@rhinestone/sdk 2.5.0 → 2.7.0

package/dist/src/modules/validators/smart-sessions/swap/scope.js

@@ -0,0 +1,168 @@
+import { scopeFynd } from './fynd.js';
+import { rhinestoneSwap, scopeRhinestone } from './rhinestone.js';
+import { scopeZeroEx } from './zero-ex.js';
+const erc20ApproveAbi = [
+    {
+        type: 'function',
+        name: 'approve',
+        stateMutability: 'nonpayable',
+        inputs: [
+            { name: 'spender', type: 'address' },
+            { name: 'amount', type: 'uint256' },
+        ],
+        outputs: [{ name: '', type: 'bool' }],
+    },
+];
+/**
+ * One approve permission covering every venue's spender.
+ *
+ * Merged rather than one-per-venue because all venues pull the same sell token;
+ * a single action with a spender allowlist is cheaper to install and keeps the
+ * spending-limit a single shared counter instead of one budget per venue.
+ */
+function approvePermission(scope, scopings) {
+    const spenders = [
+        ...new Set(scopings.flatMap((s) => s.approveSpenders.map((a) => a.toLowerCase()))),
+    ].map((s) => s);
+    return {
+        abi: erc20ApproveAbi,
+        address: scope.sell.token,
+        functions: {
+            approve: {
+                ...(scope.sell.maxTotal !== undefined
+                    ? {
+                        spendingLimit: {
+                            token: scope.sell.token,
+                            amount: scope.sell.maxTotal,
+                        },
+                    }
+                    : {}),
+                params: {
+                    spender: spenders.length === 1
+                        ? { condition: 'equal', value: spenders[0] }
+                        : { anyOf: spenders },
+                },
+            },
+        },
+    };
+}
+/**
+ * Compile a `swap` scope into one merged approve permission plus one scoped
+ * action per venue.
+ */
+export function resolveSwapScope(scope, chainId, environment = 'production') {
+    // Default to the Swapper: it is the route the orchestrator emits for
+    // same-chain smart-account swaps, so a caller who just says "let this key
+    // swap A for B" gets a scope that actually matches the resulting ops.
+    const via = scope.via ?? [rhinestoneSwap()];
+    if (via.length === 0) {
+        throw new Error('swap.via must list at least one venue — an empty list would authorise nothing');
+    }
+    if (scope.sell.token.toLowerCase() === scope.buy.token.toLowerCase()) {
+        throw new Error(`swap.sell.token and swap.buy.token are the same address (${scope.sell.token})`);
+    }
+    const ctxFor = (venue) => ({
+        chainId,
+        environment,
+        sellToken: scope.sell.token,
+        buyToken: scope.buy.token,
+        recipient: scope.to,
+        // A venue-level cap wins over the scope-level one: `anySettler` demands its
+        // own `maxSpend` precisely because that venue needs a tighter bound than the
+        // session as a whole might carry.
+        cap: venue.maxSpend ?? scope.sell.maxTotal,
+    });
+    // Every aggregator venue is reachable two ways and the orchestrator picks:
+    // it wraps a route in the Swapper only when the Swapper can capture surplus,
+    // which depends on the direction AND the winning quoter, and that eligibility
+    // is orchestrator-side config that changes without the session knowing. So
+    // each venue authorises its direct call AND the wrapped one; authorising a
+    // single shape is how a session rejects the swap it was created for.
+    //
+    // The wrapped shape pins which aggregator may sit in the Swapper's `calls[]`.
+    // Two venues pinning DIFFERENT aggregators cannot share one Swapper action —
+    // so with more than one aggregator authorised the tail is left unpinned,
+    // which is the honest reading: either aggregator may fill it. The swap stays
+    // bound by the Swapper's own top-level tokenIn/tokenOut/recipient pins and
+    // the sell cap either way.
+    const routes = new Set(via.flatMap((venue) => venue.id === 'fynd'
+        ? ['fynd']
+        : venue.id === '0x'
+            ? ['zeroEx']
+            : []));
+    // A bare `rhinestoneSwap()` authorises any aggregator in the tail, so pinning
+    // it for the others would both contradict that venue and collide with it on
+    // the same Swapper action.
+    // A caller-written Swapper venue carries no route by construction — the
+    // routed shape is internal — so naming one authorises any aggregator.
+    const anyAggregatorAllowed = via.some((venue) => venue.id === 'rhinestone');
+    const sharedRoute = routes.size === 1 && !anyAggregatorAllowed ? [...routes][0] : undefined;
+    // More than one aggregator authorised: pin the tail to ANY ONE of them rather
+    // than to none. Sharing the Swapper action by dropping its route pins would
+    // authorise a tail neither venue named, which is broader than the scope.
+    const sharedRoutes = routes.size > 1 && !anyAggregatorAllowed ? [...routes] : undefined;
+    // The Settler the 0x venue already carries, so the wrapped half can pin the
+    // nested exec instead of dropping the one address that makes it bindable.
+    const zeroExSettler = via.flatMap((venue) => venue.id === '0x' && venue.settler !== undefined ? [venue.settler] : [])[0];
+    const wrappedVenue = () => {
+        const settler = zeroExSettler !== undefined ? { settler: zeroExSettler } : {};
+        if (sharedRoutes)
+            return { id: 'rhinestone', routes: sharedRoutes, ...settler };
+        if (sharedRoute) {
+            return {
+                id: 'rhinestone',
+                route: sharedRoute,
+                ...(sharedRoute === 'zeroEx' ? settler : {}),
+            };
+        }
+        return { id: 'rhinestone' };
+    };
+    const scopings = via.map((venue) => {
+        const ctx = ctxFor(venue);
+        if (venue.id === 'rhinestone')
+            return scopeRhinestone(venue, ctx);
+        const parts = [
+            venue.id === 'fynd' ? scopeFynd(ctx) : scopeZeroEx(venue, ctx),
+            scopeRhinestone(wrappedVenue(), ctx),
+        ];
+        return {
+            approveSpenders: parts.flatMap((p) => [...p.approveSpenders]),
+            actions: parts.flatMap((p) => [...p.actions]),
+        };
+    });
+    return {
+        permissions: [approvePermission(scope, scopings)],
+        actions: dedupeActions(scopings.flatMap((s) => [...s.actions])),
+    };
+}
+/**
+ * Collapse actions that different venues both authorise.
+ *
+ * Every aggregator venue covers the Swapper-wrapped shape as well as its direct
+ * one, so listing two of them yields the same (target, selector) twice. Those map to one on-chain action id, and the resolver rejects
+ * duplicates — reasonably, since two entries would silently overwrite each
+ * other's policies. Identical entries are safe to collapse; genuinely
+ * conflicting ones still throw, because picking a winner would silently
+ * loosen or tighten a rule the caller wrote.
+ */
+function dedupeActions(actions) {
+    const byKey = new Map();
+    for (const action of actions) {
+        const key = `${action.target.toLowerCase()}|${action.selector.toLowerCase()}`;
+        const existing = byKey.get(key);
+        if (!existing) {
+            byKey.set(key, action);
+            continue;
+        }
+        if (JSON.stringify(existing, replaceBigInt) !==
+            JSON.stringify(action, replaceBigInt)) {
+            throw new Error(`Conflicting swap actions for ${action.target} ${action.selector}: ` +
+                'two venues authorise the same call with different policies. Give ' +
+                'them the same cap, or list only one.');
+        }
+    }
+    return [...byKey.values()];
+}
+function replaceBigInt(_key, value) {
+    return typeof value === 'bigint' ? value.toString() : value;
+}

package/dist/src/modules/validators/smart-sessions/swap/zero-ex.d.ts

@@ -0,0 +1,143 @@
+import { type Address } from 'viem';
+import type { ZeroExVenue } from '../types.js';
+import type { VenueContext, VenueScoping } from './rules.js';
+/**
+ * 0x — Swap API v2, AllowanceHolder flow.
+ *
+ * Two calls per swap:
+ *   1. `approve(AllowanceHolder, amount)` on the sell token
+ *   2. `AllowanceHolder.exec(operator, token, amount, target, data)` — pulls the
+ *      approved sell token and forwards `data` to the Settler.
+ *
+ * The split matters for scoping. `token` and `amount` are consumed by the
+ * AllowanceHolder itself, so pinning them is meaningful no matter what `target`
+ * is. `operator` and `target` decide who receives the pulled funds, and nothing
+ * on-chain requires them to be a Settler — leave them free and a compromised
+ * session key names its own contract.
+ */
+/** Permanent across chains — 0x never rotates this. Verified deployed on Plasma. */
+export declare const ZEROX_ALLOWANCE_HOLDER: Address;
+/** Chains where 0x is an enabled quoter with a whitelisted Settler. */
+export declare const ZEROX_CHAIN_IDS: readonly [1, 10, 56, 130, 137, 143, 146, 999, 4663, 8453, 9745, 42161, 43114, 57073];
+export type ZeroExChainId = (typeof ZEROX_CHAIN_IDS)[number];
+export declare const allowanceHolderAbi: readonly [{
+    readonly type: "function";
+    readonly name: "exec";
+    readonly stateMutability: "payable";
+    readonly inputs: readonly [{
+        readonly name: "operator";
+        readonly type: "address";
+    }, {
+        readonly name: "token";
+        readonly type: "address";
+    }, {
+        readonly name: "amount";
+        readonly type: "uint256";
+    }, {
+        readonly name: "target";
+        readonly type: "address";
+    }, {
+        readonly name: "data";
+        readonly type: "bytes";
+    }];
+    readonly outputs: readonly [{
+        readonly name: "result";
+        readonly type: "bytes";
+    }];
+}];
+export declare const ALLOWANCE_HOLDER_EXEC_SELECTOR: `0x${string}`;
+/**
+ * 0x's Settler registry — an ERC-721 whose token owner IS the current Settler
+ * for that feature slot. Slot 2 is the taker-submitted Settler used by ordinary
+ * swaps.
+ *
+ * 0x redeploys the Settler every few weeks and moves the token, so there is no
+ * safe constant to bundle: any address baked into a release is correct only
+ * until the next rotation. Resolve with {@link resolveZeroExSettler} and pin the
+ * result, or use `anySettler` to trade the pin for longevity.
+ */
+export declare const ZEROX_SETTLER_REGISTRY: Address;
+export declare const ZEROX_SETTLER_FEATURE_ID = 2n;
+export declare const zeroExSettlerRegistryAbi: readonly [{
+    readonly type: "function";
+    readonly name: "ownerOf";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [{
+        readonly name: "tokenId";
+        readonly type: "uint256";
+    }];
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly type: "address";
+    }];
+}];
+/** Minimal structural client — avoids coupling this module to a viem client type. */
+interface SettlerRegistryReader {
+    readContract(args: {
+        address: Address;
+        abi: typeof zeroExSettlerRegistryAbi;
+        functionName: 'ownerOf';
+        args: readonly [bigint];
+    }): Promise<Address>;
+}
+/**
+ * Read 0x's current Settler for this chain from the on-chain registry.
+ *
+ * Pin the result at session-enable time; do NOT re-resolve per swap. A session
+ * that looked the address up at use time would follow 0x's registry wherever it
+ * points, so a compromise of 0x's upgrade multisig could redirect every live
+ * session's approved funds. Pinned, the worst case of a rotation is that the
+ * session stops working until it is re-enabled.
+ *
+ * @param client - Any viem public client for the target chain.
+ */
+export declare function resolveZeroExSettler(client: SettlerRegistryReader): Promise<Address>;
+/**
+ * Pin 0x's Settler to a specific address.
+ *
+ * Pinning the inner `buyToken` / `recipient` is not a substitute for pinning
+ * `target`: those bytes only mean what their names say when the callee is
+ * genuinely a Settler.
+ */
+export interface ZeroExPinnedOptions {
+    /** The Settler to pin. Get the current one with {@link resolveZeroExSettler}. */
+    settler: Address;
+    anySettler?: never;
+    maxSpend?: never;
+}
+/**
+ * Leave 0x's Settler unpinned so the session survives 0x's rotations.
+ *
+ * A deliberate security downgrade, which is why `maxSpend` is mandatory here:
+ * with `target` free, a compromised session key can redirect the AllowanceHolder
+ * pull to its own contract, and `maxSpend` is then the ONLY bound on what it
+ * takes. The blast radius becomes exactly `maxSpend`, never the account's whole
+ * balance.
+ *
+ * Prefer {@link ZeroExPinnedOptions} unless the session must outlive 0x's
+ * upgrade cadence (roughly every few weeks).
+ */
+export interface ZeroExAnySettlerOptions {
+    anySettler: true;
+    /** Cumulative cap on sell-token spend across every swap in this session. */
+    maxSpend: bigint;
+    settler?: never;
+}
+/**
+ * Scope a session to 0x swaps, in whichever shape the orchestrator produces.
+ *
+ * Authorises BOTH the direct `AllowanceHolder.exec` call and the
+ * Swapper-wrapped one, and there is no way to narrow that. Whether a swap is
+ * wrapped is decided by `ENABLE_SWAPPER`, the account type, and whether the
+ * Swapper resolves on the chain — state that is read when the intent executes,
+ * not when the session is signed. Authorising one shape is how a session ends
+ * up rejecting the swap it was created for.
+ *
+ * Takes either a pinned `settler` or `anySettler` + `maxSpend`. There is
+ * deliberately no zero-argument form: a bundled Settler constant would be stale
+ * within weeks of the release that shipped it.
+ */
+export declare function zeroEx(options: ZeroExPinnedOptions | ZeroExAnySettlerOptions): ZeroExVenue;
+export declare function scopeZeroEx(venue: ZeroExVenue, ctx: VenueContext): VenueScoping;
+export {};
+//# sourceMappingURL=zero-ex.d.ts.map

package/dist/src/modules/validators/smart-sessions/swap/zero-ex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-ex.d.ts","sourceRoot":"","sources":["../../../../../../modules/validators/smart-sessions/swap/zero-ex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,OAAO,EAAsB,MAAM,MAAM,CAAA;AAEjE,OAAO,KAAK,EAAkC,WAAW,EAAE,MAAM,UAAU,CAAA;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAGzD;;;;;;;;;;;;;GAaG;AAEH,oFAAoF;AACpF,eAAO,MAAM,sBAAsB,EAAE,OACS,CAAA;AAE9C,uEAAuE;AACvE,eAAO,MAAM,eAAe,sFAElB,CAAA;AAEV,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAA;AAE5D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;EAcP,CAAA;AAExB,eAAO,MAAM,8BAA8B,eAE1C,CAAA;AAiCD;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAE,OACS,CAAA;AAE9C,eAAO,MAAM,wBAAwB,KAAK,CAAA;AAE1C,eAAO,MAAM,wBAAwB;;;;;;;;;;;;EAQb,CAAA;AAExB,qFAAqF;AACrF,UAAU,qBAAqB;IAC7B,YAAY,CAAC,IAAI,EAAE;QACjB,OAAO,EAAE,OAAO,CAAA;QAChB,GAAG,EAAE,OAAO,wBAAwB,CAAA;QACpC,YAAY,EAAE,SAAS,CAAA;QACvB,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;KACxB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACrB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,QAAQ,CAAC,EAAE,KAAK,CAAA;CACjB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,IAAI,CAAA;IAChB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,KAAK,CAAA;CAChB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,MAAM,CACpB,OAAO,EAAE,mBAAmB,GAAG,uBAAuB,GACrD,WAAW,CAOb;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,WAAW,EAClB,GAAG,EAAE,YAAY,GAChB,YAAY,CAsCd"}

package/dist/src/modules/validators/smart-sessions/swap/zero-ex.js

@@ -0,0 +1,164 @@
+import { toFunctionSelector } from 'viem';
+import { namedParamOffsets } from '../../permissions.js';
+import { cumulativeCap, pin, pinValue, swapAction } from './rules.js';
+/**
+ * 0x — Swap API v2, AllowanceHolder flow.
+ *
+ * Two calls per swap:
+ *   1. `approve(AllowanceHolder, amount)` on the sell token
+ *   2. `AllowanceHolder.exec(operator, token, amount, target, data)` — pulls the
+ *      approved sell token and forwards `data` to the Settler.
+ *
+ * The split matters for scoping. `token` and `amount` are consumed by the
+ * AllowanceHolder itself, so pinning them is meaningful no matter what `target`
+ * is. `operator` and `target` decide who receives the pulled funds, and nothing
+ * on-chain requires them to be a Settler — leave them free and a compromised
+ * session key names its own contract.
+ */
+/** Permanent across chains — 0x never rotates this. Verified deployed on Plasma. */
+export const ZEROX_ALLOWANCE_HOLDER = '0x0000000000001fF3684f28c67538d4D072C22734';
+/** Chains where 0x is an enabled quoter with a whitelisted Settler. */
+export const ZEROX_CHAIN_IDS = [
+    1, 10, 56, 130, 137, 143, 146, 999, 4663, 8453, 9745, 42161, 43114, 57073,
+];
+export const allowanceHolderAbi = [
+    {
+        type: 'function',
+        name: 'exec',
+        stateMutability: 'payable',
+        inputs: [
+            { name: 'operator', type: 'address' },
+            { name: 'token', type: 'address' },
+            { name: 'amount', type: 'uint256' },
+            { name: 'target', type: 'address' },
+            { name: 'data', type: 'bytes' },
+        ],
+        outputs: [{ name: 'result', type: 'bytes' }],
+    },
+];
+export const ALLOWANCE_HOLDER_EXEC_SELECTOR = toFunctionSelector(allowanceHolderAbi[0]);
+/** exec's own head offsets, derived from the ABI. */
+const EXEC = namedParamOffsets(allowanceHolderAbi, 'exec');
+/**
+ * Offsets of the Settler's slippage fields, measured in EXEC's calldata.
+ *
+ * These cannot come from an ABI: they live inside `exec.data`, which is opaque
+ * `bytes` as far as exec's own signature is concerned. They are stable anyway
+ * because the Settler's
+ * `execute((recipient, buyToken, minAmountOut) slippage, bytes[] actions, bytes32)`
+ * places the fixed-size slippage struct BEFORE the variable-length `actions`.
+ *
+ * Derivation: exec's `data` content begins at 192 (five head words + the length
+ * word), +4 for the inner selector = 196 for `recipient`, +32 = 228 for
+ * `buyToken`. Re-derive against a live 0x exec if 0x revs the Settler ABI.
+ */
+/**
+ * `exec`'s `data` head word, and the canonical tail it must point at.
+ *
+ * The Settler offsets below are derived from `data` starting at 192, which only
+ * holds while this pointer says 160. Unpinned, a session key can aim `data`
+ * elsewhere and leave matching decoy words at 196/228 for the policy to read
+ * while the Settler decodes a different recipient. `rhinestone.ts` pins the
+ * equivalent `calls[]` shape words for the same reason.
+ */
+const EXEC_DATA_POINTER_OFFSET = 128n;
+const EXEC_DATA_POINTER = 160n;
+const SETTLER_RECIPIENT_OFFSET = 196n;
+const SETTLER_BUY_TOKEN_OFFSET = 228n;
+/**
+ * 0x's Settler registry — an ERC-721 whose token owner IS the current Settler
+ * for that feature slot. Slot 2 is the taker-submitted Settler used by ordinary
+ * swaps.
+ *
+ * 0x redeploys the Settler every few weeks and moves the token, so there is no
+ * safe constant to bundle: any address baked into a release is correct only
+ * until the next rotation. Resolve with {@link resolveZeroExSettler} and pin the
+ * result, or use `anySettler` to trade the pin for longevity.
+ */
+export const ZEROX_SETTLER_REGISTRY = '0x00000000000004533Fe15556B1E086BB1A72cEae';
+export const ZEROX_SETTLER_FEATURE_ID = 2n;
+export const zeroExSettlerRegistryAbi = [
+    {
+        type: 'function',
+        name: 'ownerOf',
+        stateMutability: 'view',
+        inputs: [{ name: 'tokenId', type: 'uint256' }],
+        outputs: [{ name: '', type: 'address' }],
+    },
+];
+/**
+ * Read 0x's current Settler for this chain from the on-chain registry.
+ *
+ * Pin the result at session-enable time; do NOT re-resolve per swap. A session
+ * that looked the address up at use time would follow 0x's registry wherever it
+ * points, so a compromise of 0x's upgrade multisig could redirect every live
+ * session's approved funds. Pinned, the worst case of a rotation is that the
+ * session stops working until it is re-enabled.
+ *
+ * @param client - Any viem public client for the target chain.
+ */
+export async function resolveZeroExSettler(client) {
+    return client.readContract({
+        address: ZEROX_SETTLER_REGISTRY,
+        abi: zeroExSettlerRegistryAbi,
+        functionName: 'ownerOf',
+        args: [ZEROX_SETTLER_FEATURE_ID],
+    });
+}
+/**
+ * Scope a session to 0x swaps, in whichever shape the orchestrator produces.
+ *
+ * Authorises BOTH the direct `AllowanceHolder.exec` call and the
+ * Swapper-wrapped one, and there is no way to narrow that. Whether a swap is
+ * wrapped is decided by `ENABLE_SWAPPER`, the account type, and whether the
+ * Swapper resolves on the chain — state that is read when the intent executes,
+ * not when the session is signed. Authorising one shape is how a session ends
+ * up rejecting the swap it was created for.
+ *
+ * Takes either a pinned `settler` or `anySettler` + `maxSpend`. There is
+ * deliberately no zero-argument form: a bundled Settler constant would be stale
+ * within weeks of the release that shipped it.
+ */
+export function zeroEx(options) {
+    return {
+        id: '0x',
+        ...(options.settler !== undefined ? { settler: options.settler } : {}),
+        ...(options.anySettler ? { anySettler: true } : {}),
+        ...(options.maxSpend !== undefined ? { maxSpend: options.maxSpend } : {}),
+    };
+}
+export function scopeZeroEx(venue, ctx) {
+    // The union type rejects this at compile time, but a plain-JS caller or an
+    // `as any` reaches here with neither, and the rules below would then pin only
+    // the sell token — an unbounded AllowanceHolder path.
+    if (venue.settler === undefined && !venue.anySettler) {
+        throw new Error('zeroEx() requires either a pinned settler or anySettler + maxSpend: ' +
+            'with neither, nothing bounds the operator, target or amount');
+    }
+    if (venue.anySettler && ctx.cap === undefined) {
+        throw new Error('zeroEx({ anySettler: true }) requires maxSpend: with the Settler ' +
+            'unpinned it is the only bound on what a compromised session key can pull');
+    }
+    // Pinned from the scope, never from venue options — the sell token is a
+    // scope-level guarantee and must not depend on the caller restating it.
+    const rules = [
+        pin(EXEC.token, ctx.sellToken),
+    ];
+    if (venue.settler !== undefined) {
+        rules.push(pin(EXEC.operator, venue.settler));
+        rules.push(pin(EXEC.target, venue.settler));
+        // Before any offset inside `exec.data` can be trusted.
+        rules.push(pinValue(EXEC_DATA_POINTER_OFFSET, EXEC_DATA_POINTER));
+        rules.push(pin(SETTLER_BUY_TOKEN_OFFSET, ctx.buyToken));
+        rules.push(pin(SETTLER_RECIPIENT_OFFSET, ctx.recipient));
+    }
+    if (ctx.cap !== undefined) {
+        rules.push(cumulativeCap(EXEC.amount, ctx.cap));
+    }
+    return {
+        approveSpenders: [ZEROX_ALLOWANCE_HOLDER],
+        actions: [
+            swapAction(ZEROX_ALLOWANCE_HOLDER, ALLOWANCE_HOLDER_EXEC_SELECTOR, rules),
+        ],
+    };
+}

package/dist/src/modules/validators/smart-sessions/types.d.ts

@@ -50,6 +50,73 @@ export type SessionPolicy = {
 } | {
     readonly type: 'intent-execution';
 };
+/**
+ * A swap venue, produced by the `zeroEx()` / `fynd()` builders. Callers never
+ * construct these literally — router addresses, selectors and calldata offsets
+ * are resolved from the venue id inside `swap-venues.ts`.
+ */
+export interface ZeroExVenue {
+    readonly id: '0x';
+    readonly settler?: Address;
+    readonly anySettler?: boolean;
+    readonly maxSpend?: bigint;
+}
+export interface FyndVenue {
+    readonly id: 'fynd';
+    readonly maxSpend?: bigint;
+}
+/**
+ * The Rhinestone Swapper — aggregator-agnostic, and the route the orchestrator
+ * actually uses for same-chain smart-account swaps.
+ */
+export interface RhinestoneSwapVenue {
+    readonly id: 'rhinestone';
+    readonly maxSpend?: bigint;
+}
+/**
+ * The Swapper venue with its route pinned — composed by `resolveSwapScope`, and
+ * deliberately NOT part of {@link SwapVenue}.
+ *
+ * A caller who could hand-write `{ id: 'rhinestone', route: 'zeroEx' }` would
+ * get the wrapped 0x scoping while skipping `zeroEx()`'s options union, which
+ * is what forces either a Settler or `anySettler` + `maxSpend`. The nested exec
+ * would then be pinned by nothing at all. So the routed shape is reachable only
+ * by naming a venue, never by writing one.
+ */
+export interface RoutedRhinestoneSwapVenue extends RhinestoneSwapVenue {
+    /** Pin which aggregator the Swapper's `calls[]` tail may route through. */
+    readonly route?: 'zeroEx' | 'fynd';
+    /**
+     * Several aggregators authorised for the same wrapped call. The tail is
+     * pinned to any ONE of them rather than left free, which is what keeps a
+     * multi-venue session no broader than the venues it names.
+     */
+    readonly routes?: readonly ('zeroEx' | 'fynd')[];
+    /**
+     * 0x's Settler, when known. Pins the nested `AllowanceHolder.exec` inside
+     * `calls[1].data`; without it that call's operator/target stay free.
+     */
+    readonly settler?: Address;
+}
+export type SwapVenue = RhinestoneSwapVenue | ZeroExVenue | FyndVenue;
+/** Loose (chain-unaware) swap scope. The public config type narrows `via` by chain. */
+export interface SwapScopeInput {
+    readonly sell: {
+        readonly token: Address;
+        readonly maxTotal?: bigint;
+    };
+    readonly buy: {
+        readonly token: Address;
+    };
+    /** Swap output recipient — pinned, so a compromised key cannot redirect output. */
+    readonly to: Address;
+    /**
+     * Venues this session may route through. Defaults to the Rhinestone Swapper,
+     * which covers whichever aggregator the orchestrator picks. Name aggregators
+     * explicitly only for flows where the account calls a router directly.
+     */
+    readonly via?: readonly SwapVenue[];
+}
 export interface FallbackAction {
     readonly policies?: SessionPolicy[];
 }
@@ -180,6 +247,13 @@ export interface SessionDefinition {
     crossChainPermits?: CrossChainPermissionInput[];
     signing?: SessionSigning;
     policyAddresses?: SessionPolicyAddresses;
+    restrictToActions?: boolean;
+    /**
+     * Venue-scoped swap permissions. Compiles to a merged approve plus one scoped
+     * swap action per venue, and implies `restrictToActions`.
+     */
+    swap?: SwapScopeInput;
+    actions?: ScopedAction[];
 }
 export interface ResolvedPolicy {
     policy: Address;
@@ -209,6 +283,10 @@ export interface Session {
     erc7739Policies: ResolvedERC7739Policies;
     actions: readonly ResolvedAction[];
     claimPolicies: readonly Permit2ClaimPolicy[];
+    /** The venue scope this session was built from, carried through resolution so
+     *  a caller can derive the matching quoter pin at transact time. Metadata
+     *  only — it is not part of the permission id. */
+    swap?: SwapScopeInput;
 }
 export interface SessionData {
     sessionValidator: Address;

package/dist/src/modules/validators/smart-sessions/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../modules/validators/smart-sessions/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,GAAG,EACH,WAAW,EACX,OAAO,EACP,KAAK,EACL,GAAG,EACH,SAAS,EACT,mBAAmB,EACnB,eAAe,EAChB,MAAM,MAAM,CAAA;AACb,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAExC,MAAM,MAAM,mCAAmC,GAC3C,OAAO,GACP,aAAa,GACb,UAAU,GACV,oBAAoB,GACpB,iBAAiB,GACjB,UAAU,GACV,SAAS,CAAA;AAEb,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,mCAAmC,CAAA;IACvD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,cAAc,EAAE,GAAG,GAAG,MAAM,CAAA;CACtC;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAA;CAAE,GACxE;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,GAC7D;IACE,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CACpC,CAAA;AAEL,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IACE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE;QACd,8BAA8B;QAC9B,GAAG,8BAA8B,EAAE;KACpC,CAAA;CACF,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAA;CACzC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KACxB,EAAE,CAAA;CACJ,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE,CAAA;AAEzC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAA;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;CACpC;AAED,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,YAAY,CAAA;AAEzD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAA;IACjB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAC1B,MAAM,CACJ,MAAM,EACJ;QACE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;QAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;QAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;QAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;QAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE;YACvB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;YACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;SACxB,CAAA;KACF,GACD,SAAS,CACZ,CACF,CAAA;CACF;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAA;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAC9B;AAED,MAAM,MAAM,yBAAyB,GAAG,YAAY,GAAG,KAAK,GAAG,QAAQ,CAAA;AAEvE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC7D,EAAE,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,GAAG,KAAK,CAAA;KAAE,EAAE,CAAA;IACpE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC7D,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,CAAA;CAC/C;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,CAAC,EAAE,OAAO,GAAG,KAAK,CAAA;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,EAAE,CAAA;IAC1B,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,CAAA;IACpB,UAAU,CAAC,EAAE,IAAI,CAAA;IACjB,UAAU,CAAC,EAAE,IAAI,CAAA;IACjB,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAA;KAAE,EAAE,CAAA;IACzD,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,CAAA;CAC/C;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,SAAS,CAAA;IACf,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;IACpB,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;IACnD,iBAAiB,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;IACxD,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,GAAG,KAAK,CAAA;KAAE,EAAE,CAAA;IACzD,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,cAAc,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/C,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAC9D;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IACE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAC3B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,eAAe,EAAE,SAAS,qBAAqB,EAAE,CAAA;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAC3B,CAAA;AAEL,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,QAAQ,CAAA;IAChB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAA;IAC1B,aAAa,CAAC,EAAE,kBAAkB,EAAE,CAAA;IACpC,iBAAiB,CAAC,EAAE,yBAAyB,EAAE,CAAA;IAC/C,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB,eAAe,CAAC,EAAE,sBAAsB,CAAA;CACzC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,GAAG,CAAA;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,oBAAoB,EAAE,GAAG,CAAA;IACzB,YAAY,EAAE,OAAO,CAAA;IACrB,cAAc,EAAE,SAAS,cAAc,EAAE,CAAA;CAC1C;AAED,MAAM,WAAW,sBAAsB;IACrC,kBAAkB,EAAE,GAAG,CAAA;IACvB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,EAAE,SAAS,sBAAsB,EAAE,CAAA;IACxD,eAAe,EAAE,SAAS,cAAc,EAAE,CAAA;CAC3C;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,QAAQ,CAAA;IAChB,sBAAsB,EAAE,OAAO,CAAA;IAC/B,YAAY,EAAE,GAAG,CAAA;IACjB,gBAAgB,EAAE,OAAO,CAAA;IACzB,wBAAwB,EAAE,GAAG,CAAA;IAC7B,IAAI,EAAE,GAAG,CAAA;IACT,eAAe,EAAE,uBAAuB,CAAA;IACxC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAA;IAClC,aAAa,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAC7C;AAED,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,OAAO,CAAA;IACzB,wBAAwB,EAAE,GAAG,CAAA;IAC7B,IAAI,EAAE,GAAG,CAAA;IACT,eAAe,EAAE,uBAAuB,CAAA;IACxC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAA;IAClC,aAAa,EAAE,SAAS,cAAc,EAAE,CAAA;CACzC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAA;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,WAAW,EAAE,CAAA;IAClD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,GAAG,CAAA;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,iBAAiB,EAAE,WAAW,EAAE,CAAA;IAChC,IAAI,EAAE,mBAAmB,CACvB,cAAc,iBAAiB,EAAE,KAAK,EACtC,mBAAmB,CACpB,CAAA;CACF;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,GAAG,CAAA;CAC/B;AAED,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAA;AAEhE,MAAM,MAAM,iBAAiB,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;AAC5E,MAAM,MAAM,cAAc,GAAG,WAAW,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../modules/validators/smart-sessions/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,GAAG,EACH,WAAW,EACX,OAAO,EACP,KAAK,EACL,GAAG,EACH,SAAS,EACT,mBAAmB,EACnB,eAAe,EAChB,MAAM,MAAM,CAAA;AACb,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAExC,MAAM,MAAM,mCAAmC,GAC3C,OAAO,GACP,aAAa,GACb,UAAU,GACV,oBAAoB,GACpB,iBAAiB,GACjB,UAAU,GACV,SAAS,CAAA;AAEb,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,mCAAmC,CAAA;IACvD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,cAAc,EAAE,GAAG,GAAG,MAAM,CAAA;CACtC;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAA;CAAE,GACxE;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,GAC7D;IACE,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CACpC,CAAA;AAEL,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IACE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE;QACd,8BAA8B;QAC9B,GAAG,8BAA8B,EAAE;KACpC,CAAA;CACF,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAA;CACzC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KACxB,EAAE,CAAA;CACJ,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE,CAAA;AAEzC;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAA;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,yBAA0B,SAAQ,mBAAmB;IACpE,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAA;IAClC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAA;IAChD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAC3B;AAED,MAAM,MAAM,SAAS,GAAG,mBAAmB,GAAG,WAAW,GAAG,SAAS,CAAA;AAErE,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACtE,QAAQ,CAAC,GAAG,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAA;IACzC,mFAAmF;IACnF,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,SAAS,EAAE,CAAA;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAA;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;CACpC;AAED,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,YAAY,CAAA;AAEzD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAA;IACjB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAC1B,MAAM,CACJ,MAAM,EACJ;QACE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;QAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;QAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;QAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;QAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE;YACvB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;YACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;SACxB,CAAA;KACF,GACD,SAAS,CACZ,CACF,CAAA;CACF;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAA;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAC9B;AAED,MAAM,MAAM,yBAAyB,GAAG,YAAY,GAAG,KAAK,GAAG,QAAQ,CAAA;AAEvE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC7D,EAAE,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,GAAG,KAAK,CAAA;KAAE,EAAE,CAAA;IACpE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC7D,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,CAAA;CAC/C;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,KAAK,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,CAAC,EAAE,OAAO,GAAG,KAAK,CAAA;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,EAAE,CAAA;IAC1B,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,CAAA;IACpB,UAAU,CAAC,EAAE,IAAI,CAAA;IACjB,UAAU,CAAC,EAAE,IAAI,CAAA;IACjB,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAA;KAAE,EAAE,CAAA;IACzD,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC,gBAAgB,CAAC,EAAE,yBAAyB,EAAE,CAAA;CAC/C;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,SAAS,CAAA;IACf,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;IACpB,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;IACnD,iBAAiB,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;IACxD,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,OAAO,GAAG,KAAK,CAAA;KAAE,EAAE,CAAA;IACzD,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,cAAc,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/C,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAC9D;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IACE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAC3B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,eAAe,EAAE,SAAS,qBAAqB,EAAE,CAAA;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAC3B,CAAA;AAEL,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,QAAQ,CAAA;IAChB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAA;IAC1B,aAAa,CAAC,EAAE,kBAAkB,EAAE,CAAA;IACpC,iBAAiB,CAAC,EAAE,yBAAyB,EAAE,CAAA;IAC/C,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB,eAAe,CAAC,EAAE,sBAAsB,CAAA;IAMxC,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B;;;OAGG;IACH,IAAI,CAAC,EAAE,cAAc,CAAA;IAKrB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAA;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,GAAG,CAAA;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,oBAAoB,EAAE,GAAG,CAAA;IACzB,YAAY,EAAE,OAAO,CAAA;IACrB,cAAc,EAAE,SAAS,cAAc,EAAE,CAAA;CAC1C;AAED,MAAM,WAAW,sBAAsB;IACrC,kBAAkB,EAAE,GAAG,CAAA;IACvB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,EAAE,SAAS,sBAAsB,EAAE,CAAA;IACxD,eAAe,EAAE,SAAS,cAAc,EAAE,CAAA;CAC3C;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,QAAQ,CAAA;IAChB,sBAAsB,EAAE,OAAO,CAAA;IAC/B,YAAY,EAAE,GAAG,CAAA;IACjB,gBAAgB,EAAE,OAAO,CAAA;IACzB,wBAAwB,EAAE,GAAG,CAAA;IAC7B,IAAI,EAAE,GAAG,CAAA;IACT,eAAe,EAAE,uBAAuB,CAAA;IACxC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAA;IAClC,aAAa,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAC5C;;sDAEkD;IAClD,IAAI,CAAC,EAAE,cAAc,CAAA;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,OAAO,CAAA;IACzB,wBAAwB,EAAE,GAAG,CAAA;IAC7B,IAAI,EAAE,GAAG,CAAA;IACT,eAAe,EAAE,uBAAuB,CAAA;IACxC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAA;IAClC,aAAa,EAAE,SAAS,cAAc,EAAE,CAAA;CACzC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAA;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,WAAW,EAAE,CAAA;IAClD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,GAAG,CAAA;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,iBAAiB,EAAE,WAAW,EAAE,CAAA;IAChC,IAAI,EAAE,mBAAmB,CACvB,cAAc,iBAAiB,EAAE,KAAK,EACtC,mBAAmB,CACpB,CAAA;CACF;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;IACvC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,GAAG,CAAA;CAC/B;AAED,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAA;AAEhE,MAAM,MAAM,iBAAiB,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;AAC5E,MAAM,MAAM,cAAc,GAAG,WAAW,CAAA"}