@run402/sdk 4.93.2 → 4.94.0

package/dist/namespaces/allowance.d.ts

@@ -1,79 +0,0 @@
-/**
- * `allowance` namespace — the agent's local wallet.
- *
- * `status`, `create`, `export` touch the local allowance file via optional
- * provider methods. Sandbox providers that don't implement those throw a
- * descriptive error at runtime.
- *
- * `faucet` is an API call (request testnet USDC) and works in any environment.
- */
-import type { Client } from "../kernel.js";
-export interface AllowanceStatusResult {
-    address: string;
-    created?: string;
-    /**
-     * True once the faucet has been invoked on this allowance. This tracks
-     * "faucet has been used," not "account can pay right now" — the two diverge
-     * once funds are spent or expire. Callers wanting a real pay-readiness
-     * check should call `allowance balance`.
-     */
-    faucet_used?: boolean;
-    lastFaucet?: string;
-    path?: string;
-    /** The persisted payment rail (`x402` when unset). */
-    rail?: "x402" | "mpp" | "lightning";
-    /** The Lightning allowance, without its pairing secret. */
-    lightning?: {
-        wallet_id: string;
-        lightning_address: string | null;
-        budget_sats: number;
-        starter_sats: number;
-        custody: "run402_hub";
-        has_pairing: true;
-        minted_at: string;
-    };
-    /** true when the local provider holds an allowance, false otherwise. */
-    configured: boolean;
-}
-export interface AllowanceCreateResult {
-    address: string;
-    created: string;
-    path?: string;
-}
-export interface FaucetResult {
-    /** Present on gateways that wait for on-chain confirmation. */
-    fundingStatus?: "confirmed";
-    transactionHash: string;
-    /** Display-formatted amount, e.g. `"0.25"`. Computed from `amountUsdMicros`. */
-    amount: string;
-    /** Raw amount in micro-USD (1_000_000 = $1.00). */
-    amountUsdMicros: number;
-    token: string;
-    network: string;
-}
-export interface FaucetOptions {
-    address?: string;
-    idempotencyKey?: string;
-}
-export declare class Allowance {
-    private readonly client;
-    constructor(client: Client);
-    /** Inspect the local allowance. Returns `{configured: false}` when absent. */
-    status(): Promise<AllowanceStatusResult>;
-    /**
-     * Generate a new allowance keypair and persist it. Throws when the
-     * provider already holds an allowance (don't overwrite silently) or
-     * when the provider doesn't support local allowance management.
-     */
-    create(): Promise<AllowanceCreateResult>;
-    /** Return the allowance address (safe to share). Throws if none is configured. */
-    export(): Promise<string>;
-    /**
-     * Request testnet USDC from the Run402 faucet. When `address` is omitted,
-     * the SDK uses the provider's local allowance address. Updates the
-     * allowance's internal `funded` marker on success (surfaced as
-     * `faucet_used` in `status()`).
-     */
-    faucet(addressOrOptions?: string | FaucetOptions): Promise<FaucetResult>;
-}
-//# sourceMappingURL=allowance.d.ts.map

package/dist/namespaces/allowance.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"allowance.d.ts","sourceRoot":"","sources":["../../src/namespaces/allowance.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAI3C,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,WAAW,CAAC;IACpC,2DAA2D;IAC3D,SAAS,CAAC,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,YAAY,CAAC;QACtB,WAAW,EAAE,IAAI,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,wEAAwE;IACxE,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,+DAA+D;IAC/D,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAUD,qBAAa,SAAS;IACR,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C,8EAA8E;IACxE,MAAM,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAkC9C;;;;OAIG;IACG,MAAM,IAAI,OAAO,CAAC,qBAAqB,CAAC;IA8B9C,kFAAkF;IAC5E,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAe/B;;;;;OAKG;IACG,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;CA6D/E"}

package/dist/namespaces/allowance.js

@@ -1,149 +0,0 @@
-/**
- * `allowance` namespace — the agent's local wallet.
- *
- * `status`, `create`, `export` touch the local allowance file via optional
- * provider methods. Sandbox providers that don't implement those throw a
- * descriptive error at runtime.
- *
- * `faucet` is an API call (request testnet USDC) and works in any environment.
- */
-import { LocalError } from "../errors.js";
-export class Allowance {
-    client;
-    constructor(client) {
-        this.client = client;
-    }
-    /** Inspect the local allowance. Returns `{configured: false}` when absent. */
-    async status() {
-        const reader = this.client.credentials.readAllowance;
-        if (!reader) {
-            return { address: "", configured: false };
-        }
-        const data = await reader.call(this.client.credentials);
-        if (!data)
-            return { address: "", configured: false };
-        return {
-            address: data.address,
-            created: data.created,
-            // Map the on-disk `funded` marker (which only tracks faucet invocations)
-            // to `faucet_used` in the output. `!!` coerces undefined → false so
-            // callers can branch cleanly.
-            faucet_used: !!data.funded,
-            lastFaucet: data.lastFaucet,
-            path: this.client.credentials.getAllowancePath?.call(this.client.credentials),
-            rail: data.rail ?? "x402",
-            ...(data.lightning
-                ? {
-                    lightning: {
-                        wallet_id: data.lightning.wallet_id,
-                        lightning_address: data.lightning.lightning_address,
-                        budget_sats: data.lightning.budget_sats,
-                        starter_sats: data.lightning.starter_sats,
-                        custody: data.lightning.custody,
-                        has_pairing: true,
-                        minted_at: data.lightning.minted_at,
-                    },
-                }
-                : {}),
-            configured: true,
-        };
-    }
-    /**
-     * Generate a new allowance keypair and persist it. Throws when the
-     * provider already holds an allowance (don't overwrite silently) or
-     * when the provider doesn't support local allowance management.
-     */
-    async create() {
-        const reader = this.client.credentials.readAllowance;
-        const creator = this.client.credentials.createAllowance;
-        const saver = this.client.credentials.saveAllowance;
-        if (!creator || !saver) {
-            throw new LocalError("This credential provider does not support allowance creation. Use @run402/sdk/node for local allowance management.", "creating allowance");
-        }
-        if (reader) {
-            const existing = await reader.call(this.client.credentials);
-            if (existing) {
-                throw new LocalError(`Allowance already exists at ${this.client.credentials.getAllowancePath?.call(this.client.credentials) ?? "(local path unknown)"}. Delete it manually to regenerate.`, "creating allowance");
-            }
-        }
-        const data = await creator.call(this.client.credentials);
-        await saver.call(this.client.credentials, data);
-        return {
-            address: data.address,
-            created: data.created ?? new Date().toISOString(),
-            path: this.client.credentials.getAllowancePath?.call(this.client.credentials),
-        };
-    }
-    /** Return the allowance address (safe to share). Throws if none is configured. */
-    async export() {
-        const reader = this.client.credentials.readAllowance;
-        if (!reader) {
-            throw new LocalError("This credential provider does not expose the local allowance.", "exporting allowance");
-        }
-        const data = await reader.call(this.client.credentials);
-        if (!data) {
-            throw new LocalError("No agent allowance is configured.", "exporting allowance");
-        }
-        return data.address;
-    }
-    /**
-     * Request testnet USDC from the Run402 faucet. When `address` is omitted,
-     * the SDK uses the provider's local allowance address. Updates the
-     * allowance's internal `funded` marker on success (surfaced as
-     * `faucet_used` in `status()`).
-     */
-    async faucet(addressOrOptions) {
-        const opts = typeof addressOrOptions === "string"
-            ? { address: addressOrOptions }
-            : addressOrOptions ?? {};
-        let resolvedAddress = opts.address;
-        if (!resolvedAddress) {
-            const reader = this.client.credentials.readAllowance;
-            if (!reader) {
-                throw new LocalError("No address provided and no local allowance is available.", "requesting faucet funds");
-            }
-            const data = await reader.call(this.client.credentials);
-            if (!data) {
-                throw new LocalError("No address provided and no agent allowance is configured.", "requesting faucet funds");
-            }
-            resolvedAddress = data.address;
-        }
-        // Wire shape is snake_case (`transaction_hash`, `amount_usd_micros`);
-        // normalize to the typed camelCase surface.
-        const wire = await this.client.request("/faucet/v1", {
-            method: "POST",
-            ...(opts.idempotencyKey ? { headers: { "Idempotency-Key": opts.idempotencyKey } } : {}),
-            body: { address: resolvedAddress },
-            withAuth: false,
-            context: "requesting faucet funds",
-        });
-        const result = {
-            ...(wire.funding_status ? { fundingStatus: wire.funding_status } : {}),
-            transactionHash: wire.transaction_hash,
-            amountUsdMicros: wire.amount_usd_micros,
-            amount: (wire.amount_usd_micros / 1_000_000).toFixed(2),
-            token: wire.token,
-            network: wire.network,
-        };
-        // Best-effort update of the local allowance's funded/lastFaucet fields.
-        const reader = this.client.credentials.readAllowance;
-        const saver = this.client.credentials.saveAllowance;
-        if (reader && saver) {
-            try {
-                const data = await reader.call(this.client.credentials);
-                if (data) {
-                    await saver.call(this.client.credentials, {
-                        ...data,
-                        funded: true,
-                        lastFaucet: new Date().toISOString(),
-                    });
-                }
-            }
-            catch {
-                // non-fatal — the on-chain transfer succeeded
-            }
-        }
-        return result;
-    }
-}
-//# sourceMappingURL=allowance.js.map

package/dist/namespaces/allowance.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"allowance.js","sourceRoot":"","sources":["../../src/namespaces/allowance.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AA6D1C,MAAM,OAAO,SAAS;IACS;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,8EAA8E;IAC9E,KAAK,CAAC,MAAM;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACrD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,yEAAyE;YACzE,oEAAoE;YACpE,8BAA8B;YAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM;YAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC7E,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM;YACzB,GAAG,CAAC,IAAI,CAAC,SAAS;gBAChB,CAAC,CAAC;oBACA,SAAS,EAAE;wBACT,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS;wBACnC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,iBAAiB;wBACnD,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW;wBACvC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY;wBACzC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO;wBAC/B,WAAW,EAAE,IAAa;wBAC1B,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS;qBACpC;iBACF;gBACD,CAAC,CAAC,EAAE,CAAC;YACP,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC;QACpD,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,UAAU,CAClB,oHAAoH,EACpH,oBAAoB,CACrB,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC5D,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,UAAU,CAClB,+BACE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,sBAC7E,qCAAqC,EACrC,oBAAoB,CACrB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAkB,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACjD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;SAC9E,CAAC;IACJ,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,MAAM;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,UAAU,CAClB,+DAA+D,EAC/D,qBAAqB,CACtB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,UAAU,CAAC,mCAAmC,EAAE,qBAAqB,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,gBAAyC;QACpD,MAAM,IAAI,GAAkB,OAAO,gBAAgB,KAAK,QAAQ;YAC9D,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE;YAC/B,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC3B,IAAI,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC;YACrD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,UAAU,CAClB,0DAA0D,EAC1D,yBAAyB,CAC1B,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,UAAU,CAClB,2DAA2D,EAC3D,yBAAyB,CAC1B,CAAC;YACJ,CAAC;YACD,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;QACjC,CAAC;QAED,sEAAsE;QACtE,4CAA4C;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAiB,YAAY,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,IAAI,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE;YAClC,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;QACH,MAAM,MAAM,GAAiB;YAC3B,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,eAAe,EAAE,IAAI,CAAC,gBAAgB;YACtC,eAAe,EAAE,IAAI,CAAC,iBAAiB;YACvC,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACvD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;QAEF,wEAAwE;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC;QACpD,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBACxD,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;wBACxC,GAAG,IAAI;wBACP,MAAM,EAAE,IAAI;wBACZ,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACrC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/namespaces/operator-session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"operator-session.d.ts","sourceRoot":"","sources":["../../src/namespaces/operator-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/D,gEAAgE;AAChE,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE5D,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IAChE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,kEAAkE;IAClE,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,4EAA4E;AAC5E,MAAM,WAAW,yBAAyB;IACxC,2BAA2B,EAAE,MAAM,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,6DAA6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,sDAAsD;AACtD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,yEAAyE;AACzE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,4FAA4F;IAC5F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,6DAA6D;AAC7D,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,wEAAwE;AACxE,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAI3C;;;;OAIG;IACG,KAAK,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IASnE;;;;;OAKG;IACG,WAAW,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IASzE;;;;OAIG;IACG,cAAc,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAS9E;;;;OAIG;IACG,aAAa,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAS9F;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,GAAG,MAAM;IAIrD;;;;OAIG;IACG,mBAAmB,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAWlF;;;;OAIG;IACG,MAAM,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAOtE,0DAA0D;IACpD,OAAO,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAQ9E,uFAAuF;IACjF,MAAM,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAU9F,yFAAyF;IACnF,oBAAoB,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQvF,uGAAuG;IACjG,mBAAmB,CACvB,KAAK,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,gBAAgB,GACrE,OAAO,CAAC,mBAAmB,CAAC;IAY/B;;;;OAIG;IACG,aAAa,CAAC,KAAK,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,gBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAUxG;;;;OAIG;IACG,YAAY,CAChB,KAAK,EAAE;QACL,QAAQ,EAAE,OAAO,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,GAAG,gBAAgB,GACnB,OAAO,CAAC,kBAAkB,CAAC;IAiB9B,uEAAuE;IACjE,kBAAkB,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAUnF,mFAAmF;IAC7E,kBAAkB,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAQ/E;;;;OAIG;IACG,mBAAmB,CAAC,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,gBAAgB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAUvG;;;;;;OAMG;IACG,oBAAoB,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAO5F;;;;;;;;OAQG;IACG,0BAA0B,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,gCAAgC,CAAC;CAMzG;AAED,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,cAAc,GAAG,eAAe,CAAC;IACvC,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,cAAc,EAAE;QACd,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;IACT,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,yJAAyJ;AACzJ,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,iCAAiC,CAAC;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,mBAAmB,GAAG,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC;IAC3F,IAAI,EAAE,MAAM,CAAC;CACd"}

package/dist/namespaces/operator-session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"operator-session.js","sourceRoot":"","sources":["../../src/namespaces/operator-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AA2GH,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,kFAAkF;IAElF;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,KAAwB;QAClC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAsB,uCAAuC,EAAE;YACvF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;YAC5B,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,kCAAkC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,KAAwB;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAsB,8CAA8C,EAAE;YAC9F,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;YAC5B,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,KAAwB;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAwB,iDAAiD,EAAE;YACnG,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;YAC5B,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,KAA2C;QAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAsB,gDAAgD,EAAE;YAChG,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;YACtD,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAmC;QAC1C,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,iCAAiC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACrG,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,KAAuB;QAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAwB,0CAA0C,EAAE;YAC5F,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;YAC1B,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IAEtE;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,OAAyB,EAAE;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAqB,iCAAiC,EAAE;YAChF,GAAG,OAAO,CAAC,IAAI,CAAC;YAChB,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,OAAO,CAAC,OAAyB,EAAE;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAA4B,yCAAyC,EAAE;YAC/F,MAAM,EAAE,MAAM;YACd,GAAG,OAAO,CAAC,IAAI,CAAC;YAChB,OAAO,EAAE,kCAAkC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,MAAM,CAAC,OAAyB,EAAE;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAqB,wCAAwC,EAAE;YACvF,MAAM,EAAE,MAAM;YACd,GAAG,OAAO,CAAC,IAAI,CAAC;YAChB,OAAO,EAAE,gCAAgC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IAEvE,yFAAyF;IACzF,KAAK,CAAC,oBAAoB,CAAC,OAAyB,EAAE;QACpD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAwB,gDAAgD,EAAE;YAClG,MAAM,EAAE,MAAM;YACd,GAAG,OAAO,CAAC,IAAI,CAAC;YAChB,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,uGAAuG;IACvG,KAAK,CAAC,mBAAmB,CACvB,KAAsE;QAEtE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QACzC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAsB,+CAA+C,EAAE;YAC/F,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAC7D,GAAG,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;YACrB,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IAED,kCAAkC;IAElC;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,QAAiD,EAAE;QACrE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAwB,yCAAyC,EAAE;YAC3F,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;YAC1C,GAAG,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;YACrB,OAAO,EAAE,0CAA0C;SACpD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAChB,KAKoB;QAEpB,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QACjE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAqB,wCAAwC,EAAE;YACvF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,QAAQ;gBACR,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D;YACD,GAAG,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;YACrB,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,0CAA0C;IAE1C,uEAAuE;IACvE,KAAK,CAAC,kBAAkB,CAAC,OAAyB,EAAE;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAsB,wCAAwC,EAAE;YACxF,MAAM,EAAE,MAAM;YACd,GAAG,OAAO,CAAC,IAAI,CAAC;YAChB,OAAO,EAAE,sCAAsC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,0CAA0C;IAE1C,mFAAmF;IACnF,KAAK,CAAC,kBAAkB,CAAC,OAAyB,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CACnC,wCAAwC,EACxC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CACtE,CAAC;QACF,OAAO,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,KAAwC;QAChE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;QAC5B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,0CAA0C,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAClE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAC7F,CAAC;IACJ,CAAC;IAED,kEAAkE;IAElE;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB,CAAC,OAAyB,EAAE;QACpD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAA6B,kCAAkC,EAAE;YACzF,GAAG,OAAO,CAAC,IAAI,CAAC;YAChB,OAAO,EAAE,gCAAgC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,0BAA0B,CAAC,OAAyB,EAAE;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAmC,yCAAyC,EAAE;YACtG,GAAG,OAAO,CAAC,IAAI,CAAC;YAChB,OAAO,EAAE,yCAAyC;SACnD,CAAC,CAAC;IACL,CAAC;CACF;AA6CD;;;;GAIG;AACH,SAAS,OAAO,CAAC,IAAsB;IACrC,OAAO,IAAI,CAAC,KAAK;QACf,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QACzE,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/namespaces/operator.d.ts

@@ -1,359 +0,0 @@
-/**
- * `operator` namespace — the *human* (email) principal, distinct from the
- * agent's per-wallet SIWX identity.
- *
- * The human authenticates in the browser via an OAuth 2.0 device-authorization
- * grant (RFC 8628, the `aws sso login` model): `deviceStart` returns a
- * user-facing code + URL, the human approves it via the existing magic-link or
- * passkey web flow, and `devicePoll` brokers the resulting operator-session
- * token. `overview` reads the email-union account view with that token, and
- * `revoke` ends the session server-side.
- *
- * Bearer auth is passed explicitly (`opts.token`) rather than sourced from a
- * credential provider, because the operator session is a Node-only on-disk
- * cache (`core/operator-session.ts`) and this namespace stays isomorphic. The
- * `device*` endpoints are unauthenticated (the `device_code` in the body is the
- * credential), so they send no auth headers.
- *
- * Gateway contract: the RFC 8628 device-auth bridge.
- */
-import type { Client } from "../kernel.js";
-import type { WriteAuthCapability } from "../credentials.js";
-import { OperatorSession } from "./operator-session.js";
-/** RFC 8628 device-authorization start response. */
-export interface DeviceAuthStart {
-    device_code: string;
-    user_code: string;
-    verification_uri: string;
-    /** Pre-fills the user_code so the human can click straight through. */
-    verification_uri_complete?: string;
-    expires_in: number;
-    /** Minimum seconds between `devicePoll` calls. */
-    interval: number;
-}
-/** The operator-session token payload (wire shape; relative `expires_in`). */
-export interface OperatorSessionToken {
-    operator_session_token: string;
-    token_type: string;
-    expires_in: number;
-    absolute_expires_at: string;
-    email: string;
-    wallets: string[];
-}
-/**
- * Result of one `devicePoll`. The non-approved states are the RFC 8628 token
- * error codes — they are expected polling states, NOT thrown errors, so callers
- * can run the poll loop without try/catch.
- */
-export type DevicePollResult = {
-    kind: "approved";
-    session: OperatorSessionToken;
-} | {
-    kind: "authorization_pending";
-} | {
-    kind: "slow_down";
-} | {
-    kind: "access_denied";
-} | {
-    kind: "expired_token";
-};
-/**
- * Organization overview. Forward-compatible: the gateway owns the exact shape and
- * may add fields, so unknown keys are preserved via the index signature.
- * `scope.kind` is `"email"` for the operator-session (email-union) and
- * `"wallet"` for a SIWX slice.
- */
-export interface OperatorOverview {
-    scope?: {
-        kind?: "email" | "wallet" | string;
-        principal?: string;
-    };
-    rollup?: Record<string, unknown>;
-    organizations?: unknown[];
-    wallets?: unknown[];
-    advisories?: unknown[];
-    [key: string]: unknown;
-}
-/**
- * A control-plane session minted by the loopback-PKCE flow
- * (`POST /agent/v1/control-plane/cli/token`). Distinct from the device-flow
- * {@link OperatorSessionToken} (read-only): this carries `provenance` and `amr`.
- * It authorizes most control-plane ops, but `provision` / `deploy` / secrets
- * additionally require a passkey-fresh operator approval (v1.85/v1.87) — see
- * `r.operator.approval`. Forward-compatible.
- */
-export interface ControlPlaneSession {
-    control_plane_session_token: string;
-    token_type?: string;
-    /** Relative lifetime in seconds. */
-    expires_in?: number;
-    /** How it was minted — `loopback_pkce` for the CLI write-login. */
-    provenance?: string;
-    /** The control-plane principal id. */
-    principal_id?: string;
-    /** Auth methods satisfied (e.g. `["passkey"]`). */
-    amr?: string[];
-    [key: string]: unknown;
-}
-/** Parameters for {@link Operator.buildCliAuthorizeUrl}. */
-export interface CliAuthorizeParams {
-    /** The CLI's loopback redirect, e.g. `http://127.0.0.1:54321/callback`. */
-    redirectUri: string;
-    /** PKCE S256 challenge = base64url(sha256(verifier)). */
-    codeChallenge: string;
-    /** Opaque CSRF state echoed back on the redirect. */
-    state: string;
-    /** Replay nonce. */
-    nonce: string;
-}
-/** Parameters for {@link Operator.exchangeCliToken}. */
-export interface CliTokenExchange {
-    /** Authorization code received on the loopback redirect. */
-    code: string;
-    /** The PKCE verifier whose hash was sent as `codeChallenge`. */
-    codeVerifier: string;
-    /** Must match the `redirectUri` used at authorize time. */
-    redirectUri: string;
-    /** Must match the `state` used at authorize time. */
-    state: string;
-}
-/**
- * A claim challenge (`POST …/claim-wallet-org/challenge`). The wallet must sign a
- * fresh SIWX message carrying {@link ClaimChallenge.nonce}; that signed message
- * becomes the `SIGN-IN-WITH-X` header on {@link ClaimWalletOrg.submit}. Reveals
- * nothing about the wallet's orgs — control is proven only at claim time.
- */
-export interface ClaimChallenge {
-    challenge_id: string;
-    nonce: string;
-    expires_at: string;
-    sign_instructions?: {
-        scheme?: string;
-        nonce?: string;
-        note?: string;
-        [key: string]: unknown;
-    };
-    [key: string]: unknown;
-}
-/** Input to {@link ClaimWalletOrg.challenge}. */
-export interface ClaimChallengeInput {
-    /** The wallet (0x EVM address) whose agent-owned org is being claimed. */
-    wallet: string;
-    /**
-     * The human's write-capable control-plane session bearer. Falls back to the
-     * client's default auth when omitted — pass it explicitly unless the client was
-     * constructed with control-plane-session credentials.
-     */
-    token?: string;
-}
-/** Input to {@link ClaimWalletOrg.submit}. */
-export interface ClaimSubmitInput {
-    /**
-     * The fresh SIWX proof over the challenge nonce — the value of the
-     * `SIGN-IN-WITH-X` header (the wallet proof). In Node, build it with
-     * `signWalletOrgClaim` from `@run402/sdk/node`.
-     */
-    siwx: string;
-    /** The human's control-plane session bearer (see {@link ClaimChallengeInput.token}). */
-    token?: string;
-    /**
-     * Target org id. Omit on the first submit; supply it on the second round when
-     * the first returned `select_org` (the wallet's agent owns more than one org).
-     * The same `token` + `siwx` are reused — no re-challenge, no re-sign.
-     */
-    orgId?: string;
-    /** Optional label to set on the claimed org at the same time. `null`/`""` clears. */
-    displayName?: string | null;
-}
-/** One org offered for selection when a wallet's agent owns more than one (`select_org`). */
-export interface SelectableOrg {
-    org_id: string;
-    display_name: string | null;
-    tier: string;
-    [key: string]: unknown;
-}
-/**
- * Result of {@link ClaimWalletOrg.submit}. A discriminated union: `"claimed"` on
- * success, or `"select_org"` when the wallet's agent owns more than one org and
- * the caller must re-submit with a chosen `orgId`. `select_org` is a normal
- * (non-error) result — it is returned, never thrown.
- */
-export type ClaimResult = {
-    status: "claimed";
-    org_id: string;
-    display_name: string | null;
-    role: string;
-    /** True when the human already owned the org (idempotent re-claim). */
-    already_owned?: boolean;
-    [key: string]: unknown;
-} | {
-    status: "select_org";
-    selectable_orgs: SelectableOrg[];
-    [key: string]: unknown;
-};
-/**
- * Wallet-owned org claim — `r.operator.claimWalletOrg.*`. The isomorphic
- * (raw-proof) seam: `challenge` issues a nonce; `submit` posts the dual proof
- * (control-plane session bearer + a fresh `SIGN-IN-WITH-X` wallet signature). The
- * Node convenience `signWalletOrgClaim` / `claimWalletOrg` in `@run402/sdk/node`
- * runs the whole dance (read session → challenge → sign → submit).
- */
-export declare class ClaimWalletOrg {
-    private readonly client;
-    constructor(client: Client);
-    /** Request a single-use challenge nonce the wallet must sign (`POST …/claim-wallet-org/challenge`). */
-    challenge(input: ClaimChallengeInput): Promise<ClaimChallenge>;
-    /**
-     * Execute the claim (`POST …/claim-wallet-org`) carrying both proofs: the
-     * control-plane session bearer (the human) and the `SIGN-IN-WITH-X` wallet
-     * signature. Returns a discriminated {@link ClaimResult}; a `select_org` result
-     * is returned (not thrown). Throws {@link StepUpRequiredError} when the session
-     * is not passkey-fresh, and `ApiError` (`WALLET_PROOF_INVALID`) on a bad proof.
-     */
-    submit(input: ClaimSubmitInput): Promise<ClaimResult>;
-}
-/** Input to {@link Approval.requestChallenge}. */
-export interface ApprovalChallengeInput {
-    /** The capability to approve. Determines whether `orgId` or `projectId` is required. */
-    action: WriteAuthCapability;
-    /** Required for `org.project.create`. */
-    orgId?: string;
-    /** Required for `project.deploy` / `project.secret.write`. */
-    projectId?: string;
-    /** The CLI's loopback redirect, e.g. `http://127.0.0.1:54321/callback`. */
-    cliRedirectUri: string;
-    /** PKCE S256 challenge = base64url(sha256(verifier)). */
-    codeChallenge: string;
-    /** Opaque CSRF state echoed back on the loopback redirect. */
-    state: string;
-    /**
-     * The human's control-plane session bearer. Falls back to the client's
-     * default auth when omitted — pass it explicitly unless the client was
-     * constructed with control-plane-session credentials.
-     */
-    token?: string;
-}
-/** Result of {@link Approval.requestChallenge}. Forward-compatible. */
-export interface ApprovalChallengeResult {
-    challenge_id: string;
-    confirm_url: string;
-    expires_at?: string;
-    action?: string;
-    org_id?: string | null;
-    project_id?: string | null;
-    delivery?: "cli_loopback" | "postmessage" | string;
-    [key: string]: unknown;
-}
-/** Input to {@link Approval.exchangeClaimCode}. */
-export interface ApprovalClaimInput {
-    /** Authorization code received on the loopback redirect. */
-    code: string;
-    /** The PKCE verifier whose hash was sent as `codeChallenge`. */
-    codeVerifier: string;
-    /** Must match the `state` used at challenge time. */
-    state: string;
-}
-/** Minted approval token payload. Expiry lives inside `session` as ISO-8601 strings. Forward-compatible. */
-export interface ApprovalTokenResult {
-    write_auth_token: string;
-    token_type?: string;
-    header?: string;
-    session?: {
-        expires_at?: string;
-        absolute_expires_at?: string;
-        amr?: string[];
-        [k: string]: unknown;
-    } | null;
-    [key: string]: unknown;
-}
-/**
- * Operator-approval ceremony seams — `r.operator.approval.*`. Isomorphic
- * (raw-request) seams: `requestChallenge` opens a passkey approval scoped to an
- * `(action, target)`; the human approves in the browser; the confirm page
- * redirects to the CLI loopback with a one-time `code`; `exchangeClaimCode`
- * (PKCE) mints the token. The loopback server + PKCE generation live in the
- * Node CLI (`run402 operator approve`).
- */
-export declare class Approval {
-    private readonly client;
-    constructor(client: Client);
-    /** Begin a scoped approval (`POST …/write-auth/challenges`). Carries the cp-session bearer. */
-    requestChallenge(input: ApprovalChallengeInput): Promise<ApprovalChallengeResult>;
-    /**
-     * Exchange the loopback claim `code` (+ PKCE verifier + `state`) for the
-     * approval token (`POST …/write-auth/cli/token`). No `redirect_uri` — it is
-     * bound at challenge time. Unauthenticated (code+verifier are the credential).
-     */
-    exchangeClaimCode(input: ApprovalClaimInput): Promise<ApprovalTokenResult>;
-}
-export declare class Operator {
-    private readonly client;
-    /**
-     * The hosted/browser control-plane **session** surface (gateway v1.78):
-     * `r.operator.session.email`, `verifyEmail`, `passkeyVerify`, `whoami`,
-     * `refresh`, `revoke`, and the step-up / authenticator helpers.
-     * The write-capable human login + step-up + authenticators, distinct from the
-     * read-only device/overview methods on this class and the loopback-PKCE
-     * CLI write-login below. See {@link OperatorSession}.
-     */
-    readonly session: OperatorSession;
-    /**
-     * Wallet-owned org claim (v1.82): `r.operator.claimWalletOrg.challenge()` +
-     * `.submit()`. The raw dual-proof seam; the Node convenience `claimWalletOrg`
-     * in `@run402/sdk/node` runs the full dance.
-     */
-    readonly claimWalletOrg: ClaimWalletOrg;
-    /**
-     * Operator-approval (write-auth) ceremony: `r.operator.approval.requestChallenge()`
-     * + `.exchangeClaimCode()`. The Node CLI (`run402 operator approve`) runs the
-     * loopback + PKCE around these isomorphic seams.
-     */
-    readonly approval: Approval;
-    constructor(client: Client);
-    /**
-     * Begin the device-authorization flow. Unauthenticated. Returns the codes the
-     * CLI prints (`user_code` + `verification_uri`) plus the poll `interval` and
-     * `expires_in`.
-     */
-    deviceStart(opts?: {
-        clientName?: string;
-    }): Promise<DeviceAuthStart>;
-    /**
-     * Poll once for approval. Bypasses the kernel's error mapping on purpose: the
-     * RFC 8628 error codes (`authorization_pending`, `slow_down`, ...) are normal
-     * polling states returned as data, not exceptions. Only an unexpected
-     * response shape throws.
-     */
-    devicePoll(deviceCode: string): Promise<DevicePollResult>;
-    /**
-     * Fetch the organization overview. With `opts.token` the request carries the
-     * operator-session bearer and returns the email-union; without it the request
-     * falls back to the credential provider's default auth (SIWX) and returns
-     * that wallet's slice. The CLI always passes a token (human-only surface); the
-     * SDK supports both because the gateway endpoint accepts both principals.
-     */
-    overview(opts?: {
-        token?: string;
-    }): Promise<OperatorOverview>;
-    /**
-     * Revoke the operator session server-side (the server half of
-     * `operator logout`). Idempotent on the gateway; returns 204. The local cache
-     * is cleared separately by the CLI.
-     */
-    revoke(opts: {
-        token: string;
-    }): Promise<void>;
-    /**
-     * Build the loopback-PKCE authorize URL the CLI opens in the browser. Pure —
-     * no network, no Node APIs — so it is safe in any runtime. The caller
-     * generates `codeChallenge`/`state`/`nonce` and runs the redirect server.
-     */
-    buildCliAuthorizeUrl(params: CliAuthorizeParams): string;
-    /**
-     * Exchange the loopback authorization code (+ PKCE verifier) for a
-     * write-capable {@link ControlPlaneSession}. Unauthenticated — the code +
-     * verifier are the credential.
-     */
-    exchangeCliToken(params: CliTokenExchange): Promise<ControlPlaneSession>;
-}
-//# sourceMappingURL=operator.d.ts.map

package/dist/namespaces/operator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../../src/namespaces/operator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,8EAA8E;AAC9E,MAAM,WAAW,oBAAoB;IACnC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,uBAAuB,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,2BAA2B,EAAE,MAAM,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,4DAA4D;AAC5D,MAAM,WAAW,kBAAkB;IACjC,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,aAAa,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;CACf;AAWD;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC/F,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,iDAAiD;AACjD,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,wFAAwF;IACxF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,6FAA6F;AAC7F,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GACnB;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,GACD;IACE,MAAM,EAAE,YAAY,CAAC;IACrB,eAAe,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEN;;;;;;GAMG;AACH,qBAAa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C,uGAAuG;IACjG,SAAS,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAYpE;;;;;;OAMG;IACG,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC;CAiB5D;AAOD,kDAAkD;AAClD,MAAM,WAAW,sBAAsB;IACrC,wFAAwF;IACxF,MAAM,EAAE,mBAAmB,CAAC;IAC5B,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,cAAc,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,aAAa,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,cAAc,GAAG,aAAa,GAAG,MAAM,CAAC;IACnD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,mDAAmD;AACnD,MAAM,WAAW,kBAAkB;IACjC,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,4GAA4G;AAC5G,MAAM,WAAW,mBAAmB;IAClC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7G,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,qBAAa,QAAQ;IACP,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C,+FAA+F;IACzF,gBAAgB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAsBvF;;;;OAIG;IACG,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAWjF;AAED,qBAAa,QAAQ;IAyBP,OAAO,CAAC,QAAQ,CAAC,MAAM;IAxBnC;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAElC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IAExC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;gBAEC,MAAM,EAAE,MAAM;IAM3C;;;;OAIG;IACG,WAAW,CAAC,IAAI,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,eAAe,CAAC;IAS/E;;;;;OAKG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgC/D;;;;;;OAMG;IACG,QAAQ,CAAC,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAaxE;;;;OAIG;IACG,MAAM,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBpD;;;;OAIG;IACH,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM;IAWxD;;;;OAIG;IACG,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAa/E"}