chars, optionally 0x-prefixed.');
+}
+export function loadConfig(overrides = {}) {
+    const cwd = readJsonIfExists(join(process.cwd(), '.reppo.json'));
+    const home = readJsonIfExists(join(homedir(), '.reppo', 'config.json'));
+    const networkRaw = overrides.network ??
+        process.env.REPPO_NETWORK ??
+        cwd.network ??
+        home.network ??
+        'mainnet';
+    if (networkRaw !== 'mainnet' && networkRaw !== 'testnet') {
+        throw cliError('INVALID_NETWORK', `Invalid network "${networkRaw}" — must be "mainnet" or "testnet".`, 'Set REPPO_NETWORK=mainnet (default) or REPPO_NETWORK=testnet, or pass --network <name>.');
+    }
+    const network = networkRaw;
+    const apiUrlRaw = process.env.REPPO_API_URL ??
+        cwd.apiUrl ??
+        home.apiUrl ??
+        (network === 'mainnet' ? DEFAULT_API_MAINNET : undefined);
+    // Strip trailing slash so callers can append `${apiUrl}/me/agents` cleanly.
+    const apiUrl = apiUrlRaw?.replace(/\/+$/, '');
+    return {
+        network,
+        rpcUrl: process.env.REPPO_RPC_URL ?? cwd.rpcUrl ?? home.rpcUrl,
+        apiUrl,
+        apiKey: process.env.REPPO_API_KEY,
+        privateKey: normalizePk(process.env.REPPO_PRIVATE_KEY),
+        voterPrivateKey: normalizePk(process.env.REPPO_VOTER_PRIVATE_KEY),
+    };
+}
+//# sourceMappingURL=load.js.map

package/dist/config/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../src/config/load.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAiB/C,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAQpD,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAc,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAuB;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,OAAO,OAAwB,CAAC;IAClC,CAAC;IACD,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,KAAK,OAAO,EAAE,CAAC;IACxB,CAAC;IACD,MAAM,QAAQ,CACZ,qBAAqB,EACrB,8EAA8E,EAC9E,4GAA4G,CAC7G,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,YAAmC,EAAE;IAC9D,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;IAExE,MAAM,UAAU,GACd,SAAS,CAAC,OAAO;QACjB,OAAO,CAAC,GAAG,CAAC,aAAa;QACzB,GAAG,CAAC,OAAO;QACX,IAAI,CAAC,OAAO;QACZ,SAAS,CAAC;IAEZ,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,QAAQ,CACZ,iBAAiB,EACjB,oBAAoB,UAAU,qCAAqC,EACnE,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAY,UAAU,CAAC;IAEpC,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,aAAa;QACzB,GAAG,CAAC,MAAM;QACV,IAAI,CAAC,MAAM;QACX,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5D,4EAA4E;IAC5E,MAAM,MAAM,GAAG,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAE9C,OAAO;QACL,OAAO;QACP,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;QAC9D,MAAM;QACN,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;QACjC,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACtD,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;KAClE,CAAC;AACJ,CAAC"}

package/dist/output/format.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Output formatting for the CLI. Two modes:
+ *   - human (default): printed via console.log, friendly multi-line
+ *   - json: single JSON object on stdout per command
+ *
+ * Errors ALWAYS emit JSON on stderr regardless of mode, with a stable
+ * `code` field agents can match on. Human mode also prints a friendly
+ * line to stderr above the JSON for terminal users.
+ */
+export type OutputMode = 'human' | 'json';
+export interface CliError {
+    code: string;
+    message: string;
+    hint?: string;
+    details?: Record<string, unknown>;
+}
+export interface FormatContext {
+    mode: OutputMode;
+}
+export declare function setOutputMode(mode: OutputMode): void;
+export declare function getOutputMode(): OutputMode;
+/**
+ * Build a thrown error with the CLI's stable `code` field (and optional
+ * `hint`) attached. Replaces the repeated
+ * `Object.assign(new Error(msg), { code, hint })` pattern across commands.
+ *
+ * `hint` is only attached when supplied — under `exactOptionalPropertyTypes`,
+ * `{ hint: undefined }` and "no hint" are distinct, and `fail()` only renders
+ * the hint when the property is actually present.
+ */
+export declare function cliError(code: string, message: string, hint?: string): Error & {
+    code: string;
+    hint?: string;
+};
+/** Emit a successful command result. */
+export declare function emit(payload: Record<string, unknown>, humanLines?: string[]): void;
+/**
+ * Emit a structured error to stderr and exit non-zero. Always JSON on
+ * stderr — agents reading stderr always get parseable output, regardless
+ * of mode.
+ */
+export declare function fail(err: CliError, exitCode?: number): never;
+//# sourceMappingURL=format.d.ts.map

package/dist/output/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/output/format.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;AAE1C,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,CAAC;CAClB;AAID,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAEpD;AAED,wBAAgB,aAAa,IAAI,UAAU,CAE1C;AAED;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAG9G;AAED,wCAAwC;AACxC,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAUlF;AAED;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,SAAI,GAAG,KAAK,CAOvD"}

package/dist/output/format.js

@@ -0,0 +1,58 @@
+/**
+ * Output formatting for the CLI. Two modes:
+ *   - human (default): printed via console.log, friendly multi-line
+ *   - json: single JSON object on stdout per command
+ *
+ * Errors ALWAYS emit JSON on stderr regardless of mode, with a stable
+ * `code` field agents can match on. Human mode also prints a friendly
+ * line to stderr above the JSON for terminal users.
+ */
+let activeMode = 'human';
+export function setOutputMode(mode) {
+    activeMode = mode;
+}
+export function getOutputMode() {
+    return activeMode;
+}
+/**
+ * Build a thrown error with the CLI's stable `code` field (and optional
+ * `hint`) attached. Replaces the repeated
+ * `Object.assign(new Error(msg), { code, hint })` pattern across commands.
+ *
+ * `hint` is only attached when supplied — under `exactOptionalPropertyTypes`,
+ * `{ hint: undefined }` and "no hint" are distinct, and `fail()` only renders
+ * the hint when the property is actually present.
+ */
+export function cliError(code, message, hint) {
+    const err = new Error(message);
+    return Object.assign(err, hint !== undefined ? { code, hint } : { code });
+}
+/** Emit a successful command result. */
+export function emit(payload, humanLines) {
+    if (activeMode === 'json') {
+        process.stdout.write(JSON.stringify(payload) + '\n');
+        return;
+    }
+    if (humanLines) {
+        for (const line of humanLines)
+            process.stdout.write(line + '\n');
+    }
+    else {
+        process.stdout.write(JSON.stringify(payload, null, 2) + '\n');
+    }
+}
+/**
+ * Emit a structured error to stderr and exit non-zero. Always JSON on
+ * stderr — agents reading stderr always get parseable output, regardless
+ * of mode.
+ */
+export function fail(err, exitCode = 1) {
+    if (activeMode === 'human') {
+        process.stderr.write(`✗ ${err.code}: ${err.message}\n`);
+        if (err.hint)
+            process.stderr.write(`  hint: ${err.hint}\n`);
+    }
+    process.stderr.write(JSON.stringify({ error: err }) + '\n');
+    process.exit(exitCode);
+}
+//# sourceMappingURL=format.js.map

package/dist/output/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/output/format.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAeH,IAAI,UAAU,GAAe,OAAO,CAAC;AAErC,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,OAAe,EAAE,IAAa;IACnE,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,IAAI,CAAC,OAAgC,EAAE,UAAqB;IAC1E,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,UAAU;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAAC,GAAa,EAAE,QAAQ,GAAG,CAAC;IAC9C,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC"}

package/dist/state/db.d.ts

@@ -0,0 +1,47 @@
+export type IdempotencyStatus = 'pending' | 'submitted' | 'confirmed' | 'failed';
+export interface IdempotencyEntry {
+    command: string;
+    /**
+     * Deterministic SHA-256 of the canonicalized command args (e.g.
+     * `{podId, subnetId, like}` for vote). Stored on first write so the
+     * cache can detect a key being reused for a different intent within
+     * the same command — `IDEMPOTENCY_COMMAND_MISMATCH` only catches
+     * cross-command reuse, not (vote pod 39 like) vs (vote pod 41 dislike)
+     * under one key.
+     */
+    argsFingerprint: string;
+    status: IdempotencyStatus;
+    result: Record<string, unknown>;
+    txHash: string | null;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface SessionEntry {
+    /** Optional — only set for /api/v1/agents/* persistent tokens. */
+    agentId?: string;
+    accessToken: string;
+    walletAddress: string | null;
+    /**
+     * Optional — set for api.reppo.xyz wallet-auth sessions (24h tokens).
+     * Epoch ms. Callers should treat the session as expired when
+     * Date.now() >= expiresAt.
+     */
+    expiresAt?: number;
+    createdAt: number;
+}
+export declare function getIdempotent(key: string): Promise<IdempotencyEntry | null>;
+/**
+ * Insert OR update an idempotency entry under the lock. Allowed
+ * transitions:
+ *   - first write (no prior entry): always allowed
+ *   - same command, same argsFingerprint, non-terminal status: allowed
+ *   - different command for the same key: rejected (caller bug)
+ *   - same command, different argsFingerprint: rejected (caller bug —
+ *     reusing one key across different intents would silently return
+ *     the wrong cached result)
+ *   - confirmed → anything: rejected (final state)
+ */
+export declare function upsertIdempotent(key: string, entry: IdempotencyEntry): Promise<void>;
+export declare function getSession(network: string, name: string): Promise<SessionEntry | null>;
+export declare function saveSession(network: string, name: string, entry: SessionEntry): Promise<void>;
+//# sourceMappingURL=db.d.ts.map

package/dist/state/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/state/db.ts"],"names":[],"mappings":"AAuBA,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEjF,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAmGD,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAGjF;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuC1F;AAID,wBAAsB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAG5F;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAKnG"}

package/dist/state/db.js

@@ -0,0 +1,169 @@
+/**
+ * Tiny JSON-file store at ~/.reppo/cli-state.json. Used for the
+ * idempotency cache and platform-API session tokens. Pure JS — no native
+ * deps. Concurrent CLI invocations are serialized via proper-lockfile.
+ *
+ * Schema:
+ *   {
+ *     idempotency: { [key]: { command, status, result, txHash, createdAt, updatedAt } },
+ *     sessions:    { [`${network}:${name}`]: { agentId, accessToken, walletAddress, createdAt } }
+ *   }
+ *
+ * Concurrency model: every read-modify-write goes through `withLockedState`
+ * which acquires a proper-lockfile lock on the state file path BEFORE the
+ * read. Concurrent invocations queue. The state file is touched (created
+ * empty) under the same lock to avoid the lockfile-on-nonexistent-file
+ * footgun.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, chmodSync, renameSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { homedir } from 'node:os';
+import lockfile from 'proper-lockfile';
+import { cliError } from '../output/format.js';
+function statePath() {
+    return process.env.REPPO_STATE_PATH ?? `${homedir()}/.reppo/cli-state.json`;
+}
+function emptyState() {
+    return { idempotency: {}, sessions: {} };
+}
+/**
+ * Ensure the state file exists with 0o600 perms. Idempotent. The
+ * proper-lockfile library refuses to lock a non-existent path, so we
+ * have to create it before requesting the lock.
+ */
+function ensureFile(path) {
+    // Owner-only on the parent dir too, not just the state file. mkdirSync
+    // without a mode would default to 0o777 & ~umask (typically 0o755) —
+    // which lets anyone on a shared system enumerate ~/.reppo/ and read
+    // any quarantine files we leave behind.
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    try {
+        chmodSync(dirname(path), 0o700);
+    }
+    catch { /* best-effort */ }
+    if (!existsSync(path)) {
+        writeFileSync(path, JSON.stringify(emptyState()), { mode: 0o600 });
+        return;
+    }
+    // Re-assert 0o600 on every access. `mode` in writeFileSync only takes
+    // effect on creation; if a user ever chmodded the file, this fixes it.
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch { /* best-effort */ }
+}
+function readUnsafe(path) {
+    const raw = readFileSync(path, 'utf-8');
+    try {
+        const parsed = JSON.parse(raw);
+        return {
+            idempotency: parsed.idempotency ?? {},
+            sessions: parsed.sessions ?? {},
+        };
+    }
+    catch (err) {
+        // Corrupt state — quarantine the bad file and start fresh, but
+        // surface the corruption to the user. Silently dropping records
+        // would defeat the whole idempotency contract.
+        const quarantine = `${path}.corrupt-${Date.now()}`;
+        try {
+            renameSync(path, quarantine);
+            // rename preserves perms but be defensive — the source file's
+            // mode might have drifted before the corruption.
+            chmodSync(quarantine, 0o600);
+        }
+        catch { /* best-effort */ }
+        process.stderr.write(`[reppo-cli] WARNING: state file ${path} was corrupt and has been ` +
+            `moved to ${quarantine}. Idempotency cache reset. Original error: ${err.message}\n`);
+        return emptyState();
+    }
+}
+function writeUnsafe(path, s) {
+    writeFileSync(path, JSON.stringify(s, null, 2), { mode: 0o600 });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch { /* best-effort */ }
+}
+/**
+ * Acquire the state-file lock, run `mutator(currentState)`, persist its
+ * return value, release the lock. The mutator runs inside the critical
+ * section so reads + decisions + writes are atomic.
+ */
+async function withLockedState(mutator) {
+    const path = statePath();
+    ensureFile(path);
+    const release = await lockfile.lock(path, {
+        retries: { retries: 10, minTimeout: 50, maxTimeout: 500, factor: 2 },
+        stale: 10_000,
+    });
+    try {
+        const current = readUnsafe(path);
+        const next = await mutator(current);
+        writeUnsafe(path, next.state);
+        return next.result;
+    }
+    finally {
+        await release();
+    }
+}
+/** Read-only state access. Acquires the lock briefly. */
+async function readLocked() {
+    return withLockedState((s) => ({ state: s, result: s }));
+}
+// ── Idempotency API ────────────────────────────────────────────────────
+export async function getIdempotent(key) {
+    const s = await readLocked();
+    return s.idempotency[key] ?? null;
+}
+/**
+ * Insert OR update an idempotency entry under the lock. Allowed
+ * transitions:
+ *   - first write (no prior entry): always allowed
+ *   - same command, same argsFingerprint, non-terminal status: allowed
+ *   - different command for the same key: rejected (caller bug)
+ *   - same command, different argsFingerprint: rejected (caller bug —
+ *     reusing one key across different intents would silently return
+ *     the wrong cached result)
+ *   - confirmed → anything: rejected (final state)
+ */
+export async function upsertIdempotent(key, entry) {
+    await withLockedState((s) => {
+        const prior = s.idempotency[key];
+        if (prior) {
+            if (prior.command !== entry.command) {
+                throw cliError('IDEMPOTENCY_COMMAND_MISMATCH', `idempotency key "${key}" was previously used by command "${prior.command}", ` +
+                    `not "${entry.command}". Use a unique key per (command, intent) pair.`, 'Use a key like "<command>-<intent>-<id>" (e.g. "vote-pod-34-like") so commands cannot collide.');
+            }
+            if (prior.argsFingerprint !== entry.argsFingerprint) {
+                // Pre-v0.2 entries lack argsFingerprint — render a placeholder so
+                // a legacy entry produces a clean structured error here too,
+                // rather than crashing on `.slice()` of undefined. Normal command
+                // flow catches legacy entries earlier via IDEMPOTENCY_LEGACY_ENTRY,
+                // but `upsertIdempotent` is a public API and may be called directly.
+                const priorFp = prior.argsFingerprint ? prior.argsFingerprint.slice(0, 12) : '(legacy)';
+                throw cliError('IDEMPOTENCY_ARGS_MISMATCH', `idempotency key "${key}" was previously used with different args ` +
+                    `(fingerprint ${priorFp}…) and is now being reused with new args ` +
+                    `(fingerprint ${entry.argsFingerprint.slice(0, 12)}…).`, 'A given idempotency key represents a single intent. Use a fresh key when the args change (e.g. different --pod or --like value).');
+            }
+            if (prior.status === 'confirmed') {
+                throw cliError('IDEMPOTENCY_TERMINAL_STATE', `idempotency key "${key}" is already in terminal state "confirmed"; ` +
+                    `refusing to overwrite. Use a new key for a new attempt.`, 'A confirmed key is final. Use a fresh --idempotency-key for a new attempt.');
+            }
+        }
+        s.idempotency[key] = { ...entry, updatedAt: Date.now() };
+        return { state: s, result: undefined };
+    });
+}
+// ── Session API ────────────────────────────────────────────────────────
+export async function getSession(network, name) {
+    const s = await readLocked();
+    return s.sessions[`${network}:${name}`] ?? null;
+}
+export async function saveSession(network, name, entry) {
+    await withLockedState((s) => {
+        s.sessions[`${network}:${name}`] = entry;
+        return { state: s, result: undefined };
+    });
+}
+//# sourceMappingURL=db.js.map

package/dist/state/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/state/db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAyC/C,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,OAAO,EAAE,wBAAwB,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,uEAAuE;IACvE,qEAAqE;IACrE,oEAAoE;IACpE,wCAAwC;IACxC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC;QAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IACD,sEAAsE;IACtE,uEAAuE;IACvE,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QACjD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;SAChC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+DAA+D;QAC/D,gEAAgE;QAChE,+CAA+C;QAC/C,MAAM,UAAU,GAAG,GAAG,IAAI,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC7B,8DAA8D;YAC9D,iDAAiD;YACjD,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mCAAmC,IAAI,4BAA4B;YACnE,YAAY,UAAU,8CAA+C,GAAa,CAAC,OAAO,IAAI,CAC/F,CAAC;QACF,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,CAAQ;IACzC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAC5B,OAAyF;IAEzF,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;QACxC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE;QACpE,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,KAAK,UAAU,UAAU;IACvB,OAAO,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,0EAA0E;AAE1E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;IAC7B,OAAO,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACpC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,KAAuB;IACzE,MAAM,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;gBACpC,MAAM,QAAQ,CACZ,8BAA8B,EAC9B,oBAAoB,GAAG,qCAAqC,KAAK,CAAC,OAAO,KAAK;oBAC5E,QAAQ,KAAK,CAAC,OAAO,iDAAiD,EACxE,gGAAgG,CACjG,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;gBACpD,kEAAkE;gBAClE,6DAA6D;gBAC7D,kEAAkE;gBAClE,oEAAoE;gBACpE,qEAAqE;gBACrE,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;gBACxF,MAAM,QAAQ,CACZ,2BAA2B,EAC3B,oBAAoB,GAAG,4CAA4C;oBACjE,gBAAgB,OAAO,2CAA2C;oBAClE,gBAAgB,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,EACzD,kIAAkI,CACnI,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,QAAQ,CACZ,4BAA4B,EAC5B,oBAAoB,GAAG,8CAA8C;oBACnE,yDAAyD,EAC3D,4EAA4E,CAC7E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACzD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAE1E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAe,EAAE,IAAY;IAC5D,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;IAC7B,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,IAAY,EAAE,KAAmB;IAClF,MAAM,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1B,CAAC,CAAC,QAAQ,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC;QACzC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/state/idempotency.d.ts

@@ -0,0 +1,66 @@
+import { type IdempotencyEntry, type IdempotencyStatus } from './db.js';
+export type { IdempotencyEntry, IdempotencyStatus };
+/**
+ * Decision returned by `peekIdempotent` so write commands can decide what
+ * to do *before* spending gas:
+ *   - 'proceed'           — no cache hit (or pre-submit failure); do the work.
+ *   - 'return-confirmed'  — cache has a final result; emit it and skip.
+ *   - 'return-submitted'  — cache has a tx hash that hasn't confirmed yet;
+ *                           emit it and tell the caller to poll the explorer.
+ * Two terminal "do not retry" states (`pending`, `failed-after-broadcast`)
+ * throw inside the helper because they never make sense to handle inline.
+ */
+export type CacheDecision<R> = {
+    kind: 'proceed';
+} | {
+    kind: 'return-confirmed';
+    result: R;
+    txHash: string | null;
+} | {
+    kind: 'return-submitted';
+    result: R;
+    txHash: string | null;
+};
+/**
+ * SHA-256 of the canonicalized JSON of the args object. Object keys are
+ * sorted so {a:1,b:2} and {b:2,a:1} fingerprint identically; bigints
+ * are stringified so they survive JSON.stringify; nested arrays/objects
+ * recurse. The output is the only thing the cache compares — small
+ * representation choices below matter for matching across runs.
+ */
+export declare function fingerprintArgs(args: Record<string, unknown>): string;
+export declare function getIdempotent(key: string, command: string, args: Record<string, unknown>): Promise<IdempotencyEntry | null>;
+/**
+ * Inspect the idempotency cache and decide whether the caller should
+ * proceed with a write. Lifts the cache-decision logic that previously
+ * lived inline in `vote.ts` so every write command shares the same
+ * policy:
+ *   - dry-run: never consult or mutate the cache (sim is read-only;
+ *     persisting a "submitted" record would let a sim poison the cache
+ *     for the next real call).
+ *   - confirmed: short-circuit with the cached result.
+ *   - submitted: short-circuit with the cached tx hash; user polls.
+ *   - pending:   refuse — another invocation is mid-flight.
+ *   - failed + txHash: refuse — re-broadcasting under the same key would
+ *     pay gas for a second doomed attempt; force a fresh key.
+ *   - failed + no txHash: pre-submit failure, safe to retry: 'proceed'.
+ *
+ * The result type `R` matches the shape the command stores via
+ * `markConfirmed` (e.g. `{ txHash, podId, ..., basescanUrl }` for vote).
+ * Cached results are typed as the caller's `R`; runtime shape is whatever
+ * the original `markConfirmed` recorded.
+ */
+export declare function peekIdempotent<R>(key: string | undefined, command: string, args: Record<string, unknown>, isDryRun: boolean): Promise<CacheDecision<R>>;
+export declare function begin(key: string, command: string, args: Record<string, unknown>): Promise<void>;
+export declare function markSubmitted(key: string, command: string, args: Record<string, unknown>, txHash: string): Promise<void>;
+export declare function markConfirmed(key: string, command: string, args: Record<string, unknown>, result: Record<string, unknown>, txHash: string): Promise<void>;
+/**
+ * Mark an idempotency entry as failed. Pass `txHash` when the failure
+ * happened *after* the tx was broadcast (e.g. on-chain revert, receipt
+ * timeout) so the cached entry retains the hash for forensics + so the
+ * "same-key retry on failed" guard in callers can distinguish pre-submit
+ * failures (safe to retry) from post-submit failures (must not retry —
+ * the tx already executed and may have side-effects).
+ */
+export declare function markFailed(key: string, command: string, args: Record<string, unknown>, error: string, txHash?: string | null): Promise<void>;
+//# sourceMappingURL=idempotency.d.ts.map

package/dist/state/idempotency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../../src/state/idempotency.ts"],"names":[],"mappings":"AA2BA,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,CAAC,CAAC,IACvB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEnE;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAcrE;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA8BlC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CA8B3B;AAED,wBAAsB,KAAK,CACzB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,MAAM,GAAG,IAAW,GAC3B,OAAO,CAAC,IAAI,CAAC,CAWf"}